New folder[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

New folder.rar
Size

3.4MB
MD5

039b1c26a2733ff0409858b1986fe459
SHA1

c7c8013cf94811678a885fbe12fdae1bf0d111ed
SHA256

bcbfde6038145b66dc1e82d09696ab43dd31d92dd745df101a03f6b6134f4ddf
SHA512

65822449519d1caa88dc686c9f9612abf0f1246637afe9de7e9929e0c619e4af38205bf0b15a9291445e14c5be77fb711289130cc3f8457b57d012855010604c
SSDEEP

49152:BPbihxqrJAeQMaLXbjNhLPnY0jCFwKq6C1A6VWc13mIL0e2Zc01eq5r8kIqAM:Bj4x6ANMCY0m5YFVvFmc0e1Pq5dIw

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/charset_normalizer/md.cp312-win_amd64.pyd
unpack001/charset_normalizer/md__mypyc.cp312-win_amd64.pyd

Files

New folder.rar
.rar
Lib/encodings/__init__.py
Lib/encodings/__pycache__/__init__.cpython-313.pyc
Lib/encodings/__pycache__/aliases.cpython-313.pyc
Lib/encodings/__pycache__/cp1252.cpython-313.pyc
Lib/encodings/__pycache__/cp437.cpython-313.pyc
Lib/encodings/__pycache__/idna.cpython-313.pyc
Lib/encodings/__pycache__/utf_8.cpython-313.pyc
Lib/encodings/aliases.py
Lib/encodings/ascii.py
Lib/encodings/base64_codec.py
Lib/encodings/big5.py
Lib/encodings/big5hkscs.py
Lib/encodings/bz2_codec.py
Lib/encodings/charmap.py
Lib/encodings/cp037.py
Lib/encodings/cp1006.py
Lib/encodings/cp1026.py
Lib/encodings/cp1125.py
Lib/encodings/cp1140.py
Lib/encodings/cp1250.py
Lib/encodings/cp1251.py
Lib/encodings/cp1252.py
Lib/encodings/cp1253.py
Lib/encodings/cp1254.py
Lib/encodings/cp1255.py
Lib/encodings/cp1256.py
Lib/encodings/cp1257.py
Lib/encodings/cp1258.py
Lib/encodings/cp273.py
Lib/encodings/cp424.py
Lib/encodings/cp437.py
Lib/encodings/cp500.py
Lib/encodings/cp720.py
Lib/encodings/cp737.py
Lib/encodings/cp775.py
Lib/encodings/cp850.py
Lib/encodings/cp852.py
Lib/encodings/cp855.py
Lib/encodings/cp856.py
Lib/encodings/cp857.py
Lib/encodings/cp858.py
Lib/encodings/cp860.py
Lib/encodings/cp861.py
Lib/encodings/cp862.py
Lib/encodings/cp863.py
Lib/encodings/cp864.py
Lib/encodings/cp865.py
Lib/encodings/cp866.py
Lib/encodings/cp869.py
Lib/encodings/cp874.py
Lib/encodings/cp875.py
Lib/encodings/cp932.py
Lib/encodings/cp949.py
Lib/encodings/cp950.py
Lib/encodings/euc_jis_2004.py
Lib/encodings/euc_jisx0213.py
Lib/encodings/euc_jp.py
Lib/encodings/euc_kr.py
Lib/encodings/gb18030.py
Lib/encodings/gb2312.py
Lib/encodings/gbk.py
Lib/encodings/hex_codec.py
Lib/encodings/hp_roman8.py
Lib/encodings/hz.py
Lib/encodings/idna.py
Lib/encodings/iso2022_jp.py
Lib/encodings/iso2022_jp_1.py
Lib/encodings/iso2022_jp_2.py
Lib/encodings/iso2022_jp_2004.py
Lib/encodings/iso2022_jp_3.py
Lib/encodings/iso2022_jp_ext.py
Lib/encodings/iso2022_kr.py
Lib/encodings/iso8859_1.py
Lib/encodings/iso8859_10.py
Lib/encodings/iso8859_11.py
Lib/encodings/iso8859_13.py
Lib/encodings/iso8859_14.py
Lib/encodings/iso8859_15.py
Lib/encodings/iso8859_16.py
Lib/encodings/iso8859_2.py
Lib/encodings/iso8859_3.py
Lib/encodings/iso8859_4.py
Lib/encodings/iso8859_5.py
Lib/encodings/iso8859_6.py
Lib/encodings/iso8859_7.py
Lib/encodings/iso8859_8.py
Lib/encodings/iso8859_9.py
Lib/encodings/johab.py
Lib/encodings/koi8_r.py
Lib/encodings/koi8_t.py
Lib/encodings/koi8_u.py
Lib/encodings/kz1048.py
Lib/encodings/latin_1.py
Lib/encodings/mac_arabic.py
Lib/encodings/mac_croatian.py
Lib/encodings/mac_cyrillic.py
Lib/encodings/mac_farsi.py
Lib/encodings/mac_greek.py
Lib/encodings/mac_iceland.py
Lib/encodings/mac_latin2.py
Lib/encodings/mac_roman.py
Lib/encodings/mac_romanian.py
Lib/encodings/mac_turkish.py
Lib/encodings/mbcs.py
Lib/encodings/oem.py
Lib/encodings/palmos.py
Lib/encodings/ptcp154.py
Lib/encodings/punycode.py
Lib/encodings/quopri_codec.py
Lib/encodings/raw_unicode_escape.py
Lib/encodings/rot_13.py
.py .sh linux
Lib/encodings/shift_jis.py
Lib/encodings/shift_jis_2004.py
Lib/encodings/shift_jisx0213.py
Lib/encodings/tis_620.py
Lib/encodings/undefined.py
Lib/encodings/unicode_escape.py
Lib/encodings/utf_16.py
Lib/encodings/utf_16_be.py
Lib/encodings/utf_16_le.py
Lib/encodings/utf_32.py
Lib/encodings/utf_32_be.py
Lib/encodings/utf_32_le.py
Lib/encodings/utf_7.py
Lib/encodings/utf_8.py
Lib/encodings/utf_8_sig.py
Lib/encodings/uu_codec.py
Lib/encodings/zlib_codec.py
Sigmastart.bat
__future__.py
__pycache__/__future__.cpython-313.pyc
__pycache__/warnings.cpython-313.pyc
certifi/__init__.py
certifi/__main__.py
certifi/__pycache__/__init__.cpython-312.pyc
certifi/__pycache__/__init__.cpython-313.pyc
certifi/__pycache__/__main__.cpython-312.pyc
certifi/__pycache__/core.cpython-312.pyc
certifi/__pycache__/core.cpython-313.pyc
certifi/cacert.pem
certifi/core.py
charset_normalizer/__init__.py
charset_normalizer/__main__.py
charset_normalizer/__pycache__/__init__.cpython-312.pyc
charset_normalizer/__pycache__/__init__.cpython-313.pyc
charset_normalizer/__pycache__/__main__.cpython-312.pyc
charset_normalizer/__pycache__/api.cpython-312.pyc
charset_normalizer/__pycache__/api.cpython-313.pyc
charset_normalizer/__pycache__/cd.cpython-312.pyc
charset_normalizer/__pycache__/cd.cpython-313.pyc
charset_normalizer/__pycache__/constant.cpython-312.pyc
charset_normalizer/__pycache__/constant.cpython-313.pyc
charset_normalizer/__pycache__/legacy.cpython-312.pyc
charset_normalizer/__pycache__/legacy.cpython-313.pyc
charset_normalizer/__pycache__/md.cpython-312.pyc
charset_normalizer/__pycache__/md.cpython-313.pyc
charset_normalizer/__pycache__/models.cpython-312.pyc
charset_normalizer/__pycache__/models.cpython-313.pyc
charset_normalizer/__pycache__/utils.cpython-312.pyc
charset_normalizer/__pycache__/utils.cpython-313.pyc
charset_normalizer/__pycache__/version.cpython-312.pyc
charset_normalizer/__pycache__/version.cpython-313.pyc
charset_normalizer/api.py
charset_normalizer/cd.py
charset_normalizer/cli/__init__.py
charset_normalizer/cli/__main__.py
charset_normalizer/cli/__pycache__/__init__.cpython-312.pyc
charset_normalizer/cli/__pycache__/__main__.cpython-312.pyc
charset_normalizer/constant.py
charset_normalizer/legacy.py
charset_normalizer/md.cp312-win_amd64.pyd
.dll windows:6 windows x64 arch:x64

f9f58fd722dea53fe5b29a3d6dba9a29

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python312

PyCapsule_Import
_Py_Dealloc
PyImport_ImportModule

kernel32

TerminateProcess
IsDebuggerPresent
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls

vcruntime140

memset
memcpy
__C_specific_handler
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_cexit
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_execute_onexit_table

Exports

Exports

PyInit___init__
PyInit_md

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
charset_normalizer/md.py
charset_normalizer/md__mypyc.cp312-win_amd64.pyd
.dll windows:6 windows x64 arch:x64

facfc5ec70708b6566f37401fb8a64c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

python312

PyTuple_New
PyLong_FromString
PySequence_Contains
PyFloat_FromDouble
PySet_Add
PyExc_AttributeError
PyTuple_GetSlice
PyUnicode_New
PyUnicode_Split
PyNumber_Multiply
PyErr_SetString
PyExc_ZeroDivisionError
_PyErr_ChainExceptions1
_PyObject_LookupAttrId
PyNumber_Add
_PyTrash_end
PyUnicode_InternInPlace
PyDict_Next
PyErr_Format
PyDict_Type
PyObject_RichCompare
PyBool_Type
PyTuple_Type
_Py_FalseStruct
PyFloat_Type
PyUnicode_Append
PyType_IsSubtype
PyNumber_Subtract
PyErr_Restore
PyExc_OverflowError
_Py_Dealloc
_PyTrash_cond
PyModule_GetDict
PyErr_ExceptionMatches
PyErr_Fetch
PyObject_Vectorcall
PyObject_Not
PyUnicode_FromFormat
PyList_New
PyModule_Create2
_PyObject_GetAttrId
PySlice_New
PyType_Ready
PyObject_GetAttrString
PyErr_Clear
PyList_Append
_Py_NoneStruct
PyObject_RichCompareBool
PyCapsule_New
PySet_Type
PyObject_VectorcallDict
PyDict_SetItem
PyDict_New
PyUnicode_Type
PyObject_VectorcallMethod
PyObject_IsInstance
PyType_GenericAlloc
PyFrozenSet_New
PyObject_GetItem
PyBytes_FromStringAndSize
PyImport_Import
_PyType_CalculateMetaclass
PyUnicode_Compare
PyExc_TypeError
PyObject_IsTrue
PyObject_Str
PyTuple_Pack
PyList_AsTuple
PyExc_IndexError
_Py_TrueStruct
_PyTrash_begin
PyExc_SystemError
_PyUnicode_FastCopyCharacters
PyObject_SetItem
_PyDict_GetItemStringWithError
PyNumber_TrueDivide
PyErr_SetImportError
PyUnicode_FromString
_PyUnicode_EQ
PyObject_CallNoArgs
PyUnicode_CompareWithASCIIString
PyType_Type
PyUnicode_Substring
PyUnicode_FromStringAndSize
PyFloat_AsDouble
PyObject_GetAttr
PySet_Contains
PyComplex_FromDoubles
PyDict_GetItemWithError
PyUnicode_Concat
PyObject_GC_UnTrack
PyObject_SetAttrString
_PyObject_FastCall
_PyThreadState_UncheckedGet
PyList_SetSlice
PyTraceBack_Here
PyNumber_Remainder
_PyUnicode_EqualToASCIIString
PySuper_Type
PyLong_FromSsize_t
PyErr_Occurred
PyImport_ImportModuleLevelObject
PyExc_KeyError
PyFrame_New
PyCode_NewEmpty
PyErr_SetObject
PyThreadState_Get
PyObject_SetAttr
PyBaseObject_Type
PyModule_GetFilenameObject

kernel32

QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

memcpy
strchr
__C_specific_handler
__std_type_info_destroy_list
memset

api-ms-win-crt-runtime-l1-1-0

_cexit
abort
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table

api-ms-win-crt-stdio-l1-1-0

fflush
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-string-l1-1-0

strcmp

Exports

Exports

PyInit_md__mypyc

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
charset_normalizer/models.py
charset_normalizer/utils.py
charset_normalizer/version.py
idna/__init__.py
idna/__pycache__/__init__.cpython-312.pyc
idna/__pycache__/__init__.cpython-313.pyc
idna/__pycache__/codec.cpython-312.pyc
idna/__pycache__/compat.cpython-312.pyc
idna/__pycache__/core.cpython-312.pyc
idna/__pycache__/core.cpython-313.pyc
idna/__pycache__/idnadata.cpython-312.pyc
idna/__pycache__/idnadata.cpython-313.pyc
idna/__pycache__/intranges.cpython-312.pyc
idna/__pycache__/intranges.cpython-313.pyc
idna/__pycache__/package_data.cpython-312.pyc
idna/__pycache__/package_data.cpython-313.pyc
idna/__pycache__/uts46data.cpython-312.pyc
idna/codec.py
idna/compat.py
idna/core.py
idna/idnadata.py
idna/intranges.py
idna/package_data.py
idna/uts46data.py
.py .vbs
python.exe
.exe windows:6 windows x64 arch:x64

d233964eaa90e1b69b31d0c96b47b8d3

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17/01/2022, 00:00

Not After

15/01/2025, 23:59

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

26/09/2024, 00:00

Not After

25/11/2035, 23:59

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c5:ab:7c:34:d5:d8:24:97:c0:e0:f4:da:c0:25:99:ea:a6:a5:c5:4c:54:2c:f6:e6:70:75:6d:4e:bf:8e:2b:cc
Signer

Actual PE Digest

c5:ab:7c:34:d5:d8:24:97:c0:e0:f4:da:c0:25:99:ea:a6:a5:c5:4c:54:2c:f6:e6:70:75:6d:4e:bf:8e:2b:cc

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\1\b\bin\amd64\python.pdb

Imports

python313

Py_Main

vcruntime140

__C_specific_handler
__current_exception
__current_exception_context
memset
memcpy

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_get_initial_wide_environment
_register_thread_local_exe_atexit_callback
_initialize_wide_environment
_configure_wide_argv
_initterm
_set_app_type
_seh_filter_exe
_c_exit
_cexit
__p___wargv
__p___argc
_initterm_e
_exit
exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

kernel32

GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
IsDebuggerPresent
GetSystemTimeAsFileTime
GetModuleHandleW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
python313.dll
.dll windows:6 windows x64 arch:x64

4afaa84a04fab1eb02741ca485fe6575

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17/01/2022, 00:00

Not After

15/01/2025, 23:59

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

26/09/2024, 00:00

Not After

25/11/2035, 23:59

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:0f:07:b4:5d:da:ce:77:11:3d:29:05:a7:77:f9:27:83:17:2f:21:d9:33:2d:1e:b2:b0:6a:e4:09:70:b7:8a
Signer

Actual PE Digest

01:0f:07:b4:5d:da:ce:77:11:3d:29:05:a7:77:f9:27:83:17:2f:21:d9:33:2d:1e:b2:b0:6a:e4:09:70:b7:8a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\b\bin\amd64\python313.pdb

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

ws2_32

getsockopt
send
WSAGetLastError

api-ms-win-core-path-l1-1-0

PathCchSkipRoot
PathCchCombineEx

bcrypt

BCryptGenRandom

advapi32

OpenProcessToken
RegDeleteKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegFlushKey
RegCreateKeyExW
RegSaveKeyW
RegSetValueExW
RegLoadKeyW
RegCreateKeyW
RegConnectRegistryW
RegDeleteValueW
RegEnumValueW
LsaNtStatusToWinError
GetUserNameW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExW
LookupPrivilegeValueA
AdjustTokenPrivileges

kernel32

SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
InitializeSListHead
GetProcessHeap
TlsGetValue
TlsFree
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
GetDriveTypeW
GetFinalPathNameByHandleW
GetModuleFileNameW
CompareStringOrdinal
CreateFileW
GetFileAttributesW
GetLastError
CloseHandle
GetLocaleInfoA
GetACP
RemoveVectoredExceptionHandler
SetErrorMode
RaiseException
AddVectoredExceptionHandler
GetCurrentProcess
SetEndOfFile
OpenFileMappingW
UnmapViewOfFile
DuplicateHandle
FlushViewOfFile
GetSystemInfo
SetFilePointerEx
GetFileSize
CreateFileMappingW
MapViewOfFile
CreateDirectoryW
GetFileInformationByHandleEx
FindFirstFileW
SetHandleInformation
FindFirstVolumeW
GetConsoleScreenBufferInfo
SetLastError
AddDllDirectory
GetHandleInformation
GetFullPathNameW
FindNextFileW
GetStdHandle
RemoveDllDirectory
DeviceIoControl
TerminateProcess
RemoveDirectoryW
SetFileTime
SetEnvironmentVariableW
CreatePipe
PssQuerySnapshot
CreateHardLinkW
FindClose
GetVolumePathNameW
OpenProcess
SetFileAttributesW
GetLogicalDriveStringsW
GetConsoleMode
GetFileInformationByHandle
GetFileAttributesExW
SetFileInformationByHandle
PssFreeSnapshot
GetDiskFreeSpaceExW
DeleteFileW
LoadLibraryW
GetActiveProcessorCount
GetCurrentDirectoryW
SetCurrentDirectoryW
GetProcAddress
LocalFree
MoveFileExW
FindVolumeClose
GetModuleHandleW
FreeLibrary
CreateSymbolicLinkW
GetVolumePathNamesForVolumeNameW
GetSystemTimeAsFileTime
GetFileType
PssCaptureSnapshot
FindNextVolumeW
GetProcessTimes
RtlCaptureContext
GenerateConsoleCtrlEvent
SetEvent
CreateEventA
WaitForMultipleObjects
WaitForSingleObject
Sleep
GetTimeZoneInformation
GetCurrentThread
SetWaitableTimerEx
ResetEvent
GetThreadTimes
CreateWaitableTimerExW
SwitchToThread
MultiByteToWideChar
ReadConsoleW
WaitForSingleObjectEx
WriteConsoleW
GetNumberOfConsoleInputEvents
WideCharToMultiByte
GetStringTypeW
ReadFile
SetNamedPipeHandleState
NeedCurrentDirectoryForExePathW
GetLongPathNameW
WriteFile
GetShortPathNameW
CreateNamedPipeW
InitializeProcThreadAttributeList
PeekNamedPipe
CreateMutexW
OpenEventW
ReleaseMutex
ResumeThread
GetVersion
CreateEventW
GetExitCodeThread
GetTickCount64
LCMapStringEx
UpdateProcThreadAttribute
TerminateThread
CancelIoEx
CreateThread
DeleteProcThreadAttributeList
GetOverlappedResult
ExitProcess
CopyFile2
CreateProcessW
OpenMutexW
WaitNamedPipeW
VirtualQuery
ConnectNamedPipe
GetExitCodeProcess
GetNumaHighestNodeNumber
VirtualFree
WriteConsoleA
VirtualAlloc
GetLargePageMinimum
GetEnvironmentVariableA
FlsSetValue
GetNumaNodeProcessorMask
LoadLibraryA
QueryPerformanceFrequency
GetCurrentProcessorNumber
QueryPerformanceCounter
FlsFree
FlsAlloc
ExpandEnvironmentStringsW
GetErrorMode
FormatMessageW
LoadLibraryExW
GetConsoleOutputCP
GetConsoleCP
GetNamedPipeHandleStateW
InitializeSRWLock
WakeConditionVariable
InitializeConditionVariable
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
SleepConditionVariableSRW
ReleaseSemaphore
CreateSemaphoreA
OutputDebugStringW
GetSystemTimePreciseAsFileTime
GetVersionExW
TlsSetValue
HeapFree
GetCurrentThreadId
TlsAlloc
HeapAlloc

vcruntime140

memcpy
memcmp
memchr
memmove
__C_specific_handler
wcsrchr
strchr
strstr
strrchr
memset
__std_type_info_destroy_list
wcschr

api-ms-win-crt-stdio-l1-1-0

_open_osfhandle
puts
_wfopen
putchar
setvbuf
__stdio_common_vswprintf
_locking
rewind
_kbhit
fread
__stdio_common_vfprintf
fclose
ftell
__acrt_iob_func
feof
fgets
_get_osfhandle
fputs
fputc
fwrite
clearerr
fflush
_setmode
_isatty
_fileno
_lseek
_dup2
_commit
_close
_wopen
_lseeki64
_open
_read
_dup
_write
_chsize_s
ungetc
getc
__stdio_common_vsprintf
ferror

api-ms-win-crt-environment-l1-1-0

_wputenv
__p__wenviron
_wputenv_s
_wgetcwd
getenv
_wgetenv

api-ms-win-crt-string-l1-1-0

wcscmp
strcmp
wcsncmp
wcsxfrm
wcscoll
wcstok_s
_stricmp
strpbrk
strcspn
strncpy
toupper
tolower
strncmp
isalnum
wcsnlen
wcsncpy_s
_wcsicmp
wcscpy_s
wcscat_s

api-ms-win-crt-heap-l1-1-0

free
realloc
_heapmin
malloc
calloc

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_beginthreadex
_initterm
_endthreadex
_initterm_e
_errno
abort
_cexit
__fpe_flt_rounds
exit
_getpid
_wsystem
__sys_errlist
__sys_nerr
__doserrno
_set_thread_local_invalid_parameter_handler
strerror
_set_abort_behavior
signal
_exit
raise

api-ms-win-crt-locale-l1-1-0

localeconv
setlocale

api-ms-win-crt-convert-l1-1-0

wcstombs
strtoul
mbstowcs
strtol
wcstol

api-ms-win-crt-math-l1-1-0

tan
nextafter
acosh
exp
frexp
exp2
tanh
erfc
acos
cbrt
cosh
erf
ceil
expm1
_fdopen
atanh
asin
asinh
sinh
atan2
cos
_dclass
sin
atan
hypot
fabs
log10
pow
round
ldexp
copysign
log1p
fma
fmod
log
floor
sqrt
log2
modf

api-ms-win-crt-time-l1-1-0

__timezone
_mktime64
_time64
strftime
clock
_tzset
__daylight
_gmtime64_s
_localtime64_s

api-ms-win-crt-process-l1-1-0

_wexecv
_cwait
_wexecve
_wspawnv
_wspawnve

api-ms-win-crt-conio-l1-1-0

_putwch
_getwche
_getch
_getche
_getwch
_ungetch
_putch
_ungetwch

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32
_umask

Exports

Exports

PY_TIMEOUT_MAX
PyAIter_Check
PyArg_Parse
PyArg_ParseTuple
PyArg_ParseTupleAndKeywords
PyArg_UnpackTuple
PyArg_VaParse
PyArg_VaParseTupleAndKeywords
PyArg_ValidateKeywordArguments
PyAsyncGen_New
PyAsyncGen_Type
PyBaseObject_Type
PyBool_FromLong
PyBool_Type
PyBuffer_FillContiguousStrides
PyBuffer_FillInfo
PyBuffer_FromContiguous
PyBuffer_GetPointer
PyBuffer_IsContiguous
PyBuffer_Release
PyBuffer_SizeFromFormat
PyBuffer_ToContiguous
PyByteArrayIter_Type
PyByteArray_AsString
PyByteArray_Concat
PyByteArray_FromObject
PyByteArray_FromStringAndSize
PyByteArray_Resize
PyByteArray_Size
PyByteArray_Type
PyBytesIter_Type
PyBytes_AsString
PyBytes_AsStringAndSize
PyBytes_Concat
PyBytes_ConcatAndDel
PyBytes_DecodeEscape
PyBytes_FromFormat
PyBytes_FromFormatV
PyBytes_FromObject
PyBytes_FromString
PyBytes_FromStringAndSize
PyBytes_Repr
PyBytes_Size
PyBytes_Type
PyCFunction_Call
PyCFunction_GetFlags
PyCFunction_GetFunction
PyCFunction_GetSelf
PyCFunction_New
PyCFunction_NewEx
PyCFunction_Type
PyCMethod_New
PyCMethod_Type
PyCallIter_New
PyCallIter_Type
PyCallable_Check
PyCapsule_GetContext
PyCapsule_GetDestructor
PyCapsule_GetName
PyCapsule_GetPointer
PyCapsule_Import
PyCapsule_IsValid
PyCapsule_New
PyCapsule_SetContext
PyCapsule_SetDestructor
PyCapsule_SetName
PyCapsule_SetPointer
PyCapsule_Type
PyCell_Get
PyCell_New
PyCell_Set
PyCell_Type
PyClassMethodDescr_Type
PyClassMethod_New
PyClassMethod_Type
PyCode_AddWatcher
PyCode_Addr2Line
PyCode_Addr2Location
PyCode_ClearWatcher
PyCode_GetCellvars
PyCode_GetCode
PyCode_GetFreevars
PyCode_GetVarnames
PyCode_NewEmpty
PyCode_Optimize
PyCode_Type
PyCodec_BackslashReplaceErrors
PyCodec_Decode
PyCodec_Decoder
PyCodec_Encode
PyCodec_Encoder
PyCodec_IgnoreErrors
PyCodec_IncrementalDecoder
PyCodec_IncrementalEncoder
PyCodec_KnownEncoding
PyCodec_LookupError
PyCodec_NameReplaceErrors
PyCodec_Register
PyCodec_RegisterError
PyCodec_ReplaceErrors
PyCodec_StreamReader
PyCodec_StreamWriter
PyCodec_StrictErrors
PyCodec_Unregister
PyCodec_XMLCharRefReplaceErrors
PyCompile_OpcodeStackEffect
PyCompile_OpcodeStackEffectWithJump
PyComplex_AsCComplex
PyComplex_FromCComplex
PyComplex_FromDoubles
PyComplex_ImagAsDouble
PyComplex_RealAsDouble
PyComplex_Type
PyConfig_Clear
PyConfig_InitIsolatedConfig
PyConfig_InitPythonConfig
PyConfig_Read
PyConfig_SetArgv
PyConfig_SetBytesArgv
PyConfig_SetBytesString
PyConfig_SetString
PyConfig_SetWideStringList
PyContextToken_Type
PyContextVar_Get
PyContextVar_New
PyContextVar_Reset
PyContextVar_Set
PyContextVar_Type
PyContext_Copy
PyContext_CopyCurrent
PyContext_Enter
PyContext_Exit
PyContext_New
PyContext_Type
PyCoro_New
PyCoro_Type
PyCriticalSection2_Begin
PyCriticalSection2_End
PyCriticalSection_Begin
PyCriticalSection_End
PyDescr_IsData
PyDescr_NewClassMethod
PyDescr_NewGetSet
PyDescr_NewMember
PyDescr_NewMethod
PyDescr_NewWrapper
PyDictItems_Type
PyDictIterItem_Type
PyDictIterKey_Type
PyDictIterValue_Type
PyDictKeys_Type
PyDictProxy_New
PyDictProxy_Type
PyDictRevIterItem_Type
PyDictRevIterKey_Type
PyDictRevIterValue_Type
PyDictValues_Type
PyDict_AddWatcher
PyDict_Clear
PyDict_ClearWatcher
PyDict_Contains
PyDict_ContainsString
PyDict_Copy
PyDict_DelItem
PyDict_DelItemString
PyDict_GetItem
PyDict_GetItemRef
PyDict_GetItemString
PyDict_GetItemStringRef
PyDict_GetItemWithError
PyDict_Items
PyDict_Keys
PyDict_Merge
PyDict_MergeFromSeq2
PyDict_New
PyDict_Next
PyDict_Pop
PyDict_PopString
PyDict_SetDefault
PyDict_SetDefaultRef
PyDict_SetItem
PyDict_SetItemString
PyDict_Size
PyDict_Type
PyDict_Unwatch
PyDict_Update
PyDict_Values
PyDict_Watch
PyEllipsis_Type
PyEnum_Type
PyErr_BadArgument
PyErr_BadInternalCall
PyErr_CheckSignals
PyErr_Clear
PyErr_Display
PyErr_DisplayException
PyErr_ExceptionMatches
PyErr_Fetch
PyErr_Format
PyErr_FormatUnraisable
PyErr_FormatV
PyErr_GetExcInfo
PyErr_GetHandledException
PyErr_GetRaisedException
PyErr_GivenExceptionMatches
PyErr_NewException
PyErr_NewExceptionWithDoc
PyErr_NoMemory
PyErr_NormalizeException
PyErr_Occurred
PyErr_Print
PyErr_PrintEx
PyErr_ProgramText
PyErr_ProgramTextObject
PyErr_RangedSyntaxLocationObject
PyErr_ResourceWarning
PyErr_Restore
PyErr_SetExcFromWindowsErr
PyErr_SetExcFromWindowsErrWithFilename
PyErr_SetExcFromWindowsErrWithFilenameObject
PyErr_SetExcFromWindowsErrWithFilenameObjects
PyErr_SetExcInfo
PyErr_SetFromErrno
PyErr_SetFromErrnoWithFilename
PyErr_SetFromErrnoWithFilenameObject
PyErr_SetFromErrnoWithFilenameObjects
PyErr_SetFromWindowsErr
PyErr_SetFromWindowsErrWithFilename
PyErr_SetHandledException
PyErr_SetImportError
PyErr_SetImportErrorSubclass
PyErr_SetInterrupt
PyErr_SetInterruptEx
PyErr_SetNone
PyErr_SetObject
PyErr_SetRaisedException
PyErr_SetString
PyErr_SyntaxLocation
PyErr_SyntaxLocationEx
PyErr_SyntaxLocationObject
PyErr_WarnEx
PyErr_WarnExplicit
PyErr_WarnExplicitFormat
PyErr_WarnExplicitObject
PyErr_WarnFormat
PyErr_WriteUnraisable
PyEval_AcquireLock
PyEval_AcquireThread
PyEval_CallFunction
PyEval_CallMethod
PyEval_CallObjectWithKeywords
PyEval_EvalCode
PyEval_EvalCodeEx
PyEval_EvalFrame
PyEval_EvalFrameEx
PyEval_GetBuiltins
PyEval_GetFrame
PyEval_GetFrameBuiltins
PyEval_GetFrameGlobals
PyEval_GetFrameLocals
PyEval_GetFuncDesc
PyEval_GetFuncName
PyEval_GetGlobals
PyEval_GetLocals
PyEval_InitThreads
PyEval_MergeCompilerFlags
PyEval_ReleaseLock
PyEval_ReleaseThread
PyEval_RestoreThread
PyEval_SaveThread
PyEval_SetProfile
PyEval_SetProfileAllThreads
PyEval_SetTrace
PyEval_SetTraceAllThreads
PyEval_ThreadsInitialized
PyEvent_Wait
PyEvent_WaitTimed
PyExc_ArithmeticError
PyExc_AssertionError
PyExc_AttributeError
PyExc_BaseException
PyExc_BaseExceptionGroup
PyExc_BlockingIOError
PyExc_BrokenPipeError
PyExc_BufferError
PyExc_BytesWarning
PyExc_ChildProcessError
PyExc_ConnectionAbortedError
PyExc_ConnectionError
PyExc_ConnectionRefusedError
PyExc_ConnectionResetError
PyExc_DeprecationWarning
PyExc_EOFError
PyExc_EncodingWarning
PyExc_EnvironmentError
PyExc_Exception
PyExc_FileExistsError
PyExc_FileNotFoundError
PyExc_FloatingPointError
PyExc_FutureWarning
PyExc_GeneratorExit
PyExc_IOError
PyExc_ImportError
PyExc_ImportWarning
PyExc_IndentationError
PyExc_IndexError
PyExc_InterpreterError
PyExc_InterpreterNotFoundError
PyExc_InterruptedError
PyExc_IsADirectoryError
PyExc_KeyError
PyExc_KeyboardInterrupt
PyExc_LookupError
PyExc_MemoryError
PyExc_ModuleNotFoundError
PyExc_NameError
PyExc_NotADirectoryError
PyExc_NotImplementedError
PyExc_OSError
PyExc_OverflowError
PyExc_PendingDeprecationWarning
PyExc_PermissionError
PyExc_ProcessLookupError
PyExc_PythonFinalizationError
PyExc_RecursionError
PyExc_ReferenceError
PyExc_ResourceWarning
PyExc_RuntimeError
PyExc_RuntimeWarning
PyExc_StopAsyncIteration
PyExc_StopIteration
PyExc_SyntaxError
PyExc_SyntaxWarning
PyExc_SystemError
PyExc_SystemExit
PyExc_TabError
PyExc_TimeoutError
PyExc_TypeError
PyExc_UnboundLocalError
PyExc_UnicodeDecodeError
PyExc_UnicodeEncodeError
PyExc_UnicodeError
PyExc_UnicodeTranslateError
PyExc_UnicodeWarning
PyExc_UserWarning
PyExc_ValueError
PyExc_Warning
PyExc_WindowsError
PyExc_ZeroDivisionError
PyExceptionClass_Name
PyException_GetArgs
PyException_GetCause
PyException_GetContext
PyException_GetTraceback
PyException_SetArgs
PyException_SetCause
PyException_SetContext
PyException_SetTraceback
PyFile_FromFd
PyFile_GetLine
PyFile_NewStdPrinter
PyFile_OpenCode
PyFile_OpenCodeObject
PyFile_SetOpenCodeHook
PyFile_WriteObject
PyFile_WriteString
PyFilter_Type
PyFloat_AsDouble
PyFloat_FromDouble
PyFloat_FromString
PyFloat_GetInfo
PyFloat_GetMax
PyFloat_GetMin
PyFloat_Pack2
PyFloat_Pack4
PyFloat_Pack8
PyFloat_Type
PyFloat_Unpack2
PyFloat_Unpack4
PyFloat_Unpack8
PyFrameLocalsProxy_Type
PyFrame_FastToLocals
PyFrame_FastToLocalsWithError
PyFrame_GetBack
PyFrame_GetBuiltins
PyFrame_GetCode
PyFrame_GetGenerator
PyFrame_GetGlobals
PyFrame_GetLasti
PyFrame_GetLineNumber
PyFrame_GetLocals
PyFrame_GetVar
PyFrame_GetVarString
PyFrame_LocalsToFast
PyFrame_New
PyFrame_Type
PyFrozenSet_New
PyFrozenSet_Type
PyFunction_AddWatcher
PyFunction_ClearWatcher
PyFunction_GetAnnotations
PyFunction_GetClosure
PyFunction_GetCode
PyFunction_GetDefaults
PyFunction_GetGlobals
PyFunction_GetKwDefaults
PyFunction_GetModule
PyFunction_New
PyFunction_NewWithQualName
PyFunction_SetAnnotations
PyFunction_SetClosure
PyFunction_SetDefaults
PyFunction_SetKwDefaults
PyFunction_SetVectorcall
PyFunction_Type
PyGC_Collect
PyGC_Disable
PyGC_Enable
PyGC_IsEnabled
PyGILState_Check
PyGILState_Ensure
PyGILState_GetThisThreadState
PyGILState_Release
PyGen_GetCode
PyGen_New
PyGen_NewWithQualName
PyGen_Type
PyGetSetDescr_Type
PyHash_GetFuncDef
PyImport_AddModule
PyImport_AddModuleObject
PyImport_AddModuleRef
PyImport_AppendInittab
PyImport_ExecCodeModule
PyImport_ExecCodeModuleEx
PyImport_ExecCodeModuleObject
PyImport_ExecCodeModuleWithPathnames
PyImport_ExtendInittab
PyImport_FrozenModules
PyImport_GetImporter
PyImport_GetMagicNumber
PyImport_GetMagicTag
PyImport_GetModule
PyImport_GetModuleDict
PyImport_Import
PyImport_ImportFrozenModule
PyImport_ImportFrozenModuleObject
PyImport_ImportModule
PyImport_ImportModuleLevel
PyImport_ImportModuleLevelObject
PyImport_ImportModuleNoBlock
PyImport_Inittab
PyImport_ReloadModule
PyIndex_Check
PyInstanceMethod_Function
PyInstanceMethod_New
PyInstanceMethod_Type
PyInterpreterState_Clear
PyInterpreterState_Delete
PyInterpreterState_Get
PyInterpreterState_GetDict
PyInterpreterState_GetID
PyInterpreterState_Head
PyInterpreterState_Main
PyInterpreterState_New
PyInterpreterState_Next
PyInterpreterState_ThreadHead
PyIter_Check
PyIter_Next
PyIter_Send
PyListIter_Type
PyListRevIter_Type
PyList_Append
PyList_AsTuple
PyList_Clear
PyList_Extend
PyList_GetItem
PyList_GetItemRef
PyList_GetSlice
PyList_Insert
PyList_New
PyList_Reverse
PyList_SetItem
PyList_SetSlice
PyList_Size
PyList_Sort
PyList_Type
PyLongRangeIter_Type
PyLong_AsDouble
PyLong_AsInt
PyLong_AsLong
PyLong_AsLongAndOverflow
PyLong_AsLongLong
PyLong_AsLongLongAndOverflow
PyLong_AsNativeBytes
PyLong_AsSize_t
PyLong_AsSsize_t
PyLong_AsUnsignedLong
PyLong_AsUnsignedLongLong
PyLong_AsUnsignedLongLongMask

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 275KB - Virtual size: 782KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PyRuntim
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
requests/__init__.py
requests/__pycache__/__init__.cpython-312.pyc
requests/__pycache__/__init__.cpython-313.pyc
requests/__pycache__/__version__.cpython-312.pyc
requests/__pycache__/__version__.cpython-313.pyc
requests/__pycache__/_internal_utils.cpython-312.pyc
requests/__pycache__/_internal_utils.cpython-313.pyc
requests/__pycache__/adapters.cpython-312.pyc
requests/__pycache__/adapters.cpython-313.pyc
requests/__pycache__/api.cpython-312.pyc
requests/__pycache__/api.cpython-313.pyc
requests/__pycache__/auth.cpython-312.pyc
requests/__pycache__/auth.cpython-313.pyc
requests/__pycache__/certs.cpython-312.pyc
requests/__pycache__/certs.cpython-313.pyc
requests/__pycache__/compat.cpython-312.pyc
requests/__pycache__/compat.cpython-313.pyc
requests/__pycache__/cookies.cpython-312.pyc
requests/__pycache__/cookies.cpython-313.pyc
requests/__pycache__/exceptions.cpython-312.pyc
requests/__pycache__/exceptions.cpython-313.pyc
requests/__pycache__/help.cpython-312.pyc
requests/__pycache__/hooks.cpython-312.pyc
requests/__pycache__/hooks.cpython-313.pyc
requests/__pycache__/models.cpython-312.pyc
requests/__pycache__/models.cpython-313.pyc
requests/__pycache__/packages.cpython-312.pyc
requests/__pycache__/packages.cpython-313.pyc
requests/__pycache__/sessions.cpython-312.pyc
requests/__pycache__/sessions.cpython-313.pyc
requests/__pycache__/status_codes.cpython-312.pyc
requests/__pycache__/status_codes.cpython-313.pyc
requests/__pycache__/structures.cpython-312.pyc
requests/__pycache__/structures.cpython-313.pyc
requests/__pycache__/utils.cpython-312.pyc
requests/__pycache__/utils.cpython-313.pyc
requests/__version__.py
requests/_internal_utils.py
requests/adapters.py
requests/api.py
requests/auth.py
requests/certs.py
.py .sh linux
requests/compat.py
requests/cookies.py
requests/exceptions.py
requests/help.py
requests/hooks.py
requests/models.py
requests/packages.py
requests/sessions.py
requests/status_codes.py
requests/structures.py
requests/utils.py
sigma.py
urllib3/__init__.py
urllib3/__pycache__/__init__.cpython-312.pyc
urllib3/__pycache__/__init__.cpython-313.pyc
urllib3/__pycache__/_base_connection.cpython-312.pyc
urllib3/__pycache__/_base_connection.cpython-313.pyc
urllib3/__pycache__/_collections.cpython-312.pyc
urllib3/__pycache__/_collections.cpython-313.pyc
urllib3/__pycache__/_request_methods.cpython-312.pyc
urllib3/__pycache__/_request_methods.cpython-313.pyc
urllib3/__pycache__/_version.cpython-312.pyc
urllib3/__pycache__/_version.cpython-313.pyc
urllib3/__pycache__/connection.cpython-312.pyc
urllib3/__pycache__/connection.cpython-313.pyc
urllib3/__pycache__/connectionpool.cpython-312.pyc
urllib3/__pycache__/connectionpool.cpython-313.pyc
urllib3/__pycache__/exceptions.cpython-312.pyc
urllib3/__pycache__/exceptions.cpython-313.pyc
urllib3/__pycache__/fields.cpython-312.pyc
urllib3/__pycache__/fields.cpython-313.pyc
urllib3/__pycache__/filepost.cpython-312.pyc
urllib3/__pycache__/filepost.cpython-313.pyc
urllib3/__pycache__/http2.cpython-312.pyc
urllib3/__pycache__/poolmanager.cpython-312.pyc
urllib3/__pycache__/poolmanager.cpython-313.pyc
urllib3/__pycache__/response.cpython-312.pyc
urllib3/__pycache__/response.cpython-313.pyc
urllib3/_base_connection.py
urllib3/_collections.py
urllib3/_request_methods.py
urllib3/_version.py
urllib3/connection.py
.py .js
urllib3/connectionpool.py
urllib3/contrib/__pycache__/__init__.cpython-312.pyc
urllib3/contrib/__pycache__/__init__.cpython-313.pyc
urllib3/contrib/__pycache__/pyopenssl.cpython-312.pyc
.js
urllib3/contrib/__pycache__/socks.cpython-312.pyc
urllib3/contrib/__pycache__/socks.cpython-313.pyc
urllib3/contrib/emscripten/__init__.py
urllib3/contrib/emscripten/__pycache__/__init__.cpython-312.pyc
urllib3/contrib/emscripten/__pycache__/connection.cpython-312.pyc
urllib3/contrib/emscripten/__pycache__/fetch.cpython-312.pyc
urllib3/contrib/emscripten/__pycache__/request.cpython-312.pyc
urllib3/contrib/emscripten/__pycache__/response.cpython-312.pyc
urllib3/contrib/emscripten/connection.py
urllib3/contrib/emscripten/emscripten_fetch_worker.js
.js
urllib3/contrib/emscripten/fetch.py
urllib3/contrib/emscripten/request.py
urllib3/contrib/emscripten/response.py
urllib3/contrib/pyopenssl.py
.py .js
urllib3/contrib/socks.py
urllib3/exceptions.py
urllib3/fields.py
urllib3/filepost.py
urllib3/http2.py
urllib3/poolmanager.py
urllib3/py.typed
urllib3/response.py
urllib3/util/__init__.py
urllib3/util/__pycache__/__init__.cpython-312.pyc
urllib3/util/__pycache__/__init__.cpython-313.pyc
urllib3/util/__pycache__/connection.cpython-312.pyc
urllib3/util/__pycache__/connection.cpython-313.pyc
urllib3/util/__pycache__/proxy.cpython-312.pyc
urllib3/util/__pycache__/proxy.cpython-313.pyc
urllib3/util/__pycache__/request.cpython-312.pyc
urllib3/util/__pycache__/request.cpython-313.pyc
urllib3/util/__pycache__/response.cpython-312.pyc
urllib3/util/__pycache__/response.cpython-313.pyc
urllib3/util/__pycache__/retry.cpython-312.pyc
urllib3/util/__pycache__/retry.cpython-313.pyc
urllib3/util/__pycache__/ssl_.cpython-312.pyc
urllib3/util/__pycache__/ssl_.cpython-313.pyc
urllib3/util/__pycache__/ssl_match_hostname.cpython-312.pyc
urllib3/util/__pycache__/ssl_match_hostname.cpython-313.pyc
urllib3/util/__pycache__/ssltransport.cpython-312.pyc
.js
urllib3/util/__pycache__/ssltransport.cpython-313.pyc
.js
urllib3/util/__pycache__/timeout.cpython-312.pyc
urllib3/util/__pycache__/timeout.cpython-313.pyc
urllib3/util/__pycache__/url.cpython-312.pyc
urllib3/util/__pycache__/url.cpython-313.pyc
urllib3/util/__pycache__/util.cpython-312.pyc
urllib3/util/__pycache__/util.cpython-313.pyc
urllib3/util/__pycache__/wait.cpython-312.pyc
urllib3/util/__pycache__/wait.cpython-313.pyc
urllib3/util/connection.py
.py .js
urllib3/util/proxy.py
urllib3/util/request.py
urllib3/util/response.py
urllib3/util/retry.py
urllib3/util/ssl_.py
urllib3/util/ssl_match_hostname.py
urllib3/util/ssltransport.py
.py .js
urllib3/util/timeout.py
.py .js
urllib3/util/url.py
urllib3/util/util.py
urllib3/util/wait.py
warnings.py

Sharing

General

Malware Config

Signatures

Files

f9f58fd722dea53fe5b29a3d6dba9a29

Headers

DLL Characteristics

File Characteristics

Imports

python312

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 456B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 44B

facfc5ec70708b6566f37401fb8a64c6

Headers

DLL Characteristics

File Characteristics

Imports

python312

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

Exports

Exports

Sections

.text Size: 78KB - Virtual size: 78KB

.rdata Size: 22KB - Virtual size: 21KB

.data Size: 12KB - Virtual size: 15KB

.pdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 1KB - Virtual size: 1KB

d233964eaa90e1b69b31d0c96b47b8d3

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:ddCertificate

Extended Key Usages

Key Usages

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

c5:ab:7c:34:d5:d8:24:97:c0:e0:f4:da:c0:25:99:ea:a6:a5:c5:4c:54:2c:f6:e6:70:75:6d:4e:bf:8e:2b:ccSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

python313

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 348B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 456B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 44B

.text
Size: 78KB - Virtual size: 78KB

.rdata
Size: 22KB - Virtual size: 21KB

.data
Size: 12KB - Virtual size: 15KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 1KB - Virtual size: 1KB

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd
Certificate

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

c5:ab:7c:34:d5:d8:24:97:c0:e0:f4:da:c0:25:99:ea:a6:a5:c5:4c:54:2c:f6:e6:70:75:6d:4e:bf:8e:2b:cc
Signer

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 348B

.rsrc
Size: 79KB - Virtual size: 78KB

.reloc
Size: 512B - Virtual size: 48B

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd
Certificate

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

01:0f:07:b4:5d:da:ce:77:11:3d:29:05:a7:77:f9:27:83:17:2f:21:d9:33:2d:1e:b2:b0:6a:e4:09:70:b7:8a
Signer

.text
Size: 2.7MB - Virtual size: 2.7MB

.rdata
Size: 2.3MB - Virtual size: 2.3MB

.data
Size: 275KB - Virtual size: 782KB

.pdata
Size: 160KB - Virtual size: 159KB

PyRuntim
Size: 276KB - Virtual size: 275KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 43KB - Virtual size: 42KB