Uni Obhod.zip
- SHA256 910b3a08c4805517ab7283c2e689e73534ff3f2a94aa0e7bab1d79170175ee39
Overview
overview
8Static
static
3Uni Obhod.zip
windows10-2004-x64
1Uni Obhod.zip
windows11-ltsc_2024-x64
1NoMoreCookies-2.3.zip
windows10-2004-x64
1NoMoreCookies-2.3.zip
windows11-ltsc_2024-x64
1Components...es.dll
windows10-2004-x64
3Components...es.dll
windows11-ltsc_2024-x64
3Components...64.dll
windows10-2004-x64
1Components...64.dll
windows11-ltsc_2024-x64
Components...es.dll
windows10-2004-x64
3Components...es.dll
windows11-ltsc_2024-x64
8Components...ce.exe
windows10-2004-x64
3Components...ce.exe
windows11-ltsc_2024-x64
8Components...64.exe
windows10-2004-x64
1Components...64.exe
windows11-ltsc_2024-x64
1Components...64.dll
windows10-2004-x64
1Components...64.dll
windows11-ltsc_2024-x64
1Components...es.dll
windows10-2004-x64
3Components...es.dll
windows11-ltsc_2024-x64
3Components...64.dll
windows10-2004-x64
1Components...64.dll
windows11-ltsc_2024-x64
1NoMoreCook...er.exe
windows10-2004-x64
6NoMoreCook...er.exe
windows11-ltsc_2024-x64
8Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Uni Obhod.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
Uni Obhod.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
NoMoreCookies-2.3.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
NoMoreCookies-2.3.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
Components/MiniNoMoreCookies.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
900 seconds
Behavioral task
behavioral6
Sample
Components/MiniNoMoreCookies.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
900 seconds
Behavioral task
behavioral7
Sample
Components/MiniNoMoreCookies_x64.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral8
Sample
Components/MiniNoMoreCookies_x64.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
900 seconds
Behavioral task
behavioral9
Sample
Components/NoMoreCookies.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
900 seconds
Behavioral task
behavioral10
Sample
Components/NoMoreCookies.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
16 signatures
900 seconds
Behavioral task
behavioral11
Sample
Components/NoMoreCookiesService.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
900 seconds
Behavioral task
behavioral12
Sample
Components/NoMoreCookiesService.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
15 signatures
900 seconds
Behavioral task
behavioral13
Sample
Components/NoMoreCookiesService_x64.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral14
Sample
Components/NoMoreCookiesService_x64.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral15
Sample
Components/NoMoreCookies_x64.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral16
Sample
Components/NoMoreCookies_x64.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral17
Sample
Components/XNoMoreCookies.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
900 seconds
Behavioral task
behavioral18
Sample
Components/XNoMoreCookies.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
900 seconds
Behavioral task
behavioral19
Sample
Components/XNoMoreCookies_x64.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral20
Sample
Components/XNoMoreCookies_x64.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral21
Sample
NoMoreCookiesInstaller.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
900 seconds
Behavioral task
behavioral22
Sample
NoMoreCookiesInstaller.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
16 signatures
900 seconds
General
- Target Uni Obhod.zip
- Size 6.9MB
- Sample261002-epfg3atdke
- SHA256 910b3a08c4805517ab7283c2e689e73534ff3f2a94aa0e7bab1d79170175ee39
- MD5 f39fb58bc5244261545fb877b8476965
- SHA1 a52e18a35eded875ee1cf2c7ebc227c07ad01a49
- SHA512 017848c21e119cb211825b1bdf92af65303de7478f0439ad964fc5fbfd2a6dfcce7f22426028d05657445b10456bd27a86bde0e18f8c56b21229807d405d46de
- SSDEEP 196608:91aYCR7kqKXoIsh3wW2IP2rD5iM+c09Pl8530WsYL0/:91jnsNwWxP2rDVI85UYo/
- TLSH T17876333D2A4696CBB74251BD8FF2E1348A7739654A8046EE484BE23712C7359308FF97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 9 IoCs
Checks for missing Authenticode signature.
resource unpack002/Components/MiniNoMoreCookies.dll unpack002/Components/MiniNoMoreCookies_x64.dll unpack002/Components/NoMoreCookies.dll unpack002/Components/NoMoreCookiesService.exe unpack002/Components/NoMoreCookiesService_x64.exe unpack002/Components/NoMoreCookies_x64.dll unpack002/Components/XNoMoreCookies.dll unpack002/Components/XNoMoreCookies_x64.dll unpack002/NoMoreCookiesInstaller.exe
File Explorer
-
Uni Obhod.zip.zip 6.9MB
-
NoMoreCookies-2.3.zip.zip 560KB
-
Components/MiniNoMoreCookies.dll.dll 50KB
-
Components/MiniNoMoreCookies_x64.dll.dll 198KB
-
Components/NoMoreCookies.dll.dll 58KB
-
Components/NoMoreCookiesService.exe.exe 50KB
-
Components/NoMoreCookiesService_x64.exe.exe 49KB
-
Components/NoMoreCookies_x64.dll.dll 207KB
-
Components/XNoMoreCookies.dll.dll 59KB
-
Components/XNoMoreCookies_x64.dll.dll 209KB
-
NoMoreCookiesInstaller.exe.exe 113KB
NoMoreCookies-2.3.zip
- SHA256 398167bf3344b76b2b9dc3511a3a02345db06e82359f714d34554af15d537659
- MD5 d819b0e1978689952adf9f869f710ddd
- SHA1 531a88a7706788df606bb7d08967f8435d70cb91
- SHA512 06d1d1e6db1386f41f441a78d1bffd01e675bb455518dead9cc52a6f6d5c0400cd36ab9d4bb7676b032bdcc84fac687ca2fec8fe45467afe4ec047df2331fc4c
- SSDEEP 12288:AOw8u/3jg5w7g0XybbOKCrkEM/5kD1DeulgFMRTTLfReNThANcCI:Xxu/T3g0XSb9d5kD7OaTTLfRetJN
- TLSH T157C4339E6D920BD2BFC1C23CCF2066B5658746544F703B6E1ECE55CB33862CA402D97A
- MD5 SHA1 SHA512 SSDEEP TLSH
Components/MiniNoMoreCookies.dll
- IMPHASH bbdc3afb4e127c7d399184b65a34af00
- SHA256 26405f27a485dcd4aefe40dfa2fd052d57046fd9a3da90212d108bd2fe2a7fa6
- MD5 c99249fbd341309413549783fddfaffe
- SHA1 18a40e0de838bf7b8d4389a56552323a0598ab5e
- SHA512 2e67a663c3974cc682e28a7f3886e873752ae926c9cc5d37eda8c0610c945f6a359df36cf9134925b1429a97074ede7f7dc827b8657b380927fd17fe1506eb75
- SSDEEP 1536:ppMfF+2Q6/uj/ZaIgjJrIuBEudYtw0gb/w:HMfFLQ6/u9aBjJrkudYqJb/
- TLSH T16C333B12B20140BEE57E4DF0291A69B595FDE8289FE123D313C66A6ADD125D0FD32B0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
32610
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Lenovo\source\repos\NoMoreCookies\Release\NoMoreCookies.pdb
kernel32
GetCurrentProcessId
K32GetProcessImageFileNameW
K32GetModuleInformation
CreateThread
GetCurrentThread
DisableThreadLibraryCalls
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
GetProcAddress
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
SetLastError
FreeLibrary
LoadLibraryExA
LoadLibraryExW
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
ReleaseMutex
WaitForSingleObject
CloseHandle
ReadFile
CreateFileW
GetCurrentProcess
GetLastError
QueryPerformanceCounter
GetModuleHandleW
GetModuleFileNameW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
K32GetModuleFileNameExW
CreateMutexW
LocalAlloc
SetThreadContext
LocalFree
UnhandledExceptionFilter
user32
LoadIconW
advapi32
GetSidSubAuthorityCount
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
OpenProcessToken
GetTokenInformation
GetUserNameW
OpenSCManagerW
GetSidSubAuthority
shell32
Shell_NotifyIconW
msvcp140
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
wintrust
WinVerifyTrust
crypt32
CryptQueryObject
CryptMsgGetParam
CertFindCertificateInStore
CertFreeCertificateContext
CertCloseStore
CertGetNameStringW
vcruntime140
__current_exception
__current_exception_context
_except_handler4_common
memset
__std_type_info_destroy_list
memcpy
wcsstr
__std_exception_destroy
memmove
_CxxThrowException
__std_exception_copy
__CxxFrameHandler3
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf_s
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
api-ms-win-crt-runtime-l1-1-0
terminate
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_cexit
_seh_filter_dll
_configure_narrow_argv
_crt_atexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_register_onexit_function
api-ms-win-crt-string-l1-1-0
wcsncpy_s
wcscpy_s
towlower
api-ms-win-crt-convert-l1-1-0
wcstombs_s
Name
.text
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourd
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=18, id=261, version=32420,
count=10, id=260, version=32420,
count=2, id=259, version=32420,
count=4, id=257, version=32420,
count=13, id=257, version=29395,
count=114, id=1, productName=Unmarked objects,
count=3, id=261, productName=VS2019 v16.0.0 build 27508, version=27508,
count=2, id=265, version=32532,
count=1, id=255, version=32532,
count=1, id=258, version=32532,
Components/MiniNoMoreCookies_x64.dll
- IMPHASH 11072aabc272aac5bbf61d5a80dcf10f
- SHA256 bb012053b0712c72dfedb6110524a826c30477a638a86abddab4f93e4d086c52
- MD5 60e2d520d2e9007fdaff194ee39b4288
- SHA1 9cf3fb78a6d11c26f77aa5618f92f917aa10b400
- SHA512 22329dd656fa69ca48006518ebdcf048b45f14943b8a38db302405091cda9e16ceb705bf4e74565f94819885073f5a9890de5cd7a35a8b607c66e546b019eb07
- SSDEEP 6144:PQQsflVWj30TA7vCmduCAwYHuNK0/z+o:P4C30A7vCmQuIaK0K
- TLSH T1A4144A16B6A500B9ECB7913489471E06F772B8950330BB9F0B6046B99F3B7E05E3D792
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
39024
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Lenovo\source\repos\NoMoreCookies\x64\Release\NoMoreCookies.pdb
kernel32
GetCurrentProcessId
K32GetProcessImageFileNameW
ExitProcess
K32GetModuleInformation
CreateThread
GetCurrentThread
DisableThreadLibraryCalls
GetCurrentThreadId
SuspendThread
ResumeThread
GetModuleHandleW
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
SetLastError
FreeLibrary
LoadLibraryExA
LoadLibraryExW
GetConsoleMode
GetProcAddress
ReleaseMutex
WaitForSingleObject
CloseHandle
ReadFile
CreateFileW
GetCurrentProcess
GetConsoleOutputCP
WriteFile
FlushFileBuffers
HeapReAlloc
GetLastError
GetModuleFileNameW
K32GetModuleFileNameExW
CreateMutexW
LocalAlloc
GetThreadContext
LocalFree
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlUnwind
GetModuleHandleExW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
WideCharToMultiByte
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
SetFilePointerEx
GetStringTypeW
SetStdHandle
HeapSize
WriteConsoleW
user32
LoadIconW
advapi32
GetSidSubAuthorityCount
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
OpenProcessToken
GetTokenInformation
GetSidSubAuthority
GetUserNameW
OpenSCManagerW
shell32
Shell_NotifyIconW
wintrust
WinVerifyTrust
crypt32
CryptMsgGetParam
CertFindCertificateInStore
CertGetNameStringW
CertFreeCertificateContext
CertCloseStore
CryptQueryObject
Name
.text
Size
123KB
Virtual Size
123KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourd
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=259, version=29395,
count=136, id=261, version=29395,
count=11, id=260, version=29395,
count=15, id=260, version=32420,
count=9, id=259, version=32420,
count=38, id=261, version=32420,
count=13, id=257, version=29395,
count=139, id=1, productName=Unmarked objects,
count=3, id=261, productName=VS2019 v16.0.0 build 27508, version=27508,
count=2, id=265, version=32532,
count=1, id=255, version=32532,
count=1, id=258, version=32532,
Components/NoMoreCookies.dll
- IMPHASH 04a256795681c977429ac05bd695d903
- SHA256 1d75affc5168c89c31c5981e5f0edc664a56957b00c4f7dedef881fdda3e3098
- MD5 002cf817af0f4bd9f2faa763b86a243f
- SHA1 317454961a84c936b7cb826881693631681aca5e
- SHA512 2f085d8c8a2899b0d2793d0b88dc5c9f4971e69009400cb4973f9005643d63f0bdf99f35b4ac6661b5ef4d0c47afdfbfb516fc7be8bbdb004c1e50689930f565
- SSDEEP 1536:pFo+l7GUeO3QMuxaIP4W7sXZJVR5jB9+50Bt5ZWnvUd/vRtg//CGa7xk4XqPMw:/o+lCUegQMuUvW7gJVR5+mBbZWnvUd/V
- TLSH T131432B11E30160B3E97E09B334646A79947FBD3877F112D323825AAE9D221F67D35A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
38722
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Lenovo\source\repos\NoMoreCookies\Release\NoMoreCookies.pdb
kernel32
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
VirtualFreeEx
GetProcessIdOfThread
GetCurrentProcessId
GetProcessId
K32GetProcessImageFileNameW
ExitProcess
K32GetModuleInformation
Sleep
GetExitCodeThread
CreateThread
GetCurrentThread
DisableThreadLibraryCalls
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
GetProcAddress
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
SetLastError
FreeLibrary
LoadLibraryExA
LoadLibraryExW
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetModuleFileNameA
OpenProcess
ReleaseMutex
WaitForSingleObject
IsWow64Process
CloseHandle
ReadFile
CreateFileW
GetCurrentProcess
GetLastError
QueryPerformanceCounter
GetModuleHandleW
GetModuleFileNameW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
K32GetModuleFileNameExW
CreateMutexW
LocalAlloc
SetThreadContext
LocalFree
UnhandledExceptionFilter
user32
LoadIconW
advapi32
GetSidSubAuthorityCount
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
OpenProcessToken
GetTokenInformation
GetUserNameW
OpenSCManagerW
GetSidSubAuthority
shell32
Shell_NotifyIconW
msvcp140
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
wintrust
WinVerifyTrust
crypt32
CryptQueryObject
CryptMsgGetParam
CertFindCertificateInStore
CertFreeCertificateContext
CertCloseStore
CertGetNameStringW
vcruntime140
__current_exception
__current_exception_context
_except_handler4_common
memset
__std_type_info_destroy_list
memcpy
wcsstr
__std_exception_destroy
memmove
_CxxThrowException
__std_exception_copy
__CxxFrameHandler3
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf_s
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
api-ms-win-crt-runtime-l1-1-0
terminate
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_cexit
_seh_filter_dll
_configure_narrow_argv
_crt_atexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_register_onexit_function
api-ms-win-crt-string-l1-1-0
wcsncpy_s
wcscpy_s
towlower
api-ms-win-crt-convert-l1-1-0
wcstombs_s
api-ms-win-crt-math-l1-1-0
ceil
Name
.text
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourd
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=18, id=261, version=32420,
count=10, id=260, version=32420,
count=2, id=259, version=32420,
count=4, id=257, version=32420,
count=13, id=257, version=29395,
count=114, id=1, productName=Unmarked objects,
count=3, id=261, productName=VS2019 v16.0.0 build 27508, version=27508,
count=2, id=265, version=32532,
count=1, id=255, version=32532,
count=1, id=258, version=32532,
Components/NoMoreCookiesService.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9ff907b21da3b4ddd7f32802b48e9028c704b435ca48c00b952e3364b3857dc9
- MD5 7099f18ac4d2df04b40239ea08ddea21
- SHA1 fe19d3af8cc861d2cc9a8b828a93455d7ff8ea50
- SHA512 cf4626943d4817498d33ae519044f865ab07727feecb01ba9b51dbda9dc47d6c0944b6942444f91a639ebafbb1da92c9e74a28e1cfec032d5572af01589d85cf
- SSDEEP 1536:MgRaHSTa43mTRT3GpZt8Gi9qoM3P61xga9LQ:4HA3yWpLR53S1xX9M
- TLSH T11933D053AAED8B71C8E735313932A740067CC353AE4AAB3E45F981590D6578D0BC6F27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13398
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Lenovo\source\repos\NoMoreCookiesService\NoMoreCookiesService\obj\Debug\NoMoreCookiesService.pdb
mscoree
_CorExeMain
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Components/NoMoreCookiesService_x64.exe
- SHA256 9e7f5ea1387a7414a95d6aaf05bf1481f7ec184498bf2a41e0ad86061f3a7bab
- MD5 640fda72f19eefa7b5594bc753a08ddc
- SHA1 1549cfaa4a29bb37add40918d01d6213f06eb2d5
- SHA512 47c8adc49198f0e90024677e27862c48d84c5d6370abf0673fe5f8e71c86b55b16948bb04d6e20def143a0483152d28c9cf1b1e4a85d1265be8595ee5357829e
- SSDEEP 1536:VvRaHSTa43mTRT3GpZt8Gi9qoM3P61xga9LQ:qHA3yWpLR53S1xX9M
- TLSH T10C33E093AAED8770C8E735313932A740067CD343AE4AAB3D41F981590DA578D0BD6F27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Lenovo\source\repos\NoMoreCookiesService\NoMoreCookiesService\obj\Debug\NoMoreCookiesService.pdb
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Components/NoMoreCookies_x64.dll
- IMPHASH 72747a97a06f242eaef581a4f8401a47
- SHA256 e1c90107b1423834601248032e67ee8e69a36b1ac3a6d7a4cbc74efe02798f94
- MD5 40c1905df6e28c541dd081fc5e926b3d
- SHA1 806479f5532cd4277050e273c6fbf9339c4f6a40
- SHA512 e572df942987c59191a9eae8e155e8c5ff84337e20b4a56bd30325e09cbf0b097ab6e6974dc343a0075727ac87bd659da363435bb55277526abe097c43af2bd8
- SSDEEP 6144:CRxVNldtv6UVA7vOQMXQJrUua0tiM+kRZ8WF:CFraUVA7vOQI+VLtiMvZl
- TLSH T121244A96B2A600B8FCB7913489531E06F772B8550738A79F03E046799F2B7E0AD3DB51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
46624
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Lenovo\source\repos\NoMoreCookies\x64\Release\NoMoreCookies.pdb
kernel32
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
VirtualFreeEx
GetProcessIdOfThread
GetCurrentProcessId
GetProcessId
K32GetProcessImageFileNameW
ExitProcess
K32GetModuleInformation
Sleep
GetExitCodeThread
CreateThread
GetCurrentThread
DisableThreadLibraryCalls
GetCurrentThreadId
SuspendThread
ResumeThread
GetModuleHandleW
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
SetLastError
FreeLibrary
LoadLibraryExA
LoadLibraryExW
GetConsoleMode
GetProcAddress
GetModuleFileNameA
OpenProcess
ReleaseMutex
WaitForSingleObject
IsWow64Process
CloseHandle
ReadFile
CreateFileW
GetCurrentProcess
GetConsoleOutputCP
WriteFile
FlushFileBuffers
HeapReAlloc
GetLastError
GetModuleFileNameW
K32GetModuleFileNameExW
CreateMutexW
LocalAlloc
GetThreadContext
LocalFree
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlUnwind
GetModuleHandleExW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
WideCharToMultiByte
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
SetFilePointerEx
GetStringTypeW
SetStdHandle
HeapSize
WriteConsoleW
user32
LoadIconW
advapi32
GetSidSubAuthorityCount
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
OpenProcessToken
GetTokenInformation
GetSidSubAuthority
GetUserNameW
OpenSCManagerW
shell32
Shell_NotifyIconW
wintrust
WinVerifyTrust
crypt32
CryptMsgGetParam
CertFindCertificateInStore
CertGetNameStringW
CertFreeCertificateContext
CertCloseStore
CryptQueryObject
Name
.text
Size
131KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourd
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=259, version=29395,
count=136, id=261, version=29395,
count=11, id=260, version=29395,
count=15, id=260, version=32420,
count=9, id=259, version=32420,
count=38, id=261, version=32420,
count=13, id=257, version=29395,
count=139, id=1, productName=Unmarked objects,
count=3, id=261, productName=VS2019 v16.0.0 build 27508, version=27508,
count=2, id=265, version=32532,
count=1, id=255, version=32532,
count=1, id=258, version=32532,
Components/XNoMoreCookies.dll
- IMPHASH 04a256795681c977429ac05bd695d903
- SHA256 3e7429ff295ec3bfaa71b5de6a14aed3f4d95d0c54c107aa0c974aec9acf63d8
- MD5 ec20bc52f139ac805e0b6064c6485b13
- SHA1 eb9d187e1aa3bfba742d42cb4dcc1d2077daaf11
- SHA512 8991c04fa81cce8c9520f51e4cd63a5ace46ab9272e9e8103e1ae0762989bb8bc8ecc08a384b7a7f10c0ad980f5324d776b141ed5a08c906493b583649425bee
- SSDEEP 1536:p4G4+uoKOSXULPMIPiiGiyeVR5zB3vVdBt5Dpeyrw:qG4+uFOSXULUFNxeVR/vVdBbVeI
- TLSH T150534C31B3C140B1E57A09B03A247679947EBD3847F952D32B866E3B8D62DF67D30A05
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
39906
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Lenovo\source\repos\NoMoreCookies\Release\NoMoreCookies.pdb
kernel32
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
VirtualFreeEx
GetProcessIdOfThread
GetCurrentProcessId
GetProcessId
K32GetProcessImageFileNameW
ExitProcess
K32GetModuleInformation
Sleep
GetExitCodeThread
CreateThread
GetCurrentThread
DisableThreadLibraryCalls
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
GetProcAddress
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
SetLastError
FreeLibrary
LoadLibraryExA
LoadLibraryExW
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetModuleFileNameA
OpenProcess
ReleaseMutex
WaitForSingleObject
IsWow64Process
CloseHandle
ReadFile
CreateFileW
GetCurrentProcess
GetLastError
QueryPerformanceCounter
GetModuleHandleW
GetModuleFileNameW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
K32GetModuleFileNameExW
CreateMutexW
LocalAlloc
SetThreadContext
LocalFree
UnhandledExceptionFilter
user32
LoadIconW
advapi32
GetSidSubAuthorityCount
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
OpenProcessToken
GetTokenInformation
GetUserNameW
OpenSCManagerW
GetSidSubAuthority
shell32
Shell_NotifyIconW
msvcp140
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
wintrust
WinVerifyTrust
crypt32
CryptQueryObject
CryptMsgGetParam
CertFindCertificateInStore
CertFreeCertificateContext
CertCloseStore
CertGetNameStringW
vcruntime140
__current_exception
__current_exception_context
_except_handler4_common
memset
__std_type_info_destroy_list
memcpy
wcsstr
__std_exception_destroy
memmove
_CxxThrowException
__std_exception_copy
__CxxFrameHandler3
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf_s
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
api-ms-win-crt-runtime-l1-1-0
terminate
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_cexit
_seh_filter_dll
_configure_narrow_argv
_crt_atexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_register_onexit_function
api-ms-win-crt-string-l1-1-0
wcsncpy_s
wcscpy_s
towlower
api-ms-win-crt-convert-l1-1-0
wcstombs_s
api-ms-win-crt-math-l1-1-0
ceil
Name
.text
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourd
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=18, id=261, version=32420,
count=10, id=260, version=32420,
count=2, id=259, version=32420,
count=4, id=257, version=32420,
count=13, id=257, version=29395,
count=114, id=1, productName=Unmarked objects,
count=3, id=261, productName=VS2019 v16.0.0 build 27508, version=27508,
count=2, id=265, version=32532,
count=1, id=255, version=32532,
count=1, id=258, version=32532,
Components/XNoMoreCookies_x64.dll
- IMPHASH 72747a97a06f242eaef581a4f8401a47
- SHA256 fd4ea02ddb32398b3d054a66786bc22a3ffc554dcea001f5febcf8e668de0bcb
- MD5 bc39fa740f14f6e3a225285349a5684b
- SHA1 a7244eb18c2a755f1254427218217c44e184dadf
- SHA512 a5b22c7273d4f7363aa8e0cf2c4d7fcd9160c515d373a16ced26bd1c03ee3575541c4c0d178cc04b791c70a735c1788dbc70774e4b1753c430a83441b9be9ebf
- SSDEEP 6144:ONaAP1WiBxZA7vePIM23PPdK0ggWkQK8AH4I:OzPBxZA7vePvSF/ggGKxYI
- TLSH T1AD244B16BAA400F8ECB781388A531906F776B81547309B9F03B2867D9F2B7E09D7DB51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
47664
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Lenovo\source\repos\NoMoreCookies\x64\Release\NoMoreCookies.pdb
kernel32
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
VirtualFreeEx
GetProcessIdOfThread
GetCurrentProcessId
GetProcessId
K32GetProcessImageFileNameW
ExitProcess
K32GetModuleInformation
Sleep
GetExitCodeThread
CreateThread
GetCurrentThread
DisableThreadLibraryCalls
GetCurrentThreadId
SuspendThread
ResumeThread
GetModuleHandleW
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
SetLastError
FreeLibrary
LoadLibraryExA
LoadLibraryExW
GetConsoleMode
GetProcAddress
GetModuleFileNameA
OpenProcess
ReleaseMutex
WaitForSingleObject
IsWow64Process
CloseHandle
ReadFile
CreateFileW
GetCurrentProcess
GetConsoleOutputCP
WriteFile
FlushFileBuffers
HeapReAlloc
GetLastError
GetModuleFileNameW
K32GetModuleFileNameExW
CreateMutexW
LocalAlloc
GetThreadContext
LocalFree
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlUnwind
GetModuleHandleExW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
WideCharToMultiByte
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
SetFilePointerEx
GetStringTypeW
SetStdHandle
HeapSize
WriteConsoleW
user32
LoadIconW
advapi32
GetSidSubAuthorityCount
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
OpenProcessToken
GetTokenInformation
GetSidSubAuthority
GetUserNameW
OpenSCManagerW
shell32
Shell_NotifyIconW
wintrust
WinVerifyTrust
crypt32
CryptMsgGetParam
CertFindCertificateInStore
CertGetNameStringW
CertFreeCertificateContext
CertCloseStore
CryptQueryObject
Name
.text
Size
132KB
Virtual Size
131KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourd
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=259, version=29395,
count=136, id=261, version=29395,
count=11, id=260, version=29395,
count=15, id=260, version=32420,
count=9, id=259, version=32420,
count=38, id=261, version=32420,
count=13, id=257, version=29395,
count=139, id=1, productName=Unmarked objects,
count=3, id=261, productName=VS2019 v16.0.0 build 27508, version=27508,
count=2, id=265, version=32532,
count=1, id=255, version=32532,
count=1, id=258, version=32532,
NoMoreCookiesInstaller.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 07693b8e6ef2e9605e287bdc45086996df9dceaa91121541316a87179f4ed234
- MD5 2619bcd0526ea3b87d97c73bdf57ecbd
- SHA1 d9c36606f7fd2441b4b587a7fddc5afaea3a6d5e
- SHA512 2c6e0602a5df47f9d1df9729707fbe783641be6f1be470060297abc4358810df6c61b2d987a69fe3b6b0c0b92235ec16d5b50f9a0c24d9d1baf7931d1590afdd
- SSDEEP 3072:HW+Oefdo5ojFBD3LTnvHA3yWpLR53S1xX9a:2+po6ZMlpXmX
- TLSH T13AB39D0167FD0664F6FF2FB179B152440B76F963AD34E31C0259045E1AB2B4ACAA9F23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
78198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Lenovo\source\repos\NoMoreCookiesInstaller\NoMoreCookiesInstaller\obj\Debug\NoMoreCookiesInstaller.pdb
mscoree
_CorExeMain
Name
.text
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