c6cb6c6a96cfdb7aea05d69f1a2930ec8b219a890cac893580bf5aa122f71870
- SHA256 c6cb6c6a96cfdb7aea05d69f1a2930ec8b219a890cac893580bf5aa122f71870
Overview
overview
7Static
static
7Firestone ...er.exe
windows10-2004-x64
5Firestone ...er.exe
windows11-ltsc_2024-x64
5$PLUGINSDI...ne.dll
windows10-2004-x64
1$PLUGINSDI...ne.dll
windows11-ltsc_2024-x64
1$PLUGINSDI...ip.dll
windows10-2004-x64
1$PLUGINSDI...ip.dll
windows11-ltsc_2024-x64
1$PLUGINSDIR/INetC.dll
windows10-2004-x64
3$PLUGINSDIR/INetC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...er.dll
windows11-ltsc_2024-x64
1$PLUGINSDI...on.dll
windows10-2004-x64
1$PLUGINSDI...on.dll
windows11-ltsc_2024-x64
1$PLUGINSDI...er.exe
windows10-2004-x64
5$PLUGINSDI...er.exe
windows11-ltsc_2024-x64
5$PLUGINSDI...ls.dll
windows10-2004-x64
1$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
1$PLUGINSDI...en.dll
windows10-2004-x64
1$PLUGINSDI...en.dll
windows11-ltsc_2024-x64
1$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...p.html
windows10-2004-x64
3$PLUGINSDI...p.html
windows11-ltsc_2024-x64
3$PLUGINSDI...x.html
windows10-2004-x64
3$PLUGINSDI...x.html
windows11-ltsc_2024-x64
3$PLUGINSDI...app.js
windows10-2004-x64
3$PLUGINSDI...app.js
windows11-ltsc_2024-x64
3$PLUGINSDI...uts.js
windows10-2004-x64
3$PLUGINSDI...uts.js
windows11-ltsc_2024-x64
3$PLUGINSDI...dle.js
windows10-2004-x64
3$PLUGINSDI...dle.js
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
Firestone - Installer.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Firestone - Installer.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/CommandLine.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/CommandLine.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/DotNetZip.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/DotNetZip.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/INetC.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/INetC.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
$PLUGINSDIR/Microsoft.Win32.TaskScheduler.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
$PLUGINSDIR/Microsoft.Win32.TaskScheduler.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
$PLUGINSDIR/Newtonsoft.Json.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
$PLUGINSDIR/Newtonsoft.Json.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
$PLUGINSDIR/OWInstaller.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral14
Sample
$PLUGINSDIR/OWInstaller.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
11 signatures
150 seconds
Behavioral task
behavioral15
Sample
$PLUGINSDIR/OverWolf.Client.CommonUtils.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
$PLUGINSDIR/OverWolf.Client.CommonUtils.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
$PLUGINSDIR/SharpRaven.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
$PLUGINSDIR/SharpRaven.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral22
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
$PLUGINSDIR/app/cmp.html
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral24
Sample
$PLUGINSDIR/app/cmp.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral25
Sample
$PLUGINSDIR/app/index.html
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral26
Sample
$PLUGINSDIR/app/index.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral27
Sample
$PLUGINSDIR/app/js/app.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral28
Sample
$PLUGINSDIR/app/js/app.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral29
Sample
$PLUGINSDIR/app/js/block_inputs.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral30
Sample
$PLUGINSDIR/app/js/block_inputs.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral31
Sample
$PLUGINSDIR/app/js/libs/cmp.bundle.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral32
Sample
$PLUGINSDIR/app/js/libs/cmp.bundle.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target c6cb6c6a96cfdb7aea05d69f1a2930ec8b219a890cac893580bf5aa122f71870
- Size 2.1MB
- Sample261030-le7bcsct9j
- SHA256 c6cb6c6a96cfdb7aea05d69f1a2930ec8b219a890cac893580bf5aa122f71870
- MD5 981c600fef697094a0ade528809ba213
- SHA1 a6720f6d8ac4c014572de715e7bc837c5f0fc19e
- SHA512 70505780cc30b3f4e5ecf86fa88827fb17ffff92b2462706b82a2ff017d6eb410894a659ed087a78709ebbd2beacc61e420ef7095780c63a39e274eaed410413
- SSDEEP 49152:96Cw6wgt487cxj8sMZyv5Zlve8zpCBe3kH4U6uC4M3IoBBPPndAgif:9Pw6BtzOjPTv5Zlvzpk/Hf60M4ojNw
- TLSH T11BA5337134D89390952BAC703FD124D2139BAC04EB6D5E6E60DBB9F0897D4A333AC53A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack002/$PLUGINSDIR/nsis7z.dll acprotect -
resource yara_rule static1/unpack002/$PLUGINSDIR/nsis7z.dll upx - Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack002/$PLUGINSDIR/INetC.dll unpack002/$PLUGINSDIR/System.dll unpack002/$PLUGINSDIR/UserInfo.dll unpack002/$PLUGINSDIR/nsProcess.dll unpack002/$PLUGINSDIR/uac.dll
File Explorer
-
c6cb6c6a96cfdb7aea05d69f1a2930ec8b219a890cac893580bf5aa122f71870.zip 2.1MB
-
Firestone - Installer.exe.exe 2.1MB
-
$PLUGINSDIR/CommandLine.dll.dll 68KB
-
$PLUGINSDIR/DotNetZip.dll.dll 467KB
-
$PLUGINSDIR/INetC.dll.dll 24KB
-
$PLUGINSDIR/Microsoft.Win32.TaskScheduler.dll.dll 124KB
-
$PLUGINSDIR/Newtonsoft.Json.dll.dll 692KB
-
$PLUGINSDIR/OWInstaller.exe.exe 301KB
-
$PLUGINSDIR/OWInstaller.exe.config.xml 632B
-
$PLUGINSDIR/OverWolf.Client.CommonUtils.dll.dll 648KB
-
$PLUGINSDIR/SharpRaven.dll.dll 80KB
-
$PLUGINSDIR/System.dll.dll 11KB
-
$PLUGINSDIR/UserInfo.dll.dll 4KB
-
$PLUGINSDIR/app/_locales/de/messages.json12KB
-
$PLUGINSDIR/app/_locales/en/messages.json11KB
-
$PLUGINSDIR/app/_locales/es/messages.json12KB
-
$PLUGINSDIR/app/_locales/fr/messages.json11KB
-
$PLUGINSDIR/app/_locales/it/messages.json12KB
-
$PLUGINSDIR/app/_locales/ja/messages.json13KB
-
$PLUGINSDIR/app/_locales/ko/messages.json12KB
-
$PLUGINSDIR/app/_locales/pl/messages.json12KB
-
$PLUGINSDIR/app/_locales/pt/messages.json11KB
-
$PLUGINSDIR/app/_locales/ru/messages.json15KB
-
$PLUGINSDIR/app/_locales/tr/messages.json11KB
-
$PLUGINSDIR/app/_locales/vi/messages.json13KB
-
$PLUGINSDIR/app/_locales/zh-tw/messages.json11KB
-
$PLUGINSDIR/app/_locales/zh/messages.json10KB
-
$PLUGINSDIR/app/assets/fonts/klavika/KlavikaWebBasicMedium.eot27KB
-
$PLUGINSDIR/app/assets/fonts/klavika/KlavikaWebBasicRegular.eot30KB
-
$PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.eot66KB
-
$PLUGINSDIR/app/cmp.html.html .js 5KB
-
$PLUGINSDIR/app/css/styles.min.css14KB
-
$PLUGINSDIR/app/game_detection_database.json27KB
-
$PLUGINSDIR/app/images/big-icon-fallback.png.png 413B
-
$PLUGINSDIR/app/images/bottom-arrow-hover.png.png 294B
-
$PLUGINSDIR/app/images/bottom-arrow.png.png 279B
-
$PLUGINSDIR/app/images/checkbox-checked.png.png 161B
-
$PLUGINSDIR/app/images/close-hover.png.png 185B
-
$PLUGINSDIR/app/images/close-normal.png.png 330B
-
$PLUGINSDIR/app/images/header-logo.png.png 1KB
-
$PLUGINSDIR/app/images/icon-fallback.png.png 213B
-
$PLUGINSDIR/app/images/icon.ico62KB
-
$PLUGINSDIR/app/images/large-logo.png.png 486B
-
$PLUGINSDIR/app/images/minimize-hover.png.png 171B
-
$PLUGINSDIR/app/images/minimize-normal.png.png 150B
-
$PLUGINSDIR/app/images/more-info.png.png 539B
-
$PLUGINSDIR/app/images/plus.png.png 178B
-
$PLUGINSDIR/app/images/progress-01-overwolf.png.png 12KB
-
$PLUGINSDIR/app/images/progress-02.png.png 9KB
-
$PLUGINSDIR/app/images/progress-app-image-01.png.png 2KB
-
$PLUGINSDIR/app/images/progress-app-image-02.png.png 2KB
-
$PLUGINSDIR/app/images/progress-app-image-03.png.png 1KB
-
$PLUGINSDIR/app/images/small-logo.png.png 523B
-
$PLUGINSDIR/app/images/tile-fallback.png.png 935B
-
$PLUGINSDIR/app/images/v-check.png.png 885B
-
$PLUGINSDIR/app/images/welcome-logo.png.png 995B
-
$PLUGINSDIR/app/index.html.html .js 20KB
-
$PLUGINSDIR/app/js/app.js.js 21KB
-
$PLUGINSDIR/app/js/block_inputs.js.js 789B
-
$PLUGINSDIR/app/js/libs/cmp.bundle.js.js 346KB
-
$PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js.js 90KB
-
$PLUGINSDIR/app/js/models/notifications.js.js 5KB
-
$PLUGINSDIR/app/js/utils/analytics.js.js 4KB
-
$PLUGINSDIR/app/js/utils/commands.js.js 13KB
-
$PLUGINSDIR/app/js/utils/cookies.js.js 1KB
-
$PLUGINSDIR/app/js/utils/modal-events-delegate.js.js 1KB
-
$PLUGINSDIR/app/js/utils/strings-loader.js.js 5KB
-
$PLUGINSDIR/app/js/utils/utils.js.js 118B
-
$PLUGINSDIR/app/js/windows/cri/cri-controller.js.js 3KB
-
$PLUGINSDIR/app/js/windows/cri/template.js1KB
-
$PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js.js 1KB
-
$PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js681B
-
$PLUGINSDIR/app/js/windows/finish/finish-controller.js.js 1KB
-
$PLUGINSDIR/app/js/windows/finish/template.js1KB
-
$PLUGINSDIR/app/js/windows/main/main-controller.js.js 11KB
-
$PLUGINSDIR/app/js/windows/main/template.js3KB
-
$PLUGINSDIR/app/js/windows/modal/modal-controller.js.js 2KB
-
$PLUGINSDIR/app/js/windows/privacy/privacy-controller.js.js 2KB
-
$PLUGINSDIR/app/js/windows/privacy/template.js655B
-
$PLUGINSDIR/app/js/windows/progress/progress-1-controller.js.js 1KB
-
$PLUGINSDIR/app/js/windows/progress/template.js242B
-
$PLUGINSDIR/app/js/windows/settings/settings-controller.js.js 6KB
-
$PLUGINSDIR/app/js/windows/settings/template.js4KB
-
$PLUGINSDIR/app/js/windows/welcome/template.js1KB
-
$PLUGINSDIR/app/js/windows/welcome/welcome-controller.js.js 2KB
-
$PLUGINSDIR/app/manifest.json691B
-
$PLUGINSDIR/app/progress.html.html .js 20KB
-
$PLUGINSDIR/log4net.dll.dll 270KB
-
$PLUGINSDIR/nsProcess.dll.dll 4KB
-
$PLUGINSDIR/nsis7z.dll.dll 90KB
-
$PLUGINSDIR/nsis7z64.dll.dll 514KB
-
$PLUGINSDIR/uac.dll.dll 14KB
-
$PLUGINSDIR/utils.dll.dll 55KB
-
$PLUGINSDIR/websocket-sharp.dll.dll 267KB
-
Ƿװʹ˵.txt1KB
-
Ƿվ__ҳ.url48B
-
Ƿվذ.url57B
Firestone - Installer.exe
- IMPHASH 56a78d55f3f7af51443e58e0ce2fb5f6
- SHA256 a74fa98585380abcae3ea79fba3a0123491e56ad633f2babfbe3d3381ad59294
- MD5 7c4fdd2458febffdc8b3117cb06a0aea
- SHA1 217435f76ee959b37885525691d6886c747db9ad
- SHA512 4c3497f69f2f1a753e36db16d3174fa2a58a9b92747fef72c4b9720fd3ca8edc93915214b130141193fbfadc1fbc40926abd1ebf5ed990522e835fede6b94762
- SSDEEP 49152:TQAF6WxE87vxpsrFpIv0fPHOMCBgs34WysQY2Nh/A3xr1cUx:TQAF6IPN+TIv0fvFUv3pyU6Ar
- TLSH T162A533A173ECD109CA11DE703FE24A7F257AFD1029798F87A3C4BC10A92D992774C666
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5d:50:ea:27:5f:28:05:b0:34:74:e0:fa:48:4b:8a:15:6b:a9:14:0b:32:e1:d1:8e:a5:1d:97:0f:eb:6f:29:43
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Yafo,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c
Chains
Aug 4, 2024
SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Yafo,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Yafo,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2013 - Jan 15, 2038
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=514330331,CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Yafo,C=IL,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302494c
Serial Number
02:13:8d:80:29:d8:fe:c8:5c:a2:91:9d:08:d1:31:55
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 14, 2023 - May 3, 2026
Subject
CN=Dummy certificate
Serial Number
01
Issuer
CN=Unknown issuer
Key Usages
KeyUsageCertSign
Ext Key Usages
Timespan
Jan 1, 2013 - Apr 1, 2013
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
13613
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW
shell32
SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree
comctl32
ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
user32
GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu
gdi32
SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject
kernel32
GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
CreateFileW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
66KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=165, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/CommandLine.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b6ab16dd1656c7a90c0b24bde5453d761d9eb557b128c73f6ee9345ae6822b2e
- MD5 ccd5f62a1d87970d9fea6d26fd45983a
- SHA1 867942b2a6929ccaae481c02649386a5008db997
- SHA512 5d4653e438d004090ec8871702ea46d743c79b61abd7864b447bf16f60482e2fc991b9b2b1bb071a0501d4dd4ae4fdb033075ec18c5a1b50b0df6fa0092c4f2d
- SSDEEP 1536:nZj9JT17qpL/6ePMqBNzrstoJSkrjbgbwziQ3hwa7PK3h82:nx9JT17WPMqBNWAkbwzifaF2
- TLSH T1C6634A2193EC4727D6EF0BB9B4B462250FB1FF86B523E36E8D49A09A1943B4145213B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c4:bf:69:a7:49:b7:36:1a:42:33:23:37:55:f1:07:a4:20:71:2e:f4:5c:b0:07:6b:66:62:b2:98:fd:b4:db:a8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Chains
Aug 4, 2024
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
c4:bf:69:a7:49:b7:36:1a:42:33:23:37:55:f1:07:a4:20:71:2e:f4:5c:b0:07:6b:66:62:b2:98:fd:b4:db:a8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Chains
Sep 6, 2022
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Serial Number
0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 27, 2020 - Mar 3, 2023
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Serial Number
0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 27, 2023 - Mar 3, 2026
Minor OS version
0
Major OS version
4
Entry point
60874
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
G:\src\commandline\src\libcmdline\obj\Release\CommandLine.pdb
mscoree
_CorDllMain
Name
.text
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
$PLUGINSDIR/DotNetZip.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6c512d9943a225d686b26fc832589e4c8bef7c4dd0a8bdfd557d5d27fe5bba0f
- MD5 190e712f2e3b065ba3d5f63cb9b7725e
- SHA1 75c1c8dd93c7c8a4b3719bb77c6e1d1a1620ae12
- SHA512 2b4898d2d6982917612d04442807bd58c37739b2e4b302c94f41e03e685e24b9183b12de2057b3b303483698ad95e3a37795e6eb6d2d3b71e332b59deeca7d02
- SSDEEP 6144:GuCInHLhJI4FY/ixjci6ychf8xalGQGtSV41kJDsTDDpBnse6OVxLV/Wo0k:UQL32ikCaUS4csRBse6sfWNk
- TLSH T10FA4AE0427EC4B57E1EF5BB5E0B295A2C3B1B462693EEB8F5C4024EE2D17350D911BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
13:8b:f6:d8:5e:11:a7:7d:99:23:3f:a2:cf:77:74:08:78:12:2e:73:c4:3d:bf:8e:a7:85:e5:13:b1:43:8d:6a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Chains
Nov 30, 2021
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Serial Number
0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 27, 2020 - Mar 3, 2023
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
4
Entry point
465934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\dotnetzip-semverd\src\Zip\obj\Release\DotNetZip.pdb
mscoree
_CorDllMain
Name
.text
Size
459KB
Virtual Size
458KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
932B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
$PLUGINSDIR/INetC.dll
- IMPHASH 735e27ae3d7df8c0487e4353d04f6f28
- SHA256 c1e568e25ec111184deb1b87cfda4bfec529b1abeab39b66539d998012f33502
- MD5 640bff73a5f8e37b202d911e4749b2e9
- SHA1 9588dd7561ab7de3bca392b084bec91f3521c879
- SHA512 39c6c358e2b480c8cbebcc1da683924c8092fb2947f2da4a8df1b0dc1fdda61003d91d12232a436ec88ff4e0995b7f6ee8c6efbdca935eaa984001f7a72fea0a
- SSDEEP 384:wv1j9e9dEs+rN+qFLAjNXT37vYnOrvFhSL+ZwcSyekzANZBJ:w1AvEs3HBLzYn29vYh
- TLSH T1F2B2E69157EA135EF7F19F347475EB2249BBBC214821C8CF5633268E19B2242E930727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17741
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetProcAddress
LocalFree
WideCharToMultiByte
TerminateThread
lstrcpyW
LoadLibraryA
CreateThread
WaitForSingleObject
LocalAlloc
lstrcpynW
SleepEx
MulDiv
GetModuleHandleW
ReadFile
GetLastError
CreateFileW
lstrcmpiW
CreateFileA
lstrcatW
GetFileSize
SetFilePointer
lstrcmpW
MultiByteToWideChar
lstrlenA
WriteFile
lstrlenW
CloseHandle
GlobalAlloc
GlobalFree
GetTickCount
DeleteFileW
user32
GetDlgItem
DestroyWindow
GetClientRect
MessageBoxW
wsprintfA
SystemParametersInfoW
GetWindowTextW
GetWindowLongW
FindWindowExW
IsWindow
CreateDialogParamW
GetParent
ShowWindow
KillTimer
DispatchMessageW
LoadIconW
PostMessageW
IsDialogMessageW
GetMessageW
SetWindowPos
SendDlgItemMessageW
SetWindowTextW
TranslateMessage
GetWindowRect
RedrawWindow
SetTimer
EnableWindow
UpdateWindow
SetWindowLongW
wsprintfW
SendMessageW
SetDlgItemTextW
IsWindowVisible
comctl32
ord17
wininet
InternetConnectW
HttpOpenRequestW
InternetQueryOptionW
InternetErrorDlg
HttpSendRequestExW
InternetWriteFile
HttpSendRequestW
InternetSetFilePointer
HttpAddRequestHeadersA
FtpCreateDirectoryW
InternetCrackUrlW
FtpOpenFileW
InternetSetOptionW
InternetOpenW
InternetGetLastResponseInfoW
HttpEndRequestW
InternetReadFile
HttpAddRequestHeadersW
InternetCloseHandle
HttpQueryInfoW
get
head
post
put
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=123, productName=VS2005 build 50727, version=50727,
count=85, id=1, productName=Unmarked objects,
count=3, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$PLUGINSDIR/Microsoft.Win32.TaskScheduler.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f8bff4120506bb32b8c4a6a3e4fa31bc70b365b38cf2aa13b160985020b6d3d2
- MD5 529d605158a6fd888ea989d77785aa5f
- SHA1 abf553c514b6ce60bb95b5b67d65f3a64d3ddf90
- SHA512 f0d993ac7a173ff9e88c1993735e77c4d6db0bf4100bbca531a298c9e7953f6c9a53fe61f006d8ff276d707c24fb4856f9bb4a5ca6f534a1ca86b169c1fe3c88
- SSDEEP 3072:uBCeNh/pcfnLq3wyXYsKRNRwxz+gT37teucRpH0dVrs:uB/w4xQWOcrs
- TLSH T133C32A1237EC4D3AEBEF5BB9E525162057F0F1462622E70A8C4CB0D98D173C69E606B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ba:dd:f3:a2:22:c8:8b:1f:b9:ff:8c:1d:c0:d7:7d:f4:1b:46:6a:f3:49:1f:ab:41:ee:1d:10:17:6e:48:25:f9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Chains
Aug 4, 2024
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Serial Number
0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 27, 2023 - Mar 3, 2026
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
4
Entry point
125134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\dahall\Documents\Visual Studio 2010\Projects\TaskService\obj\Release\Microsoft.Win32.TaskScheduler.pdb
mscoree
_CorDllMain
Name
.text
Size
114KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
$PLUGINSDIR/Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7b44639cbfbc8ddac8c7a3de8ffa97a7460bebb0d54e9ff2e1ccdc3a742c2b13
- MD5 98cbb64f074dc600b23a2ee1a0f46448
- SHA1 c5e5ec666eeb51ec15d69d27685fe50148893e34
- SHA512 eb9eabee5494f5eb1062a33cc605b66d051da6c6990860fe4fd20e5b137458277a636cf27c4f133012d7e0efaa5feb6f48f1e2f342008482c951a6d61feec147
- SSDEEP 12288:p9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3SH:p8m657w6ZBLmkitKqBCjC0PDgM5CH
- TLSH T1CEE44A0623F88F66D1AF2735B8305A1997F6F407A2B6EBCF6904D5B81D677608E00367
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Chains
Nov 23, 2021
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Chains
Mar 17, 2021
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Serial Number
07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 27, 2018 - Apr 27, 2028
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US
Serial Number
0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Issuer
CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 25, 2018 - Oct 29, 2021
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Serial Number
0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 27, 2020 - Mar 3, 2023
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
4
Entry point
698886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
675KB
Virtual Size
675KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
$PLUGINSDIR/OWInstaller.exe
- SHA256 c6864deca3c3b77500ad86dc3c847a7430efb0992228625f36ab767d1a8f90dc
- MD5 1333393fbfcea0642f3aec0499a44e9a
- SHA1 7a1ccf2f5d311b7548938ff51ad85b05e03021fd
- SHA512 31a565555d0176f0c87248134b3c64ebfc11f92d6cffb8d7968e99a7d7d74004ac32b8dafd05eab8fc5d33750a12da0e1fd076eb10e3aa123c7769aeee977ef2
- SSDEEP 6144:rczyBUDsrUODYRVxGxZ9bKFoSIm9u0Uqq2zCpl/ucG:roc4kYoSO0jA
- TLSH T12364381123FD8628F5BF4B79BAB649248BB6BA87A477E79D0E4164CE1933300C950773
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a8:fb:77:b2:b6:27:3e:79:44:f4:20:b8:d4:ce:81:ca:57:ca:65:d4:ab:29:35:58:af:bd:99:ef:71:bc:e9:a7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Chains
Aug 4, 2024
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Serial Number
0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 27, 2023 - Mar 3, 2026
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
E:\Jenkins\workspace\OWInstaller-NET4.8\OWInstaller\OWInstaller\obj\x64\OWInstaller\OWInstaller.pdb
Name
.text
Size
278KB
Virtual Size
277KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
$PLUGINSDIR/OWInstaller.exe.config
- SHA256 272e4c5364193e73633caa3793e07509a349b79314ea01808b24fdb12c51b827
- MD5 82d22e4e19e27e306317513b9bfa70ff
- SHA1 ff3c7dd06b7fff9c12b1beaf0ca32517710ac161
- SHA512 b0fb708f6bcab923f5b381b7f03b3220793eff69559e895d7cf0e33781358ec2159f9c8276bf8ba81302feda8721327d43607868de5caaa9015d7bb82060a0b9
- TLSH T1F9F0E11048C4FF268F3185A33B774814EF3883B7108C091C705E39AB0B271964317233
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/OverWolf.Client.CommonUtils.dll
- SHA256 d18fca59c1d678df61964cccd09ca8594f859dc45668677c95616f3abaca9266
- MD5 5aed88b663a63e0d7d98f1481521e688
- SHA1 2e2ff06bd3adfd3418610d49de9e30570bdc4140
- SHA512 e25c9083a19892dcd8ef53bbf915d5b8bf72509c780a79567752f76fb468c09bbac2b8a9acd6b03954820b09ef9a29f8dea183539f3af4665ef5a5497e38bd64
- SSDEEP 12288:GIdIkrU4WLWY5smdHlAdHBcb1nB0LFixTl7RnAv3:KzlOVM1nBoFYl9Av3
- TLSH T1A2E45B5133F88A26F0BE5B35A8B021054BBAF5079666DB4F3A5C904D2FB2748CD51BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b0:ea:20:b5:77:9b:cf:b3:de:56:26:7a:fc:36:d8:6f:3b:3a:3c:64:ae:50:1d:4e:fd:7d:8b:be:29:bf:3b:41
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Chains
Aug 4, 2024
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Serial Number
0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 27, 2023 - Mar 3, 2026
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\Jenkins\workspace\OWInstaller-NET4.8\OverWolf.Client.CommonUtils\obj\x64\OWInstaller\OverWolf.Client.CommonUtils.pdb
Name
.text
Size
638KB
Virtual Size
637KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
$PLUGINSDIR/SharpRaven.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 83bccd15b4117050fbda0d6db992efede3cfaee7fdfbe167714b8d8c62a19380
- MD5 20422fc722b26cfbb8d68252ddc70fc9
- SHA1 642792a565ce5cb9a3383cd6e6f96e88af0046b0
- SHA512 c2f8747164c303df05b77e5a03a87b23119617745403c0319b59a1d934f72b8d9c2c9d5ef7ba2a3a130cca46b2d0213b0a3b0e6aa9f8ff3df190976993a8e171
- SSDEEP 1536:1a9qjviI1YjOrfRK9bvyyfpHbnzDwkk7PC3hi:1EuqI1lRKbvyyB7nlkn
- TLSH T1AC832B3123988328CF9D6734B078235A67B8625E3B31E696DF1C619E6F973C346211B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
29:d0:9c:eb:5a:81:f2:af:42:7d:8b:61:a8:eb:de:5f:10:60:8f:fd:1e:fb:3c:28:61:47:e3:b0:8d:21:5a:01
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Chains
Aug 4, 2024
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Serial Number
0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 27, 2023 - Mar 3, 2026
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
4
Entry point
79586
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\projects\raven-csharp\build\obj\Release\net35\SharpRaven.pdb
mscoree
_CorDllMain
Name
.text
Size
70KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
$PLUGINSDIR/System.dll
- IMPHASH fc0224e99e736751432961db63a41b76
- SHA256 5a1c20a3e2e2eb182976977669f2c5d9f3104477e98f74d69d2434e79b92fdc3
- MD5 7399323923e3946fe9140132ac388132
- SHA1 728257d06c452449b1241769b459f091aabcffc5
- SHA512 d6f28ba761351f374ae007c780be27758aea7b9f998e2a88a542eede459d18700adffe71abcb52b8a8c00695efb7ccc280175b5eeb57ca9a645542edfabb64f1
- SSDEEP 192:eF2HS5ih/7i00dWz9T7PH6lOFcQMI5+Vw+bPFomi7dJWsP:rSUmlw9T7DmnI5+N273FP
- TLSH T1AC326C05536081F2F5909578942BBB271B3D1115A7BA8F87DFE38483BD282E6AE3D613
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
835B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
578B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/UserInfo.dll
- IMPHASH e1c0bd3d5b9f3f5cec7ea773ff66ac6e
- SHA256 090c4bc8dc534e97b3877bd5115eb58b3e181495f29f231479f540bab5c01edc
- MD5 9301577ff4d229347fe33259b43ef3b2
- SHA1 5e39eb4f99920005a4b2303c8089d77f589c133d
- SHA512 77dc7a1dedaeb1fb2ccefaba0a526b8d40ea64b9b37af53c056b9428159b67d552e5e3861cbffc2149ec646fdfe9ce94f4fdca51703f79c93e5f45c085e52c79
- TLSH T1718162BBA3F40CB3D0954BBB41A31CE793B2DD702716401F498B568A20C4A6FED5E705
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4714
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetVersion
GetCurrentProcess
GlobalAlloc
GetCurrentThread
GetModuleHandleW
GetProcAddress
GetLastError
GlobalFree
CloseHandle
lstrcpynW
advapi32
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
GetUserNameW
GetAccountType
GetName
GetOriginalAccountType
Name
.text
Size
1024B
Virtual Size
694B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
673B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
144B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
240B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=21, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/app/_locales/de/messages.json
- SHA256 4442ce287dfadf8d2019e4e975ee1c876d57d847c04715fd215ce03b24d36225
- MD5 9ad7bb13a28acd7b7be3d35adf80de99
- SHA1 0fabddcfd82faed51bb071fcfaa213db2583cb37
- SHA512 9af9d5a66c4d9f39027eec20288bfac7170b43944fc58d6a05359624827a3847c4d90b232d3f1f621eaf3f5dd35172efcc96e763b1ca733dfedf02d4df084951
- SSDEEP 192:RAJZco4VLBeZo9NhochYRl173tFUWIh239gdzu:bOSYd7V6a
- TLSH T13D427D01DCF1AE3B01BA43293C66A605B362576F1050681F7AF9504D0BA2DF3D9EBB99
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/_locales/en/messages.json
- SHA256 dad27dea69e2e18dad4489ca8ad16c2dffa6448919ad857375f54463740ffae4
- MD5 02b3d4da2acbe118b1c7752cbc73c563
- SHA1 f4dea02036c91100d1d8b641259bf1c261ba795d
- SHA512 bd37a83255fedbaff54e2bc9abcf220e8daf0ba7e76f7874e0415420b6ed3543f29f7e1c3370048af10400fabfe6c061ddddf726ab4ec906793c02ebf852690d
- SSDEEP 192:+ANFsiqgFWBIpJGtkb9yBj6j/mP8gZM8F:2gFWBIpJY29Ut8h8F
- TLSH T167324A05DDA1AE3B06B643293CAB7615B362076F11505C1F3AF9114C0BA2EB3D9F7B89
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/_locales/es/messages.json
- SHA256 382e9709edcbe0faa5509ec6891beb1063840ff0a6cbbd04c9aa94a376ba4503
- MD5 424b1b7afc6cea984341e80a1d5ee07c
- SHA1 af56baa273442a6336acf7ef873a1f64423534f3
- SHA512 2347b5e2d5b1f95be3c59461c01b6a3f9d52741510d790a812d61ddbeea5b05f01a67e918862790cf1697a106f9aad65d8035626880c7cba1e1c87456ed473f1
- SSDEEP 96:TSmHNbp4V9NzWuWGswh6VfJt9AS2xzwO/enB80IKsw8Ao6bdgOMC+lSzJZreOz2:dHN25z9E/d2T/eBAKsibP+8zJZFz2
- TLSH T184426901CDE56E2B16B743693CA7A216F3A1075F2010980F7AF9154C0BA2DE7D8F7B99
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/_locales/fr/messages.json
- SHA256 d10d6f0c35af598decd2bddb3945ad5987cc8da310446b16a63e9856fb635999
- MD5 418a72fba9141b5fad2daa67eac89ee9
- SHA1 c0e931a1e76543dde2350b2a93fb7adcef49b194
- SHA512 1e756322ae19c9a82d66ff74fb48daaad3ec8d873aaaa63103cefc51e4db0c3de4f593f067606641e6027c4b5c256c7e558d4fb1684dc8241ce96c8696fbf000
- SSDEEP 192:9euPfuQtfqnfmdIkT3KpGvzjjX6+R/QBOOWmW:yY2fmdIkT3qGvzjPQBOOQ
- TLSH T10D42BC4BFDE1AA9F06CB43273E33F2665571439CE104983D7E99280C02C9DF69997791
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/_locales/it/messages.json
- SHA256 71df04a26c171ee7ed4e13ce7b8d0a7a8e50fe1d554d2297ea96f7371e4179c7
- MD5 14684a817dabf05025d1a8b33b0ec04e
- SHA1 fa838b38356c26a345292786df9d868331dd5aae
- SHA512 194aa1dcec2c50fdfd7431699da3080977bf59198b404e6ffc96f06628fee01d0db127ce041a4be0fe22568760b9fd2da517cb67ed5efc283ac28838f5e7bd23
- SSDEEP 192:jp7a5KqWVRImAOoaODwcambEbpuFOratb3KJ:5qWVVSDuMEV4Oob6J
- TLSH T1DE424915DCF16D3B15B643697C677609F3721B6F2010681B3AFA114C0BA2DA3E8E6B89
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/_locales/ja/messages.json
- SHA256 20467128e0afab919e9874dcd7e2d5dd94fcc16f33aa50d0d8243e81d6c089f2
- MD5 d9dd8119873d6e831fbfd768343805f6
- SHA1 c4b2c24b8bba9238c10616ac9c01cef088cab092
- SHA512 b5c456f7655bc3ec23aa733e91940f25cd5f42284e97fb51a95b96b927c75a96ea163628486cb4b890b24ebd6277295fedc79bcd14a2ce7b19471490d9b32a38
- SSDEEP 96:vbt9L0Fvmq0cn9alw2Vx5AkA0h31GYzPxs0yVeMyHIf3X24fvcWd7GxQpLCZNFVl:bqElwOuEQq/c124f0GjIlITc
- TLSH T16152690CDDE16D2B05B642263C5A7345B2624F5FE460282B36BD904C1B619EFD8E6BB8
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/_locales/ko/messages.json
- SHA256 0d483128b1714e8df8d61a3396ea4ffa6e1f6865ad7b5306214d811a2028ea0a
- MD5 17387fe103d0789991d057984b130284
- SHA1 1a847b2f82a002a3e3567f4dacf39632b1e2ba35
- SHA512 123a84497ac56dfde0cb4d52c7c778b1210132662164e1553be98fba06d4b49941b8e11c105749aac1b140b6886a33bd2647d0fcfd7bacbbbfd136ea4ab2cfd2
- SSDEEP 96:20Lnmlou+29abFqYDrhg8Ude8y4gVHWS9wLBKgi2ikhoglwQxDj/b5d:206aPz3fwI2ikhnjTb5d
- TLSH T1CD42AE41DCE26E6B01B682153CF6B204B3A1576F2111181F7EF9594C0BA19F3CCE6FA9
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/_locales/pl/messages.json
- SHA256 b8c9eec03aac551f33de55f0be7d5b915d64730b11f0574fed1666e656f2118b
- MD5 5ba0db597f102d2b7560631095128f1f
- SHA1 10de6855b2c26d00bce493ad5049d030eb7c22f9
- SHA512 e74fd3ad2853f4cffe3bc188d535b86ee5ce81b3a884ddf0c51ee823fb91b30b3d62dc3bd4d38db080d97bee73fbd48102896d76c3153e307461aa82d5e0017a
- SSDEEP 192:JkokRd0l5MtqydKTFLbPUhyj9194AI/5x+KunXuU1X:OzdKpLLUhyFtI/5AKmuUZ
- TLSH T111424B05DCE16D2B06BA42293CA77705F3A6076F5050581F3AFA154C0B629F3DDF6B89
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/_locales/pt/messages.json
- SHA256 7c09f5f4f909d30e1a45b92a517432d296859825876d4e9852a8f509f96d2480
- MD5 3159b26555d81ef9c9d0d153e775c708
- SHA1 b855ba4a1f25e6dff65da71b407df1a91180435a
- SHA512 ad1c74542a4177fc8e200d2e7943308025a2d691b0b421ffcb580c88cbdc925ef50c43d17bb665a2a59c168e1fd21897d8fb000a71695036533bec4d907c7184
- SSDEEP 192:PdZpgbn/T9lmvEd1ltT0j8fbt+DBFIdfY:Pdc/T9lgwXtT0QZ+NFI2
- TLSH T1A9425915DCE16E2B167A43693DA76706F361075F20109C1F3AFA164C0BA2DE3D8E7B89
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/_locales/ru/messages.json
- SHA256 764419019b8da2bc3fd0af5ec8ce8899b3a24d90c1abf69087b71fb55acc0515
- MD5 c22702df74eb2c41ed92cd3f1fc46cff
- SHA1 ba8b25078d053f44c5bf58f8b761baf7984de527
- SHA512 facc5db35301ef8e405561d09dd1e4353ffd665d0577678d63d33a45362277556fcf2ffd930377bbf7631fcb6a32371dd658b45916d990fff3abacf2856632c9
- SSDEEP 192:hxopOFKQb8f0mv5sNXLToezIF97/Yz6eOicV7FKe:hMQb81v5ObtzdJ64e
- TLSH T1D462AD11CCE56C7F0176922AEC15BB0976E607BF36205A1B39B03C5D27F29B2C5B6B48
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/_locales/tr/messages.json
- SHA256 7840b3b78294030927731f914a64e17a2010cb0699447339c2fcd47e909e7d4d
- MD5 b7695e795776ecf9ac9299c0f30f87f9
- SHA1 00361bc0899720beeff341282f2aff5ac43899f5
- SHA512 a8574f7cc659694ed585580a135baec7faca82162e6fc9c19a88ebde15cb952878d74e43b32012f7f7dcf63b67b097fe62d68db8eb6753ebf353bff8ed07315e
- SSDEEP 96:/o9oJmTNCu69YKLtuQb34bJthPjSnID6v+iVcMgJVvBP4E0sauEWaxpX5A3XKC:YT5KAQr49SnIuHgJV1KHFXgXKC
- TLSH T148425E01DCF56D3F02BA43667DA66605F3A21B5F1120AC0F3EB5554D0BA2AF3D8E6B48
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/_locales/vi/messages.json
- SHA256 231a647e4ac1fcc53c008c7a07af4ddbf6e7faad38cf6eb593974ad9cda444b4
- MD5 ff03f3797fcdc074fd32a57f8ab36d4f
- SHA1 07d382fa4558607d502aa6a6d2de797a0269b4e6
- SHA512 7e85fccec49f0e3df37c410a49f689293abadfebc55b9ac3f5a47b7a868503175c0efe957e7ea422bb0d58eb6a200422a394f530724d0fcb6e5d7b5643a12df8
- SSDEEP 192:vDA6IMxCb6kSKrk03+4Q8pQfZlraoBMJ2sf55qlQ:vLxCb6kSKrk03c8pYLaoxCnuQ
- TLSH T162528B018CE47D3B01BE43397C6A6609B3E55B5F6190AC1F3AF8155C0BA1DA2DDE2F89
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/_locales/zh-tw/messages.json
- SHA256 d10b26d1cb08ba5b4c9ac17439a641f82b7404823f4ab8bc3d793c0c4bf01117
- MD5 363616514628c643de23e2b9b596c2a9
- SHA1 4cd78e19d704d3eb470ebe0b4789bce6cdee64ec
- SHA512 d1609f3a4ffc45b3003056e6a66ea39be43ee73aaf1d6488b4fa86f37e176388191d3cbdb30506c0472c3d98d3c1c5b3f62de028dc495b23abfa57f84015614d
- SSDEEP 96:IDHmAvreV9Hi0Q/fg1ePhnmU2KczmRbbDHukFDRnk0gsmZ5B2:PAaji0Q4M2KcqRvbvFNk0gJH2
- TLSH T103323805DCB16E3F02BA42693DA66205B2711B5F1060AC1F3EF5654C0B61EF3E9E2B89
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/_locales/zh/messages.json
- SHA256 28ec01002632aa8e3a46078d590c4cd707faf2a2f0e4071d6f8572d4b90a4ea2
- MD5 6bfb7e28c38ce417f9ae53b9282a3e90
- SHA1 5e7723fc7e5e965fe84a1fb8fc22fc07eb19bea7
- SHA512 126ad8f28af186b9a7868497ec1789b85031373c0ab3e9f7df84d7a6773064e490ab1fdbb94c3bec19626080bb455a2231ec4a45de2a24e041d4478a52bb4055
- SSDEEP 96:Z3mAoD6V9yJxLljPmghdDPfcCfb39bC4toTbYFbLxPf1R0:EAv23JL/fckTM4toMPb0
- TLSH T1C4324605DCF1AE3F02BA42293D6A7209B271175F2150AC1F3AB5158C1BA1DF3D9E6B8D
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/assets/fonts/klavika/KlavikaWebBasicMedium.eot
- SHA256 41146279fcb503008ab14c89e3e9a1737dc92499b07e36f9bbbd40b82dc3a793
- MD5 ddd851603ecdbf74a113ae2e741fb487
- SHA1 36449c0d56578c22df9c6918840d808aebd3e97e
- SHA512 67b84413462158a114018c413bc8a32731d00f439d6998ec1577fb7d27df4316edd9acf9c94dededb918fc7ce6fb8523af85e03dae0b94e5a2b505e6998e0053
- SSDEEP 768:rseIE0tr8IYly5CBAYDTCphdJupFzkDHCbsZU0MqMA3OlgE1Ni:XoK08BAY/CHupFzKibQMXf1i
- TLSH T112C2F14B5FF5B420E394E4FC4D7C71D0CB50619350EE290D25149A6363AB8B7ACE5EA4
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/assets/fonts/klavika/KlavikaWebBasicRegular.eot
- SHA256 83f615ecdb758eb2fd5357b89a9e0424bba9ce66ba2f8ccd93986f7d03998b5b
- MD5 8c176ec2a2ccf48958f8cbfc5114818f
- SHA1 dd93db072bfb8ade37da99c8e56bda5c4259feb8
- SHA512 c2ea009102f1a47313ed3d85f391ea23a9bed3378f965f4450befc5347b086f752fdb5b41ef0f2f6dab674f3095e7dda2837294b4d21ea9268551bffbcac5c4f
- SSDEEP 768:Arh/pQJ/7STWU6K/j83COdDCxyQ2dvgxB8hC0:ArnQV7nK/A3CqQQ0eC0
- TLSH T175E2E184847B5A0BF96F8F36C9B78C6DEB7ED8441211628C13656DB4782F68693B1580
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/assets/fonts/lato/LatoLatin-Regular.eot
- SHA256 c6c970b103b3c3aa83f7a45172619a4451ea5f015f9f3ef4fd08c9a4aa895cbc
- MD5 6cfad5881181ae658a6efdd68889a690
- SHA1 5b54f6ccc20ed3a078fbdf94d7a68ac80002624d
- SHA512 ddd3d43540eb3d4eef48d0834136de1e7bf23a52f286d0a666cf57c7d685aadf1cea6d37c88f9d7ce5ad6143d7c3213f54b16a11f616b7dce154bba50997bbe7
- SSDEEP 1536:Y3UqIyK9PLLUbTiyEl4u9Iau0j6aEPmFm/MsE+Eas7AdCtkUq:EUqIyK9T4bTiF99f2PmFm/PpEL7A8tkr
- TLSH T12263F2C483FAE84D52672BBE88055620D51B34557333E8F9FD76892B8C6AF8066E1337
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/cmp.html
- SHA256 6c21e8c07ce28327dca05f873d73fe85d5473f9b22a751a4d3d28931f5d0c74f
- MD5 d7b8b31b190e552677589cfd4cbb5d8e
- SHA1 09ffb3c63991d5c932c819393de489268bd3ab88
- SHA512 32794507a4b9a12e52ceb583222cb93300e38c634a72ea3f51a0189127aba60cf476fb7918942355a4f826185d7071e876cb40348ba34cf5d1ca7e9546ccb310
- SSDEEP 48:t9rc0/GLAoShbEHaLKNGiNQtvmolOGR36tgtr/GTvJP8AscaV4LiMt7ByBZXGz+p:4VLjHa2NGiivmmpWsBVutFwAk5vSG
- TLSH T114B1EA1A2D9924690173F3380B6BA204F72AA1A72105CE053EACDE513FB152BD58FFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/css/styles.min.css
- SHA256 ef423e07b8a0ce201d438ffb8501899c6ae9d20fee079707b03b32bce8857591
- MD5 a205363a8b123d65909896daf16a2eb2
- SHA1 17d99f7889d61b56a44509e45465fe413ace29d0
- SHA512 c65cd1f376838ef700a1826117c61d10151c06a8d1e869a2c5c2f0f282cf00a8dde4d6ee74df01a34824e6f84d9c694217af23354f490eafd5814493e4837521
- SSDEEP 192:FdqpDNDPkFHmY74+/qmtRCtmK8W9I2gHHMlxh8B39LJ/Hab48JgJnc5w/93mJ8Ax:aWNaM8UnbjPM
- TLSH T14F6274229722303DB567872EB9E1B79D3030C417E2A35E7FFA559165C2971872B23B8C
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/game_detection_database.json
- SHA256 f30b571b8bb396aa0bca9aa9b80638416ec638de5c4788bc281ac67d3d54ccaf
- MD5 336d26d3e0ab31e8dc102ea86c48fa26
- SHA1 aa0a6a940ffcf7cdd9cfcc86a382890e18fff5c4
- SHA512 ee1d4ae3236964e0e2aea7c33aa82f44b2b25d9fded16452e00ec09f867031df0539be19fe52c4d638332dc50698b526a7cb11056f5fbf765eb7e0cf832fb49e
- SSDEEP 192:1npXvXj1ZAWj802H5Nxji2FDF83mXqdEzzohblboUWIsv7a7svfxF3L3xjQ1uwN4:H/O02ZNxmxlu
- TLSH T190C27056E671882FA0F66364DE594B5AFBB4436F10C30E0739BC904CDF3698B5046BAE
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/images/big-icon-fallback.png
- SHA256 46b318ffab431aa7f0559560632c0eca28a0527fe9ec766e947d3b49708e3de5
- MD5 435663128120e807ec9c33d5b277198a
- SHA1 6de278d5f8850da54405fc3a444cfdf8054f6a05
- SHA512 97cd952ab6833cea217ea6b5f5a83624f4ae1311ac0c4d66f2bb7d61a6c224b7cfb6205074e008ea33aaa7b82474fed4230ec3f4f8f085e884b716ee992624e1
- TLSH T165E0F1E6C780062F895A682F6493B98825370AE7CC30387FBE94E0245185395D2BB551
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/bottom-arrow-hover.png
- SHA256 3b8043e64994a53126afe1250b80fa2934196c3305bf93fd3e7a6963867a6eb9
- MD5 f5d76b21fcab6cc89fd0ebc1089c2c26
- SHA1 160645c02dcfdcd4d6d6a8339557a62b80493e40
- SHA512 4c4fd737cd771e8e0c025295c598aeb4ffb2d20df10658f7cb992aa49b4817be5d291c0c6530b4e9aaa241ab76df3c52e01a40a505e7b60d1d968a96fd4de991
- TLSH T1C2E0E7D841C15D79484CEB55E63D91D274DF200D330347183C4C173B8009E9451AB366
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/bottom-arrow.png
- SHA256 46bfb08af2269108c681b78373c98e899b4234adce39394322c7dfd6d40dcdac
- MD5 847fab99890ddd7460e758ad8d463ba9
- SHA1 bdf8c1e45993ee33ee0bf9a2e43d6048df71cb8a
- SHA512 0bd2075c61eafc2946a9431bd4fbbbb141f3743144782376874640e4aae1ee97a05844589661b3a0912b23dacdf57e0a667d8ffa8ccd0f4358e5802e653aef1c
- TLSH T1C2D0EBC19A4848BECC0EC1B200B21084E0BF254D0383920E2810A821262C898A5A239F
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/checkbox-checked.png
- SHA256 b0718ebac6a1666f75492e0807166ea1b257bbbeed87d64d574e45adaa768173
- MD5 cb392a851c11a74c80c9a6b7a2804cba
- SHA1 750b03afd6f6da79ae81164b5a64dd2c3f4937f1
- SHA512 ca3baf5ac8cc1008c3886d68501c49a750efea4c891d85615a8881ae604f1c9205ee71861a8bb615b5978b239aa4e3b8619a56a646ec4d812e0ee7c1dfe05af6
- TLSH T13FC08CC3272AAAA8F511AA72472A1029C4382F291F2B1224138CE133A92094881E929B
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/close-hover.png
- SHA256 5c95ffffdef5de89cc7b04ddacba9fa4c1280a192fda4138460c72433f0d0230
- MD5 d07493ccaf895ba1e5a1b230789b06a8
- SHA1 c62f9f464db25969516ad57a706b222e100667a1
- SHA512 ec5640f9b97ee9d22f8dbc1d685048acc6c67338eb701c42522a0e72edd3b180677405d458c49cd73ee23b8ebef85beabd66909a6572665abc1b25cb6d0f074a
- TLSH T1FEC022998A8024688889867E9E16002AC0360B56FB500AA808AA9025EA80A2280E4352
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/close-normal.png
- SHA256 e8bd82cb680ae552f587a3f0bdc1df18fc7624dffec501840cc508d327baeec3
- MD5 1acb62ec3fa5a82347c330512f2259d6
- SHA1 c81389f19687e791bc4ada896620b17471371c04
- SHA512 a6693f68c41f8a7c137f3129403b14144329c132b99956ff2c1cc5317b046eaec70aef82c7c05b9220c3c3a7f2a417718fb65bbbe486250c05191778456f602a
- TLSH T135E028DDDD74E9994F6809F2558517047C4728BED2416180C48D1030D58DCD013937D1
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/header-logo.png
- SHA256 e83b38f1f699ed4df739fa632d55a422e6d35b19261081a5bfccd2bc4669c5de
- MD5 b51f37fbd94cb7d7f45dab73fa5bcfb9
- SHA1 2c3aae0f065216cfec01339da2c60282312079c0
- SHA512 4a7c0a654c3d4da9b9b77aad46d68d2da370b8b54fef325e6ea8972b202541c134ee937db6d71dd549d405241fb15a043d2dce0734312f72222cf5a21e5827bc
- TLSH T19321A793D08EA4FF4B2579B15E5E4430D45B70A94EC20E5A7C518490E9159518719DB1
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/icon-fallback.png
- SHA256 772fe7450824cb84dbcbc9cdb401278dec1a511ca3ae2cceb073e8bf4dc8fa61
- MD5 3880ad80fd07870118b0aeb8fff308d4
- SHA1 37b30e87d89d3bc56eb5ca3f8ec6c7f22e5ee6a1
- SHA512 3917e7b6623f284a0378702e489a5131c3ad328827a87e1332d24a89d6e54d68e7dca3e5bfeb0bb22fe54da1572d2d8a9107eec8f36b9ba7db1f50c0a5205d8f
- TLSH T18ED023C63B5C08BB4B0C087F46FB05112057393B40704C084D20C03301B0A60A90B3C0
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/icon.ico
- SHA256 d0b76561e96f0eb25f5384ed1809c9f8d97d1840646b8e826ec5d7217f439995
- MD5 5f2b79cb9097b216b9e0dc398f5dc238
- SHA1 92bb551234f6a73443cf15861956557a73d0de8a
- SHA512 82a77e7172e56b963165889195905195cd7a545f49fd66d63cbc096a2ff7d6c82235ec163537154bef49f956d4491fa90146df0fc7dc665c0124eb45494439d0
- SSDEEP 768:rImiUQHPJ5RufKsm4L2XqNo7Vm/EiFcjiLOh1HC4TrfDgAfHZjLtHDYmE3m/HhN7:PEHPJ5RxUEAcgiZTrfRfxLtHiWpNxB
- TLSH T1BB53BF4A1B6CDD0DE7591E34FEC6CA2B10BD6E353C03EB82A2547AD78BBEE591C00255
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/images/large-logo.png
- SHA256 1bfe389c41dc9897a4b1b5a0e495570a0f3671fad73d42307cbde1a82ae1be17
- MD5 91c31a155e202e8ad2c033e61d0bf948
- SHA1 3fc81f5f368f90e7104b65adf6b8780d71005f99
- SHA512 ef89b9edabd3e1f3e9cb8e2ce919b4d29a31ab112297fa6b9c3be2cdd0df548307e3f800de2e027b907422ce87a5edf638d0a410e9afb6de85318ac0173f1e69
- TLSH T190F00EA70196DD8A9D6AD8CB421C2404E46B3348034E348B0CD0EE1D13BA48540B8158
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/minimize-hover.png
- SHA256 d84b877f7a2d601b1d71cf878b33ff78c94c2d144a0f4d72436a7dcf64e712c2
- MD5 f4b8851b9ef5a55b0d45392baceb31fb
- SHA1 03a87a04dc75579a8568543d40db963b6e9f4051
- SHA512 a849659d4ba4e40b924108cd567a58f4b1569afc5c7517a10c26fd6d64422fa61812683292da1c3b19dbe91c63aacd5cd1c5b342ccce98b6815e94b55767ce4f
- TLSH T168C080D9F5815C2EDD4E4972856751545CA77D5D0501110455AC7524601894417733D1
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/minimize-normal.png
- SHA256 aa2b021cd0dd9563705503dad48866eac926c7ace608ff8d00f755afc509f39b
- MD5 1bcfd10e50ab56ac335a463ec19b8d33
- SHA1 b5054dd1cdd714a6771bc11e43291df361a16ccc
- SHA512 7257c401db826ed1f4a549b1b899d0fb4a5bcc3c599ced49b07a64fc308b08fb208dc378a32d9c3cd193b4d603ae76f82bb297334998ca6abb790081a5467edf
- TLSH T1F3C02BCEDB88283EC70C4E3F072B2025902F2BBC12111049AC35DC15500C441E793393
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/more-info.png
- SHA256 b110d583d920fb1065fc7eb587e4f2a256f99d55eb8a562924e088d9b7a971aa
- MD5 c6911391ca719b6ece307854f40d02be
- SHA1 451936edbab150559e38a81ec88c75de052bb14b
- SHA512 9728920dd81f2554a37119aae1755751e08ce8d22be5df21ad1b8205d3e37f027cbcb32c25193faa6fa6e270574c7d4eff529ca08bf57565b764b338ea8b1c75
- TLSH T1D7F075CF27106E9D9759D1D2CB970BE0162A485D4122A6CEB8034800040DAF05D0D2AF
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/plus.png
- SHA256 d25235a308d7b16b6a8694a3eb8935393d124dd3c58380a6c67d4e4f3382e47f
- MD5 28a150c80834701792d39b58fe16e741
- SHA1 f7fa88204163ee7a0df768eb6759bc02b8e1c030
- SHA512 8222a493bae3316a851b66573886b3c63f8d63b68e4da56ba25f37fb46cdc27ac7dc4e10ca1c3912352812eae5ce4492591fbce09ff7ba1a228ecfb2a49f0c32
- TLSH T12AC0C0CE32D47CBE508E49FE02024580C42F211D0A000014AC506404B0DF4C817A1713
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/progress-01-overwolf.png
- SHA256 4da28ba55f43cc1d03d5cf1eeb040985d3bb5fd2a7230667c871254f006c512e
- MD5 3d98876bb3f09090568aa3ef90a84dc0
- SHA1 5f98121ef031920b8c8ecab21435cc64bd531c19
- SHA512 2bfb612a6aa0061f123e8d342ab4d049e2f38b2c111f2662d4da8c8a22a73893c5d9743a337766ff2e6346cb04ef2b4c63ea72e5e749b34593fd372889033d6e
- SSDEEP 384:aOTXx6gYKAzHwRSRJLrw5NsgRCc7xXWMvgu8kz82H:a8Afrw4gj2vP2H
- TLSH T13242C0FED2D47460C4E7BE7E68A62A53BFFEC82308A13795E61CAC281DDB1255444891
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/images/progress-02.png
- SHA256 130eafc5dc7ef993134d0bcff40bfbf11b99d41c63a5c6ad1d70c7ad4db2a5e7
- MD5 3781b597e18900a6b779ab588d8a8e21
- SHA1 0fd2084a62f507ec802646f7423c9714ba547d7f
- SHA512 22f2cdc6cdd81503d48f8f23c84abbd23c6c9e3a137b7e4e91846823d957abeee348f4e3cff88667a263503ca310d80253187d699f733975133d08b5729e647d
- SSDEEP 192:5H+KSySpZ21z6dIPH/tRtif8AqGnKWAiGufSzjmhgRjvvEOmbukJc:ZLSJZgz6cztmlqmdAJuazjZvVSRJc
- TLSH T17E22C0B761160EF5C158613BED44306C58F04D2CC21DE5DA393EF178BA4C1693BEA48A
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/images/progress-app-image-01.png
- SHA256 032335dca37195df73cef1fc5f019bc8705284c3226dbdd54f81d61b714c4915
- MD5 6276c4f73df3a91718a12878c63dcf24
- SHA1 a86fe5338c78dc396f680e489766f8186e6cbe81
- SHA512 11a4e465614e65a04e72b5d6b80f0c5643d51757a06595168894d3e0a419bd68ad31152221a22ec1fd6db03c5c159d31aa5054f1f4d8c633099477afd6f92607
- TLSH T106511D381149BD39A3FC7A554B7B867604F7D3D4141C240C2C5E4989A91B3BD90DF4F5
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/progress-app-image-02.png
- SHA256 9363bf7bf35a32278d95b8410bda989c63d9cd09fa17fdcb04d93aef1d433b3c
- MD5 9626ec7a1330f4fa65abb37f08ff6421
- SHA1 914801589106fec21ff3d7f5673aa035bb5bf129
- SHA512 f43caa916f385158cb3a3fb20193a80ce8ee84f1063e6497fa0a9265dd28b8983750d0c44006936aefb9d6b16230d92105bd344707bda8d55e3283b344ec792f
- TLSH T196412B3657947F783999C79A74FC4632C4C8C8969400A0941C9F1BB5BB11774F2E9CD9
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/progress-app-image-03.png
- SHA256 827f9bd53d624da1397e0f8d3a68fa96bbe7146b74f6ea8af5cd6acfc3839cd5
- MD5 38ead88ccac4d4f8077e265aafc186bc
- SHA1 eb3c2de5065ab597c8e9799a3c31487545ce4828
- SHA512 a473af7f5d1dd87a670b1d7f1c9e34d66d7bbc77647dc72d540acf97e1d296bbaa59469663354ae4223423688142d6d828e35f571d37bd7ae813274ccfcec519
- TLSH T1E73128BA0029BA291535FF9D983704E6A8A46F445337C15F2E0AC834D0C3B396ABE582
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/small-logo.png
- SHA256 0ee19b8f79232886f6234cc6dc21c0327e90df94a189c5effe1d8a6444543726
- MD5 ef0803e881fe7bba90e5e9ec1678d950
- SHA1 43e9ac35b2f4bc22e404bb2362eaa7bfef24f9bf
- SHA512 11c6126429f4fc3ea32edf6132dbad840a1df35f58237c8730f5171c491588425190897f4370545bcc4ed4d42838dd95a2789a3b6ca20cf8cbc7bef78472f253
- TLSH T12CF005DA3358D13A475B536CF61B94489C770278EB11915C2B11E532D342B9C1186AE7
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/tile-fallback.png
- SHA256 d173d88df0d31e3d4f83b299cba4ec031dd286dff2f963e58d747617649108a2
- MD5 0148cc4040f730247ce079e723fc030b
- SHA1 ee316fdbaa54a7cb5cd350adc4919787e7edb63c
- SHA512 a441046265ccbc2e8e25bba5e10a46d65f28d2a9100ee12742e0ef5da943461996cc036f57031ef6c21fb0929ebb941e27874a08e53677e46ea28c097136cc75
- TLSH T1DE11DDD96F0C7EBE89BB6EDF006EF11C67245E34304B2A176142180616768CC0650BE6
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/v-check.png
- SHA256 af10225db6ff7d4b67d00b12f37b211c1f368bb99ae900856b023ce5999dc9ae
- MD5 cdd7415f59e5c003dd5956b971a3cde1
- SHA1 89a3cd6591cd66fde5fe389a216272cf11d7696f
- SHA512 bf36f6ed5f9a5bd9da0bdcb0baa03ad73e12e4d30ef64752e14c307280825e994deee50c5436f683048711104634f0410684188d47f5698dfe5309ae4f55b2a9
- TLSH T18411B3D9CC2822ACE0DC4E0ED8E3E46430A67F2B4BA273326E582C9A808488485C7770
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/images/welcome-logo.png
- SHA256 2e3dced384fe419468973dcb074794b1444f48bce8f96217aa5e3a98c34e4c01
- MD5 860785e1633b7a170ec443f4d36551c7
- SHA1 f5a3401fdb22bffabbaae7f912f93cddbb7ea148
- SHA512 217b2177b9f990ee27d1e169dca9f99da18e9bd41fc6d7a5ce7d01cf9e35a23f343763835424125b3fa73de196579054e56542e5885327c6922deeb34fd78e16
- TLSH T13211A5FB24A20C9E44ED265F66CA0794953F1D2C17815E13A1EDF149A5A5C112ACA84F
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/index.html
- SHA256 69b9f99f6611f953d94984ac35bdaf9e9817f689e1e3614976bebe3465c613fc
- MD5 c7b752acf6d1e10f3aca2c67b1ccf4d3
- SHA1 ab793cb43e0c2b5af0fdcbf90d0d29d5d3e164f7
- SHA512 120addd79b7ade4f35b426c02631c8167d81080fde30a01b989453113f7547784e525d53bede41ede0c9b3caca8513060753ba51f75bf6936d32ee597d642576
- SSDEEP 192:8sdqpDNDPkFHmY74+/qmtRCtmK8W9I2gHHMlxh8B39LJ/Hab48JgJnc5w/93mJ8D:+WNaM8UnbjPk89+mppHL
- TLSH T18E92B7159B21203D7173865EB5E1F74D7030C117E2939E7FFA9C5526C7A618A1A23ECC
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/js/app.js
- SHA256 993f140f9f4e5cdbdcc657a3c159328bf58b3483dbc27c451516a556763a79ba
- MD5 de88fce9253d26e0c61daa1783baa775
- SHA1 07c5848354a247056baad369059aac9d3c940ecc
- SHA512 71ddd47ef7ed7c02fb31e8ffa2ea6d1b5178dbda2ab37bac208e088c8ba2127e0cf5eaa74ee7ad5809fa69e534853312c6c8775c68aeda63bf0e4a5caefa39b7
- SSDEEP 384:4X+ycDQrcljKdZGb9plmt902wjI3A4nzwF52xxYRifG6wBEoR3FGHWdeLj8T:0+ycDQYlOdEbdmXH3A4nzIAnGifG11RL
- TLSH T1FCA2738E96791228E972733DAF1F4A14FB32162F15058A273AFD45814F7141282A7FFE
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/js/block_inputs.js
- SHA256 f8dbd6793b35f7a26806f4dabad157aaafdf6d66fad094b50c77d60f223fd544
- MD5 b5b52c92b90f4283a761cb8a40860c75
- SHA1 7212e7e566795017e179e7b9c9bf223b0cdb9ec2
- SHA512 16ad53ede5424ca1384e3caea25225589e9eec9e80e2d845948802db90fad222f709a7b651cd7601a34ba67a0627433f25764638fd542cbd4612871308e7b353
- TLSH T14301D2D864D3A87A597DA328536BE748F7391964905A1054F0DC8C64BAF003BC16EDFD
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/libs/cmp.bundle.js
- SHA256 630a2295e409485e27a06aac96a49f04d553f3ba299799e26a496776d3583325
- MD5 931c0aea91b1daf5c4936edac6a4ca1a
- SHA1 78c35061126c76a97a42df7b8ca0639ae52712a8
- SHA512 a237db9a0d973d5a07d36b98586d099b4a9277ff125f8cdda52f515bd5d1ce0fe82bc0ca8e3f9396a7eea625e8d8da0b5c39963b580320ca7a6eb5f461e017f4
- SSDEEP 3072:vSDSLzJgixPFNRISHo2kDkNAJOQSPXwGtkLxrtQ8OaxPyf:bxgixP+28kNvwGtspi
- TLSH T1C1742A8D7991F0E617D322F5802F900BF37A6468B84D9490B660D8F0ADF95AD523BF2D
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/js/libs/jquery-1.10.2.min.js
- SHA256 bc44d3631ffef1df7960e359f02002d3ada45ee05205c2cf1edd85da2f518144
- MD5 44e3f0db3e4ab6fedc5758c05cf27591
- SHA1 2d408aa1d35661019c95adcc60b78c0727ed25b4
- SHA512 4d4844e53e686fc59a52e86588f328dca3ed6fdad7195c58942a98c51755a24981b903ee7c7b27785375eaad5a7d9501cf74b999674b79f214e66103bad9efdc
- SSDEEP 1536:O4mCgi8DyCuXXFiJ+L0kJQsJVPEKuQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0JFV:OGsKYAI2p0WP9bDrJ7fak
- TLSH T1D493F8DDB2D1B06257BB21BD006F540FF236195D280D8850F129E8EABC74A499277FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/js/models/notifications.js
- SHA256 9dd03dfc92bcb74f3725aae60e904c0a56cc84f299bbb8e863a869719f6fdd32
- MD5 85afdf9897bb1236eff3afa40d15ece6
- SHA1 4362bdd139458eaf4a2dcb34294b43e2d53f4a26
- SHA512 4ab86c6bafba18f53f01ca913ceaa80f14900107069a1d5f65b108d35690bd8b50b1a6cdf1563fc5775909f69208dabebd139f3cf3d8576269d560d57cf9994c
- SSDEEP 96:sOr8u1s9FvYYdfHsW/GZwzpJGf8mui+U8QrGjqTzoOxOYsdfHsW/GZwzpJGNjINU:sGu9yYl3rNQ8K+JQC+/5Lsl3rNOEYIo
- TLSH T15BB1CC5FD07A01A70572D398197B0341F66653AF89808CAB77BC4DB80F310A6B4E5EDE
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/js/utils/analytics.js
- SHA256 c37f0699cf8ba7d9e3e0f73f1b2af65f4bdc2a31f44594ffc8c73e98b6c2fd1d
- MD5 525281e9959af4c1c0d11b9243c798a1
- SHA1 237a84c5b57bd132f48446d718b20640cb28c263
- SHA512 fe5bafda7773e69c65dd63270e0306abcd39cb2d886b675ab8c714ae0833efde963b69623d468551a1ab37f1db1a1d457f1568f7a29d9cf0bb23bb0edcab5fc4
- SSDEEP 96:LlYkmHqqVHlnZ4JGvt+QP2EvVVko3sO2LCgObNS1Tgzalh:AHq1GV+kcRObNSGza3
- TLSH T1F39135697465619068B373769B5B1515EBB213233284E9223BBE87412FF6D42C2E3FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/js/utils/commands.js
- SHA256 acbf59ce6aa668880f65aab2bfe62305415c76301b40bc7f72777f0b08840b71
- MD5 a25b49d085333ece9aadd1f285795925
- SHA1 53341dcca297a969a8ff37265935488f1790307e
- SHA512 0a2cb6f4e1af0c4205e38ba1e12c208e6ea4f8f8e3956c9d10b312aa9a6929b99ec967aee7aa1f54da97ca6ea354f8bd7f624359cfd05c6241a5f4bf59843b68
- SSDEEP 384:PUr5HB8c31uUvJQ006W8tusv5qEWOddSd:PVhs0
- TLSH T15552ECAA68A721A51932B73DDB9B0219FB33083B11465D107EED46917FF6403C2A6FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/js/utils/cookies.js
- SHA256 9d3cb3822e20d6f5157faa02dc69bdaef44576c3fb5523e00aa152107ce30287
- MD5 6c60e675f8c8c68c0174b644d3a63a2a
- SHA1 3635a3fe07ccc4a6f33a986ddb690522d0611abb
- SHA512 1dc9ec7b139bcf37107ecd673c01e4fcc606332ea1645a4a1b4e5d95f817d4c99d5964cd3d941a6a526689341d9623b17b4efc002cdf4c73404299d52b1be452
- TLSH T17721E0087580D81EC5725739AE286778FD30992611C6D54DB88CA4F02F30C169DBE9FF
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/utils/modal-events-delegate.js
- SHA256 267661f932a2ea78d8c7a98cc03d1b18d7cb8132deb84636772ecd1fcfbe4857
- MD5 117e4fdbdb0ecf211c8bd909efd337d1
- SHA1 9f8684d856b7c95bdffb139217dfd89f41373187
- SHA512 f474ee20b59d3d0c11f9f6aee6b6e2b66f7025beaec9841f88455e60533dc96cb4e27910be0dae92b0028c5578932b7f459fdb91d594ad010f72a3b3af6addb1
- TLSH T13C31D54D36FD173AE5B7172B5B2F5F8CAB72120B09054A26B2E69A804F354241196CFF
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/utils/strings-loader.js
- SHA256 96445709fde2613af50f4b8908296d4bfccdccb2d9db9febc34a9bf4dcc70ecf
- MD5 9c94eb933d8a43dd3825e67a7e30c980
- SHA1 7ec7b16af6f399219209ba5967d377040486a11b
- SHA512 a662a299e31633f71a9b9675970359430fdac06dcc284fd7ce92919f244c7f921639f97a42356e993a95865e6c9f198dcba82c126f82065bf2009a31ec9b02f5
- SSDEEP 96:FXS/WSBWlbBtDhWFTnTeWsNkEj1I/6WfwkUlx416moPdXDKP8j8yZrME6:FXSuQwBBh0nTevNkEj1O6Wme0muXDK0W
- TLSH T163B1FD58289314118C32B764CD935264ED6A4917023996F3FDEEC2686FB149E82F8FEC
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/js/utils/utils.js
- SHA256 b4f0c48cbfeaf8141fd44b12031e3f0410cb0cdc313888ffdb14fdf1d2341246
- MD5 a0952ebeab701c05c75710c33d725e7e
- SHA1 1da8a2e889f1213d481ae3cd5571670c01e64adc
- SHA512 5e5ae616d3fded7d2bf47a326242c4477ca3119fb52897bfb41de0be230ccbd6c3da2c00268b3973e9bf7b4f2886aba64fd9719b448662e4130ee66d87913389
- TLSH T1ADB01274B7AC73A2D315377AACBF6C1DF0375C368414B099B19034E19572D04519DCD4
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/windows/cri/cri-controller.js
- SHA256 cee7fc5a36a01a439125be031923d7e7415ec56194255048098169a0108034b7
- MD5 4e4b4a9e2d86ae3c108105078db6d730
- SHA1 826946be793c999316af6c1db10523950b18ea2c
- SHA512 1420065cd000ce9b9c39d27b5dc5f4055f67146e06573a03184649851c9745f0c0af2b5e35b41b5923703dd74e32f9ed95fc59a43db25f854584e319950beffe
- TLSH T1BC71EC5C2DEAC6A449B76677CF251014E73342072645AD2A79FE97404FB4F404A1AF98
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/windows/cri/template.js
- SHA256 505d3c4de7d9cf8f0155b5b1a3c8792bc0ca2eda6781b441bd85455f144be22e
- MD5 76c1ef0cb437db144c2bed53a5a8a5d7
- SHA1 aaab8fff649f8e46d1e9510018118ee9abe01498
- SHA512 822bf9feda91c89539d263c6c9053163e8dfa3c511195bc61a9b608b4687fb4048733323f03dd30a7ab661a4be4acf6c8d8ae7bb6723771122540a9551899c3e
- TLSH T1C6112924481C90731B77978BEA1327ADE9519301D80B7C3D32AE53A81BF3B828E62359
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/windows/finish-with-recommended-app/finish-with-recommended-app-controller.js
- SHA256 5ca97132a258ed1f36e401d70ccb95be2c9e18395e6010c40f61172914477de5
- MD5 eb6d6bd7e05d4477e2704dd87b57ca35
- SHA1 f42672ec1e23a3f4bcc2952746d87ba8deff44be
- SHA512 1402d611f910cf5078e804175fa4693b591348d3e7cf6d0a6bbe026c259eb9e0bc285233c80cb2f4690674c3e927bc72fbdcbe758826b98fd02ecb3ed82e339a
- TLSH T15D3189086EAB47B662B12B3DDE294695FB23022F05064B6A7EDC57C09FB1104025CFE8
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/windows/finish-with-recommended-app/template.js
- SHA256 b61dfc304b46e8cd95d7b15bb93c6160b30523a1a093397a84fc8b8bed00ac42
- MD5 d1cb34b57cef7e28b9286454b197b712
- SHA1 f3a964b319bab82d4eda07e126bbfd6dec35c349
- SHA512 3a07de9c58134edbb7998f85e6d037a0cd066e32c4daa07594a949a7574f5693153bbcdb59739e1a92e847ab1128e2369fb30ba76a7b9cdfa9a37a409db691c1
- TLSH T18D012B48426F9573073B168D9A635EAC3D50EF01C9B40B26B0CB5784A3B36D58BDA318
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/windows/finish/finish-controller.js
- SHA256 4cb4e1aa25c15ae5f2e63fa4658a8acff0ce63e0f59cb6eb634df2dfe336e2ec
- MD5 138240ea22084428e9e25583e9156568
- SHA1 e8bef7eab5b6e7040b996ec9504436e073444bd9
- SHA512 e97b81b0ecd964e6e909019353efe4f5582f65763ac4197d754f1c4eea19cfc249900ae597fd33e29f531bb0d1c7e0f010793c59a2b0099fa75ad0b7d01ce8a7
- TLSH T11A316A587ABA43B567753F3EDE290654F732426B4A4A8A6A3DDC53C08FB1014025DFE4
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/windows/finish/template.js
- SHA256 b05f111369e12ecb4cdc6526dd554061eb31097aa0de4bd126ddc185b69d922f
- MD5 f092de7ea66d8e920b345f38537fa35d
- SHA1 82d107a409f18878307ae0cefe24074db64937c4
- SHA512 14942c0122f216c07595cbaae498f9c4d37a2d0fd95f262c332502befdf4566c7a042c4d85702c1d82a111123dde677096195e9efeb1d74eb1dfd4df84d01a23
- TLSH T1B3212599426B4B37073A469C52675E6D3C60DE00CA710E2AB0DB8780E37789E8EA6309
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/windows/main/main-controller.js
- SHA256 84dc33e2eb3118fc77a38b0ca53af42c53f6eb85cfb1e8737dbe39fa03515653
- MD5 15b665a5c915004e1aa7e9e11a710f7e
- SHA1 7821924e42bb19d60c572ff80bbaaa04d7aaeefb
- SHA512 dd47f7bac0dbaac714e6d2fc91b4c24756ca4acb70bdbc4b54cd5216552d6bb85ba2e1c3c8445c5fb40d116dfab6569945cd74730bb7c8f3cf46e8d08f8afa02
- SSDEEP 192:28RRXC9xThFzkzLZ1ksEIA6li5djpACga0U2FxVgMKV59GsZydwOVTzdfj5UEdwV:2sCHTTzkzLZhJit+y3ZydwKf6
- TLSH T12232EE48B9B917A8E5B7622EEF2B4604FF71452B410ACB1939DD81C04F76814426BFFE
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/js/windows/main/template.js
- SHA256 63a43bb08403972d0f4b0e381bd264af14e826e0035242bc1baa9a815956b8fc
- MD5 a118c7724c208f12083240cafccfd10b
- SHA1 f89c676a215b869626737862a08c9eb07d440211
- SHA512 9fede79044ae5de7baf5bfba0d5a515ce462a25420026ff45bcf1751e57510023cb40df42d08e880114f62b38ddb218355d5357b725df32a41ae4e6a18414cb3
- TLSH T1C46141221055153267BA42DA56226E7AFE61E303C58B9F25B6EE13C007F3C42CDB760B
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/windows/modal/modal-controller.js
- SHA256 4565ee81ffe222b31982088b1c18850076e3acf59198ebce08118e12cbd87ea1
- MD5 b04bdfd1c7d09bdbdb94a2455fdd677b
- SHA1 f000ba4866ff16d75bfd6cf446763498e19b12b1
- SHA512 3cb6ef0a16309046e7f407e7321eb12212b0eec09ec1a04b1d813f6c7a04546714865c3b398a93985041f598156ed905ebd23a64260801281b29ada9bc19ec5c
- TLSH T17351228E281B218195B7777F8F8740A9FF77446B0602475A3FCE87610FB0410929FEA8
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/windows/privacy/privacy-controller.js
- SHA256 14d9c60cd97f18e74fee2dd80b6a190eaccc526085991f356feb6b4d330a0fc3
- MD5 15bbec339f5046f525e3aa96d36c30ec
- SHA1 f73d40bf06584737fe327f1eec6f4b0446545226
- SHA512 2b0edfd2d5efb3f739e56eb6f3bcfae4789af3e1639f5f8e5f7530f5af10eb1a61464d665c9d9b2f4eb3796f2445108599d8bea75f1709aa562feebee519da4e
- TLSH T1154100ADB4B802B415727639DF27A244FAB3812F5509CD277AEC57811FF240A424DFD8
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/windows/privacy/template.js
- SHA256 95c459eae0edccdb94702aea603a097e461daa0e5f37dcd0e30de7df665433a8
- MD5 cf8d2c26520d7c84e560dfa79e31dcd3
- SHA1 716f2ec17480d5cc9c145bc147833fbfc39d36f0
- SHA512 d466dcf7e86a4295857020feea281fc89f519f6bf1e79c3b5e1046d0745c9c9010377b1941e06c9a9b2c78a4173ed9909332d5d6c39b05f460e8a863086c895b
- TLSH T105F0C83C85A881211976C708CF12D625BE90C35B4D3F7C7671CF078357E7C01C921645
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/windows/progress/progress-1-controller.js
- SHA256 838bab990ce38372dfedb50eb0a270db705811729630ab8557c08bd1e9e8e105
- MD5 82f0b997ed552c52a510a9f2ab29dc3a
- SHA1 92aec3a656053c71eccdde610130f5d8008fa96f
- SHA512 ecf67f877002d746eff8af3a50155aa381513ddafd17b6bff0188c85f0765579fea0112e82e1371f962b1f5decc94b65e6120f21fb516533dac35a2d541065bf
- TLSH T13C31FF4E786542B96DB29B39DA3E2509FB33421B500AC9207CFEB5804F3051A449AEFD
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/windows/progress/template.js
- SHA256 a7128a08bca53dd919cab3e5cb4dab31ded7ae2dafc957209b9fdd23f3b944ab
- MD5 92b145e6649ba0add3dee9a69d3fa91e
- SHA1 4db1a45392ec973cc8a7eecf3a30a9a7ecc7a64d
- SHA512 747a087dffdba5c92d9f4c8923615d388b9c4c79d3b71d3cb90487aa37c132290a4f5107eef3055c03eadcb9614e20d4655393dc9251fab7e0ee2438f0d95751
- TLSH T1DDD09742C2A082312B3A1F6EA3F32320BE2040040B2A7630E6FF1081232B003860DBC6
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/windows/settings/settings-controller.js
- SHA256 b5c5dc5e0684fd97eb4c45896dc1c2de8a6a6fdc63b6aa83a99103c15787ef35
- MD5 378c18dd7d5cee6ca7c4ddd0396b535b
- SHA1 d5f81d4fab29201fd1629dc4d8e6f918c0c30479
- SHA512 c29416b3f0245f4826d857dc8c52c969071d2410c945bda96f38f59a9bc7137ee534d84865e5ac55a1e3cea6bb705c5d592725af709cd97e7f38ff05dbaafe5b
- SSDEEP 96:5RFTr5TvuTlpwWXs/t2V9OqIJ6OFGR+4V6RjTmoSrOlidbtmfPNVC8V/pGHmI4Rj:5RFBjugWX8YV9UAf+4CeoSrGWmNh
- TLSH T148E1208EF9B4157184B7537D8E368A19FF76899B0142CE35BCEE59881FB4080424BE9E
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/js/windows/settings/template.js
- SHA256 8014a7c919da249ba2f2196d9c9b62639d20851be426f3ffaef161cbe477c45f
- MD5 28513de0830383a516028e4a6e7585a0
- SHA1 d31fc3a6f4a3ce6c4afb82ff2342a1ed718809e5
- SHA512 0f7321c2ae13145bb694368dae1b74e6fe20e6b09712da2178bc46e6aa65223ab84c38abbf0ed074c85b42dba1a238a5f3f8d1ae060a0af6df748c5befe11b61
- SSDEEP 48:Zx8LQmDdbaoFRpm4+0A2AEeQmDdbaoFCpm4+0A2AW:wpm4+5nHym4+5nW
- TLSH T18891086384219412477680DA5B369F1EFB65CF0241E65E34B2FF6BCC978BC8156ABB0C
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/app/js/windows/welcome/template.js
- SHA256 42c546e9da748ef76fdab56b96fd511eb607617a9ba37b3dc420148b769d8acb
- MD5 17f54fca6723b983875d940d931e0afb
- SHA1 01774cd5cea36bd74c80a708d6f77567e8091024
- SHA512 401df9a54cd14c19227d91bd08b4775a7b437644b4ca0d1d636d3e07b04591f9c5516e80040ae6a79ba400457d15e3d80aa148a63de870a64664fc5a02f7a038
- TLSH T12D31FF0AC55D81361533C3FAE28B5A5C7860AE40C9BDBC3439AF075967ABC00B933B70
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/js/windows/welcome/welcome-controller.js
- SHA256 6155691dbdd66290109afb91617f9cf68af6bd912991d5d27b922f5faa7f530b
- MD5 50f676754862a2ab47a582dd4d79ecf3
- SHA1 1cb2f4b11f9f8cfc8dc57ff29d0256dec4811158
- SHA512 ccfc89e08fd36f0a694fcda17efb84ca285b6c62afe2e3a794fdad19b6882a4b618645f4d9171673ba56fb4c55fce336d6b8d26dec3a5cc11293ae2b211f499f
- TLSH T17141AB99E9F583742A757B3E9F2A0648FB32932B0A198B6C79CC52800F71118465AFF4
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/manifest.json
- SHA256 4af83e9f905d9ea7b1aa89ad49a39c2f63005e3b06a8191880853fcef490fa17
- MD5 cac2b68f5629dbb79f65b63f4e106094
- SHA1 ccad7e63342172d7a96035f1004e3722409688c0
- SHA512 61e7a8b4a1b73b309cde27b023dfc6ddc7ae8aedfb7f5bfed3a2ba785e01a569dfb7cfef4d2a5700dfcf23be50b14e4bc62343d2038ca93c6a9c2b517d51fff5
- TLSH T17201C219E8946DEB167A7A27A8F50740FB89423F02024F4B3BBC544C5FB255A1457EB8
- MD5 SHA1 SHA512 TLSH
$PLUGINSDIR/app/progress.html
- SHA256 f2182497ffe118349d8a462cf0eef55f22798a17e91846b194b7298d860ae38b
- MD5 359ae05967ebe29e7f7a3564f0fa3f53
- SHA1 3c1a454e8f5445ec890c5c2c11fa9e24bbb8e4bc
- SHA512 0b61dd5af6feef3e1361a9ddc32dfca2200af44507f8f4e2c0f73ebdcb79e690d1f7561d86bbcace1ba16c37f18d6d40670de2d3e16b88d710180665de51675f
- SSDEEP 192:dXdqpDNDPkFHmY74+/qmtRCtmK8W9I2gHHMlxh8B39LJ/Hab48JgJnc5w/93mJ8F:d8WNaM8UnbjPaeu1JE36+
- TLSH T119A2A521A627213E7523475F74F2725C2125C813E2679A3AFE69A237C3975462F237CC
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/log4net.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ae9c8073c3357c490f5d1c64101362918357c568f6b9380a60b09a4a4c1ff309
- MD5 f15c8a9e2876568b3910189b2d493706
- SHA1 32634db97e7c1705286cb1ac5ce20bc4e0ec17af
- SHA512 805cd0a70aba2f1cf66e557d51ad30d42b32fbafcfbc6685ec204bc69847619479f653f4f33a4e466055707880d982eb1574ddab8edfa3c641e51cda950e2a0e
- SSDEEP 3072:F+8gmdoxSO7ZbQFroo7RVir/dtnK0sgdnogtHcU5qFG1RSGCkE9kKn7GCcaLoWnS:I1N8LLI/PK0scnodG1RS1T93caLQD
- TLSH T15044065477F84A19F2FF6BB8A475411587B6F946B87ED39E0A80A4FC2C33B1089117A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
21:19:ce:02:3c:42:51:72:0c:88:f7:ad:2c:58:50:e2:68:0d:4d:30:91:26:84:c2:91:ea:0d:c8:21:6e:f8:1e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Chains
Dec 25, 2022
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Serial Number
0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 27, 2020 - Mar 3, 2023
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
4
Entry point
264682
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
252KB
Virtual Size
250KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
$PLUGINSDIR/nsProcess.dll
- IMPHASH 439074d1c01f7b16781bdf060930814a
- SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
- MD5 f0438a894f3a7e01a4aae8d1b5dd0289
- SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
- SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
- SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
- TLSH T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
4097
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
OpenProcess
MultiByteToWideChar
lstrlenA
lstrlenW
LoadLibraryA
lstrcmpiW
lstrcpynW
FreeLibrary
LocalFree
LocalAlloc
GetProcAddress
LoadLibraryW
GetVersionExW
GlobalFree
GlobalAlloc
user32
GetWindowThreadProcessId
EnumWindows
wsprintfW
PostMessageW
_CloseProcess
_FindProcess
_KillProcess
_Unload
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
927B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
254B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=25, id=1, productName=Unmarked objects,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
$PLUGINSDIR/nsis7z.dll
- SHA256 81c8852a2d7b46d040618f3c991c5c3381988c7c2148e54310cb78707f5b7c45
- MD5 a1fef72194343c1ef9cfa97e5551e976
- SHA1 829149379ef753fb1270a33c1a29036ea282ff46
- SHA512 a8466332ecb27524a1671fe5214ae39fa2ce837fc85aa11c05c4d0cc1896bab4c8c232e84707c9b1c2906d1adad7fc732449ea9437e6b8b680bf1d238fa4e237
- SSDEEP 1536:Q4Xm0KD49p7B8vri9UX0X8oX03ZY5LUDuXfAw3RlePlEDyWHci+nouy8QU3h1p7k:Q4W0KMrKri9UX0X8Z365LUqXYwBleqlL
- TLSH T12A9301574924180BC6D31935B2C6C62F7930F39966E0C0B7197D80A58BC27B73ABC1DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
Digest
93:8d:9c:78:89:31:8a:93:f5:79:cf:86:24:d1:b7:bc:b8:ad:61:80:fe:26:d8:67:50:7c:39:ac:0e:87:82:1b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Chains
Aug 4, 2024
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
93:8d:9c:78:89:31:8a:93:f5:79:cf:86:24:d1:b7:bc:b8:ad:61:80:fe:26:d8:67:50:7c:39:ac:0e:87:82:1b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Chains
Nov 13, 2022
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Serial Number
0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 27, 2020 - Mar 3, 2023
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Serial Number
0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 27, 2023 - Mar 3, 2026
Minor OS version
0
Major OS version
5
Entry point
210848
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Extract
ExtractWithCallback
ExtractWithDetails
Name
UPX0
Size
Virtual Size
132KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
73KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=41, id=132, productName=VS2008 build 21022, version=21022,
count=23, id=149, productName=VS2008 build 21022, version=21022,
count=116, id=131, productName=VS2008 build 21022, version=21022,
count=1, id=109, productName=VS2005 build 50727, version=50727,
count=9, id=123, productName=VS2005 build 50727, version=50727,
count=162, id=1, productName=Unmarked objects,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=110, id=138, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
$PLUGINSDIR/nsis7z64.dll
- IMPHASH dd7cd06a0b2436c11533a6ea17d01100
- SHA256 2368be6d8b21e0047146d3f61f90966a71d0737eed0146bc692b59f3cac97793
- MD5 284c46af1fd2ec3a60ee0c28f276f2a4
- SHA1 4d4d41c0af12d928e4e553ab6b80e6b4ab8007bc
- SHA512 ca9e4ef79c9c7c5f2282ddeee34ec39a51cddf26dcad4e9f2e42230499b0b898ac2dfd33f25438aa995741d23037fa01a0269823c283b234ecec0f155d3c05ec
- SSDEEP 6144:C5IQHIy4gGVccVSVwp78nPfRvFbVWHWWDwkUzF2C/GJAiLwQ9r1uykJE6KizMSZJ:eIQHIXVL8g7EW2z4oGJ4gr8FzvJ
- TLSH T198B45A1AFB648672D467D174C9638686F3B2B48A4A30C70F12E5A37E7F277A05D2D321
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ba:a8:88:23:4f:59:31:f3:22:e5:c5:1f:ba:f4:19:0b:c8:81:65:f8:c9:2a:cf:65:b3:b9:10:e7:96:be:d5:e9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Chains
Mar 4, 2020
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Serial Number
0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 27, 2020 - Mar 3, 2023
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
6
Entry point
287264
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
GetFileInformationByHandle
SetLastError
DeviceIoControl
GetModuleHandleW
GetProcAddress
HeapAlloc
HeapFree
GetProcessHeap
GetSystemTimeAsFileTime
GetStdHandle
WaitForMultipleObjects
GetTickCount
SetFileApisToOEM
SetFileApisToANSI
AreFileApisANSI
GlobalAlloc
GlobalFree
lstrcpynW
lstrcpyW
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
RemoveDirectoryW
FormatMessageW
SetFileTime
GetTempPathW
GetCurrentProcessId
GetCurrentThreadId
MoveFileW
FindClose
FindFirstFileW
GetFileAttributesW
GetModuleHandleA
SetEndOfFile
GetCurrentProcess
GetSystemInfo
HeapSize
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetStringTypeW
GetCommandLineW
CreateSemaphoreW
LocalFree
CreateEventW
WaitForSingleObject
ReleaseSemaphore
ResetEvent
SetEvent
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
GetLastError
CloseHandle
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileW
SetFileAttributesW
GetCommandLineA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetFileType
HeapReAlloc
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
EncodePointer
RaiseException
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
LCMapStringW
user32
CharUpperW
SendMessageW
FindWindowExW
SetWindowTextW
GetDlgItem
wsprintfW
advapi32
SystemFunction036
SetFileSecurityW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
oleaut32
VariantCopy
VariantClear
SysAllocStringLen
SysStringLen
SysFreeString
Extract
ExtractWithCallback
ExtractWithDetails
Name
.text
Size
334KB
Virtual Size
334KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
137KB
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
184B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=241, version=40116,
count=130, id=243, version=40116,
count=12, id=242, version=40116,
count=8, id=259, version=23406,
count=29, id=261, version=23406,
count=19, id=260, version=23406,
count=1, id=206, version=65501,
count=15, id=203, version=65501,
count=192, id=1, productName=Unmarked objects,
count=41, id=260, productName=VS2015 UPD1 build 23506, version=23506,
count=127, id=261, productName=VS2015 UPD1 build 23506, version=23506,
count=1, id=256, productName=VS2015 UPD1 build 23506, version=23506,
count=1, id=255, productName=VS2015 UPD1 build 23506, version=23506,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD1 build 23506, version=23506,
$PLUGINSDIR/uac.dll
- IMPHASH 0ef725341a4aecf8398c0e2132f38049
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10632
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetLastError
GetCurrentProcessId
GetCommandLineW
GetProcAddress
CreateThread
GlobalFree
LoadLibraryA
OpenProcess
GlobalAlloc
CreateFileMappingW
Sleep
MapViewOfFile
GetModuleHandleW
UnmapViewOfFile
CreateEventW
SetCurrentDirectoryW
GetVersionExW
GetExitCodeProcess
lstrcatW
LocalFree
GetPrivateProfileStringW
FormatMessageW
GetPrivateProfileIntW
CreateProcessW
CloseHandle
GetLastError
DuplicateHandle
GetCurrentThreadId
lstrlenW
SetEvent
WaitForSingleObject
lstrcmpiW
GetExitCodeThread
GetModuleFileNameW
user32
SetWindowPos
GetClientRect
GetWindowThreadProcessId
SetWindowLongW
DefWindowProcW
GetDlgItem
CallWindowProcW
CallNextHookEx
GetClassNameW
PeekMessageW
DestroyWindow
SendMessageW
SetForegroundWindow
IsWindowVisible
MsgWaitForMultipleObjects
LoadStringW
EndDialog
EnableWindow
DialogBoxParamW
LoadImageW
MessageBoxW
GetWindowLongW
DispatchMessageW
ShowWindow
wsprintfW
CreateDialogParamW
GetWindowRect
IsDialogMessageW
FindWindowExW
CharNextW
CreateWindowExW
LoadIconW
PostMessageW
SetWindowsHookExW
UnhookWindowsHookEx
TranslateMessage
shell32
ShellExecuteExW
advapi32
OpenServiceW
QueryServiceStatus
CloseServiceHandle
OpenProcessToken
OpenSCManagerW
GetUserNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
GetTokenInformation
EqualSid
ole32
CoInitialize
_
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=123, productName=VS2005 build 50727, version=50727,
count=83, id=1, productName=Unmarked objects,
count=3, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$PLUGINSDIR/utils.dll
- IMPHASH d1df4ecc5e6dee090f109d6f03e8eed9
- SHA256 1cc004fcce92824fa27565b31299b532733c976671ac6cf5dbd1e0465c0e47e8
- MD5 aad3f2ecc74ddf65e84dcb62cf6a77cd
- SHA1 1e153e0f4d7258cae75847dba32d0321864cf089
- SHA512 8e44b86c92c890d303448e25f091f1864946126343ee4665440de0dbeed1c89ff05e4f3f47d530781aa4db4a0d805b41899b57706b8eddfc95cfa64c073c26e2
- SSDEEP 768:SmLFb5dc9LS+8dayUhaPxYkkLE53UEDNnxqWLb1pA26Mbdv03whn:SmLFtd9+O0fkV7xpD6wd0ghn
- TLSH T1E6434B013291C033E5976A3458A5D6A29E7F7C426BF490CB3FB9027E5FA17D05A38367
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
83:1d:c8:ec:d8:0f:cb:ab:13:f6:1f:a6:8f:1a:5a:6e:25:7a:10:2a:ff:5c:72:d7:28:46:7a:55:81:da:e9:f6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Jaffa,ST=Israel,C=IL
Chains
Sep 30, 2017
CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Jaffa,ST=Israel,C=IL
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Overwolf Ltd,O=Overwolf Ltd,L=Tel Aviv-Jaffa,ST=Israel,C=IL
Serial Number
4f:d6:c5:fe:16:ab:00:f7:02:17:9d:23:b4:37:2e:bc
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 19, 2017 - Mar 20, 2020
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 2, 2017 - Apr 1, 2028
Minor OS version
1
Major OS version
5
Entry point
7935
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\development\tfs\Overwolf\InDev\MainDev\Source\Client\Branches\Iter108.1\OWInstaller\Tagger\Release\utils.pdb
kernel32
MapViewOfFile
UnmapViewOfFile
VirtualQuery
CreateFileW
CreateFileMappingW
CloseHandle
WriteFile
MultiByteToWideChar
GetCurrentThreadId
DecodePointer
GetCommandLineA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LoadLibraryW
LCMapStringW
GetStringTypeW
oleaut32
SysAllocString
getMeta
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=67, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=30, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=77, id=1, productName=Unmarked objects,
count=4, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
$PLUGINSDIR/websocket-sharp.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 08c671030295e3c011e8296957d9cc441396a87a02923614e92d15ab5cc440d9
- MD5 bc45f37eb5e11648cc72d8ab853e7ea7
- SHA1 eff48bf77e7edeac6097e690cf1769808cd79a7b
- SHA512 2f8acec93c07f2f26f44d3d9795f6c3d581e75399286da33323f7a3474ff34ff544d909398931f09c5a1ecd82e2752d7584185ad451a57458f55f27cddc7b301
- SSDEEP 6144:jQNVC/FesewE4JVcmOBj6ssqq70ZOAs3PPJPsgUXJZ:J/MsaiVxOBnq7Pk
- TLSH T17A44175827F8164AE9BF6BBDC4F050208775F906BD2BE71E0A9452EA1C73790CD2532B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
09:4f:1b:38:76:64:6c:7c:cb:f5:98:ee:e8:1f:86:35:8e:56:15:7b:93:22:7f:f7:fa:3a:4c:9c:f1:11:51:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Chains
Aug 4, 2024
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
09:4f:1b:38:76:64:6c:7c:cb:f5:98:ee:e8:1f:86:35:8e:56:15:7b:93:22:7f:f7:fa:3a:4c:9c:f1:11:51:77
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Chains
Mar 4, 2020
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Serial Number
0e:e0:0d:4b:1a:48:0c:a8:70:01:b5:40:80:63:da:71
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 27, 2020 - Mar 3, 2023
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Overwolf Ltd,O=Overwolf Ltd,L=Ramat Gan,C=IL
Serial Number
0d:ac:c0:f7:43:c7:9d:8a:64:64:dc:96:7a:f3:b0:39
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 27, 2023 - Mar 3, 2026
Minor OS version
0
Major OS version
4
Entry point
264830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
251KB
Virtual Size
250KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Ƿװʹ˵.txt
- SHA256 bddc9efd0910facb19cdaf91ce110258d0e309014a963924bd86fcf1b3c6c25c
- MD5 3c67717dbfa96d0caded91b27bed8a05
- SHA1 f7407de60e3a6096a7a95ef05a1fb0d1ee780f6e
- SHA512 6b601c37ef8a9012d0586c58a3cfb7e3e64055472d9a07f80960b01979e3e167e40512c2ed6694f940044468c88eb21ce8cb5b5cba8c866c5702172606c134b6
- TLSH T11321868C5F978B4DC74DDD18C12118A8C6432AE2729C59962C512185FF2A4FAF14F24C
- MD5 SHA1 SHA512 TLSH
Ƿվ__ҳ.url
- SHA256 b227ced1365a3af0d13ba414813c41f844972b2629e5cef2d3041fe7a546cec9
- MD5 bdc6522ac9e56bf6fb89885a913ede8e
- SHA1 7dbc318215c8ceb26bc2e50aee08914b48109047
- SHA512 7ce6afb2405a476c1701778226da56efa0473682e0ecb721812f7444635c4e84c5e18f32a507f058da6b04e7d0ea2b2d5a228e850ae81f81128602e95753ed6f
- MD5 SHA1 SHA512
Ƿվذ.url
- SHA256 4615652904207d6692b4b708164bdc92c4ab4e62e984c325a78fd346c9b54298
- MD5 76e8d0d978aed1857724ab053c27c713
- SHA1 0da7578bc10626797c2bfb61730c0387dc1205fa
- SHA512 112c467fd5e9278fd332c3c915f3eca69dcf41c4c93433a581adc6dfee0e1537ea2976e18a1868cbc1f157e14a495ab59a549becddf516201f76b7ed03747ad3
- TLSH T1729002968109C4958706468C5472D554D81375E4D457C4E5D1949A04594A5A545C5608
- MD5 SHA1 SHA512 TLSH