чебурашка-запрет-v0[.]1[.]2[.]zip

resource
unpack001/чебурашка-запрет-v0.1.2/bin/WinDivert.dll
unpack001/чебурашка-запрет-v0.1.2/bin/cygwin1.dll
unpack001/чебурашка-запрет-v0.1.2/bin/winws.exe

чебурашка-запрет-v0.1.2.zip

SHA256 09c5a745cbec286d782f97c7ae2ed6226e8fd259d87ef358fc63b354cd668aa4
MD5 eae303cb9deebfa029cc1487958e4499
SHA1 61973ed0052aabcd31bdba964db1e4a9ee2fb32b
SHA512 29827c0f8c546c809207d8034aa8519dd1d726e8ca13e6e18ce935c0682bed878b16fb91d1b08e892101268daf6a964b5230c979b9220e2f7e3866ab782fcac4
SSDEEP 24576:kH1riMw43lZppr6r24rsIFjVkHMmdM1ikBod4/xjtUQjbc3O8uiQDAymS:eRw4ZVUfrsG5mi1I4YQjo3LNSZ
TLSH
T1036533640A1C478AE68DFEB9A41464037FBEBE8B4E5F00B3C15211DC3C9236E6B5953E
MD5 SHA1 SHA512 SSDEEP TLSH

чебурашка-запрет-v0.1.2/AGGRESSIVE.bat

SHA256 2f0d940bd022bd5ebca996d31978684cfc0bc31a572b6f8346c573ffed4a41d2
MD5 087b2d91b8409644e87f656d20304fac
SHA1 6737433fdf70b3d8c7a43d34e120e5bd3262b857
SHA512 68d2fa26195436b5d67ca767fc2bdcd485ca93a561799ab16f36b2774e28b9aeb3353ec4b84fb4eb8b6b7054992a3441d9046157519a72198294c18853c99b0b
TLSH
T12321FE83C00CC90A74C9E77EE85F649021278CCB6BDAC58352D519E1EB8D8B67CCA0D5
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/GAMING.bat

SHA256 6bd5edaed053fb3dd685c8b9616ba51a540b320a2b92811973633f3c0096b7c4
MD5 57d530d43d3d8d08aec83a251444fd5f
SHA1 e2344586c0bbf6a2cb358d6b9b2427698b5d1c6c
SHA512 7c02bbe76ef11a365cbc2e1b4341fedbf9f25618c45980fa94c8d90023345395c790440690b51e46722788c814e549aa56c38f3e476ab4b84a51b4b9e263c2e7
TLSH
T10D11EFA290A8D40AB0C6D73EE46F31C5652BC85763C4C843228C18E59F4ED7575C60D6
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/LITE.bat

SHA256 2cf40d26722a1a86dd8cad7dea873fafeb982e73f183929e6fbfd49007b86e53
MD5 af652c5b6ddbb7f15425a87c1ef6b579
SHA1 444dc028edaec74805c9b75860480b266fe9fa13
SHA512 23125f4d9f601a2a9dbd6d38ea1a81fb4d760bd28d66a055f64194e35f7f91c643f955834528252e72c702339035e26a56380d99ea8e98899e4ec3b4aee74ef6
TLSH
T102F02DD250ADC50B708FD276F59F35C1713BD8A663D5D543608434EB8B4E864B5DA0DC
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/OPTIMIZE.bat

SHA256 892cee9b9a260d8cbbd25f3565f5bdcae8e44f5c90b6c1a550f65cab68e2dec7
MD5 30a676dae6a5616517888cf4eb558957
SHA1 20dddc976069edcb4b2c7e28e74f30f6d311cb05
SHA512 a79ff0e0e7d442cb81c33e1e60d54fea99a0f7515b1a252ab793f9bf3869d25fc522ad6462b564a6d2172fabb36cf4cdb7ac3278d463008d8a77e70aae841de8
TLSH
T1022100A3C04CC90EB0C9D37AF45F2194222BCCDB67C9854322E815E69F4DC7675CA0D6
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/START.bat

SHA256 4cbd0433ca4868e149bc947a08cb52c1d0f641c3be29907cf4f51a335a148c86
MD5 0adf9f429db9cbae7d6338621d0eef40
SHA1 f434173968f91167e7f2d3ce2a7a95b7c5d9b7a4
SHA512 d9f5a8fb3a41277b6d4814582f347e6342a578cdad064fd484fcc2a013b57941518a055010c614f2b0b605ac38b927b7ab72e1b4c588f02e97e9cf5a80dfa424
TLSH
T1A161ED16301A5416013D9F5A8EB02CC5F58E40BFCA2A1DED389FD0E81FB1EA4EDE9359
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/START.txt

SHA256 e207b6428c34bd1506bc037d2ba76a0abcc118edfdb95815ce418fd0b365c406
MD5 3b3b5d8713b7eaf23c6b8159b1f5930f
SHA1 d9110ba96498ef8455477bb02beb4cd58e5daeb9
SHA512 4eadc4cf8696e1d6a36376033851c80a0802b88d1c3276d838f4e856f153b3a03b291882ec22a46017ec6bf8b3ed7284529711d27510760be93f153b05097313
SSDEEP 192:C2WLEGAKDCrHxGswaJX+fLCwegnYwN6f4Cn3svzggNBVDMNqVJ0E+KVhtDG:C2WkKurRGstJufLCAnk3YXMNqr0gVHK
TLSH
T167A29A30114A589A3360EC4FC8396E0DA59678BEFEA65312345D38ED6FFE534CE18639
MD5 SHA1 SHA512 SSDEEP TLSH

чебурашка-запрет-v0.1.2/bin/ACTIVE_DISCORD_UDP.bin

SHA256 2fe18b3bd20807d36704d0b072092ee49ae84edca907a4420ab9a0f0f28fddcf
MD5 7429222625dfb23a41af04a4aa704acb
SHA1 5e17589b3ab3d86dd269e6382dfdd15931f386e8
SHA512 28563bd1fa798dcd3d95f13421c3b5041363cf0943baa3479138375f6daabbbfcaa6e2658b8e8e126850a40bdd658ce9a9e43abf5a5a073e6377a28211eb5243
TLSH
T1DD210DEF44273587CE95476523AC42FCA7C3956FC648047A6FF372051C7C14EE591415
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/bin/ACTIVE_GAME_UDP.bin

SHA256 e065870cb0d13152e6132807bbf42218a9e7cd8d96f5602b61674cc540f3a56e
MD5 6422bac6b3e976bab5d21451b834221f
SHA1 5c3cbd90820054aec414e1c6e89f0ed03eb1f1d1
SHA512 0c2b212260fe6a4ef7af91f2e5cb1d9ba117c0654a80b4153301c23f08e63c8921835ae5e66f287b60722e1aee5b122fd18ce856f1aaba52604c0f51d9859205
TLSH
T1F721EA9951EF257024F6430A18E9A4B6594366C74AF68BF351D90CA06CE974B8F09863
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/bin/WinDivert.dll

IMPHASH 0b649f8e17494bb31b47f6e959a1769c
SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
MD5 b2014d33ee645112d5dc16fe9d9fcbff
SHA1 aa69498562d350f2de06954b133e59fac1e57002
SHA512 37014a018b9cd91b2eaeeccc7c5af3838fcae4d4fe6bb50c7ae32cd5c99423965a3e3efb29499324f6885b8f0c2ee2952cb75ab73db4e8960811abcb46801f15
SSDEEP 768:Qjf2rf/kxpxI+JEw2VWHDDjQSQX4zTtllgwBqWocwTicI:YuT/CXHDvVQatonTic
TLSH
T17423D803F74151B7C429C27083AED352AE22FCC56354F9EF82DEB7952D85E42DB1A606
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

31496

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

840B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

800B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

240B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

чебурашка-запрет-v0.1.2/bin/WinDivert64.sys

IMPHASH db584dd0570594898805dd67d7ff391c
SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
MD5 89ed5be7ea83c01d0de33d3519944aa5
SHA1 4c9b9c74529399abacc2284de1dead5f2332ee9b
SHA512 be6530fa0e26441441028b530cd6fc4f900448916e137f92613a1f886c16399d415ddd17f7f8847258cc19c63b1510f2f3068942203c50486e48eed838f9f138
SSDEEP 1536:AsmCCzg4Klt7jh//NiRMwoGK0tmdsAXixJz48dJ/zuXR:Atzilt/iR5ojGmdsAXoz4k/8R
TLSH
T12E935B46B2E240C5F9F6C97895F59253EE31FA90A721C7DF11E0981E4F21BE1AD78322
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

5a:de:d7:5d:6b:eb:31:58:49:f6:98:a7:8f:80:33:de:26:eb:15:19:55:a1:cb:c0:1e:30:37:32:0e:2a:0e:b6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 20, 2022

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

5a:de:d7:5d:6b:eb:31:58:49:f6:98:a7:8f:80:33:de:26:eb:15:19:55:a1:cb:c0:1e:30:37:32:0e:2a:0e:b6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Sep 20, 2022

SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

01

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jan 1, 2004 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Serial Number

