MathType-win-en-7[.]8[.]0[.]0_softoroom[.]exe

resource
static1/unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/wordui2002.dot

resource	yara_rule
static1/unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2002.ppa	office_macro_on_action
static1/unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2003.ppa	office_macro_on_action
static1/unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/wordui2002.dot	office_macro_on_action
static1/unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/wordui2003.dot	office_macro_on_action

resource
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/jce.jar
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/sunjce_provider.jar
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/sunpkcs11.jar

resource
MathType-win-en-7.8.0.0_softoroom.exe
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/MathTypeLib.exe
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/msvcr100.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/mswdan.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/mswdeu.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/mswell.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/mswenu.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/mswesp.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/mswfra.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/mswjpn.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/mswsbn.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/mswuienu.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/mt6x64.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/mt6x86.dll

resource
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/US_export_policy.jar
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/jce.jar
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/local_policy.jar
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/sunec.jar

resource
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/JAWTAccessBridge-32.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/JavaAccessBridge-32.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/WindowsAccessBridge-32.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/awt.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/dcpr.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/fontmanager.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/j2pcsc.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/j2pkcs11.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/jaas_nt.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/jabswitch.exe
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/java.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/jawt.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/jpeg.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/jsound.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/jsoundds.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/jvm.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/kcms.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/lcms.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/mathpagex64.wll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/mathpagex86.wll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/mathtype.ex_
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/mlib_image.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/net.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/nio.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/setup.exe
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/sunec.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/sunmscapi.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/t2k.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/unpack.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/unpack200.exe
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/w2k_lsa_auth.dll
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/zip.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsExec.dll

resource
unpack001/$LOCALAPPDATA/Temp/mathtype.tmp/copybtn.exe

MathType-win-en-7.8.0.0_softoroom.exe

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 24b2c6ce45d27bfdb14cd4e352180bf7bd866ce9f9565b79b475eba07a72c752
MD5 0984ae82d2f00151fd3e891b601619ea
SHA1 475291c51140d2107b341e9671b5f2807c06bfe6
SHA512 7a0f50caf5d98ee5e4820738141a8c82bf5b70d231c440085947bd2443c159e95ca7e7b7272b320f0d2d217c33762b9122e63064c825dea379844597c52d876a
SSDEEP 786432:ometqlZRTGuNDuDVia6JnBep7serZMBqYb/ByCS1ZwqAZafqNKntXamJTsASlLr3:oMlnGXVUA7sB/sCW+B8faKtXamxsAOLD
TLSH
T13AA73377E951942CEDF0ACB05A167BD35E9423EADE4BAA31FB41D2434F647CA4B9000E
MD5 SHA1 SHA512 SSDEEP TLSH

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

6a:40:45:06:a6:f3:55:d0:90:51:49:56:8c:c9:d6:d4:b0:34:5f:9c:99:23:c2:35:3b:4f:98:03:7a:3c:77:54:c6:2a:de:84:5c:91:66:44:56:db:3c:bc:46:4e:be:12

Digest Algorithm

sha384

PE Digests Matches

Trusted

Signing Certificate

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Chains

Feb 21, 2024

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Serial Number

0b:90:6c:f5:46:56:0e:2a:ce:4a:a1:79:e8:ff:36:ee

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2024 - Mar 16, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

13618

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

$LOCALAPPDATA/Temp/mathtype.tmp/AMS LaTeX (base rules).tdl

SHA256 5768ace99cbb06efbb03c8a1a0d5fa0b8097e38fc9cf349f0b5712e6fcbeb247
MD5 1e910449017683c569b22b90b399f026
SHA1 d9ac762271b93950d27252c8e0ac0f018331959b
SHA512 ea7981b1a131046c1802d4ca885e589e0ea3c35856b2bb25428ffafd68724a8da84b0ab198eb46fd65912e57ca1a6ce90f2c87cee47c4db20de58daf3b4ab348
SSDEEP 384:kx/utxQfmsMQss4NPRNXoKKRUK7t4aGMLKm8hLdZ:kQHRKRhB0KKm8bZ
TLSH
T10DB29D2D8EF751B58C42074A5BC33941A89D93C16B02E049788F4FAE93457F47AF47AB
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/AMS LaTeX (base vars).tdl

SHA256 e09a5cd6dcc3e8034926daf22a578e3d9467205f9d42a0be941aa57ad943704d
MD5 0954c22db3108ac86bbcecdee46d361d
SHA1 db01a415c1ed4b813872001b4339ddfdfb292d3d
SHA512 ae9b573145faf820290a0c37361d0f32177a847503afd29717b3f03e107dde384f6c1794fa8e7e397332c1d86c356fa440faf9e73592d44560b564a5b21a7e44
TLSH
T18A21CE45B39894A405C506817FBE124AA458C39952FC4259BDCDC60DB74832CEFFAA4E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/AMS LaTeX (base).tdl

SHA256 7401d20cd6c1607b2073ab98a9091108d7b2384101344b7a6b0d73290b76e162
MD5 c51d12c5acdef4c891c8f4f8ac47bdd8
SHA1 c982531f3820b24e4910c5412fa32e4189d4360c
SHA512 473f6609ab1ed8ef04fee6e43f7afcd53cce1d6e7bd19d2664fae253e3f91f202df8f7331eb65646128cd2b3e9f8a7b1147125739315cd8c303ffa0885118d5f
TLSH
T1DB11F305B39816F116C65690FF96915BD82CD18C32F65201758FC08ED70193C6B97D8E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/AMS LaTeX.tdl

SHA256 529a4f7a10d78ef5895bca8990a47c7b19314e8f4abd71291d0344c9463003b5
MD5 392385e196294e0ebc07bcee0efe603d
SHA1 3c6c7d640ca9cbc7785933e03df7d79162160593
SHA512 8fad86f467e3a95023f55282e7d6fe1680dde9576926d25ef015dadbff4c4431ccc345ca1d25e613feb0076b1dd4f8bfee2ebb3b79ee6d0ac0f762ca973ea3eb
TLSH
T115112345737815F117C61661FF525087A028535C32F61601BDCD848FF35263C5BE7509
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/AMSTeX.tdl

SHA256 c5f2f39564d6d8e39e6c9e5a9c1987daa2251e765a62fb3776405f083455a97c
MD5 0deb5402bc23383381e1be823b430fff
SHA1 7aed3e3ebcd989f8e97ef8432ff5e4b88ee69ec2
SHA512 7a49745693f8ea4d87a5807d13d38075bf6317de953cae1e6196ede1a53bd6ca679f18821896c9b49d4ca04f3c08db00d9202cee026fb2547f0c1434c3ae8531
SSDEEP 192:FymAST/uRGXOluNhuh8gs4wyF1k8L0DhW:Amx/uw+MNNg7wUlLb
TLSH
T18942DC298CEAA1B5B85306038FE36D41245DC2846B92E55475DF8F8E23047A03FF67AB
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/ANGEL Learning.tdl

SHA256 b80557291d55a57df254e9c5508cba9a30097c4a1c2041129b50feba2827d018
MD5 0acef19c28b8558f4f7211aecdce950c
SHA1 b5118c69e9cc9bb193aea1948a0b7b396829133b
SHA512 f5dcb5e4f2bc8705d8da025d8425f7da3b567c10971908ded73efd59972589b6f39c2d6def6b90853c974d125ad2f6a5e3d0332bc70ce3fdd2e90bca515df036
TLSH
T11831A717F3D952B105D003D0AA95658BEB1CD36C23B9C41078CEC06E3341A6C5BBF766
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/ASKBOT.tdl

SHA256 6389b2cd0c2bd1b6ec4d1fd8abc3b2d1b206af0718d90f144e9b3e0593b538a7
MD5 563f73879b06a2146becf75abaa7e3de
SHA1 d4b604c660219aced37dcfc44558200b328f7567
SHA512 f8852cdf3ec9896cc6c3b137a661135def41d0c7295a5c8ca9c7c99d42d988f6ee613ecd9e53abd0bc1aafeae0e0e47bfdcbe98c630e4003187ae43ca8da99f6
TLSH
T1ED213245B28490752BC21B626BA47287943DD30D22B74601BC4F928E772657C77FF60E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/ATutor.tdl

SHA256 a1d35eaaff3231327b7caa48a1c3da74f0a5fb195e1a1d967d3c402cc8ac964e
MD5 edd523569f0d92d6d7cce58e4d81f8be
SHA1 42b25b5df25c718be6c81aa6ec3b35befab61ef7
SHA512 1bfca32122accbe0764dbf907719a8d92142c6a09b06d3993d855a372fa1b7e1b975751c3723becf536effdb5d09bf82f74dfa92fa2865e33effeee94cb82561
TLSH
T18411E30BF3A810722BC11550FF53558B8129930CA2F7551278CDC05FB356E7C7BAA96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Accord LMS.tdl

SHA256 6e78f7249f14519464151254d89bdd90979c2f612c6fbb53de1b9aaf494b9d07
MD5 97e0ea81353def31236184c557af4015
SHA1 1366a5c5b3808b65fcda558d2017a81ab3b094ae
SHA512 214af19c853587b19562a78833a29957c2ff4cb645211f65e4ed97e90467ce9dff9d1ae798f3cf834b752062548947b8a7506125600ebf761e66810b605642a9
TLSH
T1A711230DF39810722BC15160FF5220CFD228930CA2FF1401B889D56F739BA7C6BAA92D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/ActivInspire.tdl

SHA256 10eae84db9ccdcf7e771386ca89756648e7daabaa1ee92f613bfab53b2d40ac5
MD5 de2dab0e0336ca9e77e6acaf93e545c0
SHA1 1ca7e62d3a84f26ccc2c91e74f661802dfc6b2cd
SHA512 56123ecd76a37f3dd373cec1c9beb61087439a791733e3ed044322158c11b980dbe094f001d2e55b8704fcd0b38537fe9f804d66819a9418cc00ad42c9f8e02d
TLSH
T12571BDA116E26D1C13E463707BD12F29AC5AE28C132DCA16BF8FC2ED5341024DD6B99A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Acuity.tdl

SHA256 586636b3e49b17bd695e76e44f74806c0602d76e2ec52314268d64cf0f2ac281
MD5 91da97cbda5a39018944a9b98afb5c53
SHA1 75fa709ce9946d1c622a689394470f4c5869934d
SHA512 b4555b3cfbba9805bf39bf9b7ebf1b086c9c89c84058d8d6c8d3e98d1554b19af25e8612040c801cdfd67a648cbf7edfe04af6d9b1743281b6851519b8f7e981
TLSH
T17111C00AF3D8107316C11551AB56248B8129E30862BB0501B889C05F73D7A7C7BBA97A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Alfresco.tdl

SHA256 69696ca8a4b242cc6cf9a60087def0319014f2ad536466b64f1276a50746e34e
MD5 12054700014f6ff4235444768eee9ec1
SHA1 0f93cc724ebcb863e064c7dbb5e022ab5071457b
SHA512 28ea0ee9d861c460a50372a90ed06d8b6a2735e158b74d493f4cb8ee9c43aa375f9d4a05fceb051316776be4a5b3dee6771cf30b5b8edf4810cfeb2ce1f320fe
TLSH
T14811C007F39860B217D11551AB92209F9328A30CA3B70511B88D805F7397A7C6BEA96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Alpha.tdl

SHA256 ac1e8eae14b54e7877c7617f7fd20f2b0ee0f054ca65c39f6740e508acd8005c
MD5 049d06659f4501aeabd6b9b5123d8763
SHA1 4a01e160337084ee30f47206b72df12a03c23a5e
SHA512 15ec33220965c37a477ff7ff2a08e0281b2f35311ce3e6482515013b28385e455790d915412b478c08d66bb4b993a4c74f90406d431b2ba41623ca33f5fbb50a
SSDEEP 192:EAST/u/UIWCgXUU+pBd1UtsGELfw3tbkIRirtVJ6:Ex/uMIWCdUQBs9Y7rR6
TLSH
T1F2429B26EBF2513018820E5557ABF586B27892600651D044748FEBCF73C77CA3AF1BAB
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Art of Problem Solving.tdl

SHA256 b40245909c2d8cdb0bc29f26d63311a203a60393ba79ed540c7f54f4f6180793
MD5 c8702a8d9290fc342ff0d8859e85ed22
SHA1 b6d4b79b3f963957934b5a702b028b7753e8fb4a
SHA512 8aef35bc6f2e6069c0603753d7b8e343ab65d05a7177599f2fbf93f37aede202b6117e7a422a470e587db5204ff60496930c15e6d9761494de222f22744ae672
TLSH
T1B521004A7258646217C02654EAD92187803CA30C52B585017DCB816E7B7ADBC6BFB50C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Authorea.tdl

SHA256 646b854dbe6767ae5548c0dc8f9ca5b927e52aed4766e48a61f7ebc04d74fe92
MD5 d435b6f607b49d0b92650c6cc72a335f
SHA1 787090823a45135f5a685ab543e562ba0d61f3c0
SHA512 62123754067e0cb6c20e470de488722f3bffe2409ec00da70fb2bd513b71056b22e7604bc683cfc4fb6c3a0e5945209e9d09c77303b6da0af7917c74b29de794
TLSH
T16411BD05739854B12EC126A0AFA5609BD22D935C22FA14127889C05EBB16A7C6BEF50D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/BSCW.tdl

SHA256 6b195f5e74c0d51bc00e9d04f8cf7cd08887a33ab330b1a8bdc240cfee252f77
MD5 dedfd02873d1a5678ace1e46a8e08641
SHA1 392b9a92845483fa459890429461835c488ff621
SHA512 ce77914920b9c465737a4675d024d02567549cf3ae72722fc685faaf9267b1ec4f84924651072b3597b4e45776c0287d44a4123717324c325373ee6e503bb612
TLSH
T10C11E317F399107217C13161AF92249B8528D30862B715017889C19F7396A7C6BBFE6D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/BetterLesson.tdl

SHA256 2363e45d8017608b3f1600baf7c381dd72e8d8789dd420d85b26a473941177de
MD5 364531c82d08825c867fb0dd0c00c078
SHA1 b5b924c54899b0ef437ffe1059fbb31ff4bb59ee
SHA512 c122c76e51196568c872bdc22dbb6f9138db0f16608de57f08985874bb6ca294089787b3fc4f43a0cc4e9b5e1f1003f28166b357199d50bbb94423dad096f241
TLSH
T17D11000AF39955621BC62351AF52708BD028930CB3F704017CC9905F739BABC6BA6D2E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Blackboard.tdl

SHA256 25589f6cbea50ef15fcdf8ba73c283f5eacc6954bedec189b3573b7d2ee3bfbc
MD5 b14ba49a68800ebe6bb8c7d251df72e5
SHA1 dbb2ad90ca8cc17c00a7c5045851680eba807026
SHA512 57298aec8f433aa9d7d96fda63bbd0de0666c4f7a2c98ec9740ceb9ee1ee63ae9b74f0adbf6ce0da067a74d3aa042681c05edc3321cf24ddaa73831bb1d11c84
TLSH
T1A231C916B3EF517506C012109AD4698BEB1CD36C33BF9410748EC04E374495C5BDF75A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/BlankEqn.doc

SHA256 147d782f708af859cc0bc2362ed7ff3e16094a108683910421abfb5e7630803d
MD5 3648b219061dc97438d926388a7b8be5
SHA1 993a4111eb48809de3797b53f87f0a87730c3545
SHA512 c575151ed8ee96c6baf14ebf9ad5b69a87f030e4c62557b05056df68430c77c52bb00822a10bc86f7a0dfff528b25d97238a7ada3dd5388044dc5e6d6dcfc7bb
SSDEEP 96:YoGGBcr2LtchnvptNTdkYBwxb/822oHo1Ni1hNwDQy3q3V43d:jGGBcr2Ltchnh3Rkuw9/P1HpwEy3U
TLSH
T1E672DB51FFE4CD22D9524A310EB296C1A735BF9C9E12930F316DB71F6C732924AD2612
MD5 SHA1 SHA512 SSDEEP TLSH

windows office2003

$LOCALAPPDATA/Temp/mathtype.tmp/Blendspace Quiz.tdl

SHA256 d8f9f2d08fa9197841b2181bbdb56b4a4836e95d28961d3ecd23a757374406f0
MD5 ace16c0cb42309b478d6d02da592932c
SHA1 6088569890a34cda12ac3899bb61645300652053
SHA512 2c33da5bc6186f67224811e915ee51fb158ff085ae9c3ed135a76b96b4971322f68c36da1377bca6fa53961119921c108b6dc561f4fe48f108b2a49d547f63b8
TLSH
T19471DF1C6BB1A0FFD5D120EF5A35ECB19584071462DAD841B79F8A1EE310AFC0BBC526
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Blendspace.tdl

SHA256 67551d657e663a3dfc2d69964c2416b04df37c9eb3959acffa1ecf2d66633151
MD5 cc87911eba815d61d6c225e32deef44c
SHA1 fa159ff1c19440459f8c659caf0f485c34b82be2
SHA512 18935c4ca3df7f19a80693a909347703a5b34f5b10fce67e67370e9adb86a211a81b0bc3539cbe91b6e3d824a3c2f1369a89695aad15b252ddf19ff8c6299a46
TLSH
T1A611EF1AF3D9107A16E052B0AF522447D128A30C62B605217C8A809F7399BAC7BABD6D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Bloomfire.tdl

SHA256 4af6d085e46753efeae44171f3cfd61864d99d3691f1279a3d1d1c230b7bdae9
MD5 bab8aba1d29b51aa3db95b9223a1caf0
SHA1 4f1bca5df4de4bd473b007f038fd3d9e78a4439a
SHA512 27cd30a9072a7b7737c68b2d30e6805bf7cdbb75d372777d75c54b4613563ba5477d60f837997ef875f9b329c43c3f77bfa21510c275fbb1ab1d054529982066
TLSH
T18A11E347F7DC10B217C16160BF53148BC228D30862B706417889C15F739AABC6BEB96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/BooRoo.tdl

SHA256 eef234a1f3e474a07fe7fe00bf913f8a1656633c3f66693d68a03f14192a43c3
MD5 02bd5f362c62dde55fbb6adc870cfd26
SHA1 ca0039ca8dbbed5ff2619c3ea78a6a1f9fc10f9b
SHA512 22be3abb2d5f9b96adbca98c82ccead08d3a6e4be745687571d949a616486469b7db51915a634139027b238bc53deb3b1376ccf6347a3823780aca31e908e027
TLSH
T1EC11E30AF3DC916217C06171BF52148B913C530CE2F78401788EC15F3396E7C6BE6929
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/BrainHoney.tdl

SHA256 cdd94f1c851dd7f7ea1c9cd38100c076dbe450cb93a664a6849ffdbed71780f4
MD5 5767db9c562dbb0c37f4daf4598552e0
SHA1 1f7c1de94bd8baff282e81f91f5dfebc7b3e610c
SHA512 1c994a68125b76a3349be97b7febbe4aedfc750c248d6873fc8ea2d13987e8db67be3ac33f14075bdbd9c19779962059a6a989fcfbe30f4b1d01138ad06a3dce
TLSH
T19271E219ABB1A0FED5D120EF5676A8F15548071463DAD840BBDF8A1DE310AFC0BFC426
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/CIEXYZ.pf

SHA256 207d748a76c10e5fa10ec7d0494e31ab72f2bacab591371f2e9653961321fe9c
MD5 10f23396e21454e6bdfb0db2d124db85
SHA1 b7779924c70554647b87c2a86159ca7781e929f8
SHA512 f5c5f9fc3c4a940d684297493902fd46f6aa5248d2b74914ca5a688f0bad682831f6060e2264326d2ecb1f3544831eb1fa029499d1500ea4bfe3b97567fe8444
SSDEEP 1536:2Qnt0y7xFNksbeCqY39JJ8GmaNo68GmaNo68GmaNoW:JOy7xXjtqYNfHxNo6HxNo6HxNoW
TLSH
T17E336C01FD995406F2B5C4FE4AB293A35B3B21C83742015E2297EF946CCF362EBC9825
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/CMS Made Simple.tdl

SHA256 352afca8fdfac0d1d70008c3a47a00cb47fbb3f900f058bf0d6d74bd5a496b91
MD5 94d0e21aff14003c397e2e7dbbd00952
SHA1 6ba9006898d18a66a49037e3cf903c07d48d3461
SHA512 177e4450e4697bf050d590bbb21b2baa8b918eee6e20550c38b7a5a412094b84c6c591f1ab99d196014e7e8c9e576a5a6e8593d65f11eb32ea193b23e6c7d3e8
TLSH
T1BD110409F3A8207216CD5190AB5324579518939C62BA09117CCDD05F7793A6C2FF556D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Calibri+Symbol 11.eqp

SHA256 f10784b93688501d431c2c89609ea58c8ddd2f97666edee71765a03113c389e9
MD5 700f4e179cee7795a3906d832c155eb5
SHA1 b2d0e374c580de7e0e295d7cbc895b0ce3b14259
SHA512 fd60b1e408eeacf6bb5a6adbbeecc37cfbbf76177de566d90f4cc0f042c638a3de8e1df81927dd6eb9159aa48f86aa7a36ed3906a9939bc0af36b43678208628
TLSH
T1CA11CE652F463D03E8B4DBC7AD7B951EB50032464F96385732C814F85709FD26ABA32A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Calibri+Symbol 12.eqp

SHA256 cbc64fc1bfaf960eabeace0c6e9d619157b66b24f1e27809326fb65002b87810
MD5 2df8b8f96df20ba629c91abd1e4578a0
SHA1 dd6571c92a3994a6f2dc12c3faffe9580434e12d
SHA512 4546a67a51f45ddeeaec0a27222af98a93b36d3a43e6bc234379ce379705b3fc6391d1c7d71d8a4affd80bc9057c3ea4b505cd9eff04eaea2073cda83b0bfe86
TLSH
T12D11CE652F463D03E8B4DBC7AE7B951EB50032464F96385732C814F85709FD26BBA32A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Calibri+Symbol 32.eqp

SHA256 12af15158fcaf23ac27afeecf4911c99a8236dd1f5d41194b4ed74009b213a87
MD5 09defa5228ce411199c825a6466f90cd
SHA1 9cc44a8a0914ed274048ee445511a9f9bb6f58e7
SHA512 e1c4b189bc4b4f373a1fab074e716dc44d8c11c9bb18278cc8441dc86a2eb1556d2d3f8a30600c7dec683843541b0c3933e9ad3c3200fa37d59bc7be9c9bb137
TLSH
T190110E612F463D03E8B4DBC3AD3B911EB50032420F96385732C814F85709FD26BBA32A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Chamilo.tdl

SHA256 d3e1c4af99aea3cb5d035681b95fd46df4ba3ad98b2e89aab9d128fa3d677e0c
MD5 1d9b48db7c4355af11e5e58d533a0734
SHA1 3821cb4869db2aa91957f9b66d53e52bb6646d29
SHA512 095856bbf591fc6772f239a205f8bc6c660dd5c5789b76c7f95472d329dc2b4b5729eb6d325d7e69cc30a64cf97389909e7abca6ab5e9bda1502493110489600
TLSH
T10C112305F7D4117226C11060EBA22087861C972872F658417CCEC64F7355E7C7BABD9D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Cinderella.tdl

SHA256 99a531fcdd107a87f7d57aa5cec7ad829bb4e02ca183709fab7769b8700f032b
MD5 a6b87cb5ce42feca68de794d9212b162
SHA1 ab7cc66fe9d21c4a321aef6e8797f675dcc12b8d
SHA512 dcdb45aa55afaa3ee340396c30ac9af4d89209591a29300c0abd6d0846c3c478bccfe53957efda21af53d6132050e2d0af1738870510fa2fea1bb83b2882c722
TLSH
T153413182318A85340A820752AF562486E43CD38D81B7D014BD8FD16E6B42B6D67FF35F
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Cobocards.tdl

SHA256 1dc8cd33798f3b4e5fdf94f5ac2f8e07bf8a28c574a070e317788f6eed8e58d5
MD5 4c5427a5eb83f38da93142ca27f92124
SHA1 a1664304a397a8b7cbcf4ba61402413b0e548fcd
SHA512 6b3ba209dd3e93b3a5cfab147cb617fd65d231fded15f43744e8bd86c30edf8818c04b6e2d35763ca07d1d07d9ddac65932e8ac2b466a157fe8e69096d746133
TLSH
T1CC21460A73597AB60BC01A917B7D224B902CB31C13B54611BC8E918F735593DABFB54D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Coggle.tdl

SHA256 74a3cc0df5f889dc5f631e60fe01d9e148aa5ca63582e20af85e042bd2e95f30
MD5 9107b651922e93378fe4e733f4c16c04
SHA1 36b8dae7946174adbd0d66fceaba1d575220eda4
SHA512 76d3e805ba063ff8b97cb387e2829e9fa74eb52261d711afa3dc748296b0f0c27147151d6980cc1df4d7b04b23b15c042881e55b1ee461e226a5fe312e2a9d9a
TLSH
T165413284F65940654ED116ABBFD418469869E38501BAC03CB8CED68FE38C53D67FE30D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Collaborize.tdl

SHA256 77e31c2759ecfbf5ce1e8d3eeb3b6baf20ac162d252c298f7263444cef6c3f83
MD5 9fa773b355b70823f2ef007ec9e3e567
SHA1 5b53787df18550a7c28dea7cb35c7e9f71d8755e
SHA512 195804bee21b2e1e5a1dadae0e6320d104f8fc314ecd9e0bc0fc2da8f742a00148ababf31ae37f3b013aef962bfcd921e1b0e38a15a5d01faab8f3fbb435ba2e
TLSH
T184112306F39811721BC03160EF6210CB812CD31C63F705217889C49F73A7A3C6BA6A2D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Colwiz.tdl

SHA256 6daf2e82b196a9dd142196eefc3773caf86c302dced9e28f1207a9adc4b2d742
MD5 1f595b3543a3db42fb9ef896365951cc
SHA1 6965ec223ec1b57fe482fbe063cfd895f44d7668
SHA512 15998d9c24775dd95f4c0476a67ea1c3ab1b81b16e212a4a92133d30c42c8efe7bff085394df40cf89c804cbcefae082f7200fa4f5720096f148bc5aff961c96
TLSH
T1C2313045B389623115C21750AFBA2652C828D30C21B6C228BC4EA25E7701A7C9BFAB2D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Concrete.tdl

SHA256 8c165be304ed486cad61d76f2236dc81375928b88f7a327121272aa39c306ad1
MD5 226d4cbee423ca0486abc67206a3b28b
SHA1 3450afcdb7427e77362d7cfd9a45e4fcd6b6b51f
SHA512 e93ba8fa5f628a004ce4b896554b81e21f75388268a6eba4418bd1b3bfdd6a43ad9d8bfc4d478656491e9c0ceb7d3d42f738675232e9df7483651f91d76fcb24
TLSH
T19A112307F798107216C011A2AF62685B8128B32C72BB06117C89F05F3353B3C2BEA9AD
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Confluence.tdl

SHA256 4f392cf79ac912c931f988346f272d78f723fa72061f1aa8413e68474f6dc2fc
MD5 e66507cd547386d59265ae2e51dc050c
SHA1 ce27b039ece9a53e80ecc8f87575e73c7ac13a6e
SHA512 20fb15bc52745909c1464597a62bcc447164ab99f5d1bd4dbc51c38dbdb194dd40e3aa2b4465b88742433777e220573027f87266fac5f5b93277cf6310194219
TLSH
T1E211CC09B29C59B117D127A0ABA9314BC12E935C12BE85117C8EC14EB74DA3CB7FB53C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Connexions.tdl

SHA256 a51ea258efa20a7f2c015bae976034d815e6bef84c70fc6f75d5ccb12708adde
MD5 d0140240434bf6f55e0f2ce1a5dfc0f7
SHA1 27fe06f137a30a9999a0ae64575924139a6d9d13
SHA512 9c26877e6c7d94a15c5ac631318e7e25547a0bcad23fc6df22905a691135640ba19c45a8643ad9b23de194a26e3d6509fe6ce0e3c64dc8a248fdb4371c06aaef
TLSH
T154215205B3A6557416C01260DA942087EA3DD27C37FA8421788BC09E73A466C77BF7AA
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Contao.tdl

SHA256 bafe48589210be2759543000b47ee4d6431924035fa944ec506ef9f681af13e3
MD5 93fd3a740278f317b9f52ea86ffb1727
SHA1 01e2e1efb439e0544b931bcaaa31693ae92a9a1a
SHA512 a207b1ff6aa6728fb6ec8bd66cd964d7d554d9263287d94d209d45bcaf109aaa61a7f1e16d93b636c2dc6b0fd40dff833e27898d73366a548d3ab139e73cf1b2
TLSH
T1AF11E306F3D810B216C01160BF66244B9129931C72B709217C89D05F7396B6C7BEA96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/CourseSites.tdl

SHA256 b03a041664cb9e7712e930de3f6e3a5d6b6cc1309120b53f85e001a32c4381b7
MD5 5bf7e0337d024d5d9160b650a8734d39
SHA1 63b724bce00be7312f04286be34a5a725df1d1cb
SHA512 4106f3794053912a6e95996d019411df831e4770a34e84d0120e0fff430d91365744c25183041ce4a864a3ec1274e1bbc03b5e4a3df2987fd4f71c10dd41a01b
TLSH
T103110006F398217317C06150AF6A919B8428E328A2B75542788DD09F3376B2C3FE6979
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Coursera.tdl

SHA256 f901891547e6c981f9f5405ae0ec7435e7d6f5abf90378d99e5a1ab069ef4781
MD5 5b55eff2fe345a9d07b05769f7ba0532
SHA1 b836237330d824be6937b34acd97a9394d1cb55d
SHA512 d52c657f723e8f8fe9fb5197ae19df2a2468d1f9369e4c8222e5d0618a741942132fec2e666d2f379eef7849e72317239a5f1a318378f58f37052409fbfe0bf8
TLSH
T1A6216185739590711BC21B226BE92296943CD30C11BA8111BC4FA18EB72987C7BFF21F
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Cramberry.tdl

SHA256 58638071f7a5e88786912430e6f2cb65e859616597837ae3e8ef7cff794e85dc
MD5 b31aea34139f53ce374a0cac93f71b00
SHA1 b1013898f26718e8c1a8baf68a1570baae5dfa84
SHA512 43c2587a97d740a03214c4e568dae540f5f32bd425b16f728b664b4eef8abeed64e48cb89c033c15ca4efd320c942e18f939e61dab14f4eac7ceca0f0d522d76
TLSH
T190211605736932BD15C01A91BBF9224B902CA31C22B585127D4DC18E7F65A3CEBFE50C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Desire2Learn-LaTeX.tdl

SHA256 e23952ad4a127afd81137e8ba58098f78eca8106717e98df0583a27a54414b68
MD5 495b4786861a5cc7206c57a84b97ba6a
SHA1 477ce33ee8536c4277e10bd925d2a4db8cfc1b73
SHA512 ee7b3aa9e7db99ea884002da3acc464bdc599fe0518e375f2156d76034e058c0ff5730f823b8c56d79536d070c9b804eae34ee10f78120e5c5b3e20034ffffc1
SSDEEP 192:hAST/uTHt4FMlLyKkcRogd0cZv+ML+u0t8+yAJvo:hx/uTN4FMLKmPlhhLdg7O
TLSH
T10F72B32E9FF7107C18420B125BD72A4158EDD3853B52E149384E0FEE5346AB0B9F5B6B
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Desire2Learn-MathML.tdl

SHA256 e47157be8a487bded3bd88401d4c4984e51dbfb07e38ab2ea9bfe609d92b2d85
MD5 e5d94f631ee54db7e16c08dbdcfd6d9c
SHA1 03e32d9447b35b5439163f8f182899fff3338286
SHA512 cdbeb1125f2ae512031e9d87d10bb16330abd6a449b12f9b427f10486d2f86ba2d2598531cf4cf257f5a3e8894acaa5101cd33c7a77412942f52527eabc3975b
TLSH
T15D416313F2DE6B6402D00240D956261FCA28D35C66BD80143C8EC05D3B017BCABFFA46
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/DigitalChalk.tdl

SHA256 2834afc6ffa176dee2fa5e50166bed71ef1aeba37f6bdc64dd6eaeb7c122718a
MD5 ebb25c47d8f77eb4a48ad04edbb51bf8
SHA1 bc2a06e4e03049fb1b3a2e514dd911ab90049580
SHA512 d5f6bad4a5e38cee878513e42d2ed72261e5e5b53a34cfc93d08335b3668c3c4fb51f4a128c2875db4623ce905f4312d572e323da12c97c316ca76e5c1fa550e
TLSH
T107110416F39814722BC11251BB53618B802C931C62BB490178C9C29F739672C6B9A97D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Docebo.tdl

SHA256 a72bb2edb9d93d1ec39b11948b3285f906d2da15048fe0236f6d2a38007ab1c2
MD5 8512fcee6d508a188d5001e1f8ac7ac6
SHA1 5bf0f352841aa41a9028aa8fe2efa057eaf80f3e
SHA512 798bad5dd1f2c435a7eac327ad16adc757099d08d92b588ff982e3eeb5a318f78aa6efd7be4076c5a77123a382f890b009bf094c9ec0db926616152940209400
TLSH
T1BE11E30BF39C107217D15160AF92148BD128974862F70501788DC15F739AA7C6BAB97D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Dokeos.tdl

SHA256 df90a4f8c79f85fd8b7dc7f0c86c975927d02966480cf8e634e7f7733c1a9198
MD5 502a4914da5e683e831fb1fb339791f2
SHA1 acac50670a4b67a9074c7aea3875745f113122ce
SHA512 3850b4c410ad6d4b8a2025d3091a7ec9c75ecd352e174bb5e63b386289b6e79bb74864a6b697c9e66ff6ace3dc9fecce149b4aa0c9b0bf2b3b3b7607cb88c54e
TLSH
T17711E307F3D9147217C16151EF52208B91289308A2BB4401B889C05F3B96A7C6FE797E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Draft.tdl

SHA256 6350a8e6b0d4660ecc4d89b7d47c0b6398d6c7daae808e00170fb5104ad039e0
MD5 9f22e954042cca8a48c0e10706b01350
SHA1 f290934cc35d841eaf807a21db75ad9dc382611d
SHA512 675d3ffead773729ec3860e4b305bd6a5f22924bf28ddcc099f83507d5dbd582731378e7f2e2f1341ca0aac60a4f43e900adaeb76a62697ed76b4b0290932108
SSDEEP 96:CEASPLLuinfa4IFstBkKfIGId2Fkx9ZI3+F+u9z2EvUyJzArRlhNql/dCF5:CEASTLuQAKfIGId2Fkx9ZI3+F+ckI/k5
TLSH
T13EA12348ABF590BED9D111EB9B75ACA19588430052DAC458BB8FC71ED3506EC0BFC31B
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Duxbury LaTeX.tdl

SHA256 852511ed50dbbfedb73404e3748ca8a1e404dc9155b0229a24029d593170c0d9
MD5 91f6673dd0dc6e83fe51ff680a46d720
SHA1 5bf1c1e6f292d7a4c0ab1572e4eb05c7164d9eaa
SHA512 0b40cc6df42f87ca842fcdc01d8ab633ebe36810e3c3317fdb7038e76bc6f95143c04d24626e95903d81ca01a306cd7db2974160b5a24b55a8565a98be3b45a1
SSDEEP 768:J8qwSzojU8kYvC1V2PS1p6hvRhDkcKKm8b2:5V+U8kYvCWS1p6hvRh6R42
TLSH
T1A673A928DBF711301CC20B564BD77A45B59AC3905642D148388F4BEF23867A83AF5BBB
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/ELMS.tdl

SHA256 53cd1211ee0a06dff05f16c4dc827a203423a18a8ccfa4158d82288123c001a4
MD5 3eea74b1604441ac56b4b9950c0e0572
SHA1 af4d1d96f53029c65315e8b21d3ce21d4fbc9910
SHA512 b68dc764071d1b2a58d4ea1e252a1bcf652f576aff724ef3c65791622032d9da5a740353f3c9aa9f5514133b963a13b6ae8fc623aa14721a63547b7aa2a5ae89
TLSH
T15111E305F798117217C01161AFA234CBC528630D63FB1442B8C9C15F7396A7C6BAAF6D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/EZ LCMS.tdl

SHA256 7e6dc377f63820a179970c93ec1c99e16ab53b6fd13b5048be2d25d65d5038d3
MD5 bb75cde4ca61a50e4f0831b9672d3a1c
SHA1 76ed80e0908ccecde985df14cc46e989b8defa68
SHA512 591c36fe02e1af9f2d22a9158bd1565606876819ecf7d8912a537bc2a8655feb8ba26b990f56ac5bbe4f4e9237f242f620037b39a1faec5f71c307462cf7d99a
TLSH
T105115606F3D810B21BC01150BF56748FD168930C63F714027C8AD05F3396ABC6BEA96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Ecto.tdl

SHA256 15af4da0be2d1881eecfa434e899e3c6d29871b012ef0d0c1b2d08b398f67a5e
MD5 724164138da4c6af689cda426c3812e8
SHA1 a1b231182a49082eb0b8c38bcf55cd54399a0c3a
SHA512 127b3167d3d01167c00c40046cdac53f714aba98655971f9f4bd2d7f06a4613a534a07d7e443f26d938e49c012ac557a9dbb0b53e530173fc53e15a38d07aefc
TLSH
T1DD115605F798107317C01260BF52148BE528934C62F70501BC8DD17F7796A7C6FAA96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Ed2go.tdl

SHA256 21e40570f63af7335c5fde54e68dd093deb37b46e0d73502d0447a62eda4a1fa
MD5 7f46bf506a1e06b869383a1dbb57df3a
SHA1 3b797e705e73a2394ae1ad38c076c5ac4cb44a80
SHA512 0f04d5aa2d137345bb8bab5ec077e3fec364f0cf362c3b6fb64e0299fbe55c7b5a51fcf6e29060a34dfba84ea603dc866757216017be9430a38c8d4f1b1cd8f6
TLSH
T1D511E306F398107227C05161EF5258CFC129A35C72FB58417889C15F7356A7C6BFED69
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Ediscio.tdl

SHA256 ba1cfbbafc6e0f5298b4968c19ea0a5141b4a9c84120ce4a611e82e5efa214b3
MD5 6cada5d73d3e6f57405c1c575f8d15a8
SHA1 bb9afa01190984205c53c5960f5d523fa51faf38
SHA512 2d7e361af05715510768f424bc79856c140191d50df5779624141f95d4348836f33a82b71b7b4abf8c427b629f3fe854071f86df1f2b65f1d19f8283d004075e
TLSH
T1B6116009F798543217D10070EBA224878628835863FA0802BC8BC64E739AE7C6BA7969
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Edmodo.tdl

SHA256 c4f11542de37911faa858259ef3a9a97998c5056f5f9b7d386ab19dba47201d8
MD5 fa6253939ae298f8554a25e9ad49808c
SHA1 5a77f8211c889e6679b12990a15b4b156ac951e2
SHA512 9c58afb42ac684c202605f153a41d778e4b16ef98e3dfcb4ad2d1d5cc201f98d3729624f12521adf852c407f064559ca4c71a4e3aa206570883d13767a257889
TLSH
T12C213E54B39891662AC1476267A522469938E31C23F2A100FE8E920E37866ACB7FF50D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Edublogs Pro.tdl

SHA256 749fe6931bd32bf4aad7ff7334ec61d4835e5f1e90e47ed24df66c6e206da43a
MD5 4dcc9f6e7d6ff3f372b427f50c410ebc
SHA1 9a0d59b1f2d4de6af0e177be6c9fe0de7036afab
SHA512 1ec81f475d93508c0df087db0738b8da42ee9483eae964960854d9841c7b5486b425e42bbee3e7a8b24371778c7ece23dbe0c674d8a8c1133d6192bc882ceedb
SSDEEP 48:jzASPLNJuiU2mfoLMk1yAMdIbB/AIZ5r89COOvGpPaS0kfQTP1ht/XMN7uJ5mVSu:XASPLLuiEfwUwtfKaeREhpf0Isye7Yi
TLSH
T11A81812AB6B22C101CC61ED823EB6143997C93400715E101B58F1FEF73877DA7AF666A
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Edublogs.tdl

SHA256 cdb5c79f63a72790332fdc45cd643497d6a8be275afa0ff8a55bbb026c4253a1
MD5 22b417a836daf86881c9acce7599b12c
SHA1 c298489b09e25aa333c0cf7a86850ddc46c8b3da
SHA512 cd543b25dd664b6cbaaa267cebfab406af55a947257be5790c8d889b90f4437a914f0e27796b8105da8956b74af45848a602e237038d4a34aba4ac51872ab39a
TLSH
T1B721240AFB6910330BC155A0FE6120878638535833FD0411FC8AC19F7355D2D67BB56D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Edubrite.tdl

SHA256 f597079c21c2df3bbebade859f2abc65955fcd7105eae319cc9552e947a4d2a5
MD5 8b8a4e9e767f10a92bd863716c82a7e9
SHA1 3be68ada28ae63970f1f731acc154619807aa53e
SHA512 52b3006535259a25dbb50d0d507a7c5f436a4fd86a9856bfd65bfb85257de423be8eb7b5d872ad69b7e2d671a17f17c178368609de2752ece42165c21f28be9e
TLSH
T16A11E305F7F8107217C15170BFA2548BC5289308A2BF0642B889D55F73D6A7C7BBA96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Edufy.tdl

SHA256 5b4551419d656e80e8ef0079fce11e19d00fe4a0c3c8146628408cca4f0b7a4c
MD5 a49d98dab4071a1a62f3e1386d2311a6
SHA1 ce3b2e6dfe9c868527d977bad3a9587b620717c4
SHA512 569aac81ed326a67b5392271ade3d26bbc2f1adbcc687d184e8205460aef2d8d7074ad1fab48ac4cc2269cc8591cefe84e9001caac5d2c98fbf301b69096111f
TLSH
T13811E34AF7F8107217C15161AF62248FC528B71862B705017889C05F3396ABC7BEA96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Edusite.tdl

SHA256 ee4f164e29d9a1e1e474837d065cc0a001d185c75b141bd300f7a16c65c69c53
MD5 1413ce0b7928fe4e9662d478a1b91344
SHA1 b4f596adbda83415edb1f8ec80bccb179b7cfef6
SHA512 0aef97d40a6f6903bf5b911ac1ac86ec1559dbd96b4ae32554acddda0f0b39211bf3d6f1f893c2be5698ffc8dd8234016cbf3ab23b0b2a555ec4a7aed9b30fb6
TLSH
T1D111E306F7A8107217C05560AF52548B8538E318A3FB4D017889D05FB396A7C7BA6D6D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Elxis.tdl

SHA256 a1a18dd40a6fac87bf0004ee6d202091b342475e4ddadf82aee29493d726f812
MD5 863a40cb6fa0639410394d096ff2300c
SHA1 b71a53fddb3dc2e17a7ae36a41f3e4ff1688f308
SHA512 af52e7da80ff7e3ff49a14640bab5f909ee0757c308fc5dd7c63cb78d4c6b992867f30dd96997faec29cb5e40619b8fb996a57d86b1774f2413f8d4f6c27760b
TLSH
T1D511E347F799107316C02160BF52244F9628D30C62B755017CCAD09F735AB6C6BEA9AE
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Empty.gif

SHA256 b7a876e6c5b51bfd241675df5b2912d347593feb87cf50631480d4d39020293e
MD5 3d0a44e689b8b8e5e03dc2e85506832b
SHA1 62c1ea545582b34388502d53688b01164409b5b5
SHA512 bd955043f23d7b709c9767738a96360cc4bfae4b7849c866dc0e310714d35e98e90508f84701a2a7fcd8aa759c1bd2f77e235a958ae82d5b2071bd98895cb472
TLSH
T1AAA002568A85D4F0D00842704C2CA340947694594596424E73ADE65F78486E1D170A14
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/EncyclopediaOfMathematics.tdl

SHA256 1f6c4e94be6f5c03039e3e1038acfe27c2404b654f93da87b8ce8fc75cf7771b
MD5 dc1d9e8df1d2783653c450f416313bd9
SHA1 cce1db7a9bb0ace1325837f00d679679a5d82565
SHA512 934c3869cfc2b2b3b623521c1235d12b21bb83761371c923f9074871c29cee7b6fed30d129d8eead6156703b55836f538efbc62bcf4c14e1beddebcade8a0c3c
TLSH
T1F2410D80B5C296712A8357A21B92708AF52CE2481273D510F90F93DE7B059BC63BBB5A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Etomite.tdl

SHA256 7cb4381c1b6bcac32e798785b1a0878ac8ac905598878058d7ce7c963b6d955e
MD5 ea0ccbbc00ffa54c673f960c91c601c4
SHA1 d2a724339a5a42a8459352fb3119d962adc805a3
SHA512 012bf5b0279da9a73ca8082413bf184c29f7396b24f629a74335fffeb62f0f5432943a311e2b6b3d1ea4e227271c6d8ff2128783f4db432a5ba6bb3ceda0d806
TLSH
T1CE81E0186BB0A0BFE5D120EF5A36A9F19588071463DAD940779F861DE310AFC0BBC527
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Euclid 10.eqp

SHA256 dbcae8fb69bfa05751a85d02176b87cffbcbb9ea3e39e414980c1ed46aeaa218
MD5 6cd3d79f6771066860a8a6b8efb48d67
SHA1 fddbe5bcffb109fe0172df80e6b4cc2505044e33
SHA512 e852bf1f0c48d864b278dbd241f9796acaa3c173801b92bdff68bc05ace030e17423bcee189f374df422232a00537e72592a5af5820ddf9be3fa4244b3892cd2
TLSH
T1A81180A11F4A3D03DC54DB83FD75941E754013674F8A7C5B32C814F85709FB62AAD22A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Euclid 12.eqp

SHA256 14c886efdd3df541667df2b35ae1981e887b99234af1b9c79ad4fba72718edd3
MD5 941921411ec58d6b32677c39d738cf80
SHA1 ca71d33d4ed0baca58879ca484e64ec7f03d5c96
SHA512 224b1198a42f391c5e3f82e2f386b13ce9a77465bcd77dc13e88f94faf1bcb5413a1ec9d189ab29826fdbfb5cd3d6df8df3821e99101d3a61baabb9ae707c90a
TLSH
T1141180A11F4A3D03DC54DB83FD75951E754013674F8A7C6B32C814F85709FB62AAD22A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Euclid 48.eqp

SHA256 cdf2c8f18ca427b42d62a1ab7c2c89e5f68293098a1be896ccee226f9bd49f93
MD5 bd797dde64add8990473459e7f36d78e
SHA1 000f3951e6704b05b5fbda3d43c9ecb494817f92
SHA512 1825b1e5baecae6a8078afc48f2419601eea994c7b5b347fdd3ec0bcaab9a356ca161ee4f51067977f29585b3f8716a2d9a5a961648b70a8f9c8b153234f4e27
TLSH
T1F81180A11F4A7D03DC54DB83F975D41E754013674F8A7C5B32C814F85709FB629AD22A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/EudoraOSE.tdl

SHA256 9b104975f1e9e83f05384d08cd127d5299967aa8e486aad3d3937ad596226bb9
MD5 40d872aff91d5205612fdb457a946d73
SHA1 6680e67898689d1068ef071ba22c924fe0536db4
SHA512 5f7c73675c39742c014c69f567ac136ef51d5a4269c70e564053ab2e1aa4e1456728e7b489bb9b65c2c4ae837a73416342fbcc265f33ba25509f4822c46da8d9
TLSH
T1E7112786F798207217C521E0BF53748F8129935C23F7550178C5C05F73D6A7C1B9652D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Evernote.tdl

SHA256 8ac4fd0dbabde2f062ed9e39d3cc23913b7af3a1f80ad8394297e25dcee2e531
MD5 6ac29859332996c6434ea1b63e6eb9ff
SHA1 37bfa9c3cb4f04a1ac143c26bcc49b1770f5a545
SHA512 2a1a05ed58f0541e497f69cd368a4442a109e430a9feeb0aa3f7253da1dc771114af2dfad6b43bb2dbccd60c511fc0f66cd865bb6f2c7655666ca6dc739bc47c
TLSH
T10B11000AF79910631BC12161BB92248B8628620C72FB550178CDC14F3396A6C5BA6A19
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/ExamTime.tdl

SHA256 1263598d0502a033f92deca9377779318b177286c9f48f2f62a9398a5a832255
MD5 93ed28369795d24cc5bbaa2a24647101
SHA1 0b5f1415d617926a19749da90b850b71d247ddc6
SHA512 11a7294fc56922a5f8e1adde94b3b204c4a399850062cfc4a3198a010838d55507a6bc37da58be6b6567ca85ddfd3db1e2fdac3d526fd7eba63c0e6c33671932
TLSH
T17F111405779C157116C023A0AF56348B822D935C12FB5401788FD04EF755E3C6BDA91D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Experts123.tdl

SHA256 b2f73f186921290bd43c179357076298ee420832e531a1ae48bea32c569a6b1d
MD5 38d3b852f1230662202b9dfa36475bd3
SHA1 0c8144029f552577246493bacb2c39d7fa7e82f9
SHA512 7f174ed8229fd131e0509810f50853d619d95fd6c23dbffd22e749a45c69843e2a661b9824ca288721515768980be9899b765a347eb06513afe93c96556d111c
TLSH
T1EE112706F3D855F61BC11190AF72508BC228530966F70802789DC15F7366E7C7BDD91E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Feng Office.tdl

SHA256 237c8954f688a813f61de2f8c5d2b0f5addf44bc9910341be1405bc6d0303f5c
MD5 1570afe0838f116d9d316f2c57b812b7
SHA1 b7e874df3ee33998a8579a2d4dc62168ffa4d5e3
SHA512 3e70cb456355a055ee8f939dc88f37b94cc0fa32ab098da776a562e3537cbdce039c8079dd0535de68bcb2a9fee1e1507f3d8ccab7535139cc21a5192f21f884
TLSH
T1DF11C00BF399507617C12161EB92108BC13C938C63BF4501B88E849F33DAB6E7BE6969
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Fidus Writer.tdl

SHA256 89b1779dcffc61b025e7bca30e3a1dc500737e33fa855f6ee218a8a4bf8d6c43
MD5 a89ea16b828d67db1c4b10386f79ea40
SHA1 f32717d3fc933b848df76114f25df745698bd351
SHA512 03b2880d60e37da878800309e50e1ac55ce796de66a82746f56a09c9e751cf95b996e2d282d13ae9d7ebb1489cbd50d6aa852efd911cec4a3ab66c888140b31f
TLSH
T146414080B2AC85A11EE027D7AFA55843C499D34901BE441CBC8DC25EA74EB3E23FD31D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/FluidSurveys.tdl

SHA256 409fd0ad87d523694882ee72e1d71dee0a809b90888a13ef736274eef7075bf0
MD5 3180dc6a271180a6928c3a72db0bfd7f
SHA1 6cc2480169a9e1e3977c17e2d5ec3dcf12eff719
SHA512 0750aea78b6b3e478567532d123d1507d600aa17097872c777733044eb272d19cfca606b890c7f58366de4b24b940d32b5f5111571d7fcce5ff7cf3ffc5a2028
TLSH
T1E0110406F39950A31FC02660BB62208BC128538873BA48517889805F735AABC6BF9A1D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/FreeWebClass.tdl

SHA256 48d3d00eaead823a54d51f646b81b18a2938c512a6ba0b26aea1ba086c555725
MD5 4c6d5aa24ddd1152f141f196e06e2183
SHA1 f08772070ea1c4f3f721c6e643212b9f2aad6825
SHA512 b044bbacd643b7f3e24f791bbe77a0a61e7057ae29c51076b28a6c26442082be8baa8e7cf03d2f7861248a956e21d9a1f1fdacac21762270c68b72ffbef2778d
TLSH
T14C11D005F39810B217C22960AF7220CBC128930CA3BA04137849C19FF75AA3C7B9697D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Fronter.tdl

SHA256 8de38497c7a5790d6bacfae37c27784bb7776bc8019cac3a21f27c987bd5a1f1
MD5 0c9a370a0514da706a3728dcf275f29e
SHA1 980261946c2dbb039603dc34f3553857188d5165
SHA512 82794087539a8340d786ff3c619c1b39e6782cc3ecadfd55a2d8fef28eadca788060d39ba029366d21f627df133bee33043fbc4d4ae4886851cd9b686f682a9f
TLSH
T15F112319F399107217C21160AF56108F9029934CA2BB1901B88DC05F33DBA3C2BAAA6D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/GRAY.pf

SHA256 081caac386d968add4c2d722776e259380dcf78a306e14cc790b040ab876d424
MD5 1002f18fc4916f83e0fc7e33dcc1fa09
SHA1 27f93961d66b8230d0cdb8b166bc8b4153d5bc2d
SHA512 334d932d395b46dfc619576b391f2adc2617e345aff032b592c25e333e853735da8b286ef7542eb19059cde8215cdcea147a3419ed56bdd6006ca9918d0618e1
TLSH
T1E0F02BFEFF3A2B6CE510A33990C037713E63D7B56C296EEE555E410D3A865C40C56682
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Geek Central.tdl

SHA256 765d3610e834ba0f0c03a94f6641dca7181f072be4cfa00792a97a19486193a2
MD5 4c70d010c717553f909887a660e96da6
SHA1 f240d7cc2c04937633639fe3f79550f79bfd037f
SHA512 f01d6964a03cd1f2be11a835ae9c9e42c48b9c3bf8dd6e127a82c49221b1f6cc874fa4d4350d96bcbcf905325dd6b65e88e2495640c0f8645bb497381981a9e3
TLSH
T142211000739541A10AC02BA2AFBA254B816EE34C02BA40107C8ED14EF749B3DE7FE219
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Gmail.tdl

SHA256 b8534107ddf93c0f8f70fafb00a934df0212e77e644a5424ab75e9df55ee3d85
MD5 a05eb3b9ea0c12bf62ff6fc084be3099
SHA1 15dd5ef97003866681a6e8b4081ef9e42195a6c1
SHA512 a54dc1384be97931beb321e31911211e5926f38845b3c244ffa2ce8327240a4e7bd63412f534bfe6a6020a50c31108a76634cf6d1165499ba92f13bb969d78e9
TLSH
T1E411E306F3A8157217C11160FF92558BC128630D66B754017C89C15F3396E7C7FA6D6D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/GmailChatTeX.tdl

SHA256 27a6e42f6beffb1ec8da31f40e1fc1c0cb73c3aaa6649c85b3a83637516e9b3b
MD5 3aaea0a2d0bb745ea8bdbae0e383142e
SHA1 beacb4e731da40f7765df496b3fbe5ffc24d54b7
SHA512 2deba406378d51c35afb11f58b30f7b1188db30482087e0c6d8d29c27b34de1f975f5fc58d4a6569b5a59fbe368680ba1169e76ef830c466e54d4bbaab00ae63
TLSH
T1BE112058729458710AC12721AF6A3186D02DD38D52FA8111FC4EC28EBB95A7C67FB90C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/GmailTeX.tdl

SHA256 179c111c0a1116a0c84a5bb628a64f4b57d86c3fa94096b3fb807a7ee57e4ec4
MD5 aa6fab7a83e3a7a2377ead8063a70d16
SHA1 5ad0ccf7e632eb616ecaef0816b8453627ab461c
SHA512 e36282939a4512a96384bdf512cb378475f003c9e0e71683c76ca1dacb3d1a88c8d3404db0db2801d5c4720bdfd7a6a05b1bbe7541f6d46bf266ba9181d9f504
TLSH
T1B8112004729458610AC12720AF652186C23DD3CD12FA0101BC4E819EB355ABCA7FF90E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Google (chart api rules).tdl

SHA256 e56e8745b066a35aa25690affd30830d3662d3baaa6dad7e626799f7c8cf5d14
MD5 9c8f999d547c620af59d344bd4702fb6
SHA1 36a548ac7b627c3923abac820d30fb966d01a421
SHA512 32874523630e38bfe6d3d2578c84d5c695d9b60f7506fc2380d0f5699982cf8af466cf81a4a3fe70e68d8dd731cb691e07547158759de5565958f1220053e0cb
SSDEEP 96:VmASPL/uimdCyla9sVliJnVmCQr/p+6W8dgssXdGABShwRAra5rw:EAST/uJe9acRoB+N48AhqkYk
TLSH
T1E122052ACFB7303C94960F12EBD73A81159D97813B87E116344E47AE230DAB435A676F
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Google (chart api vars).tdl

SHA256 38cab35986551cc05f9530b750802ad844e9e635fe1203bb08f2e40b940ceed0
MD5 2b3b1f5ba7134059b8dd73f34f870c48
SHA1 7b1b326ae2df8e9f40fbfc57e94ceee994101e24
SHA512 d49ca935988c18a88380b4928ef1815aea134dc188edc5fd676967c0ea4bfdeb4fb1061f72b20cac75ddead716ec2daf39b3cf0845737646e9383af378aa2525
TLSH
T1EA210F49F38D567708C20752BF3F12CAA454C34801FA8911BC4E821B734CD5CABF964D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Google Docs.tdl

SHA256 8916387e87f25514853fc898e418383d71c47ffff3f9aae04138e511af9fda79
MD5 d4a5a848dc5e4d8b1e97d96486fc9d4c
SHA1 40359a2d253bded68333076b736ed2a50a821749
SHA512 e774e0b8e0740b88d1c0db01606b6a95a132b78647dd90a979e4f7c3cea2ff4f466d692c0d9e1c3c1eaefb51777541e25a2b07455e17d120f4fd4b427189e5a6
TLSH
T17D110017F39850730BC0A160FF52518BA428A348A3BB05037C89848F3357A3C7BE693A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Google Groups.tdl

SHA256 f93cd963fe5fa1f13ba0715a4a9f908a5748849b44c0ba3e4e372df88c2138a8
MD5 b6d017e2b92383d14d0faff13ae0dbd7
SHA1 fc7c7dcc8b0bf651530ef7a2b99ad5571c997aac
SHA512 991abffc9486265b57fa123308f13a097b56badc9a62095091b6e1bf239049cddff2dd9b7c060951909af3da3794b38e7423e6963eb41ecc6ffde06d89c1b465
TLSH
T14311000BF3E8186317C0E150BF52198BA439934CA2FA54017C89C08F7356B6C7FE6A29
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Google Presentations.tdl

SHA256 771f66db4901ce95bedbdf11cdd1347635ea9a4295a9895a5d8d6c78ea33728d
MD5 ee344735199425d2f10bbb752b3952c2
SHA1 fe94bc595253a0e9260c0d59dad24dd46998f3a6
SHA512 db53e269e952aa0b2aea912e2913b18441c00831885b96a60b52656a3dadb934b7d35e9eb0289a05321112fa9ed75a0b876f53f05940a0d073c41a632b8ecccb
TLSH
T1D1216207FA9811370AC5C4B0AE221086AA38835833F904117C86916F7311A1D6BEB97A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Google Sites.tdl

SHA256 edfa3b15e8bc4f9f0181ce0a68c3c52b4e1e0fafe75a9d6009f574633b63c8c0
MD5 825f06ecb58ef0ce4598a3c5f784b264
SHA1 1aac986df8e4b44d151cf2e7b21e27da5d105976
SHA512 067baa2d47e63b4b90aee2f3c170f8de5fc2ae50830307afc2f29d1df6d84cd2cbf8d4da98ca9b6802cb7c3b4086425ca69cdf2a73dac313976d365012b97150
TLSH
T13F110407F39820631BC09150BF92918B9428D31CE2B765417C8E805F3366B6C2FD6579
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Groupsite.com.tdl

SHA256 94e785ca42b23bd56361e66b6e8f054d0af017967423a0eb3e7e5dac0224f9d9
MD5 591acd2773d5c823b5fd6d08c5242c4a
SHA1 c919210d66e9a57b52ba303a54a0e42c8b899d3e
SHA512 33e65ba7fc487002bb9e0a221e84d454f23ce0abce9f0d7d4e943b8289ab74a830604fddfe97ea6d53c2abe8bf371d446d20264fd4bea435e1f0aebe5eb14c13
TLSH
T1D611D046F7D8107216E01920AF52508F803852A8E2F684417C8DC06F735667C3F9566D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/HTML input (chars).tdl

SHA256 5f402924cbd4afaef96e01f01d4842bedc127bb957289e51c67faa0d395b6289
MD5 6e8f3c8b55f62999c8ecf88ee9f99aac
SHA1 7b6b2559ad26e17a47e507b150d413716048270d
SHA512 92cff2af06271a269fc4c6f1806454bc6d02b24e6eeaa1fb1223e3dde0f28279a699ef3a5c34e5ee9d9e0e1e0c6916cb4e96ccd0885a137a8f48415dccb63ed9
SSDEEP 384:Px/uA3iJ9aAFDK5+Eodv7pHqrB8bcPjDtz:Pz3+Eodv7pqrBdB
TLSH
T1E933663658E8402A77E7BF21201776BADA159074BF0360A90F96F3BDF4430736A53DA6
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/HTML input.tdl

SHA256 85a7c7753963b7505f2344a82cbed3735221c90ee21fe4fc94c6080b62815df5
MD5 8a49fb37eba230db43ffdf8330e222f0
SHA1 5d410c98addbc08c88c6c5e1a1f2bd12bd721837
SHA512 4398279074d5f5cb7a58a49f6492e69c22967fd040f5dac4069bc6b4c20c9765ded94541a55c084910c9f5ba8f25b0011a18881cd94f51f0f7baab6ab0416171
SSDEEP 96:cASPL/uiAD17Ac+CaPCJ0hoofCqOotHUUo+6EDOJJBqABBMcS1XEEYLi9R+1PeR6:cAST/upsbCaWDnR1rGUi/AY6
TLSH
T175F1723485C305218965329562B3F6B34652A069A3853234721DF0FEB30B53CA6F2BFB
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Haiku.tdl

SHA256 9dda19f0ad2ed4a38dc67eb6e6705d895392560ce0d87aee571e3d004bdc4237
MD5 b143a9186c2dcb9a5963c6327a48fbb9
SHA1 dc9b39699b5c328aa8833448faded20fd7e35253
SHA512 d379d6085321a29df642738476f11c9eb4ceb804fc5dd543f1ce603014ea16cecb68aab8f744f5ec188a3db6cc9638c1d515867b1223ad39af455986ec5401ee
TLSH
T147112305F798107217C41160BF93198B822C930872FF0901B88DC04F3396A3C2BAA92D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Hotmail.tdl

SHA256 a9cd2075214ee58cf4a516cea81e73c9d6000f9bfb4d178c3935afbfdb347123
MD5 3905abb9c66b3c73687e8e4b1d4d737d
SHA1 650876aeb96960cf40b8129b8151167ea4afb665
SHA512 719bb327fb6bce566b3fa093a18f8d715559d3045fdae35d70a3b1a98308ad24d2b179aa89c3cf417ca94c5fc4257a3c54a48fe239cde63b4635f849d3cd1296
TLSH
T18D112306F7A8117217C2D160FF96558B9028E30C66B734017889C04F3356E3C7FE696D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/HyperOffice.tdl

SHA256 f89646289541289a3c7c7ef4006f9bbd95129b56b25fe86a9302b0085274fb16
MD5 83bf85616a58a2056c4f007d006a1ef4
SHA1 1c5b2bf465e4b8503151317de08772faedb92a97
SHA512 ce42bcf53e3df5478fc21c97aa27efbdbae066274bd283ede445b63cbe563f0f202b71fdf0f776855d30361195b765126bbc6c687c0be68e5fb416a93e4e46a8
TLSH
T18F11000AF7DD107217C12151AB56508BC238930872BB9502788E909F7396B3C6BEEB69
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/ILIAS.tdl

SHA256 ffd00630b6f61bdbc6f57a83faa99055946ac10af37ba78e1d6366dc551efedd
MD5 7dac37a116a6af2aad21ac99e9abd253
SHA1 4885a54e8fd87ef73828c8ce69f8ceddbc013758
SHA512 eddfa2eddb9a151eb19fc5b264a2d37b91b0d8267f410e203a5018c22c3850f79c6b04d3121ef2153a0e81d879a946efb507673ef270e20ff4ef8084c4e84dc3
TLSH
T1D4110406F398107216C12170EFD2244BF428931C62BB1402788EC06F7396B7C6BE756D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/JAWTAccessBridge-32.dll

IMPHASH cc600014039f50aac13b9344c5ec0bc1
SHA256 0739ee0fb1d18a0e5dbe5a708041289fd6d538737c0a739c15c0678b355722b7
MD5 f5140fe1dea102f66a516aff80c944e2
SHA1 b109c8cfd0fd1e4c2a1c83fd01807fc0d07a098e
SHA512 b5504e3de5944da822e93bc61d4d3f35216e7da6bf91fcb1e415e1c14b47305e6ade456ab09d64da3e31c254309693c5deeb4e602a2fc27630b639fde0942296
SSDEEP 96:3TcdaDFZjyvB0qYqlxMQ7EMQ3XLPVAM6iPbwcg8BgMPkKbcuFcS:jcdMm5YEe3XLPVT6msh4g+Euu
TLSH
T12002EA3ABBE84027F9FE0B751D72915327247D615F7182BB9B92539F09B0880DC38761
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5108

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libjawtaccessbridge-32\JAWTAccessBridge-32.pdb

$LOCALAPPDATA/Temp/mathtype.tmp/JavaAccessBridge-32.dll

IMPHASH e29944e71ead1ccb0c0a4255cba87233
SHA256 853556ec6d341812340fa1ce922f7030475b95b2b35fef748c134c4ac9eee64c
MD5 a39f9d159dea989f46d379db7e9110b7
SHA1 edeb678b7e76f749cc5f88c9932a8ac27fbac34c
SHA512 3ddae97ac48149d353fbe17c18e941639ed6d31c772923c3fcb11b92c22ede8925755cc2986f4dde6fba40321919bf745f95d361b8701bf37410c33e92a8a2f6
SSDEEP 3072:hvAznTOzUca38u4XAK/e2Hrgc6kZAn1yEkBKMKy1Zf22QYHJiuzTl8ShzzM+64mR:hvcwUca35zZnQf
TLSH
T1BDC3E772FA96B3B6E72D7236AC0016B4BE94952C50378EA3CD5B211F12C7051CDBD9A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

54819

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libjavaaccessbridge-32\JavaAccessBridge-32.pdb

_Java_com_sun_java_accessibility_AccessBridge_caretUpdate@16 _Java_com_sun_java_accessibility_AccessBridge_focusGained@16 _Java_com_sun_java_accessibility_AccessBridge_focusLost@16 _Java_com_sun_java_accessibility_AccessBridge_javaShutdown@8 _Java_com_sun_java_accessibility_AccessBridge_menuCanceled@16 _Java_com_sun_java_accessibility_AccessBridge_menuDeselected@16 _Java_com_sun_java_accessibility_AccessBridge_menuSelected@16 _Java_com_sun_java_accessibility_AccessBridge_mouseClicked@16 _Java_com_sun_java_accessibility_AccessBridge_mouseEntered@16 _Java_com_sun_java_accessibility_AccessBridge_mouseExited@16 _Java_com_sun_java_accessibility_AccessBridge_mousePressed@16 _Java_com_sun_java_accessibility_AccessBridge_mouseReleased@16 _Java_com_sun_java_accessibility_AccessBridge_popupMenuCanceled@16 _Java_com_sun_java_accessibility_AccessBridge_popupMenuWillBecomeInvisible@16 _Java_com_sun_java_accessibility_AccessBridge_popupMenuWillBecomeVisible@16 _Java_com_sun_java_accessibility_AccessBridge_propertyActiveDescendentChange@24 _Java_com_sun_java_accessibility_AccessBridge_propertyCaretChange@24 _Java_com_sun_java_accessibility_AccessBridge_propertyChildChange@24 _Java_com_sun_java_accessibility_AccessBridge_propertyDescriptionChange@24 _Java_com_sun_java_accessibility_AccessBridge_propertyNameChange@24 _Java_com_sun_java_accessibility_AccessBridge_propertySelectionChange@16 _Java_com_sun_java_accessibility_AccessBridge_propertyStateChange@24 _Java_com_sun_java_accessibility_AccessBridge_propertyTableModelChange@24 _Java_com_sun_java_accessibility_AccessBridge_propertyTextChange@16 _Java_com_sun_java_accessibility_AccessBridge_propertyValueChange@24 _Java_com_sun_java_accessibility_AccessBridge_propertyVisibleDataChange@16 _Java_com_sun_java_accessibility_AccessBridge_runDLL@8 _Java_com_sun_java_accessibility_AccessBridge_sendDebugString@12

$LOCALAPPDATA/Temp/mathtype.tmp/Jaws CMS.tdl

SHA256 99337a1484f3e19fb892c6299d6c450991348dca6a3c52eca3736a0028431fa1
MD5 62c280d4bd924f581ad173e41bb6e87b
SHA1 8b3184ea9daccc658b13a9d4d215e5b79470e691
SHA512 62dbaedd625fd98ac1828fa61654d5208b90f536af6a2285c86cabda406f58435dac88ace6f84d00d0538504ef7afb05bfa46235dcdbc37bf29d54f1d4107074
TLSH
T17E11C006F798157317C01260AB53344B922C931D63B715117C8DC45F7356B6C6BEA96E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/JoomlaLMS.tdl

SHA256 dce06efca48d0afb87f60095452f267778780dc0ead8539bef4d865e885aeb88
MD5 923628eb75ec1273ad14b303e9a88ec6
SHA1 8314291919ba6d180ede1c8c849abc94e1c94a2c
SHA512 4f6a9c8e540cca9a5b183fb6573a9120b6c55a456600cab80148c90660b77f44a5e64a26827df766a273aeaae5a26f5a0a93f9f194c7a3f72cb21faaa3f86dba
TLSH
T125112306F39C10731FC19351AF5621CB9029930862B70401788AD4DF3396B3CABAE92D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Kidblog.org.tdl

SHA256 1e1464b80ac9a32b5fdf673d669e95c008a140aa01be236b46b601d744e55acf
MD5 5669c4c6d3471ea13fc05aa3fedb6bd1
SHA1 4df85ff20e582b0c46c750158ed26b85cd531f89
SHA512 d59e2c0a7d553b1142cca39fa789784714fd3f94af88435051008c132f5786889f9bb5916711844d5b7123ce66ca826ede48d5b46ff1db46a8210809e9b38063
TLSH
T1DF11C016F3AC14E227C12151AF96148B8728A34862B74511B88D80BF3396B7C6BAA969
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Knotebooks.tdl

SHA256 8015a84bfe3cdff7981d50a7b367cbb719a603b58e83b33c5f51f7a30d717f14
MD5 acce1edd82a9928c4aa0cab70ca02dcf
SHA1 f66ef305a27dcc750e94a64632e6447733a2f06e
SHA512 ea3fc6918ffbad5e812c817eca3675603171685c329e556c96e29ef67ffe9d32f960bc4be3404bf7ded5864f83f9c97d1d5da713cc9570ef2504168f1d75ccb7
TLSH
T1C311E30EF3A8117317C16171EF5220CB8528974862FB45017C8DC09F7357BBC6BA696D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/KwikSurveys.tdl

SHA256 832fe9d7ec5dd6560ddc0be929f1bb6195f06aa62beebddb1dc3b9b14477d729
MD5 c8f065c601d28b615f24a5dc6116ec6e
SHA1 c104c3f4a986fd7fb04cbfe9b9077fd992396687
SHA512 843f80ef2d215f54abd15a056456f4781beff02f07aba7862fffc9e4ad6b7796fe2fcdd08380935b9d7d0570c7b252ebcb2e1314ae4fc95b34ddfb02a46be0d6
TLSH
T18B110806F3AA50631BC16750BB615497C228534C73B648417889816F735567D1BB9E29
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/LAMS.tdl

SHA256 fd2e9791708f741cf17659f0f883d52855f2843199a4243e47f78fdc8568e5a5
MD5 377a257d3aeff3af707cf728332ba872
SHA1 008bb095c12d5be6f101009612d4260dde122525
SHA512 508f1dbca1bf303dae293ee2ddc39782a32ef4b007c34559c9a60f17b2f2129ebedf7dfa1e37faf0adb82713f3397e6c04d8a08d2d1ded86eb1ebeacc628f0d3
TLSH
T17521330AF76411731BD111A0EB9131DBC928974862F654517C8AC14F3356E3C6BBB96A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/LINEAR_RGB.pf

SHA256 712036aa1951427d42e3e190e714f420ca8c2dd97ef01fcd0675ee54b920db46
MD5 a387b65159c9887265babdef9ca8dae5
SHA1 7913274c2f73bafcf888f09ff60990b100214ede
SHA512 359d9b57215855f6794e47026c06036b93710998205d0817c6e602b2a24daeb92537c388f129407461fc60180198f02a236aeb349a17430ed7ac85a1e5f71350
TLSH
T1801163448339A308FCFA177A24E01BB17C113215C1AB1A83EFA3271CE705BC41D10493
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/LaTeX (base rules).tdl

SHA256 eda5f6b92edc732f4e43112f645da7c3cb2b67af504c7341568566e02d62ad69
MD5 eb87fb4e3264e198061115bad4261950
SHA1 93b36f041beda507a585ec5caa616511c5e0042b
SHA512 a136af4526268a21ecc9373c396e531a9f8ddaec967e53f417b4f58d9510ca0654b16095074f478754d778eed79d1dfb4180cb291207b38ae632f34f1a83d1d5
SSDEEP 384:nx/u7zpPcCm+UNnZCLGS+YtOfsRAhwHe2BDi0uQfBFL3:nmL4AOUpxBDi0uCBp3
TLSH
T1B5D2D1297DF351F17D43068A67D22B84AC99C2568301C049B6CE4FDF53817B82EF57A9
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/LaTeX (base vars).tdl

SHA256 a424f0e0a09a3e5ee9876307df345610c9a56e3163cb789200f4247f5565034e
MD5 ae017ff2d8370b2a355ae51bd2a4130c
SHA1 accda1083ce2964507ae323bc0ee25e62004cd41
SHA512 91a2b0259f571989d7a084b33cc13a25d69765ad6e39e81e480e55df315c87c139b95779a2c64f24d9b7195aba800d80ae8cf05f6e43c33eaeb674a31a2b4f44
TLSH
T16521BE49739995A105D102417FBE124BA458C3D852BC9269BC8DC71C774C318EFFAA4E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/LaTeX (base).tdl

SHA256 e61ef58aa4a0a06592ef0b161a319ff5631ffc0f0c8b832c6826aa9fcd2afe1a
MD5 39fec7fa379bbaf5825f39295820b56c
SHA1 5f5ac151e0e16d6c5c0da12eb84457488ad99891
SHA512 5a08ed7e004a031fc8c5ea254f3a6144b4bbe1b77cf99dd037913b25cac6a58b55f466dde7fb74bc267f81a647094123ed2d82eb8809a77ff0528f618fd75a38
TLSH
T1F911C015B38855F316C15690FF9590ABCC2DE2DC32A6D601704BC18EEB0193CAB97D8E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/LaTeX.tdl

SHA256 81f4fce89e2827e3cb5973355523a1ae5ea2d76992ca07336c4b4393f401d30f
MD5 d691b786a93a84358b63ceff0c19796c
SHA1 0d4db7c66a156ec54e5cdf8eb531874521cc910e
SHA512 ec4d2b01d4bcf5fd0fc215b96c70f45cbadcc113975672921c939ee8efe2a31df9091ddb20ba017826c559258a6b9d27b8708b43db27d4cc5b836287d2593668
TLSH
T1EC012315739814B216C01260FF5050D7992892DC32F59911B889C04E735663C5BEB909
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/LabArchives-LaTeX.tdl

SHA256 d19bf522001d2e48341ad0502151197304e8950f04f40b8721ecd55a2a4fca2a
MD5 34b66ab8ce2b74070fef8645001f70f0
SHA1 32f3fc240e65a80fa3df41552c329e2bb9bcbd40
SHA512 4a3d2b805d067627c9a2a0747f2bffe66b82fb6b46b210271be7b1b17c45a7b2bf8a279acde3e719460ff17b534862c8960ebb7b848b4858d73d125e5427e691
TLSH
T1832124557394996136811772BBA020CBA43CA38D32F3A550B44EC08EAB1157C37FB51D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/LabArchives-MathML.tdl

SHA256 1a5645d72581f8f1a4c9fe188861986263aa487c2e4818e88ab024bb16f60afd
MD5 104c84cc9f76532cfb6acfffecd9c903
SHA1 31ed1569212f6c1a241aeb9810fa8ddf4f56f368
SHA512 fbf40adff15445843742aecda11f7301438dee9c4cceeba452932b48913d37d727ea5886b2a6411cb23e5029201cd1b49efaed9f0e4949ebc55b954b995a2bfa
TLSH
T179315415B395627426C01360DA90608BEA1DD3EC3BBE9491748AC09EB75163C27EFA5A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/LeaderTask.tdl

SHA256 345262385c99aee51309c2e26e0c4dade4e8aaa2250f46ea09b84b9d082a7a4d
MD5 e6a38f9fc9e5933967375bdebfb5cef4
SHA1 be3944825d90a2c59ae2f699f521f619de14007a
SHA512 912ba8cf64d8a8980fb746efcf3f9399342b6b60ffa8a62ee191bdf35ce36706471f74086a00b80b622facef3b7a9e05b584d6c213281fd1529c1dd9f924357b
TLSH
T16711E306F3D8207217C12161EF52248BD128D348B2BB48127889C05F73D6B7CABE696E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Leanpub.tdl

SHA256 1f7f5b88e3eab67c829084483e9bc3d5b69dcb2ac19556d76a0cfec892d59f7a
MD5 78071c2502b1a9aeb1ab99ea9f760bbd
SHA1 91d8f3d9ab6f695e3bd7a70e733c495cf2d65a20
SHA512 2939d9b1d38b28469f054bf6199b24b3b4e9854bf49664deffa40fcb91df372cb8b3586e43ad8ca606e298790e16506f8d9a3c7c4e00d59ff66ada671568af3c
TLSH
T195415184F2AD42A91ED117D7AFA4188384ADD38911B6802CBD8DC15EB34A43D37FD30D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/LearnHub.tdl

SHA256 146a9af24c12541f256303c11a8602f32c703b71514d5f989444c32ec13a3eca
MD5 1cb1c1c9f2f408f8f557c428fc5cf0bf
SHA1 39d22487e52fc9765081a99771f6cc8ae6da61d5
SHA512 ba7a1f22bb1dc6e0f7943596cd89434c948621a5a022c90fae9bbe6bb988cea9dc81cc3fced6b2defafa69f9794fd084a05ef5b80c0865aa69806ac651d1c15d
TLSH
T12521410AB36827B105C82B912B6902879568E38C12B58121BDCDD34EB387B3CA7FE418
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/License.txt

SHA256 efb030d86c30924406b141cf7b41a8126a038731e7c070b19b06170832417bef
MD5 38b05a622bc2c1ae736fd3828e2622a7
SHA1 3a9c582221beefd350f77c409cf8adac1b30e52d
SHA512 0136691c1ea2fe2de9d2f5bfffc706c0ceb98c6b00c69f9229d2f398c2a5f396bba8b931526a01877bbbc93b4dd4d10fe00e6c077c120a296d910c3439b2425e
SSDEEP 192:j9sY9AYYBBj+Af7Ypj5JGWR0pJTOlajGFIJSQGCCD4rz3TcQ9iIYRwAuuiDg+1:jqY9AYYPjJjAPSmIJ+CCOzjLLAuW+1
TLSH
T1E222A66E7B06133216E203B1660B91D7FB2792BC77A95394B90C401D3326E7447FBAE9
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/LifeType.tdl

SHA256 093b418da6d40bf31ed8b3b8ab05e07d212f231e1ac04bd7a218a3e43d9e2bab
MD5 99f1013098b2bcfba1e38604715baa3a
SHA1 4e4854a8890b110bf95ad237258f76e059c41258
SHA512 9fc1d2b5d83895a99b0a0ad93fefeb640883ae4c0c692c8a989464cf34847628bbf4cb3ed290d1bcac1722b2b16a9f9a3cd6b462090d8a14f7a73d2cc9e6f6e2
TLSH
T16B112307F39818B316C061A1BF96208B9128934C62F704117C89C45F7352F2C2BEAE7D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/LimeService.tdl

SHA256 9ea0f6d0d0e45f578271f7fb813b54a12c97269656ba95a2051b6c0400397dc2
MD5 b42e2cea2ddeef8cce689b279243dc9d
SHA1 bf77cd198fc5881afb75a588c3e860d6f196422c
SHA512 e945db4c3be812f8a496b7ecb4c9f5bf82cde68e314e0b246a956a9aebd6c07c9b35999d678b845726aceb3c9ca582748ba6f99cbde7228468b8119df1bbc1fc
TLSH
T15C11DC0AF3D921B21AC15161FF53208B9128934C62BB14117CC9C05F37D7E7C6BEA92E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/LiveText.tdl

SHA256 661625c9a80277f60ae72f1846ff4f151f30e70c4faeeb9fc1c83febe0dbdd71
MD5 138daf5556cb3242fc036349896b899a
SHA1 46cc71c1948094879c4ffb87442d6cf6f06595d7
SHA512 5d583a5a0b0038894241d4ed89aa9654aee5cc6da2bc413bc553c90ad44f2f638192d8bc9f8f101b63738932d009c61c4b6e02a2991ca2f283d972e298355530
TLSH
T18E112347F39811B217C89160BF53628B9028A39C62F715517889C0AF7357F3C2BE6A7D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Lore.tdl

SHA256 a761c09abd380d869f1cc1abd5f7cd7e27f4989c20bea0aa3404ce3d00225188
MD5 09ffdea0c0f1f662410b30cdd50067ea
SHA1 4c917493ef90259f795f499ead6eea16deba2d9f
SHA512 fc93310ea456e8f84e36f891bdcc1081abce889e37e3115c31ca9db3df994ca9832ecbe7f4b5aa70609b83352e67dd513e4d487baab9c483d47e783625a0754d
TLSH
T18C11E305F399107217C11160AF52148BD228935CA2B70551788AC15F7396B7C6BAB96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/LucidaSansRegular.ttf

SHA256 f8d877b0b64600e736dfe436753e8e11acb022e59b5d7723d7d221d81dc2fcde
MD5 b75309b925371b38997df1b25c1ea508
SHA1 39cc8bcb8d4a71d4657fc92ef0b9f4e3e9e67add
SHA512 9c792ef3116833c90103f27cfd26a175ab1eb11286959f77062893a2e15de44d79b27e5c47694cbba734cc05a9a5befa72e991c7d60eab1495aac14c5cad901d
SSDEEP 12288:6obn11t7t7DxT+3+OQ64cctiOAq12ZX/DmfT6R83Sd8uvx7wSnyER4ky+SH/KPKQ:6oTJZzHniOAZ783Sd8uvx7wSnyER4kyI
TLSH
T10FE4BE1FF3C3EE1BF6ADA13AD12293738663B529E36396E7790D5525ECC82B05748600
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MHForum.tdl

SHA256 93777d3ef5245c7efbef8ffe8a8d9d1907ea64fb3e7f831906db0cc517c7ff2f
MD5 3bcbc222cddff673241350e6625db645
SHA1 4c0840068a2a2788c90b124816b7e98bc7f79a3f
SHA512 820d2c1a8388d5ed7fe786edef36eefd4530474f02c558494191b38cc6004492c040a3a0cd6f90ae671b8e575afab1610257f6bb804ec3602ea2c89244d13e27
TLSH
T18E21444A72D957B20AC02B616779238BA52DD35C22F98121BC4ED20DB34663CBBFE54C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Magnolia.tdl

SHA256 528b999fa876e2c3e78cfa8fa53a51d7032a0dc6b7bc15edb7dac77b825b26ea
MD5 e26b675382d6085db4005b922c62f396
SHA1 9707e20c88ecc738bb123ed37b9ad318d91a2148
SHA512 fc09965dfa7784a4c7fe8f55415932672fa9f75fdfdd0f4b6bb45cfcfc817ae4323a9301b16c0fa26e1079e042972ae51a76c530ef0e7444fce8ccfb58eb1b41
TLSH
T130110C0AF39810721AC02160BB62648FC12CA34C73BA4441B88DC14F7397B3C2BAAA2D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Mahara.tdl

SHA256 71d1f902ff35869283eb984b8e174893bbb5b6bcc1958383b319e2383dd04a9f
MD5 514c196b79fd6b4fda7190743bbab022
SHA1 255fa2acad0b9f27a417c6e2142854ba7d9581d3
SHA512 3af3cfba6ecd238781643a1cc205d3c16ffcf532e075d45f7285b5dba987e94bbc2f44b5b449e7d72b282ddbcdc2b069c0990db11fdb0492b8b3bd8718d380d8
TLSH
T161112319F399107217C01160AFE3908BC12C934C62BB1541FC8EC15F3356AFC2BBA92D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Mambo.tdl

SHA256 20cdc127d308087a02c91801ce8717deec15e9f41c9751d7c9cc8d352aef3884
MD5 6ce32ff5600a9534d49da84d8bc0c94b
SHA1 f052d0da83d8dcbc7a09d2b906d4a099e9c345e3
SHA512 64b93dcca646b2da8cdf62f17ef85fc16865962864cf460086f1d05d60e432ec4b6717db44a1bb95ee32b515b2e2dc0a5905af8cef4f6487c953d045caa8d364
TLSH
T12E11CC06F3DC10761EC02160AB52258BE228E34C62FA15417C89905F7356A6C6BEA96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MangoSpring.tdl

SHA256 393292c3efbbad20a00ca9145cc15bd79925446d13a5f222f550f14dd758578a
MD5 c7f50475194ba508da8f589320b4d559
SHA1 b6103f4c4bf3d3d42fbbd6a6f3efbdcac01aa9ee
SHA512 04fd6c99eaf54e6983c269d47418a895b42cc15fec421ecd37b82e2de14c5754b23fea5b32f6d89096e326840c25461caaa8d07cc8aeb9c8c60cdb48636891ad
TLSH
T19111C056F3E810F217D01561EF66508B85289388B2F74641B88D809F3356B7C7FA79A9
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Math2.org.tdl

SHA256 93bd61da492a339321067559d452c3f1e2dbfd0c691201e5f861f575900e9631
MD5 d5b4093dbd0a0d8a2b5c6df335786bf9
SHA1 d0fe86e6fde3ac73b22ba860c511cb8f6ccb7bc7
SHA512 9f9710021ef4c81b79e6e43f1ee995c5cb9fe11596bd10ce59a874cb49c76552fe7b0d8272d2f65cd15a28583902fcc50a7456e2b6b79ebcf6853b94fcc9cb8f
TLSH
T19911726573A860E61AC01B90BF626187E128E38811BA4150BDCD810EF706A3CABEE408
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathBin.net.tdl

SHA256 44955105710c94b8934a8358bd3cfc624e571e6007fe8023957585477d0b92d4
MD5 0216bb7fc6b084901d8c0d5453514689
SHA1 8ab043969eea88a4e3fe782e1dbb57bd1203d249
SHA512 58f7e6ba3d3586df45da71a8320ba76f8cbe33c60227ab27ab4cc368b2b2f944a619ccec3419165431e201177a8bba382aa4285d99f2645bfe41af81604477c7
TLSH
T1E521235472D490742ED127B1ABA47186A43CE30D11BA5550FC8E918EBB4693C37BF60D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathHelpBoards.tdl

SHA256 ff0a1702f671b3cad770c5aa088f4d31118c7f82a5928ae09fa94bd3c324a0cd
MD5 b04a12f2fdff1bdfe9a3837215ba2fec
SHA1 d312e3cfe9515e65b147c8a11e0cffff10b084ea
SHA512 88c679aaada17fb330b163746068b15c2c7a636e7bc6750c22f7a13d4ea294092f320aef2a3dd804e5004540c0ffe8928b5b13a1a21b7ed9ffcdd27d25fd82c9
TLSH
T1D9211145B69488641EC217A3ABA1348AA928D38C12FA5440B98F825EA30957C3BBF74D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathJax-LaTeX (base rules).tdl

SHA256 ea76a76d23271ca833c75180a4f880d621c7e1fc2cf9b4b4a16f5cbbfea0a005
MD5 3f67fb12b98983c6e74d2193d9253bc2
SHA1 4a8d1206513f7f9d72aac270e359f056d8788d4a
SHA512 3a74f3c0a28d8a374c9b7821b6c2956b4be056ff3cfb1fd90c2cab0472c75351c37620c56b7e3fe59340200cbb4d1e6813de80b8eb11b6f14d879b663c8f466d
SSDEEP 192:SAST/uKt4FMlLyKkcRogd0cZv+ML+u0t8+yAJvZ:Sx/ui4FMLKmPlhhLdg77
TLSH
T13972932E8FF7107C58420B125BD72A4158EDD3853B52E14A384E0FEE5346AB0B9F5B6B
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathJax-LaTeX (base vars).tdl

SHA256 2297942fe2e0a821429f9caa3402d17e575486671a6c5aa5bc59c0b8956ab63a
MD5 f6f4c55bcf21a328670f27cb85f3f641
SHA1 57e6c689b3b0b0e07ad5d8f3eb2876a9cc52c1b4
SHA512 ec394b26b09f6bbde5023418e569465fcea59a5964f7c6a9b93fc5118ad7beff81adf4f4c98015ea9a72bf3dd9358f5164efe0e2adff6e04d8609ee256389e45
TLSH
T12C211D09B39CABF51AC103A03E3912D2986DC39931B58101FD8EC14DB30892CA7EF94A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathJax-LaTeX.tdl

SHA256 e35ce216bd6738edcdcc4259b9161322384dba03cff79cbb2aa9ebb8171c84be
MD5 fb2d36c94bb49810ebb412cd21a30975
SHA1 58c3b9a37d833f19c6a96236645d947b94c81324
SHA512 04597adcc0e76ca8aa48d8e330a0550555edb1f51036716335747b1751a7a00b3307a62b9cfae31170b96aa0d11405fb3f5f228882b670f7c889a39bf1a90f44
TLSH
T17E11CE15739858A51AC12771AF6170C6902E929C22FB1001B989808EF74DD3C67EB509
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathJax-MathML (base rules).tdl

SHA256 e574079b6c2543afbcc5c2fae1fc0e4c1a6be655989ef2d7c4bf8127a1d71d32
MD5 36a67eccfc8a05678d938336b56869d2
SHA1 747118d2b4306b4d2e8dc2aca6833ad19951b249
SHA512 3acfaeb61ce5a80a34f232909c2de09d1d22524b9b22d18727322d52db684150828dffefc46c566276d6c2773766d695fb366819d51ed6061e3ce174e83b610f
TLSH
T11221532673C5B1B006C00780FE80A447DE1CD2BC77B9C111344AC05D371463C67AFA5A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathJax-MathML (base vars).tdl

SHA256 f482d3b4fd2c8b6cd462cfe99f9d8407895a3ee1aa73c24693f3dd07a010f3f1
MD5 6bc78fffd4c43a425e8843fa78a84365
SHA1 a454c29ce9151c735031015d89c746e5182d377c
SHA512 4c10bb60826b524056bea2f0b931dffbac135fa7b5fff14b771e3eb49e378b6ae1c47426a4b5893f0023c17bd401e4075f6be32568645c70f6db1a441684a1fd
TLSH
T161315212F3DD6BB845D002409D5A27AFDA2CD36C63BD90517C8DC09C3308B7CABAEA46
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathJax-MathML.tdl

SHA256 08d192dd24f3e5260eee52f02beaa66841ef195218b4afd056202636e68b0257
MD5 fee5d86c3385b0675c7b8856b5ae6698
SHA1 3bb90baae69c045c38ddfc7a1b6bb7aa7377c6ec
SHA512 06bdb9b36152b29118a66836123707da90786c30414623d83bf5c050ff0dce0cde9e2a693cb9e74decf50d4139c2efb757b708b0b33fb19aab95b304220e5974
TLSH
T160214415B3D564B80AC01750DB8470C7EB2EE2EC37BF9451744AC0AEB35963C27AFA56
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (Clipboard).tdl

SHA256 e2bdbed058ad4173c17b36e33c59f629a20306b33cfdb626eb9f4dd4101df1d1
MD5 4515bd9b9394ae4bbe4dd504f60924c4
SHA1 82268123286861576dda5e77e12cab0e5bda498f
SHA512 041c499082cde5af481481d2d1ad1821846c80cffd006fc9c41276d8fa06d33c1c25062c906d168d716729d749ac29d7d894e48bda37f8b31555a0344429b666
TLSH
T1CC318515F3EA90744AC207609AC6704BE61CD3EC2BFD8054BCC4C85EB35425C679F652
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (DataObject).tdl

SHA256 54eb6d8764b5df748de608d6d751efe0cf01d66dbe46c960f18c4a812f35dce6
MD5 686765cb3d410ed007edc937a0e9e85e
SHA1 613d18cad187906046d02756b9bc6803b71ef32c
SHA512 d733a1882458dbe3dc5103402c6e1945aa055bcf98345a86cbdf3f1f65fa1004070b0db96f35f04565edefe0cadba7ef3fe4f4f612011b6330f509e90569a7a9
TLSH
T10C316215F3D590B90AC00BD09A85A14BFA1CD3EC27FDD914B8C9C49E731821CA79E257
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (Maple).tdl

SHA256 1567245740e2ce802fb21543b587ee4e5f2541565be5672390417c78430f6066
MD5 6b1b4e4b6ddd0d55bfd566bee602eaf0
SHA1 a86d6c51a9de08854451ba55e7bd415efe551084
SHA512 453fec29f1f2d5dbb68112709fd86fe488e82a7106b70d7250b7e3be51637413bc3c5926619e3ef4fe01cfb93bfd8fe57476c7fce3ef74864fae039e5077b828
TLSH
T1C171CE2027F21D1486C827A5B7A67F1FF81AD314136ED0663FCEC69D3345098EACB991
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (Mathematica).tdl

SHA256 8e1f6049cb4b1e579aec1970090510beac60de345d21df605c7d4ab992cab8ae
MD5 a45f71ab1c45702593f03a288f82145d
SHA1 07217fc7256005496e8c21f39e0831333ffc02b9
SHA512 9122d7ad1fd36478cc241c85db02090172553af770af002966f7bad90e547a39d553d07741e35956cb7bfa3c44e5ec4329192cfd2e9be19b601ab6f8c188b95f
TLSH
T174314515B3D951B109C117609A95B1CBFE1DE29C27BE8024FC8EC44D370856C579FE66
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (base rules).tdl

SHA256 334a99eb89a2735f8ea155ae20595590a1ef4571f16e712aaec89819404f8efc
MD5 49f9b711c657dce2a8c10110d7710cfa
SHA1 96c5da24d5a2ae03cd0e8fc7a94a60d92695045e
SHA512 303413d32f274b110b591c57661c1cb1db8ff78a866a78707ba755f51bd9f125054b7585d534b4b33d930704b22b422446ecd5561d88714f149923a8ffd9074e
SSDEEP 768:JnlueswLRDaLMzOj428aXOClXUxmPzosQr1xjZi3:30wFDaLeZCpUxmPzosQr1w
TLSH
T1D3B3E125EDFB0D26C492432A77D35F0EEC00A3591315F2383EEDC2A9534934AD5AF66A
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (base vars).tdl

SHA256 3a8c5ab975493eca002da6b5dfd7a704b35bf05d701b32129cefad1e3887ffde
MD5 d642e693841bea36fa90c0be98621ae5
SHA1 19a2a643005b97f76b25326d9480deb07d08bbc2
SHA512 329b6245060774d75e6889adc281ba0290015206e43b3f9829a6d978c899c0b56274ee815e5dd5a8179a3eccc0f4723ed29dd428027a5f5df2c995aae36fb280
TLSH
T1DC512E15F28A726446E107D12BE82B1E8670D38C5378E55ABC8EC35D3709B2C53FEA5A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (m namespace).tdl

SHA256 86d462dc7b33e5320746a166750c3bc6318c925dd318f4b71d11f4512e30510c
MD5 ce2b23f5af8e83c2b14955759fd6dc93
SHA1 3d76e25b3da755361050c4a370aa2abf1a119666
SHA512 8065c6d2a1b89b5ad88cbac21b312f162bcc5c888199a0afc9f7f5a89714c37c4e4e67fa3905da08551406b4f8354cb7a4427902251ed62b1f0bad05312cafe3
TLSH
T1C9217422B3D590B82AD147A0DA847087FA1CD2EC27BD94127CC9C09E778426C575FA47
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (namespace attr).tdl

SHA256 a97ae722b83e91202cab5c472d20348e2c42799b0df435e1060d251cd2ec6ecc
MD5 490f1edef6ea86af6a10cd2a460cb98d
SHA1 82f74bb8e67b4a111f3d50941595f5b430a5df60
SHA512 37bcf39fd5a606d651e58580c2e0323ed9908425ba3bacf5e6ff5ae62553e6b73cb17154c3391e73ce69f7addda8409b36f7e13852dafb080cfb8b249470ecb3
TLSH
T1AB316215F3D5A0780BC15B60EE88754BE92CD2EC27BE9415B8C5C05EB34825C576F64B
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (no namespace).tdl

SHA256 7de7ec912ebae8f4740dd7d01591a307f54c768cfda513c9598b223017833bae
MD5 3e4795a4baf2085996444c68b059ca59
SHA1 a0c9c292365d4ec41b1c1724b49294f87307bcef
SHA512 a1ae9e86378d70d34a2e772d820dc0d848137a27b295ed0ed8fb7b4245183fef3766bff691e9ca2d1c81842705346f39479c81e21cc8a437ea543b2b5400935f
TLSH
T128212222B3D591781AC15B609E847087FA1CE2EC27BE941278C9C05E739121C979F657
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML2 M4M (base rules).tdl

SHA256 b274ce7e2076d86e69633d95c204a5383e67e80cb4b9e9edea999a622e2a448f
MD5 29d6b40c3b81db9ffff571bc0b0dc307
SHA1 3c5fc59c9a951daef0b535dab927c1b0819b4495
SHA512 6e9496ad8737992ee7027b2c675b52226c4d4757e5e8faab20064cfd07e9b6423d797bd5df21bd30bd150af4bae7138386775144676637c097b59f4c11c179b5
SSDEEP 96:HBUPgJRvwWO7CWtrnNhsoiv5vXQd8Eyv3HDYJZf:HS4JdwWO7CWtrLsoyVANcTYf
TLSH
T1CED14CB8E0DE11AEE8654169A4932F3FAC48D3904765F7FCAE8EC05441070A7E1CE739
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML2base.tdl

SHA256 2d4715ef355b3ffc2dc48a660fed62035a196a84ac2852b5516f2e8d8b3ae6d4
MD5 17f2fa4e861142b358618d702901c30f
SHA1 fcb852295d25888e93ff1d2c9016ea773a3f4deb
SHA512 ad74d5da750e56aadeea919fb9423663822e734393e512159c4b7d8c0ab14b53e2c185fc85f94f6735dfd204646cc77a7d7479d2d03981dd056939dd20a57e2b
TLSH
T14A11C015F3C8657616C11AE0FEC5A15BC82CE29C336A52023087C18EB70193C6B5BD8F
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML3 (Clipboard).tdl

SHA256 e227d59a48394e2c131c23685ca3fd67d09985a22975244319440d2066d7a754
MD5 8eb7a9140ab67e3511f3e01cfc505e03
SHA1 82546db28ee2101b9be4ab7b50b59dcbc5c46c56
SHA512 eff69fa617d5461b4f3657cf4f66f97d665795bd079b853ceaeeda6b6fa433c356f554bc51d216ed65e561e57354b7cb37ef6b4db5e2fcf7c0cfb09e619805c1
TLSH
T105317312F3EA90354AC117A0ADC3604BFA1DE3EC37BE80147C85C44DB34419C679F686
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML3 (m namespace).tdl

SHA256 d13bd9a1c3dff28fba378bac7b009118bd8e912f0c5a94f9233bd5a2dd6e7895
MD5 b30368070960070c235276c23e569e25
SHA1 a8ae41e831054f05455ad0f96a634bb81f1f48e6
SHA512 444474d07857f6e3fdfcbff6fb26f01dc2872ceda5a15f8ad4da75a75ee190168c66bbf3bbbd530e07094dad6bf63b9ac089d1f08673d98c15e464c1c2dc2aa0
TLSH
T1F3316222F3D990B829D013E0AD85B047FA1CD2EC377E941178CAC08D778869C9B5FA87
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML3 (namespace attr).tdl

SHA256 b55537abeba29974167683b7de08f799697f925fbb239d5797127bf230701274
MD5 56f0e5a504a8ef148baa843d046cd3de
SHA1 c740abe50365051dbd02e963fb9df6abea53715b
SHA512 3d00f7a72bf20699ebf3cef374a2c33030fd014d6527be1da8cc37250f299be7d908eb041c6bcc1b05df73b40cbec77340bd1b454b88475e85239b0ea06c4f48
TLSH
T1EA315012F3C9A0780AC057A0AD85B44BEA2CD2EC37AF901578C5C05EB74869C5B6F64B
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML3 (no namespace).tdl

SHA256 8cccb577865366f11cf7abffab53610fc4f808f4122d2c03bb0cfc01ea443934
MD5 c53b44d1dcde0bed78f17711d3c2e8bf
SHA1 6c48512a620f0a6dbc1759969a09966c315d5f48
SHA512 592b609273f103b411956d63929fc07f8d39dd5f5e342da6e6fa21e9fef4ecf5b15ccf8621e25188df8334239ad677acea77bd88efb7a65735c0ab8c3450b07f
TLSH
T1CC315422F3D9907819D05761AD85B447FA1CE2EC377E941178CAC04E738465C9B9FA87
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathML3 M4M (base rules).tdl

SHA256 ff4c62bf8bd412444080cffb85078f10284042ab79c43c7cb62a720f6c1d6527
MD5 6981d45eb43f6e9e85ec741a66a5fc05
SHA1 a5b410fd147ff73e471ec845b0ad4b3d379b485e
SHA512 fba7018637541de9bb007858f15a3953148c6e3d9be4a5057fac8cca875772489b598196b370d10f5250a688f6f83c37527279f254e888da81572b6a648b2076
TLSH
T1ED11D0AAA24F517081A65380CB818FDFFB4CB1CC5709FA20B96FD0E50686566C7CDB69
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathOverflow.tdl

SHA256 8b9a46f7f3e7dca6d3ec6fd616b6ac6e917bd532a93ee51293321bf05daaeed1
MD5 365d80d9f6174844df1f48b5fd814eaf
SHA1 550324e1dc1e81f626da80671497a2b0646400d0
SHA512 d673b05ccdccdb426dc4b39f24d66002c7de4f678aef586d071cbbb9df340285252d01b95cd943a45a1ef6c78bddae8842a9e45c43bfad974761f84a25a63da5
TLSH
T179215365328490652AC21F62ABA17186953CD38D12BA4100BC4E928EB70597C73FF21D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathPage.js

SHA256 97b44c11870050072c806032af25c052deb61bae47b21aa0ff1b7a727f02079a
MD5 34786b612a3934b0cb01afa73f0201d1
SHA1 ce51755d4b2eae60c85e84982b3a3cb8f3c8ac04
SHA512 bcce92cfc287006c35806adbfb24be0f759d9064ef0b017b299eb0f48e9531974ad8511833be4b0b0058caf3553d0f3baf1b4c47a5a3fa37bffa445d5887ffad
SSDEEP 384:WngFn19dp02XF+TsAn1VrXYFBsZL4w+a/+/:/Fn19RNAnYMB+a/8
TLSH
T10962E8251344363FC5DE72B3758F86E930739405EB82E808C5AFE9AC15A9D86B327E4D
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MathTypeLib.exe

IMPHASH ed3a241dac42a4a83addde7d49b9eadb
SHA256 2c225b75f49cb2ca166e9eff342a0f99f2d126d5b68b90ccccac102f443be6f1
MD5 ba0cc4ecf8c0928fd83d3e4b7de71d59
SHA1 efc56ece9f7730158c8ca43761d2e7ca2f07ab96
SHA512 a92eb84f7d43f69278c383ee8563a8ee088dc9be155e9b963613957216f5ec4a508a2aaa45bbac2dc456156fdeaa049cb46fe5955f191b90d010abb743325de8
SSDEEP 196608:EThKaEHExEXj+/LTblOWmsEXkodIzdtJV1HYz8NvqWKL/Pwv6lml2GL+:Yhp/ckodsrOgNi5LMwmAGL+
TLSH
T176476C03F3C3E172C8479733086B77396332D617A1679787A7A0DA68ADE32825F159D8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

c9:2f:df:62:11:ab:90:f1:1a:ea:30:5a:3c:ca:26:dc:78:e4:dc:da:8c:93:5e:a4:fb:46:72:24:ec:3e:ed:00:d9:e6:02:6c:00:95:e7:42:49:40:f4:f8:9c:27:23:3b

Digest Algorithm

sha384

PE Digests Matches

Trusted

Signing Certificate

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Chains

Feb 21, 2024

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Serial Number

0b:90:6c:f5:46:56:0e:2a:ce:4a:a1:79:e8:ff:36:ee

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2024 - Mar 16, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

1

Entry point

489664

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

StartServiceCtrlDispatcherA SetServiceStatus ReportEventA RegisterServiceCtrlHandlerA RegisterEventSourceA RegSetValueExA RegCreateKeyExA RegCloseKey GetUserNameW GetUserNameA DeregisterEventSource

kernel32

WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjects VirtualQuery VirtualProtect VirtualFree VirtualAlloc UnmapViewOfFile UnlockFileEx TryEnterCriticalSection TlsSetValue TlsGetValue TlsAlloc TerminateThread SystemTimeToFileTime SuspendThread Sleep SetUnhandledExceptionFilter SetThreadPriority SetLastError SetFileTime SetFilePointer SetFileAttributesW SetFileAttributesA SetEvent SetErrorMode SetEndOfFile SetCurrentDirectoryA SetConsoleCtrlHandler ResumeThread ResetEvent RemoveDirectoryW RemoveDirectoryA ReadProcessMemory ReadFile QueryPerformanceFrequency QueryPerformanceCounter PeekNamedPipe PeekConsoleInputA MultiByteToWideChar MoveFileW MapViewOfFile LockFileEx LoadLibraryW LoadLibraryA LeaveCriticalSection IsDBCSLeadByte InitializeCriticalSection HeapReAlloc HeapFree HeapCreate HeapCompact HeapAlloc GlobalMemoryStatusEx GetWindowsDirectoryA GetVolumePathNameW GetVersionExA GetUserDefaultLCID GetThreadTimes GetThreadPriority GetThreadContext GetTempPathW GetTempPathA GetSystemTimeAsFileTime GetSystemInfo GetSystemDirectoryW GetSystemDirectoryA GetSystemDefaultLCID GetStdHandle GetProcessTimes GetProcessHeap GetProcessAffinityMask GetProcAddress GetNumberOfConsoleInputEvents GetModuleHandleA GetModuleFileNameW GetModuleFileNameA GetLogicalDrives GetLocalTime GetLastError GetFullPathNameW GetFileType GetFileTime GetFileSize GetFileInformationByHandle GetFileAttributesW GetFileAttributesExW GetFileAttributesExA GetFileAttributesA GetEnvironmentVariableW GetEnvironmentVariableA GetDriveTypeW GetDiskFreeSpaceExW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCurrentDirectoryW GetCurrentDirectoryA GetCommandLineA FreeLibrary FormatMessageA FlushViewOfFile FlushFileBuffers FindNextFileW FindNextFileA FindFirstFileW FindFirstFileA FindClose ExitThread ExitProcess EnterCriticalSection DuplicateHandle DeleteFileW DeleteFileA DeleteCriticalSection CreateThread CreateProcessW CreateFileW CreateFileMappingW CreateFileA CreateEventA CreateDirectoryW CreateDirectoryA CloseHandle

wsock32

WSAGetLastError TransmitFile

user32

wvsprintfA MessageBoxA

winmm

timeEndPeriod timeBeginPeriod

psapi

QueryWorkingSet GetProcessMemoryInfo GetMappedFileNameA EnumProcessModules

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

Name

.text

Size

11.8MB

Virtual Size

11.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

8.0MB

Virtual Size

8.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.jidata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.jedata

Size

712KB

Virtual Size

716KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

848KB

Virtual Size

848KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.config

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$LOCALAPPDATA/Temp/mathtype.tmp/MentorMob.tdl

SHA256 7b3a934d20556c140f4aca55d2752db048641b7e08f0d53212840615b657485b
MD5 58c54d0e888f6a24bb99420c6b5c9874
SHA1 aff868f4bcb5c9c07eddaa8f1ace24599dab9e49
SHA512 6caef740252cc447c49bebb2c4403847845e407e7e606f9474026187e376e0e517b0c0655ca1c656da7e4783de60f369217b08742b566200cfd0b3396a4cc421
TLSH
T195112709F39B10B61FC11150AF521087D41893C8A1B704417889C55F33A6A7C2BA695D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Mind42.tdl

SHA256 68dff7f8e6a6f43cbd51f718da1635a5927d3f97b18ddc4601663400656633a2
MD5 0e043dd5bf65f746fe369f42447934b2
SHA1 06cc01206425cd6c16bf7d8786bfd586065e6209
SHA512 2aea98d8a98d898cd726bc3a9b3b552a59457963626b04bfddd0675b3f341ba91e1da9d3c6070cd58cdf7d910fcfb668dbc05d046fb3255f8a234d089bd5fb97
TLSH
T112110007F39C207316C03160AB5260DB8028D34972B704417889814F3396A3C2BAA96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Mobomath.tdl

SHA256 5edfa417bf8dbb6f11a15196161158670a37ee48e3dd48f58450675784f122a1
MD5 3e0ae1d507c07cac09e3abd92f1e8ad3
SHA1 ecb047f7f8bab53ee823498f4928a0a86ca05503
SHA512 0562295a7bd057634dccec5f1844bc9127ec633ee0ed1a53159965eadf9eaa7562d3f5ec0ee4aeaad9241211d7dc5360cf7fa482c6f861d379f3543511a1b31a
SSDEEP 96:SASPL/uidUPdeEzfrun3qSEogkdXwAg6OgNbgagegrg5gmgzUvg00gs41gNvgogH:SAST/uRVNfynaz5kxq6zNc3DsWbz5Owk
TLSH
T1D381AEA126E35D1852E423706BC22F2DDC5AE28C132DCE16BF9FC6F91341025DDAB999
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Moodle-TeX filter.tdl

SHA256 4f90eb0557ca3f2e7d4ca343b698bc30b59657c1503d864094235165c4cf3f1c
MD5 fcaf21351ad09fdb3bab24905436e999
SHA1 2c37d1edf9112af7d68c1595d6b6cfd210e70cc7
SHA512 69ce04f01f65c8bd3a04b5284480c8b944366f0cca5091fe1adf9b3f5f46ff4af63b13c54795acd6f2c93420fa83233c6b68affa819597ec659b5e0115f09409
TLSH
T172311145F288867209C34252BF7E22D6B494D3C801BA8D147C4F835E7319A6CEBFE799
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Mt Extra Tiger.ttf

SHA256 d73d3ce9c00ed7af2c57f5503b832571226c49600c255c9f7d5e1622a061338c
MD5 c4729fe8c84845818f57ae26e3ef5922
SHA1 e03736dc1675711b47cf81c34210fc885d9a48d3
SHA512 5ecd5b5355aba1e85b4fd26c9b216ba6adaf399cadba94a7386a1a5f43d7fb4203381399515ec2493bc238ad516d64ad83586646e6d416098b7d414b2e3833bf
SSDEEP 768:4RXG6HY/Hwj8GCvY77LvPC72gYj0Hg+V5TfeL9PQsmobhaeDn:wG6A+8GCvY77j98fg9PQsxlr
TLSH
T1DAF2E797E7EAB44BCF93153A9102542B9FE9EE243275C78E5ECD1AE453A0042BCF491C
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/My Big Campus.tdl

SHA256 137d7df1c30f1b7fadeed8903baedbbea4c639fb638866e010461456d68f4aac
MD5 8799a088ae58f72cdaa3cb77112829e5
SHA1 ebe5134e709fbd5183091b6d6789f640aeeff37a
SHA512 dc017a288b38582d7700d867df92c564ef19a5c546047c24dbdc203bd32e04651c9f926904abc4e09066427a94e52231aedde6c9d8c3e7c2076207b1d6522994
TLSH
T168110419F39821B216C11170AB521247D519930C31B70801BCC9D15F7391BBC2BE5DBD
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/MyiCourse.tdl

SHA256 74e938db39059613ae63818fe8be0bb6b3f6166b2e4104d777de7246bdab063f
MD5 362e3176111b9933da5fe0d1999c9989
SHA1 d9d26715565bf62bc48a82e23e2f94d54bc33ba4
SHA512 79bb7882abbde0d6f86f75ad3d7739ff406c26c863ba319665aba53901b8e16de307e66d1538e0ce08a5a53d5e3944cb2d00b00a4dca5041a7e8b8ebcf72e9f3
TLSH
T166112305F3D8507217C02170AF57129BC128930862B705417889D14F33A6E7CBFAA93E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Naiku.tdl

SHA256 2f626d41bce2e74415bae6fc806bfa7806f8ee11317728bdf6d46a262ad7393c
MD5 b3dab6df2088d0dfd0f205a11a2c9ab1
SHA1 906114b405b8d24fe794eba5ebf3769c65ff3321
SHA512 12f6808586d2f29f390d8fe2278185cc4e3f5e1f228fb40d801d33008a4a67e423026331309bc591b5fdea5c5f7333654f6f3431d4de7f8b16c343363ce2bb27
TLSH
T10A211055328490611EC61B627FA5228B943DD34D12BA4500F84E818E771557C37FF60E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Ning.tdl

SHA256 5953fe7594090ef3addbed448fac7256820ff2ab555241f0676c5292bbff786f
MD5 ac56867a4bc8e6190a219a7512bb706f
SHA1 475c5da5607f8d11671ffedd6f20a3efdeeccdfb
SHA512 fbdc2ee27877cf8d35ff95c88b3d50355224e89d0ac30d4d5b29382470fea991244be3e6e89e59d96842a2c0e5640052d9626fd1961f428d5947de7057482e25
TLSH
T15511E306F398107217C11151FFA2518B8528530862FB4401B8C9C45F3356A7C6BB6A79
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Notepag.es.tdl

SHA256 10cc016a86939b71c35c196bdce471af695a88ce726fb8893992a3ed26315948
MD5 bc49e6cb51bb9461037a9da53c69c461
SHA1 7a69171581e98fe1518a769dab81cfb18edccfce
SHA512 91689e3db768ee22d6b4dc573ddd3cc52da03487e7da194008ad503b2eaa3d13d9a0d940d458c684e8e079039eb564dd4a7f3adc5f7a31acaf913079ceb82230
TLSH
T1952142457288D4611EC69BA26FA43187543CE31D11F64100BC8E818E77095BC27FFA0E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Novachi.tdl

SHA256 8fa7946ae5bb03a37bf681b97f540d887053d203aa3a1ad92ec127a73d9f16d5
MD5 66be28af38cde9cf0250547ed7fb3eb1
SHA1 e8a91202b547eee58f556d16f39e3052b6b6fc00
SHA512 653b181b10b510a4ca3f4b18599272fb19ebb5e22a9f52858ab4c7787bcf855b37f8d19bb84c682ceecc5c5fa5d64f426ed050bbbf71383160b094badd5daf45
TLSH
T1AE11000EF39950762BC021A2EB72548F8028930C62B74401B889806F7396A3C2BAB969
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/NovellGroupWise.tdl

SHA256 647d285d4cc77ab87d5608ff34a983e3cce5350d5d66ab7bc376c52cc9ed2f69
MD5 41abab4b4d9404f22d8c2d5b2ba6efc7
SHA1 420c1cd50f6cef16937a596b32060db4d88fd162
SHA512 6efd16259c833cef52d467591f15b682079a42fc8bcff0e5fcaaa95d60e6ea9e7d36577e26b06924ec48b7d03d036a1a2fd547f2a759e0411721fa2eae8d35c4
TLSH
T193114406F3A8416307C415E0AF52508BC568939C22FB085178C5D08F3F92A3C7FB6619
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Nukeviet.tdl

SHA256 f422af169f0e0e80ab46144813eaf04d000187b21e87de9437cd3bbb9f2e7558
MD5 896e82679f4cae8417f87948600d1d8e
SHA1 b2d97453a699a29558441a35458270d815931887
SHA512 ac9a4c63330829eaa22c2bff1289af81a06e4108017955fd32adbcc632c66b115e2731ab65b3cacaac2995e2cf9256d4d926e3e3b327321d704e0114184c4d8c
TLSH
T146112306F7D814BA1EC02160BF62208BD12C930C22B75911BCC9D45F3356BAC2BFA96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Numbas.tdl

SHA256 bc1e6de2e58d68eff3e61a6dc5aefcc5c50f51e753f5730255b460361fd1a493
MD5 5eb2a00ed48e5ac770dfe7650b194028
SHA1 be1022d226413a44fcf373ece5620ee37ea05da3
SHA512 206fff4257035a3c343a883848f4a8659c65f9ec82a7850edb829c0be63bad238d91862673172eb5047d6c78294b26a86408f1da311632874887bf030dcdfed3
TLSH
T1CC210F49728544641AC237A3AB652247953DE30C22F78511FC4F818E7B1B53C67FB64E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Nuvvo.tdl

SHA256 9821e7f5a6714e5a7c3958d0d7f5be521308fe44f6bbc659b0c88cccef4b5b43
MD5 91bb85cadb1eedfd390922ab09fea0a7
SHA1 9463840d4492d7cfde39fbca9c0d95aef45be15a
SHA512 57ac919eea6d8f081be7d0aab1d28aa6a1d104038b91e89a4df8c45cc515fc29ae38ec988eea190c8be2394a2539a20a2e7eed977d5b5a122bf01a041bcd8186
TLSH
T13A211409B358126525C02B916B7612479438D348137641147D4D935E774A73CDBFE54C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/OER Commons.tdl

SHA256 2696d706a9e51bfc1e2b189a0b21044434157f501d9c8762e00a8bfb0d422aab
MD5 ddffd3648df6e1c49b26548a86d7d94b
SHA1 32876a0339ee3617683d7f28cde5ce3143eeadad
SHA512 c1951af11e7e321c3f15efe29aae58f2918521cc2a74db040b68dcbd43a47ed6bd5a34affd0e37f3c113d08eeb2eb662f211716d09b822039ff2fddc888d9bf3
SSDEEP 192:zAST/uBdQt4FMlLyKkcRogd0cZv+ML+u0t8+yAJvZ:zx/uQ4FMLKmPlhhLdg77
TLSH
T14772B42E9FF7107C18420B125BD72A4158EDD3813B52E14A384E0FEE5346AB0B9F5B6B
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/OERPUB.tdl

SHA256 8329f14ede7b3d6cb3147c256533f1ac722ec9997f719d157600467a8a386d9b
MD5 da26b7511b80fd4c44f47fe188442cc6
SHA1 d5290e6914217dac82a34e408dfb4119f7fce51f
SHA512 447b0144347ef5d5f056597bf97787860fd28118b6ee22ea05314223604231b0c6762a5cbdfbd9a956cb8799219427cb21ed5bd0f420b9b34583fefc65ca7dde
TLSH
T1CC213185B29D557125C5179277A41246E138F30C21B2C610BC8F810E7B0687CB7FF11E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/ORExchange.tdl

SHA256 4c40f51d13feff4e2accb9b9c7210957261894f679c68c826ce1d5cc6270f16a
MD5 ef523b9340d6847f58096ff4420d7ef7
SHA1 3565a049002d072ced6cd2c5e2f05ea9482a1bd7
SHA512 2af35839dd56276ff120b46dd4b882697ca518dae00b6a94bd777e2bf6864b17cb35d55b3b3c93c2e9a2f64c0b3f6e3ac00d885b1c46a3563cf11b4bbe3a69ed
SSDEEP 96:9FASPL/uihqc+xYrFzy0tZZAZ8ZbBhZZRZ+CX4+N0iC4IzhRv4V8HLbXEfk6UeEK:9FAST/uUrFnWitTXZ+F+4x7YfkhenP
TLSH
T1DA028028CBFA557028C20F42579BB699B159C2C806D1C355FD0D4BEFA3460AD2AF2B76
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Obsurvey.tdl

SHA256 756e543739f853d5b4f9b90148a1297d1a16a9abbaa5469f94199d0b7c6537e6
MD5 d638495eb70abc1b13abaa0149635e87
SHA1 d9f424d58c6c6aff73dc5395df47b0ea2deaf0d6
SHA512 cffee60792ad700be2262ca73d5e8e749058b66b6746e2da432350cf0354fe3e7beb7f474cd4abf22443a454f93f37cc9bbbf84b072e73a778715eec30923245
TLSH
T12F11040AF398116617C01152AB72618BC328634863BA18117889C45F775667C6BDF779
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/OmniUpdate.tdl

SHA256 125396375952e4b5c02228bacd551cd8fdba92709899dbbcac2b97bcc9933a93
MD5 e804d7a21118b121747fa8faaecb081d
SHA1 bf7d5f3e83d582e1f53c2e48b99db6b7934cdb2e
SHA512 842c6d0ccb48ed6e5ffc46874412aea523c77fabeb2b9b45294e14794420c81af550a60b9baa8a3b618df971833380ff98a4701ca58abe86e431d58f42fb9aeb
TLSH
T108110406F398557316C03261AB52108B8529530C72BB05127889C19F33A7B7C7B9D65D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Open Text FirstClass.tdl

SHA256 6acf1e1a7760c754d65af0c021e0218bbe94291bb64f346fe926ce8d99920943
MD5 a25ecabbd9338e6a3f5c15cb80c4b0f8
SHA1 b096af832fa3c9aa7c2379b9052f06aa8c83e16b
SHA512 182505b9e31e455e0f22b2ea7ee54b26c091d676cffa619af56a21c47295718934544704d1bc7444ea498215e00ec8cf3cfcf302d94cbb23af5390ee968ddb65
TLSH
T10A11D445F79813E69BC1E1A1BB511097812C974CA2BB14037CCDC45F3359E7C6B9692F
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Open Text Social Workplace.tdl

SHA256 6e89582d2f59f55ea833f8089d519335fcefea334df8f9e0bf6e80e821536137
MD5 925d29d0e67195bc4c11dd5db2425063
SHA1 0889db6d99f471596597ef91eb524e6a92e4aefb
SHA512 39952777e2e4613f562a88275b79ca9d5e821f21bab701a07fc95a4d4cadb293f4ca376f9109cce29fb73dccbb175dad3fc0b0df86289c59086db958f3bcf1e4
TLSH
T143111807F3D433E656C521907B631257813CA34A52BB144378CDD40F33D5EACABA651E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/OpenStudy.tdl

SHA256 53c2ca7321e8ade7ae86a7a25d165bf2ce2892e330536d790682135fe7f8f97e
MD5 ecba76035610ddbe6123293c4ee3e6a9
SHA1 b75c8645915d961e5643eac6a1876d36ef079a50
SHA512 b72205a20cadd3b18f42075a676a52e88cd6353d3dd002eb96ce2fd0a0772f4ddb120680d995e47bb355f29ece6a91fa14446955cf7b65768604c55aad1bd8d9
TLSH
T1CB2137057294E5A217811762ABD020D7943CE30E12B35503B88E808F6711A7C77FF50E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/OpenTrack.tdl

SHA256 48e4b3ce2e82d5480be8c73320eafae5ee4bb6aab997430f26f6973249174ea4
MD5 f115943241cd471c10a6c7d4953dc4e1
SHA1 dc85e45b4168fa5a8d8c48e04a48b0cf01ccbc59
SHA512 eeb63876bffd4552b40320cd512c022ce949a6a2a9edcac387dc5719873a122f91a95299c6dd857bb5a146b92ed3b1191a4d37d5d5af4567bc61ad6555281393
SSDEEP 192:TAST/uuddt4FMlLyKkcRogd0cZv+ML+u0t8+yAJvZ:Tx/u64FMLKmPlhhLdg77
TLSH
T11F72B42E9FF7107C18420B125BD72A4158EDD7813B52E14A384E0FEE5346AB0B9F5B6B
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Outlook Express.tdl

SHA256 67ebb697b175c155be9fde78cca53dc9de1e6668eecad24d54fbbc223bf6348f
MD5 9df91c07c73cbeb865710eda444f49ae
SHA1 3a572853691487e023b058058ea25e403400c258
SHA512 df11b394fcec9689db84e716f4062a376723649e653e6552fd276d14daa9db21c1f198a8913d5c5a458305e92d2bcd25f64ce8b29db0c7713f65880e15be48c8
TLSH
T1C5114405F394516217C12152AF51B0CB952AA24C33B704837889C1AF335263CAFFE55D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Outlook.com.tdl

SHA256 a4ffe02ea57da678bc3b39f90a49208304dbaee04e0936419114d7c08f252a17
MD5 e1a1e874b7a19e3ddd35215e5c501c79
SHA1 b1a8e8e3baa404985174384165af521f895dbf87
SHA512 1fecf90e5e121d26ca17b831ddd24ad7e6020db88d1149b63e55b713d0a3d5521b08d0542d763ad4bd94cea2c2dec568bc647570f2ce308c4945cf1888b378de
TLSH
T1E7110405F39C117626D01160AF5250C7D129930872B756817889C56F7356A3C6FAE9BE
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Outlook.tdl

SHA256 4e1026516db186c75f9e52b6421f31d9740ad2d6481b9619481608a11e2c7dd5
MD5 814ced4ee45fe1be2c84b8b927988f70
SHA1 9e89007aee6a43da9bf3af439beb9005481e1ff1
SHA512 1368a9a022058935676dac48624ee494f473097b8244db3766978e1bbc37da067a21412e867526a61cc644c761076438a74462265ebb372345aa27b321b771b3
TLSH
T181112306F398117617C12261AF92A0CBD229E30C73F715427C89C56F3356A3C6FAE92D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/PBworks.tdl

SHA256 43e801a5863563f6de833f99782d58e18436eb346777fe57b525060d026e7990
MD5 b34b45147dd995fcaaad6240375e7cdd
SHA1 7fecd80fef797f8323f146e5067fdf5ee8e730f4
SHA512 f4d6278191fb6d66617e9677bd25b481dc48be51315cae527b383c8ef76726a730c3c88b4adfc6b46f695d8d523af283e84001828755a5a760c08167b0ea7243
TLSH
T183116809B39D166216C53B517BA5128BC12C931C12BA8710FC8D414EB786E7CDFFA50D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/PHForum.tdl

SHA256 83fcbd9a8da2b2f72555c6b1ad14b50f748108df5d27a87644ea8d9dd85d186d
MD5 2be9c89a501aef1139d40dcf380f2f66
SHA1 5dc74f533afeaff39acb304c2e540588fafa0286
SHA512 55102cd91f7c8daf65a33f11cef022532489c1131034664d4c54509f712b8f2a12949c7d54f27cdbcc32d0c33fb2b220d1ba492b8242a3360cd14a7266dfa428
TLSH
T1E911160AF794133307C13261EE622457C624A33D73F64511788AC16FF755E2C2FA699D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/PMathML.xsl

SHA256 aaa737652d8ce641c8fb8863c9cd82fd271e6c089e413daea3b4e6106edc0384
MD5 48f35f91a1ff81fcaed4088bc79fc228
SHA1 925b9c354157fe331dd362bc7c27b0f9f5a19d43
SHA512 5bb11bc2f63b288d4c7cb5920bb21aaf4d23d33d3dd4940277988d20bd0081e1545c1829cb74572ca6c51b8645ef29664fdeb7c8fbb53f6d5980644658d065c0
SSDEEP 192:Xb6OLFiQbB0k+fOIIcGMqeKaLqEhEOKKbyp9/RqoRD7TY+wDlWYwmfYPuP92:3LsQt0hf8cLqEhEOKcyp9/7R8DBAif2
TLSH
T1CAA2F798E189DF318735337DE49E6184F62141AB6731AB61F0CC62F7237D94402BBA6E
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/PMathMLCSS.xsl

SHA256 da0b4a7f684a96f35214bcd7d0e74d6114b69eeb0a5136c44232180c70e09489
MD5 7c627c877d7506101dc47a61010242f3
SHA1 a4bd1e84fa2012f8db6acc7492c6c87edd821baf
SHA512 8bbb60a4f315a94f68d031e7e2aac84cbd3b266f4d3faae19ce718b2f65f4cf0a9b80edfd5eed1c1e98da319a2f4ec12e6a3f1a25831e14bdd212f54cdb0d2c4
SSDEEP 768:5+JbpRk/dcmFaAW2y13zQq266WGoCMeO5RK:8JbpRk/dcmFad2y13zQq266WGoCMeO5s
TLSH
T135B244E0D653DF374732E1FED1A69290E572409A8F245253F0DDA37B21CAC2816F726A
MD5 SHA1 SHA512 SSDEEP TLSH

polyglot

$LOCALAPPDATA/Temp/mathtype.tmp/PYCC.pf

SHA256 48122294b5c08c69b7fe1db28904969dcb6edc9aa5076e3f8768bf48b76204d0
MD5 24b9dee2469f9cc8ec39d5bdb3901500
SHA1 4f7eed05b8f0eea7bcdc8f8f7aaeb1925ce7b144
SHA512 d23ce2623de400216d249602486f21f66398b75196e80e447143d058a07438919a78ae0ed2ddf8e80d20bd70a635d51c9fb300e9f08a4751e00cd21883b88693
SSDEEP 6144:nJleRNRyAnAqNaADEJHeeeeevoAuaiqwV6sg0pUjRVgYgI:nJleRNRpN0j3qhjRC9I
TLSH
T16D44D015FDA1D6B6D3EBD47996C252B0D6F172349922623FF041C1E3B886BA4708F872
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Pathwright.tdl

SHA256 9dcc04abc6d320e65d8f97e57b3994de57345e1d1fa20fc697f38646d384a031
MD5 53af81c8e8567fdd3500369a3749c2d2
SHA1 fe3071d67683cb05418b23f25e8128da263beea7
SHA512 e88e9949d7e73e8f2826d0e4bc0f61887393f0b32ddc53971c67c4e27b3c176efd2bf0a43e50f6f2b2f8c82e3c20550b6e7e7a269ba75f373f078a9f6c7cfe24
TLSH
T1A7110019F3D810721AC01662EF52149B962CA30966B74441B8CDC04F7397A3C2FEAD2D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Penzu.tdl

SHA256 5e0aac2fe14abd11ccd7767e7a8f8df572e3704205b4c02616fa4b327e0b9c8a
MD5 d2eff2d4990b3373cd181e48bdb18d11
SHA1 978b1ffeb1275d6b326604aec15dff24193931aa
SHA512 583f49cde091bdc5885a30e46b8c745a90697e30c8dc09e8d07aa1d0ee6811c0a84c887f4d361ff6d09dd9c58434dda0764f3cccaa96d710f4951bc90757f15c
TLSH
T16C11E305F399117217C12560AFA2198BD228931872BB05017889C15F7396B7C6BAAD6D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Piazza.tdl

SHA256 ff3e5c34556aca6d0ffcbccebe309b094d7671d5736af3aa5208811a24b6e1e3
MD5 ae27401d4afff2d99dbb389e3db5c229
SHA1 7c637d5bc092aff59698da8c2981650bb251dd3e
SHA512 871233426914c9715c5dee0c4d62572f59ab06ac99c32e3cebfdbf7e9ad6b8b33d0ea10448133771c590587ec66fb865cbaa3cd1efb7906d5bf727b2e91dfa15
TLSH
T1C321354972C490711AC217626B692247A63DE30C11F64511BC4FC28EBB1957CB3FF91F
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Plain TeX.tdl

SHA256 600dc73592a6e9e6b944526c02c9cdabfc3217a528fde2415cff3dce2f62f3b5
MD5 1b47d18a7e634684f900a123f370cc7a
SHA1 1f31b7605011b61c86b26963e53f8b5b91cb512f
SHA512 8bb92bc0509d36052dbca35bb76a776a3ad568b0fe0d82e1d9c7873ee4cee04129d8dd97e2a71897e902ee04a10f94634611ebf39bc1ffbd97cbc98b7468a896
SSDEEP 384:C1x/ueKylifz+M0WW9Xrq/W+J6aD3+qIG78zsN3NaVtT+hhwVt9u2bZJefjQS7Ey:C1eyaDyMc7r7zbJTviYR87TXlIpO
TLSH
T12B0300281DF310B0A84307499BD36E457889C3EC5346C64B75DE07EA33897AC6DF6A6B
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Poll Everywhere.tdl

SHA256 db1dc7e7b8d58cfffbc11873a0135aad1a0569602707b8c1a682903e2e975a3d
MD5 1e83ba4736b8f5f9f51a3967f954b020
SHA1 f0f7ec5b1eef2317871f40732ba79f614f4ab992
SHA512 4e135501088cfcf1d9ffa898723554eb6028fe50a30af5e5521916e8ec408fdec380cf6672dce42846fe70650728237cf78d2610acf71a533186f50a14f24133
TLSH
T1AE21F048B35D5A711AC55691BB7A6247D254D38D11FE9011BC89820DB348D7CABFEA0C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Pollmo.tdl

SHA256 1f52c517c13b5c04e02610f914a515f92e6c0135c2b9e37043987e8d36c5dd24
MD5 e188cfa80c5db31aa074a446a08a8cd5
SHA1 5d806ad8ac4edbfa70241d290f83a9f585b37c05
SHA512 d5d60723bc9ebedf396542283a2376177cbe72cb6b2a8aae05976637d344ac3d8412ca0ab76efec76fc50d069becad5f93de60e4f53a586f0558675e8618093f
TLSH
T17E11E346F3D8206217C17351EF92658B922CD30C72FB44037889C55F7396A7C6BEA91D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Postagon.tdl

SHA256 46a41ef7f4e48f125cd9661cf89911a2fba1e4da0c2ba23435afdae338414de3
MD5 c9c4660763b1c34417baa22626740655
SHA1 f7c7f55b1d80bb28b9584fb8e7772531cd251fa3
SHA512 1b3b15fa988e0447de69e02538fa837c8467f0e171e5dbf2758687f8d361c4a23a4ac52fcd0f9df323f3b8ce4915d81190d16c722e482c42d92695e1cb30a901
TLSH
T1D7111606FB98143217C01570AE52248B9238A34C72FA40617C4AD12F7357A2C97AEB6D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Presentation MathML input (chars).tdl

SHA256 877c92909dd6ad1380376b648e3de6f9006a535ae6378798cab37e7eab694a31
MD5 b195c4b79ed7a1163025c8a46512109d
SHA1 ec37cbc6b9bce7c37bc86934871a42f6823b5d25
SHA512 d3011c492dae2d8001279d7ff7775b12870894e95cd1af36f0d6c4f14f1c256e4be9a12cefa997905a7bed9daa9074d1c1aaa15932da7c094d70e901690187eb
SSDEEP 1536:qpkkecNqHNlSQ7YOQQraUp0IVM0Jmt7HvVfW:3NlSQ8OQQraUp0IVM0Jmt7HvVfW
TLSH
T19F2404A083F1814294B49354D1FB8A53E892F2753FA5483CE96C7C9D3B86E8E21E5F53
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Presentation MathML input.tdl

SHA256 0b155fdd08c91ec6219d51b39b3415ff4b8cd9f0a2b4e3aac2daa0829799c862
MD5 4ca343274d55f6ba9b02bb286f30d12d
SHA1 37ce797bf6d6bdfc487cb1d1660e757e60731d9f
SHA512 446f05dc379d2196874b1331400d64fa1c29cc2c886f39f33539f712d219bedd7870f1691cd2306ad928fbe8452248b8fbe6bffb91a7c0a24e43bab4f1fbfa10
SSDEEP 3072:f+h8TwZUAPlu+PR3gzvKH5qz11Tn8S4oXBl3h29m+zXs:fnTwluJ
TLSH
T1F9B37330C0E109026CF1636786F7A32ADCD364B8ABD7463C7A1CB1BA359997C51B4E27
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Prezi.tdl

SHA256 9a4ad4c3be87d83f98709da2cadf1e50cc3391393b67c9b14a6fd3d64ae05c84
MD5 ffdb5ca2f97e1b683c1519b8fdea72aa
SHA1 6c757e553ed73a4ef61085d7ce7ef3e2f2cbe6c1
SHA512 1b12614213dd4bd8c61a2184ed454e4d1c2cd832251a333a49799711ca3caca0241865287a35d6d87c67711b01a1e18a3b31ae32279ddb381e25376a9ff7cf73
TLSH
T1EA71CF1D6BF0A0BED5D120EF5B76A8F19548071462DAD841B79F8A1DE310AFC4BFC426
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/ProProfs.tdl

SHA256 0cb32cd4e455def5ac307f560dab995936dad4fe5ed496f5c557112c54cea580
MD5 3faf23cc09e0dfdb499b85fea18dbc6b
SHA1 ceddcf13e4359a1ee6afc88ac2c471e417a42bd7
SHA512 57d083d52a36a11bfd15da2bf89348bf1027a5348ff1725e2dd072dbbb0f7c5b02fe3bbd269fea1de062d5029b5f48630f88e302efcec7a03433bdb4dd855dd9
TLSH
T1A011C00AF3D8106217D16251BB53308B9628930C62BB4501788A809F3357B6C6BB6969
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/ProofWiki.tdl

SHA256 546691038c971b042793787b763bfdf1276c839125a01833524a45f4ddf395d1
MD5 325689c89a8ed44ad521f0c766bbfdb6
SHA1 119e5191cbb2ddeb846fec4a567f07b15a5c9ba9
SHA512 5fd0dc94d983ab847d9d5fb1f0fd1bf07239aee04b20cd266a0cdb061ed8574f60707b8746ed1c5c846d9d612f1c0315fdeb302e91ed1aecd3fd8fc093513ece
TLSH
T15841211471C2E67119CA07521B96708AB22CD28C127BC500B80F938E77554BC23FBB4A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Purplemath.tdl

SHA256 5158cc01510c3056e1c1080484e5903c07b46ca417c57c505b588d264ea8089e
MD5 354cb4db993088ec72f54978f1991602
SHA1 3efb5b340ae8bac4d845a2b577816da3781904a6
SHA512 4c69e2afc9f65d16a63331b5f890c211fd40e827ee68a4af59eee19684bca6e2890c51216f9d0d8d640bd0f163bf4552154e75f25c30cfef27461b47436bc418
TLSH
T15C21124EB3A9457209C016A27B79138BD458939812FAC112BC4D921E734D62C9FFE74C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Question Writer HTML5.tdl

SHA256 654e82a9dd63b3eafecbc23e0a07e479857ba33b9da731d66e9292f72277f697
MD5 e4823283e30dce81744a99a0d8c38e6e
SHA1 10e211a5502da270f865b2cb5de3434ff42c5399
SHA512 7aa031b255caf15a21492ece9861eb2f59fe9dd33d9d4b876b4942553bd380c539072580f3b0ead79e48aa6dc7e0b282e1e62fdc32fa7da65b5967f969a1e1b6
TLSH
T1C9212422B2C440B129D316A17FA46197A43CB31D21B68551784ED04EB706A7C2BFF15D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Quia Web.tdl

SHA256 6b37919f248fc992f9cf95755a0d530d91edb72a51f8111f4dedf12cf822bb64
MD5 3ce0e09b0ddb519ce70ff888e736a69f
SHA1 b0cac52871dd314c0a7a89e1f19f570402b87168
SHA512 1d9ec61a42a071b6719d154c1a39d8d45b7bd387e677cb597489d1b32fefac23a6df088cc903003dc93a2e72232a45b2d8f6dcdc0073e786f1a07c91269bae75
TLSH
T1F4111205B3BF217216C01690AB6953DB842ED34C52B9D510BC8D414F7346A7C9BFE51D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Quora.tdl

SHA256 861d88d45ca60f06ec2e50dcbcaff39f8c0bfe4fdff31ade9a425b7c67cf052d
MD5 ab7d362aa902b7ef84462a558d94c816
SHA1 6141681e8719c7c218d28edb4150e71276f29ea0
SHA512 7cffd86e66ca06fd5d7fb87a3362e3fba52f1bb31b59e05cc1120cb7b6db5b6acdbc8b28364bb05a5a209a9915b28d83adb9b495f82b880847a13269dd6c2730
TLSH
T1C611420A738E54621AC017516B69125B8628D34C23B69120BD8D910E774A72CABFA40C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Qute.tdl

SHA256 4aee97fd91e724d08643d142063ea834c964c7bc6b6dd36867134ce60d4cde1e
MD5 cea2a9a7fa0e7e04199f44a0910bb9dd
SHA1 00ae624b61740ce24943330a41849b8c7abb7265
SHA512 2bfc4048b02c34d8b92b588eca13ed3866e436e87b378a3cbdb8fcc71f7bb3bd30cc83fc3d960b857aa0b6c8c9b1fffcfbcb088499fc2476ea60de47330e7b60
TLSH
T1FB218405728484721AC21B62ABA42287943DD30D12BA4600BC4FC18F771657C3BFF60E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/RCampus.tdl

SHA256 1d14eb94d5224f216862544873ec7274026994aaac9f62d503f4d2cbef991940
MD5 2b70c2f34d2c563e9a1c8b4457422070
SHA1 93b13fa1a54abe047524cbff2097d2a904bea5a0
SHA512 676f60ca3ad74ea04e70420aa1b48731fef266d4e7ff956d0736483a7ae62fe1aaab95291ccc93534e499cf2b250046464dfe25b57f42dce60752d867a0a8c07
TLSH
T17A11C015F39D607327C22160BB52158BC138970862BB4901FCC9D25F73D6B7C6BAA96A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/RStudio.tdl

SHA256 81749a882b1603859fd2cf1122ed092c7cc9d1ca16fb9d238d80e04e9c303e40
MD5 3f514bb9d93f2564021462cfef75c040
SHA1 8f5563913fac5f94b0dbe46df6a6570572896265
SHA512 7fe54c9f4de70dcd100c0e5f1cd6f46a7a5df966a353e091c1396506634ece13b92997800b9f503b986abb1e49e861a7ee023b5f48d7a87c61be4b9e5c89f23a
TLSH
T18E21104676C894651AC11B627BA42287A43CD30D52BA4511FC8E924F770963C67FFA0E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Ruzuku.tdl

SHA256 e585c40718e3499c95e3e1339f07fe0cce97e207b1a5f8d1cc9b810819a64fc9
MD5 a9f858b417677bbf751d12611c1bbbc6
SHA1 dfaf7c7854249431261dd00acf0516cea07514d2
SHA512 4dc409234d46f68accfa905c7e4ebaa9c22637f11aa2a0751a892a8556c5bb4f9986dabda16c01c5f7c9c22b6e4f2daadbcec39e737cffeae89280259ee1b546
TLSH
T186110407F3F8167217C02161AB52119FA02C531863FF24017889C15F33566BC6BD955A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/S.O.S Math.tdl

