prosvet-1[.]1[.]0-windows-amd64[.]zip

resource
unpack001/prosvet-1.1.0-windows-amd64/prosvet.exe

prosvet-1.1.0-windows-amd64.zip

SHA256 699fda901025868a39b3d0617801c7a88210552712ca661f0d22f1a7b454c65e
MD5 72422a5531773b3f0caa7dd7c3980214
SHA1 0ffacd5166aabbf244245a0820bcdb6587014d4b
SHA512 13bb675556664759c3028a2eb764a586acc0875ce407f8cc21751ecdc0192cd54157fa32e2ffd3b9868b9e5d4c39e2863be3a0b73ee63f99b208332cde52aa4e
SSDEEP 98304:VHsuXzPiIb7X/xuuB7YGtdFv+VeEmfcKIvT2PsiPqzr1/XGtkaaeWBLCcA8XEoX:5PiIxu2Y++sffcKIv6PsIor1QaFVTUy
TLSH
T1D6463358836B5E8BEC25ACB4DF564865ECB84D096B3155A108CB9FC212C57FF10FC26B
MD5 SHA1 SHA512 SSDEEP TLSH

prosvet-1.1.0-windows-amd64/LICENSE.txt

SHA256 35268ccb15eb1df73ddc631b932b45f1bba0f484ca61725f7f38aed880c9a153
MD5 214c6ed8dffcebae919f3b3509e25568
SHA1 fb288f70ede9c88191db8b6ad8deba4d3df28af6
SHA512 5463a6b3c31734ef5fcf72c881edc9ccdb81ab3692c4fc5e8d652dfd37a6f6db35c153727174ef3d4e63588319ec7d23dc59c48279d239c1b7a1ea00c13a22b4
TLSH
T12E41A5356E004FEE1E2EE25149187C4AF2F924AFBE972948307DF28AA36A054C1FE540
MD5 SHA1 SHA512 TLSH

prosvet-1.1.0-windows-amd64/prosvet.exe

IMPHASH ed8b780a3ce7ca4aba78a21f6bc3d4e0
SHA256 d2d9af1a4e1fa3d8655c3d75e7f8f89994cee010ea61a25fb820fee64af67250
MD5 2ddc118ac7220df793e836aeb58ac89f
SHA1 a1c02cbfe9999f47635d27e42e83a6233dbb2d9b
SHA512 c11c1a72f93c24633fbed6576d8865ef80d48ba98dee5f59044cc1c64b670f8a0eee9d90c0442ae2740bffd3090aec0403e3da1b34a6e6b22a2ed00f758bd461
SSDEEP 98304:vZRQ8wiK1hLa/JkcbkwUXPHSIofniGRcsVJqCmB5RMiCwDIS4TBrppUy1u7MHr4E:7yzhIIyNR3JqlMiCwMOD
TLSH
T121E64A17E9A614E8C0AEC134866792227B717C494B3127DB2B50F6383F77BD0AEB9714
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

566816

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

4.6MB

Virtual Size

4.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

7.9MB

Virtual Size

7.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

768KB

Virtual Size

33.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

100KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

90KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

prosvet-1.1.0-windows-amd64/zapret.bat

SHA256 cd34953eda1cdc7e2a07ed9880485d18ea02ee652f5cf40487eca15ecbda756b
MD5 b79bb1960a771513b28b174bb3024030
SHA1 02dbc53c62f1d751a834d0f4195956df18877846
SHA512 018d7f1a7c5c38ba46fbc61cac54d26aaa5484440f3af30ae8cca19b50a6a073a836f44adf58a5d58de450a6bf8ae732e7aba1f3144b0b318e36a9e837daaa92
TLSH
T10BF0A24ED749D6F835224580154F6991528EC975425749C8337F81CB330EE5E9ABE0F3
MD5 SHA1 SHA512 TLSH

prosvet-1.1.0-windows-amd64/ПРОЧТИ.txt

SHA256 48a3ae8bd619d4e967ceb0b16a18128baf113f36bfd05d77848ea31e07030720
MD5 27fbd7b44cd283c99480bfd9976a1d8e
SHA1 8eb39bc17ea2f863443ae6a1582b13e2f7ddf7f7
SHA512 c97e97dff25f83f70aa6905f865b94e8acde0e521d252eb1f720e1bda55dae630a64127dddffcc971d15a18d0849a64ca7b32e9771589841d61c186a87c2a098
TLSH
T1F471D02155DE15DA1A087027EC05A60D79EB44FF3E7BB32616AC3D7F76E2034823DA85
MD5 SHA1 SHA512 TLSH