Volt-Cracked.zip
- SHA256 2a3c721eb8e2e7c358839e4d4f5323a1e02bf050ad9229f4734771a50f0ad824
Overview
overview
8Static
static
3Emulator.dll
windows10-2004-x64
1Emulator.dll
windows11-ltsc_2024-x64
1Executor.dll
windows10-2004-x64
1Executor.dll
windows11-ltsc_2024-x64
1Volt\lsp\luau-lsp.exe
windows10-2004-x64
1Volt\lsp\luau-lsp.exe
windows11-ltsc_2024-x64
1Volt\uninstall.exe
windows10-2004-x64
7Volt\uninstall.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3install.ps1
windows10-2004-x64
3install.ps1
windows11-ltsc_2024-x64
3setup.ps1
windows10-2004-x64
8setup.ps1
windows11-ltsc_2024-x64
8tauri-app.exe
windows10-2004-x64
6tauri-app.exe
windows11-ltsc_2024-x64
6volt-installer.exe
windows10-2004-x64
7volt-installer.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Emulator.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Emulator.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Executor.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Executor.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Volt\lsp\luau-lsp.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Volt\lsp\luau-lsp.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Volt\uninstall.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral8
Sample
Volt\uninstall.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral9
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral15
Sample
install.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral16
Sample
install.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral17
Sample
setup.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral18
Sample
setup.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral19
Sample
tauri-app.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral20
Sample
tauri-app.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral21
Sample
volt-installer.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral22
Sample
volt-installer.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral23
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral25
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral26
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral28
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral29
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral30
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral31
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral32
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target Volt-Cracked.zip
- Size 166.5MB
- Sample261107-xryqjaev61
- SHA256 2a3c721eb8e2e7c358839e4d4f5323a1e02bf050ad9229f4734771a50f0ad824
- MD5 dfb946c8de43a8ef8d13d7212bb56139
- SHA1 17a047dd73f7d655cb425adaf704e0336c0e9c1b
- SHA512 7f7ee7a91caf180fa3d34b0eaf9980cc2c28e08aa1bd2b51807499ff2446eb2d73aed09e9b0cb17944badfa8f34263ac212038537c052b999c3ba32da7a2cdbf
- SSDEEP 3145728:aHDGEbbrHkBkP+lMAkGq+vO1BHg2ehLhbluk6bd/VTPW9GAk5v4R74Ui0Y538hd5:aGEnh+kLxrg2WbuzrCk5v6sS6U
- TLSH T1A28833E1D30DF1593765DF8188960F29931823A27F2236DC7F0963A65091BE968F6C2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 16 IoCs
Checks for missing Authenticode signature.
resource unpack001/Emulator.dll unpack001/Executor.dll unpack001/Volt\lsp\luau-lsp.exe unpack001/Volt\uninstall.exe unpack002/$PLUGINSDIR/LangDLL.dll unpack002/$PLUGINSDIR/System.dll unpack002/$PLUGINSDIR/nsis_tauri_utils.dll unpack001/tauri-app.exe unpack001/volt-installer.exe unpack003/$PLUGINSDIR/NSISdl.dll unpack003/$PLUGINSDIR/StartMenu.dll unpack003/$PLUGINSDIR/System.dll unpack003/$PLUGINSDIR/nsDialogs.dll unpack003/$PLUGINSDIR/nsis_tauri_utils.dll unpack003/lsp/luau-lsp.exe unpack003/tauri-app.exe
File Explorer
-
Volt-Cracked.zip.zip 166.5MB
-
Emulator.dll.dll 16.9MB
-
Executor.dll.dll 30.2MB
-
README.md1KB
-
Volt\lsp\.luaurc169B
-
Volt\lsp\en-us.json6.8MB
-
Volt\lsp\globalTypes.d.lua844KB
-
Volt\lsp\luau-lsp.exe.exe 6.0MB
-
Volt\uninstall.exe.exe 77KB
-
$PLUGINSDIR/LangDLL.dll.dll 5KB
-
$PLUGINSDIR/System.dll.dll 12KB
-
$PLUGINSDIR/nsis_tauri_utils.dll.dll 33KB
-
install.ps1.ps1 6KB
-
setup.ps1.ps1 1KB
-
tauri-app.exe.exe 14.5MB
-
volt-installer.exe.exe 11.1MB
-
$PLUGINSDIR/NSISdl.dll.dll 15KB
-
$PLUGINSDIR/StartMenu.dll.dll 7KB
-
$PLUGINSDIR/System.dll.dll 12KB
-
$PLUGINSDIR/modern-wizard.bmp25KB
-
$PLUGINSDIR/nsDialogs.dll.dll 9KB
-
$PLUGINSDIR/nsis_tauri_utils.dll.dll 33KB
-
lsp/.luaurc169B
-
lsp/en-us.json6.8MB
-
lsp/globalTypes.d.lua844KB
-
lsp/luau-lsp.exe.exe 6.0MB
-
tauri-app.exe.exe 14.5MB
-
volt.bin104.5MB
-
volt_universal_crack.js.js 6KB
Emulator.dll
- IMPHASH e48b03b6c49864a06806ab266b5c7974
- SHA256 9c849d1bd8b048bc11c2912d407770c54a71dae918c7f65770edc0c5ea87927f
- MD5 a2d80dba54c777b9a6a0c0a9f24e3db4
- SHA1 0a01f9ab3034570940375f377694c8c8639f1fff
- SHA512 821f9070d497336a2b96bee1f507cce668e93bd6afdbc5e60b4865a719c725e8e8541f9d700c7f14e0bdb4e5a020fdc475022684873659ea748b2a2e59a27492
- SSDEEP 196608:hnPxAwKeSgjyKVDXUNDX/zODOhcjRQhywjxft/zTz/MVePbHf:pxU9XbOCuRdwlfdz/TbH
- TLSH T177079E1FE5531C1CDBB58B709A1E0BA3E0E1B5880AF86E7D02D855217B233D8D75AE87
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
76960
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
RobloxPlayerBeta.pdb
kernel32
AcquireSRWLockExclusive
CloseHandle
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitOnceBeginInitialize
InitOnceComplete
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
VirtualProtect
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
run
Name
.text
Size
15.0MB
Virtual Size
15.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.license
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
37B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
volt
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
624B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Executor.dll
- IMPHASH 45c85688041c48143aead8a5cf4dedf5
- SHA256 de90e442bf381d0c3ad09c9b9480805591d8d7ecb036fca875e7a0bb72d357ed
- MD5 db50c601acb31a895c6e565d908715a5
- SHA1 677c99e7a95bb42cf5c96e973251f23202536abf
- SHA512 a1d3d6457d8d377ba4400ff522eb79054454c705538896f0088a67fd614af3b5e97d2fabc8d6dd8171023936e53ed671bf509ad4a6437a9a18414075d2177e64
- SSDEEP 786432:zphiq7xHTXJLsuFiyFM0rTlY9AmKEcxTlkQpf:zpsqtHVLsuFTv0hcxTT
- TLSH T108672302FD42C9A3DE6292348CA70B176372DEA25B83930F7788321D6D777DD0E9A549
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
%%%RobloxPlayerExecutor.pdb%%%
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
crypt32
CertDuplicateCertificateContext
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringW
CertFindExtension
CertAddCertificateContextToStore
CertGetCertificateChain
PFXImportCertStore
CryptStringToBinaryW
CertOpenSystemStoreW
CertFreeCertificateContext
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CryptUnprotectData
CryptProtectData
CryptDecodeObjectEx
CertFreeCertificateChain
CertFindCertificateInStore
CertGetCertificateContextProperty
wsock32
gethostname
closesocket
ntohl
recvfrom
sendto
setsockopt
socket
WSAStartup
shutdown
getservbyname
getservbyport
gethostbyname
WSACleanup
ntohs
inet_addr
ioctlsocket
getsockopt
getpeername
listen
htonl
getsockname
bind
accept
connect
WSAGetLastError
send
recv
WSASetLastError
select
htons
inet_ntoa
__WSAFDIsSet
gethostbyaddr
advapi32
CryptImportKey
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
CryptEnumProvidersW
CryptEncrypt
SystemFunction036
CryptGetHashParam
CryptHashData
ws2_32
WSAResetEvent
WSAIoctl
WSASetEvent
freeaddrinfo
inet_pton
inet_ntop
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
getaddrinfo
WSAEventSelect
WSASocketA
WSAWaitForMultipleEvents
iphlpapi
GetAdaptersAddresses
if_nametoindex
kernel32
GetExitCodeProcess
CreateProcessW
HeapFree
SetEnvironmentVariableW
SetConsoleCtrlHandler
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
ExitProcess
FreeLibraryAndExitThread
EnumSystemLocalesW
GetConsoleOutputCP
OutputDebugStringA
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
VerSetConditionMask
QueryPerformanceCounter
QueryPerformanceFrequency
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetLocaleInfoA
IsDBCSLeadByte
GetDiskFreeSpaceExW
GetLogicalDrives
GlobalMemoryStatusEx
GetCurrentProcess
FlushInstructionCache
VirtualProtect
SetUnhandledExceptionFilter
LoadLibraryExW
Process32NextW
GetStdHandle
AllocConsole
GetConsoleMode
SetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
SetConsoleTitleA
GetConsoleWindow
GetCurrentProcessId
CloseHandle
Sleep
CreateThread
GetCurrentThreadId
OpenThread
SuspendThread
GetTickCount64
CreateToolhelp32Snapshot
Thread32First
Thread32Next
CreateFileW
DeleteFileW
FlushFileBuffers
GetFileSizeEx
ReadFile
SetFileInformationByHandle
SetFilePointerEx
WriteFile
GetLastError
ReleaseMutex
WaitForSingleObject
CreateMutexW
LocalFree
MoveFileExW
RtlLookupFunctionEntry
RtlVirtualUnwind
VirtualQuery
GetModuleFileNameA
GetModuleHandleExA
GetProcessTimes
TerminateProcess
GetSystemTime
GetSystemTimeAsFileTime
GetModuleFileNameW
FileTimeToSystemTime
GetModuleHandleW
VirtualAlloc
HeapReAlloc
SetEvent
ResetEvent
ReleaseSemaphore
CreateMutexA
CreateEventA
ExitThread
CreateSemaphoreA
VirtualQueryEx
ReadProcessMemory
WriteProcessMemory
GetSystemInfo
VirtualFree
RaiseException
FormatMessageA
InitializeCriticalSection
EnterCriticalSection
FlsGetValue
IsValidLocale
DeleteCriticalSection
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetLargePageMinimum
SetLastError
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SwitchToFiber
DeleteFiber
CreateFiberEx
FindClose
FindFirstFileW
FindNextFileW
GetModuleHandleExW
SystemTimeToFileTime
GetSystemDirectoryA
GetExitCodeThread
GetEnvironmentVariableW
GetACP
GetFileType
ConvertFiberToThread
ConvertThreadToFiberEx
LoadLibraryW
ReadConsoleA
ReadConsoleW
GetCurrentDirectoryW
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableSRW
GetLogicalProcessorInformation
InitializeCriticalSectionEx
GetStringTypeW
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
RtlPcToFileHeader
InitOnceComplete
InitOnceBeginInitialize
GetFileInformationByHandleEx
AreFileApisANSI
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
FindFirstFileExW
CreateDirectoryW
GetLocaleInfoEx
TryAcquireSRWLockExclusive
GetNativeSystemInfo
SwitchToThread
WaitForSingleObjectEx
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
WakeAllConditionVariable
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlCaptureContext
GetUserDefaultLCID
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
SetStdHandle
SetEndOfFile
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
WriteConsoleW
HeapSize
SleepEx
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
FormatMessageW
FlsAlloc
GetEnvironmentVariableA
WaitForMultipleObjects
GetDateFormatW
FlsFree
FlsSetValue
LeaveCriticalSection
HeapAlloc
InterlockedFlushSList
RtlUnwindEx
GetCPInfo
LCMapStringEx
DecodePointer
EncodePointer
VerifyVersionInfoW
GetTickCount
RtlUnwind
user32
SetWindowLongPtrW
CallWindowProcW
RegisterClipboardFormatA
GetRawInputData
SetTimer
GetSystemMetrics
MapVirtualKeyA
SendInput
GetAsyncKeyState
MessageBoxA
KillTimer
GetProcessWindowStation
SetProcessDPIAware
EnumDisplayMonitors
GetMonitorInfoA
MonitorFromWindow
LoadCursorA
SetWindowLongPtrA
SetWindowLongW
SetWindowLongA
GetWindowLongW
WindowFromPoint
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
GetUserObjectInformationW
AdjustWindowRectEx
GetClientRect
GetPropA
SetPropA
ReleaseDC
GetDC
SetForegroundWindow
GetForegroundWindow
IsWindowUnicode
ReleaseCapture
SetCapture
GetCapture
GetKeyState
SetFocus
BringWindowToTop
IsIconic
SetWindowPos
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
IsChild
CreateWindowExW
RegisterClassExW
UnregisterClassW
DefWindowProcW
GetMessageExtraInfo
TrackMouseEvent
GetKeyboardLayout
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
MessageBoxW
SetCursorPos
gdi32
GetDeviceCaps
shell32
ShellExecuteW
comdlg32
GetSaveFileNameW
imm32
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
ImmSetCandidateWindow
d3dcompiler_47
D3DCompile
dbghelp
SymFromAddr
bcrypt
BCryptGenRandom
secur32
InitSecurityInterfaceW
Name
.text
Size
12.6MB
Virtual Size
12.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4.9MB
Virtual Size
4.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
413KB
Virtual Size
507KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
461KB
Virtual Size
460KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
volt
Size
11.8MB
Virtual Size
11.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
968B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
103KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=220, id=261, version=33145,
count=61, id=260, version=33145,
count=35, id=259, version=33145,
count=5, id=253, version=35207,
count=12, id=259, version=35207,
count=17, id=260, version=35207,
count=109, id=261, version=35207,
count=42, productName=Unmarked objects (old),
count=35, id=257, version=33145,
count=424, id=1, productName=Unmarked objects,
count=1246, id=260, version=35228,
count=552, id=261, version=35228,
count=7, id=259, version=35228,
count=1, id=256, version=35228,
count=1, id=255, version=35228,
count=1, id=151,
count=1, id=258, version=35228,
README.md
- SHA256 6112d4ec6f38d52e032bdf535da12a7ac0d2c232a313fe895b20ee14619029c9
- MD5 0291b28644fe819ba59263d54d352dde
- SHA1 ca71a5f48f3e9145df38520e0c38eea8ca303a99
- SHA512 08054ed78ec0800843e71145af3cd1737e8cf72b6a402e296567ee024c2cdb040298d77405f25619caa74c3322b4970775152b1f3566c794fc695fb34907d512
- TLSH T1A9319817869BB336A7D21139CF2F61DE943B20009216816BB4EE502C33905FC82F34F5
- MD5 SHA1 SHA512 TLSH
Volt\lsp\.luaurc
- SHA256 a4f0cf2fe24eb73815a884211257322dc2bcad03506c6c02171b3b97fd367e6b
- MD5 e1698082286f891febf0ac7371d2d0e7
- SHA1 6c6d7c77361d7ed51de646f9a057dd5336c32bf6
- SHA512 87e6a44aca53943cb5886eb49aac67780e6db5fd05ad588d61f8d692df232090139364be8f588012e74f881caab98d70f097e0fb6d84d8ff94ec446fe5981fdf
- TLSH T1B8C08C01C88B09FD38D6C04EE8A5D152812C46EEA20C2E2EF2324229ABA983C4845FC4
- MD5 SHA1 SHA512 TLSH
Volt\lsp\en-us.json
- SHA256 1deaf275538c1cb05eddf3934bfb21758fa8a8bcf997ed24b610b354fe7b2aa8
- MD5 b752256eb2e8de6d4fa8075af7c61540
- SHA1 de9217777ef3c52aabb9c9e68397d955f36d7824
- SHA512 535ff877bf47c5e241344c5d3ae592f034c938b475cebb3ab6af7a249775cd45f80920c4858fcfa5f2206e73cab9da2976cb8894313106136f52d65eb0271cbc
- SSDEEP 49152:wcnn/G/6QasKN5yPkyC/T+V0g+8sH9em2Dl:q
- TLSH T13F66DD33D9901D5726B2574DF8B9435AF82802EF204D188EBABC732C6F6197B1516BCB
- MD5 SHA1 SHA512 SSDEEP TLSH
Volt\lsp\globalTypes.d.lua
- SHA256 844d0d3767c82140ae05327e2b92ac1f3604fc46d8356c8ab844512e2f8694f4
- MD5 8065d50eebb5b7162bbd601deaf5dd11
- SHA1 b0f4a81e1e8d52b8ebb1ed5bc26609bdb3bde652
- SHA512 c24c758855f353db0b69dd63b058388f4645795c696abfc687c78ba865d57127412ba976bce899d28bac135edb7b754aec9243db1ef6d667693290ed95499b4b
- SSDEEP 6144:6ENUApJt52uXnoQOeucwfTFCoLJpldStDMMyYmxBmz/+RxJ7MGicvvKFupgzgd+W:4uXnoQOeucwfcDMuzV+
- TLSH T1C105431DB608F1300D8F63F6AA7F8884E87592C4521850BCA1F8FB9A177F43D2656ADD
- MD5 SHA1 SHA512 SSDEEP TLSH
Volt\lsp\luau-lsp.exe
- IMPHASH b545748cffa18f37490244adc354cb32
- SHA256 43dc7a51985872f83cd2f644cabf251023158b432a7cdcc795ac1b36dab3462a
- MD5 e44b9ebe7211e3aa6ff3bab4f8c8451a
- SHA1 4d0406042cf46fb776eea8645635d21f8cc50308
- SHA512 ce57f9592ec2086a1ddad05d6e0edc4a13f243e47ccb12cab5bfe3939ce4565a8a360c55992afd3799af7bd50d992309d4ca565462bbfde6b60e10713a0a99c5
- SSDEEP 49152:NsY0bbZDDDDDD7H5c7G9or26czNvOgPQqWv9UHtS3XLZvdfEfPgp1LY078qWcHGy:Pifc7GXCn+361QjvQfyom/BOa
- TLSH T112565C3B629801FCE0BBC179CB5A9953D772300A0331AAFF05E145A66F57AF45E7A312
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5155888
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetCommandLineW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
LocalFree
MultiByteToWideChar
WideCharToMultiByte
IsDebuggerPresent
VirtualProtect
GetCurrentThreadStackLimits
GetCurrentProcess
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSListHead
shell32
CommandLineToArgvW
msvcp140
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?setf@ios_base@std@@QEAAHHH@Z
?unsetf@ios_base@std@@QEAAXH@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
_Thrd_join
_Thrd_id
_Mtx_lock
_Mtx_unlock
_Cnd_wait
_Cnd_broadcast
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
??Bios_base@std@@QEBA_NXZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Strcoll
_Strxfrm
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
??7ios_base@std@@QEBA_NXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?fail@ios_base@std@@QEBA_NXZ
?xalloc@ios_base@std@@SAHXZ
?iword@ios_base@std@@QEAAAEAJH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Query_perf_counter
_Query_perf_frequency
?width@ios_base@std@@QEBA_JXZ
?setf@ios_base@std@@QEAAHH@Z
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?_Xbad_function_call@std@@YAXXZ
?uncaught_exception@std@@YA_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?width@ios_base@std@@QEAA_J_J@Z
vcruntime140
__current_exception_context
__current_exception
strchr
memset
memmove
__C_specific_handler
memchr
_CxxThrowException
__std_type_info_compare
memcpy
__std_exception_destroy
__std_exception_copy
__std_terminate
_purecall
memcmp
__RTDynamicCast
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_beginthreadex
abort
terminate
_set_app_type
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
__p___argc
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_errno
_initialize_narrow_environment
_configure_narrow_argv
_invoke_watson
exit
api-ms-win-crt-stdio-l1-1-0
ftell
fputc
_setmode
__stdio_common_vsprintf
_fileno
_wfopen
_wfsopen
fclose
__stdio_common_vfprintf
fflush
__p__commode
fread
fseek
__acrt_iob_func
fwrite
_getcwd
__stdio_common_vsprintf_s
_set_fmode
api-ms-win-crt-string-l1-1-0
isalnum
isdigit
strcpy
strncpy
strpbrk
isspace
wcscmp
islower
ispunct
iscntrl
isgraph
toupper
wcslen
strncmp
strcmp
strcspn
strncat
isalpha
tolower
isxdigit
strspn
isupper
strlen
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
_aligned_malloc
realloc
free
_set_new_mode
_aligned_free
api-ms-win-crt-convert-l1-1-0
strtol
strtof
strtoul
strtod
strtold
atoi
strtoull
strtoll
api-ms-win-crt-math-l1-1-0
_dclass
frexp
floor
tanh
tan
sqrt
modf
_dsign
_fdsign
sinh
sin
log2
ceilf
sqrtf
log10
__setusermatherr
floorf
pow
ldexp
round
acos
asin
atan
atan2
ceil
cos
cosh
exp
fmod
log
api-ms-win-crt-locale-l1-1-0
localeconv
_configthreadlocale
setlocale
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-time-l1-1-0
strftime
_localtime64_s
_gmtime64_s
_difftime64
_time64
clock
Name
.text
Size
5.1MB
Virtual Size
5.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
765KB
Virtual Size
765KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
46KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
165KB
Virtual Size
164KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35207,
count=10, id=260, version=35207,
count=35, id=261, version=35207,
count=6, id=257, version=35207,
count=5, id=257, version=33140,
count=303, id=1, productName=Unmarked objects,
count=225, id=261, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
Volt\uninstall.exe
- IMPHASH 46ce5c12b293febbeb513b196aa7f843
- SHA256 bad113335da7f608ef20eacbd4c0d3f8a57eeab092263f01a256e785ce089948
- MD5 97cf23ea89caf74d69dba375d58a7aa1
- SHA1 ddc8b72275d220c4f97d7b8ae5e594577eab0b33
- SHA512 3a325e35f7636dd008b5d4f6d7c1df68f4828f49566eee260d5e40cb800542bc5b7343eee9a59992b2884347ff0a1e37ecf7b4f8c2e62842f98d3c9bb83fd828
- SSDEEP 1536:krX4tpfcUjrwLxZYE8ksuOgdLeAyNx0HocAmviVqH3Kn9y4C:+X47fcIrwR8ksuOceABHzvoqHYU4C
- TLSH T18D73DF0467E0C8B3D67207311E7B5B776FF9A42212A89B1B1700579E7D72A81EE0E363
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13983
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW
ole32
CoCreateInstance
OleUninitialize
OleInitialize
IIDFromString
CoTaskMemFree
comctl32
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_Create
user32
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
CreatePopupMenu
AppendMenuW
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
IsWindowEnabled
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CharPrevW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
CharNextA
wsprintfA
DispatchMessageW
CreateWindowExW
PeekMessageW
GetSystemMetrics
gdi32
GetDeviceCaps
SetBkColor
SelectObject
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
kernel32
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
CreateProcessW
CreateDirectoryW
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
WriteFile
GetCurrentProcess
GetModuleFileNameW
GetLastError
GetFileSize
CreateFileW
GetTickCount
Sleep
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
MulDiv
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
ExitProcess
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=163, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/LangDLL.dll
- IMPHASH fe3375e7e4529b73ba45ab2246b9269b
- SHA256 4cf25411f28f639f72156c24b0f66ea42f5aee5973f6c137d901da6ae42d5b7e
- MD5 4b8a750993567ac9a350ba9768fabfa0
- SHA1 7ee7a8c313b292d62561b085c9d490c0f8065624
- SHA512 c2a06e352815a2f5340e8244cf2c5a4a5cd7e7848ea67e454ab207262cb33130008491e83d053c778bea97720f7387de737bf15355db3cd5477b94f3571107bb
- SSDEEP 48:S46+/TTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8mkGofjLl:zxuPbO5tCZBVEAWyMEFv2CmqL
- TLSH T171C1A370B3D248B9D591413778AB33D36612AE746784500FDB6311AA3820AE7AD3EBC2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5439
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalFree
lstrlenW
GlobalAlloc
lstrcmpW
GetModuleHandleW
MulDiv
lstrcpyW
lstrcpynW
user32
SetWindowTextW
SetDlgItemTextW
SendDlgItemMessageW
EndDialog
DialogBoxParamW
LoadIconW
SendMessageW
ShowWindow
GetDC
gdi32
CreateFontIndirectW
GetDeviceCaps
DeleteObject
LangDialog
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
681B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=23, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/System.dll
- IMPHASH 509a34b3a68a773e0afb4259e68f9f82
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10879
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
867B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
662B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/nsis_tauri_utils.dll
- IMPHASH 2030931b38a854dde8cdd69245a8096a
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
nsis_tauri_utils.pdb
kernel32
GetCurrentProcess
GetLastError
GlobalFree
CloseHandle
TerminateProcess
ExitProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
GetCurrentProcessId
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
GlobalAlloc
lstrcpyW
advapi32
EqualSid
LookupPrivilegeValueW
CreateProcessWithTokenW
DuplicateTokenEx
OpenProcessToken
GetTokenInformation
AdjustTokenPrivileges
user32
GetShellWindow
GetWindowThreadProcessId
shell32
ShellExecuteW
DllMain
FindProcess
FindProcessCurrentUser
KillProcess
KillProcessCurrentUser
RunAsUser
SemverCompare
StrReplace
memcmp
memcpy
memset
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=27, id=1, productName=Unmarked objects,
count=13, productName=Unmarked objects (old),
count=1, id=256, version=35222,
count=1, id=258, version=35222,
install.ps1
- SHA256 cbfa648d368b2f54c0feb7bf9272ce73caba53912cc0cc64c17aff9a7be234e7
- MD5 685023dd427c3c5876eeba3cf7353f35
- SHA1 0b95bb665860fe019ef38150698043af3505908b
- SHA512 b7ff4e88d0d94bd98692f7c5159f802618a5ca41068abbef324b7b0944918e90678621c869b2cf0e9ce763775a28170a64cb5a9fdf604ef4aa52e0fe4edccde5
- SSDEEP 96:MvTpJMEalr9kTjycbHIfZSvI1BSExapvtQIj+cFE5TZNhTtJn6WsW6PovHqkr:4TpJMEToLSExap07XMWsW6PovHqkr
- TLSH T10DE1303984142E3EAB530E5BA9766DEDB4278536C1864DC0720C99E43FF232CCF654B6
- MD5 SHA1 SHA512 SSDEEP TLSH
setup.ps1
- SHA256 a9b698f3ad763c484a990bdd96aaba65de689cc2b1e7f90694890b289a643fb5
- MD5 bec671c0cc6eaac2b1d14f1e4c326595
- SHA1 c5ab45af46dfd0452768f5b32c135537f249f794
- SHA512 e459b88d0c7e8c0b778df22b1e5490848d710352b29744defd348b4cbd9b95cf6c17a4cc999acd41b070cb478491b64f15cd18a51d47c88c009444f901a8cecf
- TLSH T1E541F0284464375BE993012FF0A6EBED794BA83685460DD4764E05E938E313CCFB28F5
- MD5 SHA1 SHA512 TLSH
tauri-app.exe
- IMPHASH ebcb8c98e2ed991a24d2bcaa73bc06a7
- SHA256 1010ae9bf0c27cc65f88ac3014b344c99aa4524166c1eb9ede2c84be7c0bf958
- MD5 07c0de36ac490a0964790a8c11407050
- SHA1 d7e67b49c6322b3e5c38da8cccf5b1e1e7d4b367
- SHA512 aea251561003eeb2501bf04dfb5ec4980a6ac93651cce3a6ef0c221c4ab6f8f66f8b57ea559d59c21192b56264deb29903e04edf9e2f0e8a16d1f8c2fe71b64a
- SSDEEP 196608:IR35yu2XGRFvRpxyxHeXtUh9grGn0MNBp5qddpSiZWTYE+u:cVzFvL4xH2ihKKnxBrqdrjZWsE+
- TLSH T196E6AE03F39581E9C0AEC578C31AA637EB72B88D4521B29B5BE44F112F26F506F1D35A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
7418152
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
tauri_app.pdb
kernel32
FindNextFileW
SetWaitableTimer
GetProcessId
CreateWaitableTimerExW
GetSystemInfo
CreateSymbolicLinkW
MoveFileExW
UnregisterWaitEx
CopyFileExW
GetFinalPathNameByHandleW
DeleteFileW
GetTempPathW
WaitForMultipleObjects
RemoveDirectoryW
DuplicateHandle
GetFileAttributesW
CreateProcessW
FlushFileBuffers
GetTickCount
MapViewOfFile
CreateFileMappingW
GetSystemTime
GetSystemTimeAsFileTime
FreeLibrary
GetFileSize
LocalFree
UnlockFile
HeapDestroy
HeapCompact
DeleteFileA
CreateFileA
FlushViewOfFile
GetFileAttributesExW
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapSize
HeapValidate
UnmapViewOfFile
CreateMutexW
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
GetDiskFreeSpaceW
HeapCreate
AreFileApisANSI
GetWindowsDirectoryW
GetSystemDirectoryW
GetExitCodeProcess
TerminateProcess
CreateEventW
ExitProcess
CreateDirectoryW
GetSystemTimePreciseAsFileTime
GetFileInformationByHandleEx
GetProcAddress
GetFileInformationByHandle
LoadLibraryExA
FindClose
FindFirstFileExW
GetModuleHandleA
SetFileInformationByHandle
lstrlenW
SetFileTime
CreateThread
SetHandleInformation
SleepEx
HeapAlloc
WaitForSingleObject
ReleaseMutex
CreateMutexA
GetCurrentProcessId
GetCurrentProcess
WaitForSingleObjectEx
GetCurrentThreadId
CreateFileW
Sleep
GetFullPathNameW
SetLastError
IsProcessorFeaturePresent
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
InitializeCriticalSection
LoadLibraryA
WakeAllConditionVariable
SystemTimeToFileTime
GetCommandLineW
SleepConditionVariableSRW
LoadLibraryW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
QueryPerformanceFrequency
GetEnvironmentVariableW
GetCurrentDirectoryW
RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleW
FormatMessageW
CompareStringOrdinal
GetModuleFileNameW
AddVectoredExceptionHandler
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
IsDebuggerPresent
UnlockFileEx
LockFileEx
DeviceIoControl
CancelIo
WriteFileEx
ReadFileEx
WriteConsoleW
GetConsoleOutputCP
GetConsoleMode
GetStdHandle
CreatePipe
RtlPcToFileHeader
UnhandledExceptionFilter
CancelIoEx
SetUnhandledExceptionFilter
WriteFile
CreateIoCompletionPort
GetOverlappedResult
ReadFile
InitializeSListHead
RtlUnwindEx
PostQueuedCompletionStatus
GetQueuedCompletionStatusEx
SetFileCompletionNotificationModes
SetFilePointerEx
GetLastError
LoadLibraryExW
RaiseException
OutputDebugStringA
GetUserDefaultUILanguage
LCIDToLocaleName
OutputDebugStringW
CloseHandle
FormatMessageA
SwitchToThread
HeapReAlloc
HeapFree
GetProcessHeap
GetCurrentThread
SetThreadStackGuarantee
InitializeCriticalSectionAndSpinCount
bcrypt
BCryptGenRandom
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
WakeByAddressSingle
WaitOnAddress
ntdll
NtWriteFile
NtCancelIoFileEx
NtDeviceIoControlFile
NtReadFile
RtlNtStatusToDosError
NtOpenFile
NtCreateFile
NtCreateNamedPipeFile
RtlGetVersion
user32
SetCapture
CreateMenu
DestroyIcon
EnumDisplayMonitors
MonitorFromPoint
RegisterClassExW
EnableMenuItem
CheckMenuItem
DestroyMenu
RegisterRawInputDevices
MapVirtualKeyW
ReleaseCapture
RemoveMenu
CreateIcon
RedrawWindow
PostMessageW
DrawMenuBar
PostQuitMessage
SendMessageW
ShowWindow
GetMenuBarInfo
GetKeyState
ToUnicodeEx
GetClientRect
GetKeyboardLayout
MapVirtualKeyExW
GetKeyboardState
AppendMenuW
InsertMenuW
GetMonitorInfoW
ChangeDisplaySettingsExW
InvalidateRgn
GetAsyncKeyState
MonitorFromRect
TrackMouseEvent
SystemParametersInfoA
EnableWindow
IsWindowEnabled
CreateAcceleratorTableW
ScreenToClient
InvalidateRect
MonitorFromWindow
ClientToScreen
SendInput
DrawTextW
FillRect
GetWindowDC
OffsetRect
GetTouchInputInfo
MapWindowPoints
GetActiveWindow
GetMenuItemInfoW
DrawIconEx
ReleaseDC
GetDC
VkKeyScanW
SetMenuItemInfoW
DestroyAcceleratorTable
CloseTouchInputHandle
CreatePopupMenu
GetRawInputData
SetFocus
UpdateWindow
GetWindowRect
ValidateRect
GetUpdateRect
GetWindow
RegisterTouchWindow
SetMenu
GetParent
FindWindowExW
TranslateAcceleratorW
MsgWaitForMultipleObjectsEx
GetMessageW
EnumChildWindows
DispatchMessageA
GetMessageA
AdjustWindowRect
PostThreadMessageW
DispatchMessageW
TranslateMessage
DestroyWindow
SystemParametersInfoW
FlashWindowEx
LoadCursorW
SetCursor
IsIconic
IsWindow
CreateWindowExW
SetCursorPos
GetForegroundWindow
SetWindowTextW
IsWindowVisible
GetWindowTextW
GetWindowTextLengthW
SetParent
SetPropW
SetWindowLongPtrW
GetWindowLongPtrW
ShowCursor
ClipCursor
GetSystemMetrics
GetClipCursor
DefWindowProcW
SetWindowDisplayAffinity
GetWindowPlacement
SetWindowPlacement
PeekMessageW
AdjustWindowRectEx
GetMenu
GetWindowLongW
SetWindowPos
SetWindowLongW
GetSystemMenu
RegisterWindowMessageA
IsProcessDPIAware
TrackPopupMenu
SetForegroundWindow
GetCursorPos
SetWindowRgn
bcryptprimitives
ProcessPrng
crypt32
CertFreeCertificateChainEngine
CertCloseStore
CertGetCertificateChain
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertSetCertificateContextProperty
CertAddEncodedCertificateToStore
CertOpenStore
CertCreateCertificateChainEngine
CertFreeCertificateContext
oleaut32
SysFreeString
SysStringLen
GetErrorInfo
SetErrorInfo
ole32
CoInitialize
CoTaskMemAlloc
RevokeDragDrop
CoUninitialize
CoCreateInstance
OleInitialize
CoTaskMemFree
CoInitializeEx
RegisterDragDrop
CoCreateFreeThreadedMarshaler
shell32
DragQueryFileW
SHGetKnownFolderPath
ShellExecuteExW
ILCreateFromPathW
SHOpenFolderAndSelectItems
ILFree
SHCreateItemFromParsingName
DragFinish
ShellExecuteW
SHAppBarMessage
comctl32
TaskDialogIndirect
DefSubclassProc
RemoveWindowSubclass
SetWindowSubclass
gdi32
SetTextColor
BitBlt
SetBkMode
CreateRectRgn
CreateCompatibleDC
CreateDIBSection
SelectObject
DeleteDC
CreateSolidBrush
CombineRgn
DeleteObject
GetDeviceCaps
advapi32
RegCloseKey
RegDeleteTreeW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegEnumValueW
RegGetValueW
EventWriteTransfer
EventRegister
SystemFunction036
EventUnregister
RegCreateKeyExW
EventSetInformation
dwmapi
DwmSetWindowAttribute
DwmGetWindowAttribute
DwmEnableBlurBehindWindow
shlwapi
SHCreateMemStream
ws2_32
WSASend
shutdown
send
recv
getpeername
accept
freeaddrinfo
getaddrinfo
listen
WSACleanup
getsockname
setsockopt
bind
connect
ioctlsocket
WSASocketW
WSAIoctl
getsockopt
closesocket
WSAGetLastError
WSAStartup
api-ms-win-crt-math-l1-1-0
log
fabs
round
ceil
pow
__setusermatherr
trunc
floor
roundf
_dclass
api-ms-win-crt-string-l1-1-0
strncmp
wcscmp
strcpy_s
strspn
wcslen
strcspn
strcmp
strlen
wcsncmp
_wcsicmp
api-ms-win-crt-heap-l1-1-0
calloc
malloc
_msize
_callnewh
free
_set_new_mode
realloc
api-ms-win-crt-utility-l1-1-0
_rotl64
qsort
api-ms-win-crt-time-l1-1-0
_localtime64_s
api-ms-win-crt-runtime-l1-1-0
_cexit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
__p___argv
_set_app_type
_configure_narrow_argv
_initialize_narrow_environment
abort
_get_initial_narrow_environment
_seh_filter_exe
_initterm
_endthreadex
_beginthreadex
_initterm_e
__p___argc
_exit
_register_thread_local_exe_atexit_callback
exit
_c_exit
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstol
_ultow_s
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
7.2MB
Virtual Size
7.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7.0MB
Virtual Size
7.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
62KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
206KB
Virtual Size
206KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=259, version=35207,
count=15, id=260, version=35207,
count=47, id=261, version=35207,
count=3, id=257, version=33140,
count=448, id=1, productName=Unmarked objects,
count=35, id=260, version=35217,
count=69, productName=Unmarked objects (old),
count=1, id=255, version=35217,
count=1, id=258, version=35217,
volt-installer.exe
- IMPHASH 46ce5c12b293febbeb513b196aa7f843
- SHA256 69f1ca991564395011ed56712271cfe8f57e2cf7c82cf186a1c45a6496da0a79
- MD5 75bdfc13b09dbf0600746edddc83353c
- SHA1 0f41b9b35a7abbaba867bb81230013dc326422f6
- SHA512 47aed221de2ad2cb4c928f230a981a3d9cd369bbfbb4319cc2c68c512871e4547a6d2dd6a6f384865a8a3bb16351a17b10981bd5b335acb1ceaa6217d134da01
- SSDEEP 196608:tpGo/ZpFCGuQk5WHREe7vwl535dds/T+IfTMLnKG3NvB2uKBCG2EUjHnUueA0:t0oRHYwR7Dod5P2T+GYL3NJ2XBL4HUuu
- TLSH T1C2C63373AE30C9EAEB4C3E738E544A56DA7D763744CC8D840615EABD705C1D82AFA8C1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13983
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW
ole32
CoCreateInstance
OleUninitialize
OleInitialize
IIDFromString
CoTaskMemFree
comctl32
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_Create
user32
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
CreatePopupMenu
AppendMenuW
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
IsWindowEnabled
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CharPrevW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
CharNextA
wsprintfA
DispatchMessageW
CreateWindowExW
PeekMessageW
GetSystemMetrics
gdi32
GetDeviceCaps
SetBkColor
SelectObject
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
kernel32
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
CreateProcessW
CreateDirectoryW
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
WriteFile
GetCurrentProcess
GetModuleFileNameW
GetLastError
GetFileSize
CreateFileW
GetTickCount
Sleep
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
MulDiv
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
ExitProcess
Name
.text
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=163, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/NSISdl.dll
- IMPHASH db80d5e142e716e818b7f4614dcade3c
- SHA256 ddf40229dd9d6b268902d8dea88c8a04aacf1af218dd29f6dcd35babc54ac08d
- MD5 8eabbe36e8b52e69322780d0f541fd19
- SHA1 e5fa3eca8d2035e4fa006b7123c348348e4e6de4
- SHA512 4189fabff409be4bc7a8e81be58fb18e32398e4ef4c01a70cf823d79e76f47c4681734808fd61db8728c73d2bcad890b09aa09d5a0f0b0c3ad581be1beaf9ce7
- SSDEEP 384:jrSQMCOUILnCaSPy/yhJzmGSMRWyOUKie:jrSQMCOp0yamMRWysie
- TLSH T17B623C16B62084F5DBB2167034D73B3E6BB28F6A1A2848C34BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9321
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
wsock32
WSAStartup
WSACleanup
send
WSAGetLastError
recv
select
__WSAFDIsSet
connect
shutdown
closesocket
socket
htons
inet_ntoa
ioctlsocket
gethostbyname
user32
CharPrevA
SetWindowLongW
RegisterWindowMessageW
CallWindowProcW
DestroyWindow
EnableWindow
SetDlgItemTextA
CreateWindowExW
GetWindowRect
GetClientRect
ShowWindow
IsWindowVisible
GetFocus
GetDlgItem
FindWindowExW
SetWindowTextA
SendMessageW
wsprintfA
GetWindowLongW
kernel32
MultiByteToWideChar
WideCharToMultiByte
lstrcpynW
lstrcpyW
CreateFileW
WriteFile
Sleep
DeleteFileW
GetTickCount
MulDiv
GlobalFree
GlobalAlloc
lstrcatA
lstrlenA
lstrcpynA
WaitForSingleObject
CloseHandle
lstrcmpiA
lstrcpyA
CreateThread
download
download_quiet
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=14, version=7299,
count=59, id=1, productName=Unmarked objects,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=48, version=9044,
count=5, id=49, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/StartMenu.dll
- IMPHASH 646971a3aef724d6f553f40ae84fe26b
- SHA256 fe330320459637d8dd2b5d84d07925c38ec264152ffd3b1760a4d44d76536caa
- MD5 b9b71990b37e04a56cadbcbfa694f30f
- SHA1 3b7627deb793446d6b12b7b94266cc592982a5c2
- SHA512 b4aa947aba471ce0ba37ab859391f6a157887c882c920a3081d482f63a83317ae75b428ebae226f835798517abb676114ee42bf13bd4c4291cebbb5e9658f2e5
- SSDEEP 96:VIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/x3lkCTcaqHCI:ShE+A0+sF6piUFkA1lncviI
- TLSH T1FFF1C776F3D20673F9AB427428632F231B2AF521576581A7890316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleW
lstrcatW
FindClose
FindNextFileW
lstrcmpW
MulDiv
GlobalFree
lstrcpynW
GlobalAlloc
lstrcmpiW
FindFirstFileW
lstrcpyW
user32
TranslateMessage
GetMessageW
IsDialogMessageW
DispatchMessageW
CallWindowProcW
GetWindowLongW
CheckDlgButton
ShowWindow
LoadIconW
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextW
SendMessageW
IsDlgButtonChecked
GetWindowTextW
DestroyWindow
GetDlgItem
CreateDialogParamW
SetWindowLongW
wsprintfW
PostMessageW
gdi32
GetTextMetricsW
SelectObject
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ole32
CoTaskMemFree
Init
Select
Show
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
296B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
578B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=45, id=1, productName=Unmarked objects,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/System.dll
- IMPHASH 509a34b3a68a773e0afb4259e68f9f82
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10879
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
867B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
662B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/modern-wizard.bmp
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/nsDialogs.dll
- IMPHASH 3b477381217c97b22146297f93df2a92
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7527
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrcpyW
GetFileAttributesW
lstrcmpiW
MulDiv
lstrlenW
HeapFree
GetProcessHeap
GetCurrentDirectoryW
HeapReAlloc
GlobalFree
lstrcpynW
GlobalAlloc
HeapAlloc
SetCurrentDirectoryW
user32
GetPropW
DestroyWindow
CallWindowProcW
SetCursor
LoadCursorW
RemovePropW
CharPrevW
GetWindowLongW
DrawTextW
GetWindowTextW
SetWindowLongW
GetDlgItem
GetSysColor
SetWindowPos
CreateDialogParamW
MapWindowPoints
GetWindowRect
SetPropW
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
MapDialogRect
GetClientRect
CharNextW
SendMessageW
DrawFocusRect
gdi32
SetTextColor
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
ole32
CoTaskMemFree
Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
638B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=56, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/nsis_tauri_utils.dll
- IMPHASH 2030931b38a854dde8cdd69245a8096a
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
nsis_tauri_utils.pdb
kernel32
GetCurrentProcess
GetLastError
GlobalFree
CloseHandle
TerminateProcess
ExitProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
GetCurrentProcessId
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
GlobalAlloc
lstrcpyW
advapi32
EqualSid
LookupPrivilegeValueW
CreateProcessWithTokenW
DuplicateTokenEx
OpenProcessToken
GetTokenInformation
AdjustTokenPrivileges
user32
GetShellWindow
GetWindowThreadProcessId
shell32
ShellExecuteW
DllMain
FindProcess
FindProcessCurrentUser
KillProcess
KillProcessCurrentUser
RunAsUser
SemverCompare
StrReplace
memcmp
memcpy
memset
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
384B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=27, id=1, productName=Unmarked objects,
count=13, productName=Unmarked objects (old),
count=1, id=256, version=35222,
count=1, id=258, version=35222,
lsp/.luaurc
- SHA256 a4f0cf2fe24eb73815a884211257322dc2bcad03506c6c02171b3b97fd367e6b
- MD5 e1698082286f891febf0ac7371d2d0e7
- SHA1 6c6d7c77361d7ed51de646f9a057dd5336c32bf6
- SHA512 87e6a44aca53943cb5886eb49aac67780e6db5fd05ad588d61f8d692df232090139364be8f588012e74f881caab98d70f097e0fb6d84d8ff94ec446fe5981fdf
- TLSH T1B8C08C01C88B09FD38D6C04EE8A5D152812C46EEA20C2E2EF2324229ABA983C4845FC4
- MD5 SHA1 SHA512 TLSH
lsp/en-us.json
- SHA256 1deaf275538c1cb05eddf3934bfb21758fa8a8bcf997ed24b610b354fe7b2aa8
- MD5 b752256eb2e8de6d4fa8075af7c61540
- SHA1 de9217777ef3c52aabb9c9e68397d955f36d7824
- SHA512 535ff877bf47c5e241344c5d3ae592f034c938b475cebb3ab6af7a249775cd45f80920c4858fcfa5f2206e73cab9da2976cb8894313106136f52d65eb0271cbc
- SSDEEP 49152:wcnn/G/6QasKN5yPkyC/T+V0g+8sH9em2Dl:q
- TLSH T13F66DD33D9901D5726B2574DF8B9435AF82802EF204D188EBABC732C6F6197B1516BCB
- MD5 SHA1 SHA512 SSDEEP TLSH
lsp/globalTypes.d.lua
- SHA256 844d0d3767c82140ae05327e2b92ac1f3604fc46d8356c8ab844512e2f8694f4
- MD5 8065d50eebb5b7162bbd601deaf5dd11
- SHA1 b0f4a81e1e8d52b8ebb1ed5bc26609bdb3bde652
- SHA512 c24c758855f353db0b69dd63b058388f4645795c696abfc687c78ba865d57127412ba976bce899d28bac135edb7b754aec9243db1ef6d667693290ed95499b4b
- SSDEEP 6144:6ENUApJt52uXnoQOeucwfTFCoLJpldStDMMyYmxBmz/+RxJ7MGicvvKFupgzgd+W:4uXnoQOeucwfcDMuzV+
- TLSH T1C105431DB608F1300D8F63F6AA7F8884E87592C4521850BCA1F8FB9A177F43D2656ADD
- MD5 SHA1 SHA512 SSDEEP TLSH
lsp/luau-lsp.exe
- IMPHASH b545748cffa18f37490244adc354cb32
- SHA256 43dc7a51985872f83cd2f644cabf251023158b432a7cdcc795ac1b36dab3462a
- MD5 e44b9ebe7211e3aa6ff3bab4f8c8451a
- SHA1 4d0406042cf46fb776eea8645635d21f8cc50308
- SHA512 ce57f9592ec2086a1ddad05d6e0edc4a13f243e47ccb12cab5bfe3939ce4565a8a360c55992afd3799af7bd50d992309d4ca565462bbfde6b60e10713a0a99c5
- SSDEEP 49152:NsY0bbZDDDDDD7H5c7G9or26czNvOgPQqWv9UHtS3XLZvdfEfPgp1LY078qWcHGy:Pifc7GXCn+361QjvQfyom/BOa
- TLSH T112565C3B629801FCE0BBC179CB5A9953D772300A0331AAFF05E145A66F57AF45E7A312
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
5155888
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetCommandLineW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
LocalFree
MultiByteToWideChar
WideCharToMultiByte
IsDebuggerPresent
VirtualProtect
GetCurrentThreadStackLimits
GetCurrentProcess
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSListHead
shell32
CommandLineToArgvW
msvcp140
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?setf@ios_base@std@@QEAAHHH@Z
?unsetf@ios_base@std@@QEAAXH@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
_Thrd_join
_Thrd_id
_Mtx_lock
_Mtx_unlock
_Cnd_wait
_Cnd_broadcast
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
??Bios_base@std@@QEBA_NXZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Strcoll
_Strxfrm
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
??7ios_base@std@@QEBA_NXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?fail@ios_base@std@@QEBA_NXZ
?xalloc@ios_base@std@@SAHXZ
?iword@ios_base@std@@QEAAAEAJH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Query_perf_counter
_Query_perf_frequency
?width@ios_base@std@@QEBA_JXZ
?setf@ios_base@std@@QEAAHH@Z
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?_Xbad_function_call@std@@YAXXZ
?uncaught_exception@std@@YA_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?width@ios_base@std@@QEAA_J_J@Z
vcruntime140
__current_exception_context
__current_exception
strchr
memset
memmove
__C_specific_handler
memchr
_CxxThrowException
__std_type_info_compare
memcpy
__std_exception_destroy
__std_exception_copy
__std_terminate
_purecall
memcmp
__RTDynamicCast
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_beginthreadex
abort
terminate
_set_app_type
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
__p___argc
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_errno
_initialize_narrow_environment
_configure_narrow_argv
_invoke_watson
exit
api-ms-win-crt-stdio-l1-1-0
ftell
fputc
_setmode
__stdio_common_vsprintf
_fileno
_wfopen
_wfsopen
fclose
__stdio_common_vfprintf
fflush
__p__commode
fread
fseek
__acrt_iob_func
fwrite
_getcwd
__stdio_common_vsprintf_s
_set_fmode
api-ms-win-crt-string-l1-1-0
isalnum
isdigit
strcpy
strncpy
strpbrk
isspace
wcscmp
islower
ispunct
iscntrl
isgraph
toupper
wcslen
strncmp
strcmp
strcspn
strncat
isalpha
tolower
isxdigit
strspn
isupper
strlen
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
_aligned_malloc
realloc
free
_set_new_mode
_aligned_free
api-ms-win-crt-convert-l1-1-0
strtol
strtof
strtoul
strtod
strtold
atoi
strtoull
strtoll
api-ms-win-crt-math-l1-1-0
_dclass
frexp
floor
tanh
tan
sqrt
modf
_dsign
_fdsign
sinh
sin
log2
ceilf
sqrtf
log10
__setusermatherr
floorf
pow
ldexp
round
acos
asin
atan
atan2
ceil
cos
cosh
exp
fmod
log
api-ms-win-crt-locale-l1-1-0
localeconv
_configthreadlocale
setlocale
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-time-l1-1-0
strftime
_localtime64_s
_gmtime64_s
_difftime64
_time64
clock
Name
.text
Size
5.1MB
Virtual Size
5.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
765KB
Virtual Size
765KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
46KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
165KB
Virtual Size
164KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35207,
count=10, id=260, version=35207,
count=35, id=261, version=35207,
count=6, id=257, version=35207,
count=5, id=257, version=33140,
count=303, id=1, productName=Unmarked objects,
count=225, id=261, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
tauri-app.exe
- IMPHASH ebcb8c98e2ed991a24d2bcaa73bc06a7
- SHA256 93ed1c16ff9061dac4be42ca76f3cb85c2bac792d820ebee716f768f5c69055b
- MD5 6ba3f2a5a6ac3d6668da88e5f42ccaea
- SHA1 5578be8c19ab97e047351fc0b6f08003db5f61ad
- SHA512 b97144ed445e03cee3268df2337e3a6d57897827670379a5ee526c1fea024602a2b346219147e0f0c543df92d4a790d5387c044386d30ded119d72d4708c07bf
- SSDEEP 393216:cVzFvL4xH2ihKKnbaOlYJ5URvLLjZWsE+:0pShKkaOlYJa1LLFWsE+
- TLSH T1F5E6AE03F39581E8C0AEC5B8C31AA637EB72B88D4521B29B5BE45F112F26F506F1D359
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
7418152
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
tauri_app.pdb
kernel32
FindNextFileW
SetWaitableTimer
GetProcessId
CreateWaitableTimerExW
GetSystemInfo
CreateSymbolicLinkW
MoveFileExW
UnregisterWaitEx
CopyFileExW
GetFinalPathNameByHandleW
DeleteFileW
GetTempPathW
WaitForMultipleObjects
RemoveDirectoryW
DuplicateHandle
GetFileAttributesW
CreateProcessW
FlushFileBuffers
GetTickCount
MapViewOfFile
CreateFileMappingW
GetSystemTime
GetSystemTimeAsFileTime
FreeLibrary
GetFileSize
LocalFree
UnlockFile
HeapDestroy
HeapCompact
DeleteFileA
CreateFileA
FlushViewOfFile
GetFileAttributesExW
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapSize
HeapValidate
UnmapViewOfFile
CreateMutexW
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
GetDiskFreeSpaceW
HeapCreate
AreFileApisANSI
GetWindowsDirectoryW
GetSystemDirectoryW
GetExitCodeProcess
TerminateProcess
CreateEventW
ExitProcess
CreateDirectoryW
GetSystemTimePreciseAsFileTime
GetFileInformationByHandleEx
GetProcAddress
GetFileInformationByHandle
LoadLibraryExA
FindClose
FindFirstFileExW
GetModuleHandleA
SetFileInformationByHandle
lstrlenW
SetFileTime
CreateThread
SetHandleInformation
SleepEx
HeapAlloc
WaitForSingleObject
ReleaseMutex
CreateMutexA
GetCurrentProcessId
GetCurrentProcess
WaitForSingleObjectEx
GetCurrentThreadId
CreateFileW
Sleep
GetFullPathNameW
SetLastError
IsProcessorFeaturePresent
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
InitializeCriticalSection
LoadLibraryA
WakeAllConditionVariable
SystemTimeToFileTime
GetCommandLineW
SleepConditionVariableSRW
LoadLibraryW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
QueryPerformanceFrequency
GetEnvironmentVariableW
GetCurrentDirectoryW
RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleW
FormatMessageW
CompareStringOrdinal
GetModuleFileNameW
AddVectoredExceptionHandler
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
IsDebuggerPresent
UnlockFileEx
LockFileEx
DeviceIoControl
CancelIo
WriteFileEx
ReadFileEx
WriteConsoleW
GetConsoleOutputCP
GetConsoleMode
GetStdHandle
CreatePipe
RtlPcToFileHeader
UnhandledExceptionFilter
CancelIoEx
SetUnhandledExceptionFilter
WriteFile
CreateIoCompletionPort
GetOverlappedResult
ReadFile
InitializeSListHead
RtlUnwindEx
PostQueuedCompletionStatus
GetQueuedCompletionStatusEx
SetFileCompletionNotificationModes
SetFilePointerEx
GetLastError
LoadLibraryExW
RaiseException
OutputDebugStringA
GetUserDefaultUILanguage
LCIDToLocaleName
OutputDebugStringW
CloseHandle
FormatMessageA
SwitchToThread
HeapReAlloc
HeapFree
GetProcessHeap
GetCurrentThread
SetThreadStackGuarantee
InitializeCriticalSectionAndSpinCount
bcrypt
BCryptGenRandom
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
WakeByAddressSingle
WaitOnAddress
ntdll
NtWriteFile
NtCancelIoFileEx
NtDeviceIoControlFile
NtReadFile
RtlNtStatusToDosError
NtOpenFile
NtCreateFile
NtCreateNamedPipeFile
RtlGetVersion
user32
SetCapture
CreateMenu
DestroyIcon
EnumDisplayMonitors
MonitorFromPoint
RegisterClassExW
EnableMenuItem
CheckMenuItem
DestroyMenu
RegisterRawInputDevices
MapVirtualKeyW
ReleaseCapture
RemoveMenu
CreateIcon
RedrawWindow
PostMessageW
DrawMenuBar
PostQuitMessage
SendMessageW
ShowWindow
GetMenuBarInfo
GetKeyState
ToUnicodeEx
GetClientRect
GetKeyboardLayout
MapVirtualKeyExW
GetKeyboardState
AppendMenuW
InsertMenuW
GetMonitorInfoW
ChangeDisplaySettingsExW
InvalidateRgn
GetAsyncKeyState
MonitorFromRect
TrackMouseEvent
SystemParametersInfoA
EnableWindow
IsWindowEnabled
CreateAcceleratorTableW
ScreenToClient
InvalidateRect
MonitorFromWindow
ClientToScreen
SendInput
DrawTextW
FillRect
GetWindowDC
OffsetRect
GetTouchInputInfo
MapWindowPoints
GetActiveWindow
GetMenuItemInfoW
DrawIconEx
ReleaseDC
GetDC
VkKeyScanW
SetMenuItemInfoW
DestroyAcceleratorTable
CloseTouchInputHandle
CreatePopupMenu
GetRawInputData
SetFocus
UpdateWindow
GetWindowRect
ValidateRect
GetUpdateRect
GetWindow
RegisterTouchWindow
SetMenu
GetParent
FindWindowExW
TranslateAcceleratorW
MsgWaitForMultipleObjectsEx
GetMessageW
EnumChildWindows
DispatchMessageA
GetMessageA
AdjustWindowRect
PostThreadMessageW
DispatchMessageW
TranslateMessage
DestroyWindow
SystemParametersInfoW
FlashWindowEx
LoadCursorW
SetCursor
IsIconic
IsWindow
CreateWindowExW
SetCursorPos
GetForegroundWindow
SetWindowTextW
IsWindowVisible
GetWindowTextW
GetWindowTextLengthW
SetParent
SetPropW
SetWindowLongPtrW
GetWindowLongPtrW
ShowCursor
ClipCursor
GetSystemMetrics
GetClipCursor
DefWindowProcW
SetWindowDisplayAffinity
GetWindowPlacement
SetWindowPlacement
PeekMessageW
AdjustWindowRectEx
GetMenu
GetWindowLongW
SetWindowPos
SetWindowLongW
GetSystemMenu
RegisterWindowMessageA
IsProcessDPIAware
TrackPopupMenu
SetForegroundWindow
GetCursorPos
SetWindowRgn
bcryptprimitives
ProcessPrng
crypt32
CertFreeCertificateChainEngine
CertCloseStore
CertGetCertificateChain
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertSetCertificateContextProperty
CertAddEncodedCertificateToStore
CertOpenStore
CertCreateCertificateChainEngine
CertFreeCertificateContext
oleaut32
SysFreeString
SysStringLen
GetErrorInfo
SetErrorInfo
ole32
CoInitialize
CoTaskMemAlloc
RevokeDragDrop
CoUninitialize
CoCreateInstance
OleInitialize
CoTaskMemFree
CoInitializeEx
RegisterDragDrop
CoCreateFreeThreadedMarshaler
shell32
DragQueryFileW
SHGetKnownFolderPath
ShellExecuteExW
ILCreateFromPathW
SHOpenFolderAndSelectItems
ILFree
SHCreateItemFromParsingName
DragFinish
ShellExecuteW
SHAppBarMessage
comctl32
TaskDialogIndirect
DefSubclassProc
RemoveWindowSubclass
SetWindowSubclass
gdi32
SetTextColor
BitBlt
SetBkMode
CreateRectRgn
CreateCompatibleDC
CreateDIBSection
SelectObject
DeleteDC
CreateSolidBrush
CombineRgn
DeleteObject
GetDeviceCaps
advapi32
RegCloseKey
RegDeleteTreeW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegEnumValueW
RegGetValueW
EventWriteTransfer
EventRegister
SystemFunction036
EventUnregister
RegCreateKeyExW
EventSetInformation
dwmapi
DwmSetWindowAttribute
DwmGetWindowAttribute
DwmEnableBlurBehindWindow
shlwapi
SHCreateMemStream
ws2_32
WSASend
shutdown
send
recv
getpeername
accept
freeaddrinfo
getaddrinfo
listen
WSACleanup
getsockname
setsockopt
bind
connect
ioctlsocket
WSASocketW
WSAIoctl
getsockopt
closesocket
WSAGetLastError
WSAStartup
api-ms-win-crt-math-l1-1-0
log
fabs
round
ceil
pow
__setusermatherr
trunc
floor
roundf
_dclass
api-ms-win-crt-string-l1-1-0
strncmp
wcscmp
strcpy_s
strspn
wcslen
strcspn
strcmp
strlen
wcsncmp
_wcsicmp
api-ms-win-crt-heap-l1-1-0
calloc
malloc
_msize
_callnewh
free
_set_new_mode
realloc
api-ms-win-crt-utility-l1-1-0
_rotl64
qsort
api-ms-win-crt-time-l1-1-0
_localtime64_s
api-ms-win-crt-runtime-l1-1-0
_cexit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
__p___argv
_set_app_type
_configure_narrow_argv
_initialize_narrow_environment
abort
_get_initial_narrow_environment
_seh_filter_exe
_initterm
_endthreadex
_beginthreadex
_initterm_e
__p___argc
_exit
_register_thread_local_exe_atexit_callback
exit
_c_exit
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstol
_ultow_s
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
7.2MB
Virtual Size
7.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7.0MB
Virtual Size
7.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
62KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
206KB
Virtual Size
206KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=259, version=35207,
count=15, id=260, version=35207,
count=47, id=261, version=35207,
count=3, id=257, version=33140,
count=448, id=1, productName=Unmarked objects,
count=35, id=260, version=35217,
count=69, productName=Unmarked objects (old),
count=1, id=255, version=35217,
count=1, id=258, version=35217,
volt.bin
- SHA256 f526f952692f3d2c1c26a03841ed1ba4e5d35ddf63ef2188c22748e3d9510965
- MD5 b3392d139b16e1835bfc2f483f509178
- SHA1 c89bb4678fc55a3a83bb5f221443c1df530e17b0
- SHA512 b1b44b7fd98cb2fa794f9349e1c9ec5a6b308e359ed59410c69dab43bd165508f8e63e0a69b0cc5578e901419fb343445a654a7b9e441389ac9819a694b9d92f
- SSDEEP 3145728:/xJwOcxt5ftKachtbrl3GNMGmD74x7Y+6Iy1dqf1+xhMGos:rwO2zKjV6mD7G4cOB
- TLSH T1B63833D1520EB0547BB30B85D5695E2CE70166A07F7223FCBB2E688690D0F2F99E6C1D
- MD5 SHA1 SHA512 SSDEEP TLSH
volt_universal_crack.js
- SHA256 390f8dc39b5b2ed9ddc2efce0b1ae15bf577293bd9d6973537c18ba120be79a9
- MD5 9a8d0961d877d37e7baf8a8e2c717f09
- SHA1 5a587838d32ef4e47fa09b95157fdb35d6be1117
- SHA512 02265c3af6bdbc25c259093a3fe2d38bdd571a7f440d9bac7fc790f8fb4593ad23b4cf3d5607e0952e703431eff0162feb33ce4153821fa7f679455a962ddd5e
- SSDEEP 192:UBSo5y3m7KMMBDevtgDDEQI9oud12Rbow6r:xoM3mwsFCDEQI9ouKRcwC
- TLSH T1B6E196D927F816B4D06B02E64F0B407675379A02359AF595B09D036B2F81FB8C1E2AFD
- MD5 SHA1 SHA512 SSDEEP TLSH