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Dec 31, 2028

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Serial Number

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 11, 2022 - Aug 10, 2033

Subject

SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

61:50:19:91:b1:8f:32:38:04:52:51:37:dc:25:00:5a

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2022 - May 25, 2023

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:57:ee:4d:65:9a:92:3e:7c:10:00:00:00:00:00:57

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 7, 2022 - Jun 1, 2023

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 2, 2022 - May 11, 2023

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

4484

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\WinDivert-2.2.2\install\MSVC\amd64\WinDivert64.pdb

ntoskrnl.exe

RtlCopyUnicodeString KeBugCheckEx IoGetRequestorProcess PsGetProcessId ExUuidCreate ObfDereferenceObject ObfReferenceObject IoWriteErrorLogEntry IoGetCurrentProcess IoFreeMdl IoAllocateMdl IoAllocateErrorLogEntry MmMapLockedPagesSpecifyCache MmBuildMdlForNonPagedPool ExFreePoolWithTag ExAllocatePoolWithTag KeReleaseInStackQueuedSpinLock KeAcquireInStackQueuedSpinLock RtlGetVersion RtlIntegerToUnicodeString

hal

KeQueryPerformanceCounter

ndis.sys

NdisAllocateNetBufferPool NdisFreeNetBufferPool NdisAllocateNetBufferListPool NdisGetDataBuffer NdisAdvanceNetBufferDataStart NdisRetreatNetBufferDataStart NdisFreeNetBufferListPool

fwpkclnt.sys

FwpmTransactionAbort0 FwpmTransactionBegin0 FwpmEngineClose0 FwpmEngineOpen0 FwpsQueryPacketInjectionState0 FwpmProviderAdd0 FwpmProviderDeleteByKey0 FwpsInjectNetworkReceiveAsync0 FwpmSubLayerAdd0 FwpmSubLayerDeleteByKey0 FwpmCalloutAdd0 FwpmCalloutDeleteByKey0 FwpmFilterAdd0 FwpmFilterDeleteByKey0 FwpmTransactionCommit0 FwpsCalloutRegister0 FwpsCalloutUnregisterByKey0 FwpsFlowAssociateContext0 FwpsFlowRemoveContext0 FwpsInjectionHandleCreate0 FwpsInjectionHandleDestroy0 FwpsAllocateNetBufferAndNetBufferList0 FwpsFreeNetBufferList0 FwpsInjectNetworkSendAsync0 FwpsInjectForwardAsync0

wdfldr.sys

WdfVersionBindClass WdfVersionUnbindClass WdfVersionBind WdfVersionUnbind

Name

.text

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

420B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

чебурашка-запрет-v0.1.2/bin/cygwin1.dll

IMPHASH 8f21c12c4e790805822951d4e4dcad1c
SHA256 103104a52e5293ce418944725df19e2bf81ad9269b9a120d71d39028e821499b
MD5 a1c82ed072dc079dd7851f82d9aa7678
SHA1 52f26fa1aee39476f1c13438aec8bf969c78da45
SHA512 22993e7cee1e7aa69ffe45adf3a329abced7e53d54ffea96dab42fe273c81522252c7b7e98e5af36d2fdec0346c51540e977c6e56b8c08835bac86fa6d04ca59
SSDEEP 49152:hGniafRcs02/oSqCmB5RMiCwDjUZQjuhKv+TLRlURxKc+tKaZrpu8dhcy1u7MHz:YniGRcsVJqCmB5RMiCwDIS4TBrppUy1J
TLSH
T165D55C1BF3A350ECC967C138466BA372BA32B82441347F6E2958CB701F72F51666DB25
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

202560

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared AddVectoredContinueHandler AllocConsole AttachConsole CallNamedPipeA CancelIo CancelSynchronousIo ClearCommBreak ClearCommError CloseHandle CompareStringW ConnectNamedPipe CreateFileA CreateFileW CreateNamedPipeA CreatePipe CreateProcessW CreateRemoteThread CreateSymbolicLinkW CreateTapePartition CreateThread DebugBreak DeleteCriticalSection DeleteProcThreadAttributeList DeviceIoControl DisconnectNamedPipe DuplicateHandle EnterCriticalSection EraseTape EscapeCommFunction ExitProcess ExitThread ExpandEnvironmentStringsW FillConsoleOutputAttribute FillConsoleOutputCharacterW FindFirstVolumeW FindNextVolumeW FindVolumeClose FlushConsoleInputBuffer FlushFileBuffers FlushViewOfFile FreeConsole FreeEnvironmentStringsW FreeLibrary GenerateConsoleCtrlEvent GetBinaryTypeW GetCommModemStatus GetCommState GetCommandLineW GetConsoleCP GetConsoleCursorInfo GetConsoleMode GetConsoleOutputCP GetConsoleProcessList GetConsoleScreenBufferInfo GetConsoleWindow GetCurrentConsoleFontEx GetCurrentProcess GetCurrentProcessId GetCurrentProcessorNumberEx GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableA GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesA GetFileSize GetFileSizeEx GetFileType GetFinalPathNameByHandleW GetHandleInformation GetLastError GetLocaleInfoA GetLocaleInfoW GetLogicalDriveStringsA GetLogicalDrives GetLogicalProcessorInformationEx GetModuleFileNameW GetModuleHandleA GetModuleHandleExA GetModuleHandleExW GetNamedPipeClientProcessId GetNumberOfConsoleInputEvents GetOverlappedResult GetPriorityClass GetProcAddress GetProcessAffinityMask GetProcessGroupAffinity GetProcessHeap GetProcessId GetProcessWorkingSetSize GetStartupInfoA GetStdHandle GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetSystemWindowsDirectoryW GetTapeParameters GetTapePosition GetTapeStatus GetTempPathW GetThreadContext GetThreadGroupAffinity GetThreadId GetThreadPriority GetTickCount GetTickCount64 GetTimeZoneInformation GetVolumeNameForVolumeMountPointW GetVolumePathNamesForVolumeNameW GlobalAlloc GlobalLock GlobalMemoryStatusEx GlobalSize GlobalUnlock HeapAlloc HeapCreate HeapDestroy HeapFree IdnToAscii IdnToUnicode InitializeCriticalSection InitializeProcThreadAttributeList IsBadStringPtrA IsDebuggerPresent IsProcessInJob LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree LocaleNameToLCID MapViewOfFile MapViewOfFileEx MultiByteToWideChar OpenProcess OpenThread OutputDebugStringA PeekConsoleInputA PeekConsoleInputW PeekNamedPipe PrepareTape PurgeComm QueryDosDeviceW QueryInformationJobObject QueryPerformanceCounter QueryPerformanceFrequency QueryUnbiasedInterruptTime QueueUserAPC RaiseException ReadConsoleInputA ReadConsoleInputW ReadConsoleOutputW ReadFile ReadProcessMemory ReleaseMutex ReleaseSRWLockExclusive ReleaseSRWLockShared ReleaseSemaphore ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlRestoreContext RtlUnwindEx RtlVirtualUnwind ScrollConsoleScreenBufferA ScrollConsoleScreenBufferW SetCommBreak SetCommMask SetCommState SetCommTimeouts SetComputerNameExW SetConsoleCP SetConsoleCtrlHandler SetConsoleCursorInfo SetConsoleCursorPosition SetConsoleMode SetConsoleOutputCP SetConsoleTextAttribute SetConsoleTitleW SetConsoleWindowInfo SetEnvironmentVariableW SetErrorMode SetEvent SetFilePointerEx SetHandleInformation SetLastError SetNamedPipeHandleState SetPriorityClass SetProcessAffinityMask SetProcessWorkingSetSize SetStdHandle SetSystemTime SetTapeParameters SetTapePosition SetThreadContext SetThreadGroupAffinity SetThreadPriority SetThreadStackGuarantee Sleep SuspendThread SwitchToThread TerminateProcess TerminateThread TlsAlloc TlsFree TlsGetValue TlsSetValue TransmitCommChar UnmapViewOfFile UpdateProcThreadAttribute VirtualAlloc VirtualFree VirtualProtect VirtualProtectEx VirtualQuery VirtualQueryEx WaitCommEvent WaitForMultipleObjects WaitForSingleObject WaitNamedPipeW WideCharToMultiByte WriteConsoleInputW WriteConsoleOutputW WriteConsoleW WriteFile WriteProcessMemory WriteTapemark

ntdll

NtAccessCheck NtAdjustPrivilegesToken NtAllocateLocallyUniqueId NtAssignProcessToJobObject NtCancelTimer NtClose NtCommitTransaction NtCreateDirectoryObject NtCreateEvent NtCreateFile NtCreateJobObject NtCreateKey NtCreateMutant NtCreateNamedPipeFile NtCreateSection NtCreateSemaphore NtCreateSymbolicLinkObject NtCreateTimer NtCreateTransaction NtDuplicateToken NtFlushBuffersFile NtFsControlFile NtLockFile NtLockVirtualMemory NtMapViewOfSection NtOpenDirectoryObject NtOpenEvent NtOpenFile NtOpenJobObject NtOpenKey NtOpenMutant NtOpenProcessToken NtOpenSection NtOpenSemaphore NtOpenSymbolicLinkObject NtOpenThreadToken NtPrivilegeCheck NtQueryAttributesFile NtQueryDirectoryFile NtQueryDirectoryObject NtQueryEaFile NtQueryEvent NtQueryInformationFile NtQueryInformationJobObject NtQueryInformationProcess NtQueryInformationThread NtQueryInformationToken NtQueryObject NtQueryQuotaInformationFile NtQuerySecurityObject NtQuerySemaphore NtQuerySymbolicLinkObject NtQuerySystemInformation NtQuerySystemTime NtQueryTimer NtQueryTimerResolution NtQueryValueKey NtQueryVirtualMemory NtQueryVolumeInformationFile NtReadFile NtRollbackTransaction NtSetEaFile NtSetEvent NtSetInformationFile NtSetInformationJobObject NtSetInformationThread NtSetInformationToken NtSetQuotaInformationFile NtSetSecurityObject NtSetTimer NtSetValueKey NtSetVolumeInformationFile NtUnlockFile NtUnlockVirtualMemory NtUnmapViewOfSection NtWaitForSingleObject NtWriteFile RtlAbsoluteToSelfRelativeSD RtlAddAccessAllowedAce RtlAddAccessAllowedAceEx RtlAddAccessDeniedAceEx RtlAllocateHeap RtlAppendUnicodeStringToString RtlAppendUnicodeToString RtlCheckRegistryKey RtlCompareUnicodeString RtlConvertSidToUnicodeString RtlCopySid RtlCopyUnicodeString RtlCreateAcl RtlCreateQueryDebugBuffer RtlCreateSecurityDescriptor RtlDestroyQueryDebugBuffer RtlDowncaseUnicodeString RtlEnterCriticalSection RtlEqualPrefixSid RtlEqualSid RtlEqualUnicodeString RtlFirstFreeAce RtlFreeHeap RtlFreeUnicodeString RtlGetAce RtlGetControlSecurityDescriptor RtlGetCurrentTransaction RtlGetDaclSecurityDescriptor RtlGetGroupSecurityDescriptor RtlGetNtVersionNumbers RtlGetOwnerSecurityDescriptor RtlGetVersion RtlIdentifierAuthoritySid RtlInitAnsiString RtlInitUnicodeString RtlInitializeSid RtlLeaveCriticalSection RtlLengthSid RtlNtStatusToDosError RtlPrefixUnicodeString RtlQueryProcessDebugInformation RtlQueryRegistryValues RtlSetControlSecurityDescriptor RtlSetCurrentDirectory_U RtlSetCurrentTransaction RtlSetDaclSecurityDescriptor RtlSetGroupSecurityDescriptor RtlSetOwnerSecurityDescriptor RtlSubAuthorityCountSid RtlSubAuthoritySid RtlUnicodeStringToAnsiString RtlUpcaseUnicodeChar RtlUpcaseUnicodeString

