Static task
static1
Behavioral task
behavioral1
Sample
a7b9148fce1c28eeda96ee8807b8eb74165408eaa0aa1b7eb18e180867c82eaa.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a7b9148fce1c28eeda96ee8807b8eb74165408eaa0aa1b7eb18e180867c82eaa.exe
Resource
win10v2004-20240508-en
General
-
Target
a7b9148fce1c28eeda96ee8807b8eb74165408eaa0aa1b7eb18e180867c82eaa
-
Size
7.4MB
-
MD5
4fadc908554eeb6532386f7d1af217e4
-
SHA1
0c50cec9bc1ade05467b6ac20dab7f0bd630de30
-
SHA256
a7b9148fce1c28eeda96ee8807b8eb74165408eaa0aa1b7eb18e180867c82eaa
-
SHA512
fa938bb198367724051ab64e1fa94efdcb2102506014f73772113c9f96d17fc07d73b26370e7c992ccee6da7eba395c04f7ac67186c705827d05084e8781fe5f
-
SSDEEP
196608:hzYa2ufb5NssQGjHLBy0qSJB/3ID5LudjOr:hz5z5NvjFy0qKBEFKOr
Malware Config
Signatures
Files
-
a7b9148fce1c28eeda96ee8807b8eb74165408eaa0aa1b7eb18e180867c82eaa.exe windows:6 windows x86 arch:x86
90e2b5788e62831b6f04de30170c334c
Code Sign
b2:f9:6c:1c:62:4f:51:47:80:33:af:f2:0d:0a:5e:11Certificate
IssuerCN=A4 TECH USA,OU=ENGLAND SYSTEMS INC,O=Digital combo,L=ˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛ,ST=Made in France,C=FRANCENot Before19-05-2024 13:37Not After13-06-2026 00:00SubjectCN=A4 TECH USA,OU=ENGLAND SYSTEMS INC,O=Digital combo,L=ˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛˆ–%~ÿþù§¸ýßLÝÒXÕžsÂé·ú5~]ŒøþÛ,ST=Made in France,C=FRANCE39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03-05-2023 00:00Not After02-08-2034 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
3c:18:52:17:fe:0b:1a:1b:24:98:93:39:d2:79:0d:0c:ce:e8:6d:16:d8:4c:d6:7d:8f:1f:2b:7a:0b:bb:2b:71Signer
Actual PE Digest3c:18:52:17:fe:0b:1a:1b:24:98:93:39:d2:79:0d:0c:ce:e8:6d:16:d8:4c:d6:7d:8f:1f:2b:7a:0b:bb:2b:71Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSectionEx
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetCursorPos
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
CoUninitialize
oleaut32
SysAllocString
wtsapi32
WTSSendMessageW
Sections
.text Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp… Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp… Size: 6.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 684KB - Virtual size: 684KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