ProtonVPN-10_11[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

ProtonVPN-10_11.zip
Size

23.5MB
MD5

1ef1048713ea6209343ce95354cf109b
SHA1

a51383e26cfd28b846aa106d7e7ab335186dbd18
SHA256

838ac92610147408c850191dc4d38af831391eb0013ee1342bd9a73079f632ff
SHA512

0dc2a1c756b7106a0d5eb333cbc8386b67abe16a0f5266435808c81faeb1e762345987e68447c9e49880c657daa889d63b9491e13c399f33402fbf7015d02069
SSDEEP

393216:C//BVFDhYqh1TJRQlUAhwI3ybS+E7Sh7nbhgIwLC5/aBCNE0LP2c3aBxY9r+0h/f:6hphrRZ4ShzbhgLeaBCNcFB8r3mHojV3

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/ProtonVPN-10_11/Launcher.dll
unpack001/ProtonVPN-10_11/data/appInfo/services/Launhcer.dll
unpack001/ProtonVPN-10_11/data/appInfo/services/data/Launcher.dll

Files

ProtonVPN-10_11.zip
.zip
ProtonVPN-10_11/Launcher.dll
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ProtonVPN-10_11/Launcher.exe
.exe windows:6 windows x86 arch:x86

93d099f09873f4f31b1b7ec7cb84e6f0

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15-06-2016 00:00

Not After

15-06-2024 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3a:10:10:87:8e:d6:f7:dd:d4:ec:8e:8f
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

18-09-2019 12:58

Not After

11-12-2022 11:53

Subject

CN=Adersoft,O=Adersoft,L=Paris,C=FR,1.2.840.113549.1.9.1=#0c14737570706f72744061646572736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

27-05-2021 09:55

Not After

28-06-2032 09:55

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20-06-2018 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

20-02-2019 00:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18-03-2009 10:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:fb:58:56:78:83:c0:9f:de:c5:ac:2a:33:b7:94:e6:e3:17:b1:5a:f9:ed:78:3e:8f:61:f7:67:75:db:dd:23
Signer

Actual PE Digest

03:fb:58:56:78:83:c0:9f:de:c5:ac:2a:33:b7:94:e6:e3:17:b1:5a:f9:ed:78:3e:8f:61:f7:67:75:db:dd:23

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
lstrcmpiW
MultiByteToWideChar
LoadLibraryExW
ExitProcess
LocalAlloc
LocalFree
FormatMessageW
WaitForSingleObject
GetExitCodeProcess
CreateThread
SetLastError
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
FindResourceExW
GetACP
WideCharToMultiByte
FreeResource
SetFilePointer
ReadFile
CreateFileW
CreateFileMappingW
MapViewOfFile
IsBadReadPtr
UnmapViewOfFile
GetCurrentProcessId
EnumResourceNamesW
GetFileAttributesW
GetFileSize
OpenEventW
SetEvent
ExpandEnvironmentStringsW
Sleep
FlushFileBuffers
GetFileType
WriteFile
WriteConsoleW
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
CloseHandle
FindNextFileW
FindFirstFileExW
FindClose
GetFileSizeEx
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
LCMapStringW
GetStdHandle
GetModuleHandleExW
GetCommandLineW
GetCommandLineA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetModuleFileNameW
SizeofResource
LockResource
LoadResource
FindResourceW
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
IsDebuggerPresent
FreeLibrary
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
IsValidCodePage

user32

UnregisterClassW
MessageBoxW
GetDlgItem
SetWindowPos
MapWindowPoints
GetClientRect
wsprintfA
GetWindowRect
GetMonitorInfoW
MonitorFromWindow
GetWindowLongW
GetWindow
SetTimer
SendMessageW
GetParent
SetWindowTextW
CharNextW
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjects
CreateWindowExW
DestroyWindow
LoadCursorW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
SetWindowLongW
DefWindowProcW
DialogBoxParamW
EndDialog
GetActiveWindow
KillTimer

advapi32

RegDeleteValueW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
CreateProcessWithLogonW
RegDeleteKeyW
RegCreateKeyExW

shell32

ShellExecuteW

ole32

CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoGetObject
CoGetInstanceFromFile
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CoTaskMemFree

oleaut32

VariantCopy
VariantClear
SafeArrayUnaccessData
VariantChangeType
SafeArrayAccessData
SysAllocString
SysFreeString
VariantInit
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysStringLen
LoadTypeLibEx
SysAllocStringLen

wintrust

WinVerifyTrust

crypt32

CertFreeCertificateContext
CertFindCertificateInStore
CryptMsgGetParam
CertCloseStore
CryptMsgClose
CryptQueryObject

version

GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeW

Sections

.text
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ProtonVPN-10_11/Launcher.exe.manifest
ProtonVPN-10_11/data/0YZkUSGUwRKS
ProtonVPN-10_11/data/0ZQXVExBqIi8
ProtonVPN-10_11/data/0ew22Cf9qKXO
ProtonVPN-10_11/data/0hWKR82p3YbQ
ProtonVPN-10_11/data/0sLKrpjAgVoU
ProtonVPN-10_11/data/129zj9HHP7qr
ProtonVPN-10_11/data/1IGMno6OedFY
ProtonVPN-10_11/data/1QZBWs0lBhks
ProtonVPN-10_11/data/1S6RvIM2Y7Wh
ProtonVPN-10_11/data/1YiMKiPIxhLJ
ProtonVPN-10_11/data/1iIqaNX5b2q2
ProtonVPN-10_11/data/1v9LGHYmM5qU
ProtonVPN-10_11/data/1wvLRHqHbzCu
ProtonVPN-10_11/data/2JOTplQGfG3e
ProtonVPN-10_11/data/2ReV7K6TJ5aK
ProtonVPN-10_11/data/2gibkcc0n35D
ProtonVPN-10_11/data/2n0PjvEg4RKN
ProtonVPN-10_11/data/2vZjBZbLZZSx
ProtonVPN-10_11/data/357OsJ7eT1cy
ProtonVPN-10_11/data/3H0QEzbhMU40
ProtonVPN-10_11/data/3InZyWwQ9kzE
ProtonVPN-10_11/data/3QVyyFFHE1JW
ProtonVPN-10_11/data/3ZEjzIfbccyS
ProtonVPN-10_11/data/3gMxRl84YmcF
ProtonVPN-10_11/data/3qS5xYj9OZ0o
ProtonVPN-10_11/data/3uLgfCF9PLG1
ProtonVPN-10_11/data/4487UqJ0aVme
ProtonVPN-10_11/data/472LPT9pLMsF
ProtonVPN-10_11/data/4c94nnHwfrBF
ProtonVPN-10_11/data/4dtzcQ9q0DcC
ProtonVPN-10_11/data/4jsRT5aIEJR6
ProtonVPN-10_11/data/4qtDu8daWMri
ProtonVPN-10_11/data/4xeyBxo8sdiZ
ProtonVPN-10_11/data/5JszQqpBEqOW
ProtonVPN-10_11/data/5L619aiUpDyL
ProtonVPN-10_11/data/5d7wRlM0efd0
ProtonVPN-10_11/data/5mblESvwnOaE
ProtonVPN-10_11/data/5o25o4u5csDx
ProtonVPN-10_11/data/5r2UBPq8iLz8
ProtonVPN-10_11/data/5zuQvR2Mnrss
ProtonVPN-10_11/data/619cWgwSvPOL
ProtonVPN-10_11/data/66bweP7R8RJa
ProtonVPN-10_11/data/6cbDkiAs9dxp
ProtonVPN-10_11/data/6qIEYxB09OI6
ProtonVPN-10_11/data/6rLN6pdsCoVQ
ProtonVPN-10_11/data/6sPnaw95qhKF
ProtonVPN-10_11/data/6spvcNjReTUR
ProtonVPN-10_11/data/6tSwl90J8cnf
ProtonVPN-10_11/data/72SpTdNxzVx4
ProtonVPN-10_11/data/73u7yRnK918O
ProtonVPN-10_11/data/7hd95ehXuekf
ProtonVPN-10_11/data/7i3mKPHL69tH
ProtonVPN-10_11/data/7x7yhHvbShue
ProtonVPN-10_11/data/7ydo1ctWOHU2
ProtonVPN-10_11/data/83jY2raxYMFt
ProtonVPN-10_11/data/86QIIY9CWkYu
ProtonVPN-10_11/data/88x2P2R5hKw1
ProtonVPN-10_11/data/8D6R37MClh0M
ProtonVPN-10_11/data/8QmBTY5PnRA5
ProtonVPN-10_11/data/8aHvEzGWzQEk
ProtonVPN-10_11/data/8dlfIGmYDJvi
ProtonVPN-10_11/data/8fkFiJt8vxbl
ProtonVPN-10_11/data/8isTtUIXWCmo
ProtonVPN-10_11/data/8lIMKFwXL6K5
ProtonVPN-10_11/data/8uCH92Ubi7UG
ProtonVPN-10_11/data/8wyHE6h4jHeH
ProtonVPN-10_11/data/91LRqrapGRLQ
ProtonVPN-10_11/data/91fkT9Oc4fys
ProtonVPN-10_11/data/97AA0tWRT8fy
ProtonVPN-10_11/data/97Ewi2kDXHBp
ProtonVPN-10_11/data/9ImQR4EzSSxm
ProtonVPN-10_11/data/9zZgVdCD8rUp
ProtonVPN-10_11/data/A9EDvGqzyXBU
ProtonVPN-10_11/data/AAvo6e73xFWV
ProtonVPN-10_11/data/AUaAOw2bgbL9
ProtonVPN-10_11/data/AUluWnH873Yv
ProtonVPN-10_11/data/AbDM7RYc31FB
ProtonVPN-10_11/data/AcQPEUTVG8c6
ProtonVPN-10_11/data/AkOsZNTvodj0
ProtonVPN-10_11/data/B2Rhjmzye9Pt
ProtonVPN-10_11/data/B3wP9G7yLlOL
ProtonVPN-10_11/data/B5NbFRwHby3N
ProtonVPN-10_11/data/BLGnRwcRRrPJ
ProtonVPN-10_11/data/BaPpac24EQ98
ProtonVPN-10_11/data/BgjXSisrmsyW
ProtonVPN-10_11/data/C2neXtyRT88y
ProtonVPN-10_11/data/CQ3bbYvSYaL5
ProtonVPN-10_11/data/CV9EaHbJ0Jy3
ProtonVPN-10_11/data/CXd2wigglzlh
ProtonVPN-10_11/data/CkmKX5GjDfmU
ProtonVPN-10_11/data/ClIQw8gfUr2N
ProtonVPN-10_11/data/CqOUi6inrlpB
ProtonVPN-10_11/data/D7ilnXt9P4aT
ProtonVPN-10_11/data/DFfwoOhBERHQ
ProtonVPN-10_11/data/DLJatZQEefl7
ProtonVPN-10_11/data/DgWjWvqF21xo
ProtonVPN-10_11/data/DqQlrwLMnWtc
ProtonVPN-10_11/data/DsbtMPL3jbKN
ProtonVPN-10_11/data/E2eOw4g4OWxc
ProtonVPN-10_11/data/E4fMsuBnOIqs
ProtonVPN-10_11/data/E5YzpFPWr6wR
ProtonVPN-10_11/data/EERQtCN5I50h
ProtonVPN-10_11/data/EPHOw4AUEpVj
ProtonVPN-10_11/data/ElYwvRWqrjPT
ProtonVPN-10_11/data/FFkfLYYwrbD6
ProtonVPN-10_11/data/FUihuP2eAo0g
ProtonVPN-10_11/data/FanTnx5EYzsh
ProtonVPN-10_11/data/Fkqt6bdE84qX
ProtonVPN-10_11/data/FsQLgji12P78
ProtonVPN-10_11/data/FvvgNMJTmHGr
ProtonVPN-10_11/data/FwMHTAxRQIh1
ProtonVPN-10_11/data/G8pfBOEmJcKm
ProtonVPN-10_11/data/GAeGrVccj4QL
ProtonVPN-10_11/data/GEouVMwg6sCK
ProtonVPN-10_11/data/GLCdXDonaDgc
ProtonVPN-10_11/data/GvgNIiQadzh9
ProtonVPN-10_11/data/H0KIungUvqcO
ProtonVPN-10_11/data/H0i2S3xPM8ex
ProtonVPN-10_11/data/H3fTQvLF1vav
ProtonVPN-10_11/data/HJP9chBeCAJh
ProtonVPN-10_11/data/He09uPWliEPN
ProtonVPN-10_11/data/HjXnnfWBZ7a0
ProtonVPN-10_11/data/HmJ1vov9u4Ys
ProtonVPN-10_11/data/HxNx9aeooobq
ProtonVPN-10_11/data/Hy86IKqRmETR
ProtonVPN-10_11/data/I5LmqgGnJo0H
ProtonVPN-10_11/data/I7LX5BU54ESr
ProtonVPN-10_11/data/I8tEUovarLI3
ProtonVPN-10_11/data/IEbGDNZKOPqs
ProtonVPN-10_11/data/IEg2VInns5LV
ProtonVPN-10_11/data/IG07kb7vTx05
ProtonVPN-10_11/data/IM7bS0pe44k8
ProtonVPN-10_11/data/IOplpkAbyBIc
ProtonVPN-10_11/data/IUffrapWJKkF
ProtonVPN-10_11/data/IakuGmlzexnJ
ProtonVPN-10_11/data/IcrlPDvrxrZ3
ProtonVPN-10_11/data/ImXUeOFpuCUj
ProtonVPN-10_11/data/IpYZZUhGLy81
ProtonVPN-10_11/data/ItuhXRDV2i8H
ProtonVPN-10_11/data/IuiSEvxKc3py
ProtonVPN-10_11/data/J7fG4h34fxOM
ProtonVPN-10_11/data/JGQLgTHGYwMg
ProtonVPN-10_11/data/JIW0Yw0M0gFJ
ProtonVPN-10_11/data/JLgJdR450hTE
ProtonVPN-10_11/data/JVKwyNt89WG8
ProtonVPN-10_11/data/JVn47VXc92Je
ProtonVPN-10_11/data/JZBOiinjuPyq
ProtonVPN-10_11/data/Ji2EdKq8iLtf
ProtonVPN-10_11/data/JmhDSILmJnok
ProtonVPN-10_11/data/Jseo2EaXhned
ProtonVPN-10_11/data/K6KtUuPChYgn
ProtonVPN-10_11/data/K87Sii3Yvmwn
ProtonVPN-10_11/data/KFBBSbp3aVQu
ProtonVPN-10_11/data/KKDoBlXO4DgB
ProtonVPN-10_11/data/KPnrWi5Rkqtv
ProtonVPN-10_11/data/KPrEtojqL9bu
ProtonVPN-10_11/data/KSIASJWnIacl
ProtonVPN-10_11/data/KaepBKREpWYh
ProtonVPN-10_11/data/KauAMANykJiS
ProtonVPN-10_11/data/Ki8iYtiqjQAe
ProtonVPN-10_11/data/Kk0ahcpXMr0j
ProtonVPN-10_11/data/KsdyrSYAIIyg
ProtonVPN-10_11/data/a4g5p85m5YXx
ProtonVPN-10_11/data/a68aQpTo5s1T
ProtonVPN-10_11/data/aEYV8rTd5YiE
ProtonVPN-10_11/data/aSka47qx44YV
ProtonVPN-10_11/data/aUVZfcVbvuGH
ProtonVPN-10_11/data/ajk8ejTOhanE
ProtonVPN-10_11/data/appInfo/L6wUR4OjPt93
ProtonVPN-10_11/data/appInfo/LBwJRPfnbNHe
ProtonVPN-10_11/data/appInfo/LYjmktPkVrL3
ProtonVPN-10_11/data/appInfo/Lfa4ZIBXznDx
ProtonVPN-10_11/data/appInfo/LzdqbzLtir17
ProtonVPN-10_11/data/appInfo/MA5gCKpJnavb
ProtonVPN-10_11/data/appInfo/MIcKvwcg9I8p
ProtonVPN-10_11/data/appInfo/MIhzIXPfmF3U
ProtonVPN-10_11/data/appInfo/MkdALEbSJtUc
ProtonVPN-10_11/data/appInfo/NI41ZjHX5w6Y
ProtonVPN-10_11/data/appInfo/NO16KWsN9Ib2
ProtonVPN-10_11/data/appInfo/NbUh47rVZj94
ProtonVPN-10_11/data/appInfo/NcOJ5qNbfVdP
ProtonVPN-10_11/data/appInfo/NguTVNtAqwbb
ProtonVPN-10_11/data/appInfo/NkhtAtmZIckr
ProtonVPN-10_11/data/appInfo/NqcKyBLOluzG
ProtonVPN-10_11/data/appInfo/NrCwJFzVkUN5
ProtonVPN-10_11/data/appInfo/NyquX3TT35e6
ProtonVPN-10_11/data/appInfo/ODFgACryjH3k
ProtonVPN-10_11/data/appInfo/OKL1FcEdQyYM
ProtonVPN-10_11/data/appInfo/OPVtTebdtpN0
ProtonVPN-10_11/data/appInfo/OtJ0y7zujZjz
ProtonVPN-10_11/data/appInfo/Ouaewb389ps4
ProtonVPN-10_11/data/appInfo/OwYxNsOWE8V0
ProtonVPN-10_11/data/appInfo/P8SD0AvL3g8o
ProtonVPN-10_11/data/appInfo/P8rF92IyL8ac
ProtonVPN-10_11/data/appInfo/PEMPDZZlbODC
ProtonVPN-10_11/data/appInfo/PHMsfEIFLDBW
ProtonVPN-10_11/data/appInfo/PLS2KZzcj3ut
ProtonVPN-10_11/data/appInfo/PQXNg5DBG3go
ProtonVPN-10_11/data/appInfo/PRU0KayTSecP
ProtonVPN-10_11/data/appInfo/PT1WsPVYbmXm
ProtonVPN-10_11/data/appInfo/PUy844f68nDP
ProtonVPN-10_11/data/appInfo/PVKIBzThdaHG
ProtonVPN-10_11/data/appInfo/PhsS5NAvTk17
ProtonVPN-10_11/data/appInfo/PlDapPYRtYP4
ProtonVPN-10_11/data/appInfo/Q21weMYZEYeL
ProtonVPN-10_11/data/appInfo/QLA9AxhWqN0j
ProtonVPN-10_11/data/appInfo/QN53KhUn6uQP
ProtonVPN-10_11/data/appInfo/QOICOQiMy66T
ProtonVPN-10_11/data/appInfo/QSZWJCtQnDwd
ProtonVPN-10_11/data/appInfo/Qc927QgkOamV
ProtonVPN-10_11/data/appInfo/QecB4CBJXBbn
ProtonVPN-10_11/data/appInfo/QsQqkaar6SI5
ProtonVPN-10_11/data/appInfo/QzXi2xYU9Y7P
ProtonVPN-10_11/data/appInfo/R25xZ50p5YFN
ProtonVPN-10_11/data/appInfo/R4MtTwfns2VG
ProtonVPN-10_11/data/appInfo/R6jx7rEz8zVq
ProtonVPN-10_11/data/appInfo/RIKVfBSOR4eE
ProtonVPN-10_11/data/appInfo/RobPqZu3J5tL
ProtonVPN-10_11/data/appInfo/S31ntx2gUIbc
ProtonVPN-10_11/data/appInfo/S9nCYwBWfCLy
ProtonVPN-10_11/data/appInfo/SCnsQwuOCXOQ
ProtonVPN-10_11/data/appInfo/ShoKJq7ksy0C
ProtonVPN-10_11/data/appInfo/SnN7VelaWzns
ProtonVPN-10_11/data/appInfo/Soy9iAiQOXxK
ProtonVPN-10_11/data/appInfo/TIlR6EyQXcab
ProtonVPN-10_11/data/appInfo/TTBLMeymu6al
ProtonVPN-10_11/data/appInfo/TY6isqI7q9NF
ProtonVPN-10_11/data/appInfo/Tcfit41r5wUW
ProtonVPN-10_11/data/appInfo/TczD0mpHfuoq
ProtonVPN-10_11/data/appInfo/Tu6QBTHcT1CT
ProtonVPN-10_11/data/appInfo/Tu92hhIUeX80
ProtonVPN-10_11/data/appInfo/U6mdmuKUVQfc
ProtonVPN-10_11/data/appInfo/UFlizOZJgeeL
ProtonVPN-10_11/data/appInfo/UJHOHt3ASNZ2
ProtonVPN-10_11/data/appInfo/UJeyXKGM3Z1K
ProtonVPN-10_11/data/appInfo/UJsaPyOrBd5h
ProtonVPN-10_11/data/appInfo/UNNpwM5q7546
ProtonVPN-10_11/data/appInfo/UNgClbVjyTu0
ProtonVPN-10_11/data/appInfo/UVxKBsieFEA7
ProtonVPN-10_11/data/appInfo/UgYN3rd9zExc
ProtonVPN-10_11/data/appInfo/UjYVViOrw8Dc
ProtonVPN-10_11/data/appInfo/UlYpLMEVRyxf
ProtonVPN-10_11/data/appInfo/UwgbZNW3vLRt
ProtonVPN-10_11/data/appInfo/V42tA3i9FPbX
ProtonVPN-10_11/data/appInfo/V8VSu14ySEYX
ProtonVPN-10_11/data/appInfo/V8rMUNO8iWZp
ProtonVPN-10_11/data/appInfo/VMrhYjhQ8dyn
ProtonVPN-10_11/data/appInfo/VZUwIcbzuINO
ProtonVPN-10_11/data/appInfo/VcjSHlpRYAQE
ProtonVPN-10_11/data/appInfo/VdvbndfZEv1u
ProtonVPN-10_11/data/appInfo/VfIfXiMZObDy
ProtonVPN-10_11/data/appInfo/WBurt7GKN9m7
ProtonVPN-10_11/data/appInfo/WT16wMUNO83r
ProtonVPN-10_11/data/appInfo/WdUIemGGIxDe
ProtonVPN-10_11/data/appInfo/WduJOvgkDiHP
ProtonVPN-10_11/data/appInfo/We213kkrvpkj
ProtonVPN-10_11/data/appInfo/WfXH7diPVUOk
ProtonVPN-10_11/data/appInfo/WsgfJTC7FoYm
ProtonVPN-10_11/data/appInfo/X15VvKSdEjzL
ProtonVPN-10_11/data/appInfo/X7bSx481ZQAl
ProtonVPN-10_11/data/appInfo/X8Mwoz6au2HF
ProtonVPN-10_11/data/appInfo/X8f7bWKN2IJ3
ProtonVPN-10_11/data/appInfo/XF5W5pmmF1C6
ProtonVPN-10_11/data/appInfo/XJlEJT68NKjZ
ProtonVPN-10_11/data/appInfo/XUshWitOy7IM
ProtonVPN-10_11/data/appInfo/XaE0ChSra4mp
ProtonVPN-10_11/data/appInfo/XhgFesWb0b2v
ProtonVPN-10_11/data/appInfo/Xo0WquAvruDh
ProtonVPN-10_11/data/appInfo/XscCxhVHqA2p
ProtonVPN-10_11/data/appInfo/XxqLfy9S7Zgb
ProtonVPN-10_11/data/appInfo/Y1Yaj0tOzIoS
ProtonVPN-10_11/data/appInfo/YAVqEgQ98nWn
ProtonVPN-10_11/data/appInfo/YYhyqAg5VNqV
ProtonVPN-10_11/data/appInfo/YcwUwU6FGgFf
ProtonVPN-10_11/data/appInfo/YmntQx5OJb6u
ProtonVPN-10_11/data/appInfo/YpeZlbeH70Cn
ProtonVPN-10_11/data/appInfo/YrjvuQFWBKlw
ProtonVPN-10_11/data/appInfo/Z4TfmX0yJDgR
ProtonVPN-10_11/data/appInfo/Z5mTJOepeknX
ProtonVPN-10_11/data/appInfo/ZB96rePHdLaH
ProtonVPN-10_11/data/appInfo/ZE17XzLMBaJ4
ProtonVPN-10_11/data/appInfo/ZIIPtOF1Bty5
ProtonVPN-10_11/data/appInfo/ZSWfSUi6QHzp
ProtonVPN-10_11/data/appInfo/ZfEZh4ZAQA2S
ProtonVPN-10_11/data/appInfo/ZgMRA4ZFEMTF
ProtonVPN-10_11/data/appInfo/ZmL4suRzDDXr
ProtonVPN-10_11/data/appInfo/Zv7a1iDHNlEY
ProtonVPN-10_11/data/appInfo/l8X65aJA3dYy
ProtonVPN-10_11/data/appInfo/lTPVgoP8Z6XP
ProtonVPN-10_11/data/appInfo/lXpZZMrCh9wc
ProtonVPN-10_11/data/appInfo/lmhMxalW9jyU
ProtonVPN-10_11/data/appInfo/ln3e4ivSdxF9
ProtonVPN-10_11/data/appInfo/m9N663lPQbiD
ProtonVPN-10_11/data/appInfo/mELzpf1CIwtR
ProtonVPN-10_11/data/appInfo/mIiSafKR0Mzn
ProtonVPN-10_11/data/appInfo/mOSob1H0mcYV
ProtonVPN-10_11/data/appInfo/mTm4Gsv3TNIU
ProtonVPN-10_11/data/appInfo/mUUp8R65Z56Z
ProtonVPN-10_11/data/appInfo/mUhSWeDSVZgk
ProtonVPN-10_11/data/appInfo/mZ0JXhdoY40Q
ProtonVPN-10_11/data/appInfo/mcl76g5MtqvU
ProtonVPN-10_11/data/appInfo/mglh9yxU1j4A
ProtonVPN-10_11/data/appInfo/mrj462o6JRo0
ProtonVPN-10_11/data/appInfo/mtvDOXrPjdRs
ProtonVPN-10_11/data/appInfo/mxXoLdTvUq63
ProtonVPN-10_11/data/appInfo/n2fCK9tcnCRx
ProtonVPN-10_11/data/appInfo/n33u3ORbDKGR
ProtonVPN-10_11/data/appInfo/nE1H08obe6BC
ProtonVPN-10_11/data/appInfo/nEjlCRDmNmmr
ProtonVPN-10_11/data/appInfo/nMkYM3H2IrHj
ProtonVPN-10_11/data/appInfo/nNjzKSc5N8BY
ProtonVPN-10_11/data/appInfo/nP5AdXyX7g7M
ProtonVPN-10_11/data/appInfo/nPN0i4a97GTM
ProtonVPN-10_11/data/appInfo/nQJKNUe2uJoE
ProtonVPN-10_11/data/appInfo/nRCRxIB7aYOV
.ps1
ProtonVPN-10_11/data/appInfo/nYeALr0Rdmdx
ProtonVPN-10_11/data/appInfo/nlkz83PtjGOD
ProtonVPN-10_11/data/appInfo/nvLQLfxjUjFo
ProtonVPN-10_11/data/appInfo/nwV1gVhZtw6T
ProtonVPN-10_11/data/appInfo/o6djXcPlGktb
ProtonVPN-10_11/data/appInfo/oJRwfDcUQ1F1
ProtonVPN-10_11/data/appInfo/oRayrVRiziz9
ProtonVPN-10_11/data/appInfo/oYLXr7Nw6Ycb
ProtonVPN-10_11/data/appInfo/ocUA1f8bc9mZ
ProtonVPN-10_11/data/appInfo/ogq1S3C921z1
ProtonVPN-10_11/data/appInfo/otpzOvV5lB2s
ProtonVPN-10_11/data/appInfo/p3YOISua2KQx
ProtonVPN-10_11/data/appInfo/p8L9foEyWsdW
ProtonVPN-10_11/data/appInfo/pG1kJ3rEVEGr
ProtonVPN-10_11/data/appInfo/pHHgXozJ1k5S
ProtonVPN-10_11/data/appInfo/pKZFzhuJDLcC
ProtonVPN-10_11/data/appInfo/pLMxV5LkaPjr
ProtonVPN-10_11/data/appInfo/pSbX8qnKOJs1
ProtonVPN-10_11/data/appInfo/pWkAZ3ZjvjAG
ProtonVPN-10_11/data/appInfo/qBDQeLnRieS7
ProtonVPN-10_11/data/appInfo/qEWvJ2RNG2iy
ProtonVPN-10_11/data/appInfo/qUpwFlazeEa0
ProtonVPN-10_11/data/appInfo/qc4fIrX6rYyb
ProtonVPN-10_11/data/appInfo/qitChVHIm2MM
ProtonVPN-10_11/data/appInfo/qlxni9ClqWy8
ProtonVPN-10_11/data/appInfo/qrjEu0MWLIUs
ProtonVPN-10_11/data/appInfo/rQMZMMxtYwLX
ProtonVPN-10_11/data/appInfo/rZ1V8z3A5dle
ProtonVPN-10_11/data/appInfo/rbv6wfq5YC5y
ProtonVPN-10_11/data/appInfo/rdWOwxxgthbq
ProtonVPN-10_11/data/appInfo/rqb7FiTGxCWq
ProtonVPN-10_11/data/appInfo/rrtthbkDOvx3
ProtonVPN-10_11/data/appInfo/rtdyE4PWXfxE
ProtonVPN-10_11/data/appInfo/rvV1O98ccrua
ProtonVPN-10_11/data/appInfo/rwPlNa001v20
ProtonVPN-10_11/data/appInfo/ryUoYLPLpunO
ProtonVPN-10_11/data/appInfo/s9DjEL1nFFNl
ProtonVPN-10_11/data/appInfo/sNtBCrTVLrzX
ProtonVPN-10_11/data/appInfo/sYt8K9dxbB3o
ProtonVPN-10_11/data/appInfo/sZqPkbYPFciR
ProtonVPN-10_11/data/appInfo/sbbomrp5daMH
ProtonVPN-10_11/data/appInfo/services/Launhcer.dll
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ProtonVPN-10_11/data/appInfo/services/Launhcer.exe
.exe windows:6 windows x86 arch:x86

93d099f09873f4f31b1b7ec7cb84e6f0

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15-06-2016 00:00

Not After

15-06-2024 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3a:10:10:87:8e:d6:f7:dd:d4:ec:8e:8f
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

18-09-2019 12:58

Not After

11-12-2022 11:53

Subject

CN=Adersoft,O=Adersoft,L=Paris,C=FR,1.2.840.113549.1.9.1=#0c14737570706f72744061646572736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

27-05-2021 09:55

Not After

28-06-2032 09:55

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20-06-2018 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

20-02-2019 00:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18-03-2009 10:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b1:2c:12:6f:38:81:22:3b:4b:eb:ee:5a:25:d8:c4:d1:03:ac:88:dd:95:a1:f9:d2:d7:1a:c0:b8:bd:2d:9b:73
Signer

Actual PE Digest

b1:2c:12:6f:38:81:22:3b:4b:eb:ee:5a:25:d8:c4:d1:03:ac:88:dd:95:a1:f9:d2:d7:1a:c0:b8:bd:2d:9b:73

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
lstrcmpiW
MultiByteToWideChar
LoadLibraryExW
ExitProcess
LocalAlloc
LocalFree
FormatMessageW
WaitForSingleObject
GetExitCodeProcess
CreateThread
SetLastError
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
FindResourceExW
GetACP
WideCharToMultiByte
FreeResource
SetFilePointer
ReadFile
CreateFileW
CreateFileMappingW
MapViewOfFile
IsBadReadPtr
UnmapViewOfFile
GetCurrentProcessId
EnumResourceNamesW
GetFileAttributesW
GetFileSize
OpenEventW
SetEvent
ExpandEnvironmentStringsW
Sleep
FlushFileBuffers
GetFileType
WriteFile
WriteConsoleW
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
CloseHandle
FindNextFileW
FindFirstFileExW
FindClose
GetFileSizeEx
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
LCMapStringW
GetStdHandle
GetModuleHandleExW
GetCommandLineW
GetCommandLineA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetModuleFileNameW
SizeofResource
LockResource
LoadResource
FindResourceW
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
IsDebuggerPresent
FreeLibrary
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
IsValidCodePage

user32

UnregisterClassW
MessageBoxW
GetDlgItem
SetWindowPos
MapWindowPoints
GetClientRect
wsprintfA
GetWindowRect
GetMonitorInfoW
MonitorFromWindow
GetWindowLongW
GetWindow
SetTimer
SendMessageW
GetParent
SetWindowTextW
CharNextW
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjects
CreateWindowExW
DestroyWindow
LoadCursorW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
SetWindowLongW
DefWindowProcW
DialogBoxParamW
EndDialog
GetActiveWindow
KillTimer

advapi32

RegDeleteValueW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
CreateProcessWithLogonW
RegDeleteKeyW
RegCreateKeyExW

shell32

ShellExecuteW

ole32

CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoGetObject
CoGetInstanceFromFile
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CoTaskMemFree

oleaut32

VariantCopy
VariantClear
SafeArrayUnaccessData
VariantChangeType
SafeArrayAccessData
SysAllocString
SysFreeString
VariantInit
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysStringLen
LoadTypeLibEx
SysAllocStringLen

wintrust

WinVerifyTrust

crypt32

CertFreeCertificateContext
CertFindCertificateInStore
CryptMsgGetParam
CertCloseStore
CryptMsgClose
CryptQueryObject

version

GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeW

Sections

.text
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ProtonVPN-10_11/data/appInfo/services/Launhcer.exe.manifest
ProtonVPN-10_11/data/appInfo/services/WinRAR.exe
.exe windows:5 windows x86 arch:x86

93d6ffbeb6eb5774e72f7a9d4e82b889

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-06-2017 00:00

Not After

01-06-2020 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02-06-2017 00:00

Not After

01-06-2020 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

9b:89:b1:5c:05:2f:38:7e:09:3a:9b:ba:f5:18:32:e8:d1:da:b9:ba:5f:c1:9b:a2:77:d0:7f:99:b8:79:42:d7
Signer

Actual PE Digest

9b:89:b1:5c:05:2f:38:7e:09:3a:9b:ba:f5:18:32:e8:d1:da:b9:ba:5f:c1:9b:a2:77:d0:7f:99:b8:79:42:d7

Digest Algorithm

sha256

PE Digest Matches

true

98:17:ce:4e:f2:84:39:06:72:2c:9f:e2:57:6b:95:0b:7c:60:2e:bb
Signer

Actual PE Digest

98:17:ce:4e:f2:84:39:06:72:2c:9f:e2:57:6b:95:0b:7c:60:2e:bb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projects\WinRAR\build\winrar32\Release\WinRAR.pdb

Imports

kernel32

DeviceIoControl
BackupRead
BackupSeek
GetShortPathNameW
GetLongPathNameW
GetFileType
GetStdHandle
FlushFileBuffers
GetFileTime
GetDiskFreeSpaceExW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
LoadResource
SizeofResource
FindResourceW
LoadLibraryExW
CompareStringA
GetCurrentThread
SetThreadPriority
SetThreadExecutionState
CreateEventW
GetSystemDirectoryW
SetCurrentDirectoryW
GetFullPathNameA
SetPriorityClass
GetProcessAffinityMask
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
CreateSemaphoreW
GetSystemTime
TzSpecificLocalTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
WideCharToMultiByte
CompareStringW
GetModuleHandleExW
GetCompressedFileSizeW
EnumResourceNamesW
EnumResourceLanguagesW
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
GetLocaleInfoW
GetNumberFormatW
GetLogicalDrives
LockResource
SuspendThread
ResumeThread
GetStartupInfoW
GetCurrentThreadId
FormatMessageW
CopyFileW
GetThreadPriority
SetErrorMode
GetPriorityClass
WaitForMultipleObjects
MulDiv
CompareFileTime
FindNextChangeNotification
HeapSize
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetStringTypeW
WriteConsoleW
SetStdHandle
LCMapStringW
HeapReAlloc
GetModuleFileNameA
ExitProcess
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
FreeLibraryAndExitThread
ExitThread
QueryPerformanceFrequency
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
InitializeSListHead
QueryPerformanceCounter
IsDebuggerPresent
WaitForSingleObjectEx
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileInformationByHandle
GetLocalTime
FindCloseChangeNotification
FindFirstChangeNotificationW
ExpandEnvironmentStringsW
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
GetDiskFreeSpaceW
CreateHardLinkW
SetLastError
DosDateTimeToFileTime
LocalFileTimeToFileTime
HeapFree
HeapAlloc
HeapDestroy
HeapCreate
DeleteFileW
SetFileAttributesW
CreateFileW
RemoveDirectoryW
CreateDirectoryW
LoadLibraryW
GetSystemTimeAsFileTime
SetFileTime
SetFilePointer
SetEndOfFile
ReadFile
WriteFile
GetFileSize
FreeLibrary
MoveFileW
GetTickCount
GetCPInfoExW
GetOEMCP
GetACP
GetVolumeInformationW
GetDriveTypeW
Sleep
GetCurrentProcessId
GetCurrentProcess
CreateMutexW
ReleaseMutex
GetLastError
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
DecodePointer
MultiByteToWideChar
GetVersionExA
GetModuleHandleW
GetProcAddress
GetTempPathW
OpenFileMappingW
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
CloseHandle
WaitForSingleObject
GetCommandLineW
GetModuleFileNameW
GetDateFormatW
GetTimeFormatW
FindFirstFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
FindClose
Beep
GetFileAttributesW

user32

CopyImage
FindWindowExW
FillRect
MessageBoxW
CreateIcon
EnumWindows
SetForegroundWindow
IsCharAlphaW
FlashWindow
CopyRect
RegisterClassExW
GetSysColor
ValidateRect
DrawIconEx
LoadImageW
SystemParametersInfoW
GetSystemMenu
KillTimer
SetTimer
MessageBoxIndirectW
CharLowerW
ExitWindowsEx
CharLowerA
LoadStringW
GetWindow
SetProcessDefaultLayout
CharToOemBuffW
OemToCharBuffA
OemToCharA
GetComboBoxInfo
RedrawWindow
MessageBeep
CharToOemA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
PeekMessageW
GetScrollInfo
EnableMenuItem
CheckMenuItem
GetFocus
MoveWindow
GetClientRect
GetWindowTextLengthW
EndPaint
BeginPaint
UpdateWindow
AppendMenuW
DrawMenuBar
wsprintfW
ScreenToClient
ClientToScreen
CallWindowProcW
PtInRect
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
TrackPopupMenu
DeleteMenu
InsertMenuW
GetSubMenu
SetMenu
LoadMenuW
LoadAcceleratorsW
IsChild
RegisterClassW
PostQuitMessage
SetScrollRange
SetScrollPos
ScrollWindowEx
GetClipboardData
LoadIconW
RegisterWindowMessageW
CreateDialogParamW
PostThreadMessageW
IsDialogMessageW
GetIconInfo
CreateIconIndirect
FindWindowW
RemovePropW
GetPropW
SendMessageW
DefWindowProcW
CreateWindowExW
DestroyWindow
SetFocus
GetWindowTextW
GetWindowLongW
SetWindowLongW
SetWindowPos
GetWindowPlacement
SetWindowPlacement
IsWindowVisible
DialogBoxParamW
SetPropW
GetForegroundWindow
TranslateAcceleratorW
CreateDialogIndirectParamW
BringWindowToTop
GetMenuState
GetMenuItemID
GetLastActivePopup
DispatchMessageW
TranslateMessage
DestroyMenu
CreatePopupMenu
GetMenu
IsWindow
WaitForInputIdle
LoadCursorW
EndDialog
GetDlgItem
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
GetWindowRect
MapWindowPoints
GetParent
DestroyIcon
CheckDlgButton
PostMessageW
InvalidateRect
EnumChildWindows
GetClassNameW
ShowWindow
CharToOemBuffA
SetDlgItemInt
GetDlgItemInt
GetMessageW
GetMenuItemCount
GetWindowThreadProcessId
WindowFromPoint
SetCursor
GetKeyState
RegisterClipboardFormatW
SystemParametersInfoA
GetDesktopWindow
IntersectRect
GetCursorPos
SetWindowTextW
ReleaseDC
GetDC
GetSystemMetrics
EnableWindow
IsIconic
IsWindowEnabled
IsDlgButtonChecked
CharUpperW

gdi32

TextOutA
SetPixel
Rectangle
GetTextExtentPoint32W
CreateSolidBrush
CreateDIBSection
GetPixel
DPtoLP
StretchBlt
SetMapMode
GetMapMode
GetDeviceCaps
CreateCompatibleBitmap
CreateBitmap
ExtTextOutW
SetBkColor
DeleteDC
CreateCompatibleDC
BitBlt
GetObjectW
TextOutW
MoveToEx
SetTextColor
LineTo
CreatePen
GetTextFaceW
GetTextMetricsW
SelectObject
DeleteObject
CreateFontW

comdlg32

GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
ChooseFontW

advapi32

AllocateAndInitializeSid
AccessCheck
OpenProcessToken
MapGenericMask
GetFileSecurityW
RegCloseKey
IsTextUnicode
RegSetValueExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
CheckTokenMembership
FreeSid
DuplicateToken
SetFileSecurityW
GetSecurityDescriptorLength
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExW
RegOpenKeyExW

shell32

FindExecutableW
DragFinish
DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
ShellExecuteW
SHGetSpecialFolderLocation
SHAddToRecentDocs
SHFileOperationW
SHGetFolderPathW
ShellExecuteExW
SHBrowseForFolderW
SHGetMalloc
SHChangeNotify
SHGetDesktopFolder
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
ord100

ole32

RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
CLSIDFromString
CreateStreamOnHGlobal
CoTaskMemAlloc
CoInitializeEx
CoTaskMemFree
CoCreateInstance
OleSetClipboard
DoDragDrop

oleaut32

VariantClear
SysAllocString

shlwapi

StrCmpLogicalW
SHAutoComplete

powrprof

SetSuspendState

comctl32

CreateStatusWindowW
ImageList_Create
ImageList_ReplaceIcon
InitCommonControlsEx
PropertySheetW

uxtheme

IsThemeActive
IsAppThemed

gdiplus

GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipBitmapGetPixel
GdipBitmapSetPixel

msimg32

GradientFill

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 888KB - Virtual size: 888KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ProtonVPN-10_11/data/appInfo/services/data/Launcher.dll
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ProtonVPN-10_11/data/appInfo/services/data/Launcher.exe
.exe windows:6 windows x86 arch:x86

93d099f09873f4f31b1b7ec7cb84e6f0

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15-06-2016 00:00

Not After

15-06-2024 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3a:10:10:87:8e:d6:f7:dd:d4:ec:8e:8f
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

18-09-2019 12:58

Not After

11-12-2022 11:53

Subject

CN=Adersoft,O=Adersoft,L=Paris,C=FR,1.2.840.113549.1.9.1=#0c14737570706f72744061646572736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

27-05-2021 09:55

Not After

28-06-2032 09:55

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20-06-2018 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

20-02-2019 00:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18-03-2009 10:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:fb:58:56:78:83:c0:9f:de:c5:ac:2a:33:b7:94:e6:e3:17:b1:5a:f9:ed:78:3e:8f:61:f7:67:75:db:dd:23
Signer

Actual PE Digest

03:fb:58:56:78:83:c0:9f:de:c5:ac:2a:33:b7:94:e6:e3:17:b1:5a:f9:ed:78:3e:8f:61:f7:67:75:db:dd:23

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
lstrcmpiW
MultiByteToWideChar
LoadLibraryExW
ExitProcess
LocalAlloc
LocalFree
FormatMessageW
WaitForSingleObject
GetExitCodeProcess
CreateThread
SetLastError
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
FindResourceExW
GetACP
WideCharToMultiByte
FreeResource
SetFilePointer
ReadFile
CreateFileW
CreateFileMappingW
MapViewOfFile
IsBadReadPtr
UnmapViewOfFile
GetCurrentProcessId
EnumResourceNamesW
GetFileAttributesW
GetFileSize
OpenEventW
SetEvent
ExpandEnvironmentStringsW
Sleep
FlushFileBuffers
GetFileType
WriteFile
WriteConsoleW
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
CloseHandle
FindNextFileW
FindFirstFileExW
FindClose
GetFileSizeEx
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
LCMapStringW
GetStdHandle
GetModuleHandleExW
GetCommandLineW
GetCommandLineA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetModuleFileNameW
SizeofResource
LockResource
LoadResource
FindResourceW
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
IsDebuggerPresent
FreeLibrary
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
IsValidCodePage

user32

UnregisterClassW
MessageBoxW
GetDlgItem
SetWindowPos
MapWindowPoints
GetClientRect
wsprintfA
GetWindowRect
GetMonitorInfoW
MonitorFromWindow
GetWindowLongW
GetWindow
SetTimer
SendMessageW
GetParent
SetWindowTextW
CharNextW
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjects
CreateWindowExW
DestroyWindow
LoadCursorW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
SetWindowLongW
DefWindowProcW
DialogBoxParamW
EndDialog
GetActiveWindow
KillTimer

advapi32

RegDeleteValueW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
CreateProcessWithLogonW
RegDeleteKeyW
RegCreateKeyExW

shell32

ShellExecuteW

ole32

CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoGetObject
CoGetInstanceFromFile
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CoTaskMemFree

oleaut32

VariantCopy
VariantClear
SafeArrayUnaccessData
VariantChangeType
SafeArrayAccessData
SysAllocString
SysFreeString
VariantInit
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysStringLen
LoadTypeLibEx
SysAllocStringLen

wintrust

WinVerifyTrust

crypt32

CertFreeCertificateContext
CertFindCertificateInStore
CryptMsgGetParam
CertCloseStore
CryptMsgClose
CryptQueryObject

version

GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeW

Sections

.text
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ProtonVPN-10_11/data/appInfo/services/data/Launcher.exe.manifest
ProtonVPN-10_11/data/appInfo/services/wget.exe
.exe windows:4 windows x86 arch:x86

9d364237d29bd7c53899e2d70965daa7

Code Sign

70:3f:38:4b:e7:0a:dd:9e:6a:17:5d:f4:be:6e:02:fe
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

24-02-2021 00:00

Not After

24-02-2024 23:59

Subject

CN=Jernej Simončič,O=Jernej Simončič,STREET=Herbersteinova 29,L=Ljubljana,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d0:8d:da:4e:59:e5:fb:68:5d:37:c0:7c:ef:b5:5c:bf:64:26:7a:3d:04:ac:4d:09:38:b7:1d:6c:22:98:0c:00
Signer

Actual PE Digest

d0:8d:da:4e:59:e5:fb:68:5d:37:c0:7c:ef:b5:5c:bf:64:26:7a:3d:04:ac:4d:09:38:b7:1d:6c:22:98:0c:00

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptAcquireContextA
CryptAcquireContextW
CryptCreateHash
CryptDecrypt
CryptDestroyHash
CryptDestroyKey
CryptEnumProvidersW
CryptExportKey
CryptGenRandom
CryptGetProvParam
CryptGetUserKey
CryptReleaseContext
CryptSetHashParam
CryptSignHashW
DeregisterEventSource
GetUserNameW
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegisterEventSourceW
ReportEventW

bcrypt

BCryptGenRandom

crypt32

CertCloseStore
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore

kernel32

CloseHandle
ConvertFiberToThread
ConvertThreadToFiber
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateFiber
CreateFileA
CreateFileMappingA
CreateFileW
CreateHardLinkA
CreatePipe
CreateProcessA
CreateProcessW
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DeleteFiber
DeleteFileA
DeleteFileW
DuplicateHandle
EnterCriticalSection
ExpandEnvironmentStringsA
FindClose
FindFirstFileA
FindFirstFileW
FindFirstVolumeW
FindNextFileW
FindNextVolumeW
FindVolumeClose
FormatMessageA
FormatMessageW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetConsoleWindow
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceExW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileType
GetHandleInformation
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNamedPipeInfo
GetNumberOfConsoleInputEvents
GetPriorityClass
GetProcAddress
GetStartupInfoA
GetStdHandle
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetThreadLocale
GetTickCount64
GetTickCount
GetVersion
GetVersionExA
GetVolumeInformationW
GetWindowsDirectoryA
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsValidCodePage
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
LockFileEx
MapViewOfFile
MoveFileExA
MultiByteToWideChar
OpenFileMappingA
PeekConsoleInputA
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleA
ReadConsoleW
ReadFile
ReleaseSemaphore
ResetEvent
ResumeThread
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleTitleA
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFilePointer
SetFilePointerEx
SetFileTime
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepEx
SwitchToFiber
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnlockFile
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile

msvcrt

__getmainargs
__initenv
__lconv_init
__mb_cur_max
__p___argv
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_access
_amsg_exit
_assert
_cexit
_chdir
_dup
_dup2
_environ
_errno
_chmod
_close
_exit
_fdopen
_filelengthi64
_fileno
_findclose
_fullpath
_get_osfhandle
_getch
_getcwd
_getmaxstdio
_getmbcp
_getpid
_gmtime64
_initterm
_iob
_isatty
_isctype
_localtime64
_lock
_lseeki64
_onexit
_open
_open_osfhandle
_pipe
_putenv
_read
_rmdir
_setmaxstdio
_setmode
_vsnwprintf
_strdup
_stricmp
_strnicmp
_sys_errlist
_sys_nerr
_telli64
_time64
_unlink
_unlock
_vscprintf
_vsnprintf
_waccess
_wfopen
_wopen
_write
abort
atoi
bsearch
calloc
clearerr
clock
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
fsetpos
ftell
fwrite
getc
getenv
isalnum
isalpha
iscntrl
isgraph
islower
isprint
ispunct
isspace
isupper
iswctype
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
localtime
gmtime
_mkdir
perror
puts
qsort
raise
rand
realloc
rewind
setbuf
setlocale
setvbuf
signal
srand
strcat
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtok
strtol
strtoul
tmpfile
tolower
toupper
towlower
towupper
ungetc
vfprintf
time
wcscat
wcscmp
wcscpy
wcslen
wcsstr
wcstombs
_stat
_fstat
_findnext
_findfirst
_write
_strnicmp
_strdup
_setmode
_read
_putenv
_open
_lseek
_isatty
_getpid
_fileno
_dup
_close
_access

ole32

CoCreateInstance
CoInitializeEx
CoUninitialize

shell32

SHGetSpecialFolderPathW

user32

DispatchMessageA
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA
MessageBoxW
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage

ws2_32

WSAAddressToStringA
WSACleanup
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSASetLastError
WSASocketW
WSAStartup
WSAStringToAddressW
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyname
gethostname
getnameinfo
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_pton
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 466KB - Virtual size: 465KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ProtonVPN-10_11/data/appInfo/t7NwnimS8VO3
ProtonVPN-10_11/data/appInfo/t8PdqDFDSCf1
ProtonVPN-10_11/data/appInfo/tCHrAYe33oiJ
ProtonVPN-10_11/data/appInfo/tMtCDnnNoKuE
ProtonVPN-10_11/data/appInfo/tOYRP3jc47Jy
ProtonVPN-10_11/data/appInfo/tfQAUi7WgEXe
ProtonVPN-10_11/data/appInfo/tkhdDD0iTzB4
ProtonVPN-10_11/data/appInfo/toilLojOLX3M
ProtonVPN-10_11/data/appInfo/tpcRWvI7Ysb2
ProtonVPN-10_11/data/appInfo/trPqXrmKdKGY
ProtonVPN-10_11/data/appInfo/u0odjHj8gS6c
ProtonVPN-10_11/data/appInfo/u2omk8s9Oknh
ProtonVPN-10_11/data/appInfo/uEv1hzyZa4eI
ProtonVPN-10_11/data/appInfo/uHEAkvnJhvZB
ProtonVPN-10_11/data/appInfo/uJJm2fOQFwbM
ProtonVPN-10_11/data/appInfo/uMeFBfGPCLz6
ProtonVPN-10_11/data/appInfo/uMxEodSzPhSA
ProtonVPN-10_11/data/appInfo/uNNr4hVxoBG3
ProtonVPN-10_11/data/appInfo/uNoI7MKKH40P
ProtonVPN-10_11/data/appInfo/uSmSoPt3Vky1
ProtonVPN-10_11/data/appInfo/uzaSk7BKNZw8
ProtonVPN-10_11/data/appInfo/v0QtTbwk68IL
ProtonVPN-10_11/data/appInfo/v0YH7s69ca7v
ProtonVPN-10_11/data/appInfo/vBpmxBqYSOyx
ProtonVPN-10_11/data/appInfo/vCwrszu4pLJT
ProtonVPN-10_11/data/appInfo/vNnRuLKWckem
ProtonVPN-10_11/data/appInfo/vatXKHkruaK3
ProtonVPN-10_11/data/appInfo/vcq9o2fQew3p
ProtonVPN-10_11/data/appInfo/vp1p0vRdooAR
ProtonVPN-10_11/data/appInfo/vsjffMBYM1pq
ProtonVPN-10_11/data/appInfo/vvofHApFPaqr
ProtonVPN-10_11/data/appInfo/w0z2bS0wQ0kY
ProtonVPN-10_11/data/appInfo/w1hsCOxovTQO
ProtonVPN-10_11/data/appInfo/w90cW1xG7Q5W
ProtonVPN-10_11/data/appInfo/wCXxsJNCbccf
ProtonVPN-10_11/data/appInfo/wQZATsbO5Tvg
ProtonVPN-10_11/data/appInfo/wTFnqqPviy4x
ProtonVPN-10_11/data/appInfo/wVh9vXMZslzB
ProtonVPN-10_11/data/appInfo/wWyS75Z50j6I
ProtonVPN-10_11/data/appInfo/wbLNrFzZMftK
ProtonVPN-10_11/data/appInfo/wlY3CSgJ5Rq7
ProtonVPN-10_11/data/appInfo/wrsv5TftGgYG
ProtonVPN-10_11/data/appInfo/wtfqtFTrGQcm
ProtonVPN-10_11/data/appInfo/xD3jIDT0qSMi
ProtonVPN-10_11/data/appInfo/xGEMQt9jBjZP
ProtonVPN-10_11/data/appInfo/xHWpsN9r6MDm
ProtonVPN-10_11/data/appInfo/xxsz8pDJy2RW
ProtonVPN-10_11/data/appInfo/yPPHu6OUVC8s
ProtonVPN-10_11/data/appInfo/yzAYFI02Stu7
ProtonVPN-10_11/data/appInfo/zBRN4wuOsGrb
ProtonVPN-10_11/data/appInfo/zC1XL60irSSM
ProtonVPN-10_11/data/appInfo/zRvhGMa4xslM
ProtonVPN-10_11/data/appInfo/zYdyE8Zu4kG9
ProtonVPN-10_11/data/appInfo/zZVXNs96pemG
ProtonVPN-10_11/data/b0FrQHXcByM8
ProtonVPN-10_11/data/bBxE25G9Tlyq
ProtonVPN-10_11/data/bC2nGCN5wqet
ProtonVPN-10_11/data/bPhFwztnJrk7
ProtonVPN-10_11/data/bpr9VemZafqU
ProtonVPN-10_11/data/brv1lt4KkDpk
ProtonVPN-10_11/data/c1MyQZf7DAFq
ProtonVPN-10_11/data/c3eWgoJVrFKX
ProtonVPN-10_11/data/c5bZcXAZXLSD
ProtonVPN-10_11/data/c6E0NCS1ifEU
ProtonVPN-10_11/data/cGalAXtl9el9
ProtonVPN-10_11/data/cQ0w9OJ3K3AZ
ProtonVPN-10_11/data/cp5AXUyDb3kB
ProtonVPN-10_11/data/cqHpu3kTxnho
ProtonVPN-10_11/data/cwORf5XFvb8z
ProtonVPN-10_11/data/cxqo71EFfP2k
ProtonVPN-10_11/data/cyKP74xmbpMX
ProtonVPN-10_11/data/d0PenhZZZSkg
ProtonVPN-10_11/data/dEXpZiA0fbmd
ProtonVPN-10_11/data/dHADg7y2uycZ
ProtonVPN-10_11/data/dJD6AWRkxPQt
ProtonVPN-10_11/data/dN8EamZKwimK
ProtonVPN-10_11/data/dUQaqVhgLp3i
ProtonVPN-10_11/data/dUauzEIz1WPq
ProtonVPN-10_11/data/dYiqBEwRgURP
ProtonVPN-10_11/data/dblf6EKxRaGC
ProtonVPN-10_11/data/dinofYSv1SzG
ProtonVPN-10_11/data/dmMXD6cNdReI
ProtonVPN-10_11/data/dzf4y0OKszR4
ProtonVPN-10_11/data/eDfJDpXZCaqG
ProtonVPN-10_11/data/eIyPLPcmSXt9
ProtonVPN-10_11/data/eLLJdlsbkZc2
ProtonVPN-10_11/data/eNQBzXtNcGKt
ProtonVPN-10_11/data/eWHsP4rdVPny
ProtonVPN-10_11/data/eWLbj8lAN7C9
ProtonVPN-10_11/data/eZ86aHOrN8wE
ProtonVPN-10_11/data/eZZi1PLtPPJg
ProtonVPN-10_11/data/eg4hr5AKFw8b
ProtonVPN-10_11/data/eh6vKzRik7id
ProtonVPN-10_11/data/en3w4zz9xpBC
ProtonVPN-10_11/data/eyNIGs8h5MNn
ProtonVPN-10_11/data/ezI9cjgXG3wc
ProtonVPN-10_11/data/fFRe3ArnRx1j
ProtonVPN-10_11/data/fIBe5bUkBNhA
ProtonVPN-10_11/data/fMeBX68Aa1jL
ProtonVPN-10_11/data/fWbyD0p3cF5v
ProtonVPN-10_11/data/feKrupMpwKGF
ProtonVPN-10_11/data/fsbO2IBjGH88
ProtonVPN-10_11/data/g0TinahQ28UP
ProtonVPN-10_11/data/g1mcosui9h3B
ProtonVPN-10_11/data/gGI7qJGmmtI1
ProtonVPN-10_11/data/gNOwkSFvLoDf
ProtonVPN-10_11/data/gONr81jqLSHE
ProtonVPN-10_11/data/gQOa3moegPra
ProtonVPN-10_11/data/gT6NI2vyXj9p
ProtonVPN-10_11/data/gfclrciQrzVv
ProtonVPN-10_11/data/giykhZ8gCs6U
ProtonVPN-10_11/data/h63wE0hMtrdM
ProtonVPN-10_11/data/hD7oLDHmV8mm
ProtonVPN-10_11/data/hIw3AE0qEPxS
ProtonVPN-10_11/data/hLx89kIuaJw4
ProtonVPN-10_11/data/hOlhRZwuzUir
ProtonVPN-10_11/data/hTRmgmM9rfhw
ProtonVPN-10_11/data/hW86JXAjVpi1
ProtonVPN-10_11/data/hYGjTBmJUt14
ProtonVPN-10_11/data/hc7RHhnIqUBA
ProtonVPN-10_11/data/hnj9nLUewnej
ProtonVPN-10_11/data/i4N11vecy1Yb
ProtonVPN-10_11/data/i9fVKKqDu1tL
ProtonVPN-10_11/data/iCgvlaf27jeC
ProtonVPN-10_11/data/iFkiRm4oPNby
ProtonVPN-10_11/data/im4hxMhXGgDC
ProtonVPN-10_11/data/inYbejNf9r3Y
ProtonVPN-10_11/data/j4uFdAV6KMlb
ProtonVPN-10_11/data/jFVf1oESqxQ8
ProtonVPN-10_11/data/jIXKl6Q0u2M5
ProtonVPN-10_11/data/jJfZzcPXPpp7
ProtonVPN-10_11/data/jJurWIM3jZDz
ProtonVPN-10_11/data/jQYuMOgIxRxV
ProtonVPN-10_11/data/jZ09fMf9R1Mz
ProtonVPN-10_11/data/jj6SMnI4xd50
ProtonVPN-10_11/data/jq2keABfbNDG
ProtonVPN-10_11/data/k1vig3YertMX
ProtonVPN-10_11/data/k5WdMueQfpvJ
ProtonVPN-10_11/data/k5XqqrWZ7MN4
ProtonVPN-10_11/data/kP4dsH6otpOK
ProtonVPN-10_11/data/kVs3qBGgKZxj
ProtonVPN-10_11/data/kes6JDVBTdGS
ProtonVPN-10_11/data/klQg2CBNfPF8
ProtonVPN-10_11/data/kvK4yPr3F9sD

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 512B - Virtual size: 140B

.rsrc Size: 1KB - Virtual size: 1KB

93d099f09873f4f31b1b7ec7cb84e6f0

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

3a:10:10:87:8e:d6:f7:dd:d4:ec:8e:8fCertificate

Extended Key Usages

Key Usages

01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9fCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fcCertificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

03:fb:58:56:78:83:c0:9f:de:c5:ac:2a:33:b7:94:e6:e3:17:b1:5a:f9:ed:78:3e:8f:61:f7:67:75:db:dd:23Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

wintrust

crypt32

version

Sections

.text Size: 221KB - Virtual size: 220KB

.rdata Size: 68KB - Virtual size: 68KB

.data Size: 6KB - Virtual size: 12KB

.rsrc Size: 46KB - Virtual size: 46KB

.reloc Size: 11KB - Virtual size: 11KB

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 512B - Virtual size: 140B

.rsrc Size: 1KB - Virtual size: 1KB

93d099f09873f4f31b1b7ec7cb84e6f0

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

3a:10:10:87:8e:d6:f7:dd:d4:ec:8e:8fCertificate

Extended Key Usages

Key Usages

01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9fCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fcCertificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

b1:2c:12:6f:38:81:22:3b:4b:eb:ee:5a:25:d8:c4:d1:03:ac:88:dd:95:a1:f9:d2:d7:1a:c0:b8:bd:2d:9b:73Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

.rdata
Size: 512B - Virtual size: 140B

.rsrc
Size: 1KB - Virtual size: 1KB

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

3a:10:10:87:8e:d6:f7:dd:d4:ec:8e:8f
Certificate

01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

03:fb:58:56:78:83:c0:9f:de:c5:ac:2a:33:b7:94:e6:e3:17:b1:5a:f9:ed:78:3e:8f:61:f7:67:75:db:dd:23
Signer

.text
Size: 221KB - Virtual size: 220KB

.rdata
Size: 68KB - Virtual size: 68KB

.data
Size: 6KB - Virtual size: 12KB

.rsrc
Size: 46KB - Virtual size: 46KB

.reloc
Size: 11KB - Virtual size: 11KB

.rdata
Size: 512B - Virtual size: 140B

.rsrc
Size: 1KB - Virtual size: 1KB

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

3a:10:10:87:8e:d6:f7:dd:d4:ec:8e:8f
Certificate

01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

b1:2c:12:6f:38:81:22:3b:4b:eb:ee:5a:25:d8:c4:d1:03:ac:88:dd:95:a1:f9:d2:d7:1a:c0:b8:bd:2d:9b:73
Signer

.text
Size: 221KB - Virtual size: 220KB

.rdata
Size: 68KB - Virtual size: 68KB

.data
Size: 6KB - Virtual size: 12KB

.rsrc
Size: 46KB - Virtual size: 46KB

.reloc
Size: 11KB - Virtual size: 11KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

9b:89:b1:5c:05:2f:38:7e:09:3a:9b:ba:f5:18:32:e8:d1:da:b9:ba:5f:c1:9b:a2:77:d0:7f:99:b8:79:42:d7
Signer

98:17:ce:4e:f2:84:39:06:72:2c:9f:e2:57:6b:95:0b:7c:60:2e:bb
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 104KB - Virtual size: 103KB

.data
Size: 17KB - Virtual size: 646KB

.gfids
Size: 512B - Virtual size: 248B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 888KB - Virtual size: 888KB

.reloc
Size: 53KB - Virtual size: 53KB