GetCommandLineA@0 GetCommandLineW@0 _Exit __argc __argv __assert __assert_func __assertfail __b64_ntop __b64_pton __bsd_qsort_r __check_rhosts_file __chk_fail __cpuset_alloc __cpuset_free __ctype_ptr__ __cxa_atexit __cxa_finalize __cygwin_user_data __dn_comp __dn_expand __dn_skipname __eprintf __errno __fbufsize __flbf __fpclassifyd __fpclassifyf __fpending __fpurge __freadable __freading __fsetlocking __fwritable __fwriting __getpagesize __getreent __gets_chk __gnu_basename __infinity __isinfd __isinff __isnand __isnanf __locale_ctype_ptr __locale_ctype_ptr_l __locale_mb_cur_max __main __mb_cur_max __memcpy_chk __memmove_chk __mempcpy __mempcpy_chk __memset_chk __opendir_with_d_ino __progname __rcmd_errstr __res_close __res_init __res_mkquery __res_nclose __res_ninit __res_nmkquery __res_nquery __res_nquerydomain __res_nsearch __res_nsend __res_query __res_querydomain __res_search __res_send __res_state __sched_getaffinity_sys __signbitd __signbitf __signgam __snprintf_chk __sprintf_chk __srget __srget_r __stack_chk_fail __stack_chk_fail_local __stack_chk_guard __stpcpy_chk __stpncpy_chk __strcat_chk __strcpy_chk __strncat_chk __strncpy_chk __swbuf __swbuf_r __vsnprintf_chk __vsprintf_chk __wrap__ZdaPv __wrap__ZdaPvRKSt9nothrow_t __wrap__ZdlPv __wrap__ZdlPvRKSt9nothrow_t __wrap__Znam __wrap__ZnamRKSt9nothrow_t __wrap__Znwm __wrap__ZnwmRKSt9nothrow_t __xdrrec_getrec __xdrrec_setnonblock __xpg_sigpause __xpg_strerror_r _alloca _check_for_executable _ctype_ _daylight _dll_crt0 _exit _fe_dfl_env _fe_nomask_env _feinitialise _fscanf_r _get_osfhandle _impure_ptr _longjmp _pipe _pthread_cleanup_pop _pthread_cleanup_push _setjmp _setmode _sys_errlist _sys_nerr _timezone _tzname a64l abort abs accept accept4 access acl acl_add_perm acl_calc_mask acl_check acl_clear_perms acl_cmp acl_copy_entry acl_copy_ext acl_copy_int acl_create_entry acl_delete_def_file acl_delete_entry acl_delete_perm acl_dup acl_entries acl_equiv_mode acl_error acl_extended_fd acl_extended_file acl_extended_file_nofollow acl_free acl_from_mode acl_from_text acl_get_entry acl_get_fd acl_get_file acl_get_perm acl_get_permset acl_get_qualifier acl_get_tag_type acl_init acl_set_fd acl_set_file acl_set_permset acl_set_qualifier acl_set_tag_type acl_size acl_to_any_text acl_to_text acl_valid aclcheck aclfrommode aclfrompbits aclfromtext aclsort acltomode acltopbits acltotext acos acosf acosh acoshf acoshl acosl aio_cancel aio_error aio_fsync aio_read aio_return aio_suspend aio_write alarm aligned_alloc alphasort arc4random arc4random_addrandom arc4random_buf arc4random_stir arc4random_uniform argz_add argz_add_sep argz_append argz_count argz_create argz_create_sep argz_delete argz_extract argz_insert argz_next argz_replace argz_stringify asctime asctime_r asin asinf asinh asinhf asinhl asinl asnprintf asprintf at_quick_exit atan atan2 atan2f atan2l atanf atanh atanhf atanhl atanl atexit atof atoff atoi atol atoll basename bcmp bcopy bind bindresvport bindresvport_sa bsearch btowc bzero cabs cabsf cabsl cacos cacosf cacosh cacoshf cacoshl cacosl call_once calloc canonicalize_file_name carg cargf cargl casin casinf casinh casinhf casinhl casinl catan catanf catanh catanhf catanhl catanl catclose catgets catopen cbrt cbrtf cbrtl ccos ccosf ccosh ccoshf ccoshl ccosl ceil ceilf ceill cexp cexpf cexpl cfgetispeed cfgetospeed cfmakeraw cfsetispeed cfsetospeed cfsetspeed chdir chmod chown chroot cimag cimagf cimagl clearenv clearerr clearerr_unlocked clock clock_getcpuclockid clock_getres clock_gettime clock_nanosleep clock_setres clock_settime clog clog10 clog10f clog10l clogf clogl close closedir closelog cnd_broadcast cnd_destroy cnd_init cnd_signal cnd_timedwait cnd_wait confstr conj conjf conjl connect copysign copysignf copysignl cos cosf cosh coshf coshl cosl cpow cpowf cpowl cproj cprojf cprojl creal crealf creall creat csin csinf csinh csinhf csinhl csinl csqrt csqrtf csqrtl ctan ctanf ctanh ctanhf ctanhl ctanl ctermid ctime ctime_r cuserid cwait cygwin_attach_handle_to_fd cygwin_conv_path cygwin_conv_path_list cygwin_create_path cygwin_detach_dll cygwin_dll_init cygwin_internal cygwin_logon_user cygwin_posix_path_list_p cygwin_set_impersonation_token cygwin_split_path cygwin_stackdump cygwin_umount cygwin_winpid_to_pid daemon dbm_clearerr dbm_close dbm_delete dbm_dirfno dbm_error dbm_fetch dbm_firstkey dbm_nextkey dbm_open dbm_store difftime dirfd dirname div dladdr dlclose dlerror dlfork dll_crt0__FP11per_process dll_dllcrt0 dll_entry dlopen dlsym dn_comp dn_expand dn_skipname dprintf drand48 drem dremf dreml dup dup2 dup3 duplocale eaccess ecvt ecvtbuf ecvtf endgrent endhostent endmntent endprotoent endpwent endservent endusershell endutent endutxent environ envz_add envz_entry envz_get envz_merge envz_remove envz_strip erand48 erf erfc erfcf erfcl erff erfl err error error_at_line error_message_count error_one_per_line error_print_progname errx euidaccess execl execle execlp execv execve execvp execvpe exit exp exp10 exp10f exp10l exp2 exp2f exp2l expf expl explicit_bzero expm1 expm1f expm1l fabs fabsf fabsl faccessat facl fchdir fchmod fchmodat fchown fchownat fclose fcloseall fcntl fcvt fcvtbuf fcvtf fdatasync fdim fdimf fdiml fdopen fdopendir feclearexcept fedisableexcept feenableexcept fegetenv fegetexcept fegetexceptflag fegetprec fegetround feholdexcept feof feof_unlocked feraiseexcept ferror ferror_unlocked fesetenv fesetexceptflag fesetprec fesetround fetestexcept feupdateenv fexecve fflush fflush_unlocked ffs ffsl ffsll fgetc fgetc_unlocked fgetpos fgets fgets_unlocked fgetwc fgetwc_unlocked fgetws fgetws_unlocked fgetxattr fileno fileno_unlocked finite finitef finitel fiprintf flistxattr flock flockfile floor floorf floorl fls flsl flsll fma fmaf fmal fmax fmaxf fmaxl fmemopen fmin fminf fminl fmod fmodf fmodl fnmatch fopen fopencookie fork forkpty fpathconf fprintf fpurge fputc fputc_unlocked fputs fputs_unlocked fputwc fputwc_unlocked fputws fputws_unlocked fread fread_unlocked free freeaddrinfo freeifaddrs freelocale fremovexattr freopen frexp frexpf frexpl fscanf fseek fseeko fsetpos fsetxattr fstat fstatat fstatfs fstatvfs fsync ftell ftello ftime ftok ftruncate ftrylockfile fts_children fts_close fts_get_clientptr fts_get_stream fts_open fts_read fts_set fts_set_clientptr ftw funlockfile funopen futimens futimes futimesat fwide fwprintf fwrite fwrite_unlocked fwscanf gai_strerror gamma gamma_r gammaf gammaf_r gcvt gcvtf get_avphys_pages get_current_dir_name get_nprocs get_nprocs_conf get_phys_pages getaddrinfo getc getc_unlocked getchar getchar_unlocked getcontext getcwd getdelim getdomainname getdtablesize getegid getentropy getenv geteuid getgid getgrent getgrgid getgrgid_r getgrnam getgrnam_r getgrouplist getgroups gethostbyaddr gethostbyname gethostbyname2 gethostid gethostname getifaddrs getitimer getline getloadavg getlogin getlogin_r getmntent getmntent_r getmode getnameinfo getopt getopt_long getopt_long_only getpagesize getpass getpeereid getpeername getpgid getpgrp getpid getppid getpriority getprogname getprotobyname getprotobynumber getprotoent getpt getpwent getpwnam getpwnam_r getpwuid getpwuid_r getrandom getrlimit getrusage gets getservbyname getservbyport getservent getsid getsockname getsockopt getsubopt gettimeofday getuid getusershell getutent getutid getutline getutxent getutxid getutxline getw getwc getwc_unlocked getwchar getwchar_unlocked getwd getxattr glob glob_pattern_p globfree gmtime gmtime_r grantpt h_errno hcreate hcreate_r hdestroy hdestroy_r herror hsearch hsearch_r hstrerror htonl htons hypot hypotf hypotl if_freenameindex if_indextoname if_nameindex if_nametoindex ilogb ilogbf ilogbl imaxabs imaxdiv in6addr_any in6addr_loopback index inet_addr inet_aton inet_makeaddr inet_netof inet_network inet_ntoa inet_ntop inet_pton infinity infinityf initgroups initstate insque ioctl iprintf iruserok iruserok_sa isalnum isalnum_l isalpha isalpha_l isascii isascii_l isatty isblank isblank_l iscntrl iscntrl_l isdigit isdigit_l isgraph isgraph_l isinf isinff isinfl islower islower_l isnan isnanf isnanl isprint isprint_l ispunct ispunct_l issetugid isspace isspace_l isupper isupper_l iswalnum iswalnum_l iswalpha iswalpha_l iswblank iswblank_l iswcntrl iswcntrl_l iswctype iswctype_l iswdigit iswdigit_l iswgraph iswgraph_l iswlower iswlower_l iswprint iswprint_l iswpunct iswpunct_l iswspace iswspace_l iswupper iswupper_l iswxdigit iswxdigit_l isxdigit isxdigit_l j0 j0f j1 j1f jn jnf jrand48 kill killpg l64a labs lchown lcong48 ldexp ldexpf ldexpl ldiv lfind lgamma lgamma_r lgammaf lgammaf_r lgammal lgammal_r lgetxattr link linkat lio_listio listen listxattr llabs lldiv llistxattr llrint llrintf llrintl llround llroundf llroundl localeconv localtime localtime_r lockf log log10 log10f log10l log1p log1pf log1pl log2 log2f log2l logb logbf logbl logf login login_tty logl logout logwtmp longjmp lrand48 lremovexattr lrint lrintf lrintl lround lroundf lroundl lsearch lseek lsetxattr lstat lutimes madvise makecontext mallinfo malloc malloc_stats malloc_trim malloc_usable_size mallopt mblen mbrlen mbrtowc mbsinit mbsnrtowcs mbsrtowcs mbstowcs mbtowc memalign memccpy memchr memcmp memcpy memmem memmove mempcpy memrchr memset mkdir mkdirat mkdtemp mkfifo mkfifoat mknod mknodat mkostemp mkostemps mkstemp mkstemps mktemp mktime mlock mmap modf modff modfl mount mprotect mq_close mq_getattr mq_notify mq_open mq_receive mq_send mq_setattr mq_timedreceive mq_timedsend mq_unlink mrand48 msgctl msgget msgrcv msgsnd msync mtx_destroy mtx_init mtx_lock mtx_timedlock mtx_trylock mtx_unlock munlock munmap nan nanf nanl nanosleep nearbyint nearbyintf nearbyintl newlocale nextafter nextafterf nextafterl nexttoward nexttowardf nexttowardl nftw nice nl_langinfo nl_langinfo_l nrand48 ntohl ntohs on_exit open open_memstream open_wmemstream openat opendir openlog openpty optarg opterr optind optopt optreset pathconf pause pclose perror pipe pipe2 poll popen posix_fadvise posix_fallocate posix_madvise posix_memalign posix_openpt posix_spawn posix_spawn_file_actions_addclose posix_spawn_file_actions_adddup2 posix_spawn_file_actions_addopen posix_spawn_file_actions_destroy posix_spawn_file_actions_init posix_spawnattr_destroy posix_spawnattr_getflags posix_spawnattr_getpgroup posix_spawnattr_getschedparam posix_spawnattr_getschedpolicy posix_spawnattr_getsigdefault posix_spawnattr_getsigmask posix_spawnattr_init posix_spawnattr_setflags posix_spawnattr_setpgroup posix_spawnattr_setschedparam posix_spawnattr_setschedpolicy posix_spawnattr_setsigdefault posix_spawnattr_setsigmask posix_spawnp pow pow10 pow10f pow10l powf powl ppoll pread printf program_invocation_name program_invocation_short_name pselect psiginfo psignal pthread_atfork pthread_attr_destroy pthread_attr_getdetachstate pthread_attr_getguardsize pthread_attr_getinheritsched pthread_attr_getschedparam pthread_attr_getschedpolicy pthread_attr_getscope pthread_attr_getstack pthread_attr_getstackaddr pthread_attr_getstacksize pthread_attr_init pthread_attr_setdetachstate pthread_attr_setguardsize pthread_attr_setinheritsched pthread_attr_setschedparam pthread_attr_setschedpolicy pthread_attr_setscope pthread_attr_setstack pthread_attr_setstackaddr pthread_attr_setstacksize pthread_barrier_destroy pthread_barrier_init pthread_barrier_wait pthread_barrierattr_destroy pthread_barrierattr_getpshared pthread_barrierattr_init pthread_barrierattr_setpshared pthread_cancel pthread_cond_broadcast pthread_cond_clockwait pthread_cond_destroy pthread_cond_init pthread_cond_signal pthread_cond_timedwait pthread_cond_wait pthread_condattr_destroy pthread_condattr_getclock pthread_condattr_getpshared pthread_condattr_init pthread_condattr_setclock pthread_condattr_setpshared pthread_continue pthread_create pthread_detach pthread_equal pthread_exit pthread_getaffinity_np pthread_getattr_np pthread_getconcurrency pthread_getcpuclockid pthread_getname_np pthread_getschedparam pthread_getsequence_np pthread_getspecific pthread_join pthread_key_create pthread_key_delete pthread_kill pthread_mutex_clocklock pthread_mutex_destroy pthread_mutex_getprioceiling pthread_mutex_init pthread_mutex_lock pthread_mutex_setprioceiling pthread_mutex_timedlock pthread_mutex_trylock pthread_mutex_unlock pthread_mutexattr_destroy pthread_mutexattr_getprioceiling pthread_mutexattr_getprotocol pthread_mutexattr_getpshared pthread_mutexattr_gettype pthread_mutexattr_init pthread_mutexattr_setprioceiling pthread_mutexattr_setprotocol pthread_mutexattr_setpshared pthread_mutexattr_settype pthread_once pthread_rwlock_clockrdlock pthread_rwlock_clockwrlock pthread_rwlock_destroy pthread_rwlock_init pthread_rwlock_rdlock pthread_rwlock_timedrdlock pthread_rwlock_timedwrlock pthread_rwlock_tryrdlock pthread_rwlock_trywrlock pthread_rwlock_unlock pthread_rwlock_wrlock pthread_rwlockattr_destroy pthread_rwlockattr_getpshared pthread_rwlockattr_init pthread_rwlockattr_setpshared pthread_self pthread_setaffinity_np pthread_setcancelstate pthread_setcanceltype pthread_setconcurrency pthread_setname_np pthread_setschedparam pthread_setschedprio pthread_setspecific pthread_sigmask pthread_sigqueue pthread_spin_destroy pthread_spin_init pthread_spin_lock pthread_spin_trylock pthread_spin_unlock pthread_suspend pthread_testcancel pthread_timedjoin_np pthread_tryjoin_np pthread_yield ptsname ptsname_r putc putc_unlocked putchar putchar_unlocked putenv puts pututline pututxline putw putwc putwc_unlocked putwchar putwchar_unlocked pwrite qsort qsort_r quick_exit quotactl raise rand rand_r random rawmemchr rcmd rcmd_af read readdir readdir_r readlink readlinkat readv realloc reallocarray reallocf realpath recv recvfrom recvmsg reent_data regcomp regerror regexec regfree remainder remainderf remainderl remove removexattr remque remquo remquof remquol rename renameat renameat2 res_close res_init res_mkquery res_nclose res_ninit res_nmkquery res_nquery res_nquerydomain res_nsearch res_nsend res_query res_querydomain res_search res_send revoke rewind rewinddir rexec rindex rint rintf rintl rmdir round roundf roundl rpmatch rresvport rresvport_af ruserok sbrk scalb scalbf scalbl scalbln scalblnf scalblnl scalbn scalbnf scalbnl scandir scandirat scanf sched_get_priority_max sched_get_priority_min sched_getaffinity sched_getcpu sched_getparam sched_getscheduler sched_rr_get_interval sched_setaffinity sched_setparam sched_setscheduler sched_yield secure_getenv seed48 seekdir select sem_clockwait sem_close sem_destroy sem_getvalue sem_init sem_open sem_post sem_timedwait sem_trywait sem_unlink sem_wait semctl semget semop send sendmsg sendto setbuf setbuffer setcontext setdtablesize setegid setenv seteuid setgid setgrent setgroups sethostent sethostname setitimer setjmp setlinebuf setlocale setlogmask setmntent setpassent setpgid setpgrp setpriority setprogname setprotoent setpwent setregid setreuid setrlimit setservent setsid setsockopt setstate settimeofday setuid setusershell setutent setutxent setvbuf setxattr shm_open shm_unlink shmat shmctl shmdt shmget shutdown sig2str sigaction sigaddset sigaltstack sigdelset sigemptyset sigfillset sighold sigignore siginterrupt sigismember siglongjmp signal signalfd significand significandf sigpause sigpending sigprocmask sigqueue sigrelse sigset sigsetjmp sigsuspend sigtimedwait sigwait sigwaitinfo sin sincos sincosf sincosl sinf sinh sinhf sinhl sinl siprintf sleep snprintf sockatmark socket socketpair spawnl spawnle spawnlp spawnlpe spawnv spawnve spawnvp spawnvpe sprintf sqrt sqrtf sqrtl srand srand48 srandom sscanf stat statfs statvfs stime stpcpy stpncpy str2sig strcasecmp strcasecmp_l strcasestr strcat strchr strchrnul strcmp strcoll strcoll_l strcpy strcspn strdup strerror strerror_l strerror_r strfmon strfmon_l strftime strftime_l strlcat strlcpy strlen strlwr strncasecmp strncasecmp_l strncat strncmp strncpy strndup strnlen strnstr strpbrk strptime strptime_l strrchr strsep strsignal strspn strstr strtod strtod_l strtof strtof_l strtoimax strtok strtok_r strtol strtol_l strtold strtold_l strtoll strtoll_l strtosigno strtoul strtoul_l strtoull strtoull_l strtoumax strupr strverscmp strxfrm strxfrm_l swab swapcontext swprintf swscanf symlink symlinkat sync sys_errlist sys_nerr sys_sigabbrev sys_siglist sysconf sysinfo syslog system tan tanf tanh tanhf tanhl tanl tcdrain tcflow tcflush tcgetattr tcgetpgrp tcgetsid tcsendbreak tcsetattr tcsetpgrp tdelete tdestroy telldir tempnam tfind tgamma tgammaf tgammal thrd_create thrd_current thrd_detach thrd_equal thrd_exit thrd_join thrd_sleep thrd_yield time timegm timelocal timer_create timer_delete timer_getoverrun timer_gettime timer_settime timerfd_create timerfd_gettime timerfd_settime times timezone timingsafe_bcmp timingsafe_memcmp tmpfile tmpnam toascii toascii_l tolower tolower_l toupper toupper_l towctrans towctrans_l towlower towlower_l towupper towupper_l trunc truncate truncf truncl tsearch tss_create tss_delete tss_get tss_set ttyname ttyname_r ttyslot twalk tzset ualarm umask umount uname uname_x ungetc ungetwc unlink unlinkat unlockpt unsetenv updwtmp updwtmpx uselocale usleep utime utimensat utimes utmpname utmpxname valloc vasnprintf vasprintf vdprintf verr verrx versionsort vfiprintf vfork vfprintf vfscanf vfwprintf vfwscanf vhangup vprintf vscanf vsnprintf vsprintf vsscanf vswprintf vswscanf vsyslog vwarn vwarnx vwprintf vwscanf wait wait3 wait4 waitpid warn warnx wcpcpy wcpncpy wcrtomb wcscasecmp wcscasecmp_l wcscat wcschr wcscmp wcscoll wcscoll_l wcscpy wcscspn wcsdup wcsftime wcsftime_l wcslcat wcslcpy wcslen wcsncasecmp wcsncasecmp_l wcsncat wcsncmp wcsncpy wcsnlen wcsnrtombs wcspbrk wcsrchr wcsrtombs wcsspn wcsstr wcstod wcstod_l wcstof wcstof_l wcstoimax wcstok wcstol wcstol_l wcstold wcstold_l wcstoll wcstoll_l wcstombs wcstoul wcstoul_l wcstoull wcstoull_l wcstoumax wcswidth wcsxfrm wcsxfrm_l wctob wctomb wctrans wctrans_l wctype wctype_l wcwidth wmemchr wmemcmp wmemcpy wmemmove wmempcpy wmemset wordexp wordfree wprintf write writev wscanf xdr_array xdr_bool xdr_bytes xdr_char xdr_double xdr_enum xdr_float xdr_free xdr_hyper xdr_int xdr_int16_t xdr_int32_t xdr_int64_t xdr_int8_t xdr_long xdr_longlong_t xdr_netobj xdr_opaque xdr_pointer xdr_reference xdr_short xdr_sizeof xdr_string xdr_u_char xdr_u_hyper xdr_u_int xdr_u_int16_t xdr_u_int32_t xdr_u_int64_t xdr_u_int8_t xdr_u_long xdr_u_longlong_t xdr_u_short xdr_uint16_t xdr_uint32_t xdr_uint64_t xdr_uint8_t xdr_union xdr_vector xdr_void xdr_wrapstring xdrmem_create xdrrec_create xdrrec_endofrecord xdrrec_eof xdrrec_skiprecord xdrstdio_create y0 y0f y1 y1f yn ynf

