4417150163a2637ecf0d024ed08a3d93d703ba583c976e069f03e0c6049bf206
- SHA256 4417150163a2637ecf0d024ed08a3d93d703ba583c976e069f03e0c6049bf206
Overview
overview
10Static
static
3Akdas_ Sil...df.exe
windows10-2004-x64
10Akdas_ Sil...df.exe
windows11-21h2-x64
10Akdas_ Sil...lf.dll
windows10-2004-x64
1Akdas_ Sil...ef.dll
windows10-2004-x64
10Akdas_ Sil...ef.dll
windows11-21h2-x64
10Akdas_ Sil...ib.dll
windows10-2004-x64
1Akdas_ Sil...ib.dll
windows11-21h2-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf.exe
Resource
win10v2004-20250610-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf.exe
Resource
win11-20250619-en
windows11-21h2-x64
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/chrome_elf.dll
Resource
win10v2004-20250502-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/libcef.dll
Resource
win10v2004-20250619-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral5
Sample
Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/libcef.dll
Resource
win11-20250619-en
windows11-21h2-x64
12 signatures
150 seconds
Behavioral task
behavioral6
Sample
Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/mscorlib.dll
Resource
win10v2004-20250610-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/mscorlib.dll
Resource
win11-20250619-en
windows11-21h2-x64
0 signatures
150 seconds
General
- Target 4417150163a2637ecf0d024ed08a3d93d703ba583c976e069f03e0c6049bf206
- Size 2.3MB
- Sample250718-e3e4fsvnt3
- SHA256 4417150163a2637ecf0d024ed08a3d93d703ba583c976e069f03e0c6049bf206
- MD5 76eefedc91c49586efc59994ec989ec3
- SHA1 b5f20081304e9b9d2279bcdb5857932b9224f5a9
- SHA512 ab6e714f04cfecf35886cb93c58994a7273f5d9ca7674b9de4fc6b5e6d26900a3197818d7909497f2559dc5e09f21842f232bb1e97f1626ff651456806f31f49
- SSDEEP 49152:GGWv3SJ7saH4hMC/WgJWkQSi3Pw73K7O3F3xLElESYvLL:1IuQaH4hhWg8Si3Pw767O3F3rLL
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/libcef.dll
File Explorer
-
4417150163a2637ecf0d024ed08a3d93d703ba583c976e069f03e0c6049bf206.zip 2.3MB
-
Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf.exe.exe 549KB
-
Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/chrome_elf.dll.dll 1.3MB
-
Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/libcef.dll.dll 3.6MB
-
Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/mscorlib.dll83KB
Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf.exe
- IMPHASH 88a95680951ef6b2e8a8635fff8be619
- SHA256 7af238050b2750da760b2cf5053bcf58054bcf44e9af1617d8b7af3ed98d09c6
- MD5 86f01e9421980f5e30c7fe0e6a254d98
- SHA1 4d368e20a5876fc5aa865c8c266ceef2c9fe8c79
- SHA512 5590261284e55c09bb923a04832c99f35a3c40ad4f0c683cf388bf1db70a44341f53247c82718a8a9c55f12d767d9b2cc481a6cef5a94c5524ffb873eb32d1c7
- SSDEEP 6144:Nu0azWFoCQhibmR0q7Op6ia56q3maD+BcnF500n291R96IKS:80azWF8hiq76W6qT+Bcn29buS
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29
Issuer
CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2023-001272252,CN=OBS Project\, LLC,O=OBS Project\, LLC,L=Sheridan,ST=Wyoming,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0d:41:6a:06:83:b8:c1:91:de:e8:de:ee:c5:4d:ab:37
Issuer
CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 28, 2024 - Jan 27, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
290784
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\obs-studio\obs-studio\build_x64\plugins\obs-browser\Release\obs-browser-page.pdb
libcef
cef_v8value_create_null
cef_string_multimap_free
cef_string_multimap_alloc
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_command_line_create
cef_string_map_free
cef_string_map_alloc
cef_process_message_create
cef_v8context_get_current_context
cef_v8value_create_function
cef_v8value_create_array
cef_v8value_create_object
cef_v8value_create_string
cef_v8value_create_double
cef_v8value_create_int
cef_v8value_create_bool
cef_string_utf16_cmp
cef_log
cef_api_hash
cef_parse_json
cef_execute_process
cef_string_list_free
cef_string_list_alloc
cef_string_userfree_utf16_free
cef_string_utf8_clear
cef_string_utf8_to_utf16
cef_string_utf16_to_utf8
cef_string_utf16_clear
cef_string_utf16_set
kernel32
GetCurrentThreadId
WriteConsoleW
CreateFileW
HeapSize
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
SetFilePointerEx
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetFileType
HeapAlloc
HeapFree
WriteFile
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetStringTypeW
GetProcAddress
GetModuleHandleW
GetSystemTimeAsFileTime
MultiByteToWideChar
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
WakeAllConditionVariable
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
WideCharToMultiByte
GetExitCodeThread
WaitForSingleObjectEx
SetLastError
GetLastError
CloseHandle
GetCurrentProcessId
GetCommandLineW
GetCurrentProcess
SetProcessInformation
TerminateProcess
WaitForMultipleObjects
WaitForSingleObject
OpenProcess
CreateEventW
SetEvent
user32
PostThreadMessageW
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Name
.text
Size
386KB
Virtual Size
385KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
119KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=30795,
count=162, id=261, version=30795,
count=16, id=260, version=30795,
count=10, id=259, version=35207,
count=16, id=260, version=35207,
count=89, id=261, version=35207,
count=4, id=257, version=30795,
count=3, productName=Unmarked objects (old),
count=261, id=1, productName=Unmarked objects,
count=124, id=261, version=34438,
count=2, id=265, version=35211,
count=1, id=256, version=35211,
count=1, id=255, version=35211,
count=1, id=258, version=35211,
Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/chrome_elf.dll
- IMPHASH bed4a6c588980566959bd780d50912c1
- SHA256 13f451d72d1f7810aec40cfa00e7977bbd98ed455fbf9eb61fc25d7f46f46dce
- MD5 c375cf85b05c6597d6e4d398718f0a3f
- SHA1 ecac76d20e279f3e0539e8d20741c23fc78c1c70
- SHA512 6f814cc8d985dacd0c3adc13420c2ad520948e3f1f4ba5b944ef9d1f010e3c7360383f45f90ab1d61563a9575c12afb704b9b6787b4e641db69b5319856e3168
- SSDEEP 12288:j/f1F0MPSz0rARQtLCEcQLpYoo1dokv7ca7thH0j0cO24F7cP56Sg0eDyoBng:tSwrAQYEcwpYoo1dfvwEHLABdC+eng
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29
Issuer
CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2023-001272252,CN=OBS Project\, LLC,O=OBS Project\, LLC,L=Sheridan,ST=Wyoming,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0d:41:6a:06:83:b8:c1:91:de:e8:de:ee:c5:4d:ab:37
Issuer
CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 28, 2024 - Jan 27, 2027
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 26, 2024 - Nov 25, 2035
Minor OS version
0
Major OS version
10
Entry point
403696
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
chrome_elf.dll.pdb
kernel32
AcquireSRWLockExclusive
AddVectoredExceptionHandler
CloseHandle
CompareStringW
CreateDirectoryW
CreateEventW
CreateFileW
CreateMutexW
CreateNamedPipeW
CreateProcessW
CreateRemoteThread
CreateThread
DeleteCriticalSection
DeleteFileW
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetComputerNameExW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDriveTypeW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessId
GetProductInfo
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetThreadPriority
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
GetWindowsDirectoryW
InitOnceExecuteOnce
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWow64Process
K32GetMappedFileNameW
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
LockFileEx
MultiByteToWideChar
OpenProcess
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
QueryThreadCycleTime
RaiseException
ReadConsoleW
ReadFile
ReadProcessMemory
ReleaseMutex
ReleaseSRWLockExclusive
RemoveDirectoryW
RemoveVectoredExceptionHandler
RtlCaptureContext
RtlCaptureStackBackTrace
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetNamedPipeHandleState
SetProcessMitigationPolicy
SetStdHandle
SetThreadInformation
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SleepEx
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
UnlockFileEx
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualProtectEx
VirtualQuery
WaitForSingleObject
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
WerRegisterRuntimeExceptionModule
WideCharToMultiByte
WriteConsoleW
WriteFile
WriteProcessMemory
lstrcmpiA
lstrlenA
ntdll
NtClose
NtCreateKey
NtDeleteKey
NtOpenKeyEx
NtQueryValueKey
NtSetValueKey
RtlFormatCurrentUserKeyPath
RtlFreeUnicodeString
RtlInitUnicodeString
ClearReportsBetween_ExportThunk
CrashForException_ExportThunk
DisableHook
DrainLog
DumpHungProcessWithPtype_ExportThunk
DumpProcessWithoutCrash
GetApplyHookResult
GetBlockedModulesCount
GetCrashReports_ExportThunk
GetCrashpadDatabasePath_ExportThunk
GetHandleVerifier
GetInstallDetailsPayload
GetUniqueBlockedModulesCount
GetUserDataDirectoryThunk
InjectDumpForHungInput_ExportThunk
IsBrowserProcess
IsCrashReportingEnabledImpl
IsExtensionPointDisableSet
IsThirdPartyInitialized
RegisterLogNotification
RequestSingleCrashUpload_ExportThunk
SetCrashKeyValueImpl
SetMetricsClientId
SetUploadConsent_ExportThunk
SignalChromeElf
SignalInitializeCrashReporting
Name
.text
Size
902KB
Virtual Size
901KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
176KB
Virtual Size
176KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
156KB
Virtual Size
197KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.crthunk
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gxfg
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.retplne
Size
512B
Virtual Size
140B
Characteristics
Name
.tls
Size
512B
Virtual Size
362B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
CPADinfo
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/libcef.dll
- IMPHASH 2d6a3134ff1bc2f92ba274ab168c8b56
- SHA256 bc3d5a532fd9f1a817883989997bce7c22c680ef5f4a8ff98cd604392a7b1fae
- MD5 d41c6245df841a5eca6b1e13b7cdace5
- SHA1 001df4ab11c23de7aaa386111ca99003436ed56b
- SHA512 93768eb508cc3800043c3fff6777a7c0b317a3326fa07596c065dbbbe2f7dbebaf5409dfdcd69f4609a5fe8f7ae13d79fca87eff9a4e2fe37f7ed97cf8f17202
- SSDEEP 49152:pOl6gRzm9XoycUKTkB+1F4KcgFC2SLwPWgQIl9:Wr11ZPWc
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
448328
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Windows\wow64_microsoft-windows-convert_31bf3856ad364e35_10.0.20348.1_none_3098f291a5b98c73\sk\2.pdb
advapi32
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
EventWrite
EventRegister
EventEnabled
bcrypt
BCryptCreateHash
BCryptCloseAlgorithmProvider
BCryptFinishHash
BCryptGetProperty
BCryptDestroyHash
BCryptGenRandom
BCryptHashData
BCryptOpenAlgorithmProvider
kernel32
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RaiseException
RtlPcToFileHeader
InterlockedFlushSList
CloseThreadpoolIo
SetLastError
GetLastError
GetCurrentProcessId
MultiByteToWideChar
GetStdHandle
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToSystemTime
GetSystemTime
GetCalendarInfoEx
CompareStringOrdinal
CompareStringEx
FindNLSStringEx
GetLocaleInfoEx
ResolveLocaleName
GetUserPreferredUILanguages
FindStringOrdinal
GetTickCount64
GetCurrentProcessorNumber
GetCurrentProcess
GetCurrentThread
Sleep
InitializeCriticalSection
InitializeConditionVariable
DeleteCriticalSection
LocalFree
EnterCriticalSection
SleepConditionVariableCS
LeaveCriticalSection
WakeConditionVariable
WaitForMultipleObjectsEx
GetFullPathNameW
GetLongPathNameW
WideCharToMultiByte
LocalAlloc
GetConsoleOutputCP
GetProcAddress
RaiseFailFastException
CreateThreadpoolIo
StartThreadpoolIo
CancelThreadpoolIo
LocaleNameToLCID
LCMapStringEx
EnumTimeFormatsEx
EnumCalendarInfoExEx
CreateDirectoryW
CreateFileW
DeleteFileW
DeviceIoControl
ExpandEnvironmentStringsW
FindClose
FindFirstFileExW
FreeLibrary
GetFileAttributesExW
GetFileInformationByHandleEx
GetFileType
GetModuleFileNameW
GetOverlappedResult
GetSystemDirectoryW
LoadLibraryExW
ReadFile
SetFileInformationByHandle
SetThreadErrorMode
DuplicateHandle
GetThreadPriority
SetThreadPriority
GetDynamicTimeZoneInformation
GetTimeZoneInformation
WriteFile
CloseHandle
SetEvent
CreateEventExW
GetEnvironmentVariableW
FormatMessageW
LoadLibraryW
FreeConsole
K32EnumProcessModulesEx
IsWow64Process
GetExitCodeProcess
TerminateProcess
OpenProcess
K32EnumProcesses
K32GetModuleInformation
K32GetModuleBaseNameW
K32GetModuleFileNameExW
GetProcessId
GetCPInfoExW
GetConsoleMode
ReadConsoleW
WriteConsoleW
FlushProcessWriteBuffers
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThreadId
WaitForSingleObjectEx
RtlVirtualUnwind
RtlCaptureContext
RtlRestoreContext
AddVectoredExceptionHandler
FlsAlloc
FlsGetValue
FlsSetValue
CreateEventW
SwitchToThread
CreateThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
QueryInformationJobObject
GetModuleHandleW
GetModuleHandleExW
GetProcessAffinityMask
InitializeContext
GetEnabledXStateFeatures
SetXStateFeaturesMask
VirtualQuery
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
ResetEvent
DebugBreak
WaitForSingleObject
SleepEx
GlobalMemoryStatusEx
GetSystemInfo
GetTickCount
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
GetLargePageMinimum
VirtualUnlock
GetWriteWatch
ResetWriteWatch
VirtualAllocExNuma
IsProcessInJob
GetNumaHighestNodeNumber
GetProcessGroupAffinity
K32GetProcessMemoryInfo
RtlUnwindEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlLookupFunctionEntry
InitializeSListHead
InitializeCriticalSectionAndSpinCount
ole32
CoCreateGuid
CoGetApartmentType
CoInitializeEx
CoUninitialize
CoTaskMemFree
CoWaitForMultipleHandles
CoTaskMemAlloc
secur32
GetUserNameExW
user32
LoadStringW
api-ms-win-crt-math-l1-1-0
modf
tan
sin
pow
floor
cos
ceil
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
calloc
api-ms-win-crt-string-l1-1-0
strcpy_s
strncpy_s
_stricmp
wcsncmp
_wcsicmp
strcmp
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_initialize_onexit_table
_execute_onexit_table
_crt_atexit
_initialize_narrow_environment
_cexit
_initterm
_configure_narrow_argv
_seh_filter_dll
abort
_initterm_e
terminate
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsscanf
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsprintf_s
AddRangeWriteAsyncd37getThread
AsyncFlowControlSetAddOnMethodFailedAssemblyInfo
AwayFromZerogetEventProviderGetMaskUpToLowestSetBit
CrashForExceptionInNonABICompliantCodeRange
CustomAttributeNamedParameterHaveSecondgetStreamingContext
ExportedTypesIsUnmanagedAttributeIndexOf
FusedMultiplySubtractByScalarSetNoGCInProgress
FusedMultiplySubtractScalarS400DQInformationalVersion
GetHandleVerifier
IsCompliantReceiveManifestEnvelope
IsCrashReportingEnabledImpl
IsSandboxedProcess
KOREAcDisplayClass110WriteUInt64LittleEndian
MoveHighToLowFusedMultiplyAddByScalarCreateOptions
RelaunchChromeBrowserWithNewCommandLineIfNeeded
SetCrashKeyValueImpl
StlocgetIsInvalidVTVOID
StrongRightToLeftAddMinutessetUnixFileMode
TKINDUNIONVTCLSIDRoundToNearest
TupleSlim2DateTimeFormatFlagsToTimeSpan
WaitAnyExecutionContextIsSealed
cef_add_cross_origin_whitelist_entry
cef_api_hash
cef_base64decode
cef_base64encode
cef_basetime_now
cef_begin_tracing
cef_binary_value_create
cef_browser_host_create_browser
cef_browser_host_create_browser_sync
cef_browser_view_create
cef_browser_view_get_for_browser
cef_clear_cross_origin_whitelist
cef_clear_scheme_handler_factories
cef_command_line_create
cef_command_line_get_global
cef_cookie_manager_get_global_manager
cef_crash_reporting_enabled
cef_create_context_shared
cef_create_directory
cef_create_new_temp_directory
cef_create_temp_directory_in_directory
cef_create_url
cef_currently_on
cef_delete_file
cef_dictionary_value_create
cef_directory_exists
cef_display_convert_screen_point_from_pixels
cef_display_convert_screen_point_to_pixels
cef_display_convert_screen_rect_from_pixels
cef_display_convert_screen_rect_to_pixels
cef_display_get_alls
cef_display_get_count
cef_display_get_matching_bounds
cef_display_get_nearest_point
cef_display_get_primary
cef_do_message_loop_work
cef_drag_data_create
cef_end_tracing
cef_execute_java_script_with_user_gesture_for_tests
cef_execute_process
cef_format_url_for_security_display
cef_get_current_platform_thread_handle
cef_get_current_platform_thread_id
cef_get_exit_code
cef_get_extensions_for_mime_type
cef_get_mime_type
cef_get_min_log_level
cef_get_path
cef_get_temp_directory
cef_get_vlog_level
cef_image_create
cef_initialize
cef_is_cert_status_error
cef_is_feature_enabled_for_tests
cef_is_rtl
cef_label_button_create
cef_launch_process
cef_list_value_create
cef_load_crlsets_file
cef_log
cef_media_router_get_global
cef_menu_button_create
cef_menu_model_create
cef_now_from_system_trace_time
cef_panel_create
cef_parse_json
cef_parse_json_buffer
cef_parse_jsonand_return_error
cef_parse_url
cef_post_data_create
cef_post_data_element_create
cef_post_delayed_task
cef_post_task
cef_preference_manager_get_global
cef_print_settings_create
cef_process_message_create
cef_quit_message_loop
cef_register_extension
cef_register_scheme_handler_factory
cef_remove_cross_origin_whitelist_entry
cef_request_context_create_context
cef_request_context_get_global_context
cef_request_create
cef_resolve_url
cef_resource_bundle_get_global
cef_response_create
cef_run_message_loop
cef_scroll_view_create
cef_server_create
cef_set_crash_key_value
cef_set_data_directory_for_tests
cef_set_osmodal_loop
cef_shared_process_message_builder_create
cef_shutdown
cef_stream_reader_create_for_data
cef_stream_reader_create_for_file
cef_stream_reader_create_for_handler
cef_stream_writer_create_for_file
cef_stream_writer_create_for_handler
cef_string_ascii_to_utf16
cef_string_ascii_to_wide
cef_string_list_alloc
cef_string_list_append
cef_string_list_clear
cef_string_list_copy
cef_string_list_free
cef_string_list_size
cef_string_list_value
cef_string_map_alloc
cef_string_map_append
cef_string_map_clear
cef_string_map_find
cef_string_map_free
cef_string_map_key
cef_string_map_size
cef_string_map_value
cef_string_multimap_alloc
cef_string_multimap_append
cef_string_multimap_clear
cef_string_multimap_enumerate
cef_string_multimap_find_count
cef_string_multimap_free
cef_string_multimap_key
cef_string_multimap_size
cef_string_multimap_value
cef_string_userfree_utf16_alloc
cef_string_userfree_utf16_free
cef_string_userfree_utf8_alloc
cef_string_userfree_utf8_free
cef_string_userfree_wide_alloc
cef_string_userfree_wide_free
cef_string_utf16_clear
cef_string_utf16_cmp
cef_string_utf16_set
cef_string_utf16_to_lower
cef_string_utf16_to_upper
cef_string_utf16_to_utf8
cef_string_utf16_to_wide
cef_string_utf8_clear
cef_string_utf8_cmp
cef_string_utf8_set
cef_string_utf8_to_utf16
cef_string_utf8_to_wide
cef_string_wide_clear
cef_string_wide_cmp
cef_string_wide_set
cef_string_wide_to_utf16
cef_string_wide_to_utf8
cef_task_runner_get_for_current_thread
cef_task_runner_get_for_thread
cef_test_server_create_and_start
cef_textfield_create
cef_thread_create
cef_time_delta
cef_time_from_basetime
cef_time_from_doublet
cef_time_from_timet
cef_time_now
cef_time_to_basetime
cef_time_to_doublet
cef_time_to_timet
cef_trace_counter
cef_trace_counter_id
cef_trace_event_async_begin
cef_trace_event_async_end
cef_trace_event_async_step_into
cef_trace_event_async_step_past
cef_trace_event_begin
cef_trace_event_end
cef_trace_event_instant
cef_translator_test_create
cef_translator_test_ref_ptr_library_child_child_create
cef_translator_test_ref_ptr_library_child_create
cef_translator_test_ref_ptr_library_create
cef_translator_test_scoped_library_child_child_create
cef_translator_test_scoped_library_child_create
cef_translator_test_scoped_library_create
cef_uridecode
cef_uriencode
cef_urlrequest_create
cef_v8context_get_current_context
cef_v8context_get_entered_context
cef_v8context_in_context
cef_v8stack_trace_get_current
cef_v8value_create_array
cef_v8value_create_array_buffer
cef_v8value_create_bool
cef_v8value_create_date
cef_v8value_create_double
cef_v8value_create_function
cef_v8value_create_int
cef_v8value_create_null
cef_v8value_create_object
cef_v8value_create_promise
cef_v8value_create_string
cef_v8value_create_uint
cef_v8value_create_undefined
cef_value_create
cef_version_info
cef_waitable_event_create
cef_window_create_top_level
cef_write_json
cef_xml_reader_create
cef_zip_directory
cef_zip_reader_create
getCreationOptionsCreateFloatingDateRuleDoesNotReturnAttribute
getTimeStampgetOneNonEventAttribute
opUnaryPlusDomainUnloadHebrewEra
sqlite3_dbdata_init
Name
.text
Size
460KB
Virtual Size
459KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.managed
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
129KB
Virtual Size
189KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
126KB
Virtual Size
125KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
66KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=40, id=261, version=30625,
count=10, id=260, version=30625,
count=9, id=259, version=30625,
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=13, id=257, version=30795,
count=240, id=1, productName=Unmarked objects,
count=12, id=259, version=32537,
count=69, id=261, version=32537,
count=1, productName=Unmarked objects (old),
count=1, id=256, version=30715,
count=1, id=255, version=30715,
count=1, id=258, version=30715,
Akdas_ Silah Temmuz 2025 - Kreatif Hizmetler Faturas-pdf/mscorlib.dll
- SHA256 54e177081447ced07441ae7c5318443263a403813f8a33ba39591d433cb70f0a
- MD5 48174776fee928196c0228afa4715139
- SHA1 9718eea43b2599c7203808482a175ed4f4aa48aa
- SHA512 d666c41da2746e0b6e3520616c1b602af0874f3a1dd26abf4016d182b48e48dff9c2729fed03035d0ca45c6c8c710697e2c68e035c5e0fbe931291536c1dc1e5
- SSDEEP 1536:h/G5jAA+2N62s8dqQUtFUuK9zS2DYyyN/Qv4odNCpMdVW83D9wylTiNULmuHkcL+:lWnLd6tF3XII/Qv1Lt/ZliNQ9D1IPp
- MD5 SHA1 SHA512 SSDEEP