Your_Setup_Downloaded_Here[.]zip

Your_Setup_Downloaded_Here.zip

.zip

.local/.threat_dragon/.git/HEAD

.local/.threat_dragon/.git/config

.local/.threat_dragon/.git/description

.local/.threat_dragon/.git/index

.local/.threat_dragon/.git/packed-refs

.local/.threat_dragon/.gitattributes

.local/.threat_dragon/.gitignore

.local/.threat_dragon/.jshintignore

.local/.threat_dragon/.jshintrc

.local/.threat_dragon/.snyk

.local/.threat_dragon/.travis.yml

.local/.threat_dragon/LICENSE.txt

.local/.threat_dragon/README.md

.local/.threat_dragon/app/app.js

.js

.local/.threat_dragon/app/config.autoupdate.js

.js

.local/.threat_dragon/app/config.exceptionHandler.js

.js

.local/.threat_dragon/app/config.route.js

.js

.local/.threat_dragon/app/layout/index.js

.js

.local/.threat_dragon/app/layout/shell.html

.local/.threat_dragon/app/layout/shell.js

.js

.local/.threat_dragon/app/layout/update.html

.local/.threat_dragon/app/services/datacontext.js

.js

.local/.threat_dragon/app/services/datacontextdemo.js

.js

.local/.threat_dragon/app/services/electron.js

.js

.local/.threat_dragon/app/services/index.js

.js

.local/.threat_dragon/app/services/threatmodellocator.js

.js

.local/.threat_dragon/app/threatmodels/desktopreport.html

.local/.threat_dragon/app/threatmodels/desktopreport.js

.js

.local/.threat_dragon/app/threatmodels/index.js

.js

.local/.threat_dragon/app/welcome/index.js

.js

.local/.threat_dragon/app/welcome/welcome.html

.local/.threat_dragon/app/welcome/welcome.js

.js

.local/.threat_dragon/config/squirrel.js

.js

.local/.threat_dragon/content/app.css

.local/.threat_dragon/content/bootstrap-custom.css

.local/.threat_dragon/content/bootstrap-theme.css

.local/.threat_dragon/content/icons/icon.icns

.local/.threat_dragon/content/icons/icon.ico

.local/.threat_dragon/content/icons/png/1024x1024.gif

.gif

.local/.threat_dragon/content/icons/png/1024x1024.png

.png

.local/.threat_dragon/content/icons/png/128x128.png

.png

.local/.threat_dragon/content/icons/png/16x16.png

.png

.local/.threat_dragon/content/icons/png/24x24.png

.png

.local/.threat_dragon/content/icons/png/256x256.png

.png

.local/.threat_dragon/content/icons/png/32x32.png

.png

.local/.threat_dragon/content/icons/png/48x48.png

.png

.local/.threat_dragon/content/icons/png/512x512.png

.png

.local/.threat_dragon/content/icons/png/64x64.png

.png

.local/.threat_dragon/content/icons/png/96x96.png

.png

.local/.threat_dragon/content/icons/png/cupcakes-installing.gif

.gif

.local/.threat_dragon/content/icons/win/td.ico

.local/.threat_dragon/content/images/threatdragon.ico

.local/.threat_dragon/content/images/threatdragon_logo_image.svg

.local/.threat_dragon/content/images/thumbnail.jpg

.jpg

.local/.threat_dragon/content/threatdragon.css

.local/.threat_dragon/content/threatdragon.min.css

.local/.threat_dragon/content/ubuntu.css

.local/.threat_dragon/electron-builder.json

.local/.threat_dragon/fonts/4iCs6KVjbNBYlgoKfw72.woff2

.local/.threat_dragon/fonts/4iCv6KVjbNBYlgoCxCvjsGyN.woff2

.local/.threat_dragon/fonts/FontAwesome.otf

.local/.threat_dragon/fonts/fontawesome-webfont.eot

.local/.threat_dragon/fonts/fontawesome-webfont.svg

.xml

.local/.threat_dragon/fonts/fontawesome-webfont.ttf

.local/.threat_dragon/fonts/fontawesome-webfont.woff

.local/.threat_dragon/fonts/fontawesome-webfont.woff2

.local/.threat_dragon/fonts/glyphicons-halflings-regular.eot

.local/.threat_dragon/fonts/glyphicons-halflings-regular.svg

.xml

.local/.threat_dragon/fonts/glyphicons-halflings-regular.ttf

.local/.threat_dragon/fonts/glyphicons-halflings-regular.woff

.local/.threat_dragon/fonts/glyphicons-halflings-regular.woff2

.local/.threat_dragon/index.html

.html

.local/.threat_dragon/installer-lin.js

.js

.local/.threat_dragon/installer-osx.js

.js

.local/.threat_dragon/installer-win.js

.js

.local/.threat_dragon/karma.conf.js

.js

.local/.threat_dragon/main.js

.js

.local/.threat_dragon/package-lock.json

.local/.threat_dragon/package.json

.local/.threat_dragon/public/content/images/thumbnail.jpg

.jpg

.local/.threat_dragon/screenshots/diagram.PNG

.png

.local/.threat_dragon/screenshots/threat.PNG

.png

.local/.threat_dragon/screenshots/welcome.PNG

.png

.local/.threat_dragon/tests/specs/datacontext_spec.js

.js

.local/.threat_dragon/tests/specs/datacontextdemo_spec.js

.js

.local/.threat_dragon/tests/specs/desktopreport_spec.js

.js

.local/.threat_dragon/tests/specs/shell_spec.js

.js

.local/.threat_dragon/tests/specs/support/jasmin.json

.local/.threat_dragon/tests/specs/test.js

.js

.local/.threat_dragon/tests/specs/threatmodellocator_spec.js

.js

.local/.threat_dragon/tests/specs/welcome_spec.js

.js

.local/bin/normalizer

.sh linux

.local/certifi-2021.5.30.dist-info/INSTALLER

.local/certifi-2021.5.30.dist-info/LICENSE

.local/certifi-2021.5.30.dist-info/METADATA

.local/certifi-2021.5.30.dist-info/RECORD

.local/certifi-2021.5.30.dist-info/WHEEL

.local/certifi-2021.5.30.dist-info/top_level.txt

.local/certifi/__init__.py

.local/certifi/__main__.py

.local/certifi/__pycache__/__init__.cpython-38.pyc

.local/certifi/__pycache__/__main__.cpython-38.pyc

.local/certifi/__pycache__/core.cpython-38.pyc

.local/certifi/cacert.pem

.local/certifi/core.py

.local/charset_normalizer-2.0.3.dist-info/INSTALLER

.local/charset_normalizer-2.0.3.dist-info/LICENSE

.local/charset_normalizer-2.0.3.dist-info/METADATA

.local/charset_normalizer-2.0.3.dist-info/RECORD

.local/charset_normalizer-2.0.3.dist-info/WHEEL

.local/charset_normalizer-2.0.3.dist-info/entry_points.txt

.local/charset_normalizer-2.0.3.dist-info/top_level.txt

.local/charset_normalizer/__init__.py

.local/charset_normalizer/__pycache__/__init__.cpython-38.pyc

.local/charset_normalizer/__pycache__/api.cpython-38.pyc

.local/charset_normalizer/__pycache__/cd.cpython-38.pyc

.local/charset_normalizer/__pycache__/constant.cpython-38.pyc

.local/charset_normalizer/__pycache__/legacy.cpython-38.pyc

.local/charset_normalizer/__pycache__/md.cpython-38.pyc

.local/charset_normalizer/__pycache__/models.cpython-38.pyc

.local/charset_normalizer/__pycache__/utils.cpython-38.pyc

.local/charset_normalizer/__pycache__/version.cpython-38.pyc

.local/charset_normalizer/api.py

.local/charset_normalizer/assets/__init__.py

.local/charset_normalizer/assets/__pycache__/__init__.cpython-38.pyc

.local/charset_normalizer/cd.py

.local/charset_normalizer/cli/__pycache__/__init__.cpython-38.pyc

.local/charset_normalizer/cli/__pycache__/normalizer.cpython-38.pyc

.local/charset_normalizer/cli/normalizer.py

.local/charset_normalizer/constant.py

.local/charset_normalizer/legacy.py

.local/charset_normalizer/md.py

.local/charset_normalizer/models.py

.local/charset_normalizer/utils.py

.local/charset_normalizer/version.py

.local/idna-3.2.dist-info/INSTALLER

.local/idna-3.2.dist-info/LICENSE.md

.local/idna-3.2.dist-info/METADATA

.local/idna-3.2.dist-info/RECORD

.local/idna-3.2.dist-info/WHEEL

.local/idna-3.2.dist-info/top_level.txt

.local/idna/__init__.py

.local/idna/__pycache__/__init__.cpython-38.pyc

.local/idna/__pycache__/codec.cpython-38.pyc

.local/idna/__pycache__/compat.cpython-38.pyc

.local/idna/__pycache__/core.cpython-38.pyc

.local/idna/__pycache__/idnadata.cpython-38.pyc

.local/idna/__pycache__/intranges.cpython-38.pyc

.local/idna/__pycache__/package_data.cpython-38.pyc

.local/idna/__pycache__/uts46data.cpython-38.pyc

.local/idna/codec.py

.local/idna/compat.py

.local/idna/core.py

.local/idna/idnadata.py

.local/idna/intranges.py

.local/idna/package_data.py

.local/idna/uts46data.py

.local/requests-2.26.0.dist-info/INSTALLER

.local/requests-2.26.0.dist-info/LICENSE

.local/requests-2.26.0.dist-info/METADATA

.local/requests-2.26.0.dist-info/RECORD

.local/requests-2.26.0.dist-info/WHEEL

.local/requests-2.26.0.dist-info/top_level.txt

.local/requests/__init__.py

.local/requests/__pycache__/__init__.cpython-38.pyc

.local/requests/__pycache__/__version__.cpython-38.pyc

.local/requests/__pycache__/_internal_utils.cpython-38.pyc

.local/requests/__pycache__/adapters.cpython-38.pyc

.local/requests/__pycache__/api.cpython-38.pyc

.local/requests/__pycache__/auth.cpython-38.pyc

.local/requests/__pycache__/certs.cpython-38.pyc

.local/requests/__pycache__/compat.cpython-38.pyc

.local/requests/__pycache__/cookies.cpython-38.pyc

.local/requests/__pycache__/exceptions.cpython-38.pyc

.local/requests/__pycache__/help.cpython-38.pyc

.local/requests/__pycache__/hooks.cpython-38.pyc

.local/requests/__pycache__/models.cpython-38.pyc

.local/requests/__pycache__/packages.cpython-38.pyc

.local/requests/__pycache__/sessions.cpython-38.pyc

.local/requests/__pycache__/status_codes.cpython-38.pyc

.local/requests/__pycache__/structures.cpython-38.pyc

.local/requests/__pycache__/utils.cpython-38.pyc

.local/requests/__version__.py

.local/requests/_internal_utils.py

.local/requests/adapters.py

.local/requests/api.py

.local/requests/auth.py

.local/requests/certs.py

.py .sh linux

.local/requests/compat.py

.local/requests/cookies.py

.local/requests/exceptions.py

.local/requests/help.py

.local/requests/hooks.py

.local/requests/models.py

.local/requests/packages.py

.local/requests/sessions.py

.local/requests/status_codes.py

.local/requests/structures.py

.local/requests/utils.py

.local/urllib3-1.26.6.dist-info/INSTALLER

.local/urllib3-1.26.6.dist-info/LICENSE.txt

.local/urllib3-1.26.6.dist-info/METADATA

.local/urllib3-1.26.6.dist-info/RECORD

.local/urllib3-1.26.6.dist-info/WHEEL

.local/urllib3-1.26.6.dist-info/top_level.txt

.local/urllib3/__init__.py

.local/urllib3/__pycache__/__init__.cpython-38.pyc

.local/urllib3/__pycache__/_collections.cpython-38.pyc

.local/urllib3/__pycache__/_version.cpython-38.pyc

.local/urllib3/__pycache__/connection.cpython-38.pyc

.local/urllib3/__pycache__/connectionpool.cpython-38.pyc

.local/urllib3/__pycache__/exceptions.cpython-38.pyc

.local/urllib3/__pycache__/fields.cpython-38.pyc

.local/urllib3/__pycache__/filepost.cpython-38.pyc

.local/urllib3/__pycache__/poolmanager.cpython-38.pyc

.local/urllib3/__pycache__/request.cpython-38.pyc

.local/urllib3/__pycache__/response.cpython-38.pyc

.local/urllib3/_collections.py

.local/urllib3/_version.py

.local/urllib3/connection.py

.local/urllib3/connectionpool.py

.py .js

.local/urllib3/contrib/__pycache__/__init__.cpython-38.pyc

.local/urllib3/contrib/__pycache__/_appengine_environ.cpython-38.pyc

.local/urllib3/contrib/__pycache__/appengine.cpython-38.pyc

.local/urllib3/contrib/__pycache__/ntlmpool.cpython-38.pyc

.local/urllib3/contrib/__pycache__/pyopenssl.cpython-38.pyc

.js

.local/urllib3/contrib/__pycache__/securetransport.cpython-38.pyc

.js

.local/urllib3/contrib/__pycache__/socks.cpython-38.pyc

.local/urllib3/contrib/_appengine_environ.py

.local/urllib3/contrib/_securetransport/__pycache__/__init__.cpython-38.pyc

.local/urllib3/contrib/_securetransport/__pycache__/bindings.cpython-38.pyc

.local/urllib3/contrib/_securetransport/__pycache__/low_level.cpython-38.pyc

.local/urllib3/contrib/_securetransport/bindings.py

.local/urllib3/contrib/_securetransport/low_level.py

.local/urllib3/contrib/appengine.py

.local/urllib3/contrib/ntlmpool.py

.local/urllib3/contrib/pyopenssl.py

.py .js

.local/urllib3/contrib/securetransport.py

.py .js

.local/urllib3/contrib/socks.py

.local/urllib3/exceptions.py

.local/urllib3/fields.py

.local/urllib3/filepost.py

.local/urllib3/packages/__init__.py

.local/urllib3/packages/__pycache__/__init__.cpython-38.pyc

.local/urllib3/packages/__pycache__/six.cpython-38.pyc

.local/urllib3/packages/backports/__pycache__/__init__.cpython-38.pyc

.local/urllib3/packages/backports/__pycache__/makefile.cpython-38.pyc

.local/urllib3/packages/backports/makefile.py

.local/urllib3/packages/six.py

.local/urllib3/packages/ssl_match_hostname/__init__.py

.local/urllib3/packages/ssl_match_hostname/__pycache__/__init__.cpython-38.pyc

.local/urllib3/packages/ssl_match_hostname/__pycache__/_implementation.cpython-38.pyc

.local/urllib3/packages/ssl_match_hostname/_implementation.py

.local/urllib3/poolmanager.py

.local/urllib3/request.py

.local/urllib3/response.py

.local/urllib3/util/__init__.py

.local/urllib3/util/__pycache__/__init__.cpython-38.pyc

.local/urllib3/util/__pycache__/connection.cpython-38.pyc

.local/urllib3/util/__pycache__/proxy.cpython-38.pyc

.local/urllib3/util/__pycache__/queue.cpython-38.pyc

.local/urllib3/util/__pycache__/request.cpython-38.pyc

.local/urllib3/util/__pycache__/response.cpython-38.pyc

.local/urllib3/util/__pycache__/retry.cpython-38.pyc

.local/urllib3/util/__pycache__/ssl_.cpython-38.pyc

.local/urllib3/util/__pycache__/ssltransport.cpython-38.pyc

.js

.local/urllib3/util/__pycache__/timeout.cpython-38.pyc

.local/urllib3/util/__pycache__/url.cpython-38.pyc

.local/urllib3/util/__pycache__/wait.cpython-38.pyc

.local/urllib3/util/connection.py

.py .js

.local/urllib3/util/proxy.py

.local/urllib3/util/queue.py

.local/urllib3/util/request.py

.local/urllib3/util/response.py

.local/urllib3/util/retry.py

.local/urllib3/util/ssl_.py

.local/urllib3/util/ssltransport.py

.py .js

.local/urllib3/util/timeout.py

.local/urllib3/util/url.py

.local/urllib3/util/wait.py

F0ntS/84sys.fon

F0ntS/8514sys.fon

F0ntS/DL/Cr0atian.ini

F0ntS/DL/Dani.ini

F0ntS/DL/English.ini

F0ntS/DL/Hebrew.ini

F0ntS/DL/Hungarian.ini

.ps1

F0ntS/DL/Ind0nesian.ini

F0ntS/DL/Japanese.ini

F0ntS/DL/K0rean.ini

.ps1

F0ntS/DL/Kazakh.ini

F0ntS/DL/Kurdish.ini

F0ntS/DL/N0rwegian.ini

F0ntS/DL/SimpChinese.ini

F0ntS/DL/Sinhala.ini

F0ntS/DL/Sl0vak.ini

F0ntS/DL/Swedi.ini

F0ntS/DL/Thai.ini

F0ntS/DL/TradChinese.ini

F0ntS/DL/Ukrainian.ini

F0ntS/DL/UyghurLatin.ini

F0ntS/DL/Uzbek.ini

F0ntS/DL/Vietnamese.ini

F0ntS/DL/Winzip.exe

.exe windows x64

629fae0a56e3262e208711dda6ae6b1d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Signer

Actual PE Digest

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

01/03/2019, 08:23
Valid: true

Chain 1

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Signer

Actual PE Digest

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

01/03/2019, 08:23
Valid: true

Chain 1

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLastError

SetLastError

GetCurrentProcess

DeviceIoControl

SetFileTime

CloseHandle

CreateDirectoryW

RemoveDirectoryW

CreateFileW

DeleteFileW

CreateHardLinkW

GetShortPathNameW

GetLongPathNameW

MoveFileW

GetFileType

GetStdHandle

WriteFile

ReadFile

FlushFileBuffers

SetEndOfFile

SetFilePointer

SetFileAttributesW

GetFileAttributesW

FindClose

FindFirstFileW

FindNextFileW

GetVersionExW

GetCurrentDirectoryW

GetFullPathNameW

FoldStringW

GetModuleFileNameW

GetModuleHandleW

FindResourceW

FreeLibrary

GetProcAddress

GetCurrentProcessId

ExitProcess

SetThreadExecutionState

Sleep

LoadLibraryW

GetSystemDirectoryW

CompareStringW

AllocConsole

FreeConsole

AttachConsole

WriteConsoleW

GetProcessAffinityMask

CreateThread

SetThreadPriority

InitializeCriticalSection

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

SetEvent

ResetEvent

ReleaseSemaphore

WaitForSingleObject

CreateEventW

CreateSemaphoreW

GetSystemTime

SystemTimeToTzSpecificLocalTime

TzSpecificLocalTimeToSystemTime

SystemTimeToFileTime

FileTimeToLocalFileTime

LocalFileTimeToFileTime

FileTimeToSystemTime

GetCPInfo

IsDBCSLeadByte

MultiByteToWideChar

WideCharToMultiByte

GlobalAlloc

GetTickCount

LockResource

GlobalLock

GlobalUnlock

GlobalFree

LoadResource

SizeofResource

SetCurrentDirectoryW

GetExitCodeProcess

GetLocalTime

MapViewOfFile

UnmapViewOfFile

CreateFileMappingW

OpenFileMappingW

GetCommandLineW

SetEnvironmentVariableW

ExpandEnvironmentStringsW

GetTempPathW

MoveFileExW

GetLocaleInfoW

GetTimeFormatW

GetDateFormatW

GetNumberFormatW

SetFilePointerEx

GetConsoleMode

GetConsoleCP

HeapSize

SetStdHandle

GetProcessHeap

FreeEnvironmentStringsW

RaiseException

GetSystemInfo

VirtualProtect

VirtualQuery

LoadLibraryExA

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

IsDebuggerPresent

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetStartupInfoW

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentThreadId

GetSystemTimeAsFileTime

InitializeSListHead

RtlPcToFileHeader

EncodePointer

RtlUnwindEx

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

LoadLibraryExW

QueryPerformanceFrequency

TerminateProcess

GetModuleHandleExW

GetModuleFileNameA

GetACP

HeapFree

HeapAlloc

HeapReAlloc

GetStringTypeW

LCMapStringW

FindFirstFileExA

FindNextFileA

IsValidCodePage

GetOEMCP

GetCommandLineA

GetEnvironmentStringsW

gdiplus

GdiplusShutdown

GdiplusStartup

GdipCreateHBITMAPFromBitmap

GdipCreateBitmapFromStream

GdipDisposeImage

GdipCloneImage

GdipFree

GdipAlloc

Sections

.text
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

F0ntS/LangZ/Cr0atian.ini

F0ntS/LangZ/Dani.ini

F0ntS/LangZ/English.ini

F0ntS/LangZ/Hebrew.ini

F0ntS/LangZ/Hungarian.ini

.ps1

F0ntS/LangZ/Ind0nesian.ini

F0ntS/LangZ/Japanese.ini

F0ntS/LangZ/K0rean.ini

.ps1

F0ntS/LangZ/Kazakh.ini

F0ntS/LangZ/Kurdish.ini

F0ntS/LangZ/N0rwegian.ini

F0ntS/LangZ/SimpChinese.ini

F0ntS/LangZ/Sinhala.ini

F0ntS/LangZ/Sl0vak.ini

F0ntS/LangZ/Swedi.ini

F0ntS/LangZ/Thai.ini

F0ntS/LangZ/TradChinese.ini

F0ntS/LangZ/Ukrainian.ini

F0ntS/LangZ/UyghurLatin.ini

F0ntS/LangZ/Uzbek.ini

F0ntS/LangZ/Vietnamese.ini

F0ntS/LangZ/Winzip.exe

.exe windows x64

629fae0a56e3262e208711dda6ae6b1d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Signer

Actual PE Digest

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

01/03/2019, 08:23
Valid: true

Chain 1

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Signer

Actual PE Digest

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

01/03/2019, 08:23
Valid: true

Chain 1

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLastError

SetLastError

GetCurrentProcess

DeviceIoControl

SetFileTime

CloseHandle

CreateDirectoryW

RemoveDirectoryW

CreateFileW

DeleteFileW

CreateHardLinkW

GetShortPathNameW

GetLongPathNameW

MoveFileW

GetFileType

GetStdHandle

WriteFile

ReadFile

FlushFileBuffers

SetEndOfFile

SetFilePointer

SetFileAttributesW

GetFileAttributesW

FindClose

FindFirstFileW

FindNextFileW

GetVersionExW

GetCurrentDirectoryW

GetFullPathNameW

FoldStringW

GetModuleFileNameW

GetModuleHandleW

FindResourceW

FreeLibrary

GetProcAddress

GetCurrentProcessId

ExitProcess

SetThreadExecutionState

Sleep

LoadLibraryW

GetSystemDirectoryW

CompareStringW

AllocConsole

FreeConsole

AttachConsole

WriteConsoleW

GetProcessAffinityMask

CreateThread

SetThreadPriority

InitializeCriticalSection

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

SetEvent

ResetEvent

ReleaseSemaphore

WaitForSingleObject

CreateEventW

CreateSemaphoreW

GetSystemTime

SystemTimeToTzSpecificLocalTime

TzSpecificLocalTimeToSystemTime

SystemTimeToFileTime

FileTimeToLocalFileTime

LocalFileTimeToFileTime

FileTimeToSystemTime

GetCPInfo

IsDBCSLeadByte

MultiByteToWideChar

WideCharToMultiByte

GlobalAlloc

GetTickCount

LockResource

GlobalLock

GlobalUnlock

GlobalFree

LoadResource

SizeofResource

SetCurrentDirectoryW

GetExitCodeProcess

GetLocalTime

MapViewOfFile

UnmapViewOfFile

CreateFileMappingW

OpenFileMappingW

GetCommandLineW

SetEnvironmentVariableW

ExpandEnvironmentStringsW

GetTempPathW

MoveFileExW

GetLocaleInfoW

GetTimeFormatW

GetDateFormatW

GetNumberFormatW

SetFilePointerEx

GetConsoleMode

GetConsoleCP

HeapSize

SetStdHandle

GetProcessHeap

FreeEnvironmentStringsW

RaiseException

GetSystemInfo

VirtualProtect

VirtualQuery

LoadLibraryExA

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

IsDebuggerPresent

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetStartupInfoW

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentThreadId

GetSystemTimeAsFileTime

InitializeSListHead

RtlPcToFileHeader

EncodePointer

RtlUnwindEx

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

LoadLibraryExW

QueryPerformanceFrequency

TerminateProcess

GetModuleHandleExW

GetModuleFileNameA

GetACP

HeapFree

HeapAlloc

HeapReAlloc

GetStringTypeW

LCMapStringW

FindFirstFileExA

FindNextFileA

IsValidCodePage

GetOEMCP

GetCommandLineA

GetEnvironmentStringsW

gdiplus

GdiplusShutdown

GdiplusStartup

GdipCreateHBITMAPFromBitmap

GdipCreateBitmapFromStream

GdipDisposeImage

GdipCloneImage

GdipFree

GdipAlloc

Sections

.text
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

F0ntS/Nita/Cr0atian.ini

F0ntS/Nita/Dani.ini

F0ntS/Nita/English.ini

F0ntS/Nita/Hebrew.ini

F0ntS/Nita/Hungarian.ini

.ps1

F0ntS/Nita/Ind0nesian.ini

F0ntS/Nita/Japanese.ini

F0ntS/Nita/K0rean.ini

.ps1

F0ntS/Nita/Kazakh.ini

F0ntS/Nita/Kurdish.ini

F0ntS/Nita/N0rwegian.ini

F0ntS/Nita/SimpChinese.ini

F0ntS/Nita/Sinhala.ini

F0ntS/Nita/Sl0vak.ini

F0ntS/Nita/Swedi.ini

F0ntS/Nita/Thai.ini

F0ntS/Nita/TradChinese.ini

F0ntS/Nita/Ukrainian.ini

F0ntS/Nita/UyghurLatin.ini

F0ntS/Nita/Uzbek.ini

F0ntS/Nita/Vietnamese.ini

F0ntS/Nita/Winzip.exe

.exe windows x64

629fae0a56e3262e208711dda6ae6b1d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Signer

Actual PE Digest

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

01/03/2019, 08:23
Valid: true

Chain 1

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Signer

Actual PE Digest

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

01/03/2019, 08:23
Valid: true

Chain 1

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLastError

SetLastError

GetCurrentProcess

DeviceIoControl

SetFileTime

CloseHandle

CreateDirectoryW

RemoveDirectoryW

CreateFileW

DeleteFileW

CreateHardLinkW

GetShortPathNameW

GetLongPathNameW

MoveFileW

GetFileType

GetStdHandle

WriteFile

ReadFile

FlushFileBuffers

SetEndOfFile

SetFilePointer

SetFileAttributesW

GetFileAttributesW

FindClose

FindFirstFileW

FindNextFileW

GetVersionExW

GetCurrentDirectoryW

GetFullPathNameW

FoldStringW

GetModuleFileNameW

GetModuleHandleW

FindResourceW

FreeLibrary

GetProcAddress

GetCurrentProcessId

ExitProcess

SetThreadExecutionState

Sleep

LoadLibraryW

GetSystemDirectoryW

CompareStringW

AllocConsole

FreeConsole

AttachConsole

WriteConsoleW

GetProcessAffinityMask

CreateThread

SetThreadPriority

InitializeCriticalSection

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

SetEvent

ResetEvent

ReleaseSemaphore

WaitForSingleObject

CreateEventW

CreateSemaphoreW

GetSystemTime

SystemTimeToTzSpecificLocalTime

TzSpecificLocalTimeToSystemTime

SystemTimeToFileTime

FileTimeToLocalFileTime

LocalFileTimeToFileTime

FileTimeToSystemTime

GetCPInfo

IsDBCSLeadByte

MultiByteToWideChar

WideCharToMultiByte

GlobalAlloc

GetTickCount

LockResource

GlobalLock

GlobalUnlock

GlobalFree

LoadResource

SizeofResource

SetCurrentDirectoryW

GetExitCodeProcess

GetLocalTime

MapViewOfFile

UnmapViewOfFile

CreateFileMappingW

OpenFileMappingW

GetCommandLineW

SetEnvironmentVariableW

ExpandEnvironmentStringsW

GetTempPathW

MoveFileExW

GetLocaleInfoW

GetTimeFormatW

GetDateFormatW

GetNumberFormatW

SetFilePointerEx

GetConsoleMode

GetConsoleCP

HeapSize

SetStdHandle

GetProcessHeap

FreeEnvironmentStringsW

RaiseException

GetSystemInfo

VirtualProtect

VirtualQuery

LoadLibraryExA

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

IsDebuggerPresent

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetStartupInfoW

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentThreadId

GetSystemTimeAsFileTime

InitializeSListHead

RtlPcToFileHeader

EncodePointer

RtlUnwindEx

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

LoadLibraryExW

QueryPerformanceFrequency

TerminateProcess

GetModuleHandleExW

GetModuleFileNameA

GetACP

HeapFree

HeapAlloc

HeapReAlloc

GetStringTypeW

LCMapStringW

FindFirstFileExA

FindNextFileA

IsValidCodePage

GetOEMCP

GetCommandLineA

GetEnvironmentStringsW

gdiplus

GdiplusShutdown

GdiplusStartup

GdipCreateHBITMAPFromBitmap

GdipCreateBitmapFromStream

GdipDisposeImage

GdipCloneImage

GdipFree

GdipAlloc

Sections

.text
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

F0ntS/Rupo/Cr0atian.ini

F0ntS/Rupo/Dani.ini

F0ntS/Rupo/English.ini

F0ntS/Rupo/Hebrew.ini

F0ntS/Rupo/Hungarian.ini

.ps1

F0ntS/Rupo/Ind0nesian.ini

F0ntS/Rupo/Japanese.ini

F0ntS/Rupo/K0rean.ini

.ps1

F0ntS/Rupo/Kazakh.ini

F0ntS/Rupo/Kurdish.ini

F0ntS/Rupo/N0rwegian.ini

F0ntS/Rupo/SimpChinese.ini

F0ntS/Rupo/Sinhala.ini

F0ntS/Rupo/Sl0vak.ini

F0ntS/Rupo/Swedi.ini

F0ntS/Rupo/Thai.ini

F0ntS/Rupo/TradChinese.ini

F0ntS/Rupo/Ukrainian.ini

F0ntS/Rupo/UyghurLatin.ini

F0ntS/Rupo/Uzbek.ini

F0ntS/Rupo/Vietnamese.ini

F0ntS/Rupo/Winzip.exe

.exe windows x64

629fae0a56e3262e208711dda6ae6b1d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Signer

Actual PE Digest

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

01/03/2019, 08:23
Valid: true

Chain 1

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Signer

Actual PE Digest

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

01/03/2019, 08:23
Valid: true

Chain 1

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLastError

SetLastError

GetCurrentProcess

DeviceIoControl

SetFileTime

CloseHandle

CreateDirectoryW

RemoveDirectoryW

CreateFileW

DeleteFileW

CreateHardLinkW

GetShortPathNameW

GetLongPathNameW

MoveFileW

GetFileType

GetStdHandle

WriteFile

ReadFile

FlushFileBuffers

SetEndOfFile

SetFilePointer

SetFileAttributesW

GetFileAttributesW

FindClose

FindFirstFileW

FindNextFileW

GetVersionExW

GetCurrentDirectoryW

GetFullPathNameW

FoldStringW

GetModuleFileNameW

GetModuleHandleW

FindResourceW

FreeLibrary

GetProcAddress

GetCurrentProcessId

ExitProcess

SetThreadExecutionState

Sleep

LoadLibraryW

GetSystemDirectoryW

CompareStringW

AllocConsole

FreeConsole

AttachConsole

WriteConsoleW

GetProcessAffinityMask

CreateThread

SetThreadPriority

InitializeCriticalSection

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

SetEvent

ResetEvent

ReleaseSemaphore

WaitForSingleObject

CreateEventW

CreateSemaphoreW

GetSystemTime

SystemTimeToTzSpecificLocalTime

TzSpecificLocalTimeToSystemTime

SystemTimeToFileTime

FileTimeToLocalFileTime

LocalFileTimeToFileTime

FileTimeToSystemTime

GetCPInfo

IsDBCSLeadByte

MultiByteToWideChar

WideCharToMultiByte

GlobalAlloc

GetTickCount

LockResource

GlobalLock

GlobalUnlock

GlobalFree

LoadResource

SizeofResource

SetCurrentDirectoryW

GetExitCodeProcess

GetLocalTime

MapViewOfFile

UnmapViewOfFile

CreateFileMappingW

OpenFileMappingW

GetCommandLineW

SetEnvironmentVariableW

ExpandEnvironmentStringsW

GetTempPathW

MoveFileExW

GetLocaleInfoW

GetTimeFormatW

GetDateFormatW

GetNumberFormatW

SetFilePointerEx

GetConsoleMode

GetConsoleCP

HeapSize

SetStdHandle

GetProcessHeap

FreeEnvironmentStringsW

RaiseException

GetSystemInfo

VirtualProtect

VirtualQuery

LoadLibraryExA

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

IsDebuggerPresent

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetStartupInfoW

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentThreadId

GetSystemTimeAsFileTime

InitializeSListHead

RtlPcToFileHeader

EncodePointer

RtlUnwindEx

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

LoadLibraryExW

QueryPerformanceFrequency

TerminateProcess

GetModuleHandleExW

GetModuleFileNameA

GetACP

HeapFree

HeapAlloc

HeapReAlloc

GetStringTypeW

LCMapStringW

FindFirstFileExA

FindNextFileA

IsValidCodePage

GetOEMCP

GetCommandLineA

GetEnvironmentStringsW

gdiplus

GdiplusShutdown

GdiplusStartup

GdipCreateHBITMAPFromBitmap

GdipCreateBitmapFromStream

GdipDisposeImage

GdipCloneImage

GdipFree

GdipAlloc

Sections

.text
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

F0ntS/Tire/Cr0atian.ini

F0ntS/Tire/Dani.ini

F0ntS/Tire/English.ini

F0ntS/Tire/Hebrew.ini

F0ntS/Tire/Hungarian.ini

.ps1

F0ntS/Tire/Ind0nesian.ini

F0ntS/Tire/Japanese.ini

F0ntS/Tire/K0rean.ini

.ps1

F0ntS/Tire/Kazakh.ini

F0ntS/Tire/Kurdish.ini

F0ntS/Tire/N0rwegian.ini

F0ntS/Tire/SimpChinese.ini

F0ntS/Tire/Sinhala.ini

F0ntS/Tire/Sl0vak.ini

F0ntS/Tire/Swedi.ini

F0ntS/Tire/Thai.ini

F0ntS/Tire/TradChinese.ini

F0ntS/Tire/Ukrainian.ini

F0ntS/Tire/UyghurLatin.ini

F0ntS/Tire/Uzbek.ini

F0ntS/Tire/Vietnamese.ini

F0ntS/Tire/Winzip.exe

.exe windows x64

629fae0a56e3262e208711dda6ae6b1d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Signer

Actual PE Digest

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

01/03/2019, 08:23
Valid: true

Chain 1

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Signer

Actual PE Digest

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

01/03/2019, 08:23
Valid: true

Chain 1

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLastError

SetLastError

GetCurrentProcess

DeviceIoControl

SetFileTime

CloseHandle

CreateDirectoryW

RemoveDirectoryW

CreateFileW

DeleteFileW

CreateHardLinkW

GetShortPathNameW

GetLongPathNameW

MoveFileW

GetFileType

GetStdHandle

WriteFile

ReadFile

FlushFileBuffers

SetEndOfFile

SetFilePointer

SetFileAttributesW

GetFileAttributesW

FindClose

FindFirstFileW

FindNextFileW

GetVersionExW

GetCurrentDirectoryW

GetFullPathNameW

FoldStringW

GetModuleFileNameW

GetModuleHandleW

FindResourceW

FreeLibrary

GetProcAddress

GetCurrentProcessId

ExitProcess

SetThreadExecutionState

Sleep

LoadLibraryW

GetSystemDirectoryW

CompareStringW

AllocConsole

FreeConsole

AttachConsole

WriteConsoleW

GetProcessAffinityMask

CreateThread

SetThreadPriority

InitializeCriticalSection

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

SetEvent

ResetEvent

ReleaseSemaphore

WaitForSingleObject

CreateEventW

CreateSemaphoreW

GetSystemTime

SystemTimeToTzSpecificLocalTime

TzSpecificLocalTimeToSystemTime

SystemTimeToFileTime

FileTimeToLocalFileTime

LocalFileTimeToFileTime

FileTimeToSystemTime

GetCPInfo

IsDBCSLeadByte

MultiByteToWideChar

WideCharToMultiByte

GlobalAlloc

GetTickCount

LockResource

GlobalLock

GlobalUnlock

GlobalFree

LoadResource

SizeofResource

SetCurrentDirectoryW

GetExitCodeProcess

GetLocalTime

MapViewOfFile

UnmapViewOfFile

CreateFileMappingW

OpenFileMappingW

GetCommandLineW

SetEnvironmentVariableW

ExpandEnvironmentStringsW

GetTempPathW

MoveFileExW

GetLocaleInfoW

GetTimeFormatW

GetDateFormatW

GetNumberFormatW

SetFilePointerEx

GetConsoleMode

GetConsoleCP

HeapSize

SetStdHandle

GetProcessHeap

FreeEnvironmentStringsW

RaiseException

GetSystemInfo

VirtualProtect

VirtualQuery

LoadLibraryExA

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

IsDebuggerPresent

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetStartupInfoW

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentThreadId

GetSystemTimeAsFileTime

InitializeSListHead

RtlPcToFileHeader

EncodePointer

RtlUnwindEx

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

LoadLibraryExW

QueryPerformanceFrequency

TerminateProcess

GetModuleHandleExW

GetModuleFileNameA

GetACP

HeapFree

HeapAlloc

HeapReAlloc

GetStringTypeW

LCMapStringW

FindFirstFileExA

FindNextFileA

IsValidCodePage

GetOEMCP

GetCommandLineA

GetEnvironmentStringsW

gdiplus

GdiplusShutdown

GdiplusStartup

GdipCreateHBITMAPFromBitmap

GdipCreateBitmapFromStream

GdipDisposeImage

GdipCloneImage

GdipFree

GdipAlloc

Sections

.text
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

F0ntS/d0sapp.fon

F0ntS/error/Cr0atian.ini

F0ntS/error/Dani.ini

F0ntS/error/English.ini

F0ntS/error/Hebrew.ini

F0ntS/error/Hungarian.ini

.ps1

F0ntS/error/Ind0nesian.ini

F0ntS/error/Japanese.ini

F0ntS/error/K0rean.ini

.ps1

F0ntS/error/Kazakh.ini

F0ntS/error/Kurdish.ini

F0ntS/error/N0rwegian.ini

F0ntS/error/SimpChinese.ini

F0ntS/error/Sinhala.ini

F0ntS/error/Sl0vak.ini

F0ntS/error/Swedi.ini

F0ntS/error/Thai.ini

F0ntS/error/TradChinese.ini

F0ntS/error/Ukrainian.ini

F0ntS/error/UyghurLatin.ini

F0ntS/error/Uzbek.ini

F0ntS/error/Vietnamese.ini

F0ntS/error/Winzip.exe

.exe windows x64

629fae0a56e3262e208711dda6ae6b1d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Signer

Actual PE Digest

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

01/03/2019, 08:23
Valid: true

Chain 1

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Signer

Actual PE Digest

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

01/03/2019, 08:23
Valid: true

Chain 1

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLastError

SetLastError

GetCurrentProcess

DeviceIoControl

SetFileTime

CloseHandle

CreateDirectoryW

RemoveDirectoryW

CreateFileW

DeleteFileW

CreateHardLinkW

GetShortPathNameW

GetLongPathNameW

MoveFileW

GetFileType

GetStdHandle

WriteFile

ReadFile

FlushFileBuffers

SetEndOfFile

SetFilePointer

SetFileAttributesW

GetFileAttributesW

FindClose

FindFirstFileW

FindNextFileW

GetVersionExW

GetCurrentDirectoryW

GetFullPathNameW

FoldStringW

GetModuleFileNameW

GetModuleHandleW

FindResourceW

FreeLibrary

GetProcAddress

GetCurrentProcessId

ExitProcess

SetThreadExecutionState

Sleep

LoadLibraryW

GetSystemDirectoryW

CompareStringW

AllocConsole

FreeConsole

AttachConsole

WriteConsoleW

GetProcessAffinityMask

CreateThread

SetThreadPriority

InitializeCriticalSection

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

SetEvent

ResetEvent

ReleaseSemaphore

WaitForSingleObject

CreateEventW

CreateSemaphoreW

GetSystemTime

SystemTimeToTzSpecificLocalTime

TzSpecificLocalTimeToSystemTime

SystemTimeToFileTime

FileTimeToLocalFileTime

LocalFileTimeToFileTime

FileTimeToSystemTime

GetCPInfo

IsDBCSLeadByte

MultiByteToWideChar

WideCharToMultiByte

GlobalAlloc

GetTickCount

LockResource

GlobalLock

GlobalUnlock

GlobalFree

LoadResource

SizeofResource

SetCurrentDirectoryW

GetExitCodeProcess

GetLocalTime

MapViewOfFile

UnmapViewOfFile

CreateFileMappingW

OpenFileMappingW

GetCommandLineW

SetEnvironmentVariableW

ExpandEnvironmentStringsW

GetTempPathW

MoveFileExW

GetLocaleInfoW

GetTimeFormatW

GetDateFormatW

GetNumberFormatW

SetFilePointerEx

GetConsoleMode

GetConsoleCP

HeapSize

SetStdHandle

GetProcessHeap

FreeEnvironmentStringsW

RaiseException

GetSystemInfo

VirtualProtect

VirtualQuery

LoadLibraryExA

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

IsDebuggerPresent

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetStartupInfoW

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentThreadId

GetSystemTimeAsFileTime

InitializeSListHead

RtlPcToFileHeader

EncodePointer

RtlUnwindEx

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

LoadLibraryExW

QueryPerformanceFrequency

TerminateProcess

GetModuleHandleExW

GetModuleFileNameA

GetACP

HeapFree

HeapAlloc

HeapReAlloc

GetStringTypeW

LCMapStringW

FindFirstFileExA

FindNextFileA

IsValidCodePage

GetOEMCP

GetCommandLineA

GetEnvironmentStringsW

gdiplus

GdiplusShutdown

GdiplusStartup

GdipCreateHBITMAPFromBitmap

GdipCreateBitmapFromStream

GdipDisposeImage

GdipCloneImage

GdipFree

GdipAlloc

Sections

.text
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

F0ntS/smalle.fon

F0ntS/symb0l.ttf

F0ntS/trebucbd.ttf

F0ntS/trebucbi.ttf

F0ntS/verdab.ttf

F0ntS/verdana.ttf

F0ntS/verdanab.ttf

LangZ/.local/.threat_dragon/.git/HEAD

LangZ/.local/.threat_dragon/.git/config

LangZ/.local/.threat_dragon/.git/description

LangZ/.local/.threat_dragon/.git/index

LangZ/.local/.threat_dragon/.git/packed-refs

LangZ/.local/.threat_dragon/.gitattributes

LangZ/.local/.threat_dragon/.gitignore

LangZ/.local/.threat_dragon/.jshintignore

LangZ/.local/.threat_dragon/.jshintrc

LangZ/.local/.threat_dragon/.snyk

LangZ/.local/.threat_dragon/.travis.yml

LangZ/.local/.threat_dragon/LICENSE.txt

LangZ/.local/.threat_dragon/README.md

LangZ/.local/.threat_dragon/app/app.js

.js

LangZ/.local/.threat_dragon/app/config.autoupdate.js

.js

LangZ/.local/.threat_dragon/app/config.exceptionHandler.js

.js

LangZ/.local/.threat_dragon/app/config.route.js

.js

LangZ/.local/.threat_dragon/app/layout/index.js

.js

LangZ/.local/.threat_dragon/app/layout/shell.html

LangZ/.local/.threat_dragon/app/layout/shell.js

.js

LangZ/.local/.threat_dragon/app/layout/update.html

LangZ/.local/.threat_dragon/app/services/datacontext.js

.js

LangZ/.local/.threat_dragon/app/services/datacontextdemo.js

.js

LangZ/.local/.threat_dragon/app/services/electron.js

.js

LangZ/.local/.threat_dragon/app/services/index.js

.js

LangZ/.local/.threat_dragon/app/services/threatmodellocator.js

.js

LangZ/.local/.threat_dragon/app/threatmodels/desktopreport.html

LangZ/.local/.threat_dragon/app/threatmodels/desktopreport.js

.js

LangZ/.local/.threat_dragon/app/threatmodels/index.js

.js

LangZ/.local/.threat_dragon/app/welcome/index.js

.js

LangZ/.local/.threat_dragon/app/welcome/welcome.html

LangZ/.local/.threat_dragon/app/welcome/welcome.js

.js

LangZ/.local/.threat_dragon/config/squirrel.js

.js

LangZ/.local/.threat_dragon/content/app.css

LangZ/.local/.threat_dragon/content/bootstrap-custom.css

LangZ/.local/.threat_dragon/content/bootstrap-theme.css

LangZ/.local/.threat_dragon/content/icons/icon.icns

LangZ/.local/.threat_dragon/content/icons/icon.ico

LangZ/.local/.threat_dragon/content/icons/png/1024x1024.gif

.gif

LangZ/.local/.threat_dragon/content/icons/png/1024x1024.png

.png

LangZ/.local/.threat_dragon/content/icons/png/128x128.png

.png

LangZ/.local/.threat_dragon/content/icons/png/16x16.png

.png

LangZ/.local/.threat_dragon/content/icons/png/24x24.png

.png

LangZ/.local/.threat_dragon/content/icons/png/256x256.png

.png

LangZ/.local/.threat_dragon/content/icons/png/32x32.png

.png

LangZ/.local/.threat_dragon/content/icons/png/48x48.png

.png

LangZ/.local/.threat_dragon/content/icons/png/512x512.png

.png

LangZ/.local/.threat_dragon/content/icons/png/64x64.png

.png

LangZ/.local/.threat_dragon/content/icons/png/96x96.png

.png

LangZ/.local/.threat_dragon/content/icons/png/cupcakes-installing.gif

.gif

LangZ/.local/.threat_dragon/content/icons/win/td.ico

LangZ/.local/.threat_dragon/content/images/threatdragon.ico

LangZ/.local/.threat_dragon/content/images/threatdragon_logo_image.svg

LangZ/.local/.threat_dragon/content/images/thumbnail.jpg

.jpg

LangZ/.local/.threat_dragon/content/threatdragon.css

LangZ/.local/.threat_dragon/content/threatdragon.min.css

LangZ/.local/.threat_dragon/content/ubuntu.css

LangZ/.local/.threat_dragon/electron-builder.json

LangZ/.local/.threat_dragon/fonts/4iCs6KVjbNBYlgoKfw72.woff2

LangZ/.local/.threat_dragon/fonts/4iCv6KVjbNBYlgoCxCvjsGyN.woff2

LangZ/.local/.threat_dragon/fonts/FontAwesome.otf

LangZ/.local/.threat_dragon/fonts/fontawesome-webfont.eot

LangZ/.local/.threat_dragon/fonts/fontawesome-webfont.svg

.xml

LangZ/.local/.threat_dragon/fonts/fontawesome-webfont.ttf

LangZ/.local/.threat_dragon/fonts/fontawesome-webfont.woff

LangZ/.local/.threat_dragon/fonts/fontawesome-webfont.woff2

LangZ/.local/.threat_dragon/fonts/glyphicons-halflings-regular.eot

LangZ/.local/.threat_dragon/fonts/glyphicons-halflings-regular.svg

.xml

LangZ/.local/.threat_dragon/fonts/glyphicons-halflings-regular.ttf

LangZ/.local/.threat_dragon/fonts/glyphicons-halflings-regular.woff

LangZ/.local/.threat_dragon/fonts/glyphicons-halflings-regular.woff2

LangZ/.local/.threat_dragon/index.html

.html

LangZ/.local/.threat_dragon/installer-lin.js

.js

LangZ/.local/.threat_dragon/installer-osx.js

.js

LangZ/.local/.threat_dragon/installer-win.js

.js

LangZ/.local/.threat_dragon/karma.conf.js

.js

LangZ/.local/.threat_dragon/main.js

.js

LangZ/.local/.threat_dragon/package-lock.json

LangZ/.local/.threat_dragon/package.json

LangZ/.local/.threat_dragon/public/content/images/thumbnail.jpg

.jpg

LangZ/.local/.threat_dragon/screenshots/diagram.PNG

.png

LangZ/.local/.threat_dragon/screenshots/threat.PNG

.png

LangZ/.local/.threat_dragon/screenshots/welcome.PNG

.png

LangZ/.local/.threat_dragon/tests/specs/datacontext_spec.js

.js

LangZ/.local/.threat_dragon/tests/specs/datacontextdemo_spec.js

.js

LangZ/.local/.threat_dragon/tests/specs/desktopreport_spec.js

.js

LangZ/.local/.threat_dragon/tests/specs/shell_spec.js

.js

LangZ/.local/.threat_dragon/tests/specs/support/jasmin.json

LangZ/.local/.threat_dragon/tests/specs/test.js

.js

LangZ/.local/.threat_dragon/tests/specs/threatmodellocator_spec.js

.js

LangZ/.local/.threat_dragon/tests/specs/welcome_spec.js

.js

LangZ/.local/bin/normalizer

.sh linux

LangZ/.local/certifi-2021.5.30.dist-info/INSTALLER

LangZ/.local/certifi-2021.5.30.dist-info/LICENSE

LangZ/.local/certifi-2021.5.30.dist-info/METADATA

LangZ/.local/certifi-2021.5.30.dist-info/RECORD

LangZ/.local/certifi-2021.5.30.dist-info/WHEEL

LangZ/.local/certifi-2021.5.30.dist-info/top_level.txt

LangZ/.local/certifi/__init__.py

LangZ/.local/certifi/__main__.py

LangZ/.local/certifi/__pycache__/__init__.cpython-38.pyc

LangZ/.local/certifi/__pycache__/__main__.cpython-38.pyc

LangZ/.local/certifi/__pycache__/core.cpython-38.pyc

LangZ/.local/certifi/cacert.pem

LangZ/.local/certifi/core.py

LangZ/.local/charset_normalizer-2.0.3.dist-info/INSTALLER

LangZ/.local/charset_normalizer-2.0.3.dist-info/LICENSE

LangZ/.local/charset_normalizer-2.0.3.dist-info/METADATA

LangZ/.local/charset_normalizer-2.0.3.dist-info/RECORD

LangZ/.local/charset_normalizer-2.0.3.dist-info/WHEEL

LangZ/.local/charset_normalizer-2.0.3.dist-info/entry_points.txt

LangZ/.local/charset_normalizer-2.0.3.dist-info/top_level.txt

LangZ/.local/charset_normalizer/__init__.py

LangZ/.local/charset_normalizer/__pycache__/__init__.cpython-38.pyc

LangZ/.local/charset_normalizer/__pycache__/api.cpython-38.pyc

LangZ/.local/charset_normalizer/__pycache__/cd.cpython-38.pyc

LangZ/.local/charset_normalizer/__pycache__/constant.cpython-38.pyc

LangZ/.local/charset_normalizer/__pycache__/legacy.cpython-38.pyc

LangZ/.local/charset_normalizer/__pycache__/md.cpython-38.pyc

LangZ/.local/charset_normalizer/__pycache__/models.cpython-38.pyc

LangZ/.local/charset_normalizer/__pycache__/utils.cpython-38.pyc

LangZ/.local/charset_normalizer/__pycache__/version.cpython-38.pyc

LangZ/.local/charset_normalizer/api.py

LangZ/.local/charset_normalizer/assets/__init__.py

LangZ/.local/charset_normalizer/assets/__pycache__/__init__.cpython-38.pyc

LangZ/.local/charset_normalizer/cd.py

LangZ/.local/charset_normalizer/cli/__pycache__/__init__.cpython-38.pyc

LangZ/.local/charset_normalizer/cli/__pycache__/normalizer.cpython-38.pyc

LangZ/.local/charset_normalizer/cli/normalizer.py

LangZ/.local/charset_normalizer/constant.py

LangZ/.local/charset_normalizer/legacy.py

LangZ/.local/charset_normalizer/md.py

LangZ/.local/charset_normalizer/models.py

LangZ/.local/charset_normalizer/utils.py

LangZ/.local/charset_normalizer/version.py

LangZ/.local/idna-3.2.dist-info/INSTALLER

LangZ/.local/idna-3.2.dist-info/LICENSE.md

LangZ/.local/idna-3.2.dist-info/METADATA

LangZ/.local/idna-3.2.dist-info/RECORD

LangZ/.local/idna-3.2.dist-info/WHEEL

LangZ/.local/idna-3.2.dist-info/top_level.txt

LangZ/.local/idna/__init__.py

LangZ/.local/idna/__pycache__/__init__.cpython-38.pyc

LangZ/.local/idna/__pycache__/codec.cpython-38.pyc

LangZ/.local/idna/__pycache__/compat.cpython-38.pyc

LangZ/.local/idna/__pycache__/core.cpython-38.pyc

LangZ/.local/idna/__pycache__/idnadata.cpython-38.pyc

LangZ/.local/idna/__pycache__/intranges.cpython-38.pyc

LangZ/.local/idna/__pycache__/package_data.cpython-38.pyc

LangZ/.local/idna/__pycache__/uts46data.cpython-38.pyc

LangZ/.local/idna/codec.py

LangZ/.local/idna/compat.py

LangZ/.local/idna/core.py

LangZ/.local/idna/idnadata.py

LangZ/.local/idna/intranges.py

LangZ/.local/idna/package_data.py

LangZ/.local/idna/uts46data.py

LangZ/.local/requests-2.26.0.dist-info/INSTALLER

LangZ/.local/requests-2.26.0.dist-info/LICENSE

LangZ/.local/requests-2.26.0.dist-info/METADATA

LangZ/.local/requests-2.26.0.dist-info/RECORD

LangZ/.local/requests-2.26.0.dist-info/WHEEL

LangZ/.local/requests-2.26.0.dist-info/top_level.txt

LangZ/.local/requests/__init__.py

LangZ/.local/requests/__pycache__/__init__.cpython-38.pyc

LangZ/.local/requests/__pycache__/__version__.cpython-38.pyc

LangZ/.local/requests/__pycache__/_internal_utils.cpython-38.pyc

LangZ/.local/requests/__pycache__/adapters.cpython-38.pyc

LangZ/.local/requests/__pycache__/api.cpython-38.pyc

LangZ/.local/requests/__pycache__/auth.cpython-38.pyc

LangZ/.local/requests/__pycache__/certs.cpython-38.pyc

LangZ/.local/requests/__pycache__/compat.cpython-38.pyc

LangZ/.local/requests/__pycache__/cookies.cpython-38.pyc

LangZ/.local/requests/__pycache__/exceptions.cpython-38.pyc

LangZ/.local/requests/__pycache__/help.cpython-38.pyc

LangZ/.local/requests/__pycache__/hooks.cpython-38.pyc

LangZ/.local/requests/__pycache__/models.cpython-38.pyc

LangZ/.local/requests/__pycache__/packages.cpython-38.pyc

LangZ/.local/requests/__pycache__/sessions.cpython-38.pyc

LangZ/.local/requests/__pycache__/status_codes.cpython-38.pyc

LangZ/.local/requests/__pycache__/structures.cpython-38.pyc

LangZ/.local/requests/__pycache__/utils.cpython-38.pyc

LangZ/.local/requests/__version__.py

LangZ/.local/requests/_internal_utils.py

LangZ/.local/requests/adapters.py

LangZ/.local/requests/api.py

LangZ/.local/requests/auth.py

LangZ/.local/requests/certs.py

.py .sh linux

LangZ/.local/requests/compat.py

LangZ/.local/requests/cookies.py

LangZ/.local/requests/exceptions.py

LangZ/.local/requests/help.py

LangZ/.local/requests/hooks.py

LangZ/.local/requests/models.py

LangZ/.local/requests/packages.py

LangZ/.local/requests/sessions.py

LangZ/.local/requests/status_codes.py

LangZ/.local/requests/structures.py

LangZ/.local/requests/utils.py

LangZ/.local/urllib3-1.26.6.dist-info/INSTALLER

LangZ/.local/urllib3-1.26.6.dist-info/LICENSE.txt

LangZ/.local/urllib3-1.26.6.dist-info/METADATA

LangZ/.local/urllib3-1.26.6.dist-info/RECORD

LangZ/.local/urllib3-1.26.6.dist-info/WHEEL

LangZ/.local/urllib3-1.26.6.dist-info/top_level.txt

LangZ/.local/urllib3/__init__.py

LangZ/.local/urllib3/__pycache__/__init__.cpython-38.pyc

LangZ/.local/urllib3/__pycache__/_collections.cpython-38.pyc

LangZ/.local/urllib3/__pycache__/_version.cpython-38.pyc

LangZ/.local/urllib3/__pycache__/connection.cpython-38.pyc

LangZ/.local/urllib3/__pycache__/connectionpool.cpython-38.pyc

LangZ/.local/urllib3/__pycache__/exceptions.cpython-38.pyc

LangZ/.local/urllib3/__pycache__/fields.cpython-38.pyc

LangZ/.local/urllib3/__pycache__/filepost.cpython-38.pyc

LangZ/.local/urllib3/__pycache__/poolmanager.cpython-38.pyc

LangZ/.local/urllib3/__pycache__/request.cpython-38.pyc

LangZ/.local/urllib3/__pycache__/response.cpython-38.pyc

LangZ/.local/urllib3/_collections.py

LangZ/.local/urllib3/_version.py

LangZ/.local/urllib3/connection.py

LangZ/.local/urllib3/connectionpool.py

.py .js

LangZ/.local/urllib3/contrib/__pycache__/__init__.cpython-38.pyc

LangZ/.local/urllib3/contrib/__pycache__/_appengine_environ.cpython-38.pyc

LangZ/.local/urllib3/contrib/__pycache__/appengine.cpython-38.pyc

LangZ/.local/urllib3/contrib/__pycache__/ntlmpool.cpython-38.pyc

LangZ/.local/urllib3/contrib/__pycache__/pyopenssl.cpython-38.pyc

.js

LangZ/.local/urllib3/contrib/__pycache__/securetransport.cpython-38.pyc

.js

LangZ/.local/urllib3/contrib/__pycache__/socks.cpython-38.pyc

LangZ/.local/urllib3/contrib/_appengine_environ.py

LangZ/.local/urllib3/contrib/_securetransport/__pycache__/__init__.cpython-38.pyc

LangZ/.local/urllib3/contrib/_securetransport/__pycache__/bindings.cpython-38.pyc

LangZ/.local/urllib3/contrib/_securetransport/__pycache__/low_level.cpython-38.pyc

LangZ/.local/urllib3/contrib/_securetransport/bindings.py

LangZ/.local/urllib3/contrib/_securetransport/low_level.py

LangZ/.local/urllib3/contrib/appengine.py

LangZ/.local/urllib3/contrib/ntlmpool.py

LangZ/.local/urllib3/contrib/pyopenssl.py

.py .js

LangZ/.local/urllib3/contrib/securetransport.py

.py .js

LangZ/.local/urllib3/contrib/socks.py

LangZ/.local/urllib3/exceptions.py

LangZ/.local/urllib3/fields.py

LangZ/.local/urllib3/filepost.py

LangZ/.local/urllib3/packages/__init__.py

LangZ/.local/urllib3/packages/__pycache__/__init__.cpython-38.pyc

LangZ/.local/urllib3/packages/__pycache__/six.cpython-38.pyc

LangZ/.local/urllib3/packages/backports/__pycache__/__init__.cpython-38.pyc

LangZ/.local/urllib3/packages/backports/__pycache__/makefile.cpython-38.pyc

LangZ/.local/urllib3/packages/backports/makefile.py

LangZ/.local/urllib3/packages/six.py

LangZ/.local/urllib3/packages/ssl_match_hostname/__init__.py

LangZ/.local/urllib3/packages/ssl_match_hostname/__pycache__/__init__.cpython-38.pyc

LangZ/.local/urllib3/packages/ssl_match_hostname/__pycache__/_implementation.cpython-38.pyc

LangZ/.local/urllib3/packages/ssl_match_hostname/_implementation.py

LangZ/.local/urllib3/poolmanager.py

LangZ/.local/urllib3/request.py

LangZ/.local/urllib3/response.py

LangZ/.local/urllib3/util/__init__.py

LangZ/.local/urllib3/util/__pycache__/__init__.cpython-38.pyc

LangZ/.local/urllib3/util/__pycache__/connection.cpython-38.pyc

LangZ/.local/urllib3/util/__pycache__/proxy.cpython-38.pyc

LangZ/.local/urllib3/util/__pycache__/queue.cpython-38.pyc

LangZ/.local/urllib3/util/__pycache__/request.cpython-38.pyc

LangZ/.local/urllib3/util/__pycache__/response.cpython-38.pyc

LangZ/.local/urllib3/util/__pycache__/retry.cpython-38.pyc

LangZ/.local/urllib3/util/__pycache__/ssl_.cpython-38.pyc

LangZ/.local/urllib3/util/__pycache__/ssltransport.cpython-38.pyc

.js

LangZ/.local/urllib3/util/__pycache__/timeout.cpython-38.pyc

LangZ/.local/urllib3/util/__pycache__/url.cpython-38.pyc

LangZ/.local/urllib3/util/__pycache__/wait.cpython-38.pyc

LangZ/.local/urllib3/util/connection.py

.py .js

LangZ/.local/urllib3/util/proxy.py

LangZ/.local/urllib3/util/queue.py

LangZ/.local/urllib3/util/request.py

LangZ/.local/urllib3/util/response.py

LangZ/.local/urllib3/util/retry.py

LangZ/.local/urllib3/util/ssl_.py

LangZ/.local/urllib3/util/ssltransport.py

.py .js

LangZ/.local/urllib3/util/timeout.py

LangZ/.local/urllib3/util/url.py

LangZ/.local/urllib3/util/wait.py

LangZ/Cr0atian.ini

LangZ/Dani.ini

LangZ/English.ini

LangZ/Hebrew.ini

LangZ/Hungarian.ini

.ps1

LangZ/Ind0nesian.ini

LangZ/Japanese.ini

LangZ/K0rean.ini

.ps1

LangZ/Kazakh.ini

LangZ/Kurdish.ini

LangZ/N0rwegian.ini

LangZ/SimpChinese.ini

LangZ/Sinhala.ini

LangZ/Sl0vak.ini

LangZ/Swedi.ini

LangZ/Thai.ini

LangZ/TradChinese.ini

LangZ/Ukrainian.ini

LangZ/UyghurLatin.ini

LangZ/Uzbek.ini

LangZ/Vietnamese.ini

LangZ/Winzip.exe

.exe windows x64

629fae0a56e3262e208711dda6ae6b1d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

30/05/2000, 10:48

Not After

30/05/2020, 10:48

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Signer

Actual PE Digest

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

01/03/2019, 08:23
Valid: true

Chain 1

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Signer

Actual PE Digest

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

01/03/2019, 08:23
Valid: true

Chain 1

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLastError

SetLastError

GetCurrentProcess

DeviceIoControl

SetFileTime

CloseHandle

CreateDirectoryW

RemoveDirectoryW

CreateFileW

DeleteFileW

CreateHardLinkW

GetShortPathNameW

GetLongPathNameW

MoveFileW

GetFileType

GetStdHandle

WriteFile

ReadFile

FlushFileBuffers

SetEndOfFile

SetFilePointer

SetFileAttributesW

GetFileAttributesW

FindClose

FindFirstFileW

FindNextFileW

GetVersionExW

GetCurrentDirectoryW

GetFullPathNameW

FoldStringW

GetModuleFileNameW

GetModuleHandleW

FindResourceW

FreeLibrary

GetProcAddress

GetCurrentProcessId

ExitProcess

SetThreadExecutionState

Sleep

LoadLibraryW

GetSystemDirectoryW

CompareStringW

AllocConsole

FreeConsole

AttachConsole

WriteConsoleW

GetProcessAffinityMask

CreateThread

SetThreadPriority

InitializeCriticalSection

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

SetEvent

ResetEvent

ReleaseSemaphore

WaitForSingleObject

CreateEventW

CreateSemaphoreW

GetSystemTime

SystemTimeToTzSpecificLocalTime

TzSpecificLocalTimeToSystemTime

SystemTimeToFileTime

FileTimeToLocalFileTime

LocalFileTimeToFileTime

FileTimeToSystemTime

GetCPInfo

IsDBCSLeadByte

MultiByteToWideChar

WideCharToMultiByte

GlobalAlloc

GetTickCount

LockResource

GlobalLock

GlobalUnlock

GlobalFree

LoadResource

SizeofResource

SetCurrentDirectoryW

GetExitCodeProcess

GetLocalTime

MapViewOfFile

UnmapViewOfFile

CreateFileMappingW

OpenFileMappingW

GetCommandLineW

SetEnvironmentVariableW

ExpandEnvironmentStringsW

GetTempPathW

MoveFileExW

GetLocaleInfoW

GetTimeFormatW

GetDateFormatW

GetNumberFormatW

SetFilePointerEx

GetConsoleMode

GetConsoleCP

HeapSize

SetStdHandle

GetProcessHeap

FreeEnvironmentStringsW

RaiseException

GetSystemInfo

VirtualProtect

VirtualQuery

LoadLibraryExA

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

IsDebuggerPresent

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetStartupInfoW

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentThreadId

GetSystemTimeAsFileTime

InitializeSListHead

RtlPcToFileHeader

EncodePointer

RtlUnwindEx

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

LoadLibraryExW

QueryPerformanceFrequency

TerminateProcess

GetModuleHandleExW

GetModuleFileNameA

GetACP

HeapFree

HeapAlloc

HeapReAlloc

GetStringTypeW

LCMapStringW

FindFirstFileExA

FindNextFileA

IsValidCodePage

GetOEMCP

GetCommandLineA

GetEnvironmentStringsW

gdiplus

GdiplusShutdown

GdiplusStartup

GdipCreateHBITMAPFromBitmap

GdipCreateBitmapFromStream

GdipDisposeImage

GdipCloneImage

GdipFree

GdipAlloc

Sections

.text
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Setup.exe

.exe windows x86

d0515d3426b1688359f2622ddbc314e7

Code Sign

3e:fe:fd:e7:46:e7:f7:87:4f:2c:1d:2e:ca:3c:2e:e7
Certificate

Issuer

CN=Acer Globe Ultra AN527-57 [AN527-75-77M3]

Not Before

15/03/2023, 21:30

Not After

16/03/2033, 21:30

Subject

CN=Acer Globe Ultra AN527-57 [AN527-75-77M3]

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

43:bf:2b:26:23:2b:e8:8b:41:27:13:bf:4b:4c:90:a2:54:4b:fc:d7:0a:84:17:c2:b2:35:41:ad:e3:d8:aa:db
Signer

Actual PE Digest

43:bf:2b:26:23:2b:e8:8b:41:27:13:bf:4b:4c:90:a2:54:4b:fc:d7:0a:84:17:c2:b2:35:41:ad:e3:d8:aa:db

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Acer Globe Ultra AN527-57 [AN527-75-77M3]

16/03/2023, 15:39
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

GetProcAddress

gdi32

GetDeviceCaps

ole32

CoInitialize

user32

GetProcessWindowStation

Sections

.MPRESS1
Size: 2.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

629fae0a56e3262e208711dda6ae6b1d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02Certificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02Certificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9bSigner

Signature Validations

Verification

01/03/2019, 08:23 Valid: true

Chain 1

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9Signer

Signature Validations

Verification

01/03/2019, 08:23 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdiplus

Sections

.text Size: 203KB - Virtual size: 203KB

.rdata Size: 61KB - Virtual size: 60KB

.data Size: 4KB - Virtual size: 136KB

.pdata Size: 10KB - Virtual size: 9KB

.gfids Size: 512B - Virtual size: 208B

.rsrc Size: 152KB - Virtual size: 156KB

.reloc Size: 2KB - Virtual size: 1KB

629fae0a56e3262e208711dda6ae6b1d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02Certificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02Certificate

Extended Key Usages

Key Usages

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22Certificate

Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Signer

01/03/2019, 08:23
Valid: true

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Signer

01/03/2019, 08:23
Valid: true

.text
Size: 203KB - Virtual size: 203KB

.rdata
Size: 61KB - Virtual size: 60KB

.data
Size: 4KB - Virtual size: 136KB

.pdata
Size: 10KB - Virtual size: 9KB

.gfids
Size: 512B - Virtual size: 208B

.rsrc
Size: 152KB - Virtual size: 156KB

.reloc
Size: 2KB - Virtual size: 1KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Signer

01/03/2019, 08:23
Valid: true

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Signer

01/03/2019, 08:23
Valid: true

.text
Size: 203KB - Virtual size: 203KB

.rdata
Size: 61KB - Virtual size: 60KB

.data
Size: 4KB - Virtual size: 136KB

.pdata
Size: 10KB - Virtual size: 9KB

.gfids
Size: 512B - Virtual size: 208B

.rsrc
Size: 152KB - Virtual size: 156KB

.reloc
Size: 2KB - Virtual size: 1KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

27:66:ee:56:eb:49:f3:8e:ab:d7:70:a2:fc:84:de:22
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

ca:05:77:9a:83:94:f1:c2:84:3b:d1:35:92:02:9e:08:73:69:34:94:e8:62:49:32:6d:ca:10:c8:55:9e:d9:9b
Signer

01/03/2019, 08:23
Valid: true

ed:14:78:6d:47:d9:55:27:5a:d1:dd:f1:22:3e:ed:fc:47:98:f7:f9
Signer