Behavioral task
behavioral1
Sample
6afc7d0eea79bfc7721b0299c38c99740b57766a1dee973f8ff7219f3cca9dd7exe.exe
Resource
win7-20231020-en
General
-
Target
6afc7d0eea79bfc7721b0299c38c99740b57766a1dee973f8ff7219f3cca9dd7exe.exe
-
Size
2.3MB
-
MD5
110420eeb8d1004a45bca1a06e214705
-
SHA1
a0070b19dcf83a7f630f2a02fde93faac1a75633
-
SHA256
6afc7d0eea79bfc7721b0299c38c99740b57766a1dee973f8ff7219f3cca9dd7
-
SHA512
cf9abb3a145cd7359e405d81a5c5c2d23296c854cd28096184725d7ef853065f7e77187c619a1e1f6d7ee371143f1dae8237a471418e91136985caeef68cd4e3
-
SSDEEP
49152:vem5fuJPWziYOHvEP4NI0Vo6PMsydVVnG:RduPEQC026PV+G
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
6afc7d0eea79bfc7721b0299c38c99740b57766a1dee973f8ff7219f3cca9dd7exe.exe.exe windows:4 windows x86 arch:x86
Code Sign
db:af:ae:9e:af:3b:66:46:ae:49:2c:80:20:2f:3c:22Certificate
IssuerCN=AMD Ryzen 7 5800X -- Vermeer,OU=(100-000000063),O=AMD CPU,L={_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..,ST=Monaco,C=FRNot Before18-10-2023 10:07Not After22-10-2026 00:00SubjectCN=AMD Ryzen 7 5800X -- Vermeer,OU=(100-000000063),O=AMD CPU,L={_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..{_%&*_}..,ST=Monaco,C=FR39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03-05-2023 00:00Not After02-08-2034 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
a9:d7:1f:cd:f7:6f:80:20:68:64:11:2f:b4:03:4a:c8:3d:2a:c4:10:fc:0c:ee:a3:d2:1b:64:57:3a:8c:70:a7Signer
Actual PE Digesta9:d7:1f:cd:f7:6f:80:20:68:64:11:2f:b4:03:4a:c8:3d:2a:c4:10:fc:0c:ee:a3:d2:1b:64:57:3a:8c:70:a7Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 83KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 111KB - Virtual size: 559KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