Name

.text

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

/4

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

274KB

Virtual Size

273KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

400KB

Virtual Size

399KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

69KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

69KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

/38

Size

512B

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

чебурашка-запрет-v0.1.2/bin/quic_initial_4pda.to.bin

SHA256 e065870cb0d13152e6132807bbf42218a9e7cd8d96f5602b61674cc540f3a56e
MD5 6422bac6b3e976bab5d21451b834221f
SHA1 5c3cbd90820054aec414e1c6e89f0ed03eb1f1d1
SHA512 0c2b212260fe6a4ef7af91f2e5cb1d9ba117c0654a80b4153301c23f08e63c8921835ae5e66f287b60722e1aee5b122fd18ce856f1aaba52604c0f51d9859205
TLSH
T1F721EA9951EF257024F6430A18E9A4B6594366C74AF68BF351D90CA06CE974B8F09863
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/bin/quic_initial_dbankcloud_ru.bin

SHA256 e065870cb0d13152e6132807bbf42218a9e7cd8d96f5602b61674cc540f3a56e
MD5 6422bac6b3e976bab5d21451b834221f
SHA1 5c3cbd90820054aec414e1c6e89f0ed03eb1f1d1
SHA512 0c2b212260fe6a4ef7af91f2e5cb1d9ba117c0654a80b4153301c23f08e63c8921835ae5e66f287b60722e1aee5b122fd18ce856f1aaba52604c0f51d9859205
TLSH
T1F721EA9951EF257024F6430A18E9A4B6594366C74AF68BF351D90CA06CE974B8F09863
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/bin/quic_initial_steamcommunity_com.bin

SHA256 2fe18b3bd20807d36704d0b072092ee49ae84edca907a4420ab9a0f0f28fddcf
MD5 7429222625dfb23a41af04a4aa704acb
SHA1 5e17589b3ab3d86dd269e6382dfdd15931f386e8
SHA512 28563bd1fa798dcd3d95f13421c3b5041363cf0943baa3479138375f6daabbbfcaa6e2658b8e8e126850a40bdd658ce9a9e43abf5a5a073e6377a28211eb5243
TLSH
T1DD210DEF44273587CE95476523AC42FCA7C3956FC648047A6FF372051C7C14EE591415
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/bin/quic_initial_tencent_com.bin

SHA256 d250051d6200946a7ba0629c59c5641432957fa3513081a6c3c5aaa91a62ac03
MD5 0b98262b43c075dd041329bab61a68c3
SHA1 87d9162c43854b7084e08c15988661491e149589
SHA512 96899e973a30e850567ac0912ad5cf04c147e26891d8655e838ba756213c728ff85e1c63ad8c6f29fa8cf403dddf9217a0cf658af846e34fa9fdc69a76d5ba44
TLSH
T15921177410ED13603E80128030AA4A2BBA705A58ADD0D90F21A3A0F5DD51832FBFBFE8
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/bin/quic_initial_www_google_com.bin

SHA256 f4589c57749f956bb30538197a521d7005f8b0a8723b4707e72405e51ddac50a
MD5 312526d39958d89b1f8ab67789ab985f
SHA1 49a06ceebb13807faaf2a935a716127faff9864d
SHA512 472e88fdd60f9c67f784514a6b699bbefac257657f53a9682a864c0ced474b33f89cf14eb112226ebc9b2c6b07a8f2ec9b25010ccdf98c13370c5c9c6dc2b893
TLSH
T16C21E766D88023896108F64536222E5009B3A4471621258F07292781C83EFEEC1EC0C6
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/bin/stun.bin

SHA256 9cd5469309780ca56c0bd97266524a48c7ee529d02c3179cfecb20b260a59641
MD5 0357596c0e38a10a4b99dca2032419cc
SHA1 05fb322426bd56771a1e1873e88626bc98d34563
SHA512 319880f7624ff32720d11b79e5cdc24e24ee482a92cd2224e2175936b54a32916d059f431bf2f0e8ff74cf1be41395a462665e75fd1cf17a2c126d01cc2ee165
TLSH
T181B01200C24B4DA4C014103CC4436A9F84A415D58F00DFC389091E9050CA05E6CC1ACD
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/bin/stun2.bin

SHA256 b7c2497496039c541f7337ac8536813f0a1cf52363ab2faa5213b7816d458813
MD5 f01f84f99471de0c7c580da6a14fcdc6
SHA1 4ba9e863501403b8bda56a1c482a5f351880a3d8
SHA512 70a0a416d2b2ab8875b9e68690a4d10f735a9b2173aa3c4dd9d6fb1fe0ad228d8d767deea97f5eece1380f5ed2ef0266fa4d26ec18e3aa0763c14ae5cb3da3ff
TLSH
T1E1B02B0080B000900499853B41050B585B020AE4A373C9110A0B58D612C60308C08224
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/bin/tls_clienthello_4pda_to.bin

SHA256 eefeaf09dde8d69b1f176212541f63c68b314a33a335eced99a8a29f17254da8
MD5 e6d649de132c3c10cb62531ef74f5b73
SHA1 689c7e8d021a99d0a64fee9099fa9012a3528265
SHA512 f7be809482e3098a5a8f79a759d1f8bcdc2e5201ac35f06eb8662afbb8194f2dfacc2c3e64114557de78e935086cad43880be83b0af1611a1aa0bced0facffba
TLSH
T14ED02B87C982745FDF090B7AA5D5C9B9DED3F1EA03CB8F4768058344FAD85B1422208D
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/bin/tls_clienthello_max_ru.bin

SHA256 4ee0870abe0a0128600b0095189987ba1d210dae8bf963bc725aff49cf922624
MD5 b2b3e684ce449b60f0bc5a9028221a08
SHA1 32538a43ec8502f0146cd59456646bce7aedd29c
SHA512 19963986a6c0f7265456aeaa4622fd4f8061dc81d1b722fb62f61574f6d96e4b55cfcd256dcfc555bec11ae458ddebb943de25dc1df102dafe99a2b4174b5b38
TLSH
T1CF0128771655D117A54D1F1650E150418585EF447302C7EF3B74D974CAD68C34E75345
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/bin/tls_clienthello_www_google_com.bin

SHA256 936c2bee4cfb80aa3c426b2dcbcc834b3fbcd1adb17172959dc569c73a14275c
MD5 41e47557f16690df1781f67c8712714e
SHA1 2f3ca8e75528e0e7797e8f5edfdc582535531913
SHA512 e8b644d7996168e51d8b991b1d263b9d98f7178bdd9a060078cf4f5ef368fa6e864492b3365227aa68d4d079d734f17d8a5755bbab7424f1bb66e82c0b72f1dc
TLSH
T1D601F4AB1D42D11AD9020E1629D7854A51CADA0561138F772705AF11E8C3D97CD10BC9
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/bin/winws.exe

IMPHASH a4b140fe839e54b299bb799d5e755765
SHA256 affb4f69d2ea302a7abccd5325d81826e140ddae014f1e070bc4a6c0dd555188
MD5 d498e19bc7a79dd1efcb6b928cbe9909
SHA1 e660246d9b5de531d8c6ed563919d2690f47d209
SHA512 03fa6ccc762999e4b5e3c7ed4f4a269d5e7114af52c833842f94fcbca19c3b2edd3c218df247d7616a54d25262f2dc14762a958c620433589ac3c1efa14b379a
SSDEEP 3072:llblEpda/1ZqNUckRoAHzGDIAaSLECf6CuWhs/JSDxIcdDFth2zp:l/TY5czliX5mhYIcdptyp
TLSH
T145145B17F39588F9C462C17896AB5333E932FC452134FA4B9FA4DB212F65E10B12E798
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

cygwin1

__cxa_atexit __errno __getreent __locale_ctype_ptr __main __stack_chk_fail __stack_chk_guard _dll_crt0 _impure_ptr atoi calloc chdir close cygwin_detach_dll cygwin_internal dirname dll_dllcrt0 dup exit fclose fgets fopen fork fprintf fputc fputs fread free fseek fwrite get_current_dir_name getopt_long_only getpid getsockopt inet_ntop inet_pton localtime_r malloc memcmp memcpy memmem memmove open openlog optarg posix_memalign printf putchar puts qsort random realloc setenv setsid setsockopt setvbuf signal snprintf srandom sscanf stat strcasecmp strchr strcmp strdup strerror strlen strncasecmp strncat strncmp strncpy syslog time tolower toupper usleep vfprintf vsnprintf wordexp wordfree

advapi32

RegCloseKey RegEnumKeyExA RegOpenKeyExA RegQueryValueExA RegQueryValueExW RegisterServiceCtrlHandlerA SetServiceStatus StartServiceCtrlDispatcherA

kernel32

CancelIoEx CloseHandle CreateEventW CreateMutexA FormatMessageA GetLastError GetModuleHandleA GetOverlappedResult GetTickCount LocalFree ReleaseMutex SetLastError WaitForSingleObject WideCharToMultiByte

ole32

CoCreateInstance CoInitialize CoUninitialize

oleaut32

SysFreeString

wlanapi

WlanCloseHandle WlanEnumInterfaces WlanFreeMemory WlanOpenHandle WlanQueryInterface

windivert

WinDivertClose WinDivertOpen WinDivertRecvEx WinDivertSend

Name

.text

Size

123KB

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

55KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

392B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

чебурашка-запрет-v0.1.2/docs/CHANGELOG.txt

SHA256 02b43dd79ef95d3e00b07fdfadb3982beba22eefc542f930d1a45d23801d5ff6
MD5 3c574c5fa97d9e1d6c27d22f2eeaf718
SHA1 46dc17077df4551357096fdefae5957593bd526f
SHA512 560e5bb9fa7eb5c903086d4f426e7330229ce6c89e73408bcfa5c4ebf88bdf218793b58e41ec0027df711825e1c798823b30520ffacfe3e2f3e10e2cda2ea2a6
SSDEEP 192:D4oWxOHN6wH8ctlOHaT4LqsKeb0SDCS90lSsKHUsXCd2Fb0vAmNnv4rsNiaNxxfa:cWZsLpo1SPUfagomNv4u+3
TLSH
T15042BC60105A589B1125AC0FD9357E0DB8BA85FEFBAA5312356C2DDE3FF2134CE2D219
MD5 SHA1 SHA512 SSDEEP TLSH

чебурашка-запрет-v0.1.2/docs/DRIVERS_UPDATE.txt

SHA256 78dc21435d7aae81f42848f922018bed3e90be2f16f9ede4cd71bae48007c395
MD5 70d229c0491a7e1efff8d4a0dea72228
SHA1 fde6eaf0b2e2dff41a4ce7705038ba4f8427099f
SHA512 8b2d02c76a294b55fbed1300b5a31e6770dec2f590b2f27b8075cb6534064086a17d2d3eb26ccab2ec221ba7241b34a3db9348e8eedfb96b66d9bdf4674ce750
SSDEEP 192:ENcFaCdF980fqG6UtYln1UBd+VjdwrjK7w8spGAct4cAXZazt4c:EuECdf8Y6U+lpVpMj1G/zSc
TLSH
T1BF22CB62084B289A1711AC5FD9356D0CB9A259FDEFA7631634AE2CDC3FF1138CE2D518
MD5 SHA1 SHA512 SSDEEP TLSH

чебурашка-запрет-v0.1.2/docs/QUICK_START.txt

SHA256 c70f4a02bfb7b60c17cf2fd295326960378a4688bb243d4bfabd41ed5fca87c4
MD5 88f3b1896ea29d20bf12732f5511d7fb
SHA1 c117f2170ef65fc8190731dafdad659f9e0f142c
SHA512 32f8674adc390470581a6b943e2276f143a13e8a27ec1807d63ccdcc35c28b09b3f42b23a8d6aae5069e4b70e8219f7ca319b4ea6cafc1f1e8d95833577d5d5d
TLSH
T1A051BC2000171D961128AD5ED8382D0D999658BBEF2B5392386D3CDD2FFA730ED2960D
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/docs/README.txt

SHA256 cafb2e4da6504f57c716c15109bd1ca3aaedec8957f430327f94b2f1acfcb8fe
MD5 b736ed628002e24141aadae7b5a5be8e
SHA1 6bab23d66d57c884f1db2a0624f6f9901d1122b8
SHA512 ae0ef69d6f375c330e2d6c83e1259c5e51b80c53349c20547b91870ba0fa75be650e91d697fd3555f83f79dd625da46d833f6598f6ce12bbb3b28ef04bcf4183
SSDEEP 192:r9Q25Zm9NWEGxYONNxoNxlwdcFsf+upQ1jjLKvaAQXqW5JMQXpy6ivY:r9Q2Lm9oXY2fMletPQtK8Rt
TLSH
T13362B811144B24EB0220AC5FDD346E0DE99A44BFEFA69357396C28ED3FF2134CE29609
MD5 SHA1 SHA512 SSDEEP TLSH

чебурашка-запрет-v0.1.2/docs/ОБ ИСПРАВЛЕНИИ.txt

SHA256 24437bab17d067200860cb03d81fb25c68342758bc6795e140ac80d61e2c24d7
MD5 0f63618ce6fa10a18b5edb8e3eef5f97
SHA1 498adada08c8053834a2bf1ceeb283aa213a057b
SHA512 c5d1df61511ebc11d2615579cf946806c5768375b277b414f50db57856752385da85a039db1dd7ac68f03e3b3d5b353de176758a174a34603b4e59d494bbebf2
TLSH
T10451CE24155628CE0029F00FDC117E4C79AB59FE7BAF632735B92DBD3BE2328819D219
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/lists/ipset-all.txt

SHA256 19123a22bf1108815c07bda3cda8df282b30bd63e4939949928969c0fd195873
MD5 42ad35639873f78e1b2dc5c1039499df
SHA1 0fe009c7e4f670e759fda4668a8b37904215c9fa
SHA512 1676acc285990e44eb382705e0711fcab7fac79348c541c67bee58a49f3223d8fc61dcb895a7d2dc25ff38dec249268aa64e50c952a214f264b5430f9726a907
MD5 SHA1 SHA512

чебурашка-запрет-v0.1.2/lists/ipset-all.txt.backup

SHA256 1fb91430a8594b2632d41a87b5bf071ce851ffb5b4d470b965d1db2b60d3ee94
MD5 159fbec389464bf9d2719641f9f5e0cc
SHA1 75374875a220cd3a9dda7db00cfd8fe1bb474fc2
SHA512 9d2dfcf79de4ce4caff1343bb7a11721b2a4bd4239eed745d1d16290e8762fd28b152e54792317ee9b9c2bc4c9c783d07312e8674242120b623f97efafdb69e2
SSDEEP 1536:yRVsx0/6EWkNeuDC3BByxwKVHoTORc/47mDgTIgmKI+5o3eho4nn2O/LxqVd5+Ap:sdTIgmKI+5oQbnY
TLSH
T17CB45F7132BE5EF09581B3EA23DB81647AFBE1C634F6F2608B4FA57129220417D59D23
MD5 SHA1 SHA512 SSDEEP TLSH

чебурашка-запрет-v0.1.2/lists/ipset-exclude-user.txt

SHA256 19123a22bf1108815c07bda3cda8df282b30bd63e4939949928969c0fd195873
MD5 42ad35639873f78e1b2dc5c1039499df
SHA1 0fe009c7e4f670e759fda4668a8b37904215c9fa
SHA512 1676acc285990e44eb382705e0711fcab7fac79348c541c67bee58a49f3223d8fc61dcb895a7d2dc25ff38dec249268aa64e50c952a214f264b5430f9726a907
MD5 SHA1 SHA512

чебурашка-запрет-v0.1.2/lists/ipset-exclude.txt

SHA256 96c03954012765ce4ab03b9c30f29ab1ca1b698c6752224d03828e6d182eb0fc
MD5 240532f20e114cd6de2906ebc86d683e
SHA1 f7d4b6e1ec084e64c367ac11f5fe21fff454fb68
SHA512 809e9961b2952acff12fb27b31895f9e7c0d70433363cdd8fd61bd522ffa835e7d403de3419092145673e10644aa0803d0e244d9cfff8d8bf784e783713f799a
TLSH
T147C09271516912FB0F876B21A13E0326F9475BCB26F37D64A36C5286EC504096029920
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/lists/list-exclude-user.txt

SHA256 9d9832f02f42e60be30f94a7a1b051342db0b1b0092c656a7bc10e730d63b234
MD5 1c4db6196bc14ecfdb5ff6f76ad4985d
SHA1 e980cb9c55abe3e5213ffc680d79f75b0b904a50
SHA512 28c56b0a3f42337b04bd7729940c83ec84d8f508f2fcf88567ebc708b09dec312d08074816ea76c48d087975743a6d682597ea7fd276a423fdbc2752bab0e24b
MD5 SHA1 SHA512

чебурашка-запрет-v0.1.2/lists/list-exclude.txt

SHA256 cef044825cfc9e0f073cd040587e0bb2184d1cbb7a013ef6532da2cc34028de8
MD5 24c9a1a106d5ae764547dd6dd167ef2f
SHA1 549ae24995eab02bb5af04e986dbfcf210fce7b1
SHA512 24c35f0dbff26ffd0d4cec4c8a45c2826189b54759e29deb52cbba5ee821801d9f59f404c927b83557de362ed3cb619fdf976a17820c85a246e51b49d4849dff
TLSH
T16F31ACB0D80424515698F48BD4A67F44A839323A81C0ECCAA7E8DC8C27C2295BFCFA71
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/lists/list-general

SHA256 0084f490ef08d1ee00ced6a920afb57feb66820a48c36f16e864506fc20efc82
MD5 f0a985aa65f38c6a1f83d8959d98eb77
SHA1 0ee1a8f666fecbab108119d3aeb1387572262d82
SHA512 eaf8003aa3d2495b641840a6c7410f5ded20f046ef6761920a53017f4034d111b92f88e90a6927c7a0c85e3c36f5cbbe062a73d6b8f480a82095c272d869d00a
TLSH
T123D012073413509C121EE9CEA9E004442308B1BA8CCFE8F51549E19C6C1C77BB8CCCC7
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/lists/list-general-user.txt

SHA256 6c622ab155cf403ab8857f3805be8df7acba8b3d7a700ea19e52699260a5bc7f
MD5 dd8816323e370d2de83d1cf2b838dbf3
SHA1 9a124b838e69880f166f964122614ea8b43ac8ee
SHA512 32ebb345769e88632a06aec89fb6bfd9b833e7f6c496d0b6d1d28954481210ce0372a92eb2a2ac4f55cfdb2f3e73004f47b27d99ffe39929ca2826047d20db54
TLSH
T1B190024647810605505285892545141757B2A8684A505810105D7B15395892956B9AD4
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/lists/list-general.txt

SHA256 9bcd915e90635562ad7332eab9b7e6ecce420ee344762423037ac6eff01d9dab
MD5 ca3279a7be4e68fc595c51fc63cb5194
SHA1 31f7aff9aa1dd32129e68b2d1be2d26e7ee37ccb
SHA512 afe29c9962a114b7df361b7127ec8c139105bbcb2e01055f3b477191537d9e9e51afc83d47a79f3ea0ee8e22184be7b37b1417bb9f2a962d9864cc313f9b94ef
TLSH
T14B11F253A1A99750271ED4E4145463A02394B4F11CCFE6E39B6FC19F09093FAB3D0EA7
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/lists/list-google.txt

SHA256 1e59f9d487f7bce12091c838151713d0a8d31c3aae20afefebb38206f2cd8232
MD5 a47c9cc57d60596de04f785df7384fb3
SHA1 91fd0465aae6fc84a0164531bc08683e67f57aba
SHA512 739d2a53cbe969e675d37a63dead91fc68278861fe2948e65300bd61bfaf95758cd83fa52493456746cb6aaff09705bfd35050875cbf5b57a110e41fb38c7dc4
TLSH
T1F7E04F87780E809F4202ECC818F0654DB62CF23586DEEAF4DD61D03E70ADB4A34C18E2
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/logs/cheburashka_2026-09-06_ 2-08-21.log

SHA256 f4a3677cbb89d0ca9f095a2c4bfa742b2f52ed6683be7697ba40681d1c0ee03b
MD5 1ec405cae89c75c8b1bda155842bbffc
SHA1 209f1cf418892e042bb954377a2fb75d8ab4cf4d
SHA512 fdcfdebc43142a73bb884a474c5cede47dc8a59fe681ddf52da32b96882705194776e75fd9530f9f0bfb79aa450c4481572eb3aa7d77b621c5402fc5916d1742
TLSH
T16BA022A8320E20CB08000002C2808C8ABCC0003B0ECB00A00F2C32C828E0030C2200CA
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/logs/cheburashka_2026-09-06_ 2-08-22.log

SHA256 8dd74676e64706a4c94f5cdf7c551b6de9d26aa1a0c6aea93a6d8e9e9edd9794
MD5 d1e67b5bd810a7fab18cbef3406ee2e2
SHA1 3d353c41ce4a6105fe378e49ef8cabda2e34752d
SHA512 72b8207cd45d0696b7eeead9287af08a78abd640af2cc6bcec7a1b4aaea6c388c4d90791600efc6b2a5a9f0e146219084cda44d83d4e301dcee243cd3e15e764
TLSH
T116B012C431DF944F5140500240840C057C45106E2A8E01A9050818696CF0630873D4C8
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/logs/cheburashka_2026-09-06_ 2-13-43.log

SHA256 66b6e2b4634e5835c8f2de581856df408ae787ade82985cf0f2e8d1b6c999aac
MD5 5655a17be190e52b1e061b3cf2e7146f
SHA1 3d88a30000dadc8c3aa3b0c9a71716cc9f87456c
SHA512 5babdad65a9571f6767fa06a9e3e35237d7ed0575cfe66d206ca574c5279a5c9534286cfcb7dda6aeba2e9c9d663b1435125462ced3fa7d34a426286ff437e02
TLSH
T109A002A8715E24DB18415056D650AC8ABCD5443B5ED705A94FAC31D868E4131C6241DA
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/logs/cheburashka_2026-09-06_ 2-13-44.log

SHA256 0e97ff8ce3ebb3ebdf36cb8f438a4e398f27414fcb5f65de93638a160dd545a2
MD5 f1b67316fb779e3ea039cbff761e394f
SHA1 ca542dc6a5d9f0fec7a94b5535f22c14a333c8e5
SHA512 641504c72fa44e042d416ab6d4b68ba5f343b1d842147efa11a22c463333fad799e6c9cc9c8be68afad6a8b40adabe7fc05695e2b3cdbd2044bd78e6a7abf471
TLSH
T115E092B52A9B20C90311B113C104BF49BC8A21FF3B349EB689A82D7D74E14144AEF4BC
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/logs/cheburashka_2026-09-06_ 2-16-07.log

SHA256 ff51f276b5ab00721ae345ee3e8e22208675ed4b86581dfda07e14072f4e9ea9
MD5 8756413fd9d9f8f2e83bc91936cc0b7c
SHA1 388d1a1e44065f2525d090c05ceeb77bf434a559
SHA512 70fdac150875ca2c1a73e4b09a91652314968535fe81abf436ceb15a4ffd2f69285b2f89e6c26c40fa3e48c332e9984e5436a5ccee0d6c202b80a55a4c357f9c
TLSH
T1D8A002E8725E20DB18415056D694AC8ABCD5483B5ED705A54F6C31D868E4170C6241DA
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/logs/cheburashka_2026-09-06_ 2-16-08.log

SHA256 cb0b50dd2f56cfea9ad252c4d4f743a1413f5a4e7872a301073e715882c91eed
MD5 7a569fe70523f7d5e441bc33ef558dd3
SHA1 238af5bbccd74ac94a6ad39657040a688032d1d7
SHA512 4e895250bb569287d06ee99e29d66760c63c4550770b1d0d6e1a0ab0df7899f24b1e106b992cef4ca6175fa2e6aec0ac68e6b157423169e5353aaa2984a37cdc
TLSH
T14DB012C430DF904F5040500240881C057C85002E2B9A01A9490818696CF0670C73D4C8
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/service.bat

SHA256 f28381e4dc15ee2775d5f3835cd1be90ceb41fee78ca5522dd58aed4d4ed9f1a
MD5 ae72ddf06f16aacbe20acdea65ead3c5
SHA1 ca98cd8fd56e0460ba5c95474a7e3f5d09714547
SHA512 4ea69bf7d6bd82a7839074cc1bb08290f9e8810a93325ae30e65ce6390f7149e3862329ac50ed0af3e52376ca6bacd28daf13ef706e8202a24f81b503ed4dbcb
SSDEEP 384:tzu+BTeitdrs5C+HbOVsmIMNF3VITyTeIWBfX4sAXzxADjDZ:taRitdrs5WVQ64hJAQDZ
TLSH
T103A25266300544922435EC2B8D312D84B946A0FFE76726A930AB64F97FFC7B0DEDE164
MD5 SHA1 SHA512 SSDEEP TLSH

чебурашка-запрет-v0.1.2/source/OPTIMIZE_SOURCE_CODE.txt

SHA256 d57b629bf79b3c1d15f274c19d504866b67286bba548b58373b5e595722f043e
MD5 0ece1c31990c3c96dee545c0d0155fa8
SHA1 223b83c0adb14a6e103c35273d56ce410cd684f8
SHA512 7afac81f7a18d74bf50ef7771f25f26a132fda30ea9672e4bd9318476ee2cbe4a8e3abf63e787e555f29b4e8a2cb3ecf3c539fdb282b8560279757c2661f0fd4
SSDEEP 192:r8vGpkIW4/EuvYwjfb7A7JbsaFKgCFJyWhx03r:/pFWkfbe9wgdr
TLSH
T13F122061444E948E1144BC6BE8396D09396BC8FFEBFA120338592DFE3DB2535CE6900E
MD5 SHA1 SHA512 SSDEEP TLSH

чебурашка-запрет-v0.1.2/source/SERVICE_SOURCE_CODE.txt

SHA256 c8c4243daea78902f7f7a4a51daa263ada366e54f82bf94ab5b2f25450133374
MD5 4ff77499c16808a64bbb802606d90933
SHA1 bd1e87b57689e071b8c67e0038d5b59054eaec24
SHA512 27e2fcfb2ffdee9807a1714769d32072177f439b9ea804df7c45a0924305cfb5b37c4d1a63d5be117cab5b6607dbc43359767fc163cb0b0ec4c9f394b075a661
SSDEEP 384:+utN0i2wMUxAD1D4+nwhnftxZoMacOcPM:Wi2zLD4+nwh5HOsM
TLSH
T1BEA21E10245A68EB0525AC47CC346D497DAB40FEDBAB236634AD19FD3FF0264DE2D268
MD5 SHA1 SHA512 SSDEEP TLSH

чебурашка-запрет-v0.1.2/utils/check_updates.enabled

SHA256 c823a2779ca11474ada5ece9c37cc825f71c54fbc1525d9b0cf3dbc7879abb09
MD5 c45d8fbde4e335ed2d438d81bf5e6b5d
SHA1 c78adef3e4f3601b3bfcab9d16467709e4242f13
SHA512 6a3f31efd1d6c20ca61c515cda8e13d684a87cafb2b8ed940b24fe5d195c14c9b159af906d6dbad7e2befdfa75c311a96f792e342aadb2e0be15c7fe148d83f0
MD5 SHA1 SHA512

чебурашка-запрет-v0.1.2/utils/targets.txt

SHA256 4c953196e2649478c267450fc80cef121ef96bc50656ef75336b9589c0808cea
MD5 0260e9fef4eaf980bda2c0118c2693e1
SHA1 90a1202ac88ed738059639a7925be7fe1c7d34ed
SHA512 845f2be911a0f51aa10fc0c9417f8cf0e06015cf5b87d02c686e02b3af15f89b81e8163ee1185e571f13a6e908d08ab211587397840219699ab893d18ff8d57c
TLSH
T19C219B93F152C4B0025A84DCE400B2ACFB0A411F678A60EBF04F509F3B047F482FB696
MD5 SHA1 SHA512 TLSH

чебурашка-запрет-v0.1.2/utils/test zapret.ps1

SHA256 f31ced248fee999c780d1361d2a244ff2a63c7feb57f5678176367ef5d2b0e15
MD5 82c0648c9e124331bb53a8bef9555492
SHA1 4c7d3f3a50a15c8d3bf4176186ca5554971056c9
SHA512 0d73dbaf63a0ae0c2edccde6fbcf2a4855d98bc1c13784cdbd7538e3b113190f187b232bda7b82b1c2a9d69244c388c2a500f92c9ccc5089640312c54762a599
SSDEEP 384:jAakddb1Xz1jbdZxP//nnXVqcNm5tVZuyci8EULNW2pyBw61H1UVnVd8QGeSH9Yz:jzk3xXFc5tHtciOswyBw61H1Kd8auA
TLSH
T1DD03B72AB90A106A52735BBF9C416104FF57417B800D16D0BD9CA0D87FF492ECA79EEB
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer