Setup_v1[.]56[.]7z

Sharing

Copy URL Twitter E-mail

General

Target

Setup_v1.56.7z
Size

2.6MB
MD5

f56a3721f982acae99d431a1f5718275
SHA1

b2b5e37faf25adc68fcdf38b2cab18de6d842077
SHA256

3380c946384d148784fa05550223ad102977d0029ee2299408f4ed4414d8f81f
SHA512

934ef345b291533268f77205653e64066c7dc992e00a4b38e3fa4cb750c43b5902c1b0764702b6a0ab9b9d7a8e8d5f68697d1c3e12eaf56e868477ab71bf5cfc
SSDEEP

49152:6ONin/XaHqCX+DYxHgbIRew03EtxsN+VbUjGOlmvT3UyI+f/pK6533:PNsvMiDImCvsN+VbUF4IERKy3

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Setup/D3dx9_41.dll
unpack002/Setup/Shell64.dll
unpack002/Setup/tabs.dll

Files

Setup_v1.56.7z
.7z
Setup.7z
.7z
Setup/D3dx9_41.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\mahapps-metro-iconpacks\src\MahApps.Metro.IconPacks\obj\Release\MahApps.Metro.IconPacks.Material\net47\MahApps.Metro.IconPacks.Material.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Setup/README.txt
Setup/Setup_v1.56.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:c5:30:70:3a:21:0e:c1:d6:f8:3c:b4:fe:11:18:c5
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

22/09/2022, 00:00

Not After

19/10/2023, 23:59

Subject

SERIALNUMBER=5567037485,CN=Spotify AB,O=Spotify AB,L=Stockholm,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d0:d6:f9:21:84:ac:b2:b3:9a:85:11:00:f2:f0:d3:56:b0:37:69:98:8c:7c:19:92:b6:08:a5:3a:42:58:bf:4f
Signer

Actual PE Digest

d0:d6:f9:21:84:ac:b2:b3:9a:85:11:00:f2:f0:d3:56:b0:37:69:98:8c:7c:19:92:b6:08:a5:3a:42:58:bf:4f

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 336KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Setup/Shell64.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\mahapps-metro-iconpacks\src\MahApps.Metro.IconPacks\obj\Release\MahApps.Metro.IconPacks.SimpleIcons\net47\MahApps.Metro.IconPacks.SimpleIcons.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Setup/libs_github/lib/flummer.xml
.xml
Setup/libs_github/lib/garryaUnpaint.xml
.xml
Setup/libs_github/lib/jinnyPlonkoAxmaker.xml
.xml
Setup/libs_github/lib/lapel.xml
.xml
Setup/libs_github/lib/luvianMellows/bedsockBogiePlebby.xml
.xml
Setup/libs_github/lib/luvianMellows/ceriumPunkestAstride/botonyEsquire.xml
.xml
Setup/libs_github/lib/luvianMellows/ceriumPunkestAstride/cotwin.xml
.xml
Setup/libs_github/lib/luvianMellows/ceriumPunkestAstride/guckiAworry.xml
.xml
Setup/libs_github/lib/luvianMellows/ceriumPunkestAstride/trimersStylite.xml
.xml
Setup/libs_github/lib/luvianMellows/ictuateStrae.xml
.xml
Setup/libs_github/lib/luvianMellows/travFangy/daimenBruneGuff.xml
.xml
Setup/libs_github/lib/luvianMellows/travFangy/ovology.xml
.xml
Setup/libs_github/lib/luvianMellows/travFangy/upbyCutlers.xml
.xml
Setup/libs_github/lib/luvianMellows/travFangy/weaned.xml
.xml
Setup/libs_github/lib/manentHilsah/arbaciaCoticeHoax/frisonBrads.xml
.xml
Setup/libs_github/lib/manentHilsah/arbaciaCoticeHoax/ignore.xml
.xml
Setup/libs_github/lib/manentHilsah/arbaciaCoticeHoax/lithiAmuguisWup.xml
.xml
Setup/libs_github/lib/manentHilsah/arbaciaCoticeHoax/mogueySlewedRoke.xml
.xml
Setup/libs_github/lib/manentHilsah/arbaciaCoticeHoax/neogamyBeatlesTolite.xml
.xml
Setup/libs_github/lib/manentHilsah/gmelina/cheesesSmoochyMemnon.xml
.xml
Setup/libs_github/lib/manentHilsah/gmelina/outwell.xml
.xml
Setup/libs_github/lib/manentHilsah/gmelina/synodusBorons.xml
.xml
Setup/libs_github/lib/manentHilsah/gmelina/unflatMollahDtd.xml
.xml
Setup/libs_github/lib/manentHilsah/gmelina/waftureForwearSyssel.xml
.xml
Setup/libs_github/lib/manentHilsah/guarsRefract.xml
.xml
Setup/libs_github/lib/manentHilsah/manling.xml
.xml
Setup/libs_github/lib/manentHilsah/mudlarkYobboes.xml
.wsf .xml polyglot
Setup/libs_github/lib/manentHilsah/salicComakeInvader.xml
.xml
Setup/libs_github/lib/manentHilsah/slopingGashingBeacons/dejaYeggsGiver.xml
.xml
Setup/libs_github/lib/manentHilsah/slopingGashingBeacons/florounUpstood.xml
.xml
Setup/libs_github/lib/manentHilsah/slopingGashingBeacons/maltsBushyUnalarm.xml
.xml
Setup/libs_github/lib/manentHilsah/slopingGashingBeacons/myrrhsTraysMachzor.xml
.xml
Setup/libs_github/lib/manentHilsah/slopingGashingBeacons/oerstedAitchesMatzot.xml
.xml
Setup/libs_github/lib/manentHilsah/slopingGashingBeacons/steeverAmole.xml
.xml
Setup/libs_github/lib/manentHilsah/slopingGashingBeacons/tizwinJehovic.xml
.xml
Setup/libs_github/lib/manentHilsah/slopingGashingBeacons/zeugmas.xml
.xml
Setup/libs_github/lib/manentHilsah/talky/acericBotch.xml
.xml
Setup/libs_github/lib/manentHilsah/talky/swardPicturyGif.xml
.xml
Setup/libs_github/lib/manentHilsah/talky/thick.xml
.xml
Setup/libs_github/lib/manentHilsah/talky/vagnera.xml
.xml
Setup/libs_github/lib/manentHilsah/teredosLungersKyak/nimiousTermer.xml
.xml
Setup/libs_github/lib/manentHilsah/teredosLungersKyak/purgingGawkers.xml
.xml
Setup/libs_github/lib/manentHilsah/teredosLungersKyak/urns.xml
.xml
Setup/libs_github/lib/manentHilsah/topicalWeeper/jacales.xml
.xml
Setup/libs_github/lib/manentHilsah/topicalWeeper/kischenDosed.xml
.xml
Setup/libs_github/lib/manentHilsah/topicalWeeper/spreeuw.xml
.xml
Setup/libs_github/lib/manentHilsah/topicalWeeper/suptionRfs.xml
.xml
Setup/libs_github/lib/manentHilsah/topicalWeeper/trowaneLosings.xml
.xml
Setup/libs_github/lib/ostomyNatUmiak/blitzedTerbia/duckpinSailyeGiglio.xml
.xml
Setup/libs_github/lib/ostomyNatUmiak/blitzedTerbia/fitched.xml
.xml
Setup/libs_github/lib/ostomyNatUmiak/blitzedTerbia/nivalLutist.xml
.xml
Setup/libs_github/lib/ostomyNatUmiak/blitzedTerbia/numbers.xml
.xml
Setup/libs_github/lib/ostomyNatUmiak/blitzedTerbia/respeak.xml
.xml
Setup/libs_github/lib/ostomyNatUmiak/blitzedTerbia/rivoCoated.xml
.xml
Setup/libs_github/lib/ostomyNatUmiak/blitzedTerbia/trogonsLias.xml
.xml
Setup/libs_github/lib/ostomyNatUmiak/develedWagonsKellion.xml
.xml
Setup/libs_github/lib/ostomyNatUmiak/diurons.xml
.wsf .xml polyglot
Setup/libs_github/lib/ostomyNatUmiak/esker.xml
.xml
Setup/libs_github/lib/ostomyNatUmiak/measLarlikeCorf.xml
.xml
Setup/libs_github/lib/ostomyNatUmiak/sell.xml
.xml
Setup/libs_github/lib/ostomyNatUmiak/sourdAnaemic.xml
.xml
Setup/libs_github/lib/ostomyNatUmiak/tarrowHominem.xml
.xml
Setup/libs_github/lib/raking/aggers.xml
.xml
Setup/libs_github/lib/raking/buttle/mesonChamperOctoon.xml
.xml
Setup/libs_github/lib/raking/buttle/wursts.xml
.xml
Setup/libs_github/lib/raking/grin.xml
.xml
Setup/libs_github/lib/raking/kompeniEncaumaManus.xml
.xml
Setup/libs_github/lib/raking/nikenoCarone/bealFlashy.xml
.xml
Setup/libs_github/lib/raking/nikenoCarone/beluchi.xml
.xml
Setup/libs_github/lib/raking/nikenoCarone/meiny.xml
.xml
Setup/libs_github/lib/raking/nikenoCarone/sclereUrolOutvote.xml
.xml
Setup/libs_github/lib/raking/nikenoCarone/wysonHunchesGraver.xml
.xml
Setup/libs_github/lib/raking/oleatesBisayanUpbreed/athenaUhlansBispore.xml
.xml
Setup/libs_github/lib/raking/oleatesBisayanUpbreed/choirYaksCahows.xml
.wsf .xml polyglot
Setup/libs_github/lib/raking/oleatesBisayanUpbreed/goldcupPoitrelSmock.xml
.xml
Setup/libs_github/lib/raking/trankaDonnism/diolKarwar.xml
.xml
Setup/libs_github/lib/raking/trankaDonnism/dumpageImitantOctofid.xml
.xml
Setup/libs_github/lib/raking/trankaDonnism/gamont.xml
.wsf .xml polyglot
Setup/libs_github/lib/raking/untrim.xml
.xml
Setup/libs_github/lib/shuswapRuewort/arguer.xml
.xml
Setup/libs_github/lib/shuswapRuewort/auksinuBowyers.xml
.xml
Setup/libs_github/lib/shuswapRuewort/cappagh/layered.xml
.xml
Setup/libs_github/lib/shuswapRuewort/cappagh/moulageCharmMegbote.xml
.xml
Setup/libs_github/lib/shuswapRuewort/cappagh/yashmak.xml
.xml
Setup/libs_github/lib/shuswapRuewort/casaveSumiEelpout.xml
.xml
Setup/libs_github/lib/shuswapRuewort/cundumsMorendoTriace/sereAfzeliaHeck.xml
.xml
Setup/libs_github/lib/shuswapRuewort/cundumsMorendoTriace/snaryCambrelOctic.xml
.xml
Setup/libs_github/lib/shuswapRuewort/cundumsMorendoTriace/swainStarchy.xml
.xml
Setup/libs_github/lib/shuswapRuewort/cundumsMorendoTriace/topples.xml
.xml
Setup/libs_github/lib/shuswapRuewort/cundumsMorendoTriace/usarProctalSawman.xml
.xml
Setup/libs_github/lib/shuswapRuewort/eyessHermaeDrowsy.xml
.xml
Setup/libs_github/lib/shuswapRuewort/jankerMarrier.xml
.xml
Setup/libs_github/lib/shuswapRuewort/muladi/maconneBifara.xml
.xml
Setup/libs_github/lib/shuswapRuewort/muladi/mungy.xml
.xml
Setup/libs_github/lib/shuswapRuewort/muladi/pigpens.xml
.xml
Setup/libs_github/lib/shuswapRuewort/muladi/preampPine.xml
.xml
Setup/libs_github/lib/shuswapRuewort/muladi/tazeeaFonded.xml
.xml
Setup/libs_github/lib/shuswapRuewort/muladi/unstonyWafersAdeep.xml
.xml
Setup/libs_github/lib/shuswapRuewort/trochaSabaean/boonk.xml
.xml
Setup/libs_github/lib/shuswapRuewort/trochaSabaean/bucksaw.xml
.xml
Setup/libs_github/lib/shuswapRuewort/trochaSabaean/cosset.xml
.xml
Setup/libs_github/lib/shuswapRuewort/trochaSabaean/pinhookSuberPhaeism.xml
.xml
Setup/libs_github/lib/shuswapRuewort/turgor.xml
.xml
Setup/libs_github/lib/terriesAlfonsoSubplow/baffing.xml
.xml
Setup/libs_github/lib/terriesAlfonsoSubplow/candide.xml
.xml
Setup/libs_github/lib/terriesAlfonsoSubplow/depotsGids/graalBoottopTalent.xml
.xml
Setup/libs_github/lib/terriesAlfonsoSubplow/depotsGids/paucalUnfold.xml
.xml
Setup/libs_github/lib/terriesAlfonsoSubplow/depotsGids/pigtailAltar.xml
.xml
Setup/libs_github/lib/terriesAlfonsoSubplow/depotsGids/tuglikeReadopt.xml
.xml
Setup/libs_github/lib/terriesAlfonsoSubplow/divotBoldos.xml
.xml
Setup/libs_github/lib/trichy/andricChokedPostfix/postage.xml
.xml
Setup/libs_github/lib/trichy/andricChokedPostfix/spawlApnoeal.xml
.xml
Setup/libs_github/lib/trichy/andricChokedPostfix/waufieWhauve.xml
.xml
Setup/libs_github/lib/trichy/bejade/haslet.xml
.xml
Setup/libs_github/lib/trichy/bemuddy.xml
.xml
Setup/libs_github/lib/trichy/bifrostCattle/facty.xml
.xml
Setup/libs_github/lib/trichy/buffed/chidedOcurred.xml
.xml
Setup/libs_github/lib/trichy/buffed/decineSatoriiCoppy.xml
.xml
Setup/libs_github/lib/trichy/buffed/ecocide.xml
.xml
Setup/libs_github/lib/trichy/buffed/gheddaOptimal.xml
.xml
Setup/libs_github/lib/trichy/buffed/pickup.xml
.xml
Setup/libs_github/lib/trichy/buffed/pictaviSina.xml
.xml
Setup/libs_github/lib/trichy/gtdNingpoDebacle/abuCrofts.xml
.xml
Setup/libs_github/lib/trichy/gtdNingpoDebacle/goosyWinna.xml
.xml
Setup/libs_github/lib/trichy/gtdNingpoDebacle/howsMoldingAfacing.xml
.xml
Setup/libs_github/lib/trichy/gtdNingpoDebacle/prorsal.xml
.xml
Setup/libs_github/lib/trichy/gtdNingpoDebacle/publice.xml
.xml
Setup/libs_github/lib/trichy/handbagArrgt/flingyTuant.xml
.xml
Setup/libs_github/lib/trichy/inditer.xml
.xml
Setup/libs_github/lib/trichy/jestersBudmash/makutaTulasiDebtee.xml
.xml
Setup/libs_github/lib/trichy/jestersBudmash/medalet.xml
.xml
Setup/libs_github/lib/trichy/jestersBudmash/rochetAndarkoExecute.xml
.xml
Setup/libs_github/lib/trichy/jestersBudmash/vedanaSnoredScenic.xml
.xml
Setup/libs_github/lib/trichy/jestersBudmash/wyke.xml
.xml
Setup/libs_github/lib/trichy/oregoniTuboid/grebes.xml
.xml
Setup/libs_github/lib/trichy/oregoniTuboid/huashiGater.xml
.xml
Setup/libs_github/lib/trichy/oregoniTuboid/pyroticNeology.xml
.xml
Setup/libs_github/lib/trichy/oregoniTuboid/upaisleReffedKina.xml
.xml
Setup/libs_github/lib/trichy/stachysTigreanWilrone/eaningArboredResters.xml
.xml
Setup/libs_github/lib/trichy/stachysTigreanWilrone/lycopodCrambid.xml
.xml
Setup/libs_github/lib/trichy/stachysTigreanWilrone/telliesNanmu.xml
.xml
Setup/libs_github/lib/trichy/treasonAgadaBegeck.xml
.xml
Setup/libs_github/lib/trichy/yaupon.xml
.xml
Setup/libs_github/lib/tumbril.xml
.xml
Setup/tabs.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\projects\mahapps-metro-iconpacks\src\MahApps.Metro.IconPacks\obj\Release\MahApps.Metro.IconPacks.Material\net47\MahApps.Metro.IconPacks.Material.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 4.7MB - Virtual size: 4.7MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

04:c5:30:70:3a:21:0e:c1:d6:f8:3c:b4:fe:11:18:c5Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

d0:d6:f9:21:84:ac:b2:b3:9a:85:11:00:f2:f0:d3:56:b0:37:69:98:8c:7c:19:92:b6:08:a5:3a:42:58:bf:4fSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 336KB - Virtual size: 335KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 5.9MB - Virtual size: 5.9MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 4.7MB - Virtual size: 4.7MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

.text
Size: 4.7MB - Virtual size: 4.7MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

04:c5:30:70:3a:21:0e:c1:d6:f8:3c:b4:fe:11:18:c5
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

d0:d6:f9:21:84:ac:b2:b3:9a:85:11:00:f2:f0:d3:56:b0:37:69:98:8c:7c:19:92:b6:08:a5:3a:42:58:bf:4f
Signer

.text
Size: 336KB - Virtual size: 335KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 5.9MB - Virtual size: 5.9MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 4.7MB - Virtual size: 4.7MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B