agenttesla | vulnera+beta[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

vulnera+beta.zip
Size

35.7MB
MD5

a9ab5a02ad8769fcd438a2e851f5cbd2
SHA1

3d8801df6c7f7cd93a71e9b8abfd1e81e96b31d7
SHA256

b9abd391a632c6e7bae65458ffb3037bba08b14bcd21f541a9b0d3c4cf39a73b
SHA512

0c5e4f8d7c2939b4cc6e115c43487374f6d9dc18d03ffcafd6d8bd50c7df475e5769888288e242f850de87c5b2223b0418c532878d2fd860be27a38a05e0bd1d
SSDEEP

786432:CczD0TkKJPfVdZOua9hkPzALZkvNQNiHt9h:CGD0TkKlfVd8uMSASVaiHx

Score

10^/10

agenttesla

Malware Config

Signatures

AgentTesla payload 1 IoCs

resource	yara_rule
static1/unpack001/Guna.UI2.dll	family_agenttesla

Agenttesla family
agenttesla

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FastColoredTextBox.dll
unpack001/VaperAPI.dll
unpack001/bin/API.dll
unpack001/main.exe
unpack001/vulnera beta.exe

Files

vulnera+beta.zip
.zip
FastColoredTextBox.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Projects_CSharp\FastColoredTextBox\FastColoredTextBox\obj\Debug\FastColoredTextBox.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Guna.UI2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

Issuer

CN=Sobatdata Root CA

Not Before

23-10-2019 05:22

Not After

22-10-2025 17:00

Subject

CN=Sobatdata Software

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99
Signer

Actual PE Digest

51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Web.WebView2.Core.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

82:16:92:aa:f3:86:85:a1:7b:d7:76:7c:40:f5:23:05:fa:60:5b:ab:ec:81:76:94:51:f3:c2:32:7f:d4:70:40
Signer

Actual PE Digest

82:16:92:aa:f3:86:85:a1:7b:d7:76:7c:40:f5:23:05:fa:60:5b:ab:ec:81:76:94:51:f3:c2:32:7f:d4:70:40

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Web.WebView2.Core.xml
.js .xml polyglot
Microsoft.Web.WebView2.WinForms.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4f:1a:5b:3d:05:19:5a:d1:b6:47:ef:88:70:0a:42:6a:2d:a6:49:b9:08:e1:a3:f1:14:cf:cb:e8:1d:4e:59:e2
Signer

Actual PE Digest

4f:1a:5b:3d:05:19:5a:d1:b6:47:ef:88:70:0a:42:6a:2d:a6:49:b9:08:e1:a3:f1:14:cf:cb:e8:1d:4e:59:e2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\winforms_control\Microsoft.Web.WebView2.WinForms\obj\Release Stable APIs\net462\Microsoft.Web.WebView2.WinForms.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Web.WebView2.WinForms.xml
.xml
Microsoft.Web.WebView2.Wpf.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:bb:ff:4e:7c:ac:65:e2:92:d2:61:a5:bd:9d:bf:a6:5d:10:ea:cb:5b:7c:90:24:3b:59:1a:91:d0:3f:26:90
Signer

Actual PE Digest

1d:bb:ff:4e:7c:ac:65:e2:92:d2:61:a5:bd:9d:bf:a6:5d:10:ea:cb:5b:7c:90:24:3b:59:1a:91:d0:3f:26:90

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\Release Stable APIs\net462\Microsoft.Web.WebView2.Wpf.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.Web.WebView2.Wpf.xml
.xml
Monaco/Monaco.html
.js
Monaco/base.txt
Monaco/classfunc.txt
Monaco/globalf.txt
Monaco/globalns.txt
Monaco/globalv.txt
Monaco/monaco.zip
.zip
Monaco.html
.js
base.txt
classfunc.txt
globalf.txt
globalns.txt
globalv.txt
vs/base/worker/workerMain.js
.js
vs/basic-languages/bat/bat.js
vs/basic-languages/coffee/coffee.js
vs/basic-languages/cpp/cpp.js
vs/basic-languages/csharp/csharp.js
vs/basic-languages/csp/csp.js
vs/basic-languages/css/css.js
vs/basic-languages/dockerfile/dockerfile.js
vs/basic-languages/fsharp/fsharp.js
vs/basic-languages/go/go.js
vs/basic-languages/handlebars/handlebars.js
.js
vs/basic-languages/html/html.js
.js
vs/basic-languages/ini/ini.js
vs/basic-languages/java/java.js
vs/basic-languages/less/less.js
vs/basic-languages/lua/lua.js
vs/basic-languages/markdown/markdown.js
.js
vs/basic-languages/msdax/msdax.js
vs/basic-languages/mysql/mysql.js
vs/basic-languages/objective-c/objective-c.js
vs/basic-languages/pgsql/pgsql.js
vs/basic-languages/php/php.js
vs/basic-languages/postiats/postiats.js
vs/basic-languages/powershell/powershell.js
vs/basic-languages/pug/pug.js
vs/basic-languages/python/python.js
vs/basic-languages/r/r.js
vs/basic-languages/razor/razor.js
.js
vs/basic-languages/redis/redis.js
vs/basic-languages/redshift/redshift.js
vs/basic-languages/ruby/ruby.js
vs/basic-languages/rust/rust.js
vs/basic-languages/sb/sb.js
vs/basic-languages/scss/scss.js
vs/basic-languages/solidity/solidity.js
vs/basic-languages/sql/sql.js
vs/basic-languages/st/st.js
vs/basic-languages/swift/swift.js
vs/basic-languages/vb/vb.js
vs/basic-languages/xml/xml.js
vs/basic-languages/yaml/yaml.js
vs/editor/contrib/suggest/media/String_16x.svg
vs/editor/contrib/suggest/media/String_inverse_16x.svg
vs/editor/editor.main.css
vs/editor/editor.main.js
.js
vs/editor/editor.main.nls.de.js
vs/editor/editor.main.nls.es.js
vs/editor/editor.main.nls.fr.js
vs/editor/editor.main.nls.it.js
vs/editor/editor.main.nls.ja.js
vs/editor/editor.main.nls.js
vs/editor/editor.main.nls.ko.js
vs/editor/editor.main.nls.ru.js
vs/editor/editor.main.nls.zh-cn.js
vs/editor/editor.main.nls.zh-tw.js
vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
vs/language/css/cssMode.js
.js
vs/language/css/cssWorker.js
.js
vs/language/html/htmlMode.js
.js
vs/language/html/htmlWorker.js
.js
vs/language/json/jsonMode.js
.js
vs/language/json/jsonWorker.js
.js
vs/language/typescript/lib/typescriptServices.js
.js
vs/language/typescript/tsMode.js
.js
vs/language/typescript/tsWorker.js
.js
vs/loader.js
.js
Monaco/vs/base/worker/workerMain.js
.js
Monaco/vs/basic-languages/bat/bat.js
Monaco/vs/basic-languages/coffee/coffee.js
Monaco/vs/basic-languages/cpp/cpp.js
Monaco/vs/basic-languages/csharp/csharp.js
Monaco/vs/basic-languages/csp/csp.js
Monaco/vs/basic-languages/css/css.js
Monaco/vs/basic-languages/dockerfile/dockerfile.js
Monaco/vs/basic-languages/fsharp/fsharp.js
Monaco/vs/basic-languages/go/go.js
Monaco/vs/basic-languages/handlebars/handlebars.js
.js
Monaco/vs/basic-languages/html/html.js
.js
Monaco/vs/basic-languages/ini/ini.js
Monaco/vs/basic-languages/java/java.js
Monaco/vs/basic-languages/less/less.js
Monaco/vs/basic-languages/lua/lua.js
Monaco/vs/basic-languages/markdown/markdown.js
.js
Monaco/vs/basic-languages/msdax/msdax.js
Monaco/vs/basic-languages/mysql/mysql.js
Monaco/vs/basic-languages/objective-c/objective-c.js
Monaco/vs/basic-languages/pgsql/pgsql.js
Monaco/vs/basic-languages/php/php.js
Monaco/vs/basic-languages/postiats/postiats.js
Monaco/vs/basic-languages/powershell/powershell.js
Monaco/vs/basic-languages/pug/pug.js
Monaco/vs/basic-languages/python/python.js
Monaco/vs/basic-languages/r/r.js
Monaco/vs/basic-languages/razor/razor.js
.js
Monaco/vs/basic-languages/redis/redis.js
Monaco/vs/basic-languages/redshift/redshift.js
Monaco/vs/basic-languages/ruby/ruby.js
Monaco/vs/basic-languages/rust/rust.js
Monaco/vs/basic-languages/sb/sb.js
Monaco/vs/basic-languages/scss/scss.js
Monaco/vs/basic-languages/solidity/solidity.js
Monaco/vs/basic-languages/sql/sql.js
Monaco/vs/basic-languages/st/st.js
Monaco/vs/basic-languages/swift/swift.js
Monaco/vs/basic-languages/vb/vb.js
Monaco/vs/basic-languages/xml/xml.js
Monaco/vs/basic-languages/yaml/yaml.js
Monaco/vs/editor/contrib/suggest/media/String_16x.svg
Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
Monaco/vs/editor/editor.main.css
Monaco/vs/editor/editor.main.js
.js
Monaco/vs/editor/editor.main.nls.de.js
Monaco/vs/editor/editor.main.nls.es.js
Monaco/vs/editor/editor.main.nls.fr.js
Monaco/vs/editor/editor.main.nls.it.js
Monaco/vs/editor/editor.main.nls.ja.js
Monaco/vs/editor/editor.main.nls.js
Monaco/vs/editor/editor.main.nls.ko.js
Monaco/vs/editor/editor.main.nls.ru.js
Monaco/vs/editor/editor.main.nls.zh-cn.js
Monaco/vs/editor/editor.main.nls.zh-tw.js
Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
Monaco/vs/language/css/cssMode.js
.js
Monaco/vs/language/css/cssWorker.js
.js
Monaco/vs/language/html/htmlMode.js
.js
Monaco/vs/language/html/htmlWorker.js
.js
Monaco/vs/language/json/jsonMode.js
.js
Monaco/vs/language/json/jsonWorker.js
.js
Monaco/vs/language/typescript/lib/typescriptServices.js
.js
Monaco/vs/language/typescript/tsMode.js
.js
Monaco/vs/language/typescript/tsWorker.js
.js
Monaco/vs/loader.js
.js
VaperAPI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Admin\source\repos\API\obj\Debug\VaperAPI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bin/API.dll
.dll windows:6 windows x64 arch:x64

dfd11645eb4732c0409f51f0532c3683

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\llama\Downloads\compiler-src-main\compiler-src-main\x64\Release\incognito-luau.pdb

Imports

kernel32

QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentProcess
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSListHead

msvcp140

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?good@ios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Xbad_function_call@std@@YAXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPEBD@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exceptions@std@@YAHXZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??Bid@locale@std@@QEAA_KXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memchr
__std_exception_destroy
memcmp
memcpy
memmove
__std_exception_copy
_purecall
__std_type_info_destroy_list
memset
_CxxThrowException
__current_exception_context
__current_exception
__C_specific_handler
strchr
__std_terminate

api-ms-win-crt-stdio-l1-1-0

fflush
ungetc
fsetpos
fwrite
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsprintf
_get_stream_buffer_pointers
fgetc
setvbuf
fgetpos
fclose
_fseeki64
fread
fputc

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_errno
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_seh_filter_dll
_invalid_parameter_noinfo
_configure_narrow_argv

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-string-l1-1-0

strnlen
islower
isdigit
ispunct
isalnum
isxdigit
isalpha
strncpy
isupper
isgraph
toupper
strpbrk
strncat
strcspn
isspace
strspn
tolower
iscntrl
strcpy_s
strcmp

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc
_aligned_malloc

api-ms-win-crt-math-l1-1-0

asin
log2
acos
fmod
tan
log
atan2
cos
ldexp
frexp
tanh
pow
cosh
log10
modf
sin
atan
round
sqrt
floorf
sinh
_dsign
exp
floor
ceilf
ceil

api-ms-win-crt-convert-l1-1-0

strtoull
strtod
atoi
strtoul

api-ms-win-crt-time-l1-1-0

clock
_time64
strftime
_localtime64_s
_gmtime64_s
_difftime64

Exports

Exports

RBXCompile
RBXDecompress
RBXRawCompile
Setup

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 195KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
main.exe
.exe windows:4 windows x64 arch:x64

0cad4d75817cf5181c89bf958567a0e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CopyFileW
CreateDirectoryW
CreateFileMappingW
CreateFileW
CreateProcessW
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
FindResourceA
FormatMessageA
FreeLibrary
GenerateConsoleCtrlEvent
GetCommandLineW
GetCurrentProcessId
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileSize
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessId
GetStdHandle
GetSystemTimeAsFileTime
GetTempPathW
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
MapViewOfFile
MultiByteToWideChar
ReadFile
SetConsoleCtrlHandler
SetEnvironmentVariableW
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsGetValue
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

msvcrt

__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__iob_func
__set_app_type
__setusermatherr
__wargv
__wgetmainargs
__winitenv
_amsg_exit
_cexit
_commode
_errno
_fmode
_initterm
_lock
_onexit
_unlock
_wcsdup
_wcsicmp
_wrename
abort
calloc
exit
fprintf
fputc
free
fwrite
localeconv
malloc
mbstowcs
memcpy
memmove
memset
puts
signal
strerror
strlen
strncmp
vfprintf
wcschr
wcscmp
wcslen
wcsncmp

shell32

CommandLineToArgvW
SHFileOperationW
SHGetFolderPathW

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 143KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26.1MB - Virtual size: 26.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
runtimes/win-arm64/native/WebView2Loader.dll
runtimes/win-x64/native/WebView2Loader.dll
.dll windows:10 windows x64 arch:x64

f6946d311bccc86e2042a388e375de41

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ec:e2:b2:2b:4d:3a:f7:48:e3:4a:dc:c8:f4:e8:16:76:c8:33:53:c1:bb:00:4c:79:59:38:e6:c5:9a:1a:8f:6a
Signer

Actual PE Digest

ec:e2:b2:2b:4d:3a:f7:48:e3:4a:dc:c8:f4:e8:16:76:c8:33:53:c1:bb:00:4c:79:59:38:e6:c5:9a:1a:8f:6a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release_x64\WebView2Loader.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
GetAvailableCoreWebView2BrowserVersionStringWithOptions

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
runtimes/win-x86/native/WebView2Loader.dll
.dll windows:10 windows x86 arch:x86

72229ff546c74d09d9030ca49ce61b31

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2023 19:51

Not After

16-10-2024 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f5:66:92:48:12:0e:df:da:76:f0:13:e5:9a:ba:5d:db:63:89:77:e1:d2:b9:65:cf:80:8c:fe:dc:28:98:c2:8d
Signer

Actual PE Digest

f5:66:92:48:12:0e:df:da:76:f0:13:e5:9a:ba:5d:db:63:89:77:e1:d2:b9:65:cf:80:8c:fe:dc:28:98:c2:8d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\_work\e\src\out\Release\WebView2Loader.dll.pdb

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReleaseSRWLockExclusive
RtlUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

Exports

Exports

CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
GetAvailableCoreWebView2BrowserVersionStringWithOptions

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vulnera beta.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\User\source\repos\vulnera beta\vulnera beta\obj\Debug\vulnera beta.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vulnera beta.exe.WebView2/EBWebView/Breadcrumbs
vulnera beta.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-66B7D05C-3E4C.pma
vulnera beta.exe.WebView2/EBWebView/Crashpad/settings.dat
vulnera beta.exe.WebView2/EBWebView/Crashpad/throttle_store.dat
vulnera beta.exe.WebView2/EBWebView/CrashpadMetrics-active.pma
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1
.js
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000002
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000003
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000004
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000005
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000006
.gz
f_000006
.js
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000007
.gz
f_000007
.js
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000008
.gz
f_000008
.js
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000009
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000a
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000b
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000c
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000d
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000e
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00000f
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000010
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000011
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000012
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000013
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000014
.gz
f_000014
.js
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000015
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000016
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000017
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000018
.gz
f_000018
.js
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000019
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001a
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001b
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001c
.gz
f_00001c
.js
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001d
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001e
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_00001f
vulnera beta.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/0291e5b096fb199e_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/02a47bc691215a59_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/05e634d4436d1d05_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/07b8e8f5e5ff414c_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/0b328fa5903b493c_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/0f285e71fb28d278_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/1b197a8537b15873_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/1fcbd030f858c38e_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/30ae723e74f2de50_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/336a68eaaf209f48_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/3777e594ada13a61_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/388909739fdf5b50_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/49f469518ec28c5b_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/4c307b02b4dcc58c_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/4cdf42895e4af56d_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/535ca6f77a515dd9_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/54c0ba0f7a553799_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/5c912f3f0f55f486_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/5d4b712ac2a43c58_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/617e56ef0d0fbd00_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/639ea98c0c6a55b6_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/65f1f7af192fa146_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/6711f6eb8a47f237_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/674a884e8170324d_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/6836fbbf343c2611_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/75e4328d30e1d79d_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/8048a9b7c477a268_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/8099de96dbf960dd_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/838a57ae59f26c9c_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/841d4b520ded8e0d_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/8449a884c25a13e3_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/850f0266dec6f4a8_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/87bfc01091a83277_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/900ef12ed950d0bc_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/921b6a1843434b49_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/9de02c5fe067625b_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/a1117a138e6878c1_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/a3303ee782871845_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/a80d29a617f38af5_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/acadeea2a29c1c9c_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/ae40d63777082b24_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/b2598fac6c88f9dc_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/b2afdd3a11fd971b_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/b411db09719902ad_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/b953dbf4921c7eb1_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/ba8c50e068bc9dc2_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/be93bfd95abd312d_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/bf431620ee9b2676_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/c05fef157dfaf2ab_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/c11c502bbaf84a16_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/c27177a1fe4cbce6_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/c4f81339fa49aed7_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/c6c509197ca4ee32_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/ca9ae1b0892b4c72_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/d5823179aae92077_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/de987b93c66672a2_0
.js
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/e885b7770f230060_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/ec01193d6989802f_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/f31cfd3e1e94aebb_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/f814c86ac91cfa7b_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/faa81f338db3ec37_0
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/index
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/wasm/index
vulnera beta.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index
vulnera beta.exe.WebView2/EBWebView/Default/DIPS
vulnera beta.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_0
vulnera beta.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_1
vulnera beta.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_2
vulnera beta.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_3
vulnera beta.exe.WebView2/EBWebView/Default/DawnGraphiteCache/index
vulnera beta.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_0
vulnera beta.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_1
vulnera beta.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_2
vulnera beta.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_3
vulnera beta.exe.WebView2/EBWebView/Default/DawnWebGPUCache/index
vulnera beta.exe.WebView2/EBWebView/Default/EdgeEDrop/EdgeEDropSQLite.db
vulnera beta.exe.WebView2/EBWebView/Default/EdgeHubAppUsage/EdgeHubAppUsageSQLite.db
vulnera beta.exe.WebView2/EBWebView/Default/Extension Rules/000003.log
vulnera beta.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT
vulnera beta.exe.WebView2/EBWebView/Default/Extension Rules/LOG
vulnera beta.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-000001
vulnera beta.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log
vulnera beta.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT
vulnera beta.exe.WebView2/EBWebView/Default/Extension Scripts/LOG
vulnera beta.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001
vulnera beta.exe.WebView2/EBWebView/Default/Extension State/000003.log
vulnera beta.exe.WebView2/EBWebView/Default/Extension State/CURRENT
vulnera beta.exe.WebView2/EBWebView/Default/Extension State/LOG
vulnera beta.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001
vulnera beta.exe.WebView2/EBWebView/Default/ExtensionActivityComp
vulnera beta.exe.WebView2/EBWebView/Default/ExtensionActivityEdge
vulnera beta.exe.WebView2/EBWebView/Default/Favicons
vulnera beta.exe.WebView2/EBWebView/Default/GPUCache/data_0
vulnera beta.exe.WebView2/EBWebView/Default/GPUCache/data_1
vulnera beta.exe.WebView2/EBWebView/Default/GPUCache/data_2
vulnera beta.exe.WebView2/EBWebView/Default/GPUCache/data_3
vulnera beta.exe.WebView2/EBWebView/Default/GPUCache/index
vulnera beta.exe.WebView2/EBWebView/Default/History
vulnera beta.exe.WebView2/EBWebView/Default/Local Storage/leveldb/000003.log
.js
vulnera beta.exe.WebView2/EBWebView/Default/Local Storage/leveldb/000004.log
vulnera beta.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT
vulnera beta.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG
vulnera beta.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001
vulnera beta.exe.WebView2/EBWebView/Default/Login Data
vulnera beta.exe.WebView2/EBWebView/Default/Network Action Predictor
vulnera beta.exe.WebView2/EBWebView/Default/Network/Cookies
vulnera beta.exe.WebView2/EBWebView/Default/Network/Network Persistent State
vulnera beta.exe.WebView2/EBWebView/Default/Network/Reporting and NEL
vulnera beta.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports
vulnera beta.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries
vulnera beta.exe.WebView2/EBWebView/Default/Network/TransportSecurity
vulnera beta.exe.WebView2/EBWebView/Default/Network/Trust Tokens
vulnera beta.exe.WebView2/EBWebView/Default/Preferences
vulnera beta.exe.WebView2/EBWebView/Default/PreferredApps
vulnera beta.exe.WebView2/EBWebView/Default/README
vulnera beta.exe.WebView2/EBWebView/Default/Safe Browsing Network/Safe Browsing Cookies
vulnera beta.exe.WebView2/EBWebView/Default/Secure Preferences
vulnera beta.exe.WebView2/EBWebView/Default/Session Storage/000003.log
vulnera beta.exe.WebView2/EBWebView/Default/Session Storage/CURRENT
vulnera beta.exe.WebView2/EBWebView/Default/Session Storage/LOG
vulnera beta.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001
vulnera beta.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index
vulnera beta.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index
vulnera beta.exe.WebView2/EBWebView/Default/Shared Dictionary/db
vulnera beta.exe.WebView2/EBWebView/Default/SharedStorage
vulnera beta.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log
vulnera beta.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT
vulnera beta.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG
vulnera beta.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001
vulnera beta.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log
vulnera beta.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT
vulnera beta.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG
vulnera beta.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001
vulnera beta.exe.WebView2/EBWebView/Default/Top Sites
vulnera beta.exe.WebView2/EBWebView/Default/Visited Links
vulnera beta.exe.WebView2/EBWebView/Default/Web Data
vulnera beta.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db
vulnera beta.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log
vulnera beta.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT
vulnera beta.exe.WebView2/EBWebView/Default/shared_proto_db/LOG
vulnera beta.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001
vulnera beta.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log
vulnera beta.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT
vulnera beta.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG
vulnera beta.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001
vulnera beta.exe.WebView2/EBWebView/GrShaderCache/data_0
vulnera beta.exe.WebView2/EBWebView/GrShaderCache/data_1
vulnera beta.exe.WebView2/EBWebView/GrShaderCache/data_2
vulnera beta.exe.WebView2/EBWebView/GrShaderCache/data_3
vulnera beta.exe.WebView2/EBWebView/GrShaderCache/f_000001
vulnera beta.exe.WebView2/EBWebView/GrShaderCache/f_000002
vulnera beta.exe.WebView2/EBWebView/GrShaderCache/f_000003
vulnera beta.exe.WebView2/EBWebView/GrShaderCache/f_000004
vulnera beta.exe.WebView2/EBWebView/GrShaderCache/f_000005
vulnera beta.exe.WebView2/EBWebView/GrShaderCache/index
vulnera beta.exe.WebView2/EBWebView/GraphiteDawnCache/data_0
vulnera beta.exe.WebView2/EBWebView/GraphiteDawnCache/data_1
vulnera beta.exe.WebView2/EBWebView/GraphiteDawnCache/data_2
vulnera beta.exe.WebView2/EBWebView/GraphiteDawnCache/data_3
vulnera beta.exe.WebView2/EBWebView/GraphiteDawnCache/index
vulnera beta.exe.WebView2/EBWebView/Last Version
vulnera beta.exe.WebView2/EBWebView/Local State
vulnera beta.exe.WebView2/EBWebView/ShaderCache/data_0
vulnera beta.exe.WebView2/EBWebView/ShaderCache/data_1
vulnera beta.exe.WebView2/EBWebView/ShaderCache/data_2
vulnera beta.exe.WebView2/EBWebView/ShaderCache/data_3
vulnera beta.exe.WebView2/EBWebView/ShaderCache/index
vulnera beta.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings
vulnera beta.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings_F95BA787499AB4FA9EFFF472CE383A14
vulnera beta.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings
vulnera beta.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1
vulnera beta.exe.WebView2/EBWebView/SmartScreen/RemoteData/topTraffic
vulnera beta.exe.WebView2/EBWebView/SmartScreen/RemoteData/topTraffic_638004170464094982
vulnera beta.exe.WebView2/EBWebView/SmartScreen/local/downloadCache
vulnera beta.exe.WebView2/EBWebView/SmartScreen/local/downloadCache_
vulnera beta.exe.WebView2/EBWebView/SmartScreen/local/uriCache
vulnera beta.exe.WebView2/EBWebView/SmartScreen/local/uriCache_
vulnera beta.exe.WebView2/EBWebView/Variations

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 320KB - Virtual size: 320KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:dbCertificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

82:16:92:aa:f3:86:85:a1:7b:d7:76:7c:40:f5:23:05:fa:60:5b:ab:ec:81:76:94:51:f3:c2:32:7f:d4:70:40Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 545KB - Virtual size: 545KB

.rsrc Size: 1024B - Virtual size: 1000B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

4f:1a:5b:3d:05:19:5a:d1:b6:47:ef:88:70:0a:42:6a:2d:a6:49:b9:08:e1:a3:f1:14:cf:cb:e8:1d:4e:59:e2Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 25KB - Virtual size: 24KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

1d:bb:ff:4e:7c:ac:65:e2:92:d2:61:a5:bd:9d:bf:a6:5d:10:ea:cb:5b:7c:90:24:3b:59:1a:91:d0:3f:26:90Signer

Headers

DLL Characteristics

.text
Size: 320KB - Virtual size: 320KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99
Signer

.text
Size: 2.0MB - Virtual size: 2.0MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

82:16:92:aa:f3:86:85:a1:7b:d7:76:7c:40:f5:23:05:fa:60:5b:ab:ec:81:76:94:51:f3:c2:32:7f:d4:70:40
Signer

.text
Size: 545KB - Virtual size: 545KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

4f:1a:5b:3d:05:19:5a:d1:b6:47:ef:88:70:0a:42:6a:2d:a6:49:b9:08:e1:a3:f1:14:cf:cb:e8:1d:4e:59:e2
Signer

.text
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

1d:bb:ff:4e:7c:ac:65:e2:92:d2:61:a5:bd:9d:bf:a6:5d:10:ea:cb:5b:7c:90:24:3b:59:1a:91:d0:3f:26:90
Signer

.text
Size: 38KB - Virtual size: 38KB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 864B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 195KB - Virtual size: 195KB

.data
Size: 12KB - Virtual size: 48KB

.pdata
Size: 39KB - Virtual size: 38KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 6KB - Virtual size: 5KB

.text
Size: 108KB - Virtual size: 107KB

.data
Size: 512B - Virtual size: 256B

.rdata
Size: 11KB - Virtual size: 10KB

.eh_fram
Size: 512B - Virtual size: 4B

.pdata
Size: 2KB - Virtual size: 2KB

.xdata
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 143KB

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 26.1MB - Virtual size: 26.1MB

.reloc
Size: 512B - Virtual size: 144B

33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Certificate