5a20d291100cd26f8b1d80690873ec9b34a68e659e3561028fe0b752cdd8229d[.]zip

resource
unpack001/!!newSetup_22334_P@ssKey!!/UIxMarketPlugin.dll
unpack001/!!newSetup_22334_P@ssKey!!/relay.dll

5a20d291100cd26f8b1d80690873ec9b34a68e659e3561028fe0b752cdd8229d.zip

SHA256 5a20d291100cd26f8b1d80690873ec9b34a68e659e3561028fe0b752cdd8229d
MD5 0df1a62dc5d536a327c877487b96d95f
SHA1 c7af2801c5361e0b9a1a15b1aa5f24c36175107e
SHA512 bd04cce713bea53fe7eb3ade2b44538ad076b572c78a9bca192a61dd738760ac4f099d0b03311277c2fde5857a4c5a9ce1bd0401bb4509e99a3039fcd73039e8
SSDEEP 98304:hpXROcxROEsYbdA1XuhCX4kcOSHBlm9NDIS6uWHRCgKOAtN9flWdfH/Wv43:hpBnxRFsYbJhCIkc34NwuWxJKOA5s//3
MD5 SHA1 SHA512 SSDEEP

!!newSetup_22334_P@ssKey!!/Setup.exe

IMPHASH 7bbd05e7ccc991b148f02f5bc9ff9a97
SHA256 a05b592a971fe5011554013bcfe9a4aaf9cfc633bdd1fe3a8197f213d557b8d3
MD5 9fb4770ced09aae3b437c1c6eb6d7334
SHA1 fe54b31b0db8665aa5b22bed147e8295afc88a03
SHA512 140fee6daf23fe8b7e441b3b4de83554af804f00ecedc421907a385ac79a63164bd9f28b4be061c2ea2262755d85e14d3a8e7dc910547837b664d78d93667256
SSDEEP 49152:Y8UMSn5cV2N9LNwtQ5gRR+moI1axGbYj6QAl4ImDkg7d5lROCDG5yzlC97W+uJUM:QMS5hN9OtQ5gRjoI8xGbYj6QAl4gg7dF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

81:0e:f2:36:93:98:2f:30:e1:ed:0f:af:94:fe:2d:89:5a:3c:5c:ff

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Canon Inc.,OU=ICP Network Strategy Planning,O=Canon Inc.,L=Ohta-ku,ST=Tokyo,C=JP

Chains

Jun 1, 2015

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Serial Number

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Timespan

Jan 29, 1996 - Aug 1, 2028

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

Serial Number

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageNetscapeServerGatedCrypto

Timespan

Nov 8, 2006 - Nov 7, 2021

Subject

CN=Canon Inc.,OU=ICP Network Strategy Planning,O=Canon Inc.,L=Ohta-ku,ST=Tokyo,C=JP

Serial Number

68:aa:a3:0f:65:dd:ed:c6:40:8e:89:ee:2e:7c:0f:ba

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 20, 2014 - Jul 21, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

1

Major OS version

5

Entry point

1491443

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

PDB paths

C:\Users\ICP221\perforce\_perforce\Installer\UniversalInstaller\2.5.30\Project\UIxStandard\Win\Release\UniversalInstaller.pdb

uxtheme

CloseThemeData DrawThemeBackground OpenThemeData

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

kernel32

GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetProcessHeap SetEnvironmentVariableA GetConsoleMode GetConsoleCP WriteConsoleW InterlockedCompareExchange LCMapStringW LeaveCriticalSection EnterCriticalSection InterlockedExchange lstrlenW CloseHandle Sleep IsDBCSLeadByte MultiByteToWideChar SizeofResource LockResource LoadResource FindResourceW WideCharToMultiByte GetDriveTypeW GetTimeZoneInformation GetCurrentThreadId OpenThread WaitForSingleObject GetFileAttributesW SetFileAttributesW ResetEvent GetLastError GetUserDefaultUILanguage GetLocaleInfoW GetVolumeInformationW SetEvent MulDiv GetCurrentProcess GetDiskFreeSpaceExW OpenMutexW ReleaseMutex CreateFileW GetFileTime LocalAlloc LocalFree GetProcAddress FreeLibrary LoadLibraryA RaiseException GetModuleHandleW GetModuleFileNameW GetWindowsDirectoryW GlobalMemoryStatusEx GetSystemInfo GetStringTypeW IsValidCodePage GetOEMCP GetACP GetCPInfo IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter TerminateProcess HeapCreate SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetStdHandle SetUnhandledExceptionFilter GetFileType SetStdHandle HeapQueryInformation HeapSize ExitProcess RtlUnwind HeapReAlloc GetDateFormatW GetTimeFormatW GetSystemTimeAsFileTime CreateThread ExitThread VirtualQuery VirtualAlloc HeapFree HeapAlloc DecodePointer EncodePointer GetStartupInfoW HeapSetInformation GetCommandLineW FindResourceExW VirtualProtect SearchPathW GetProfileIntW GetTickCount GetTempPathW GetTempFileNameW GetNumberFormatW GetCurrentDirectoryW GetFileSizeEx GetFileAttributesExW GetUserDefaultLCID GetSystemDefaultLCID GetSystemDefaultUILanguage FindFirstFileW SetErrorMode lstrlenA GlobalGetAtomNameW TlsFree LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc TlsGetValue InterlockedIncrement GlobalFlags DeleteCriticalSection InitializeCriticalSectionAndSpinCount FileTimeToLocalFileTime FileTimeToSystemTime ReleaseActCtx CreateActCtxW GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileIntW ResumeThread SetThreadPriority lstrcmpA ConvertDefaultLocale CreateEventW GetFullPathNameW DuplicateHandle SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer lstrcmpiW GetThreadLocale FreeResource GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom GetVersionExW CompareStringW lstrcmpW GlobalFree GlobalSize GlobalAlloc FormatMessageW ActivateActCtx DeactivateActCtx SetLastError GlobalLock GlobalUnlock GetSystemWow64DirectoryW GetSystemDirectoryW CreateMutexW InterlockedDecrement ReadFile GetFileSize WriteFile lstrcpyW ProcessIdToSessionId GetCurrentProcessId GetCurrentThread VerifyVersionInfoW VerSetConditionMask LoadLibraryW CreateProcessW QueryPerformanceCounter QueryPerformanceFrequency GetLongPathNameW CopyFileW DeleteFileW RemoveDirectoryW FindNextFileW FindClose

user32

InsertMenuItemW TranslateAcceleratorW RegisterClipboardFormatW BringWindowToTop SetCursorPos CreateAcceleratorTableW LoadAcceleratorsW GetKeyboardState GetKeyboardLayout ToUnicodeEx DrawEdge DrawStateW GetSystemMenu SetClassLongW DestroyAcceleratorTable SetParent SetWindowRgn IsZoomed DrawIconEx LoadImageW CopyImage GetIconInfo NotifyWinEvent EnableScrollBar HideCaret DrawFocusRect InvertRect GetAsyncKeyState CreatePopupMenu GetMenuDefaultItem UnregisterClassW DestroyIcon GetNextDlgGroupItem ReleaseCapture SetCapture InvalidateRgn CopyAcceleratorTableW OffsetRect CharNextW SetLayeredWindowAttributes EnumDisplayMonitors SetRectEmpty KillTimer SetTimer DeleteMenu MessageBeep IsClipboardFormatAvailable SystemParametersInfoW DestroyMenu GetMenuItemInfoW LoadCursorW GetSysColorBrush RealChildWindowFromPoint MapVirtualKeyW GetKeyNameTextW ShowOwnedPopups SetCursor GetMessageW TranslateMessage ValidateRect SetWindowContextHelpId MapDialogRect PostQuitMessage CharUpperW IntersectRect GetDesktopWindow GetActiveWindow CreateDialogIndirectParamW GetNextDlgTabItem EndDialog GetCursorPos WindowFromPoint SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuW ReuseDDElParam CheckMenuItem ShowWindow MoveWindow SetWindowTextW IsDialogMessageW CheckDlgButton RegisterWindowMessageW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture SetWindowsHookExW CallNextHookEx GetClassLongW SetPropW GetPropW RemovePropW GetFocus GetWindowLongW GetLastActivePopup IsWindowEnabled UnpackDDElParam OpenClipboard SetFocus GetWindowTextLengthW GetWindowTextW SetActiveWindow DispatchMessageW BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageW MonitorFromWindow GetMonitorInfoW MapWindowPoints ScrollWindow TrackPopupMenu GetKeyState SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos ShowScrollBar UpdateWindow CreateWindowExW GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetWindowPlacement DefWindowProcW CallWindowProcW SetClipboardData CloseClipboard EmptyClipboard IsCharLowerW MapVirtualKeyExW UnionRect UpdateLayeredWindow MonitorFromPoint IsMenu PostThreadMessageW WaitMessage DefFrameProcW DefMDIChildProcW DrawMenuBar TranslateMDISysAccel CreateMenu GetMenu SetWindowPos GetWindow LoadMenuW GetMenuState GetMenuStringW AppendMenuW GetMenuItemID InsertMenuW GetMenuItemCount GetSubMenu SetMenuDefaultItem FrameRect GetUpdateRect CopyIcon CharUpperBuffW GetDoubleClickTime SubtractRect DestroyCursor GetWindowRgn EnableMenuItem InflateRect IsWindow GetWindowRect MessageBoxW InvalidateRect EnableWindow GetClientRect ReleaseDC GetDC GetParent SendMessageW IsWindowVisible DrawFrameControl PostMessageW GetDlgCtrlID SetRect GetForegroundWindow GetWindowThreadProcessId AttachThreadInput SetForegroundWindow GetSystemMetrics LoadIconW IsIconic DrawIcon CopyRect ExitWindowsEx EnumChildWindows GetClassNameW TrackMouseEvent PtInRect LockWindowUpdate IsRectEmpty RedrawWindow FillRect SetWindowLongW DefDlgProcW TabbedTextOutW DrawTextW DrawTextExW GrayStringW ScreenToClient ClientToScreen GetWindowDC BeginPaint EndPaint GetSysColor RemoveMenu

gdi32

SelectClipRgn GetViewportExtEx GetWindowExtEx PtVisible RectVisible TextOutW ExtTextOutW Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn CreatePatternBrush CreateBitmap SelectPalette GetObjectType CreateHatchBrush CopyMetaFileW CreateDCW SetRectRgn GetMapMode DPtoLP CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo GetRgnBox CreatePalette GetPaletteEntries GetNearestPaletteIndex RealizePalette GetSystemPaletteEntries CreateRoundRectRgn CreatePolygonRgn CreateEllipticRgn Polyline Ellipse Polygon SetPixel Rectangle OffsetRgn EnumFontFamiliesExW LPtoDP GetWindowOrgEx GetViewportOrgEx FillRgn FrameRgn GetBoundsRect ExtFloodFill SetPaletteEntries SetPixelV GetTextFaceW SetLayout GetLayout SetTextAlign MoveToEx LineTo IntersectClipRect ExcludeClipRect GetClipBox SetTextColor SetROP2 SetPolyFillMode SetBkColor CreatePen GetCurrentObject CreateSolidBrush RoundRect CombineRgn GetPixel CreateRectRgn CreateRectRgnIndirect GetTextExtentPoint32W SetBkMode SetMapMode PtInRegion RestoreDC GetDeviceCaps SaveDC CreateFontIndirectW GetStockObject PatBlt CreateCompatibleBitmap GetTextMetricsW GetTextColor BitBlt GetTextExtentExPointW DeleteObject DeleteDC SelectObject SetDIBColorTable CreateCompatibleDC GetObjectW CreateDIBSection GetObjectA GetBkColor GetDIBColorTable StretchBlt

msimg32

TransparentBlt GradientFill AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

CryptDeriveKey LookupPrivilegeValueW AdjustTokenPrivileges GetUserNameW InitializeSecurityDescriptor RegEnumKeyExW RegEnumValueW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegDeleteValueW RegSetValueExW RegCreateKeyExW RegCloseKey RegQueryValueExW RegOpenKeyExW OpenProcessToken CryptHashData CryptCreateHash CryptAcquireContextW CryptDecrypt CryptEncrypt CryptReleaseContext CryptDestroyKey CryptDestroyHash SetSecurityDescriptorDacl

shell32

SHGetSpecialFolderPathW SHGetMalloc SHGetSpecialFolderLocation SHBrowseForFolderW SHGetPathFromIDListW SHCreateDirectoryExW SHGetFolderPathW SHGetFileInfoW SHAppBarMessage DragQueryFileW DragFinish ShellExecuteW SHGetDesktopFolder

comctl32

InitCommonControlsEx ImageList_GetIconSize

shlwapi

PathIsDirectoryW StrRetToBufW PathIsRootW PathFileExistsW PathRemoveFileSpecW PathCanonicalizeW AssocQueryStringW PathStripToRootW PathIsUNCW PathFindExtensionW PathFindFileNameW UrlUnescapeW

ole32

ReleaseStgMedium CoTaskMemAlloc OleDuplicateData CoCreateGuid CLSIDFromProgID CLSIDFromString CoGetClassObject OleRun CoCreateInstance OleUninitialize CoTaskMemFree CoInitializeEx CoUninitialize CoInitialize StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal CoFreeUnusedLibraries CreateStreamOnHGlobal OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator OleLockRunning OleIsCurrentClipboard OleFlushClipboard DoDragDrop CoRevokeClassObject CoRegisterMessageFilter RevokeDragDrop CoLockObjectExternal RegisterDragDrop OleGetClipboard OleInitialize

oleaut32

VariantChangeType VariantCopy SysAllocStringLen SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen VarBstrFromDate OleCreateFontIndirect VariantClear VariantInit SysFreeString SysAllocString

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromStream GdipDrawImageRectI GdipCreateBitmapFromHBITMAP GdipCreateFontFromLogfontW GdipSetStringFormatTrimming GdipMeasureString GdipSetStringFormatLineAlign GdipSetWorldTransform GdipScaleMatrix GdipTranslateMatrix GdipDeleteMatrix GdipCreateMatrix GdipSetStringFormatAlign GdipDrawString GdipSetCompositingQuality GdipSetStringFormatFlags GdiplusShutdown GdipDrawImageI GdipDeleteGraphics GdipGetImageGraphicsContext GdipDisposeImage GdipFree GdipAlloc GdipCloneImage GdipCreateBitmapFromScan0 GdipBitmapUnlockBits GdipBitmapLockBits GdipGetImagePalette GdipGetImagePaletteSize GdipGetImageWidth GdipGetImageHeight GdipGetImagePixelFormat GdipCreateBitmapFromFile GdiplusStartup GdipSetInterpolationMode GdipCreateFontFromDC GdipCreateFontFromLogfontA GdipDeleteFont GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush GdipCreateStringFormat GdipDeleteStringFormat GdipSetTextRenderingHint GdipSetSmoothingMode GdipCreateFromHDC

oleacc

LresultFromObject AccessibleObjectFromWindow CreateStdAccessibleObject

imm32

ImmGetOpenStatus ImmGetContext ImmReleaseContext

winmm

PlaySoundW

wininet

InternetSetOptionExW InternetCanonicalizeUrlW InternetCrackUrlW HttpOpenRequestW InternetConnectW HttpSendRequestW InternetReadFile InternetWriteFile InternetSetFilePointer InternetSetStatusCallbackW InternetOpenW InternetGetLastResponseInfoW InternetCloseHandle HttpQueryInfoW InternetQueryDataAvailable

netapi32

NetApiBufferFree NetUserGetInfo

wtsapi32

WTSFreeMemory WTSQuerySessionInformationW

!!newSetup_22334_P@ssKey!!/UIxMarketPlugin.dll

IMPHASH 12fbd1bc75de00e13e4da8fd25e68e9a
SHA256 cbcea8f28d8916219d1e8b0a8ca2db17e338eb812431bc4ad0cb36c06fd67f15
MD5 d1ba9412e78bfc98074c5d724a1a87d6
SHA1 0572f98d78fb0b366b5a086c2a74cc68b771d368
SHA512 8765de36d3824b12c0a4478c31b985878d4811bd0e5b6fba4ea07f8c76340bd66a2da3490d4871b95d9a12f96efc25507dfd87f431de211664dbe9a9c914af6f
SSDEEP 49152:/7Q2CH7FiYk7q8wOP2nyh9VgFdJYZL6MsQv4Pvg3KIA8wuSgKacXTT3Kos2lpm:sZH7FZk7LP2nyh9VgFdJYZL6NQgPVIAv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

1023891

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_DLL

PDB paths

C:\Users\ICP221\perforce\_perforce\Installer\UniversalInstaller\2.5.30\Project\UIxStandard\Win\Release\UIxMarketPlugin.pdb

kernel32

VerifyVersionInfoW VerSetConditionMask GetConsoleMode GetConsoleCP LCMapStringW GetTimeZoneInformation GetStringTypeW QueryPerformanceCounter GetEnvironmentStringsW WriteConsoleW SetEnvironmentVariableA FreeEnvironmentStringsW GetModuleFileNameA GetStartupInfoW SetHandleCount IsValidCodePage GetOEMCP GetACP GetCPInfo HeapDestroy HeapCreate GetStdHandle IsProcessorFeaturePresent IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetFileType SetStdHandle VirtualQuery GetSystemInfo VirtualAlloc GetSystemTimeAsFileTime ExitProcess HeapQueryInformation HeapSize CreateThread ExitThread HeapReAlloc RaiseException RtlUnwind HeapFree GetCommandLineA EncodePointer DecodePointer HeapAlloc FindResourceExW VirtualProtect SearchPathW Sleep GetProfileIntW GetTickCount InitializeCriticalSectionAndSpinCount GetTempPathW GetTempFileNameW GetNumberFormatW GetWindowsDirectoryW lstrcpyW GetCurrentDirectoryW GetFileTime GetFileSizeEx GetFileAttributesW FileTimeToLocalFileTime GetFileAttributesExW GetUserDefaultUILanguage GetLocaleInfoW InterlockedExchange GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile CreateFileW lstrcmpiW GlobalFlags FreeResource GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom GetVersionExW LoadLibraryW lstrcmpW FileTimeToSystemTime lstrlenA lstrcmpA GlobalGetAtomNameW CompareStringW InterlockedIncrement GetModuleHandleW GetProcAddress WaitForSingleObject GetCurrentThreadId ResumeThread SetThreadPriority CloseHandle MultiByteToWideChar CopyFileW GlobalSize FormatMessageW MulDiv lstrlenW WideCharToMultiByte GetCurrentProcessId FreeLibrary FindResourceW LoadResource LockResource SizeofResource InterlockedDecrement GetModuleFileNameW ActivateActCtx ReleaseActCtx DeactivateActCtx TlsFree GlobalFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalAlloc GlobalHandle GlobalUnlock GlobalReAlloc GlobalLock EnterCriticalSection TlsGetValue LeaveCriticalSection LocalFree LocalAlloc GetLastError SetLastError

user32

SetCapture MapVirtualKeyW IsRectEmpty CreatePopupMenu GetMenuDefaultItem RedrawWindow SetLayeredWindowAttributes EnumDisplayMonitors KillTimer SetTimer DeleteMenu ShowOwnedPopups SetCursor IntersectRect InvalidateRect SetRectEmpty IsIconic PostQuitMessage EndPaint BeginPaint GetWindowDC GrayStringW DrawTextExW DrawTextW TabbedTextOutW FillRect SystemParametersInfoW DestroyMenu GetMenuItemInfoW InflateRect CharUpperW DestroyIcon GetDesktopWindow RealChildWindowFromPoint ClientToScreen ShowWindow MoveWindow SetWindowTextW IsDialogMessageW CheckDlgButton RegisterWindowMessageW LoadIconW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetCapture GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW IsWindow SetFocus GetForegroundWindow SetActiveWindow BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MonitorFromWindow GetMonitorInfoW MapWindowPoints ScrollWindow TrackPopupMenu IsZoomed SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow GetAsyncKeyState UpdateWindow GetClientRect PostMessageW CreateWindowExW SetWindowRgn SetParent ReleaseCapture InvertRect DrawFocusRect GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx GetWindowRect ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo CopyRect PtInRect SetWindowPlacement GetWindowPlacement GetDlgCtrlID DefWindowProcW CallWindowProcW HideCaret EnableScrollBar NotifyWinEvent MessageBeep GetNextDlgTabItem OffsetRect GetIconInfo CopyImage LoadImageW GetNextDlgGroupItem DrawIconEx EndDialog CreateDialogIndirectParamW TranslateAcceleratorW UnhookWindowsHookEx MessageBoxW EnableWindow IsWindowEnabled GetLastActivePopup GetWindowLongW GetParent SendMessageW GetWindowThreadProcessId RemoveMenu GetSubMenu GetMenuItemCount InsertMenuW PostThreadMessageW GetMenuItemID AppendMenuW GetMenuStringW GetMenuState ValidateRect GetCursorPos PeekMessageW GetKeyState IsWindowVisible GetActiveWindow DispatchMessageW TranslateMessage GetMessageW CallNextHookEx SetWindowsHookExW GetSysColorBrush GetSysColor ReleaseDC GetDC GetSystemMetrics DestroyAcceleratorTable SetClassLongW GetSystemMenu LoadCursorW GetWindowTextW GetWindowTextLengthW CheckMenuItem EnableMenuItem ModifyMenuW GetFocus LoadBitmapW GetMenuCheckMarkDimensions SetMenuItemBitmaps GetWindow SetWindowPos SetWindowLongW GetMenu DrawStateW DrawEdge DrawFrameControl CopyAcceleratorTableW ToUnicodeEx GetKeyboardLayout GetKeyboardState BringWindowToTop InsertMenuItemW LoadAcceleratorsW LoadMenuW ReuseDDElParam UnpackDDElParam SetRect ShowScrollBar WindowFromPoint CreateAcceleratorTableW SetCursorPos LockWindowUpdate GetKeyNameTextW OpenClipboard SetClipboardData CloseClipboard EmptyClipboard IsCharLowerW MapVirtualKeyExW UnionRect UpdateLayeredWindow MonitorFromPoint IsMenu GetWindowRgn DestroyCursor DrawIcon MapDialogRect SubtractRect GetDoubleClickTime CharUpperBuffW CopyIcon RegisterClipboardFormatW GetUpdateRect FrameRect IsClipboardFormatAvailable SetMenuDefaultItem CreateMenu TranslateMDISysAccel DrawMenuBar DefMDIChildProcW DefFrameProcW WaitMessage SetMenu

gdi32

PtVisible RectVisible TextOutW Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC CreatePatternBrush GetStockObject SelectPalette GetObjectType CreatePen CreateSolidBrush CreateHatchBrush CreateCompatibleBitmap CreateRectRgnIndirect SetRectRgn CombineRgn PatBlt DPtoLP CreateDIBitmap GetTextMetricsW EnumFontFamiliesW GetTextCharsetInfo GetBkColor GetNearestPaletteIndex RealizePalette GetSystemPaletteEntries CreateDIBSection CreateRoundRectRgn GetWindowExtEx GetTextColor CreateEllipticRgn Polyline Ellipse Polygon SetDIBColorTable StretchBlt SetPixel Rectangle OffsetRgn GetRgnBox EnumFontFamiliesExW LPtoDP GetWindowOrgEx GetViewportOrgEx PtInRegion FillRgn FrameRgn GetBoundsRect ExtFloodFill SetPaletteEntries SetPixelV GetTextFaceW CreatePalette GetPixel SetTextAlign MoveToEx LineTo IntersectClipRect ExcludeClipRect GetClipBox SetMapMode SetROP2 GetViewportExtEx CreateRectRgn SelectClipRgn SetLayout CreatePolygonRgn GetLayout GetDeviceCaps SetPolyFillMode SetBkMode RestoreDC SaveDC GetTextExtentPoint32W ExtTextOutW BitBlt CreateCompatibleDC CreateFontIndirectW DeleteObject GetObjectW SetBkColor SetTextColor CreateBitmap CreateDCW GetPaletteEntries CopyMetaFileW

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

comdlg32

GetFileTitleW

advapi32

RegQueryValueExW RegEnumKeyExW RegSetValueExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegOpenKeyExW RegCloseKey

shell32

SHGetFileInfoW SHGetDesktopFolder SHGetPathFromIDListW SHGetSpecialFolderLocation SHAppBarMessage SHBrowseForFolderW DragQueryFileW DragFinish ShellExecuteW

ole32

OleRun OleGetClipboard RegisterDragDrop CoLockObjectExternal RevokeDragDrop DoDragDrop OleLockRunning IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor CreateStreamOnHGlobal CoInitializeEx CoInitialize CoUninitialize CoCreateInstance OleDuplicateData CoTaskMemAlloc ReleaseStgMedium CoTaskMemFree

oleaut32

VariantChangeType VariantClear SysFreeString VarBstrFromDate VariantInit SysAllocString VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen SysAllocStringLen

shlwapi

PathRemoveFileSpecW PathFindExtensionW PathIsUNCW PathStripToRootW PathFindFileNameW

oleacc

AccessibleObjectFromWindow CreateStdAccessibleObject LresultFromObject

gdiplus

GdipDrawImageI GdipGetImageGraphicsContext GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePalette GdipGetImagePaletteSize GdipFree GdipAlloc GdipDeleteGraphics GdipDisposeImage GdipCreateBitmapFromHBITMAP GdiplusStartup GdiplusShutdown GdipCreateFromHDC GdipSetInterpolationMode GdipDrawImageRectI GdipCloneImage GdipGetImageWidth GdipGetImageHeight GdipGetImagePixelFormat

msimg32

TransparentBlt AlphaBlend

imm32

ImmReleaseContext ImmGetContext ImmGetOpenStatus

winmm

PlaySoundW

comctl32

ImageList_GetIconSize

!!newSetup_22334_P@ssKey!!/aliyah.aspx

SHA256 852a10f3dee11656504f27b6b26d4262074ee4136d2bbf45f77c999673918f22
MD5 df9d7d6dc70cf0bfcd258b41c2bfc33b
SHA1 055f5ad05ed8223e5e4e8cf8111a4c4b9f8491c1
SHA512 2d1a76ae5cccacd55a1a69664c4011fa6b4bfa5a0312958d56b3c8f5c69803761daccf2060cbfcd6e9e0ebc88efa8f13928379797db4cb4a6535caaca39b2957
SSDEEP 1536:SmtTYAeV7zBRXVC56NrBoYNmJQ8Qsb1g1Vil7CDKwjhGZ/XsIjrw:Sm5FeVXXVq6NrBo9Q8QeaVkCDKwjgXD4
MD5 SHA1 SHA512 SSDEEP

!!newSetup_22334_P@ssKey!!/chin.torrent

SHA256 ebf3fb5bbc2d005b240d1f66aa64c9dff85eb9e8c3d97b1f28ff63eec98e0c04
MD5 b56077f398bfb824b64a3f496b7873ae
SHA1 e33498188b11f35773f40c87193764df0d9e79db
SHA512 280f84b771ba3fac2614dd8de554872f6259c11ef41b3f030e53c0d9f362022729b87f3772b56b8d4df0a6542fd9353ea122f187720e3830002de20b8e51139c
SSDEEP 24576:auvUZXpBFxabrXFsT5GdJeXPGvD1CmhGof33JNs0MgKZB2adMM86R:auvUZ5xanVW5GSXC/3JKoKZgi3
MD5 SHA1 SHA512 SSDEEP

!!newSetup_22334_P@ssKey!!/relay.dll

IMPHASH b621df906e0394d025a0242c6a967904
SHA256 5445b90053ca9c5c57ce4955bcc2a8b25da581cef94a69dad57404f6c3a89a0b
MD5 af8da0b55ec2a9a7f3b92ff3b8129556
SHA1 4a8acc4418fc6460511593919e7def2e40742381
SHA512 9f83b6914f08b5f592f4fd425f894966da35e604f766706ec554b68af931d8b1a0060387776c336794fede86a1d21a544458613de6f3bb695dfff777647e6f0b
SSDEEP 49152:L2gm39uH+I5/GxEoadcqX7Q9F7r40YB+eTcq+PDXx1lWz09x:3mtuH+e/RoadcqX7Qz7rDY8vq+Pbx1lc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

995460

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_DLL

PDB paths

C:\Users\ICP221\perforce\_perforce\Installer\UniversalInstaller\2.5.30\Project\UIxStandard\Win\Release\relay.pdb

kernel32

InterlockedExchange GetLocaleInfoW GetUserDefaultUILanguage GetFileAttributesExW GetFileSizeEx GetCurrentDirectoryW GetWindowsDirectoryW GetNumberFormatW GetTempFileNameW GetTempPathW InitializeCriticalSectionAndSpinCount GetTickCount GetProfileIntW SearchPathW VirtualProtect FindResourceExW DecodePointer GetCommandLineA ExitThread CreateThread HeapAlloc HeapFree EncodePointer RtlUnwind RaiseException HeapReAlloc HeapSize HeapQueryInformation ExitProcess GetSystemTimeAsFileTime VirtualAlloc GetSystemInfo VirtualQuery SetStdHandle GetFileType TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent SetHandleCount GetStdHandle GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW GetTimeZoneInformation GetStringTypeW GetConsoleCP GetConsoleMode WriteConsoleW SetEnvironmentVariableA SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetFileSize lstrcmpiW GlobalFlags FreeResource GlobalAddAtomW GlobalFindAtomW GlobalDeleteAtom GetVersionExW lstrcmpW lstrlenA lstrcmpA GlobalGetAtomNameW CompareStringW InterlockedIncrement SetErrorMode GetCurrentThreadId ResumeThread SetThreadPriority TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection InterlockedDecrement ActivateActCtx ReleaseActCtx CreateActCtxW DeactivateActCtx WideCharToMultiByte GlobalFree GlobalSize GlobalAlloc GlobalLock GlobalUnlock FormatMessageW MulDiv lstrlenW SetLastError FileTimeToLocalFileTime FileTimeToSystemTime MultiByteToWideChar GetFileTime CreateFileW GetProcAddress FreeLibrary LoadLibraryW VerifyVersionInfoW VerSetConditionMask GetFileAttributesW CopyFileW FindClose FindFirstFileW lstrcpyW ProcessIdToSessionId GetCurrentProcessId LocalFree LocalAlloc GetCurrentProcess GetCurrentThread CreateProcessW GetLastError FindResourceW LoadResource LockResource SizeofResource GetModuleFileNameW GetModuleHandleW Sleep GetFullPathNameW GetVolumeInformationW DuplicateHandle GetExitCodeProcess WaitForSingleObject GetProcessId CloseHandle

user32

GetKeyboardState CreateAcceleratorTableW SetCursorPos LockWindowUpdate GetKeyNameTextW OpenClipboard SetClipboardData CloseClipboard EmptyClipboard IsCharLowerW MapVirtualKeyExW UnionRect UpdateLayeredWindow MonitorFromPoint IsMenu PostThreadMessageW WaitMessage DefFrameProcW DefMDIChildProcW DrawMenuBar TranslateMDISysAccel CreateMenu SetMenuDefaultItem IsClipboardFormatAvailable FrameRect GetUpdateRect RegisterClipboardFormatW CopyIcon CharUpperBuffW GetDoubleClickTime SubtractRect MapDialogRect DrawIcon DestroyCursor GetWindowRgn CopyImage GetIconInfo OffsetRect GetNextDlgTabItem MessageBeep NotifyWinEvent EnableScrollBar HideCaret DrawFocusRect InvertRect ReleaseCapture GetAsyncKeyState SetCapture MapVirtualKeyW IsRectEmpty CreatePopupMenu GetMenuDefaultItem RedrawWindow SetLayeredWindowAttributes EnumDisplayMonitors KillTimer DeleteMenu ShowOwnedPopups SetCursor InvalidateRect SetRectEmpty IsIconic IntersectRect SystemParametersInfoW DestroyMenu GetMenuItemInfoW InflateRect CharUpperW DestroyIcon EndPaint BeginPaint GetWindowDC GrayStringW DrawTextExW DrawTextW TabbedTextOutW FillRect GetDesktopWindow RealChildWindowFromPoint ClientToScreen ShowWindow MoveWindow SetWindowTextW IsDialogMessageW CheckDlgButton RegisterWindowMessageW LoadIconW SendDlgItemMessageW SendDlgItemMessageA WinHelpW IsChild GetKeyboardLayout GetClassLongW SetPropW GetPropW RemovePropW IsWindow SetFocus GetForegroundWindow SetActiveWindow BeginDeferWindowPos EndDeferWindowPos GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MonitorFromWindow GetMonitorInfoW MapWindowPoints ScrollWindow TrackPopupMenu SetMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar UpdateWindow GetClientRect GetClassInfoExW GetClassInfoW RegisterClassW AdjustWindowRectEx GetWindowRect ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo CopyRect PtInRect SetWindowPlacement GetWindowPlacement GetDlgCtrlID CallWindowProcW GetMenu SetWindowLongW SetWindowPos GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus ModifyMenuW EnableMenuItem CheckMenuItem GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId GetParent GetWindowLongW GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxW LoadCursorW GetDC ReleaseDC GetSysColor GetSysColorBrush UnregisterClassW SetWindowsHookExW CallNextHookEx GetActiveWindow IsWindowVisible SendMessageW FindWindowExW PostMessageW RegisterClassExW CreateWindowExW GetSystemMetrics GetKeyState PeekMessageW GetCursorPos ValidateRect UnhookWindowsHookEx GetMenuState GetMenuStringW AppendMenuW GetMenuItemID InsertMenuW GetMenuItemCount GetSubMenu RemoveMenu GetClassNameW GetMessageW TranslateMessage DispatchMessageW PostQuitMessage DefWindowProcW ToUnicodeEx CopyAcceleratorTableW DrawFrameControl DrawEdge DrawStateW GetSystemMenu SetClassLongW DestroyAcceleratorTable SetWindowRgn SetParent IsZoomed WindowFromPoint SetRect UnpackDDElParam ReuseDDElParam LoadMenuW LoadAcceleratorsW InsertMenuItemW BringWindowToTop TranslateAcceleratorW CreateDialogIndirectParamW EndDialog DrawIconEx GetNextDlgGroupItem GetCapture LoadImageW SetTimer

msimg32

TransparentBlt AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathStripToRootW PathFindExtensionW PathFindFileNameW PathRemoveFileSpecW PathIsUNCW

oleacc

CreateStdAccessibleObject LresultFromObject AccessibleObjectFromWindow

gdiplus

GdipDrawImageI GdipGetImageGraphicsContext GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePalette GdipFree GdipAlloc GdipDeleteGraphics GdipDisposeImage GdipCreateBitmapFromHBITMAP GdiplusStartup GdiplusShutdown GdipCreateFromHDC GdipSetInterpolationMode GdipDrawImageRectI GdipCloneImage GdipGetImageWidth GdipGetImageHeight GdipGetImagePixelFormat GdipGetImagePaletteSize

imm32

ImmReleaseContext ImmGetContext ImmGetOpenStatus

winmm

PlaySoundW

netapi32

NetUserGetInfo NetApiBufferFree

wtsapi32

WTSFreeMemory WTSQuerySessionInformationW

gdi32

SetLayout SelectClipRgn CreateRectRgn GetViewportExtEx GetWindowExtEx BitBlt GetPixel PtVisible RectVisible TextOutW ExtTextOutW Escape SelectObject SetViewportOrgEx OffsetViewportOrgEx GetLayout SetTextAlign MoveToEx LineTo GetClipBox SetMapMode ExtSelectClipRgn SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx SetROP2 SetPolyFillMode SetBkMode DeleteDC CreatePatternBrush CreateCompatibleDC RestoreDC SelectPalette GetObjectType CreatePen CreateSolidBrush IntersectClipRect CreateFontIndirectW GetTextExtentPoint32W CreateRectRgnIndirect SetRectRgn CombineRgn PatBlt DPtoLP CreateCompatibleBitmap CreateDIBitmap GetTextMetricsW EnumFontFamiliesW GetTextCharsetInfo GetBkColor CreatePalette GetPaletteEntries GetNearestPaletteIndex RealizePalette GetSystemPaletteEntries CreateDIBSection CreateRoundRectRgn CreatePolygonRgn GetTextColor CreateEllipticRgn Polyline Ellipse Polygon SetDIBColorTable StretchBlt SetPixel Rectangle OffsetRgn GetRgnBox EnumFontFamiliesExW LPtoDP GetWindowOrgEx GetViewportOrgEx PtInRegion FillRgn FrameRgn GetBoundsRect ExtFloodFill SetPaletteEntries SetPixelV GetTextFaceW ExcludeClipRect CreateHatchBrush SaveDC DeleteObject GetObjectW SetBkColor SetTextColor CreateBitmap CreateDCW CopyMetaFileW ScaleWindowExtEx SetWindowExtEx GetStockObject GetDeviceCaps OffsetWindowOrgEx

winspool.drv

DocumentPropertiesW ClosePrinter OpenPrinterW

comdlg32

GetFileTitleW

advapi32

FreeSid IsValidSecurityDescriptor SetSecurityDescriptorOwner SetSecurityDescriptorGroup SetSecurityDescriptorDacl AddAccessAllowedAce InitializeAcl GetLengthSid InitializeSecurityDescriptor AllocateAndInitializeSid DuplicateToken OpenProcessToken OpenThreadToken AccessCheck RegCloseKey RegOpenKeyExW RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegSetValueExW RegEnumKeyExW RegQueryValueExW

shell32

SHAppBarMessage DragQueryFileW DragFinish ShellExecuteW SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetDesktopFolder SHGetFileInfoW ShellExecuteExW SHBrowseForFolderW

ole32

OleGetClipboard CoLockObjectExternal RevokeDragDrop DoDragDrop OleLockRunning IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor CoTaskMemFree CreateStreamOnHGlobal CoInitializeEx CoInitialize CoUninitialize CoCreateInstance OleDuplicateData CoTaskMemAlloc ReleaseStgMedium RegisterDragDrop

oleaut32

VariantClear VariantChangeType SysFreeString VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen SysAllocStringLen VarBstrFromDate VariantInit SysAllocString

!!newSetup_22334_P@ssKey!!/updater/manager/ks_tyres.ini

SHA256 894d3c57598ecb22c769cc3ea8219859a95e22740e72394a474012ea2119b3d9
MD5 47f6571c7884da6c743551ac724186d4
SHA1 c338ce7d292c78f420876332de93684102ec04ac
SHA512 5cf57f3f2c53fcbedf44cd2c896008c41607d7583045e37b819da1b1d3ce26073802e73fab74ea6def035f11a256d9f0d11a87991cea14ef5baf67bda21d6e20
SSDEEP 192:oqCaCVsP1MQzeRO11bvR2hpg6iYRkX+DHj5jkZU3KAg/sVfKPPfYqlwvR:9bf1MQzeRA1TR2hpg6iY+X+SuaAg+zqW
MD5 SHA1 SHA512 SSDEEP

!!newSetup_22334_P@ssKey!!/vcruntime140.dll

IMPHASH 2262054530b5f8bbeb0c4e3a111a37eb
SHA256 eb6a3a491efcc911f9dff457d42fed85c4c170139414470ea951b0dafe352829
MD5 81b11024a8ed0c9adfd5fbf6916b133c
SHA1 c87f446d9655ba2f6fddd33014c75dc783941c33
SHA512 e4b1c694cb028fa960d750fa6a202bc3a477673b097b2a9e0991219b9891b5f879aa13aa741f73acd41eb23feee58e3dd6032821a23e9090ecd9cc2c3ec826a1
SSDEEP 1536:ckch/beb1bBhdXPFSAS7wIVktX8/eZT2G//ecb2Z0X3I+zl3z:ck2+1blXPg7wIVkts/UF/ecb2a5F
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

bc:d2:76:3b:7e:63:a7:ff:42:e9:e4:69:b5:8b:b3:2e:cc:0a:93:7f:c3:0e:20:7b:65:68:e3:88:d9:29:e0:11

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 21, 2024

PE Signature issue

Digest

bc:d2:76:3b:7e:63:a7:ff:42:e9:e4:69:b5:8b:b3:2e:cc:0a:93:7f:c3:0e:20:7b:65:68:e3:88:d9:29:e0:11

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 21, 2024

Minor OS version

0

Major OS version

6

Entry point

61744

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb

_CreateFrameInfo _CxxThrowException _EH_prolog _FindAndUnlinkFrame _IsExceptionObjectToBeDestroyed _NLG_Dispatch2 _NLG_Return _NLG_Return2 _SetWinRTOutOfMemoryExceptionCallback __AdjustPointer __BuildCatchObject __BuildCatchObjectHelper __CxxDetectRethrow __CxxExceptionFilter __CxxFrameHandler __CxxFrameHandler2 __CxxFrameHandler3 __CxxLongjmpUnwind __CxxQueryExceptionSize __CxxRegisterExceptionObject __CxxUnregisterExceptionObject __DestructExceptionObject __FrameUnwindFilter __GetPlatformExceptionInfo __RTCastToVoid __RTDynamicCast __RTtypeid __TypeMatch __current_exception __current_exception_context __intrinsic_setjmp __processing_throw __report_gsfailure __std_exception_copy __std_exception_destroy __std_terminate __std_type_info_compare __std_type_info_destroy_list __std_type_info_hash __std_type_info_name __telemetry_main_invoke_trigger __telemetry_main_return_trigger __unDName __unDNameEx __uncaught_exception __uncaught_exceptions __vcrt_GetModuleFileNameW __vcrt_GetModuleHandleW __vcrt_InitializeCriticalSectionEx __vcrt_LoadLibraryExW _chkesp _except_handler2 _except_handler3 _except_handler4_common _get_purecall_handler _get_unexpected _global_unwind2 _is_exception_typeof _local_unwind2 _local_unwind4 _longjmpex _purecall _seh_longjmp_unwind _seh_longjmp_unwind4 _set_purecall_handler _set_se_translator _setjmp3 longjmp memchr memcmp memcpy memmove memset set_unexpected strchr strrchr strstr unexpected wcschr wcsrchr wcsstr

!!newSetup_22334_P@ssKey!!/vcruntime140_app.dll

IMPHASH d72f37c91b3ba73278f6e6e6efc9239b
SHA256 813a447192c4fa7d25d0716b769399546f8bf6b31269dd8ad47f9812008d79e6
MD5 c0f29bd3b0eb4d8795d609a0c52e0926
SHA1 2f1958696d66edaf38079e370dcc2b41c7474122
SHA512 02bc56ad129a7d6382ba8d68b68a52fa70ace9bce68aae56d901bc60451982e358805e950ab49ae3d0c052c2ac6d44a6f5ab3679cd4ce2fbb205e4a8c7d7b670
SSDEEP 384:K0g/dJiHlDoeuczbaj7wTfzvg55dHRN7ooiFWSlGs4kz:w/d8lDoeuczbaj7Cg9jHPs
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

99:82:a9:4e:91:b8:80:0b:1e:44:36:1e:20:20:90:71:c8:89:97:21:12:02:b0:a1:90:e5:08:82:53:9c:2c:e8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 21, 2024

Minor OS version

0

Major OS version

6

Entry point

4896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\BA\201\s\140_release\vcrt_fwd_x86_release\Release\vcruntime140_app.pdb

_CreateFrameInfo _CxxThrowException _EH_prolog _FindAndUnlinkFrame _IsExceptionObjectToBeDestroyed _NLG_Dispatch2 _NLG_Return _NLG_Return2 _SetWinRTOutOfMemoryExceptionCallback __AdjustPointer __BuildCatchObject __BuildCatchObjectHelper __CxxDetectRethrow __CxxExceptionFilter __CxxFrameHandler __CxxFrameHandler2 __CxxFrameHandler3 __CxxLongjmpUnwind __CxxQueryExceptionSize __CxxRegisterExceptionObject __CxxUnregisterExceptionObject __DestructExceptionObject __FrameUnwindFilter __GetPlatformExceptionInfo __RTCastToVoid __RTDynamicCast __RTtypeid __TypeMatch __current_exception __current_exception_context __intrinsic_setjmp __processing_throw __report_gsfailure __std_exception_copy __std_exception_destroy __std_terminate __std_type_info_compare __std_type_info_destroy_list __std_type_info_hash __std_type_info_name __telemetry_main_invoke_trigger __telemetry_main_return_trigger __unDName __unDNameEx __uncaught_exception __uncaught_exceptions __vcrt_GetModuleFileNameW __vcrt_GetModuleHandleW __vcrt_InitializeCriticalSectionEx __vcrt_LoadLibraryExW _chkesp _except_handler2 _except_handler3 _except_handler4_common _get_purecall_handler _get_unexpected _global_unwind2 _is_exception_typeof _local_unwind2 _local_unwind4 _longjmpex _purecall _seh_longjmp_unwind _seh_longjmp_unwind4 _set_purecall_handler _set_se_translator _setjmp3 longjmp memchr memcmp memcpy memmove memset set_unexpected strchr strrchr strstr unexpected wcschr wcsrchr wcsstr

!!newSetup_22334_P@ssKey!!/x86/HDHelper_[0MB]_[1].exe

IMPHASH 82a2d44124f64fef31cc8e1daa6c7ece
SHA256 72ece91f65a461c5023695bf5f31b5b6b5bd629dba8407524e8144f6d1e160e8
MD5 8a179892518a2c4e8a63afa91de7bdce
SHA1 e9b095c966ccc4c4900b4cf741c067d2a0f43cd4
SHA512 91abb220c222a89a2df27818b8385b4015128a35b7d4c43d0f497717a4e5a55dfb9dc1da3f47a49a2400ea8300d41d52277331a6c7c3437ac5cb867a4027b220
SSDEEP 12288:voJoMf8uSKkd/kAseRy/M96oQD08WjWYatid4TwzSxK/G8kHcL:CEKkd/wXMwoQJW6Ya5TwzUKeH8L
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

de:cc:ee:a7:3f:78:21:5c:80:10:85:3f:99:1d:d8:4a:5e:00:1d:cc:0d:b9:71:db:6f:e7:16:c3:86:7c:71:81

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Sep 22, 2022

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

0c:28:96:11:07:88:b1:29:82:5f:b1:d1:f6:ba:ac:a3

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2022 - May 1, 2024

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

1

Major OS version

5

Entry point

190432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\jenkins\workspace\ccd-hyperdrive\main\native\win32\build\msvs_win32\Release\x86\sym\HDHelper\HDHelper\HDHelper.pdb

kernel32

GetCurrentProcess ReadFile WaitForSingleObject lstrcmpW GetModuleHandleW GetExitCodeProcess GetVersionExW Sleep lstrcmpiW MoveFileExW CloseHandle DeleteFileW FormatMessageW SetFileAttributesW GetFileAttributesW CreateFileW FindClose GetTempPathW GetModuleFileNameW FindNextFileW SetLastError FindFirstFileW GetProcessHeap DeleteCriticalSection LocalFree GetProcAddress DecodePointer HeapAlloc LoadLibraryW RaiseException GetLastError LocalAlloc InitializeCriticalSectionEx CreateProcessW HeapFree WriteConsoleW SetEndOfFile GetConsoleOutputCP SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindFirstFileExW SetFilePointerEx ReadConsoleW GetConsoleMode SetStdHandle EnumSystemLocalesW IsValidLocale GetLocaleInfoW CompareStringW GetCommandLineW GetCommandLineA GetModuleHandleExW ExitProcess GetStdHandle GetTimeZoneInformation GetFileType LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc RtlUnwind GetStartupInfoW InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObjectEx InitializeCriticalSectionAndSpinCount OutputDebugStringW IsDebuggerPresent GetCPInfo LCMapStringEx EncodePointer GetStringTypeW WriteFile FlushFileBuffers MultiByteToWideChar WideCharToMultiByte CreateEventW GlobalAlloc GlobalFree VerSetConditionMask VerifyVersionInfoW FreeLibrary TerminateProcess OpenProcess HeapSize CreateToolhelp32Snapshot Process32NextW SetEvent Process32FirstW HeapReAlloc ResetEvent GetCurrentProcessId SetFilePointer GetCurrentThreadId EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetFileInformationByHandle GetUserDefaultLangID GetFileSizeEx FileTimeToSystemTime GetLocalTime GetTimeFormatW SystemTimeToFileTime GetDateFormatW CreateMutexW ReleaseMutex OpenMutexW GetUserDefaultUILanguage LCMapStringW GetUserDefaultLCID

user32

GetWindowThreadProcessId AllowSetForegroundWindow GetShellWindow EnumWindows

advapi32

LookupAccountSidW EqualSid FreeSid AllocateAndInitializeSid DuplicateTokenEx GetUserNameW ConvertSidToStringSidW CreateProcessAsUserW ConvertStringSidToSidW OpenProcessToken GetTokenInformation SetSecurityDescriptorDacl GetSecurityDescriptorDacl RegGetKeySecurity RegCloseKey SetEntriesInAclW CreateWellKnownSid RegCreateKeyExW RegSetKeySecurity RegSetValueExW InitializeSecurityDescriptor RegOpenKeyExW RegDeleteValueW RegQueryValueExW AdjustTokenPrivileges LookupPrivilegeValueW

shell32

SHGetSpecialFolderPathW SHCreateDirectoryExW

ole32

CLSIDFromProgID OleRun CLSIDFromString CoCreateInstance CoUninitialize CoInitialize

oleaut32

VariantClear SysAllocString SysFreeString VariantInit VariantCopy GetErrorInfo

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

shlwapi

PathIsDirectoryW PathFindFileNameW PathFileExistsW PathStripPathW PathAppendW PathRenameExtensionW PathRemoveExtensionW PathAddExtensionW PathRemoveFileSpecW PathIsFileSpecW

!!newSetup_22334_P@ssKey!!/x86/NvStereoUtilityOGL_[1MB]_[1].exe

IMPHASH 3eeeacdc454cd4576630513f651ad97f
SHA256 c2c71318a17f7f767e5d203d22b48f27eecae46a4f37082d7b413c51da6183b3
MD5 017cd77d01314e72a973ff0c7882453d
SHA1 288238159cf18418149f5cd3475a6ebb9f45a631
SHA512 b1d4c87e7d8585c16aa50499398c9a04d90bcd32ab36fbf7a357bc15abce0cd802a259cc7431de9fe2ca77aa68298aab5041157308be4601f7f7aa0c3c180b03
SSDEEP 24576:zCVnoQHgdFnJhVaqajA4+ubDaSKYqSpamUbSBe:zgnoFFnJjaqajA4+yaSK5SpamUbSBe
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

32:0a:19:54:38:1d:69:20:73:54:92:40:46:c7:74:b7:b9:00:64:f0:4a:ec:d6:da:3d:6e:a2:19:4f:9a:3d:77

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Chains

Jul 1, 2021

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Minor OS version

0

Major OS version

6

Entry point

26536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\sw5\sw\devrel\Playpen\snash\StereoUtilityOGL\Release\StereoUtilityOGL.pdb

opengl32

glColor3f glDisable glDisableClientState glEnable glEnableClientState glLightModeli glLightfv glNormalPointer glRotatef glTexCoordPointer glTranslatef glVertexPointer wglCreateContext wglDeleteContext wglGetProcAddress wglMakeCurrent glBegin glBindTexture glClear glClearColor glCullFace glDepthFunc glDrawBuffer glEnd glFrontFace glFrustum glGenTextures glGetBooleanv glGetError glGetString glVertex3fv glLoadIdentity glVertex2f glScalef glPushMatrix glPopMatrix glOrtho glLineWidth glViewport glBlendFunc glTexParameteri glTexImage1D glTexGeni glTexGenfv glTexEnvf glShadeModel glNormal3fv glMatrixMode

kernel32

GetConsoleMode GetConsoleCP FlushFileBuffers SetConsoleCtrlHandler GetProcessHeap GetStringTypeW SetEnvironmentVariableW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindNextFileA FindFirstFileExW FindFirstFileExA FindClose CreateThread WaitForSingleObjectEx CloseHandle OutputDebugStringW OutputDebugStringA GetCurrentThread EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW HeapAlloc HeapFree GetACP GetModuleHandleExW ExitProcess HeapSize MultiByteToWideChar GetModuleFileNameA GetModuleFileNameW GetStdHandle GetLastError AllocConsole WriteFile GetFileType SetStdHandle RaiseException EncodePointer LoadLibraryExW GetProcAddress FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetLastError RtlUnwind InterlockedFlushSList InterlockedPushEntrySList GetModuleHandleW GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter HeapReAlloc SetFilePointerEx DecodePointer WriteConsoleW CreateFileW WideCharToMultiByte UnhandledExceptionFilter

user32

wsprintfA GetMessageA TranslateMessage DispatchMessageA PostMessageA DefWindowProcA PostQuitMessage RegisterClassA CreateWindowExA ShowWindow MoveWindow SetWindowPos GetFocus SetTimer LoadAcceleratorsA TranslateAcceleratorA GetSystemMetrics SetMenu UpdateWindow GetDC ReleaseDC InvalidateRect ValidateRect GetWindowRect MessageBoxA SetWindowLongA LoadCursorA LoadIconA EnumDisplaySettingsA EnumDisplayDevicesA

gdi32

SwapBuffers SetPixelFormat DescribePixelFormat ChoosePixelFormat GetDeviceCaps

!!newSetup_22334_P@ssKey!!/x86/VSLauncher_[0MB]_[1].exe

IMPHASH 61cdf76393ba81a66e782c6a30558888
SHA256 87048cff2227d2901314760618d23917cfbc5cc15fc22dc355e803c5ee5fb211
MD5 7a7bb3b0e57e4fb32c57b74e78e657ad
SHA1 f1dee943b1b6238b1466d83325c4099d189cd4b5
SHA512 ef0c9985b640189ed9991b301cfbf9771df961e1bf67bf68c5833667db53977c9745bcfb42e059d8bb5bcd7a88253a715d86f65612dccc33514ccda3baaf24c2
SSDEEP 3072:Dawahjy56hh65Ndqp9ikqtPLy0gJmU/3j41IGvQC2mCILuCW+VoNDRUiuDhJoueT:dLlavj41nDlDOO9uunwiLWyIE2n
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

41:07:31:b9:03:b4:64:ef:55:3b:59:f5:04:b2:23:11:69:2d:16:05:7b:b2:10:2a:c1:f5:b8:fb:ef:26:39:50

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 21, 2024

Minor OS version

0

Major OS version

6

Entry point

104768

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\dbs\el\ddvsm\out\binaries\x86ret\bin\i386\VSLauncher.pdb

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW RegQueryInfoKeyW RegDeleteKeyA RegEnumKeyExA RegOpenKeyExA RegSetValueExA RegCreateKeyExA RegDeleteValueA EventRegister EventWrite EventProviderEnabled EventUnregister

kernel32

HeapFree HeapAlloc RaiseException HeapDestroy HeapSize WideCharToMultiByte GetEnvironmentVariableW FreeLibrary GetProcAddress GetModuleHandleA lstrcmpiA IsDBCSLeadByte SizeofResource LoadResource FindResourceA LoadLibraryExA GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionEx GetCommandLineW DecodePointer FindFirstFileW FindNextFileW FindClose ExpandEnvironmentStringsW GetFullPathNameW GetLongPathNameW GetStartupInfoW GetStdHandle SetEnvironmentVariableW CreateProcessW WaitForSingleObject CompareFileTime LockResource FindResourceExW FindResourceW CloseHandle GetUserDefaultUILanguage GetFileAttributesW lstrlenA WriteConsoleW ReadFile FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP FindNextFileA FindFirstFileExA OutputDebugStringW LCMapStringW UnmapViewOfFile GetLastError MultiByteToWideChar MapViewOfFile CreateFileMappingA GetFileSize CreateFileW SetErrorMode IsValidCodePage GetProcessHeap HeapReAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetModuleHandleW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetSystemInfo VirtualAlloc VirtualProtect VirtualQuery WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetACP GetStringTypeW GetFileType

user32

LoadStringW CharPrevW GetWindowRect SystemParametersInfoA SetWindowPos MessageBoxW CharNextA DialogBoxParamW GetDlgItem SetDlgItemTextW SendDlgItemMessageW SendMessageA EndDialog

ole32

CoTaskMemAlloc CoTaskMemFree CoTaskMemRealloc CoCreateInstance CoInitialize CoUninitialize

oleaut32

SysAllocStringLen SysStringLen SysStringByteLen SysAllocStringByteLen SysAllocString SysFreeString VarUI4FromStr

shell32

ShellExecuteExW CommandLineToArgvW

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-core-processthreads-l1-1-1.dll

SHA256 e5ea2c21fb225090f7d0db6c6990d67b1558d8e834e86513bc8ba7a43c4e7b36
MD5 29001f316ccfc800e2246743df9b15b3
SHA1 dc734266648d3463c1f8d88c1ce7d900a4e3b26c
SHA512 4cffc0c6f94fcd1155909993c622b9103abd7a7bce88742a10abd6a3496a334d667a39bb601f99eb174aa847d7dae056e0d9769754ca86320579b262a20a6599
SSDEEP 384:WRtwDfIe9jWfhWC+Y3DGk8ZpH3GCJErra8o7Q+Y3DGUKn8JN77hhET:ape9A5DGkiRBEXaR70DGa3hqT
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

2b:7d:ca:c2:1d:8f:e4:ee:68:3f:55:68:6e:ee:d7:a5:55:c3:ae:9e:d8:56:10:32:f2:3b:00:77:cf:30:56:b6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

3a:0d:45:f4:86:4b:ac:8e:ed:e1:a8:ee:ce:8a:b3:ac:b3:80:83:c6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-core-processthreads-l1-1-1.pdb

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-core-profile-l1-1-0.dll

SHA256 d00a0edace14715bf79dbd17b715d8a74a2300f0adb1f3fc137edfb7074c9b0a
MD5 6ee66dca31c5cce57740d677c85b4ce7
SHA1 8969db03f98f9548caf8e2d8c7f2f5cd7071f333
SHA512 592e3b6c689a0d6c87079c54c3e13e6ee1fc0c5c770abc854040e85464687c46f0a558be22f8759dbc4a100810386ee379ffe4359cf9091d9afae548bc597be2
SSDEEP 384:WiIWfhWx+Y3DGk8ZpH3GCJErcx3l/r7+Y3DGU78JN77hhC6UHR:doDGkiRBEWV/rxDGT3h06UHR
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

5f:3f:72:a9:0d:1b:b9:0f:31:df:c3:c2:81:ef:56:73:e3:d5:f3:b0:6f:40:dd:85:41:eb:20:5b:73:f5:08:f1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

c2:52:7c:b8:6d:76:c7:79:18:1c:fc:56:30:40:6f:11:ca:31:69:36

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-core-profile-l1-1-0.pdb

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-core-rtlsupport-l1-1-0.dll

SHA256 d11093fdc1d5c9213b9b2886ce91db3ded17ef8dae1615a8c7ffbc55b8e3f79b
MD5 0069fd29263c0dd90314c48bbce852ef
SHA1 dfb99c850a69e67e85f0a0985659f325bd8f84fc
SHA512 71965e8dd2fd81d0c6dba4dbec8d2d1bfd4a644ef6bba4f6027de4bcdf9c07da16f27f2156c21b52e678c75f0a93a4bcbc3e1942f0a73f1eea5ff64b70662f70
SSDEEP 384:WCGeVxWfhWD+Y3DGk8ZpH3GCJErYtN+Y3DGUO8JN77hhTew:3GeVmyDGkiRBEojDGa3h9ew
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

f5:ec:83:e1:f0:57:33:6d:ea:35:e3:a0:f2:f4:79:ec:45:81:9f:2e:35:73:b2:e7:8a:eb:de:11:f4:80:c9:5d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

64:e9:ed:cc:72:0c:b7:d1:30:dc:d9:d9:69:a4:24:77:16:31:95:79

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-core-rtlsupport-l1-1-0.pdb

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-core-string-l1-1-0.dll

SHA256 3807db7acf1b40c797e4d4c14a12c3806346ae56b25e205e600be3e635c18d4f
MD5 2e5c29fc652f432b89a1afe187736c4d
SHA1 96f8480b9339411d5d8c94918e983523b1a55c56
SHA512 fe1135532e18127f2cfefaaa4a19020d6c790374f648dc93383d58ee52b147d1451af01b8624234bd5d77abe2451eb3e15cbe72a19d283f00cf78c05c43041df
SSDEEP 384:W4yMv9WfhWx+Y3DGk8ZpH3GCJEr4ey/+Y3DGU888JN77hhnY1:DyMvaIDGkiRBEsnDGX3hxY1
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

23:f7:59:ab:ab:36:6b:42:ba:c7:18:ac:2c:aa:8b:7d:2a:a3:03:60:d7:f7:eb:e4:3f:1e:80:a0:b4:c0:6d:a0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

a4:dd:9d:4f:3d:e2:1f:37:9b:d2:36:25:fb:92:c5:dc:63:08:f3:97

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-core-string-l1-1-0.pdb

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-core-synch-l1-1-0.dll

SHA256 8bb38a7a59fbaa792b3d5f34f94580429588c8c592929cbd307afd5579762abc
MD5 979c67ba244e5328a1a2e588ff748e86
SHA1 4c709ce527550eb7534cb6362afdb3623c98254e
SHA512 49f3c3319aa462b445c6a0b816e10034f6e5a9cf1250ea30b348cfa1ef71525e9f62e2f13253f61375f51fc574847de0d509cffa95103771be356327d5fef90d
SSDEEP 384:Wjdv3V0dfpkXc0vVaCWfhWt+Y3DGk8ZpH3GCJErHZpn+Y3DGUrUN8JN77hhYl:Wdv3VqpkXc0vVabkDGkiRBEtplDGEUq8
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

bd:2e:df:93:66:8f:63:8d:ba:91:83:45:84:44:22:43:bd:1e:59:5d:5b:63:12:fb:df:3e:63:d0:62:f9:c6:7e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

63:1f:d0:c3:03:31:f9:92:bc:68:de:99:6a:f4:ce:2a:06:6a:59:bf

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-core-synch-l1-1-0.pdb

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-core-synch-l1-2-0.dll

SHA256 9ac63682e03d55a5d18405d336634af080dd0003b565d12a39d6d71aaa989f48
MD5 659e4febc208545a2e23c0c8b881a30d
SHA1 11b890cc05c1e7c95f59eda4bb8ce8bc12b81591
SHA512 010ab6d3971fabd2a956f891b8d9d20ef487e722443b2882a1a329830dc5c80d262e03a844cd3f5c3e4efcfbad72b9e1fbbf7d9dc6cf85ed034d84726946ce07
SSDEEP 384:WHtZ36WfhW8+Y3DGk8ZpH3GCJEFxMDD+Y3DGEC8q8JN77hhFGT:EbDGkiRBEsJDGS13hj+
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

d5:7a:e9:28:76:29:a9:dd:7e:32:0b:ca:61:66:77:95:fc:93:7b:de:af:79:0e:5c:cf:df:10:01:19:98:22:76

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

75:ed:b7:f2:16:e8:88:7f:f3:08:76:dc:5d:c9:7c:2a:e4:6c:42:f4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-core-synch-l1-2-0.pdb

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-core-sysinfo-l1-1-0.dll

SHA256 1fe918979f1653d63bb713d4716910d192cd09f50017a6ecb4ce026ed6285df9
MD5 cef4b9f680faae322170b961a3421c5b
SHA1 dd89a2d355df989bbd8648789472bfe9c14afcd5
SHA512 f56617290d4ac25231631d708a6c8b003bdd358bae9672f7dee539a96b292c13e04c65ba5f05937c52f73288eb3dd7cba479ed030942a0d9d3a15512548fa4a9
SSDEEP 384:WBTnWfhWt+Y3DGk8ZpH3GCJEFxqIDh/h+Y3DGER6vJ8JN77hhHWT:0TsIDGkiRBE+IxfDGM6vW3h5WT
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

12:27:75:72:0b:20:29:90:7d:8c:9e:91:41:f4:60:f6:13:7f:23:e6:db:39:b5:52:53:24:b2:ff:c5:aa:82:6c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

cb:85:e7:0e:53:77:0d:c1:23:1e:66:5c:b5:7f:87:65:9a:ef:64:d1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-core-sysinfo-l1-1-0.pdb

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-core-timezone-l1-1-0.dll

SHA256 a108a8f20ded00e742a1f818ef00eb425990b6b24a2bcd060dea4d7f06d3f165
MD5 69df2cce4528c9e38d04a461ba1f992b
SHA1 bb1d0da76cf696acf2e0f4e03e6d63fbad4325aa
SHA512 4d02eecdda0fffc10d5509830079984c7a887b4ca3a80359aa56117b302dcfa594b0710c9f415c823d1674b5c689d31aade44f21750ccd7d53010e67f0b6f0d2
SSDEEP 384:WGOWfhWc+Y3DGk8ZpH3GCJEFxi+3T7Tu+Y3DGEu8JN77hh2KI:5XDGkiRBEm+uDGQ3h7I
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

34:6e:05:70:ac:35:c5:e2:d4:9f:8e:22:79:f9:17:3e:2b:3a:d6:d9:78:48:5c:de:73:97:04:6d:84:13:14:35

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

79:39:32:96:a7:50:8e:b4:c7:6d:f9:16:21:28:3e:64:08:f9:7e:77

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-core-timezone-l1-1-0.pdb

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-core-util-l1-1-0.dll

SHA256 68bd9c086d210eb14e78f00988ba88ceaf9056c8f10746ab024990f8512a2296
MD5 c6553959aecd5bac01c0673cfdf86b68
SHA1 045585659843f7214c79659a88302996bfb480a2
SHA512 ae8e42a428202d05fea4f1e6a4d3b919b644a792567f876b0fc392b1cddb856547b4c3b433c002fded6df4d4daec8fb7235f30d1ff9f42943d9e2557ade364d6
SSDEEP 384:WyzWWfhW++Y3DGk8ZpH3GCJErst5+Y3DGU1a8JN77hh8T:35DGkiRBEQpDGw3hKT
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

66:aa:33:af:38:5e:81:d6:7a:9d:39:f9:d7:b9:63:54:26:b3:cc:8e:4c:9c:e0:27:a7:6a:78:a9:3d:f9:8b:23

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

30:50:36:e1:d2:8a:3a:ae:51:88:03:ee:e4:39:44:d8:86:85:29:de

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-core-util-l1-1-0.pdb

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-crt-conio-l1-1-0.dll

SHA256 4aeeae0ac9f6c1b0b8835067ea3b7fc429f353565f18de7858f4ea5d6f72072e
MD5 7190cbfad2d7773d3b88ccc25533a651
SHA1 71fe2bacc14b433d51328ea0810c1a030c80d844
SHA512 b314666c400268bf261c5f9e9966ad0680435241e7a24d85b28ae4405d798b80eedb65ed8db7e8d93df90f886a6719a8b7ace8c25d0429392bc061868890c40c
SSDEEP 384:WL5WfhWO+Y3DGk8ZpH3GCJErBf+Y3DGUCU8JN77hhIw:FVDGkiRBELDGfX3hKw
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

d2:50:df:4e:50:dd:3b:af:f7:11:ea:2d:4b:2d:fb:a7:12:7b:a5:80:40:51:52:65:2f:89:14:79:4f:e7:7c:ba

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

e1:e6:e3:77:f5:45:0f:39:9e:9f:35:cf:71:5a:fc:78:1f:bb:99:6c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-crt-conio-l1-1-0.pdb

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-crt-convert-l1-1-0.dll

SHA256 77b69e829bdc26c7b2474be6b8a2382345b2957e23046897e40992a8157a7ba1
MD5 3e415147ccd7c712618868bdd7a200cd
SHA1 b332f29915d846519dcb725d39e8c50604d7b414
SHA512 7e7e50f148414f8a84b4c39d3c7c1e0952f86f95873f3abc25b7f08574bbcce41394a59451868020b178bf68df12615bd356677e8c935c1185c5d07d15e61896
SSDEEP 384:WluyxWfhWK+Y3DGk8ZpH3GCJEFxkNN0O+Y3DGEhy8JN77hhHL:RhDGkiRBEqDGsd3h9L
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

af:39:f7:9f:d5:a1:46:43:f5:a6:cd:a6:17:8d:2c:bc:99:5b:17:b6:f9:26:2b:86:77:07:e4:0f:72:7d:9f:44

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

6e:0c:10:bd:e8:f1:57:a4:46:f6:44:ba:7e:c8:8b:38:cd:fe:0e:9e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-crt-convert-l1-1-0.pdb

__toascii _atodbl _atodbl_l _atof_l _atoflt _atoflt_l _atoi64 _atoi64_l _atoi_l _atol_l _atoldbl _atoldbl_l _atoll_l _ecvt _ecvt_s _fcvt _fcvt_s _gcvt _gcvt_s _i64toa _i64toa_s _i64tow _i64tow_s _itoa _itoa_s _itow _itow_s _ltoa _ltoa_s _ltow _ltow_s _strtod_l _strtof_l _strtoi64 _strtoi64_l _strtoimax_l _strtol_l _strtold_l _strtoll_l _strtoui64 _strtoui64_l _strtoul_l _strtoull_l _strtoumax_l _ui64toa _ui64toa_s _ui64tow _ui64tow_s _ultoa _ultoa_s _ultow _ultow_s _wcstod_l _wcstof_l _wcstoi64 _wcstoi64_l _wcstoimax_l _wcstol_l _wcstold_l _wcstoll_l _wcstombs_l _wcstombs_s_l _wcstoui64 _wcstoui64_l _wcstoul_l _wcstoull_l _wcstoumax_l _wctomb_l _wctomb_s_l _wtof _wtof_l _wtoi _wtoi64 _wtoi64_l _wtoi_l _wtol _wtol_l _wtoll _wtoll_l atof atoi atol atoll btowc c16rtomb c32rtomb mbrtoc16 mbrtoc32 mbrtowc mbsrtowcs mbsrtowcs_s mbstowcs mbstowcs_s mbtowc strtod strtof strtoimax strtol strtold strtoll strtoul strtoull strtoumax wcrtomb wcrtomb_s wcsrtombs wcsrtombs_s wcstod wcstof wcstoimax wcstol wcstold wcstoll wcstombs wcstombs_s wcstoul wcstoull wcstoumax wctob wctomb wctomb_s wctrans

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-crt-environment-l1-1-0.dll

SHA256 6c9c0dc7b36afe07dfb07dd373fc757ff25df4793e6384d7a6021471a474f0b9
MD5 ad0cbb9978fcf60d9e9ca45de6a28d30
SHA1 65549d9d7ee72de7d0cc356f92ad22eeb8dc18cc
SHA512 aaf4919e7629cd0bcf52283d578214043a4bdf6597a7d808dfcecd5fa1ecbd0b1395c60a165c575d20ca42928500815e14837b9e05530a667c6898e14243d64d
SSDEEP 384:WgWfhWx+Y3DGk8ZpH3GCJEFxHiA6+Y3DGEi8JN77hhksg:CsDGkiRBEJeDG03hCD
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

12:50:ab:7d:96:b1:03:e5:9c:33:57:e5:a2:a0:b0:20:c6:70:41:b6:fc:13:b7:33:4e:95:4a:ec:63:2c:b4:a8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

c5:39:0c:5d:fd:6d:02:3f:78:e0:49:32:92:57:8b:49:82:d4:9a:26

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-crt-environment-l1-1-0.pdb

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-crt-filesystem-l1-1-0.dll

SHA256 85b1b189ce9e3c6f4d2efdd4cd82b0807f681bea2d28851caaf545990de99000
MD5 14f407d94c77b1b0039ae2c89b07a2ff
SHA1 528b91a8a8611da45463fac0a6bd5c58233f8fbc
SHA512 152b97a656acd984592bf58854222ec97c661f9f8d19557ea03501457fb5a07821f90d332f21b1b51a5bce5ab84f862354b8ee21c7c1f6b7aa1c127f4a73ab5d
SSDEEP 384:Wcq6nWm5CpWfhW++Y3DGk8ZpH3GCJErNi4H+Y3DGUfhd8JN77hhcu:G6nWm5CeBDGkiRBEp5DGk63hqu
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

fc:47:2d:ca:6b:a1:9d:72:3c:5f:36:47:b3:d2:7a:57:1a:d1:90:9b:a8:d2:90:fd:0a:65:1c:c0:c9:09:c1:97

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

f9:a5:18:70:cc:4c:b9:ed:b4:4d:b8:5d:43:4e:52:ff:7d:59:3a:56

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-crt-filesystem-l1-1-0.pdb

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-crt-heap-l1-1-0.dll

SHA256 0166edfb23cfc77519c97862a538a69b5d805d6a17d6e235f46927af5c04b3c9
MD5 9c373c00ac3138233bdf1655c7be8e86
SHA1 ee38f868e32950d1b8185249edc6ad4e1bc5592f
SHA512 d2f56b3169c1fea1a604523b2215dbad02c6306bd804445b367756f288310554dd049aefd024babc26a3b270b8aede8b10e5ec8d80e772d3d1076b8013491067
SSDEEP 384:WgY3eRWfhWn+Y3DGk8ZpH3GCJErTpTX+Y3DGUm8JN77hhwJ:TGeDGkiRBERTVDGm3hiJ
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

6e:d6:5e:72:3e:36:d8:eb:18:5a:15:7c:b7:d1:d7:a2:94:3a:0a:f8:1d:12:ef:82:99:65:78:35:67:28:54:40

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

14:b3:5f:6d:73:dc:fc:c0:a9:10:3a:cd:c2:7b:b5:5b:25:79:6e:80

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-crt-heap-l1-1-0.pdb

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-crt-locale-l1-1-0.dll

SHA256 f16447b5fc7fe6fb8a6699a3cef1b2b8ba92d408579bcc272d3dd76acd801e2a
MD5 c5d747f96237b6e9aa85c58745d30c80
SHA1 c6ad21597265faf25ea8d7f09577f3e6f4f7be10
SHA512 5bcee06d62633ecdfdf5dd1bf92ff9278f535dc5f21bfe36faaca15e378beb4da6be7ba9767569119fbf9f7383ffdb3a4a17c99d5918a64b8e12926ac0ec3140
SSDEEP 384:WVWfhW2+Y3DGk8ZpH3GCJErYIcc+Y3DGUA8JN77hhKdf:JxDGkiRBE44DGk3h09
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

5a:45:92:9b:72:0d:e4:40:22:56:a2:e1:f6:2a:62:af:87:6b:ea:09:d2:31:d1:f8:19:7d:a0:d3:5a:75:b8:04

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

82:4d:d6:e4:c3:34:d8:4e:2e:38:55:84:0c:2d:a8:9f:20:c3:1b:a7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-crt-locale-l1-1-0.pdb

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-crt-math-l1-1-0.dll

SHA256 c7115159babdaa1f52e478e67b4e612da2332fda4e4036999b29425fe303b6e8
MD5 bc418a3461c5fdfa1a0d75f7e03d08a7
SHA1 5cfefa62226f117b7e2fe58961269294eb62b84c
SHA512 4c9f3d461a5fc42d829d517ef523423ceb18f6667e6f2d83f1e5cd645a359d32b58ac8652ea734f567ed3b9e2999f358bf0e95bf38265df7abe3fe4b2f5fa978
SSDEEP 384:WXQUbM4Oe59Ckb1hgmLVWfhWC+Y3DGk8ZpH3GCJEr0a6eOq+Y3DGUOe8JN77hhoq:SRMq59Bb1jyRDGkiRBEQeOODGp3hqQ
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

3a:0e:44:23:c0:fa:ef:3c:a2:b9:75:e9:78:49:ba:5a:76:a5:a1:f0:55:ca:52:1a:c2:9d:09:8f:b9:66:36:9d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

33:29:11:ca:36:3c:eb:96:9c:d1:1e:07:b1:15:13:e0:5d:32:92:a8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-crt-math-l1-1-0.pdb

_Cbuild _Cmulcc _Cmulcr _FCbuild _FCmulcc _FCmulcr _LCbuild _LCmulcc _LCmulcr __setusermatherr _cabs _chgsign _chgsignf _copysign _copysignf _d_int _dclass _dexp _dlog _dnorm _dpcomp _dpoly _dscale _dsign _dsin _dtest _dunscale _except1 _fd_int _fdclass _fdexp _fdlog _fdnorm _fdopen _fdpcomp _fdpoly _fdscale _fdsign _fdsin _fdtest _fdunscale _finite _finitef _fpclass _fpclassf _get_FMA3_enable _hypot _hypotf _isnan _isnanf _j0 _j1 _jn _ld_int _ldclass _ldexp _ldlog _ldpcomp _ldpoly _ldscale _ldsign _ldsin _ldtest _ldunscale _logb _logbf _nextafter _nextafterf _scalb _scalbf _set_FMA3_enable _y0 _y1 _yn acos acosf acosh acoshf acoshl asin asinf asinh asinhf asinhl atan atan2 atan2f atanf atanh atanhf atanhl cabs cabsf cabsl cacos cacosf cacosh cacoshf cacoshl cacosl carg cargf cargl casin casinf casinh casinhf casinhl casinl catan catanf catanh catanhf catanhl catanl cbrt cbrtf cbrtl ccos ccosf ccosh ccoshf ccoshl ccosl ceil ceilf cexp cexpf cexpl cimag cimagf cimagl clog clog10 clog10f clog10l clogf clogl conj conjf conjl copysign copysignf copysignl cos cosf cosh coshf cpow cpowf cpowl cproj cprojf cprojl creal crealf creall csin csinf csinh csinhf csinhl csinl csqrt csqrtf csqrtl ctan ctanf ctanh ctanhf ctanhl ctanl erf erfc erfcf erfcl erff erfl exp exp2 exp2f exp2l expf expm1 expm1f expm1l fabs fdim fdimf fdiml floor floorf fma fmaf fmal fmax fmaxf fmaxl fmin fminf fminl fmod fmodf frexp hypot ilogb ilogbf ilogbl ldexp lgamma lgammaf lgammal llrint llrintf llrintl llround llroundf llroundl log log10 log10f log1p log1pf log1pl log2 log2f log2l logb logbf logbl logf lrint lrintf lrintl lround lroundf lroundl modf modff nan nanf nanl nearbyint nearbyintf nearbyintl nextafter nextafterf nextafterl nexttoward nexttowardf nexttowardl norm normf norml pow powf remainder remainderf remainderl remquo remquof remquol rint rintf rintl round roundf roundl scalbln scalblnf scalblnl scalbn scalbnf scalbnl sin sinf sinh sinhf sqrt sqrtf tan tanf tanh tanhf tgamma tgammaf tgammal trunc truncf truncl

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-crt-multibyte-l1-1-0.dll

SHA256 c6b4e1d903b3cc83bfaffbe4e82eee634cff8f97f12217caa45b464ddc4e1455
MD5 9e9c6f83a015029808f5257f7b7e39c6
SHA1 5674192eb60eb152773fe0d50161f32759e2ea0f
SHA512 6e124732646cbe95ef94773d57b08c68a399854f906b14f15996bb12400d5e92b34596c38795a3ba4cdf8db4e8dd5ad486890634951a4686c6679b486ab19cb0
SSDEEP 384:WPy+Kr6aLPmIHJI6/CpG3t2G3t4odXLVWfhWS+Y3DGk8ZpH3GCJErRMOnR+Y3DG3:uZKrZPmIHJI6kVDGkiRBE9nDGa3hYV
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

14:80:01:b3:58:1c:85:61:5d:26:39:4b:bf:53:f3:3a:df:7e:95:a1:d9:b9:09:26:4e:2d:38:3c:fa:3d:ac:d8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

07:eb:e8:45:ea:ad:1d:74:5f:21:29:93:a5:86:52:10:29:e7:63:5d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-crt-multibyte-l1-1-0.pdb

__p__mbcasemap __p__mbctype _ismbbalnum _ismbbalnum_l _ismbbalpha _ismbbalpha_l _ismbbblank _ismbbblank_l _ismbbgraph _ismbbgraph_l _ismbbkalnum _ismbbkalnum_l _ismbbkana _ismbbkana_l _ismbbkprint _ismbbkprint_l _ismbbkpunct _ismbbkpunct_l _ismbblead _ismbblead_l _ismbbprint _ismbbprint_l _ismbbpunct _ismbbpunct_l _ismbbtrail _ismbbtrail_l _ismbcalnum _ismbcalnum_l _ismbcalpha _ismbcalpha_l _ismbcblank _ismbcblank_l _ismbcdigit _ismbcdigit_l _ismbcgraph _ismbcgraph_l _ismbchira _ismbchira_l _ismbckata _ismbckata_l _ismbcl0 _ismbcl0_l _ismbcl1 _ismbcl1_l _ismbcl2 _ismbcl2_l _ismbclegal _ismbclegal_l _ismbclower _ismbclower_l _ismbcprint _ismbcprint_l _ismbcpunct _ismbcpunct_l _ismbcspace _ismbcspace_l _ismbcsymbol _ismbcsymbol_l _ismbcupper _ismbcupper_l _ismbslead _ismbslead_l _ismbstrail _ismbstrail_l _mbbtombc _mbbtombc_l _mbbtype _mbbtype_l _mbcasemap _mbccpy _mbccpy_l _mbccpy_s _mbccpy_s_l _mbcjistojms _mbcjistojms_l _mbcjmstojis _mbcjmstojis_l _mbclen _mbclen_l _mbctohira _mbctohira_l _mbctokata _mbctokata_l _mbctolower _mbctolower_l _mbctombb _mbctombb_l _mbctoupper _mbctoupper_l _mblen_l _mbsbtype _mbsbtype_l _mbscat_s _mbscat_s_l _mbschr _mbschr_l _mbscmp _mbscmp_l _mbscoll _mbscoll_l _mbscpy_s _mbscpy_s_l _mbscspn _mbscspn_l _mbsdec _mbsdec_l _mbsdup _mbsicmp _mbsicmp_l _mbsicoll _mbsicoll_l _mbsinc _mbsinc_l _mbslen _mbslen_l _mbslwr _mbslwr_l _mbslwr_s _mbslwr_s_l _mbsnbcat _mbsnbcat_l _mbsnbcat_s _mbsnbcat_s_l _mbsnbcmp _mbsnbcmp_l _mbsnbcnt _mbsnbcnt_l _mbsnbcoll _mbsnbcoll_l _mbsnbcpy _mbsnbcpy_l _mbsnbcpy_s _mbsnbcpy_s_l _mbsnbicmp _mbsnbicmp_l _mbsnbicoll _mbsnbicoll_l _mbsnbset _mbsnbset_l _mbsnbset_s _mbsnbset_s_l _mbsncat _mbsncat_l _mbsncat_s _mbsncat_s_l _mbsnccnt _mbsnccnt_l _mbsncmp _mbsncmp_l _mbsncoll _mbsncoll_l _mbsncpy _mbsncpy_l _mbsncpy_s _mbsncpy_s_l _mbsnextc _mbsnextc_l _mbsnicmp _mbsnicmp_l _mbsnicoll _mbsnicoll_l _mbsninc _mbsninc_l _mbsnlen _mbsnlen_l _mbsnset _mbsnset_l _mbsnset_s _mbsnset_s_l _mbspbrk _mbspbrk_l _mbsrchr _mbsrchr_l _mbsrev _mbsrev_l _mbsset _mbsset_l _mbsset_s _mbsset_s_l _mbsspn _mbsspn_l _mbsspnp _mbsspnp_l _mbsstr _mbsstr_l _mbstok _mbstok_l _mbstok_s _mbstok_s_l _mbstowcs_l _mbstowcs_s_l _mbstrlen _mbstrlen_l _mbstrnlen _mbstrnlen_l _mbsupr _mbsupr_l _mbsupr_s _mbsupr_s_l _mbtowc_l

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-crt-private-l1-1-0.dll

SHA256 696c10112d8b86a46e5057cbd0bf40728e79c6bb49cda1f2c67fe45d0fc1258d
MD5 ad8d9a6ea592a6c8a78c67a805cec952
SHA1 3e9f35013044be456f33e300418453ab12c70df8
SHA512 31c1b5717432b67e6b150911747f34e8099c1a0870262bb3b5d3ac5c9e28b3b08e4239bd105408318806f983b3fcd10e617b2385511c46efe9fe58a9cd4a7067
SSDEEP 1536:b/XeuJDe5c4bFe2JyhcvxXWpD7d3334BkZn+P7niDv3hO3:DXeuJDe5c4bFe2JyhcvxXWpD7d3334BD
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

d5:8f:19:a7:1e:bb:8d:26:d4:25:6c:ec:c1:c1:7f:98:c4:a6:fb:ab:28:b6:f5:96:0f:8f:e9:4f:79:e7:d0:a8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

7a:e3:ab:1d:fc:78:38:8e:30:00:80:bc:88:2f:bb:19:eb:17:50:63

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-crt-private-l1-1-0.pdb

_CreateFrameInfo _CxxThrowException _FindAndUnlinkFrame _GetImageBase _GetThrowImageBase _IsExceptionObjectToBeDestroyed _SetImageBase _SetThrowImageBase _SetWinRTOutOfMemoryExceptionCallback __AdjustPointer __BuildCatchObject __BuildCatchObjectHelper __C_specific_handler __C_specific_handler_noexcept __CxxDetectRethrow __CxxExceptionFilter __CxxFrameHandler __CxxFrameHandler2 __CxxFrameHandler3 __CxxQueryExceptionSize __CxxRegisterExceptionObject __CxxUnregisterExceptionObject __DestructExceptionObject __FrameUnwindFilter __GetPlatformExceptionInfo __NLG_Dispatch2 __NLG_Return2 __RTCastToVoid __RTDynamicCast __RTtypeid __TypeMatch __current_exception __current_exception_context __dcrt_get_wide_environment_from_os __dcrt_initial_narrow_environment __intrinsic_setjmp __intrinsic_setjmpex __processing_throw __report_gsfailure __std_exception_copy __std_exception_destroy __std_terminate __std_type_info_compare __std_type_info_destroy_list __std_type_info_hash __std_type_info_name __unDName __unDNameEx __uncaught_exception __uncaught_exceptions _get_purecall_handler _get_unexpected _is_exception_typeof _local_unwind _o__Getdays _o__Getmonths _o__Gettnames _o__Strftime _o__W_Getdays _o__W_Getmonths _o__W_Gettnames _o__Wcsftime _o____lc_codepage_func _o____lc_collate_cp_func _o____lc_locale_name_func _o____mb_cur_max_func _o___acrt_iob_func _o___conio_common_vcprintf _o___conio_common_vcprintf_p _o___conio_common_vcprintf_s _o___conio_common_vcscanf _o___conio_common_vcwprintf _o___conio_common_vcwprintf_p _o___conio_common_vcwprintf_s _o___conio_common_vcwscanf _o___daylight _o___dstbias _o___fpe_flt_rounds _o___p___argc _o___p___argv _o___p___wargv _o___p__acmdln _o___p__commode _o___p__environ _o___p__fmode _o___p__mbcasemap _o___p__mbctype _o___p__pgmptr _o___p__wcmdln _o___p__wenviron _o___p__wpgmptr _o___pctype_func _o___pwctype_func _o___std_exception_copy _o___std_exception_destroy _o___std_type_info_destroy_list _o___std_type_info_name _o___stdio_common_vfprintf _o___stdio_common_vfprintf_p _o___stdio_common_vfprintf_s _o___stdio_common_vfscanf _o___stdio_common_vfwprintf _o___stdio_common_vfwprintf_p _o___stdio_common_vfwprintf_s _o___stdio_common_vfwscanf _o___stdio_common_vsnprintf_s _o___stdio_common_vsnwprintf_s _o___stdio_common_vsprintf _o___stdio_common_vsprintf_p _o___stdio_common_vsprintf_s _o___stdio_common_vsscanf _o___stdio_common_vswprintf _o___stdio_common_vswprintf_p _o___stdio_common_vswprintf_s _o___stdio_common_vswscanf _o___timezone _o___tzname _o___wcserror _o__access _o__access_s _o__aligned_free _o__aligned_malloc _o__aligned_msize _o__aligned_offset_malloc _o__aligned_offset_realloc _o__aligned_offset_recalloc _o__aligned_realloc _o__aligned_recalloc _o__atodbl _o__atodbl_l _o__atof_l _o__atoflt _o__atoflt_l _o__atoi64 _o__atoi64_l _o__atoi_l _o__atol_l _o__atoldbl _o__atoldbl_l _o__atoll_l _o__beep _o__beginthread _o__beginthreadex _o__cabs _o__callnewh _o__calloc_base _o__cexit _o__cgets _o__cgets_s _o__cgetws _o__cgetws_s _o__chdir _o__chdrive _o__chmod _o__chsize _o__chsize_s _o__close _o__commit _o__configthreadlocale _o__configure_narrow_argv _o__configure_wide_argv _o__controlfp_s _o__cputs _o__cputws _o__creat _o__create_locale _o__crt_atexit _o__ctime32_s _o__ctime64_s _o__cwait _o__d_int _o__dclass _o__difftime32 _o__difftime64 _o__dlog _o__dnorm _o__dpcomp _o__dpoly _o__dscale _o__dsign _o__dsin _o__dtest _o__dunscale _o__dup _o__dup2 _o__dupenv_s _o__ecvt _o__ecvt_s _o__endthread _o__endthreadex _o__eof _o__errno _o__except1 _o__execute_onexit_table _o__execv _o__execve _o__execvp _o__execvpe _o__exit _o__expand _o__fclose_nolock _o__fcloseall _o__fcvt _o__fcvt_s _o__fd_int _o__fdclass _o__fdexp _o__fdlog _o__fdopen _o__fdpcomp _o__fdpoly _o__fdscale _o__fdsign _o__fdsin _o__fflush_nolock _o__fgetc_nolock _o__fgetchar _o__fgetwc_nolock _o__fgetwchar _o__filelength _o__filelengthi64 _o__fileno _o__findclose _o__findfirst32 _o__findfirst32i64 _o__findfirst64 _o__findfirst64i32 _o__findnext32 _o__findnext32i64 _o__findnext64 _o__findnext64i32 _o__flushall _o__fpclass _o__fpclassf _o__fputc_nolock _o__fputchar _o__fputwc_nolock _o__fputwchar _o__fread_nolock _o__fread_nolock_s _o__free_base _o__free_locale _o__fseek_nolock _o__fseeki64 _o__fseeki64_nolock _o__fsopen _o__fstat32 _o__fstat32i64 _o__fstat64 _o__fstat64i32 _o__ftell_nolock _o__ftelli64 _o__ftelli64_nolock _o__ftime32 _o__ftime32_s _o__ftime64 _o__ftime64_s _o__fullpath _o__futime32 _o__futime64 _o__fwrite_nolock _o__gcvt _o__gcvt_s _o__get_daylight _o__get_doserrno _o__get_dstbias _o__get_errno _o__get_fmode _o__get_heap_handle _o__get_initial_narrow_environment _o__get_initial_wide_environment _o__get_invalid_parameter_handler _o__get_narrow_winmain_command_line _o__get_osfhandle _o__get_pgmptr _o__get_stream_buffer_pointers _o__get_terminate _o__get_thread_local_invalid_parameter_handler _o__get_timezone _o__get_tzname _o__get_wide_winmain_command_line _o__get_wpgmptr _o__getc_nolock _o__getch _o__getch_nolock _o__getche _o__getche_nolock _o__getcwd _o__getdcwd _o__getdiskfree _o__getdllprocaddr _o__getdrive _o__getdrives _o__getmbcp _o__getsystime _o__getw _o__getwc_nolock _o__getwch _o__getwch_nolock _o__getwche _o__getwche_nolock _o__getws _o__getws_s _o__gmtime32 _o__gmtime32_s _o__gmtime64 _o__gmtime64_s _o__heapchk _o__heapmin _o__hypot _o__hypotf _o__i64toa _o__i64toa_s _o__i64tow _o__i64tow_s _o__initialize_narrow_environment _o__initialize_onexit_table _o__initialize_wide_environment _o__invalid_parameter_noinfo _o__invalid_parameter_noinfo_noreturn _o__isatty _o__isctype _o__isctype_l _o__isleadbyte_l _o__ismbbalnum _o__ismbbalnum_l _o__ismbbalpha _o__ismbbalpha_l _o__ismbbblank _o__ismbbblank_l _o__ismbbgraph _o__ismbbgraph_l _o__ismbbkalnum _o__ismbbkalnum_l _o__ismbbkana _o__ismbbkana_l _o__ismbbkprint _o__ismbbkprint_l _o__ismbbkpunct _o__ismbbkpunct_l _o__ismbblead _o__ismbblead_l _o__ismbbprint _o__ismbbprint_l _o__ismbbpunct _o__ismbbpunct_l _o__ismbbtrail _o__ismbbtrail_l _o__ismbcalnum _o__ismbcalnum_l _o__ismbcalpha _o__ismbcalpha_l _o__ismbcblank _o__ismbcblank_l _o__ismbcdigit _o__ismbcdigit_l _o__ismbcgraph _o__ismbcgraph_l _o__ismbchira _o__ismbchira_l _o__ismbckata _o__ismbckata_l _o__ismbcl0 _o__ismbcl0_l _o__ismbcl1 _o__ismbcl1_l _o__ismbcl2 _o__ismbcl2_l _o__ismbclegal _o__ismbclegal_l _o__ismbclower _o__ismbclower_l _o__ismbcprint _o__ismbcprint_l _o__ismbcpunct _o__ismbcpunct_l _o__ismbcspace _o__ismbcspace_l _o__ismbcsymbol _o__ismbcsymbol_l _o__ismbcupper _o__ismbcupper_l _o__ismbslead _o__ismbslead_l _o__ismbstrail _o__ismbstrail_l _o__iswctype_l _o__itoa _o__itoa_s _o__itow _o__itow_s _o__j0 _o__j1 _o__jn _o__kbhit _o__ld_int _o__ldclass _o__ldexp _o__ldlog _o__ldpcomp _o__ldpoly _o__ldscale _o__ldsign _o__ldsin _o__ldtest _o__ldunscale _o__lfind _o__lfind_s _o__loaddll _o__localtime32 _o__localtime32_s _o__localtime64 _o__localtime64_s _o__lock_file _o__locking _o__logb _o__logbf _o__lsearch _o__lsearch_s _o__lseek _o__lseeki64 _o__ltoa _o__ltoa_s _o__ltow _o__ltow_s _o__makepath _o__makepath_s _o__malloc_base _o__mbbtombc _o__mbbtombc_l _o__mbbtype _o__mbbtype_l _o__mbccpy _o__mbccpy_l _o__mbccpy_s _o__mbccpy_s_l _o__mbcjistojms _o__mbcjistojms_l _o__mbcjmstojis _o__mbcjmstojis_l _o__mbclen _o__mbclen_l _o__mbctohira _o__mbctohira_l _o__mbctokata _o__mbctokata_l _o__mbctolower _o__mbctolower_l _o__mbctombb _o__mbctombb_l _o__mbctoupper _o__mbctoupper_l _o__mblen_l _o__mbsbtype _o__mbsbtype_l _o__mbscat_s _o__mbscat_s_l _o__mbschr _o__mbschr_l _o__mbscmp _o__mbscmp_l _o__mbscoll _o__mbscoll_l _o__mbscpy_s _o__mbscpy_s_l _o__mbscspn _o__mbscspn_l _o__mbsdec _o__mbsdec_l _o__mbsicmp _o__mbsicmp_l _o__mbsicoll _o__mbsicoll_l _o__mbsinc _o__mbsinc_l _o__mbslen _o__mbslen_l _o__mbslwr _o__mbslwr_l _o__mbslwr_s _o__mbslwr_s_l _o__mbsnbcat _o__mbsnbcat_l _o__mbsnbcat_s _o__mbsnbcat_s_l _o__mbsnbcmp _o__mbsnbcmp_l _o__mbsnbcnt _o__mbsnbcnt_l _o__mbsnbcoll _o__mbsnbcoll_l _o__mbsnbcpy _o__mbsnbcpy_l _o__mbsnbcpy_s _o__mbsnbcpy_s_l _o__mbsnbicmp _o__mbsnbicmp_l _o__mbsnbicoll _o__mbsnbicoll_l _o__mbsnbset _o__mbsnbset_l _o__mbsnbset_s _o__mbsnbset_s_l _o__mbsncat _o__mbsncat_l _o__mbsncat_s _o__mbsncat_s_l _o__mbsnccnt _o__mbsnccnt_l _o__mbsncmp _o__mbsncmp_l _o__mbsncoll _o__mbsncoll_l _o__mbsncpy _o__mbsncpy_l _o__mbsncpy_s _o__mbsncpy_s_l _o__mbsnextc _o__mbsnextc_l _o__mbsnicmp _o__mbsnicmp_l _o__mbsnicoll _o__mbsnicoll_l _o__mbsninc _o__mbsninc_l _o__mbsnlen _o__mbsnlen_l _o__mbsnset _o__mbsnset_l _o__mbsnset_s _o__mbsnset_s_l _o__mbspbrk _o__mbspbrk_l _o__mbsrchr _o__mbsrchr_l _o__mbsrev _o__mbsrev_l _o__mbsset _o__mbsset_l _o__mbsset_s _o__mbsset_s_l _o__mbsspn _o__mbsspn_l _o__mbsspnp _o__mbsspnp_l _o__mbsstr _o__mbsstr_l _o__mbstok _o__mbstok_l _o__mbstok_s _o__mbstok_s_l _o__mbstowcs_l _o__mbstowcs_s_l _o__mbstrlen _o__mbstrlen_l _o__mbstrnlen _o__mbstrnlen_l _o__mbsupr _o__mbsupr_l _o__mbsupr_s _o__mbsupr_s_l _o__mbtowc_l _o__memicmp _o__memicmp_l _o__mkdir _o__mkgmtime32 _o__mkgmtime64 _o__mktemp _o__mktemp_s _o__mktime32 _o__mktime64 _o__msize _o__nextafter _o__nextafterf _o__open_osfhandle _o__pclose _o__pipe _o__popen _o__purecall _o__putc_nolock _o__putch _o__putch_nolock _o__putenv _o__putenv_s _o__putw _o__putwc_nolock _o__putwch _o__putwch_nolock _o__putws _o__read _o__realloc_base _o__recalloc _o__register_onexit_function _o__resetstkoflw _o__rmdir _o__rmtmp _o__scalb _o__scalbf _o__searchenv _o__searchenv_s _o__seh_filter_dll _o__seh_filter_exe _o__set_abort_behavior _o__set_app_type _o__set_doserrno _o__set_errno _o__set_fmode _o__set_invalid_parameter_handler _o__set_new_handler _o__set_new_mode _o__set_thread_local_invalid_parameter_handler _o__seterrormode _o__setmbcp _o__setmode _o__setsystime _o__sleep _o__sopen _o__sopen_dispatch _o__sopen_s _o__spawnv _o__spawnve _o__spawnvp _o__spawnvpe _o__splitpath _o__splitpath_s _o__stat32 _o__stat32i64 _o__stat64 _o__stat64i32 _o__strcoll_l _o__strdate _o__strdate_s _o__strdup _o__strerror _o__strerror_s _o__strftime_l _o__stricmp _o__stricmp_l _o__stricoll _o__stricoll_l _o__strlwr _o__strlwr_l _o__strlwr_s _o__strlwr_s_l _o__strncoll _o__strncoll_l _o__strnicmp _o__strnicmp_l _o__strnicoll _o__strnicoll_l _o__strnset_s _o__strset_s _o__strtime _o__strtime_s _o__strtod_l _o__strtof_l _o__strtoi64 _o__strtoi64_l _o__strtol_l _o__strtold_l _o__strtoll_l _o__strtoui64 _o__strtoui64_l _o__strtoul_l _o__strtoull_l _o__strupr _o__strupr_l _o__strupr_s _o__strupr_s_l _o__strxfrm_l _o__swab _o__tell _o__telli64 _o__timespec32_get _o__timespec64_get _o__tolower _o__tolower_l _o__toupper _o__toupper_l _o__towlower_l _o__towupper_l _o__tzset _o__ui64toa _o__ui64toa_s _o__ui64tow _o__ui64tow_s _o__ultoa _o__ultoa_s _o__ultow _o__ultow_s _o__umask _o__umask_s _o__ungetc_nolock _o__ungetch _o__ungetch_nolock _o__ungetwc_nolock _o__ungetwch _o__ungetwch_nolock _o__unlink _o__unloaddll _o__unlock_file _o__utime32 _o__utime64 _o__waccess _o__waccess_s _o__wasctime _o__wasctime_s _o__wchdir _o__wchmod _o__wcreat _o__wcreate_locale _o__wcscoll_l _o__wcsdup _o__wcserror _o__wcserror_s _o__wcsftime_l _o__wcsicmp _o__wcsicmp_l _o__wcsicoll _o__wcsicoll_l _o__wcslwr _o__wcslwr_l _o__wcslwr_s _o__wcslwr_s_l _o__wcsncoll _o__wcsncoll_l _o__wcsnicmp _o__wcsnicmp_l _o__wcsnicoll _o__wcsnicoll_l _o__wcsnset _o__wcsnset_s _o__wcsset _o__wcsset_s _o__wcstod_l _o__wcstof_l _o__wcstoi64 _o__wcstoi64_l _o__wcstol_l _o__wcstold_l _o__wcstoll_l _o__wcstombs_l _o__wcstombs_s_l _o__wcstoui64 _o__wcstoui64_l _o__wcstoul_l _o__wcstoull_l _o__wcsupr _o__wcsupr_l _o__wcsupr_s _o__wcsupr_s_l _o__wcsxfrm_l _o__wctime32 _o__wctime32_s _o__wctime64 _o__wctime64_s _o__wctomb_l _o__wctomb_s_l _o__wdupenv_s _o__wexecv _o__wexecve _o__wexecvp _o__wexecvpe _o__wfdopen _o__wfindfirst32 _o__wfindfirst32i64 _o__wfindfirst64 _o__wfindfirst64i32 _o__wfindnext32 _o__wfindnext32i64 _o__wfindnext64 _o__wfindnext64i32 _o__wfopen _o__wfopen_s _o__wfreopen _o__wfreopen_s _o__wfsopen _o__wfullpath _o__wgetcwd _o__wgetdcwd _o__wgetenv _o__wgetenv_s _o__wmakepath _o__wmakepath_s _o__wmkdir _o__wmktemp _o__wmktemp_s _o__wperror _o__wpopen _o__wputenv _o__wputenv_s _o__wremove _o__wrename _o__write _o__wrmdir _o__wsearchenv _o__wsearchenv_s _o__wsetlocale _o__wsopen_dispatch _o__wsopen_s _o__wspawnv _o__wspawnve _o__wspawnvp _o__wspawnvpe _o__wsplitpath _o__wsplitpath_s _o__wstat32 _o__wstat32i64 _o__wstat64 _o__wstat64i32 _o__wstrdate _o__wstrdate_s _o__wstrtime _o__wstrtime_s _o__wsystem _o__wtmpnam_s _o__wtof _o__wtof_l _o__wtoi _o__wtoi64 _o__wtoi64_l _o__wtoi_l _o__wtol _o__wtol_l _o__wtoll _o__wtoll_l _o__wunlink _o__wutime32 _o__wutime64 _o__y0 _o__y1 _o__yn _o_abort _o_acos _o_acosf _o_acosh _o_acoshf _o_acoshl _o_asctime _o_asctime_s _o_asin _o_asinf _o_asinh _o_asinhf _o_asinhl _o_atan _o_atan2 _o_atan2f _o_atanf _o_atanh _o_atanhf _o_atanhl _o_atof _o_atoi _o_atol _o_atoll _o_bsearch _o_bsearch_s _o_btowc _o_calloc _o_cbrt _o_cbrtf _o_ceil _o_ceilf _o_clearerr _o_clearerr_s _o_cos _o_cosf _o_cosh _o_coshf _o_erf _o_erfc _o_erfcf _o_erfcl _o_erff _o_erfl _o_exit _o_exp _o_exp2 _o_exp2f _o_exp2l _o_expf _o_fabs _o_fclose _o_feof _o_ferror _o_fflush _o_fgetc _o_fgetpos _o_fgets _o_fgetwc _o_fgetws _o_floor _o_floorf _o_fma _o_fmaf _o_fmal _o_fmod _o_fmodf _o_fopen _o_fopen_s _o_fputc _o_fputs _o_fputwc _o_fputws _o_fread _o_fread_s _o_free _o_freopen _o_freopen_s _o_frexp _o_fseek _o_fsetpos _o_ftell _o_fwrite _o_getc _o_getchar _o_getenv _o_getenv_s _o_gets _o_gets_s _o_getwc _o_getwchar _o_hypot _o_is_wctype _o_isalnum _o_isalpha _o_isblank _o_iscntrl _o_isdigit _o_isgraph _o_isleadbyte _o_islower _o_isprint _o_ispunct _o_isspace _o_isupper _o_iswalnum _o_iswalpha _o_iswascii _o_iswblank _o_iswcntrl _o_iswctype _o_iswdigit _o_iswgraph _o_iswlower _o_iswprint _o_iswpunct _o_iswspace _o_iswupper _o_iswxdigit _o_isxdigit _o_ldexp _o_lgamma _o_lgammaf _o_lgammal _o_llrint _o_llrintf _o_llrintl _o_llround _o_llroundf _o_llroundl _o_localeconv _o_log _o_log10 _o_log10f _o_log1p _o_log1pf _o_log1pl _o_log2 _o_log2f _o_log2l _o_logb _o_logbf _o_logbl _o_logf _o_lrint _o_lrintf _o_lrintl _o_lround _o_lroundf _o_lroundl _o_malloc _o_mblen _o_mbrlen _o_mbrtoc16 _o_mbrtoc32 _o_mbrtowc _o_mbsrtowcs _o_mbsrtowcs_s _o_mbstowcs _o_mbstowcs_s _o_mbtowc _o_memcpy_s _o_memset _o_modf _o_modff _o_nan _o_nanf _o_nanl _o_nearbyint _o_nearbyintf _o_nearbyintl _o_nextafter _o_nextafterf _o_nextafterl _o_nexttoward _o_nexttowardf _o_nexttowardl _o_pow _o_powf _o_putc _o_putchar _o_puts _o_putwc _o_putwchar _o_qsort _o_qsort_s _o_raise _o_rand _o_rand_s _o_realloc _o_remainder _o_remainderf _o_remainderl _o_remove _o_remquo _o_remquof _o_remquol _o_rename _o_rewind _o_rint _o_rintf _o_rintl _o_round _o_roundf _o_roundl _o_scalbln _o_scalblnf _o_scalblnl _o_scalbn _o_scalbnf _o_scalbnl _o_set_terminate _o_setbuf _o_setlocale _o_setvbuf _o_sin _o_sinf _o_sinh _o_sinhf _o_sqrt _o_sqrtf _o_srand _o_strcat_s _o_strcoll _o_strcpy_s _o_strerror _o_strerror_s _o_strftime _o_strncat_s _o_strncpy_s _o_strtod _o_strtof _o_strtok _o_strtok_s _o_strtol _o_strtold _o_strtoll _o_strtoul _o_strtoull _o_system _o_tan _o_tanf _o_tanh _o_tanhf _o_terminate _o_tgamma _o_tgammaf _o_tgammal _o_tmpfile_s _o_tmpnam_s _o_tolower _o_toupper _o_towlower _o_towupper _o_ungetc _o_ungetwc _o_wcrtomb _o_wcrtomb_s _o_wcscat_s _o_wcscoll _o_wcscpy _o_wcscpy_s _o_wcsftime _o_wcsncat_s _o_wcsncpy_s _o_wcsrtombs _o_wcsrtombs_s _o_wcstod _o_wcstof _o_wcstok _o_wcstok_s _o_wcstol _o_wcstold _o_wcstoll _o_wcstombs _o_wcstombs_s _o_wcstoul _o_wcstoull _o_wctob _o_wctomb _o_wctomb_s _o_wmemcpy_s _o_wmemmove_s _purecall _set_purecall_handler _set_se_translator longjmp memchr memcmp memcpy memmove set_unexpected setjmp strchr strrchr strstr unexpected wcschr wcsrchr wcsstr

!!newSetup_22334_P@ssKey!!/x86/api-ms-win-crt-process-l1-1-0.dll

SHA256 542a22540cdb7df46d957a0208d50507916f7c737bea833931239d56ebe8d68c
MD5 66f4e530a19ed2f6862b5ce946437875
SHA1 016bfa4eafb407e43abdcd9582dbca7dcf85d3de
SHA512 2653b2118f4db250850dcefd3536e0fd2bc55e9774376b51e586658e4e5d79a35cb425ebe0a8391124997e24c8aaa84bac799162a31446ef47db667a4a3f0eb9
SSDEEP 384:W3KAWfhWk+Y3DGk8ZpH3GCJErW25tL+Y3DGURRQ8JN77hhGz:fDDGkiRBEy4BDG43hgz
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

d7:4d:95:42:60:13:dc:77:da:2e:4b:f6:f5:c6:d7:36:3f:ab:86:9d:2f:12:c3:af:7c:3e:c8:72:2f:1e:2d:18

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jul 24, 2023

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

ad:be:51:42:48:63:74:38:8d:7e:95:8b:ad:67:95:ca:63:a5:fd:b6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Chains

Jun 21, 2024

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 3, 2023 - Aug 2, 2034

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Serial Number

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 25, 2021 - Feb 29, 2024

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-crt-process-l1-1-0.pdb

!!newSetup_22334_P@ssKey!!/x86/updater.ini

SHA256 edd1a68585ebac3872b7ab0a085b0a5c92f58f7dc59b926b6c647cc172f69ac4
MD5 6499b6ec03c720c897b9bbe4cada2647
SHA1 4b85d520ad8aa77c5df4cdc5b4b9669b205ff354
SHA512 eda8e07e04ac8b1b300f907a10fe6294d8bcff16d7aecdc3da36be6efd29aeda022a0428f1a31837eea19202bd5e559f3f19c541b4aa22dfce313aed8f1a0d69
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer