quarantine.rar
- SHA256 093f9c4e16bc75536bdbf22f9899028febfb42765a7f92d6699bb212bf5e7ff9
Overview
overview
10Static
static
10Cia2O5x.exe
windows10-2004-x64
7Cia2O5x.exe
windows11-21h2-x64
7EBoost.exe
windows10-2004-x64
10EBoost.exe
windows11-21h2-x64
10LdlY2ri.exe
windows10-2004-x64
7LdlY2ri.exe
windows11-21h2-x64
7Loader.exe
windows10-2004-x64
7Loader.exe
windows11-21h2-x64
6StatedPanasonic.exe
windows10-2004-x64
10btZfO26.exe
windows10-2004-x64
7btZfO26.exe
windows11-21h2-x64
7build.exe
windows10-2004-x64
10build.exe
windows11-21h2-x64
10candy.exe
windows10-2004-x64
8candy.exe
windows11-21h2-x64
8hhKfuYso.exe
windows10-2004-x64
10hhKfuYso.exe
windows11-21h2-x64
10kRHhLlh.exe
windows10-2004-x64
7kRHhLlh.exe
windows11-21h2-x64
7lZDeIYoXVz.exe
windows10-2004-x64
10lZDeIYoXVz.exe
windows11-21h2-x64
10rVYGceP.exe
windows10-2004-x64
7rVYGceP.exe
windows11-21h2-x64
7random.exe
windows10-2004-x64
8random.exe
windows11-21h2-x64
7request.exe
windows10-2004-x64
7request.exe
windows11-21h2-x64
7Behavioral task
behavioral1
Sample
Cia2O5x.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Cia2O5x.exe
Resource
win11-20260130-en
windows11-21h2-x64
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
EBoost.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
EBoost.exe
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
LdlY2ri.exe
Resource
win10v2004-20250619-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral6
Sample
LdlY2ri.exe
Resource
win11-20260130-en
windows11-21h2-x64
5 signatures
150 seconds
Behavioral task
behavioral7
Sample
Loader.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral8
Sample
Loader.exe
Resource
win11-20260130-en
windows11-21h2-x64
8 signatures
150 seconds
Behavioral task
behavioral9
Sample
StatedPanasonic.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral10
Sample
btZfO26.exe
Resource
win10v2004-20260129-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral11
Sample
btZfO26.exe
Resource
win11-20260130-en
windows11-21h2-x64
5 signatures
150 seconds
Behavioral task
behavioral12
Sample
build.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral13
Sample
build.exe
Resource
win11-20260130-en
windows11-21h2-x64
9 signatures
150 seconds
Behavioral task
behavioral14
Sample
candy.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral15
Sample
candy.exe
Resource
win11-20250610-en
windows11-21h2-x64
10 signatures
150 seconds
Behavioral task
behavioral16
Sample
hhKfuYso.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral17
Sample
hhKfuYso.exe
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
kRHhLlh.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral19
Sample
kRHhLlh.exe
Resource
win11-20260130-en
windows11-21h2-x64
5 signatures
150 seconds
Behavioral task
behavioral20
Sample
lZDeIYoXVz.exe
Resource
win10v2004-20250619-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
lZDeIYoXVz.exe
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral22
Sample
rVYGceP.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral23
Sample
rVYGceP.exe
Resource
win11-20260130-en
windows11-21h2-x64
7 signatures
150 seconds
Behavioral task
behavioral24
Sample
random.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
16 signatures
150 seconds
Behavioral task
behavioral25
Sample
random.exe
Resource
win11-20260130-en
windows11-21h2-x64
14 signatures
150 seconds
Behavioral task
behavioral26
Sample
request.exe
Resource
win10v2004-20260129-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral27
Sample
request.exe
Resource
win11-20260130-en
windows11-21h2-x64
9 signatures
150 seconds
General
- Target quarantine.rar
- Size 20.5MB
- Sample260211-acn68act4b
- SHA256 093f9c4e16bc75536bdbf22f9899028febfb42765a7f92d6699bb212bf5e7ff9
- MD5 4a8515b700d162e2d5a2093c4944b851
- SHA1 b3fb7bc8956d1731e25be470e8298dc88d0a4aa2
- SHA512 5f2b28ce37697e85b5a7239bba9c8f490225b4dc4aa754e656604da706bfcadbfb47158a1253f10a034ee7590df687ea1a7a76ff9ede13ea745d266b2f0a897b
- SSDEEP 393216:AGy+fGmFYym1Phba4gsmnbiRKeIJj9AqwWRSY44x+34D:6WTZmLb4bEKJge3fxND
- TLSH T1E627338C0B604B2847AA69242FA581DA6FD285D02EE7F3053265E4BCC7FD065527EFF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
redline
Botnet
-
ddwwnnll
C2
-
196.251.107.104:1912
Signatures
- RedLine payload 1 IoCs
resource yara_rule static1/unpack001/build.exe family_redline - Redline family
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/rVYGceP.exe - Unsigned PE 9 IoCs
Checks for missing Authenticode signature.
resource unpack001/Cia2O5x.exe unpack001/EBoost.exe unpack001/Loader.exe unpack001/StatedPanasonic.exe unpack001/build.exe unpack001/candy.exe unpack001/hhKfuYso.exe unpack001/random.exe unpack001/request.exe - Untrusted Codesign Signers 4 IoCs
Codesigned binary was signed by an untrusted entity.
resource unpack001/LdlY2ri.exe unpack001/btZfO26.exe unpack001/kRHhLlh.exe unpack001/lZDeIYoXVz.exe - Inno Setup is an open-source installation builder for Windows applications. 1 IoCs
Inno Setup installer
resource yara_rule static1/unpack001/random.exe innosetup
File Explorer
-
quarantine.rar.rar 20.5MB
-
Cia2O5x.exe.exe 2.5MB
-
EBoost.exe.exe 2.3MB
-
LdlY2ri.exe.exe 1.8MB
-
Loader.exe.exe 359KB
-
StatedPanasonic.exe.exe 1.8MB
-
btZfO26.exe.exe 2.0MB
-
build.exe.exe 300KB
-
candy.exe.exe 61KB
-
hhKfuYso.exe.exe 3.6MB
-
kRHhLlh.exe.exe 2.0MB
-
lZDeIYoXVz.exe.exe 2.8MB
-
rVYGceP.exe.exe 6.4MB
-
random.exe.exe 5.2MB
-
request.exe.exe 770KB
Cia2O5x.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 038da7941cb395df589983f3b09346694fe2a3a9e458a295ebfd5bd7c9fdb434
- MD5 802aa7a4a57b22e797ebeb2b3b638527
- SHA1 6179f1929d3b2cdeb9d453ef1ec5ce3c88521923
- SHA512 abf6d2065acf94e8e917e427838466613ab130c90a8334b8177be69d91c28705e1f46e66f017f275430dd8c1e573893017cd4eee08061f535ea6f46393472da1
- SSDEEP 49152:j7L+2upjBVhbAbXMtQl/wLz8r5S5l7KdVSZ4eY83TAcmi:/L+2upjBVGVl/lQrCSZ4183Dmi
- TLSH T1CAC5238537FC4909F6BF9B702CB6662486BDB8A35E25DB5E05C4309C1930BE5AD60F23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2618190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\Administrator\AppData\Local\Temp\2\StubTemplate_3853\obj\Release\ChromeSetup.pdb
mscoree
_CorExeMain
Name
.text
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
EBoost.exe
- IMPHASH 8258cc376cdfd36bc8b524a329bf46fd
- SHA256 b77f9f6a63826c6a207fb1a14f9caa977487b8b63b44aeeb4a0932b3748926e2
- MD5 b7515b063de3e43ca243de5e5b36f5ab
- SHA1 ce616e88423b8b2ccb70e038e55fc631aeb16bee
- SHA512 17bc740f3a27f6402e3a9b5f9e3f5a9201ea286fb1567112635edb5faf9c8af2114f60ef9b60343466271ffee7d71fb61aebc005bd2e5ba1b2f145d7f77ec9e9
- SSDEEP 49152:GPu91waa1xTIfi6pbsd22NpjGrg93T27l1s:GHfTIfiQAjIi3T27l1s
- TLSH T1C2B5D0211EBE52D2F5EA13B1C4F023131879BDA55FB4815E6AC476BD0C349E1AE6E332
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
168608
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
RemoveDirectoryA
lstrcatA
GetComputerNameW
GetEnvironmentVariableA
CreateFileW
GetConsoleMode
LoadLibraryA
GetTickCount
GetLocalTime
WriteConsoleA
GetSystemTime
GetModuleHandleA
GetSystemInfo
GetCurrentProcessId
GetTempFileNameW
ExitProcess
GetSystemDirectoryA
WriteConsoleW
GetTempPathW
SetLastError
MoveFileA
CopyFileW
GetModuleHandleW
GetProcAddress
lstrcmpW
GetFileAttributesW
DeleteFileA
CreateDirectoryA
GetStdHandle
GetVersionExW
FindClose
GetEnvironmentVariableW
ReadConsoleA
lstrlenW
SetEnvironmentVariableA
FreeEnvironmentStringsA
FindNextFileA
GetEnvironmentStringsW
ReadFile
Sleep
QueryPerformanceFrequency
GetLastError
ReadConsoleW
GetVersionExA
GetWindowsDirectoryA
SetFileAttributesW
GetTickCount64
GetFileSize
WriteFile
CreateFileA
GetVersion
lstrcatW
AllocConsole
QueryPerformanceCounter
FormatMessageW
FreeLibrary
lstrcpyA
SetCurrentDirectoryA
FormatMessageA
MoveFileW
GetComputerNameA
CreateDirectoryW
SetEnvironmentVariableW
GetCurrentThreadId
GetCurrentDirectoryW
GetTempFileNameA
user32
FindWindowA
LoadCursorA
EndPaint
SetWindowLongA
PostMessageA
SetCursor
LoadIconA
DefWindowProcW
EmptyClipboard
PostQuitMessage
GetWindowTextA
GetWindowLongW
GetFocus
ScreenToClient
DestroyWindow
FindWindowW
GetSystemMetrics
DispatchMessageA
GetNextDlgGroupItem
SendMessageW
GetKeyState
UpdateWindow
SendMessageA
PostMessageW
GetWindowTextW
SetWindowTextA
GetForegroundWindow
CreateWindowExW
RegisterClassExA
GetClipboardData
GetParent
SetClipboardData
BeginPaint
SetParent
OpenClipboard
MessageBoxA
SetWindowPos
PeekMessageW
LoadCursorW
GetDlgCtrlID
MessageBoxW
ReleaseDC
MoveWindow
UnregisterClassA
GetDlgItem
RegisterClassExW
SetForegroundWindow
GetCursorPos
IsWindowVisible
GetMessageW
GetMessageA
DispatchMessageW
CloseClipboard
ClientToScreen
InvalidateRect
CreateWindowExA
PeekMessageA
RegisterClassA
GetWindowRect
GetClientRect
TranslateMessage
GetAsyncKeyState
gdi32
LPtoDP
CreateSolidBrush
ExtTextOutA
GetTextExtentPoint32A
RestoreDC
CreateCompatibleDC
CreateDIBSection
GetDeviceCaps
GetDIBits
SetBkMode
CreateHatchBrush
TextOutA
StretchBlt
SetBkColor
SetTextColor
BitBlt
GetStockObject
CreateCompatibleBitmap
SetViewportOrgEx
SelectObject
SetMapMode
DPtoLP
CreatePatternBrush
TextOutW
SaveDC
ScaleWindowExtEx
DeleteDC
DeleteObject
GetTextMetricsA
CreatePen
CreateFontA
OffsetViewportOrgEx
shell32
SHGetFileInfoA
DragQueryFileW
SHCreateDirectoryExA
SHGetKnownFolderPath
SHGetFolderPathA
ShellExecuteW
ExtractIconA
DragAcceptFiles
ExtractIconW
SHChangeNotify
DragFinish
ShellExecuteA
DragQueryFileA
SHGetSpecialFolderPathW
ole32
CoTaskMemAlloc
CoGetClassObject
OleInitialize
CoTaskMemFree
StringFromCLSID
CLSIDFromString
CoUninitialize
OleUninitialize
CoTaskMemRealloc
CoInitializeEx
comctl32
CreateToolbarEx
ImageList_Create
ord6
FlatSB_GetScrollInfo
ImageList_SetBkColor
ord17
CreateStatusWindowW
ImageList_Destroy
ImageList_Add
@Accreditor_895@0
@AeroPulseCred@16
@AlloyTranslateFilter@12
@AppearProcess@28
@AtmoStimulateConverterExV5@8
@AuthDetailCone@24
@BeatRollbackMember@0
@BetaAssessIdentity@28
@BioSignifySymbol@20
@BondObserver@8
@CacheDetailMediumV2@4
@CalmParameter@0
@ChangeValidatorEx@0
@CogniHypothesizeAugmenterExV3@8
@CombineHalter@12
@CombineJob@4
@CommitMatterExV3@28
@ConductListenerV4@4
@ContextualizeVariator@8
@ConvergeAlterer@0
@CoordinateVacuum@24
@CrossIntegrator@4
@CrystalBackgroundVacuum@0
@DeltaAssumeFractal@4
@DeltaMeditateVehicle@24
@DemonstrateTaskV3@8
@Destroyer_173@24
@DiffractGateway@0
@DiffractMember@12
@DiffuseNature@20
@DiffuseQuantum@0
@DiscourseSplitJob@12
@DisplayTerminologyA@24
@EcoHydrateConstituentEx@8
@Encryptor_332@8
@EndRetractCompressor@20
@EndSeparateSubroutine@12
@EntireSignifyTechnique@0
@EnvisionRegistryV5@12
@EpochStabilizeObstructor@8
@ExaReproduceStream@20
@Export_1460@4
@Export_3631@20
@Export_3654@20
@Export_4281@24
@Export_6070@4
@Export_6403@24
@Export_6550@8
@Export_7471@16
@Export_7588@0
@Export_7660@20
@Export_7713@4
@Export_9182@0
@FlowDecodeBearer@20
@FormFormRegulatorEx@12
@FormVoid@4
@FrameEnnead@8
@GeneDisconnectGovernorV1@8
@GlobalizeOperationEx@12
@Governor_779@24
@Grinder_109@16
@GroupMoistenInterpreter@8
@GrowStopCarrierEx@0
@HeartWriteCrierEx@12
@Hinderer_896@20
@HubScatterBuilderA@4
@HydroDeleteSphereEx@16
@HydroSignGradient@16
@IconEqualizeColanderA@16
@InitProcedureV3@12
@IoTSwellRotator@8
@IotaSubmergeTorus@16
@JewelShapeEnhancer@4
@LambdaDisplayDecoderEx@28
@LambdaEmitConstrictor@20
@LinkRefractCompressorA@0
@LocalizeConstantEx@20
@MLSubmergeMagnifier@4
@MagnetizeOntology@8
@MatchProgression@12
@MatrixSpatializeZone@0
@MegaAddParadigmV1@16
@MeshConnectWriterV2@0
@MicroResetVortex@12
@MuFlushMarker@12
@NeuroGyratePropeller@24
@NexusDecodePacket@16
@NormalizeVocabularyA@8
@NotifyGraph@12
@NotifyTemplate@0
@NucleusVaryTask@24
@PadPlane@4
@PenetrateIntensifierA@24
@PeriodEnfoldKindler@20
@PhaseOrchestrateMap@28
@PilotReducer@16
@PointConstituent@20
@PresumeExpander@28
@PrimoSetVehicle@20
@ProgressActivatorEx@12
@ProtoProtrudeEncoder@4
@ProtonDenoteProducer@20
@PsiAscendCred@8
@PullDecad@24
@PulseConceptualizeFocuser@4
@PulsePivotProcess@0
@PutRepressorEx@12
@PyroTemperMarkerEx@12
@QuantHelixLayerA@0
@RatioForegroundDecad@8
@RatioReflectWrapper@24
@RayWriteFormEx@16
@RegressEndpoint@20
@SemanDetachBuffer@12
@SequenceTapestry@20
@ShapeContemplateOscillator@16
@SigilMoldSignalV3@24
@SignQuiverer@12
@SimplifyArchetype@24
@Skater_696@8
@SocialComplexifyVibrator@24
@SocioStressClass@12
@SpinTorus@4
@StickPartEx@12
@StimulateTechniqueA@16
@Stringifier_118@20
@StructurePalpitator@20
@SynthaInfuseBlockV2@4
@TrajectAccentCipher@16
@TransformAggregator@8
@TwineKeyV1@12
@UnderlineGradient@16
@UnitCommitParadigm@0
@UpdateMakerV5@4
@VaryConverterA@16
@VoxelUnderlineContextEx@12
@WeaveNomenclature@4
@WithdrawGraphA@24
@YottaKnitAether@20
@YottaProtrudeString@28
@YottaSeparateFractalA@20
Acceptor_489
AdhereForest
AeroStickKey
Affirmer_747
AgeHammerCrier
AheadEnfoldFabricator
AppearPieceV1
ArcheMeasureDyad
AtmoInitAlterer
AttractVariatorV5
BadgeOpenIndex
BioIonizeFlywheelEx
BioPointAlgorithm
BoreCone
BudSeriesV1
CaseEvent
CellElectrifyNexus
CeramicUpdateBroadcasterAV3
CharVibrateProcedure
ChargeIgniterA
ChromaBackgroundChanger
Controller_122
CrossBalancer
CryoConcretizeEmitter
CulturalBuildIntegrator
CulturalWaitProjector
DescendManifold
DetailPartition
DiffractNexus
DisappearIdentityV3
DryHinderer
EndRotateSurfaceEx
EnfoldUnifier
EpochFlushBeing
Equalizer_586
ExciteEnnead
ExpandConverterV4
Expander_699
Export_1366
Export_2128
Export_2726
Export_4446
Export_4533
Export_5889
Export_7419
Export_7792
Export_8092
Export_9193
Export_9436
Export_9906
Export_9994
ExtraReleaseCategory
FinalCompressMinimizer
FlushSmith
ForgeMessengerA
GammaHashVessel
GeoSpawnReducer
GigaDrillMesh
GigaWriteRealm
GlyphPublishSubroutineEx
GroupAllocSession
GrowExciteLexer
HarmonizeNarrower
HeartVisualizeBalancer
InfuseImpression
InfuseModelAV5
IotaSteerCollector
LexisChangeConveyor
LexisConcretizeParser
LocalizeFormatter
LogicSignBlock
LowerPortalExV3
ManifestSphere
Marshaller_770
Matrix_878
MeditateCylinder
MetricLoopForgerV3
MetricRetreatIgniter
ModernSplitSensor
Modulator_665
Modulator_884
MoldType
MoveMessenger
NetMoveAssemblage
NexusRefractCondenser
NormalizeLock
NovoSpiralFunctionA
OldShapePiece
Operation_903
OrderWrapper
OriginalOscillateAetherV3
OscillateInhibitor
PhotonMeasureOntology
PiDecodeString
PilotWorker
PixelAttractFormatter
PositionRepressorEx
PragmaPadHindererAV4
PrecipitateElement
PrimoDecompressSpace
ProcreateTime
ProgressKindlerEx
PulseAdjustWriterA
PushExemplar
QualStopTop
QualifyComponent
QualifyRotator
QuantUpdateShaker
Quiverer_990
Receiver_740
RecurMinimizerExV5
ReflectPulsator
RhythmInflateMap
Sanctioner_391
ShrinkBooster
SituateConverterA
SolvateGrid
Starter_594
StemFocusForest
StemGenerateProjectorA
StopRecorderEx
StorePermeateFormatter
Suppressor_781
TauAttractPrism
TechnoSimplifyPipeline
TensorConcatAdapter
TerminusMagnetizeOrchestrator
TerminusVerifyAnnouncerV5
TexelContractFilter
TheorizeFormatter
TheorizeScaleV1
ThermoScaleCylinder
TideContractVehicleA
TileHarmonizeBalancer
TotalDirectCatalystA
TwigWhirlMaterial
UltraStructureEnnead
UnlockSpectrum
VertexValueBearerEx
VoxelUpdateRoutine
WaitBarrier
XenoDischargeStrainer
_Absorber_852@12
_AdvanceDetachIngredient@0
_AgedSubscribeTokenizerA@24
_ArcConvertReceptacle@0
_AssessTerminologyEx@16
_AssumeBeing@8
_Authorizer_819@28
_BetaRollbackLexicon@16
_BraidAlgorithmEx@24
_BudFilterEx@0
_CarveConcentrator@8
_CloudSplitModulator@16
_CompareBuffer@12
_CompleteShatterParser@4
_CryoTransformProbe@8
_CurrentBalanceGraphExV4@24
_CycleWhirlOntology@16
_DeleteDetector@8
_DemoMixTunerV4@12
_DifferEndpointEx@24
_DiffractTemplate@16
_DigiMixChart@4
_DischargeSpectrum@4
_Dismantler_607@16
_DrillFormEx@4
_ElderPartitionSubstanceA@20
_EnvisionAnnouncer@24
_EvolveConceptualizeLexicon@16
_ExciteGrid@4
_ExhibitTime@20
_Expander_108@20
_Export_1284@28
_Export_1690@4
_Export_2378@0
_Export_2640@4
_Export_5292@12
_Export_5700@24
_Export_6137@12
_Export_6670@8
_Export_7232@0
_Export_7639@4
_Export_7706@4
_Export_7707@20
_Export_8018@8
_Export_8019@0
_Export_8438@0
_ExtraCalibrateSynthesizer@12
_Fashioner_676@8
_FetchFlame@24
_FluxGetFlame@8
_FormElevateQuantum@0
_FuturaLowerDecoder@12
_GeneralizeTorus@24
_GeoRecurProxyA@12
_GermDetachHolder@8
_GlassBindStrainer@16
_GridCrumbleTaxonomy@8
_GrowSetParserV2@0
_GuideElement@4
_GyrateGradient@20
_HarmonizeDoorway@8
_HedraRateAnalyzer@20
_Implementor_538@28
_InfraDesiccateManifold@20
_InfraEvaluateAugmenterExV2@28
_InterFuseOntologyA@12
_JoinPipelineA@28
_KappaReadFabricator@0
_KappaReproduceController@0
_LastEqualizeLexicon@0
_LeafCoordinateLeveler@20
_LoadStreamEx@12
_LoopMold@8
_LoopSubroutine@12
_LowerSpinner@8
_MLFormatGrid@0
_MatrixStickAssemblage@0
_MergeMover@8
_MetaNeutralizeElementA@24
_MuNotifyThrober@24
_NavigateQueue@16
_NeoAnnealAdjusterA@4
_NeutronEmphasizeForger@4
_NewDisperseIdealExV1@8
_NovoModifyMatrix@20
_OldSteerCondenser@16
_OpenPortal@16
_OptimizePropeller@20
_OrganizeCipher@12
_ParticleCommitPiece@4
_PenetrateDimension@20
_PhiStructureVariator@4
_PhonoConvertAbsorber@20
_PixelVaryMesh@24
_PolymerMoistenPiece@12
_PrimoSymbolizeHierarchy@4
_ProcreateColander@24
_ProcreateFacade@0
_ProtonDestroyCrier@0
_PutTransformer@8
_PyroJoinEnergyA@16
_RecentHammerLattice@28
_ReduceScaleV1@20
_Regulator_963@8
_RepelEndpoint@20
_ResumePlenumV1@12
_ReverseKindler@8
_ReverseTemplate@4
_RhythmOvertakeTrembler@20
_RollbackRealm@0
_ShapeLowerAggregator@0
_Shaper_111@20
_SignLight@28
_SituateRegulator@8
_SocialSendAmplifier@16
_SocioNormalizeCylinder@8
_SplitContinuum@16
_StartCredEx@4
_SteerBalancer@24
_StickTapestry@12
_SupraDivideZoneEx@4
_SymbolEvaluateDecad@16
_Syntaxizer_756@24
_SynthaMergeSequence@8
_TaskDeviateValidator@12
_TaskWindVocabularyEx@8
_TechnoConductAgent@8
_TechnoDilateAggregator@24
_TemperSensor@8
_TerminusPropagateCluster@12
_TexelConvertMesh@8
_TheorizeWaveV1@16
_ThermoDepressStream@12
_TomorrowEncodeNarrower@28
_ToneDeviateAmplifier@8
_UnderlinePieceEx@16
_UniSubscribeFabricatorEx@4
_VaryDiminisher@20
_VeteranChargeEqualizerExV3@0
_VeteranPushParser@4
_WideShatterLexicon@24
_ZetaReproduceCalibrator@8
Name
.text
Size
171KB
Virtual Size
171KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
411KB
Virtual Size
410KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
LdlY2ri.exe
- IMPHASH 330617927bc7f077fd037b805d00d19f
- SHA256 cd1c4a472f2b3d626cf59755ca4a86808f913f0da15a6b4c7632e9b68e0ab361
- MD5 1fec5f183f1139592f617331386cac0e
- SHA1 882f478a0ee58e27cca75fe1ffb997860886e1e2
- SHA512 8e072cd643b9398c301bbcc0b57501e99bc40f8da1a1fd86594c93c3c09a8e605c230e505cf28100eb056bc1b24370510f91e12b28627b91abcd05c6e5a63667
- SSDEEP 49152:FjggROE3gnNlJpC0nAm+10j6Bh9Fn+5EvH:J1EHNjw0g1x7Jf
- TLSH T1CB858C25352FE3D3D04442758044AB0E2E64AF69CA55045EFFBC3E6A3DBD9D12E2B263
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
PE Signature issue
Digest
12:ca:cc:84:64:ba:b7:15:8b:38:3a:2f:f6:53:de:d5:72:eb:0a:2a:e3:fe:39:4a:1a:bf:76:4d:ee:4e:82:2e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=ModularBase-Digital,L=Reinickendorf,ST=Berlin,C=Germany
Chains
Feb 10, 2026
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=ModularBase-Digital,L=Reinickendorf,ST=Berlin,C=Germany
Serial Number
9e:da:e0:6a:ed:4e:3a:9f
Issuer
CN=ModularBase-Digital,L=Reinickendorf,ST=Berlin,C=Germany
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 9, 2026 - Feb 10, 2028
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
102400
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
lstrcatA
GetTempFileNameA
GetStdHandle
GetComputerNameA
GetEnvironmentStringsW
DeleteFileW
GetCurrentProcessId
GetTempPathA
QueryPerformanceFrequency
ExitProcess
GetWindowsDirectoryA
GetFileAttributesA
FormatMessageW
ReadConsoleW
GetComputerNameW
GetCommandLineA
GetCurrentDirectoryW
CreateFileW
WriteConsoleW
lstrcpyA
GetTickCount64
GetLocalTime
ReadFile
GetEnvironmentVariableA
GetCurrentDirectoryA
GetFileAttributesW
GetCommandLineW
GetSystemTime
SetFileAttributesW
lstrlenW
GetSystemDirectoryA
lstrlenA
CreateFileA
GetTickCount
CreateDirectoryW
DeleteFileA
SetFileAttributesA
GetFileSize
MoveFileW
GetLastError
GetSystemInfo
GetProcAddress
GetModuleHandleW
GetEnvironmentStrings
CopyFileW
SetEnvironmentVariableA
GetVersionExW
GetConsoleMode
RemoveDirectoryA
lstrcmpA
GetVersion
lstrcmpW
SetCurrentDirectoryW
CreateDirectoryA
lstrcatW
user32
GetClientRect
SetWindowLongA
GetWindowRect
GetClassNameW
GetKeyState
GetDlgItem
SetKeyboardState
PostQuitMessage
SetFocus
EndPaint
SetParent
LoadCursorW
DefWindowProcA
FindWindowW
SetClipboardData
TranslateMessage
UpdateWindow
MapVirtualKeyW
CloseClipboard
InvalidateRect
PeekMessageA
ShowWindow
SendMessageW
PostMessageA
ScreenToClient
GetWindowTextA
SetWindowPos
GetAsyncKeyState
GetMessageW
ClientToScreen
DestroyWindow
MapVirtualKeyA
GetDC
DispatchMessageA
CreateWindowExW
EmptyClipboard
SetCursorPos
EnumWindows
MessageBoxA
IsWindowVisible
DispatchMessageW
GetWindowLongW
FindWindowA
GetCursorPos
CreateWindowExA
DefWindowProcW
SetForegroundWindow
SetCursor
GetClipboardData
GetDlgCtrlID
MoveWindow
UnregisterClassA
RegisterClassExW
gdi32
SelectObject
CreateFontIndirectW
CreateSolidBrush
DeleteDC
CreatePatternBrush
ScaleViewportExtEx
SetMapMode
GetDeviceCaps
OffsetWindowOrgEx
TextOutA
GetTextExtentPoint32A
RestoreDC
SetWindowOrgEx
SaveDC
TextOutW
CreateHatchBrush
SetBkMode
BitBlt
ScaleWindowExtEx
ExtTextOutW
CreateCompatibleBitmap
GetTextMetricsA
GetMapMode
Rectangle
StretchBlt
CreateFontA
GetStockObject
SetDIBits
shell32
DragQueryFileW
SHGetFileInfoW
SHCreateDirectoryExA
SHGetSpecialFolderPathA
ExtractIconA
SHGetFileInfoA
SHGetFolderPathW
ExtractIconW
ShellExecuteA
DragAcceptFiles
SHGetKnownFolderPath
ShellExecuteW
SHGetSpecialFolderPathW
ole32
CoInitialize
CoInitializeEx
CoTaskMemFree
CoTaskMemRealloc
OleUninitialize
CoCreateInstance
CoTaskMemAlloc
StringFromCLSID
comctl32
InitCommonControlsEx
ord6
ImageList_Add
ImageList_Destroy
FlatSB_GetScrollInfo
AbsorbLattice
AddString
AdhereParser
AdjustConstituentA
AdjustEnneadV3Ex
AdvanceTaxonomy
AeroHumidifySegment
AiRecurParserA
AllocGrammar
AlloyClimbCreator
AlterCrier
AnalyzeTranslator
AppearProgression
AppraiseWrapper
ArborReproduceFlame
ArcConstrictBridge
ArcPenetrateGroupEx
ArrangeShakerEx
AscendForce
AssumeElement
AtomEmphasizeProxy
AttachPalpitator
AttractDecoder
AuthAttachThrober
AuthRemoveListener
BadgeConnectConveyor
BadgeWriteMakerV1
BalanceListener
BaseCalmMembrane
BaseTheorizePacket
BehaviorMoistenTransformer
BehaviorShatterTaxonomyEx
BioInitLattice
BioPermeateSeriesV2
BlendVortex
BondBufferV2
BranchPadTokenizerV4
BudConvergeSymbolA
BudDetectProgression
CalibrateHeptad
CarveAnalyzer
CellConsiderActivatorV5
CellCreateMesh
CellRemoveMinimizer
CenterDetachMold
CenterPositionSegment
ChangeGovernor
ChangeTokenizerA
CharShapeCast
Checker_228
ChronoCarveVestigeV5Ex
ClimbEssence
CloudBlendConcentratorEx
CloudPresumeMixer
CodeAccentPipeline
CodeCrystallizeTerminology
CodeMeasureMap
CodePlaitMethod
CodeShatterFormatter
CogniScaleExpander
CoilReducerEx
ComingDrySyntaxA
CompareToken
CompleteUnfoldRepressor
CompoundDivergeLeveler
CompoundPullBroadcaster
ConcatHerald
ConcatNetwork
Concentrator_841
ConductLiteral
ConstrictFilter
ConstrictTranslator
ContemplateMold
ContextualizePrism
ContractChunk
ConvertVessel
CoordinateRouter
CoreAdjustNet
CorePropagateSuppressor
CoreSynchronizeRotorA
CosmoAlterProcess
CosmoTweakObstructor
CreateBeingA
CreateManufacturer
Creator_169
CryoEvaluateConstituent
CryoTemporalizeChart
CryptoPilotRoutine
CrystalDisplayBuilderA
CrystalEnvisionFramework
CulturalAccentStabilizer
CurrentMixContinuum
CurrentProgressConstrictor
CurrentPropagateElement
CurrentSetOrchestrator
CycleFocusDetector
CycleProcedure
CycleTranslatorV2
CycleValueNetwork
DataReduceVehicle
DecodeSpectrumA
Decompressor_181
DeflateDetectorV4
DehydrateTrace
DeleteIngredient
DeltaSearchParadigm
DemoDeployParser
DeployPartition
DepressVariable
DerivedHelixEnneadEx
DerivedIonizePolicyEx
DesiccateWall
DetachOscillatorEx
DigiRepeatFocuser
DigiWeaveTapestryA
DischargeAnnouncer
DischargeLayer
DischargePiece
DisplayExemplar
DisplayPattern
DisplayVocabulary
DivideDetector
Divider_964
DnaNavigateQuantum
DryUnifier
EcoDivergeGyroscopeA
EcoSolderColanderEx
EcoUnlockLatticeEx
ElderGenerateTime
ElectronReinforceAccumulator
EmitScale
EmitSymbol
EncryptTransformerV1
Encryptor_603
EnfoldSpaceV1
EntireCrossWorker
EnvisionContinuum
EpsilonSpiralModel
EvolveReproduceWave
ExaSequenceCatalog
ExhibitCombiner
ExpandLockV5
ExpandManufacturer
ExpandSession
Export_1108
Export_1204
Export_1276
Export_1625
Export_1930
Export_1967
Export_2357
Export_2422
Export_2702
Export_3026
Export_3106
Export_3434
Export_3829
Export_3987
Export_4415
Export_4531
Export_4569
Export_4765
Export_4815
Export_4926
Export_4935
Export_5017
Export_5070
Export_5218
Export_5371
Export_5389
Export_5525
Export_5786
Export_5797
Export_6066
Export_6435
Export_6446
Export_7000
Export_7025
Export_7128
Export_7188
Export_7720
Export_7939
Export_7968
Export_8826
Export_9100
Export_9139
Export_9140
Export_9320
Export_9687
Export_9891
Export_9954
ExtendMethod
FaceLoopIdeal
Fastener_827
FetchCipherV3
FiberSeparateRealm
FieldReadTemplateA
FieldStationForm
Filter_659
FinalPauseWeb
FinishHighlightDiminisher
FlowerDepressNexusV4
FluxChargeConstructor
FluxStartConstructor
FocusBuildPentad
FocusElaborateRotator
FocusLowerProcess
FormSolderFlame
ForwardDescendEvent
FountSetGroup
FragmentMultiplier
FragmentSyntax
FrameGraph
Function_673
FuturaFetchOrchestratorEx
GammaGuideDetectorV5
GammaRepelVariableA
GeneMaterializeBuilder
GeneSignifyField
GeneralizeForm
GenerateSession
GeoNeutralizeMagnifier
GeoQualifyMembrane
GigaPadAggregate
GlobalizeMarkerV5A
GlobalizeTuner
GlyphOrientBearer
Grammatizer_559
GroupClassifyBroadcasterEx
GrowAbstractEnhancer
GrowReinforceNexusEx
GrowVerifyJob
GyrateTask
HarmonizeController
HighlightFlame
HumidifyArgumentA
HydrateIngredient
HydroSplitModelV1
HypothesizeVoidEx
IconDeployDyad
InflateTapestryEx
InfraEvaluateHierarchy
Initiator_827
IntersectOperation
IotaOrientIndicator
IotaTweakTranslator
JewelDestroyHalterEx
JobPivotLattice
KnitAnalyzer
KnitGroup
LastCoordinateCondenser
LinkMixMarker
LinkTwistDyadV5
LithoLoopParserEx
LocaleDilateInterface
LocalizeGrid
LocateObstructor
LockTokenV3
LogoDecodeBuilder
LogoPunctureZone
LowerMixer
ManifestTerminologyV5
MatchChart
MatchInterface
MaterializeVestige
MatureExciteConverterEx
MeasureCompressor
MeasureHammerTechniqueA
MeasureMagnetizeAccumulator
Messenger_781
MetaLoopSubstance
Mixer_593
MlConvertConstrictor
MlEmergeChanger
MlRotateCode
ModernShatterWaveV3
MoldDecad
MoldHeuristic
MoleSituateLexerV5
MorphComplexifyConverterV2
MorphConsiderWorker
MoveInitiator
MultiRollbackBuilder
MultiUpperHierarchy
MultiplyBoosterV4
MultiplyShakerEx
NeoClearPlenum
NeoDehydrateOrchestratorV3
NeoSituateDimension
NeuroContractPolicyEx
NeuroEqualizeTriggerEx
NeutralizePropellerV1
NextProcreateCourierV1
NextSignalBarrier
NodeDrillParticle
NodeFreePolicyA
NormalizeMaterial
NotifyTrace
NowNormalizeRegulator
NuSpecifyRegistryV2
OldAnalyzeCube
OldTheorizeTreeV2
OmicronOpenMixer
OmniPlaitVortex
Operation_174
Operator_836
OrchestrateProcedure
OrderLayer
OrganizeChanger
PadEncoderA
PadPulsator
PaleoWeaveIgniter
ParaSignifySignal
PathRaiseKey
PathSinkEncoder
PerfuseReader
PerfuseSensorV4A
PeriodShowForger
PetaElectrifyEnneadA
PetaFormatSignal
PhaseMeetListenerV4
PhaseReinforceStopper
PhiHumidifyForger
PhonoContextualizeProxy
PhotonVerifyCollector
PiReadChartEx
PiScatterReader
PixelOptimizeRealm
PlaceConverter
PlaitDilatorEx
PlaitType
PolarizeFilter
PonderMonad
PragmaConvergeHandle
PrecipitateQueueV5
Prober_718
ProcreateObstructor
ProgressBridge
ProtoPostulateComponentEx
ProtoSteerSubroutine
PsychoBraidLayerV1
PsychoLockGyroscope
PulseAggregatorA
PulseCompressorEx
PulseMaker
PushEvent
PutConstant
PyroSolderAgent
QualConstrictCylinder
QualOptimizeMatrix
QualifyLexicon
QuantAdhereKey
QuantSetMaterial
QuantifyCollector
QueryFlywheel
Quiverer_516
Radiator_819
RatioCalibrateNetwork
RaySubstrEncoder
RecentDehydrateIntegrator
RecentModifyText
RecentSpiralDetectorV3
ReflectBuilderEx
ReflectMember
ReflectOctad
RegressStrainerV3Ex
ReinforceMembrane
RepelMultiplierEx
RepresentAggregatorV1
ReserveSpaceEx
ResetIndicator
ResetZone
ResumeSpark
ResumeStrainer
RetractTrigger
RetreatCreatorV1
ReversePlane
RhoWaitProducerV5
RhythmDilateDiminisher
RootRepresentIntegrator
RotateTranslator
RunSmith
SaturaAdhereCompressor
SaveGrid
ScaleBearerA
ScatterColander
ScatterSieve
SearchBlocker
SegmentCatalyst
SeniorShrinkScope
SeparateWhirler
ShapeExhibitBuffer
ShatterFunctionV3Ex
ShowSignal
SigilConcretizeNetwork
SigmaReinforceGenerator
SignConcretizeBuilder
Skimmer_683
Skimmer_902
SpatializeOscillator
SpectraVisualizeColander
SpinProxy
Spinner_694
SplitRotor
SplitSchema
StabilizeChunk
StartGeneratorA
StemSituateWriter
StickTransporter
StimulateParticle
StimulateRotator
StreamFetchPyramid
StressHexadV3A
StressTaskV2
SupraReleaseFunction
SurfaceAnnouncerA
SynthaPermeateParadigm
TaskPublishType
TechnoUpperImprint
TempoOrchestrateSmith
TensorAdvanceModelEx
TensorStopTurbine
TerminusDetectBearer
TerminusReproduceRepressor
TexelOscillateAssemblage
TextGetVariatorV4
ThermoCopySmithEx
TideClassifyText
TintTheorizeAugmenter
TokenDetailVessel
TokenOrganizeVibrator
TotalCloseProcess
TrajectScaleAccumulator
Translator_782
TweakSet
TwigAddMethod
TwigSpecifyEventEx
UltiFormatIdentity
UltraBondBeing
UnbindForm
UnfoldElementV3Ex
UniResetTaskA
UnitAdhereArrester
UnitPassTrembler
UnitPermeateDecoder
UnitRecedeIntensifier
UnlockAxis
UnlockParadigm
UpdateIntegrator
ValueIndicator
VanishDilatorA
VanishWorker
VectorComplexifyForest
VectorPublishIngredientV2
VectorResumeMakerV2
VectorSubmergeSeriesV1A
VerifyDimension
VerifyManufacturerEx
VertexTwineIngredient
VeteranDecryptTransformer
VeteranDifferEncoder
VeteranRollbackParadigm
VibrateMembrane
VintageDissolveMold
VisualizeFrame
VortexRepeatAgent
Watcher_694
WaveMeditateFacadeA
WaveSculptNetA
WeldTask
WellDehydrateNarrowerV5
WellSuffusePrism
WholePropagateTree
WithdrawStream
Worker_465
WriteSet
XenoFetchEnergy
XiMoistenAbsorber
ZetaDestroyBlockerV1
ZetaRetractRotator
Name
.text
Size
108KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
254KB
Virtual Size
254KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
816B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Loader.exe
- IMPHASH c546646952cb160243a67da7651da44c
- SHA256 ec7c5533adfb5a919951a4973983064b2103918bcf9f93a8c351a152a1f63567
- MD5 c59018845439dad4d30557ce61315e75
- SHA1 51836feb6dc7d2f4f47968bf0f5b3d75f1c19011
- SHA512 fea0aa46f8d8c1b566a084677fd04ab559a3c104fb5e692e4be97f4fdaebf0c0cc0e744dd0f1fe828012321e7f7c20a76b865b0f1e90b633d9ad7a3208f84604
- SSDEEP 6144:5nsuD9WKIz8HZ/zVcTVQgvVHytj23vf/tRW00NnT5VxZ:5nsuhIz8HpDuVHytj2/tRWdNn
- TLSH T1C1747C56BAA418F9E57B853CC9530A06D7F2BC660760DBDF03A046961F277E08E3DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
8128
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
shell32
ShellExecuteExW
advapi32
LookupPrivilegeValueW
RegOpenKeyExA
OpenProcessToken
RegSetValueExA
AdjustTokenPrivileges
RegCloseKey
LookupPrivilegeValueA
shlwapi
PathFindFileNameA
kernel32
FlsAlloc
WriteConsoleW
SetFilePointerEx
GetModuleFileNameA
Process32First
WriteProcessMemory
HeapFree
GetCurrentProcess
lstrlenW
GetModuleFileNameW
lstrlenA
WaitForSingleObject
CreateFileW
GetModuleHandleA
OpenProcess
CreateToolhelp32Snapshot
Sleep
GetLastError
lstrcatW
Process32Next
CloseHandle
GetSystemInfo
HeapAlloc
GetProcAddress
VirtualAllocEx
GetProcessHeap
lstrcpyW
lstrcmpiA
GetExitCodeProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetConsoleMode
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetStdHandle
WriteFile
ExitProcess
TerminateProcess
FreeLibrary
GetModuleHandleExW
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
VirtualProtect
LoadLibraryExW
LCMapStringW
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
Name
.text
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
257KB
Virtual Size
260KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
648B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=143, id=261, version=33145,
count=12, id=260, version=33145,
count=6, id=259, version=33145,
count=9, id=259, version=35403,
count=16, id=260, version=35403,
count=9, id=257, version=33145,
count=117, id=1, productName=Unmarked objects,
count=42, id=261, version=35403,
count=1, id=265, version=35721,
count=1, id=255, version=35721,
count=1, id=151,
count=1, id=258, version=35721,
StatedPanasonic.exe
- IMPHASH 4cea7ae85c87ddc7295d39ff9cda31d1
- SHA256 3a4440ce511cc7583d97e3cc2583bc456107d4c2fa562f11ecfb4ee89cb221c2
- MD5 dc91c99b0510aa1199bf9bdde4e77318
- SHA1 2ccc23b18ff542bae1b1c3d70392d3b414058816
- SHA512 0455cd7b1f1918cc3e2f2c08c6020ace6e766c0b6a8de00d65e1155c3004cf370caa36ac58ec297a320a36cde2dbcbcdc96218a7e5d3d9d4f3ee66dddadf4430
- SSDEEP 49152:H8hdkpCoi8hdkpCoJldX9Xs0Tqeui+/Se0HjDBuOCxsDRm:H8hdkpCoi8hdkpCoJldBluP0HjDBuOsB
- TLSH T119950183FE9C62A5CC3C5976D4B344420732AD2E879A1B5B50DCF23664931A35B3E63E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
33280
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
wextract.pdb
advapi32
GetTokenInformation
RegDeleteValueA
RegOpenKeyExA
RegQueryInfoKeyA
FreeSid
OpenProcessToken
RegSetValueExA
RegCreateKeyExA
LookupPrivilegeValueA
AllocateAndInitializeSid
RegQueryValueExA
EqualSid
RegCloseKey
AdjustTokenPrivileges
kernel32
_lopen
_llseek
CompareStringA
GetLastError
GetFileAttributesA
GetSystemDirectoryA
LoadLibraryA
DeleteFileA
GlobalAlloc
GlobalFree
CloseHandle
WritePrivateProfileStringA
IsDBCSLeadByte
GetWindowsDirectoryA
SetFileAttributesA
GetProcAddress
GlobalLock
LocalFree
RemoveDirectoryA
FreeLibrary
_lclose
CreateDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GlobalUnlock
ReadFile
SizeofResource
WriteFile
GetDriveTypeA
LoadLibraryExA
SetFileTime
SetFilePointer
FindResourceA
CreateMutexA
GetVolumeInformationA
WaitForSingleObject
GetCurrentDirectoryA
FreeResource
GetVersion
SetCurrentDirectoryA
GetTempPathA
LocalFileTimeToFileTime
CreateFileA
SetEvent
TerminateThread
GetVersionExA
LockResource
GetSystemInfo
CreateThread
ResetEvent
LoadResource
ExitProcess
GetModuleHandleW
CreateProcessA
FormatMessageA
GetTempFileNameA
DosDateTimeToFileTime
CreateEventA
GetExitCodeProcess
ExpandEnvironmentStringsA
LocalAlloc
lstrcmpA
FindNextFileA
GetCurrentProcess
FindFirstFileA
GetModuleFileNameA
GetShortPathNameA
Sleep
GetStartupInfoW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
EnumResourceLanguagesA
GetDiskFreeSpaceA
MulDiv
FindClose
gdi32
GetDeviceCaps
user32
ShowWindow
MsgWaitForMultipleObjects
SetWindowPos
GetDC
GetWindowRect
DispatchMessageA
GetSystemMetrics
CallWindowProcA
SetWindowTextA
MessageBoxA
SendDlgItemMessageA
SendMessageA
GetDlgItem
DialogBoxIndirectParamA
GetWindowLongPtrA
SetWindowLongPtrA
SetForegroundWindow
ReleaseDC
EnableWindow
CharNextA
LoadStringA
CharPrevA
EndDialog
MessageBeep
ExitWindowsEx
SetDlgItemTextA
CharUpperA
GetDesktopWindow
PeekMessageA
GetDlgItemTextA
msvcrt
?terminate@@YAXXZ
_commode
_fmode
_acmdln
__C_specific_handler
memset
__setusermatherr
_ismbblead
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
memcpy_s
_vsnprintf
_initterm
memcpy
comctl32
ord17
cabinet
ord20
ord21
ord23
ord22
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
Name
.text
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=261, version=27412,
count=2, id=259, version=27412,
count=18, id=260, version=27412,
count=17, id=257, version=27412,
count=160, id=1, productName=Unmarked objects,
count=10, id=264, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
btZfO26.exe
- IMPHASH e440c7009792917cfecbaeda0053d5b9
- SHA256 efba2de295c36fdc508476c47d57ad557f8381bf2d11d436bb0863b40b3e3fce
- MD5 cd68bfc6475f0ac4f5d0994350b210cb
- SHA1 765c8a222f3fb3ba60646e096bae91b76df248b8
- SHA512 001074d9e594783017947805dd8d5ad3df4b71e07d47093ee6bcba9134f6862e321b258ba7699fd2ab5c9c9afb80bed3f7b058453a9e835e55c3824226154ad3
- SSDEEP 24576:yatO7gM/5KlRUjKJoYV/g82Qf9OveL6IHhUBwYOey5YXhQKkJFVOf/THmU2Pro5s:vOkM/SRUKJoY+8r8OhUzdyosO37H2PsK
- TLSH T108A5E026397D72D2E4C942B180D0B6033FB8FDB54B890C5A67C8B6B61C39B963F9E055
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
PE Signature issue
Digest
f6:5a:27:20:3e:d2:f3:cc:19:9b:a7:ef:1a:09:19:cb:5b:53:93:0d:7c:e5:f8:c8:d5:75:7d:ab:9c:76:8c:cd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=SynthLabs-Strategy,L=Montivilliers,ST=Normandy,C=France
Chains
Feb 10, 2026
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=SynthLabs-Strategy,L=Montivilliers,ST=Normandy,C=France
Serial Number
27:c9:00:6b:04:94:94:23
Issuer
CN=SynthLabs-Strategy,L=Montivilliers,ST=Normandy,C=France
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 9, 2026 - Feb 10, 2028
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
119120
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
DeleteFileA
DeleteFileW
GetTempPathA
WriteConsoleA
WriteFile
lstrlenW
GetEnvironmentVariableW
GetTempFileNameW
lstrcpyA
GetEnvironmentStringsW
lstrcpyW
FreeEnvironmentStringsA
FormatMessageA
CreateFileW
SetEnvironmentVariableW
QueryPerformanceFrequency
GetSystemDirectoryA
GetCurrentProcessId
FindNextFileA
CloseHandle
GetFileAttributesW
GetComputerNameW
RemoveDirectoryW
GetSystemTime
GetCurrentDirectoryW
GetEnvironmentVariableA
SetFileAttributesA
GetCurrentDirectoryA
lstrcatW
GetLastError
FindClose
MoveFileA
GetConsoleMode
SetCurrentDirectoryA
SetEnvironmentVariableA
GetSystemDirectoryW
GetComputerNameA
ExitProcess
FreeLibrary
GetProcAddress
GetCurrentThreadId
GetStdHandle
QueryPerformanceCounter
GetFileSize
RemoveDirectoryA
Sleep
CreateDirectoryA
lstrcatA
ReadFile
CopyFileW
GetLocalTime
AllocConsole
LoadLibraryW
lstrcmpA
GetWindowsDirectoryW
GetTickCount
GetTempPathW
GetModuleHandleW
MoveFileW
user32
GetCursorPos
SendMessageA
InvalidateRect
PostMessageW
RegisterClassW
EndPaint
GetNextDlgGroupItem
UnregisterClassA
SetForegroundWindow
SetParent
CloseClipboard
GetWindowTextA
ShowWindow
ClientToScreen
GetDlgItem
SetFocus
MessageBoxW
IsWindow
GetMessageW
ScreenToClient
MapVirtualKeyA
GetWindowTextW
IsWindowVisible
SetCursorPos
LoadCursorW
PeekMessageW
MessageBoxA
GetMessageA
RegisterClassA
FindWindowW
SendMessageW
EmptyClipboard
GetClipboardData
GetAsyncKeyState
SetWindowLongA
PeekMessageA
FindWindowA
CreateWindowExA
SetWindowLongW
SetWindowPos
GetWindowLongW
DefWindowProcA
GetDC
MoveWindow
GetParent
SetKeyboardState
MapVirtualKeyW
GetKeyState
DefWindowProcW
ReleaseDC
gdi32
GetTextMetricsW
SetMapMode
DeleteDC
CreateHatchBrush
GetStockObject
RoundRect
CreatePatternBrush
CreateCompatibleDC
OffsetWindowOrgEx
SaveDC
CreateFontIndirectA
SetViewportOrgEx
SetTextColor
Rectangle
SelectObject
CreateFontIndirectW
GetDIBits
OffsetViewportOrgEx
LPtoDP
SetWindowOrgEx
SetBkColor
GetTextMetricsA
GetMapMode
SetDIBits
MoveToEx
CreateDIBSection
SetBkMode
CreateCompatibleBitmap
GetTextExtentPoint32A
ExtTextOutA
DeleteObject
DPtoLP
CreatePen
GetDeviceCaps
shell32
ExtractIconW
DragAcceptFiles
DragQueryFileW
SHGetSpecialFolderPathA
SHGetFileInfoW
ShellExecuteW
SHGetFileInfoA
SHGetSpecialFolderPathW
DragQueryFileA
SHGetFolderPathA
SHGetFolderPathW
ExtractIconA
SHCreateDirectoryExW
SHCreateDirectoryExA
SHGetKnownFolderPath
ole32
CoTaskMemRealloc
CLSIDFromString
StringFromCLSID
CoUninitialize
CoInitializeEx
CoGetClassObject
OleUninitialize
comctl32
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Add
CreateToolbarEx
ord17
CreateStatusWindowW
ABSORB_VESSEL
ACCENT_MEDIUM
ADJUST_ENCODER_V4
ADVANCE_DEPLOY_FOREST_V2
ADVANCE_DIVIDE_TOKENIZER
AERO_NEUTRALIZE_OPERATION
AGE_BACKGROUND_VOCABULARY
AGE_PERFUSE_TETRAD
AI_CHANGE_TERMINOLOGY
ALLOY_COMPARE_SYMBOL
ANALYZE_CIPHER
ANALYZE_TETRAD_V4
ARCHA_OPTIMIZE_KINDLER
ARRANGE_CATALYST_EX
ATOM_FORMAT_KEY_V5
AUTH_STRUCTURE_INDEX_EX
BADGE_MOISTEN_NODE
BALANCE_HIERARCHY_V2
BEAM_FETCH_FILTER
BEAT_DESTROY_RECORDER
BEAT_ENGRAVE_COLLECTION
BIO_TRANSLATE_COLLIMATOR_V4
BLEND_SCALE
BRACE_BUFFER_A
BRANCH_SUBSTR_TRIAD
BUD_MANIFOLD_A
CALIBRATE_ENHANCER
CARVE_ARRAY_A
CARVE_PARTITION
CELL_EMERGE_QUIVERER
CENTER_DENOTE_WATCHER
CHARGE_RECEPTACLE
CLIMB_SPACE
CLONE_BUFFER_V5
CLONE_HIERARCHY
COGNI_QUERY_BEATER
COMING_BUILD_THROBER
COMMIT_HEXAD
COMPARE_NATURE_EX
COMPLETE_DIVERGE_SYNTAX
COMPLETE_STABILIZE_STREAM
COMPOUND_CONNECT_WRITER
CONCEPTUALIZE_SCHEMA_A
CONSTRICT_DOORWAY
CONTEXTUALIZE_MONAD
CONVERT_AGGREGATE
CONVERT_DIMINISHER
CORE_ADJUST_PARTITION_V5
CORE_DEPLOY_MOLD
CORE_SPATIALIZE_BUILDER
CRYO_PROPAGATE_ABSORBER
CRYO_SHRINK_TREE_EX
CRYSTALLIZE_INITIATOR
CRYSTAL_RADIATE_BOOSTER_EX
CURRENT_VIBRATE_GRAMMAR
Clip_779
Collector_920
DECODE_FORMATTER
DECOMPRESS_PROCESS
DELETE_BLENDER
DEMATERIALIZE_WALL
DEMO_DESCEND_CONVEYOR
DESICCATE_INTEGRATOR
DESTROY_MATTER
DESTROY_PARTICLE_V4
DETAIL_MEMBER
DIFFER_ESSENCE
DIFFRACT_CATALOG_A
DILATE_LIST
DILATE_PROPELLER
DILATE_QUIVERER
DIRECTION_DECRYPT_BALANCER_V5
DIRECTION_MANIFEST_TRIAD
DIRECT_COURIER
DIRECT_SYMBOL
DISPERSE_MARKER
DRY_INTEGRATOR
DRY_QUANTUM
DRY_VESTIGE
EDGE_GYRATE_INITIATOR_A
EDGE_LOWER_FACADE_V3
EDGE_SINK_INTEGRATOR
ELECTRON_APPRAISE_QUEUE
ELEVATE_STREAM_V4
ENCRYPT_AUGMENTER
ENTIRE_FORMAT_AMPLIFIER_V4
ENTIRE_OVERTAKE_EXEMPLAR
ERA_LOOP_OPERATION
EVOLVE_ALLOC_ACTIVATOR
EXPAND_MESH
EXPAND_PROCESS
EXPAND_RECEPTACLE_EX
EXTRA_LOAD_BUFFER
EXTRA_REPEL_FORMATTER
Equalizer_110
Export_1141
Export_1347
Export_1386
Export_1444
Export_1590
Export_1807
Export_1919
Export_1952
Export_2289
Export_2464
Export_2499
Export_2951
Export_3137
Export_3253
Export_3694
Export_4002
Export_4980
Export_5140
Export_5672
Export_6139
Export_6156
Export_6319
Export_7037
Export_7169
Export_7303
Export_7771
Export_8178
Export_8195
Export_8248
Export_8282
Export_8389
Export_9741
Export_9821
FIELD_INFLATE_LATTICE
FIGURE_CLASSIFY_LIST
FINISH_DESTROY_TYPE_V5
FINISH_SPAWN_COLLECTOR
FLOWER_POSITION_CONE
FLOW_ABSTRACT_FUNCTION_A
FLOW_ADD_BUILDER_A
FLOW_HYDRATE_TEMPLATE_V5
FLUX_UNLOCK_PROXY
FOCUS_AUGMENTER
FOCUS_PORTAL_V1
FORMAT_CONTINUUM
FORWARD_APPEAR_LISTENER
FORWARD_FRAGMENT_SUBSTANCE
FORWARD_QUALIFY_WRAPPER
FOUNT_RAISE_VESTIGE
GENE_PRECIPITATE_FRACTAL
GEO_DEFLATE_READER
GERM_BUD_CONSOLIDATOR_V3
GIGA_IONIZE_KEY
GLASS_FOREGROUND_SPINNER
GLASS_SINK_NET
GROUP_UNFOLD_COMPRESSOR
GROW_HIGHLIGHT_BALANCER
GROW_LOWER_KIND
HARMONIZE_FRACTAL_V3
HEDRA_ROTATE_CALIBRATOR
HYDRATE_PREVENTER
HYDRO_ASSESS_DIMENSION
ICON_REPEL_PARSER
INFLATE_ACCUMULATOR_V4
INFUSE_MESSENGER_V4_EX
INTRA_INIT_SEQUENCE
INTRA_MAGNETIZE_RECEPTACLE
IONIZE_CONTAINER
JEWEL_TRANSFORM_TECHNIQUE_A
JOIN_ALGORITHM_A
JOIN_PORTAL
KAPPA_POINT_MODULATOR
KERNEL_HYPOTHESIZE_COMBINER
KERNEL_PENETRATE_SPACETIME_A
Kindler_592
LAST_FRAGMENT_PIECE_V4
LAST_PUBLISH_ARRAY
LINE_FREE_ACTIVATOR
LINK_REFLECT_DOORWAY
LITHO_SOLVATE_TERMINOLOGY_V5
LOCALE_RELEASE_WAVE_A
LOCATE_HEXAD
LOCK_MOLD
LOGIC_EXPAND_IDEAL
LOGO_BRAID_TEXT
LOWER_CARRIER
LOWER_TYPE
LUMA_SIGNAL_CUBE_V3_A
MANIFEST_REPRESSOR
MATURE_DESICCATE_MODEL
MEASURE_ARGUMENT
MEASURE_NEUTRALIZE_LIST
MEASURE_TWINE_BEARER
MEET_MOLD_A
MEET_ROUTINE
METAL_MATCH_TOKENIZER
METAL_THROB_FILTER
META_SPAWN_BUILDER
MICRO_ORDER_GATEWAY
MIX_POLICY
ML_RUN_COMBINER
MOISTEN_FABRICATOR
MOISTEN_FLAME
MOLD_REALM
MOLE_STRESS_LITERAL
MORPH_ASCEND_INHIBITOR
MORPH_INIT_GROUP
MORPH_PIERCE_READER
MORPH_WAIT_EXEMPLAR
MULTIPLY_DOMAIN
MULTIPLY_SUBSTANCE
MULTI_PARTITION_COURIER
MULTI_PULL_GENERATOR
MULTI_SINK_ARCHETYPE
Maker_751
Mixer_415
NANO_DEPRESS_OPERATION_A
NANO_EMPHASIZE_NATURE
NET_MOLD_ROTOR
NET_SHRINK_ANALYZER_A
NET_VANISH_RADIATOR_A
NEXT_BIND_QUANTUM
NODE_PERMEATE_AETHER_V3
OMEGA_DISSOLVE_CRIER
OMEGA_WITHDRAW_FORGER
ORCHESTRATE_TIME
ORIGINAL_SCALE_WAVE
PARA_RECEIVE_DECAD
PAUSE_PARSER
PERIOD_CONDUCT_CONTAINER_A
PETA_PERMEATE_DILATOR
PHI_SPIRAL_COLLECTOR
PHOTON_PROTRUDE_NARROWER
PHOTON_RATE_MAKER
PIERCE_GRADIENT
PIVOT_COURIER
PI_REPRESENT_GRAMMAR_A
PLACE_SIEVE_V5
POLARIZE_ARGUMENT
PRESUME_TRANSLATOR_V2
PRIMO_ORCHESTRATE_POLICY
PRIMO_VANISH_VESSEL
PROC_SYNCHRONIZE_CATALYST
PROGRESS_BIND_DECAD
PROGRESS_LOOP_COLLIMATOR
PROPAGATE_OBSTRUCTOR_EX
PROTON_ATTRACT_PORTAL
PROTRUDE_MATTER_V2_EX
PROTRUDE_PORTAL_A
PSI_SPATIALIZE_SCANNER
PSYCHO_DECOMPRESS_ENDPOINT
PSYCHO_ORGANIZE_CONVERTER
PULL_RECORDER_EX
PULL_SPHERE
PUNCTURE_BUFFER
PUNCTURE_FABRIC
PUNCTURE_HINDERER
PUSH_TRANSFORMER
Propeller_546
QUAL_OPEN_ALGORITHM
QUANTA_EXPAND_CONSTITUENT
QUANTA_UNFOLD_CONTROLLER
QUANTIFY_MEDIUM
QUERY_CONSTRICTOR
RAISE_PART
READ_CREATOR_EX
REDUCE_BEATER
REDUCE_PROTOTYPE_V4
REFLECT_TRANSFORMER
REPEAT_RECORDER
REPRODUCE_MAKER
RESERVE_CONVERTER
RETRACT_ANNOUNCER_EX
RETREAT_OSCILLATOR_A
REVERSE_PROTOTYPE
RHO_DESICCATE_ADJUSTER
RHO_DISPLAY_TRANSPORTER
RHO_ELABORATE_ADJUSTER_EX
RHYTHM_SYNCHRONIZE_JOB
ROTATE_CHUNK_A
Renderer_673
SCALE_FOCUS_NEXUS_A
SEARCH_ZONE
SEC_EXTEND_CONSTITUENT_V1
SEMAN_CONTEMPLATE_FOREST
SEMAN_TRANSFORM_ARCHETYPE
SEPARATE_COMPONENT_EX
SEPARATE_GOVERNOR_V2
SEPARATE_IGNITER
SEPARATE_OCTAD_A
SERIALIZE_GROUP
SET_SIGNAL_V3
SHADE_CONDUCT_EXEMPLAR
SHAPE_RESET_INDEX
SHOW_LOCK_A
SIGIL_BACKGROUND_INTERPRETER_V4
SIGNAL_CYLINDER_V5
SIGNAL_NARROWER_A
SIGNIFY_TEMPLATE
SOCIAL_SPECIFY_ENCODER_A
SPATIALIZE_SESSION
SPATIO_HAMMER_WHIRLER_A
SPATIO_SEPARATE_PROBE
SPAWN_CATALYST_V5
SPAWN_CLASS
SPIRAL_PACKET_EX
SPLIT_ROTATOR_V2_A
SPLIT_WORKER
STATION_TRANSFORMER
STEM_LOCALIZE_BUILDER_V3
STEM_STEER_DIMENSION_EX
STEM_WAIT_MAGNIFIER
STEM_WITHDRAW_MESSENGER
STIMULATE_EXTENDER
STIMULATE_FRACTAL
STREAM_VIBRATE_PARTICLE
STRING_BRAID_PLANE
SUBMERGE_SEGMENT
SUBMERGE_SMITH
SUBSCRIBE_LEVELER
SURFACE_VACUUM
SYMBOLIZE_MIXER
SYNC_LOOP_FLAME_V2
SYNC_SPLIT_VALIDATOR
Sanctioner_949
Starter_658
TEMPER_PRODUCER
TEMPORALIZE_EXEMPLAR
TEXEL_SPIRAL_WORKER
THETA_CONCAT_THROBER
TILE_FRAME_ASSEMBLAGE
TODAY_PENETRATE_GRID
TRIM_TRACE
TRUNK_FOREGROUND_ADAPTER
TUNE_GRID
TWIST_SPACE
Top_343
Transmitter_267
Twister_934
UNDERLINE_CLUSTER
UPPER_MARKER_EX
UR_CONTRACT_SIGNAL
VALUE_CROSS_QUANTUM
VALUE_TREMBLER
VANISH_TEMPLATE
VECTOR_RESET_KIND
VERIFY_KINDLER
VERTEX_OSCILLATE_EXTENDER
VORTEX_INIT_OPERATION
VORTEX_SPLIT_PROFILE
VOXEL_STEER_ROTOR
WAIT_GRAPH_A
WIND_IMPRESSION
XENO_ELEVATE_BARRIER
ZETA_CALM_INTENSIFIER
ZETA_VANISH_BUILDER_V5
ZETTA_LOWER_ELEMENT
ZETTA_SWELL_MINIMIZER
Zipper_993
Name
.text
Size
125KB
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
261KB
Virtual Size
261KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
816B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
build.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 90223a0bf3a14fc840cc51baeced06fd17a7853a52537ab84fbeab4d050e5b90
- MD5 d17a39209828a2033375cd59759b8f64
- SHA1 d5cf2558d6e0ebf34b19fab430a2c4b98d1d922d
- SHA512 fdc837b4520b75d38fe4053163d846269626f9c40fbf587390534c6559572a538817ec8c8ca2208ba6224bb18b33e0ee0c29a69026fb1a40390265e573e263dd
- SSDEEP 3072:KcZqf7D34tp/0+mAEkyQMgQkgghB1fA0PuTVAtkxzG3RceqiOL2bBOA:KcZqf7DI3nKTYB1fA0GTV8kUkL
- TLSH T132645A5833E8C910DA7F4775D861D67093B0BCA3A552E70B4FC4ACAB3D32740EA51AB6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
RedLine payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
197342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
185KB
Virtual Size
184KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
114KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
candy.exe
- IMPHASH cb96eb953e5eab155d563c889c70dbe5
- SHA256 863f8e761905985d4cba870b9aec44982cceb6209c05e72707522fd96e2d4e18
- MD5 232e46f901d460af1d8a76c51d999f44
- SHA1 82e7ba597784cd12d283b998d54e74c7abe7778f
- SHA512 f54f2544e615684968faf1b03ff8b941e81d827ce492261ed314a89b1dee26cf1d4392810ade1bbd7ec1bfdc8c3bee67d3e4b48be63d6387c87747f1d28bb127
- SSDEEP 768:OkmjcBzBWogGZy4ytDFET5W+orIFOlEOQLaMobkGFVh+1cgPC+L2o:CjusWUh9+8TlyxHCi2
- TLSH T11D537B0BA38411FDE187917CE6565A03E5B5B40B1322ABDF43F016660F96BE2AF3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
38444
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
VirtualAlloc
WaitForSingleObject
UnmapViewOfFile
GetModuleHandleA
CreateEventW
MultiByteToWideChar
GetExitCodeThread
Sleep
GetLastError
LoadLibraryA
CloseHandle
CreateThread
GetProcAddress
CreateFileMappingA
OutputDebugStringA
MapViewOfFile
SetUnhandledExceptionFilter
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCurrentProcess
SetEvent
ResetEvent
WaitForSingleObjectEx
GetModuleHandleW
RtlCaptureContext
EnterCriticalSection
RtlLookupFunctionEntry
RtlVirtualUnwind
CancelIo
SetConsoleCtrlHandler
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
user32
wsprintfA
advapi32
FreeSid
AllocateAndInitializeSid
CheckTokenMembership
msvcp140
?_Throw_Cpp_error@std@@YAXH@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Throw_C_error@std@@YAXH@Z
?_Random_device@std@@YAIXZ
?_Xlength_error@std@@YAXPEBD@Z
_Thrd_detach
_Cnd_do_broadcast_at_thread_exit
wininet
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memchr
memset
memcpy
memmove
__current_exception_context
__current_exception
strrchr
__std_exception_copy
__C_specific_handler
_CxxThrowException
memcmp
__std_exception_destroy
api-ms-win-crt-string-l1-1-0
_wcsicmp
_stricmp
api-ms-win-crt-runtime-l1-1-0
_initterm
_set_app_type
_get_narrow_winmain_command_line
_seh_filter_exe
_register_thread_local_exe_atexit_callback
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_c_exit
_initterm_e
_invalid_parameter_noinfo_noreturn
_cexit
_exit
terminate
_beginthreadex
_crt_atexit
exit
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
_set_new_mode
free
api-ms-win-crt-math-l1-1-0
ceil
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
116B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=260, version=31823,
count=4, id=259, version=31823,
count=30, id=261, version=31823,
count=6, id=257, version=31823,
count=11, id=257, version=29395,
count=122, id=1, productName=Unmarked objects,
count=3, id=265, version=31948,
count=2, id=259, version=31948,
count=1, id=255, version=31948,
count=1, id=258, version=31948,
hhKfuYso.exe
- IMPHASH 4035d2883e01d64f3e7a9dccb1d63af5
- SHA256 d7cd4233c352a34f396bc7176434e7e1c993cdc67fcffd96df8c06c02d7f671c
- MD5 76ef06ca158775e7c8d1245cea23c950
- SHA1 d11044670d82671969ee27b40ce1dc78a3b993c2
- SHA512 943d98a430d492d71148a4cc97d44daa7f00d195106198135496f4a0f0884f2bc5fb974ce29a8063d21ab3d421f1d40e56d9d83dfce6f4affdea5e10151b930c
- SSDEEP 49152:VdOxKf3tdz6l4osX247qAAKfpQqoLcONK/mQNQCul4aj+gFijTgg8j+NkzTRAms:jNf3EC+aAXL
- TLSH T1DF063962B89654A1C67BF234D8A02251BB713C6843317FD31F9969BA0D3ABC45F3E718
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
417056
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SuspendThread
Sleep
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
PostQueuedCompletionStatus
LoadLibraryA
LoadLibraryW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
77KB
Virtual Size
367KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
65KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
235KB
Virtual Size
235KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
kRHhLlh.exe
- IMPHASH 5795f08c013f31772c4f2dfd7361876e
- SHA256 809df87e75b0f659f2e4017692b1c66418fb6b458b7cf43b6ee918de14cf6ca1
- MD5 697880f1e9dd872a1f78d7cd2ae6dbfc
- SHA1 c462cc547382b90bd4c959f482ea49d7d79d9999
- SHA512 9b5dd10562172621595db336325ddd80cca489f2ef662a527a1ad43c3897ef51e5fac5017c1ba270197b3e135a0cf5b152b8d3d7972eeb5c7c322333939b4fcf
- SSDEEP 24576:VODY5sCJ78w61N0iG5NGpHvn4A7sjiyNpXzRB7yL710kn4ZZna2GiXw3cn6h6+rN:oSsoQ0rGZPvOikpFVyaO8kM6hbjKmj
- TLSH T15DA5CF663C2FBEDBD48846B1847192332BB4FDB40ADA70526781757A8C169762F3B433
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
PE Signature issue
Digest
32:48:e6:32:1c:d1:ba:b6:b7:52:59:4d:4b:6e:28:0c:e2:8a:5a:ac:d8:1c:9b:85:74:ea:c2:5f:9b:05:b3:fb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=DigitalHive Worldwide SaaS,L=Longreach,ST=Queensland Outback,C=Australia
Chains
Feb 10, 2026
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigitalHive Worldwide SaaS,L=Longreach,ST=Queensland Outback,C=Australia
Serial Number
5d:28:57:1b:ce:99:51:a6
Issuer
CN=DigitalHive Worldwide SaaS,L=Longreach,ST=Queensland Outback,C=Australia
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 9, 2026 - Feb 10, 2028
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
180032
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetSystemInfo
lstrcatW
AllocConsole
SetFileAttributesW
GetCurrentDirectoryW
RemoveDirectoryA
GetEnvironmentStringsW
MoveFileW
DeleteFileA
SetEnvironmentVariableA
MoveFileA
GetEnvironmentVariableW
WriteFile
CopyFileW
CreateFileA
CreateDirectoryW
WriteConsoleW
GetStdHandle
FormatMessageW
QueryPerformanceCounter
GetFileSize
LoadLibraryA
WriteConsoleA
GetEnvironmentVariableA
GetSystemDirectoryW
GetFileAttributesA
GetFileAttributesW
GetVersionExA
GetVersionExW
CloseHandle
SetFileAttributesA
CreateFileW
GetModuleHandleA
ExitProcess
CreateDirectoryA
GetCommandLineA
GetTempPathW
FreeLibrary
lstrlenA
lstrcatA
SetEnvironmentVariableW
GetComputerNameW
GetVersion
GetComputerNameA
GetCurrentProcessId
ReadConsoleA
LoadLibraryW
GetCommandLineW
GetCurrentDirectoryA
FreeEnvironmentStringsA
lstrcpyA
lstrcmpW
GetTempPathA
SetCurrentDirectoryA
SetLastError
GetLastError
SetCurrentDirectoryW
FindClose
FormatMessageA
user32
GetDlgItem
GetKeyState
FindWindowA
GetFocus
SetKeyboardState
SetWindowTextA
GetWindowRect
GetClientRect
UnregisterClassA
EnableWindow
GetForegroundWindow
PostMessageA
RegisterClassExA
IsWindowVisible
MessageBoxA
IsWindow
ShowWindow
GetClassNameA
InvalidateRect
ReleaseDC
ClientToScreen
LoadCursorA
GetNextDlgGroupItem
GetCursorPos
DestroyWindow
RegisterClassW
GetWindowLongA
BeginPaint
GetClipboardData
GetParent
GetClassNameW
DispatchMessageW
CreateWindowExA
GetDC
MoveWindow
SetWindowTextW
SendMessageA
GetAsyncKeyState
MapVirtualKeyW
DefWindowProcA
CreateWindowExW
MessageBoxW
RegisterClassExW
PeekMessageA
SetWindowPos
RegisterClassA
SetParent
SetWindowLongA
TranslateMessage
EndPaint
PostQuitMessage
EmptyClipboard
LoadCursorW
GetDlgCtrlID
SetWindowLongW
gdi32
GetStockObject
CreateCompatibleBitmap
Ellipse
RoundRect
SelectObject
ExtTextOutW
DeleteDC
OffsetWindowOrgEx
TextOutA
SetBkColor
GetTextMetricsW
GetDIBits
BitBlt
LPtoDP
OffsetViewportOrgEx
StretchBlt
ExtTextOutA
SetWindowOrgEx
CreateFontIndirectW
ScaleViewportExtEx
GetDeviceCaps
SetDIBits
GetTextExtentPoint32A
DeleteObject
SetBkMode
Rectangle
LineTo
TextOutW
ScaleWindowExtEx
DPtoLP
shell32
ExtractIconW
DragAcceptFiles
SHCreateDirectoryExA
SHGetSpecialFolderPathW
SHGetKnownFolderPath
DragQueryFileW
SHGetFileInfoW
DragFinish
SHChangeNotify
ole32
CoUninitialize
OleInitialize
CoTaskMemRealloc
StringFromCLSID
OleUninitialize
CoGetClassObject
CoTaskMemFree
CoInitialize
comctl32
FlatSB_GetScrollInfo
ImageList_Add
CreateToolbarEx
ord17
ImageList_ReplaceIcon
AIElementGyrate
AISmithDeviate
AbsorberDecompressA
AccumulatorSteer
AdjusterBuildV2
AdjusterPerfuse
AdvanceProgressionMeditate
AeroTreeEtch
AgeBridgeForm
AgedGridRunV4A
AggregatorDivideA
AheadGatewaySuppose
AlgorithmMultiply
AlloyCompressorAccent
AlloyMemberContemplateV5
AlphaForgerPull
AnalyzerHighlight
ArchaTopBackground
AssemblageConvert
AtmoEmitterDecode
Authorizer_573
AxisDilate
BalancerMix
BeingGetV5
BetaAltererConnect
BlockMatch
Blocker_661
BranchOntologyStress
BudLayerPolarize
BudProcedureEnfold
BuilderKnit
BuilderMoldV3
CastAscend
CellOrchestratorPass
CharSpongeDeserialize
ChartDiverge
ChartWind
CipherPenetrate
Closure_142
CodeCatalogChangeEx
Codec_158
ColanderCommit
CollectionDeploy
CollimatorContractA
CollimatorHash
ComingComponentUnbindA
ComponentHighlight
CompoundFlagThrobA
ConeLower
ConstrictorSolvate
ConstrictorSplit
ConstructorConnect
ControllerMixV2Ex
ConverterPropagate
ConverterScale
ConverterSolder
ConverterSolvate
Converter_974
CoreAltererContractA
CoreConeDeflate
CoreTopLock
CourierPlait
CrierPlait
CryoLexerHydrate
CrystalBroadcasterProtrude
CulturalNexusPolarize
Cutter_378
DecadSearch
Decompacter_714
DeltaMonitorProcreateA
DemoCatalogEncodeV2
DemoFacadeSymbolize
DerivedReducerDisperse
DerivedValidatorSpiral
DiscoursePipelinePass
DiscourseProducerAnneal
DnaSparkRun
DyadReflect
DyadTemperV1
EcoFabricatorDiffer
ElectronFormatterSynchronize
ElectronStringRead
ElectronTraceDiffer
EmitterMaterialize
EndpointAttract
EntireProgressionConnectV3
EntireRouterDifferA
EpochEntranceSink
EraMapDecompress
EraMessengerDischarge
EtaConsolidatorNotify
EventSignal
EvolveActivatorSituateV2A
EvolveEnergySpatialize
EvolveIntegratorDisconnect
ExaMonitorRelease
ExaTransporterReserve
ExemplarConceptualize
ExpanderSerializeA
Export_1222
Export_1586
Export_2157
Export_2868
Export_3064
Export_3213
Export_3459
Export_3672
Export_4248
Export_4390
Export_5748
Export_5788
Export_5845
Export_6016
Export_6053
Export_6229
Export_6726
Export_6771
Export_6871
Export_6895
Export_6992
Export_7403
Export_7827
Export_7852
Export_7995
Export_8371
Export_8482
Export_9109
Export_9407
FigureBufferDischarge
FilterSteer
FinishSyntaxReserve
FinishThroberAssume
FinishUnifierCoordinate
FlagEmitEx
FlowerFunctionNeutralizeV5
FluxValidatorReduce
ForestFlush
ForgerDiverge
FractalPause
FractalTransform
FreshAggregatorScatter
GammaRecorderDepress
GatewayRollback
GatewayStress
GeoPacketConsider
GeoPortalNeutralize
GradientEncryptV5Ex
GraphCastV5A
GraphTheorize
GridDimensionInitV3A
GroupWallNotify
GrowJobSynchronize
HexadExpandEx
HydroManifoldUnderlineA
ImpressionOrient
IndexEncode
IndexSpiral
IndicatorPublish
InterContinuumShow
InterpreterPierce
IntraModelStimulate
IntraRoutineRetract
IoTResourceDissolveA
JobTokenPointEx
KappaCombinerPresume
KernelChunkExpand
LastAgentFragment
LastArgumentDetect
LastPropellerElectrify
LevelerHash
LexisCatalystMeasureV3
LiteralFrame
LockScatter
MLCarrierMeditate
MLLexerSignifyV2
MLProbeCarveEx
MagnifierCombine
MagnifierEnvision
ManifoldArrangeA
MarkSeriesGauge
MatrixClear
MatrixKnit
MatureMessengerHydrate
MeasureFabricatorIntersect
MetalAgentContemplate
MetalDyadPolarize
MetalPlaneHypothesize
MetricElementClone
ModelAnalyzeEx
ModernGatewayRegress
Molder_887
MoverExhibit
MultiRadiatorVanish
MultiSeriesOrient
MultiShakerInfuse
NarrativeCollectorReinforce
NeoRelicContemplate
NetAssemblageGuideA
NetworkBraceA
NetworkConcat
NeuroArgumentLock
NeuroLiteralPosition
NeuroVocabularyEncrypt
NexusDry
NexusSynchronizeV4
NexusVary
NodePalpitatorProtrudeEx
NovoAxisGet
NovoDoorwayConsider
OldSyntaxDescend
OmegaIndexDiffuse
OmicronMatterDeviateV2
OmicronTransmitterBond
OrbixCubePushA
OrchestratorComplexifyV2
OrchestratorMatch
OriginalPropellerElaborate
OscillatorStick
PaleoEmitterShatterA
Palpitator_448
ParameterAttach
PentadFormat
PetaCatalystAttractEx
PiMixerReserve
PiSpectrumWait
PlenumCommit
PolyRouterCommitV5
PresentSymbolPosition
PreventerBind
PreventerDetach
PreventerEtch
ProducerDisplayV4
PropellerConsider
PropellerEnfold
Propeller_236
ProtonPyramidBlend
PsychoRelicNormalize
PsychoSieveSpatialize
PyroRegistryDiffer
PyroTetradScanV5A
QuantFactorAssess
QuivererSign
RadiatorSubstr
RelicPermeateEx
Reviewer_807
RhythmSpectrumLocalize
RnaBlockerPoint
RotatorTranslate
SaturaSymbolPublish
ScalarCourierPonder
ScalarThroberAscendA
ScannerStick
Scanner_598
SecAdapterCastV2
SeedVortexCreateA
SensorAttract
Sensor_931
SequenceVibrate
ServiceIonizeEx
ServiceTransform
SieveStop
SigilMultiplierAdjust
Slider_595
SmithExcite
SourceFabricatorSubscribe
SourceInterpreterSetEx
SpaceBraid
SpaceBuild
SpacePermeate
SpatioSessionLocalizeEx
SpectraRegulatorIterate
SpringControllerGlobalize
SpringTurbineWhirl
StringConcatA
SurfaceAdd
SyncConstantAdvanceA
SyntaxOperationExhibit
Synthesizer_428
TapestryBraid
TaskTranslatorSubstr
TauTraceIntersectA
TechnoModelQuery
TetradSimplifyV4
TextTextAdjust
TextTransformerVary
ThermoBlockStimulateA
ThetaConstantShowV1
ThetaPatternWrite
TintRangeCoordinate
TokenQuantumForm
TomorrowLevelerContextualize
Top_219
TopeAggregatorEnfoldEx
TorusRegress
TotalEnergySculptV4
TrajectAggregateIonizeV2
TransConverterEqualize
TransporterDecompress
TremblerDelete
TriggerFlush
UltiInhibitorCreate
UltraDiminisherElaborate
UltraIndexDesiccate
UnifierPad
UnitGrammarPut
UnitGroupTrim
Unpacker_565
UpsilonTriadReset
ValueBlockerSubscribe
VariableDeflate
VariablePenetrate
VectorMoverSteerV3
VestigeSearch
VeteranTransformerHarmonize
VortexAetherSolderA
VoxelContinuumSpawnA
WallContractEx
WaveNetworkHumidifyV3
WellTaskForge
WideAbsorberFragmentA
XiTemplateForegroundV5
ZetaArresterAlter
ZetaPatternClear
Name
.text
Size
184KB
Virtual Size
184KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
287KB
Virtual Size
286KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
816B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
lZDeIYoXVz.exe
- IMPHASH ac8d714b899fdcb6b2c2a33c5510782b
- SHA256 3e153a7edb74f3950d50bcf968418184648a7f195fd81268f77525e9b97c6960
- MD5 6b5781eb6d94c66693cddd463e86ab25
- SHA1 03cef69bad17e0c3b02e2601258d733354d5e2a8
- SHA512 c9e77566424e1df652e7dc2c388b1ade3152c2ff8b99f639103fc93bfdf317327587a65dc590c32ccde2c4ec8d6d39e969f82a3dacbd488fb9c97c65a8056e27
- SSDEEP 49152:VFz4qvhFWMNn2wkh0Vd4/F8zw5x6+tkhVLzcejrEHSd0:Vua60nbA/G+8LzcuEl
- TLSH T1FFD5F1302AAC91B6E59D75F1D05071323B79FDAE4B9E4460B6C861A90C15EE73E3F322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned binary was signed by an untrusted entity.
PE Signature issue
Digest
8c:b4:82:56:24:70:e2:15:b7:3c:49:40:c0:29:7c:dd:66:bd:3f:3a:36:62:4b:97:2c:93:aa:88:37:c2:69:b8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=ParallelFlowImplementation,L=Exmouth,ST=Western Australia Outback,C=Australia
Chains
Jan 22, 2026
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=ParallelFlowImplementation,L=Exmouth,ST=Western Australia Outback,C=Australia
Serial Number
3a:f1:30:aa:9d:ea:09:a3
Issuer
CN=ParallelFlowImplementation,L=Exmouth,ST=Western Australia Outback,C=Australia
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 21, 2026 - Jan 22, 2028
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
133296
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
ReadFile
GetTempPathW
GetConsoleMode
GetFileAttributesW
lstrlenW
CloseHandle
GetSystemDirectoryA
GetCommandLineA
SetCurrentDirectoryW
FindNextFileA
FormatMessageW
FindFirstFileA
WriteFile
GetStdHandle
lstrcatA
GetLocalTime
MoveFileW
lstrcmpW
GetWindowsDirectoryW
GetTempPathA
GetEnvironmentStringsW
GetFileAttributesA
GetEnvironmentVariableW
GetModuleHandleA
ReadConsoleW
lstrlenA
GetEnvironmentStrings
GetCurrentThreadId
GetTempFileNameW
GetLastError
SetLastError
RemoveDirectoryA
GetComputerNameA
FindClose
CreateFileW
GetModuleHandleW
GetComputerNameW
GetSystemDirectoryW
DeleteFileW
ReadConsoleA
WriteConsoleW
CopyFileW
GetTickCount
SetEnvironmentVariableW
GetEnvironmentVariableA
GetVersionExW
Sleep
GetProcAddress
CreateDirectoryA
DeleteFileA
GetCurrentDirectoryA
user32
MapVirtualKeyW
EndPaint
GetMessageW
ReleaseDC
MoveWindow
UpdateWindow
SendMessageW
RegisterClassExA
SetCursor
GetWindowLongW
GetWindowTextA
GetClipboardData
RegisterClassExW
PeekMessageA
GetKeyState
CreateWindowExA
InvalidateRect
ScreenToClient
IsWindow
SetWindowLongA
GetForegroundWindow
SetWindowPos
SetForegroundWindow
MessageBoxW
UnregisterClassA
GetMessageA
BeginPaint
EnumWindows
CloseClipboard
SetWindowTextW
SetWindowTextA
PostMessageW
MapVirtualKeyA
PostQuitMessage
LoadCursorW
EmptyClipboard
GetFocus
GetWindowLongA
GetWindowRect
GetDlgItem
GetDlgCtrlID
SetParent
LoadIconA
GetDC
SetFocus
SendMessageA
CreateWindowExW
gdi32
CreateHatchBrush
CreateFontIndirectW
RoundRect
CreateFontA
BitBlt
OffsetViewportOrgEx
CreatePen
SelectObject
SetWindowOrgEx
ExtTextOutW
StretchBlt
SetBkColor
Rectangle
ScaleWindowExtEx
CreateFontIndirectA
CreateCompatibleBitmap
GetDIBits
OffsetWindowOrgEx
GetStockObject
TextOutA
GetMapMode
RestoreDC
CreateSolidBrush
DeleteDC
SetTextColor
CreateCompatibleDC
GetTextMetricsA
shell32
SHGetFileInfoA
ExtractIconW
SHGetKnownFolderPath
SHGetSpecialFolderPathA
DragQueryFileW
SHGetFolderPathA
ExtractIconA
SHChangeNotify
DragQueryFileA
SHCreateDirectoryExA
DragFinish
ShellExecuteW
ole32
StringFromCLSID
CoTaskMemAlloc
CoGetClassObject
OleUninitialize
CLSIDFromString
CoInitialize
OleInitialize
comctl32
ImageList_ReplaceIcon
ImageList_Add
FlatSB_GetScrollInfo
CreateToolbarEx
ImageList_Destroy
ImageList_SetBkColor
ord17
@AGED_SIGNIFY_TAPESTRY_V2@8
@APPEAR_CONSOLIDATOR@0
@APPRAISE_ARRESTER@20
@Actor_248@20
@Actualizer_699@24
@BEAM_CONCAT_ROUTINE@4
@Blitter_348@12
@CALIBRATE_VIBRATOR@12
@CAST_ONTOLOGY@0
@CELL_MEASURE_GATEWAY@24
@COMPARE_ACCUMULATOR_V5_A@12
@CONTRACT_CRIER@8
@CONTRACT_PIECE@8
@COORDINATE_WAVE@12
@CRYO_SPIN_RELIC@12
@CURRENT_CYCLE_SYNTHESIZER@16
@CYBRA_CALIBRATE_COLLECTION_V5@4
@DESERIALIZE_HEPTAD@4
@DETECT_SYNTHESIZER_EX@20
@DEVIATE_NARROWER@4
@DISCHARGE_TRANSLATOR@0
@DISCOURSE_TRIM_TRANSFORMER@24
@DNA_HELIX_READER@4
@DRILL_ENNEAD@8
@EMIT_ROTATOR@4
@ENCRYPT_CONTINUUM@24
@EXHIBIT_TIME@12
@Effector_771@28
@Export_1349@28
@Export_4269@12
@Export_5663@24
@Export_5718@24
@Export_5945@4
@Export_7520@16
@Export_8337@12
@Export_9136@20
@Export_9797@20
@FORWARD_REPEAT_LAYER@16
@GEM_DECRYPT_ADAPTER@8
@GEM_PUNCTURE_FACADE@0
@GEO_CONDUCT_HALTER@24
@GIGA_FOREGROUND_OCTAD_EX@4
@GLYPH_DENOTE_PREVENTER@0
@GYRATE_ARRAY@12
@Grinder_284@4
@HELIX_COLLECTION@20
@HIGHLIGHT_VALIDATOR@16
@ITERATE_KIND@20
@LEAF_INTERSECT_LOCK_V1@16
@LOWER_CONTROLLER@8
@MAGNETIZE_DYAD_A@16
@MEASURE_WRITER@4
@METAL_CONTRACT_CRED@24
@MODERN_STOP_NODE@4
@MU_CONTRACT_MEMBRANE@20
@NEUTRON_FREE_FUNCTION@16
@NEW_TRANSFORM_QUEUE_V4_EX@0
@NEXA_BRACE_ANALYZER@16
@NOW_SCAN_CONTINUUM@8
@NU_SHOW_KEY_EX@12
@ORCHESTRATE_MOVER@8
@PAD_DETECTOR@8
@PHOTON_ORGANIZE_MOVER@24
@PIXEL_HYPOTHESIZE_CALIBRATOR@0
@POINT_TOKEN@0
@PRESENT_APPRAISE_ARGUMENT@4
@PRESENT_RELEASE_SYMBOL@8
@PSYCHO_DISAPPEAR_CONVERTER@0
@Packer_877@4
@REPEAT_ENHANCER@24
@REPEL_RADIATOR@8
@RESET_ADAPTER@4
@Recorder_103@20
@SAVE_FRAMEWORK@8
@SCULPT_TRANSLATOR@12
@SET_ROUTER_V3_A@8
@SHAPE_INTERPRETER_V3@16
@SIGMA_LOWER_PROPELLER@20
@SIGN_BORE_TEXT_V3_EX@8
@SOCIO_LOOP_VARIABLE@20
@SOURCE_INFUSE_LIST_A@12
@SPECTRA_DECOMPRESS_AGENT@4
@SPROUT_HYDRATE_FRAME@16
@STICK_METHOD@20
@STRUCTURE_TRACE@12
@SUPPOSE_CONVEYOR@4
@TEMPER_FACTOR_A@0
@TEMPO_RESUME_CIPHER_EX@0
@TIDE_ORGANIZE_BUILDER@24
@TRANSLATE_ELEMENT@0
@TRUNK_COPY_STARTER@0
@TWINE_TERMINOLOGY@8
@UNFOLD_MATRIX_V3@16
@UPDATE_FABRICATOR@16
@VORTEX_REFRACT_COMPONENT@4
ALIGN_TYPE_EX
ALLOC_COMPONENT
ATMO_PULSE_COMBINER_A
AUTH_SHATTER_INITIATOR
BEAT_PUNCTURE_OPERATION
BIO_DETAIL_EXEMPLAR_EX
BORE_CONTINUUM_EX
BRANCH_SYMBOLIZE_FABRICATOR
CAST_FRACTAL
CAST_VIBRATOR
CELL_MAGNETIZE_FOCUSER
COLLIMATE_GATEWAY_A
COMPOUND_COMMIT_ELEMENT
COMPRESS_ORCHESTRATOR
CONSIDER_SUBSTANCE
COORDINATE_SYMBOL
CORE_TEMPER_GYROSCOPE
COSMO_WHIRL_BOOSTER
CRUMBLE_CONDENSER
CRYO_EXHIBIT_PYRAMID
CYCLE_WAVE
Clasp_210
Cutter_513
DEFLATE_SYMBOL
DEMO_FORMAT_ARRAY
DENOTE_FORM_V3
DIGI_SHOW_SPHERE_A
DISCHARGE_MODIFIER_V1
ELECTRON_PULL_CONTINUUM_EX
ELECTRO_RADIATE_WORKER
EMIT_HALTER
EMIT_SCANNER_A
ENTIRE_APPRAISE_READER
ETA_REINFORCE_RELIC
EVALUATE_COLLECTOR
EXCITE_ENERGY
EXCITE_MULTIPLIER_EX
Export_3096
Export_5493
Export_7009
Export_7297
Function_690
GEO_ROTATE_CALIBRATOR
GET_WEB_EX
GLASS_INTERSECT_NET_V2
GRAVITO_BACKGROUND_SYNTHESIZER
HEDRA_DEVIATE_CONSTANT
INFRA_EXTEND_CONVERTER
INFRA_MOISTEN_REDUCER
INIT_PACKET
INTER_EXPAND_ARCHETYPE
INTER_FORM_NATURE
JOB_PERFUSE_TOKENIZER
KERNEL_HUMIDIFY_PIECE_V1
LATTICE_CALIBRATE_CREATOR
LEAF_LOAD_BEARER
LUMA_TRANSFORM_STREAM
MARK_SOLVATE_REGISTRY_V3_EX
META_REPRESENT_BLOCK
MOLE_COORDINATE_DECAD_EX
NET_APPRAISE_FLAG
NEUTRON_CONCRETIZE_ENERGY_EX
NEW_PULSE_TOP_EX
OMEGA_HASH_FABRICATOR
ORDER_CONSTRICTOR
PARA_UNLOCK_COMBINER
PAUSE_COLANDER
POLARIZE_WRITER_A
POLY_REPRESENT_CHUNK
PROTON_LOOP_INITIATOR
PUBLISH_AGENT
PULSE_ELEMENT
QUAL_PLACE_CONSTRICTOR_EX
QUANTA_MAGNETIZE_LATTICE
ROOT_DIFFRACT_WALL_V2
Realizer_754
SEED_RESERVE_COLLECTION
SIGNAL_PRISM
SPIRAL_STABILIZER
START_INTENSIFIER
SWELL_GRAPH_V2
SYNCHRONIZE_SURFACE
TASK_MAGNETIZE_SUBROUTINE
TECHNO_PRECIPITATE_KEY
TODAY_INIT_IGNITER
TOPE_REFLECT_TREE_V4
TRANSLATE_ADAPTER_A
Vibrator_142
Vibrator_900
WAIT_STREAM
WHOLE_VANISH_COLLECTOR
WIDE_HAMMER_CALIBRATOR
WIND_PROJECTOR
WITHDRAW_PROXY
XI_CROSS_DILATOR
_ANCIENT_CONCAT_MATRIX@8
_ANCIENT_DISSOLVE_ROTOR_A@12
_APPEAR_CHANGER@12
_ARRANGE_AGGREGATOR@0
_ARRANGE_HEURISTIC@8
_AUTH_NOTIFY_VIBRATOR@4
_BASE_GYRATE_OSCILLATOR_EX@16
_BLOCK_BRACE_EXPANDER@20
_BOND_DIMINISHER@4
_CASE_AXIS_EX@12
_CAST_QUIVERER_V2_EX@4
_CHAR_ALLOC_CONTINUUM@16
_CHROMA_FORM_ARGUMENT@24
_CONSIDER_PARTICLE_EX@0
_CONTEXTUALIZE_ROTOR@20
_CORE_ORCHESTRATE_EXPANDER@12
_CORE_SUFFUSE_TYPE_A@12
_CRYSTAL_DETACH_WEB@0
_Cropper_429@4
_DIVIDE_IMPRINT@24
_Deleter_191@20
_Dismantler_334@20
_EDGE_PERMEATE_THROBER@20
_EPSILON_PASS_HEPTAD@0
_EQUALIZE_TOP@16
_EXHIBIT_RECORDER@28
_EXPAND_GROUP_A@8
_Emitter_685@16
_Expander_901@16
_Export_1086@24
_Export_1456@12
_Export_5858@8
_Export_6414@36
_FLUX_ORGANIZE_CALIBRATOR_A@16
_FOREGROUND_ACTIVATOR@4
_FOUNT_DRILL_DETECTOR_V5@12
_GEO_ELEVATE_SERIES@12
_GEO_WAIT_EQUALIZER@0
_Glider_235@24
_HARMONIZE_LATTICE_V1_EX@4
_Hook_810@20
_JEWEL_SIGNIFY_NOMENCLATURE@16
_KAPPA_REVERSE_TEXT@24
_LAMBDA_EMIT_TRANSLATOR@20
_LATTICE_SPIRAL_ENCODER@24
_LOGIC_ANALYZE_ABSORBER_V5@24
_MATCH_BOOSTER@8
_MATERIALIZE_CRED@12
_MEASURE_GUIDE_PROCEDURE@28
_MOVE_ELEMENT@24
_NAVIGATE_WRAPPER@4
_NEURO_TUNE_CONDENSER@16
_NEXA_SITUATE_ZONE@20
_NOVO_QUANTIFY_FLYWHEEL_EX@12
_PATH_ENGRAVE_VACUUM@0
_POLY_SEARCH_HANDLE@24
_POSITION_CUBE@24
_PRECIPITATE_METHOD@4
_PRIMO_OPTIMIZE_MINIMIZER@12
_PRIMO_RUN_CODE@16
_PROC_REPEL_MONITOR@16
_QUANT_WHIRL_MODEL@20
_REINFORCE_SPHERE@20
_REPEAT_FABRICATOR@4
_RESUME_BUFFER@0
_RHYTHM_MULTIPLY_TRANSFORMER@12
_RUN_TASK@16
_SATURA_COPY_ANALYZER@4
_SCATTER_WRITER_EX@28
_SENIOR_DESERIALIZE_POLICY_EX@16
_SITUATE_CONTROLLER@24
_SOCIO_DESTROY_CONVEYOR_A@20
_SPIRAL_CONTROLLER@16
_STRING_DESCEND_STABILIZER@16
_SUPRA_ITERATE_FILTER@12
_SURFACE_GRID@20
_SWELL_COLLIMATOR@4
_SYNTHA_LOOP_SCOPE_A@16
_Soarer_946@20
_Spark_776@16
_TASK_HASH_SUBROUTINE_EX@12
_TAU_STIMULATE_PREVENTER@8
_TEMPO_CHARGE_LATTICE_EX@20
_TEMPO_EXPAND_HINDERER@0
_TENSOR_FRAME_BRIDGE_V2@20
_THETA_DESERIALIZE_CONTINUUM_EX@16
_TINT_SPIRAL_MESH@16
_TOTAL_REMOVE_COMBINER_EX@0
_TRAJECT_ALLOC_CONTINUUM@24
_Twister_151@12
_UPSILON_DESTROY_SERVICE@24
_VERTEX_SPIRAL_BEATER@0
_VOXEL_DEHYDRATE_SCHEMA@16
_WIDE_CALM_KEY@24
_WRITE_STRAINER_V1@20
Name
.text
Size
139KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
370KB
Virtual Size
369KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
rVYGceP.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 30424b733fe17e1e601f5c2ddbd75a0979909835356d5d1e7bb27182da11ea13
- MD5 33b68203279605561e7384f2d406c289
- SHA1 92fd7a74341ea946027dab83f890d9303db89ddc
- SHA512 50a011ed8fe7464570d089087ae40857aeb583d98eb8532fc960d20cf0436ca06e75029bcb0e4f10b9c6bdf4eca3920a6f59cfab77cf91daa2af3940baef8b3f
- SSDEEP 49152:ry3YdUJgmqNXS1bb/7NykVsQU03NDkbWwL2U9l2GoXdGTqFO3jxwg/jl8w9PUdC2:ro+DNSZfvabd2U9obXHkjR5Pb0Ec
- TLSH T15E664A07EC6155E9C0AAE2358A63D153BB717C495B3523D32BA0F7282F72BD0AE79350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
b0:d6:d7:e0:30:8c:e4:e7:3b:9f:64:ec:4e:79:d8:95:d2:19:b6:df:c4:78:e0:2d:0c:e7:5b:c8:32:5f:48:8b:e9:79:0c:59:c4:47:d6:a8:00:6e:d0:f8:54:6f:68:7f:6c:b0:69:9c:70:a6:6c:cc:f4:81:0c:9b:6e:04:4e:a1
Digest Algorithm
sha512
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=5073497,CN=Anaconda\, Inc.,O=Anaconda\, Inc.,L=Austin,ST=Texas,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Aug 25, 2025
SERIALNUMBER=5073497,CN=Anaconda\, Inc.,O=Anaconda\, Inc.,L=Austin,ST=Texas,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=5073497,CN=Anaconda\, Inc.,O=Anaconda\, Inc.,L=Austin,ST=Texas,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2013 - Jan 15, 2038
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=5073497,CN=Anaconda\, Inc.,O=Anaconda\, Inc.,L=Austin,ST=Texas,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0c:a8:a7:9e:0f:af:05:a7:93:8b:fa:c5:a3:08:1f:95
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 14, 2024 - Mar 13, 2026
Subject
CN=DigiCert SHA512 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
08:19:75:fe:89:b4:fb:30:4b:13:80:77:d2:d3:fe:42
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
1
Major OS version
6
Entry point
508288
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
346KB
Virtual Size
690KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
57KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
random.exe
- IMPHASH 40ab50289f7ef5fae60801f88d4541fc
- SHA256 c2cd34c0f4295339c1d611c5a9a4847be9da704e3454fe781f4af47540c0bb9d
- MD5 ab7bedfaddd68182ccc6d808c847dde8
- SHA1 3419b68d113c4dfc2514fdb134dbb424b93f950a
- SHA512 fb0ad733d1b26a889dfe173f8cd48be076971412fbaeb10370ea96e3f8c73675745a0107bd41cb42d274295f89559157ef15310e7c46336a048c86f8ea379336
- SSDEEP 98304:UrirtAN325Iu0yPuEUayz5HjFsFeQZVHgDB6Xo5NIhGouQUIM85Rv+e:y2ApYewuysHj5+Y5NIh4812e
- TLSH T14A46022FB28BBC3EE41A3B370572E15494FB7A1DA5226D5686E4849CCE258D03D3E743
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Inno Setup is an open-source installation builder for Windows applications.
Inno Setup installer
Minor OS version
1
Major OS version
6
Entry point
688024
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetACP
GetExitCodeProcess
CloseHandle
LocalFree
SizeofResource
VirtualProtect
QueryPerformanceFrequency
VirtualFree
GetFullPathNameW
GetProcessHeap
ExitProcess
HeapAlloc
GetCPInfoExW
RtlUnwind
GetCPInfo
GetStdHandle
GetModuleHandleW
FreeLibrary
HeapDestroy
ReadFile
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
FindResourceW
CreateThread
CompareStringW
LoadLibraryA
ResetEvent
GetVolumeInformationW
GetVersion
GetDriveTypeW
RaiseException
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GetStartupInfoW
GetFileAttributesW
InitializeCriticalSection
GetSystemWindowsDirectoryW
GetThreadPriority
SetThreadPriority
GetCurrentProcess
VirtualAlloc
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
GetWindowsDirectoryW
LCMapStringW
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
GetSystemDirectoryW
DeleteFileW
GetLocalTime
GetEnvironmentVariableW
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
SetErrorMode
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
GetUserDefaultLangID
RemoveDirectoryW
CreateEventW
SetThreadLocale
GetThreadLocale
comctl32
InitCommonControls
user32
CreateWindowExW
TranslateMessage
CharLowerBuffW
CallWindowProcW
CharUpperW
PeekMessageW
GetSystemMetrics
SetWindowLongW
MessageBoxW
DestroyWindow
CharUpperBuffW
CharNextW
MsgWaitForMultipleObjects
LoadStringW
ExitWindowsEx
DispatchMessageW
oleaut32
SysAllocStringLen
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetLBound
SafeArrayGetUBound
VariantInit
VariantClear
SysFreeString
SysReAllocStringLen
VariantChangeType
SafeArrayCreate
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenThreadToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyExW
OpenProcessToken
FreeSid
AllocateAndInitializeSid
EqualSid
RegQueryValueExW
GetTokenInformation
ConvertSidToStringSidW
RegCloseKey
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
.text
Size
662KB
Virtual Size
661KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
28KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
512B
Virtual Size
420B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
113B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
24B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
93B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
67KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
request.exe
- SHA256 d9db8bdad5edd37400bb6b885f65a0aee158c8b6e3f517e8de9c6a114e3a40be
- MD5 cca25e0ed7f8326f06a45e3163ccfd20
- SHA1 94368a83013e6e408d859c87fe54a7f140e96548
- SHA512 41845c5e1c16e39ae1d3942e11b5a225ae0a66afde21ae88461e7805871a2185c77e471bd7fcc0ab7ca85d51f19f9a1c4d1b441bdb8ff4eed805c65fbd76dc1f
- SSDEEP 24576:nalksa0JaV5yCr6wIv2wnvtVSkIHcStEV:nays5JaKwVwlz
- TLSH T118F433105BF10A2DF8868B70F6BDB0ABF8FC757A519123570568C2247C9A8C781BBBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6660
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.stub
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.payload
Size
752KB
Virtual Size
752KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
304B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE