5fd01c7a6dbd66ff408e499a58d9ea92cde839e4d331eb1dfa3503472be08972.zip
- SHA256 a02a9471808b56743d86a8420198f0c94a39cf2aa56f4db9cdd21c091c97b436
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Purchase Order 291765.exe
Resource
win7-20241010-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Purchase Order 291765.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
Tikoor/Feltstrrelser/Ribozos/Quartus/api-ms-win-core-errorhandling-l1-1-0.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
Tikoor/Feltstrrelser/Ribozos/Quartus/vsock.html
Resource
win7-20240708-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral7
Sample
Tikoor/Feltstrrelser/Ribozos/Quartus/vsock.html
Resource
win10v2004-20241007-en
windows10-2004-x64
7 signatures
150 seconds
General
- Target 5fd01c7a6dbd66ff408e499a58d9ea92cde839e4d331eb1dfa3503472be08972.zip
- Size 368KB
- Sample241129-p4sfaawncw
- SHA256 a02a9471808b56743d86a8420198f0c94a39cf2aa56f4db9cdd21c091c97b436
- MD5 5580616e41c8736dfe2a25f70eb41f7b
- SHA1 febca092f10e20d4b4aea9318207ee32282294d7
- SHA512 f2a82d98e3a346437941e0a697854a89a67e889b35f6b4cb9d20927bcf844c5f986fcd45f42813e5d850e7ccfc76485e9cbff0542b0706ab5878652ea7437f33
- SSDEEP 6144:LGcyehs1pOyORG4Wp9kWU9mvbb6DWemsCf3gFZqTvIzWXxwO0ZN3ZBDq5TyASM:XNsNOc4WYWU9mDb6lDCYFZq4WXxV0lBo
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/$PLUGINSDIR/System.dll
File Explorer
-
5fd01c7a6dbd66ff408e499a58d9ea92cde839e4d331eb1dfa3503472be08972.zip.zip 368KB
-
5fd01c7a6dbd66ff408e499a58d9ea92cde839e4d331eb1dfa3503472be08972.img.iso 1.2MB
-
Purchase Order 291765.exe.exe 590KB
-
$PLUGINSDIR/System.dll.dll 11KB
-
Multilayer207/Airways_19.bmp.png 5KB
-
Multilayer207/Hort.Tra98KB
-
Multilayer207/Indlaansrente.Pat90KB
-
Tikoor/Feltstrrelser/Ribozos/Quartus/WARNING.TXT762B
-
Tikoor/Feltstrrelser/Ribozos/Quartus/api-ms-win-core-errorhandling-l1-1-0.dll.dll 17KB
-
Tikoor/Feltstrrelser/Ribozos/Quartus/face-sad.png.png 867B
-
Tikoor/Feltstrrelser/Ribozos/Quartus/vsock.sys.html 1KB
5fd01c7a6dbd66ff408e499a58d9ea92cde839e4d331eb1dfa3503472be08972.img
- SHA256 5fd01c7a6dbd66ff408e499a58d9ea92cde839e4d331eb1dfa3503472be08972
- MD5 a7b8e4d8f2c9862f8e41ca7d027d887c
- SHA1 0deb0dabc87df8bb31a0506947acb66b067fbe12
- SHA512 b50855505546f1e57d3846ac1d8d484a8d60a060e59e462ff106a09e3814ff5ca950bd6a68e18bd2a443c938b8ca31c773a94fe90fce163e79b33b2a47c123da
- SSDEEP 12288:1gDX/G7k2F1axoSAtT/ljZhsQTNnNE3pKPuQHhFJUBZTsSH:W/ak2F1aiSAtT/l12gnC3pO3HHaBZAS
- MD5 SHA1 SHA512 SSDEEP
Purchase Order 291765.exe
- IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
- SHA256 7b8714bdeaf6cd6803078d5b21af1afd9dccecf13456bdb4c879a63c4683a374
- MD5 d1c1b8a2281aef064c89254a6dae6784
- SHA1 97db63131a4e9e6ae649cfb32c4038577d62feb0
- SHA512 0adab21b0b33dd2138f9814afdb563478bd9e92fa2125d26a6b52d64a3bb0724bb89e5bf2d7728dbc657fcf1b1b02cb640f9e99980c92e466afe225f59622859
- SSDEEP 12288:XgDX/G7k2F1axoSAtT/ljZhsQTNnNE3pKPuQHhFJUBZTsSHz:A/ak2F1aiSAtT/l12gnC3pO3HHaBZAST
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
93:76:d6:2f:76:64:52:1b:1c:94:a1:49:8d:98:d4:62:bf:d4:c2:5b:35:49:95:c7:7d:e4:d7:ef:39:a1:a3:86
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Scagliolist taellepraase Antikisr\ ,OU=Hejsevrker nonperfectibility\ ,O=Mixere,L=Zootzen,ST=Brandenburg,C=DE,1.2.840.113549.1.9.1=#0c1a596c65747465726e657340766f6c74616d65747265732e416572
Chains
Sep 16, 2022
Subject
CN=Scagliolist taellepraase Antikisr\ ,OU=Hejsevrker nonperfectibility\ ,O=Mixere,L=Zootzen,ST=Brandenburg,C=DE,1.2.840.113549.1.9.1=#0c1a596c65747465726e657340766f6c74616d65747265732e416572
Serial Number
4d:df:32:84:6f:b9:eb:4b
Issuer
CN=Scagliolist taellepraase Antikisr\ ,OU=Hejsevrker nonperfectibility\ ,O=Mixere,L=Zootzen,ST=Brandenburg,C=DE,1.2.840.113549.1.9.1=#0c1a596c65747465726e657340766f6c74616d65747265732e416572
Timespan
Jul 23, 2022 - Jul 22, 2025
Subject
CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL
Serial Number
2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 28, 2022 - Jul 27, 2033
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 31, 2021 - Sep 17, 2029
Minor OS version
0
Major OS version
4
Entry point
13238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetCurrentDirectoryW
GetFileAttributesW
GetFullPathNameW
Sleep
GetTickCount
CreateFileW
GetFileSize
MoveFileW
SetFileAttributesW
GetModuleFileNameW
CopyFileW
ExitProcess
SetEnvironmentVariableW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
WaitForSingleObject
GetCurrentProcess
CompareFileTime
GlobalUnlock
GlobalLock
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
WriteFile
lstrcpyA
lstrcpyW
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GlobalFree
GlobalAlloc
GetShortPathNameW
SearchPathW
lstrcmpiW
SetFileTime
CloseHandle
ExpandEnvironmentStringsW
lstrcmpW
GetDiskFreeSpaceW
lstrlenW
lstrcpynW
GetExitCodeProcess
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
MulDiv
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
user32
GetSystemMenu
SetClassLongW
IsWindowEnabled
EnableMenuItem
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
wsprintfW
ScreenToClient
GetWindowRect
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
LoadImageW
SetTimer
SetWindowTextW
PostQuitMessage
ShowWindow
GetDlgItem
IsWindow
SetWindowLongW
FindWindowExW
TrackPopupMenu
AppendMenuW
CreatePopupMenu
DrawTextW
EndPaint
CreateDialogParamW
SendMessageTimeoutW
SetForegroundWindow
gdi32
SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
advapi32
RegDeleteKeyW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumKeyW
comctl32
ImageList_AddMasked
ord17
ImageList_Destroy
ImageList_Create
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
204KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
364KB
Virtual Size
364KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=166, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/System.dll
- IMPHASH fc0224e99e736751432961db63a41b76
- SHA256 2e226715419a5882e2e14278940ee8ef0aa648a3ef7af5b3dc252674111962bc
- MD5 a4dd044bcd94e9b3370ccf095b31f896
- SHA1 17c78201323ab2095bc53184aa8267c9187d5173
- SHA512 87335a43b9ca13e1300c7c23e702e87c669e2bcf4f6065f0c684fc53165e9c1f091cc4d79a3eca3910f0518d3b647120ac0be1a68eaade2e75eaa64adfc92c5a
- SSDEEP 192:em24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OlESl:m8QIl975eXqlWBrz7YLOlE
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10183
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
851B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
610B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Multilayer207/Airways_19.bmp
- SHA256 eab94028f751f2775ee5a25572bcff12051a48dfa238db6cc7cf7dc0cf485472
- MD5 25d9f8149fee65ba6a61311850d642b2
- SHA1 2e9e133f8b6e927afaf66d66c94af6518b6a217a
- SHA512 9096f5a821f54b0db655c416acdf117e62b80781f871e9932e6d99903465eeb9046118f9a46bf311aaa032c1e6a60815bc2c5ce241b84dfee134a32eacd5a7ba
- SSDEEP 96:EPGg2PUWw/rbzXSao5vqBlY15p03cRUEZwDsSFlOoEUhUYXvRsgmv2/45bAYpFzJ:xCzXi5yBlY14sqEZMsSFlO+W4sPv2KfV
- MD5 SHA1 SHA512 SSDEEP
Multilayer207/Hort.Tra
- SHA256 8dbcd290b3649f854dd9c54161d4f144cebeae978dc3b7022a6255b9cac23ba4
- MD5 965aadd14a17653a5780e0ad3224aa39
- SHA1 f55d4b89aa47f458f52cf05a488d2d98e8a2d54a
- SHA512 f27eaf21c5cbb60e67fa70e9ffc98bc8c31f4de0992b4b164a5699bf50c0bc2f4a0f15aa1e9d8c38ef2170a68221d515c6856c8f2bd6affe78f58e0f93b2014c
- SSDEEP 1536:cikdhzRgahTOWThcmoW7jgBbKntv+T+M0b8ijM4Kh:4gZWThuW/gBcvHQijMl
- MD5 SHA1 SHA512 SSDEEP
Multilayer207/Indlaansrente.Pat
- SHA256 e918ff48492bf36869a2681d8f297eff429725c18c716ddbac1a03c8b607941c
- MD5 f47969728c5491645461c5446a9f17f3
- SHA1 93374f98292f08653455bfac001efb682be403ca
- SHA512 4d5b03b3f9f3dda9a587bb5ea8ea6fb196df1317b842bf06c7ad8be556c63e492573cba7c1fbcf7c2fba5c05dedecbf459666b1f1dc5239eaf315abcfaea8062
- SSDEEP 1536:yIQv6JShwqCbe5HvY5zKPSsGElmM/dew73XHzm/eYAYB64qrTnDlOqnOx:yChPSBv2zUlmM/kw7K/VAYBuZOHx
- MD5 SHA1 SHA512 SSDEEP
Tikoor/Feltstrrelser/Ribozos/Quartus/WARNING.TXT
- SHA256 32650c77feffd28af418b42c137d16e877da5e0c260ceb27ab16eb64fbeea5e4
- MD5 96b3e4aa975d8c895141fd6e86d9ace1
- SHA1 80dc9cf9c62ade7cd59cfac5790ea3fe9dd422b9
- SHA512 8595edb8b15597057ea1252bc80117304a27c0832c2f354793291f44cf051850f43b234e22577cc998614cb17d78e51c4d24dc7d540d72317c6a2428ae0899c9
- MD5 SHA1 SHA512
Tikoor/Feltstrrelser/Ribozos/Quartus/api-ms-win-core-errorhandling-l1-1-0.dll
- SHA256 f8e3b45fd3e22866006f16a9e73e28b5e357f31f3c275b517692a5f16918b492
- MD5 d91bf81cf5178d47d1a588b0df98eb24
- SHA1 75f9f2da06aa2735906b1c572dd556a3c30e7717
- SHA512 93d1b0d226e94235f1b32d42f6c1b95fadfaf103b8c1782423d2c5a4836102084fb53f871e3c434b85f0288e47f44345138de54ea5f982ca3e8bbf2d2bea0706
- SSDEEP 192:cnmxD3jW1hWiRcvHCjdks/nGfe4pBjSYrteMMPiW5RKTt3E2sVWQ4GWCxMfqnaj9:cn4W1hWiQim0GftpBj9eXm3SR6lPp/
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b3:bd:7c:32:14:8c:fe:34:06:44:f9:bb:b2:e3:0b:5f:a3:a0:72:57:55:36:7c:38:4e:ec:57:3e:06:0a:70:ca
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 29, 2024
PE Signature issue
Digest
9b:f6:ae:be:57:bd:40:80:95:1a:31:a9:b5:23:73:64:80:3d:61:7c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 20, 2018
Subject
CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:be:a4:0f:f5:c9:a5:0e:e1:30:00:00:00:00:00:be
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 7, 2016 - Sep 7, 2018
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 11, 2017 - Aug 11, 2018
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:cc:b5:5b:42:17:07:60:13:11:00:00:00:00:01:cc
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 12, 2017 - Sep 12, 2018
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-errorhandling-l1-1-0.pdb
GetErrorMode
GetLastError
RaiseException
SetErrorMode
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Name
.text
Size
1024B
Virtual Size
710B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=25711,
count=2, id=260, version=25711,
count=1, id=255, version=25711,
count=1, id=258, version=25711,
Tikoor/Feltstrrelser/Ribozos/Quartus/face-sad.png
- SHA256 43f35154b269f8d2dfe345d0551bdb4218ce3a09800c1bc3d55f4a33db00734b
- MD5 c5867cde29ac4282965a4010a38d3594
- SHA1 8b15e8195c302e0c1f59567c4c1b95928903e0ed
- SHA512 eb6af1b6b4b3aa80cf25c0ce39a39988b0cbbbd4d36854c84796c19bdf63defa3322eae88dc6aedd939346c1011a6a3cfcc745b9038993e5a9b229dc1c733ad2
- MD5 SHA1 SHA512
Tikoor/Feltstrrelser/Ribozos/Quartus/vsock.sys
- SHA256 dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f
- MD5 5343c1a8b203c162a3bf3870d9f50fd4
- SHA1 04b5b886c20d88b57eea6d8ff882624a4ac1e51d
- SHA512 e0f50acb6061744e825a4051765cebf23e8c489b55b190739409d8a79bb08dac8f919247a4e5f65a015ea9c57d326bbef7ea045163915129e01f316c4958d949
- MD5 SHA1 SHA512