quarantine.7z
- SHA256 564f41fda6e9847a177c691640a65ff713d1389b9501a9b49deb931652d41c63
Overview
overview
10Static
static
10quarantine/a.exe
windows7-x64
7quarantine/a.exe
windows10-2004-x64
9quarantine/b.exe
windows7-x64
8quarantine/b.exe
windows10-2004-x64
8quarantine/c.exe
windows7-x64
1quarantine/c.exe
windows10-2004-x64
7quarantine/d.exe
windows7-x64
10quarantine/d.exe
windows10-2004-x64
10quarantine/e.exe
windows7-x64
7quarantine/e.exe
windows10-2004-x64
7quarantine/f.exe
windows7-x64
7quarantine/f.exe
windows10-2004-x64
7quarantine/g.exe
windows7-x64
10quarantine/g.exe
windows10-2004-x64
10quarantine/h.exe
windows7-x64
10quarantine/h.exe
windows10-2004-x64
10quarantine/j.exe
windows7-x64
3quarantine/j.exe
windows10-2004-x64
3Behavioral task
behavioral1
Sample
quarantine/a.exe
Resource
win7-20240903-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
quarantine/a.exe
Resource
win10v2004-20250217-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
quarantine/b.exe
Resource
win7-20240903-en
windows7-x64
16 signatures
150 seconds
Behavioral task
behavioral4
Sample
quarantine/b.exe
Resource
win10v2004-20250217-en
windows10-2004-x64
16 signatures
150 seconds
Behavioral task
behavioral5
Sample
quarantine/c.exe
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
quarantine/c.exe
Resource
win10v2004-20250217-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral7
Sample
quarantine/d.exe
Resource
win7-20241023-en
windows7-x64
16 signatures
150 seconds
Behavioral task
behavioral8
Sample
quarantine/d.exe
Resource
win10v2004-20250217-en
windows10-2004-x64
16 signatures
150 seconds
Behavioral task
behavioral9
Sample
quarantine/e.exe
Resource
win7-20241010-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral10
Sample
quarantine/e.exe
Resource
win10v2004-20250217-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral11
Sample
quarantine/f.exe
Resource
win7-20241010-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral12
Sample
quarantine/f.exe
Resource
win10v2004-20250217-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral13
Sample
quarantine/g.exe
Resource
win7-20240903-en
windows7-x64
16 signatures
150 seconds
Behavioral task
behavioral14
Sample
quarantine/g.exe
Resource
win10v2004-20250217-en
windows10-2004-x64
16 signatures
150 seconds
Behavioral task
behavioral15
Sample
quarantine/h.exe
Resource
win7-20240903-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral16
Sample
quarantine/h.exe
Resource
win10v2004-20250217-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral17
Sample
quarantine/j.exe
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
quarantine/j.exe
Resource
win10v2004-20250217-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target quarantine.7z
- Size 26.3MB
- Sample250223-2mse6swpht
- SHA256 564f41fda6e9847a177c691640a65ff713d1389b9501a9b49deb931652d41c63
- MD5 1d728bf574ad18ccfc50dee2d6c0b047
- SHA1 cdb30d291aea540c52b57b88be52161afbd74f28
- SHA512 0886f34bb037034726e914360bb05ad7890239b42b2a159586b97bd81ce531fb813444dc7c37b53a0523d4fa8450425536aed3c0c124c3e0a4d48e31ce3165c2
- SSDEEP 786432:BgZ8joIZD2pi/hloFz+04IDf4vu31cJ0x:B48NDQijm5L4VJ0x
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Family
-
xworm
Version
-
5.0
C2
-
185.163.204.65:7000
Mutex
-
SWaSxcOz2FkLWFU7
Attributes
-
install_file
USB.exe
-
telegram
https://api.telegram.org/bot7801507553:AAER1leGn_BtfmbwwWVlXFOz-GpclQKTfe0/sendMessage?chat_id=6012304042
aes.plain
Signatures
- Detect Xworm Payload 1 IoCs
resource yara_rule static1/unpack001/quarantine/h family_xworm - Xworm family
- Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
resource unpack001/quarantine/a unpack001/quarantine/b unpack001/quarantine/c unpack001/quarantine/d unpack001/quarantine/h unpack001/quarantine/j
File Explorer
-
quarantine.7z.7z 26.3MB
-
quarantine/a.exe 13.6MB
-
quarantine/b.exe 9.5MB
-
quarantine/c.exe 5.1MB
-
quarantine/d.exe 2.9MB
-
quarantine/e.exe 2.1MB
-
.data70KB
-
.idata1024B
-
.rdata987KB
-
.reloc53KB
-
.rsrc/DIALOG/102180B
-
.rsrc/DIALOG/103288B
-
.rsrc/DIALOG/105514B
-
.rsrc/DIALOG/106248B
-
.rsrc/DIALOG/111238B
-
.rsrc/DIALOG/202172B
-
.rsrc/DIALOG/203280B
-
.rsrc/DIALOG/205506B
-
.rsrc/DIALOG/206240B
-
.rsrc/DIALOG/211230B
-
.rsrc/DIALOG/302160B
-
.rsrc/DIALOG/303268B
-
.rsrc/DIALOG/305494B
-
.rsrc/DIALOG/306228B
-
.rsrc/DIALOG/311218B
-
.rsrc/DIALOG/402160B
-
.rsrc/DIALOG/403268B
-
.rsrc/DIALOG/405494B
-
.rsrc/DIALOG/406228B
-
.rsrc/DIALOG/411218B
-
.rsrc/DIALOG/502164B
-
.rsrc/DIALOG/503272B
-
.rsrc/DIALOG/505498B
-
.rsrc/DIALOG/506232B
-
.rsrc/DIALOG/511222B
-
.rsrc/DIALOG/602180B
-
.rsrc/DIALOG/603288B
-
.rsrc/DIALOG/605514B
-
.rsrc/DIALOG/606248B
-
.rsrc/DIALOG/611238B
-
.rsrc/GROUP_ICON/103104B
-
.rsrc/ICON/1.ico1KB
-
.rsrc/ICON/2.ico2KB
-
.rsrc/ICON/3.ico4KB
-
.rsrc/ICON/4.ico9KB
-
.rsrc/ICON/5.ico16KB
-
.rsrc/ICON/6.ico66KB
-
.rsrc/ICON/7.ico264KB
-
.rsrc/MANIFEST/1.xml 1KB
-
.rsrc/version.txt1KB
-
.symtab512B
-
.text665KB
-
CERTIFICATE19KB
-
quarantine/f.exe 2.1MB
-
.data70KB
-
.idata1024B
-
.rdata987KB
-
.reloc53KB
-
.rsrc/DIALOG/102180B
-
.rsrc/DIALOG/103288B
-
.rsrc/DIALOG/105514B
-
.rsrc/DIALOG/106248B
-
.rsrc/DIALOG/111238B
-
.rsrc/DIALOG/202172B
-
.rsrc/DIALOG/203280B
-
.rsrc/DIALOG/205506B
-
.rsrc/DIALOG/206240B
-
.rsrc/DIALOG/211230B
-
.rsrc/DIALOG/302160B
-
.rsrc/DIALOG/303268B
-
.rsrc/DIALOG/305494B
-
.rsrc/DIALOG/306228B
-
.rsrc/DIALOG/311218B
-
.rsrc/DIALOG/402160B
-
.rsrc/DIALOG/403268B
-
.rsrc/DIALOG/405494B
-
.rsrc/DIALOG/406228B
-
.rsrc/DIALOG/411218B
-
.rsrc/DIALOG/502164B
-
.rsrc/DIALOG/503272B
-
.rsrc/DIALOG/505498B
-
.rsrc/DIALOG/506232B
-
.rsrc/DIALOG/511222B
-
.rsrc/DIALOG/602180B
-
.rsrc/DIALOG/603288B
-
.rsrc/DIALOG/605514B
-
.rsrc/DIALOG/606248B
-
.rsrc/DIALOG/611238B
-
.rsrc/GROUP_ICON/103104B
-
.rsrc/ICON/1.ico1KB
-
.rsrc/ICON/2.ico2KB
-
.rsrc/ICON/3.ico4KB
-
.rsrc/ICON/4.ico9KB
-
.rsrc/ICON/5.ico16KB
-
.rsrc/ICON/6.ico66KB
-
.rsrc/ICON/7.ico264KB
-
.rsrc/MANIFEST/1.xml 1KB
-
.rsrc/version.txt1KB
-
.symtab512B
-
.text665KB
-
CERTIFICATE19KB
-
quarantine/g.exe.exe 2.1MB
-
quarantine/h.exe 173KB
-
quarantine/j.exe 136KB
quarantine/a
- IMPHASH 259c038cd4434231e0e24f278026a0ea
- SHA256 c1dd9242c70478030751af26c10b7e899156ca9c59940bf9b99f8fabe9462cfc
- MD5 13ea80f504c5af62897d7f90fea833cf
- SHA1 41f38037f1a68ffe501ab9fd69926606bf032766
- SHA512 90be7f94ea361beb26339d05725b5e952465013a56e86c4c28893d9b1793d6e439ddfef41ced7b1d95c6083ed9a0afee6f5aebcbb9545a360573da2eea03d204
- SSDEEP 393216:x4AqHlN/nP7eo/ZeL+3yggnLTmJ5EioLbNT5U:klN/P7eo/ZeL+C1nLTmJhot5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
51092
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
shell32
SHFileOperationW
SHGetFolderPathW
CommandLineToArgvW
kernel32
SetLastError
WriteConsoleW
HeapReAlloc
CreateDirectoryW
SizeofResource
SetConsoleCtrlHandler
GetCommandLineW
GetStdHandle
WriteFile
TerminateProcess
GetModuleFileNameW
SetEnvironmentVariableW
GetTempPathW
FindResourceA
WaitForSingleObject
CreateFileW
GetFileAttributesW
Sleep
GetLastError
LockResource
CloseHandle
LoadResource
GetProcAddress
GetCurrentProcessId
CreateProcessW
WideCharToMultiByte
GetSystemTimeAsFileTime
FormatMessageA
GetExitCodeProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
HeapSize
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetCommandLineA
HeapAlloc
MultiByteToWideChar
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
Name
.text
Size
126KB
Virtual Size
125KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
155KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
13.4MB
Virtual Size
13.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=259, version=30795,
count=143, id=261, version=30795,
count=10, id=260, version=30795,
count=2, id=253, version=34321,
count=9, id=259, version=34321,
count=16, id=260, version=34321,
count=40, id=261, version=34321,
count=5, id=257, version=30795,
count=114, id=1, productName=Unmarked objects,
count=1, id=264, version=34808,
count=1, id=258, version=34808,
quarantine/b
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 49353eb4529f18f516161726749c0f60e80d4c3b448f9d2606d59e82e730420a
- MD5 00a22a4872cdc3e3988ded0e13282da2
- SHA1 db0ae4aa3224d7f5a8abb5a372414aff68773027
- SHA512 c413277d6419d13a83d674fe2067adf4c5f93e8ed1869d224b571d6c44adf0cd15f92143b766c0efda492f1b178f846acdbb2d54536f955f91019f7b878500e5
- SSDEEP 196608:Bpax/2cDtDnQCk3NXXywcO978rBJxZdPx:BpxKCnLJ9QJxZdPx
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9681566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
9.2MB
Virtual Size
9.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
304KB
Virtual Size
303KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
quarantine/c
- IMPHASH 1ba8afe24824ed5b3f4384bd2e77a1ef
- SHA256 a09d49280077ed84d72c5b39977a67155f7bf1bc12615fecb6ec81a0aa2f92a6
- MD5 515748a93ce7beb3f4416ec66ba8488e
- SHA1 3ba2f1a56dcc91967361622c56b1ba545cda4325
- SHA512 3ce752a103a11b4ef84e6531f4feebcd70f5dfde979e3952709a686fb03e67741d894037406fc23fc5ea3b506d650653a01f3ef48fd7b5a44f79e45c8eb96ffb
- SSDEEP 98304:gJnnpXog0yHRQNcObZ5vq8HeLRoV994WE:g1pzQDz5eLQi
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5056
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwindEx
VirtualQuery
__C_specific_handler
AddVectoredExceptionHandler
CancelIo
CloseHandle
CompareStringOrdinal
CreateEventW
CreateFileMappingA
CreateFileW
CreateMutexA
CreateNamedPipeW
CreateProcessW
CreateThread
CreateTimerQueue
CreateToolhelp32Snapshot
DeleteProcThreadAttributeList
DeleteTimerQueue
DuplicateHandle
ExitProcess
FindClose
FindFirstFileExW
FormatMessageW
FreeEnvironmentStringsW
GetCommandLineW
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFullPathNameW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemDirectoryW
GetWindowsDirectoryW
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
InitOnceBeginInitialize
InitOnceComplete
InitializeProcThreadAttributeList
LoadLibraryA
MapViewOfFile
Module32FirstW
Module32NextW
MultiByteToWideChar
Process32FirstW
Process32NextW
ReadFile
ReadFileEx
SetEvent
SetFileInformationByHandle
SetFilePointerEx
SetLastError
SetThreadStackGuarantee
SetUnhandledExceptionFilter
Sleep
SleepEx
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
UpdateProcThreadAttribute
VirtualProtect
WaitForMultipleObjects
WaitForSingleObject
WriteConsoleW
WriteFileEx
msvcrt
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_fmode
_fpreset
_initterm
abort
atexit
calloc
exit
fprintf
free
fwrite
malloc
memcmp
memcpy
memmove
memset
signal
strlen
strncmp
vfprintf
ntdll
NtReadFile
NtWriteFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlNtStatusToDosError
RtlVirtualUnwind
advapi32
GetTokenInformation
OpenProcessToken
SystemFunction036
bcrypt
BCryptGenRandom
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
bcryptprimitives
ProcessPrng
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
704B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
429KB
Virtual Size
428KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/35
Size
649KB
Virtual Size
648KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/47
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/61
Size
272KB
Virtual Size
272KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/73
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/86
Size
879KB
Virtual Size
878KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/97
Size
512B
Virtual Size
126B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/113
Size
250KB
Virtual Size
250KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/127
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/143
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/159
Size
512B
Virtual Size
366B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
quarantine/d
- IMPHASH 2eabe9054cad5152567f0699947a2c5b
- SHA256 b5d4798fed8196e12260f2152245af80763fe877d807069d7f0ca08fd4ee6843
- MD5 41e7a544f14c8eeda7675b6f8fc2f267
- SHA1 98585d0462f44ace4216e00c0ae33f7b3606e0d4
- SHA512 6457c3a40dc56b82cf6eabb95d4591eab45aca0fff0bfeb03e20cc25a250b411cef072833bca7c1f58590bad4b10327bb364c1163896f0b2aaab6fde57a8e9ef
- SSDEEP 49152:Br9NjFy+niiEnPHxOIpt3MjJjFmAuZ/U9SHi5zhUYjxvmFtqwmkjQv:Fz5iiEnfxOIpJMjBFmAc/DHi7vQAv
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
3321856
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
lstrcpy
Name
Size
181KB
Virtual Size
432KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
bwdzxtyr
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
duuxhbvl
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.taggant
Size
8KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=13, id=259, version=27412,
count=186, id=261, version=27412,
count=18, id=260, version=30034,
count=22, id=259, version=30034,
count=89, id=261, version=30034,
count=2, id=253, version=23601,
count=23, id=260, version=27412,
count=19, id=257, version=27412,
count=242, id=1, productName=Unmarked objects,
count=1, id=265, version=30156,
count=1, id=255, version=30156,
count=1, id=258, version=30156,
quarantine/e
- IMPHASH 4035d2883e01d64f3e7a9dccb1d63af5
- SHA256 879785b2c857249d89f97b79ccb4ce25bbb8d1c60f4d003a23fdf1913f40fa2d
- MD5 d59903af15c5257c5e274b297bec5e6d
- SHA1 1d84da470c7821a2dbcc9a788e720a4bce32c8c4
- SHA512 2ab588a14cd70fa5684d1c82d13ddf48037499b7742fe7af5408044b0776ca4610a9f3780ad2fc302a03d7ce90932219b619fa117e33bfc5f0e860c2663dd42c
- SSDEEP 24576:PYczOC1OdLK1gWGCcOom/FiK8gZDgnJI2q8qUUw27OC0gQbnLaE9Mr3JZyWU129C:PYcfgaqK8gerWwy0g3uWU12sIs
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
56:9d:6b:3d:06:78:13:6b:80:cf:4f:b5:af:e7:41:cd:59:aa:10:bb:83:2d:91:f1:ed:33:2d:c6:20:4b:54:1c
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Rocket.Chat Technologies Corp.,O=Rocket.Chat Technologies Corp.,ST=Maryland,C=US
Chains
Nov 12, 2024
PE Signature issue
Digest
04:40:33:e3:2a:9e:1e:64:3b:e2:01:88:7a:54:f6:64:23:7f:e9:14
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Rocket.Chat Technologies Corp.,O=Rocket.Chat Technologies Corp.,ST=Maryland,C=US
Chains
Nov 12, 2024
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Rocket.Chat Technologies Corp.,O=Rocket.Chat Technologies Corp.,ST=Maryland,C=US
Serial Number
03:2a:bc:74:48:d7:80:7b:1a:0e:4a:a9:77:96:8f:cf
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2022 - Aug 17, 2025
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=Rocket.Chat Technologies Corp.,O=Rocket.Chat Technologies Corp.,ST=Maryland,C=US
Serial Number
03:2a:bc:74:48:d7:80:7b:1a:0e:4a:a9:77:96:8f:cf
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2022 - Aug 17, 2025
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
1
Major OS version
6
Entry point
367632
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SuspendThread
Sleep
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
PostQueuedCompletionStatus
LoadLibraryA
LoadLibraryW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Name
.text
Size
665KB
Virtual Size
665KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
987KB
Virtual Size
987KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
70KB
Virtual Size
205KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1024B
Virtual Size
982B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
376KB
Virtual Size
375KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
.data
- SHA256 0f279946f7be8c5117842cc761d3d336349a4a513b22afbce01fedc9ad1e9c23
- MD5 fcb3dc4e13a3c3b15bd8ecaf9886a770
- SHA1 0e12229a1c6ac80fea1893f5db78dede490f7949
- SHA512 d788ce2446512a4e712d73498ea0e73beb9d13556a344dde08615b93ec133c048ca2fa03bc3095ac638eb12772ff6ae80955064e431731bfed18ed1fb7d8634f
- SSDEEP 1536:JIrx/OzxViM1t/uECrQ1RVJmejA/rc6LohBvj8kxJfN3F2:cq9UECrmRVJXjHj8O13
- MD5 SHA1 SHA512 SSDEEP
.idata
- SHA256 f0fde46e208c433bad9599123b4386785d730805538b4785fdbbdba5fb5a382e
- MD5 c0bfb3a546523e69cdbf21ca442fd1fc
- SHA1 c721ba03275d8d6ebbb327d9e429371b9427408f
- SHA512 fca50bfbad902326e4ba91210d7281b0947cc548b631bc55d168682be0ba1cc57fe79eefc6e032aa4706ee7cb19f8ec6b402ca6b06ac7495188687ff97bf2b7d
- MD5 SHA1 SHA512
.rdata
- SHA256 29dc5495a7b6878243c6db9559dfb259d1f2b83883d37e5046b26af5a789a7b7
- MD5 017d72bfa8d1eb3aab7e39a317316a5d
- SHA1 484d097dc2d4cd9d88dba8ec423144086e73c51f
- SHA512 b27df5f592301cd4594dba3bdf3cd01d0e405bc989a94d667c87947278bc413445d7e21c5b33984572861819c94e4ce6b9e2b249f88e411ecba4a707a45da64d
- SSDEEP 12288:3OGksXzNehy9qUUkV2yaOCHUgQbX3Lm/DpE9SPxhjMS1KHuHZq:e8qUUw27OC0gQbnLaE9Mr3JZ
- MD5 SHA1 SHA512 SSDEEP
.reloc
- SHA256 e87fbf741d3753a4692d7e3ac79f2e1bd8a6001411f421b09e9c981e8f2afdbc
- MD5 e703ae768cfadd1f0969d2553d70f12d
- SHA1 d9580ac4753a44095236c1116d17c53ad54b4356
- SHA512 7d5df215775225f60e7bb84cce663693ca2be7520e7859c5c22d97a0e8aac302f299ccfba869b68305cc0de245054c6710db9493320be4bc9a11709383c1710e
- SSDEEP 1536:lqyV0CEnNguZXnjCYiDvOkgDT1VeDVDcHf2:AyweAzCRgDT1acHf2
- MD5 SHA1 SHA512 SSDEEP
.rsrc/DIALOG/102
- SHA256 7854e8d67a11148566ad37c5d23e1534e0990fe31a160e0e7da3ca751830bb50
- MD5 a69caf66f3f899403f8b25b02dc61908
- SHA1 3e5db9186cf0f75be24676462d88170e5950d9c8
- SHA512 b8f5c43b1efaa529778ef8a8860101077dd99bc631c72399cf50755099b977c2c7d49e2a3dd669cf72a312ebcead788dba2b73479bf8a45f9f5837bcfd72c504
- MD5 SHA1 SHA512
.rsrc/DIALOG/103
- SHA256 c50631fc1f8425a95fd1edcc8e730d339e193a38f18d42372c32847a5ad2c016
- MD5 db6dd0434da4d7cac564518725167e09
- SHA1 a65a1367d7cd96450f089a8f8108239bbcea9f5b
- SHA512 4f0c2d1b5ebbb6760c43b9369dd90fdac6ab5e2280db9288ba9eb106642b4aa7076cb942718ae9f93cc97af79de1ef85d07e2aa4823a882956d46f5e03ff0872
- MD5 SHA1 SHA512
.rsrc/DIALOG/105
- SHA256 425b8270f7ca42a927eae6bea468acf414a3e4b58b5ba2c56aaae4d1b2c11014
- MD5 386770584473e271f23dced36427f4ff
- SHA1 d14ce95f784b35e4e3ebee535476ebcd3e380c19
- SHA512 e7bd459dc14642e2222477a05694db86e526c90333a6e0e711c91a8d5893036c09a27f75855d2b416f3da4ecb59e7a466d82b7cb7abdd56f6dabb040da34c1f3
- MD5 SHA1 SHA512
.rsrc/DIALOG/106
- SHA256 4a55bd714f5d50cd8eabba10e57f0618f1842717dcfa582d73a917b1933cd1d4
- MD5 fa83652660409e90e0db9731ad2adb17
- SHA1 0a8f0af67723c87fe26ccf676b8e19ec6357b4dc
- SHA512 d97885f9c2846a042ec3c0d01a756d22fda7a989d55cd61efbc945abcdcfd74ca0284c745cf8bebf2d2fab82718f7b57ab0b701f67d2319ca6b5f55bce663c07
- MD5 SHA1 SHA512
.rsrc/DIALOG/111
- SHA256 cb3c86cbcb579244a6f819f9c1807a7e89b6e600982ec6ea0841fcdcb16a9efd
- MD5 663040d6315b1d6ce8c0334d182ed8fc
- SHA1 ebcfff801a12fb8ad1200a4526fca8bd2c3e96cf
- SHA512 a6a4dd7641083e24e09ff1e851e26b191a46f623705098777baf0784003637577417330e78df6bdd28efc98d0cb9edd1d259cb78327946eae5e7a5117d13445f
- MD5 SHA1 SHA512
.rsrc/DIALOG/202
- SHA256 a840add98ce3e545a78516701570cc7f667edceafb59fdd5067fcf5f7f1a1f50
- MD5 b4a711ea331ef37edbdcfba3261c7d6f
- SHA1 e0637b9d34f0f7e6062d57c16b4966b82992c017
- SHA512 e69a08dd72f2cd7cef18c5af4ac57611722b7a467298220213342fe1653d896e8db9d7ea8d9990f9a64a4909d9d240c6d4265c823885216840770ba0ac9035e6
- MD5 SHA1 SHA512
.rsrc/DIALOG/203
- SHA256 85f659842e9aa525dc22d0ff4e18e14d4e4ccfc924d1fdfa03d50a0410e6c0d6
- MD5 44c009c9e1abc2355198b432965c61ef
- SHA1 4c090f75f279e474a9ca4a07ac84935aa769b0dd
- SHA512 80b4757e2fa4cbbd8bcc86551166155e44c825ff076c9eec605c8a9377d28f3ff83eaabb26e2458f03509d0cd813f168566d891c97c530c36d973f3e87f5cb32
- MD5 SHA1 SHA512
.rsrc/DIALOG/205
- SHA256 1382f1e9260b7e203ceafc6936ef1dae48898fcf8fb04a446cd27a4384bc40c3
- MD5 2c1f44c0a248a53a50a661eb9a65cdcf
- SHA1 69a0418cac4aaa30203faa1f0bdbe74fe1cc29c6
- SHA512 01a5249482c5f683e5460eb484cf0d0aea8bcf2d0cfbb20ed0f321721e722fab02be03f2b859202bf6df02d77423845e87e52e37e087a490e44f10eb9af96488
- MD5 SHA1 SHA512
.rsrc/DIALOG/206
- SHA256 012557f58e68234d4a88df0b713c59800f798ecce19dfd589d326b458dddcbd8
- MD5 c7239ce55362dabbe3887e5fc4bdf5fe
- SHA1 a2908207ffb889a12da3cbdbe7446e04b254e7ed
- SHA512 b2e9435303e7c737ca32045a24c42e47166a068852a464823d90aa7e4a16609c7653a004c3e73b8bfdba8d6d5548f372ffb0e6baf25aa277b2696f16b78f13a0
- MD5 SHA1 SHA512
.rsrc/DIALOG/211
- SHA256 8c64a2341dc473a7d8ab4956af589e9a7257c4f05a8dc229f862c16d49ba37e5
- MD5 30dab3583979c2008e8de9295ab7c36b
- SHA1 186cd9560b358bbf8b523d1050573f22bb00264d
- SHA512 a5d8d56c8cb7bd6dd5c5e71700cdc50c02a9ace1b30d51392a7ca9c7afbe3d2a291ef1b127d5070bd12b7431237588e0a3de170b7d103e38b88e9a2665d5320d
- MD5 SHA1 SHA512
.rsrc/DIALOG/302
- SHA256 7fbf793fc596333bb6b11552851aa26641d5a314d225807679428703e29e8e3c
- MD5 1ed2fb1101579baf34b084389badb21d
- SHA1 1fd06fc03e8ce1d2a1fa3d2aaa75859b92e96a94
- SHA512 e8da0d901d319b956599eb8f95a39561af271b0411a31a7c417d1f55a157895ee3ad11c8c6645dfb83de460e5543a64649d1b87fc6f3cde3a24d8021a7648e5b
- MD5 SHA1 SHA512
.rsrc/DIALOG/303
- SHA256 eb6f4dac693c6249bb157ef5cfe6057af4088d7bacfce7089e13a85f0661389a
- MD5 b21b5bb94f7cb7111620ebfb32534430
- SHA1 d4fa9452937d98ccb59bdc96660d588a5183bba9
- SHA512 dbb7aec5efea28df7e67f05aba22866e80b4f0b13aec6b138c5558525277a296e9c7e52a1134c8a8257da9333e9553350e1ed7458406725dd08d6aa779fee37b
- MD5 SHA1 SHA512
.rsrc/DIALOG/305
- SHA256 d542230218a67392c3e8d2c61f29f66f8724d837e83e9c0a49f30bdf02d722d7
- MD5 1cdff3870b4510f9c4a40874187787a2
- SHA1 a7a0949b603bcbf6fdfe4a68eeba4c06cfda442b
- SHA512 aadcd63715dbe9bb0dfb922cfc7c9e91287ee702bfd99b691e63cde1345a482e11fa1c017f8a1ee25aa6a04a1be5a4f17b022e93c916ce33442edf831d535f61
- MD5 SHA1 SHA512
.rsrc/DIALOG/306
- SHA256 ab1e3ad5b5d87630cb0f6a6671c10fe49d9c33839be0d5daeba89ec053dda92c
- MD5 cc0021533c65b44747600689ff5fbd43
- SHA1 b1d1e4594f5ad7b08d56a25cdbe6d9b9378e482b
- SHA512 20ada8e52899a9c5fe8021d96afb78dc9fa6cc01694968a5d85cb1e942c33b7575f1e803ca72b58bfa15ce197bbf4435dd91478da4b6cc48c3288472e9398c7a
- MD5 SHA1 SHA512
.rsrc/DIALOG/311
- SHA256 4677979c1665998318fcb65b9a0c0b3dd9204c12dbddbd5e76df8822ed6e347a
- MD5 408a7443d8f432b28a248059d8669d1c
- SHA1 c199828e8051a2825b1d5e216360eb57cd0b37f7
- SHA512 fca4f9c004afc87753d832e904492b25b18b57f7c326653b6c805fb01aa09f1fcc730e81b1452f159856737fdfb35f5aa24364574603d4a16abc5eed84b1198a
- MD5 SHA1 SHA512
.rsrc/DIALOG/402
- SHA256 532e2112c57a72219970c759f62865067d6d31b4e1acf97280cd8e9aaee2b59f
- MD5 fab97a8381f73abc22dadd71f1e3ddc6
- SHA1 1b7b6407f406adeb2d987f1e56bf4c253f39a239
- SHA512 175b2b3824c097414e4e69106060ad0fcb1147c9825ef22e5971ce2a3480ae5aaf87199e0ad152d32a4791dd447873b69f286d69d5a50feb1b726307de801bc7
- MD5 SHA1 SHA512
.rsrc/DIALOG/403
- SHA256 b98ac97ffc283bc465d34958c79f8a31480c0f98eb44c5e23977bee9ba52b703
- MD5 888fbcc92ebd6174786b32d45350005a
- SHA1 ba4959d06247a07012fbca926691e2e709c7aa8f
- SHA512 95605f7b09b8e2a593a069945899b8324c8af825b1b320e8783a4e9c0fec9798b4887e5f10768ae3c79ecba06b49b13492a6af44b8f8472b24ced28e5e379b09
- MD5 SHA1 SHA512
.rsrc/DIALOG/405
- SHA256 349420ba5b5de0b0081e96a686c826e0f409f2f3413f2e9fb7e6f71cb544c325
- MD5 c0c4f9be63c9d286b8d1265977ac9d86
- SHA1 f9c0d915ded3ea188f342d0e5341e67701eed813
- SHA512 c68d19d71f58221e6ed433d4733b2a8ba4d2411557a824c506de162def8b3a3913d1e2840576d81afe5afc0b1e6767d79b7df51d165d0d7cb87d60841daf1024
- MD5 SHA1 SHA512
.rsrc/DIALOG/406
- SHA256 1a39a3aabdee2aa68c507c55ff37c38722b05b7f8bde66185a2462792381d8cd
- MD5 8c69d2c81dd2d9050d0fa94df90ff16b
- SHA1 cd71d904da747d7141e5abdde9363f7e240b26bd
- SHA512 c07f491b5728a24aea2669ae0680801a1c3bc89ca9c9272b33609abcaf1f85005346ef3f7f997a314bf465ca0d4d6a05074ee4071324c77472bcbf083d58e77d
- MD5 SHA1 SHA512
.rsrc/DIALOG/411
- SHA256 a10617b39293152a65ad5c91ca4f35135845c7b785e3a582e58f6c8229045b85
- MD5 2497a44fff8b76b5129662b60a617c85
- SHA1 f73bd7c9caa4c1f7a0e4840d69b0accdc6d167a0
- SHA512 894e1d89007a8236dbf9042f6791143ab4c0502f914ab99304024adb73214cadbb253cc24fd6cf85e59b71de13237c855f991c60390a87760661d82c0fea1cb4
- MD5 SHA1 SHA512
.rsrc/DIALOG/502
- SHA256 41e897b69ea656aada8496cd365ce0a68e8cac392fa204d05decbc8e5ceb5fb4
- MD5 ac4c0f9289476de2ac0063307fdb2b5d
- SHA1 c7ba5d223d0dec4e73bad3b6c259a41c9ce3bb21
- SHA512 15c195f02a0f24790814ba252fd059c237f3ff708cb0bcfcb3476b9db8ed93ab11b1d81221674d70c0b95e7ad61c79bfb50c6883f2976b2a214d60eb3f23c5cd
- MD5 SHA1 SHA512
.rsrc/DIALOG/503
- SHA256 583b62d87b496612f7e10bf1da5113b8a4c83f0a2155184d03c0b2ec14fb5ed1
- MD5 088199de88ee4293982cec0b65748394
- SHA1 ccce70fc022137c746dfb6bf52cd785b8675768d
- SHA512 81358e6ae9b834341bfb4270cbcf437bd43902ab687ac3e053c094234e08c702219f523025feca5098d1f046f264bbc9e2c278433029212ff14577fe1ab6abcc
- MD5 SHA1 SHA512
.rsrc/DIALOG/505
- SHA256 ab979c8f6052af662e37a55c3aa42a884f0ce537317ce85f25d6c2307eb198f5
- MD5 0af4d59488d775d20c2e6725f3ed95a9
- SHA1 f7c55407fa28f7d3eb8f6a4d4b988947f57c4c4a
- SHA512 34088f447a1c93cf700fa67da1cfd578583600d9cdf4b20886b7e9ddc1adaf8897dc2668a334ec7690da0a769fe8b41facf64b86e83ed2fadc0b2468974c02f0
- MD5 SHA1 SHA512
.rsrc/DIALOG/506
- SHA256 6e7bca0054a1785929747807906d8527c2c2a231ca5975d8ebb3a3f98353f129
- MD5 c33758ab32a791644973dfd60cbf6034
- SHA1 ee7eb0a27279d39a959f5d35b6dfd4c18c7123fa
- SHA512 ec42913633e0b982328284ece5501e20785713ee008cc26e889361afde747b2c4f37cff4f885590d504c01ec30ccb6f9a06d2e1d5cc2a06a4955939cdb4dbea3
- MD5 SHA1 SHA512
.rsrc/DIALOG/511
- SHA256 65fb71b054977a55435f45bbcddddedaa1e1cf43fdd9fc230938d625c3f7edcd
- MD5 2802ee53bc08ac9a2cfaed81b3d79d05
- SHA1 b7faac6a14545ea9c03651f69ae27cce0e62b010
- SHA512 a0e35b51473d2f37674b631ca41724ab36a1eeeddc1adbe23c57f6841b7ab9ecab81308e92f5a53275fba90f399048b02ca9617d41352cb31b337e9e3c41f2a2
- MD5 SHA1 SHA512
.rsrc/DIALOG/602
- SHA256 2bf6e20d1b7aac0364482a6e48f6429cf48b8c0f744d6ff1cecbb3297416c893
- MD5 574849c09594bf406fe5f0b24d9080b8
- SHA1 38608268473fb2fcd3e0f2315a492c737546c946
- SHA512 f28f7cc3c7d0170372a95f452de4deb278ce9cf33f0166b07fc9eeaf8d6b8133554e04bee9091e6d20ef65f8cdbc4b8fc9ad212295840a9329da3ae670e2a7d1
- MD5 SHA1 SHA512
.rsrc/DIALOG/603
- SHA256 4017b96a65ef43c2d6781adc75b048ed8568f3068b81ee971154b90886766250
- MD5 12402b54eddc39fa3dae283957b4eb4c
- SHA1 beccbeac143c7c78d7271c20c73df7e797c6224b
- SHA512 28debab252216348be4bcd738e5f6ef5bccbcf9ec04bef96a4604d70ebf8603b9d4ac5270e97c57bf4054d5ea56419adb1ebdca3bb530f9034e8a90bf0af133e
- MD5 SHA1 SHA512
.rsrc/DIALOG/605
- SHA256 699e0b19b7a5592c6cd94847130b28d57bf86ea61019043b9a6a3c88e6debc3d
- MD5 16e4e392aaffaa0ee7e77b5be867e10f
- SHA1 f7f681d8ec7c8a1aaa98b7a1d6bf14cfe730bbec
- SHA512 ebc55aff872b81b8f7a71842717c86c551ce9453b8fdafb42222cde8b1d82be16c47ce3ff940a4945a91bb8b32a8a48a6c24202329b09a97f5bad0c303602b87
- MD5 SHA1 SHA512
.rsrc/DIALOG/606
- SHA256 184073a317c843cbe92b68cfacebcf5d73dedb538b3f79c048090f3ee5b614ff
- MD5 1ffe62afd7fe045c34a23ea5c9c7eb22
- SHA1 ac211007f1f7a65d868d6e9e658d5ff26dec9c8e
- SHA512 91575bff336f773a11a95f522c5963573a523e790893c5e59ecb477bb054d6bcb9d1557c4b8e45e832c0e7669defa70d66228ff5fcda424a489faaf0efd27e3e
- MD5 SHA1 SHA512
.rsrc/DIALOG/611
- SHA256 0fd40b240b9df8f2dece8947dabbebce898f12becca8e196136e4231efba2dc1
- MD5 7ce8a17102daebb8d864cd1063e987d1
- SHA1 072345a235d4947d36b53fd47da68e7e6a93fe62
- SHA512 ef6bb3aed0c38614f30ea975538d5de640ac38ae3f99f8496fb6fceb98eaef9b6ff607d5cb36fc94ab12790b113216b332fa7f9449513aa8c6f8a334fa911e60
- MD5 SHA1 SHA512
.rsrc/GROUP_ICON/103
- SHA256 0008c0960a62363cce1cdc5d478d7cf2608b235bb96c9bb291fe8ed23c40e0b7
- MD5 d659d86d1fc16cae7e8bf47f367b0114
- SHA1 2327d3e3502764c64ebe03a182d8a5393f7ceb85
- SHA512 f3db99a81fdf2f90fa73f6d354f574ebdf5502b608ad528a643045333393821fabf59e61bb957aa3460ada938f0b2a1f158bea71f4b437c87f42f65172399190
- MD5 SHA1 SHA512
.rsrc/ICON/1.ico
- SHA256 ecb434874ea3d36469a9f645c4e9cdcea842b4cf2e2bb2cc1cae3a0acd15b95d
- MD5 ebf35caa0f6f1ef8c1fd10ff4708aa53
- SHA1 59d967624b3e21a9227899b67cb8fd9d627ce7d6
- SHA512 3fa1a2152af43b5fd21ae7a06b6b12dc001edc74fe6e1191eb3ee7d4fa325f25376d9020438935b672074473b01feb01e572d3e5df78cbfee77c57456f947c49
- MD5 SHA1 SHA512
.rsrc/ICON/2.ico
- SHA256 bd180e90aa1a11f720f5de8e4f6a2d943593199639c3e4a47f1cb8c376713f09
- MD5 8a0e8d7d46edbe068a45758509095104
- SHA1 f1b5dc49c568bb5d210f954b838ceb46a0a1c3de
- SHA512 7b70d9a91c048e7a65c83f8362f05ec6876af4d2bdf2ab8c4a8efa943fd544d767fbce0aba9e70da8695ca934f6392c452947d07641136bedb6e91424d59c652
- MD5 SHA1 SHA512
.rsrc/ICON/3.ico
- SHA256 4107071c8553133ddfc88ef43221551f428d87f588bc129cf2a483decce7f1a6
- MD5 f4b8653ab1bc152a78c1dddbac79f269
- SHA1 ab606b9f850a6116574567d87874f9da8478acfd
- SHA512 faec191495a2314ae5a6b70471ba077eb1a5de348ea17cc14badb7d60c25bbb7a1e740ccd93171c63fabd127d1789d7688c688ee8b2c7ab102b6846f40e2d88e
- SSDEEP 48:BHIrn6OxpGAe3HjVRO09b/+lquwIiIB2asoJDQVrc:BHIrd03DVRl/+lGZIB2avsrc
- MD5 SHA1 SHA512 SSDEEP
.rsrc/ICON/4.ico
- SHA256 5ebcc31d8c47b4177ad82cfd32d34974f5ac08dec4781fa1eadb5067addbc2ff
- MD5 5cd980b2cd022f0482648b77e0943578
- SHA1 a60ad43a5ebeda6eff77ceef4a5d4889d8289c6c
- SHA512 be9104c02298af913d774e0d712ae67300cd520d19cfaeca24c4286e70c2dddc0a0d88e274cfba00629952d68eef853f2a412df1afd1d55601d9356dc2849dec
- SSDEEP 48:Ax4vCJbZBK8/kWT/ev5XlrMgs3PhRAXtr9AaItbbjtC:AxtJrKYk0/A5Xlrxs/hRAXF9jktC
- MD5 SHA1 SHA512 SSDEEP
.rsrc/ICON/5.ico
- SHA256 c419cff11c201dc59ac7ae8ef190441f370d73c2fbe001c1ac3062274bd1c67a
- MD5 b5286ad88fdfc397f98605082f7765f3
- SHA1 ab574122239338b7890607a69cca9c15f573baf3
- SHA512 a48b5d8f697a5c31e5932cd88dd68dda7574a0e70655428a5b6227807ccbf10c141b6b6834eabcc26c3fe661d573edb518d2fca9e2daab8c02ee6c880569fb9c
- SSDEEP 96:RJJ/sWeXVJhwXqIB4wUOn3RJCM5l/EpZjY:RJpsWMWQu8pZc
- MD5 SHA1 SHA512 SSDEEP
.rsrc/ICON/6.ico
- SHA256 3203a170862effe766d9f582442e918e0bdbbd2d8e80fc74bece629680dda399
- MD5 a9d221f8a8cd05d67d365d6d8295ce9d
- SHA1 5dbbbc4411b33cad0854e582bec03166310537a9
- SHA512 7efad4ea35a085b2e9bbf87bf65495ecaba70b9be7a43be8707d311f0e1183e9e84f680f185491f4d225e435874d15fc3fe41a8beb4c7edaaaf9d3b5719a5a19
- SSDEEP 192:dWLY16Nc7q5k4uLALSrKALuI/kzcD0YhQinJ:ULY1H7q5kNpYQ5pSQJ
- MD5 SHA1 SHA512 SSDEEP
.rsrc/ICON/7.ico
- SHA256 99ac3adf2816aa5e4254b29dfb1b4a7dc161e879373ff89a4731cf967ef9f2dc
- MD5 3d3f05165e89a74b4df13059846f172a
- SHA1 acf72cf39490d4079c612c908e2d88b8df0ca201
- SHA512 ad3325c0662e65380a0e728e998383c51ac2193f8c2292e373e77c6d49829a95329754dd9407fad1b6ecfdb38076f3ee9ee3d4ebd08f44f79d7ccb131a275818
- SSDEEP 192:4B/7Dy2yX+ySe2Rdj6KoVhACtugCCm2K+EbFoLH7Kvd66fI:dt0RdjOVYgepQbKvd66fI
- MD5 SHA1 SHA512 SSDEEP
.rsrc/MANIFEST/1
- SHA256 e4039327090739a6754db86ef1704a8a07115ceb11719c0987a9d00a77a77f16
- MD5 87d4fc207e2f334ede55ac9160602c94
- SHA1 32b9b90a524d4a352d4bf719a0c8367534b7465d
- SHA512 94b872f14fc7257f8ffd0d7a8fd982a4523554419183527a040bee824f01b29dad97ea9cd3ddad7180a53678ee94c8084a3ea92d2584ffa074e0970728da2bad
- MD5 SHA1 SHA512
.rsrc/version.txt
- SHA256 2984e68ec2f9962388253d341c47c8a2ef37df3629044ebf1ef48abf37fb4eab
- MD5 31f200fb59ad730fabdf72849c68a03a
- SHA1 66cc28f3671421f9427df60bf960a2c8ee3e0c9e
- SHA512 8a1fd7ccf253595f090b6277bf17e7c00a83914189a8233a404fbf7449e0da3833df9450bc5044b321d2dee5bfe654b754add11110b5025dd98debe8aee75a51
- MD5 SHA1 SHA512
.symtab
- SHA256 3e67f4a7d14b832ff2a2433e9cf0f6f5720821f67148a87c0ee2595a20c96c68
- MD5 07b5472d347d42780469fb2654b7fc54
- SHA1 943ae54f4818e52409fbbaf60ffd71318d966b0d
- SHA512 521dff167892b2d4fe8f3008845386e08e2777ab7a6d5717a956b3337bf5442a11c01aca9e44e1602a83ad97b704faaa74e841c3c8e7d6e82d83833c52a9802f
- MD5 SHA1 SHA512
.text
- SHA256 8b711b3f378346cfb71f7788234c18a5ce68078e1a61fe2f7b0454e82d1e9efe
- MD5 a2aa445d1b5460967421fb76140c634d
- SHA1 242746877f640e2d9663e6e3950d1cfb11983f60
- SHA512 62488a85cc39ed757c05b4585249e5095cec927e94c3bd12317e09fd0d85d9cd8d8268ff4bf78c644e3136c6101df3e5cd4e87cb95e754cafa8a15709dd90e15
- SSDEEP 12288:8YczOC1zwLYHILK1gWGCcu3om/FiK8gZDgnJI2p:8YczOC1OdLK1gWGCcOom/FiK8gZDgnJ9
- MD5 SHA1 SHA512 SSDEEP
CERTIFICATE
- SHA256 53ef748273caa790d44d22b922846e01ae5b84d99db754894f0941bb6ec553ea
- MD5 2629096dbd7f8f5c83e78c7c78be6640
- SHA1 c9ea4a035df5a39d0507d4fba3be6ea0f29f04b6
- SHA512 7aaa2ec94822c432939ae585f75568318f7387e0be36079232c21a749f5f822133eea2915968af7acaeae7be582ca1c2de7c419114066b9cdd9d7289c6f9eaaa
- SSDEEP 384:5NyogTQE34JsX8E9VFzSJIVORI2gTQE34JsAboASJIVE8E9VF0Nyg/O:uUErsEsmUEr/h2E6O
- MD5 SHA1 SHA512 SSDEEP
quarantine/f
- IMPHASH 4035d2883e01d64f3e7a9dccb1d63af5
- SHA256 879785b2c857249d89f97b79ccb4ce25bbb8d1c60f4d003a23fdf1913f40fa2d
- MD5 d59903af15c5257c5e274b297bec5e6d
- SHA1 1d84da470c7821a2dbcc9a788e720a4bce32c8c4
- SHA512 2ab588a14cd70fa5684d1c82d13ddf48037499b7742fe7af5408044b0776ca4610a9f3780ad2fc302a03d7ce90932219b619fa117e33bfc5f0e860c2663dd42c
- SSDEEP 24576:PYczOC1OdLK1gWGCcOom/FiK8gZDgnJI2q8qUUw27OC0gQbnLaE9Mr3JZyWU129C:PYcfgaqK8gerWwy0g3uWU12sIs
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
56:9d:6b:3d:06:78:13:6b:80:cf:4f:b5:af:e7:41:cd:59:aa:10:bb:83:2d:91:f1:ed:33:2d:c6:20:4b:54:1c
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Rocket.Chat Technologies Corp.,O=Rocket.Chat Technologies Corp.,ST=Maryland,C=US
Chains
Nov 12, 2024
PE Signature issue
Digest
04:40:33:e3:2a:9e:1e:64:3b:e2:01:88:7a:54:f6:64:23:7f:e9:14
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Rocket.Chat Technologies Corp.,O=Rocket.Chat Technologies Corp.,ST=Maryland,C=US
Chains
Nov 12, 2024
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Rocket.Chat Technologies Corp.,O=Rocket.Chat Technologies Corp.,ST=Maryland,C=US
Serial Number
03:2a:bc:74:48:d7:80:7b:1a:0e:4a:a9:77:96:8f:cf
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2022 - Aug 17, 2025
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=Rocket.Chat Technologies Corp.,O=Rocket.Chat Technologies Corp.,ST=Maryland,C=US
Serial Number
03:2a:bc:74:48:d7:80:7b:1a:0e:4a:a9:77:96:8f:cf
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 18, 2022 - Aug 17, 2025
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
1
Major OS version
6
Entry point
367632
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SuspendThread
Sleep
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
PostQueuedCompletionStatus
LoadLibraryA
LoadLibraryW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Name
.text
Size
665KB
Virtual Size
665KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
987KB
Virtual Size
987KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
70KB
Virtual Size
205KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1024B
Virtual Size
982B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
376KB
Virtual Size
375KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
.data
- SHA256 0f279946f7be8c5117842cc761d3d336349a4a513b22afbce01fedc9ad1e9c23
- MD5 fcb3dc4e13a3c3b15bd8ecaf9886a770
- SHA1 0e12229a1c6ac80fea1893f5db78dede490f7949
- SHA512 d788ce2446512a4e712d73498ea0e73beb9d13556a344dde08615b93ec133c048ca2fa03bc3095ac638eb12772ff6ae80955064e431731bfed18ed1fb7d8634f
- SSDEEP 1536:JIrx/OzxViM1t/uECrQ1RVJmejA/rc6LohBvj8kxJfN3F2:cq9UECrmRVJXjHj8O13
- MD5 SHA1 SHA512 SSDEEP
.idata
- SHA256 f0fde46e208c433bad9599123b4386785d730805538b4785fdbbdba5fb5a382e
- MD5 c0bfb3a546523e69cdbf21ca442fd1fc
- SHA1 c721ba03275d8d6ebbb327d9e429371b9427408f
- SHA512 fca50bfbad902326e4ba91210d7281b0947cc548b631bc55d168682be0ba1cc57fe79eefc6e032aa4706ee7cb19f8ec6b402ca6b06ac7495188687ff97bf2b7d
- MD5 SHA1 SHA512
.rdata
- SHA256 29dc5495a7b6878243c6db9559dfb259d1f2b83883d37e5046b26af5a789a7b7
- MD5 017d72bfa8d1eb3aab7e39a317316a5d
- SHA1 484d097dc2d4cd9d88dba8ec423144086e73c51f
- SHA512 b27df5f592301cd4594dba3bdf3cd01d0e405bc989a94d667c87947278bc413445d7e21c5b33984572861819c94e4ce6b9e2b249f88e411ecba4a707a45da64d
- SSDEEP 12288:3OGksXzNehy9qUUkV2yaOCHUgQbX3Lm/DpE9SPxhjMS1KHuHZq:e8qUUw27OC0gQbnLaE9Mr3JZ
- MD5 SHA1 SHA512 SSDEEP
.reloc
- SHA256 e87fbf741d3753a4692d7e3ac79f2e1bd8a6001411f421b09e9c981e8f2afdbc
- MD5 e703ae768cfadd1f0969d2553d70f12d
- SHA1 d9580ac4753a44095236c1116d17c53ad54b4356
- SHA512 7d5df215775225f60e7bb84cce663693ca2be7520e7859c5c22d97a0e8aac302f299ccfba869b68305cc0de245054c6710db9493320be4bc9a11709383c1710e
- SSDEEP 1536:lqyV0CEnNguZXnjCYiDvOkgDT1VeDVDcHf2:AyweAzCRgDT1acHf2
- MD5 SHA1 SHA512 SSDEEP
.rsrc/DIALOG/102
- SHA256 7854e8d67a11148566ad37c5d23e1534e0990fe31a160e0e7da3ca751830bb50
- MD5 a69caf66f3f899403f8b25b02dc61908
- SHA1 3e5db9186cf0f75be24676462d88170e5950d9c8
- SHA512 b8f5c43b1efaa529778ef8a8860101077dd99bc631c72399cf50755099b977c2c7d49e2a3dd669cf72a312ebcead788dba2b73479bf8a45f9f5837bcfd72c504
- MD5 SHA1 SHA512
.rsrc/DIALOG/103
- SHA256 c50631fc1f8425a95fd1edcc8e730d339e193a38f18d42372c32847a5ad2c016
- MD5 db6dd0434da4d7cac564518725167e09
- SHA1 a65a1367d7cd96450f089a8f8108239bbcea9f5b
- SHA512 4f0c2d1b5ebbb6760c43b9369dd90fdac6ab5e2280db9288ba9eb106642b4aa7076cb942718ae9f93cc97af79de1ef85d07e2aa4823a882956d46f5e03ff0872
- MD5 SHA1 SHA512
.rsrc/DIALOG/105
- SHA256 425b8270f7ca42a927eae6bea468acf414a3e4b58b5ba2c56aaae4d1b2c11014
- MD5 386770584473e271f23dced36427f4ff
- SHA1 d14ce95f784b35e4e3ebee535476ebcd3e380c19
- SHA512 e7bd459dc14642e2222477a05694db86e526c90333a6e0e711c91a8d5893036c09a27f75855d2b416f3da4ecb59e7a466d82b7cb7abdd56f6dabb040da34c1f3
- MD5 SHA1 SHA512
.rsrc/DIALOG/106
- SHA256 4a55bd714f5d50cd8eabba10e57f0618f1842717dcfa582d73a917b1933cd1d4
- MD5 fa83652660409e90e0db9731ad2adb17
- SHA1 0a8f0af67723c87fe26ccf676b8e19ec6357b4dc
- SHA512 d97885f9c2846a042ec3c0d01a756d22fda7a989d55cd61efbc945abcdcfd74ca0284c745cf8bebf2d2fab82718f7b57ab0b701f67d2319ca6b5f55bce663c07
- MD5 SHA1 SHA512
.rsrc/DIALOG/111
- SHA256 cb3c86cbcb579244a6f819f9c1807a7e89b6e600982ec6ea0841fcdcb16a9efd
- MD5 663040d6315b1d6ce8c0334d182ed8fc
- SHA1 ebcfff801a12fb8ad1200a4526fca8bd2c3e96cf
- SHA512 a6a4dd7641083e24e09ff1e851e26b191a46f623705098777baf0784003637577417330e78df6bdd28efc98d0cb9edd1d259cb78327946eae5e7a5117d13445f
- MD5 SHA1 SHA512
.rsrc/DIALOG/202
- SHA256 a840add98ce3e545a78516701570cc7f667edceafb59fdd5067fcf5f7f1a1f50
- MD5 b4a711ea331ef37edbdcfba3261c7d6f
- SHA1 e0637b9d34f0f7e6062d57c16b4966b82992c017
- SHA512 e69a08dd72f2cd7cef18c5af4ac57611722b7a467298220213342fe1653d896e8db9d7ea8d9990f9a64a4909d9d240c6d4265c823885216840770ba0ac9035e6
- MD5 SHA1 SHA512
.rsrc/DIALOG/203
- SHA256 85f659842e9aa525dc22d0ff4e18e14d4e4ccfc924d1fdfa03d50a0410e6c0d6
- MD5 44c009c9e1abc2355198b432965c61ef
- SHA1 4c090f75f279e474a9ca4a07ac84935aa769b0dd
- SHA512 80b4757e2fa4cbbd8bcc86551166155e44c825ff076c9eec605c8a9377d28f3ff83eaabb26e2458f03509d0cd813f168566d891c97c530c36d973f3e87f5cb32
- MD5 SHA1 SHA512
.rsrc/DIALOG/205
- SHA256 1382f1e9260b7e203ceafc6936ef1dae48898fcf8fb04a446cd27a4384bc40c3
- MD5 2c1f44c0a248a53a50a661eb9a65cdcf
- SHA1 69a0418cac4aaa30203faa1f0bdbe74fe1cc29c6
- SHA512 01a5249482c5f683e5460eb484cf0d0aea8bcf2d0cfbb20ed0f321721e722fab02be03f2b859202bf6df02d77423845e87e52e37e087a490e44f10eb9af96488
- MD5 SHA1 SHA512
.rsrc/DIALOG/206
- SHA256 012557f58e68234d4a88df0b713c59800f798ecce19dfd589d326b458dddcbd8
- MD5 c7239ce55362dabbe3887e5fc4bdf5fe
- SHA1 a2908207ffb889a12da3cbdbe7446e04b254e7ed
- SHA512 b2e9435303e7c737ca32045a24c42e47166a068852a464823d90aa7e4a16609c7653a004c3e73b8bfdba8d6d5548f372ffb0e6baf25aa277b2696f16b78f13a0
- MD5 SHA1 SHA512
.rsrc/DIALOG/211
- SHA256 8c64a2341dc473a7d8ab4956af589e9a7257c4f05a8dc229f862c16d49ba37e5
- MD5 30dab3583979c2008e8de9295ab7c36b
- SHA1 186cd9560b358bbf8b523d1050573f22bb00264d
- SHA512 a5d8d56c8cb7bd6dd5c5e71700cdc50c02a9ace1b30d51392a7ca9c7afbe3d2a291ef1b127d5070bd12b7431237588e0a3de170b7d103e38b88e9a2665d5320d
- MD5 SHA1 SHA512
.rsrc/DIALOG/302
- SHA256 7fbf793fc596333bb6b11552851aa26641d5a314d225807679428703e29e8e3c
- MD5 1ed2fb1101579baf34b084389badb21d
- SHA1 1fd06fc03e8ce1d2a1fa3d2aaa75859b92e96a94
- SHA512 e8da0d901d319b956599eb8f95a39561af271b0411a31a7c417d1f55a157895ee3ad11c8c6645dfb83de460e5543a64649d1b87fc6f3cde3a24d8021a7648e5b
- MD5 SHA1 SHA512
.rsrc/DIALOG/303
- SHA256 eb6f4dac693c6249bb157ef5cfe6057af4088d7bacfce7089e13a85f0661389a
- MD5 b21b5bb94f7cb7111620ebfb32534430
- SHA1 d4fa9452937d98ccb59bdc96660d588a5183bba9
- SHA512 dbb7aec5efea28df7e67f05aba22866e80b4f0b13aec6b138c5558525277a296e9c7e52a1134c8a8257da9333e9553350e1ed7458406725dd08d6aa779fee37b
- MD5 SHA1 SHA512
.rsrc/DIALOG/305
- SHA256 d542230218a67392c3e8d2c61f29f66f8724d837e83e9c0a49f30bdf02d722d7
- MD5 1cdff3870b4510f9c4a40874187787a2
- SHA1 a7a0949b603bcbf6fdfe4a68eeba4c06cfda442b
- SHA512 aadcd63715dbe9bb0dfb922cfc7c9e91287ee702bfd99b691e63cde1345a482e11fa1c017f8a1ee25aa6a04a1be5a4f17b022e93c916ce33442edf831d535f61
- MD5 SHA1 SHA512
.rsrc/DIALOG/306
- SHA256 ab1e3ad5b5d87630cb0f6a6671c10fe49d9c33839be0d5daeba89ec053dda92c
- MD5 cc0021533c65b44747600689ff5fbd43
- SHA1 b1d1e4594f5ad7b08d56a25cdbe6d9b9378e482b
- SHA512 20ada8e52899a9c5fe8021d96afb78dc9fa6cc01694968a5d85cb1e942c33b7575f1e803ca72b58bfa15ce197bbf4435dd91478da4b6cc48c3288472e9398c7a
- MD5 SHA1 SHA512
.rsrc/DIALOG/311
- SHA256 4677979c1665998318fcb65b9a0c0b3dd9204c12dbddbd5e76df8822ed6e347a
- MD5 408a7443d8f432b28a248059d8669d1c
- SHA1 c199828e8051a2825b1d5e216360eb57cd0b37f7
- SHA512 fca4f9c004afc87753d832e904492b25b18b57f7c326653b6c805fb01aa09f1fcc730e81b1452f159856737fdfb35f5aa24364574603d4a16abc5eed84b1198a
- MD5 SHA1 SHA512
.rsrc/DIALOG/402
- SHA256 532e2112c57a72219970c759f62865067d6d31b4e1acf97280cd8e9aaee2b59f
- MD5 fab97a8381f73abc22dadd71f1e3ddc6
- SHA1 1b7b6407f406adeb2d987f1e56bf4c253f39a239
- SHA512 175b2b3824c097414e4e69106060ad0fcb1147c9825ef22e5971ce2a3480ae5aaf87199e0ad152d32a4791dd447873b69f286d69d5a50feb1b726307de801bc7
- MD5 SHA1 SHA512
.rsrc/DIALOG/403
- SHA256 b98ac97ffc283bc465d34958c79f8a31480c0f98eb44c5e23977bee9ba52b703
- MD5 888fbcc92ebd6174786b32d45350005a
- SHA1 ba4959d06247a07012fbca926691e2e709c7aa8f
- SHA512 95605f7b09b8e2a593a069945899b8324c8af825b1b320e8783a4e9c0fec9798b4887e5f10768ae3c79ecba06b49b13492a6af44b8f8472b24ced28e5e379b09
- MD5 SHA1 SHA512
.rsrc/DIALOG/405
- SHA256 349420ba5b5de0b0081e96a686c826e0f409f2f3413f2e9fb7e6f71cb544c325
- MD5 c0c4f9be63c9d286b8d1265977ac9d86
- SHA1 f9c0d915ded3ea188f342d0e5341e67701eed813
- SHA512 c68d19d71f58221e6ed433d4733b2a8ba4d2411557a824c506de162def8b3a3913d1e2840576d81afe5afc0b1e6767d79b7df51d165d0d7cb87d60841daf1024
- MD5 SHA1 SHA512
.rsrc/DIALOG/406
- SHA256 1a39a3aabdee2aa68c507c55ff37c38722b05b7f8bde66185a2462792381d8cd
- MD5 8c69d2c81dd2d9050d0fa94df90ff16b
- SHA1 cd71d904da747d7141e5abdde9363f7e240b26bd
- SHA512 c07f491b5728a24aea2669ae0680801a1c3bc89ca9c9272b33609abcaf1f85005346ef3f7f997a314bf465ca0d4d6a05074ee4071324c77472bcbf083d58e77d
- MD5 SHA1 SHA512
.rsrc/DIALOG/411
- SHA256 a10617b39293152a65ad5c91ca4f35135845c7b785e3a582e58f6c8229045b85
- MD5 2497a44fff8b76b5129662b60a617c85
- SHA1 f73bd7c9caa4c1f7a0e4840d69b0accdc6d167a0
- SHA512 894e1d89007a8236dbf9042f6791143ab4c0502f914ab99304024adb73214cadbb253cc24fd6cf85e59b71de13237c855f991c60390a87760661d82c0fea1cb4
- MD5 SHA1 SHA512
.rsrc/DIALOG/502
- SHA256 41e897b69ea656aada8496cd365ce0a68e8cac392fa204d05decbc8e5ceb5fb4
- MD5 ac4c0f9289476de2ac0063307fdb2b5d
- SHA1 c7ba5d223d0dec4e73bad3b6c259a41c9ce3bb21
- SHA512 15c195f02a0f24790814ba252fd059c237f3ff708cb0bcfcb3476b9db8ed93ab11b1d81221674d70c0b95e7ad61c79bfb50c6883f2976b2a214d60eb3f23c5cd
- MD5 SHA1 SHA512
.rsrc/DIALOG/503
- SHA256 583b62d87b496612f7e10bf1da5113b8a4c83f0a2155184d03c0b2ec14fb5ed1
- MD5 088199de88ee4293982cec0b65748394
- SHA1 ccce70fc022137c746dfb6bf52cd785b8675768d
- SHA512 81358e6ae9b834341bfb4270cbcf437bd43902ab687ac3e053c094234e08c702219f523025feca5098d1f046f264bbc9e2c278433029212ff14577fe1ab6abcc
- MD5 SHA1 SHA512
.rsrc/DIALOG/505
- SHA256 ab979c8f6052af662e37a55c3aa42a884f0ce537317ce85f25d6c2307eb198f5
- MD5 0af4d59488d775d20c2e6725f3ed95a9
- SHA1 f7c55407fa28f7d3eb8f6a4d4b988947f57c4c4a
- SHA512 34088f447a1c93cf700fa67da1cfd578583600d9cdf4b20886b7e9ddc1adaf8897dc2668a334ec7690da0a769fe8b41facf64b86e83ed2fadc0b2468974c02f0
- MD5 SHA1 SHA512
.rsrc/DIALOG/506
- SHA256 6e7bca0054a1785929747807906d8527c2c2a231ca5975d8ebb3a3f98353f129
- MD5 c33758ab32a791644973dfd60cbf6034
- SHA1 ee7eb0a27279d39a959f5d35b6dfd4c18c7123fa
- SHA512 ec42913633e0b982328284ece5501e20785713ee008cc26e889361afde747b2c4f37cff4f885590d504c01ec30ccb6f9a06d2e1d5cc2a06a4955939cdb4dbea3
- MD5 SHA1 SHA512
.rsrc/DIALOG/511
- SHA256 65fb71b054977a55435f45bbcddddedaa1e1cf43fdd9fc230938d625c3f7edcd
- MD5 2802ee53bc08ac9a2cfaed81b3d79d05
- SHA1 b7faac6a14545ea9c03651f69ae27cce0e62b010
- SHA512 a0e35b51473d2f37674b631ca41724ab36a1eeeddc1adbe23c57f6841b7ab9ecab81308e92f5a53275fba90f399048b02ca9617d41352cb31b337e9e3c41f2a2
- MD5 SHA1 SHA512
.rsrc/DIALOG/602
- SHA256 2bf6e20d1b7aac0364482a6e48f6429cf48b8c0f744d6ff1cecbb3297416c893
- MD5 574849c09594bf406fe5f0b24d9080b8
- SHA1 38608268473fb2fcd3e0f2315a492c737546c946
- SHA512 f28f7cc3c7d0170372a95f452de4deb278ce9cf33f0166b07fc9eeaf8d6b8133554e04bee9091e6d20ef65f8cdbc4b8fc9ad212295840a9329da3ae670e2a7d1
- MD5 SHA1 SHA512
.rsrc/DIALOG/603
- SHA256 4017b96a65ef43c2d6781adc75b048ed8568f3068b81ee971154b90886766250
- MD5 12402b54eddc39fa3dae283957b4eb4c
- SHA1 beccbeac143c7c78d7271c20c73df7e797c6224b
- SHA512 28debab252216348be4bcd738e5f6ef5bccbcf9ec04bef96a4604d70ebf8603b9d4ac5270e97c57bf4054d5ea56419adb1ebdca3bb530f9034e8a90bf0af133e
- MD5 SHA1 SHA512
.rsrc/DIALOG/605
- SHA256 699e0b19b7a5592c6cd94847130b28d57bf86ea61019043b9a6a3c88e6debc3d
- MD5 16e4e392aaffaa0ee7e77b5be867e10f
- SHA1 f7f681d8ec7c8a1aaa98b7a1d6bf14cfe730bbec
- SHA512 ebc55aff872b81b8f7a71842717c86c551ce9453b8fdafb42222cde8b1d82be16c47ce3ff940a4945a91bb8b32a8a48a6c24202329b09a97f5bad0c303602b87
- MD5 SHA1 SHA512
.rsrc/DIALOG/606
- SHA256 184073a317c843cbe92b68cfacebcf5d73dedb538b3f79c048090f3ee5b614ff
- MD5 1ffe62afd7fe045c34a23ea5c9c7eb22
- SHA1 ac211007f1f7a65d868d6e9e658d5ff26dec9c8e
- SHA512 91575bff336f773a11a95f522c5963573a523e790893c5e59ecb477bb054d6bcb9d1557c4b8e45e832c0e7669defa70d66228ff5fcda424a489faaf0efd27e3e
- MD5 SHA1 SHA512
.rsrc/DIALOG/611
- SHA256 0fd40b240b9df8f2dece8947dabbebce898f12becca8e196136e4231efba2dc1
- MD5 7ce8a17102daebb8d864cd1063e987d1
- SHA1 072345a235d4947d36b53fd47da68e7e6a93fe62
- SHA512 ef6bb3aed0c38614f30ea975538d5de640ac38ae3f99f8496fb6fceb98eaef9b6ff607d5cb36fc94ab12790b113216b332fa7f9449513aa8c6f8a334fa911e60
- MD5 SHA1 SHA512
.rsrc/GROUP_ICON/103
- SHA256 0008c0960a62363cce1cdc5d478d7cf2608b235bb96c9bb291fe8ed23c40e0b7
- MD5 d659d86d1fc16cae7e8bf47f367b0114
- SHA1 2327d3e3502764c64ebe03a182d8a5393f7ceb85
- SHA512 f3db99a81fdf2f90fa73f6d354f574ebdf5502b608ad528a643045333393821fabf59e61bb957aa3460ada938f0b2a1f158bea71f4b437c87f42f65172399190
- MD5 SHA1 SHA512
.rsrc/ICON/1.ico
- SHA256 ecb434874ea3d36469a9f645c4e9cdcea842b4cf2e2bb2cc1cae3a0acd15b95d
- MD5 ebf35caa0f6f1ef8c1fd10ff4708aa53
- SHA1 59d967624b3e21a9227899b67cb8fd9d627ce7d6
- SHA512 3fa1a2152af43b5fd21ae7a06b6b12dc001edc74fe6e1191eb3ee7d4fa325f25376d9020438935b672074473b01feb01e572d3e5df78cbfee77c57456f947c49
- MD5 SHA1 SHA512
.rsrc/ICON/2.ico
- SHA256 bd180e90aa1a11f720f5de8e4f6a2d943593199639c3e4a47f1cb8c376713f09
- MD5 8a0e8d7d46edbe068a45758509095104
- SHA1 f1b5dc49c568bb5d210f954b838ceb46a0a1c3de
- SHA512 7b70d9a91c048e7a65c83f8362f05ec6876af4d2bdf2ab8c4a8efa943fd544d767fbce0aba9e70da8695ca934f6392c452947d07641136bedb6e91424d59c652
- MD5 SHA1 SHA512
.rsrc/ICON/3.ico
- SHA256 4107071c8553133ddfc88ef43221551f428d87f588bc129cf2a483decce7f1a6
- MD5 f4b8653ab1bc152a78c1dddbac79f269
- SHA1 ab606b9f850a6116574567d87874f9da8478acfd
- SHA512 faec191495a2314ae5a6b70471ba077eb1a5de348ea17cc14badb7d60c25bbb7a1e740ccd93171c63fabd127d1789d7688c688ee8b2c7ab102b6846f40e2d88e
- SSDEEP 48:BHIrn6OxpGAe3HjVRO09b/+lquwIiIB2asoJDQVrc:BHIrd03DVRl/+lGZIB2avsrc
- MD5 SHA1 SHA512 SSDEEP
.rsrc/ICON/4.ico
- SHA256 5ebcc31d8c47b4177ad82cfd32d34974f5ac08dec4781fa1eadb5067addbc2ff
- MD5 5cd980b2cd022f0482648b77e0943578
- SHA1 a60ad43a5ebeda6eff77ceef4a5d4889d8289c6c
- SHA512 be9104c02298af913d774e0d712ae67300cd520d19cfaeca24c4286e70c2dddc0a0d88e274cfba00629952d68eef853f2a412df1afd1d55601d9356dc2849dec
- SSDEEP 48:Ax4vCJbZBK8/kWT/ev5XlrMgs3PhRAXtr9AaItbbjtC:AxtJrKYk0/A5Xlrxs/hRAXF9jktC
- MD5 SHA1 SHA512 SSDEEP
.rsrc/ICON/5.ico
- SHA256 c419cff11c201dc59ac7ae8ef190441f370d73c2fbe001c1ac3062274bd1c67a
- MD5 b5286ad88fdfc397f98605082f7765f3
- SHA1 ab574122239338b7890607a69cca9c15f573baf3
- SHA512 a48b5d8f697a5c31e5932cd88dd68dda7574a0e70655428a5b6227807ccbf10c141b6b6834eabcc26c3fe661d573edb518d2fca9e2daab8c02ee6c880569fb9c
- SSDEEP 96:RJJ/sWeXVJhwXqIB4wUOn3RJCM5l/EpZjY:RJpsWMWQu8pZc
- MD5 SHA1 SHA512 SSDEEP
.rsrc/ICON/6.ico
- SHA256 3203a170862effe766d9f582442e918e0bdbbd2d8e80fc74bece629680dda399
- MD5 a9d221f8a8cd05d67d365d6d8295ce9d
- SHA1 5dbbbc4411b33cad0854e582bec03166310537a9
- SHA512 7efad4ea35a085b2e9bbf87bf65495ecaba70b9be7a43be8707d311f0e1183e9e84f680f185491f4d225e435874d15fc3fe41a8beb4c7edaaaf9d3b5719a5a19
- SSDEEP 192:dWLY16Nc7q5k4uLALSrKALuI/kzcD0YhQinJ:ULY1H7q5kNpYQ5pSQJ
- MD5 SHA1 SHA512 SSDEEP
.rsrc/ICON/7.ico
- SHA256 99ac3adf2816aa5e4254b29dfb1b4a7dc161e879373ff89a4731cf967ef9f2dc
- MD5 3d3f05165e89a74b4df13059846f172a
- SHA1 acf72cf39490d4079c612c908e2d88b8df0ca201
- SHA512 ad3325c0662e65380a0e728e998383c51ac2193f8c2292e373e77c6d49829a95329754dd9407fad1b6ecfdb38076f3ee9ee3d4ebd08f44f79d7ccb131a275818
- SSDEEP 192:4B/7Dy2yX+ySe2Rdj6KoVhACtugCCm2K+EbFoLH7Kvd66fI:dt0RdjOVYgepQbKvd66fI
- MD5 SHA1 SHA512 SSDEEP
.rsrc/MANIFEST/1
- SHA256 e4039327090739a6754db86ef1704a8a07115ceb11719c0987a9d00a77a77f16
- MD5 87d4fc207e2f334ede55ac9160602c94
- SHA1 32b9b90a524d4a352d4bf719a0c8367534b7465d
- SHA512 94b872f14fc7257f8ffd0d7a8fd982a4523554419183527a040bee824f01b29dad97ea9cd3ddad7180a53678ee94c8084a3ea92d2584ffa074e0970728da2bad
- MD5 SHA1 SHA512
.rsrc/version.txt
- SHA256 2984e68ec2f9962388253d341c47c8a2ef37df3629044ebf1ef48abf37fb4eab
- MD5 31f200fb59ad730fabdf72849c68a03a
- SHA1 66cc28f3671421f9427df60bf960a2c8ee3e0c9e
- SHA512 8a1fd7ccf253595f090b6277bf17e7c00a83914189a8233a404fbf7449e0da3833df9450bc5044b321d2dee5bfe654b754add11110b5025dd98debe8aee75a51
- MD5 SHA1 SHA512
.symtab
- SHA256 3e67f4a7d14b832ff2a2433e9cf0f6f5720821f67148a87c0ee2595a20c96c68
- MD5 07b5472d347d42780469fb2654b7fc54
- SHA1 943ae54f4818e52409fbbaf60ffd71318d966b0d
- SHA512 521dff167892b2d4fe8f3008845386e08e2777ab7a6d5717a956b3337bf5442a11c01aca9e44e1602a83ad97b704faaa74e841c3c8e7d6e82d83833c52a9802f
- MD5 SHA1 SHA512
.text
- SHA256 8b711b3f378346cfb71f7788234c18a5ce68078e1a61fe2f7b0454e82d1e9efe
- MD5 a2aa445d1b5460967421fb76140c634d
- SHA1 242746877f640e2d9663e6e3950d1cfb11983f60
- SHA512 62488a85cc39ed757c05b4585249e5095cec927e94c3bd12317e09fd0d85d9cd8d8268ff4bf78c644e3136c6101df3e5cd4e87cb95e754cafa8a15709dd90e15
- SSDEEP 12288:8YczOC1zwLYHILK1gWGCcu3om/FiK8gZDgnJI2p:8YczOC1OdLK1gWGCcOom/FiK8gZDgnJ9
- MD5 SHA1 SHA512 SSDEEP
CERTIFICATE
- SHA256 53ef748273caa790d44d22b922846e01ae5b84d99db754894f0941bb6ec553ea
- MD5 2629096dbd7f8f5c83e78c7c78be6640
- SHA1 c9ea4a035df5a39d0507d4fba3be6ea0f29f04b6
- SHA512 7aaa2ec94822c432939ae585f75568318f7387e0be36079232c21a749f5f822133eea2915968af7acaeae7be582ca1c2de7c419114066b9cdd9d7289c6f9eaaa
- SSDEEP 384:5NyogTQE34JsX8E9VFzSJIVORI2gTQE34JsAboASJIVE8E9VF0Nyg/O:uUErsEsmUEr/h2E6O
- MD5 SHA1 SHA512 SSDEEP
quarantine/g.exe
- IMPHASH 2eabe9054cad5152567f0699947a2c5b
- SHA256 162d2eec1e9bbec8f7e160053cf1ea77f080c24df69ac427f474e468f955d1b6
- MD5 817caec31605801a67c847f63ce7bb20
- SHA1 f023444245b780be58b0c6672a56a7deb8597424
- SHA512 ca8abae689f303dab56eeaa8b29b89498c193693563c6fcd2419faf514062865c64b3e9894ec19e923051d458736f1b5efa28234e21ea7acc2ada881aa2fa936
- SSDEEP 49152:sQ3Pn97NaY/N33EQDG+PorCzTpTCmlH5TYDxNlCKvzvPrmtWIEb:sQ3Pn97wYdlDno+VfH4CKjruQ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
34:1d:2e:3c:03:7c:5f:ae:8b:dc:2c:75:ed:46:08:70:da:cd:3a:a7:d0:1b:df:8d:27:41:1a:01:78:ce:d7:1d
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=87331519,CN=Martin Prikryl,O=Martin Prikryl,L=Prague,C=CZ,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302435a
Chains
Nov 25, 2024
SERIALNUMBER=87331519,CN=Martin Prikryl,O=Martin Prikryl,L=Prague,C=CZ,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302435a
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=87331519,CN=Martin Prikryl,O=Martin Prikryl,L=Prague,C=CZ,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302435a
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
5e:22:99:a4:17:d4:46:60:53:08:99:92:7e:61:af:a8:c7:d4:b9:83
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=87331519,CN=Martin Prikryl,O=Martin Prikryl,L=Prague,C=CZ,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302435a
Chains
Nov 25, 2024
SERIALNUMBER=87331519,CN=Martin Prikryl,O=Martin Prikryl,L=Prague,C=CZ,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302435a
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=87331519,CN=Martin Prikryl,O=Martin Prikryl,L=Prague,C=CZ,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302435a
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
SERIALNUMBER=87331519,CN=Martin Prikryl,O=Martin Prikryl,L=Prague,C=CZ,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302435a
Serial Number
04:29:2e:45:12:50:96:fe:6d:57:ab:7c:64:8a:a1:18
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 24, 2022 - Feb 17, 2026
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=87331519,CN=Martin Prikryl,O=Martin Prikryl,L=Prague,C=CZ,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302435a
Serial Number
04:29:2e:45:12:50:96:fe:6d:57:ab:7c:64:8a:a1:18
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 24, 2022 - Feb 17, 2026
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
4919296
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
lstrcpy
Name
Size
432KB
Virtual Size
432KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
836B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
tqrrrulp
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
gsiefrxm
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.taggant
Size
8KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=13, id=259, version=27412,
count=186, id=261, version=27412,
count=18, id=260, version=30034,
count=22, id=259, version=30034,
count=89, id=261, version=30034,
count=2, id=253, version=23601,
count=23, id=260, version=27412,
count=19, id=257, version=27412,
count=242, id=1, productName=Unmarked objects,
count=1, id=265, version=30156,
count=1, id=255, version=30156,
count=1, id=258, version=30156,
quarantine/h
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 94c256f4b3313e68f351ceabccc2dcdf81583f118d0e8ccbac74e8165bbf3047
- MD5 a43d79a6456eefe4bc9fee38bfe7b8f7
- SHA1 8f8d0183e4ed13ed8ba02e647705b0782ca65061
- SHA512 7cdb870740e1f7d5aa1103d060eb31336c6634f13b02cc17dced0b462f5a7088934cdd327e86e8e2b9bb01fc300787cb16c5f353cf70afd237c1a9d53bf6f093
- SSDEEP 3072:sSZ5ygjWYvFJ9hQO+9sgbcUieNJqKoPC5+LM:sSZ6Y9J9OwK3qKoa
- MD5 SHA1 SHA512 SSDEEP
-
Detect Xworm Payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
47102
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
133KB
Virtual Size
133KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
quarantine/j
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 8c3af9b8fdd734699dd7bd451f0efd5e10da99aadd37ef20b9d98a79ad53c552
- MD5 76a1de8dc8bff924e884ade0a7ac4967
- SHA1 f9b2ac72407ffdbc2699f3a3292f22a391d5254f
- SHA512 461b29e801ed1980ad8cb07dcf96a652351317592281907d0b773b3bf378df28d1ea3de7bdfc459662c176369b48abcdbac0ef481c389525b00aa91de0f258d8
- SSDEEP 3072:LugZ2Ys/rymetzeOyewSYs/rymetzeOyew:yjTrJCeOye5TrJCeOye
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
14034
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.css
Size
63KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.css
Size
63KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE