Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
Notion_release_x86_64_Setup.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
Notion_release_x86_64_Setup.exe
Resource
win11-20240419-en
Target
Notion_release_x86_64_Setup.exe
Size
17.1MB
MD5
1d4d77d5f3268c4b798977b4b179f26b
SHA1
eed0e9afa33ff0beeb89af1fc32c33473da5d948
SHA256
48197c0e13df190e72ad3bbbcaea211b844103365310ce9f2cf089797e2aaecb
SHA512
fd62dc0e8b9eec9a14f38f5090d154a58d27801bcafbcc09a8d3ba4d9d01b5af69929b14878c8070f5e5165f1324b468a967028908fc7522fc8e27e4c5468884
SSDEEP
196608:Ej6LWrHl0sKYu/PaQtsI9iL4FMIZETSkjPePdrQJM93BMJg6x9iGvPoMut/X6e07:K7LQtsTQETSkvJQCJGG4MUXx8AKORm
resource | yara_rule |
---|---|
sample | pyinstaller |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
MessageBoxW
ord380
SetFilePointer
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetTokenInformation
SelectObject
%q��o�O�L�旌�w�g�F��Xd�V$�k��Ɏ�<�f��T$��Z��ذ����m�Z�U��9斿x��\��M,�"��C����,�}ξ��%�u��z��ow')�'�R(��� Eƿ�-�ኞB��]��S�h�"�6l��nֹw�z�)�a�4T��9e}��G��#5Ja�f^���\!6�f{�0�p\��^4�\9���Mb��=%�tX�;m�D(��@Idz9�벇^�Pݍ��w~PsY�;Ě8$����*�d���+~$�Q�#C #x�?#nyw�04{��k�1c�� �����w ^#���%#�Z�q�Tn��J,]U�vnj���ڡk8�Yq�Q��䈰<��Y�)j���(�G��;�nb��ovqx��H|�3>7��<��Џ��m�����i�L�3Y�%�'���;����2�� �.�I���oj�����KX�F��>+-Ӭ� n�%��+q98��̾L~�{�RFyv(���@��3ºB�oÅrIlS�5f�Y��i����̆���n��Ek���N/1��`Db`,������T�b��u$�������x�9˭n�GI��8~�O`�t}�b�C3Dr��A��������K�������:�#��Jo�Up��f�-�ɺ,|-Ό��~�|m2"�`���hD1��L5��q�!�LԸ��@���2P6d2;+"��t�M��[<ȡ*s��u`4l �)�ʂ�ۇ�����$,Mh��� W� ��Y�����Ԁ�*�9V-{Л �6��`�#�?��c����gLdI���Y<a6��U��yk�Z���Q�<kާ�6��KuU�b��_�w��_��3��s�O�R� ��}���6Ydz�20�(�����<y�[��d�i��}� F�)K���}���c�%�����h:�M���� &\�oE_�ޓ���x��j�ڈ���U�&'��qq�t���t B<3��)���b���Z٥H�]%����[���)�"��b���^SI�XN�͖��ڌ���iִ��� -z��do���k�t9x�`��X��Юx3Z���4՛" �+L��������J�᥍��p~JG�h�Ǩ�����Pi��f���p3KS�O�����|-\P�c��7z���j5��l�*ۻEmC���{�f��˾k�_�?؛h�QX��:�R�×�&}�#�I� ��Vl�c�rNaT`�/�bƩ�G��g�.2�[�O��.OE�V��b�m�?��m�.�"R�w��A"T!��r�h)B���+��Щ�igd<�&OZͻ��NMnk�>�8S�'��h�j<E�[�8ԐŔ���l�iu� ��<�a�5�,m�����N����A��ƞ,�p�b� ��"`�h��*�x^�Bh�2�@��9���|����|�R�0H$q��z۱�L� ؘ���V'6`WV�Ǘ*�f}�Zs:��^l�B�Ck�s��1���1f>� DWf��V�e�}�KʌG�}�X^w�0�.F�U'�k���g�sX �%��a�c�C%�մBD��rY��966�_��;�7��QB���č|�Tf�w�b������iw@Y���AS����O��w�D�ޔ���bf0�K���Nu�����p����Ae��HEuT /= ^i��x6 '���6Iew�V�4�;Z%���(�6:&�x0�;c� Zi�^(?�\}���7#�ěT�������A�x��P j_�+p��|�� (O1�nt>���D=Y��Ge��cDbl�컓*L�l�~h��� U������G�-PBC�Ӽ�zٺh"j3�q��;����˸��*�1�zOw$��3e���Q�fn�N*� }�O8nr���o1�aE3�6/-X2� ��3G�D������t#~h����0��J�����6�q�LUǥ�����t+]�nIQ�0qNb��]��Y�o)�i���yR��$c��df�y 2V�Kx�Y�{�)���y�hV�˛~q� �1|�%��iA���7�VS)D�p�:�.��*d��^f%�|�'�>�e'��&�v����m4l�]���Y�j�T�|]����r'L�O��W�/�A� s!�}-��o7���q�}����֢d2�v�g�����7���� �S�0i�V�o1V�&�a϶�aޔ6���i��-���t&NyZ� ���c��vGX備M,�T���O��;ւt�8����}���a��ȃ,±.�'����]"�!��������fcԸ_q�[��Yh�͚i+��������!�.��J�%B��|:�� �tn��K',������ƌ�Mp� uM��5z���{� �G�I)� �����%f��rvIɋ���UY��^����tČpm�1��2��q�rb�*��ī���=�nȖ�2�3C\����/U����m�&"ۄ-�]=�辫��hƈ8���:�7����8����~�b���W�ۍ(s88h��Fmk�k�*Wv[l��g��Eޖ��\�2���� � n�Z����%��Gѐ�m�`���4TU�lp�3�0M���N��������y��=/��I9^U0R�}[�j�6�=ጯ�Ro �h�G�� bK$?.�/~����+�u?T^�ZX�� ��S=��gᘷ; D�hP@�G]4+���D �"�D�Ň����.A����g�2�F8Q� �,0��T�����¤�:T K�����]���Q�h=�?��I�����-�0��b䉔����Y� �N�nퟆ/ l��:6��Wh6ԟ��v�}����R i����� ���u�Z�,d/�<��!�=D�:� �H?Ʊ0>-���8["��"X� �'�u�VW9vs�G�s��}��� ;p+�R=2��%��.���pY!K#�fA2���챼J%`��L7;:Y�]5�?5�v��s����b�L�'f����*�V��x�:=t~$����/���Y'R���au؉B��]Oܝ!����5������bN��q��Jت�����V�8bv�A�('8dM�i��7�(]u涿��Lm�\.�g=
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