SHA256 02357dd590e2d3dd202450716a3dbd3683734ef2b9c5dc24a3c3725931dda3f5
MD5 ccbbce5b6686d891436fb190a5eb570d
SHA1 3fbd57842018813cb9f4d0cbd8f468e0be7b3d07
SHA512 36d34c987eeaec0526f5937258e806f33d8128c8a0bc617cf396e7abb2628119040c25b7b6994733673761c20911eac190a8fa7bdf410b93a93d597a0cddce43
TLSH
T18C211104B25C53B60AC51B90AB7922478038A31852BA4720FC8D454FB345A7CA7FFA0C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Scholarpedia.tdl

SHA256 14ae9a13f11780d1ac030e60f2ddbd975a9927e2e49eb3aaef848306011f45a9
MD5 3f5a4dbc47d29b9001b4465c3b5877b0
SHA1 94ac37c75bc214221bb78399d31bfc5bdffa236c
SHA512 f56b1d5ec95c0f74db535f0a3533a53520dc33d348468c0bccc31272909763eed0676f22e890e9f4b75e61160b8955fd9892527513abac0e6fc6d97888f7c24b
TLSH
T13C414201B2C2A6712E4607935BD6708AF12CE29C1277D410740FD39E77419BC23FBB4A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/SchoolFusion.tdl

SHA256 f3b1ece3b4755596a524c60cb463fdfa45567d93203332a9bf5aaa3be9028fc8
MD5 189a4e6aab6353e95f70ba2cacac45f3
SHA1 58a7ea4c8d6a86bcf54c3d22110d1cb33167dbe6
SHA512 e26e292569630d8e24cb82f99bf9066969ab1ec0f2ab53ed16f62160499c6ef06589962527ecc3a88d4788a20bff86eb85510a5d25fff008a80d613dd7634b41
TLSH
T12E11D006F3D810721BCD2251AB62109B803D539872B74441788EC06F775AA3C5BD5919
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Schoology.tdl

SHA256 285dc56e9dd62542f7d649fac5987720ba7b0b7eba8c80cce47476f3e741c5b4
MD5 dfbe58eff8954b57dc4ca33b8d66e2f3
SHA1 a2ba444c21473d1d487a69c74e2749026bba5c59
SHA512 8b19e486975760646da9fc93971e87ae4bdcd9eadd033cf8d37a0b2fef4dc9c17a01a2aa0bd77a864bb3357e83a57b84e0411d93d9e3c63fb96dafb34724b45b
TLSH
T1B211000AF7EC10731BC51150AF62519B8028A35C62B70402B88EC09F735AB3C2BEF969
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Scribblar.tdl

SHA256 71acda6a943225f921ab251b66b04549f0faf34ed7241cebfa87c066bea23eb3
MD5 5e0d9b36bd19a4e026a01800b7337c73
SHA1 e74cdfc79ccf4ae18223acb4d81df895a2293798
SHA512 f73d882d804490cccbb4c8254dcb6d237ba14d6f53653d15c56ddecd681d6d58e6876e24e7c586ece59a1a98de092be25ef90492153e8cdb2b3e480617dceb7b
TLSH
T175113289F39C25621AC81A527BEB564FC02C930C12B6C610BC8E814F7345A3CDFFA50C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/SiS Survey.tdl

SHA256 5124f5a10b7675b1d573dd630a90e40a7590f79019a51cc6bf2bcf618b0c0f0c
MD5 ade1e6147e1b9e72780ca30f3ce26d12
SHA1 dc0eb56a6d6cbb45b7f12cc85d04e0bf8fba0e31
SHA512 280fc221f5b7cfa5d009034fe484a473de102a4a4182483fef9700d9d1b103df6e9cb9050600b55e55a8920d3860ce7ca0253446bec370463749edb4e18ce462
TLSH
T161110446F39D21A21BC51111EF7261878128630863BE5801B889C65F735967C2BBF629
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Sidevibe.tdl

SHA256 43f1b5e2a4306d20128f5fd4d97a0cab832c786706b1eef8f114b13e83833e7a
MD5 296945f2a4eaccbd516acbbf3d99bffa
SHA1 1a4ab04dff09d3c98483a9e0c2692fb3d47f765c
SHA512 58b2c716fdafe7a825a8aae624525285b35c8711518ed71dc25614a7603713d90ee1fbcd9474addb71a5adddd25cfeb812b396b5b1b1e869c84c637196064132
TLSH
T12D110007F39910F216C45162BF5320CB8129931862B704417889C5EF3796A7C6BE69A9
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/SimpleBooklet.tdl

SHA256 6c0dbc50b2c825b7bbbbaeed2681c1f17f89777e7befc7be3f032a2becffe0bf
MD5 ce9ecb347b018ec9be3a397baa5b4ec4
SHA1 d577d2331e01b44b4b56376d2b0aa3f631492f8a
SHA512 7c8535c402699260d510d8d5b96ec639b5a6f032a5346d463211cd594c6752cdaa3b1333b0fbe152924c457eef67e425d543863922d72d6c2386ae94bfe9db16
TLSH
T15D110006F39814731BCC5570EF57A19B8428A31D72B75801788D815F3396A7C2BE697E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Skillshare.tdl

SHA256 aacc390cb639954cd323a1d94011882064e5c8265bcbb92f70b262b32f2e2c24
MD5 507ba6c6d324fe33e00c63ee7a41fb76
SHA1 788ffc85780198bb4f5e4c55f643089e91da8b02
SHA512 b82b9a4e493e51c034befc9ebe6e50c1e95460df9c561a5b0a23ff5f5cf14738a0667905143117d2a7200b7eb0645ac6fac6db064e6324cc0fdc597cc687e868
TLSH
T17F110009F3AC107616C016A0BB57219B8528A30972B60801788D834F3396A7CABAED3D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Sklogwiki.tdl

SHA256 75047ee4e5ac81f01f95bd4f1c79d76b6eddf821f9fd8797f0a4c762896c7995
MD5 e9ff392d87ec20ca86c6688b69319c0d
SHA1 2b5a2fceba7c26c1e87671bb3a719b547c06b9c6
SHA512 68ebddfae2ab2442f6a2263af394b382e5a824fa517ffd9c877282c9de6b07970439abdc3e47d1f1c2a0758a7afd08438e7c5c68e9dbdde43e627f52672c28b8
TLSH
T1B1414205B2D7A6712A4A03925BD6708EF12CE24C127BD900754FC39F77458BC23BBB5A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/SmartCloud.tdl

SHA256 c61b90d72239d0a1563680a385fbac68ece339fc37b884e968e473968e6db67b
MD5 a3125c28848d8c3efd7f7abfcbca9b58
SHA1 935b524fe0a903e1deec8c5a9484699ef07d1be0
SHA512 6c193d5eafff079361fd3f50662b2a44bfea7848abe807d2bb7766b309c65142b5aa8a8f0caff919788fd78eba57ad768a39dee6d69673a28e58ee982884cdf8
TLSH
T1A0110006F398907726C033A0ABA2218B8528930862B715027889905F3396B3C2BBA969
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Sophia.tdl

SHA256 f771013e1a7014a32b602381b8572ea3192886be90b169acd83bf36574deed8c
MD5 855543896ef0a8db230896927db82960
SHA1 af1addc5940baef86ec7cca9f625d9bbd4785155
SHA512 345497280999e0503dad10cadb9e28711bab33fa77acabca6f2be17643ef3dc84032adde6acfd884eeb59872061e4f62b00fb5b2edc58782284463d5a6d4e8d5
TLSH
T19711230AF3D9107217C015A0BF7618CBC02C930862BB0401788DC14F7396B3C6BAE92D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Spruz.tdl

SHA256 442962580b4605d940e2894d06aa88f8e5855cb60fb7247f7e41b4c959e08b2b
MD5 effe2cfc179838c9b515ab9d10c4db38
SHA1 fe8606895878cb1868e9d57cf8c71ef72e21aea5
SHA512 2519ba262f77daf25456cfa4fe4aea6ecc7808a53db911261cbd7882b6ac0fc8d31181bb0bd10c631279a3f4c47156a6591b9f343dd7eb7c762c8427aea8c32e
TLSH
T16A11560AF7D810731BC41151FF52108B842C935C72F708017889C09F3356B7C6FA692E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/StackEdit.tdl

SHA256 40c1a943cc909d2717f2428f7e759bec06c5407063b815100ef202e3d679d419
MD5 5a44522f5126f647ca244625a544735d
SHA1 2d81aa94dd46c61af0302a344765147b91417193
SHA512 7c4898c1a088df9761385929393eab3af969ef903c3e87216f0d74563685e020ee1ed4c4b6b449a0c38d5d56325d2b61ad01b4fa4daa88996d326e4cec51ec25
TLSH
T10C213256729480B116C627627FE82187943DE30C22B69510BC4F918E772567C2BFF60E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/StackExchange-EE.tdl

SHA256 b0966649b54be3f3c31f4bed0a92422205ff2fec9123d19b2d3064d46fb64310
MD5 b7deb6036dc13dacd55598dc6f69b15b
SHA1 22839b4b012bb4a5c4c140372c9372fdee93a7f8
SHA512 f5e01bc2515590de063f66b761382e824eaec6ea440d81fd3c20eb72a8d6a47c368e10ae7f8b4999eef200e86a1103cb4f5703a55de9fca89753d3f34d87d50a
TLSH
T1D8211E5D328854701AC617A27BE462C6543CD34E12B68710F98FA58E77056AC77FFA0E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/StackExchange-M.tdl

SHA256 855b9e673add231e967d12c490b4d97dd9904013c6d41361c4ffb160e79838a2
MD5 4f003ec2e632af9b52820229814853e1
SHA1 c08383bb7669b16d094d5537562f87d9117fd524
SHA512 28538206d629eff216c2ff7f62bf70e979bf989daa8141e251a97764ed83c047ee673c6035dfff4bfbe551fa3dbfa602916d5f153cf368295cf2a77d05390b84
TLSH
T1C5212349728440711AC217A27BF56187883CD34E62B68121F94F95CE771957C27FFE0D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/StackExchange-P.tdl

SHA256 19ecfc196648f78cd2d95090d2f126a0e7a68047946c86fb26d2e582b0a0b416
MD5 ab2821e4e53ca09a2dd1c746962be40b
SHA1 d874f0649d0869e85fe545c2e99dbcf4b6c52dce
SHA512 f394463dd7e459a6dc18c51762253733870d177e1ef27bca0e7a62fa8307871354e3737c81bff33eca852f717fe56176c95ce9fed2a2231becf1800d9b2d0f05
TLSH
T1CB21720A728490711AC21BA37BE42186843DD34D12B6C210BD8FA6CE7B2557C37FF94E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/StackExchange-QF.tdl

SHA256 5f59dd2886b04b5e9d0869f6ab16f7ad60ce99271e7771bf8653440fd82f1585
MD5 e5df9beeba64d09d5a705f3c7d6accab
SHA1 4dd10b82a0b95f7c4b09a86f8d8de80a79541340
SHA512 806538cd4ea347a4e99dc0bca727da5e646c7007fbec868da2b15d5399e5bcf3e030425aa19f435e3176292b9743334926c12d568a7f99b48c9e83bdc0814319
TLSH
T162216109338890700AC617627BB52283843DD34D52FA4220BA8FA5CE735967C67FF61E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/StackExchange-SA.tdl

SHA256 c6a9382eb313f7b0b99bb8794d209906d7a35a86d1af0e61b13d95770641d55e
MD5 94197a342fd19079ad24cecd960d44e9
SHA1 95522a15ede91fa66a214228c48166f6aa6bf20c
SHA512 d9cb4e3b24314e5133b14064593b273b399e79f82dff2ada48348c6da73800b61454d70ce60c26f3106bfd743a3c7a46d98f20f990a58b757204684e951c0d6d
TLSH
T1A7213109728440B41AC227A27BE82287983DD34D12B64210B94F95CF77255BC27FF61E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/StackExchange-TCS.tdl

SHA256 560f41928cf68d51d5f18a776a233bbe828c7f81faa1f493e01d440b274f61f5
MD5 53318e08a5c51b31874e000ed29225e4
SHA1 0e8c76e3d2230038d0e086bc5b36938003bf3d57
SHA512 4c1222de3570442db14d8600351aa47a625b676a80d5ee446b6f6348c9a98d5ea25dec1cb926366c852bbd6a55f91c6f58e82861ebb06944a530923eb5ac573d
TLSH
T136218346728981740AC617A27BE82187543CD34C12BA4201BD8F95CE73165BC33FF90E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/StudyBlue Pro.tdl

SHA256 29d45d5d62f3efcd21c5246149a51913999532523176ac1c93dcf099497d1656
MD5 9a43fbeaf5208c418a4413ac76f7da89
SHA1 89f501f8b29aa1b8dbd7e68636931e7f685cefe2
SHA512 2da0c54bec350cd72f435caff77257e2b42b24f16e512f095ef4ecdf6bbe2f6cc30b1b8c7a1729e62649aad888739a1f52be766df527eb10b539873350f98bb0
TLSH
T13111F015B68C58A105C06760AB69359B822D931C11BE81027C4E810DB705B3CABFF51D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/StudySync.tdl

SHA256 7bf4922ae98b0d2d87ef1ee730f88909bf1ee6980fca358193a3720f5a2b3972
MD5 b9a0f218d8a25bcc0cfe646d725a0c0d
SHA1 92a98d344e7e314e924e0eb4b392118e6a372467
SHA512 196bd752b8c2344d0958921e95208cc00cbd73b7837d4f6470c35d5960466496f6609a3441da26877b7cab7329ed8a2f93d5e7a1a48d966ce574f7a209c1ed7b
TLSH
T163114406F39861222AC05150AF52108F8138638822F7140278CEC00F37567BC7BD652D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/SurveyGizmo.tdl

SHA256 8f5cb4470dab663bff7ecbba90affa81468eeb287029c131120e005f9397aea2
MD5 be976e5d2ac4203ee6b5c7ea42d29806
SHA1 50e2cad2dc71ec1114ea1342dbac90354866ceea
SHA512 485b73093a3149a1e86cbaef006c52c76be7a2d0a7750f785d8156d6c5e506490c89b8a1254a1db4b0fcad97a8a324c3bc30657f1919b1424ef7e1cedd17b6ad
TLSH
T19311000AF39810B217C15162AB62918B813C530C63FF5C01B889824F3396A3C6BBEB9D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Symbol Tiger Expert.ttf

SHA256 037c3698ca25a26aa9f4080aa7bb1f19a8900b4b95e4639b043f6a73387d0daf
MD5 7950ff94179520969187657bd9dc828b
SHA1 638d63d5bded4ebf61a2a006d85f75d24c799c02
SHA512 ca37fde8e128b17931c70cf741827c085086fdce335a60ed32b8af4f5974d3e879808a32ac757df5b469e54fe82e4e19f63a1a9d271a5c1396d142109dd793d9
SSDEEP 768:mRCwxKmm5lCbU76ge+M1JrsaSHhfOQakU9ginC+2vsHtLzUNoz+1rxj7SfNacCTW:3gTV5gy1QHajC+QseKGxSfwTe8/M
TLSH
T10643095BE6AD7C1FCFC3153DE04AA92FADF9ED3A7161858D3E8D19B46641040A8F8C48
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Symbol Tiger.ttf

SHA256 39d91c6959283249371ee64396f410c9d6e563b245e499a65ee36c8b80a371de
MD5 46d73c456882dd0e303bbfa82cc84e2b
SHA1 d7fce734d56a6186664259ff05a51dd33444ff87
SHA512 1b004250187e6fb0abbd1a87091c01644ee3b589b9a33b0e442b613e96348ff4cf4023723625c42af1ef20ba51d0898ae606d0490266605fc56383e45372f392
SSDEEP 768:fDHBaKDibwgsSSLmoGB056gzn8NRcyf3CiIAVIl217tom2HxgLtuJTSh48:TQZ8lNn8XcyvCjbUmHxGtuQW8
TLSH
T17D430A5FD6A8781FCF93293EE046592FAEF6FD2B7161C64D2B8D19B45541080A8F888C
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TOPYX.tdl

SHA256 80ae589a90730131ead531eaf2acf1c690d727a6ebf4ddb4ff9dcd5496578147
MD5 4c9046c8667d8c9a1c82f4febf429e5a
SHA1 041107b5b4bdf3b5df13a8c4a3dfb697a70dd55c
SHA512 e305b3bfebf4e2978b61bb1f83eb939cc7de809abe451ce35806668f64dac48fbf647a7ab186fab8809e1813be59ce4959f84f709ae2d28f8323990db0bbfa40
TLSH
T18F112306F398107217C41150AFA2508B8128A31C62F70551788AD05F7796B3C6BAB969
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TYPO3.tdl

SHA256 29a4f3f8de885962da1b7ab19bc9ee86ac5aa2be6c52a933ac0670fdc95fbd6a
MD5 b7c6871549dab5a4598c848fecd91fd0
SHA1 4b3065ae7d0d3256137dcce8d0398503bc1bca85
SHA512 755d59916aaf072cb1a5aa4cbbc547eb47e2ced5b41689fd40e3ed61e1bd0998dde60d7a12e349c0e29a7b77640b70fc1bd592525e3b84d9424234b39469bf4b
TLSH
T11011E30AF3DC107216D11160AF52348B9128A31C62B709117C8AD05F7766B6C6BEA9AD
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TalentLMS.tdl

SHA256 82b772a907b1e3415852649f919c65626457cf092e9a50ecd8fb05aa7d5adfc4
MD5 e2ae153fedc15958b11b0388ae9ebc24
SHA1 9d17ffa9870a162c1670bf40e67f2913e1fd60df
SHA512 754a1df07ca3ae6f6cacfe27f0efe0fb2e97bd5b295d776738ed6dcc7adfead12f1d9357a096d0b41243c9237758ded9dc404294853a13c4a570caff6db78477
TLSH
T11B112325F79810735BC01370AF5220CB8128934862B754017889E06F3B9BABE6BAA96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TeX (AMS base rules).tdl

SHA256 25fabdf43d84afb7e35c6fde9f0ebd37d5fc81cf767e1a6eecaf994e66c92d8b
MD5 a0a87b0698df245581b2cf52cec31332
SHA1 aa2a05498869096c3a68fb6a2677e4b79a30835e
SHA512 74805b9646738f93a4461b628a7f7cbe03b4acea734fe4a1dd87555fcdef566ffc88ec8e6de0568841b04613bffe213dd19c54a0968a0ba947b4f78ab9848807
SSDEEP 192:vAST/uo6pj7o7ys1SWYXJ7uDnYQ4I8BvsTdWbbAG2sIOFz3KO:vx/uxXsDnYQ4I8BUTdzG22X
TLSH
T1C3923838AAE602712E9642465BC23F48F11683608206D18D7D8F43DF67C87556EF9BFB
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TeX (AMS base vars).tdl

SHA256 73418069a184a9cbfa473b9861a7d1596d6a8e13f55823b130b3eb253f32a363
MD5 cf2c10610a238f00db24f85a67d2668d
SHA1 c3a56c6a4dad2e108be3e7b683b42ee8abd4ae73
SHA512 99b930ab6c31f5d246255423e34c8c495ea5c8c0cb0b81f194465515f806ed5c218efcda83bb98627fe2b0bae755db5ddf23d17c386cc60051a18aefd8620a59
TLSH
T134312015738AA2B109C113405F2E724B9A2DE3AD527187227C8CC24C771872CA7FBDDB
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TeX (AMS base).tdl

SHA256 2fdb47498bfcd9b7de3898a33dc8f0ff4a3f17043b0a9414ecc9d7efdbe2a872
MD5 e9147d4e8a574a6b53448d894b179662
SHA1 7d0b4b1378da34c729a0ab3ac71d9a1d0d9e6c4b
SHA512 58981ce13167f78486dd902c952845eb8f9e8ea0800e77e59671925b0601a3a6227ca152e05ce19cd5c07f9b1f0e6b7467e71792959244937d219fa7f0d13f7f
TLSH
T17811D015B38921711AC51592EF45925FC83DE18F22765302348FC1CDDA1193D2797ECE
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TeX (base rules).tdl

SHA256 56477f4e41299870ada7adc4c6af5b54bdaba8151795e47f2d3c2fd99e76a43c
MD5 e5afd103ecb646847e88d9dce4247844
SHA1 7af441e7769c5db95665ee014978d78f4090d332
SHA512 32cd1cbaef79fd9e14af3fae545e912dc0de3f49fe8429b46c6805f6c08a34d1b7f627f777050de23f3159ec8fb649bd91682cedb94a3d2582bc084fb3a61ac9
SSDEEP 384:Nx/uImbQNe9SaWWl7VW6/Tnjppyu576Cv6Offb4bqTvohU8kYkaQY0iaKc:NCtEaohU8kYSL
TLSH
T1F0D2DA14EAE756351D9307135FD27A48F01A86905242D08878DF93DF2788B6C2AF9BEF
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TeX (base vars).tdl

SHA256 a0adeac8f4effefdd9aeb8951fa8c3c90c7400578a6471c8c0423320906c031d
MD5 fc376d0c2e9609cf9a1f271db8f6319c
SHA1 6a6636fa40c1f15b1bc4a0030f5bf0e1b00cc19a
SHA512 860e1117116b3a38fa1836a37d6b8303ed3e876894434bd9f54308057f32dfb25f9ceb15cf9b8acf275af34d8fc5ce9e33ea0b9c8a9e805a4206b523b3c54d44
TLSH
T18E211E087BC9D5B105C113121F7EA287995DC39CA3708622BC8DC31D7754768EBFA91B
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TeX (base).tdl

SHA256 1416d9e3bd637e2957860b42f765aa2c64ae346695a0bb0c31b47b718c87d841
MD5 d06a6064a313df18813f36c04e1557d9
SHA1 29f0f538182243e91dae6589b6f45978ce83236f
SHA512 6b06dbe2ea1504729b2daeca2c58fcdc90ce8bc550a0555d979971484003480296599968af15a5088e13b2bf69fcf4caf5264412fce17b00b913c0f7a43abe26
TLSH
T1A911CE05B39815B206C115A1FF91916BC82DE2CE36765602704BC18EEB0593DBBA7E8E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TeX (chars).tdl

SHA256 1459d9045746e7f7049488faa9b88ad2a96179d559933cd3cba04b675ea018dd
MD5 bad441c48d50e557340a57365b9c365f
SHA1 531a53e353856f3b2e705dbf0cba6b4d418fc974
SHA512 bb1dff423142feb3a7e30aaede88c850ea91194ba39beba144690ceecfb3f326f21b7225e7ec72d27ebb052f2d77ad06fd450da7580e4f283a61cf3032bd2f95
SSDEEP 192:rAST/u/3psvlN8veZ+r+gycjOr35qfnEyW1vzgdZdAS:rx/ufp2n8veciP35qfnPW1NS
TLSH
T1F292AA28DBF6153028C35F404BAFBA96735AC2940691C2583D4E5BDB23477D92AF0FB6
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TeX Look.eqp

SHA256 5fde6427db86a26ca2c864d086b2bdd9f4013ede363ae40ce6117d5e3fcd9cdd
MD5 fa3914a76e7178f9479b87c8b650a757
SHA1 44d287f0fe8ea0241d73d5f777ada465b0ed5352
SHA512 d7fcd0257f35fcab76ebee99bbe1ccfd2a0b612ae83666add14ede6bd287fc5e5a6aa78fc1c150421d7169462ec88d5903166aa740a813d193de0fe9a1bd2d60
TLSH
T1071180951F0A7E039C54DB83FC35950E754012674F8A7C6B32C814E85709FB625A9329
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TeXchat.tdl

SHA256 e59f7a7cad25869a483c1cce174ac5223acdb5c63a4fc74f5cf261884512405f
MD5 efc67bfe52e415416b1b5a22f4edb835
SHA1 81fca76a4457d3fb5d44f3cbe0d2a6f7482547bd
SHA512 249e062d015ecc8798ab950bc7199ae9ab554d2c246e1ac2a1a345f585adfb87d9837021db2c3515822125e1917eb12788df2a8523778875365fad6ce46f7c9f
TLSH
T19B211245728490A22AC11B62ABE43187543ED30D12B74521FC4E818E7B155BC77FFA0E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Teachbook.tdl

SHA256 0a36f764a57cf67ddbc5c0c87d281f702cf4f4f164f8cf68a4152a3cd5884add
MD5 103277d03458ede9546ec4a55042f250
SHA1 e4db1452f5168e313d6268c33c7abac2d282f6fd
SHA512 82cc972aa20c2d8c2113947421fa0ae807129b7c8efb503585efec6f9fbb690039410dd8fb3fef02ca4abd1e92cdd0340be5652a52877e84df01d08e55c97428
TLSH
T1AE110016F7A8506317E22561EB63219B8029D348A2B745017889C09F3396B3C6BA692D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TeacherSites.tdl

SHA256 5731b41cc9b97929a4515bd7973f63d2c068bcb321e3e52c0e05963b36a388c9
MD5 95d20baaa97e3a737e709d85d7267e4e
SHA1 d58a46f70df92a2e515343e3bd342b9a0c09347a
SHA512 b088cccc0050677fcc011308aedd51f82f67715288670917500c554b6f8d113d637624041ffe2bc7e9a86b6db18ee3ae61ca338b1df62a3f7aac1f11df992254
TLSH
T1B5112727F398217317C22290FF6251878419D349A1B7254178CDC05F33AAB3C2FA6A7D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Texify.tdl

SHA256 7646f5c93044708a4b0dc97d94a97950af5049ca9a0735b2c2da739ead773d2c
MD5 d7a0e0fe4e08703e3dd3041cb1dae449
SHA1 24bc7a3f4a7b0f4f57646143b13dd2d7997fb496
SHA512 12f9149890beb832366c167e6e706c4ac5dcef4af6b8a702b5794d2f483c92a1d3e037b21967ff5984ac516965773e2765188c5bd98674bec52bd79cc9b15c53
TLSH
T15641578AB19A81B20CCB05C66FF51182ABE5E34451F4C4553C8F8A6FB705DBD6BF9344
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Texvc (DataObject).tdl

SHA256 ae316d80d426b2034a4f45f86926d254bc2e9be28ca2de92117dd94fab84824d
MD5 e88a068a79ec687969858206740f7369
SHA1 5cc5b63162095c3cad50149e2cd0d633f71ef8d3
SHA512 2e9e102844c7b9079413185f71efc7e9714ea09204799696646aaeb9d5901ea583dad84d15c801dcba9b5f349f2ff0c47e09afab3167f6947b81a6bdfe374db1
SSDEEP 96:tASPL/ui7Vc/nR46sYM3kOLwrBy4UxNZ0ZtzZlt6jyKD6U:tAST/uZnR4og6t1ltuZP
TLSH
T1F0A10F409AD9A2BA9DB010D79BA0F814782102A5B7C2E50172FE53EF530CABC1DBC767
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Texvc (LaTeX delimiters).tdl

SHA256 51f925d38ecb4ade7ab0fa49cdcfc798c65195fcec97840b6934a6436ba89487
MD5 0c242150866fdf29447ec6924a51c25d
SHA1 c6a94a93adbc16764b04401390d540fb7edab50e
SHA512 a8ad6e7e79b905079664fb8b464b85751698dd90573607a57e774e286aafc3191dbee7dfb65035f36400d53491f19a00ab05f69c3d478ca6f677e327ad91bf85
TLSH
T191113501779442711BD21A50EF5271878239639DA2B2540675CDC04E774F9FC67EA62F
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Texvc (Physics Forum).tdl

SHA256 b7d403602673d8f119697d79fadae9a52c41a9b71c8f8523415c893452a46bd5
MD5 663c0c97c3b3dc17c20f6d63cfece494
SHA1 418357462c5101b7e9b07fab02dfb448b832b7ec
SHA512 940193a45c5ed8214de0c8d395ac472c168ec483b01f13f3c15bfee18c13f1a9e4fb144bd024bbe5e63f95c3b3a4d4065cd0749278e5eb530508f6828a26deac
TLSH
T100114219B38C177306C22760AB69525BC128D32CA2B5C622BC8D824E7355A2C9FFE44C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Texvc (base rules).tdl

SHA256 ab10b7502e98bacdbb16c5930f8037e11af622e6891c0b3dbf3a803304f485f6
MD5 f6e92ad0af05651e5c4dcf2cdf7175df
SHA1 b19313f915874c5e7c73017d0846892110629372
SHA512 0cb9d99833cf3dd669d594425082b77077e27793db3f4bf4ae3a4c0dd3c62d67d97cf39692cd86484c6fac6f66c6120fcfff4ab2e9a5f8740da4380a6199c4b4
SSDEEP 384:ux/ud21P3SsqW979WCPXnjpp56jsp0Hs+VOheUU3x8ckWW2Uf3J2qj7x6Ul:uOoPgM+VxhCWW2UfZn/xnl
TLSH
T104E21E44D596A1728CD206635FE1B800F5A8D6E053A6E404B09FC7DF1B8CBBD52F93AB
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Texvc (base vars).tdl

SHA256 b880bd21d9da09c716cd6ea076a8864fb512c4ef26e87d9ecc58d59fe2fa9b12
MD5 12a3930eec863c4c8949a1d7fac4860f
SHA1 806379d1f6168f48ed3a95399c7f87ca2baadf6a
SHA512 59d302c4987134ef5fbd011b034327d731db5936a88f7cf81d48254bbe026a76604260a2649ad472e635c7d501e067748af4f867402d7b23855327a9343293d0
TLSH
T184210C89B789A27549D112411F79614BD61EC32D837197227DCCC24D338873CA7FAD2A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Texvc (chars).tdl

SHA256 22c14fbc3390eefbd9423af8c5b6599c1fc492dd3d3c0af10c082858e0bfc042
MD5 f78c205a5daf9fdd891d72094ebc1cc5
SHA1 ac655041e5c62ffaabbfd42b152e684374cd1f8e
SHA512 61ce999e66f6f32bb5dbe487eb9f52138dba299f74dd5a6a3c2e09a4c927d94a08cccd0381d02f04c50be467dfc8a13a21d2f3115d9b0d0c4e66bfb98c8e35a1
SSDEEP 3072:raUKBbhqDhtqzOIUXaAi1jHMw8CFzQF+B:raUKB1q0SF+B
TLSH
T11BA32B284BF61E2014D93B7513DB7A41FADAC2892754C2487F4E4BFB23821E4E9D2D76
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Texvc input (chars).tdl

SHA256 6fbba6801fcf0096c0b6544b4de64f128ff7c165f3138c85fe76c0ed3c6f3873
MD5 fb920cb7516dc52d355a812429f50a49
SHA1 1084b897517278331554948bbaf94c2b7bbdca1c
SHA512 4f8cac45ca838a4a43de43ec082e93c5e4f35b42b4dd3add4ae0531bcd2cb8bb3890cc78dca5d87ed2374e754b8217e06fd39744aba5155163c46e3c2371e14b
SSDEEP 768:g3VUOqo2sDYN62KsKK3nAkeoRIthyLMsSemBZ:aqo2sDYN61CAkeoRch4MsSemBZ
TLSH
T19AD3F534C89909770D23920A97A19F988C7D2E557A55D3E23D1EE6B3330E4A1D270EBF
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Texvc input.tdl

SHA256 fc68339dbb889e66bd632c5831aacd23e66d2d8c0080879e7621d586221e6624
MD5 3d9d20e6fb550cd1831c90c37303b2a5
SHA1 60f051abd5040aa00de715950208a27547db1852
SHA512 44bcf0eff82007f9cbfc8ea62c33e879ed3267148a048124d5b89ee626c54206d9450c89b270fd4364a3d3ec23b9a4906fa31cbeb08286bf1e7c5209eaa25056
SSDEEP 768:mRifP8UnFzau6dk6HhzlRTIXZ8zNJZAD1v:uWzmTc5
TLSH
T17BA34134C4FC0E734C71525AC0B2D9962CA86999A762A3F07D2990F7674E824D2B17FF
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Texvc.tdl

SHA256 fa1d944189fdcd44ee5299182a995e27f9587a01c2c39812fa2193969a2b408b
MD5 89003f23d01fcee145d6b6c0aa2ba229
SHA1 5512df6e2614e73297402066a9c0ca32494d6957
SHA512 6feca33f95354d449bbb87cf3eb3bbbd772e9c592bc03cb104de61ced479ccc2d3818faccca12f47cecd0ea15932af45d6adce372e6e9882fc44d8d4f3831fce
TLSH
T1D5213309738961B209C02791ABA9135BC828E30D537695107D4ED20E7B4AB3CB7FE50D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TexvcBase.tdl

SHA256 47b1ff3e7657b64f02418a18de63d448d9923f0a0a9e98c1dae816e222154ea4
MD5 51ec8917d52e54374fb91ca6b1519c62
SHA1 c338cb28135f2af5eb622cf9521912b4cebbf63c
SHA512 74f5e9ebac2bf8b32c085b597bb3d2762a1fa9490915222ab85f9ce47ee623dfc08798d8ccb7acb9bbb3ec7b3938304224a7078fddf7c85673dd75c846876fbe
TLSH
T1F5211104B3CC227205C11A91BE99525BC82DE34D23729311750BC24EBB0593CB7FF98E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Thunderbird.tdl

SHA256 b0b5f4e3758ab7eaffcccd51a5442371946094b096df3df22980a24ff4ea18d1
MD5 de938f63db8c01af8c524d2719df2975
SHA1 2a0e50e8cfc871b6970afe28f64cac758ce7a777
SHA512 f7cccf6b385b06687430337f1397b00c2c4d3dbecbc64ec8d7db7ddb026157b321518b902534b5b420a865aca0134cbe3bb4b1ec07463f884dd7ed5a2d6f2bf8
TLSH
T134110006F7DA117217C12173AB522DCB8028A30CA2FB44017C89C04F7756B6C6FAAA2A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Tiger Expert.ttf

SHA256 3be0567d15c68adbbee9cdaca8dd1677e2abe429890771d08e7a7c35cae834f2
MD5 4a4fdde99651dd25364412d597d0d2a6
SHA1 9b5df7fc258ab522605e80ba1330d123b313361b
SHA512 212412242c62cf0a37499c74bcf246eaa85051014ec1d229653142ee5af221054ad76b4df9a067a8e89e1629e771d4a14c99caaad6e645eac3dc80c214df3f27
SSDEEP 1536:OttJBmnMlSUG08jFWM+IU+9JwRsmsJ06EAPO9BZlwXwWTxPJ5OcrtVikxf98F1us:Ott7JJy9JR4wnC8xf9F59OJg77Cx7
TLSH
T1C2046B51C3EBF81BDB575638C10D9A170FE6EF14B168C39FC9CE29B99A98084D8B845C
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Tiger.eqp

SHA256 cb3b35eff04c2b3adae4d4820f90c648dc2393c8328c92837a907d09e746b9f7
MD5 1e6e2667b8ed022820b32aae45cc7116
SHA1 6ba02236591ab1391f82388992a62161b5b7c854
SHA512 375d238df30daefeef98a45eee12614c1e7bfe6e1204dda237ba22b151a57c3921386ab3b1e1bbc4cc3e436bd1a4bb394b6eea542d473b91a161e2dffa7b333f
TLSH
T1541174624F427E03A47CDB87BA7D905EB91001160E4A386222CA18E8D70CF9126AC36A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Tiger.ttf

SHA256 10271f26db6b27f1030b65cb5381d6f0b12101fc66917503e86ffe3d66db7877
MD5 4c81b6fd8343e87558f11d21980c3e6d
SHA1 71c7416b0349934978418177818f8832a48a67a9
SHA512 daf57bb0980eb8bf854d438940a24e095c244552567da046e57550e3b48baf783cb90321499685f7257b9b47f27dc045792ebb8b3ceb2307ad420d39095cd5e7
SSDEEP 3072:stt23+kpiXXCZIuiYNjFwbMlr1K77zG87uw:9/piXVywbMl6puw
TLSH
T165148E51C3EBF82FDB5A5670C119961B4FE6EF187178C34F9E4E2DBAA948080DC78468
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TigerExpert.eqp

SHA256 61f1196f030154c49d7a56cfcfc7a4510d5bba77bd68c500b97530f447cd3534
MD5 5f0475830bd03b0fff950d64e75e38ab
SHA1 516f743a8cac97b80fb892e50ec62f6b6cbfda15
SHA512 3a6e7d7aded4e14599859d4fda805001b4d8fde231e5876cbb3d7a3c8b7d670285339461f8387a7161ce2e8357f472275e8d6117f02ef6095de4e3063c41db06
TLSH
T1BC1156728F423D439858DB87BB7DE05EB91040160A863C5233CE18E8970CFA236BC26A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Times+Symbol 10.eqp

SHA256 a5a55f531d44d48afaf9771c44b61e78bfb1fc93a93f505c6ea0ae5a62557ece
MD5 650739fea12799537affc99970bb50db
SHA1 a7c336713b93b252ff2f7220cf99db1fc937f844
SHA512 95117845f70ce3a5566f022efe836752e209bd5fdd06f14ae98adf89fde6861d2615f0a483a7c0afd6138dd01c3fdbbc4ee0d6dd11f85a7759149083762078ce
TLSH
T1B211CC651F0A3D039A64EB87F97E901E7510028B4EC678D732D914E85308F962ABF33A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Times+Symbol 12.eqp

SHA256 08c741cb11fb5f812acb9908deb09e383c212ed3065d478ca4e02707d32d2e6b
MD5 67d0abf6903bb1e5bd00c491589cf48f
SHA1 d4e80e516f6e0225b02ad69ab61b73c3d950bc6c
SHA512 48fe4354990399d023adf8bebc166b0ffe2b770d1ad5d13512b6ebf204f5811513828efe4228a7ec54384335d5d9bb92273a7341ee9d74b18c3311fe988db7ff
TLSH
T11911C0551F0A3D039A64E787F97E901E7510128B4EC678D732D914E85308F962ABF33A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Times+Symbol 48.eqp

SHA256 6380321c3f1ef3686ca0c7eb585a31c8e7fa814668ce8a4309bf4f8052d70343
MD5 5b910c7d5c982172571f2c106d2ef469
SHA1 684452e9dd814fd9733cb6ddd328046de9c3a66f
SHA512 20b5be6710e950aae83a59ece177193da52e85d3e64f4c92b93debad69f4f653319331bf7266c754cc9bc2f4201eab180b79b60440657f34369e5f6fb91ddaf4
TLSH
T1F311CC651F0A3D039A64EB87F97E901E7510028B4EC678D732D914E85308F962ABF33A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/TinyLetter.tdl

SHA256 9f14d88beac7768134e828aaa531cf59c6af214055b3a97a10da8ae7329cc6d6
MD5 63d10467c984e19bc32bf7de19cc2883
SHA1 f2ac135ee3d81c3bb036d008d11eda0b466e0dc4
SHA512 22d9c8f5934efc4dded152dc8fcdbecd507085db2dc91422799e90b8c0417c617d9481d7e93103a25a1eba6b935fb71f426cea68ccce761372013b5982519c87
TLSH
T1E111000AF798507216C21160BF5220CBC438930863B61522788D805F33A7ABC7BBB939
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Top Hat.tdl

SHA256 6bec6540f74f0dc7ea50582578d01113c7aec967ea24f63d7b22e9130d190f48
MD5 aaa6ea21c289072f29f7598c5199493e
SHA1 f383ef7a1aa3f37e930a3c311933a87227dd4d7d
SHA512 0096de0f2393ecb4722e58435eab7148f32c61b53bf228b0cff1e4a21ea5ba507c547d864e05fedf2e147a2fc33d375c4d154abdd42c07f55ad1b368deb1b778
TLSH
T1AB11328573C865B116C017906A7922878569D35C23F98560BD4D914E7B8572CE7FF50C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Tumblr.tdl

SHA256 37f51752d18b08d3a820f1080bc165008f1f1aee3056bc959d529251f2d0d643
MD5 952fa5e76cd8d19865152335b2634c97
SHA1 92f220e22e5ed173872b7a6e3129230ca287ec21
SHA512 fb51ebccefa9907e8b18de7e7e7351cb3183e9aae6a770025b797e90c437b08c26f106161305729eb0637d61fda03b84bc200ce70badd7425075996708777c28
TLSH
T11811E30EF3D854721BC11151AF52618F91289348A2FB141278C9C09F3797A7CBBEA96E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Tutorsbox.tdl

SHA256 dc57cff8029129deb7ceaa71549d81383e336ecbd3940be3ceea08241e454285
MD5 84b69b20a00a3d2adc0d8facdb3586c1
SHA1 ddb22d59a9c70f6a17a1de82cfb6ebbf22694c51
SHA512 8517b94f0db45760eba23128a4889f8c1b7766d2c8e6565f64edc4ea25e66490bb7b00ca638b0a77d6b1e3854a74765488e8db63b7e40e3973c0c06fe34b399b
TLSH
T16E51C049B28A50B25EA10383CBD61847A49CE3855235D425B8CE836F778576D77FD306
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/US_export_policy.jar

SHA256 90012f900cf749a0e52a0775966ef575d390ad46388c49d512838983a554a870
MD5 ee4ed9c75a1aaa04dfd192382c57900c
SHA1 7d69ea3b385bc067738520f1b5c549e1084be285
SHA512 eae6a23d2fd7002a55465844e662d7a5e3ed5a6a8baf7317897e59a92a4b806dd26f2a19b7c05984745050b4fe3ffa30646a19c0f08451440e415f958204137c
TLSH
T10751F96ABDD9C17DF25B46B90A48938370F6854C1748FA470890C9A52EBCF110E57EEB
MD5 SHA1 SHA512 TLSH

Unsigned JAR

Checks for missing JAR codesign signature.

File Signature issue

Digest

05807b09627c64042e5dd24992060eca11ca13d2849b8dd282d162360199970d

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Oracle Corporation,OU=Java Software Code Signing,O=Sun Microsystems Inc

Chains

Jan 1, 0001

$LOCALAPPDATA/Temp/mathtype.tmp/UberNote.tdl

SHA256 79a29b0695e3621dfc42e81533efadd09b7c03fbd3e211caf3b0e3a8d8d19663
MD5 6905fc561efc360b9f95cd56d3a509d9
SHA1 b117469b8e827a778e49a6e70469350c838395df
SHA512 b1d066d0493700ff63965e98ab88171fa601de45b65b3c231035c5e25d0f794f71a2861a41e7b24dc07f65fc04badf5f4a4774297a5641d25499800dfa3db442
TLSH
T12C112706F3D9107317C05190AF9214879129530962BB560278CAC84F3396A3C5BABA2E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Udacity.tdl

SHA256 c76af465d0743badcfeadbb0bba11ee91ec519045b78b0fa46261aa387ab34e4
MD5 81f63982536116122c8b3d4b29474d60
SHA1 61ece11e0f3e74ef363af8a886450f06b4b5bd28
SHA512 31872cba43d8d221f700cf24c231ea5a4e36b0bf337571955f6bcd9e223e2a1b60eee2c0a90a778bf8be7d04a1d00308610109f2ffdaad01580caa025e69271d
SSDEEP 192:1AST/uRdmrt4FMlLyKkcRogd0cZv+ML+u0t8+yAJvZ:1x/uG4FMLKmPlhhLdg77
TLSH
T12472A42E9FF7107C18820B125BD72A4158EDD3C53B52E149384E0FAE5346AB0B9F5B6B
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Udemy.tdl

SHA256 f8183052bfdf61283b02348c3a7b17a4929e1030ea7f8c79cebfea59fd5a3ae5
MD5 ca62d8803ea8ed2f9afbf27d9cdc163b
SHA1 e6d5cd74b9145cacbdef299c47a35b55e46d6ca8
SHA512 4b2b6deaf40087ca9e19990ecbce11ff8fdabc0fdb9018152a97bb8e5ba09f9ca4bce9420cbf9645077def56aa971f66f7d240b753afb985f00755f389e21053
TLSH
T12911E30AF3D8107217C16151BFA2228B9139A30863B71511B889C05F37A7A7C6BEA97D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Udutu.tdl

SHA256 84c0f5103eb0bb1ba17940e1b5982d7597b0883bad037a76d0353232eb5a8a27
MD5 cc848988727a274fc20a304a55435595
SHA1 e3f430866a832e63e83f470bbcb6e49281e0ff0e
SHA512 7a81c60a5c3994dcde06c61654b332703fc5b49d00a8074fe351858ba3a2e91f5b9cdb1be80a29af373f08e8bcfcdaf12f70161326e4415da12acf6425d5ab5a
TLSH
T17411270DF3D8107217C051B0EFD2158B802C535C62B70501B889C04F735AA7C7BA791D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/UnivTorontoMathWiki.tdl

SHA256 73f665bdd27005e57022e251613a967259bbe662aaca7f1d8e49b84bd4e9f4ad
MD5 d013826fbfa89c78b7686641c9d03754
SHA1 f3103c31a51042c9b57af071e5111b193ed6f232
SHA512 cf63e5d2de95d3a31e5567b507057b0e2adc09e3f1d6416b67105cb891c6da4c6f711271bf977cc0cb54a508ce5e272dd7a0206f32cfecdadbc091f5583a1cf5
TLSH
T13B412005B6D2A6721AD607512B967189B22CD28D1277C500780F938E77559BC13BF74E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Vital.tdl

SHA256 7023ea3f9c29a01e639671506df5071ea849e29766e26c1a9f4bdfa86952f87a
MD5 1ebab75273792ef23b8c1ede298905c8
SHA1 23fdd6bfababc5bf23b90f0d1f75ddce2c310514
SHA512 d061423bbcbe2c4813ba9840ef9168a88821daeacf834fdd8a96f5a3b000ba01e1b59d6d17e81f1239c56a4d2991df1facf7373fbf9239a40b70f135ac5ba489
TLSH
T1C7112306F3D8107217C01150EF53518B9038A32C62F70402B8C9C09F3396E3C6BE6A79
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Votations.tdl

SHA256 1f605d06442a8a3c3e3d961566456633c88c0226d12214443427cf76b7e2a4ac
MD5 dbbaf35c0f802311a972002995766127
SHA1 63f3c2473d4f5a397e84ee4edf1abb4fd7c93cf0
SHA512 cfd768996b445f60e92239d5c2d46d2f558b32fc495519edf380dd701447e4ba27972f27ed78487ae54e68ffce2b9aaf3323a8421a605ba3e5930d74344ea871
TLSH
T1EF110446F39811621BC2A151EF62108B9039D35862F60401788EC05F735667C6BEBA19
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/WeCollaborate.tdl

SHA256 7664408d78745f654c990df23114e016e0c63364f7ca0346938290679bbfe9ce
MD5 8e025091371b2cced1bc12900bd6c44a
SHA1 3d8269c729d62e5f5da996ccc68cba4a1a29c375
SHA512 e5aad3a95656173f9dff9598cdb490f9be2d0af986b167c77508efd1136720914a08e180133d060a28a4983fa23e0b6a4d7d1afbcefbed665db4b35bb322d68b
TLSH
T18B116305F398063307C07250EF52548B822C934CA2FB0610BC8EC54F338AA3C2BAEB2D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/WebAssign.tdl

SHA256 913bdeb8137c544225fc7cbd724817ddb85a5e38afc7142f036c022cfb3ecc7d
MD5 4901d4d074c75510d5392c891e508dc6
SHA1 5606fcaa733be2097d237ac41d8a6f006c476107
SHA512 766ffa8a7f14c492ace95fe767a3ff62ac65d633b88cc26e8a07d449443368ef21f2706b02f7ef7bff0dcdb151b700e999613288b4195c91536ed0c8d9f091d4
TLSH
T114111215B6AD69B215D22791BBB512CB8428930C12F685107C8E830E774663CDBFE51D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/WebsiteBaker.tdl

SHA256 a68d630f29449728d1e0b422424b9c7b6c662d782ee5e5f68647bea36997e839
MD5 fa9f3b23ef84e3f84969d64eb30bfee2
SHA1 08f251f16ef41fe568b98c3157642dd7401285db
SHA512 1694abca96773ae1dd12c1880d157fdde2e6bb9939e0f640233e2ea4aa0e8a75eb544ee3e54747175c0a83b6048ed4531b3d2215e01321cb19443022b9294ef6
TLSH
T18211440FFBDC147716C15560AB5211C78A18930C62BB05007C89985F735766C1BA65AD
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/WiZDOM.tdl

SHA256 62d665138592ac4673075e246d190ad0ce303e3bc50d05c3cd949fc8bd0aca95
MD5 fc184e32e450c174a59235edb5222e08
SHA1 05fe6076ff64b5a0402b1f6b25197764e2006149
SHA512 2f25ffe457b871d55548bc14ae3fea951f1cfda549bf86aa02de31074da002ab1953e4d06ea550e8f2efd87125d3848a3e05690599bd52f849752a9dc808410e
TLSH
T1AF11E705F7B8147317C13760AFD215879518530861B705027889C9DF7356B7C5BA697D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Wikia.tdl

SHA256 5fc3f1d5439264a737019bc6df64694232bd535813d28a7566211f3092040a9f
MD5 35c06b4e6dfb3ec25684984536985ff7
SHA1 cc2be1db99ae245307b4f5010eececa6023d10cd
SHA512 12a74699480871f92c899b7691571be5bdbcef43374a4dbde14c5748582860e64e76493b5ee7a3984f01105ec07996beb8c06d31165ef489250d355555dfc971
TLSH
T11241CC0DB54A5C7A0DCA0781ABF550454868E30553A7F001BD8F8B6F6B81B386BFE169
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Wikibooks.tdl

SHA256 54542b1901d1b8d1ad5a051b79dd444767393c2c3cce8b99224924dbd8ae41e7
MD5 411a50d6bc9c65de2834e671c80954f7
SHA1 c1611411b91f3210dad5a84cdeaa4285b1465b47
SHA512 284d4ebc38a36ff9c44839f78b3b4c239233f0cc28576fbcaaa7662a7bfe0c96a3c5fa6cb432ad1ca2a1ab0bd1f4e64a78280e28c2f5a1bed0ac31d58289f935
TLSH
T1F021660D7799257715C017A1ABA9224B8868D30C137745127D4E824F770673CB7FE51D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Wikidot.tdl

SHA256 69f8bf121a1153ea112c058a57aa741cee3f2198b69b454c7cff7084b94e13bf
MD5 33d1580ce14ead21fbf682c98480282a
SHA1 6484eaf6f8f890ee4232a83a9c948f8df162ce45
SHA512 fabc4775161612cedc25e7ce83bd828f5892da8aef95b0d84a7ca4cb0b7137db9f4e836ee2fef1a4fb209c86cf4498322feaa6ee609605a8f079a989fc9800e1
TLSH
T172114209779E65B306C41B52BB6A125B946C930C62F74620FC8D824EB3569BCE7FA41C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Wikispaces.tdl

SHA256 9f54faff997bb7cf663bf99f9042c1e131c521fe14c3e48cb33229f2a39f1527
MD5 0bef4a7abb063ef6c96ac7e1122c0d90
SHA1 fa5678b3247c589791fe6c15758fe5c17e529c17
SHA512 81a428464b039af3ec85a05abffd8dee7dc3447083c2be3f920a4daeab915060dfc2f83f6931c085991bd07d7bed89ce191e697a53c8f4a9d3dae8c6b945184b
TLSH
T10F1186093A99696B06C09F527B666207843CA30C42FB06107E8D514EF3C753CB7FB51D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Windows Live Writer.tdl

SHA256 218e48ecedb78c75a0709e18d07abf075a6ce48232f81c5efeec50c82e5b5d61
MD5 10d417dd4eceadaa9ae21956eafe7152
SHA1 8e4a003b462cd72c965177cb307e48065ce1664f
SHA512 af497e5b490dad8ed4596b0f67eda52af33523f00f0e8c4f5b4cee6c71c04b598e46d9af6167bc72a611ddaac150002d6f048f84544595cc6a1fae9e07ce7326
TLSH
T19E11080DF3E414B216D01260BB5762978028531D62BF19017C4D805FB7DBABC6BE757A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Windows Mail.tdl

SHA256 1559973a3745ecf6421de4ca45303d2a4a7760db7a33240ff562b9633093f6bf
MD5 f302fb9040f191a711c08b07148cfbec
SHA1 5c7481598b5f9ed2f330ca94fe9c13df003d65c0
SHA512 e3f3660aa3b37988f2d7be8df6852b002b0a5823593f6eb83ae0a163c1eeed605fa2908cef2e3533dba8fc04655c594228c6b6f224a6cb84120f2b0d269ef9ab
TLSH
T1E6110406F3A4166217D51261AF9722EB8028630C22B714017889C04F77A663C6FAB96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/WindowsAccessBridge-32.dll

IMPHASH 84a5cfdeff1a7d1d864ed633a0c541f2
SHA256 3d191f0677857feebe29b45fe050ee35e2691826115c3c6c8818738d771a3fd3
MD5 527eddca52dcab9a1ec3db15fb7e58f2
SHA1 e1f1cd8879a45f47dc45ddf76add610ac39f0e89
SHA512 84dc8058e9d567fa5dc92306c742ef2f3a8b396b68abbfb44694f99c21ebcf9026c92c55d6870bc31eaf27e3ee7b9809ffa55228cd1a5ad235920d8f18c89e49
SSDEEP 1536:T9bA+jstjdp5O96XVs4vnLRJeJTm2e7VXDK4SUVkePx2uT8JlgBJ:uN+6XVsknLoK2UdK3a5auBJ
TLSH
T148935C23B290D076C2F701795C1C876DA7BC273C99B19743EBD6235B8F62181927BB62
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

29761

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libwindowsaccessbridge-32\WindowsAccessBridge-32.pdb

kernel32

LeaveCriticalSection CloseHandle UnmapViewOfFile EnterCriticalSection MapViewOfFile GetLastError CreateFileMappingA InitializeCriticalSection FlushFileBuffers CreateFileW GetStringTypeW LCMapStringW MultiByteToWideChar WriteConsoleW SetStdHandle RtlUnwind HeapReAlloc HeapSize HeapAlloc HeapFree GetCurrentThreadId DecodePointer GetCommandLineA UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess IsProcessorFeaturePresent GetProcAddress GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy RaiseException TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement Sleep SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryW

user32

CreateDialogParamA DestroyWindow PostMessageA SendMessageA ShowWindow IsWindow GetWindowLongA GetParent RegisterWindowMessageA SendMessageTimeoutA

Windows_run activateAccessibleHyperlink addAccessibilityEventNotification addAccessibleSelectionFromContext addJavaEventNotification clearAccessibleSelectionFromContext doAccessibleActions getAccessibleActions getAccessibleChildFromContext getAccessibleContextAt getAccessibleContextFromHWND getAccessibleContextInfo getAccessibleContextWithFocus getAccessibleHyperlink getAccessibleHyperlinkCount getAccessibleHypertext getAccessibleHypertextExt getAccessibleHypertextLinkIndex getAccessibleIcons getAccessibleKeyBindings getAccessibleParentFromContext getAccessibleRelationSet getAccessibleSelectionCountFromContext getAccessibleSelectionFromContext getAccessibleTableCellInfo getAccessibleTableColumn getAccessibleTableColumnDescription getAccessibleTableColumnHeader getAccessibleTableColumnSelectionCount getAccessibleTableColumnSelections getAccessibleTableIndex getAccessibleTableInfo getAccessibleTableRow getAccessibleTableRowDescription getAccessibleTableRowHeader getAccessibleTableRowSelectionCount getAccessibleTableRowSelections getAccessibleTextAttributes getAccessibleTextInfo getAccessibleTextItems getAccessibleTextLineBounds getAccessibleTextRange getAccessibleTextRect getAccessibleTextSelectionInfo getActiveDescendent getCaretLocation getCurrentAccessibleValueFromContext getEventsWaiting getHWNDFromAccessibleContext getMaximumAccessibleValueFromContext getMinimumAccessibleValueFromContext getObjectDepth getParentWithRole getParentWithRoleElseRoot getTextAttributesInRange getTopLevelObject getVersionInfo getVirtualAccessibleName getVisibleChildren getVisibleChildrenCount isAccessibleChildSelectedFromContext isAccessibleTableColumnSelected isAccessibleTableRowSelected isJavaWindow isSameObject releaseJavaObject removeAccessibilityEventNotification removeAccessibleSelectionFromContext removeJavaEventNotification requestFocus selectAllAccessibleSelectionFromContext selectTextRange setCaretPosition setCaretUpdateFP setFocusGainedFP setFocusLostFP setJavaShutdownFP setMenuCanceledFP setMenuDeselectedFP setMenuSelectedFP setMouseClickedFP setMouseEnteredFP setMouseExitedFP setMousePressedFP setMouseReleasedFP setPopupMenuCanceledFP setPopupMenuWillBecomeInvisibleFP setPopupMenuWillBecomeVisibleFP setPropertyActiveDescendentChangeFP setPropertyCaretChangeFP setPropertyChangeFP setPropertyChildChangeFP setPropertyDescriptionChangeFP setPropertyNameChangeFP setPropertySelectionChangeFP setPropertyStateChangeFP setPropertyTableModelChangeFP setPropertyTextChangeFP setPropertyValueChangeFP setPropertyVisibleDataChangeFP setTextContents

$LOCALAPPDATA/Temp/mathtype.tmp/Winksite.tdl

SHA256 2823ac96923af94f45bca3336d034778c5ee1f2deccc98bc5efb9541b6ce452c
MD5 29b12993ed61fea105a87560edf443f4
SHA1 868de0fad7a62d7ab86b6fc5730a6c44c7ac74b6
SHA512 20495a5db0186298fbd2e95c93da36e59a66b95dbb3c4462460f2f0926a76d4fe6784538c07b45b0dfd01a996fd2a85ebf2ed3e45e1545b2820bb1e5d7a5ef3a
TLSH
T15C11C007F79C147226C11251ABA2259BC1389308A2BB09017889C09FB396E7C6BE6969
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/WordPress.tdl

SHA256 e9df2523be82abc13ea078587d6a4456bcb459f5e69e0ace809fa6cc2658e1c0
MD5 b2bb9b909526815d198f5373b110acaf
SHA1 bb9ede08aa273dd78421c14a3ee622d36fd96359
SHA512 8e391caa8e5cf1aaa7371f9e82ad76a72a9042d36c7c2f54e0182f4e6c5376cae3bc88d506def2c21b32b9f017636181ae4b1ab263f923625b0f6e23aff58fcb
SSDEEP 96:HlASPL/uixcu4Zr4lswxDAIwfKaeREhpf0Isye7Yi:FAST/uVr6p
TLSH
T11DB1E21AB2B61C101CC60ED863EB6502A96893400249E14C754F5FEF73877DA6EF976E
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/WorldWideWhiteboard.tdl

SHA256 3a50a70a9a10c1e579622be30ce7883af9577ef16169057c454212808f672636
MD5 10c82922bc900ee96b3380c6aa1ca7a6
SHA1 b968ca5cb1d30623563631e44a2fd8d9a28edee0
SHA512 3db44679d440b4211f928363404b54a9b4a70fcd0175c676c4e352903644f1fafcb7abcc7ba0278cfec9345c168ea7fff18c85777ae7a793512b9e46d0c598f8
TLSH
T1D8212049728988695AC55B626BA421C7843CD30E52B75900F84F81CE7B1697C77FF70E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Yahoo Contributor Network.tdl

SHA256 24fd3f043dcb0e31d0b9433e38db9a07d0ce46f268ab5a6330af26a4c2042a3a
MD5 c3b02b283a61d0d029b1427b76869062
SHA1 88933f366ecd979782dbfff3765c58f8c96a093a
SHA512 8c66e6f4426d0776fd80231ff3fd66bb0fc21b22b773581a4842556cb0ab49d4c4c1006dd7e69fc58c5c027b6045e40ca5d82ad6f648e7d4716e83e747138c2d
TLSH
T12E11141AF39C92620BC11150EF933547D118A30C62F74563788D954F33D566C67A956D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Yahoo Mail.tdl

SHA256 ddc53357017cdb4c68e8c6d299ce663b345e987955c5ea1e9e33f77a9b6339e2
MD5 95fcb62836c90d556adde8525cd56a6a
SHA1 d58b67d62efddd9d6990ec07abb2d678058c93dc
SHA512 d37ac456d91cea12f1698b665475935e25b2e1709d9975fe2212171c45f3a2023a9c960cbdb3feb7f38b6dd9c8820cbf0e51e362ee3a2d90e628bb38d63bb6a5
TLSH
T1FF11E306F39821B217E51161EF52199BC128A348A2F79401788DD05F3356A7C7FAA97D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/ZCubes.tdl

SHA256 41702081dffc324a5490de6313cbdf9484a47cbc5b6d6821ae85686b30a40f26
MD5 95fb258336676d8bd5ca91d0e5c9931d
SHA1 842da5a876702bda773a1c7613ad95a45169f274
SHA512 8d20abbc272e738785e79ec44f4bd5e0905ad135d8ecb2a9e0e7afa4735ca891a55dd7bf557f2d357acfa6b5a035cbb57d0fbd66558907cfabec15f309604922
TLSH
T14B112306F7D811F217C12150BFD220CBD428A30862BB1442B8CDC05F3396A7CBBE692E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Zeppelin.tdl

SHA256 e16d7784281b48b3ed6daa9945f6e24a11c8d57ed4f88bba9dd63591411333c8
MD5 2ddecd7824ce10eedbaf2bf92166d74c
SHA1 415a003315fefb8b955ed7a78244f47e4115ea34
SHA512 e6d2e0e3cf7c1e932461b0326388f1415c5e741f93b28b11f94c903edbaa73c31102d6a892668b869a296eeb10c17cc210a69dfda715ba800c82444b512c6842
TLSH
T160110405F79810732AC11191BBA2548BD028F30CA1FA0841B8C9804F7356E3C2BAAD1E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Zimbra.tdl

SHA256 a988f10ceb150c1b479bc8805fb6b47808be8408458ba8d24d591d3a9f7ec833
MD5 948d89546d2d3c5061953266b2b7429d
SHA1 2d3696e1035d2738b95b0f9dadf9aa3e79fc53f1
SHA512 86f91874130aec8d082d4001507ec7d84c67746f360a9a07fec8b4b4eb9ee82f4626faf52e06663a7dc94b16d91db07994f74ac8a69c926c898721659b607c50
TLSH
T16D11230AF79914721BC12170AF92628BC068A31C22FB04417849C08F3392A3C3BE7A6D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Zoho Discussions.tdl

SHA256 181a2d2e25ffeaf73971f1a1f39b89fbd0a28609bc257a76babed14d97e5947a
MD5 9760848822bd861cf503dc44821dad06
SHA1 526e896a0345872811b19eb3f24ca105179aec76
SHA512 fb5704a2236ba85cd0fd09e4788526eac07603f0e07366fc1d831fbe32fe685507a60853324524d9a94c81ed385097b9e055eb5f5379b82c6544ae218f24d6a5
TLSH
T10611D00AF7D815B726C29250EFA7208FE03C5319B2FA0441788E809F73566ACAFD755A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Zoho Writer.tdl

SHA256 45cc090fe496122acb208992ba4dc6ed22230ad5db2ed8a03419b576f372a50f
MD5 4a0ad09fd201fc13030addac58a79a56
SHA1 782ee6e0505408ce2a363b609b2779afa24a7dee
SHA512 44446475f33347e4061d80064af6c500e9176fcec04d8995758aa972f83feec4e1216ecb7138d9945b5731db07ac05f7a7d7baeb51afb6fcde51b22725398e47
TLSH
T15711420AB2DC156115C21750BBA95746E0B8930C52BA89207C8D414FF30A97CA7FA45C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Zotero.tdl

SHA256 69859c031afe3057b81c3b3145c39e87e4e9b6e03e4a6e38af07e7d876407503
MD5 ca06bf06d8c7ba076ec897765474a074
SHA1 a8ae2d5c909292ffe97f59ccfc4d64ed9c92afcc
SHA512 457468f2498ec8b6f90e313ee3e7af714f37cb62a24df7e79633897ae771833476ad175f1c2e5c3f67a6d8b191959b2853cf09a7afed5c089b593e2615ed6f3f
TLSH
T195111606F7D8157216C092A1BF92244BE138A31C62FB05527C8DC05F7357B7C6BEA96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/Zunal WebQuest Maker.tdl

SHA256 1de8bf1bbc228a1aa113a6bc59429e8a2a982a6f58df1aa873ea77bf0c9fc503
MD5 8331df5bf69beb47a2c85afdcda0f58a
SHA1 1358ead25cd46570a92db858c4a4bb6e166f448d
SHA512 ba3e3da7d5e0ee36b9a227670bc69ae4284e36af495bac95d76adacc49b7dd102747fbd698041cb02314008e2993233fe6bdd6e65eb66a969985f19d7db42791
TLSH
T19D11140FF3D4412316D52151AF5650D79418930922BB1453B8CE940F33F766C6BA7929
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/access-bridge-32.jar

SHA256 1c67fa552e5707f4ee13726b1efd989ffc72055be756cd4e52b2ae444ee8674e
MD5 af2e6a48d8cc15d47c704f90c6db94d8
SHA1 9c7d65682055aaf623b7c98ba4049ca41000943b
SHA512 3562245581305b5c8588ab5adb3548f94cd5ca48808b31d9279ce6689c6612dcf64dca60b4b08d0ab8a6516c979553378c72bf0b61d3f5a36e715afa84f94b44
SSDEEP 3072:5vq40a3cqJsSQXkdZqovfsVLmV47BHQW8MYqpY/eFsDep5V2f1cPWZXVU3:ic47knvf8LmW7VZiqpYWFiR1CWZFy
TLSH
T1D5043B43BA4DC46BFA0782F35092EE5279086DFCD2A653AF4CD91B492652C470731BBE
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/awt.dll

IMPHASH 5a7c52837d7c6ebf3ea64f339d91c528
SHA256 072eb150d2f4461a14b5ef9a5f9533e16586fcf1e0a71ae558bf4abea3e91534
MD5 ed16fb5dd63a2231792feb55e5e2a859
SHA1 802cdc8a86485dcc0c360332754c5aaefc05bb2d
SHA512 ee368b09612091d82947ef884aacaadc38cc896cc791716d3db6d5e1b433362434b5a346b0b6339e0b66bf3934984429c691a1aa68366c8d4d5614f4ea31d304
SSDEEP 24576:qohLz79QpanpUtQuFlOYwBqxdiBSYy6WxDeRx/HByz:dutFYbWxDeRx/HQz
TLSH
T1A1458D42B6C6C0B3F85E2675992BF73E2676AB051321C6E77AE43F5F98303E25434246
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

738940

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libawt\awt.pdb

kernel32

GetModuleHandleW GetVersionExW FreeLibrary Sleep GetTickCount GetProcAddress GetCurrentThreadId TlsGetValue TlsAlloc TlsSetValue InterlockedIncrement MultiByteToWideChar GlobalFree lstrcpynW GlobalAlloc lstrlenW GetProfileStringW WaitForSingleObject GetLastError SetLastError GlobalUnlock GlobalLock GlobalSize GetACP GetLocaleInfoW LocalFree FormatMessageW ExpandEnvironmentStringsW lstrcpyW ReleaseMutex LocalAlloc GetVersion CreateMutexW InterlockedDecrement SetCurrentDirectoryW GetCurrentDirectoryW ReadFile SetFilePointer WideCharToMultiByte CreateFileW GetCurrentProcessId InterlockedCompareExchange LCMapStringW SetEvent CreateEventW ResetEvent lstrcmpW GetWindowsDirectoryW GetSystemDefaultLangID GetSystemTimeAsFileTime QueryPerformanceCounter IsProcessorFeaturePresent IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess DecodePointer EncodePointer RaiseException LoadLibraryA InterlockedExchange lstrlenA LeaveCriticalSection TryEnterCriticalSection EnterCriticalSection DeleteCriticalSection CloseHandle InitializeCriticalSection

jvm

_JVM_CurrentTimeMillis@8 jio_snprintf _JVM_RaiseSignal@4

java

_JNU_GetFieldByName@20 _JNU_ThrowIllegalArgumentException@8 _JNU_IsInstanceOfByName@12 getEncodingFromLangID _JNU_ClassString@4 JNU_NewObjectByName _JNU_GetStaticFieldByName@20 _JNU_ThrowByName@12 _JNU_ThrowIOException@8 _JNU_NewStringPlatform@8 _JNU_CallMethodByNameV@24 _JNU_ThrowArrayIndexOutOfBoundsException@8 _JNU_ThrowInternalError@8 JNU_SetFieldByName JDK_LoadSystemLibrary _JNU_GetEnv@8 JNU_CallStaticMethodByName JNU_CallMethodByName _JNU_ThrowOutOfMemoryError@8 _JNU_ThrowNullPointerException@8 getJavaIDFromLangID

advapi32

RegQueryValueExW RegOpenKeyExW RegQueryValueExA RegOpenKeyExA RegCloseKey

msvcr100

_wcsicmp __clean_type_info_names_internal _except_handler4_common ?_type_info_dtor_internal_method@type_info@@QAEXXZ _crt_debugger_hook __CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null _malloc_crt malloc free memset memcpy calloc __CxxFrameHandler3 _CxxThrowException ??3@YAXPAX@Z wcslen _snwprintf _purecall strncmp getenv wcsncpy _onexit floor pow ceil sqrt sin cos sprintf strcspn strlen realloc qsort __iob_func printf fopen sscanf fflush vfprintf fprintf fabs strstr _control87 _strupr_s _wcsdup strcmp labs memmove _wtoi wcscmp abs ??0exception@std@@QAE@ABQBD@Z ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ memcmp ??0exception@std@@QAE@ABV01@@Z swprintf_s bsearch memcpy_s swscanf wcscat wcscpy_s strchr wcschr wcsstr iswspace wcscpy strcpy setlocale wcstoul wcstok _wfullpath _vswprintf_c_l _i64tow _beginthreadex _wgetenv wcsncmp ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z ?_set_new_mode@@YAHH@Z _localtime64 wcsftime _ftime64 _vsnwprintf ?terminate@@YAXXZ _unlock __dllonexit _lock

oleaut32

VariantClear SysAllocStringByteLen SysFreeString SysStringLen SysAllocString

??0D3DContext@@AAE@PAUIDirect3D9@@I@Z ??0D3DContext@@QAE@ABV0@@Z ??0D3DPipelineManager@@AAE@XZ ??0D3DVertexCacher@@AAE@XZ ??1D3DContext@@UAE@XZ ??1D3DPipelineManager@@AAE@XZ ??1D3DVertexCacher@@QAE@XZ ??4D3DContext@@QAEAAV0@ABV0@@Z ??4D3DPipelineManager@@QAEAAV0@ABV0@@Z ??4D3DVertexCacher@@QAEAAV0@ABV0@@Z ??_7D3DContext@@6B@ ?BeginScene@D3DContext@@QAEJC@Z ?BeginShapeClip@D3DContext@@QAEJXZ ?CheckAdaptersInfo@D3DPipelineManager@@AAEJXZ ?CheckAndResetDevice@D3DContext@@QAEJXZ ?CheckDeviceCaps@D3DPipelineManager@@AAEJI@Z ?CheckForBadHardware@D3DPipelineManager@@CAJKK_J@Z ?CheckOSVersion@D3DPipelineManager@@CAJXZ ?ConfigureContext@D3DContext@@QAEJPAU_D3DPRESENT_PARAMETERS_@@@Z ?CreateDefaultFocusWindow@D3DPipelineManager@@AAEPAUHWND__@@XZ ?CreateFragmentProgram@D3DContext@@AAEPAUIDirect3DPixelShader9@@PAPAKPAUShaderList@@J@Z ?CreateInstance@D3DContext@@SAJPAUIDirect3D9@@IPAPAV1@@Z ?CreateInstance@D3DPipelineManager@@CAPAV1@XZ ?CreateInstance@D3DVertexCacher@@SAJPAVD3DContext@@PAPAV1@@Z ?D3DBL_CopyImageToIntXrgbSurface@@YAJPAUSurfaceDataRasInfo@@HPAVD3DResource@@JJJJJJ@Z ?D3DBL_CopySurfaceToIntArgbImage@@YAJPAUIDirect3DSurface9@@PAUSurfaceDataRasInfo@@JJJJJJ@Z ?D3DBlitLoops_IsoBlit@@YAJPAUJNIEnv_@@PAVD3DContext@@_J2EJEEJJJJNNNN@Z ?D3DBlitToSurfaceViaTexture@@YAJPAVD3DContext@@PAUSurfaceDataRasInfo@@HPAU_D3DSDOps@@EJJJJJNNNN@Z ?D3DEnabledOnAdapter@D3DPipelineManager@@AAEJI@Z ?D3DRenderer_DrawAAParallelogram@@YAJPAVD3DContext@@MMMMMMMM@Z ?D3DRenderer_DrawLine@@YAJPAVD3DContext@@JJJJ@Z ?D3DRenderer_DrawParallelogram@@YAJPAVD3DContext@@MMMMMMMM@Z ?D3DRenderer_DrawPoly@@YAJPAVD3DContext@@JEJJPAJ1@Z ?D3DRenderer_DrawRect@@YAJPAVD3DContext@@JJJJ@Z ?D3DRenderer_DrawScanlines@@YAJPAVD3DContext@@JPAJ@Z ?D3DRenderer_FillAAParallelogram@@YAJPAVD3DContext@@MMMMMM@Z ?D3DRenderer_FillParallelogram@@YAJPAVD3DContext@@MMMMMM@Z ?D3DRenderer_FillRect@@YAJPAVD3DContext@@JJJJ@Z ?D3DRenderer_FillSpans@@YAJPAVD3DContext@@JPAJ@Z ?DeleteInstance@D3DPipelineManager@@CAXXZ ?DisableAAParallelogramProgram@D3DContext@@QAEJXZ ?DrawLine@D3DVertexCacher@@QAEJHHHH@Z ?DrawParallelogramAA@D3DVertexCacher@@QAEJMMMMMMMMMMMM@Z ?DrawPoly@D3DVertexCacher@@QAEJJEJJPAJ0@Z ?DrawRect@D3DVertexCacher@@QAEJHHHH@Z ?DrawScanlines@D3DVertexCacher@@QAEJJPAJ@Z ?DrawTexture@D3DVertexCacher@@QAEJMMMMMMMM@Z ?DrawTexture@D3DVertexCacher@@QAEJMMMMMMMMMMMM@Z ?EnableAAParallelogramProgram@D3DContext@@QAEJXZ ?EnableBasicGradientProgram@D3DContext@@QAEJJ@Z ?EnableConvolveProgram@D3DContext@@QAEJJ@Z ?EnableFragmentProgram@D3DContext@@AAEJPAPAKPAUShaderList@@J@Z ?EnableLCDTextProgram@D3DContext@@QAEJXZ ?EnableLinearGradientProgram@D3DContext@@QAEJJ@Z ?EnableLookupProgram@D3DContext@@QAEJJ@Z ?EnableRadialGradientProgram@D3DContext@@QAEJJ@Z ?EnableRescaleProgram@D3DContext@@QAEJJ@Z ?EndScene@D3DContext@@QAEJXZ ?EndShapeClip@D3DContext@@QAEJXZ ?EnsureCapacity@D3DVertexCacher@@AAEJW4_D3DPRIMITIVETYPE@@I@Z ?FillParallelogram@D3DVertexCacher@@QAEJMMMMMM@Z ?FillParallelogramAA@D3DVertexCacher@@QAEJMMMMMM@Z ?FillRect@D3DVertexCacher@@QAEJHHHH@Z ?FillSpans@D3DVertexCacher@@QAEJJPAJ@Z ?FlushVertexQueue@D3DContext@@QAEJXZ ?GDICheckForBadHardware@D3DPipelineManager@@CAJXZ ?Get3DDevice@D3DContext@@QAEPAUIDirect3DDevice9@@XZ ?Get3DObject@D3DContext@@QAEPAUIDirect3D9@@XZ ?GetAdapterOrdinalByHmon@D3DPipelineManager@@AAEIPAUHMONITOR__@@@Z ?GetAdapterOrdinalForScreen@D3DPipelineManager@@QAEIJ@Z ?GetClipType@D3DContext@@QAE?AW4ClipType@@XZ ?GetColor@D3DVertexCacher@@QAEJXZ ?GetContextCaps@D3DContext@@QAEHXZ ?GetCurrentFocusWindow@D3DPipelineManager@@QAEPAUHWND__@@XZ ?GetD3DContext@D3DPipelineManager@@QAEJIPAPAVD3DContext@@@Z ?GetD3DObject@D3DPipelineManager@@QAEPAUIDirect3D9@@XZ ?GetDeviceCaps@D3DContext@@QAEPAU_D3DCAPS9@@XZ ?GetDeviceType@D3DPipelineManager@@QAE?AW4_D3DDEVTYPE@@XZ ?GetFreeVertices@D3DVertexCacher@@QAEIXZ ?GetGrayscaleGlyphCache@D3DContext@@QAEPAVD3DGlyphCache@@XZ ?GetInstance@D3DPipelineManager@@SAPAV1@XZ ?GetLCDGlyphCache@D3DContext@@QAEPAVD3DGlyphCache@@XZ ?GetMaskCache@D3DContext@@QAEPAVD3DMaskCache@@XZ ?GetMatchingDepthStencilFormat@D3DPipelineManager@@QAE?AW4_D3DFORMAT@@IW42@0@Z ?GetPaintState@D3DContext@@QAEJXZ ?GetPresentationParams@D3DContext@@QAEPAU_D3DPRESENT_PARAMETERS_@@XZ ?GetResourceManager@D3DContext@@QAEPAVD3DResourceManager@@XZ ?HandleAdaptersChange@D3DPipelineManager@@SAJPAPAUHMONITOR__@@I@Z ?HandleLostDevices@D3DPipelineManager@@QAEJXZ ?Init@D3DVertexCacher@@QAEJPAVD3DContext@@@Z ?InitAdapters@D3DPipelineManager@@AAEJXZ ?InitContext@D3DContext@@QAEJXZ ?InitContextCaps@D3DContext@@AAEJXZ ?InitD3D@D3DPipelineManager@@AAEJXZ ?InitDepthStencilBuffer@D3DContext@@AAEJPAU_D3DSURFACE_DESC@@@Z ?InitDevice@D3DContext@@AAEJPAUIDirect3DDevice9@@@Z ?InitGrayscaleGlyphCache@D3DContext@@QAEJXZ ?InitLCDGlyphCache@D3DContext@@QAEJXZ ?IsAlphaRTSurfaceSupported@D3DContext@@QAEHXZ ?IsAlphaRTTSupported@D3DContext@@QAEHXZ ?IsDepthStencilBufferOk@D3DContext@@AAEHPAU_D3DSURFACE_DESC@@@Z ?IsDynamicTextureSupported@D3DContext@@QAEHXZ ?IsGradientInstructionExtensionSupported@D3DContext@@QAEHXZ ?IsHWRasterizer@D3DContext@@QAEHXZ ?IsIdentityTx@D3DContext@@QAEHXZ ?IsImmediateIntervalSupported@D3DContext@@QAEHXZ ?IsMultiTexturingSupported@D3DContext@@QAEHXZ ?IsOpaqueRTTSupported@D3DContext@@QAEHXZ ?IsPixelShader20Supported@D3DContext@@QAEHXZ ?IsPixelShader30Supported@D3DContext@@QAEHXZ ?IsPow2TexturesOnly@D3DContext@@QAEHXZ ?IsSquareTexturesOnly@D3DContext@@QAEHXZ ?IsStretchRectFilteringSupported@D3DContext@@QAEHW4_D3DTEXTUREFILTERTYPE@@@Z ?IsTextureFilteringSupported@D3DContext@@QAEHW4_D3DTEXTUREFILTERTYPE@@@Z ?IsTextureFormatSupported@D3DContext@@QAEHW4_D3DFORMAT@@K@Z ?NotifyAdapterEventListeners@D3DPipelineManager@@SAXIJ@Z ?ReleaseAdapters@D3DPipelineManager@@AAEJXZ ?ReleaseContextResources@D3DContext@@QAEXXZ ?ReleaseD3D@D3DPipelineManager@@AAEJXZ ?ReleaseDefPoolResources@D3DContext@@QAEXXZ ?ReleaseDefPoolResources@D3DVertexCacher@@QAEXXZ ?Render@D3DVertexCacher@@QAEJH@Z ?ResetClip@D3DContext@@QAEJXZ ?ResetComposite@D3DContext@@QAEJXZ ?ResetContext@D3DContext@@QAEJXZ ?ResetTransform@D3DContext@@QAEJXZ ?RestoreState@D3DContext@@QAEJXZ ?SaveState@D3DContext@@QAEJXZ ?SelectDeviceType@D3DPipelineManager@@AAE?AW4_D3DDEVTYPE@@XZ ?SetAlphaComposite@D3DContext@@QAEJJMJ@Z ?SetColor@D3DVertexCacher@@QAEXJ@Z ?SetFSFocusWindow@D3DPipelineManager@@QAEPAUHWND__@@IPAU2@@Z ?SetPaintState@D3DContext@@QAEXJ@Z ?SetRectClip@D3DContext@@QAEJHHHH@Z ?SetRenderTarget@D3DContext@@QAEJPAUIDirect3DSurface9@@@Z ?SetTexture@D3DContext@@QAEJPAUIDirect3DTexture9@@K@Z ?SetTransform@D3DContext@@QAEJNNNNNN@Z ?Sync@D3DContext@@QAEJXZ ?UpdateState@D3DContext@@QAEJC@Z ?UpdateTextureColorState@D3DContext@@QAEJKK@Z ?UploadTileToTexture@D3DContext@@QAEJPAVD3DResource@@PAXJJJJJJJW4TileFormat@@PAJ3@Z ?pMgr@D3DPipelineManager@@0PAV1@A AccelGlyphCache_RemoveAllCellInfos J2dTraceImpl _AWTIsHeadless@0 _DSFreeDrawingSurface@4 _DSGetComponent@8 _DSGetDrawingSurface@8 _DSLockAWT@4 _DSUnlockAWT@4 _Disposer_AddRecord@20 _GDIWinSD_InitDC@32 _GDIWindowSurfaceData_GetComp@8 _GDIWindowSurfaceData_GetOps@8 _GDIWindowSurfaceData_GetOpsNoSetup@8 _GDIWindowSurfaceData_GetWindow@8 _GetNativePrim@8 _GrPrim_CompGetAlphaInfo@12 _GrPrim_CompGetXorColor@8 _GrPrim_CompGetXorInfo@12 _GrPrim_Sg2dGetClip@12 _GrPrim_Sg2dGetCompInfo@16 _GrPrim_Sg2dGetEaRGB@8 _GrPrim_Sg2dGetLCDTextContrast@8 _GrPrim_Sg2dGetPixel@8 _J2dTraceInit@0 _JNI_OnLoad@8 _Java_java_awt_AWTEvent_initIDs@8 _Java_java_awt_AWTEvent_nativeSetSource@12 _Java_java_awt_Button_initIDs@8 _Java_java_awt_CheckboxMenuItem_initIDs@8 _Java_java_awt_Checkbox_initIDs@8 _Java_java_awt_Choice_initIDs@8 _Java_java_awt_Color_initIDs@8 _Java_java_awt_Component_initIDs@8 _Java_java_awt_Container_initIDs@8 _Java_java_awt_Cursor_finalizeImpl@16 _Java_java_awt_Cursor_initIDs@8 _Java_java_awt_Dialog_initIDs@8 _Java_java_awt_Dimension_initIDs@8 _Java_java_awt_Event_initIDs@8 _Java_java_awt_FileDialog_initIDs@8 _Java_java_awt_FontMetrics_initIDs@8 _Java_java_awt_Font_initIDs@8 _Java_java_awt_Frame_initIDs@8 _Java_java_awt_Insets_initIDs@8 _Java_java_awt_KeyboardFocusManager_initIDs@8 _Java_java_awt_Label_initIDs@8 _Java_java_awt_MenuBar_initIDs@8 _Java_java_awt_MenuComponent_initIDs@8 _Java_java_awt_MenuItem_initIDs@8 _Java_java_awt_Menu_initIDs@8 _Java_java_awt_Rectangle_initIDs@8 _Java_java_awt_ScrollPaneAdjustable_initIDs@8 _Java_java_awt_ScrollPane_initIDs@8 _Java_java_awt_Scrollbar_initIDs@8 _Java_java_awt_TextArea_initIDs@8 _Java_java_awt_TextField_initIDs@8 _Java_java_awt_Toolkit_initIDs@8 _Java_java_awt_TrayIcon_initIDs@8 _Java_java_awt_Window_initIDs@8 _Java_java_awt_event_InputEvent_initIDs@8 _Java_java_awt_event_KeyEvent_initIDs@8 _Java_java_awt_event_MouseEvent_initIDs@8 _Java_java_awt_image_BufferedImage_initIDs@8 _Java_java_awt_image_ColorModel_initIDs@8 _Java_java_awt_image_ComponentSampleModel_initIDs@8 _Java_java_awt_image_DataBufferInt_initIDs@8 _Java_java_awt_image_IndexColorModel_initIDs@8 _Java_java_awt_image_Kernel_initIDs@8 _Java_java_awt_image_Raster_initIDs@8 _Java_java_awt_image_SampleModel_initIDs@8 _Java_java_awt_image_SinglePixelPackedSampleModel_initIDs@8 _Java_sun_awt_DebugSettings_setCTracingOn__Z@12 _Java_sun_awt_DebugSettings_setCTracingOn__ZLjava_lang_String_2@16 _Java_sun_awt_DebugSettings_setCTracingOn__ZLjava_lang_String_2I@20 _Java_sun_awt_DefaultMouseInfoPeer_fillPointWithCoords@12 _Java_sun_awt_DefaultMouseInfoPeer_isWindowUnderMouse@12 _Java_sun_awt_FontDescriptor_initIDs@8 _Java_sun_awt_PlatformFont_initIDs@8 _Java_sun_awt_SunToolkit_closeSplashScreen@8 _Java_sun_awt_Win32FontManager_deRegisterFontWithPlatform@12 _Java_sun_awt_Win32FontManager_getEUDCFontFile@8 _Java_sun_awt_Win32FontManager_registerFontWithPlatform@12 _Java_sun_awt_Win32GraphicsConfig_getBounds@12 _Java_sun_awt_Win32GraphicsConfig_initIDs@8 _Java_sun_awt_Win32GraphicsDevice_configDisplayMode@32 _Java_sun_awt_Win32GraphicsDevice_enterFullScreenExclusive@16 _Java_sun_awt_Win32GraphicsDevice_enumDisplayModes@16 _Java_sun_awt_Win32GraphicsDevice_exitFullScreenExclusive@16 _Java_sun_awt_Win32GraphicsDevice_getCurrentDisplayMode@12 _Java_sun_awt_Win32GraphicsDevice_getDefaultPixIDImpl@12 _Java_sun_awt_Win32GraphicsDevice_getMaxConfigsImpl@12 _Java_sun_awt_Win32GraphicsDevice_initDevice@12 _Java_sun_awt_Win32GraphicsDevice_initIDs@8 _Java_sun_awt_Win32GraphicsDevice_isPixFmtSupported@16 _Java_sun_awt_Win32GraphicsDevice_makeColorModel@16 _Java_sun_awt_Win32GraphicsEnvironment_getDefaultScreen@8 _Java_sun_awt_Win32GraphicsEnvironment_getNumScreens@8 _Java_sun_awt_Win32GraphicsEnvironment_getXResolution@8 _Java_sun_awt_Win32GraphicsEnvironment_getYResolution@8 _Java_sun_awt_Win32GraphicsEnvironment_initDisplay@8 _Java_sun_awt_Win32GraphicsEnvironment_isVistaOS@8 _Java_sun_awt_image_BufImgSurfaceData_freeNativeICMData@16 _Java_sun_awt_image_BufImgSurfaceData_initIDs@16 _Java_sun_awt_image_BufImgSurfaceData_initRaster@40 _Java_sun_awt_image_ByteComponentRaster_initIDs@8 _Java_sun_awt_image_BytePackedRaster_initIDs@8 _Java_sun_awt_image_DataBufferNative_getElem@20 _Java_sun_awt_image_DataBufferNative_setElem@24 _Java_sun_awt_image_GifImageDecoder_initIDs@8 _Java_sun_awt_image_GifImageDecoder_parseImage@44 _Java_sun_awt_image_ImageRepresentation_initIDs@8 _Java_sun_awt_image_ImageRepresentation_setDiffICM@60 _Java_sun_awt_image_ImageRepresentation_setICMpixels@44 _Java_sun_awt_image_ImagingLib_convolveBI@24 _Java_sun_awt_image_ImagingLib_convolveRaster@24 _Java_sun_awt_image_ImagingLib_init@8 _Java_sun_awt_image_ImagingLib_lookupByteBI@20 _Java_sun_awt_image_ImagingLib_lookupByteRaster@20 _Java_sun_awt_image_ImagingLib_transformBI@24 _Java_sun_awt_image_ImagingLib_transformRaster@24 _Java_sun_awt_image_IntegerComponentRaster_initIDs@8 _Java_sun_awt_image_ShortComponentRaster_initIDs@8 _Java_sun_awt_shell_Win32ShellFolder2_bindToObject@24 _Java_sun_awt_shell_Win32ShellFolder2_combinePIDLs@24 _Java_sun_awt_shell_Win32ShellFolder2_compareIDs@32 _Java_sun_awt_shell_Win32ShellFolder2_compareIDsByColumn@36 _Java_sun_awt_shell_Win32ShellFolder2_copyFirstPIDLEntry@16 _Java_sun_awt_shell_Win32ShellFolder2_disposeIcon@16 _Java_sun_awt_shell_Win32ShellFolder2_doGetColumnInfo@16 _Java_sun_awt_shell_Win32ShellFolder2_doGetColumnValue@28 _Java_sun_awt_shell_Win32ShellFolder2_extractIcon@28 _Java_sun_awt_shell_Win32ShellFolder2_getAttributes0@28 _Java_sun_awt_shell_Win32ShellFolder2_getDisplayNameOf@28 _Java_sun_awt_shell_Win32ShellFolder2_getEnumObjects@24 _Java_sun_awt_shell_Win32ShellFolder2_getExecutableType@12 _Java_sun_awt_shell_Win32ShellFolder2_getFileSystemPath0@12 _Java_sun_awt_shell_Win32ShellFolder2_getFolderType@16 _Java_sun_awt_shell_Win32ShellFolder2_getIShellIcon@16 _Java_sun_awt_shell_Win32ShellFolder2_getIcon@16 _Java_sun_awt_shell_Win32ShellFolder2_getIconBits@20 _Java_sun_awt_shell_Win32ShellFolder2_getIconIndex@24 _Java_sun_awt_shell_Win32ShellFolder2_getIconResource@28 _Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation@28 _Java_sun_awt_shell_Win32ShellFolder2_getNextChild@16 _Java_sun_awt_shell_Win32ShellFolder2_getNextPIDLEntry@16 _Java_sun_awt_shell_Win32ShellFolder2_getStandardViewButton0@12 _Java_sun_awt_shell_Win32ShellFolder2_getSystemIcon@12 _Java_sun_awt_shell_Win32ShellFolder2_initDesktop@8 _Java_sun_awt_shell_Win32ShellFolder2_initIDs@8 _Java_sun_awt_shell_Win32ShellFolder2_initSpecial@20 _Java_sun_awt_shell_Win32ShellFolder2_parseDisplayName0@20 _Java_sun_awt_shell_Win32ShellFolder2_releaseEnumObjects@16 _Java_sun_awt_shell_Win32ShellFolder2_releaseIShellFolder@16 _Java_sun_awt_shell_Win32ShellFolder2_releasePIDL@16 _Java_sun_awt_shell_Win32ShellFolderManager2_initializeCom@8 _Java_sun_awt_shell_Win32ShellFolderManager2_uninitializeCom@8 _Java_sun_awt_windows_ThemeReader_closeTheme@16 _Java_sun_awt_windows_ThemeReader_getBoolean@28 _Java_sun_awt_windows_ThemeReader_getColor@28 _Java_sun_awt_windows_ThemeReader_getEnum@28 _Java_sun_awt_windows_ThemeReader_getInt@28 _Java_sun_awt_windows_ThemeReader_getPartSize@24 _Java_sun_awt_windows_ThemeReader_getPoint@28 _Java_sun_awt_windows_ThemeReader_getPosition@28 _Java_sun_awt_windows_ThemeReader_getSysBoolean@20 _Java_sun_awt_windows_ThemeReader_getThemeBackgroundContentMargins@32 _Java_sun_awt_windows_ThemeReader_getThemeMargins@28 _Java_sun_awt_windows_ThemeReader_getThemeTransitionDuration@32 _Java_sun_awt_windows_ThemeReader_isGetThemeTransitionDurationDefined@8 _Java_sun_awt_windows_ThemeReader_isThemePartDefined@24 _Java_sun_awt_windows_ThemeReader_isThemed@8 _Java_sun_awt_windows_ThemeReader_openTheme@12 _Java_sun_awt_windows_ThemeReader_paintBackground@48 _Java_sun_awt_windows_ThemeReader_setWindowTheme@12 _Java_sun_awt_windows_WButtonPeer_create@12 _Java_sun_awt_windows_WButtonPeer_initIDs@8 _Java_sun_awt_windows_WButtonPeer_setLabel@12 _Java_sun_awt_windows_WCanvasPeer_create@12 _Java_sun_awt_windows_WCanvasPeer_setNativeBackgroundErase@16 _Java_sun_awt_windows_WCheckboxMenuItemPeer_setState@12 _Java_sun_awt_windows_WCheckboxPeer_create@12 _Java_sun_awt_windows_WCheckboxPeer_getCheckMarkSize@8 _Java_sun_awt_windows_WCheckboxPeer_setCheckboxGroup@12 _Java_sun_awt_windows_WCheckboxPeer_setLabel@12 _Java_sun_awt_windows_WCheckboxPeer_setState@12 _Java_sun_awt_windows_WChoicePeer_addItems@16 _Java_sun_awt_windows_WChoicePeer_closeList@8 _Java_sun_awt_windows_WChoicePeer_create@12 _Java_sun_awt_windows_WChoicePeer_remove@12 _Java_sun_awt_windows_WChoicePeer_removeAll@8 _Java_sun_awt_windows_WChoicePeer_reshape@24 _Java_sun_awt_windows_WChoicePeer_select@12 _Java_sun_awt_windows_WClipboard_closeClipboard@8 _Java_sun_awt_windows_WClipboard_getClipboardData@16 _Java_sun_awt_windows_WClipboard_getClipboardFormats@8 _Java_sun_awt_windows_WClipboard_init@8 _Java_sun_awt_windows_WClipboard_openClipboard@12 _Java_sun_awt_windows_WClipboard_publishClipboardData@20 _Java_sun_awt_windows_WClipboard_registerClipboardViewer@8 _Java_sun_awt_windows_WColor_getDefaultColor@12 _Java_sun_awt_windows_WComponentPeer__1dispose@8 _Java_sun_awt_windows_WComponentPeer__1setBackground@12 _Java_sun_awt_windows_WComponentPeer__1setFont@12 _Java_sun_awt_windows_WComponentPeer__1setForeground@12 _Java_sun_awt_windows_WComponentPeer_addNativeDropTarget@8 _Java_sun_awt_windows_WComponentPeer_beginValidate@8 _Java_sun_awt_windows_WComponentPeer_createPrintedPixels@28 _Java_sun_awt_windows_WComponentPeer_disable@8 _Java_sun_awt_windows_WComponentPeer_enable@8 _Java_sun_awt_windows_WComponentPeer_endValidate@8 _Java_sun_awt_windows_WComponentPeer_getLocationOnScreen@8 _Java_sun_awt_windows_WComponentPeer_getTargetGC@8 _Java_sun_awt_windows_WComponentPeer_hide@8 _Java_sun_awt_windows_WComponentPeer_isObscured@8 _Java_sun_awt_windows_WComponentPeer_nativeHandleEvent@12 _Java_sun_awt_windows_WComponentPeer_nativeHandlesWheelScrolling@8 _Java_sun_awt_windows_WComponentPeer_pSetParent@12 _Java_sun_awt_windows_WComponentPeer_pShow@8 _Java_sun_awt_windows_WComponentPeer_removeNativeDropTarget@8 _Java_sun_awt_windows_WComponentPeer_reshape@24 _Java_sun_awt_windows_WComponentPeer_reshapeNoCheck@24 _Java_sun_awt_windows_WComponentPeer_setFocus@12 _Java_sun_awt_windows_WComponentPeer_setRectangularShape@28 _Java_sun_awt_windows_WComponentPeer_setZOrder@16 _Java_sun_awt_windows_WComponentPeer_start@8 _Java_sun_awt_windows_WComponentPeer_updateWindow@8 _Java_sun_awt_windows_WCustomCursor_createCursorIndirect@36 _Java_sun_awt_windows_WCustomCursor_getCursorHeight@8 _Java_sun_awt_windows_WCustomCursor_getCursorWidth@8 _Java_sun_awt_windows_WDataTransferer_dragQueryFile@12 _Java_sun_awt_windows_WDataTransferer_getClipboardFormatName@16 _Java_sun_awt_windows_WDataTransferer_imageDataToPlatformImageBytes@28 _Java_sun_awt_windows_WDataTransferer_platformImageBytesToImageData@20 _Java_sun_awt_windows_WDataTransferer_registerClipboardFormat@12 _Java_sun_awt_windows_WDefaultFontCharset_canConvert@12 _Java_sun_awt_windows_WDefaultFontCharset_initIDs@8 _Java_sun_awt_windows_WDesktopPeer_ShellExecute@16 _Java_sun_awt_windows_WDesktopProperties_getWindowsParameters@8 _Java_sun_awt_windows_WDesktopProperties_init@8 _Java_sun_awt_windows_WDesktopProperties_initIDs@8 _Java_sun_awt_windows_WDesktopProperties_playWindowsSound@12 _Java_sun_awt_windows_WDialogPeer_createAwtDialog@12 _Java_sun_awt_windows_WDialogPeer_endModal@8 _Java_sun_awt_windows_WDialogPeer_pSetIMMOption@12 _Java_sun_awt_windows_WDialogPeer_showModal@8 _Java_sun_awt_windows_WDragSourceContextPeer_createDragSource@32 _Java_sun_awt_windows_WDragSourceContextPeer_doDragDrop@40 _Java_sun_awt_windows_WDragSourceContextPeer_setNativeCursor@24 _Java_sun_awt_windows_WDropTargetContextPeerFileStream_freeStgMedium@16 _Java_sun_awt_windows_WDropTargetContextPeerIStream_Available@16 _Java_sun_awt_windows_WDropTargetContextPeerIStream_Close@16 _Java_sun_awt_windows_WDropTargetContextPeerIStream_Read@16 _Java_sun_awt_windows_WDropTargetContextPeerIStream_ReadBytes@28 _Java_sun_awt_windows_WDropTargetContextPeer_dropDone@24 _Java_sun_awt_windows_WDropTargetContextPeer_getData@24 _Java_sun_awt_windows_WEmbeddedFramePeer_create@12 _Java_sun_awt_windows_WEmbeddedFramePeer_getBoundsPrivate@8 _Java_sun_awt_windows_WEmbeddedFrame_initIDs@8 _Java_sun_awt_windows_WEmbeddedFrame_isPrinterDC@16 _Java_sun_awt_windows_WEmbeddedFrame_notifyModalBlockedImpl@20 _Java_sun_awt_windows_WEmbeddedFrame_printBand@56 _Java_sun_awt_windows_WFileDialogPeer__1dispose@8 _Java_sun_awt_windows_WFileDialogPeer__1hide@8 _Java_sun_awt_windows_WFileDialogPeer__1show@8 _Java_sun_awt_windows_WFileDialogPeer_initIDs@8 _Java_sun_awt_windows_WFileDialogPeer_setFilterString@12 _Java_sun_awt_windows_WFileDialogPeer_toBack@8 _Java_sun_awt_windows_WFileDialogPeer_toFront@8 _Java_sun_awt_windows_WFontMetrics_bytesWidth@20 _Java_sun_awt_windows_WFontMetrics_charsWidth@20 _Java_sun_awt_windows_WFontMetrics_init@8 _Java_sun_awt_windows_WFontMetrics_initIDs@8 _Java_sun_awt_windows_WFontMetrics_stringWidth@12 _Java_sun_awt_windows_WFontPeer_initIDs@8 _Java_sun_awt_windows_WFramePeer_clearMaximizedBounds@8 _Java_sun_awt_windows_WFramePeer_createAwtFrame@12 _Java_sun_awt_windows_WFramePeer_getState@8 _Java_sun_awt_windows_WFramePeer_getSysMenuHeight@8 _Java_sun_awt_windows_WFramePeer_initIDs@8 _Java_sun_awt_windows_WFramePeer_pSetIMMOption@12 _Java_sun_awt_windows_WFramePeer_setMaximizedBounds@24 _Java_sun_awt_windows_WFramePeer_setMenuBar0@12 _Java_sun_awt_windows_WFramePeer_setState@12 _Java_sun_awt_windows_WFramePeer_synthesizeWmActivate@12 _Java_sun_awt_windows_WGlobalCursorManager_findHeavyweightUnderCursor@12 _Java_sun_awt_windows_WGlobalCursorManager_getCursorPos@12 _Java_sun_awt_windows_WGlobalCursorManager_getLocationOnScreen@12 _Java_sun_awt_windows_WGlobalCursorManager_setCursor@20 _Java_sun_awt_windows_WInputMethodDescriptor_getNativeAvailableLocales@8 _Java_sun_awt_windows_WInputMethod_createNativeContext@8 _Java_sun_awt_windows_WInputMethod_destroyNativeContext@12 _Java_sun_awt_windows_WInputMethod_disableNativeIME@12 _Java_sun_awt_windows_WInputMethod_enableNativeIME@20 _Java_sun_awt_windows_WInputMethod_endCompositionNative@16 _Java_sun_awt_windows_WInputMethod_getConversionStatus@12 _Java_sun_awt_windows_WInputMethod_getNativeIMMDescription@8 _Java_sun_awt_windows_WInputMethod_getNativeLocale@8 _Java_sun_awt_windows_WInputMethod_getOpenStatus@12 _Java_sun_awt_windows_WInputMethod_handleNativeIMEEvent@16 _Java_sun_awt_windows_WInputMethod_openCandidateWindow@20 _Java_sun_awt_windows_WInputMethod_setConversionStatus@16 _Java_sun_awt_windows_WInputMethod_setNativeLocale@16 _Java_sun_awt_windows_WInputMethod_setOpenStatus@16 _Java_sun_awt_windows_WInputMethod_setStatusWindowVisible@16 _Java_sun_awt_windows_WKeyboardFocusManagerPeer_getNativeFocusOwner@8 _Java_sun_awt_windows_WKeyboardFocusManagerPeer_getNativeFocusedWindow@8 _Java_sun_awt_windows_WKeyboardFocusManagerPeer_setNativeFocusOwner@12 _Java_sun_awt_windows_WLabelPeer_create@12 _Java_sun_awt_windows_WLabelPeer_lazyPaint@8 _Java_sun_awt_windows_WLabelPeer_setAlignment@12 _Java_sun_awt_windows_WLabelPeer_setText@12 _Java_sun_awt_windows_WListPeer_addItems@20 _Java_sun_awt_windows_WListPeer_create@12 _Java_sun_awt_windows_WListPeer_delItems@16 _Java_sun_awt_windows_WListPeer_deselect@12 _Java_sun_awt_windows_WListPeer_getMaxWidth@8 _Java_sun_awt_windows_WListPeer_isSelected@12 _Java_sun_awt_windows_WListPeer_makeVisible@12 _Java_sun_awt_windows_WListPeer_select@12 _Java_sun_awt_windows_WListPeer_setMultipleSelections@12 _Java_sun_awt_windows_WListPeer_updateMaxItemWidth@8 _Java_sun_awt_windows_WMenuBarPeer_addMenu@12 _Java_sun_awt_windows_WMenuBarPeer_create@12 _Java_sun_awt_windows_WMenuBarPeer_delMenu@12 _Java_sun_awt_windows_WMenuItemPeer__1dispose@8 _Java_sun_awt_windows_WMenuItemPeer__1setFont@12 _Java_sun_awt_windows_WMenuItemPeer__1setLabel@12 _Java_sun_awt_windows_WMenuItemPeer_create@12 _Java_sun_awt_windows_WMenuItemPeer_enable@12 _Java_sun_awt_windows_WMenuItemPeer_initIDs@8 _Java_sun_awt_windows_WMenuPeer_addSeparator@8 _Java_sun_awt_windows_WMenuPeer_createMenu@12 _Java_sun_awt_windows_WMenuPeer_createSubMenu@12 _Java_sun_awt_windows_WMenuPeer_delItem@12 _Java_sun_awt_windows_WObjectPeer_initIDs@8 _Java_sun_awt_windows_WPageDialogPeer__1show@8 _Java_sun_awt_windows_WPageDialog_initIDs@8 _Java_sun_awt_windows_WPanelPeer_initIDs@8 _Java_sun_awt_windows_WPopupMenuPeer__1show@12 _Java_sun_awt_windows_WPopupMenuPeer_createMenu@12 _Java_sun_awt_windows_WPrintDialogPeer__1show@8 _Java_sun_awt_windows_WPrintDialogPeer_initIDs@8 _Java_sun_awt_windows_WPrintDialogPeer_toBack@8 _Java_sun_awt_windows_WPrintDialogPeer_toFront@8 _Java_sun_awt_windows_WPrintDialog_initIDs@8 _Java_sun_awt_windows_WPrinterJob__1startDoc@16 _Java_sun_awt_windows_WPrinterJob_abortDoc@8 _Java_sun_awt_windows_WPrinterJob_beginPath@16 _Java_sun_awt_windows_WPrinterJob_closeFigure@16 _Java_sun_awt_windows_WPrinterJob_deleteDC@32 _Java_sun_awt_windows_WPrinterJob_deviceEndPage@20 _Java_sun_awt_windows_WPrinterJob_deviceStartPage@24 _Java_sun_awt_windows_WPrinterJob_drawDIBImage@60 _Java_sun_awt_windows_WPrinterJob_endDoc@8 _Java_sun_awt_windows_WPrinterJob_endPath@16 _Java_sun_awt_windows_WPrinterJob_fillPath@16 _Java_sun_awt_windows_WPrinterJob_fillRect@44 _Java_sun_awt_windows_WPrinterJob_frameRect@32 _Java_sun_awt_windows_WPrinterJob_getDefaultPage@12 _Java_sun_awt_windows_WPrinterJob_getGDIAdvance@20 _Java_sun_awt_windows_WPrinterJob_getNativePrintService@8 _Java_sun_awt_windows_WPrinterJob_getPenX@16 _Java_sun_awt_windows_WPrinterJob_getPenY@16 _Java_sun_awt_windows_WPrinterJob_initIDs@8 _Java_sun_awt_windows_WPrinterJob_initPrinter@8 _Java_sun_awt_windows_WPrinterJob_lineTo@24 _Java_sun_awt_windows_WPrinterJob_moveTo@24 _Java_sun_awt_windows_WPrinterJob_polyBezierTo@40 _Java_sun_awt_windows_WPrinterJob_printBand@28 _Java_sun_awt_windows_WPrinterJob_selectClipPath@16 _Java_sun_awt_windows_WPrinterJob_selectPen@32 _Java_sun_awt_windows_WPrinterJob_selectSolidBrush@28 _Java_sun_awt_windows_WPrinterJob_selectStylePen@48 _Java_sun_awt_windows_WPrinterJob_setFont@40 _Java_sun_awt_windows_WPrinterJob_setNativeCopies@12 _Java_sun_awt_windows_WPrinterJob_setNativePrintService@12 _Java_sun_awt_windows_WPrinterJob_setPolyFillMode@20 _Java_sun_awt_windows_WPrinterJob_setTextColor@28 _Java_sun_awt_windows_WPrinterJob_showDocProperties@60 _Java_sun_awt_windows_WPrinterJob_textOut@40 _Java_sun_awt_windows_WPrinterJob_validatePaper@16 _Java_sun_awt_windows_WRobotPeer__1dispose@8 _Java_sun_awt_windows_WRobotPeer_create@8 _Java_sun_awt_windows_WRobotPeer_getRGBPixels@28 _Java_sun_awt_windows_WRobotPeer_keyPress@12 _Java_sun_awt_windows_WRobotPeer_keyRelease@12 _Java_sun_awt_windows_WRobotPeer_mouseMoveImpl@16 _Java_sun_awt_windows_WRobotPeer_mousePress@12 _Java_sun_awt_windows_WRobotPeer_mouseRelease@12 _Java_sun_awt_windows_WRobotPeer_mouseWheel@12 _Java_sun_awt_windows_WScrollPanePeer__1getHScrollbarHeight@8 _Java_sun_awt_windows_WScrollPanePeer__1getVScrollbarWidth@8 _Java_sun_awt_windows_WScrollPanePeer_create@12 _Java_sun_awt_windows_WScrollPanePeer_getOffset@12 _Java_sun_awt_windows_WScrollPanePeer_initIDs@8 _Java_sun_awt_windows_WScrollPanePeer_setInsets@8 _Java_sun_awt_windows_WScrollPanePeer_setScrollPosition@16 _Java_sun_awt_windows_WScrollPanePeer_setSpans@24 _Java_sun_awt_windows_WScrollbarPeer_create@12 _Java_sun_awt_windows_WScrollbarPeer_getScrollbarSize@12 _Java_sun_awt_windows_WScrollbarPeer_setLineIncrement@12 _Java_sun_awt_windows_WScrollbarPeer_setPageIncrement@12 _Java_sun_awt_windows_WScrollbarPeer_setValues@24 _Java_sun_awt_windows_WTextAreaPeer_create@12 _Java_sun_awt_windows_WTextAreaPeer_replaceRange@20 _Java_sun_awt_windows_WTextComponentPeer_enableEditing@12 _Java_sun_awt_windows_WTextComponentPeer_getSelectionEnd@8 _Java_sun_awt_windows_WTextComponentPeer_getSelectionStart@8 _Java_sun_awt_windows_WTextComponentPeer_getText@8 _Java_sun_awt_windows_WTextComponentPeer_initIDs@8 _Java_sun_awt_windows_WTextComponentPeer_select@16 _Java_sun_awt_windows_WTextComponentPeer_setText@12 _Java_sun_awt_windows_WTextFieldPeer_create@12 _Java_sun_awt_windows_WTextFieldPeer_setEchoChar@12 _Java_sun_awt_windows_WToolkitThreadBlockedHandler_startSecondaryEventLoop@8 _Java_sun_awt_windows_WToolkit_beep@8 _Java_sun_awt_windows_WToolkit_disableCustomPalette@8 _Java_sun_awt_windows_WToolkit_embeddedDispose@8 _Java_sun_awt_windows_WToolkit_embeddedEventLoopIdleProcessing@8 _Java_sun_awt_windows_WToolkit_embeddedInit@8 _Java_sun_awt_windows_WToolkit_eventLoop@8 _Java_sun_awt_windows_WToolkit_getLockingKeyStateNative@12 _Java_sun_awt_windows_WToolkit_getMaximumCursorColors@8 _Java_sun_awt_windows_WToolkit_getNumberOfButtonsImpl@8 _Java_sun_awt_windows_WToolkit_getScreenHeight@8 _Java_sun_awt_windows_WToolkit_getScreenInsets@12 _Java_sun_awt_windows_WToolkit_getScreenWidth@8 _Java_sun_awt_windows_WToolkit_getWindowsVersion@8 _Java_sun_awt_windows_WToolkit_init@8 _Java_sun_awt_windows_WToolkit_initIDs@8 _Java_sun_awt_windows_WToolkit_isDynamicLayoutSupportedNative@8 _Java_sun_awt_windows_WToolkit_loadSystemColors@12 _Java_sun_awt_windows_WToolkit_makeColorModel@8 _Java_sun_awt_windows_WToolkit_nativeSync@8 _Java_sun_awt_windows_WToolkit_postDispose@8 _Java_sun_awt_windows_WToolkit_quitSecondaryEventLoop@8 _Java_sun_awt_windows_WToolkit_setDynamicLayoutNative@12 _Java_sun_awt_windows_WToolkit_setExtraMouseButtonsEnabledNative@12 _Java_sun_awt_windows_WToolkit_setLockingKeyStateNative@16 _Java_sun_awt_windows_WToolkit_shutdown@8 _Java_sun_awt_windows_WToolkit_startSecondaryEventLoop@8 _Java_sun_awt_windows_WToolkit_startToolkitThread@16 _Java_sun_awt_windows_WToolkit_syncNativeQueue@16 _Java_sun_awt_windows_WTrayIconPeer__1displayMessage@20 _Java_sun_awt_windows_WTrayIconPeer__1dispose@8 _Java_sun_awt_windows_WTrayIconPeer_create@8 _Java_sun_awt_windows_WTrayIconPeer_setNativeIcon@28 _Java_sun_awt_windows_WTrayIconPeer_setToolTip@12 _Java_sun_awt_windows_WTrayIconPeer_updateNativeIcon@12 _Java_sun_awt_windows_WWindowPeer__1setResizable@12 _Java_sun_awt_windows_WWindowPeer__1setTitle@12 _Java_sun_awt_windows_WWindowPeer__1toFront@8 _Java_sun_awt_windows_WWindowPeer_createAwtWindow@12 _Java_sun_awt_windows_WWindowPeer_getScreenImOn@8 _Java_sun_awt_windows_WWindowPeer_getSysIconHeight@8 _Java_sun_awt_windows_WWindowPeer_getSysIconWidth@8 _Java_sun_awt_windows_WWindowPeer_getSysMinHeight@8 _Java_sun_awt_windows_WWindowPeer_getSysMinWidth@8 _Java_sun_awt_windows_WWindowPeer_getSysSmIconHeight@8 _Java_sun_awt_windows_WWindowPeer_getSysSmIconWidth@8 _Java_sun_awt_windows_WWindowPeer_initIDs@8 _Java_sun_awt_windows_WWindowPeer_modalDisable@20 _Java_sun_awt_windows_WWindowPeer_modalEnable@12 _Java_sun_awt_windows_WWindowPeer_nativeGrab@8 _Java_sun_awt_windows_WWindowPeer_nativeUngrab@8 _Java_sun_awt_windows_WWindowPeer_repositionSecurityWarning@8 _Java_sun_awt_windows_WWindowPeer_requestWindowFocus@12 _Java_sun_awt_windows_WWindowPeer_reshapeFrame@24 _Java_sun_awt_windows_WWindowPeer_setAlwaysOnTopNative@12 _Java_sun_awt_windows_WWindowPeer_setFocusableWindow@12 _Java_sun_awt_windows_WWindowPeer_setFullScreenExclusiveModeState@12 _Java_sun_awt_windows_WWindowPeer_setIconImagesData@32 _Java_sun_awt_windows_WWindowPeer_setMinSize@16 _Java_sun_awt_windows_WWindowPeer_setOpacity@12 _Java_sun_awt_windows_WWindowPeer_setOpaqueImpl@12 _Java_sun_awt_windows_WWindowPeer_toBack@8 _Java_sun_awt_windows_WWindowPeer_updateInsets@12 _Java_sun_awt_windows_WWindowPeer_updateWindowImpl@20 _Java_sun_java2d_DefaultDisposerRecord_invokeNativeDispose@24 _Java_sun_java2d_Disposer_initIDs@8 _Java_sun_java2d_SurfaceData_initIDs@8 _Java_sun_java2d_SurfaceData_isOpaqueGray@12 _Java_sun_java2d_d3d_D3DGraphicsDevice_configDisplayModeNative@36 _Java_sun_java2d_d3d_D3DGraphicsDevice_enterFullScreenExclusiveNative@20 _Java_sun_java2d_d3d_D3DGraphicsDevice_enumDisplayModesNative@16 _Java_sun_java2d_d3d_D3DGraphicsDevice_exitFullScreenExclusiveNative@12 _Java_sun_java2d_d3d_D3DGraphicsDevice_getAvailableAcceleratedMemoryNative@12 _Java_sun_java2d_d3d_D3DGraphicsDevice_getCurrentDisplayModeNative@12 _Java_sun_java2d_d3d_D3DGraphicsDevice_getDeviceCapsNative@12 _Java_sun_java2d_d3d_D3DGraphicsDevice_getDeviceIdNative@12 _Java_sun_java2d_d3d_D3DGraphicsDevice_initD3D@8 _Java_sun_java2d_d3d_D3DGraphicsDevice_isD3DAvailableOnDeviceNative@12 _Java_sun_java2d_d3d_D3DMaskFill_maskFill@40 _Java_sun_java2d_d3d_D3DRenderQueue_flushBuffer@24 _Java_sun_java2d_d3d_D3DRenderer_drawPoly@32 _Java_sun_java2d_d3d_D3DSurfaceData_dbGetPixelNative@24 _Java_sun_java2d_d3d_D3DSurfaceData_dbSetPixelNative@28 _Java_sun_java2d_d3d_D3DSurfaceData_getNativeResourceNative@20 _Java_sun_java2d_d3d_D3DSurfaceData_initFlipBackbuffer@36 _Java_sun_java2d_d3d_D3DSurfaceData_initOps@20 _Java_sun_java2d_d3d_D3DSurfaceData_initRTSurface@20 _Java_sun_java2d_d3d_D3DSurfaceData_initTexture@24 _Java_sun_java2d_d3d_D3DSurfaceData_updateWindowAccelImpl@32 _Java_sun_java2d_d3d_D3DTextRenderer_drawGlyphList@44 _Java_sun_java2d_loops_BlitBg_BlitBg@52 _Java_sun_java2d_loops_Blit_Blit@48 _Java_sun_java2d_loops_DrawLine_DrawLine@32 _Java_sun_java2d_loops_DrawParallelogram_DrawParallelogram@80 _Java_sun_java2d_loops_DrawPath_DrawPath@28 _Java_sun_java2d_loops_DrawPolygons_DrawPolygons@44 _Java_sun_java2d_loops_DrawRect_DrawRect@32 _Java_sun_java2d_loops_FillParallelogram_FillParallelogram@64 _Java_sun_java2d_loops_FillPath_FillPath@28 _Java_sun_java2d_loops_FillRect_FillRect@32 _Java_sun_java2d_loops_FillSpans_FillSpans@32 _Java_sun_java2d_loops_GraphicsPrimitiveMgr_initIDs@52 _Java_sun_java2d_loops_GraphicsPrimitiveMgr_registerNativeLoops@8 _Java_sun_java2d_loops_MaskBlit_MaskBlit@60 _Java_sun_java2d_loops_MaskFill_DrawAAPgram@84 _Java_sun_java2d_loops_MaskFill_FillAAPgram@68 _Java_sun_java2d_loops_MaskFill_MaskFill@48 _Java_sun_java2d_loops_ScaledBlit_Scale@72 _Java_sun_java2d_loops_TransformHelper_Transform@80 _Java_sun_java2d_opengl_OGLContext_getOGLIdString@8 _Java_sun_java2d_opengl_OGLMaskFill_maskFill@40 _Java_sun_java2d_opengl_OGLRenderQueue_flushBuffer@20 _Java_sun_java2d_opengl_OGLRenderer_drawPoly@32 _Java_sun_java2d_opengl_OGLSurfaceData_getTextureID@16 _Java_sun_java2d_opengl_OGLSurfaceData_getTextureTarget@16 _Java_sun_java2d_opengl_OGLSurfaceData_initFBObject@36 _Java_sun_java2d_opengl_OGLSurfaceData_initFlipBackbuffer@16 _Java_sun_java2d_opengl_OGLSurfaceData_initTexture@36 _Java_sun_java2d_opengl_OGLTextRenderer_drawGlyphList@44 _Java_sun_java2d_opengl_WGLGraphicsConfig_getDefaultPixFmt@12 _Java_sun_java2d_opengl_WGLGraphicsConfig_getOGLCapabilities@16 _Java_sun_java2d_opengl_WGLGraphicsConfig_getWGLConfigInfo@16 _Java_sun_java2d_opengl_WGLGraphicsConfig_initWGL@8 _Java_sun_java2d_opengl_WGLSurfaceData_initOps@28 _Java_sun_java2d_opengl_WGLSurfaceData_initPbuffer@36 _Java_sun_java2d_opengl_WGLSurfaceData_updateWindowAccelImpl@28 _Java_sun_java2d_pipe_BufferedMaskBlit_enqueueTile@76 _Java_sun_java2d_pipe_BufferedRenderPipe_fillSpans@48 _Java_sun_java2d_pipe_Region_initIDs@8 _Java_sun_java2d_pipe_ShapeSpanIterator_addSegment@16 _Java_sun_java2d_pipe_ShapeSpanIterator_appendPoly@28 _Java_sun_java2d_pipe_ShapeSpanIterator_closePath@8 _Java_sun_java2d_pipe_ShapeSpanIterator_curveTo@32 _Java_sun_java2d_pipe_ShapeSpanIterator_dispose@8 _Java_sun_java2d_pipe_ShapeSpanIterator_getNativeConsumer@8 _Java_sun_java2d_pipe_ShapeSpanIterator_getNativeIterator@8 _Java_sun_java2d_pipe_ShapeSpanIterator_getPathBox@12 _Java_sun_java2d_pipe_ShapeSpanIterator_initIDs@8 _Java_sun_java2d_pipe_ShapeSpanIterator_intersectClipBox@24 _Java_sun_java2d_pipe_ShapeSpanIterator_lineTo@16 _Java_sun_java2d_pipe_ShapeSpanIterator_moveTo@16 _Java_sun_java2d_pipe_ShapeSpanIterator_nextSpan@12 _Java_sun_java2d_pipe_ShapeSpanIterator_pathDone@8 _Java_sun_java2d_pipe_ShapeSpanIterator_quadTo@24 _Java_sun_java2d_pipe_ShapeSpanIterator_setNormalize@12 _Java_sun_java2d_pipe_ShapeSpanIterator_setOutputAreaXYXY@24 _Java_sun_java2d_pipe_ShapeSpanIterator_setRule@12 _Java_sun_java2d_pipe_ShapeSpanIterator_skipDownTo@12 _Java_sun_java2d_pipe_SpanClipRenderer_eraseTile@28 _Java_sun_java2d_pipe_SpanClipRenderer_fillTile@28 _Java_sun_java2d_pipe_SpanClipRenderer_initIDs@16 _Java_sun_java2d_windows_GDIBlitLoops_nativeBlit@60 _Java_sun_java2d_windows_GDIRenderer_devCopyArea@36 _Java_sun_java2d_windows_GDIRenderer_doDrawArc@48 _Java_sun_java2d_windows_GDIRenderer_doDrawLine@40 _Java_sun_java2d_windows_GDIRenderer_doDrawOval@40 _Java_sun_java2d_windows_GDIRenderer_doDrawPoly@48 _Java_sun_java2d_windows_GDIRenderer_doDrawRect@40 _Java_sun_java2d_windows_GDIRenderer_doDrawRoundRect@48 _Java_sun_java2d_windows_GDIRenderer_doFillArc@48 _Java_sun_java2d_windows_GDIRenderer_doFillOval@40 _Java_sun_java2d_windows_GDIRenderer_doFillPoly@44 _Java_sun_java2d_windows_GDIRenderer_doFillRect@40 _Java_sun_java2d_windows_GDIRenderer_doFillRoundRect@48 _Java_sun_java2d_windows_GDIRenderer_doShape@40 _Java_sun_java2d_windows_GDIWindowSurfaceData_initIDs@12 _Java_sun_java2d_windows_GDIWindowSurfaceData_initOps@32 _Java_sun_java2d_windows_GDIWindowSurfaceData_invalidateSD@8 _Java_sun_java2d_windows_WindowsFlags_initNativeFlags@8 _Java_sun_print_Win32PrintJob_endPrintRawData@8 _Java_sun_print_Win32PrintJob_printRawData@16 _Java_sun_print_Win32PrintJob_startPrintRawData@16 _Java_sun_print_Win32PrintServiceLookup_getAllPrinterNames@8 _Java_sun_print_Win32PrintServiceLookup_getDefaultPrinterName@8 _Java_sun_print_Win32PrintServiceLookup_notifyClosePrinterChange@16 _Java_sun_print_Win32PrintServiceLookup_notifyFirstPrinterChange@12 _Java_sun_print_Win32PrintServiceLookup_notifyPrinterChange@16 _Java_sun_print_Win32PrintService_getAllMediaIDs@16 _Java_sun_print_Win32PrintService_getAllMediaNames@16 _Java_sun_print_Win32PrintService_getAllMediaSizes@16 _Java_sun_print_Win32PrintService_getAllMediaTrayNames@16 _Java_sun_print_Win32PrintService_getAllMediaTrays@16 _Java_sun_print_Win32PrintService_getAllResolutions@16 _Java_sun_print_Win32PrintService_getCapabilities@16 _Java_sun_print_Win32PrintService_getCopiesSupported@16 _Java_sun_print_Win32PrintService_getDefaultSettings@16 _Java_sun_print_Win32PrintService_getJobStatus@16 _Java_sun_print_Win32PrintService_getMediaPrintableArea@16 _Java_sun_print_Win32PrintService_getPrinterPort@12 _RegionToYXBandedRectangles@32 _Region_CountIterationRects@4 _Region_EndIteration@8 _Region_GetBounds@12 _Region_GetInfo@12 _Region_NextIteration@8 _Region_StartIteration@8 _SurfaceData_GetOps@8 _SurfaceData_GetOpsNoSetup@8 _SurfaceData_IntersectBlitBounds@16 _SurfaceData_IntersectBounds@8 _SurfaceData_IntersectBoundsXYWH@20 _SurfaceData_IntersectBoundsXYXY@20 _SurfaceData_SetOps@12 _SurfaceData_ThrowInvalidPipeException@8 _Transform_GetInfo@12 _Transform_transform@12 awt_getImagingLib awt_setMlibStartTimer awt_setMlibStopTimer preloadD3D preloadStop

$LOCALAPPDATA/Temp/mathtype.tmp/blacklist

SHA256 c48d57d64ed98f8f174a4f6873f536ae03b41a63f67079d7c2f7140950a1c02e
MD5 3f5dc1d941e8356ccd04454ac0a7a7d2
SHA1 3698f9afd870c7959e2d8a0da0a97b4475554831
SHA512 65319a4ef150884f7e67c6f96085a996c9b32dcf9a539c4eb7af77b1b46cdd90f1e83446f33da14467ea37d0628c9411323f5c3d3cefcf03cbdfa186eeb2bd3c
SSDEEP 96:ubCHVyxwEyPEtpuVFWny6NnXjekkMDV6kiPVNXvNhtfx5e6NgyufTMBwtBsv5XHs:ubCHVyxwEyPEtpuV8ny6NnX6kkMDV6kL
TLSH
T10181806A2E8E3441EA98E5D44C7F91267A19F843915782DF2E8462FD3396E6C33F2035
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/blacklisted.certs

SHA256 1fbea394e634630894cf72de02df1846f32f3bb2067b3cb596700e4dd923f4b5
MD5 bbebcf13680e71ec2ee562524da02660
SHA1 c5c005c29a80493f5c31cd7eb629ac1b9c752404
SHA512 b686236eee055c97a96f5e31a2ee7ce57eed04c2175235ceb19f9f56abfd22db6fdcade8c5d4ba7b656d69e923a1c5844c06dc959a4a915e215fb0ace377b114
TLSH
T15021BAD9856E42D9DC403FDB9DE842F7B67143A5A708102A15F41F260D37865DE174D4
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/cacerts

SHA256 0551c85629b1003cc46616bdb2ca30aa209af62590768dbafd781247aba6d66a
MD5 7fe0c7f0a0207e9b3c7fed58b18d9e69
SHA1 23710ac3914498f49603982c076e5bbcaecede20
SHA512 854729801ff9155aa9764068a5e8eccb00e77394b701985e9f72785a4404bc1f0f5f742b2bd0561375dad9e08b4bc32927514ba808dc639ad3ed6d4fe42ff7c8
SSDEEP 1536:znelypvs2OLSL+215fIZ9LbDG6apeYlHoT0Wcm:znelypvswZXYbqVTQ0Tm
TLSH
T11F936C9B4F383821BFC6EF14A688E5377E35B3D4669A64172565C0E66DD27F03A8C00E
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/calendars.properties

SHA256 68f0cf30429a42a6fe78b1de91970e5c78fd03d1599beb080c1c196d5c59e4c0
MD5 92ba2d87915e6f7f58d43344df07e1a6
SHA1 872bc54e53377aac7c7616196bcce1db6a3f0477
SHA512 a964e2ceb4d601faf28ecf13fb11777b70708c21cf9ea23721e462b6e911051108b8a42ebf6447fa49cb61d7fa2d79475f50ee791f1121616371e2b02fab71b6
TLSH
T1DE213905876535A1C37132B0CF4DF11B755974AB89FB6E736AC8B70062E2B0D10E6627
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/charsets.jar

SHA256 41400f669f68e01051de39d8e339cd126593a8bd3207ddf39d184f177958bf1b
MD5 1a6cbb8deac037d59b48ad1e2a15d5c8
SHA1 b962e9947038158770ce3f49ba83e24f6f570159
SHA512 6d4bbd20ca99aea49ae870c615f239f9d2cbbce467992fd8d239b0d8c72b691aa7a362e24b17e3dbb0efda6f16ee68347ed54ed0fbffe3f9672b86cd1dd503aa
SSDEEP 49152:x0fi+Wz1nc4Zq0Z/UI3I5rLAEwnvvK8lbIOVO:efidzN/d/0qn3vlbIH
TLSH
T1AAE59FD344451EAFD60B52BF1B60EE0B770E7CA61907B240F9BA4C19EA5C62F64D2F21
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/content-types.properties

SHA256 a2b31e9cbceab296a5e1cf056efd953ced23b888cd929b0bbe6eb6b53d2bf861
MD5 95ae170d90764b3f5e68c72e8c518ddc
SHA1 1939b699d16a5db3e3f905466222099d7c29285a
SHA512 87e970beac8141c757d622fc8b6d84fe173ea4b134afd8e2f979714c1110c3d92f3ce5f2b9dc74804dd37d13ab2a0edf0fca242f61cf8ed065ae81b7331f8816
SSDEEP 96:6M5VfH+uEMmPDkZeujdJfZUB8BB/+PhPXsOQ71GAXf5lZuU1EbWF7Ycx/AQ12a8T:6M6p4ZeWd1ZUB8BBGPhPXsOQ71GAXBly
TLSH
T12DC16C89AE0FB24246EF71AFDD37B14ED131232E7D66A54234DC004A6718BD7E6E3808
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/copybtn.exe

IMPHASH 34a493b6b42d8e3799393a3d4cd6270c
SHA256 2d00c4d663072191cf4817f2ffb5388fdf01095cd2685797bacdea48c3fac055
MD5 fdddeafd333083c2e839bd1af02843e4
SHA1 80f5b641372c8de38b9db54b5a31f773bae4d551
SHA512 3ba6d417d3d0bb63d05b790cbb72c21a4bb50cd193f7a27cb6bd37e5127a17eaea16ee16b3f10c9efadc1fa8248ab69b6182f9cb570f469a88635480cb001fcd
SSDEEP 384:aWEh0851UQlBMWDCd3RU6DDaLq93fqeyiES9EglonReRxsYkz38s8cn/fuSPLmFn:uh08LUQ7MWm86VCeLruglonRe/ehd/+Z
TLSH
T1A5433932EDA75312D8C275B08AB48EC6373B7A113AF0442B96D45B4B2F665F2DD15338
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

10:b5:da:74:d2:77:48:df:89:21:66:16:11:07:37:87

Digest Algorithm

md5

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Design Science Inc.,O=Design Science Inc.,L=Long Beach,ST=California,C=US

Chains

Jan 1, 0001

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

Serial Number

34:4e:d5:57:20:d5:ed:ec:49:f4:2f:ce:37:db:2b:6d

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 17, 2006 - Jul 16, 2036

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Serial Number

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Design Science Inc.,O=Design Science Inc.,L=Long Beach,ST=California,C=US

Serial Number

49:05:53:76:d4:c6:6b:fc:a8:0e:90:c3:27:39:1c:43

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning

Revocation Status

Not revoked

Timespan

Jun 23, 2014 - Feb 7, 2016

Minor OS version

0

Major OS version

4

Entry point

5004

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

$LOCALAPPDATA/Temp/mathtype.tmp/cueFlash.tdl

SHA256 a3a063f14d277401fb9730ac6218807f6d105ca30378dc2b43c885234a94f191
MD5 d2a6df9251950084c2a99685130845b1
SHA1 e375f94b7d011fe34f7515758b46dff9c334d0e4
SHA512 729b1f66d203517b7d98043149bc5f8bd27694d06d398c56c375814e3b6e435c0c8d2ee9dfd7da667edb3da9fbdb097e192f4c22491cd14043c0346699b9187f
TLSH
T161216306F78C11720BC145B0AE61A4C79568724873FA0411BC8FC32F7356B2CABB7A6D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/currency.data

SHA256 22458853da2415f7775652a7f57bb6665f83a9ae9fb8bd3cf05e29aac24c8441
MD5 f6258230b51220609a60aa6ba70d68f3
SHA1 b5b95dd1ddcd3a433db14976e3b7f92664043536
SHA512 b2dfcfdebf9596f2bb05f021a24335f1eb2a094dca02b2d7dd1b7c871d5eecda7d50da7943b9f85edb5e92d9be6b6adfd24673ce816df3960e4d68c7f894563f
SSDEEP 48:BlWxFFGFSupi94blATFxjGph5vLC6/w37ZXQTbVm/eVzOBJ:BlWJEi94blAT+ph5vLkApmGqr
TLSH
T1448168037A658F57E41E1731DCC952947933DC015B4BC653A994BA2D7BFA3E067C24C0
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/cursors.properties

SHA256 52845deb58038b4375c30b75dd2053726872758c96597c7cc5d6cef11f42a2ba
MD5 01b94c63bd5e6d094e84ff3ad640ffbf
SHA1 5570f355456250b1ec902375b0257584db2360ae
SHA512 816be2271cf3ecf10ee40e24a288ce302b2810010bef76efc0ce5746591955921b70f19005335f485d61a7b216dcce0b06750831720dd426d07709154d5fac7a
TLSH
T13F21A33D7A002EE33FF8108B12D25543414CE17849369B0AA77CB6E9ABF8659ED0196B
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/dcpr.dll

IMPHASH 3f4c0ab4d244ccb8bda37cbf2367a663
SHA256 3ae169f969e221d3b3a7cf3efe8745da1ae19f4ed42e3e14d9122fd9e4dd0baf
MD5 8b8026bf4f55ef86489a14c9368467cc
SHA1 43f8a31afbad57d9894cb70757ebcb26e262ff52
SHA512 5919d0003147713514db7f75239a3cc0aa9c2d18286659ca2204746fae337f92f6494834a2bf169193743b02a77c32168734404bd181a1c0a859374f8931453b
SSDEEP 3072:T2ua3LV+GxPo9o9No495My8cj5ojGylYCE2Iu2jGLF5A9bE8LUern:pa3RXxPQzybIGgYCE2L1F5A9bEGUe
TLSH
T159D3C0037970C135D422C37AA02B1B54BA583B0449FEF116FF9C93969E389D0D5BAED5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

50774

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libdcpr\dcpr.pdb

_Java_sun_dc_pr_PathDasher_appendCubic@32 _Java_sun_dc_pr_PathDasher_appendLine@16 _Java_sun_dc_pr_PathDasher_appendQuadratic@24 _Java_sun_dc_pr_PathDasher_beginPath@8 _Java_sun_dc_pr_PathDasher_beginSubpath@16 _Java_sun_dc_pr_PathDasher_cClassFinalize@8 _Java_sun_dc_pr_PathDasher_cClassInitialize@8 _Java_sun_dc_pr_PathDasher_cInitialize@12 _Java_sun_dc_pr_PathDasher_closedSubpath@8 _Java_sun_dc_pr_PathDasher_dispose@8 _Java_sun_dc_pr_PathDasher_endPath@8 _Java_sun_dc_pr_PathDasher_getCPathConsumer@8 _Java_sun_dc_pr_PathDasher_reset@8 _Java_sun_dc_pr_PathDasher_setDash@16 _Java_sun_dc_pr_PathDasher_setDashT4@12 _Java_sun_dc_pr_PathDasher_setOutputConsumer@12 _Java_sun_dc_pr_PathDasher_setOutputT6@12 _Java_sun_dc_pr_PathFiller_appendCubic@32 _Java_sun_dc_pr_PathFiller_appendLine@16 _Java_sun_dc_pr_PathFiller_appendQuadratic@24 _Java_sun_dc_pr_PathFiller_beginPath@8 _Java_sun_dc_pr_PathFiller_beginSubpath@16 _Java_sun_dc_pr_PathFiller_cClassFinalize@8 _Java_sun_dc_pr_PathFiller_cClassInitialize@8 _Java_sun_dc_pr_PathFiller_cInitialize@8 _Java_sun_dc_pr_PathFiller_closedSubpath@8 _Java_sun_dc_pr_PathFiller_dispose@8 _Java_sun_dc_pr_PathFiller_endPath@8 _Java_sun_dc_pr_PathFiller_getAlphaBox@12 _Java_sun_dc_pr_PathFiller_getCPathConsumer@8 _Java_sun_dc_pr_PathFiller_getTileState@8 _Java_sun_dc_pr_PathFiller_nextTile@8 _Java_sun_dc_pr_PathFiller_reset@8 _Java_sun_dc_pr_PathFiller_setFillMode@12 _Java_sun_dc_pr_PathFiller_setOutputArea@24 _Java_sun_dc_pr_PathFiller_writeAlpha16@24 _Java_sun_dc_pr_PathFiller_writeAlpha8@24 _Java_sun_dc_pr_PathStroker_appendCubic@32 _Java_sun_dc_pr_PathStroker_appendLine@16 _Java_sun_dc_pr_PathStroker_appendQuadratic@24 _Java_sun_dc_pr_PathStroker_beginPath@8 _Java_sun_dc_pr_PathStroker_beginSubpath@16 _Java_sun_dc_pr_PathStroker_cClassFinalize@8 _Java_sun_dc_pr_PathStroker_cClassInitialize@8 _Java_sun_dc_pr_PathStroker_cInitialize2D@12 _Java_sun_dc_pr_PathStroker_cInitialize@12 _Java_sun_dc_pr_PathStroker_closedSubpath@8 _Java_sun_dc_pr_PathStroker_dispose@8 _Java_sun_dc_pr_PathStroker_endPath@8 _Java_sun_dc_pr_PathStroker_getCPathConsumer@8 _Java_sun_dc_pr_PathStroker_reset@8 _Java_sun_dc_pr_PathStroker_setCaps@12 _Java_sun_dc_pr_PathStroker_setCorners@16 _Java_sun_dc_pr_PathStroker_setOutputConsumer@12 _Java_sun_dc_pr_PathStroker_setOutputT6@12 _Java_sun_dc_pr_PathStroker_setPenDiameter@12 _Java_sun_dc_pr_PathStroker_setPenFitting@16 _Java_sun_dc_pr_PathStroker_setPenT4@12

$LOCALAPPDATA/Temp/mathtype.tmp/eNLVM.tdl

SHA256 fa153b1cd3fe0f71a1fd0042ceaf87241551bba09bc87989644c2ea541453c0a
MD5 714a833250eda8f578b65df1d1f0d8a1
SHA1 7f20c37be845ce80ee2b6226b140b86f1037e5b2
SHA512 a06d2bf7def955ab3094cbb524b133b162ee6df685c782a1c7c9d74c5227497acbfe91ab8034a5b6d790114c447a415fd5a2d477f1da3f14f3b32a66b7b35d81
TLSH
T1FF112709F394147216C015B0FF9210878518970C21B744017C89C17F7352B6C3BED9DD
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/ePals.tdl

SHA256 55e34df4ec704f5b1f6fbe40a34728406581b5cb05da9159d70b52beb59d3466
MD5 bd0ed71b3afaca930be927d591a292e2
SHA1 e81af9b3c21d510f58837700fb0c4b169dbb290e
SHA512 25ea5f5f5647f0c6585357588c0eb70372447e17f3afe2bfc577b7ea9814c5a83ff91470596e7c94d8c9c2889162a3b88e35e27559d9feb36c3f1ca7eec29d0d
TLSH
T153112306F398147217C02161EF5220CBC128934C73F70401BCC9C19F7396A3C6BAEA6D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eQuizzer.tdl

SHA256 94c6b3879a0ec09a803f5c74cc703cb54d6b97b9d6ba27dd49644a9a79e0d6b4
MD5 1dfb31331bc6639b624e93aab8e5372c
SHA1 a55dbadc70e16e6546a51b8489f1ef034e44576a
SHA512 ccee978b634ad36cd7672813a5a142eddc791b6e37d7d59d1f7ba626d496e0fe21470502c091caf3ec3f52436095eeedf309751585972c25306837c01c735f2e
TLSH
T18A11000EF3A9206226D11160AB6260CB943C93086AB714017889D05F7396A7C7BAA96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eTouchSamePage.tdl

SHA256 8cf9a53972b19a0f4197e47f6b8650c1451bb3a6e733915829fef04b909d1648
MD5 6270aa4221c81de0e40355c95a8bae2c
SHA1 2726ac76ab01fd00a63185b84a165d7976a1caa1
SHA512 5a5462cd7b1b7d77f8bd23ab3b312605d3085af6ee5709e37d803e454226f86f5fe278edc62e088f252cc1c1affbc091426c6cdd45545034bf3129ee8193d31f
TLSH
T14D11044BF39C156217C02160FFA274CB8129D32863B76801B84ED14F7756A6C2BEA56D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eTrainCenter.tdl

SHA256 044c21acbc83ba99e6c635d88375e9f2bea6164fa31185aedae141aad55b7dcd
MD5 1c3e35e7d6e72ea0ed75bdf1070f41bf
SHA1 09d09c83e621c5c545f8e0cf95657b6a98eaf904
SHA512 8851a81c1097625bb22dae2adbe4247712e1837254de1c770d87acbc3cf4a6e24541073df16af594e8f1f05823375a36ff9001a9771c5050ff5ac37b99c4618c
TLSH
T17E11D016F39920721BC16670AF5210CBC0285B1863BA1515788D807F7397A6C6BBA6A9
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/edX.tdl

SHA256 c666f9760fee758d176427bcec38b52dc716466ff0e90ed9490bea6c9cb587be
MD5 75122254649d3828e4a01a31e95a626d
SHA1 b624aebedba34cfdd60a66d18afb498e769f6eea
SHA512 5cc197248eaaf4f299734efe77a3144cb846e6ebaef15d4c2e803bbb7b41a52c1e02e3d44abc0a9b3e0cc43b42ab4cefa2c8f76acc8bd41d07689dae9cd2bc5f
SSDEEP 96:AASPL/uiNu19xYHFzy0tZZAZ8ZbBhZZRZ+CX4+N0iC4IzhRv4V8HLbXEfk6UeE0R:AAST/uz6HFnWitTXZ+F+4x7YfkhenP
TLSH
T195029028CBFA557028C20F42579B76997159C2C806D1C355FD0D47FFA3460AD2AF2B76
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/edu2.0.tdl

SHA256 04972b5de3b2be6e8bd58460c9dfbb044d9f48d4d4d6758caddff9db2afd97a4
MD5 d394f47b73b4bfe2607f34338f49e939
SHA1 252d44e5c917d168a442cd48632461475ede3b75
SHA512 79a3c40a90c8e8a475e0f79d008f06c3368e599da8471a6002faa016c238e4fd4762aa1b9385df0083c5e70b3fd1c3e79d0a840be94f55ff9201c49adc0d9745
TLSH
T1C611C006F399606317C15161EB6622CF8528930972B745017889C0AF7356F6C6BA6A69
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclid.afm

SHA256 559255fffe06400d59edf403d08afcb4e78dbe134ca4b878061b495149531175
MD5 4ebabd25115c7a1ebef368d5be637842
SHA1 a08df455d31a185bc298922ff73939e69c6e2736
SHA512 c7976cc6b3fff87526f30f9e2717ca52dd392b2e4d5bbe3e193f3b312eed9b1b89ff31fcadb894b1a2eaedc57d05acf0e5cc27234f48d65d1e1f5f8fe823f5be
SSDEEP 384:KkY7jvgBO9QTbss4BNXBXMMaDvobt0NtGhBvCqd/ZWixGk5YM4fDKi+HP8nmuTPY:33TDeLfdxzH47u0mmDv0xa4
TLSH
T1F0E2D02C2A4EC8C6446B056B40E346F360CBF2139AFE769EE0BDA75D39015E4D64F267
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclid.pfb

SHA256 fcabe1bbe16396eb5e56c5e1d3fe2c25a13af774936ef87ac0b1f1dc2e369aaa
MD5 91901f73ab15c8ea77d3aefe6b79cd31
SHA1 2264b1e5e7e90fcf88d3a8c7e4a2acbda0b68fbb
SHA512 7c742571399765b354d7156ab79cdf5ee4fbeea1585da5565c1217737da649f0af075c718f274a1cab6247c246fb85cea8ca2a07409e2cffa072607688a71d97
SSDEEP 768:BScn/sqWcpVzAo2mxWWrPn0NxwN0p30DqKWwj+QL5+7fQaqK4y:BScn/sqppVzau0NxwwMqdA5Ofwpy
TLSH
T1A623D084CBC75646C16A39EAD1C17734AAFBF116A9E1AED7D7A18F702C81430A0FD8D4
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclid.pfm

SHA256 df8f5993a77d344430f69228664edc92be77613a945a8b4019606eb63f97e6cf
MD5 fa32873a413cf79d179ff4d65a965df8
SHA1 2f13526dcd9823beeaa2fcdb79745e13be3cad80
SHA512 a4a9463cb7c65f81db433b3ad844f843c452a24a8e1c834bcb4e7e11c14ca055fc71ac1e520802982b91a09afd03d853cf9116662abd429c97541056e7a099b8
SSDEEP 96:2M77nSOxBMTixA9xA7s/DyCmg2hjd0TvynjcXWCChGgO92BSBdS:97TdADAAC02jcXeUgOQ6S
TLSH
T141B14038B135262CEC5420F8F363174792971D7CC13F66F592E9A09B87D23E446992E6
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclid.ttf

SHA256 08e2aee07a1375a1fc55adbd5318e1070c47b419e092629707eb1fce2cfa70f6
MD5 d9afd320f4ff19434779413c2a510857
SHA1 8525f33088b1ef587e358d53dfe40a0b60420347
SHA512 9883dc4ef909acc23ce3805c0671370b7a4055e4a052177f242aa14dbff147de3c101b300e41420c2be31245ddfc5c6668591380d7c67978513eb8c0db70ac65
SSDEEP 768:IMRT2Q5SWIB/VFAyG4ake4BifZ8MQYIUEkFqED4HcNxbErA7e4ENEcXS4VbN+Irp:w0oV9NNh/yJ0PJppulGf3YPGz3J1
TLSH
T165534B12B383ED2ED362F2743575A852C899F1315B3B5268A50B8873C446563AAEFF07
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclidb.afm

SHA256 2e788c290d2687184fb83efb5bbe6c19e9af243f538cc5c6417fff9714814472
MD5 4b608d7efd764bbbe08e1de7126bf077
SHA1 c7ca9703061adb73ed9c376cddd384cf71769ab4
SHA512 048b36f0d81c680f10c0bb52cf425060d94b4ec759caa1a693503ba8e37d7974f8a9579d4190b032ff6cd7ef439a49d6e4462e4dea8c935d55dd66acb6f57451
SSDEEP 384:7HkNK06x+ZQ6eL1UsCXrufzO+7xErD2Lmq3HKVWum0Zv6muTIDv0xa1a:5HoK2qLmq3qV737Dv0xa4
TLSH
T197E2EE2C2A4EC8C6546B06AB40E356F360CBF2135AEF768EE0BD675D39025E0D64F167
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclidb.pfb

SHA256 fb701007116d153bfb05aa510dd1933c2044e3d24b8d5765870064117c4f805d
MD5 ff01035b3b96bd535d265a804355c9eb
SHA1 711da97bddeb01433137f33fe31b2ddcbd7ab0a3
SHA512 6a50cd62a388fb8ea578a43e8792d3400433d25589ee6c463a4a4ee7bb539c8d43e025765f3fb3d271517ff1699d4940aea0dc3d40192128fb9a7bf120e6bbf7
SSDEEP 768:DSc2k9FGrPu+j7hw+e0NKBaIZg92Nw17BbYJY87/q9RLyVcocUGxd/JqOIuqk:DSc2oKu+u+koH2NwhBbb5zLBUGTJqJu/
TLSH
T17C13D015D5CBE42AF01DB8E7E2E5B7924527F10364D76CEBE7C98D0168C00A117F8EA2
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclidb.pfm

SHA256 5e4803aa334687b60914df5ce816f246413e294f1ae26bda801f05018d3e9fa5
MD5 ac22796770fe81eb50de6a267a8d7ed3
SHA1 870852c751e86bbc8040694c6b01367ec6875479
SHA512 3f111977e1e0ea443b2cd2a2fd8cf590929d3674599e040b364fe8cfa32665db16c750345b4d1eb0bc65bea719bfb76ffc8d4b40e8e792d9fa6844bd68af3437
SSDEEP 96:vig3xHYjyLxBMTixA9xA7s/DyCmg2hRd0TvynjcXWCChGgO92BSBdS:7dADAAg02jcXeUgOQ6S
TLSH
T11EB15338B1342A2CDD4420FCF3630B4396571D7CC17F66F593A9A08F47923E405A92D6
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclidb.ttf

SHA256 5ee87114882d96ca4075ee3a516b135b99371a8f878755b32771fbb13d708495
MD5 b829aa57de6b2c5b6e9eab2d87706b39
SHA1 03fd60343ad4f1386cc15d48cd81aff69138c725
SHA512 d2d54f052bf221ea0081d959b9472db7d023cbed04b37a50d8dbab05281e1cda17cc85c6b092eb15ee960ef70f09c4345705b86ede13d137d37288968a1b51e8
SSDEEP 1536:tN1+01vDjztaK06lq831rfUyVUO0OGzRJB:b0ORaUM8G1JB
TLSH
T1CB435D22B383FE6ED361F23436B84483849CF1354B3BA069774B896BD445A1359DEB1B
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclidbi.afm

SHA256 38d2928d18179c71156fed421417a9398e0796c05cd65aab072efa9b9412dc05
MD5 0fb1aa37c85aae05b0f7e4ce4a0f76ad
SHA1 6912dd2157448f25c4a844c129d7b09985046065
SHA512 7a9d2c3d7269dcffa51f27763eccedb7f7d4635ec64741171a0e59cc6a9929d928bb591b68f4076d5db1e03abede69cf71c5f11f8e0b818c3f1f4f110f398ece
SSDEEP 768:mwBKnoWsm8jAd45o/e/qIuXD8d4vroWnpBeMb+r0QmpVsUqhltzo:mHnGmIAAW5h+4
TLSH
T19713E12C17CEEE85445B496D01AB8A7376CBF1236FFE3E8CD0BD6A5D35026A0C689153
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclidbi.pfb

SHA256 82d3f3147ced023136099c150e92faa9297495facab74d317808bfe38e0f8c60
MD5 f6355d441bd5201faa98ea78959334f8
SHA1 31958113b7a7011839d5178a209ccfb1313f3cb9
SHA512 2eed156791139fe2518d0c43d2a81204187315b8e37ba789a1148063e6fdf6e96d4f6682f3530fbb9b2a873d85269de1ee85efe9d8eb5eb17a6a5dec83eadab2
SSDEEP 1536:sScFrfK98qiKnkbbo+LqytypwuFGzMBbzJ:9cFeS+MotyYpwuFGzEbzJ
TLSH
T17843E014C1EB5804E54A34E7EAE6B7714C97F06823E60ECFE3629E317D4C25881F86A1
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclidbi.pfm

SHA256 0c97c4b4c4008b07fa9caf9a1ed659c327576eb94c8fec4ef9b904c6072fb09a
MD5 869c668b4cf19b924ce4061c9ad6641b
SHA1 a0b9859c3b3a5b5f9359a2d6556a81d36e92363c
SHA512 6b0bfc12377702995cf18a075818094b2b009850334fe4a04c1df4789881c36fadc4bfd07fda882b0af42fa0af9c24428fed581bae39c2181fe494970b74557e
SSDEEP 192:6KBq6r9NpkATcrxlunmxwdARKfdJQiHXbZ+3i8OONc:68r9jk6cmmwdAuzQQGi1d
TLSH
T141D1007B7D0236A95002743B689872FC1B4759D850BD9BD127EEEC638BAF76004260EF
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclidbi.ttf

SHA256 2b7391a7ea39302092bdcf9d7644a19d4884aabe6129b7415169332fdd226fd2
MD5 ef98cc0c69a2b796b61e2e5b2eb46c84
SHA1 595b2b4ad1b31f9ce4929e66bfab2dff9f5b00db
SHA512 0e6797dc363fd6231cc6c74338c7286ac54169dd74a07e617e5bc0cbeaaae6b1e9c318047f39e099722a166234dbdb97b1bd2f92226d2cb024ac51f2b2f98b0d
SSDEEP 1536:WhE/KFTXQBFJXgQboyowfQGK0TIoL6J7DZad9Yd:yxXQhoylfQGnEtaId
TLSH
T14A632B1261C2DE2FF3A5F6B9757181A681CFF231877BE565F6028D83C751AB0A608B07
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclidi.afm

SHA256 42212c43ac690e15fcfd6b5748e6634032fc26963a6cee315d86598a70eae0a0
MD5 ee68ce144dc4cf115ac17184c74541a9
SHA1 5e181523c3f8dc929346ae12a2612eea945322ea
SHA512 4a9a05f59aa2a9c82736e21b344fbcba8e3892228b2aad5e9064500d8689ec31addcb9e5fb3d41d8d6918a6b4ff5c5b9eea3e24e8000a98a41339b2dbeb71028
SSDEEP 384:5Tdq03sPWK/SeW54WV6kMn/g38L/+Uk70Ujd+kUDm32HRa:id/SeWck78Cs6d+kom32HU
TLSH
T18113D13C5A4EC44B445B056D80BFCAB36ACBF1A71AFE3A9CD0BDB67E07065A0C659053
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclidi.pfb

SHA256 d1a6c1d0094c28221dc5f04f93f1b353ed143de5b164e86cf9662f1ebc12796e
MD5 f1e481c413f2b66becae3b0ef0d2c9b5
SHA1 38939bbfa7865ab1fdaf12c81070c39580746626
SHA512 48c0fd59182292d4e84e584dec64e7bd2e4b0395c39acff443576d61a524276e62442fafd57f5d749cb7cd45fb0301ff653e3a7f7afcc2376a47bd4be9a9bedb
SSDEEP 1536:BScZACvSgLZ7sO8iHeffXgqC4eVfRynQPLR04K:scyCvSgLZsjiHefPt83i4K
TLSH
T1C333E052C2C3C852D91E38EED0D1FBD2587BF12691C42EEFC7A59D752812A6090FC2D9
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclidi.pfm

SHA256 6491d4f3c6a115d6cd37e7ffb0e6a489c68d501b1a23916c641cb09f4f5fc90f
MD5 d2014f0d51b69a718990bfd14b91ba4b
SHA1 59ed3698cc75db0e14c376f78702b2a5b8622109
SHA512 4cf4c948174af31c86d0ce3b1401915f7d1d5e08a6d62673fc82043a1ce3809f3ea62994f42d16642a03e4ab1db066674ed7f2b14386ebe6622d16c8f9cd252c
SSDEEP 192:dOhWXrsC9bf6laEuyF0XIWZd8DSt1XNuf+U:dOh+19bfUBDFkI+d8u/kf+U
TLSH
T1D4D1F23FB8582FC2D110A5BF595C62F91FA374FAC1BD21C97048C91617992AF14DB24B
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euclidi.ttf

SHA256 0386ec375b216e0fd48c9b4bdac271b1387a7e103c1cc2fa7a38737b19979b98
MD5 7c8a14d9ca03ad5ed9d0f3fc2fe331f5
SHA1 dd66fd6b81ad8aecfcdb758801b243538a1b9872
SHA512 8947bc7e85345635f65b1c013bf04ee21b80ff79f2be3c2cd0b1095fc232ef7bfe8faacb5fb50e931d24107ff45ab3f83e35505b881c2fd1a92cc097b05fb1a4
SSDEEP 768:46Rekp2OX+vSj9LA+jDXeOvfcYXKer7Si3Xfs3h3TBgv4Bfhaig3gLplAMuOOLN8:46RQGAmDhv3v7XfeLptuF50xZg2
TLSH
T192632A011142EF6FD771927A8D32914582DEF22642F7F1FCEA42EEC799526B0A690F43
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsym.afm

SHA256 29900e0edd98b6caffde6968a451e1c07a9542c64a8148c3e262b311bb3c3277
MD5 bf02ed5cf226043163fb129ce1009d32
SHA1 46ec13c3c6cda1f987fa2f0cd21df10a247008d3
SHA512 8df6a799ae040f15d28459d855731ca0f7118a136613e7f0df2497be59974a5b1a9c8323bef24d28f734c03ea9e551d3356f54fbebc3ec17f34ba9776e2ff8ab
SSDEEP 192:70vW36kJ7innvgBO9A4TbeqdBc85XZXQx6BDbo5GZYe2gWqPE4VtwOEECgufWKBo:Cy6Y7invgBO9pTbegBc85XZXQx6CcZY+
TLSH
T17012631C7DD5C459DCB8838DC8E28B8540EDF71B00F33CA935AE7A492E47E48A187769
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsym.pfb

SHA256 445acdad6aeb0d938fb5a9219d44f20184d7759d5875cc20df641ea7d14b17e5
MD5 2409fee5ef6aa2d35a58e69453509db0
SHA1 5ff97d6784f41a7a6bc031412cde5d0fd42e4013
SHA512 d943ec5b93443e3f4c4822e552cbcb0af298fd12828171c903f6bfb602b4ca5cc4ebf04af1e74dffa6d68abcca14dd757ee778000ae0a7e0878bc07db8d82510
SSDEEP 768:ZigIC7t368IF07Srz48UuBdPzfrXM8tH9LdYDHhxjAqAKebPZdHnfrCNJx+:ZdH/ErzEuBdvM8tH9SDQ8eddHDCNJs
TLSH
T142F2CFD4D8DB41A1E46234C7D1DAF3B308ABF172ABD59DD7D72A8E096C4400022FAACD
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsym.pfm

SHA256 217efdb9be7eed9bf54b4c44df0cb93ed59ff78af4b4ee968a3e69a3f11735e2
MD5 40ee13d458ddcf6fb317e1b4acd4a0d8
SHA1 86419ca94972a9cb299b6f39f7f1f937c6c87648
SHA512 5bfad6db88b558bfaae16762856146e610ee27e3c12b95c4e807876182a51a2f213224a66ec948db2b27f7da846cba2d926398395636b6e84363a302cbb551df
TLSH
T18501AC670D233082C4FA0775E7D13A123864830CDA5D572230CCD5ECADAE61664C8218
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsym.ttf

SHA256 4b84b72f93ccaa07b1f20f2b0d407505062625b6d19ddb6a12d310f7d75592ac
MD5 0e3089f8e2dc8990fe3f848970a5c762
SHA1 e1641392b1d3b3640c8c01ac79599f4ee15120cc
SHA512 701123213beafb116a52244249b24ee8058f943dbe73e1134e9ec26b5b18804c92233f8f9b1ff24f85c359ae78cfb68b52a258aee3ef1fa1801e0e96d548c3f3
SSDEEP 768:jfBupyRXW46Tg3aZycw5uP+iFyTp8rmxpKmT7t/pfkmZV24OjPN7MgYhZZ1ZHkes:jZufbkFumoyd8KxpLRppxOjPS+xTXwKb
TLSH
T199137D5163C3EE5FF3A26A769178E1A18DCEF0391B276278F3029D2B5045A40BC99717
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsymb.afm

SHA256 e782d4f83adba818cca8249027cb6a0e56cfc36d47a77b0e2b6259efcb425924
MD5 af40153cfb29e79b1060036bd162531d
SHA1 6d1b9cc8e53b63f0f6abfd938e0216fd066089d7
SHA512 7841cdced2cf802831a095ff819c113a9c2781016486eefcbc71779fe367b4775fb657e86ed5890310ed0dc9ff66d1bbe2265a95710cffdd17bd98f9b30a3932
SSDEEP 192:jhegXDkeZeN06x5ZYW4+LN0mWrrv2COx2KwWXvcJ4S3Z/ucXkI1quXwoMgw/05O0:TDk6K06x5ZKMNnsK7X0J4SJmqkIMcagV
TLSH
T15912AD1CBDD5C459DDB8838DC5E68B8480CDB72B00F338B578AE3A491E8BE48F247659
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsymb.pfb

SHA256 0e5bc1bed21d5a9dee6a02a99ee7d7c83f496082dab88bb2bc847da03ac58237
MD5 e9390a97078d6f34300f93bc54f58f10
SHA1 2501893383f41e2c8b4c5b22c99b038d88fc878c
SHA512 5c9e8b5934b295d75b646d853b0a1cee69cd84a874259ac4c45fabce36b8fd3ba18851ceca838660a8e45cffe75d42fa983334c69c23863a9ed7875f78c826ea
SSDEEP 768:digB1NBHvAEmg9B1s2wt5MdlTJ6tmx7cAy7Ez4oVIS//:ddHNB9R9B1sNtGdwkcOvVIE/
TLSH
T1D5F2BE80D6C31451E6357CD3C5D8FB958ABFF59258C64DE3B7048D583AA458802FABC6
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsymb.pfm

SHA256 316b9932bb44e1b139e5ec585b919d9ed38a9e54ab1af05d4782ec329d8ef49a
MD5 2dffa2910a419d07c43f46f9b596023f
SHA1 224ea98e2cde1a3539a37b6821e93bdc96d74653
SHA512 8adfd95c41c1453109fb60f3cad6111ed7170d2b024724a86d6eb4d5b5bd821fd26b09f08a413f89c104c65d974440b57f06281b3ae6d91d9987bc769510cd78
TLSH
T17801AC2A48B77811D1A10635ABC6339E266A9311C6FC6E7339CC9AD88B1E2D834F4310
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsymb.ttf

SHA256 553f835ef5e5ec7e985e3924a868a8c66f5a23be9f742e815104fb005ebbc9e7
MD5 0a51fff63f660dc9cf6ad5bc2eaf4331
SHA1 72d7531afa9042a3a17e15d4127d83d1f8cec41a
SHA512 6c7827d0bb6dc7a9d9295caf77b0f291cd5284c9ef65468fd1c55c7f651d7c7e96132b0d8a24409feb0809f6f9243cfa8878e0ea15abbbcf2685960131aae22e
SSDEEP 768:Pfcr+emT6jFX/GUTYqWr14I2LYOyxlgSvhnD2SOlUZQlObGWQb75b4iJWh+:PELxvYb2ErvhiST1GWI5bOQ
TLSH
T1F4038E617393EEAFD3A2557E4271D7A2C98BF2340733A62EB745892B40867904C5F70B
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsymbi.afm

SHA256 54cd784cff50d2c3f58af95d276b8a63feba5b07344b288a046974a15bffd607
MD5 9287b8a84bb0437bea1acaf420e79938
SHA1 11522ed670487d416d1eb84268e945e5c63d7c4f
SHA512 007eac0cd41f8804213294d5785dbee3bb83fe74f03f467a4f2c846b2787a543058490043be971bc8c01e0ea3829e016fd73bbb72147680dd3c22917e8483476
SSDEEP 192:M00qvcURo2uEmB0tZOZr6UmdjDyyWTeZUrv2lz6Kv/FSQQ5wYRNs51NJtZknaVJz:xvcUR94BH0dnyyK+aw6AtMykjIXGXCXD
TLSH
T1CE22741CBDD5C45DCDB8438DD5E68B8481DDF62B04F738B638AE7A490E8BE04B297618
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsymbi.pfb

SHA256 f51216de325c172f205027fcccf655a5053d12974c31bfdb7225a96b9265ebf2
MD5 2a71b9737145c4e1cbd180037c00e958
SHA1 709a607c82c41668dbc6a03a3ac34cb7b5dd06a0
SHA512 b83a3ae1ed9f3ec19d7714f54ea8684ec6a4a985774d6cb6f8290ccf3d043c47678d9f4a09c8fba5b708c8829f35f3185322343a9b588732cb5cccc9485df0d9
SSDEEP 768:Jig9DLpYo87BV/2/R3ky6p57t/hNNmTrOWHyfwg1387Uw:Jd9DL2/2ZUHp51XQOWHcjV87P
TLSH
T1B5F2CF88D043AA11D20674DBE2C4F325197FF19336D0ADD7CB4B8F246889A15A1F8ECA
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsymbi.pfm

SHA256 7e71048220676e879bda3f255f9f648b3e6e1b4ec933ceb95a4e88fee04b3c2f
MD5 63b6d0666e046fdc3d50c9b64d842b13
SHA1 ee9bfcdea7c010576389be5117c727b0f9a08427
SHA512 31388b9ae6841dcb29ff4a3054c869b9ed96b95dedbf2c76677bcdd12ef268a95b50b8faa165a896b710f7dfa17fee03b5491faff2d36a549c4a72f39b7886db
TLSH
T16501E11B28B32125D0960070FFE2519E2615D32BC6FC1DB629C89CD4C34EB3550B1317
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsymbi.ttf

SHA256 6cad90218f7fee59767e5aa77aafbbf61eb4f1a14bc2163e0716dee718a69069
MD5 06297403b6a1fa5b2fb4adf5f34115c3
SHA1 c17d533ff2d3f8ae03d25d0a7d1ee6d9d398f76a
SHA512 744da5314eb322b9f29d45cf87f3246f9b0e4000d697e9e01c46b09a06d46563c8a966ddf66df5908d8042fd1055124413e549eca037417546f2e6b83ed981d4
SSDEEP 768:oFfBN0BAcqjeR8QvLX1lyjdnFRrxSOpj3fKphWhH:IZOB6MmFRVrj3DN
TLSH
T170039E625391EF7FF2A266BADC72D216825FF17143B7FA42FA054E479441720AC28B07
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsymi.afm

SHA256 a7309947e8a9f4cc76c913c284899704d15b8ae0c6a694638dba9633714dec14
MD5 ae17cf8db36fc4b5547e8f4d7df291c2
SHA1 729210f3b11127eb28606a81e239298c68804db1
SHA512 4325e41a90cdb6968ed24de7048eb4bba045d1a53c23d23b8b6f85531f3774628176cbebe303a403d97dbc75ffc11be395bc9761987092aaaeb26864ee3d1c76
SSDEEP 192:H0U8vxoGXBj0+hsEQMIA2d24pgfI3E6/glMoistC638dWHGLBATpQpKA5lJnPM/s:wxouBjrIA2dRQ4ESXoistedWHGSTp8Lx
TLSH
T18312561CBCD5C45ADC78838DC5E68B8540ECF71B14F738BA34BE76890E4BE45A287619
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsymi.pfb

SHA256 f0945025ebb77d730fdf47676e556a8d7d03abe4b6779447ec83590b10274e5a
MD5 807b62b827f4a3306b3f3edfba2dfa56
SHA1 2148d86458004e809dd11ed80908e5cb4dd14056
SHA512 346702b4ab496ec214905c3274bf568f791668e2fdd994bcee19a9d566522238fcc365cf61e9473492685231fcce67ff181e44c92679226503d6dc0581a16121
SSDEEP 768:figV3bXN84qc1uKWjxd4v72/FdN8xd5rHYeyCyr0zc0Pv+U+:fddTWjjxma/v8zyCQGv+t
TLSH
T18A03D168C9876121EA26B0E7D4C4F3358AEBF44219DA5CCBD3910E4C60C57A471FCB8B
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsymi.pfm

SHA256 a01c5f34e7009b33680c9c12a680be78b9257b2a5db58fc1d391c9d9c38a5eb5
MD5 94e419a4f296501774ff9c776329f995
SHA1 73ccf76b2c8e49decf028f98776076449d9ec918
SHA512 755ad53d03f5fdc16d5d47df248083362af50029728397aa2a86b5ef1169737f791a38f88ce1c9848b4425b47b82ae4dd1cd5b0177ed20fb5b08cacf76b566bc
TLSH
T13A01782968BB3142C1F203F6E78127211D38B21CEE1C8A6B2487D894A8FE61316C520C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eucsymi.ttf

SHA256 2cd1fdfa7e7ae89b7075ad6d7b986b020b127651c902441f9556076a74cff509
MD5 a958c8eea1e5139890e44a7a67775e37
SHA1 65c95add50f59b8bf03391c164a4a966a452914c
SHA512 6f48744b7a6bd4ffd4ee9ed5bbd7f0a6b4ebb940ed8bf1b6fdfa9af7f275282635e374d76ae216feb9ff5f0b19122b5c65424f91e870466cbc487cf7dfd86506
SSDEEP 768:nfB/+65QBT6YiOqdIEeri9CIMccR9LcLSHSsX3MdFmgQ2uwK+NWhe:nZ/+65BO9xXccxVQTQtRE
TLSH
T1DC137D426391FF3EE26366B5DD31F04882FEE176137BB691EA019E478881750FA64B03
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euextra.afm

SHA256 2c95b321caba8099474a363a183ffc0dca7e1883defd66e73032227cd436f3f1
MD5 2bef360981f9dd0e7995e9ef5517b2a8
SHA1 755804b530354ba906086a2b4eba7bd97050f0ac
SHA512 62c7c8955fdcf7e8da37fff4aaf5cb02f02bb4a6f722b0217ae2948c9a6d4bc11c637ed3cb6971ab2f5d3f30a127fdac6dbfbb3db9ff823c72101d94564accb9
SSDEEP 192:GUhP84VhN5259MzgEf2oARF/MSBKPacyLOzaB0/FH/9XqGbtlmHAtFd4ngmd+Tz4:L84VhN5259Fs2oAKPacyLgf9XqGhlSMu
TLSH
T16302760C7AC4C85EECBC838EC4D2679541CCF72B00F738A936AE79550E57E49E187A29
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euextra.pfb

SHA256 345a43f497a099d3d39d24e29f67785a1dc1915ceeb192726e69d956e36e29d9
MD5 a76e6efdb17f91a057f40dedfa3bd5e6
SHA1 332a30a75df699f4788b48a66ec851ac788e6c69
SHA512 f63b1316389e82b5b277b2c9307c229d26ca23fa99ea325ff0648cd824d6654d38a5d94f3caf79f655f47fd15e9dd712d6bbf5f6bba52fe6bbf41b273a27023c
SSDEEP 768:9/1PBCsNUBIJZNWml8eembnErD2JCdHBVtfzYr:B1PBCsNUBwZ1OeeOuqSfG
TLSH
T128C2AD80E0DF9945D63B71E3D1D17B7059AFF66221EB5CCBA3C60E911C9140191F6F98
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euextra.pfm

SHA256 52466d7fa9a6b0ba223ec00bd0d06376199cb85c4575153533a78e55c31fe46d
MD5 c4bafc7c68acbb86fe6eee276ea8ef02
SHA1 bc6752495c3af05f44460ecd378bbeffe28b4455
SHA512 50d2e0b7c4c3d8b04dc4fae76d601538874fdae517c3383ba1d3f6a0be86270be53f744a07563802d58c56b6aa3bdf796716d6d7395b6b6a3f6b612a3fbbf2d8
TLSH
T146018BB8045B44B9C3B1277C93C1968568B9239D82894FEB9100C95FC51E20673D330C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euextra.ttf

SHA256 1fe6576a1c3a3dc182059ed68fd2f4c9f86650dc83161f52b376c7567d2ed74f
MD5 533eb80a79e8177157828c81fdc11c6c
SHA1 e3df07eed6d132cd16fa68f7fc3bb1ce25e22c09
SHA512 26b119a060d2ba04a8cfe42721ba30768ad919ec61e84162b26b08170a1a3f9f5d9bae34887ae8b937c03e93335d32c8f026fe031a047abeffdad7517ea7c3ba
SSDEEP 768:85LZre6v9reRZZZO934UaWBzfEqbvC8i6WG:85LZreS9reu544Bzp+8i6WG
TLSH
T166D26D21B7C7FE0EF76269775230E6622E7AF9304B339BB679074C4A5440BA04959F0B
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euextrab.afm

SHA256 446440625e5a1dddf7eccf3c6de0cfb6650c70f847281d73b6d116c8a8650239
MD5 43893f02e2d5dd1a5ba1752718a39f3f
SHA1 2bd33ff5a88c0e8d13ab0d263c8d5a2136f9ad05
SHA512 d3856562f824e3bb9f481b4f479a33081b95d5e5462dadec9eab0dbc329fac7166c08000ed11f3384cedc51b24907a4461df8a5a00f142a30d92d5c45dc88422
SSDEEP 192:WSwa81h/UILRJn+UToAV0YQyLGjUxcaDPoemnItTvzKLp/86UYNdI6G8TeaNKNBU:Ga81h/UWRJnfyYQyLGgPoeS86BNdI6Rt
TLSH
T1CE02AA0CBDD4C89AEDBC838EC0E7679041CDF62B00F738A536AE39550E57E09E557A29
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euextrab.pfb

SHA256 c571342c1da8606a6f18cb98eb0d357687fbef820870eb7ea89ad50154d3da44
MD5 eee5355bef4503bf9ccfd7f94b4ee886
SHA1 be23451a0cb1ebcfc38e375e10b3b9e7f096c9f5
SHA512 6eeab248f8f0c24806b397a48b0aab5374a3ce0e849b7692ca5368d694e6d22a1943b0da4afa731ece243c9788200dd5eeb583a34b97d9fb68fd9dbb828312a0
SSDEEP 768:U/1PBCsNU4iGg6CnvchAjjLcIpWIgTxG2N0VJCH:s1PBCsNU4ibvchAjjLcdfQ2xH
TLSH
T1EBC2AD44E5EB5914F27B72EBD2D1B735105FF2B5A3E64CEBD3918D012CA048440FD69A
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euextrab.pfm

SHA256 a921eb349e8e7a539fdcb903f0f8794c7a9c301f49b16856964ca09541efbeba
MD5 e159e42ed0158949cf23f29396deded4
SHA1 7172f61c46898d961897521c7c7fdbfda32ff4d1
SHA512 9fa798f853ccef01a8a339af55daed05512bf455114760ccbd417e6b9e56c03e8ac14e6799b7c949b5c33b2603499674a703469adb60dafd0565bd24e161a6e9
TLSH
T1C701EB36C44B094EC3E00BB05341CE653EA263E982894DAA4E04C8A9C10F21A83D0F0C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/euextrab.ttf

SHA256 e4c054f434d6f592f8f40bace78fb528dc5f23e86310d53c323aaed3680a8f2a
MD5 80c12db071954f53ee63c03ad5f8450d
SHA1 35de158231c16d5e129736b6fcaced9adfb61bee
SHA512 7319620e666ae39e9cad5e2acda06c173c9738a108325f0b54c7351e0ce3afefbd0c0bdb95da11eed8c6f6b4b1bbc814af09b3d17b0b8efd26619b9652cfb737
SSDEEP 768:Jn3hA47zPaDKW3gxAUVaQgZg9aXOf2rmRj8i6Wf:JnPzPaD/gxn2skOfzl8i6Wf
TLSH
T12DD25D60A3D7FE0BF3E21C36846096720DEEFA354B73D9AB368649075461790981DB2F
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eufrak.afm

SHA256 0c36fefa407d82ac8d178dc37b0a78a3c13f162c184b25222a44d5587151cdc4
MD5 28799981843412df16d2579cc3cddf26
SHA1 727ff50ff29fe523b85d63333d39e7d7c6761389
SHA512 448937b6e0b67897fcb88b34b4a9e560d0e51f80ae17cc5a2bbbf946ff1455612ed79cc453acf47e17f1e16f2dab21111ed79ca075e302fdebac74ed23b2b602
SSDEEP 96:Z4WvuuIHSka6mfmuObAMwAXhGLIfBjjYCW7SXjweiX5wwdKixjPeUHzuh6xL7rmB:JuuIHShVI3fBjjYTmXjOX5N0ixreUaYe
TLSH
T152B1101CBCE4D49ADDB8438DC5D3D78145DDBB2B04FB38A534AE36450E4BE0DA28AB15
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eufrak.pfb

SHA256 e71a8a603939a20e70c5b9ca9078d0f0b9213bac620bc437067bada5de7acac4
MD5 383874c8c81af8cf920c60024cc0d1b0
SHA1 6dcf0de261b72c75c4a4f368fcaeec23225f5774
SHA512 fa7550c7e74fa37b2bce3d3132aa9486127ccc26b6beaac6ab054ae3aee9f3cb94b5b288dfb0d9e91c031b39b06bcc11b79de8cedfc13e74876ec0b25e6058f2
SSDEEP 384:NmX/5+Hx2A8ky2QuAVZHmB1QuwpGugQqeC+wsVhPm+2UyBI7303tO4lpS:i/kxMktQrZgaZpGugQfC/Sry93tbpS
TLSH
T1E9C2BF45CAE76114E21930F5E5E0B335406BB5D42BC66FE2F7846E48ADAA243B4F4AF0
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eufrak.pfm

SHA256 2f44680a1ad89f916594319e0d63ae43e0fe41133accd204f6fbb945d67d4b1b
MD5 378529fe5d64e5634fe327a2ffab6078
SHA1 2697403d277ea9282a1a462a6e9830c2c30b8dd4
SHA512 1368f8ca67eae99ef6f1ede4a46b27ad55edde310657ae46cc8f931822735abd8a4a21104dbacca4d13707231cd4620b4243454efe393e0132ac0eefb54b7be7
TLSH
T1EAF0AB96083B77CBD091F934E132AB861910929F80D5A91F188853E380212183E90320
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eufrak.ttf

SHA256 7b82500c4ee4d3672bc4e0087176816a1f6e93add95cb8a4adc691ac7cf73c5b
MD5 3306b564beb262cc5bb227d9c780d972
SHA1 b36e2e919c5c40c8fa3f3697d704d171567d3984
SHA512 43e400a5c90e1ebbd5928a698ba135b15f14f86f78100db4cf1f88fbdd2b3359032356b121312e3ee11747a336365c53d5d6b9310bbbc64e05f5453b15609f3b
SSDEEP 768:pRxKKyvXa6p1/VAyv/whVSPdFZZICB/0vrthjimfrK3SbZ1K5gfNH1pgZ:eyStg53jiSrKgVNHcZ
TLSH
T1AFD22902EB47BE0FE752317B6B005256C4DBB02B0BFF655DF6079D6B418668068AAF43
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eufrakb.afm

SHA256 e813a01a3a17acfbb429eb2ed971fac0baa5bf186f5263484441c9b5e2305ca7
MD5 d5ff3945fde3bc7e6374af1d9d87714f
SHA1 2ca9e7ad22d2cf670cc110d583caa51bc8fe0bf1
SHA512 6295c24b5ed6d3e702aaa1f7a9162a57966df8e15d8a30efaff6b5887cf2c76cf003877068cdbd46d46e73325cdf29670422faa33b34abc7029ad6fead8d9a6b
SSDEEP 96:VWpAuHPZGytrPvOGIFEJ+TVvI0H9V4g0+/vA4ODbOOFTejFmXLSdmrNF8hc6qKZQ:LuHhGq2dzV4g0+g4ODiOFsFmXOdOb8hK
TLSH
T164B1435C7CD5C4AACCB8038DC5D7978141DDFB6B04FB38A934AD7A460E47E0EB296618
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eufrakb.pfb

SHA256 b26609da322cd5620d4525a02ad19c8554d1b0e3ed2c2d0548c66b838f0ada7b
MD5 4e68f364bb00f7695132a914d16b30bf
SHA1 4b94bc32da1baf554d867816e99012501b731e1d
SHA512 3b0981efda16976208435f8f24e95565b4940fb98e563eb0010bd0510eba84eae23adbc7044c7f4e2972485f5d354b3b4e0331399e3a08ec6bc488e6ba080144
SSDEEP 768:0I2shFQSrSxiieNQpJNnkoOP0ciUziZwgHf4o:VthuSrSYipJxkoC0cifwM4o
TLSH
T1BAB2CF44C1874510E435B8D2E5E4BB19488CB16A0DC34DD3CF03BEA079A6BE07AF81BA
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eufrakb.pfm

SHA256 b057d91d5c6e72a395b603b8892df4381920328808e59f458c6358070b74eb59
MD5 8bb9251be2fe622daacac0527d918c87
SHA1 6ef2f97343525c9a8aafa71f2f75016089f063d9
SHA512 3c5632347e3d785575d7ac23436eebd63b15c9d02f20bacf9acbaded6c8da91aa491f01de5025e49fd98cc0654981bdd919de9c734ea7dfbefb174c71c71f742
TLSH
T1BFF0AB6365276989C0C3C93DD2636F613DA19688F49B3C6F8848D9B10D1A2C462E0314
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eufrakb.ttf

SHA256 8af28754eeff64637b1a75d2876f7bbdc266b2b3c251f11fc0305b6c5712bd57
MD5 1172af91a7cc67accfad6b8ca4300edd
SHA1 555f60fb54848d1e571640af142bfd240f4a9cdb
SHA512 3f9c4333ee6970ab86a0eb1c6f4a66619a8bc314a4e74118660e6d5e8072a290808f0b9ebd1b6b2ad5eed09ab897203aa432b3e5348ab9e8a03fd1ae57a764df
SSDEEP 768:5Gv+ssmsiKRD4Bupaf4Nc8OJ4le43igs08jk92B52c5r/oK8Afz6mws:kZFKR8Rqejk8H2c5r/QvmD
TLSH
T141D24B01A743FE0EE762727A224102A2C5EFF42B47BF555CF6039D1B859A280799BB43
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat1.afm

SHA256 80c86d687038e3514a4632f5979fbecfd1724c6bbb396b0b2b117640d994ef4a
MD5 2a750b62c33edfc65cb65bdb13dba352
SHA1 16b149e00bb97232923d348ba37285ee45cd09b4
SHA512 01107a1d285b1a5f6ccd9ab67114466e377257aacb013813cc337e0563c6de96242c14e47e67343bd56ffc0c2fd8774b05eb0e6bc1a3d6a9f10f01ecad59c008
SSDEEP 192:cL4FVpmggZMlorxtDxeaB1+xQRuudoNf4KRXrPH3DKium3Ip5EbLe0FJysqzR0h0:7FVgggZMlorxtDxeaBc2R9doiKRXrPXw
TLSH
T19E02991CBCD5D459EDB8838DC9C69B8540ECF72B00F339A535AF7A891D07E09A18B729
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat1.pfb

SHA256 2d28103e2151dc83fdff85f4cbca8fb630004580ca2da3c9f67349a5f8726410
MD5 531c9c3f8cc36a2d7513743ed1af2a05
SHA1 6e336a9eea45529ccbe4a6993e14e4fbb6141e8e
SHA512 870601b582f1189094a132296281438eb5b84849c03174b145d71c7f089fdf8e66ad3f9125da1119eecc62dc6d535f9d72566700149979a746a5f21657ab92ae
SSDEEP 768:D7egs8WTzPaHJR2qOwIpq1Kgl9pKjziCIO4ncu:DSgs8WPSHT2qiU5KjziOocu
TLSH
T156E2CF54E4CBA560E2BA71CFE2C0377104A7F22346D8ADD7E387CE9019A088195FD7E6
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat1.pfm

SHA256 37bf58b105e3347afcdd070216628fac0a1f88ff339f0f76479d4dffe763e26b
MD5 1948731842225c1dee290f06bd5b68b7
SHA1 a32cd689db3bee4d664576bd393d6d19918e1b71
SHA512 aa695a9359f6b7b9304beec1f696f74c26efebecb71416dd1f201a42b50ef0aff6bb079f1df99e2a42fdeb39d5264d3cdaf1baf6672b05416e2f8eef03ea1e2e
TLSH
T19901277500673857C7F06B329744B2732E708B9DCBB86B1AB44CE6D5162E65526DC110
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat1.ttf

SHA256 5786ddd61ac02d08f8cb4efd3580c77406bafd6afd3edb5187a21da547333bf0
MD5 c12a4bc5c305b8b52bc830c0031d162c
SHA1 59ad1f784c8cae27c9d74ffec0e667f8cfd4354b
SHA512 ac23839daf3311fc7ab20448c71a9efa09c11b43fa0b68bd0ea3393941bc43ae5ee7eadd55ccbd42737dbbf217ea306cdc98134ced16df3b5d29e3f4df866d3c
SSDEEP 768:7Z+9ZaNbZtZNTg78fAir1ZVjqpmQjm44RVdQA0k99b1I6D+zyKY3NCtnEdQWKeb:TFTg78fAirrWmQjm44jdWWMzyKYAarK2
TLSH
T144F25CB6A2C3FE5FC3A2183595A4D1F65887F2314B27EA747B4B880AD891F90145CF1B
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat1b.afm

SHA256 b1c80c06c5d9769b38731825b8272cd74032f251685476e29329d625a66bc25f
MD5 84684c3685ad76fa7b5264f4683d11f6
SHA1 d8ec6b2f08dbc2cfed3503d22ce495ce86abadcb
SHA512 56b5f1bc41faa63da8fcae9a182551f14e351e93a8d46e0acbb6ea3001822e5e78e2a1190099b831449ff8e1384425caa03af5dd6feba5653277786923097574
SSDEEP 192:TL4J51m8CfYV+846eELisLYu/xEB4aOzlPBnNMlMHLAktV2anIeBvATxPVlNtHTU:4J5c8CfYV+846eELNEsbaOzlPBnNMlMJ
TLSH
T1AB02634CBCD9C865ED78934EC9D2DBC510EDF22B00F33CA579AE39490E4BA0DA187619
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat1b.pfb

SHA256 e1ce6c81f5da612e226dda274a0d2431ffb68bf162dfc436467208596a3331e5
MD5 7e549a403141e4b0d7d5fe711834fc08
SHA1 7a34e99a24533eee9adafb3de1ec8005b93bd79a
SHA512 2d9d17c2c72599de452e8a08356e7f5c181c034526c2639ccc5344c9b8248cc32030d516423a51482e7b25b32a7d7be69a759d0e5cabf8a19290391106962a3a
SSDEEP 768:R7eVrtyV9ePDjWgPX19kjMobYN2gACXnR6c/:RSVrocj9PP0MobYN2/MRR/
TLSH
T1D2E2BEA5D8C73A46D216B4C7E5D63B7108CBF61462EA8DCBD3D18E40AA7420130F9BDB
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat1b.pfm

SHA256 073768c65756fb57b1caf8c1bd8f3cbd2dd55841f2306b78f75d757e461c6aa5
MD5 3ca9e2fbed6f29fb950bb2ac7acf1215
SHA1 f7e59a5066572e4a47e0ef02ef1ad028176093aa
SHA512 abac4408b1a5f0b0d0573ee8a22db2e5ed5ce1b72fd83e78377af865d3a7604ddd227dbd40eb2f735799d2380a872c44d7fa7e0f567a1aa15dc6350a5796497a
TLSH
T1E5012779047738BAD7F34738BB44A2613EB1435ED7D99B1A2804F5D4592DAA921E8002
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat1b.ttf

SHA256 3cb281b0e938291b86762abb29532e24a89ebc9a91891f0cc4befaba76af9d15
MD5 bbd0fdb8c09a41dd12fac77884e5d409
SHA1 f8fd25fb7dd10074815e9f63137d48a33a60e226
SHA512 6680cdc7173820ab986ca16822d8e310693bb4a6751462dc38e41d81bb4680f220fd1b2d84373a5bb360d7e85e2abdfcd5bfab7a876bc21f74ad988fb584e530
SSDEEP 768:swrQ9IU3wbNh8sEoeyEYxuRTz9RKAUai//S+s4/zxVDw/WrWKeh:zrQ9IU3wv6YITz9Ru/S+h/z3CKQ
TLSH
T188F25AE763E3FE0FC2A319394C54E6F249D7E5741B27E9B8768A5C1580923E0406CB6B
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat2.afm

SHA256 b043fc778e3728881ab83e45b64d34ec1fc41c5ed94ead729af467d14c70b5ab
MD5 8a268a3225b3c1e92882c318f14357e5
SHA1 b3b8f7f7cc8b96e13fd70649ea9928c4737af4da
SHA512 2a2defd44a7235ddd3d13db5a7f037e951a729f7d29f733a11e59bf079f33de1760259f6998901f1c98a34a2fb19b8673eb30f6d79ae57a6ff4ae0b94dffd6ff
SSDEEP 192:CwDW1G3S8twJ2xSi+eqFOWEQ4dUihb6eHzV/zNOpyUJRqsmiRL4XRQEjWLGR0NyH:m1G3S8twJ2xH+1FOWEZdUihb6eHzV/z5
TLSH
T118F1F01C7DCAE076DC358788C4C38B4764E8F30B10F7BD15761E39490E4BE8AA4A7A69
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat2.pfb

SHA256 dc77677b50bb68bd25c0cc89b7e7ac7510e910381ef45200c4c9356f47e85caf
MD5 801ea96cca45dfa5085cbaeb68d5be56
SHA1 eec9fbab5a0298e143a9b47f82d9e49965b3583a
SHA512 bd607eecc56b91054a80309efc130d2b1f27c0f55754b0b5e9c40913f5e8e07d9581159c903809bc23e610e23f29b18011a27f9161b5dc020532c4a62a10a6d0
SSDEEP 768:qWJtiTA/iQVA3SBnBSRppH5zwwNXQOT9yQBRkw6O37:qWCA/JVA3SZBSBCOT3+OL
TLSH
T1EFF2BE28D48764E1E12AB0CBE0C9F79188E6B19031D59EEFCB07DD9C9E665808CF57C9
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat2.pfm

SHA256 2695745f1aafc1ad4baf2af2f5c656f87c9c1f9c2c7b9d66a345471c432bacec
MD5 b0aa1f35249054d5309adba41eb2ed3e
SHA1 7f894543e88b2659bb676f667e4034bfe6d66395
SHA512 f275a58439f88b7efd5c240d571b8214ab03eea5a7e370ab5d0299cd1f531e56d4bdbce1f33e694eb600bfe6494fab861cb3f2198a778cbfaeb6343af3ef9f89
TLSH
T1C601222648A72416C1F803FCDB6157646DA4924CCB8A873F38C0B2BE383D71416C4D0C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat2.ttf

SHA256 2b62705aea1ca12e97b9e6c4274bed6b0e56fff01c155e52ed164fea2be43172
MD5 62a469eeda69e1e5487717ca71f70935
SHA1 8862c4699c79a8bf464931bd99324e9189aec00a
SHA512 b578f8595cc87e551fc4701b3e02a1a5d132e328dd34ba256d2841b5eae29ea5b5707fd5f9c96ac9c7157fc4cd47e6a54ed9c493275b93a06f62044b2ddf5e5d
SSDEEP 768:hIPSsF9JKAe+yNRcdfzv4m40tDEdhFXhQQi+vO2exCodEYZ:hIzF/ve+yNu4m4YDEdhXASfeAoF
TLSH
T179133D7A21C3EE1BC7B3947A1075D2F40D66E6382717AA3EB74AC99FD8C1D901C99710
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat2b.afm

SHA256 02c013bf38a5ab257c1f33f5da0262fa81f80bfa49af5aab7fe4a47a5e04089b
MD5 4b054298b498d4e95334f8adba799c3a
SHA1 07378a123aee1ec970a371e2e4c26cff1f05a303
SHA512 08d0e83baa896140004d035f7db57f050800c39d58a6e7167065b1ee73384f8c208eed8e86a3536f26c17a92d2703d6dd88178e51a17801f52884a281ef8974e
SSDEEP 192:vw6/w7IagQONx2xEi+0IeE3Aj4V9jW/P/R9mu30lazU2AHsVs/oFZm4xTj+JMUuq:Nw7IagQOT2xB+peE3A0V9jW/P/R9mu3W
TLSH
T13BF1FF0C6CCAF076EC35878DC4D3AE82A5B8F30B14F73C15761E35490E8BE9AA5A7615
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat2b.pfb

SHA256 127d856f6db9b828e50b4562a234ca63417a144cb7b329addf50a5665fc8ad52
MD5 1ded460880a860e4d8e71c751a975476
SHA1 cc6ca2dfb80cadab1a49677b585d41a712be0912
SHA512 412f74e3d53226e1a852c4c5aa058888e0366261b1b2a7ee1304c8424b8df41e97da75019ee6c0decb52f007a67a293365fd0420044c072d1a1bae594fbe1ac1
SSDEEP 384:rfeJFsems4+EcVgBUvyNV8PzsvcHgrc12JN3XKPc0qgBLyLQpvMoikdi+c6RIB5t:rWJLlKt2z85riwZXhSBLgcvMhh0IvMi5
TLSH
T1C1E2AD2DD9C705ECE10271C3D8D8B36448B3F08442D63EEB8B878D195DEA2808CF96DA
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat2b.pfm

SHA256 8c9bf6a51e9dffec5c5ecb2031429f5e321e4a608f0a0354f341ced690deead3
MD5 b9ce52358d6307383ae7df628bcee8df
SHA1 59394bf287d7dadc0ba1f23cdc7f1e45fb1d2d33
SHA512 e79a561125be604c45605ebd773937d088ed11012d7002a43d66c4d69a7794c2cecd903e4ae5b25d87b15a2150462a60bbf614092ea9abc6554ccf718569faf8
TLSH
T16B01222A48E72415C1F407FCC76187656C64A20CDB8A833F38C0B2BE343DA1912D9D0C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/eumat2b.ttf

SHA256 0637cd33b44353d61b53d1e18027f8e7075c0618e312e66724cc602be29a5b98
MD5 d8aa0eff8c253bbc0e1d3d0f00a0a16a
SHA1 0509ce0134fc198e222fa83febd6150500f77bba
SHA512 1fce57e03e4a41400830acb2889df6f043916599c255c87f9a18f4a52d32e8fb12623c069651aac3aec4d23ee43513eef8b8da09cfbdb0d0f3a0e83151cec124
SSDEEP 768:4E3dW7o5Y5JtjRkB+TZ75PDPiu3TX7rLXHeN3qVVd8pYS:4E3dWxTqYZ9H3TX7rjeN3uu
TLSH
T11A134AAE71D3FD6FC29381351C78E1F90A59EB381B13796D3209899B5DD3A5024ACB4C
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/fences.afm

SHA256 7b9d1bbe49215d676ad74d46065f97535f7782cf3707e8488672142e866dd98d
MD5 0e607588791db4dec76f20a1836a6508
SHA1 f43e3a66e1307d652ac90c9d6760923d5398544c
SHA512 f1bf438f48c47d984cfaa3d5f801b57461891df233b539ca223e8bbbf7305acfa39f39fa9ec24e2865cef9d04b61212fa9fcf24119cc1245e58756e0a021d55b
TLSH
T1F471CD1CBE91C84CCDB5568585C3EF8041DDD21A10F76DE570AEF2D50E7BA0EE2E221A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/fences.pfb

SHA256 dddb55975b17e1b11c76500719b98d68dec9bf7b122d7c8453aad86ed941dcca
MD5 2632346adcc6a38ff86ff61e6ec9eda6
SHA1 fac671683b1cf21b90a32a6e71df143fb7bccaee
SHA512 f482cd0834426603a4177fad0bf9c68f59672b0f965c661e77e8504a41387343a432e60a6e8bb87026a56bf9f042b905e920948bb741002fcdab2a5a02087664
SSDEEP 192:278u/xgmHWpOpKf32BERE8NA0XW4vg3e4tnR3Khe9AQGhvK6+XxTcns18lv:27jWOpa3+EREU5G4IxhKhjKNtm
TLSH
T169522864D6C38171CA0A70E795C2377554ABB07A42E2FFCBD2468FB12489670B0F99AC
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/fences.pfm

SHA256 a02a33b40a7bd90fe0c59068d07bfdc50e0d45b896e28d6508528ae6a5446c6b
MD5 3ca538478f6a8dae93e24cf1c56a874f
SHA1 32b0ca7e0f4bd36b726467b64460da411b884df4
SHA512 d47d864f9193f11d873085a7a84e6731854811f3518009d3025a800763e37867517c7d5a09d73628c7c930400ff322bebed60376adac6dda40898440064b7016
TLSH
T1F901CD90DC17C406C2D33432D545CEA505269D444498DF33356D41FEDF535F257950D0
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/fences.ttf

SHA256 59d86b8ec524d6007412d44aebeeb54aec5cb3adb3dc422ee29efce58ca21d8b
MD5 2ad38203909b840ae12b240170f8bce7
SHA1 8fae67d58fce57eb7440e618257b32b00c8dcaa8
SHA512 daf82550e12465b756873094e160c0da0d8a756044843a44a0709a5c94f9862ad91ac74802d3af94bbe0807d974836447525fe136946a117cb39a6dd357730a9
SSDEEP 384:ut8Pv+iaBFNT5qIrdq1j3rG3XjbHvIQ69nl/SMnFgpZdT6TnV+Q89twrq:Hn+7q1j3rG3XjbPIQ8NvFgpZdT6TnV+1
TLSH
T18352E66BA60F857BD87A443057DB533259A0EF0007B7D20A7F1B203EDD95BCB8AA0659
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/flavormap.properties

SHA256 6da00c1cbe02909dcd6a75da51d25dbf49bfd1d779c0b8e57b12e757229fc4a8
MD5 b0ce9f297d3fec6325c0c784072908f1
SHA1 dd778a0e5417b9b97187215ffc66d4c14f95fef0
SHA512 4c774bcb9ade996569c86dd46b3bdb046771ad1bcf9aabb9db86854c83e18015cbe5df73da86ee98e26ba0393f548b1cc09de60bda4248eacc4fc833e23b8ab4
TLSH
T1C88146A9AF4D73711FB120F5B2DED185A61DE4BC73F9D94A30DA4708230ABA112317B6
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/fontconfig.bfc

SHA256 0f2265f0113a757c15d51fa53409d630478378fd0856ef547780b40ac6c87156
MD5 827f00e05f3c5272aef3bf456cf52bf5
SHA1 280ef454a4644d1e17c7afac3b94249ed6bbdcbe
SHA512 f6f4f9b7eeea090081cc0ffe9d2db705f832cf0af9882b00ac97ecae89f8c77a8d62eb6f224d78b7195172edcff74cd21a2459a7ed9cd6ddb29b3cc32398c4bc
TLSH
T172719D03A5FB2309E1F7FB715AB60479CF62B881EE679E5C1011B80A4BD2950DD72F26
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/fontconfig.properties.src

SHA256 b7b2bad36460edc02e4cdc31d4bd917adb53d754eb6d72a9ec9da0a4661c3f5a
MD5 bbc66ac284f51185febbca8561ba2193
SHA1 9e5ba516696918b4814ebf7a72de1b8513b5e785
SHA512 56605c8d3dccca4384ce93decde7ae500f8dfcbe4eac45f5038ef9c4915d99df1824080204c6e7dd9d472a43ea155ff2bf94b1f3820eb4336b0146fdc9b89bca
SSDEEP 192:ej2TlKg7RzPc/mOHUFN5HX/rS8QbWZjjfGuMbtxp8lcR9Nom:ej6Y8NcFzXbWZjj+uSMlcam
TLSH
T13222051B320C0B86BB7D659230FBA413781DA4BB5682BB9335FC4505CDA2694FE85333
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/fontinfo.ini

SHA256 33cd1ed9134408b5f48cbf84a77253d03818b1e333e5c48b018748920693cdf6
MD5 223185f031facaf8b488d397b5c96206
SHA1 609fdd7285c9a9e9e8cf7f0454303bffcbbb3ddf
SHA512 6f0742fd583ea2af97aeaa7adcf66c944663df9f9c2fe6761e635bcd21f9486b522e4fe3325c02fe32d202e9161090e3a1eeabd95ce079f9137e193b79185535
TLSH
T1D8513282AFC053610675362067AB7286EB3890BF17B00C0078BC5C2063B5A7A93F7A7D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/fontmanager.dll

IMPHASH b154cadab576035aabe12a2a1f05f7ee
SHA256 4b6ac72c4f1db85a0341caee879397e86c16272e2fdb047196b6555e3d3f1314
MD5 c5942b3041c57c4a083582fa60e027a7
SHA1 e260bb4b61d1624b6029d766ba966b759da905de
SHA512 ea76631c25d2891f99c6d60e3d4067ccd5f8657748038770b3a8c16f10aa67f22de183b389e0533406e70bd81abfb590dc16a25c814c559e9490f4e02d411c59
SSDEEP 6144:xdYViUbbNkLpg0ZiBfDTu9aJQad1UchFGMReiDrUj7OB+:xdYViUbbNkLpg0ZiBfDTu9aSaLGS
TLSH
T147246A92BA8312B1FEED6175103B6B2E472A9F59C712D2C393203FD90C3E6E459F4295
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

123162

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libfontmanager\fontmanager.pdb

java

_JNU_NewStringPlatform@8 _JNU_ThrowInternalError@8 _JNU_ThrowArrayIndexOutOfBoundsException@8

advapi32

RegEnumValueA RegOpenKeyExA RegQueryInfoKeyW RegQueryInfoKeyA RegCloseKey RegEnumValueW

user32

GetDC SystemParametersInfoA FillRect GetWindowDC GetDesktopWindow ReleaseDC

gdi32

SetMapMode CreateCompatibleDC CreateFontIndirectW SelectObject CreateCompatibleBitmap GetTextMetricsA DeleteObject GetGlyphOutlineA GetStockObject GetDeviceCaps EnumFontFamiliesExW EnumFontFamiliesExA GetDIBits ExtTextOutW SetTextColor SetBkColor

awt

_GrPrim_Sg2dGetCompInfo@16 _SurfaceData_GetOps@8 _SurfaceData_IntersectBounds@8 _GrPrim_Sg2dGetEaRGB@8 _GrPrim_Sg2dGetPixel@8 _GetNativePrim@8 _GrPrim_Sg2dGetLCDTextContrast@8 AccelGlyphCache_RemoveAllCellInfos _GrPrim_Sg2dGetClip@12

msvcr100

malloc ??3@YAXPAX@Z ??2@YAPAXI@Z floor _wcsicmp memset _purecall memcpy realloc strrchr strstr wcsstr wcsrchr calloc _malloc_crt _encoded_null _initterm _initterm_e _amsg_exit __CppXcptFilter ?terminate@@YAXXZ ?_type_info_dtor_internal_method@type_info@@QAEXXZ _crt_debugger_hook __clean_type_info_names_internal _unlock __dllonexit _lock _onexit _except_handler4_common free _stricmp _CIpow

kernel32

IsDebuggerPresent DisableThreadLibraryCalls QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetSystemDirectoryA SetUnhandledExceptionFilter InterlockedCompareExchange UnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetVersionExA Sleep InterlockedExchange DecodePointer EncodePointer GetVersion GetWindowsDirectoryA

$LOCALAPPDATA/Temp/mathtype.tmp/hijrah-config-umalqura.properties

SHA256 b4a0c0a98624c48a801d8ea071ec4a3d582826ac9637478814591bc6ea259d4a
MD5 6e378235fb49f30c9580686ba8a787aa
SHA1 2fc76d9d615a35244133fc01ab7381ba49b0b149
SHA512 58558a1f8d9d3d6f0e21b1269313fd6ac9a80a93cc093a5e8cdec495855fcd2fc95a6b54fe59e714e89d9274654bb9c1cd887b3fb9d4b9d9c50e5c5983c571b8
SSDEEP 96:W6Zh/3dzz8XIrN2r1CdaqRWtHwBWgvw0Jy/ArUsJzu0HI:W6jhGIwxCdaqWQBWgvw0JyorBJzu0o
TLSH
T15252B95DF37C221D0921104DF3FEB0A681C23A6791ED204D336D7FB852AE616E6B994E
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/invalid32x32.gif

SHA256 1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b
MD5 1e9d8f133a442da6b0c74d49bc84a341
SHA1 259edc45b4569427e8319895a444f4295d54348f
SHA512 63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37
TLSH
T100C08C88F34888828A4AD2384874138C68A4C4BB8A224B88144A2A94A2935A2C1D0302
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/itslearning.tdl

SHA256 594cb1cb3fcbdec1dfa3da6ab6589c5d3ae5e3e1e980b9686989d3a843dc2abc
MD5 79b156cd294a3233bbbe2b05427febca
SHA1 4fe9e05b5fae87b534fb3f3abfae0e582b5fc998
SHA512 69a4a17d6bd99716a16a5d7e53b93887c5aae8070b194ea74516a13e25e79e7403facef9e3496041aaa65d96ece3b1e0308128228ae907358128ad5203c0713a
TLSH
T16111C405F794117216D02294BF9634479128930C62FA0501BC8DC06F735A67C5BB7B7D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/j2pcsc.dll

IMPHASH 63e189e6ac3fe0e3a90b6d97282a498a
SHA256 84598ba5d55715f7ae169f168d1f1c6d4f82385822cd6b17706b19add0118795
MD5 082fcf36dbcdc2ae39b7a05fa50c8221
SHA1 214044ccbb0c4eacf6f68a9361aa21d7530faaa4
SHA512 0ba186c7a4e0bf4d8aecb30bbdda5e460acea8c5aad7b9035ad7d5b62858702a9b4b04cd144121ae05efb67cadd39b6f1cfc6a02464e9c887747d638d1b1995d
SSDEEP 192:pN+oJRa3faYQu4H7nhTZw3SSunY3X3PVR6y8jzqpYOyb:pN+oJkChdw3SvnonPV58y+Oyb
TLSH
T109221A063B98C033F6BE2B794D361322E67DBA00BF6154574B129B2917A95E18D32B86
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7049

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libj2pcsc\j2pcsc.pdb

$LOCALAPPDATA/Temp/mathtype.tmp/j2pkcs11.dll

IMPHASH 13312f067fe890fc2438ee0b627107eb
SHA256 5e774118444fd02e45549ddd3956452befd32b0fad38994ae6a8bec6ad98b390
MD5 33125cdb04f05e8bdb359dbd60eeb029
SHA1 c5d306daaa32ab37c0a712dd4cda939fd6903069
SHA512 6abf42ae8bcc36026d870bd6d50e81d7c8b6c9bdaa8e3f07aa2b4923cf5bb1151dbb824c57f3e246b04c7f9224e57a166bb82c33796a8eea3b0feca65f6b027b
SSDEEP 768:gOzcUy3d4wuIoMnB3w/2hQkHc6lFUWGMmvriCCf5C3R1qo2hHOGLxYRrZT9ixHDW:PcFNTVrhQv6lFUWGMmvrAE32LFYRrZT1
TLSH
T11A13FA1221D080F2FDF6247EF52C2B2796BA7D113961BE8E0705CA6D773A661D33A6C1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

32620

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libj2pkcs11\j2pkcs11.pdb

_JNI_OnLoad@8 _Java_sun_security_pkcs11_Secmod_nssGetLibraryHandle@12 _Java_sun_security_pkcs11_Secmod_nssGetModuleList@20 _Java_sun_security_pkcs11_Secmod_nssInitialize@28 _Java_sun_security_pkcs11_Secmod_nssLoadLibrary@12 _Java_sun_security_pkcs11_Secmod_nssVersionCheck@20 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1CloseSession@16 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1CopyObject@28 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1CreateObject@20 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1Decrypt@40 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1DecryptFinal@36 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1DecryptInit@28 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1DecryptUpdate@56 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1DeriveKey@32 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1DestroyObject@24 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1DigestFinal@28 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1DigestInit@20 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1DigestKey@24 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1DigestSingle@44 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1DigestUpdate@36 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1Encrypt@40 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1EncryptFinal@36 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1EncryptInit@28 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1EncryptUpdate@56 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1Finalize@12 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1FindObjects@24 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1FindObjectsFinal@16 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1FindObjectsInit@20 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1GenerateKey@24 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1GenerateKeyPair@28 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1GenerateRandom@20 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetAttributeValue@28 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetInfo@8 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetMechanismInfo@24 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetMechanismList@16 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetOperationState@16 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetSessionInfo@16 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetSlotInfo@16 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetSlotList@12 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1GetTokenInfo@16 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1Initialize@12 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1Login@28 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1Logout@16 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1OpenSession@32 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1SeedRandom@20 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1SetAttributeValue@28 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1SetOperationState@36 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1Sign@20 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1SignFinal@20 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1SignInit@28 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1SignRecover@40 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1SignRecoverInit@28 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1SignUpdate@36 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1UnwrapKey@36 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1Verify@24 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1VerifyFinal@20 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1VerifyInit@28 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1VerifyRecover@40 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1VerifyRecoverInit@28 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1VerifyUpdate@36 _Java_sun_security_pkcs11_wrapper_PKCS11_C_1WrapKey@36 _Java_sun_security_pkcs11_wrapper_PKCS11_connect@16 _Java_sun_security_pkcs11_wrapper_PKCS11_disconnect@8 _Java_sun_security_pkcs11_wrapper_PKCS11_finalizeLibrary@8 _Java_sun_security_pkcs11_wrapper_PKCS11_initializeLibrary@8

$LOCALAPPDATA/Temp/mathtype.tmp/jaas_nt.dll

IMPHASH f413fd6a79b734fd423e8dd71326186a
SHA256 6e920446aee74b00e7c375a95d4251a373e28a43d4e43b37d626eced9a7058b8
MD5 68248d57321b27fd8aa522eec32839bd
SHA1 53226d1a011758b67830d8270f8cfa475a2f485d
SHA512 17a84876bd82787a3358b67a814ac0b31f6e0e161a2bf4f92f20f1420ab2d23bf26f33bdd7c0ecbfcc84695997290596280046f359bd65022e337b88dd6001f9
SSDEEP 192:K6qjc62qVmPbms77KsR4aChOA3a3X4WAO0PVlA6OlHnCgI1wG:ZqjkKQKsRshOcWIE0PVlClHXS
TLSH
T179521B426B058077EEE102BD35B7D6260CB9744809E49C975FA3BF961D64380BF37B19
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8178

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libjaas\jaas_nt.pdb

$LOCALAPPDATA/Temp/mathtype.tmp/jabswitch.exe

IMPHASH 91f3d614f9b67c32a32d29abb665ae77
SHA256 e77fad4dbcfecf30669a219cfad141350a3e2ce2f2af070eb0d80b43a74a86ae
MD5 3d169bb4acbb4f3db2925ee846f68b66
SHA1 2c8cf55e351cfeb6ea160bb8376f8a65294c8a7c
SHA512 bdc5e28d4fafac6a0c03e36044dcb69bc621e209bf4cc46939862f82ed7e3c6dc6fc26255daca8c1bffd47328f2a3e4f61cacafe7afcae84524320dfebe9477e
SSDEEP 384:6wxehfW7RGV/QrnqX3hhwUjqrLP7dn3pm15Kq7vPngUaKV+na7SHuEVtcaPb+S15:6HhfWinvwUurL5n3cTIU1+naSOuthSM5
TLSH
T1C0B24C29FA748205F19100701AB8B6F3E6FB79B2725581AFB7101B1E11767EDA43272F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12708

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\jabswitch\jabswitch.pdb

advapi32

RegSetValueExW RegQueryValueExW RegOpenKeyExW RegCloseKey

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

user32

wsprintfW

msvcr100

exit strcpy_s vsprintf_s _amsg_exit __getmainargs _cexit _exit _XcptFilter __initenv _initterm wcscpy_s _configthreadlocale __setusermatherr _commode _fmode __set_app_type _crt_debugger_hook ?terminate@@YAXXZ _unlock __dllonexit _lock _onexit _except_handler4_common _invoke_watson _controlfp_s wcstok_s wcscat_s wcsstr _wcslwr_s wcslen ??2@YAPAXI@Z _dupenv_s printf perror strcat_s free fopen_s fprintf fclose remove _errno rename strstr feof fgets _stricmp fputs strtok_s memset _initterm_e

kernel32

VirtualQuery GetProcessHeap HeapAlloc HeapFree FreeLibrary GetSystemTimeAsFileTime GetCurrentThreadId GetTickCount QueryPerformanceCounter DecodePointer LoadLibraryW GetProcAddress MultiByteToWideChar WideCharToMultiByte RaiseException IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess EncodePointer HeapSetInformation InterlockedCompareExchange Sleep InterlockedExchange GetCurrentProcessId ProcessIdToSessionId GetModuleFileNameW GetVersionExW

$LOCALAPPDATA/Temp/mathtype.tmp/jaccess.jar

SHA256 829968a16ba58ea3d382885e2b3eda159de670aa5be296f7677da5995e2fd10c
MD5 502dc106bdb231797d00d2b667db8704
SHA1 931d59147a644040f52d6c28ab14ad77a0fb79db
SHA512 2a4c75446d034a4203eeeec6dd14a0e345e77d964770fc7e368e6ae54b4f921543c28fc57fd6fdafe1b462ce8700b1a418ddb205bba45a8e5ae700c3ed15467c
SSDEEP 768:oYV6UjqfgKbWnXuZIQvfnbJrpMItkZQnWn1094qoCjE4ij:oK6UjWgfnXudfbfMTQnWn10yqH34
TLSH
T1DE13BF03AB5C903FFA63E0B34645D7A23618E9B5A03264AF1C7507D97B91C8B4321B9E
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/java.dll

IMPHASH 1e9fc85309906c2f975b78e260e6aac8
SHA256 1313b10a9ae5927a059b99664bf998f210692c4b8a0b8d1ff0a0f5c73d5b160a
MD5 6bca9b3769af6b52e8f4b584eae2f7f3
SHA1 d2da5a296f8c679be8cd43e7eefecd2757a176a0
SHA512 d9a91d04cecd2de26bfc3ad84b3e8cc353d94d2d228f15f8bbbc3e7caf2e8812ce33759e8734a54eb109d5a2f994f5bb163d4a83fecd551733ae987b249dd157
SSDEEP 1536:xDsj2zDjTTfXPtD9IgcaKm3o/FkTDMtFxg6Vr6OUGZdPnDOFm4pIC5GzQ/bo0TK:xDsj2zDjTTfXPJLcU7MtFW6Vr6WdPnDF
TLSH
T14D834B23F2009855E8F705BD5675572A287A0F30138818D3ABC1A44A5EBFDF2B930FA7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

64466

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

jvm

_JVM_GetThreadInterruptEvent@0 jio_vfprintf jio_vsnprintf JVM_GetLastErrorString

advapi32

RegQueryInfoKeyA RegEnumValueA RegDeleteValueA RegSetValueExA RegFlushKey GetUserNameW CryptReleaseContext CryptGenRandom CryptAcquireContextA RegOpenKeyExW RegEnumKeyExA RegCloseKey RegQueryValueExA RegOpenKeyExA RegQueryValueExW RegCreateKeyExA RegDeleteKeyA

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

msvcr100

_onexit _lock __dllonexit _unlock __clean_type_info_names_internal _crt_debugger_hook __CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null _malloc_crt wcscat_s strncpy strerror_s mbstowcs calloc strrchr setlocale fgets wcstombs wcscmp memcmp wcscat wcsncmp wcschr _wfullpath towupper strchr _errno _fullpath isalpha toupper wcscpy _vswprintf_c_l _wgetenv _strdup memset wcsncat sprintf wcslen sscanf _wcsdup atoi strcpy strcat fopen fclose __iob_func fprintf strcmp strlen malloc free _wassert _except_handler4_common

kernel32

GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter DisableThreadLibraryCalls IsDebuggerPresent SetUnhandledExceptionFilter GetCurrentProcess InterlockedCompareExchange Sleep DecodePointer EncodePointer RaiseException InterlockedExchange FreeLibrary LocalAlloc GetModuleFileNameA GetSystemDirectoryA LoadLibraryA GetModuleHandleA GetProcAddress GetTimeZoneInformation GetConsoleMode SetConsoleMode FindFirstFileW IsDBCSLeadByte FindFirstFileA FindClose CreateFileW TerminateProcess WaitForMultipleObjects GetExitCodeProcess GetHandleInformation CreatePipe SetHandleInformation CloseHandle GetConsoleWindow CreateProcessW FormatMessageW GetEnvironmentStrings FreeEnvironmentStringsA GetEnvironmentStringsW FreeEnvironmentStringsW IsProcessorFeaturePresent GetSystemInfo GetConsoleCP GetTempPathW GetVersionExA GetNativeSystemInfo UnhandledExceptionFilter GetSystemDirectoryW GetLastError GetUserDefaultLCID GetSystemDefaultLCID GetUserDefaultUILanguage GetStdHandle GetFileType GetCurrentDirectoryW GetLocaleInfoA MultiByteToWideChar IsValidCodePage GetWindowsDirectoryA WideCharToMultiByte

Canonicalize GetStringPlatformChars JDK_LoadSystemLibrary JNU_CallMethodByName JNU_CallStaticMethodByName JNU_NewObjectByName JNU_SetFieldByName JNU_SetStaticFieldByName NewStringPlatform _JNI_OnLoad@8 _JNU_CallMethodByNameV@24 _JNU_ClassClass@4 _JNU_ClassObject@4 _JNU_ClassString@4 _JNU_ClassThrowable@4 _JNU_CopyObjectArray@16 _JNU_Equals@12 _JNU_GetEnv@8 _JNU_GetFieldByName@20 _JNU_GetStaticFieldByName@20 _JNU_GetStringPlatformChars@12 _JNU_IsInstanceOfByName@12 _JNU_MonitorWait@16 _JNU_NewStringPlatform@8 _JNU_Notify@8 _JNU_NotifyAll@8 _JNU_PrintClass@12 _JNU_PrintString@12 _JNU_ReleaseStringPlatformChars@12 _JNU_ThrowArrayIndexOutOfBoundsException@8 _JNU_ThrowByName@12 _JNU_ThrowByNameWithLastError@12 _JNU_ThrowByNameWithMessageAndLastError@12 _JNU_ThrowClassNotFoundException@8 _JNU_ThrowIOException@8 _JNU_ThrowIOExceptionWithLastError@8 _JNU_ThrowIllegalAccessError@8 _JNU_ThrowIllegalAccessException@8 _JNU_ThrowIllegalArgumentException@8 _JNU_ThrowInstantiationException@8 _JNU_ThrowInternalError@8 _JNU_ThrowNoSuchFieldError@8 _JNU_ThrowNoSuchFieldException@8 _JNU_ThrowNoSuchMethodError@8 _JNU_ThrowNoSuchMethodException@8 _JNU_ThrowNullPointerException@8 _JNU_ThrowNumberFormatException@8 _JNU_ThrowOutOfMemoryError@8 _JNU_ThrowStringIndexOutOfBoundsException@8 _JNU_ToString@8 _Java_com_excelsior_jet_runtime_vmopts_OraclePropsDetection_detectProperties0@8 _Java_java_io_Console_echo@12 _Java_java_io_Console_encoding@8 _Java_java_io_Console_istty@8 _Java_java_lang_ProcessEnvironment_environmentBlock@8 _Java_java_lang_ProcessImpl_closeHandle@16 _Java_java_lang_ProcessImpl_create@28 _Java_java_lang_ProcessImpl_getExitCodeProcess@16 _Java_java_lang_ProcessImpl_getStillActive@8 _Java_java_lang_ProcessImpl_isProcessAlive@16 _Java_java_lang_ProcessImpl_openForAtomicAppend@12 _Java_java_lang_ProcessImpl_terminateProcess@16 _Java_java_lang_ProcessImpl_waitForInterruptibly@16 _Java_java_lang_ProcessImpl_waitForTimeoutInterruptibly@24 _Java_java_lang_StrictMath_IEEEremainder@24 _Java_java_lang_StrictMath_acos@16 _Java_java_lang_StrictMath_asin@16 _Java_java_lang_StrictMath_atan2@24 _Java_java_lang_StrictMath_atan@16 _Java_java_lang_StrictMath_cbrt@16 _Java_java_lang_StrictMath_cos@16 _Java_java_lang_StrictMath_cosh@16 _Java_java_lang_StrictMath_exp@16 _Java_java_lang_StrictMath_expm1@16 _Java_java_lang_StrictMath_hypot@24 _Java_java_lang_StrictMath_log10@16 _Java_java_lang_StrictMath_log1p@16 _Java_java_lang_StrictMath_log@16 _Java_java_lang_StrictMath_pow@24 _Java_java_lang_StrictMath_sin@16 _Java_java_lang_StrictMath_sinh@16 _Java_java_lang_StrictMath_sqrt@16 _Java_java_lang_StrictMath_tan@16 _Java_java_lang_StrictMath_tanh@16 _Java_java_util_TimeZone_getSystemGMTOffsetID@8 _Java_java_util_TimeZone_getSystemTimeZoneID@12 _Java_java_util_logging_FileHandler_isSetUID@8 _Java_java_util_prefs_WindowsPreferences_WindowsRegCloseKey@12 _Java_java_util_prefs_WindowsPreferences_WindowsRegCreateKeyEx@16 _Java_java_util_prefs_WindowsPreferences_WindowsRegDeleteKey@16 _Java_java_util_prefs_WindowsPreferences_WindowsRegDeleteValue@16 _Java_java_util_prefs_WindowsPreferences_WindowsRegEnumKeyEx@20 _Java_java_util_prefs_WindowsPreferences_WindowsRegEnumValue@20 _Java_java_util_prefs_WindowsPreferences_WindowsRegFlushKey@12 _Java_java_util_prefs_WindowsPreferences_WindowsRegOpenKey@20 _Java_java_util_prefs_WindowsPreferences_WindowsRegQueryInfoKey@12 _Java_java_util_prefs_WindowsPreferences_WindowsRegQueryValueEx@16 _Java_java_util_prefs_WindowsPreferences_WindowsRegSetValueEx@20 _Java_sun_misc_MessageUtils_toStderr@12 _Java_sun_misc_MessageUtils_toStdout@12 _Java_sun_security_provider_NativeSeedGenerator_nativeGenerateSeed@12 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getAmPmStrings@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCalendarDataValue@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCalendarID@12 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getCurrencySymbol@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDateTimePattern@20 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDecimalSeparator@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDefaultLocale@12 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getDisplayString@20 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getEras@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getGroupingSeparator@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getInfinity@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getInternationalCurrencySymbol@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMinusSign@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMonetaryDecimalSeparator@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getMonths@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getNaN@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getNumberPattern@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getPerMill@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getPercent@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getShortMonths@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getShortWeekdays@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getWeekdays@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_getZeroDigit@16 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_initialize@8 _Java_sun_util_locale_provider_HostLocaleProviderAdapterImpl_isNativeDigit@12 getEncodingFromLangID getErrorString getJavaIDFromLangID handleSync jcos jio_fprintf jio_snprintf jsin jtan

$LOCALAPPDATA/Temp/mathtype.tmp/java.policy

SHA256 ced51e3926e6b0cfec8ecab3b15d296fdcfae4d32046224814aaab5fd0fed9c0
MD5 ec90fd04c2890584a16eb24664050c2a
SHA1 c7fe062eac95909ec6a5ea93f42dda5e023ad82c
SHA512 8da494925b3b5aae69a30a8b5f9732e64edbae39c968229d112185e349c410a0f5d1b281a4e44718e0120e910820b15ca878b2ed1cf905dfc6595f1ba34b85d3
TLSH
T151515E0FC64D99B616A9C2D623352480F2B5C02571E1522DF35FC2305B9C9E0C2D6FEA
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/java.security

SHA256 3e365b94e94dd81c9e97d6d15b3a3223d8f32000e3a82101cfb0af4ce018ea20
MD5 6de3c3f9aad0301642710db5281b045f
SHA1 80ddc0b2d3424519b0534705b52d18cd528942d8
SHA512 801bd5ff9e547b51a94d061d20543b774424a02f81cba9894be409d081cba7be4576d7ec09d1689e2defb9b18b11342dc1fed693cb5e560504a16d324307abff
SSDEEP 768:rmLHAEcqrlANbXbqL1AdL3HaPwv7vcWTABp+Z5IcbJNg:rWyaYvTcWTABpm26J+
TLSH
T18CF2C8339B47277102B1515B628EE2D5E74CA1663AB3449C728D831CBB36F61C2372EB
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/jawt.dll

IMPHASH a367813d79ce542a17d48a6d5815ae0f
SHA256 50bb9ac4bf275d9d7ba6414eb340837cf46982715a196a1d7ee3e56f5a19a048
MD5 8594a8405606e3299e1bc2f98c638957
SHA1 a50cc2b7c40f3eff292e5d9a43397030dc5e0899
SHA512 5053adff48d4f0dd5fa147243ceba528166c04d55cbd6d0d89599369096c000be45b0804b3ffa78ea477f1d49199c684efeae2eb99bfc7b3e1b566f12756e51a
SSDEEP 96:Wn4VZiVl1A1+vB0qYz7KP3XLPVAAD61k+:Wn4VZ6nb5Y43XLPVlD61L
TLSH
T1E2F10A397BBA0071FDFF0BBA2C26922612187B315BA25177176153AE0DB0851FD74B25
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libjawt\jawt.pdb

$LOCALAPPDATA/Temp/mathtype.tmp/jce.jar

SHA256 15c40db7ab18423a7b653b64033d4639a8ba5f201c20232c6f5dce0102887231
MD5 70eb04d21d1639b5d92165cd9d3940ba
SHA1 d958adac5f1edefa22045a1409ccdeff154779c1
SHA512 2124ad54b1b10cbaf9e06bcc63cf8b2b8479b9787be5ca94f425b0a506c3722a11c68a073718b9f57b6ac9b84ca87ba2838e843c0536fb0769ba64f2a2bd4b58
SSDEEP 3072:v47Ovr7VDo5Zd5UVokTTNeMAgGHuyCTCK:A0DqZdWBo7DH7CX
TLSH
T18EB3D1263DC8F975DAA3C0399D30C437B90F41EE918AA2475395D0DA64B8EF60F12BE5
MD5 SHA1 SHA512 SSDEEP TLSH

Codesign digest Mismatch

File was altered after it was signed.
Unsigned JAR

Checks for missing JAR codesign signature.

File Signature issue

Digest

1bf1e44f6900f9b7bc93881085f0398d4e2172dd857551bd4a1245432c5d2aae

Digest Algorithm

sha256

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Oracle Corporation,OU=Java Software Code Signing,O=Sun Microsystems Inc

Chains

Jan 1, 0001

$LOCALAPPDATA/Temp/mathtype.tmp/jmxremote.access

SHA256 71a930cbe577cbabb4269650c98d227f739e0d4b9c0b44830dd3d52f5015be1f
MD5 41b36d832be39a3cf0f3d7760e55fdcb
SHA1 e706e9be75604a13dfcc5a96b1720a544d76348b
SHA512 41e6b8639c1ceb3d09d2fdeeeba89ffa17c4ed8b1ad0df1e5ab46c4bf178688d5504dc5a3c854226f7da23dfa0edab0d035d6b56495829f43aaa2a7babec4273
TLSH
T1EA81E107F7C606730BF2521B1B0DA2E2F111D17EFE730604791CE578B766AAD12E6562
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/jmxremote.password.template

SHA256 24674176a4c0e5eefb9285691764ea06585d90bbdaf5bf40c4220de7ca3e3175
MD5 5dd28aaf5a06c946df7b223f33482fdf
SHA1 d09118d402ca3ba625b165ecace863466d7f4ce9
SHA512 13c6f37e969a5aece2b2f938fa8ebf6a72c0c173678a026e77c35871e4ae89404585fb1a3516ae2ca336fc47eab1f3dd2009123adba9c437cd76ba654401cbdf
TLSH
T19951CF472FC61EA20BB0D215174DB493F704D16E6E7302443A6DC668772BE6A43EE8B3
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/jpeg.dll

IMPHASH 6529993b931923fcd297299750abcaa4
SHA256 475d1179b5216ac58520ef7cbdad57288fb0ceeca3e24d6d4d6d3b43ec49578c
MD5 e2e5e5ba2db67ab0760535c9e855579c
SHA1 04bedf3946cf0b592716d7e3c49d5c600790f371
SHA512 bf2aa7454df277c9fe69c84ee46c5c3ef6f9a62a7ec08ce3231dd7bc53644ef3dc83f9287cbccfab8c12444d79c7a9bbfbf80f6ce13ab7aa2f0aa606f4b6dfe1
SSDEEP 3072:hIJaZEJrhNWWL7PSk1IDDmcFS5VYi0ANaSMEbM2rXV4A:hI15WE7PS6IDzFyFNaSMEbM6V4
TLSH
T17BD38D41B7D600F5C48B22B561DB3BB61E344719034BD6E3A7A12B72ED217F26A383D6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

122073

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libjpeg\jpeg.pdb

$LOCALAPPDATA/Temp/mathtype.tmp/jsound.dll

IMPHASH 3237f9f8cd3294fcb7a2350f484bd69e
SHA256 da69efada5bc891aed24cd5e5af4a245537bf000967a6dd16e6b09361d1046e1
MD5 44fe5afa90e02eda806ba83c45b2621f
SHA1 dff62d19ba9750f945a5ad595ee439b20e96cd12
SHA512 118d29af8a0532775153451ebea61ab3e8d5ebe103c2d5ff485bcc27d7be3abb816b963c3f99c4667f90110b86e946e1c6c6e85aceff809bb3905a5a80535c4c
SSDEEP 384:CzSht78T0OgjjaFr0OPfcOM7AdJwePHRiPCeHlLYuG8RPGHbHkoLny:CzSht78n0OPtdJFHUCeFLLR+7Ju
TLSH
T136B25C237642C0ABE56F607239411F2B651E7D1425809E5ACFB2073A8E2F031BE27F86
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16821

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libjsound\jsound.pdb

winmm

timeGetTime mixerOpen mixerSetControlDetails mixerGetControlDetailsA mixerClose mixerGetDevCapsA mixerGetLineControlsA mixerGetLineInfoA mixerGetNumDevs midiOutPrepareHeader midiOutLongMsg timeEndPeriod midiOutReset midiOutClose midiOutOpen midiOutShortMsg timeBeginPeriod midiOutUnprepareHeader midiOutGetDevCapsA midiOutGetNumDevs midiOutGetErrorTextA midiInStop midiInStart midiInReset midiInClose midiInUnprepareHeader midiInPrepareHeader midiInGetDevCapsA midiInGetNumDevs midiInGetErrorTextA midiInOpen midiInAddBuffer

msvcr100

__clean_type_info_names_internal _except_handler4_common _crt_debugger_hook __CppXcptFilter _amsg_exit memcpy strcpy strncpy sprintf free memset malloc _unlock __dllonexit _lock _onexit _malloc_crt _encoded_null _initterm _initterm_e

kernel32

GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter DisableThreadLibraryCalls IsProcessorFeaturePresent IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess InterlockedCompareExchange InterlockedExchange DecodePointer EncodePointer DeleteCriticalSection InitializeCriticalSection CreateThread Sleep CreateEventA WaitForSingleObject EnterCriticalSection CloseHandle LeaveCriticalSection SetEvent

_Java_com_sun_media_sound_MidiInDeviceProvider_nGetDescription@12 _Java_com_sun_media_sound_MidiInDeviceProvider_nGetName@12 _Java_com_sun_media_sound_MidiInDeviceProvider_nGetNumDevices@8 _Java_com_sun_media_sound_MidiInDeviceProvider_nGetVendor@12 _Java_com_sun_media_sound_MidiInDeviceProvider_nGetVersion@12 _Java_com_sun_media_sound_MidiInDevice_nClose@16 _Java_com_sun_media_sound_MidiInDevice_nGetMessages@16 _Java_com_sun_media_sound_MidiInDevice_nGetTimeStamp@16 _Java_com_sun_media_sound_MidiInDevice_nOpen@12 _Java_com_sun_media_sound_MidiInDevice_nStart@16 _Java_com_sun_media_sound_MidiInDevice_nStop@16 _Java_com_sun_media_sound_MidiOutDeviceProvider_nGetDescription@12 _Java_com_sun_media_sound_MidiOutDeviceProvider_nGetName@12 _Java_com_sun_media_sound_MidiOutDeviceProvider_nGetNumDevices@8 _Java_com_sun_media_sound_MidiOutDeviceProvider_nGetVendor@12 _Java_com_sun_media_sound_MidiOutDeviceProvider_nGetVersion@12 _Java_com_sun_media_sound_MidiOutDevice_nClose@16 _Java_com_sun_media_sound_MidiOutDevice_nGetTimeStamp@16 _Java_com_sun_media_sound_MidiOutDevice_nOpen@12 _Java_com_sun_media_sound_MidiOutDevice_nSendLongMessage@32 _Java_com_sun_media_sound_MidiOutDevice_nSendShortMessage@28 _Java_com_sun_media_sound_Platform_nGetExtraLibraries@8 _Java_com_sun_media_sound_Platform_nGetLibraryForFeature@12 _Java_com_sun_media_sound_Platform_nIsBigEndian@8 _Java_com_sun_media_sound_Platform_nIsSigned8@8 _Java_com_sun_media_sound_PortMixerProvider_nGetNumDevices@8 _Java_com_sun_media_sound_PortMixerProvider_nNewPortMixerInfo@12 _Java_com_sun_media_sound_PortMixer_nClose@16 _Java_com_sun_media_sound_PortMixer_nControlGetFloatValue@16 _Java_com_sun_media_sound_PortMixer_nControlGetIntValue@16 _Java_com_sun_media_sound_PortMixer_nControlSetFloatValue@20 _Java_com_sun_media_sound_PortMixer_nControlSetIntValue@20 _Java_com_sun_media_sound_PortMixer_nGetControls@24 _Java_com_sun_media_sound_PortMixer_nGetPortCount@16 _Java_com_sun_media_sound_PortMixer_nGetPortName@20 _Java_com_sun_media_sound_PortMixer_nGetPortType@20 _Java_com_sun_media_sound_PortMixer_nOpen@12

$LOCALAPPDATA/Temp/mathtype.tmp/jsoundds.dll

IMPHASH 75de50e9251a9d51c81e1b6ccce81c7e
SHA256 5970ea183e9603352c324db4288bf2feeb807ec3bd1962f81e0311fc0a9f0555
MD5 143dd074fab2fea89f017f97263c17ab
SHA1 79e9e82075b9a36d251877923638ec141b737fa7
SHA512 646f0127af4f0c8e641c1d66385932d49686d80a8a5354d1a392340db0b2217e63e6231f885d203fe6061cbe5c812c517d77bb69661a3e591ec074f38eb53859
SSDEEP 384:yeWeFz9EZu22rM0Z6U9HB+O2R3WreX06OMi423nDIN5sgvYWWac44Sl0KnKHqdx+:xWeFz9Yu22rM0Z6uHB72ZWreX06OMi4C
TLSH
T14E922A19BBA4633AE07AE175E8E79B22371F7470933B8DAF8F1503263D3904343A1946
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16362

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libjsoundds\jsoundds.pdb

$LOCALAPPDATA/Temp/mathtype.tmp/jsse.jar

SHA256 3ef2ff87c650a9bd29e41e67bcf3e44d6f0a297ceb375a37c630055466307478
MD5 985dc5f21f8c011178da93519d55cc1d
SHA1 1bf97b1255bbbda1706a9764a378d1c06e07a1a2
SHA512 319e786d640e9a55796a1a210ec5efec920cf40ca24fdc5a648053cfc8bfe9dd1b20e8c5d3a714bbbd195fcce3de153033896e787d74e319dc7a1b3373155ec3
SSDEEP 6144:0kks3HSMUsMhBSafEtTcNexU/agYMXf//FsBaKGS3fwslT3y:0kJ3uJjNeGigYyaaKny
TLSH
T161D4E71BE20D59BFF250EAFF9870432C23349C325A73A3794E49592AF9CA5F149706E4
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/jvm.cfg

SHA256 5aea959c7d0dfd472dfe077fe8b996e3330f9498f8b694ca5001b03302d9ab8e
MD5 928c9180fa62a7594c6ba6c08d268419
SHA1 b262e25a903a0e5ac9f654e4c27a44cd4bb1acfe
SHA512 dbc665195411deee5c5a875c76666c59391c716f9b5c7983ab2aec3abc08e10f03283f67e7223c30ccfe8ea9aa501bba94d169a546cec34709153e6ed90283a0
MD5 SHA1 SHA512

$LOCALAPPDATA/Temp/mathtype.tmp/jvm.dll

IMPHASH 108bc7fbe31684a108a8feea18873ddc
SHA256 e0448890487659db16a4b2b25c3182e22a05c807c4659da5b8b263b951b11f84
MD5 16632d231f59d27b1e6f0b6d9394238e
SHA1 bb54d29fa50ad4fc26d1e149a8094caa3fc3a1ae
SHA512 af77fbd5daccc1fbdf2e5009b19ab40ad6b196321deb6bdd724967ffabb45f2400cb444f17f603c69089da6f53fa0026fced5de61cec36a6be22b11361c928d1
SSDEEP 192:0FKp/SNdJPFZZFnV4Ea5YPQ6UojILWLKB4tOO4VzzqmP4Dftq5tB3X03IPVR6bUG:Rpw/nR0XqmQDftq5t9E3IPVmUZc2
TLSH
T10252E70AEE354875F2FE04FF823F1739ED6DA50203D418E38A536C4818569EB9E3169E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8845

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$LOCALAPPDATA/Temp/mathtype.tmp/kcms.dll

IMPHASH 85a4bfc561ad6ee0a2ad2529c650afa7
SHA256 afba8f254fd34066f7adec95147e52ba31baeed165e0869522240d1222d0c5b1
MD5 272a76d35fb21af255560e4645a14ee2
SHA1 292913cae4c905d495930d25a8fcc251df36b40b
SHA512 55f260aa99a642ea22e8891bd6778266c48027972fb712ddfd89098ed825ab65aa9cfdc1a82a509b286ab4ce50e709031b9b8e5b7864a05dd97da5b37929abc8
SSDEEP 3072:U3O0ARym4uKtpdhEnG4e/Ny9bfBLvrNtk3laCg0k3FnDO956t:qUzetpdhEnjrBj/kVm3Zl
TLSH
T1CDF3BE778280A0B2C867083BA1387BA51CF6873155BEDECF97DC5EE39D105C1DA1A396
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

157664

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libkcms\kcms.pdb

java

_JNU_ThrowNullPointerException@8

msvcr100

_except_handler4_common _onexit _lock __dllonexit _unlock __clean_type_info_names_internal _crt_debugger_hook __CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null free _malloc_crt _time64 _localtime64 log10 log exp atan2 tan memcmp _stat64i32 fabs sqrt memcpy strncat memset strcat pow strcmp strncpy strcpy strlen

kernel32

GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter IsProcessorFeaturePresent IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess InterlockedCompareExchange DecodePointer EncodePointer GetModuleHandleA GetWindowsDirectoryA GetSystemInfo HeapSize HeapFree HeapAlloc HeapCreate GlobalHandle GlobalFree GlobalAlloc GlobalLock CreateThread GetLocalTime WaitForMultipleObjects DeleteCriticalSection InitializeCriticalSection GetVersion InterlockedExchange LeaveCriticalSection CloseHandle MapViewOfFile CreateFileMappingA UnmapViewOfFile ReadFile GetLastError SetFilePointer CreateFileA GetFileSize Sleep GetCurrentThreadId GetCurrentProcessId EnterCriticalSection

$LOCALAPPDATA/Temp/mathtype.tmp/lcms.dll

IMPHASH 8150806bf4008bf1ff4c83f59fd9396c
SHA256 b4b3590ef4f5fb482609df35ba4a6b4eef0483586e92f0cef45629da7d0466eb
MD5 7bd7c8844f0e8241ebe59d664a0ce2b5
SHA1 1f39239cb3eea48da87b9e77d9c0ffeba1954fd3
SHA512 4f17aeb99b04c02e166a55c5523fe4a36681994215e717ee0b8da36e90bf53c7cfcd66b500b737ce0e91e8b293f2982f66bd90dc6e68f2e6d06087a3a65e7d64
SSDEEP 3072:AKl4IOMl74MHKt6VGEJK2Pp27Hs2AJ8zmf49GCxwCUGFm/eny5iNxuONIu:16IO4q8K2iMbJ8z7JFvy0N
TLSH
T170048E86D789E4F2D04E117EB277267B0F740B025725E6C39BA65F2DDC226E0943E386
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

140962

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\liblcms\lcms.pdb

$LOCALAPPDATA/Temp/mathtype.tmp/local_policy.jar

SHA256 b8becc3ef2e7ff7d2165dd1a4e13b9c59fd626f20a26af9a32277c1f4b5d5bc7
MD5 57aaaa3176dc28fc554ef0906d01041a
SHA1 238b8826e110f58acb2e1959773b0a577cd4d569
SHA512 8704b5e3665f28d1a0bc2a063f4bc07ba3c7cd8611e06c0d636a91d5ea55f63e85c6d2ad49e5d8ece267d43ca3800b3cd09cf369841c94d30692eb715bb0098e
TLSH
T180715E263FCDC26CF16B10F783008206A5E455481FC4B6471DD0C8C96EF9D160A43EEB
MD5 SHA1 SHA512 TLSH

Unsigned JAR

Checks for missing JAR codesign signature.

File Signature issue

Digest

33caab74eb161d8f1a60c174a20b007a59a101d1980c1f3721940c8d905b824d

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Oracle Corporation,OU=Java Software Code Signing,O=Sun Microsystems Inc

Chains

Jan 1, 0001

$LOCALAPPDATA/Temp/mathtype.tmp/localedata.jar

SHA256 72e62cf6a12e25f618dc26205d33dd87556e030b2c504049c3bb11cd0582f2e5
MD5 0dd998efb403532a322a75ba8e0c6fdf
SHA1 f43e696a1a768922fbd01f849d6c411155adb6ee
SHA512 edc02edcf11735f6088ab6a0b94d5ab67b00b3d058792763be16380c4333a91daa352dbdb117ff7be627c29450efc166cea6505148199a3198faa51b4f7fa2e7
SSDEEP 12288:B7NXjyH1SIEg9PdYmx0nqEdYq2CpiqjjOTOvEd4E2ubFyxYsKcxbSKZ4/d2XDqA9:DXz+YmxYNzKTOsSCbgx9DOfQZ04Fwy
TLSH
T17C45F186FEC75576D273B4F20404C117A50CC0DCF5A9C01B8A78488E79FAF9A6792EE9
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/locales

SHA256 20b83c23d37a49ddc35ac8d0157c92097cb2e33c86dc3b0048ad9d1a34dde343
MD5 930b607cb6a56d109077f4311cd090b7
SHA1 272e33df38dc8dd2b9c6ba56efedbc9a95aa7b88
SHA512 76adda1b5e8365e6e31d041b5afa7ef09ee9d68900ce8c8547d417ebae1ed2c205c480abfd8e0437c650e85e48ce68692518f283dab601d3cf124c29af9b49d7
TLSH
T14351FFEBEA8C0E13A6C4A7D44A3C71AFC142A829A65F623D77D4575FE07E15468383E0
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/logging.properties

SHA256 a3148336160ea7ef451052d1f435f7c9d96eeb738105ac730358edada5bd45a2
MD5 0aa5d5efdb4f2b92bebbeb4160aa808b
SHA1 c6f1b311a4d0790af8c16c1ca9599d043ba99e90
SHA512 a52c2b784cf0b01a2af3066f4bb8e7fd890a86cfd82359a22266341942a25333d4c63ba2c02aa43ade872357fc9c8bbc60d311b2af2ad2634d60377a2294afdd
TLSH
T10E51236E574F6D65433A00AA5A2FF0667E1899BC0D23E9B6B39E2348310DD3885D77C2
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/mail.ru.tdl

SHA256 02916f8fb2be3b5c4bee9efe73a1c39e678ba37bb49f995ea2025d8b60d9a016
MD5 3ad777c705ab62f67a64ab38acadcdbc
SHA1 ed515e6e14ece32fe0a263fa616c897551d28c9f
SHA512 5b92ac9cd48ac0b8657fd6ab5cca6aaf80eb17f9ec8928b73a40a5a9a42daacadfe2c4d246d5a47d7326f8d4a43c702fc709881ad5d86153f2c7baf31183fdd0
TLSH
T19F110019F399107327C21160BFA7548BC12E930866BA15017989805F33D6E3C7FABD2A
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/management.properties

SHA256 e209330bf07d438c70cf31e95dc98f5cb7efa15aa21c2887192efd9d48cdd826
MD5 c73542bf2bc8b97941dcf46b6d349ea1
SHA1 be930d3185cd81ad21378aac5235064ae63739b9
SHA512 55f5032c82f69ff2a910331058b402aa275627e2ecbaeaf049e45aa48b97bd54744bc1d28eaac4d592d0937ce9cea6fc9ca60bcb840d3f41ce9b0c3d43102360
SSDEEP 192:PLrOKIXaIr8Jzc90OEqfmdbHHHN6pDIdpgzr2rD:PLrOKIXaIgYiOE0mdbHHHNGD4p06v
TLSH
T15362D013B7CB663207F20257556CF3E0E32911FB6E73050873ADD2596B21BA583A34B6
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/mathpagex64.wll

IMPHASH a778a2eec23a233f89c85cd3be45e809
SHA256 f9030dc881206f3c82ab8e01fe958b794fd612aa3239aff7c43bc9230a676574
MD5 46b261d57c690544eaabaf6f3a66f9f1
SHA1 92b61c9dd6fc4dc3a9990991b2a83e95fc4a1a06
SHA512 a1c324a29cfc6f1ec68fbd41288146009e31565dfb84df38cda8e17103fe98aa7b8ab3023574db9da24e78496d2b725e0bbdf7423733161f1d96e31ab3c494d2
SSDEEP 12288:Ge0B9pwuwJJ9mJKiYmrnb6yPkhXDZRTWD/1KwVBoYmNKAnzD7+bzhw:Ge0z7wT96imv6yMFZRTwoY2z2bNw
TLSH
T152154969EAA146A9D077C13A81510335F671BC684B21A7C74651339F2F3BBEAAF3D310
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

282412

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\User\Documents\GitHub\mathtype.desktop.win.legacy\mathtype-win\MathPage\out64\Optimize\mathpage.pdb

kernel32

GetTickCount GetModuleHandleA LoadLibraryA FreeLibrary LoadResource LockResource FindResourceA DisableThreadLibraryCalls GetCPInfo RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList SetLastError FileTimeToSystemTime TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW ReadFile SetEndOfFile SetStdHandle GetFileType HeapFree HeapAlloc GetStdHandle FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW GetProcessHeap GetConsoleMode ReadConsoleW WriteFile GetConsoleCP GetFileSizeEx SetFilePointerEx FlushFileBuffers GetTimeZoneInformation GetStringTypeW HeapSize HeapReAlloc CreateFileW WriteConsoleW FileTimeToLocalFileTime MultiByteToWideChar WideCharToMultiByte RemoveDirectoryA CreateDirectoryA GetLastError FindClose FindNextFileA FindFirstFileA SetFileAttributesA GetFileAttributesA GetFileTime GetFileSize CreateFileA MoveFileA CopyFileA DeleteFileA GetFullPathNameA InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetProcAddress GetModuleHandleW CreateEventW WaitForSingleObjectEx ResetEvent SetEvent DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection CloseHandle GlobalUnlock GlobalLock GlobalSize GlobalFree EncodePointer GlobalAlloc

user32

DestroyCursor MessageBoxIndirectA FillRect LoadStringA KillTimer DispatchMessageA TranslateMessage GetMessageA SetTimer GetSysColor LoadCursorA RegisterClipboardFormatA GetForegroundWindow

gdi32

DeleteObject DeleteDC CreateCompatibleDC OffsetRgn LineTo CombineRgn CreateDIBSection SetTextColor SetBkColor SelectObject SetMapMode EnumFontFamiliesExA GetFontData CreateFontIndirectA GetTextMetricsA DeleteMetaFile CreateRectRgn SetViewportExtEx PlayMetaFile CopyMetaFileA EnumMetaFile CreateBrushIndirect Rectangle FrameRgn FillRgn MoveToEx Ellipse Arc RoundRect Polygon PtVisible RectVisible OffsetViewportOrgEx SetViewportOrgEx TextOutA TextOutW GetTextExtentPoint32A GetTextExtentPoint32W SetBkMode SetTextAlign SetMapperFlags RestoreDC CreatePenIndirect GetObjectA

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

ole32

OleInitialize OleUninitialize CoRevokeClassObject CoLockObjectExternal GetHGlobalFromILockBytes RevokeDragDrop DoDragDrop OleFlushClipboard ReleaseStgMedium OleGetClipboard OleSetClipboard ProgIDFromCLSID StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal RegisterDragDrop CoGetMalloc

oleaut32

VariantClear SysStringLen SysFreeString SysAllocString

advapi32

RegCreateKeyExA RegOpenKeyExA RegOpenCurrentUser RegCloseKey RegQueryValueExA RegSetValueExA RegQueryInfoKeyA RegDeleteValueA RegDeleteKeyA

DllRegisterServer DllUnregisterServer MPAPIVersion MPAnalyzeSymbol MPCopySupportFiles MPDocInit MPDocTerm MPEnumMathMLTarget MPEnumMathMLTarget2 MPFileCleanup MPFindSymbol MPOpenFileInBrowser MPProcessEquation MPProcessEquation2 MPProcessHTML MPProcessHTML2 MPProcessSymbol MTAPIGetNestingLevel MTAPIVersion MTClearClipboard MTCloseOleObject MTConvertPrefsToUIForm MTCopyButtonFace MTCrashTest MTCreateDirectory MTDebugLogPrint MTEnumTranslators MTEquationOnClipboard MTGetAppFunctionality MTGetClipboardText MTGetLangBytesFromEqn MTGetLangStrFromEqn MTGetLastDimension MTGetLocaleDLL MTGetLocaleString MTGetMathMLFromClipboard MTGetMathMLFromClipboardText MTGetOMMLFromClipboardHTML MTGetOMMLFromClipboardPNGOA MTGetOMMLFromClipboardRTF MTGetPrefsFromClipboard MTGetPrefsFromFile MTGetPrefsMTDefault MTGetTickCount MTGetTranslatorsInfo MTGetURL MTGetUserString MTGetUserWString MTIncrementStatisticBy MTInitAPI MTInitLocaleStringDLL MTInsertHandwrittenMath MTIsClipboardFormatAvailable MTIsFullFunctionality MTIsMathInputPanelAvailable MTIsMathInputPanelTheClipboardOwner MTOpenFileDialog MTPreviewDialog MTRegGetString MTRegSetString MTSaveFileDialog MTSetClipboardText MTSetEqnFromLangBytes MTSetEqnFromLangStr MTSetMTPrefs MTSetStatistic MTShowAboutBox MTTermAPI MTXFormAddVarSub MTXFormEqn MTXFormGetStatus MTXFormReset MTXFormSetPrefs MTXFormSetTranslator wdAutoOpen wdAutoRemove

$LOCALAPPDATA/Temp/mathtype.tmp/mathpagex86.wll

IMPHASH 5108a312ec3ec7bb4c5bd94f329c033f
SHA256 268b203b4e730078c9cc94570e65cbf1e9bc8bf9fd9a7ae4d6b70c99d5c2a7da
MD5 8424e0fdd85e35a5a51a759de9a22abd
SHA1 a8df0e8a72d16fbca7517523fc4c573f8b598572
SHA512 1a2b1ad177b9a42f560ac7ee4de3af40135b8ea16971a70e0a24cf70bc66524e2167dbbf557f280f0cf9290635e1c8a269fb920cc7aaf557690beeed8651ab0a
SSDEEP 12288:bW5vCrGPUJB12SFXjeiAO2oY5ZHQrP/NQbMTeidm7myXNieRZKLP0jTDc05pZ:bW5CrTB1PFXjenoLNQbMTQ7my4Ak7
TLSH
T1E4F47B316680C676E8A7017A546DEB1D242CBE700B6A26C7D6C535AF1D38DE32F3CA17
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

224730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\User\Documents\GitHub\mathtype.desktop.win.legacy\mathtype-win\MathPage\out32\Optimize\mathpage.pdb

kernel32

GetTickCount GetModuleHandleA LoadLibraryA FreeLibrary LoadResource LockResource FindResourceA DisableThreadLibraryCalls GetCPInfo RtlUnwind RaiseException InterlockedFlushSList SetLastError EncodePointer TlsAlloc TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW ReadFile SetEndOfFile SetStdHandle GetFileType HeapFree HeapAlloc GetStdHandle FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW GetProcessHeap GetConsoleMode ReadConsoleW WriteFile GetConsoleCP GetFileSizeEx SetFilePointerEx FlushFileBuffers GetTimeZoneInformation GetStringTypeW HeapSize HeapReAlloc CreateFileW WriteConsoleW DecodePointer FileTimeToSystemTime FileTimeToLocalFileTime MultiByteToWideChar WideCharToMultiByte RemoveDirectoryA CreateDirectoryA GetLastError GlobalAlloc FindClose FindNextFileA FindFirstFileA SetFileAttributesA GetFileAttributesA GetFileTime GetFileSize CreateFileA MoveFileA CopyFileA DeleteFileA GetFullPathNameA InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetProcAddress GetModuleHandleW CreateEventW WaitForSingleObjectEx ResetEvent SetEvent DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection CloseHandle GlobalUnlock GlobalLock GlobalSize GlobalFree TlsGetValue

user32

DestroyCursor MessageBoxIndirectA FillRect LoadStringA KillTimer DispatchMessageA GetMessageA SetTimer GetSysColor LoadCursorA GetForegroundWindow RegisterClipboardFormatA TranslateMessage

gdi32

DeleteDC DeleteObject CreateCompatibleDC GetObjectA LineTo CombineRgn CreatePenIndirect CreateDIBSection SetTextColor SetBkColor SelectObject SetMapMode EnumFontFamiliesExA GetFontData CreateFontIndirectA GetTextMetricsA DeleteMetaFile CreateRectRgn SetViewportExtEx PlayMetaFile CopyMetaFileA EnumMetaFile CreateBrushIndirect Rectangle FrameRgn FillRgn MoveToEx Ellipse Arc RoundRect Polygon PtVisible RectVisible OffsetViewportOrgEx SetViewportOrgEx TextOutA TextOutW GetTextExtentPoint32A GetTextExtentPoint32W SetBkMode SetTextAlign SetMapperFlags RestoreDC OffsetRgn

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

ole32

OleInitialize OleUninitialize CoRevokeClassObject CoLockObjectExternal ReleaseStgMedium RevokeDragDrop DoDragDrop OleFlushClipboard GetHGlobalFromILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal CoGetMalloc OleGetClipboard OleSetClipboard ProgIDFromCLSID RegisterDragDrop

oleaut32

VariantClear SysFreeString SysAllocString SysStringLen

advapi32

RegQueryValueExA RegQueryInfoKeyA RegCreateKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegOpenCurrentUser RegOpenKeyExA RegSetValueExA

DllRegisterServer DllUnregisterServer MPAPIVersion MPAnalyzeSymbol MPCopySupportFiles MPDocInit MPDocTerm MPEnumMathMLTarget MPEnumMathMLTarget2 MPFileCleanup MPFindSymbol MPOpenFileInBrowser MPProcessEquation MPProcessEquation2 MPProcessHTML MPProcessHTML2 MPProcessSymbol MTAPIGetNestingLevel MTAPIVersion MTClearClipboard MTCloseOleObject MTConvertPrefsToUIForm MTCopyButtonFace MTCrashTest MTCreateDirectory MTDebugLogPrint MTEnumTranslators MTEquationOnClipboard MTGetAppFunctionality MTGetClipboardText MTGetLangBytesFromEqn MTGetLangStrFromEqn MTGetLastDimension MTGetLocaleDLL MTGetLocaleString MTGetMathMLFromClipboard MTGetMathMLFromClipboardText MTGetOMMLFromClipboardHTML MTGetOMMLFromClipboardPNGOA MTGetOMMLFromClipboardRTF MTGetPrefsFromClipboard MTGetPrefsFromFile MTGetPrefsMTDefault MTGetTickCount MTGetTranslatorsInfo MTGetURL MTGetUserString MTGetUserWString MTIncrementStatisticBy MTInitAPI MTInitLocaleStringDLL MTInsertHandwrittenMath MTIsClipboardFormatAvailable MTIsFullFunctionality MTIsMathInputPanelAvailable MTIsMathInputPanelTheClipboardOwner MTOpenFileDialog MTPreviewDialog MTRegGetString MTRegSetString MTSaveFileDialog MTSetClipboardText MTSetEqnFromLangBytes MTSetEqnFromLangStr MTSetMTPrefs MTSetStatistic MTShowAboutBox MTTermAPI MTXFormAddVarSub MTXFormEqn MTXFormGetStatus MTXFormReset MTXFormSetPrefs MTXFormSetTranslator wdAutoOpen wdAutoRemove

$LOCALAPPDATA/Temp/mathtype.tmp/mathtype.ex_

IMPHASH 42723419d928c9cbd1ad292b09758181
SHA256 184106e41d84699ef2c5409621d1b4a4633e4e5f9c26a12bcf0659f876adfeb6
MD5 9da9fdb8012d570220586667bc021c1c
SHA1 076b2caf8755a5c5ba6ed88c25bbc03b3e5b72f1
SHA512 2dbe0c7cacb6bfdea9c0c560f5fcf7aaf9853424653f1ece7150be2d7a91970732a4c715fad4605fb2c1ca60f4fe1af3dd2bd2a5224750b956431fbb294c4ced
SSDEEP 98304:ZyUn25YG+V3T0GCLmvEj1inRlYLRA7jbLn+RNqMYp4q7cT:0U263T0GCLmvBWqHnyTq
TLSH
T13476AE00BA85C076EE930175196EE77E8A7E6C105F38CAD393803B6D6D367D22E3535A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

3321968

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\User\Documents\GitHub\mathtype.desktop.win.legacy\mathtype-win\App\MTRel\MathType.pdb

netapi32

NetApiBufferFree NetWkstaGetInfo

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA

comctl32

ord17

wininet

HttpOpenRequestA InternetOpenA InternetReadFile InternetSetStatusCallback InternetGetConnectedState HttpSendRequestA InternetQueryDataAvailable HttpQueryInfoA InternetConnectA InternetCloseHandle

iphlpapi

GetAdaptersInfo GetAdaptersAddresses

urlmon

URLDownloadToFileA URLDownloadToFileW

advapi32

RegCreateKeyExA SetSecurityDescriptorDacl RegSetValueExW RegOpenKeyExW OpenProcessToken SystemFunction036 RegQueryInfoKeyW InitializeSecurityDescriptor RegOpenKeyExA RegEnumKeyExW RegEnumValueW RegQueryValueExW RegCreateKeyExW RegEnumKeyExA RegDeleteKeyA RegCloseKey RegSetValueExA RegSetValueA RegQueryValueA RegCreateKeyA GetUserNameA RegOpenKeyA RegEnumValueA RegQueryValueExA

gdi32

Ellipse PtVisible CreateFontA SetAbortProc AbortDoc EndPage StartPage EndDoc StartDocA CreateFontIndirectA DeleteObject GetDeviceCaps SelectObject SetBkMode SetTextColor GetObjectA DPtoLP Escape EnumMetaFile CombineRgn CreateRectRgn CreateRectRgnIndirect BitBlt CreatePen CreateSolidBrush GetStockObject GetTextExtentPointA LineTo SelectPalette SetBkColor SetROP2 MoveToEx TextOutA CopyMetaFileA DeleteMetaFile CopyEnhMetaFileA DeleteEnhMetaFile SetMapMode CreateBitmap CreateCompatibleBitmap CreateCompatibleDC DeleteDC GetMapMode GetPixel PtInRegion CreateDIBSection GetBitmapBits SetTextAlign GetTextMetricsA TextOutW CreateDCA EnumFontFamiliesExA GetFontData GetTextFaceA Arc CreatePatternBrush RectVisible SelectClipRgn SetMapperFlags Polygon GetDIBits OffsetViewportOrgEx FillRgn GetTextExtentPoint32A RestoreDC SaveDC PlayMetaFileRecord SetViewportExtEx SetViewportOrgEx CreatePalette RealizePalette ResizePalette SetPaletteEntries GetCharWidthA GetCharWidthW GetCharWidth32A GetCharWidth32W ExtTextOutA ExtTextOutW GdiFlush CloseMetaFile CreateMetaFileA GetMetaFileBitsEx PlayMetaFile SetMetaFileBitsEx StretchBlt SetStretchBltMode CloseEnhMetaFile CreateEnhMetaFileA EnumEnhMetaFile GetEnhMetaFileBits SetEnhMetaFileBits GdiComment SetWindowExtEx SetWindowOrgEx FrameRgn InvertRgn SetRectRgn GetClipBox PatBlt

kernel32

CreateThreadpoolWork GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW SubmitThreadpoolWork FreeLibraryWhenCallbackReturns MulDiv GetModuleFileNameA lstrlenA GetLocaleInfoW GetLocaleInfoA GlobalUnlock GlobalLock GlobalAlloc GlobalSize GlobalFree WinExec GlobalReAlloc OutputDebugStringA GetVersionExA GetTempPathA Sleep GetTickCount lstrcpyA GetTickCount64 LockResource FreeLibrary GetProcAddress LoadLibraryA MultiByteToWideChar GetACP GetCPInfo IsDBCSLeadByte GetSystemDefaultLangID WideCharToMultiByte CreateFileA GetFileSize ReadFile SetEndOfFile SetFilePointer WriteFile CloseHandle GetLastError GetWindowsDirectoryA SetCurrentDirectoryA FindClose FindFirstFileA GetDiskFreeSpaceA GetDriveTypeA GetFileAttributesA LocalFileTimeToFileTime SetFileAttributesA SetFileTime GetTempFileNameA CopyFileA SystemTimeToFileTime IsBadReadPtr SetErrorMode GlobalHandle WaitForSingleObject CreateThread GetExitCodeThread CloseThreadpoolWork SizeofResource FindResourceA GetUserDefaultLCID GetCurrentProcessId SetHandleInformation CreatePipe TerminateProcess GetExitCodeProcess CreateProcessA OpenProcess CreateToolhelp32Snapshot Process32First Process32Next CreateMailslotA GetMailslotInfo GetComputerNameA GlobalDeleteAtom GlobalAddAtomA GlobalFlags CreateMutexA GetModuleHandleA LocalAlloc FreeResource FormatMessageA GetCurrentProcess GetBinaryTypeA lstrcpynA GlobalGetAtomNameA GetEnvironmentVariableA ReadProcessMemory GetThreadSelectorEntry GetCurrentThread CreateThreadpoolTimer InitOnceExecuteOnce FlsFree FlsSetValue FlsGetValue FlsAlloc LCMapStringEx LocalFree GetNativeSystemInfo SleepConditionVariableCS InitializeConditionVariable TryEnterCriticalSection InitializeCriticalSectionEx InitializeSRWLock GetLogicalProcessorInformation PostQueuedCompletionStatus GetQueuedCompletionStatusEx CreateIoCompletionPort CancelIoEx DisconnectNamedPipe ConnectNamedPipe SetFileCompletionNotificationModes GetSystemFirmwareTable lstrlenW TzSpecificLocalTimeToSystemTime GetNamedPipeInfo GetTempPathW QueryPerformanceFrequency InitOnceComplete InitOnceBeginInitialize UpdateProcThreadAttribute InitializeProcThreadAttributeList GetFileAttributesW CreateProcessW GetOverlappedResult CopyFileExW GetFinalPathNameByHandleW SetFileAttributesW CreateHardLinkW CreateSymbolicLinkW DeviceIoControl FindFirstFileW GetFileInformationByHandleEx ReleaseSRWLockShared AcquireSRWLockShared TryAcquireSRWLockExclusive WakeConditionVariable SleepConditionVariableSRW WakeAllConditionVariable GetProcessId WriteFileEx SleepEx ReadFileEx DuplicateHandle SetFileInformationByHandle GetEnvironmentVariableW ReleaseMutex RtlCaptureContext GetSystemInfo SetWaitableTimer CreateWaitableTimerExW SwitchToThread SetThreadStackGuarantee AddVectoredExceptionHandler CompareStringOrdinal DeleteProcThreadAttributeList ReleaseSRWLockExclusive AcquireSRWLockExclusive SetThreadpoolTimer WriteConsoleW HeapSize GetStringTypeW OutputDebugStringW SetConsoleCtrlHandler GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage GetTimeZoneInformation HeapReAlloc DecodePointer GetFileSizeEx SetFilePointerEx ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers RemoveDirectoryW CreateDirectoryW GetCurrentDirectoryW SetCurrentDirectoryW MoveFileExW DeleteFileW EnumSystemLocalesW IsValidLocale LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW HeapAlloc HeapFree GetStdHandle GetModuleFileNameW ExitProcess GetLocalTime GetModuleHandleExW FreeLibraryAndExitThread ResumeThread ExitThread SetStdHandle FindNextFileW FindFirstFileExW GetFullPathNameW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime PeekNamedPipe GetFileType GetFileInformationByHandle GetDriveTypeW CreateFileW LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer SetLastError InterlockedFlushSList InterlockedPushEntrySList RaiseException InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent GetModuleHandleW CreateEventW WaitForSingleObjectEx ResetEvent SetEvent DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForMultipleObjects GetSystemDirectoryW WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait GetLocaleInfoEx CompareStringEx CancelIo FormatMessageW CreateEventExW LoadResource CreateNamedPipeW GetWindowsDirectoryW

ntdll

NtCancelIoFileEx RtlUnwind NtCreateFile RtlNtStatusToDosError NtReadFile NtWriteFile NtDeviceIoControlFile

ole32

CoTaskMemFree OleDuplicateData WriteClassStg OleSetClipboard OleGetClipboard CoLockObjectExternal RegisterDragDrop RevokeDragDrop DoDragDrop ProgIDFromCLSID CoGetMalloc CoRegisterClassObject CLSIDFromString CoRegisterMessageFilter OleInitialize OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator CoRevokeClassObject CoDisconnectObject OleUninitialize OleFlushClipboard CreateDataAdviseHolder WriteFmtUserTypeStg ReleaseStgMedium CreateOleAdviseHolder OleRegEnumFormatEtc StgCreateDocfileOnILockBytes GetHGlobalFromILockBytes CreateILockBytesOnHGlobal GetRunningObjectTable

oleaut32

SysStringLen SysStringByteLen SafeArrayCreateVector SysAllocString

shell32

SHGetFolderPathA ShellExecuteA DragQueryFileA DragFinish DragAcceptFiles Shell_NotifyIconA SHGetKnownFolderPath

user32

ReleaseCapture FindWindowA GetClipboardSequenceNumber SetClipboardViewer ChangeClipboardChain GetClipboardData PostQuitMessage CreateMenu InsertMenuA RemoveMenu GetWindowDC SetRectEmpty CopyRect IsRectEmpty GetClassNameA IsDialogMessageA EnumWindows LoadStringA LoadMenuA LoadImageA SendMessageTimeoutA WaitForInputIdle UnregisterClassA FindWindowExA GetScrollPos GetScrollInfo DrawFrameControl GetClassInfoA GetDesktopWindow DrawEdge GetMenuItemInfoA SetMenuItemInfoA SetActiveWindow ShowCursor GetWindow RegisterWindowMessageA WaitMessage DestroyIcon GetClipboardOwner GetAsyncKeyState GetScrollRange SetCursor CreateDialogParamA DialogBoxParamA MessageBoxIndirectA GetCaretBlinkTime InvalidateRgn SetForegroundWindow ModifyMenuA GetSubMenu GetSystemMenu GetMenu IsZoomed IsIconic GetWindowPlacement CreateWindowExA RegisterClassA DefWindowProcA DispatchMessageA GetMessageA MapVirtualKeyExA MapVirtualKeyA GetKeyNameTextA VkKeyScanExA ToAsciiEx GetKeyboardLayout GetKeyboardLayoutList GetKeyboardLayoutNameA ActivateKeyboardLayout ScrollWindowEx CharPrevA CharNextA wsprintfA GetSysColorBrush GetMonitorInfoA MonitorFromRect InvertRect ScrollDC PeekMessageA MessageBeep EqualRect IntersectRect UnionRect SystemParametersInfoA TranslateMessage GetWindowTextA RemovePropA GetPropA SetPropA SetFocus SetWindowPos EnumChildWindows TrackPopupMenu AppendMenuA DestroyMenu CreatePopupMenu GetMenuStringA ScreenToClient GetDoubleClickTime SetScrollInfo MapWindowPoints EndPaint BeginPaint IsWindowEnabled MoveWindow GetDlgItemInt SetDlgItemInt CheckRadioButton GetDlgItemTextA SetWindowLongA PtInRect InflateRect ClientToScreen GetClientRect GetWindowTextLengthA SetScrollRange SetScrollPos GetFocus GetDialogBaseUnits GetDlgCtrlID GetNextDlgTabItem IsWindow CallWindowProcA GetWindowRect SetWindowTextA ReleaseDC GetDC SendDlgItemMessageA IsDlgButtonChecked CheckDlgButton SetDlgItemTextA GetWindowThreadProcessId GetForegroundWindow EnableWindow BringWindowToTop AttachThreadInput LoadBitmapA GetParent GetWindowLongA FrameRect FillRect GetSysColor InsertMenuItemA GetMenuCheckMarkDimensions DeleteMenu GetSystemMetrics GetDlgItem GetMenuItemCount GetMenuItemID GetMenuState PostMessageA EmptyClipboard GetClipboardFormatNameA RegisterClipboardFormatA SetClipboardData CloseClipboard OpenClipboard GetCursorPos InvalidateRect KillTimer SetTimer OffsetRect SetRect UpdateWindow DrawTextA EndDialog CreateDialogIndirectParamA ShowWindow DestroyWindow SetCapture MonitorFromWindow LoadCursorA IsWindowVisible SetMenuDefaultItem EnableMenuItem CheckMenuItem DrawMenuBar HiliteMenuItem LoadIconA GetClassLongA MessageBoxA GetKeyState AdjustWindowRectEx SendMessageA

comdlg32

ChooseColorA GetSaveFileNameA GetOpenFileNameA PrintDlgA

bcrypt

BCryptGenRandom

userenv

GetUserProfileDirectoryW

ws2_32

ioctlsocket accept send WSASend WSARecv recv WSADuplicateSocketW setsockopt WSAGetLastError shutdown closesocket freeaddrinfo WSACleanup WSAStartup WSASocketW getaddrinfo connect select recvfrom bind listen getpeername getsockname sendto WSARecvFrom WSAIoctl socket WSAPoll WSASendTo getsockopt

$LOCALAPPDATA/Temp/mathtype.tmp/meta-index

SHA256 6980a9e34a790cca22803d0da4b795cae44dd9e710fd70a2461d479a07007381
MD5 dd3985e136195a2d9e2da570b68b8fbf
SHA1 37786c30a0912e50fa21db81435c8a32f438653a
SHA512 5b803b4d0dcf330d56c3021750e08899eafb100f14307268dc7c30f2787e4c301bc8cf6699907fb574ce305301547c8ff5884694a2d5799765232d6a5d1c87df
TLSH
T19B119E1B86139199FB3C4BC9F673FAC2A10C832E001D937D44C518893A5EE4A196CEB9
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/mlib_image.dll

IMPHASH 6e21d83f5e6ff110ff2f01a63cf53a03
SHA256 2a93eb2e52d859fb82b79de2dc7e50c6613fad318a07632b2adb8b97e6a0da14
MD5 ee199b7f81298540ed147d9694f518bc
SHA1 8ec39358490b6b3f66b5f4213eb000aa455ef227
SHA512 3367b06ec74117572b6193c206a62bd845444e7c0ad827bb611056a9ee3aac6462b43c2f6acefee7b8729cc54daf912aa5edea0438c1f78fe38e3a60c1a52f61
SSDEEP 12288:7sZyZ57fc2tUavhwiJVJD6JdsGpp3rsAsxKANFkKUMat4ThG4koZCRKIZMNw3ckm:7sZyZ5702tUavhwiJVJD6JWGp+AsQANn
TLSH
T1DCC45BD0CAEF65C9E8491C7450967527EA24AB1D4225E7B2FBA49F03F471B03CCB9389
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

513869

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libmlib_image\mlib_image.pdb

$LOCALAPPDATA/Temp/mathtype.tmp/msvcr100.dll

IMPHASH 5271d5ce8b44dd47bc92563e27585466
SHA256 6eeb720f50266e5e5bdf91cf1429f24f34bf248da5d56c3a2a897949bf51b6ce
MD5 92fe9d4645c8a8d7f7d317a2b4e39800
SHA1 108d1e656027c35b206599eed1f3810026f38ec6
SHA512 38a1344bec64a5b7f6bba2b15e13d20ccfce7c101ecc3e77d7109e82725f3c4e77313347581e2b4e6b81a5edb08b9abcc9f8ab1018b280a9513a73a90e6091d4
SSDEEP 12288:4MmCy3nAgPAxN9ueqix/HEmxsvGrif8ZSy+rdQw2QRAtd74/vmYK6H3BV0es:PmCy3KxW3ixPEmxsvGrm8Z6r+JQPzV0
TLSH
T1B5F49D11B692C073C1B221300629D7B25D7BB8711035946BBBD59F3E1FB47C2EA277AA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

e5:56:66:15:42:16:30:e0:3a:cc:0f:23:14:ee:b4:06:73:7d:1c:30:b1:23:d7:eb:f3:ba:f7:cb:82:97:94:b3:a7:00:49:5c:59:07:b1:3e:8c:da:bd:4c:6d:d7:82:af

Digest Algorithm

sha384

PE Digests Matches

Trusted

Signing Certificate

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Chains

Feb 21, 2024

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Serial Number

0b:90:6c:f5:46:56:0e:2a:ce:4a:a1:79:e8:ff:36:ee

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2024 - Mar 16, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

1

Major OS version

5

Entry point

73212

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcr100.i386.pdb

kernel32

EncodePointer DecodePointer RaiseException GetModuleFileNameA GetModuleFileNameW GetModuleHandleW GetProcAddress ExitProcess WriteFile GetStdHandle GetCurrentThreadId TlsGetValue GetCommandLineW GetCommandLineA InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection ExitThread CloseHandle GetLastError ResumeThread CreateThread TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetCurrentThread FindNextFileA FindFirstFileExA FindClose FindNextFileW FindFirstFileExW GetLogicalDrives GetDiskFreeSpaceA FileTimeToSystemTime FileTimeToLocalFileTime SetErrorMode Sleep Beep GetFileAttributesA SetFileAttributesA SetEnvironmentVariableA GetCurrentDirectoryA SetCurrentDirectoryA GetCurrentDirectoryW SetCurrentDirectoryW GetFullPathNameA GetDriveTypeW GetCurrentProcessId CreateDirectoryA MoveFileA RemoveDirectoryA GetDriveTypeA DeleteFileA GetFileAttributesW SetEnvironmentVariableW SetFileAttributesW GetFullPathNameW CreateDirectoryW MoveFileW RemoveDirectoryW DeleteFileW GetExitCodeProcess WaitForSingleObject CreateProcessA LoadLibraryA FreeLibrary CreateProcessW ReadFile DuplicateHandle GetCurrentProcess GetSystemTimeAsFileTime GetTimeZoneInformation GetLocalTime WideCharToMultiByte SetFileTime LocalFileTimeToFileTime SystemTimeToFileTime SetLocalTime InterlockedPopEntrySList InterlockedFlushSList QueryDepthSList InterlockedPushEntrySList CreateTimerQueue CreateTimerQueueTimer DeleteTimerQueueTimer SetEvent CreateEventW SwitchToThread SignalObjectAndWait TryEnterCriticalSection GetTickCount VirtualFree GetVersionExW SetThreadPriority VirtualAlloc GetSystemInfo GetProcessAffinityMask VirtualProtect SetThreadAffinityMask InitializeSListHead ReleaseSemaphore CreateSemaphoreW WaitForMultipleObjects GetThreadPriority LoadLibraryW SleepEx OutputDebugStringW FreeLibraryAndExitThread GetModuleHandleA GetThreadTimes DebugBreak MultiByteToWideChar GetStringTypeW GetCPInfo GetACP GetOEMCP IsValidCodePage GetTimeFormatA GetDateFormatA GetTimeFormatW GetDateFormatW RtlUnwind HeapAlloc HeapFree HeapCreate HeapDestroy HeapQueryInformation HeapReAlloc HeapSize HeapValidate HeapCompact HeapWalk VirtualQuery SetHandleCount GetFileType GetStartupInfoW GetFileInformationByHandle PeekNamedPipe CreateFileA CreateFileW SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers CreatePipe SetStdHandle ReadConsoleInputA SetConsoleMode PeekConsoleInputA GetNumberOfConsoleInputEvents ReadConsoleInputW WriteConsoleW ReadConsoleW SetEndOfFile GetProcessHeap InterlockedExchange LockFile UnlockFile UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess SetConsoleCtrlHandler GetLocaleInfoW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter LCMapStringW CompareStringW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale IsProcessorFeaturePresent

$I10_OUTPUT ??0?$_SpinWait@$00@details@Concurrency@@QAE@P6AXXZ@Z ??0?$_SpinWait@$0A@@details@Concurrency@@QAE@P6AXXZ@Z ??0SchedulerPolicy@Concurrency@@QAA@IZZ ??0SchedulerPolicy@Concurrency@@QAE@ABV01@@Z ??0SchedulerPolicy@Concurrency@@QAE@XZ ??0_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ ??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ ??0_ReaderWriterLock@details@Concurrency@@QAE@XZ ??0_ReentrantBlockingLock@details@Concurrency@@QAE@XZ ??0_ReentrantLock@details@Concurrency@@QAE@XZ ??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ ??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z ??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z ??0_SpinLock@details@Concurrency@@QAE@ACJ@Z ??0_TaskCollection@details@Concurrency@@QAE@XZ ??0_Timer@details@Concurrency@@IAE@I_N@Z ??0__non_rtti_object@std@@QAE@ABV01@@Z ??0__non_rtti_object@std@@QAE@PBD@Z ??0bad_cast@std@@AAE@PBQBD@Z ??0bad_cast@std@@QAE@ABV01@@Z ??0bad_cast@std@@QAE@PBD@Z ??0bad_target@Concurrency@@QAE@PBD@Z ??0bad_target@Concurrency@@QAE@XZ ??0bad_typeid@std@@QAE@ABV01@@Z ??0bad_typeid@std@@QAE@PBD@Z ??0context_self_unblock@Concurrency@@QAE@PBD@Z ??0context_self_unblock@Concurrency@@QAE@XZ ??0context_unblock_unbalanced@Concurrency@@QAE@PBD@Z ??0context_unblock_unbalanced@Concurrency@@QAE@XZ ??0critical_section@Concurrency@@QAE@XZ ??0default_scheduler_exists@Concurrency@@QAE@PBD@Z ??0default_scheduler_exists@Concurrency@@QAE@XZ ??0event@Concurrency@@QAE@XZ ??0exception@std@@QAE@ABQBD@Z ??0exception@std@@QAE@ABQBDH@Z ??0exception@std@@QAE@ABV01@@Z ??0exception@std@@QAE@XZ ??0improper_lock@Concurrency@@QAE@PBD@Z ??0improper_lock@Concurrency@@QAE@XZ ??0improper_scheduler_attach@Concurrency@@QAE@PBD@Z ??0improper_scheduler_attach@Concurrency@@QAE@XZ ??0improper_scheduler_detach@Concurrency@@QAE@PBD@Z ??0improper_scheduler_detach@Concurrency@@QAE@XZ ??0improper_scheduler_reference@Concurrency@@QAE@PBD@Z ??0improper_scheduler_reference@Concurrency@@QAE@XZ ??0invalid_link_target@Concurrency@@QAE@PBD@Z ??0invalid_link_target@Concurrency@@QAE@XZ ??0invalid_multiple_scheduling@Concurrency@@QAE@PBD@Z ??0invalid_multiple_scheduling@Concurrency@@QAE@XZ ??0invalid_operation@Concurrency@@QAE@PBD@Z ??0invalid_operation@Concurrency@@QAE@XZ ??0invalid_oversubscribe_operation@Concurrency@@QAE@PBD@Z ??0invalid_oversubscribe_operation@Concurrency@@QAE@XZ ??0invalid_scheduler_policy_key@Concurrency@@QAE@PBD@Z ??0invalid_scheduler_policy_key@Concurrency@@QAE@XZ ??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@PBD@Z ??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@XZ ??0invalid_scheduler_policy_value@Concurrency@@QAE@PBD@Z ??0invalid_scheduler_policy_value@Concurrency@@QAE@XZ ??0message_not_found@Concurrency@@QAE@PBD@Z ??0message_not_found@Concurrency@@QAE@XZ ??0missing_wait@Concurrency@@QAE@PBD@Z ??0missing_wait@Concurrency@@QAE@XZ ??0nested_scheduler_missing_detach@Concurrency@@QAE@PBD@Z ??0nested_scheduler_missing_detach@Concurrency@@QAE@XZ ??0operation_timed_out@Concurrency@@QAE@PBD@Z ??0operation_timed_out@Concurrency@@QAE@XZ ??0reader_writer_lock@Concurrency@@QAE@XZ ??0scheduler_not_attached@Concurrency@@QAE@PBD@Z ??0scheduler_not_attached@Concurrency@@QAE@XZ ??0scheduler_resource_allocation_error@Concurrency@@QAE@J@Z ??0scheduler_resource_allocation_error@Concurrency@@QAE@PBDJ@Z ??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z ??0scoped_lock@reader_writer_lock@Concurrency@@QAE@AAV12@@Z ??0scoped_lock_read@reader_writer_lock@Concurrency@@QAE@AAV12@@Z ??0task_canceled@details@Concurrency@@QAE@PBD@Z ??0task_canceled@details@Concurrency@@QAE@XZ ??0unsupported_os@Concurrency@@QAE@PBD@Z ??0unsupported_os@Concurrency@@QAE@XZ ??1SchedulerPolicy@Concurrency@@QAE@XZ ??1_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ ??1_ReentrantBlockingLock@details@Concurrency@@QAE@XZ ??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ ??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ ??1_SpinLock@details@Concurrency@@QAE@XZ ??1_TaskCollection@details@Concurrency@@QAE@XZ ??1_Timer@details@Concurrency@@IAE@XZ ??1__non_rtti_object@std@@UAE@XZ ??1bad_cast@std@@UAE@XZ ??1bad_typeid@std@@UAE@XZ ??1critical_section@Concurrency@@QAE@XZ ??1event@Concurrency@@QAE@XZ ??1exception@std@@UAE@XZ ??1reader_writer_lock@Concurrency@@QAE@XZ ??1scoped_lock@critical_section@Concurrency@@QAE@XZ ??1scoped_lock@reader_writer_lock@Concurrency@@QAE@XZ ??1scoped_lock_read@reader_writer_lock@Concurrency@@QAE@XZ ??1type_info@@UAE@XZ ??2@YAPAXI@Z ??2@YAPAXIHPBDH@Z ??3@YAXPAX@Z ??4?$_SpinWait@$00@details@Concurrency@@QAEAAV012@ABV012@@Z ??4?$_SpinWait@$0A@@details@Concurrency@@QAEAAV012@ABV012@@Z ??4SchedulerPolicy@Concurrency@@QAEAAV01@ABV01@@Z ??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z ??4bad_cast@std@@QAEAAV01@ABV01@@Z ??4bad_typeid@std@@QAEAAV01@ABV01@@Z ??4exception@std@@QAEAAV01@ABV01@@Z ??8type_info@@QBE_NABV0@@Z ??9type_info@@QBE_NABV0@@Z ??_7__non_rtti_object@std@@6B@ ??_7bad_cast@std@@6B@ ??_7bad_typeid@std@@6B@ ??_7exception@@6B@ ??_7exception@std@@6B@ ??_F?$_SpinWait@$00@details@Concurrency@@QAEXXZ ??_F?$_SpinWait@$0A@@details@Concurrency@@QAEXXZ ??_Fbad_cast@std@@QAEXXZ ??_Fbad_typeid@std@@QAEXXZ ??_U@YAPAXI@Z ??_U@YAPAXIHPBDH@Z ??_V@YAXPAX@Z ?Alloc@Concurrency@@YAPAXI@Z ?Block@Context@Concurrency@@SAXXZ ?Create@CurrentScheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z ?Create@Scheduler@Concurrency@@SAPAV12@ABVSchedulerPolicy@2@@Z ?CreateResourceManager@Concurrency@@YAPAUIResourceManager@1@XZ ?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@XZ ?CurrentContext@Context@Concurrency@@SAPAV12@XZ ?Detach@CurrentScheduler@Concurrency@@SAXXZ ?DisableTracing@Concurrency@@YAJXZ ?EnableTracing@Concurrency@@YAJXZ ?Free@Concurrency@@YAXPAX@Z ?Get@CurrentScheduler@Concurrency@@SAPAVScheduler@2@XZ ?GetExecutionContextId@Concurrency@@YAIXZ ?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ ?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ ?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ ?GetPolicyValue@SchedulerPolicy@Concurrency@@QBEIW4PolicyElementKey@2@@Z ?GetProcessorCount@Concurrency@@YAIXZ ?GetProcessorNodeCount@Concurrency@@YAIXZ ?GetSchedulerId@Concurrency@@YAIXZ ?GetSharedTimerQueue@details@Concurrency@@YAPAXXZ ?Id@Context@Concurrency@@SAIXZ ?Id@CurrentScheduler@Concurrency@@SAIXZ ?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ ?Log2@details@Concurrency@@YAKI@Z ?Oversubscribe@Context@Concurrency@@SAX_N@Z ?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPAX@Z ?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ ?ScheduleGroupId@Context@Concurrency@@SAIXZ ?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z ?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QAEXII@Z ?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z ?SetPolicyValue@SchedulerPolicy@Concurrency@@QAEIW4PolicyElementKey@2@I@Z ?VirtualProcessorId@Context@Concurrency@@SAIXZ ?Yield@Context@Concurrency@@SAXXZ ?_Abort@_StructuredTaskCollection@details@Concurrency@@AAEXXZ ?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ ?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QAEXPAX@Z ?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ ?_Acquire@_ReentrantLock@details@Concurrency@@QAEXXZ ?_Acquire@_ReentrantPPLLock@details@Concurrency@@QAEXPAX@Z ?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ ?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ ?_Cancel@_StructuredTaskCollection@details@Concurrency@@QAEXXZ ?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ ?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IAEXXZ ?_ConcRT_Assert@details@Concurrency@@YAXPBD0H@Z ?_ConcRT_CoreAssert@details@Concurrency@@YAXPBD0H@Z ?_ConcRT_DumpMessage@details@Concurrency@@YAXPB_WZZ ?_ConcRT_Trace@details@Concurrency@@YAXHPB_WZZ ?_Copy_str@exception@std@@AAEXPBD@Z ?_DoYield@?$_SpinWait@$00@details@Concurrency@@IAEXXZ ?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ ?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QAE_NXZ ?_IsCanceling@_TaskCollection@details@Concurrency@@QAE_NXZ ?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z ?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z ?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IAEKXZ ?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IAEKXZ ?_Release@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ ?_Release@_NonReentrantPPLLock@details@Concurrency@@QAEXXZ ?_Release@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ ?_Release@_ReentrantLock@details@Concurrency@@QAEXXZ ?_Release@_ReentrantPPLLock@details@Concurrency@@QAEXXZ ?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ ?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ ?_Reset@?$_SpinWait@$00@details@Concurrency@@IAEXXZ ?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ ?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z ?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z ?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z ?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z ?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QAEXI@Z ?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QAEXI@Z ?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IAE_NXZ ?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IAE_NXZ ?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ ?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QAE_NXZ ?_SpinYield@Context@Concurrency@@SAXXZ ?_Start@_Timer@details@Concurrency@@IAEXXZ ?_Stop@_Timer@details@Concurrency@@IAEXXZ ?_Tidy@exception@std@@AAEXXZ ?_Trace_ppl_function@Concurrency@@YAXABU_GUID@@EW4ConcRT_EventType@1@@Z ?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QAE_NXZ ?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QAE_NXZ ?_TryAcquire@_ReentrantLock@details@Concurrency@@QAE_NXZ ?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QAE_NXZ ?_Type_info_dtor@type_info@@CAXPAV1@@Z ?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z ?_UnderlyingYield@details@Concurrency@@YAXXZ ?_ValidateExecute@@YAHP6GHXZ@Z ?_ValidateRead@@YAHPBXI@Z ?_ValidateWrite@@YAHPAXI@Z ?_Value@_SpinCount@details@Concurrency@@SAIXZ ?__ExceptionPtrAssign@@YAXPAXPBX@Z ?__ExceptionPtrCompare@@YA_NPBX0@Z ?__ExceptionPtrCopy@@YAXPAXPBX@Z ?__ExceptionPtrCopyException@@YAXPAXPBX1@Z ?__ExceptionPtrCreate@@YAXPAX@Z ?__ExceptionPtrCurrentException@@YAXPAX@Z ?__ExceptionPtrDestroy@@YAXPAX@Z ?__ExceptionPtrRethrow@@YAXPBX@Z ?_inconsistency@@YAXXZ ?_invalid_parameter@@YAXPBG00II@Z ?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z ?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z ?_open@@YAHPBDHH@Z ?_query_new_handler@@YAP6AHI@ZXZ ?_query_new_mode@@YAHXZ ?_set_new_handler@@YAP6AHI@ZH@Z ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z ?_set_new_mode@@YAHH@Z ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z ?_sopen@@YAHPBDHHH@Z ?_type_info_dtor_internal_method@type_info@@QAEXXZ ?_wopen@@YAHPB_WHH@Z ?_wsopen@@YAHPB_WHHH@Z ?before@type_info@@QBEHABV1@@Z ?get_error_code@scheduler_resource_allocation_error@Concurrency@@QBEJXZ ?lock@critical_section@Concurrency@@QAEXXZ ?lock@reader_writer_lock@Concurrency@@QAEXXZ ?lock_read@reader_writer_lock@Concurrency@@QAEXXZ ?name@type_info@@QBEPBDPAU__type_info_node@@@Z ?native_handle@critical_section@Concurrency@@QAEAAV12@XZ ?raw_name@type_info@@QBEPBDXZ ?reset@event@Concurrency@@QAEXXZ ?set@event@Concurrency@@QAEXXZ ?set_new_handler@@YAP6AXXZP6AXXZ@Z ?set_terminate@@YAP6AXXZH@Z ?set_terminate@@YAP6AXXZP6AXXZ@Z ?set_unexpected@@YAP6AXXZH@Z ?set_unexpected@@YAP6AXXZP6AXXZ@Z ?swprintf@@YAHPAGIPBGZZ ?swprintf@@YAHPA_WIPB_WZZ ?terminate@@YAXXZ ?try_lock@critical_section@Concurrency@@QAE_NXZ ?try_lock@reader_writer_lock@Concurrency@@QAE_NXZ ?try_lock_read@reader_writer_lock@Concurrency@@QAE_NXZ ?unexpected@@YAXXZ ?unlock@critical_section@Concurrency@@QAEXXZ ?unlock@reader_writer_lock@Concurrency@@QAEXXZ ?vswprintf@@YAHPA_WIPB_WPAD@Z ?wait@Concurrency@@YAXI@Z ?wait@event@Concurrency@@QAEII@Z ?wait_for_multiple@event@Concurrency@@SAIPAPAV12@I_NI@Z ?what@exception@std@@UBEPBDXZ _CIacos _CIasin _CIatan _CIatan2 _CIcos _CIcosh _CIexp _CIfmod _CIlog _CIlog10 _CIpow _CIsin _CIsinh _CIsqrt _CItan _CItanh _CRT_RTC_INIT _CRT_RTC_INITW _CreateFrameInfo _CxxThrowException _EH_prolog _FindAndUnlinkFrame _Getdays _Getmonths _Gettnames _HUGE _IsExceptionObjectToBeDestroyed _NLG_Dispatch2 _NLG_Return _NLG_Return2 _Strftime _XcptFilter __AdjustPointer __BuildCatchObject __BuildCatchObjectHelper __CppXcptFilter __CxxCallUnwindDelDtor __CxxCallUnwindDtor __CxxCallUnwindStdDelDtor __CxxCallUnwindVecDtor __CxxDetectRethrow __CxxExceptionFilter __CxxFrameHandler __CxxFrameHandler2 __CxxFrameHandler3 __CxxLongjmpUnwind __CxxQueryExceptionSize __CxxRegisterExceptionObject __CxxUnregisterExceptionObject __DestructExceptionObject __FrameUnwindFilter __RTCastToVoid __RTDynamicCast __RTtypeid __STRINGTOLD __STRINGTOLD_L __TypeMatch ___fls_getvalue@4 ___fls_setvalue@8 ___lc_codepage_func ___lc_collate_cp_func ___lc_handle_func ___mb_cur_max_func ___mb_cur_max_l_func ___setlc_active_func ___unguarded_readlc_active_add_func __argc __argv __badioinfo __clean_type_info_names_internal __control87_2 __create_locale __crtCompareStringA __crtCompareStringW __crtLCMapStringA __crtLCMapStringW __daylight __dllonexit __doserrno __dstbias __fpecode __free_locale __get_current_locale __get_flsindex __get_tlsindex __getmainargs __initenv __iob_func __isascii __iscsym __iscsymf __iswcsym __iswcsymf __lconv __lconv_init __libm_sse2_acos __libm_sse2_acosf __libm_sse2_asin __libm_sse2_asinf __libm_sse2_atan __libm_sse2_atan2 __libm_sse2_atanf __libm_sse2_cos __libm_sse2_cosf __libm_sse2_exp __libm_sse2_expf __libm_sse2_log __libm_sse2_log10 __libm_sse2_log10f __libm_sse2_logf __libm_sse2_pow __libm_sse2_powf __libm_sse2_sin __libm_sse2_sinf __libm_sse2_tan __libm_sse2_tanf __mb_cur_max __p___argc __p___argv __p___initenv __p___mb_cur_max __p___wargv __p___winitenv __p__acmdln __p__commode __p__daylight __p__dstbias __p__environ __p__fmode __p__iob __p__mbcasemap __p__mbctype __p__pctype __p__pgmptr __p__pwctype __p__timezone __p__tzname __p__wcmdln __p__wenviron __p__wpgmptr __pctype_func __pioinfo __pwctype_func __pxcptinfoptrs __report_gsfailure __set_app_type __set_flsgetvalue __setlc_active __setusermatherr __strncnt __swprintf_l __sys_errlist __sys_nerr __threadhandle __threadid __timezone __toascii __tzname __unDName __unDNameEx __unDNameHelper __uncaught_exception __unguarded_readlc_active __vswprintf_l __wargv __wcserror __wcserror_s __wcsncnt __wgetmainargs __winitenv _abnormal_termination _abs64 _access _access_s _acmdln _aligned_free _aligned_malloc _aligned_msize _aligned_offset_malloc _aligned_offset_realloc _aligned_offset_recalloc _aligned_realloc _aligned_recalloc _amsg_exit _assert _atodbl _atodbl_l _atof_l _atoflt _atoflt_l _atoi64 _atoi64_l _atoi_l _atol_l _atoldbl _atoldbl_l _beep _beginthread _beginthreadex _byteswap_uint64 _byteswap_ulong _byteswap_ushort _c_exit _cabs _callnewh _calloc_crt _cexit _cgets _cgets_s _cgetws _cgetws_s _chdir _chdrive _chgsign _chkesp _chmod _chsize _chsize_s _clearfp _close _commit _commode _configthreadlocale _control87 _controlfp _controlfp_s _copysign _cprintf _cprintf_l _cprintf_p _cprintf_p_l _cprintf_s _cprintf_s_l _cputs _cputws _creat _create_locale _crt_debugger_hook _cscanf _cscanf_l _cscanf_s _cscanf_s_l _ctime32 _ctime32_s _ctime64 _ctime64_s _cwait _cwprintf _cwprintf_l _cwprintf_p _cwprintf_p_l _cwprintf_s _cwprintf_s_l _cwscanf _cwscanf_l _cwscanf_s _cwscanf_s_l _daylight _difftime32 _difftime64 _dosmaperr _dstbias _dup _dup2 _dupenv_s _ecvt _ecvt_s _encoded_null _endthread _endthreadex _environ _eof _errno _except_handler2 _except_handler3 _except_handler4_common _execl _execle _execlp _execlpe _execv _execve _execvp _execvpe _exit _expand _fclose_nolock _fcloseall _fcvt _fcvt_s _fdopen _fflush_nolock _fgetchar _fgetwc_nolock _fgetwchar _filbuf _filelength _filelengthi64 _fileno _findclose _findfirst32 _findfirst32i64 _findfirst64 _findfirst64i32 _findnext32 _findnext32i64 _findnext64 _findnext64i32 _finite _flsbuf _flushall _fmode _fpclass _fpieee_flt _fpreset _fprintf_l _fprintf_p _fprintf_p_l _fprintf_s_l _fputchar _fputwc_nolock _fputwchar _fread_nolock _fread_nolock_s _free_locale _freea _freea_s _freefls _fscanf_l _fscanf_s_l _fseek_nolock _fseeki64 _fseeki64_nolock _fsopen _fstat32 _fstat32i64 _fstat64 _fstat64i32 _ftell_nolock _ftelli64 _ftelli64_nolock _ftime32 _ftime32_s _ftime64 _ftime64_s _ftol _fullpath _futime32 _futime64 _fwprintf_l _fwprintf_p _fwprintf_p_l _fwprintf_s_l _fwrite_nolock _fwscanf_l _fwscanf_s_l _gcvt _gcvt_s _get_current_locale _get_daylight _get_doserrno _get_dstbias _get_errno _get_fmode _get_heap_handle _get_invalid_parameter_handler _get_osfhandle _get_output_format _get_pgmptr _get_printf_count_output _get_purecall_handler _get_terminate _get_timezone _get_tzname _get_unexpected _get_wpgmptr _getc_nolock _getch _getch_nolock _getche _getche_nolock _getcwd _getdcwd _getdcwd_nolock _getdiskfree _getdllprocaddr _getdrive _getdrives _getmaxstdio _getmbcp _getpid _getptd _getsystime _getw _getwch _getwch_nolock _getwche _getwche_nolock _getws _getws_s _global_unwind2 _gmtime32 _gmtime32_s _gmtime64 _gmtime64_s _heapadd _heapchk _heapmin _heapset _heapused _heapwalk _hypot _hypotf _i64toa _i64toa_s _i64tow _i64tow_s _initptd _initterm _initterm_e _inp _inpd _inpw _invalid_parameter _invalid_parameter_noinfo _invalid_parameter_noinfo_noreturn _invoke_watson _iob _isalnum_l _isalpha_l _isatty _iscntrl_l _isctype _isctype_l _isdigit_l _isgraph_l _isleadbyte_l _islower_l _ismbbalnum _ismbbalnum_l _ismbbalpha _ismbbalpha_l _ismbbgraph _ismbbgraph_l _ismbbkalnum _ismbbkalnum_l _ismbbkana _ismbbkana_l _ismbbkprint _ismbbkprint_l _ismbbkpunct _ismbbkpunct_l _ismbblead _ismbblead_l _ismbbprint _ismbbprint_l _ismbbpunct _ismbbpunct_l _ismbbtrail _ismbbtrail_l _ismbcalnum _ismbcalnum_l _ismbcalpha _ismbcalpha_l _ismbcdigit _ismbcdigit_l _ismbcgraph _ismbcgraph_l _ismbchira _ismbchira_l _ismbckata _ismbckata_l _ismbcl0 _ismbcl0_l _ismbcl1 _ismbcl1_l _ismbcl2 _ismbcl2_l _ismbclegal _ismbclegal_l _ismbclower _ismbclower_l _ismbcprint _ismbcprint_l _ismbcpunct _ismbcpunct_l _ismbcspace _ismbcspace_l _ismbcsymbol _ismbcsymbol_l _ismbcupper _ismbcupper_l _ismbslead _ismbslead_l _ismbstrail _ismbstrail_l _isnan _isprint_l _ispunct_l _isspace_l _isupper_l _iswalnum_l _iswalpha_l _iswcntrl_l _iswcsym_l _iswcsymf_l _iswctype_l _iswdigit_l _iswgraph_l _iswlower_l _iswprint_l _iswpunct_l _iswspace_l _iswupper_l _iswxdigit_l _isxdigit_l _itoa _itoa_s _itow _itow_s _j0 _j1 _jn _kbhit _lfind _lfind_s _loaddll _local_unwind2 _local_unwind4 _localtime32 _localtime32_s _localtime64 _localtime64_s _lock _lock_file _locking _logb _longjmpex _lrotl _lrotr _lsearch _lsearch_s _lseek _lseeki64 _ltoa _ltoa_s _ltow _ltow_s _makepath _makepath_s _malloc_crt _mbbtombc _mbbtombc_l _mbbtype _mbbtype_l _mbcasemap _mbccpy _mbccpy_l _mbccpy_s _mbccpy_s_l _mbcjistojms _mbcjistojms_l _mbcjmstojis _mbcjmstojis_l _mbclen _mbclen_l _mbctohira _mbctohira_l _mbctokata _mbctokata_l _mbctolower _mbctolower_l _mbctombb _mbctombb_l _mbctoupper _mbctoupper_l _mbctype _mblen_l _mbsbtype _mbsbtype_l _mbscat_s _mbscat_s_l _mbschr _mbschr_l _mbscmp _mbscmp_l _mbscoll _mbscoll_l _mbscpy_s _mbscpy_s_l _mbscspn _mbscspn_l _mbsdec _mbsdec_l _mbsicmp _mbsicmp_l _mbsicoll _mbsicoll_l _mbsinc _mbsinc_l _mbslen _mbslen_l _mbslwr _mbslwr_l _mbslwr_s _mbslwr_s_l _mbsnbcat _mbsnbcat_l _mbsnbcat_s _mbsnbcat_s_l _mbsnbcmp _mbsnbcmp_l _mbsnbcnt _mbsnbcnt_l _mbsnbcoll _mbsnbcoll_l _mbsnbcpy _mbsnbcpy_l _mbsnbcpy_s _mbsnbcpy_s_l _mbsnbicmp _mbsnbicmp_l _mbsnbicoll _mbsnbicoll_l _mbsnbset _mbsnbset_l _mbsnbset_s _mbsnbset_s_l _mbsncat _mbsncat_l _mbsncat_s _mbsncat_s_l _mbsnccnt _mbsnccnt_l _mbsncmp _mbsncmp_l _mbsncoll _mbsncoll_l _mbsncpy _mbsncpy_l _mbsncpy_s _mbsncpy_s_l _mbsnextc _mbsnextc_l _mbsnicmp _mbsnicmp_l _mbsnicoll _mbsnicoll_l _mbsninc _mbsninc_l _mbsnlen _mbsnlen_l _mbsnset _mbsnset_l _mbsnset_s _mbsnset_s_l _mbspbrk _mbspbrk_l _mbsrchr _mbsrchr_l _mbsrev _mbsrev_l _mbsset _mbsset_l _mbsset_s _mbsset_s_l _mbsspn _mbsspn_l _mbsspnp _mbsspnp_l _mbsstr _mbsstr_l _mbstok _mbstok_l _mbstok_s _mbstok_s_l _mbstowcs_l _mbstowcs_s_l _mbstrlen _mbstrlen_l _mbstrnlen _mbstrnlen_l _mbsupr _mbsupr_l _mbsupr_s _mbsupr_s_l _mbtowc_l _memccpy _memicmp _memicmp_l _mkdir _mkgmtime32 _mkgmtime64 _mktemp _mktemp_s _mktime32 _mktime64 _msize _nextafter _onexit _open _open_osfhandle _outp _outpd _outpw _pclose _pctype _pgmptr _pipe _popen _printf_l _printf_p _printf_p_l _printf_s_l _purecall _putch _putch_nolock _putenv _putenv_s _putw _putwch _putwch_nolock _putws _pwctype _read _realloc_crt _recalloc _recalloc_crt _resetstkoflw _rmdir _rmtmp _rotl _rotl64 _rotr _rotr64 _scalb _scanf_l _scanf_s_l _scprintf _scprintf_l _scprintf_p _scprintf_p_l _scwprintf _scwprintf_l _scwprintf_p _scwprintf_p_l _searchenv _searchenv_s _seh_longjmp_unwind _seh_longjmp_unwind4 _set_SSE2_enable _set_abort_behavior _set_controlfp _set_doserrno _set_errno _set_error_mode _set_fmode _set_invalid_parameter_handler _set_malloc_crt_max_wait _set_output_format _set_printf_count_output _set_purecall_handler _seterrormode _setjmp _setjmp3 _setmaxstdio _setmbcp _setmode _setsystime _sleep _snprintf _snprintf_c _snprintf_c_l _snprintf_l _snprintf_s _snprintf_s_l _snscanf _snscanf_l _snscanf_s _snscanf_s_l _snwprintf _snwprintf_l _snwprintf_s _snwprintf_s_l _snwscanf _snwscanf_l _snwscanf_s _snwscanf_s_l _sopen _sopen_s _spawnl _spawnle _spawnlp _spawnlpe _spawnv _spawnve _spawnvp _spawnvpe _splitpath _splitpath_s _sprintf_l _sprintf_p _sprintf_p_l _sprintf_s_l _sscanf_l _sscanf_s_l _stat32 _stat32i64 _stat64 _stat64i32 _statusfp _statusfp2 _strcoll_l _strdate _strdate_s _strdup _strerror _strerror_s _strftime_l _stricmp _stricmp_l _stricoll _stricoll_l _strlwr _strlwr_l _strlwr_s _strlwr_s_l _strncoll _strncoll_l _strnicmp _strnicmp_l _strnicoll _strnicoll_l _strnset _strnset_s _strrev _strset _strset_s _strtime _strtime_s _strtod_l _strtoi64 _strtoi64_l _strtol_l _strtoui64 _strtoui64_l _strtoul_l _strupr _strupr_l _strupr_s _strupr_s_l _strxfrm_l _swab _swprintf _swprintf_c _swprintf_c_l _swprintf_p _swprintf_p_l _swprintf_s_l _swscanf_l _swscanf_s_l _sys_errlist _sys_nerr _tell _telli64 _tempnam _time32 _time64 _timezone _tolower _tolower_l _toupper _toupper_l _towlower_l _towupper_l _tzname _tzset _ui64toa _ui64toa_s _ui64tow _ui64tow_s _ultoa _ultoa_s _ultow _ultow_s _umask _umask_s _ungetc_nolock _ungetch _ungetch_nolock _ungetwc_nolock _ungetwch _ungetwch_nolock _unlink _unloaddll _unlock _unlock_file _utime32 _utime64 _vcprintf _vcprintf_l _vcprintf_p _vcprintf_p_l _vcprintf_s _vcprintf_s_l _vcwprintf _vcwprintf_l _vcwprintf_p _vcwprintf_p_l _vcwprintf_s _vcwprintf_s_l _vfprintf_l _vfprintf_p _vfprintf_p_l _vfprintf_s_l _vfwprintf_l _vfwprintf_p _vfwprintf_p_l _vfwprintf_s_l _vprintf_l _vprintf_p _vprintf_p_l _vprintf_s_l _vscprintf _vscprintf_l _vscprintf_p _vscprintf_p_l _vscwprintf _vscwprintf_l _vscwprintf_p _vscwprintf_p_l _vsnprintf _vsnprintf_c _vsnprintf_c_l _vsnprintf_l _vsnprintf_s _vsnprintf_s_l _vsnwprintf _vsnwprintf_l _vsnwprintf_s _vsnwprintf_s_l _vsprintf_l _vsprintf_p _vsprintf_p_l _vsprintf_s_l _vswprintf _vswprintf_c _vswprintf_c_l _vswprintf_l _vswprintf_p _vswprintf_p_l _vswprintf_s_l _vwprintf_l _vwprintf_p _vwprintf_p_l _vwprintf_s_l _waccess _waccess_s _wasctime _wasctime_s _wassert _wchdir _wchmod _wcmdln _wcreat _wcscoll_l _wcsdup _wcserror _wcserror_s _wcsftime_l _wcsicmp _wcsicmp_l _wcsicoll _wcsicoll_l _wcslwr _wcslwr_l _wcslwr_s _wcslwr_s_l _wcsncoll _wcsncoll_l _wcsnicmp _wcsnicmp_l _wcsnicoll _wcsnicoll_l _wcsnset _wcsnset_s _wcsrev _wcsset _wcsset_s _wcstod_l _wcstoi64 _wcstoi64_l _wcstol_l _wcstombs_l _wcstombs_s_l _wcstoui64 _wcstoui64_l _wcstoul_l _wcsupr _wcsupr_l _wcsupr_s _wcsupr_s_l _wcsxfrm_l _wctime32 _wctime32_s _wctime64 _wctime64_s _wctomb_l _wctomb_s_l _wctype _wdupenv_s _wenviron _wexecl _wexecle _wexeclp _wexeclpe _wexecv _wexecve _wexecvp _wexecvpe _wfdopen _wfindfirst32 _wfindfirst32i64 _wfindfirst64 _wfindfirst64i32 _wfindnext32 _wfindnext32i64 _wfindnext64 _wfindnext64i32 _wfopen _wfopen_s _wfreopen _wfreopen_s _wfsopen _wfullpath _wgetcwd _wgetdcwd _wgetdcwd_nolock _wgetenv _wgetenv_s _wmakepath _wmakepath_s _wmkdir _wmktemp _wmktemp_s _wopen _wperror _wpgmptr _wpopen _wprintf_l _wprintf_p _wprintf_p_l _wprintf_s_l _wputenv _wputenv_s _wremove _wrename _write _wrmdir _wscanf_l _wscanf_s_l _wsearchenv _wsearchenv_s _wsetlocale _wsopen _wsopen_s _wspawnl _wspawnle _wspawnlp _wspawnlpe _wspawnv _wspawnve _wspawnvp _wspawnvpe _wsplitpath _wsplitpath_s _wstat32 _wstat32i64 _wstat64 _wstat64i32 _wstrdate _wstrdate_s _wstrtime _wstrtime_s _wsystem _wtempnam _wtmpnam _wtmpnam_s _wtof _wtof_l _wtoi _wtoi64 _wtoi64_l _wtoi_l _wtol _wtol_l _wunlink _wutime32 _wutime64 _y0 _y1 _yn abort abs acos asctime asctime_s asin atan atan2 atexit atof atoi atol bsearch bsearch_s btowc calloc ceil clearerr clearerr_s clock cos cosh div exit exp fabs fclose feof ferror fflush fgetc fgetpos fgets fgetwc fgetws floor fmod fopen fopen_s fprintf fprintf_s fputc fputs fputwc fputws fread fread_s free freopen freopen_s frexp fscanf fscanf_s fseek fsetpos ftell fwprintf fwprintf_s fwrite fwscanf fwscanf_s getc getchar getenv getenv_s gets gets_s getwc getwchar is_wctype isalnum isalpha iscntrl isdigit isgraph isleadbyte islower isprint ispunct isspace isupper iswalnum iswalpha iswascii iswcntrl iswctype iswdigit iswgraph iswlower iswprint iswpunct iswspace iswupper iswxdigit isxdigit labs ldexp ldiv llabs lldiv localeconv log log10 longjmp malloc mblen mbrlen mbrtowc mbsrtowcs mbsrtowcs_s mbstowcs mbstowcs_s mbtowc memchr memcmp memcpy memcpy_s memmove memmove_s memset modf perror pow printf printf_s putc putchar puts putwc putwchar qsort qsort_s raise rand rand_s realloc remove rename rewind scanf scanf_s setbuf setlocale setvbuf signal sin sinh sprintf sprintf_s sqrt srand sscanf sscanf_s strcat strcat_s strchr strcmp strcoll strcpy strcpy_s strcspn strerror strerror_s strftime strlen strncat strncat_s strncmp strncpy strncpy_s strnlen strpbrk strrchr strspn strstr strtod strtok strtok_s strtol strtoul strxfrm swprintf_s swscanf swscanf_s system tan tanh tmpfile tmpfile_s tmpnam tmpnam_s tolower toupper towlower towupper ungetc ungetwc vfprintf vfprintf_s vfwprintf vfwprintf_s vprintf vprintf_s vsprintf vsprintf_s vswprintf_s vwprintf vwprintf_s wcrtomb wcrtomb_s wcscat wcscat_s wcschr wcscmp wcscoll wcscpy wcscpy_s wcscspn wcsftime wcslen wcsncat wcsncat_s wcsncmp wcsncpy wcsncpy_s wcsnlen wcspbrk wcsrchr wcsrtombs wcsrtombs_s wcsspn wcsstr wcstod wcstok wcstok_s wcstol wcstombs wcstombs_s wcstoul wcsxfrm wctob wctomb wctomb_s wmemcpy_s wmemmove_s wprintf wprintf_s wscanf wscanf_s

$LOCALAPPDATA/Temp/mathtype.tmp/mswdan.dll

SHA256 87098eb09425ecec4b0bf76fea7575fbf93f5cd06bff8662f205c4cc4dd9e28d
MD5 f9101878ea7365dac43eebafb276cf5f
SHA1 e3481601664e17c70f337031ba97606385a640bd
SHA512 c3298e314e9b8212cb2f4997b7dc482efe78b289cec246ec52fd98993f990b4666279673ccc42aa379167f73695b9347f3ad9327e7d7403a69f53ec1b9eb17b6
SSDEEP 192:rKKTymlFmlqFIYiYF8KqwgzqIFuzA5K+o/y2sE9jBF0NyqdG:rKKTym7m8FIYikdxAM+o/8E9VF0Ny4G
TLSH
T1F592075297EC6805F8B79E3036F0552A1E377E56B9B0C29E014C814C4BB2B80BEA47B6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

bb:2e:4c:a0:36:ff:aa:03:8f:de:7e:b8:a3:f1:41:51:b3:fc:3c:e7:57:80:7c:55:74:e1:40:3c:3b:36:83:81:96:49:9d:d4:13:67:31:55:ac:20:a9:49:75:eb:a1:6a

Digest Algorithm

sha384

PE Digests Matches

Trusted

Signing Certificate

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Chains

Feb 21, 2024

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Serial Number

0b:90:6c:f5:46:56:0e:2a:ce:4a:a1:79:e8:ff:36:ee

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2024 - Mar 16, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$LOCALAPPDATA/Temp/mathtype.tmp/mswdeu.dll

SHA256 28acf73b1a6c81f464c2f5532b0327fc0f62dbf28d731aa106774987ba58053c
MD5 8a31ef0883bfa9f5e342a9cb77783fd1
SHA1 ee62155f875d015f93edcb3930c395f319ee11f6
SHA512 0eabc45b8257dca80396692b0fe08509aa70c33d66d240e7aaaa8bf7499fea4afad7b42ba7ae294955a67709176a630c968faa011f2e3c8292e77f39497f83d0
SSDEEP 384:S4AlKRdlKRviIYikd7AM+o/8E9VF0Nyb1bL:S4AlKflKtYi0AMxkEPL
TLSH
T12292F85297EC6805F8B79E307AF0562B5D377D52B9B0C28E025D814C4BB2B807EA47B6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

45:56:a3:0c:5e:7c:f0:a4:e1:8b:55:c8:93:38:5c:0f:28:f9:b1:a4:23:0b:b2:95:ac:1e:08:7f:3c:66:5e:af:05:6f:2c:5e:42:71:a2:7e:c6:03:c0:6a:f4:c7:32:2a

Digest Algorithm

sha384

PE Digests Matches

Trusted

Signing Certificate

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Chains

Feb 21, 2024

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Serial Number

0b:90:6c:f5:46:56:0e:2a:ce:4a:a1:79:e8:ff:36:ee

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2024 - Mar 16, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$LOCALAPPDATA/Temp/mathtype.tmp/mswell.dll

SHA256 c3b8038078a5f38c6b99759b2f3a4f9a123290c94ca88cf8ca647248bf46f923
MD5 c47f6645ffd4cc574122b98079287560
SHA1 659100888f415ffd0f8de8df79b1b5d595b6e211
SHA512 f375cb042f98846516e2de45ee805337a287b84c5fbff5db7f8a560c66c1faea0d65d05d2e1a9e8339cc272fcdcfa6d86d8d04e67519160086cc96c20a197514
SSDEEP 384:JdhsEgZEgKIYikdAEAM+o/8E9VF0Ny2VWIA:JdhsEoEgYi9EAMxkEmu
TLSH
T193920952D7E86D05F8B79E303AF0562A5E377E52BD74C24E025C81484BB2B80BDA4775
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

7f:6f:d5:07:0d:61:86:dd:88:19:f3:1e:97:70:05:02:12:72:d0:2a:15:14:98:49:28:3e:9e:4f:a7:2f:dc:c7:9c:ce:eb:06:2a:87:03:c4:94:7a:ad:7c:05:bd:54:04

Digest Algorithm

sha384

PE Digests Matches

Trusted

Signing Certificate

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Chains

Feb 21, 2024

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Serial Number

0b:90:6c:f5:46:56:0e:2a:ce:4a:a1:79:e8:ff:36:ee

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2024 - Mar 16, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$LOCALAPPDATA/Temp/mathtype.tmp/mswenu.dll

SHA256 707c1a1fb4bd7c1f26807a3cee00199f061cacdfbeb8fb41ea36e25f3f201f4a
MD5 d0f52b0960be19d9bf0bb23e4fb8cb72
SHA1 91c1dd5655fc047e42004c3d67f86a21b9dab14e
SHA512 e291ccf30c373464f1b50e5386aed5003d2960a113ab874b5b8952d6bb24ac1a38888638e81659752d4f9f26ac79a47a1d263f0325e208fe4ac1c54d7d802a60
SSDEEP 192:51YfmCoXfmCGC5IYiYF8Kqwgzq4c1A5K+o/y2sE9jBF0Ny1Wv1z:sfmCWfmCGC5IYikdxAM+o/8E9VF0NyQl
TLSH
T164C2095297EC5C08F8B7AE3035F0552B5D337E56A8B0C19E025D810C4BB2F80BEA47B6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

bc:69:29:dd:4b:a8:f8:70:11:e5:01:17:09:aa:ac:aa:94:f7:66:17:c6:c3:47:81:37:00:bd:2c:9e:1f:b3:d5:42:13:0b:86:97:e7:d0:6f:50:60:b5:3b:01:49:7a:e0

Digest Algorithm

sha384

PE Digests Matches

Trusted

Signing Certificate

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Chains

Feb 21, 2024

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Serial Number

0b:90:6c:f5:46:56:0e:2a:ce:4a:a1:79:e8:ff:36:ee

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2024 - Mar 16, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$LOCALAPPDATA/Temp/mathtype.tmp/mswesp.dll

SHA256 5cf282edb54e807ff90af996c60f49c122cd52f5c76291982f828391a7f51bd6
MD5 cdfd00560d34d74166fc56f265896884
SHA1 257f57e4e4b8e6ea09cd38983b7a834f9f14e864
SHA512 4976c7ed8309895c65d009c83f50d8fd38d4a7e4f9bb00f9649084349c42568d4fcaa48a4bea451f9ef2722e0254c079fb61b0c7e68ac7c3c903d055ad67f036
SSDEEP 384:cUizf9u9qIYikdGAM+o/8E9VF0Ny4/J63:cUizfkFYihAMxkEKA3
TLSH
T17692085297E85C05F8B79E307AF0452B5D377E52B9B0C29F024D814D0BB2B807EA47B6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

ab:81:2e:e5:10:95:4d:c7:36:04:78:87:fb:44:95:c3:54:55:8a:45:2c:13:ff:cd:78:af:c1:01:d3:96:6c:c3:7a:61:86:b7:80:91:e1:7f:74:d7:c3:f3:a3:23:88:af

Digest Algorithm

sha384

PE Digests Matches

Trusted

Signing Certificate

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Chains

Feb 21, 2024

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Serial Number

0b:90:6c:f5:46:56:0e:2a:ce:4a:a1:79:e8:ff:36:ee

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2024 - Mar 16, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$LOCALAPPDATA/Temp/mathtype.tmp/mswfra.dll

SHA256 c8915e12d8da3961195f276739d861af4a75dfb5eb99c50489ea04797131129b
MD5 bd315ea9a7048659a24a907c1723b7c7
SHA1 4fde7b88f4046d0157af877898a618dfce8da59e
SHA512 c0ddf254fdf0307b250575fc07e6025b90093395b8ea82b5023a4a48c161c49cb18d3f7214e6484e307f0cce5787b31eee53a5f5c3909da5d48b9c98129e2e40
SSDEEP 192:gQPQl7Ql4iIYiYF8KqwgzqnQA5K+o/y2sE9jBF0NyCAYO2:gQPQRQnIYikdLQAM+o/8E9VF0NyVYh
TLSH
T1DD92E55297E85C05F9B79F303AF0562B5D377E52BDB0C29E015D81480BB3B80AEA47B6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

4a:17:6c:88:48:df:1f:00:82:5b:91:23:43:92:72:71:46:c0:ae:c5:10:7b:10:bd:79:8e:84:b5:d6:1c:57:75:a9:0a:2e:ea:c9:e4:00:c4:54:cf:af:26:17:d7:12:23

Digest Algorithm

sha384

PE Digests Matches

Trusted

Signing Certificate

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Chains

Feb 21, 2024

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Serial Number

0b:90:6c:f5:46:56:0e:2a:ce:4a:a1:79:e8:ff:36:ee

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2024 - Mar 16, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$LOCALAPPDATA/Temp/mathtype.tmp/mswjpn.dll

SHA256 86635a0e2823471438b227451f2d7e6f8f7cf89514b6fc041167a1375274fa3d
MD5 847e2e8a3c4d63e8dd7ab16c34f2de55
SHA1 841060b77e65b0f043b56b143ca9090a24a2a05a
SHA512 ff8ecc0a7ac000b85477cbf1cbc536e508ac88a81fb62b1851173c5923587f890fe85d7e61755be6e63d1fdffb4daeb94210fac65df30d39f6242847c13d2587
SSDEEP 384:O/m1/iohQKzhOpPwIYikdbeAM+o/8E9VF0Ny4r0:O/mtiohQKlOVZYiNAMxkEo0
TLSH
T183926052A7FD5905F9FBBF706AF4556A0E367DA6BD74C28E0248400D0BB1F80ADA0772
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

4d:55:07:a4:e0:19:9e:dd:ff:b1:45:55:47:15:2c:86:ee:ae:d8:bd:8c:4c:ed:03:f1:6e:96:3d:a2:a2:8b:4f:ff:a6:ed:21:2f:5e:71:7d:42:7f:8f:88:66:21:ae:a1

Digest Algorithm

sha384

PE Digests Matches

Trusted

Signing Certificate

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Chains

Feb 21, 2024

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Serial Number

0b:90:6c:f5:46:56:0e:2a:ce:4a:a1:79:e8:ff:36:ee

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2024 - Mar 16, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$LOCALAPPDATA/Temp/mathtype.tmp/mswsbn.dll

SHA256 62291e2c180b60e22ad4eca2f9b9ce1751a1d26a899ef07148aab423a180c1cb
MD5 0dfe6fb802de5a98e3d4cc4505bd2c76
SHA1 20457e445ab5d94a0dc7d619715eb27e3e1821da
SHA512 b53b8ce23acda0d4932c6315df43993a0b2a3a572f3b9fe8f10534d613d64a23a5fd36390f797a5fdb91322e0d8b12b64e07fbb9b7f174e58e4181f3f8866cbe
SSDEEP 384:bW4u6/6DtIYikdbFWAM+o/8E9VF0Ny9OAhC:C4uQ86YiwWAMxkEy/
TLSH
T1B592F75297E85804F8B79E3076F0556A5D37BE53BDB0C29E025C81484BB2B80AEA47B6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

8e:de:23:e3:45:f2:42:1b:f9:3d:f9:69:5f:5c:17:ea:17:ea:6a:4f:4a:1a:9f:7b:db:84:1c:17:fa:f4:9b:42:70:93:00:a6:f1:33:2f:7a:d0:46:f5:6a:5f:bb:87:5b

Digest Algorithm

sha384

PE Digests Matches

Trusted

Signing Certificate

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Chains

Feb 21, 2024

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Serial Number

0b:90:6c:f5:46:56:0e:2a:ce:4a:a1:79:e8:ff:36:ee

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2024 - Mar 16, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$LOCALAPPDATA/Temp/mathtype.tmp/mswuienu.dll

SHA256 43bed143dfe0a86ea22471ea23c02ccae1f1c9c2f7900df46aa459ba5c576fba
MD5 48ccdf6e444d53e584d2e05c560539b9
SHA1 eda040417fbf03266f3cd1c5550421b5c28273b7
SHA512 b13834aaf738a67a50f3358daf00282dcaa97cdea36f0301fdcb81e289b7608c87f124b0960616b713c1c57835959199a3621a1b9b92dc6010db8f307e789141
SSDEEP 768:MYyY4pu3W0S6HYSAJTJvO6uqhLwbe+a1riPVeUdzQqAW165U1k7nYG17e6amY4Y/:jpXz4SANJvO6ZiPVN65tyHmY47wyxS
TLSH
T11E63215267FD9608F6F77F35AAB965264E37BDAAAC38D25D1200401E4A31E40DDB0B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

c8:42:63:27:56:59:d5:5c:eb:f8:e2:c5:9f:a8:c2:58:e0:02:ce:65:c8:cc:2a:3c:35:e3:41:d4:cf:b5:0f:39:4c:88:34:7f:e7:31:23:bb:9c:e7:d1:06:c5:67:93:f4

Digest Algorithm

sha384

PE Digests Matches

Trusted

Signing Certificate

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Chains

Feb 21, 2024

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Serial Number

0b:90:6c:f5:46:56:0e:2a:ce:4a:a1:79:e8:ff:36:ee

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2024 - Mar 16, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

4

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$LOCALAPPDATA/Temp/mathtype.tmp/mt6enu.chm

SHA256 92b617f5ae2a279eccb0063353441d4a09472e216cc07d8b5fcf18b61c4a206d
MD5 729184ccda72be04b2a94d359a9399fa
SHA1 2b08f85538d3fe2112a4f4f1bdca53c1a39e924a
SHA512 b7a16976f7242cb9db1d3c5a2d53c2455e343094d6c475a3f21ba9ebaadecad763f207b270e565c9c30bd1a58b7106f7f59ce023a0c913386b0530dad537129a
SSDEEP 24576:n6gfQoljkl5821f5b0/KV2dE+okcFyAJqMSPdsAWum7:hZlolS21fp0m2dE+okcgAfS1s+i
TLSH
T1063523B8676B7C00F972ACF760271300D6141DBED421BDD52E2D89B47B2C782BA9F916
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/mt6x64.dll

IMPHASH afa7ac1b9e2bb6197034386f523ac3d2
SHA256 c2ab0597bebe913eec780ec3298bc8c964fb2faf4c828875cdd9ae8cbc1b79a4
MD5 599b4511cdafc28faf6b8240e110b78f
SHA1 6ec41156186cdaaf702915568aaa0b8af3f3f6ad
SHA512 2b1415bde868e60c44110d0a0dacdef9ee9461a8557ebb9eb2be6eb422e61940fc36133c5f054b5d8fbe5542beb7c0dd8572863d8699f283498fbf8ca74aa5f2
SSDEEP 6144:+HG51EUmYlxyqOn+pgDEdMdkvbvgKz6qJbBabncH2cJdW/l:bEU9yqOnMgDEUkz374EJdE
TLSH
T1B7354821A6AC0864DD52873B8753C5CDA6BE6DC036F4CEBAD260775A1F73B931D38620
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

b1:ba:63:cc:b1:95:0c:57:3d:d9:bc:ac:2b:2e:e5:4c:9d:8a:80:8f:dc:6e:40:06:7c:e2:8d:e4:19:f8:70:56:82:70:97:d6:0d:33:3d:1b:c7:6d:ef:c0:34:24:7c:1a

Digest Algorithm

sha384

PE Digests Matches

Trusted

Signing Certificate

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Chains

Feb 21, 2024

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Serial Number

0b:90:6c:f5:46:56:0e:2a:ce:4a:a1:79:e8:ff:36:ee

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2024 - Mar 16, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

79100

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\User\Documents\GitHub\mathtype.desktop.win.legacy\mathtype-win\MTAPI\out64\Optimize\MTAPI DLL.pdb

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

comdlg32

GetOpenFileNameA

advapi32

RegOpenKeyExA RegCloseKey RegQueryValueExA

gdi32

SetMetaFileBitsEx GetStockObject SetTextColor SetBkMode BitBlt GetObjectA DPtoLP DeleteObject SelectObject GetDeviceCaps CreateFontIndirectA EnumMetaFile CreateCompatibleDC DeleteDC

kernel32

HeapSize WriteConsoleW MulDiv GetModuleFileNameA GlobalLock GlobalUnlock GetVersionExA DisableThreadLibraryCalls GetProcAddress FreeLibrary CreateFileA GetLastError CloseHandle ReadFile SetEndOfFile GetFileSize FindFirstFileA FindClose GetCPInfo GlobalSize GlobalFree GlobalAlloc GlobalReAlloc lstrlenA lstrcpyA lstrcmpiA CreateProcessA MultiByteToWideChar WideCharToMultiByte GetEnvironmentVariableA WinExec IsValidCodePage GetStringTypeW GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetTimeZoneInformation HeapReAlloc FlushFileBuffers SetFilePointerEx GetFileSizeEx GetConsoleOutputCP WriteFile ReadConsoleW GetConsoleMode GetStdHandle GetCurrentDirectoryW LCMapStringW GetACP CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapAlloc HeapFree GetModuleFileNameW GetModuleHandleExW ExitProcess SetStdHandle FindNextFileW FindFirstFileExW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime PeekNamedPipe GetFileType GetFileInformationByHandle CreateFileW GetFullPathNameW GetDriveTypeW LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetOEMCP RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection

ole32

ProgIDFromCLSID CoGetMalloc ReleaseStgMedium StgCreateDocfileOnILockBytes GetHGlobalFromILockBytes OleGetClipboard CreateILockBytesOnHGlobal

shell32

ShellExecuteA

user32

DefWindowProcA FindWindowExA UnregisterClassA CreateWindowExA RegisterClassA WaitForInputIdle SendMessageTimeoutA LoadStringA LoadBitmapA IsClipboardFormatAvailable GetClipboardFormatNameA EnumClipboardFormats SetClipboardData RegisterClipboardFormatA EmptyClipboard SetDlgItemTextA SetWindowTextA SetWindowLongPtrA DialogBoxParamA GetForegroundWindow GetClassNameA GetClipboardData OpenClipboard MonitorFromWindow GetMonitorInfoA SendMessageA SetWindowPos GetClientRect MoveWindow MapWindowPoints GetWindowRect GetDlgItem OffsetRect DrawTextA SetRect EndDialog DestroyWindow ShowWindow GetClipboardOwner CloseClipboard MessageBoxIndirectA MonitorFromRect

Name

.text

Size

182KB

Virtual Size

181KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

83KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

55KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gxfg

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

736KB

Virtual Size

736KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$LOCALAPPDATA/Temp/mathtype.tmp/mt6x86.dll

IMPHASH 904dcd3ad7b391819ac9db166efa4331
SHA256 6eb56580ff7d9b53b2df2682b242054cee48a5970eee0eaa324823c21f57900b
MD5 0e75f1dcf005f60314fef1a6b4e1e2c0
SHA1 16647d404ff825af770a1230ad1b1c7d52762c23
SHA512 8edc3e5ea49129d8314d64bcec66ffc5bedc04b0534f4367acea8d6f9dd8a5fc1cb19cf9387658ffb544900defdf19bfe2b40c3036dc58a7474f2ce5efd3bb6e
SSDEEP 6144:0M72cJziWXxTQAxq0fg0tIgKD6apbizB5dWux87WG2mI:ecJziWBTQz4d/87WG2mI
TLSH
T16325C160648C9520CD9E2733176BCAED452DADD437F49CFBE2A07BAA0B706D35E34426
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

df:54:d8:be:91:be:07:71:11:1c:93:01:20:d0:7f:96:69:cc:70:8a:c8:38:5b:70:2a:89:4a:26:76:7b:ee:9a:a8:74:72:97:fd:89:a6:30:1f:52:55:91:c0:ff:fb:02

Digest Algorithm

sha384

PE Digests Matches

Trusted

Signing Certificate

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Chains

Feb 21, 2024

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=MATHS FOR MORE SL,O=MATHS FOR MORE SL,L=Barcelona,ST=Barcelona,C=ES

Serial Number

0b:90:6c:f5:46:56:0e:2a:ce:4a:a1:79:e8:ff:36:ee

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 24, 2024 - Mar 16, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

52681

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\User\Documents\GitHub\mathtype.desktop.win.legacy\mathtype-win\MTAPI\out32\Optimize\MTAPI DLL.pdb

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

comdlg32

GetOpenFileNameA

advapi32

RegOpenKeyExA RegCloseKey RegQueryValueExA

gdi32

SetMetaFileBitsEx GetStockObject SetTextColor SetBkMode BitBlt GetObjectA DPtoLP DeleteObject SelectObject GetDeviceCaps CreateFontIndirectA EnumMetaFile CreateCompatibleDC DeleteDC

kernel32

HeapSize WriteConsoleW DecodePointer MulDiv GetModuleFileNameA GlobalLock GlobalUnlock GetVersionExA DisableThreadLibraryCalls GetProcAddress FreeLibrary CreateFileA GetLastError CloseHandle ReadFile SetEndOfFile GetFileSize FindFirstFileA FindClose GetCPInfo GlobalSize GlobalFree GlobalAlloc GlobalReAlloc lstrlenA lstrcpyA lstrcmpiA CreateProcessA MultiByteToWideChar WideCharToMultiByte GetEnvironmentVariableA WinExec IsValidCodePage GetStringTypeW GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetTimeZoneInformation HeapReAlloc FlushFileBuffers SetFilePointerEx GetFileSizeEx GetConsoleOutputCP WriteFile ReadConsoleW GetConsoleMode GetStdHandle GetCurrentDirectoryW GetACP LCMapStringW CompareStringW HeapAlloc HeapFree GetModuleFileNameW GetModuleHandleExW ExitProcess SetStdHandle FindNextFileW FindFirstFileExW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime PeekNamedPipe GetFileType GetFileInformationByHandle CreateFileW GetFullPathNameW GetDriveTypeW LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer SetLastError GetOEMCP UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwind RaiseException InterlockedFlushSList

ole32

ProgIDFromCLSID CoGetMalloc ReleaseStgMedium StgCreateDocfileOnILockBytes GetHGlobalFromILockBytes OleGetClipboard CreateILockBytesOnHGlobal

shell32

ShellExecuteA

user32

DefWindowProcA FindWindowExA UnregisterClassA CreateWindowExA RegisterClassA WaitForInputIdle SendMessageTimeoutA LoadStringA LoadBitmapA IsClipboardFormatAvailable GetClipboardFormatNameA EnumClipboardFormats SetClipboardData RegisterClipboardFormatA EmptyClipboard SetDlgItemTextA SetWindowTextA SetWindowLongA DialogBoxParamA GetForegroundWindow GetClassNameA GetClipboardData OpenClipboard MonitorFromRect MonitorFromWindow GetMonitorInfoA SendMessageA SetWindowPos GetClientRect MoveWindow MapWindowPoints GetWindowRect GetDlgItem OffsetRect DrawTextA SetRect EndDialog DestroyWindow ShowWindow GetClipboardOwner CloseClipboard MessageBoxIndirectA

$LOCALAPPDATA/Temp/mathtype.tmp/mt7.dsc

SHA256 36c8ccff20fa290a1894948b0b65388d0a6efc57aef9264159461707e7cc9fbc
MD5 b61c90560c5a21aaf6ddf63c565add81
SHA1 ef37ba6220d8ffb216576977bcf941df81ebaee0
SHA512 f759ab44260d6ad266274c44e0f5df3d08499ae962eced681611009dc6e1301553221a52b8e41c1ae57cccc30677f507eb1d60af0abb6b85cf2e9b939aa4bc08
TLSH
T12F41AE7047DFAB930AE84623A336F61653F1107810D01EAE0DF973160B7EB6A366E571
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/mtexe.ico

SHA256 7e94cda9f3bb880b10abbed7bc48dcd5ea0d783304a7afaa6f7d8eeffeccbab6
MD5 c03ceefa8aaa912d99b89a2c8a5771d7
SHA1 63ac2273d6c6363046743fb9d59eea173a5c2b05
SHA512 8fa27f3b5b08094bb12301e87cb39b682117b8bd251cfc6774e6f1d9b4dddd503854424d61a8e9ea31936779b76991752e88bcb55e51eb24e5c645d549a84d72
SSDEEP 768:gQCbiI86cNd0oQ2daID7WzFBMlPpu1pkCQ4xPI/Pn82:tXI8lz0oQ2l7Wz8ru1qCQhH82
TLSH
T1E8C3C2BBF56A8119C4DA2BF08858B91F8C484F45FF4D131A3355F78E29BD15AE4C12E2
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/mtextra.afm

SHA256 1b36690c05af0529da8be217a5a4306b83004cd89a20544f42be2eaedad722ec
MD5 7bcfc1d63d2f617a8a8b4c8e0606cbe8
SHA1 de5bbce0fbe79bb818a2fa85040bfb1289bac41b
SHA512 e8be732afa0754a7b2e7a862771deebae9af2f0010eed7c754bc19d411b5db27db094fdca30100a53a529662e0dd8c619b1f05b6ad45df0af1cbca6c3a673d0a
SSDEEP 192:gD5OPhzE0ZMgBXfU47BccKNTqJMLmvPO4eni2RbKioMN7T9U9LiCwvTumd5SthK:PPhzEmMgZKcKN2/vPO/i2RbKioMN7T9D
TLSH
T1A302860C79C4C88EDDB8438EC4D7679042CDF76B00F738AA36AE79550E57E09E587A19
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/mtextra.pfb

SHA256 a212eb7882edd6453b9a5054c365b7f3c8059200631043251e2e0632aae7d755
MD5 2e8e01c9ed310d89237cbfe4f6aa39c7
SHA1 047094daed61c87c680f56cbcb0cdf70277af11b
SHA512 5360cf9aa181d2acfd4d98d5d0064e094127bc6430c2e2ad7f80f7d064e1718c27246046b54245bd57c2acb80c991a05134cf088b766e28d445c6f4de2a0b91a
SSDEEP 384:FxB1PBCsNFfvkx7wt/SUanNmaL0u+lSt7/poXDj+nZdqYQXyrTRheA/VgxfxRUxM:F/1PBCsNU9F7/poX+vZieTRh7OfMxIX5
TLSH
T169B2BF95EAD79966E17771E3C6C07332502BF32626E7ADC7F3828C461C84941A0F5E8B
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/mtextra.pfm

SHA256 3d799232c4edb07f7f924fdca4c3c03aa180167fe5dcbb7be2f5154b75e19a76
MD5 ceb57099c683c6a271e7a3946cffb985
SHA1 8722e613a49513725f5fcf69ed73a9e89488968b
SHA512 404e58eaf0c2e010eb56bcd7d101517324bdede528a6470a89bdc1c39080b35717d2a4da7551809c86f296baf8ba3a995cb269361d0cdf24ffb4945bbf120256
TLSH
T150014C70DDA33766D0A51E73A14456342CD852CB545FA122ED44CF718A513817FC075C
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/mtextra.ttf

SHA256 e117624aacdf36dadbfdfaa6ce0b67e697c8d0fad927c554042404027f25415e
MD5 fe5c714162bf1b9c936b2bc5e66da03e
SHA1 15a623d87dcaf61476a6b7b89dfbd30eef712fc6
SHA512 aa3ee2a4575b1dfcda0ae8d49cacca6c4ee23d111f44c810d8d45fa2dcf3d27c6a7d9349ef271523400268a2ca60b9e6b37b2c9cbd8aa4bd55a74ce088ce2bd5
SSDEEP 384:F7mcUK6fnfM3lag0WG2XrWL7EdpJqEEFWqHPEA1lQ+I3G/s/w8i6W4hMqKHEkjip:InfM1/G2jJkFWoX1lQ+x048i6Ww
TLSH
T1A9C24C16B7C2FF0EE2E67A35922092365A6AF5614A77D7D93CC38C1A44816D08D28F1F
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/net.dll

IMPHASH c01801e1c452a82b268f42cf3f7f44b0
SHA256 1ee4666c4aa9f46b266ab170392ebae055d8e5e746b73f68fc4bf6e0a77b36f6
MD5 48a187b32b9a38d5748f214e1c6a8cfc
SHA1 3ebb1ffdccc1d5872799e973f459b81cd2f13d13
SHA512 870d2cdf8ddbecd111c1e305016c96afd3d42d86e967784e26a2407245e82350d060483cf5f929e0b4b999842cd3cc38f60d96a0bccdb503e5e19e6e75b38400
SSDEEP 1536:9f0kK4lVdoZCHGtVx8iKKOxB2eRFXz3K+9aXoS2B3SH:9ckjjmnx8iOGoS2BC
TLSH
T1BD736C127160D493F9B13835358857A66E5EB230FCE42EDF0713C9A219FFAA16E17E42
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

50036

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libnet\net.pdb

ws2_32

htons recvfrom select WSAIoctl closesocket setsockopt socket WSASetLastError connect ntohs getsockname sendto ioctlsocket __WSAFDIsSet WSASendDisconnect WSAStartup WSACleanup getprotobyname recv getnameinfo getaddrinfo freeaddrinfo bind WSACreateEvent WSAEventSelect WSAGetLastError WSACloseEvent getsockopt htonl gethostbyaddr ntohl gethostbyname gethostname send accept listen shutdown

jvm

jio_snprintf _JVM_InitializeSocketLibrary@0 _JVM_CurrentTimeMillis@8

java

_JNU_NewStringPlatform@8 _JNU_ThrowByNameWithMessageAndLastError@12 getErrorString _JNU_ThrowNullPointerException@8 _JNU_ThrowOutOfMemoryError@8 _JNU_ThrowByName@12 _JNU_ThrowByNameWithLastError@12 _JNU_ReleaseStringPlatformChars@12 _JNU_GetStringPlatformChars@12

advapi32

RegOpenKeyExA RegQueryValueExA RegCloseKey

msvcr100

_unlock __clean_type_info_names_internal _crt_debugger_hook __CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null _malloc_crt strcat wcscpy _snprintf_s strncpy_s _lock _onexit _except_handler4_common __dllonexit __iob_func fprintf sscanf strchr strstr sprintf strcmp strncmp strtok strlen memset free malloc strcpy isspace memcpy _errno realloc wcslen strncpy calloc

kernel32

GetTickCount QueryPerformanceCounter IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess InterlockedCompareExchange DecodePointer EncodePointer RaiseException LoadLibraryA GetLastError InterlockedExchange GetCurrentThreadId GetProcAddress LocalAlloc InitializeCriticalSection EnterCriticalSection GetVersionExA LeaveCriticalSection GetOverlappedResult MultiByteToWideChar FormatMessageA LocalFree VerSetConditionMask VerifyVersionInfoW Sleep SetHandleInformation GetCurrentProcessId GetSystemTimeAsFileTime FreeLibrary

_JNI_OnLoad@8 _Java_java_net_DatagramPacket_init@8 _Java_java_net_DualStackPlainDatagramSocketImpl_dataAvailable@8 _Java_java_net_DualStackPlainDatagramSocketImpl_initIDs@8 _Java_java_net_DualStackPlainDatagramSocketImpl_socketBind@24 _Java_java_net_DualStackPlainDatagramSocketImpl_socketClose@12 _Java_java_net_DualStackPlainDatagramSocketImpl_socketConnect@20 _Java_java_net_DualStackPlainDatagramSocketImpl_socketCreate@12 _Java_java_net_DualStackPlainDatagramSocketImpl_socketDisconnect@12 _Java_java_net_DualStackPlainDatagramSocketImpl_socketGetIntOption@16 _Java_java_net_DualStackPlainDatagramSocketImpl_socketLocalAddress@12 _Java_java_net_DualStackPlainDatagramSocketImpl_socketLocalPort@12 _Java_java_net_DualStackPlainDatagramSocketImpl_socketReceiveOrPeekData@28 _Java_java_net_DualStackPlainDatagramSocketImpl_socketSend@36 _Java_java_net_DualStackPlainDatagramSocketImpl_socketSetIntOption@20 _Java_java_net_DualStackPlainSocketImpl_accept0@16 _Java_java_net_DualStackPlainSocketImpl_available0@12 _Java_java_net_DualStackPlainSocketImpl_bind0@24 _Java_java_net_DualStackPlainSocketImpl_close0@12 _Java_java_net_DualStackPlainSocketImpl_configureBlocking@16 _Java_java_net_DualStackPlainSocketImpl_connect0@20 _Java_java_net_DualStackPlainSocketImpl_getIntOption@16 _Java_java_net_DualStackPlainSocketImpl_initIDs@8 _Java_java_net_DualStackPlainSocketImpl_listen0@16 _Java_java_net_DualStackPlainSocketImpl_localAddress@16 _Java_java_net_DualStackPlainSocketImpl_localPort0@12 _Java_java_net_DualStackPlainSocketImpl_sendOOB@16 _Java_java_net_DualStackPlainSocketImpl_setIntOption@20 _Java_java_net_DualStackPlainSocketImpl_shutdown0@16 _Java_java_net_DualStackPlainSocketImpl_socket0@16 _Java_java_net_DualStackPlainSocketImpl_waitForConnect@16 _Java_java_net_DualStackPlainSocketImpl_waitForNewConnection@16 _Java_java_net_Inet4AddressImpl_getHostByAddr@12 _Java_java_net_Inet4AddressImpl_getLocalHostName@8 _Java_java_net_Inet4AddressImpl_isReachable0@24 _Java_java_net_Inet4AddressImpl_lookupAllHostAddr@12 _Java_java_net_Inet4Address_init@8 _Java_java_net_Inet6AddressImpl_getHostByAddr@12 _Java_java_net_Inet6AddressImpl_getLocalHostName@8 _Java_java_net_Inet6AddressImpl_isReachable0@32 _Java_java_net_Inet6AddressImpl_lookupAllHostAddr@12 _Java_java_net_Inet6Address_init@8 _Java_java_net_InetAddressImplFactory_isIPv6Supported@8 _Java_java_net_InetAddress_init@8 _Java_java_net_NetworkInterface_getAll@8 _Java_java_net_NetworkInterface_getAll_XP@8 _Java_java_net_NetworkInterface_getByIndex0@12 _Java_java_net_NetworkInterface_getByIndex0_XP@12 _Java_java_net_NetworkInterface_getByInetAddress0@12 _Java_java_net_NetworkInterface_getByInetAddress0_XP@12 _Java_java_net_NetworkInterface_getByName0@12 _Java_java_net_NetworkInterface_getByName0_XP@12 _Java_java_net_NetworkInterface_getMTU0@16 _Java_java_net_NetworkInterface_getMTU0_XP@16 _Java_java_net_NetworkInterface_getMacAddr0@20 _Java_java_net_NetworkInterface_getMacAddr0_XP@16 _Java_java_net_NetworkInterface_init@8 _Java_java_net_NetworkInterface_isLoopback0@16 _Java_java_net_NetworkInterface_isLoopback0_XP@16 _Java_java_net_NetworkInterface_isP2P0@16 _Java_java_net_NetworkInterface_isP2P0_XP@16 _Java_java_net_NetworkInterface_isUp0@16 _Java_java_net_NetworkInterface_isUp0_XP@16 _Java_java_net_NetworkInterface_supportsMulticast0@16 _Java_java_net_NetworkInterface_supportsMulticast0_XP@16 _Java_java_net_SocketInputStream_init@8 _Java_java_net_SocketInputStream_socketRead0@28 _Java_java_net_SocketOutputStream_init@8 _Java_java_net_SocketOutputStream_socketWrite0@24 _Java_java_net_TwoStacksPlainDatagramSocketImpl_bind0@20 _Java_java_net_TwoStacksPlainDatagramSocketImpl_connect0@16 _Java_java_net_TwoStacksPlainDatagramSocketImpl_dataAvailable@8 _Java_java_net_TwoStacksPlainDatagramSocketImpl_datagramSocketClose@8 _Java_java_net_TwoStacksPlainDatagramSocketImpl_datagramSocketCreate@8 _Java_java_net_TwoStacksPlainDatagramSocketImpl_disconnect0@12 _Java_java_net_TwoStacksPlainDatagramSocketImpl_getTTL@8 _Java_java_net_TwoStacksPlainDatagramSocketImpl_getTimeToLive@8 _Java_java_net_TwoStacksPlainDatagramSocketImpl_init@8 _Java_java_net_TwoStacksPlainDatagramSocketImpl_join@16 _Java_java_net_TwoStacksPlainDatagramSocketImpl_leave@16 _Java_java_net_TwoStacksPlainDatagramSocketImpl_peek@12 _Java_java_net_TwoStacksPlainDatagramSocketImpl_peekData@12 _Java_java_net_TwoStacksPlainDatagramSocketImpl_receive0@12 _Java_java_net_TwoStacksPlainDatagramSocketImpl_send@12 _Java_java_net_TwoStacksPlainDatagramSocketImpl_setTTL@12 _Java_java_net_TwoStacksPlainDatagramSocketImpl_setTimeToLive@12 _Java_java_net_TwoStacksPlainDatagramSocketImpl_socketGetOption@12 _Java_java_net_TwoStacksPlainDatagramSocketImpl_socketLocalAddress@12 _Java_java_net_TwoStacksPlainDatagramSocketImpl_socketNativeSetOption@16 _Java_java_net_TwoStacksPlainSocketImpl_initProto@8 _Java_java_net_TwoStacksPlainSocketImpl_socketAccept@12 _Java_java_net_TwoStacksPlainSocketImpl_socketAvailable@8 _Java_java_net_TwoStacksPlainSocketImpl_socketBind@20 _Java_java_net_TwoStacksPlainSocketImpl_socketClose0@12 _Java_java_net_TwoStacksPlainSocketImpl_socketConnect@20 _Java_java_net_TwoStacksPlainSocketImpl_socketCreate@12 _Java_java_net_TwoStacksPlainSocketImpl_socketGetOption@16 _Java_java_net_TwoStacksPlainSocketImpl_socketListen@12 _Java_java_net_TwoStacksPlainSocketImpl_socketNativeSetOption@20 _Java_java_net_TwoStacksPlainSocketImpl_socketSendUrgentData@12 _Java_java_net_TwoStacksPlainSocketImpl_socketShutdown@12 _Java_sun_net_ExtendedOptionsImpl_flowSupported@8 _Java_sun_net_ExtendedOptionsImpl_getFlowOption@16 _Java_sun_net_ExtendedOptionsImpl_init@8 _Java_sun_net_ExtendedOptionsImpl_setFlowOption@16 _Java_sun_net_PortConfig_getLower0@8 _Java_sun_net_PortConfig_getUpper0@8 _Java_sun_net_dns_ResolverConfigurationImpl_init0@8 _Java_sun_net_dns_ResolverConfigurationImpl_loadDNSconfig0@8 _Java_sun_net_dns_ResolverConfigurationImpl_notifyAddrChange0@8 _Java_sun_net_spi_DefaultProxySelector_getSystemProxy@16 _Java_sun_net_spi_DefaultProxySelector_init@8 _Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_getCredentialsHandle@20 _Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_getNextToken@24 _Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_initFirst@12 _NET_Bind@12 _NET_BindV6@8 _NET_EnableFastTcpLoopback@4 _NET_GetPortFromSockaddr@4 _NET_GetSockOpt@20 _NET_InetAddressToSockaddr@24 _NET_MapSocketOption@12 _NET_MapSocketOptionV6@12 _NET_SetSockOpt@20 _NET_SockaddrEqualsInetAddress@12 _NET_SockaddrToInetAddress@12 _NET_SocketClose@4 _NET_ThrowNew@12 _NET_Timeout2@16 _NET_Timeout@8 _NET_WinBind@16 _ipv6_available@0

$LOCALAPPDATA/Temp/mathtype.tmp/net.properties

SHA256 a010f419059b254d78bbf86062490fa24b2a14faa7b373731f1d87982a2ba75d
MD5 8eb51b79f1accfae2eaf1f401c3ca988
SHA1 df9496847c8a2f8a978bae081182f7ca673c6f1e
SHA512 fa163980730cd25219c47a944599ee8c7c31166e4434caad6fa5dbef11295de9aacf1b3c651f4944bc9691a00ca31164a50873b7accfb209f302c6f001fde1a2
SSDEEP 96:VBnvisPMQ6z+zPVzv0zVfv3C3hoXKTX9SFqs:V1HPMRz+zPVzv0zVfPar9SP
TLSH
T1C79122C2FF466339437DC291926DF7E9E36CD06D4C33B0B861BC910D062AE66962F4A1
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/nio.dll

IMPHASH eb564a18854f63e47ba16b3957600ce5
SHA256 ab07ebd6f78e02e7a0059da3309fd52d2cc0960d478fb4b8dfbbd93c309a47e7
MD5 21ae244a5275320959cb1ddc2a6850a1
SHA1 5d479951d8a49d0428445dab434ce77f652cb53d
SHA512 b1f5c6327daee6a4d5c23199824fe287993248c5616ff8050eb0f7e1ccc3d81c0e5ef1244aef1e7a8f99b09cd7fa9b853eed46d019384c5b89674919caf26fbc
SSDEEP 768:7Kcsdtyl/Bt33ZrCxSt8p9MVfDjYLU3GIaIBM0KpWxuKxmD8YpwQ+wT5v8qUC:7KcsdtylDoGfXBWIXM0KUQ8YdT5UqUC
TLSH
T16513F8724260C8B7E6F17235366E268C7316E81054203B1B57525B629CAEDB77A3FBC2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

24377

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libnio\nio.pdb

ws2_32

recvfrom select WSAIoctl connect sendto WSARecv WSASend ioctlsocket WSAEventSelect setsockopt socket listen getsockopt getsockname getpeername htonl ntohl shutdown recv closesocket WSASendDisconnect send accept __WSAFDIsSet WSAGetLastError

java

_JNU_ThrowByName@12 _JNU_ThrowIOExceptionWithLastError@8 _Java_sun_security_provider_NativeSeedGenerator_nativeGenerateSeed@12 JNU_NewObjectByName _JNU_ThrowInternalError@8 _JNU_ThrowOutOfMemoryError@8

net

_NET_GetPortFromSockaddr@4 _NET_SockaddrToInetAddress@12 _NET_InetAddressToSockaddr@24 _ipv6_available@0 _NET_EnableFastTcpLoopback@4 _NET_ThrowNew@12 _NET_WinBind@16 _NET_GetSockOpt@20 _NET_SetSockOpt@20 _NET_SockaddrEqualsInetAddress@12

advapi32

GetLengthSid LookupPrivilegeValueW MapGenericMask AccessCheck AdjustTokenPrivileges GetTokenInformation SetThreadToken DuplicateTokenEx OpenThreadToken OpenProcessToken ConvertStringSidToSidW ConvertSidToStringSidW LookupAccountNameW LookupAccountSidW AddAccessDeniedAceEx AddAccessAllowedAceEx GetAce GetAclInformation SetSecurityDescriptorDacl GetSecurityDescriptorDacl SetSecurityDescriptorOwner GetSecurityDescriptorOwner GetFileSecurityW SetFileSecurityW InitializeAcl InitializeSecurityDescriptor RegOpenKeyExW RegQueryValueExW RegCloseKey

msvcr100

_onexit _lock __dllonexit _unlock __clean_type_info_names_internal _crt_debugger_hook __CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null _malloc_crt _errno wcslen _get_osfhandle malloc free memset _except_handler4_common

mswsock

TransmitFile

kernel32

SetFileAttributesW GetFileAttributesW GetLogicalDrives MoveFileExW CopyFileExW FindClose FindNextFileW GetFileAttributesExW RemoveDirectoryW CreateDirectoryW DeleteFileW DeviceIoControl LocalFree CreateEventW SetFileTime GetVolumeInformationW GetDriveTypeW GetDiskFreeSpaceExW GetVolumePathNameW GetCurrentThread LocalAlloc CreateHardLinkW GetFullPathNameW CancelIo GetOverlappedResult ReadDirectoryChangesW BackupRead BackupSeek EncodePointer DecodePointer InterlockedExchange InterlockedCompareExchange TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DisableThreadLibraryCalls QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime FindFirstFileW Sleep SetHandleInformation FlushViewOfFile FormatMessageW PostQueuedCompletionStatus GetQueuedCompletionStatus CreateIoCompletionPort GetVersionExA GetFileInformationByHandle GetCurrentProcess DuplicateHandle UnlockFileEx LockFileEx GetFileSize SetEndOfFile FlushFileBuffers WriteFile ReadFile SetFilePointer UnmapViewOfFile CreateFileW GetModuleHandleExW GetSystemInfo CloseHandle GetLastError MapViewOfFile CreateFileMappingA GetProcAddress

_Java_java_nio_MappedByteBuffer_force0@28 _Java_java_nio_MappedByteBuffer_isLoaded0@28 _Java_java_nio_MappedByteBuffer_load0@24 _Java_sun_nio_ch_DatagramChannelImpl_disconnect0@16 _Java_sun_nio_ch_DatagramChannelImpl_initIDs@8 _Java_sun_nio_ch_DatagramChannelImpl_receive0@28 _Java_sun_nio_ch_DatagramChannelImpl_send0@36 _Java_sun_nio_ch_DatagramDispatcher_read0@24 _Java_sun_nio_ch_DatagramDispatcher_readv0@24 _Java_sun_nio_ch_DatagramDispatcher_write0@24 _Java_sun_nio_ch_DatagramDispatcher_writev0@24 _Java_sun_nio_ch_FileChannelImpl_close0@12 _Java_sun_nio_ch_FileChannelImpl_initIDs@8 _Java_sun_nio_ch_FileChannelImpl_map0@28 _Java_sun_nio_ch_FileChannelImpl_position0@20 _Java_sun_nio_ch_FileChannelImpl_transferTo0@32 _Java_sun_nio_ch_FileChannelImpl_unmap0@24 _Java_sun_nio_ch_FileDispatcherImpl_close0@12 _Java_sun_nio_ch_FileDispatcherImpl_closeByHandle@16 _Java_sun_nio_ch_FileDispatcherImpl_duplicateHandle@16 _Java_sun_nio_ch_FileDispatcherImpl_force0@16 _Java_sun_nio_ch_FileDispatcherImpl_lock0@36 _Java_sun_nio_ch_FileDispatcherImpl_pread0@32 _Java_sun_nio_ch_FileDispatcherImpl_pwrite0@32 _Java_sun_nio_ch_FileDispatcherImpl_read0@24 _Java_sun_nio_ch_FileDispatcherImpl_readv0@24 _Java_sun_nio_ch_FileDispatcherImpl_release0@28 _Java_sun_nio_ch_FileDispatcherImpl_size0@12 _Java_sun_nio_ch_FileDispatcherImpl_truncate0@20 _Java_sun_nio_ch_FileDispatcherImpl_write0@28 _Java_sun_nio_ch_FileDispatcherImpl_writev0@28 _Java_sun_nio_ch_FileKey_init@12 _Java_sun_nio_ch_FileKey_initIDs@8 _Java_sun_nio_ch_IOUtil_configureBlocking@16 _Java_sun_nio_ch_IOUtil_drain@12 _Java_sun_nio_ch_IOUtil_fdVal@12 _Java_sun_nio_ch_IOUtil_initIDs@8 _Java_sun_nio_ch_IOUtil_iovMax@8 _Java_sun_nio_ch_IOUtil_randomBytes@12 _Java_sun_nio_ch_IOUtil_setfdVal@16 _Java_sun_nio_ch_Iocp_close0@16 _Java_sun_nio_ch_Iocp_createIoCompletionPort@32 _Java_sun_nio_ch_Iocp_getErrorMessage@12 _Java_sun_nio_ch_Iocp_getQueuedCompletionStatus@20 _Java_sun_nio_ch_Iocp_initIDs@8 _Java_sun_nio_ch_Iocp_osMajorVersion@8 _Java_sun_nio_ch_Iocp_postQueuedCompletionStatus@20 _Java_sun_nio_ch_Net_bind0@28 _Java_sun_nio_ch_Net_blockOrUnblock4@28 _Java_sun_nio_ch_Net_blockOrUnblock6@28 _Java_sun_nio_ch_Net_canIPv6SocketJoinIPv4Group0@8 _Java_sun_nio_ch_Net_canJoin6WithIPv4Group0@8 _Java_sun_nio_ch_Net_connect0@24 _Java_sun_nio_ch_Net_getIntOption0@24 _Java_sun_nio_ch_Net_getInterface4@12 _Java_sun_nio_ch_Net_getInterface6@12 _Java_sun_nio_ch_Net_initIDs@8 _Java_sun_nio_ch_Net_isExclusiveBindAvailable@8 _Java_sun_nio_ch_Net_isIPv6Available0@8 _Java_sun_nio_ch_Net_joinOrDrop4@28 _Java_sun_nio_ch_Net_joinOrDrop6@28 _Java_sun_nio_ch_Net_listen@16 _Java_sun_nio_ch_Net_localInetAddress@12 _Java_sun_nio_ch_Net_localPort@12 _Java_sun_nio_ch_Net_poll@24 _Java_sun_nio_ch_Net_pollconnValue@8 _Java_sun_nio_ch_Net_pollerrValue@8 _Java_sun_nio_ch_Net_pollhupValue@8 _Java_sun_nio_ch_Net_pollinValue@8 _Java_sun_nio_ch_Net_pollnvalValue@8 _Java_sun_nio_ch_Net_polloutValue@8 _Java_sun_nio_ch_Net_remoteInetAddress@12 _Java_sun_nio_ch_Net_remotePort@12 _Java_sun_nio_ch_Net_setIntOption0@32 _Java_sun_nio_ch_Net_setInterface4@16 _Java_sun_nio_ch_Net_setInterface6@16 _Java_sun_nio_ch_Net_shutdown@16 _Java_sun_nio_ch_Net_socket0@24 _Java_sun_nio_ch_ServerSocketChannelImpl_accept0@20 _Java_sun_nio_ch_ServerSocketChannelImpl_initIDs@8 _Java_sun_nio_ch_ServerSocketChannelImpl_listen@16 _Java_sun_nio_ch_SocketChannelImpl_checkConnect@20 _Java_sun_nio_ch_SocketChannelImpl_initIDs@8 _Java_sun_nio_ch_SocketChannelImpl_sendOutOfBandData@16 _Java_sun_nio_ch_SocketDispatcher_close0@12 _Java_sun_nio_ch_SocketDispatcher_preClose0@12 _Java_sun_nio_ch_SocketDispatcher_read0@24 _Java_sun_nio_ch_SocketDispatcher_readv0@24 _Java_sun_nio_ch_SocketDispatcher_write0@24 _Java_sun_nio_ch_SocketDispatcher_writev0@24 _Java_sun_nio_ch_WindowsAsynchronousFileChannelImpl_close0@16 _Java_sun_nio_ch_WindowsAsynchronousFileChannelImpl_lockFile@44 _Java_sun_nio_ch_WindowsAsynchronousFileChannelImpl_readFile@44 _Java_sun_nio_ch_WindowsAsynchronousFileChannelImpl_writeFile@44 _Java_sun_nio_ch_WindowsAsynchronousServerSocketChannelImpl_accept0@40 _Java_sun_nio_ch_WindowsAsynchronousServerSocketChannelImpl_closesocket0@16 _Java_sun_nio_ch_WindowsAsynchronousServerSocketChannelImpl_initIDs@8 _Java_sun_nio_ch_WindowsAsynchronousServerSocketChannelImpl_updateAcceptContext@24 _Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_closesocket0@16 _Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_connect0@36 _Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_initIDs@8 _Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_read0@36 _Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_shutdown0@20 _Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_updateConnectContext@16 _Java_sun_nio_ch_WindowsAsynchronousSocketChannelImpl_write0@36 _Java_sun_nio_ch_WindowsSelectorImpl_00024SubSelector_poll0@40 _Java_sun_nio_ch_WindowsSelectorImpl_discardUrgentData@12 _Java_sun_nio_ch_WindowsSelectorImpl_resetWakeupSocket0@12 _Java_sun_nio_ch_WindowsSelectorImpl_setWakeupSocket0@12 _Java_sun_nio_fs_RegistryFileTypeDetector_queryStringValue@24 _Java_sun_nio_fs_WindowsNativeDispatcher_AccessCheck@44 _Java_sun_nio_fs_WindowsNativeDispatcher_AddAccessAllowedAceEx@32 _Java_sun_nio_fs_WindowsNativeDispatcher_AddAccessDeniedAceEx@32 _Java_sun_nio_fs_WindowsNativeDispatcher_AdjustTokenPrivileges@28 _Java_sun_nio_fs_WindowsNativeDispatcher_BackupRead0@44 _Java_sun_nio_fs_WindowsNativeDispatcher_BackupSeek@32 _Java_sun_nio_fs_WindowsNativeDispatcher_CancelIo@16 _Java_sun_nio_fs_WindowsNativeDispatcher_CloseHandle@16 _Java_sun_nio_fs_WindowsNativeDispatcher_ConvertSidToStringSid@16 _Java_sun_nio_fs_WindowsNativeDispatcher_ConvertStringSidToSid0@16 _Java_sun_nio_fs_WindowsNativeDispatcher_CopyFileEx0@36 _Java_sun_nio_fs_WindowsNativeDispatcher_CreateDirectory0@24 _Java_sun_nio_fs_WindowsNativeDispatcher_CreateEvent@16 _Java_sun_nio_fs_WindowsNativeDispatcher_CreateFile0@40 _Java_sun_nio_fs_WindowsNativeDispatcher_CreateHardLink0@24 _Java_sun_nio_fs_WindowsNativeDispatcher_CreateIoCompletionPort@32 _Java_sun_nio_fs_WindowsNativeDispatcher_CreateSymbolicLink0@28 _Java_sun_nio_fs_WindowsNativeDispatcher_DeleteFile0@16 _Java_sun_nio_fs_WindowsNativeDispatcher_DeviceIoControlGetReparsePoint@28 _Java_sun_nio_fs_WindowsNativeDispatcher_DeviceIoControlSetSparse@16 _Java_sun_nio_fs_WindowsNativeDispatcher_DuplicateTokenEx@20 _Java_sun_nio_fs_WindowsNativeDispatcher_FindClose@16 _Java_sun_nio_fs_WindowsNativeDispatcher_FindFirstFile0@20 _Java_sun_nio_fs_WindowsNativeDispatcher_FindFirstFile1@24 _Java_sun_nio_fs_WindowsNativeDispatcher_FindFirstStream0@20 _Java_sun_nio_fs_WindowsNativeDispatcher_FindNextFile@24 _Java_sun_nio_fs_WindowsNativeDispatcher_FindNextStream@16 _Java_sun_nio_fs_WindowsNativeDispatcher_FormatMessage@12 _Java_sun_nio_fs_WindowsNativeDispatcher_GetAce@20 _Java_sun_nio_fs_WindowsNativeDispatcher_GetAclInformation0@20 _Java_sun_nio_fs_WindowsNativeDispatcher_GetCurrentProcess@8 _Java_sun_nio_fs_WindowsNativeDispatcher_GetCurrentThread@8 _Java_sun_nio_fs_WindowsNativeDispatcher_GetDiskFreeSpaceEx0@20 _Java_sun_nio_fs_WindowsNativeDispatcher_GetDriveType0@16 _Java_sun_nio_fs_WindowsNativeDispatcher_GetFileAttributes0@16 _Java_sun_nio_fs_WindowsNativeDispatcher_GetFileAttributesEx0@24 _Java_sun_nio_fs_WindowsNativeDispatcher_GetFileInformationByHandle@24 _Java_sun_nio_fs_WindowsNativeDispatcher_GetFileSecurity0@32 _Java_sun_nio_fs_WindowsNativeDispatcher_GetFinalPathNameByHandle@16 _Java_sun_nio_fs_WindowsNativeDispatcher_GetFullPathName0@16 _Java_sun_nio_fs_WindowsNativeDispatcher_GetLengthSid@16 _Java_sun_nio_fs_WindowsNativeDispatcher_GetLogicalDrives@8 _Java_sun_nio_fs_WindowsNativeDispatcher_GetOverlappedResult@24 _Java_sun_nio_fs_WindowsNativeDispatcher_GetQueuedCompletionStatus0@20 _Java_sun_nio_fs_WindowsNativeDispatcher_GetSecurityDescriptorDacl@16 _Java_sun_nio_fs_WindowsNativeDispatcher_GetSecurityDescriptorOwner@16 _Java_sun_nio_fs_WindowsNativeDispatcher_GetTokenInformation@32 _Java_sun_nio_fs_WindowsNativeDispatcher_GetVolumeInformation0@20 _Java_sun_nio_fs_WindowsNativeDispatcher_GetVolumePathName0@16 _Java_sun_nio_fs_WindowsNativeDispatcher_InitializeAcl@20 _Java_sun_nio_fs_WindowsNativeDispatcher_InitializeSecurityDescriptor@16 _Java_sun_nio_fs_WindowsNativeDispatcher_LocalFree@16 _Java_sun_nio_fs_WindowsNativeDispatcher_LookupAccountName0@28 _Java_sun_nio_fs_WindowsNativeDispatcher_LookupAccountSid0@20 _Java_sun_nio_fs_WindowsNativeDispatcher_LookupPrivilegeValue0@16 _Java_sun_nio_fs_WindowsNativeDispatcher_MoveFileEx0@28 _Java_sun_nio_fs_WindowsNativeDispatcher_OpenProcessToken@20 _Java_sun_nio_fs_WindowsNativeDispatcher_OpenThreadToken@24 _Java_sun_nio_fs_WindowsNativeDispatcher_PostQueuedCompletionStatus@24 _Java_sun_nio_fs_WindowsNativeDispatcher_ReadDirectoryChangesW@52 _Java_sun_nio_fs_WindowsNativeDispatcher_RemoveDirectory0@16 _Java_sun_nio_fs_WindowsNativeDispatcher_SetEndOfFile@16 _Java_sun_nio_fs_WindowsNativeDispatcher_SetFileAttributes0@20 _Java_sun_nio_fs_WindowsNativeDispatcher_SetFileSecurity0@28 _Java_sun_nio_fs_WindowsNativeDispatcher_SetFileTime@40 _Java_sun_nio_fs_WindowsNativeDispatcher_SetSecurityDescriptorDacl@24 _Java_sun_nio_fs_WindowsNativeDispatcher_SetSecurityDescriptorOwner@24 _Java_sun_nio_fs_WindowsNativeDispatcher_SetThreadToken@24 _Java_sun_nio_fs_WindowsNativeDispatcher_initIDs@8

$LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2002.ppa

SHA256 f1ba6428d13265ed9ae17b80ef82bc8a7cb95f27243f641a90c86c083aef88e6
MD5 141d0b8d02afb60f2145adf7233cf8de
SHA1 ef69a7b3ee09cff83983263e4036d7f65a29b512
SHA512 a0a3315fd6a54761398c9771222bd5f4ce9b87ea8667c7322b12021c08035f84861c8be5033d028672bee7f82e8ea698a9a70dccdbfca8e6288c2053e254173b
SSDEEP 6144:4eify3rmdEK7RedqKzOH9HXu926qbDN7VnJTuGb0ZFRTMTF5v6VScL8tf:4e8emQqKzopJiGb/pcL8t
TLSH
T184C41805B680D627D2A50A320C8BD3FE6739BC04DE86872732D5732F3D73B689A56785
MD5 SHA1 SHA512 SSDEEP TLSH

windows office2003

Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

$LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2003.ppa

SHA256 fcd6accc5379c2ad07bd4bfae7f1191b88ab5ad3270c0e685e915a752db01d62
MD5 59e988e99050a7e0439bc5f1a7c14e5c
SHA1 5f80b686e95e45d4398ed3aecec21c4609a552d6
SHA512 ac211d5b3cfac8b24f1db6c0f85dcea2f7872c61eb6fdb5ee2e9f6bfbce14ab9ba68f255ef5a985ddf7fe7e600b6d5cfead68dec797bc023720d7f4ad9456321
SSDEEP 6144:E+iDU1rEddr7bGLdq9bRH9HkGzKrqbDN7VnJTPTmXOVTMtF5kvVuMzt:E+ceEOBq9bT7JTThYMz
TLSH
T18DC41806B680D627D6650A320C9BD3FE6739BC04DE86872732D4732F3D73B689A16785
MD5 SHA1 SHA512 SSDEEP TLSH

windows office2003

Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

$LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2007.ppam

SHA256 9c99b19ebbfe9c1f5cb0094838f6eb0349181ed06ac51035f47d11770fb70d74
MD5 438b5bada37afcb996313f8f9f8485ec
SHA1 f9ce24989ade1c645f3a877c36413d424155ba2a
SHA512 d5e7f869af5d9c8c3c1f7d9fddb3e92e5e7a549396a31603d6d4b85ad5a3c7046d69c22451e330f3aaeda8c826122c5675a240fe397c3134f4cf405c58a2b92c
SSDEEP 3072:1c7cCCA0Y8NWhPb07Z/SUKYsU2hRJjzB9MQpnXm1/f+ayxeebZRuw4Oke7HTHHUa:qB18eI7ZK4GXzpq/2bxee9Qw4x6rHUu1
TLSH
T1612412B7D139A4FDCE63EC785E026445BDBB88484514B34E274C0A6815A7ECB32B678F
MD5 SHA1 SHA512 SSDEEP TLSH

office2007

$LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2010x64.ppam

SHA256 bea2de70c4eccb4880bf0b93f2a1c5410023dc7b36c49dc78863a30ffdc8fac1
MD5 b0e64fc8b0f8e8d4d37e8e79beeabd11
SHA1 a05cc96d5841cb7a98974022fe825a1bf3968695
SHA512 2465ff2966f29a1ed3e9e37cb5da4d88ab0a5c70fc5759e849ffeec3cdf51de33f62b5229c6e619278d70172cc83112c0414443f399f2cdc526de56dea1d550f
SSDEEP 6144:qBl6hs+/rz+7GUNKGuf+SZUOUo4aFQzxelscLRm/Bs9SXDVpH2tPJ7CF:qBl6Gur9UNKHE76SxelJLRgBs9SXDCtc
TLSH
T1F1541233A17528B6DA9BBA31E00E988ABC53CC818125FB1F6B5C125D94A5D83130B7DF
MD5 SHA1 SHA512 SSDEEP TLSH

office2007

$LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2010x86.ppam

SHA256 1c7b795236714f8e0c9d02e0c057f7ee8e4ec4a4f9201361e5a3d26767f49d06
MD5 d7d42e845efadd50caf766153c683cce
SHA1 c42643d51577cdd2dffde0384f2f78a2c87dc8bc
SHA512 cb6fdf8d1a07d9067b7bac109013f26f653c19db5757d595fda0282bc246a1ebde7564fd719569e284e2eb1f7d17fcb7df43443d6b58306049e29b13ffc0f6cf
SSDEEP 3072:1c7cCCA8/nGeKrIM/gfXp0xph0jf3lX1zjlJu0tkInhqtPID71fBzTHUffOc:qBeqofXp0xc7Z9jO0trnYtPwdUfP
TLSH
T17E241279D3B0B8DBCEB334B4A21796C6F976DC8542A81B5E0914499C86E2DCB073731B
MD5 SHA1 SHA512 SSDEEP TLSH

office2007

$LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2013x64.ppam

SHA256 476a54794f5aca8ca6a27e56387e230f2c4b34e6010b440ffa0e117d3f7a6f8a
MD5 84cd9e7f9d6bd8a8bf0bfb59883f8271
SHA1 cf787d2c531085c6750e155861ea0a39695bf346
SHA512 ab3474670abd97e40993e633f08cf3d7168cfbfe4ac4f03604ce7720ba332d08a9df338a8d763e0074eec52423e70989240dbe7eecf114af2d4dd3199895bd5a
SSDEEP 6144:qB8fXRElARaTSdsDS5WepoZCdrBZkJUQpiOIib3O/YEkt:qB8fXReA6A5WL0YJUQpiOIipEkt
TLSH
T1835412A799F09827DE336EB0570EA45F2C5380461274BC0F620C959D54EA6CF43AE6DF
MD5 SHA1 SHA512 SSDEEP TLSH

office2007

$LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2013x86.ppam

SHA256 3a06e18413bc169b63abc3f51e7204b60152b744c416c06eaa8d0774721e2257
MD5 8984eac25813dd9afaf76792ec37cf25
SHA1 23e88b07a029e1b278ed4b147bcf5717bc479f8d
SHA512 14bb1d37d7930288896e000555b3aefabe3b6e0d84de025e20cbcccc880a871c0be448806fbb3ad05e33a9a2e7f079c452205df2f55ba76d7ef584cd8c932d58
SSDEEP 3072:1c7cCCAMnzSMSwJwlSi1oRU8VODkqFAxrXiFpYQXIthQNEeXSwy01bmMGvvTHIWR:qBCnuCmlSi1oRtoDCXys8NEeXA0MtILy
TLSH
T11224127EC52BA8D6C9B70D7EA21C2489A413AC51423E774E535C2DBC08AADC7035F39E
MD5 SHA1 SHA512 SSDEEP TLSH

office2007

$LOCALAPPDATA/Temp/mathtype.tmp/psfont.properties.ja

SHA256 d2c47de948033ed836b375ccd518cf55333fe11c4ced56bc1ce2ff62114cf546
MD5 a38587427e422d55b012fa3e5c9436d2
SHA1 7bd1b81b39da78124be045507e0681e860921dbb
SHA512 ea6ca975e9308ed2b3bbcce91ee61142dab0067ce8f17cb469929f6136e6b4a968bac838141d8b38866f9ef5e15e156400859cccc84fb114214e19556f0dc636
TLSH
T1F0514C601FB9A70809211796B7FFFB90A90A7EA2C735704294F024C29448AFDBF45B33
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/psfontj2d.properties

SHA256 7ea6e05d3b8b51d03c3d6548e709c220541df0f1aee2e69b9101c9f051f7c17a
MD5 66b3e6770c291fe8cd3240ffbb00dc47
SHA1 88ce9d723a2d4a07fd2032a8b4a742fe323eec8f
SHA512 d1b99aa011568affa415758c986b427588ae87fe5eb7fc52d519f7167ad46bbff8b62799f14d8dbc7c55deb6ff7259445d6e8882cc781d61206ed1b79b688745
SSDEEP 192:Jp22HdiEUEdWUcPeJ7fbdHmcbiLMWNDyZcy57ha1xh3qvfRdIdyJkW:u2HdiEUEdGY1gbD9TKdIdyJkW
TLSH
T18E2213414B3C1AA4115307A2738FA6C0EE9DFAB56930B752A1F065525A8FFF02F19F36
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/resources.jar

SHA256 c532105d59c62a37605c30071b7fe66afd8ba9f8c161c086c1098ba3f2bcb292
MD5 2595f79ec09178bc4f73006b1a95336b
SHA1 42177e1ae9ae1c5f8bd268fdd9d82b210581f7fe
SHA512 4f365cce4a099bb395c714656c42fd7c37225130125e6f67f2585a356819607cee41359b98add5dfe55de94d2318bd68cdb319c9a317c09a053faf1fac237135
SSDEEP 49152:ksHQBsam0VuLXesVQ0h9V29nRGpEfulNtj6a1OjQ8AjavpeuQnKs1J9Z8oBQSqKK:Il
TLSH
T1A8F55B7FB912112BCAB340B6EC3326C7E96019B583A2D627F1EC9F263F8085D5667354
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/rootmath.tdl

SHA256 b74e3420459695e0267119df9e2970f0ae246ea96796c75dd4589d19d8092c53
MD5 5353f4825881f23a3cdb8ed8b4153dac
SHA1 068bb37471d6e5deb1fa20a1a25da05d020416f0
SHA512 92da72a40d1764ddcfa7151f59eafb6bc61e0fe8713887c9c581493d5b73f3d274841eb0484e5a388606533504f148165d56f498465926dd1a2ac3028a067a4a
TLSH
T1C4213305BB9894661AC21762ABD020C7983CA31D23B36500B88E909EA711D7C377B74E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/rt.jar

SHA256 b8b4cbb76228e5d2fc6ab68161e2cb6b7e447b865ff766b2364d27c4b099e170
MD5 1ddbaf96f2f1458c94a4422fd0acb47f
SHA1 65f9d4b11e2308845cd09d333b6b98dccabf6f1f
SHA512 fbb680d717ac777ce03c03913991bc54e50b402cde1661f4906348fcb5ec4716cce2b6eab8ca4eaad0fb83ce933f8446144216ebab834f96c64d78cc0cfb92a8
SSDEEP 196608:n+EpBSlkPP8ZhmCHyKz59hg4Wter52/tuCYEetePHvQINBY:nFpBSl88+xter52/tuCYEetePHvw
TLSH
T19B973B27F202DA5FEB42E1FE146103615734F4F54683E2A99FA88D239DE75C28F24399
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/sNews.tdl

SHA256 79471dfb9e4c66b33cada197d87a323f75696716e8d38c4c25238208c94745d5
MD5 1c0cc71e8a42944c2f9d48da0fc13f85
SHA1 56c3ded1a12e7be647f48c2c5f095e336b0a7535
SHA512 294d074fca27e8d252ccfb9985ba3ece5ab0f92944b2eeb81eca71a6c9842d637e4076efd9e18c28ef1bce2da6c9c4964252c3514ea25479880a3ec8ed0f8709
TLSH
T1C4112306F3D8107216C561A0BF622447B12ADB0C22B744017C8ED0AF3351A2C2BEA91E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/sRGB.pf

SHA256 2b3aa1645779a9e634744faf9b01e9102b0c9b88fd6deced7934df86b949af7e
MD5 1d3fda2edb4a89ab60a23c5f7c7d81dd
SHA1 9eaea0911d89d63e39e95f2e2116eaec7e0bb91e
SHA512 16aae81acf757036634b40fb8b638d3eba89a0906c7f95bd915bc3579e3be38c7549ee4cd3f344ef0a17834ff041f875b9370230042d20b377c562952c47509b
TLSH
T13351FAB9EF67D3A7EA71D77854F12BD4B2D37339D321768560249B2502411C0AB8E09E
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/setup.exe

IMPHASH e4dcf6eb4866c2593487e4c2d3b65775
SHA256 4fc0208f9aa9b044c67c401607311f368a1d0bb7e9a7ab608e1c1e9e15f2174c
MD5 4c23b90f5a65a7ec19d372f015081333
SHA1 1650cf38506f9d3a2fcae7951f89efa6b4d046f2
SHA512 425fbd6c17eea38b767d6cb907e1c344c055b8e72b128cb50abf949b07558c8dbf0e29140d084d127387340ba63ce218f5e04ef449c8e4734bd2f29898070405
SSDEEP 24576:tEzVTxE7rM3KVe+p3hGOK8RkJu2CJZ/PO6gGFBRty7e1mFrV8i0dlDqPU4yxWrZu:2Ibvzeu2CDTafc4uaEADE5Ru6rI71u
TLSH
T12DD59C81FFC28072C4532570242EA33B8B39AC255B38DBC7D7D06A79E9717C19E7925A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1298273

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\User\Documents\GitHub\mathtype.desktop.win.legacy\mathtype-win\Setup\MTRelease\Setup.pdb

crypt32

CertCloseStore CertAddEncodedCertificateToStore CertOpenStore

version

GetFileVersionInfoSizeA VerQueryValueA VerFindFileA VerInstallFileA GetFileVersionInfoA

lz32

LZOpenFileA LZClose GetExpandedNameA

wininet

InternetOpenA InternetCloseHandle InternetOpenUrlA

advapi32

RegEnumKeyExW RegCreateKeyA RegQueryInfoKeyA RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegSetValueExW SystemFunction036 RegEnumValueA RegDeleteValueA RegSetValueExA RegCreateKeyExA SetSecurityDescriptorDacl RegQueryValueA RegEnumKeyA LookupPrivilegeValueA AdjustTokenPrivileges OpenProcessToken RegCloseKey RegDeleteKeyA RegEnumKeyExA RegOpenKeyA RegOpenKeyExA RegQueryValueExA InitializeSecurityDescriptor IsValidSecurityDescriptor RegSetValueA

gdi32

CreateSolidBrush CreateRectRgn SetRectRgn SelectClipRgn Rectangle AddFontResourceA RemoveFontResourceA CreateCompatibleDC DeleteDC GetDeviceCaps GetRasterizerCaps BitBlt CreateBitmap CreateCompatibleBitmap DeleteObject GetMapMode GetPixel SelectObject SetBkColor SetMapMode GetObjectA DPtoLP CreateFontA EnumFontFamiliesExA GetTextMetricsA GetTextFaceA CreateFontIndirectA GetStockObject GetTextExtentPoint32A SetBkMode SetTextColor SetTextAlign TextOutA CreatePen GetTextExtentPointA

kernel32

CreateWaitableTimerExW SleepConditionVariableSRW SetFileAttributesW GetLastError GetModuleFileNameA lstrlenA GetLocaleInfoW GetLocaleInfoA GetTempPathA DebugBreak OutputDebugStringA CloseHandle GetCurrentProcess GetCurrentProcessId ExitProcess GetCurrentThreadId FreeLibrary GetProcAddress LoadLibraryA OpenFile GetCurrentDirectoryA LoadResource LockResource SizeofResource FindResourceA GetProfileStringA CreateFileA WriteFile GetCurrentThread SetThreadPriority ResumeThread CreateProcessA SetPriorityClass lstrcpyA GetVersionExA GetFileSize SetEndOfFile SetFileAttributesA SetFilePointer MapViewOfFile UnmapViewOfFile GlobalAlloc GlobalReAlloc GlobalUnlock GlobalLock GlobalFree GetShortPathNameA CreateFileMappingA MoveFileExA ReadFile WritePrivateProfileStringA SetCurrentDirectoryA FindClose FindFirstFileA GetDiskFreeSpaceA GetDriveTypeA GetFileAttributesA LocalFileTimeToFileTime SetFileTime GetTempFileNameA CopyFileA SystemTimeToFileTime FindNextFileA CopyFileExW GetBinaryTypeA WriteProfileStringA MultiByteToWideChar GetSystemDirectoryA GetWindowsDirectoryA GetShortPathNameW WaitForSingleObject Sleep GetExitCodeProcess GetUserDefaultLCID RtlCaptureContext SetErrorMode GetSystemTime GlobalSize GlobalFlags GetTickCount WideCharToMultiByte GetProfileIntA FormatMessageA DeleteFileA MoveFileA ReadProcessMemory GetThreadSelectorEntry ExpandEnvironmentStringsA LoadLibraryExA GetSystemFirmwareTable CreateThread GetFileInformationByHandleEx SetFileInformationByHandle GetEnvironmentVariableW ReleaseMutex CreateMutexA FormatMessageW QueryPerformanceFrequency InitOnceComplete InitOnceBeginInitialize GetFinalPathNameByHandleW TryAcquireSRWLockExclusive GetQueuedCompletionStatusEx SetFileCompletionNotificationModes SwitchToThread lstrlenW DecodePointer WriteConsoleW HeapSize ReadConsoleW AcquireSRWLockShared GetStringTypeW OutputDebugStringW SetConsoleCtrlHandler GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage GetTimeZoneInformation HeapReAlloc SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers RemoveDirectoryW CreateDirectoryW SetStdHandle GetCurrentDirectoryW SetCurrentDirectoryW MoveFileExW DeleteFileW EnumSystemLocalesW IsValidLocale LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW HeapAlloc HeapFree GetStdHandle GetModuleFileNameW GetCommandLineW GetCommandLineA FindNextFileW FindFirstFileExW GetFullPathNameW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime PeekNamedPipe GetFileType GetFileInformationByHandle GetDriveTypeW CreateFileW GetModuleHandleExW LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer SetLastError InterlockedFlushSList InterlockedPushEntrySList RaiseException InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetModuleHandleW CreateEventW WaitForSingleObjectEx ResetEvent SetEvent DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection SetWaitableTimer GetCPInfo ReleaseSRWLockShared ReleaseSRWLockExclusive CreateIoCompletionPort FindFirstFileW SetHandleInformation WakeAllConditionVariable WakeConditionVariable PostQueuedCompletionStatus AcquireSRWLockExclusive GetSystemInfo SetThreadStackGuarantee GetModuleHandleA

ntdll

NtReadFile NtWriteFile NtDeviceIoControlFile RtlNtStatusToDosError NtCancelIoFileEx RtlUnwind NtCreateFile

ole32

CoUninitialize CoCreateInstance CoInitialize StringFromCLSID CLSIDFromString CLSIDFromProgID OleRegGetUserType OleGetAutoConvert OleSetAutoConvert OleInitialize OleUninitialize CoTaskMemFree

shell32

ShellExecuteExA ShellExecuteA SHChangeNotify SHFileOperationA SHGetMalloc SHGetPathFromIDListA SHGetDesktopFolder SHGetKnownFolderPath

user32

SetTimer OemToCharA CreateWindowExA RegisterClassA DefWindowProcA SendMessageTimeoutA ExitWindowsEx GetMessageA RegisterWindowMessageA LoadStringW CharToOemA SendMessageW LoadCursorA EnumThreadWindows EnumWindows FindWindowA SetCursor SetForegroundWindow ReleaseCapture SetCapture WaitForInputIdle CharPrevA CharNextA PostMessageA GetPropA SetPropA ReleaseDC GetDC IsDialogMessageA MessageBeep DispatchMessageA GetClassNameA MessageBoxW CreateDialogParamA DestroyWindow SystemParametersInfoA LoadBitmapA EnumChildWindows GetParent OffsetRect MapWindowPoints GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextLengthA GetWindowTextW GetWindowTextA SetWindowTextW SetDlgItemTextW SetWindowPos MoveWindow wsprintfA SetFocus SendDlgItemMessageA EndDialog DialogBoxParamW SetWindowTextA SetDlgItemTextA GetDlgItem ShowWindow SendMessageA MessageBoxA PeekMessageA LoadStringA KillTimer LoadIconA CheckDlgButton IsDlgButtonChecked CheckRadioButton EnableWindow CreateDialogParamW UpdateWindow GetSysColor GetFocus IsWindowEnabled FillRect TranslateMessage GetSystemMetrics CharLowerA

comdlg32

CommDlgExtendedError GetOpenFileNameA

bcrypt

BCryptGenRandom

iphlpapi

GetAdaptersAddresses

ws2_32

ioctlsocket socket accept bind WSASocketW WSASend setsockopt listen getaddrinfo freeaddrinfo WSAStartup WSACleanup getsockname shutdown recv getsockopt getpeername closesocket connect WSAGetLastError WSAIoctl send

$LOCALAPPDATA/Temp/mathtype.tmp/setup.inf

SHA256 521031acf36aa13e7739acc4492ca109c4be6952eca00d249aa01e00165998ff
MD5 2780481b48e0d1ebde83673087bc086b
SHA1 f08b3c4761484e43a4b92d24fcda3d24fbdc5ee3
SHA512 9ef86410764aaef4299949c4df2197b49715c3f84c7aafbfbd241e9885cdbbdd7e0b2762b86b5196007401692b3665784f68e474b742b799fb8d8346ca83f1a8
SSDEEP 1536:u3YXhB2MtnuZ043sD/45clIKHIH2bznf7K1PTuyD:uyduZ043Kfznf7K1PTuq
TLSH
T1B673820314210E8F94F277A1771468E377B4BAD9C3F6E919709593E1268E8BC4FEE129
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/setup.lib.inf

SHA256 8de4a8f8fef9285366368ecf8c310c84b0d03df3a5336559072dc12a1380485e
MD5 1571cbf7a22886cf88501819b0b55b6c
SHA1 e7b80439ae28de74a8b8fca17d2dc6a8d8e8f40b
SHA512 3b74aa0dfc305732b88f8ad8ed69e4f5f91eed9fd2f5891d16530388343448f6ddc25f4349084c154456b0081d8bf1d7fcea8b8921b8586eda0c6d3a1e03893e
SSDEEP 192:szy1x2MSc9TdzACBn/fxKsCrGrVNr3rXYxS8IF7:cy1Qc9Tdzlvbrskn7
TLSH
T1C002C42F5F1E8FCEF1B10316B314480EAD685D78EEBDE099DBA25DB464A80E11770639
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/snmp.acl.template

SHA256 8b02a29bc61b0f7203df7ca94140f80d2c6a1138064e0441dfd621cf243a0339
MD5 9d9ec1bb9e357bbfb72b077e4af5f63f
SHA1 6484b03dbe9687216429d3a6f916773c060e15ce
SHA512 5fe39bbfca806ce45871a6223d80fa731efaa5d31c3b97ee055ab77eaf3833342945f39e9858335d9dd358b4b7f984ffade741452e19b60b8e510aa74ac02c00
TLSH
T18C7104172F5573130371C1A2A7DFA1EAE10B613B6E770C04394C82B46376BAD86ADD57
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/sound.properties

SHA256 633015ad63728dfe7a51bf26e55b766dd3e935f1fcccffa8054bf6e158ea89b2
MD5 bb63293b1207cb8608c5fbe089a1b06d
SHA1 96a0fa723af939c22ae25b164771319d82bc033b
SHA512 0042debe4a77da997a75a294a0c48d19aed258eeb3cd723fd305037df11f0a5073a92cc54967b8b541e1afc912f36481d0b0f68477b8156e52e15093722b7c32
TLSH
T1EC210A3B7B0A555F17F2046D2AFCE51BD0CC2A3D7D73A4D0249C4201BF4A6472D60A46
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/sunec.dll

IMPHASH 77099358e94a2792873be5852d0933b3
SHA256 78c8c492e38e69c1ee5203cd11c8686089c9df292d9e7c134076c788ff17f428
MD5 895f600b84d500124c4407c302c2822b
SHA1 f77d8450201dabcd71f8b4e1b1c72a7b787c19c1
SHA512 327ac18fcd3c390b0e3652e6ccb24fe73a5344ca9b80857e6778b7e5de565167a753586698e6df9fb74e041bbf0459cd8a74f9a7be856c36b4a60cfde00c3115
SSDEEP 1536:40aDqY3UaXn3HqZaWkNMbW4hdRquv4ilgKptxG0ULtt1vHWLWLWw3WFQfzgxo:5sqaXnSy4hyC4iPe5v2CCwGFQfzgK
TLSH
T17CC34A5371A3C574CC9E6276706A3B282F787A12F4D25976533B0DC0CF24E91EE7A226
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

74328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libsunec\sunec.pdb

$LOCALAPPDATA/Temp/mathtype.tmp/sunec.jar

SHA256 0d3e6aa1b72a44cb103a928db6e8e60f9d90f505a128a6e93ad8deaa067fb57d
MD5 0e114d00e6c5b9628591f57dfcaeeba5
SHA1 9edf0f7c3cdd91cf3596edf9970074112cf13d3c
SHA512 13386db66fb6864aefc49902137c9b0265a40b72e75452af92ac90a63d4ce66460c670b5d684b2c20febf703ab6b7980e4543402c7315d126ca318a825917118
SSDEEP 768:fjvOL6Oq9/1zCptVkJB1leKMpP/p5BZmQEnrn6RDan3fgNbjIV2uZW14SlKrw6p3:fjvxOm/1GXyZl0Rx5e2RDavgNbruqNWV
TLSH
T19B13CF0D7F90C4BFE02355778081D5176A3E0ACA6B26973F4851C9AE392C93A2716BF7
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned JAR

Checks for missing JAR codesign signature.

File Signature issue

Digest

06a6620b35859db31f2f6c1616c6ee076fadab51fd0602ff62a33f8e1fa0f3dc

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Oracle Corporation,OU=Java Software Code Signing,O=Sun Microsystems Inc

Chains

Jan 1, 0001

$LOCALAPPDATA/Temp/mathtype.tmp/sunjce_provider.jar

SHA256 2b7af7de33f3d565c79794ac7b1454cf5cbdb94bb098c58d1d24a171fe82cf96
MD5 35301f5d8b9390a4f8d293856f2c5722
SHA1 3e03b24852bf437dfae6a779e270eee60af5b641
SHA512 09862d625b35e71be2710ad3b106ae9e7ad87bdeb81f11317b9d1f18a8260f7de8114085dfff0ff2c7283ca5a1125cfc91ed2e1eaeaae9a1f5c5386af094e935
SSDEEP 3072:FGqFp1ARBxras5Ynoc9YZi1uXJzlt9jnEpeAa8bQkr16/mfGrcux2mjBETpv:FGC2RPQoFBl3bue98skp0mfwc8dETl
TLSH
T17354BF277C9DD8B8DA4B84F96871C915FA0F40F5A00AF27A17D249B4B8A5C4B0F11BED
MD5 SHA1 SHA512 SSDEEP TLSH

Codesign digest Mismatch

File was altered after it was signed.

File Signature issue

Digest

0ce9947a3e98641409cce8bb2487a945a97ca933fb395260755c4cb83aa87aba

Digest Algorithm

sha256

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Oracle Corporation,OU=Java Software Code Signing,O=Sun Microsystems Inc

Chains

Jan 1, 0001

$LOCALAPPDATA/Temp/mathtype.tmp/sunmscapi.dll

IMPHASH c660867b9193cb19852946d8fedf1845
SHA256 c4cb600eb310c12cf55dc0e23d4c930fc026301294ac424172ac6eaea7f790c5
MD5 a6ab45d77978cf80e5e52e6aa8177c09
SHA1 16695c26adc362f464bab55c589773e8072edf07
SHA512 2bbef7cb3742b853398e0a85168b217ba643e6fd3f92f9556b0ec492af7e7ab042be05f9a9245dcab1097faee61ad40aec4fa1ab57fc4c71f37ff13fb1fed554
SSDEEP 384:GZglaDFZXtszkMCKSjIxt39Rowo0kilFZIjkzIPV51KlW8k:3+7DKSKswodilFmjk8dcu
TLSH
T13D920912B940C073FA6D24796125E55E072B7C10DD209A1B73D38B9D7AAABB3E37C607
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

13064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libsunmscapi\sunmscapi.pdb

crypt32

CryptImportPublicKeyInfo CertFindCertificateInStore CertDeleteCertificateFromStore CertCreateCertificateContext CertSetCertificateContextProperty CertAddCertificateContextToStore CertFreeCertificateContext CertOpenSystemStoreA CertEnumCertificatesInStore CryptAcquireCertificatePrivateKey CertGetPublicKeyLength CertGetNameStringA CertFreeCertificateChain CertCloseStore CertGetCertificateChain

advapi32

CryptGenRandom CryptImportKey CryptExportKey CryptEncrypt CryptDecrypt CryptGenKey CryptVerifySignatureA CryptCreateHash CryptGetProvParam CryptSetHashParam CryptSignHashA CryptDestroyHash CryptDestroyKey CryptGetUserKey CryptSetKeyParam CryptGetKeyParam CryptReleaseContext CryptAcquireContextA

msvcr100

_unlock __dllonexit _lock _onexit __clean_type_info_names_internal _crt_debugger_hook __CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null free _malloc_crt _except_handler4_common memset memcpy mbstowcs sprintf ??3@YAXPAX@Z strcmp strcpy ??2@YAPAXI@Z

kernel32

GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter DisableThreadLibraryCalls IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess InterlockedCompareExchange Sleep InterlockedExchange DecodePointer EncodePointer GetLastError FormatMessageA

$LOCALAPPDATA/Temp/mathtype.tmp/sunmscapi.jar

SHA256 a0719cae8271f918c8613feb92a7591d0a6e7d04266f62144b2eab7844d00c75
MD5 2249eac4f859c7bc578afd2f7b771249
SHA1 76ba0e08c6b3df9fb1551f00189323dac8fc818c
SHA512 db5415bc542f4910166163f9ba34bc33af1d114a73d852b143b2c3e28f59270827006693d6df460523e26516cab351d2ee3f944d715ae86cd12d926d09f92454
SSDEEP 768:iLy1giOqjU0jNVmOTuDQJD/RpAczsikFfg0y+7aBTS73dyPoXvvKv2PtvHubyKhi:i4giOaU0jNVmOCADZpVsiUf3yua5S7t7
TLSH
T183E2AF49B82CC178F19380FF87216007766D41E59DD7A727049A950FFA38E0B0E56DFA
MD5 SHA1 SHA512 SSDEEP TLSH

File Signature issue

Digest

3d157f7cc4d723bb19aa8e3e545b782feef25bc33fdc07e532ef6afb885dd618

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signing Certificate

CN=Oracle Corporation,OU=Java Software Code Signing,O=Sun Microsystems Inc

Chains

Jan 1, 0001

$LOCALAPPDATA/Temp/mathtype.tmp/sunpkcs11.jar

SHA256 2aad2465ab8903c7f66a46b34d0d4ecbeea72d44afedaac9822e48b5b175595d
MD5 9f5abe7ccb653f571167e27822df93d2
SHA1 97f0f18b2d0a5ed5a01a682027efa9fb8bae1a5c
SHA512 629f56d9eb6a4634a54a2dc207d02f6bf94849deaa4d0a093c7709ac4ab651881cdeed547d466f2679968f4b7896cd553f61a6fc6583ede90a2053f09864669a
SSDEEP 6144:GJ+LIFVys2YON2lJmF5BwP5PYYGhscw1g0yHSno9O:GJMUVLbON8JK5BwP5PYYQlw1g0v2O
TLSH
T14134E01639694068E97773BFCC10422B3858889E6646E23F05B4C50DF67DC664773BFA
MD5 SHA1 SHA512 SSDEEP TLSH

Codesign digest Mismatch

File was altered after it was signed.

File Signature issue

Digest

ad316e5a12cdc38af53e511e3b147938375040b3b1976070a8577b27d89b2d22

Digest Algorithm

sha256

Digest Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Oracle Corporation,OU=Java Software Code Signing,O=Sun Microsystems Inc

Chains

Jan 1, 0001

$LOCALAPPDATA/Temp/mathtype.tmp/t2k.dll

IMPHASH 578c70223a0d8cd0361bb1078cb16ccc
SHA256 f648da37f9241d11ff4874c723fec2b348d2855ece11f1dafcd47386c76d0e5f
MD5 baf79bea89486888d4cec6d52a5b9aa4
SHA1 f4eebb3dc8fad695be950f917abc03d8342ac0fb
SHA512 126a1ffaa1b0b041a15762f4cccbc36c83134d3bd19be3d7818bac60bb62f88fef7fae4f2df44f9cc360e2e18688cdbf2bc010c4f1ad8140dd3bb86d5e410db6
SSDEEP 3072:XNBDbwy1fiWtG07zSuOK+5bavFlfuFiQsIfTtUR732J2qIcWYEfQQxIYh5ov+w:Lbwy1aWKuO/8zuI8c7PQ2w
TLSH
T18804C01852B240B0D0733336619AEF165B6DC31E0DFA0D53ABA93EE96F04DB0E61E356
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

159944

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libt2k\t2k.pdb

$LOCALAPPDATA/Temp/mathtype.tmp/toolbar.eql

SHA256 eb8099811e56fd33c15c8a4fb2dd62e8ae4e70e08141448d27e935a8bc1b8214
MD5 11061dbaf16e86c9b2a907366ea815b1
SHA1 8ed715db0270f30bd3451c30538381b4b8b0d46b
SHA512 b7ad0fcf1df37a068bda50ab3c620dd83a43c1e14367ab9518589d34e7b37cfdc52d956df8cf578ce47c0090aa237da131592620aef765875e8e36877f2c10a8
SSDEEP 384:zn4utgnxdyPNQQDv6LevRBCrSGWQwNEOEXpiJFN5kJE/RMJW6Hlkce0FRAcJ2JG/:si2iV2XrwALXu7PeuNrgfDxi9MSwCaXn
TLSH
T12FD3B902EE198533F5362630A86B7F67F37090892F425743AA983A3D2F563D51CA75B2
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/tzdb.dat

SHA256 a46a8bf58bc55784fa07e23f01ad46c9cb161a02b6a7cd8e035bb718c92e758b
MD5 4b31c64d61eaef49b8140bbd5457a937
SHA1 e75e1640369790825f5648bf4b7b761a5b54dcee
SHA512 acde7e2bd46ce5fbb85ab8b409d75e892c9bc5b451351c3ee0c37650779637ae1855a6877baa61d52e812b2e3684d628ea4ba1497571211f08598b164cebe5a3
SSDEEP 1536:00UKmg9SoOLn+hkpoVjTMB0q/////0l7asH3RX9rUVsuqmot09gEIz:0vr+iaVfqsH3RNr6suql+9gEK
TLSH
T137A3D5793F6150B7B2CB4222262B5B93197DAD812EC3080279F1BD4E4A76AD7603335F
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/tzmappings

SHA256 3d49b3f2761c70f15057da48abe35a59b43d91fa4922be137c0022851b1ca272
MD5 b8dd8953b143685b5e91abeb13ff24f0
SHA1 b5ceb39061fce39bb9d7a0176049a6e2600c419c
SHA512 c9cd0eb1ba203c170f8196cbab1aaa067bcc86f2e52d0baf979aad370edf9f773e19f430777a5a1c66efe1ec3046f9bc82165acce3e3d1b8ae5879bd92f09c90
SSDEEP 192:j1kfcymkDvxeMmKg5GQEK2TtllXinSV29OHPQT:hhymk/QGT7YT
TLSH
T1AA02F210B26056CAD5B3EC4E3B0AB393F456B2C85CC29F68395BC3AF5D055B652E1A33
MD5 SHA1 SHA512 SSDEEP TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/unpack.dll

IMPHASH e00a0a11515768ae3f0e5532e0a925ef
SHA256 c941a464c06e8bb5ca6fe0b1905e48d003d65f8d6ace1771b9f3df09e22b9374
MD5 35106b426af34c8e8d1345ab8e006f50
SHA1 a7491370b779a0ab712c7ca1b5109d3724154239
SHA512 60e4a56ddd45a25d9401cf6b778d7b9cd88f2a9d091ab4ae525e700834045a2b260f4a1b45cb8d4eeea35866bfeccd1d90eda9e9351b86031619e04987ab10df
SSDEEP 1536:6nBWRJz5QKLRA42LC5C/30BUHDSRdDAZMJiNnO:QM/z58xC5CiSDSRdDAZMJiV
TLSH
T1B3437CF15695C0BDC85A53B46C2E933F26BCDF7843B20E8686E42F493930B628617673
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

43565

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libunpack\unpack.pdb

$LOCALAPPDATA/Temp/mathtype.tmp/unpack200.exe

IMPHASH 172861d7f771518bba27ebb10e326cd9
SHA256 6212b591d8b7aec950a023663b3bb377a014fe9b93b5d971e892264324cc64fd
MD5 83992f5dcf13968329cb9018cf66cc64
SHA1 e93f208d1b0b35f782d0954f9febdb0ab67dc8e0
SHA512 e42e8a6819fb75104e440d4f4a0a2e1b80b349b903b9540ff16475419552c9abf56b24b470229737159d12cc1b552a317bf14a7b0dd759b819dab10e23adb8e9
SSDEEP 3072:uvAa5zbJEYmOf9MjbhVch6GE0le7tTBfYEaf9zQ6NlIh:JOmuGfch6GE0kTBgEaf9zQ6N
TLSH
T1AAE38DB15AC0C2BFC0BB027985EA8B6D5BBDBB5543240CC759CC2F156520AF096732EB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

101450

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\unpackexe\unpack200.pdb

Name

.text

Size

100KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$LOCALAPPDATA/Temp/mathtype.tmp/w2k_lsa_auth.dll

IMPHASH 9a1ea58331d3fc0061fb1c1a3bda0e4b
SHA256 c1a14a74f4df23bb5b91dcb7e834f2890aa03e6379696523d69ffcdd3ea1f852
MD5 0edd3f25c44c4a2b9898a938e2ffcc1a
SHA1 db22b5217827fdff8317673fb71e04ae4766be87
SHA512 45b282eeb10699f331c846e32c5960fafc4e624a626fe88b58f656debf75bddae1a42da1a43488c8068b13eefd174ae6e57ebe3f9d1e17ab3913eb10807433ae
SSDEEP 384:sUHZIjtDAAbVrnacbiW9LEiGTHb6hVXbS7fLsD5bGGNET7T7T7T7R6yFoynPV5Vv:suZIjtcA1a8iW9LEiGTHb6hVXbS7QbG5
TLSH
T1F8624C4BA3A600FCF7B209B974562693673F2A3835618DDBDBD14EA325B9041FE34913
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8973

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\build_area\1.8.0_144\build\windows-x86-normal-server-release\jdk\objs\libkrb5\w2k_lsa_auth.pdb

$LOCALAPPDATA/Temp/mathtype.tmp/we+.tdl

SHA256 fc012e2c7f1ea24942976d42f87351bcb231efbeb7d16b44b18eb6bb4a16ebc2
MD5 d83bd7e54560a81909e95e9f37784d32
SHA1 69e67495777c3d0a383a609cbea36d87066930f5
SHA512 170e91320d72e89b8879e53bb60a0014c8a2c6ba4fc104a9ab754f574cb5b23171dc012ff4ba3864636903cc31989f16ab3dbc041ebddd517011e942f42a9f28
TLSH
T13B01E306F3D810731BC02551BF62508B8128931863F75541B88BC49F7396B7C6FAA96D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/webATall.tdl

SHA256 bfebb3be49cf12a4557e672268519287024ad7b7d4008d26fd92988df9af9056
MD5 106e1ff425562c6295f4facdc63e039c
SHA1 ce225cf554ebbf10724d04dac780043823f44b08
SHA512 52cc782c3d415ca3aee46deb0203bf385efe98d46c111eaf59c35558587cda291c9e6bef70ffbdc47ea3363e05e67abbb01505814ec964214ea9d649d90c0474
TLSH
T17311E306F798257216C07260AF62248B9128B31C22F745417C8BD45F7356B3C6BEE96F
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/widgEditor.tdl

SHA256 80ccfd789a7d266369c8ee4906c80e7c39d20c9cd358f7bbd78b0f0e46189d70
MD5 691c365dac44598dde55af9a1bf4e91d
SHA1 1c26a75c88121f5a84a5b8887e1172912a876d2b
SHA512 f34c8d3788659942c306b8f317e1ddbb40ab330d05553735ab1c9b120d4eac067bc40e9bcad22a1ccbfc0116055061c821f9475ff8955a7f2d287dd3a979a7e9
TLSH
T10111008BF399106616C02250EB62218B9028D308B2F785017CC9805F33A7BBC6BF693D
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/win32_CopyDrop32x32.gif

SHA256 13c783acd580df27207dabccb10b3f0c14674560a23943ac7233df7f72d4e49d
MD5 89cdf623e11aaf0407328fd3ada32c07
SHA1 ae813939f9a52e7b59927f531ce8757636ff8082
SHA512 2a35311d7db5466697d7284de75babee9bd0f0e2b20543332fcb6813f06debf2457a9c0cf569449c37f371bfeb0d81fb0d219e82b9a77acc6bafa07499eac2f7
TLSH
T125C0805FC244DB10E449823C1C7782842E50595A494D11445154078D7C21176A3886A6
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/win32_CopyNoDrop32x32.gif

SHA256 1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b
MD5 1e9d8f133a442da6b0c74d49bc84a341
SHA1 259edc45b4569427e8319895a444f4295d54348f
SHA512 63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37
TLSH
T100C08C88F34888828A4AD2384874138C68A4C4BB8A224B88144A2A94A2935A2C1D0302
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/win32_LinkDrop32x32.gif

SHA256 485cbe5c5144cfcd13cc6d701cdab96e4a6f8660cbc70a0a58f1b7916be64198
MD5 694a59efde0648f49fa448a46c4d8948
SHA1 4b3843cbd4f112a90d112a37957684c843d68e83
SHA512 cf2dfd500af64b63cc080151bc5b9de59edb99f0e31676056cf1afbc9d6e2e5af18dc40e393e043bbbbcb26f42d425af71cce6d283e838e67e61d826ed6ecd27
TLSH
T145C0800FC7459F51F08C423C2C7A42801DA4151BCD8D1458A6341559794609FF648996
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/win32_LinkNoDrop32x32.gif

SHA256 1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b
MD5 1e9d8f133a442da6b0c74d49bc84a341
SHA1 259edc45b4569427e8319895a444f4295d54348f
SHA512 63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37
TLSH
T100C08C88F34888828A4AD2384874138C68A4C4BB8A224B88144A2A94A2935A2C1D0302
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/win32_MoveDrop32x32.gif

SHA256 12cfce05229dba939ce13375d65ca7d303ce87851ae15539c02f11d1dc824338
MD5 cc8dd9ab7ddf6efa2f3b8bcfa31115c0
SHA1 1333f489ac0506d7dc98656a515feeb6e87e27f9
SHA512 9857b329acd0db45ea8c16e945b4cfa6df9445a1ef457e4b8b40740720e8c658301fc3ab8bdd242b7697a65ae1436fd444f1968bd29da6a89725cdde1de387b8
TLSH
T103C02B0FC200F720F10C82BA6C2E83C01D2018514E9742488771138D7C16006F3CC2E6
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/win32_MoveNoDrop32x32.gif

SHA256 1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b
MD5 1e9d8f133a442da6b0c74d49bc84a341
SHA1 259edc45b4569427e8319895a444f4295d54348f
SHA512 63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37
TLSH
T100C08C88F34888828A4AD2384874138C68A4C4BB8A224B88144A2A94A2935A2C1D0302
MD5 SHA1 SHA512 TLSH

$LOCALAPPDATA/Temp/mathtype.tmp/wordcmdsx64.dot

SHA256 8eb77ce37689c67ddecce4528a8807ccecaa4fa1efa979275bd8d2e254ffa8c2
MD5 d5ea86880767403a193860e83df1495c
SHA1 26f2468f5e74dd16988126cf8ac13b8d440cb725
SHA512 100d6d26ad1a023cee4caddb1f2927d770677a1f866906aac906bef418e44dfb052403d964c03d45398e312c9a74d1e7f4c234a34137f6ef8a8a8eb2b14f0924
SSDEEP 192:EXclLZEvAa6/6rrILd/Kf3HO8t/Q0Fm7qFyhrRevmohrRevmtm:EwciSUR/8d/9meNmlm
TLSH
T1A7C2A39BB7988C0BF55248715A87D3A03A7DBE9CAE46D24736147F5CBCF13B10A18349
MD5 SHA1 SHA512 SSDEEP TLSH

windows office2003

$LOCALAPPDATA/Temp/mathtype.tmp/wordcmdsx86.dot

SHA256 eb79c5bd0672ce6359adcc70a6f302cf76e0078d9ff20f9ce23326a14c435b99
MD5 c6c4d68372429b4031808e7585cd313a
SHA1 a369e6ff3a3c85182249535460c32d5cf835feb9
SHA512 76424486bf0a69d557fd63ced9ba8ad044593be90de46556d8497c1016341c388186b0d4377c87d13ea6930d98c8bb49fbd3c2533bef06474f7063fdb79266d9
SSDEEP 192:IFclLZEvAC6/6rrILd/Kf3HO8t/OU0Fm7qFyhrRevmykUhrRevmtK:ICciSUR/8d/EmeNm3xm
TLSH
T11DC29197B7988C07F59248715A87D3A03A7DBE9CAE49D24B3610BF4DBCB13B10A18749
MD5 SHA1 SHA512 SSDEEP TLSH

windows office2003

$LOCALAPPDATA/Temp/mathtype.tmp/wordui2002.dot

SHA256 2c6e02bb98ac08e7c9f25610abf79696f8125d67ba2b8165aeb331aa226cafe3
MD5 26141d3b0623e95ddf05b90a70d34ecf
SHA1 5acfe6fe46b59e04cd2a3b937d7755d1a843f3ee
SHA512 666afff583cf28b32eb3e0fc2362bcc279207acd9e6f9788f0659139f118b48b0f6d3c9f72550cf6fbe9e4cd622e489ab7cd89fcae754f4a4c94f505e5b5a2eb
SSDEEP 6144:pUu4Iaka5dzqYGT2K+wvcvYVlC63a5cwt8BOt:pUuxQqrI6R
TLSH
T14BB40741B694C23BD2A60A320CABD3FE7B397D81ED51871B70A8730F2C72798D61A755
MD5 SHA1 SHA512 SSDEEP TLSH

windows office2003

Suspicious Office macro

Office document equipped with macros.

macro
Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

ThisDocument

Module1

AssertDlg

Asserts

AutoExec

Declarations

Declarations32

MTLibCommon

Registry

Registry32

Preferences

UILib

UIWrappers

UIWrappers2003

UIHelp

UIEnableDisable

UIEnableDisable2007

MTW5

CallbackGuard

CommandGuard

AutoExecCls

UIHelpCls

UILibCls

UIWrappersCls

UIRibbonCls

$LOCALAPPDATA/Temp/mathtype.tmp/wordui2003.dot

SHA256 ff38ce06e51621afc13547cfb339d8ecfa01da2866eb9dbdc5832718188de2cd
MD5 51960ee6e2894ecaf0e24e4a0061846b
SHA1 933437362e6dd78d39823f9b2a204254a16fd350
SHA512 bb43e5d468f5a02b3e868e1884a89445ef7c221df11f6f6b8ef71312bb2784e7e7b3eba64ea572e9160615515aa468136996d31669181e63abe357a5ee9421ca
SSDEEP 6144:HQRu4Iakm5XTqYGTlQGF1EvbNBTCg2Zocw8IOt:HQRuxGq/oCPf
TLSH
T126A41741B694C23ED2960A321C6BD3FEBB397D81ED508B1B70A8330F2CB2758D65A755
MD5 SHA1 SHA512 SSDEEP TLSH

windows office2003

Office macro that triggers on suspicious action

Office document macro which triggers in special circumstances - often malicious.

macro macro_on_action

ThisDocument

Module1

AssertDlg

Asserts

AutoExec

Declarations

Declarations32

MTLibCommon

Registry

Registry32

Preferences

UILib

UIWrappers

UIWrappers2003

UIHelp

UIEnableDisable

UIEnableDisable2007

MTW5

CallbackGuard

CommandGuard

AutoExecCls

UIHelpCls

UILibCls

UIWrappersCls

UIRibbonCls

$LOCALAPPDATA/Temp/mathtype.tmp/wordui2007.dotm

SHA256 60085949b0d99453094a41970afc4cdf5aab5d8c689ca472cd8d65c4b0845e2a
MD5 f3d82b32bd31884df9bb1349d0fcd9d2
SHA1 04498fa6700d93f6b63149a913ec06777651796a
SHA512 8aafa18e03a8477e54d1e04319583da30a9ee1b629d5cfb211bc84c24e171ff9df3da2ecf501d5a8c149c3e4e4421fe9837a758c7872c92900aa0648d5e333ea
SSDEEP 12288:Bk4xVYg07lACoTBwMaRSiXA8SniYJ9hOBfnaaZ+Au8NG9jY4hEJm+MmE:BDVYgkqzicO5nvZ88l4hEJmcE
TLSH
T1E3F4236AEB39A5F2D9D80E33764F10D1FC7688A18BA1357D18659A7C15F8E1F024B20F
MD5 SHA1 SHA512 SSDEEP TLSH

office2007

$LOCALAPPDATA/Temp/mathtype.tmp/wordui2010x64.dotm

SHA256 3f89e1993929425e210f11c486a6ad91ee834aa38dfd6f578e5eb608a418f2ad
MD5 c064a6c7fc720241986cdaec0512f6c2
SHA1 85c822f65cb76048568df4aa9b12e7af33ba5a5c
SHA512 d087ca20e6494a8bfd5c2e8ebc148d93a4a9fededbc54d24b5048d25eacb64707abc929575b15a3edcf7049312032a7a3f52b7d6b15411c2e3d43303c6e801ac
SSDEEP 24576:TfMSJNMZ+Tm/6UASVBzCo/62uoVtW39Vx7crd:bMwNMqJaDdBVW9Vxad
TLSH
T13B2523F6C07014D7C39F0A39721E85D4F67B89908886EB5D1B4DC8D849E612F62FA72E
MD5 SHA1 SHA512 SSDEEP TLSH

office2007

$LOCALAPPDATA/Temp/mathtype.tmp/wordui2010x86.dotm

SHA256 eb09590cad37b0387f20326e92fb209c09011b3269ffaf74c2ac5c0ea4fa47c6
MD5 a60283642bfe842f75d2fd7b280fac9d
SHA1 2558f3ccc24be63ea0eb89efaef10edfa9e43993
SHA512 e0362c0a04d5bebaaf0505d83c478203d2df2d52745f4507b955bbb16dc76a95fe248fa2af6e0972b06375bae8e2513dc5350c967a18b37e7856a7e7d0e2cfd3
SSDEEP 12288:xw/NlZRZFji5gFr8uu3agXWnvcBh0SXpwQ8BLJ90Tv7WSW9vFU8q2JczL0A8S8y8:mV/hegFIpmnaZwxJ9c7WP9vtTJkLL868
TLSH
T14DF4239EE225B8B4DDE80E7EA91750D1FCA64C119A688F2B0154CCBC579AD5F03E334E
MD5 SHA1 SHA512 SSDEEP TLSH

office2007

$LOCALAPPDATA/Temp/mathtype.tmp/wordui2013x64.dotm

SHA256 f789e843996bf2824af4b8fceca5ec0c13730916e22e00b7f2c02b70ffc62cf6
MD5 f34faba8f6eb9632d909bf4ee5908ba8
SHA1 4d2d98a4db9be57dda2f6370ee76a3b487082f44
SHA512 f988f6558a30eab95797765e7637850d5ec07934ac0f41a8d7cd6decb366f85ece7974393c5e2dec23d861c01138d52935cf4739ccbdde7abcc70a68bf54be99
SSDEEP 24576:TfMSJNMZ+Tm/6UASVBzCo/62uoVtW39Vx7cr:bMwNMqJaDdBVW9VxE
TLSH
T17D2523B6C07014D3C39F0A39721D85D4F67B8A908C86AB5D1B4DD8D849E612F72FA72E
MD5 SHA1 SHA512 SSDEEP TLSH

office2007

$LOCALAPPDATA/Temp/mathtype.tmp/wordui2013x86.dotm

SHA256 6d619a460f1fae1fda6e56b5921a1a42e5feab2cf212a8d4c8fc6040e8314e8b
MD5 e8d942e5227a2f8da3046e633a36d8b5
SHA1 111a5ffbf92ccb1bc165e3cb3f5bbbe99ea9eff4
SHA512 0b5e694f406bd9feda035a57e26f36b0f937ee899d6e417aa0bcf47ea187eee3c1d7acc9515810b955099b55fcfef5fd0665754a26260780d9b684c947866efa
SSDEEP 12288:xw/NlZRZFji5gFr8uu3agXWnvcBh0SXpwQ8BLJ90Tv7WSW9vFU8q2JczL0A8S8yo:mV/hegFIpmnaZwxJ9c7WP9vtTJkLL86o
TLSH
T1D3F4235EA225F8B4CDE80E7EA91B50D1FCA64C119A688F3B0154CCBD169AD5F03E334E
MD5 SHA1 SHA512 SSDEEP TLSH

office2007

$LOCALAPPDATA/Temp/mathtype.tmp/zip.dll

IMPHASH 1ccb1757f0a4ba69a2441ed91be21207
SHA256 5737941ae09fdf3a29c7fe30242f839298f0ba9d0d1d6f0fe356c2fa1dc1d67a
MD5 6ae7ad0024d5ec68892bc924413e9011
SHA1 97b4540e6be56ba0647a9138abf16d5a694abc3b
SHA512 e17423c4ee4f1d035afd8f1eb2b6db5948bb574db6345c29b83d5ddc7c3761a78009749c38fa6e84c7ce24cfc0bd3d3931e5c8b19c5d6c51c7541abbf079e06f
SSDEEP 1536:72LoBssj0cyK/S7+1th5sTqtzBuGgySVIOfVnToIf3IOsQ:bBssj0xoh5j8GhSff9TBfZsQ
TLSH
T15C639F80B79183F2F4F4357540E9872DAA3276250B5A9AD3BBDCBF9158262F291313CD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

45914

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ZIP_Adler32 ZIP_Close ZIP_FindEntry ZIP_FreeEntry ZIP_GetNextEntry ZIP_Open ZIP_ReadEntry _Java_java_util_jar_JarFile_getMetaInfEntryNames@8 _Java_java_util_zip_Adler32_update@16 _Java_java_util_zip_Adler32_updateByteBuffer@28 _Java_java_util_zip_Adler32_updateBytes@24 _Java_java_util_zip_CRC32_update@16 _Java_java_util_zip_CRC32_updateByteBuffer@28 _Java_java_util_zip_CRC32_updateBytes@24 _Java_java_util_zip_Deflater_deflateBytes@32 _Java_java_util_zip_Deflater_end@16 _Java_java_util_zip_Deflater_getAdler@16 _Java_java_util_zip_Deflater_init@20 _Java_java_util_zip_Deflater_initIDs@8 _Java_java_util_zip_Deflater_reset@16 _Java_java_util_zip_Deflater_setDictionary@28 _Java_java_util_zip_Inflater_end@16 _Java_java_util_zip_Inflater_getAdler@16 _Java_java_util_zip_Inflater_inflateBytes@28 _Java_java_util_zip_Inflater_init@12 _Java_java_util_zip_Inflater_initIDs@8 _Java_java_util_zip_Inflater_reset@16 _Java_java_util_zip_Inflater_setDictionary@28 _Java_java_util_zip_ZipFile_close@16 _Java_java_util_zip_ZipFile_freeEntry@24 _Java_java_util_zip_ZipFile_getCommentBytes@16 _Java_java_util_zip_ZipFile_getEntry@24 _Java_java_util_zip_ZipFile_getEntryBytes@20 _Java_java_util_zip_ZipFile_getEntryCSize@16 _Java_java_util_zip_ZipFile_getEntryCrc@16 _Java_java_util_zip_ZipFile_getEntryFlag@16 _Java_java_util_zip_ZipFile_getEntryMethod@16 _Java_java_util_zip_ZipFile_getEntrySize@16 _Java_java_util_zip_ZipFile_getEntryTime@16 _Java_java_util_zip_ZipFile_getNextEntry@20 _Java_java_util_zip_ZipFile_getTotal@16 _Java_java_util_zip_ZipFile_getZipMessage@16 _Java_java_util_zip_ZipFile_initIDs@8 _Java_java_util_zip_ZipFile_open@28 _Java_java_util_zip_ZipFile_read@44 _Java_java_util_zip_ZipFile_startsWithLOC@16 _ZIP_CRC32@12 z2r_initialize

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
MD5 4add245d4ba34b04f213409bfe504c07
SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
TLSH
T188426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DBA879243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsExec.dll

IMPHASH 68b7023f8923dd087549802f8fa631c3
SHA256 01e72332362345c415a7edcb366d6a1b52be9ac6e946fb9da49785c140ba1a4b
MD5 b4579bc396ace8cafd9e825ff63fe244
SHA1 32a87ed28a510e3b3c06a451d1f3d0ba9faf8d9c
SHA512 3a76e0e259a0ca12275fed922ce6e01bdfd9e33ba85973e80101b8025ef9243f5e32461a113bbcc6aa75e40894bb5d3a42d6b21045517b6b3cf12d76b4cfa36a
SSDEEP 96:JwzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuH0DQ:JTQHDb2vSuOc41ZfUNQZGdHM
TLSH
T171E1093571C02DF7D08D89743816BD2F43F4D52627BE05A04A7B1AD579D0AF6EE28B42
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

MathType-win-en-7.8.0.0_softoroom.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$LOCALAPPDATA/Temp/mathtype.tmp/AMS LaTeX (base rules).tdl

$LOCALAPPDATA/Temp/mathtype.tmp/AMS LaTeX (base vars).tdl

$LOCALAPPDATA/Temp/mathtype.tmp/AMS LaTeX (base).tdl

$LOCALAPPDATA/Temp/mathtype.tmp/AMS LaTeX.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/AMSTeX.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/ANGEL Learning.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/ASKBOT.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/ATutor.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Accord LMS.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/ActivInspire.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Acuity.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Alfresco.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Alpha.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Art of Problem Solving.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Authorea.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/BSCW.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/BetterLesson.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Blackboard.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/BlankEqn.doc

$LOCALAPPDATA/Temp/mathtype.tmp/Blendspace Quiz.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Blendspace.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Bloomfire.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/BooRoo.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/BrainHoney.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/CIEXYZ.pf

$LOCALAPPDATA/Temp/mathtype.tmp/CMS Made Simple.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Calibri+Symbol 11.eqp

$LOCALAPPDATA/Temp/mathtype.tmp/Calibri+Symbol 12.eqp

$LOCALAPPDATA/Temp/mathtype.tmp/Calibri+Symbol 32.eqp

$LOCALAPPDATA/Temp/mathtype.tmp/Chamilo.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Cinderella.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Cobocards.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Coggle.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Collaborize.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Colwiz.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Concrete.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Confluence.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Connexions.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Contao.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/CourseSites.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Coursera.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Cramberry.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Desire2Learn-LaTeX.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Desire2Learn-MathML.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/DigitalChalk.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Docebo.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Dokeos.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Draft.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Duxbury LaTeX.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/ELMS.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/EZ LCMS.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Ecto.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Ed2go.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Ediscio.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Edmodo.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Edublogs Pro.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Edublogs.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Edubrite.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Edufy.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Edusite.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Elxis.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Empty.gif

$LOCALAPPDATA/Temp/mathtype.tmp/EncyclopediaOfMathematics.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Etomite.tdl

$LOCALAPPDATA/Temp/mathtype.tmp/Euclid 10.eqp

$LOCALAPPDATA/Temp/mathtype.tmp/Euclid 12.eqp