Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
10Static
static
3v4_file_x86x64.rar
windows11-21h2-x64
3Language/WinRar.exe
windows11-21h2-x64
1Language/an.txt
windows11-21h2-x64
3Language/ar.txt
windows11-21h2-x64
3Language/az.txt
windows11-21h2-x64
3Language/mn.txt
windows11-21h2-x64
3Language/mng.txt
windows11-21h2-x64
3Language/mng2.txt
windows11-21h2-x64
3Language/mr.txt
windows11-21h2-x64
3Language/ne.txt
windows11-21h2-x64
3Language/nl.txt
windows11-21h2-x64
3Language/pl.txt
windows11-21h2-x64
3Language/pt-br.txt
windows11-21h2-x64
3Language/ro.txt
windows11-21h2-x64
3Language/sa.txt
windows11-21h2-x64
3Language/sk.txt
windows11-21h2-x64
3Language/sr-spc.txt
windows11-21h2-x64
3Language/sv.txt
windows11-21h2-x64
3Language/ta.txt
windows11-21h2-x64
3Language/th.txt
windows11-21h2-x64
3Language/tr.txt
windows11-21h2-x64
3Language/ug.txt
windows11-21h2-x64
3Language/uz-cyrl.txt
windows11-21h2-x64
3Language/va.txt
windows11-21h2-x64
3Language/yo.txt
windows11-21h2-x64
3Language/zh-tw.txt
windows11-21h2-x64
3LiteRes.dll
windows11-21h2-x64
1LiteSkinUtils.dll
windows11-21h2-x64
1Resource/C...TF16-H
windows11-21h2-x64
1Resource/F...td.otf
windows11-21h2-x64
3Resource/F...ue.otf
windows11-21h2-x64
3setup.exe
windows11-21h2-x64
10Static task
static1
Behavioral task
behavioral1
Sample
v4_file_x86x64.rar
Resource
win11-20240419-en
Behavioral task
behavioral2
Sample
Language/WinRar.exe
Resource
win11-20240419-en
Behavioral task
behavioral3
Sample
Language/an.txt
Resource
win11-20240419-en
Behavioral task
behavioral4
Sample
Language/ar.txt
Resource
win11-20240426-en
Behavioral task
behavioral5
Sample
Language/az.txt
Resource
win11-20240426-en
Behavioral task
behavioral6
Sample
Language/mn.txt
Resource
win11-20240426-en
Behavioral task
behavioral7
Sample
Language/mng.txt
Resource
win11-20240419-en
Behavioral task
behavioral8
Sample
Language/mng2.txt
Resource
win11-20240426-en
Behavioral task
behavioral9
Sample
Language/mr.txt
Resource
win11-20240426-en
Behavioral task
behavioral10
Sample
Language/ne.txt
Resource
win11-20240426-en
Behavioral task
behavioral11
Sample
Language/nl.txt
Resource
win11-20240419-en
Behavioral task
behavioral12
Sample
Language/pl.txt
Resource
win11-20240419-en
Behavioral task
behavioral13
Sample
Language/pt-br.txt
Resource
win11-20240419-en
Behavioral task
behavioral14
Sample
Language/ro.txt
Resource
win11-20240426-en
Behavioral task
behavioral15
Sample
Language/sa.txt
Resource
win11-20240419-en
Behavioral task
behavioral16
Sample
Language/sk.txt
Resource
win11-20240426-en
Behavioral task
behavioral17
Sample
Language/sr-spc.txt
Resource
win11-20240426-en
Behavioral task
behavioral18
Sample
Language/sv.txt
Resource
win11-20240419-en
Behavioral task
behavioral19
Sample
Language/ta.txt
Resource
win11-20240426-en
Behavioral task
behavioral20
Sample
Language/th.txt
Resource
win11-20240426-en
Behavioral task
behavioral21
Sample
Language/tr.txt
Resource
win11-20240419-en
Behavioral task
behavioral22
Sample
Language/ug.txt
Resource
win11-20240419-en
Behavioral task
behavioral23
Sample
Language/uz-cyrl.txt
Resource
win11-20240426-en
Behavioral task
behavioral24
Sample
Language/va.txt
Resource
win11-20240426-en
Behavioral task
behavioral25
Sample
Language/yo.txt
Resource
win11-20240419-en
Behavioral task
behavioral26
Sample
Language/zh-tw.txt
Resource
win11-20240419-en
Behavioral task
behavioral27
Sample
LiteRes.dll
Resource
win11-20240426-en
Behavioral task
behavioral28
Sample
LiteSkinUtils.dll
Resource
win11-20240419-en
Behavioral task
behavioral29
Sample
Resource/CMap/UniKS-UTF16-H
Resource
win11-20240426-en
Behavioral task
behavioral30
Sample
Resource/Font/AdobePIStd.otf
Resource
win11-20240419-en
Behavioral task
behavioral31
Sample
Resource/Font/CourierStd-BoldOblique.otf
Resource
win11-20240426-en
Behavioral task
behavioral32
Sample
setup.exe
Resource
win11-20240426-en
Target
v4_file_x86x64.rar
Size
14.2MB
MD5
8ead67eaf5042342ecf0e41e051e7c0f
SHA1
cf73d171a1f8fd71e0a6b9d0f1ed45bf630869a3
SHA256
a02474c5f5c9c8c6e97de48c1e1d265211ab471a5ad1f910188b27867e3cfcd4
SHA512
3e1b50c1079ef2d3ce9aa1280ee0c8251722bb9e29fd2188ac720b3bdd90ecc675bae827fa8defdc2a766ef8da89275cb0c5b554ae6db816e5a9d3897ad228e7
SSDEEP
393216:0dODV4dU8Srmg+9SkPh+b1sq3Zfc8z5a6adU:lV4NSrmqkPh+b1sqJEO5SU
Checks for missing Authenticode signature.
resource |
---|
unpack001/LiteRes.dll |
unpack001/LiteSkinUtils.dll |
unpack001/setup.exe |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
D:\Projects\WinRAR\sfx\setup\build\sfxrar64\Release\sfxrar.pdb
GetLastError
SetLastError
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GetTickCount
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
TerminateProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord1253
ord342
ord823
ord1182
ord1168
free
_initterm
malloc
_adjust_fdiv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord1233
ord1114
ord2055
ord2152
ord567
ord1113
ord3237
ord6376
ord4441
ord4837
ord3798
ord5290
ord2623
ord3742
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord2985
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord1601
ord4078
ord2648
ord4353
ord6374
ord5163
ord4275
ord535
ord2385
ord5241
ord4407
ord1776
ord6055
ord4003
ord858
ord2486
ord538
ord540
ord941
ord1168
ord1253
ord342
ord823
ord1182
ord3318
ord818
ord800
ord539
ord825
ord665
ord1979
ord537
ord5186
ord354
ord2864
ord6880
_CxxThrowException
memcpy
??1type_info@@UAE@XZ
free
strlen
memset
strncpy
_adjust_fdiv
malloc
_initterm
__CxxFrameHandler
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
fopen
fclose
strrchr
_purecall
GetLastError
MultiByteToWideChar
lstrlenA
LocalFree
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
GetProcAddress
InterlockedDecrement
InterlockedIncrement
GetCurrentProcessId
FreeLibrary
GetParent
EnableWindow
EnumWindows
OffsetRect
GetWindowThreadProcessId
GetSysColor
PostMessageA
IsWindow
GetWindowRect
GetStockObject
GetObjectA
CoCreateInstance
OleRun
CreateStreamOnHGlobal
CoRegisterClassObject
CoRevokeClassObject
VariantClear
SysFreeString
SysAllocString
LoadTypeLibEx
ord36
ord195
ord179
ord328
ord142
ord174
ord360
ord38
ord15
ord191
ord158
ord250
ord259
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
??0MCSkin@@AAE@XZ
??0MCSkin@@QAE@ABV0@@Z
??0MCSkinAdvisor@@AAE@XZ
??0MCSkinRegistry@@QAE@ABV0@@Z
??0MCSkinRegistry@@QAE@XZ
??0MISknSink@@QAE@ABV0@@Z
??0MISknSink@@QAE@XZ
??1MCSkin@@QAE@XZ
??1MCSkinAdvisor@@UAE@XZ
??1MCSkinRegistry@@QAE@XZ
??4MCSkin@@QAEAAV0@ABV0@@Z
??4MCSkinLoader@@QAEAAV0@ABV0@@Z
??4MCSkinRegistry@@QAEAAV0@ABV0@@Z
??4MISknSink@@QAEAAV0@ABV0@@Z
??_7MCSkinAdvisor@@6B@
??_7MISknSink@@6B@
?Advise@MCSkinAdvisor@@QAEKPAUISkinObject@@PAVMISknSink@@@Z
?ChangeSkin@MCSkin@@QAEJPBDI@Z
?CheckSkinVersion@MCSkin@@QAEGPBDAAV?$vector@VCString@@V?$allocator@VCString@@@std@@@std@@@Z
?CreateFontStruct@MCSkin@@QAEXPAUSkinLogFont@@H@Z
?CreateSkinComponent@MCSkin@@QAEJPAPAUISkin@@@Z
?EnumWindowsProc@MCSkin@@SGHPAUHWND__@@J@Z
?FindNames@MCSkin@@AAE_NPAUISkinObject@@PAPAGHAAV?$vector@VCString@@V?$allocator@VCString@@@std@@@std@@@Z
?FindPath@MCSkinLoader@@SAXXZ
?FromReg@MCSkinRegistry@@QAE_NXZ
?Get@MCSkin@@SAPAUISkin@@XZ
?GetAppColor@MCSkin@@SAKW4APP_COLOR@1@@Z
?GetDispatchMap@MCSkinAdvisor@@MBEPBUAFX_DISPMAP@@XZ
?GetHUE@MCSkin@@QAEEXZ
?GetInterfaceMap@MCSkinAdvisor@@MBEPBUAFX_INTERFACEMAP@@XZ
?GetMessageMap@MCSkinAdvisor@@MBEPBUAFX_MSGMAP@@XZ
?GetSkinFileID@MCSkin@@QAE?AVCString@@PBD@Z
?GetSkinFileID@MCSkin@@QAE?AVCString@@XZ
?GetSkinFullPathName@MCSkinRegistry@@QAEPBDXZ
?GetSysColor@MCSkin@@SAKH@Z
?GetWantSkin@MCSkinRegistry@@QAE_NXZ
?Initialize@MCSkin@@QAEJP6AXPAUIUnknown@@@Z@Z
?Initialize@MCSkinAdvisor@@QAE_NXZ
?Instance@MCSkin@@SAPAV1@XZ
?Instance@MCSkinAdvisor@@SAPAV1@XZ
?IsInitialized@MCSkin@@QBE_NXZ
?IsInitialized@MCSkinRegistry@@AAE_NXZ
?IsLoaded@MCSkin@@QBE_NXZ
?Load@MCSkin@@QAEJPBD@Z
?Load@MCSkinLoader@@SAJPAUISkin@@@Z
?OnDblClick@MCSkinAdvisor@@MAEXPAUIUnknown@@@Z
?OnMouseIn@MCSkinAdvisor@@MAEXPAUIUnknown@@@Z
?OnMouseMove@MCSkinAdvisor@@MAEXPAUIUnknown@@JJ@Z
?OnMouseOut@MCSkinAdvisor@@MAEXPAUIUnknown@@@Z
?OnRender@MCSkinAdvisor@@MAEXPAUIUnknown@@0JJ@Z
?OnSkinDblClick@MISknSink@@UAEXPAUIUnknown@@@Z
?OnSkinGenEvent@MCSkinAdvisor@@MAEXPAUIUnknown@@PBD@Z
?OnSkinGenEvent@MISknSink@@UAEXPAUIUnknown@@PBD@Z
?OnSkinMouseIn@MISknSink@@UAEXPAUIUnknown@@@Z
?OnSkinMouseMove@MISknSink@@UAEXPAUIUnknown@@JJ@Z
?OnSkinMouseOut@MISknSink@@UAEXPAUIUnknown@@@Z
?RenderParentBK@MCSkin@@QAE_NPAUHWND__@@PAUHDC__@@@Z
?SetAppValues@MCSkinRegistry@@SAXPAUHKEY__@@PBD1@Z
?SetCaptionFont@MCSkin@@QAEXAAV?$_com_ptr_t@V?$_com_IIID@UISkinObject@@$1?_GUID_6a5905c9_0bdd_49fb_9c45_cbb450d3bfd5@@3U__s_GUID@@A@@@@PAG@Z
?SetCaptionFont@MCSkin@@QAEXPAG@Z
?SetCaptionFont@MCSkin@@QAEXXZ
?SetFileName@MCSkinLoader@@SAXPBD@Z
?SetHUE@MCSkin@@QAEXE@Z
?SetMenuFont@MCSkin@@QAEXPAG@Z
?SetMenuFont@MCSkin@@QAEXXZ
?SetSkinFullPathName@MCSkinRegistry@@QAEXPBD@Z
?SetWantSkin@MCSkinRegistry@@QAEX_N@Z
?SkinFileExist@MCSkinLoader@@SA_NXZ
?ToReg@MCSkinRegistry@@QAEXXZ
?Unadvise@MCSkinAdvisor@@QAE_NAAK@Z
?Uninitialize@MCSkin@@QAE_NXZ
?Uninitialize@MCSkinAdvisor@@QAE_NXZ
?Unload@MCSkin@@QAE_NXZ
?_GetBaseDispatchMap@MCSkinAdvisor@@KGPBUAFX_DISPMAP@@XZ
?_GetBaseInterfaceMap@MCSkinAdvisor@@KGPBUAFX_INTERFACEMAP@@XZ
?_GetBaseMessageMap@MCSkinAdvisor@@KGPBUAFX_MSGMAP@@XZ
?_dispatchEntries@MCSkinAdvisor@@0QBUAFX_DISPMAP_ENTRY@@B
?_dispatchEntryCount@MCSkinAdvisor@@0IA
?_dwStockPropMask@MCSkinAdvisor@@0KA
?_interfaceEntries@MCSkinAdvisor@@0QBUAFX_INTERFACEMAP_ENTRY@@B
?_messageEntries@MCSkinAdvisor@@0QBUAFX_MSGMAP_ENTRY@@B
?dispatchMap@MCSkinAdvisor@@1UAFX_DISPMAP@@B
?interfaceMap@MCSkinAdvisor@@1UAFX_INTERFACEMAP@@B
?messageMap@MCSkinAdvisor@@1UAFX_MSGMAP@@B
?s_hRootKey@MCSkinRegistry@@0PAUHKEY__@@A
?s_sDefName@MCSkinRegistry@@0V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A
?s_sPath@MCSkinRegistry@@0V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A
?s_strFileName@MCSkinLoader@@2V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A
?s_strPath@MCSkinLoader@@2VCString@@A
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
GetModuleHandleA
GetProcAddress
CharNextA
RegCloseKey
ShellExecuteA
CoInitializeEx
VariantClear
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE