Windows-12-b1-x64.iso
- SHA256 31d46ae6d74d5483bbe6de70794ccfcc61c1240a622351c1de64ef79f7782626
Password
inf
Overview
overview
3Static
static
3Boot/Resou...es.dll
windows10-ltsc_2021-x64
1Boot/Resou...es.dll
windows10-ltsc_2021-x64
1Boot/bcdedit.exe
windows10-ltsc_2021-x64
1Boot/bg-BG...xe.dll
windows10-ltsc_2021-x64
1Boot/bootuwf.dll
windows10-ltsc_2021-x64
3Boot/bootvhd.dll
windows10-ltsc_2021-x64
3Boot/cs-CZ...xe.dll
windows10-ltsc_2021-x64
1Boot/cs-CZ...xe.dll
windows10-ltsc_2021-x64
1Boot/da-DK...xe.dll
windows10-ltsc_2021-x64
1Boot/da-DK...xe.dll
windows10-ltsc_2021-x64
1Boot/de-DE...xe.dll
windows10-ltsc_2021-x64
1Boot/de-DE...xe.dll
windows10-ltsc_2021-x64
1Boot/el-GR...xe.dll
windows10-ltsc_2021-x64
1Boot/el-GR...xe.dll
windows10-ltsc_2021-x64
1Boot/en-GB...xe.dll
windows10-ltsc_2021-x64
1Boot/en-US...xe.dll
windows10-ltsc_2021-x64
1Boot/en-US...xe.dll
windows10-ltsc_2021-x64
1Boot/es-ES...xe.dll
windows10-ltsc_2021-x64
1Boot/es-ES...xe.dll
windows10-ltsc_2021-x64
1Boot/es-MX...xe.dll
windows10-ltsc_2021-x64
1Boot/et-EE...xe.dll
windows10-ltsc_2021-x64
1Boot/etfsboot.com
windows10-ltsc_2021-x64
Boot/fi-FI...xe.dll
windows10-ltsc_2021-x64
1Boot/fi-FI...xe.dll
windows10-ltsc_2021-x64
1Boot/fr-CA...xe.dll
windows10-ltsc_2021-x64
1Boot/fr-FR...xe.dll
windows10-ltsc_2021-x64
1Boot/fr-FR...xe.dll
windows10-ltsc_2021-x64
1Boot/hr-HR...xe.dll
windows10-ltsc_2021-x64
1Boot/hu-HU...xe.dll
windows10-ltsc_2021-x64
1Boot/hu-HU...xe.dll
windows10-ltsc_2021-x64
1Boot/it-IT...xe.dll
windows10-ltsc_2021-x64
1Boot/it-IT...xe.dll
windows10-ltsc_2021-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Boot/Resources/bootres.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
Boot/Resources/en-US/bootres.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
Boot/bcdedit.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
Boot/bg-BG/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
Boot/bootuwf.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
900 seconds
Behavioral task
behavioral6
Sample
Boot/bootvhd.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
2 signatures
900 seconds
Behavioral task
behavioral7
Sample
Boot/cs-CZ/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral8
Sample
Boot/cs-CZ/memtest.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral9
Sample
Boot/da-DK/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral10
Sample
Boot/da-DK/memtest.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral11
Sample
Boot/de-DE/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral12
Sample
Boot/de-DE/memtest.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral13
Sample
Boot/el-GR/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral14
Sample
Boot/el-GR/memtest.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral15
Sample
Boot/en-GB/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral16
Sample
Boot/en-US/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral17
Sample
Boot/en-US/memtest.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral18
Sample
Boot/es-ES/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral19
Sample
Boot/es-ES/memtest.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral20
Sample
Boot/es-MX/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral21
Sample
Boot/et-EE/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral22
Sample
Boot/etfsboot.com
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral23
Sample
Boot/fi-FI/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral24
Sample
Boot/fi-FI/memtest.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral25
Sample
Boot/fr-CA/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral26
Sample
Boot/fr-FR/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral27
Sample
Boot/fr-FR/memtest.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral28
Sample
Boot/hr-HR/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral29
Sample
Boot/hu-HU/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral30
Sample
Boot/hu-HU/memtest.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral31
Sample
Boot/it-IT/bootmgr.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral32
Sample
Boot/it-IT/memtest.exe.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
General
- Target Windows-12-b1-x64.iso
- Size 729.5MB
- Sample260530-e53yasdz71
- SHA256 31d46ae6d74d5483bbe6de70794ccfcc61c1240a622351c1de64ef79f7782626
- MD5 7d905969b34eaa0a2d109ade487e60f6
- SHA1 b9f6be0f7ecf9c1c892038cb0fa311f5969b9ff2
- SHA512 3e316dae1343aa09a38b84e812be687a5966640ab9018d5368e6ef6631030a8b6d64d329a42d8d2bdee7cb96bfe131cbd9be50f3e4de69dac79b590b9f26ed5e
- SSDEEP 12582912:P/cNKLudH5dGa2ai8/F5zfWOsOJaKxLSA6aa52f2g:P0NKCx5Hi+WGJtuA6b4f9
- TLSH T1268922436BFA1090E4B7463887B79221AE37BCD11934865E9178385F4FB3A909D3277E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Drivers/Wifi/VEN_10EC_DEV_C822/rtwlane.sys
File Explorer
-
Windows-12-b1-x64.iso.iso 729.5MB
-
out.iso.iso 729.5MB
-
Boot/BCD16KB
-
Boot/Fonts/chs_boot.ttf3.5MB
-
Boot/Fonts/cht_boot.ttf3.7MB
-
Boot/Fonts/jpn_boot.ttf1.9MB
-
Boot/Fonts/kor_boot.ttf2.3MB
-
Boot/Fonts/malgun_boot.ttf191KB
-
Boot/Fonts/malgunn_boot.ttf189KB
-
Boot/Fonts/meiryo_boot.ttf161KB
-
Boot/Fonts/meiryon_boot.ttf160KB
-
Boot/Fonts/msjh_boot.ttf179KB
-
Boot/Fonts/msjhn_boot.ttf177KB
-
Boot/Fonts/msyh_boot.ttf171KB
-
Boot/Fonts/msyhn_boot.ttf169KB
-
Boot/Fonts/segmono_boot.ttf44KB
-
Boot/Fonts/segoe_slboot.ttf100KB
-
Boot/Fonts/segoen_slboot.ttf100KB
-
Boot/Fonts/wgl4_boot.ttf48KB
-
Boot/Resources/bootres.dll.dll 165KB
-
Boot/Resources/en-US/bootres.dll.mui.dll 13KB
-
Boot/bcdedit.exe.exe 489KB
-
Boot/bg-BG/bootmgr.exe.mui.dll 80KB
-
Boot/boot.sdi3.0MB
-
Boot/bootmgr431KB
-
Boot/bootnxt1B
-
Boot/bootuwf.dll.dll 29KB
-
Boot/bootvhd.dll.dll 102KB
-
Boot/cs-CZ/bootmgr.exe.mui.dll 79KB
-
Boot/cs-CZ/memtest.exe.mui.dll 45KB
-
Boot/da-DK/bootmgr.exe.mui.dll 78KB
-
Boot/da-DK/memtest.exe.mui.dll 45KB
-
Boot/de-DE/bootmgr.exe.mui.dll 82KB
-
Boot/de-DE/memtest.exe.mui.dll 45KB
-
Boot/efisys_noprompt.bin1.4MB
-
Boot/efisys_prompt.bin1.4MB
-
Boot/el-GR/bootmgr.exe.mui.dll 83KB
-
Boot/el-GR/memtest.exe.mui.dll 46KB
-
Boot/en-GB/bootmgr.exe.mui.dll 76KB
-
Boot/en-US/bootmgr.exe.mui.dll 76KB
-
Boot/en-US/memtest.exe.mui.dll 44KB
-
Boot/es-ES/bootmgr.exe.mui.dll 80KB
-
Boot/es-ES/memtest.exe.mui.dll 45KB
-
Boot/es-MX/bootmgr.exe.mui.dll 80KB
-
Boot/et-EE/bootmgr.exe.mui.dll 77KB
-
Boot/etfsboot.com4KB
-
Boot/fi-FI/bootmgr.exe.mui.dll 79KB
-
Boot/fi-FI/memtest.exe.mui.dll 45KB
-
Boot/fr-CA/bootmgr.exe.mui.dll 81KB
-
Boot/fr-FR/bootmgr.exe.mui.dll 82KB
-
Boot/fr-FR/memtest.exe.mui.dll 45KB
-
Boot/hr-HR/bootmgr.exe.mui.dll 79KB
-
Boot/hu-HU/bootmgr.exe.mui.dll 82KB
-
Boot/hu-HU/memtest.exe.mui.dll 45KB
-
Boot/it-IT/bootmgr.exe.mui.dll 79KB
-
Boot/it-IT/memtest.exe.mui.dll 45KB
-
Boot/ja-JP/bootmgr.exe.mui.dll 68KB
-
Boot/ja-JP/memtest.exe.mui.dll 42KB
-
Boot/ko-KR/bootmgr.exe.mui.dll 68KB
-
Boot/ko-KR/memtest.exe.mui.dll 42KB
-
Boot/lt-LT/bootmgr.exe.mui.dll 78KB
-
Boot/lv-LV/bootmgr.exe.mui.dll 78KB
-
Boot/memtest.exe.exe 1.0MB
-
Boot/nb-NO/bootmgr.exe.mui.dll 77KB
-
Boot/nb-NO/memtest.exe.mui.dll 45KB
-
Boot/nl-NL/bootmgr.exe.mui.dll 80KB
-
Boot/nl-NL/memtest.exe.mui.dll 45KB
-
Boot/pl-PL/bootmgr.exe.mui.dll 80KB
-
Boot/pl-PL/memtest.exe.mui.dll 45KB
-
Boot/pt-BR/bootmgr.exe.mui.dll 79KB
-
Boot/pt-BR/memtest.exe.mui.dll 45KB
-
Boot/pt-PT/bootmgr.exe.mui.dll 79KB
-
Boot/pt-PT/memtest.exe.mui.dll 45KB
-
Boot/qps-ploc/bootmgr.exe.mui.dll 86KB
-
Boot/qps-ploc/memtest.exe.mui.dll 53KB
-
Boot/qps-plocm/bootmgr.exe.mui.dll 80KB
-
Boot/ro-RO/bootmgr.exe.mui.dll 78KB
-
Boot/ru-RU/bootmgr.exe.mui.dll 79KB
-
Boot/ru-RU/memtest.exe.mui.dll 44KB
-
Boot/sk-SK/bootmgr.exe.mui.dll 79KB
-
Boot/sl-SI/bootmgr.exe.mui.dll 78KB
-
Boot/sr-Latn-RS/bootmgr.exe.mui.dll 79KB
-
Boot/sv-SE/bootmgr.exe.mui.dll 78KB
-
Boot/sv-SE/memtest.exe.mui.dll 44KB
-
Boot/tr-TR/bootmgr.exe.mui.dll 78KB
-
Boot/tr-TR/memtest.exe.mui.dll 45KB
-
Boot/uk-UA/bootmgr.exe.mui.dll 79KB
-
Boot/zh-CN/bootmgr.exe.mui.dll 64KB
-
Boot/zh-CN/memtest.exe.mui.dll 42KB
-
Boot/zh-TW/bootmgr.exe.mui.dll 64KB
-
Boot/zh-TW/memtest.exe.mui.dll 42KB
-
Drivers/Wifi/VEN_10EC_DEV_C822/netrtwlane.PNF121KB
-
Drivers/Wifi/VEN_10EC_DEV_C822/netrtwlane.inf241KB
-
Drivers/Wifi/VEN_10EC_DEV_C822/netvwifibus.inf6KB
-
Drivers/Wifi/VEN_10EC_DEV_C822/rtwlane.inf241KB
-
Drivers/Wifi/VEN_10EC_DEV_C822/rtwlane.sys.sys 10.9MB
-
EFI/Boot/bootx64.efi.dll 2.4MB
-
EFI/Microsoft/Boot/BCD16KB
-
EFI/Microsoft/Boot/CIPolicies/Active/{5DAC656C-21AD-4A02-AB49-649917162E70}.cip10KB
-
EFI/Microsoft/Boot/CIPolicies/Active/{82443e1e-8a39-4b4a-96a8-f40ddc00b9f3}.cip27KB
-
EFI/Microsoft/Boot/CIPolicies/Active/{CDD5CB55-DB68-4D71-AA38-3DF2B6473A52}.cip10KB
-
EFI/Microsoft/Boot/Fonts/chs_boot.ttf3.5MB
-
EFI/Microsoft/Boot/Fonts/cht_boot.ttf3.7MB
-
EFI/Microsoft/Boot/Fonts/jpn_boot.ttf1.9MB
-
EFI/Microsoft/Boot/Fonts/kor_boot.ttf2.3MB
-
EFI/Microsoft/Boot/Fonts/malgun_boot.ttf191KB
-
EFI/Microsoft/Boot/Fonts/malgunn_boot.ttf189KB
-
EFI/Microsoft/Boot/Fonts/meiryo_boot.ttf161KB
-
EFI/Microsoft/Boot/Fonts/meiryon_boot.ttf160KB
-
EFI/Microsoft/Boot/Fonts/msjh_boot.ttf179KB
-
EFI/Microsoft/Boot/Fonts/msjhn_boot.ttf177KB
-
EFI/Microsoft/Boot/Fonts/msyh_boot.ttf171KB
-
EFI/Microsoft/Boot/Fonts/msyhn_boot.ttf169KB
-
EFI/Microsoft/Boot/Fonts/segmono_boot.ttf44KB
-
EFI/Microsoft/Boot/Fonts/segoe_slboot.ttf100KB
-
EFI/Microsoft/Boot/Fonts/segoen_slboot.ttf100KB
-
EFI/Microsoft/Boot/Fonts/wgl4_boot.ttf48KB
-
EFI/Microsoft/Boot/Resources/bootres.dll.dll 165KB
-
EFI/Microsoft/Boot/Resources/en-US/bootres.dll.mui.dll 13KB
-
EFI/Microsoft/Boot/bg-BG/bootmgfw.efi.mui.dll 80KB
-
EFI/Microsoft/Boot/bg-BG/bootmgr.efi.mui.dll 80KB
-
EFI/Microsoft/Boot/boot.stl4KB
-
EFI/Microsoft/Boot/bootmgfw.efi.dll 2.4MB
-
EFI/Microsoft/Boot/bootmgr.efi.exe 2.4MB
-
EFI/Microsoft/Boot/cs-CZ/bootmgfw.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/cs-CZ/bootmgr.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/cs-CZ/memtest.efi.mui.dll 45KB
-
EFI/Microsoft/Boot/da-DK/bootmgfw.efi.mui.dll 78KB
-
EFI/Microsoft/Boot/da-DK/bootmgr.efi.mui.dll 78KB
-
EFI/Microsoft/Boot/da-DK/memtest.efi.mui.dll 45KB
-
EFI/Microsoft/Boot/de-DE/bootmgfw.efi.mui.dll 82KB
-
EFI/Microsoft/Boot/de-DE/bootmgr.efi.mui.dll 82KB
-
EFI/Microsoft/Boot/de-DE/memtest.efi.mui.dll 45KB
-
EFI/Microsoft/Boot/el-GR/bootmgfw.efi.mui.dll 83KB
-
EFI/Microsoft/Boot/el-GR/bootmgr.efi.mui.dll 83KB
-
EFI/Microsoft/Boot/el-GR/memtest.efi.mui.dll 46KB
-
EFI/Microsoft/Boot/en-GB/bootmgfw.efi.mui.dll 76KB
-
EFI/Microsoft/Boot/en-GB/bootmgr.efi.mui.dll 76KB
-
EFI/Microsoft/Boot/en-US/bootmgfw.efi.mui.dll 76KB
-
EFI/Microsoft/Boot/en-US/bootmgr.efi.mui.dll 76KB
-
EFI/Microsoft/Boot/en-US/memtest.efi.mui.dll 44KB
-
EFI/Microsoft/Boot/es-ES/bootmgfw.efi.mui.dll 80KB
-
EFI/Microsoft/Boot/es-ES/bootmgr.efi.mui.dll 80KB
-
EFI/Microsoft/Boot/es-ES/memtest.efi.mui.dll 45KB
-
EFI/Microsoft/Boot/es-MX/bootmgfw.efi.mui.dll 80KB
-
EFI/Microsoft/Boot/es-MX/bootmgr.efi.mui.dll 80KB
-
EFI/Microsoft/Boot/et-EE/bootmgfw.efi.mui.dll 77KB
-
EFI/Microsoft/Boot/et-EE/bootmgr.efi.mui.dll 77KB
-
EFI/Microsoft/Boot/fi-FI/bootmgfw.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/fi-FI/bootmgr.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/fi-FI/memtest.efi.mui.dll 45KB
-
EFI/Microsoft/Boot/fr-CA/bootmgfw.efi.mui.dll 81KB
-
EFI/Microsoft/Boot/fr-CA/bootmgr.efi.mui.dll 81KB
-
EFI/Microsoft/Boot/fr-FR/bootmgfw.efi.mui.dll 82KB
-
EFI/Microsoft/Boot/fr-FR/bootmgr.efi.mui.dll 82KB
-
EFI/Microsoft/Boot/fr-FR/memtest.efi.mui.dll 45KB
-
EFI/Microsoft/Boot/hr-HR/bootmgfw.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/hr-HR/bootmgr.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/hu-HU/bootmgfw.efi.mui.dll 82KB
-
EFI/Microsoft/Boot/hu-HU/bootmgr.efi.mui.dll 82KB
-
EFI/Microsoft/Boot/hu-HU/memtest.efi.mui.dll 45KB
-
EFI/Microsoft/Boot/it-IT/bootmgfw.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/it-IT/bootmgr.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/it-IT/memtest.efi.mui.dll 45KB
-
EFI/Microsoft/Boot/ja-JP/bootmgfw.efi.mui.dll 68KB
-
EFI/Microsoft/Boot/ja-JP/bootmgr.efi.mui.dll 68KB
-
EFI/Microsoft/Boot/ja-JP/memtest.efi.mui.dll 42KB
-
EFI/Microsoft/Boot/ko-KR/bootmgfw.efi.mui.dll 68KB
-
EFI/Microsoft/Boot/ko-KR/bootmgr.efi.mui.dll 68KB
-
EFI/Microsoft/Boot/ko-KR/memtest.efi.mui.dll 42KB
-
EFI/Microsoft/Boot/lt-LT/bootmgfw.efi.mui.dll 78KB
-
EFI/Microsoft/Boot/lt-LT/bootmgr.efi.mui.dll 78KB
-
EFI/Microsoft/Boot/lv-LV/bootmgfw.efi.mui.dll 78KB
-
EFI/Microsoft/Boot/lv-LV/bootmgr.efi.mui.dll 78KB
-
EFI/Microsoft/Boot/memtest.efi.exe 2.2MB
-
EFI/Microsoft/Boot/nb-NO/bootmgfw.efi.mui.dll 77KB
-
EFI/Microsoft/Boot/nb-NO/bootmgr.efi.mui.dll 77KB
-
EFI/Microsoft/Boot/nb-NO/memtest.efi.mui.dll 45KB
-
EFI/Microsoft/Boot/nl-NL/bootmgfw.efi.mui.dll 80KB
-
EFI/Microsoft/Boot/nl-NL/bootmgr.efi.mui.dll 80KB
-
EFI/Microsoft/Boot/nl-NL/memtest.efi.mui.dll 45KB
-
EFI/Microsoft/Boot/pl-PL/bootmgfw.efi.mui.dll 80KB
-
EFI/Microsoft/Boot/pl-PL/bootmgr.efi.mui.dll 80KB
-
EFI/Microsoft/Boot/pl-PL/memtest.efi.mui.dll 45KB
-
EFI/Microsoft/Boot/pt-BR/bootmgfw.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/pt-BR/bootmgr.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/pt-BR/memtest.efi.mui.dll 45KB
-
EFI/Microsoft/Boot/pt-PT/bootmgfw.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/pt-PT/bootmgr.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/pt-PT/memtest.efi.mui.dll 45KB
-
EFI/Microsoft/Boot/qps-ploc/memtest.efi.mui.dll 53KB
-
EFI/Microsoft/Boot/ro-RO/bootmgfw.efi.mui.dll 78KB
-
EFI/Microsoft/Boot/ro-RO/bootmgr.efi.mui.dll 78KB
-
EFI/Microsoft/Boot/ru-RU/bootmgfw.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/ru-RU/bootmgr.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/ru-RU/memtest.efi.mui.dll 44KB
-
EFI/Microsoft/Boot/sk-SK/bootmgfw.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/sk-SK/bootmgr.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/sl-SI/bootmgfw.efi.mui.dll 78KB
-
EFI/Microsoft/Boot/sl-SI/bootmgr.efi.mui.dll 78KB
-
EFI/Microsoft/Boot/sr-Latn-RS/bootmgfw.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/sr-Latn-RS/bootmgr.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/sv-SE/bootmgfw.efi.mui.dll 78KB
-
EFI/Microsoft/Boot/sv-SE/bootmgr.efi.mui.dll 78KB
-
EFI/Microsoft/Boot/sv-SE/memtest.efi.mui.dll 44KB
-
EFI/Microsoft/Boot/tr-TR/bootmgfw.efi.mui.dll 78KB
-
EFI/Microsoft/Boot/tr-TR/bootmgr.efi.mui.dll 78KB
-
EFI/Microsoft/Boot/tr-TR/memtest.efi.mui.dll 45KB
-
EFI/Microsoft/Boot/uk-UA/bootmgfw.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/uk-UA/bootmgr.efi.mui.dll 79KB
-
EFI/Microsoft/Boot/winsipolicy.p7b10KB
-
EFI/Microsoft/Boot/zh-CN/bootmgfw.efi.mui.dll 64KB
-
EFI/Microsoft/Boot/zh-CN/bootmgr.efi.mui.dll 64KB
-
EFI/Microsoft/Boot/zh-CN/memtest.efi.mui.dll 42KB
-
EFI/Microsoft/Boot/zh-TW/bootmgfw.efi.mui.dll 64KB
-
EFI/Microsoft/Boot/zh-TW/bootmgr.efi.mui.dll 64KB
-
EFI/Microsoft/Boot/zh-TW/memtest.efi.mui.dll 42KB
-
PEVersion4B
-
RMBuilder.xml.xml 3KB
-
Version39B
-
bootmgfw.efi.dll 2.4MB
-
bootmgr431KB
-
bootmgr.efi.exe 2.4MB
-
sources/boot.wim654.9MB
out.iso
- SHA256 31d46ae6d74d5483bbe6de70794ccfcc61c1240a622351c1de64ef79f7782626
- MD5 7d905969b34eaa0a2d109ade487e60f6
- SHA1 b9f6be0f7ecf9c1c892038cb0fa311f5969b9ff2
- SHA512 3e316dae1343aa09a38b84e812be687a5966640ab9018d5368e6ef6631030a8b6d64d329a42d8d2bdee7cb96bfe131cbd9be50f3e4de69dac79b590b9f26ed5e
- SSDEEP 12582912:P/cNKLudH5dGa2ai8/F5zfWOsOJaKxLSA6aa52f2g:P0NKCx5Hi+WGJtuA6b4f9
- TLSH T1268922436BFA1090E4B7463887B79221AE37BCD11934865E9178385F4FB3A909D3277E
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
inf
Boot/BCD
- SHA256 293bff9113d50c62669c31bdd8b1a4fe50eee6be7988243808cec2f1c74428a9
- MD5 8292bd7410bef6220fb614a31081ee2f
- SHA1 222a8d1dd74df3cf2e005a2e3ebafc9520a39d7f
- SHA512 0a86f551987778b87365243e7898cf09867adfc0175ad1ff4b43656351156e74aaffc1444e176e9998f97cee18012c63729f59810a03bc0bcf28cde1e6c595b6
- SSDEEP 384:U0M+eBQd/FWmjxdgLyOEt0FHKM3LP4fDWZW3ueFiKPMS6SrLdYKFUy6H1apndC:UKd/FWmjxdgLyOEt0FHKM3LP4fDWZW39
- TLSH T17C728F42F980D082F1BA45738E56DAE93279FE43AD55060736D6730F9CB37C2E907694
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/chs_boot.ttf
- SHA256 f304465805d76129c1348ed5c38dbc815ef496a2393f0f9c6b7cddb70c5dcc69
- MD5 d9d9edb2c646c073b46a60c8e22d5a45
- SHA1 29b96d9cea1ae98998fc69fff7bcf0d6b01e66e0
- SHA512 791468e00071b4776884776268ec6ccd654bf77e097bf2f7d7e1e3980675c481e88ac06ad000063fb98e22fac3dae6fde2f50a993066e4d4356b01bf1767771f
- SSDEEP 49152:QRLb7Lb7Lrrb7brb7Ewmgi4uYCgrGgCYuU1B3zCOGHrSGjwe18wGHLuRapXtW:8z1GHrHwe1auRa1w
- TLSH T19B069D9B74F3A1A2DCDC013982F7E6392935EE1142D28955CF3621AB4FB3459ADB10F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/cht_boot.ttf
- SHA256 fc9f75534afde87d1fa8b42a70d1e59806b26d95c75714ee4b3077abe3415401
- MD5 b6409ea51fd06aca971c734d33b5a757
- SHA1 c0ef0450de588eb36099421f83c4b23ab20e1edd
- SHA512 13b536111256504194a859ab2c5e449cc94bd47944a7424c931802a0a5cfe5cf7de96d17c3f5ccb1c57f3c58392fdc45d96f7aec0f115ef5a3d8d4468b56f1ff
- SSDEEP 49152:svLb7Lb7Lrrb7brb7Ewmgi4uYCgrGgCYu+SV7SkCrWGBydrGOIs5KknYNqW8Lv:x8WbGOIghnW8L
- TLSH T15E067B53B073A5968CE8493181F3FE2B3D79F16102D245A9CA7A11BB8BB3419BD7407B
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/jpn_boot.ttf
- SHA256 54564ab7dab15843fa8e24401ef0ffa23c0db3796574d841fc8b0095f36bbc47
- MD5 6f9041092eb1af83525b1b910522362c
- SHA1 f12d2c76368f8592e9e99453f2fbbc11e395f9f3
- SHA512 2f794d68b83f0939b59431416a3c2bb922cc58ea77f0a905382117b98a6ea3b38d8e7b274e75d8c8fd2cb6fa57c78584e64dc72dd74afdb72efb434c8928b7d0
- SSDEEP 49152:lPe6imLe3IWYidPwzDXV7wPxHaHNzE/DfD3t8ZHHzOxw3wM:pgaHNzyDfD3t8ZHHzOW3F
- TLSH T1C0958D8734B2A061DCDC083582F7E636297AEE5008D2452ADB75B69F9F730917EB41F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/kor_boot.ttf
- SHA256 7d398dfe1ce896097358ba9f06a77f437939f15b85d675302e6f8994570430cd
- MD5 215dd5b8c4026995ea722db6d51cb159
- SHA1 77da0225dc9e8bcd957e0cb7a424ad3c53ecf75e
- SHA512 4b14a0f2baf6a1f639f6a1fd78630cf44330de2af58f55f0f23848e66795ffaa13ae9e576523e5180cd131e73a2d512cfe8646c4ab128921304c195f9c585593
- SSDEEP 24576:ApPa2PYJqzMtenwoZ6DcTrk3LM9RlbkwoqR8QKV60MYCByDp7RbIUQ+d:cBrk3LM9Rlbk/fuGd
- TLSH T1FEB57DA3B5F29CEDDC2E4B7741FFC6A61A26F53025924062FBA1520BD3B70806D746B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/malgun_boot.ttf
- SHA256 c6e46316656f9757b25962bbdc80d39896c75d2cf99c39656d680660737576f9
- MD5 86d17e6fe9f1854b40b53892bffe34da
- SHA1 cf4df76e48405c8a02bed590e5ad2f46b1f6a59f
- SHA512 81b8baa2b199981bfc2be23ddd8392faa2d125b879ef761d398dae4e20152e5e78040ee3127d362348025ddd5ad8a2228a220733e45f99801fa04aa918a997c5
- SSDEEP 3072:6GTk5OhPZlutjS2G/dTppFlXKHl+S/fLvVyfBsgemclkooiE:VhP6JS2MTXOF+x3T
- TLSH T144144BEE97826B02CA377DB9C805E3D23D9182315214871F6E06FF951E0F8E4E56F698
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/malgunn_boot.ttf
- SHA256 87c7d3e1487d5bec29532bb808fdfca274627ed8ba7473c6c1656d1f32d56f63
- MD5 ee0dfa1e188eeab08f8ee001c77c8fe7
- SHA1 fd55743aa3885beb511b2d109048bb3d00da2700
- SHA512 4b19bff59bf6bbaaf29cd4418e2904c6a915f72d017ea32756410aa908045975985cc2db7fb72a6d3720f4ff1bac22455b52c20263f15d662f84f0bd43966cbb
- SSDEEP 3072:NLIfZ1wybdvrvnJA+PpDf8+5vzVsG9+5aaRJ7wdnngmR/cXELgj/F:NoZ1wkKy8+5voPwxZUXEE9
- TLSH T1E8144AFAA787AA05D73778FD8805D3E27D9182355720821F2F05FE22791A4D6E40F2DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/meiryo_boot.ttf
- SHA256 c459a74cff88a1918e64dca6fd51e975dda1373e9f5d4bc74324d467dc92ae68
- MD5 807159a7d46541fd974a074e78376015
- SHA1 b106ce7fb9ceeaa392d349be15776e46fedbfa42
- SHA512 d287cbfe88464b83230d0fbf4cf8fbdc52e68a63ce37cdb99972c706f099388dc553f01560e75ce59c1be02cfe09b818a8a1a1747047bd201d62a33ad3a473a9
- SSDEEP 3072:i3Tk5OhPZlutjS2GnQaowGXKE6qyP4Ua6R9C49XBiy:ilhP6JS2KQaowEZyP4UPLC43
- TLSH T106F34BEE57C26B05DA277DF9C845E3E23CA1423547584B0E6A0BFF511E0B9E0E46F298
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/meiryon_boot.ttf
- SHA256 1d87dc09c20472ecec3cdd42847434e43875a10cec1f3ee4b5ab867ba87e9314
- MD5 6c58abca0332013e0c2e8c02e20ec8bc
- SHA1 490e9d51276c64cebeca791c3a69a9e8cb767113
- SHA512 4f156c04240c1c98a119e513c083dd25159d1d201910bdcc536f10eb838a6151269095076cbcafe2fdfef4287ebeb572bf83e3deb752b027a00886f3562263cb
- SSDEEP 3072:ILIfz6X2mfbdvrvnJA+PpDf8+54FNl8kk5gqs9TrQEvNmsY8cXIFbkXE2nt/Gl:IoE2mBKy8+54FNl8Vgn9Trvv0L3IFoXi
- TLSH T159F33BBD6783AB05DB23BCFDC944D3F2BDA142355624921E2E09FE22654A5D2E00F3D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/msjh_boot.ttf
- SHA256 a4024a228a8a9fa21264fcd31031b96ad8d89d0ec47aec426144d41279f9e18d
- MD5 3fbd8a777650ef9eb554fd80eae2781f
- SHA1 52b63f9a3dfb974952eb0b1401195cec00f44a05
- SHA512 5e88ebda554d948f192a75912bf38ade4d668f856d0ad1bbfa8767853dd7cc8494a450c1f20fa8929f587a19b139af6f1079085377d7acb0c481352f3bc0d666
- SSDEEP 3072:FHTk5OhPZlutjS2GGNjJVPnwd16OcPDyeJ3H0RTuG9Xr:rhP6JS2BdJK7ncbvJQTDb
- TLSH T193044AEE97866706CA237CF9D445E3D23DA181214259870F6E06FF522E0EDE0E55F3A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/msjhn_boot.ttf
- SHA256 96ab2bac3405605327312288599c94dabe459cd5197a295e130a00401ee5a87d
- MD5 749bddad4ea8e9b5ff96961b3fdd5d70
- SHA1 30a93d26dd57a4f00aec2c3d122115d66f9574e6
- SHA512 a64a09d267636d7329afaa748b30353d258b9ff10ef6fa2676aa507e75a8748032801dccbdb9e5256f95d37ccb3ff85ef810c3a369c704acada7fb0b97408de0
- SSDEEP 3072:5LIfgf7bdvrvnJA+PpDf8+5q820RBqTbtJRKr/w3BEAoJ1hXEk2Xn:5ogNKy8+5q8C/tJRKrIREAUXEh3
- TLSH T1FF044CFDA797AB05D7237CFDC845D2E2BDA181345621921F1E05FE22790A8D2E04F3A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/msyh_boot.ttf
- SHA256 325ce0bccb4efe084c7f9e853f55cf90ffd3330ed83ac2d545fb42c865d63988
- MD5 9d2d5bc2f2ec4a08518c69573727e2fd
- SHA1 991848829899d03da6102d07df73b4c6ff19dc98
- SHA512 a445f978d8c83cc0fd093e86fd26dbed450d628942466739f407b652dfc8727e93d1558bc0369795bc3e76c5ef224fab6630385b32824f0a5a9e98d05e012f65
- SSDEEP 3072:2hTk5OhPZlutjS2GVohZLacGMuheTC4EBoVpe/Kx/B:2hP6JS25ZLacGMKeJbeCZ
- TLSH T11E045CEEA7893B05DA377DF9C445E3E23C51422146288B1E6A07FF852E0F8E4E51F694
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/msyhn_boot.ttf
- SHA256 dcb3b1507384af5b47466b66e3f1b8bb104ce53ab2ecfd9ecf2e06939b0c3310
- MD5 d48bf8878cceab3ea3cca42e9c974f5a
- SHA1 0fc82c971c217112ed1694fe1719f00cb15adedd
- SHA512 a0a421851280de3adff3248c53a8b96eaa8f3a095b508de9a0340270e39cd9d381c6f15075c17bd1f7fb7096532027aa612632047b476e8a1c35db7a138472f8
- SSDEEP 3072:aLIfN2bdvrvnJA+PpDf8+52iqYJIrA/j3CuqXZ07tIXEui4:aoNQKy8+52fxrA/FY07+XE+
- TLSH T1A0045DFD778A7A05D7337CFCC949D2F2BD6142251624922F5E09FE167A0A4E2E00F299
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/segmono_boot.ttf
- SHA256 588b5903dadc40ef733d2faad8ba49022b0d7b39727153b9befa016b02088cd5
- MD5 3d2af2ed7e7bb2648e2094038af6304b
- SHA1 06a69117df9a64da73925d9f4ba731fcb5fbef6f
- SHA512 29b05b6b817245f32c8a44a7b69181cfb5c6cee72e93c9159f68e2d9f6cdcc7c234e41ba3011c62673071192b6ef4aec0eefbc4e33134edb42b2305b93c097a3
- SSDEEP 768:rMqc6zKj4VbPfNmZHjHw1/9bnvRm1PvRmuU9zu5D:rMqc6zKj4VbPfQy1/RUPJd8zud
- TLSH T1E7236C6EF363A906D15B68F08559A7C22A3BFAB66911421F62CDFF3E54423C1CD0437A
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/segoe_slboot.ttf
- SHA256 779f185224db9f6977a872a166ec3fc093b9f2293cafa157c4d4a4f88dc06a3f
- MD5 8a56643bdc4e058fa685e2f57cf2f849
- SHA1 410442766bae3d965616a51828da9b4163bee189
- SHA512 2ffb4c7dca40638e0b6269a24456110c9a7d0a1258626a10f078c1ed921c8234bea79348fa1893f4a7009413faa442333b226bfd1141a1f6adc052af6e6ac68d
- SSDEEP 1536:fqS4sxWLu54v4HqVZaGDF2ifS2GdwFwXjhu/P2nXzA:fx4sGu+v4HqVZxDRS2Gpi+Xk
- TLSH T1F0A3D6ED27C23B06DB27A9FDC889D3E23C61522457685B1E6517FF902E0A5E0F46F248
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/segoen_slboot.ttf
- SHA256 8875bf19b09c4ad873bac91286ffbbd72544dbc5ad7a1061fecbd1c6590bb46a
- MD5 76ad65de5d17b5ac8a6ad17b9002cd1d
- SHA1 84667ce8a50b7434ac55bbcf79e0049d001960e0
- SHA512 ff14a6a003ec4a71f42eef1e9aa98fbb75acf2188d4d9df91e9e60303236d8b845f080f129297839997d5bab0fcf01a29820376bcf981127edf5fb2e2fb4f7a9
- SSDEEP 1536:6b2zjP0EhVts4nrTXI/moLp+cXGmIPRBqPPnzun:ySP0ES4rTXI/9LpPXEc/6
- TLSH T1F2A3A6BC3B83BB01DB63A5F9C998C2F5BD6146345725962F2C15FE226A1A0D2F40F349
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Fonts/wgl4_boot.ttf
- SHA256 a3dda256eab6124e8d0857271dcb992a335edf910af3ba47d621e69f6672c8c3
- MD5 550d817bf0e03e7f2afe378d8f262c92
- SHA1 a557ecfc48931412d47f9c4dcd5421c6cf61427a
- SHA512 365f0ae07be87642ea21eaf1603f69878374c72407efe474f45792df7157be9e5314e0aa5c954f0e8ebd4e8822836717a276575d9c8d905bcd5f54341bbd2d78
- SSDEEP 768:68KlPfaMmkeN4bKJX5zJN+D3eegCLmlor54NBHyh87kUJ3JnP/Ba/32UUU5wD2Uh:OCiuJXNuofSUBozIvS0iPPnXzSl3
- TLSH T1402327433B029199CD9A9EBC93FCCDAE2EBE9E830540D428EA55F58750A33D1A738175
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/Resources/bootres.dll
- SHA256 1c6a0a574e408fcac126a8fef5046e73abc8715cfb7c44b5cdcbe6ee2748588e
- MD5 4f0b7465603947bd3eb3f41c17537ea5
- SHA1 5ce09081a95c4e9ff05271531cd4444eb4f1e3a7
- SHA512 42362405f83c51fb87eb5252b512bddf771d5a9078c340e3c9be6f82fdbfc82473ce1434d4fefa9cefad429c4f2a3768d5384363a6a5b9ad87686b36d7faed5f
- SSDEEP 3072:wPdIkpGZuFNOB6SOtaDBpIg7cg82LGObXOp043KdYMTl92f:qtMZeOoSOqpIgzqaXOe46ddA
- TLSH T1D2F312E3EBF80747ECAB7C75D7D94A1AB43E12E901014831EAD7793F1462AC58930679
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
inf
Digest
2f:b8:d1:74:ca:8d:a9:f5:3a:a4:43:9d:31:49:47:6c:79:c2:4b:b0:67:9a:0e:aa:f5:30:f9:bf:da:9b:78:98
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:86:78:e5:19:89:f8:24:4b:cc:00:01:00:00:01:86
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
4KB
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
148KB
Virtual Size
146KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=30795,
count=1, id=258, version=30795,
Boot/Resources/en-US/bootres.dll.mui
- SHA256 317dfb5bf12aa6b8c8b6ae3598d2c048c319b6bf7f6a9a0cc2f8c5a5404d8ee2
- MD5 15cbf7c727691209727a6731a1e42ee0
- SHA1 79b7e231cc4700fd266f31be858538b056b5d38f
- SHA512 432d2c4a8ece0a4f1d8d3bfe36410a6a81096d75cd8746bd2607cf47af82dcf72dec712bf745f19ee6b12e31ecbb71702699df99aa49e90a4ccdd2bd6439ffec
- SSDEEP 192:nvg5WUUwWpcCroDBQABJd01b3CFaqDu0K9X01k9z3AibIvv:OWUUwWIDBRJG3CFYj9R9zLk
- TLSH T12652D68297F90102F9BA6E3053B9DA923D3D3AC71971912E5691E01C1CE7784DE20BBF
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
inf
Digest
3f:96:a8:44:fd:44:aa:76:74:3e:6e:62:80:a5:ca:fd:80:6a:58:81:3a:51:f7:ad:a4:5c:9c:86:f0:dc:5a:44
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:A240-4B82-130E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8d:7a:55:2e:78:74:99:2a:b7:00:01:00:00:01:8d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=30795,
count=1, id=258, version=30795,
Boot/bcdedit.exe
- IMPHASH c8c8203bdce2871d4a59d4ebd68d8d21
- SHA256 7930e734e2e77714d480f8cd795c784a8c15589e5f0c366f04c31b344d804e48
- MD5 d3c5e8d9745acaf66cf8209b3583b438
- SHA1 80a5164c8ce5e1cb433eba2373d47f6b370d08ca
- SHA512 1b11ba27227d53d65206664f4a8b1184eea85eb7d5afbfd24cfe11cd5ffd2b239f03f0c0ba84a7946065a41b6db6afba91b8acd587810d07d573e726a38dd96f
- SSDEEP 3072:FAK5sVQ5ONNhSISZxuhEb62euE/cNkEg5Ja0ibXVZqfjJUdq0XhqqwfrTACZishO:FAK5t5ONNhcyq+NlgkEQM0MXOyofP/cr
- TLSH T1D9B4400663F91244F1F77B749AB585608A3BBC916A39C69F129D402E0FE3E809D74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
inf
Digest
8a:7c:2d:75:8d:b1:7b:ae:be:85:3b:a6:65:49:67:84:cf:cc:11:7c:55:d9:95:61:44:22:9f:c1:e3:18:14:f2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 5, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:8c:38:5d:5c:2e:74:83:cc:fb:00:00:00:00:03:8c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 5, 2022 - May 4, 2023
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:7BF1-E3EA-B808,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9f:2b:45:35:15:08:2e:4b:5d:00:01:00:00:01:9f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
191264
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
bcdedit.pdb
msvcrt
__setusermatherr
_initterm
_exit
__C_specific_handler
_fmode
_commode
?terminate@@YAXXZ
memmove
memcpy
exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
towupper
iswspace
_vsnwprintf
wcsrchr
_wtol
wcschr
_ui64tow_s
_wcstoui64
wcstoul
_cexit
_wcsicmp
wcscpy_s
_wtoi
_wcsnicmp
fflush
fwprintf
__iob_func
_vsnwprintf_s
wcscat_s
_ultow_s
strcpy_s
wcsncpy_s
wcsstr
wcsnlen
_wcsupr
strncmp
_snwscanf_s
_wcslwr
_aligned_free
_aligned_malloc
free
malloc
wcsncmp
vswprintf_s
_vscwprintf
_wsetlocale
swprintf_s
memcmp
memset
ntdll
ZwClose
ZwQuerySystemInformation
RtlAppendUnicodeToString
ZwQueryAttributesFile
ZwQuerySymbolicLinkObject
ZwDeviceIoControlFile
ZwQueryDirectoryObject
ZwOpenSymbolicLinkObject
ZwOpenDirectoryObject
RtlLengthSecurityDescriptor
RtlSetOwnerSecurityDescriptor
RtlSetDaclSecurityDescriptor
ZwCreateFile
ZwCreateKey
ZwLoadKey
RtlAddAccessAllowedAceEx
RtlAllocateAndInitializeSid
RtlLengthSid
ZwDeleteValueKey
ZwSaveKey
RtlFreeSid
ZwDeleteKey
ZwEnumerateKey
ZwQueryValueKey
RtlCreateAcl
ZwSetSecurityObject
ZwUnloadKey
RtlCreateSecurityDescriptor
ZwSetValueKey
ZwOpenKey
LdrGetProcedureAddress
ZwQueryVolumeInformationFile
LdrGetDllHandle
ZwQueryInformationProcess
ZwDeleteFile
ZwQueryInformationFile
ZwOpenProcess
NtQuerySystemInformation
ZwAllocateUuids
NtAdjustPrivilegesToken
NtOpenProcessTokenEx
NtSetInformationThread
NtOpenThreadTokenEx
ZwOpenMutant
RtlImpersonateSelf
NtOpenSymbolicLinkObject
NtOpenKey
NtQuerySymbolicLinkObject
NtDeviceIoControlFile
NtSetValueKey
NtQueryValueKey
NtDeleteKey
NtQueryBootEntryOrder
NtQueryBootOptions
NtSetSecurityObject
NtTranslateFilePath
NtOpenDirectoryObject
NtQueryDirectoryObject
NtEnumerateBootEntries
NtCreateKey
RtlUpcaseUnicodeChar
RtlRunOnceComplete
RtlRunOnceBeginInitialize
RtlFindNextForwardRunClear
RtlNumberOfSetBits
RtlInitializeSRWLock
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
ZwReleaseMutant
ZwQueryKey
ZwWaitForSingleObject
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
NtClose
NtOpenFile
RtlStringFromGUID
RtlDosPathNameToNtPathName_U
RtlFreeUnicodeString
RtlCompareMemory
RtlUnicodeStringToAnsiString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlGUIDFromString
RtlInitUnicodeString
RtlIpv6StringToAddressW
RtlFreeHeap
RtlNtStatusToDosError
RtlAllocateHeap
ZwOpenFile
api-ms-win-core-localization-l1-2-0
FormatMessageW
GetLocaleInfoEx
GetLocaleInfoW
api-ms-win-core-heap-obsolete-l1-1-0
LocalFree
api-ms-win-core-libraryloader-l1-1-0
FindResourceExW
LoadResource
GetProcAddress
GetModuleHandleW
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
api-ms-win-core-errorhandling-l1-1-0
GetLastError
UnhandledExceptionFilter
SetLastError
SetUnhandledExceptionFilter
api-ms-win-core-console-l1-1-0
GetConsoleOutputCP
GetConsoleMode
WriteConsoleW
api-ms-win-core-file-l1-2-0
GetVolumeNameForVolumeMountPointW
api-ms-win-core-file-l1-1-0
WriteFile
ReadFile
GetFileSizeEx
GetFileType
QueryDosDeviceW
CreateFileW
SetEndOfFile
SetFilePointerEx
FlushFileBuffers
GetFinalPathNameByHandleW
api-ms-win-core-processenvironment-l1-1-0
SearchPathW
GetStdHandle
api-ms-win-core-string-l1-1-0
WideCharToMultiByte
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-io-l1-1-0
DeviceIoControl
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-processthreads-l1-1-0
GetCurrentProcessId
TlsFree
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
TlsSetValue
GetCurrentThreadId
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetVersionExW
GetTickCount
GetSystemTimeAsFileTime
api-ms-win-core-synch-l1-1-0
DeleteCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
api-ms-win-security-base-l1-1-0
GetAce
GetSecurityDescriptorLength
GetSidSubAuthority
GetSidLengthRequired
IsValidSecurityDescriptor
DestroyPrivateObjectSecurity
SetSecurityDescriptorGroup
MakeSelfRelativeSD
CreatePrivateObjectSecurityWithMultipleInheritance
InitializeSecurityDescriptor
GetSecurityDescriptorControl
InitializeSid
SetSecurityDescriptorOwner
IsValidSid
InitializeAcl
SetSecurityDescriptorDacl
SetPrivateObjectSecurityEx
GetLengthSid
AddAccessAllowedAce
cryptsp
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
api-ms-win-core-registry-l1-1-0
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
api-ms-win-core-localization-obsolete-l1-1-0
GetSystemDefaultUILanguage
LCIDToLocaleName
GetUserDefaultUILanguage
api-ms-win-core-memory-l1-1-0
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
ORCloseHive
ORCloseKey
ORCreateHive
ORCreateHiveEx
ORCreateKey
ORDeleteKey
ORDeleteValue
OREnumKey
OREnumValue
ORFlushHive
ORGetKeySecurity
ORGetValue
ORGetVirtualFlags
OROpenHive
OROpenHiveByHandle
OROpenKey
ORQueryInfoKey
ORQueryInfoKeyEx
ORQueryInfoKeyValueEx
ORRenameKey
ORSaveHive
ORSaveHiveEx
ORSaveHiveToHandle
ORSetKeySecurity
ORSetValue
ORSetVirtualFlags
Name
.text
Size
188KB
Virtual Size
185KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
PAGE
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
PAGECMRC
Size
4KB
Virtual Size
130B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
100KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
156KB
Virtual Size
152KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=40, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=261, version=30795,
count=5, id=259, version=30795,
count=20, id=260, version=30795,
count=255, id=1, productName=Unmarked objects,
count=7, id=257, version=30795,
count=83, id=264, version=30795,
count=1, id=256, version=30795,
count=1, id=255, version=30795,
count=1, id=258, version=30795,
Boot/bg-BG/bootmgr.exe.mui
- SHA256 7db83c09d672c402d8168ff33073fe0658eea5815e7737c5499da904f137381d
- MD5 07ee70e4c03597fd405678409674a531
- SHA1 7c2bee790d92db088b6ee1c01c9e91a62a9b55b1
- SHA512 ffa94fb7ec7c2c339a90b71067df17a7c6f2df24d798ea73e34f3d9b49e6709be28619e6082509182e783544ac75677aeedbd84440da2ef2a48ad35ebdc4dd2d
- SSDEEP 768:+zQNhV0DvWaeUirptQRDAuOuvRNllCv/xF1POn6K9z83p:gDOPtcEv/BPOnXzQ
- TLSH T1558344476BFF0000F9669A2D5D7B41E11A777B502A38896D01AF3C4E87A3E725B21BD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
inf
Digest
98:66:91:15:c0:15:e4:5c:69:9b:2c:d6:27:5d:ab:55:48:bf:dd:4e:7d:96:11:d5:55:11:9e:1c:6d:ad:89:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/boot.sdi
- SHA256 cd2c00ce027687ce4a8bdc967f26a8ab82f651c9becd703658ba282ec49702bd
- MD5 22d9945b4aae36dd59620a918f2e65f4
- SHA1 bb025cedca07887916c4b7e5fa7a641ed3e30c14
- SHA512 dd2d0ea7d5cf98064838ce0b74711f77534e1a2a14c7f74d44ed4b83acdb6f413d74671d2c6a8574aee88afb456b53a6b8452419a3bdddf2f7e9095c9d1d272e
- SSDEEP 3072:S/pcj53vs/InbrTIHvPnHmC5irUuMo/+ncoZZihnh:acRn7y/EouH/cpi
- TLSH T1F3E54B52E6209B16E2FEC339D9BB1B2673A6AC06D302410FF606B3D96DBB7509DC4453
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/bootmgr
- SHA256 60e59fb52b794f515457827c562c6cb39835f5d2d5ee0a6584d796b56bdebaff
- MD5 6db7e48b2d1d43fddbc9cc566f4fda60
- SHA1 b7d606d99e4c598008ce39e9ac58e1e413bacc55
- SHA512 8005cf6e443c8c066e573c35929da808de8bb69df54e8d0aafdaf3349042b3e8187eb6219c7c01a70593c921789b5faac14b82c5c7733c9e6a4d908df1ad68e1
- SSDEEP 6144:7NicxMkvCYBFct3xgo8T2rWRVmliTiwJF+/XavVTT0Cx3sNiWNsXqoIcB+QxfHVJ:7Ip7BqxccFR0kujNsNHfx9Q5U4AlvV3
- TLSH T11D9423D99B99F62EC61692F1261F183749B2B11337E489D7BBCB6851CC4621C3B1C327
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/bootnxt
- SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
- MD5 93b885adfe0da089cdf634904fd59f71
- SHA1 5ba93c9db0cff93f52b521d7420e43f6eda2784f
- SHA512 b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
- MD5 SHA1 SHA512
Boot/bootuwf.dll
- IMPHASH f81f2dabaa778987ccd1dcfa2656cbd8
- SHA256 685803f39d241bad7d1271d209ef852147f7ccb91ac70fa6d80c3959b345df03
- MD5 80d0782a3587ff3f32266b36117a0f79
- SHA1 1a8779be6ba4ad4e2440671dd9e29e6406c84527
- SHA512 70b8e46f501c0b3b982f0fdcba89c6d899227266d40e7a13ef52a7037bce027ec27098a3e2652c6882e76c2af61e8041efaa336a3489acc04f3bbc359c31247b
- SSDEEP 384:bwHmQbH2zt6Baw5Ej5twjubWM/IPq4UpdYNAcZ71T93W0LW1TJDBRJ/856/R9z90:yH2z6ajsKbLk0HdcntW1PU5e9zm3
- TLSH T110D25AA1869045B2FCFB25B006AEF2BA7D7CE782179041D70B05A5D91962BD0FF3429F
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
inf
Digest
1b:b9:7f:47:dc:97:83:96:9b:85:78:ad:f5:43:4e:13:04:03:d3:a2:ca:c6:da:6f:81:c9:35:a8:c2:f8:42:35
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 9, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:EACE-E316-C91D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9a:c0:75:a2:c4:21:6d:3e:85:00:01:00:00:01:9a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_BOOT_APPLICATION
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
bootuwf.pdb
bootlib
BlMmAllocateHeap
BlMmFreeHeap
BlpDeviceRegisterDeviceClass
BlDeviceSetInformation
BlpIoRegisterDestroyRoutine
BlDeviceClose
BlpDeviceOpen
BlDeviceGetInformation
BlGetBootOptionBoolean
BlGetApplicationEntry
_purecall
BlPdAllocateData
BlpPdFreeDataList
BlpPdQueryDataList
BlDeviceReadAtOffsetEx
BlFileClose
BlFileOpen
BlFileReadAtOffsetEx
BlMmAllocatePages
BlMmFreePages
memmove
_alldiv
_allmul
_allrem
_aulldiv
_aullrem
memcpy
memset
UwfDestroy
UwfInitialize
Name
.text
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1024B
Virtual Size
788B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=261, version=30795,
count=4, id=260, version=30795,
count=3, id=257, version=30795,
count=52, id=1, productName=Unmarked objects,
count=1, id=259, version=30795,
count=1, id=256, version=30795,
count=56, id=264, version=30795,
count=1, id=255, version=30795,
count=1, id=258, version=30795,
Boot/bootvhd.dll
- IMPHASH 299d9e3fae63ac873967307d497a07c0
- SHA256 4a09c180f2e94cf89b08cbb4db54e10790b8a3b65107417f639fca9873e12715
- MD5 3d36cdc46c937184bf399fd268f0fe04
- SHA1 c271283d1a79f2479c99f584da1eb887ac8add3c
- SHA512 8f0998c0877be6986a39f720674f7487235018ff1804b95711adf0bb0e6b2273cb08b1c8c9c0a88b1dbc7a4134362e6e631b95701ad6a932ab7f2d56684a9c0f
- SSDEEP 1536:cn+yWjc9tKi6p3BVoVqW/3hLgwW1Pf9zu6hW6FwHHHTaFP0z:c+djcXKi6p3BVoVqI2wEVzvhWhHTaFs
- TLSH T112A35B61A18441B1C8E775F8590EB63A9A7F97DA432022D713141BE4E5A0FD1BF3A2CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
inf
Digest
73:31:d0:63:9e:7c:31:44:61:ad:e5:56:42:8f:9f:49:7f:78:2a:6e:aa:ec:09:ab:bc:a0:21:df:8d:85:55:0a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 9, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_BOOT_APPLICATION
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
bootvhd.pdb
bootlib
RtlAppendUnicodeStringToString
BlockIoGetMbrDiskSignature
_wcsicmp
BlockIoOpen
BlMmAllocateHeap
BlockIopFreeAllocations
BlockIoAddDevice
BlGetFilePath
BlMmFreeHeap
BlockIoGetGPTDiskSignature
BlockIoGetDiskType
BlockIoInitializeFunctionTable
BlockIoClose
BlFileClose
BlFileWriteAtOffset
RtlFreeUnicodeString
BlFileReadAtOffsetEx
RtlInitUnicodeString
BlFileOpen
RtlInitializeBitMap
BlFileGetInformation
RtlCompareMemory
RtlRandom
BlUtlCheckSum
RtlRbInsertNodeEx
RtlRbRemoveNode
RtlDuplicateUnicodeString
RtlEqualUnicodeString
qsort
RtlAreBitsSet
RtlClearBits
RtlSetBits
RtlAreBitsClear
RtlFindSetBits
RtlSetAllBits
RtlClearAllBits
memcpy
_alldiv
_allrem
_allshl
_aulldiv
_aullrem
_aullshr
memcmp
memset
VhdFileDeviceOpen
Name
.text
Size
88KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=257, version=30795,
count=45, id=1, productName=Unmarked objects,
count=31, id=264, version=30795,
count=1, id=256, version=30795,
count=1, id=255, version=30795,
count=1, id=258, version=30795,
Boot/cs-CZ/bootmgr.exe.mui
- SHA256 0c749639c17b4329bcfd319dd8bd3ee5aae324ae62f4790d6919759ddccf1612
- MD5 44195f9be1d5d2f9cfe15a605c2e8fc7
- SHA1 f88e514d030d2c2a7d8ffc3f944f6e9ffbafeb9d
- SHA512 6a76fac873232cdd7f25347c596e0ae24c0737cbd0a30ae25c271a85f13ed405c1b3120bcb55dea6637dbe949abb1be1013179915b626d99e58adb9e30a3511a
- SSDEEP 768:PNGlvaBRDAuOueycQadWwnJwyr1PWGed9zuKy:PN3HAdWwnJwSPQ/zu1
- TLSH T19C83C5435BFE0004F5B76F6DA87A15710E3779557938C52E119C2D8E8BE3E828861FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
inf
Digest
ba:4c:48:66:1c:54:a5:1e:f9:c1:45:96:52:0b:47:d4:16:6d:b7:97:70:e5:d5:04:b2:9c:1f:65:e8:9e:91:5f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/cs-CZ/memtest.exe.mui
- SHA256 d4e043ac4b30519e904495c5c92e1814578a940881d9538d60d0b0800c739b16
- MD5 73fa2e6689ee115cbb6304bd3c004506
- SHA1 375874027a9cc9f91bfa81bcc997f6bdf3284566
- SHA512 b523d6287c11e667468a0c8cf1c7fab8815ed1f608a4adef4d607f06f231a526874c43389987c1788239447f2c212d1193d668cadbaeef46c1b8ae25450d50c3
- SSDEEP 384:PQouJzuN5x0mVZHorzHlvLGWQRrzBpRv8TgXzgTQr1mG6r118/3fWp3fS/pfj115:YouJzE5pR+8cM/upa/171Pn50Zi9zuG
- TLSH T19F2357035BFA0104F6F76F75A97616611E3B7DA2A938C12D1298698D4EF3F419C20BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3c:21:65:fd:60:38:55:7a:11:a7:8f:a6:51:c1:f1:6b:a2:8f:33:8c:d9:17:58:8e:56:5d:e7:55:9a:88:65:e2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:32BD-E3D5-3B1D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ad:fc:df:4d:58:e3:5d:32:e9:00:01:00:00:01:ad
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/da-DK/bootmgr.exe.mui
- SHA256 c191b35dd9e2166c8893e69f09cb7c1de71159e85c75979585d5ac5d5d94010c
- MD5 33f7b61daac6179b6da49ae1553eb530
- SHA1 80034271f4cdd844f951f1020844935fa6f502f4
- SHA512 d81bc485a4202785c6ec35f97fc98d77f2f75c06d704251a2abf779654f7af6fe4405d3ad7ccf5420aa26314f0f377efd153f1758f653efc4c8c957f3ad54239
- SSDEEP 1536:yDdW8H0Fn0TKsI3poE3tlc61st2c4poh8735mLlSioPhd8zuB:yDdW8H0Fn0TKsI3poE3tlc61st2c4poM
- TLSH T1F873A0535BFB0004F5B76F29A87A11640E37BD95683CD92D116C2C8D8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
21:f4:73:47:30:30:be:55:6e:43:99:23:45:4a:db:d0:b6:5d:23:2e:fd:79:2e:a4:1e:a5:44:ae:88:59:13:cd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:D9DE-E39A-43FE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ac:66:bc:87:22:5d:de:3d:7b:00:01:00:00:01:ac
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
68KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/da-DK/memtest.exe.mui
- SHA256 73af8de553ab1aab1b89cc2098cb94e739dd60845c907f3c39168080bd68241c
- MD5 ee567e43b2ab331cef720227f3a26144
- SHA1 eddd109eb8b4d1c02bc1761d1aad1803ad70f924
- SHA512 ae5923db887ddbf3d8b1b502b6deef2e2bf126e9d8d226cbbe1cfc27e065ac784b9b63616a10bb8a93466352ab3116bfdadff20c6c66b3005b6aaf978118bd48
- SSDEEP 384:UQouJzuN5x0mVZHorzHlvL2W/MBWWrzBpRv8TgXYX/DBRJ4K0leLR9zusRK9DB:TouJzE59F+8u/1P4Zed9zuxB
- TLSH T16D2336435BFA0104F6F76F39A97616611E37BD92A838C22D1198699D4EF3F419C20BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bf:f9:d7:5b:58:a6:f1:a5:db:d9:c5:ee:5b:dd:b2:d2:55:b9:d0:a6:0a:d5:21:75:5a:b7:24:22:a1:4d:ff:73
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/de-DE/bootmgr.exe.mui
- SHA256 b23749446ded128109bab385ce074e9e749537ebabfca051a16d5d1f4c505496
- MD5 71f3797d2e85f658b1d3a40100982f62
- SHA1 582afebf5d70f0a575c471cf9c97b0365fa2b12e
- SHA512 7b3a7470694b36b0e91632cfde1cf52ab83c1723134bc480de3d168184a285195b727117187ec9a823a164aabaa7bc69968049d6e976cb09c393905adea779b5
- SSDEEP 1536:kuCOTA419z7MJs4VTeGbHrRJHt1PXzuv+R:kuCOTA419z7gs4UGbHrRJLPw+R
- TLSH T19D83D2534BEB0104F5B76F69AC7A52601E33BD956C38D92D115C288E8BF3E428961FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
88:94:b4:ef:fb:cd:98:be:d9:51:0c:f7:ca:ca:6c:fd:f7:b2:a5:bb:f4:82:03:07:11:28:79:63:50:b5:fc:9a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
72KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/de-DE/memtest.exe.mui
- SHA256 6e1ba00cb5651a12357c3c8976dacba33769bd712ff14e9743fd83bc3f4ac13e
- MD5 31dc99078607c47828e05ff4074c820d
- SHA1 d81b2164b045925963b87c4076f942e7caa3ceac
- SHA512 599695a75f90350f07db6d16cfbe25a5155586d0a34614f38e0fd1a6e75a00822a2e9b12f769b515f62f2cd81bc4cab739c7574d114500b093cf97da69c9aa8c
- SSDEEP 384:hQouJzuN5x0mVZHorzHlvLgW/lGrzBpRv8TgXVK6idZMDDBRJS6ZNcM6a1R9z/f5:WouJzE5mG+8qOD1PHHn6K9zp
- TLSH T1262325435BEA0104F6F76F75697656601E7BBDA2AC38C52D0298689D4EF3F418C20BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9b:18:d2:06:9e:ca:60:59:6a:ed:7a:4b:cf:0a:1f:cf:84:5a:ec:d9:52:40:6b:f1:3e:9a:5c:08:e5:cb:df:76
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/efisys_noprompt.bin
- SHA256 52a8e5c8adfb8c19561a14293ecf2f7bafd95f7d3fd4f1fdf32fdde8a9c22480
- MD5 c3b70f8645915af02c919a01927dd426
- SHA1 bef0091dd1cc9a4c60c142bdbaa5e07adbf0a5d7
- SHA512 078c8f6ec66c2542c49dc8ca7d397bf10da21383184ad0282c2859ca1b607fa6f94a635c729a0d095ccc319e827817057291c2a31cc94cbfdcf12633e2bf107b
- SSDEEP 24576:pPsuOtAZh9laO0VXpqQ4C4wyUSuFoIkd:mEJvIX34xwyZXd
- TLSH T19C65AF96B3E852F8E9BBC275C616821BFBF1740627608F5F03A446993F236706A3D315
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/efisys_prompt.bin
- SHA256 0e9f2c054514459e54c92c8697d3ca6c5e83f12a21720c3d65057b8548b9fcb8
- MD5 9c710f15e5a13e2ee429b5b771896ff2
- SHA1 c1e885f7181df64728f047b82b4ee14f6a818afe
- SHA512 72da33879cae1740afa97590f5b8d54a8bbc27dafd0f9e6afac84ba6845bc2525684a49c8c602024a74cb8e71990fb6fc91bde230b432e61690cb8712882b3c8
- SSDEEP 24576:GILu3EoxR76EtNdXG5OiUwWmhsR39oI/VYDrZ:z0BpRXri7Wo7
- TLSH T1F165AE86B3E852F4E9BBC275C656821BFBF1740627608F5F03A486993F236706B2D315
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot/el-GR/bootmgr.exe.mui
- SHA256 64469416a7b3b36c072b061cf55a72fd7f470216e5b9665b24d33e5811b80057
- MD5 188240a0131bfa7e5aa43a246114a55d
- SHA1 400ffdf5a450b3af9a059d7fdad8ea856c9e1805
- SHA512 c41204e57230651f4fda32f6c20343ee29a04c140deb607afa5fe032f8fab337063bb3d6cb2076a4bb212e7ac8dea17cb3137b2755eaf5b8b8998a063c35351a
- SSDEEP 768:jqk7ontORDAuOuTF0UeUrtI1Po50Zi9zup72M:2k7Utu2UrSPIzuMM
- TLSH T19883E4470BFF0100EAB659B9983741654E37B9912838DD3E21AC384DCBAFD5289D2F97
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6d:3e:37:84:87:27:37:22:8f:3d:c0:be:7a:87:77:a1:b7:fa:4f:4f:3f:21:fa:cb:8b:3c:dc:16:75:3b:05:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:32BD-E3D5-3B1D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ad:fc:df:4d:58:e3:5d:32:e9:00:01:00:00:01:ad
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
73KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/el-GR/memtest.exe.mui
- SHA256 7247b2524d15450af1f6ae0c35fa1dfcacf84042dafebd21ed33da3d44393bbb
- MD5 61aab969a94e7475a5541232dcbf032d
- SHA1 e507254e4fc9dd6e380caede500c2ed4dc176946
- SHA512 60b6c139e1780c599ce8d8f33287ace9828a04449fe943f1a9fdf34cfa9c419b79d33be75ef075f7f2bf59fa02db8b94ce763138f95e1b250774af83b234fa8c
- SSDEEP 384:5QouJzuN5x0mVZHorzHlvLwWsu+rzBpRv8TgXrR1GoLUGz7C2OBA40s2OBA4AC24:OouJzE5K++8l3Lgh1Pxw109z60
- TLSH T1D92388435BFB0104FAF76EB5557256210E3BBD926838C62D1198788D8EF7E418CA1FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
68:59:d6:eb:28:58:ea:d0:b2:bb:39:bd:08:17:a4:9e:9b:f3:94:03:44:3c:48:4e:31:d7:47:fc:a2:51:ff:fe
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:8A82-E34F-9DDA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:99:c8:8f:af:ad:b6:7d:be:8b:00:01:00:00:01:99
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
36KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/en-GB/bootmgr.exe.mui
- SHA256 fb44a53c8a237f625fe12f75fb941f490f76314ad873d36b665075201369c9d6
- MD5 f342bf057370d9e3ac2f575637211503
- SHA1 b0478db13c506ee02079f2d76168d513a53d5a93
- SHA512 78865a72920ef9ad4dc237067c3119f14b4f4eb113d9c711a441ebbd97e9d2cd9645f6aaafad66afd023df59e7b0a30dd344d97642dea465f7544cc2c5c42385
- SSDEEP 384:dAueYsrVuGdAoEttqwLSZfqR3MW1JIF1dpWX7WarzBpAv8TXAuOuOxJhSlq44Upb:wwWSvDRDAuOuOxJhfILK1PS8adk9zu3
- TLSH T1A673D0535BFB0004F6B76E6DA87A11640E37BD956838C92D115C2C8E8BF3E528D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
66:85:20:0b:56:2d:9f:ca:5b:3f:de:c7:62:ae:ed:41:75:01:11:3c:7a:ac:71:a3:02:75:95:43:64:4b:7d:4a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
66KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/en-US/bootmgr.exe.mui
- SHA256 519683e83fef4272db41cf5d8d3dc9526bc1cf712654d0ec94b415783ef69463
- MD5 9b4099b340f81abebd5be247322a76d5
- SHA1 44555529636b08654dae9033763e2e2c19dff488
- SHA512 1bc67a7ab4ab910678b0f5df982267cf3b6bd416d00fdc72c94a30b0bb980a716058819d7148d6d82c0c1aa405c8242f52d46d5bd223d70a56742721b3683baf
- SSDEEP 384:0AueYsrVuGdAoEtt7wLSZkqR3MV1JFRF1dk9WX7W2rzBpAv8TXAuOuOxJhSlq44X:KwWpOQyfRDAuOuOxJhfILo1PNadk9zuE
- TLSH T19F73D0535BFB0004F6B76E6DA87A11640E37BD956838C92D115C2C8E8BF3E528D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b9:79:87:b7:75:5a:0c:98:90:bf:f6:f7:c6:75:31:5c:45:5b:35:c9:25:e3:e5:cc:da:98:97:81:6b:9e:aa:2a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
66KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/en-US/memtest.exe.mui
- SHA256 3743e95578f4630134ec10cba794b56f16a9a586f1c6bc09873ba6ecd949698f
- MD5 d6ed90e04387ac827d9aa2529d4b97a3
- SHA1 2c75155766d711a093985c58e9473a961cc29b7b
- SHA512 dd26007d38c4fa3206b773da52b50afa18ad0fc511234ea5d51f94baa50800a2bd457ccf94d9adef38de86e566d5717183f579cab97d8a6bc5f341a1b8d96283
- SSDEEP 384:eQouJzuN5x0mVZHorzHlvLeW9LW2rzBpRv8TgXLkkvwgvKcvwFyDBRJepUad+JR2:ZouJzE5UP+8Oy1Pnadk9zunz
- TLSH T19D2314436BFA0104F6F77F3569B616601E3B7DA1A838C66D0198689D4EF3F419C21BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d1:14:d0:62:3c:f4:7b:dc:7c:3d:97:7a:b9:fe:ee:ec:6e:a3:31:71:f8:3d:54:67:6b:a3:2e:a4:78:41:e2:6f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/es-ES/bootmgr.exe.mui
- SHA256 c9efa879d5a372285f1990e675ec51bfc3f665da1809a322ba3c957eba7d03bd
- MD5 09d9fb7d43100e2b34fe6200a25dc9a5
- SHA1 f7248dc231f63f8636954697065856c8bff61fbe
- SHA512 018103745a2f1d65c50a34889e7a458d11e51d5922cb0824d2e2fcbe784a1a269423d628d38fc4a186aede1a5c7d3388d18ded63dbceba2805c1777fe8b8e69c
- SSDEEP 384:EzdkxA7Jz3xFzO0RAmWy0rzBpAv8TXAuOuq4fHyXmH1YBI2LlDBRJQQpUad+JR9l:/0RT0RDAuOuq4fHH2Ll1PQFadk9zuin
- TLSH T18F83B1535BFA0105F6B76F2DA97A15640E37BD91A83CC92D015C284E8BF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
73:e9:f8:02:88:4d:c9:a7:28:f4:4f:b1:db:da:58:2c:ea:26:a6:f2:56:9a:25:11:e1:b0:c6:0f:68:53:2d:22
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/es-ES/memtest.exe.mui
- SHA256 e25fd6ff757139db2c20a9b0ab711f0123b1ac34f267eca7af6bfd9a1d09df98
- MD5 1da9e6df81aec06aa7d70c4d876ec4ea
- SHA1 04be1193dba79c5172be006a3d2918f99f6c8f87
- SHA512 afd449efd38aadf5054829368961fd72dcbfa48ead335ccae21dee1dede93d006dd2d431c25552ebdd2ca8af2c6a2a95f947990d92c2bee55fd00880225ba630
- SSDEEP 384:oQouJzuN5x0mVZHorzHlvLQmWLkrzBpRv8TgXEEJWDBRJ5nleLR9zusRK9f:vouJzE5Hk+8EQW1Pred9zuB
- TLSH T1002304436BFA0104F6F76F3969B655601E3B7D96AC38C52D0298689D4EF3F418D20BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
74:83:fb:34:96:cf:ac:16:a0:01:83:f5:85:a1:97:6e:2f:23:9f:b4:8a:6f:2e:65:38:95:04:b9:2b:06:dd:d2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/es-MX/bootmgr.exe.mui
- SHA256 63fa79aafddff0a6a255097010d083ab041eeae71b91d96a9bb01240515a94e5
- MD5 06f3e53ffd023f87ce3ca18e28c7a1de
- SHA1 56e99f557b73585e84bbe255b04213ab238309b6
- SHA512 92b09f9a45d812547071319f1c2f72b7fc0e7ada0420d6c2d24911d7d3575dcef196338347b62f47f663ae77ff2ac405a71c9e26d4293f6e4b7c2612fc76870d
- SSDEEP 384:YwdkxA7Sr3xFa9fXBWyYrzBpAv8TXAuOuq4fHyXmH1YIb5L/DBRJ4pUad+JR9zut:bfXzYRDAuOuq4fHH5L/1P9adk9zumC
- TLSH T19183A1535BFA0105F6B76F2DA97A11640E37BD95A83CC92D015C284E8BF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
06:9b:8f:0e:98:08:b8:8b:d2:57:34:d9:60:5a:3e:ba:4b:4a:b9:9c:75:52:15:97:2a:6b:e7:4c:e0:b5:a6:c1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/et-EE/bootmgr.exe.mui
- SHA256 6db9f9dd4aeebb73edcd91d6709524ed22d724569a79d4dd5cabffd214936e8b
- MD5 dff1dcbc38e655400e3416050f3f0357
- SHA1 4224d649164d1d8dea68ef2ef0ac843199bbc05b
- SHA512 99a1d32cd6779a93bda5d688185320b531ea8fe72a4d333a03e06b1ab92a41be1de1589a8b4ddf15a798fdd41f9b1156a0ebb0c0909ff9eaf8ce87ebf407005b
- SSDEEP 384:QztOlwwIqxIrXUTVQCD6LMcAxpvXRQQl+yWhJrzBpAv8TXAuOuf4TJEsJeZtx5dQ:eCSMc4R1GJRDAuOuf4TJUS0O1PbZ49zq
- TLSH T1D67394535BEA0004F6F76E2DA87A51640E377D966C78C92D115C2C4E8BF3E82C961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a6:dc:9e:1a:79:46:12:25:02:60:6f:31:66:09:fd:83:ea:5c:0f:40:99:17:4f:2d:8e:85:43:61:80:27:7a:09
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
67KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/etfsboot.com
- SHA256 f425e135aac26b55e2bac655e62e2ce0b16255226c583d9ab43b2e93e8a6d932
- MD5 d4befebf3cef129ac087422b9e912788
- SHA1 62313ec73f381c052f2513ca6279cfb5107e98c0
- SHA512 3814e4682cad2ef40061d3d5e8142c964cc73a6c6dfc72ba59cbab0922dd0c7e279703450e3a1f4fcfde3498565bf6ef28a30e7de53a0eda75b3fea76d03929b
- TLSH T1D4810A160E6A711FFEEF8270CD5A118146C9FCAD6457A428A07801FB7D562B44DB330A
- MD5 SHA1 SHA512 TLSH
Boot/fi-FI/bootmgr.exe.mui
- SHA256 4795879d2654cdfc69c008fd07c03eba0176b4af2d663b028bf5d5976d577732
- MD5 0e2958404824966dd99e23d87fec0c7c
- SHA1 3c83a1b491dea4f20fc2aa237373ae4d46b121f4
- SHA512 459579c9ce0dd45c1efa4450503828b7e33ab4ff35833d22dfc1c0a77c6a56c3b4ef2cf61b467e7b4ed03546b558ef878249376094160a2bcb2c88af041df2b9
- SSDEEP 768:gZU99J1S7rBn+RDAuOuH5fn2016y1PhLadk9zuam:gI9Jc7Rev1pPhRzu9
- TLSH T1FF83BF434BFF0014F6B75E69ADBA51200E337D956C7CD92D165C2C4E8BA3E828961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8f:cd:e3:25:7b:c2:61:cd:2f:ee:15:5f:df:ef:69:da:89:f3:3b:de:f4:c7:cc:ab:5f:72:7b:f7:82:eb:0f:5a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/fi-FI/memtest.exe.mui
- SHA256 e2b9e56e296fc2782bcafebba9bc0b8c8b4e0972f189a0de7bdc0fea6818f216
- MD5 bdc8b3d1d7cc95e6400bc5b8bffe585f
- SHA1 bbdf85a3aa8871422fcf825bd2ae9cb8defa46cd
- SHA512 745de9f5ae25808897caf220c8dc78141d7ba9acb6882f946b4d612bf5ed3cd48b4ffe7908f6012be8e28cf66e7fc47a65c18a548be7c6efdcf8afa2dfee7cb7
- SSDEEP 384:0QouJzuN5x0mVZHorzHlvLxWsdWJrzBpRv8TgXvqmxMS6DBRJ7G3leLR9zusRK9N:zouJzE5ou+8DxMS61P7med9zuLtU2
- TLSH T1742334035BFA0104F6F76F35697616611E37BDA2AC78C52D0698689D8EF3E41DC20BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
87:a0:a5:54:03:89:98:79:e5:75:13:ac:bc:c1:96:4f:c5:cf:8d:7f:d4:f1:3a:28:c9:e6:79:88:47:11:a3:85
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/fr-CA/bootmgr.exe.mui
- SHA256 daa9512aba2b6546ceebbcc10699799cdc7da663bb4cd54e60a97b15e03aa942
- MD5 6e5ada4dad59999b933b4d0909111fd5
- SHA1 56f5c419079d6ff9ef5d3ae2e3821b0e8fdf3b96
- SHA512 a9195ed05d97863752a0cc7b11d00367b983f7eda266ef484b7f5f7f5206a551c0a8197e2999c3e3a0763cb23f9c939a2cd98cd5c9e16cddc3b5b5fd58f1b832
- SSDEEP 1536:cxe7fGOut+oIM8gDFGCVy/tG8sv6LtnbPjnXzb:cxnOut+oIkwLXv
- TLSH T16883A3535BFA0101F6B77B69A87A11640E377D966C38C52D119C288E8FF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3b:85:5d:cc:51:d3:e2:b7:c5:7c:b6:18:bf:c0:a1:af:a9:71:d8:95:8e:2b:2d:88:d7:50:43:5a:b9:3b:df:58
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/fr-FR/bootmgr.exe.mui
- SHA256 69a342658dbbd91eb09f90a64ef546e1d46bbeb6b47b2a9db20348d7042a3d53
- MD5 d59608c03c80181d277b89af71564c7d
- SHA1 4a2d081900480368eb419a4bdcfc7ead0cf54de2
- SHA512 b06ae176842ae8ee72e73603b2aad929bce84d5bcb8b376008d6792deee7eac5d75a5906e632428fe26f92741dbb7015b603b300af1536280a8fb4f6a9b79bc4
- SSDEEP 1536:7cRT9uMgM8gDlGCVy/lG8s6LtnKP2/zuE:m9uMgku/D
- TLSH T1DA83A3535BFA0101F6B77F69A87A11640E377D966838C52D119C288E8FF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6e:b8:7c:41:94:2d:4a:89:8c:68:fc:bf:51:28:2a:12:93:9d:2d:df:90:79:af:cd:5b:c0:14:4b:24:ae:62:ee
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
72KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/fr-FR/memtest.exe.mui
- SHA256 27df1ccbdba697341ba41ec8e36384adf232c24c88a35a1811ed2299c78d1b59
- MD5 eb11cf2247b3f3f5d6e52d7c0dd2f983
- SHA1 e3a025f0c1b3cbed58e2b5c8c2bc3c0e5c8c3044
- SHA512 71bc16ad459859ed6eee6eabfdbfaaa6881314102646c73b2b87265d226fd463f97af5b5cf0c902f82547de6b1bc327e96b46045ecc19caf0f6227f8fe138e8c
- SSDEEP 768:ZouJzE5SK+8J6qfuCfEufuo21Ps/M9zVU:ZouJwAVuOPAEzVU
- TLSH T1A22303435BEA0104F6F76F39A9B615611E3B7D96AC38C52D1298689D4EF3F41CC20BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0b:5c:62:77:18:32:cf:1a:a3:b3:d4:08:37:c0:7a:30:78:3c:9e:15:10:25:ee:46:c9:89:da:f7:9f:54:a6:fe
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:49BC-E37A-233C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:97:03:cf:59:9c:6b:89:78:3f:00:01:00:00:01:97
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/hr-HR/bootmgr.exe.mui
- SHA256 f805b440e49b56fe0f3d5a767ac54b402c1c0387ec182947d4e0c3054d83604e
- MD5 d345393baf8cfd902ca30c7a965510ff
- SHA1 49831bee486186dedb4399cd8d368b6432b621b9
- SHA512 74c75721b85546825a910e965cf469811c87d4d9aa5941f24aa9fe4d9bdf2fc06179a9781d9f7cc2e21a922d87b35601b1e899674734039577088ed36500260b
- SSDEEP 768:kFlZKgRDAuOuVo6VAIv15zVHawIK7P5ayghaf5wrj1P719zx378:8Ksrj2u3zVHrmchuPjzd78
- TLSH T11B83C5435BFE0104F9B76E6DA97A11640E377D657838C92D105C2C8E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ce:3a:de:14:7d:ca:d2:a1:cb:e0:53:b0:f2:3a:68:89:87:27:fa:59:ce:bf:cd:9a:7c:6c:d1:cb:2d:d9:04:d9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/hu-HU/bootmgr.exe.mui
- SHA256 34db2b9a00651c4854495a22b1c93e669f3bc8d82bfba45e688590af8e963861
- MD5 414d49ce50fdfd65ce9e9d1afacf6adf
- SHA1 924cd2e2b7e62badac5b3d527811211d57cc7f01
- SHA512 8f917397961ddf6281b735461cba5f430a8dc5f09d296842c96595c882a74d118ded50d2c6e75e7a14f0a518bc3ced3e69bbba14d41eabfe32b52093a97ef12f
- SSDEEP 1536:wVWhRNokfZ0sS/gSx/mjUL84UjlYTFVo9GtTugWOypPgm9VzB6bZyC+2h2Kn62lK:wohRNokfZ0JgSx/mjUL84UjlYTFVo9G+
- TLSH T17B83C1435BEE0004F5B75E297DBA51640E37BD95683CC92D519C288E8BF3E82C961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a9:fc:0b:d9:52:d9:2c:65:62:2f:8b:b2:08:c4:32:44:a0:28:a1:23:46:aa:fd:11:90:25:f0:fd:a5:e5:77:2b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
72KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/hu-HU/memtest.exe.mui
- SHA256 4e763cba36d64f8e5f68df11168dc7332e5b322dc64e6223d703e87226340e76
- MD5 4751a82d6e34955712dddcaf820a6a6a
- SHA1 b1863cab3901e3ba6a96bc07ddc0e2fab9075fb1
- SHA512 8a68e5cdaae17e8eb4eb74a6270c0c78cb281af78a2001d683d27575255db522aa90aaa5b92d18ebe3134ed9984a7f3eb39ef2a49c3a1f2ff0d5d251cb5eee7f
- SSDEEP 768:PkouJzE505c+8rnToDpyDloJ981Pwn6K9zs:8ouJw2NmngcPwnXz
- TLSH T1952324035BFA0104F6F76F7569B656611E3BBD91A93CC62D0298698D4EF3F418C20BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a5:7f:1f:09:31:2e:ce:96:b9:8f:ff:46:21:33:8a:3e:96:3d:f7:83:ed:12:61:e9:e4:84:4b:4a:d1:86:76:85
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/it-IT/bootmgr.exe.mui
- SHA256 4e40991d095c0a71b1bc4d163cb23364b0d1172d3242956020ba7008550a9e8f
- MD5 49200c4cb6d62a7137c05685bfd1f9c0
- SHA1 cce2e18787f5c03dc52d0ed43bc807853e97f067
- SHA512 b7d4c7a57963475ba26d6da797fd41df0934dfba66d06e3fbcf406ee3be03c748e70fdf405bf5909b5baeb6fa7afd2c4543bc6e1c61d9be6c454eb643fdc25fd
- SSDEEP 768:NcKszAGRDAuOuyvgoPZpBAaH21P8FTadk9zut:ivzA2WBnuP8FJzut
- TLSH T15D83B0535BFE0104F5F76E2DA87A11640E377D95683CD92D01AC288E8BF3E528961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d2:38:c4:ae:04:4c:37:fd:3e:92:50:c5:bb:93:f9:34:3f:45:7c:40:75:90:85:38:62:4d:45:29:ab:5e:c6:da
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/it-IT/memtest.exe.mui
- SHA256 12a5c84875e983711114629df8a38770635ebe23e545141782d8edbbba6ee8eb
- MD5 eb9073c0d4e05d7b60af3966de428c2c
- SHA1 a1563458ebf697748f25d9a9ed1a63ab5095b059
- SHA512 81b7653cabcdc9e2446025a2a9d53dcdea9b66545079e1515080b419115cb505dead81bc097d9667f6c43635d70df6ae58729128ae4e4d6667056663e3d3ce8b
- SSDEEP 384:u7QouJzuN5x0mVZHorzHlvLeWqWrzBpRv8TgXP2451EDBRJ8QCsdK1Z0R9zb3U:HouJzE5HW+8P247E1P3xoZ49zo
- TLSH T1592326436BFA0104F6F76F39697616601E3B7D91A83CC66D0298689D4EF3F419C21BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fa:41:3a:fa:14:1c:87:31:a6:d1:ee:2f:c0:ee:66:fc:dc:d7:86:31:7c:f2:b1:b1:0a:6c:d6:2f:06:c5:cc:e7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/ja-JP/bootmgr.exe.mui
- SHA256 5475e07908fd010ae136398b0bdbc5a03273a395b2516df36b00cfa706aeb338
- MD5 099a43156989daaaf6177f44dec3ba39
- SHA1 e1c81e24e1f7be5a9daceb7407a5962845bef9b8
- SHA512 25792aace8969bc20fe238245a1b9074b29426b45faca31d69cf1c3206206800cb507e5a2a8af26828e0e7c9dfd92f54edadf978a25c1f2196eb125b4a55f30e
- SSDEEP 768:l+GrtkXzU3RXRDAuOuc4EU+Xxp2o1Per+ed9zu7Q:l+GrtkXKBQhlPeb/zu7Q
- TLSH T1E26325435BEB0004E5B75A7DA87B60641E37B954687CC96D119C2C8ECBF3E828961FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
09:3b:ee:56:58:b1:42:b1:8c:c6:0c:d8:14:2b:2e:7f:ca:5a:88:69:9f:95:28:4d:e5:0b:0b:71:1d:88:c5:dc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
59KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/ja-JP/memtest.exe.mui
- SHA256 e95efd7bb877af7896241e3af7c7c1e9df5448b2e4cf2bda515f60795ae84b16
- MD5 653bb1e193284dfc37e2ae4c909b086c
- SHA1 9ac8d55686bcd1bc15745cee9a422d04ace517ed
- SHA512 aa983dec9d9168c639ca4e1848e308584597dc84acd044decd625ff092fa1500dc450df2ec5519f39621f580c5b00beed3773f6381590824ca568ae68a8dbde0
- SSDEEP 384:+QouJzuN5x0mVZHorzHlvLHW+LWurzBpRv8TgXaoxeQf+fGlvrDBRJFpUad+JR9l:5ouJzE5Mn+8dxeIr1Pwadk9zuOZ
- TLSH T12613684357FA0104F6F76F35A97656601E3BBDA1A838C52D1298688D8EF3F418C21BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
71:37:b6:c9:7c:c0:25:12:52:8c:be:df:93:fc:6c:5d:ee:18:28:49:5a:12:f9:f8:67:ac:15:10:5b:28:b9:1b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
33KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/ko-KR/bootmgr.exe.mui
- SHA256 73aa47550ef9121928b3db3b074d01de907b1a620c4939ff2ff79f57cf4f4c90
- MD5 8f70c5d10ad4b3a14d8fc0960cf2c227
- SHA1 d74a4cb61ca0c4178432dd2488800be722f28387
- SHA512 a44298b7e29c0a5b5023c4a2f982511d51d1a9f8cfaa5cf9000855a35e66d1a29e4f32cb4d98cd18c598ea43fbe3e655af5741ff57e46e735b25a9bd38b0a56b
- SSDEEP 768:gpCToEYRDAuOus2LjjQIEfPm1P3n6K9zjNh:OeUIIEeP3nXzxh
- TLSH T1336339534BFB0000F9765A6DA97B51600E37B955683CC92D11AC2C8ECBF3E528962FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
83:fd:a3:a9:6f:e6:9d:15:83:a0:7d:a7:08:98:21:d4:cd:1a:50:e0:d9:49:f1:5e:ad:92:81:b1:e3:91:5c:4a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
58KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/ko-KR/memtest.exe.mui
- SHA256 3d4099e6ef67d01a668f242c431958070e4ab80000157da64a7efb3df08cc158
- MD5 9134ba3d526d2e02444f43d5e7638af6
- SHA1 365ee7d0290bfa1ee3c8953c530c81ce6357a0cf
- SHA512 43b081c5b459d1ffbd7baac3c159f31913e8b37c77b6dd2d4f14cae645bf8448f15292023825f142f535dff12c3e54b64ee60edaf613589d2b4a53dea1b18d12
- SSDEEP 384:BQouJzuN5x0mVZHorzHlvLgWILWZrzBpRv8TgXN/xsxXOX2pqjDBRJloUJCR9zUF:2ouJzE5ro+8H/j1PloUJu9z2Xwa
- TLSH T15C1377035BFA0104F6F76B39A97656701E3BBD91A93CC52D1198689D9EF3F418C20BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
57:35:34:61:a8:5d:3b:5d:de:16:44:f1:ed:48:e9:5f:f1:e7:10:a3:bd:5c:f3:2b:49:da:12:ca:c8:70:5b:d3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:12BC-E3AE-74EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a1:01:85:55:99:b9:54:5d:8a:00:01:00:00:01:a1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
33KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/lt-LT/bootmgr.exe.mui
- SHA256 babc35d06339d4cd91aebeedab8d07b8e7a0111eaea4533afdb752c33ab78523
- MD5 9c05db60a91ca2572ee552a373f1470b
- SHA1 84fa6cf429965c28d2478b54926d88bf046f80ab
- SHA512 c58dcf85e003aef39e17102fac592bd80e2071feebba9518c740bccdc404c6923fda67233d37dcc8b4aed620c036c0f3d02b7b927228feac4a998961e66c6411
- SSDEEP 768:QCTWnnV87YEvO7RVI2jdTITOIpRDAuOuVr3QTkNlQV1lhKTYrIlaNC5an/1P+n6a:Qdd7njI/MRhKTY5NCU9P+nXzEq
- TLSH T1AD73E4435BFA0004F6F75E6DA8BA55640E377955283CC92E115C2C8ECBF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5c:ca:9f:3d:f7:76:ba:ac:46:9d:1e:19:8a:53:0e:40:ff:aa:b3:7a:35:2c:76:29:d3:ab:12:54:62:94:95:48
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
68KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/lv-LV/bootmgr.exe.mui
- SHA256 fe54e98cf87ee1a2918d7ecccb90d82070f8487407e5c6320a2fd11d2f29d30e
- MD5 36c492b44b0079473940d69b6f2a0e0a
- SHA1 a50b91d6ad2259666061c08ea681c448d44dbba8
- SHA512 fe14865381d6660677361072cca0df822e6b76701af99306a02b5d41f63c76585ded4c8f19a31739f79eab3659499d6ccecc88eb4d09f8446b2a55bc82bb8a69
- SSDEEP 768:z9wzT3ndUSNsITJlH9/6dMRDAuOuvrhqELNCjOUe2SjLIZ3DwDoS1POQadk9zuu:GUSNJ6+9INkDPOqzuu
- TLSH T10373D4935BFA0005F6F35E6DA9BA11601E3779552C3CC92E115C2C4E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4e:a1:35:31:7a:1a:5f:ea:b1:6e:1e:44:1e:10:f8:5d:4e:c5:eb:dc:5e:1c:d6:0b:37:d9:22:34:f3:4c:0e:7a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
68KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/memtest.exe
- SHA256 e8b80efa22966e08ff96fcefb0417058c96ee4322981f3ac1753bc45f52a659b
- MD5 3731a9163cadac35a5a63b3234fe7b63
- SHA1 7d41f579b189b37984f2e46966492c35bdc094e8
- SHA512 601803f9536e395d3a96dba2015f2a9f59ea783ae67bffaf3f73c492206c850fadddb6b01688fdc55ccb667a668edbd203259bd4db1ab179f516c3da7f32d0bd
- SSDEEP 24576:Qob0iXdm/X/+n2KM0T/CZ26oz6Ib5fzwJycvPMIRwJKIixzEjl9DE0Hchoc+OQj:QooNtX26o3fSxuKgjbDOehOQj
- TLSH T1A525AE22D2D50076E6F33930467F73796DBE67214A78859D4384193E9E32AC0AA3D36F
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bd:e7:bd:49:2b:52:c2:3e:35:bc:48:55:b6:79:1f:70:da:13:51:50:50:c4:94:7b:4f:81:e8:fe:5d:e8:32:c5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 11, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 5, 2022 - May 4, 2023
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a0:e9:bb:8c:bb:0e:a2:d1:7a:00:01:00:00:01:a0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
0
Entry point
6779
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_BOOT_APPLICATION
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
memtest.pdb
Name
.text
Size
869KB
Virtual Size
868KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
82KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
291KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=259, version=28900,
count=1, id=260, version=28900,
count=44, id=260, version=30795,
count=15, id=261, version=30795,
count=451, id=264, version=30795,
count=32, id=259, version=30795,
count=1, id=256, version=30795,
count=1, id=255, version=30795,
count=1, id=258, version=30795,
Boot/nb-NO/bootmgr.exe.mui
- SHA256 32f1393708bcaf6f94adc95c36f3632a0c3e73af98546e3cca983a985c717779
- MD5 7f8e6127f60540da6f5609013e6c0d72
- SHA1 cf9520e27652d030e6b1af7f8553588c6c4e668d
- SHA512 0963cc37682b7c068b2bcee887c4aca1b0bf1c90a62cc1e90e6f88037904c396af4e6ea5fd90e051d567c65eb150f981467856f15bddf04293aecdf0310825ff
- SSDEEP 1536:v5WcrUAu4y4rQCe5eze/85hIlMKxEBVTPYWbvLHtTErVNEymP5cQPH/zu9Z:v5WcrUAu4y4rQCe5eze/85hIlMKxEBVo
- TLSH T16E73A2535BFB0004F5B75F6DA8BA11640E37BD956838C92D115C2C8E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4c:21:f6:f8:54:bd:60:fc:e5:1b:b2:ab:ec:48:ee:58:cf:59:a3:5d:30:41:b6:6e:fd:46:c4:4f:83:97:ff:9c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/nb-NO/memtest.exe.mui
- SHA256 5d7ddbf473e5b022debfeeac360f3ac4f1aa2bd1b173ed9c97ce6e6aa96f0716
- MD5 8fba7d31913dbb0f0bc69230df953416
- SHA1 f600edf3caef6ff36e711008e192a76ab6fdf0bd
- SHA512 ce38214e389e25123a435e53fd61b56413638ac31cb60d9e0de3566ba26f27ef8613d1d2222db26bdc3b8f70727d864ca3d4e182b04885434fe31af29cd5043d
- SSDEEP 384:fAFVaQouJzuN5x0mVZHorzHlvL6WgYrzBpRv8TgXyd98L6DBRJykNcM6a1R9z/f2:couJzE5VY+8yd9W61PZn6K9zJY
- TLSH T11C2335436BFA0104F6F76B75A97616601E37BDA1A83CC62D1198689D4EF3F418C21BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e9:b7:a0:63:79:1e:3b:1c:5f:6b:cb:35:b3:61:e3:b3:2e:14:d3:64:67:cb:a9:00:4e:12:e7:27:1d:85:66:31
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/nl-NL/bootmgr.exe.mui
- SHA256 63f03bb296fb5ffd4446f80f21c2cd711ae3a95c55b447835b553a51136e75ff
- MD5 55604e4fa1349016f291c1e2a094f9b8
- SHA1 22dc6bc50d310e2292f578bfc5892f5cbbc88a30
- SHA512 54f1502a16010650c454114d164c3c39715ae602c5af464277b86892a0de241ad3c44cc6427909ce8e13f963b6bdf1d76c4044d6e9930795eaf774b5f6d01c72
- SSDEEP 1536:CoZ8yofsFtLw9+fYQG12PMJUOrndxPfzuN:CoZ8yofsFtLw9+fYQG12PMJUOrzHO
- TLSH T1FF83A2435BFA0004F9B76F696C7A51600E37BD956C38D92D116C2C9E8BF3E428961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
16:63:49:2e:8a:43:cf:35:1e:fc:29:b9:33:aa:e6:eb:b9:28:e5:ec:cf:96:d1:8a:e4:10:06:8d:00:5f:90:97
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/nl-NL/memtest.exe.mui
- SHA256 947fd1d264488df9fadc9c7755b930fe547d25aac8872cd5c2be1ba71f46eaa7
- MD5 ba5a750bf5d694b3f43a253995efc15e
- SHA1 81fb05ed5123c6c8088b66ab718972581031fefe
- SHA512 8b0ed545d1ee2aca8d26645faa69427f9a8702c80dd477ea073eff340c7fed15f704314571e1264cb1f4c3c92ba22e7e6faf519b72454394ac3f95d21b92d92f
- SSDEEP 768:qouJzE5fJ+8FdysB2tshgjgferbZ1PPn6K9zr7P:qouJwhc0dJgjgferb/PPnXz/
- TLSH T19D2335035BFA0104F6F76F75697616601E3BBDA1A838C62D0298689D4EF3F419C21BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d1:83:79:2e:d8:a5:39:82:f3:93:aa:8e:0f:47:84:f5:11:90:42:4c:32:87:0d:7c:20:15:ac:54:cf:92:0a:53
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/pl-PL/bootmgr.exe.mui
- SHA256 74cb4ee78b4f43dde59776075538c19709ea04e594a6a3c88e43ec9e34e9e954
- MD5 572a92dd9143c7a2fad22d067080ba82
- SHA1 f4079657beabe552a9e38e31bf14b2cbdcbcc0ba
- SHA512 b6e3f62e4bc0f341c46ee4d9d5f262f04fee3efd2fb131e175fec856ad2fc88984b975cd7251be1bbe7e3a3f8e2daec4d878444223ad6a7a144996bd895e6fdc
- SSDEEP 768:hCqbL8VbYO4QZ73aAetRDAuOuNoOuv1y75841PTadk9zuM:hpkeTaY5pPJzuM
- TLSH T1358304435BFA0004FAB75F6DA87B21644E377D516838C56E115C2C8E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c6:1d:73:cf:b4:dc:cc:24:34:d4:e3:20:09:e1:a1:d1:fe:8f:2d:f2:4e:54:03:03:17:d3:da:34:1f:9f:5e:a8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
71KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/pl-PL/memtest.exe.mui
- SHA256 1a9ef3fbe4ad3b85b94dd91e038d8ab9385b1edaf1b219f656d2a90bf7243be4
- MD5 f1c1973df3773bc26fac152b8aba2eb1
- SHA1 dc2f8135c4dfbdcb178dfa928952498a9b3f6577
- SHA512 296ea7dfae8ede4c3e161d99b935ba756970f170542e422ceabb3d499548ca1d8870f3f8a4fc93112a81ecab5bcf81f498235d943cf2b1e18bfc2f9273a5cfa9
- SSDEEP 384:mQouJzuN5x0mVZHorzHlvL/WkdrzBpRv8TgX3UzLsysmscXzqzczmqDBRJ8TZNcb:houJzE5Cd+83ULgq1PWn6K9zO
- TLSH T1A82336436BFA0104F6F76F7599B616604E3BBD91A838C25D1294698D4EF3F41CC21BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4e:3d:7c:6a:31:b7:3c:e3:c5:5f:76:37:b7:c0:ae:ee:30:52:c0:97:fb:56:b7:d7:5b:d6:2e:f7:a1:10:1d:40
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/pt-BR/bootmgr.exe.mui
- SHA256 e6e72faee9ee1b0274b4872ca4780f08bb01337372d73ab5e0eaedde9654633b
- MD5 74135596156fc414c531b8c52918bc76
- SHA1 5d551618aad7093aad167f332708c89bc4ca8b0e
- SHA512 9119d8575cb1c3de2bfe4130cbe6bbed6d05f3660120d8a62c8504bbc284dc4149aa210547af51c3d3ce4daab21f443455cafe8a79fae9a75da7ac03e358a3b4
- SSDEEP 768:Re8dF63JfvkCC9p+R4RDAuOuc1DM6p4K1Pt50Zi9zuK7IH:Y8dF63JfsCC9p+R0epzPLzuxH
- TLSH T18983AF535BFE1104FAB76E2DA97A11640E377D91683CC92D015C289E8BF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f7:c5:b6:a4:c6:39:cd:0f:28:7f:28:c9:df:83:55:cb:80:b5:fc:42:4a:65:dc:a4:db:e9:93:0b:2d:93:00:4c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:32BD-E3D5-3B1D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ad:fc:df:4d:58:e3:5d:32:e9:00:01:00:00:01:ad
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/pt-BR/memtest.exe.mui
- SHA256 c12d1bf96c81df8a28435140d1289fe57bc49e1941fd92fcd1e00f58ef292d16
- MD5 6e6bbeaeabb47f016def21e4028b55e6
- SHA1 eb819d36505490d2052a29c3829b727e0a7cf592
- SHA512 c1c27aeafbc40b76751a3d63709ff09a0e84676a36f57a6bfdf4345ba4516bafa25f54b560ef1b132e88647c692bb8f1969ed05aaaeedf538dbc6e152b9a40ab
- SSDEEP 384:/QouJzuN5x0mVZHorzHlvLvWmorzBpRv8TgXF4LneyBBDBRJytQleLR9zusRK95r:IouJzE5wo+8FkeyBB1Pyoed9zuyo
- TLSH T10B2303435BFA0104F6F76F3969B656601E37BDA1A838C62D0198689D4EF3F41CC21BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ad:09:d4:f4:d0:f3:14:cc:58:6a:9c:b4:c3:19:73:f6:e8:5b:f2:bb:37:2e:b5:58:11:17:74:56:d2:fc:a2:02
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/pt-PT/bootmgr.exe.mui
- SHA256 35296434f4cac5f94cbbb6372fc92586502599bf88e400fa75583bf38bb4c62d
- MD5 a6718f4f0c857089dce009080ac6456d
- SHA1 5a41eded3b1552131473b868d67bdcab60e22163
- SHA512 14ddd8b5b2a6021d187245c86966f94b3640b1531189715ac98b7d0709bd7eca0585a799d1766981744f9428d4312f721d31419e168e3395299d534e814b4177
- SSDEEP 768:z+BeenwGHC8w39Hf/40RDAuOu71ZSeDcG1Pan6K9zU:qBeenwGHhw39Hf/4QRDPPanXzU
- TLSH T14283A3435BFE0104FAB76E6DA97A55640E377991683CC92D016C284E8FF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
50:70:36:42:dc:c3:b8:7b:02:0c:1d:f0:71:b5:bc:59:12:d3:89:44:23:f1:ad:b2:c9:44:93:d5:31:72:02:ca
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/pt-PT/memtest.exe.mui
- SHA256 c445e089fe89dc08e03fea68523c5c7e2d7dbbc3e11db61e27560041dab33fb0
- MD5 1afad787fdfa1f4c0d711abc4b780ded
- SHA1 24c885120afb4f783ac93ab5ff9b0c009ada777a
- SHA512 3876ba49f44533dd80357411ff571b87a8cc6b70f8ef57794c2cd32c73e886673266427f51d0661df5b25acffd1ae609af8c8ff08298b34aa659a672e2a82f95
- SSDEEP 384:jQouJzuN5x0mVZHorzHlvL0WmErzBpRv8TgXpuJE2F2RcobDBRJSzWNcM6a1R9zW:UouJzE5xE+8Aa2F2Rcob1PSCn6K9zW
- TLSH T1CE23F4435BFA0104F6F76F39A9B616611E3B7DA2A838C52D0194689D4EF3F419C21BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d0:3c:04:68:ff:fc:b5:20:3f:e4:3c:f6:b5:f8:48:99:9a:49:a6:dd:90:db:af:31:d1:30:e5:58:27:0d:26:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/qps-ploc/bootmgr.exe.mui
- SHA256 a831a07e28f7aa197c5474a0887b16bea6126ae991cc140d1c3b0bb76994651c
- MD5 080311432d90befceb611796bda5f892
- SHA1 8091d091df726f2bfb7defd2b78a9cc53e13d281
- SHA512 11d90670b231b13e0829165e665466393974a1c9e4be0eeb70a4034ff907fb1b71472cd77a027156cc687f64c4be7f9e375777a2a7579067b8f8ad33504b8319
- SSDEEP 768:5OhlV2Heze1n6L1eacZfwg793qhRDAuOuISOBbY0/TUsYEwuY2REdhM1PgRmuU9H:khD2HegdfwG93qnYbUsYuOsPCd8zuo
- TLSH T173837C534BEB0040E9765A6D987E50242E337954293CC92E205DEC4E8BF3E574B6EFA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ae:65:d8:4c:3b:87:24:74:f2:b3:05:b6:e0:d1:de:2a:6b:7a:f9:9f:ca:a7:c3:49:c1:9d:ee:bd:15:47:57:70
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 23, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 5, 2022 - May 4, 2023
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:D9DE-E39A-43FE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ac:66:bc:87:22:5d:de:3d:7b:00:01:00:00:01:ac
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
76KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/qps-ploc/memtest.exe.mui
- SHA256 47f2139c10af199c4befa401ce55b6ead4d7ec0a7a67fbd8d4f0c2e5ca8a0f2c
- MD5 30246391f0c51a8e063ca8fd71db9d97
- SHA1 b73658263f9a52da5c32b07a468d545d7bc181b9
- SHA512 e0187c04fe6fbb5de37a0dfc42e3d6962f6391e0c8d0c7b1cf0cff454c107ec6320ca2079ab803fa47b16ba27b91fab4a7532f6bb51f757b34409d5e61fcd5f7
- SSDEEP 768:c9CmZF+1SBlxrtm9YPt9zcecCiEh2+8GgFDkR1PCvDn6K9zu:cBZF+1SjVOePhBoqHPMnXzu
- TLSH T15443400B5BEB0040ED26263DD47E81213A337AA5153CC42E3599E94D8BF3A175F2DBA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e8:e4:0f:57:e7:ac:1f:3a:d2:47:ad:8d:6b:35:5d:cc:a3:f1:4f:ce:24:73:31:1d:4a:40:31:a9:61:4e:b3:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/qps-plocm/bootmgr.exe.mui
- SHA256 3fab4e3c51561e857fb45ea3e11d0ea0c8e89872680c9f8315812ef96b394033
- MD5 a6a172679eae511184bf790511e25436
- SHA1 675aaebeda7910cd034cbca0102c01cbc4469e7a
- SHA512 3ef9c0b3d2ae780c6425d802035b5efe9320bb54bb8f716599709f18dbd424981bb88ae1eeacfb89ac5b02f38ab0586d15279fbc8059369a6a3ae9a001a189bb
- SSDEEP 768:8x45wm4gmbdORDAuOuC04U6gql1PJMufiC9zgt:AgIuagcPJVzgt
- TLSH T1818318535BFB0104F6F7AB29A87A10601E377D91687CC52D105C2C8E8BB3E568DA1FA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6e:5f:12:20:12:be:3b:7a:aa:62:c7:0b:98:e1:d0:00:26:65:1e:ce:e3:03:5e:38:e4:a9:b1:7a:93:04:cb:41
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:897A-E356-1701,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ab:09:09:ef:ab:63:d4:e8:a9:00:01:00:00:01:ab
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/ro-RO/bootmgr.exe.mui
- SHA256 b51b5673f22c4d0ad3369b4f7383576396cf97d42b505a2a7ac0adb91bfcb1c7
- MD5 d6574f5a222b60906bacd55d7a82b678
- SHA1 43efe8e5508f8a9095ae567d66ecc3c1e9e4d909
- SHA512 4f3f6250520993027ce9a8f07cdffca48b3698c283ffff3db0e0127ccf25f09c21f900640f0c6703af641370eb8e46bdfe29ab6fc0f94e0103a2949ed37174c4
- SSDEEP 768:ae3EFLvo2kiYQq9pRDAuOu3LMUjJwXw1PkCn6K9zn:aecTq9/5JooPkCnXzn
- TLSH T19B83C3535BFA0104F6B76B2DA87A15640E377D56683CC92D115C2C8E8BF3E828D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d7:84:40:0c:aa:09:cf:36:c7:f2:af:de:d0:9e:64:e0:5c:0b:17:1b:d7:c1:3f:dd:e8:a3:d8:d5:1c:fc:91:b7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/ru-RU/bootmgr.exe.mui
- SHA256 7a3950143821a54cbb96c99aecf933001760bff42c5f48c4aff84eb03e36ffd2
- MD5 3efad9a8e9e4cb85f791626472b5d736
- SHA1 f6c717c0b3a6ad6f5ea0ba9d4049d95b310af007
- SHA512 a0a2ad24df6e3986aedac08c73a0c7ae378450a460ae186ca47697f0824d49a5fe45beb961310e21d6cfe92ef0bd9f3f47b9684cc189cde06ef55989e8da84d6
- SSDEEP 768:nV3UPUEDAi1J65cL1GXRDAuOuexU8zLJRY1Pbeed9zuR:Md1GByJGPb3/zuR
- TLSH T1938366475BFF0000E9669A2D597B04E10A77BB502A3CC96D119E3C8DC7A3E726A21FD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c5:e9:42:10:89:64:e8:71:57:39:4f:54:ab:d4:42:24:1b:c1:a5:b7:42:17:92:00:6d:b1:cc:3e:8e:e2:6d:20
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/ru-RU/memtest.exe.mui
- SHA256 eb8327a74e882502b491302e2c94eeb3d109b853aebfbb249f33edb0cb5f3c92
- MD5 22cb8f311af1359fc1415601faed99c4
- SHA1 f1a429a012fc726fcd63a267644cb071981c2313
- SHA512 ffe4ad72c8a00b648d57e32960dbf7dff1ee36adcd06c3b8aa3ccf6c327b7da2f3bbe506a49a03b1d495ca7a912d673282bcc25249004503e180c3b5c8ed90c9
- SSDEEP 384:kzQouJzuN5x0mVZHorzHlvL7WSGHrzBpRv8TgXbAJ3Usq+zRg+z9q+JxLDBRJDG7:kkouJzE5LH+8wL1PDoed9zux
- TLSH T16123AA076BFA0104F6F76B39597206A11E3BBE91693CC16D0199289D4EF3F619D30BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
29:2c:1d:45:ad:1d:a2:e8:dd:c3:7c:ce:4e:38:90:00:91:68:1f:1b:1c:0f:07:33:4d:46:81:13:0b:f5:d0:a3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/sk-SK/bootmgr.exe.mui
- SHA256 9d591922cdf484777e5144d43829a03ab0c91feb7cede583791173c93462f81c
- MD5 24ae4cef56b980daf170f9388627b90a
- SHA1 32663c9b0f297603db7f0b6a3b88b8f9af37a4e4
- SHA512 b724061505358bf1ea10ca38daac2297b6db10d244d7dfee7ea91ca8e4a746789906ae1ff5219a3cbeb36d4dbae5c7bc71c0511f7f2a7aa2a7beff9d10099cc9
- SSDEEP 768:VX/86lht9RDAuOu1w03S7oBW1PARn6K9z3XY:VX/flhtjq7o4PARnXz3o
- TLSH T1A983C3535BFE0004F5B76E69A87A11640E377D957838C92E115C2D8E8BF3E828961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
42:4f:d3:76:e5:07:c8:4b:a4:c2:f4:74:6f:bb:31:f3:ad:63:59:e6:c5:9e:30:a5:75:b9:f8:74:83:42:53:47
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/sl-SI/bootmgr.exe.mui
- SHA256 7365ba5904917cc64af8d5f9ac39895d56c8aba3abbf21e8864374795c0c703d
- MD5 efe5f82bd71d2ca91ab2f747990abd2c
- SHA1 c0da98f34ff368f70e17b9519318dc7363358d85
- SHA512 120e2ccd9eabe8e47809cc662eb8f135a94c5e76f8b1bab7aee935769b44f8a1bb4c75f7cb8439eadcbf9ad85596eeb7013bd90071109a335d1284799b25a761
- SSDEEP 768:3EXOMsE30LvhRDAuOu/sauqjgMzOfO68HP+NM1P1n6K9zNi:0XOzI0LvnVP+qP1nXzk
- TLSH T16E83C4435BFA0104F5F76F69A87A11640E377DA5783CC52D115C2C8E8BE3E9289A1FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
43:89:4b:6d:bb:71:06:34:60:4a:e4:c1:6c:6c:6d:6c:8f:46:4c:54:de:81:e6:c1:27:e0:81:91:9c:e1:49:48
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/sr-Latn-RS/bootmgr.exe.mui
- SHA256 dabfb41d89e13e852fbf27591763a7f5021240fc96810b2aa6b0288b4b8ca23d
- MD5 8e70d559c29e3261e700363a4d041323
- SHA1 dfb5e584430fc34b426b7f0d6e17d776d8be99ac
- SHA512 956fe49730577f4f2ae4dc5efdf1629d2c66d61416d432b2fba8e49dbdb015c7c218ac51a460c012df86c8eb64743ff671788c7a787e0efa2df6d8080c5612fb
- SSDEEP 768:NB+5Xtix+NoPY6b7RRDAuOuBjwoMHRKtsavq0hYJ/G1Paadk9zu9:jPDXQHh0yIPYzu9
- TLSH T14D83D4435BFE0104F9F76E6DA97A11640E377DA57838C52D115C288E8BF3E828961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e2:f4:dd:78:65:9d:9d:71:58:d6:b3:a4:15:23:9f:19:10:cf:26:5f:1a:87:15:4d:86:86:f4:0a:16:16:04:90
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/sv-SE/bootmgr.exe.mui
- SHA256 2869187da0b35859d49411b436595d946a7ce14ecb56559f34be25b2c4e8b98b
- MD5 775fe596d9a85b1084085c4b4a10cf22
- SHA1 190344898a4ecaa5d97508486d116d03340ce7fb
- SHA512 457665adf5318bce5352219caf6d1095de03dc6f449e126acf595b8f7af1ff6b48e3e47a06740ae07387b78d43fab962dc956c3539b1120fb37a324ceeef0cde
- SSDEEP 768:H0goQn8RDFrxjtRDAuOuqnKcu55+8R1PSwadk9zus:H0goQAxVTJ55+mPVzus
- TLSH T19983C0435BEB0004F9B75B6DAC7A51600E37BD95683CD92D115C2C8E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fb:c6:b1:59:01:a0:5f:0d:0e:c5:e3:8a:96:26:72:16:8a:de:84:74:44:8c:2e:6c:93:b9:8c:41:3b:0d:38:a4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/sv-SE/memtest.exe.mui
- SHA256 9e8f8ee8e61cd76a5734a58a02c9c3214992baec9f035b4c8d5894a7571b0e6d
- MD5 5c60b1bb1ef5bacb32cb4f36949e4226
- SHA1 b12fc13739de31e2296d8356a619c24bf19e59c5
- SHA512 5821529a4a0e10472d86dc70209fe01a5ae7e5b05d684368bcce153e9ab54b8e097be96a09a1ad6009a8a6e1bd077bde743808f22bddbf005f1d3e29a1053f16
- SSDEEP 384:tQouJzuN5x0mVZHorzHlvLeWfx9rzBpRv8TgXH2VTktGDBRJnEo1x85zR9ztpIj:6ouJzE5Y9+8H2VTsG1Pn7109zTIj
- TLSH T1172325435BFA0104F6F76B39697656601E37BD91A83CC62D0298689D4EF3F419C21BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
17:d0:94:2c:29:6c:22:39:fa:6e:03:b4:2c:59:f8:52:eb:68:a5:e5:03:68:c1:08:ed:1b:62:db:ec:8e:5b:0f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:8A82-E34F-9DDA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:99:c8:8f:af:ad:b6:7d:be:8b:00:01:00:00:01:99
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/tr-TR/bootmgr.exe.mui
- SHA256 ddace99b2385b0056c8d5fcdb54645d0b62d37419244ac0be9d10b928e7d49b4
- MD5 bc4f3b201794b31049566e7d17429987
- SHA1 e281ee7376e9f4b5bea69d4d309ce214d89d2758
- SHA512 466a1753af52d9b6ba597216c46b3491682046e4e8a100d52911902ed339736c27114491b0d7f9c04c9387b0eee3118cf9a9181ff841250fc42dfd893eb7a855
- SSDEEP 768:HOvS0zP4UOGSIxsbQ2ZgmHsRDAuOu0nPP0tcTIptP4rqw4o0tjD11PXn6K9zT7:HOvSqPyUsbXZH4Dc4tLVo0BDzPXnXzT7
- TLSH T1CD73D5434BEE0004F9F75F6DA87A51600E777DA57838C92E115C2C4E8BB3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e7:10:7a:c6:44:a0:60:f9:ec:a9:33:ca:21:85:4d:0c:8f:08:3d:e0:5a:89:0a:64:e3:e7:1d:f7:2d:c6:87:82
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
68KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/tr-TR/memtest.exe.mui
- SHA256 911a0c2f1affea5f0972fcda1099272f8c6bd2e59577c2441f73ab01d882d752
- MD5 c2bbcbddd20380b0537f5e59691c8c43
- SHA1 4178ba8d641274cdb4b2b2d323f668ec8d62ea28
- SHA512 22e44ca75b7fd7e19b2beb3cc4306ce3d760ca09df56ec2decb01962ed3c8ee04747818c1f11ffebcc087e362bd742a5ff42fdb5647d3377c87f92bda41fb536
- SSDEEP 768:douJzE5Nc+8/OE6wXb/wdbLwVbCMNMda2fU1PfTiDcn6K9zro:douJwDz7BwbwxwIMNMda2fkPf+DcnXzk
- TLSH T1E02346035BFA0104FAF76F35A97616611E7B7DA1B838C52D1298689D4EF3E518C20BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e3:67:3d:fc:3f:b2:9f:2e:74:18:f8:b4:64:a7:73:c3:50:a8:ea:f2:50:ee:0b:30:3c:4c:82:a2:be:7a:ef:6c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/uk-UA/bootmgr.exe.mui
- SHA256 7a62a32899b99771ea53c8cc429991a38642474b53b72f30ab3b0bb0d701c6d1
- MD5 4f725b65b9cc13288c94f6e17357d98a
- SHA1 02fd4124283b979505325078e00bb3ff4a910ca8
- SHA512 0993651ef2689a589e1c70e1ec9405fecdc7872d81ad6713823abcbd9cb53d7e4f31dba1403e96b6151f89ca1c30bae0aa75a60a542f7b0df83422c78327ab06
- SSDEEP 768:ldP6hIJo3dKPddlL8dRDAuOuziiiI2u1G1Pxed9zuyU:R8YL8D4usPQ/zuyU
- TLSH T1478367079BFE0000E9769A2D597740A10A77BB402A7CC9AD119E3C5DD7E3E729A21FD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ed:c3:07:1c:7c:cd:88:76:4d:16:38:39:e8:62:e9:4c:79:2c:b4:56:a7:ea:ea:3f:f7:d7:ec:2e:4a:be:cb:7d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/zh-CN/bootmgr.exe.mui
- SHA256 b7abfe6ff13a1d362871668e34b12a6692b680e1e41bc0e97aa79cce2ebab612
- MD5 888f0c5d67dcba78d5882b4b153d79e3
- SHA1 c8bd1cc6ab9ceca0ff895bbc2bdae37d01175de6
- SHA512 fcd595ed4f99a7be6d4b9b5c50ba28e682b0a23838e85b66ca0e6e2dc776c5ecf34c0621a636bd57b7106ccc12edce76627e85291f4b0b28e6d807b5f4a7344b
- SSDEEP 768:8Tydu+DyEyRDAuOuNNzvJTKsW1P3n6K9zBE:0yd5OESfKLP3nXzBE
- TLSH T1975305535BFB0004E9B65A7DA87B51640E377A55283CC92D11AC2C8ECBF3E528961FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d7:35:3d:f9:ae:1a:56:1f:ed:8f:6e:5d:31:73:fa:d9:09:ad:f1:80:5a:15:e5:78:45:ab:6a:7c:6f:bd:d2:91
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
54KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/zh-CN/memtest.exe.mui
- SHA256 8c7130cc09974e030090f9563080fe7260353c2cc73c0a55b18ac34bc07166e1
- MD5 b49c448b163ef92127a8515a5c4cfa73
- SHA1 094f7e19cf220c76b8fb34c9172a5d1351c98c84
- SHA512 33a67f50c06fef8a4d2dd3a09e3f8e50070ac17391866c6990aa38909c357031260dc2ddbb2cf5dbceb3c4e8543e94218e826fe2806bfaac1ce65c97d0af58ae
- SSDEEP 384:aQouJzuN5x0mVZHorzHlvLHWHOLW7rzBpRv8TgXDTZotjJsDBRJ20dswR9z20lY:douJzE5FOi+8DitjJs1PcM9zplY
- TLSH T1DB1368436BFA0104F6F76F35A97616601E3B7DA1A838C52D1198689D8EF3F419C21BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e4:1b:81:b5:de:0f:17:4b:9c:93:30:ce:7c:bb:3d:8b:65:fb:c6:4d:ce:1c:39:56:51:45:aa:42:bf:0f:30:48
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a0:e9:bb:8c:bb:0e:a2:d1:7a:00:01:00:00:01:a0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
32KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/zh-TW/bootmgr.exe.mui
- SHA256 0148c2e940e4e1d112f4b2046e689ff011e995a07743ead582614275cc9a8e5f
- MD5 359a14ad46befcb4949939d75ea8ba67
- SHA1 5867213666de9c87901c11b7e4603563c800469a
- SHA512 86098e061da350e1d5bce2014298cc5bbd2e3848acf800ec01f1d37d4ee24abe44bdfeaf339b3ec0a728e64e208cb10aca3264fb7208fd893d019861cbc8112c
- SSDEEP 768:POWNv0Cj+RDAuOu5IJ4qi17F1Pj3adk9zuM:26je8i1XPRzuM
- TLSH T1E75306535BFB0000E9B65A6DA87B51641E377A55283CC97D10AC2C8ECBF3E528961FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3c:06:bc:7a:05:a1:ad:9f:9d:50:5f:7d:73:93:19:bc:eb:cd:95:0f:b2:c2:b2:99:fa:31:9d:f0:e3:86:65:93
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
54KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Boot/zh-TW/memtest.exe.mui
- SHA256 28a6f0d2e7932b251ae34636249d4401a171171deb0677bf4d3baeaf926364f5
- MD5 f1c6b2f4e4ca39a625e6f01e6034d2c5
- SHA1 3f15769ee5a8e34cafc2190324189a2abacde104
- SHA512 8440e604ddccdea382f07ba4c31924035e9953c5dcee0fde4cf6c304aab0930f450c50e5659644496d33acc18a7240acc4e9efe901ad8e4e1a05a0db6383715d
- SSDEEP 384:wQouJzuN5x0mVZHorzHlvLrWkLWnrzBpRv8TgXEP/8vB5ODBRJOleLR9zusRK9P:3ouJzE5+u+8vvB5O1PQed9zux
- TLSH T100137A036BFA0104F6F76F35A97656611E3BBD91A838C52D1198689D8EF3F418C20BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3a:da:10:cf:2e:8f:ca:42:70:94:f3:5f:7b:93:d1:df:dd:c5:2c:3c:64:3d:e9:eb:d5:d8:1e:bf:06:07:6d:92
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
32KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Drivers/Wifi/VEN_10EC_DEV_C822/netrtwlane.PNF
- SHA256 fcf243a227de641d6a58cf0442917618846f6675644fa1a6d70356d0bcc1c190
- MD5 7fdd3b02a5af419de8d18e771f8ee315
- SHA1 3a872e6a7f5f467a0b6e15ab5053e6bb81b373c2
- SHA512 01048d668a74768a5764df9bd3acdc5b75488f045437c07dbe6bee3712d65ebd031f44fe045c6968699205c08a3fd38a8ddeda1534450e0f1d328d20ee2d1eb8
- SSDEEP 1536:hEHy0hCvOCuvMGLYTn8L43zU7VYNhoWa2GNvSn76WC:hEH3CvOCuvMGETnq43YRYcsn7e
- TLSH T146C321C47BDD8F08F6F25674EDB462F65958FCC19E20CBAE41D4360E0532A889AD1B39
- MD5 SHA1 SHA512 SSDEEP TLSH
Drivers/Wifi/VEN_10EC_DEV_C822/netrtwlane.inf
- SHA256 bbae4b9c794ffd20453bc1da20cec5ea54203d4ebb89d4412a1d257c21845f1d
- MD5 4f701f7189906e69eb12b797c96c4007
- SHA1 5e3d39c8cb1b4c1365ab8c526c35e099e63d9a41
- SHA512 a0968a3eaad829ce9157ff37ca76b2549f6705af73edb93c802a23c7bcaebc7f9eec9b42a254b47c43c6d8e83d1d02c197ce40502d5a9f57180e9d1f00650504
- SSDEEP 768:ZUf2/X0VMop2YUNkgzgSg1ghgqg9gOgkgpg7gJwnwRwUw5w4wUg0g9gCgagrgJgD:ZUfFxJmkJ
- TLSH T1DB34C556E2D41A18B5F3AA409AF1D139CB27B896953C8F5E11DC060F0BEFA405D22FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Drivers/Wifi/VEN_10EC_DEV_C822/netvwifibus.inf
- SHA256 ca763b460e94c04be6e25c083cf237e37d2a56009c14d7c087e4e26a492a2518
- MD5 78c45ab2f5cc1193fc5b893f1f8984f0
- SHA1 ac1caf85be8ce386138e38eed2db1b5edd753307
- SHA512 a631834420c60f675fe6c1c734f13af783621d1776832dd39f5139356c1cc7d744414f45f95221aec31b103e5de4292be0a5af837d04f6e433e12359b524227d
- SSDEEP 96:K93JEhC6K+nBqGrZdZ5J9roRXIw+8TbKMKmMbqMc:KVqE6LdZ5J9MRISzKjbNc
- TLSH T1E1D14D0362E94218F6F3AE90A9B65175CA673C965E38DE4C91D8414E26E9D00DCB2FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Drivers/Wifi/VEN_10EC_DEV_C822/rtwlane.inf
- SHA256 bbae4b9c794ffd20453bc1da20cec5ea54203d4ebb89d4412a1d257c21845f1d
- MD5 4f701f7189906e69eb12b797c96c4007
- SHA1 5e3d39c8cb1b4c1365ab8c526c35e099e63d9a41
- SHA512 a0968a3eaad829ce9157ff37ca76b2549f6705af73edb93c802a23c7bcaebc7f9eec9b42a254b47c43c6d8e83d1d02c197ce40502d5a9f57180e9d1f00650504
- SSDEEP 768:ZUf2/X0VMop2YUNkgzgSg1ghgqg9gOgkgpg7gJwnwRwUw5w4wUg0g9gCgagrgJgD:ZUfFxJmkJ
- TLSH T1DB34C556E2D41A18B5F3AA409AF1D139CB27B896953C8F5E11DC060F0BEFA405D22FB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Drivers/Wifi/VEN_10EC_DEV_C822/rtwlane.sys
- IMPHASH 2b37c308bfd2ebf7eedac6a50b8a1b00
- SHA256 77fb368f7ac635c0b29744bb6ccdc5a8469d758528399beec0c59125e81df8b6
- MD5 99b9343d64daaa1de4b13f553602e1fa
- SHA1 a4928b66f4c5834f39710c4ea2b1d71cec7e8c4d
- SHA512 6a5de72e3e2fc9d8ef01b48eb806c7e8ed03f5d77083caa39865a91316bf1bc369ad6afca0e08d5de73d0b80bb27ae58ec302a434f9b2a8ebb0e7469e7fb58e5
- SSDEEP 196608:E2EtFs31/3drEI+tpdXQbn1i+oetPl/HprH:E4JdYI+tpdXQbn1i+oetJprH
- TLSH T19EB6E7119E1A62F6E093C034C3679556EEAA6CDB0B284BDB78B1346B9F363D04D7712C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
482736
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
rtwlane.pdb
ntoskrnl.exe
DbgPrintEx
__C_specific_handler
PoUnregisterPowerSettingCallback
PoRegisterPowerSettingCallback
EtwWriteTransfer
EtwSetInformation
EtwUnregister
EtwRegister
IoWMIRegistrationControl
RtlCopyUnicodeString
ObfDereferenceObject
PoStartNextPowerIrp
PoRequestPowerIrp
IoGetAttachedDeviceReference
IofCompleteRequest
IoCancelIrp
IofCallDriver
IoBuildSynchronousFsdRequest
_vsnprintf
ExAllocatePoolWithTag
KeWaitForSingleObject
KeSetEvent
KeClearEvent
KeInitializeEvent
KeFlushQueuedDpcs
KeBugCheckEx
KfRaiseIrql
KeLowerIrql
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
strncpy
DbgPrint
RtlGUIDFromString
sscanf_s
MmUnmapIoSpace
MmMapLockedPagesSpecifyCache
KeInitializeSpinLock
memchr
ZwCreateFile
ZwClose
ZwDeviceIoControlFile
ExFreePoolWithTag
KeAcquireSpinLockRaiseToDpc
ZwOpenKey
ZwQueryValueKey
KeCapturePersistentThreadState
ZwWriteFile
NtBuildNumber
RtlCaptureContext
_vsnwprintf
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation
__chkstk
strncpy_s
wcsstr
RtlInitString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
ZwEnumerateKey
strcpy_s
ExNotifyCallback
strncmp
RtlInitAnsiString
ExGetFirmwareEnvironmentVariable
IoWMIOpenBlock
IoWMIQueryAllData
RtlUnicodeStringToInteger
strcmp
KeInitializeMutex
KeReleaseMutex
KeInitializeSemaphore
KeReleaseSemaphore
KeSetPriorityThread
ExCreateCallback
PsCreateSystemThread
PsTerminateSystemThread
ObReferenceObjectByHandle
ZwSetValueKey
IoCsqInitialize
IoCsqInsertIrp
IoCsqRemoveNextIrp
RtlStringFromGUID
MmGetSystemRoutineAddress
RtlInitUnicodeString
strchr
KeReleaseSpinLock
hal
KeQueryPerformanceCounter
KeStallExecutionProcessor
ndis.sys
NdisOpenConfigurationEx
NdisInitializeEvent
NdisReadNetworkAddress
NdisMIndicateReceiveNetBufferLists
NdisMFreeNetBufferSGList
NdisAllocateMdl
NdisAllocateNetBufferAndNetBufferList
NdisAllocateMemoryWithTag
NdisMDeregisterWdiMiniportDriver
NdisMRegisterWdiMiniportDriver
NdisMDeregisterMiniportDriver
NdisMAllocateNetBufferSGList
NdisMDeregisterScatterGatherDma
NdisMRegisterScatterGatherDma
NdisMGetDeviceProperty
NdisMUnmapIoSpace
NdisMMapIoSpace
NdisMDeregisterIoPortRange
NdisMRegisterIoPortRange
NdisMSynchronizeWithInterruptEx
NdisMDeregisterInterruptEx
NdisMRegisterInterruptEx
NdisMIndicateStatusEx
NdisFreeNetBufferList
NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisWriteErrorLogEntry
NdisMSetBusData
NdisMGetBusData
NdisMFreeSharedMemory
NdisMAllocateSharedMemory
NdisMFreePort
NdisMOidRequestComplete
NdisMNetPnPEvent
NdisFreeIoWorkItem
NdisQueueIoWorkItem
NdisAllocateIoWorkItem
NdisFreeTimerObject
NdisCancelTimerObject
NdisSetTimerObject
NdisAllocateTimerObject
NdisAllocateMemoryWithTagPriority
NdisSetEvent
NdisGetVersion
NdisMSleep
NdisFreeMdl
NdisMAllocatePort
NdisWriteConfiguration
NdisFreeMemory
NdisResetEvent
NdisWaitEvent
NdisOpenFile
NdisCloseFile
NdisMapFile
NdisUnmapFile
NdisInitializeString
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisMRemoveMiniport
NdisMSendNetBufferListsComplete
NdisReadConfiguration
NdisCloseConfiguration
ext-ms-win-ntos-werkernel-l1-1-1
WerLiveKernelCreateReport
WerLiveKernelCancelReport
WerLiveKernelOpenDumpFile
WerLiveKernelCloseHandle
WerLiveKernelSubmitReport
wdfldr.sys
WdfVersionUnbind
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind
Name
.text
Size
4.6MB
Virtual Size
4.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
628KB
Virtual Size
627KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5.0MB
Virtual Size
5.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
118KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
PAGE
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
INIT
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
588KB
Virtual Size
587KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=261, version=26715,
count=5, productName=Unmarked objects (old),
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=262, version=26715,
count=3, id=209, version=65501,
count=2, id=203, version=65501,
count=7, id=257, version=26715,
count=159, id=1, productName=Unmarked objects,
count=5, id=259, version=26715,
count=7, id=260, version=26715,
count=1, id=261, productName=VS2017 v15.9.11 build 27030, version=27030,
count=650, id=260, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=255, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=258, productName=VS2017 v15.9.11 build 27030, version=27030,
EFI/Boot/bootx64.efi
- SHA256 b5632b54120f887ec3d1f1f405ad75c71a2c066ddb34e54efa374c4f7190b2c1
- MD5 12c9ac55b01b5b8f4b45d50dcdc2c64a
- SHA1 e03dbcca78e871f20c213aac1e75d3d14c961e74
- SHA512 83ad45b5ef394ecd67e5b48cf52e5789dbafa6259c23d6db83978b3c2e1f5da76cb5f5eb948254d3c28ea4ce46bc99073c3cf396089d582a64ad7681c57d3572
- SSDEEP 49152:mNiJExO4mqS9mdljqWi9e07EU/MuDDB7JMSx3:mxx/qPVn3
- TLSH T1BFC59F43B3F811F9E5BBD274C56B421BEBF278052634875F42A44A992F63F316A2D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e4:15:8a:30:92:97:ff:40:a6:9f:93:a3:14:74:f6:93:22:43:3f:12:6d:90:bd:12:03:57:af:1c:9e:7c:64:14
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 11, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:8c:38:5d:5c:2e:74:83:cc:fb:00:00:00:00:03:8c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 5, 2022 - May 4, 2023
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
0
Entry point
203200
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_EFI_APPLICATION
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
bootmgfw.pdb
Name
.text
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
TRANSIT
Size
512B
Virtual Size
29B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
273KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
msrodata
Size
512B
Virtual Size
496B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=259, version=28900,
count=49, id=260, version=30795,
count=18, id=261, version=30795,
count=1, productName=Unmarked objects (old),
count=30, id=259, version=30795,
count=671, id=264, version=30795,
count=1, id=256, version=30795,
count=1, id=255, version=30795,
count=1, id=258, version=30795,
EFI/Microsoft/Boot/BCD
- SHA256 6e0611d24c6e5029ecd6f4dc8a4f296bc378e4998bf5ee48ea24a029a4c6efed
- MD5 308f158e26c601f9a1dc78e27d9b0098
- SHA1 7b96aa0250c38c2bc93a6330b450e78fff87a50d
- SHA512 820224697b7c381cc82cb15d58cc52751ffea883953f84de403640926240076234d7814f09fef0785a4067c39820ab3d40f801fa8309e7b997aed4d04686f2e4
- SSDEEP 192:T+tEOEfQlKWZurNbBB6U6Voecfx/5EJCoCLwUHQwuc01iVYw:T+tEOE2INw1Zoh5O96Dwwn
- TLSH T165729243BA80E091D1FA453B0C66CAD93179BD039D8145077AC3B35F2DB3B96EA076B8
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/CIPolicies/Active/{5DAC656C-21AD-4A02-AB49-649917162E70}.cip
- SHA256 5fce43616598bfc838486a1852ad2b8347dc7f0f9769f1a6aa00fb8d53c936ff
- MD5 9693931465dd601d4331379992c6a558
- SHA1 a8541b890a29a9ae8c10fff3f62b721b0f5f1d26
- SHA512 e66395246073f838c375c3cc4bf8214abf3fadf8090948be01b03b5899a687e82f7c3769b74f80be381d4b42807557b053261d9165337967a9932293d3be2522
- SSDEEP 96:dy43fIMFmob2inf+DXQDbzRoRxhh3pVB1RwDD0pBDXiebs/Am2grWXGuyDXJjef:U4PdSxjB1RDBQABJCj0
- TLSH T1AA2263417FEAC725E6A15A302DB5D28A5C3A7D42DC13834F75C5BB0E1833394DA20E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/CIPolicies/Active/{82443e1e-8a39-4b4a-96a8-f40ddc00b9f3}.cip
- SHA256 d96634062a78a3d80bb8f8d662b4e5de736ee96412dccc314dc361ec853ae597
- MD5 7647a4aab5ff02dfb7d8cb1ed3c77b1c
- SHA1 cd927a32b5025b94611a4d5415dad3b1574eeede
- SHA512 322abca21b5ee560c0bef950fe8e30b73f6e7ad1b9f642c78c5245145d98484a67c723a4e1dddb19e7dd2d17d75b3de8a3cb731194c0235d157e7e617b640aaa
- SSDEEP 192:04P5taiBAuU7m3Ks7w768EFg76bV+xfzwf5cCroDBQABJROlS+:04P5wP7m3KWvFgBxLw4DBRJ0lS+
- TLSH T1B7D210142BF51718E1F24F7599B6AA995D36BC51AC05C39E21A2724E0C37FA2CC70F2B
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/CIPolicies/Active/{CDD5CB55-DB68-4D71-AA38-3DF2B6473A52}.cip
- SHA256 b1e32b68253f2096f3a24cb71fd40e0ce61e47907c36ec27f70ad1f7811b86d4
- MD5 4a66cf05d30074ac95f801e651bd0b65
- SHA1 c6004dc911912b2c0e7d5448ee336626705d5a9a
- SHA512 531c5c5b4f2c66e45b5d0f6cf6103e3a0dc29d908cfca4460d58e39f390ba486adab0669b05864e7f552b3cb9c4ad1ade0ac749027323148c40e7317b036b99a
- SSDEEP 96:i0H43fIMFmolK7TPyiwdD74eDbzz3VPsl3W9mhOOLUkwDnD7ALJD74zgvahJHwqx:h4PsT1Qem+LUkwcjaDK8aiEBA
- TLSH T1A23250523BE9C355E7A25E302DB4D28A08397E92DD13935F74D9BB1E0833794D920E3A
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/chs_boot.ttf
- SHA256 f304465805d76129c1348ed5c38dbc815ef496a2393f0f9c6b7cddb70c5dcc69
- MD5 d9d9edb2c646c073b46a60c8e22d5a45
- SHA1 29b96d9cea1ae98998fc69fff7bcf0d6b01e66e0
- SHA512 791468e00071b4776884776268ec6ccd654bf77e097bf2f7d7e1e3980675c481e88ac06ad000063fb98e22fac3dae6fde2f50a993066e4d4356b01bf1767771f
- SSDEEP 49152:QRLb7Lb7Lrrb7brb7Ewmgi4uYCgrGgCYuU1B3zCOGHrSGjwe18wGHLuRapXtW:8z1GHrHwe1auRa1w
- TLSH T19B069D9B74F3A1A2DCDC013982F7E6392935EE1142D28955CF3621AB4FB3459ADB10F8
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/cht_boot.ttf
- SHA256 fc9f75534afde87d1fa8b42a70d1e59806b26d95c75714ee4b3077abe3415401
- MD5 b6409ea51fd06aca971c734d33b5a757
- SHA1 c0ef0450de588eb36099421f83c4b23ab20e1edd
- SHA512 13b536111256504194a859ab2c5e449cc94bd47944a7424c931802a0a5cfe5cf7de96d17c3f5ccb1c57f3c58392fdc45d96f7aec0f115ef5a3d8d4468b56f1ff
- SSDEEP 49152:svLb7Lb7Lrrb7brb7Ewmgi4uYCgrGgCYu+SV7SkCrWGBydrGOIs5KknYNqW8Lv:x8WbGOIghnW8L
- TLSH T15E067B53B073A5968CE8493181F3FE2B3D79F16102D245A9CA7A11BB8BB3419BD7407B
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/jpn_boot.ttf
- SHA256 54564ab7dab15843fa8e24401ef0ffa23c0db3796574d841fc8b0095f36bbc47
- MD5 6f9041092eb1af83525b1b910522362c
- SHA1 f12d2c76368f8592e9e99453f2fbbc11e395f9f3
- SHA512 2f794d68b83f0939b59431416a3c2bb922cc58ea77f0a905382117b98a6ea3b38d8e7b274e75d8c8fd2cb6fa57c78584e64dc72dd74afdb72efb434c8928b7d0
- SSDEEP 49152:lPe6imLe3IWYidPwzDXV7wPxHaHNzE/DfD3t8ZHHzOxw3wM:pgaHNzyDfD3t8ZHHzOW3F
- TLSH T1C0958D8734B2A061DCDC083582F7E636297AEE5008D2452ADB75B69F9F730917EB41F8
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/kor_boot.ttf
- SHA256 7d398dfe1ce896097358ba9f06a77f437939f15b85d675302e6f8994570430cd
- MD5 215dd5b8c4026995ea722db6d51cb159
- SHA1 77da0225dc9e8bcd957e0cb7a424ad3c53ecf75e
- SHA512 4b14a0f2baf6a1f639f6a1fd78630cf44330de2af58f55f0f23848e66795ffaa13ae9e576523e5180cd131e73a2d512cfe8646c4ab128921304c195f9c585593
- SSDEEP 24576:ApPa2PYJqzMtenwoZ6DcTrk3LM9RlbkwoqR8QKV60MYCByDp7RbIUQ+d:cBrk3LM9Rlbk/fuGd
- TLSH T1FEB57DA3B5F29CEDDC2E4B7741FFC6A61A26F53025924062FBA1520BD3B70806D746B4
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/malgun_boot.ttf
- SHA256 c6e46316656f9757b25962bbdc80d39896c75d2cf99c39656d680660737576f9
- MD5 86d17e6fe9f1854b40b53892bffe34da
- SHA1 cf4df76e48405c8a02bed590e5ad2f46b1f6a59f
- SHA512 81b8baa2b199981bfc2be23ddd8392faa2d125b879ef761d398dae4e20152e5e78040ee3127d362348025ddd5ad8a2228a220733e45f99801fa04aa918a997c5
- SSDEEP 3072:6GTk5OhPZlutjS2G/dTppFlXKHl+S/fLvVyfBsgemclkooiE:VhP6JS2MTXOF+x3T
- TLSH T144144BEE97826B02CA377DB9C805E3D23D9182315214871F6E06FF951E0F8E4E56F698
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/malgunn_boot.ttf
- SHA256 87c7d3e1487d5bec29532bb808fdfca274627ed8ba7473c6c1656d1f32d56f63
- MD5 ee0dfa1e188eeab08f8ee001c77c8fe7
- SHA1 fd55743aa3885beb511b2d109048bb3d00da2700
- SHA512 4b19bff59bf6bbaaf29cd4418e2904c6a915f72d017ea32756410aa908045975985cc2db7fb72a6d3720f4ff1bac22455b52c20263f15d662f84f0bd43966cbb
- SSDEEP 3072:NLIfZ1wybdvrvnJA+PpDf8+5vzVsG9+5aaRJ7wdnngmR/cXELgj/F:NoZ1wkKy8+5voPwxZUXEE9
- TLSH T1E8144AFAA787AA05D73778FD8805D3E27D9182355720821F2F05FE22791A4D6E40F2DA
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/meiryo_boot.ttf
- SHA256 c459a74cff88a1918e64dca6fd51e975dda1373e9f5d4bc74324d467dc92ae68
- MD5 807159a7d46541fd974a074e78376015
- SHA1 b106ce7fb9ceeaa392d349be15776e46fedbfa42
- SHA512 d287cbfe88464b83230d0fbf4cf8fbdc52e68a63ce37cdb99972c706f099388dc553f01560e75ce59c1be02cfe09b818a8a1a1747047bd201d62a33ad3a473a9
- SSDEEP 3072:i3Tk5OhPZlutjS2GnQaowGXKE6qyP4Ua6R9C49XBiy:ilhP6JS2KQaowEZyP4UPLC43
- TLSH T106F34BEE57C26B05DA277DF9C845E3E23CA1423547584B0E6A0BFF511E0B9E0E46F298
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/meiryon_boot.ttf
- SHA256 1d87dc09c20472ecec3cdd42847434e43875a10cec1f3ee4b5ab867ba87e9314
- MD5 6c58abca0332013e0c2e8c02e20ec8bc
- SHA1 490e9d51276c64cebeca791c3a69a9e8cb767113
- SHA512 4f156c04240c1c98a119e513c083dd25159d1d201910bdcc536f10eb838a6151269095076cbcafe2fdfef4287ebeb572bf83e3deb752b027a00886f3562263cb
- SSDEEP 3072:ILIfz6X2mfbdvrvnJA+PpDf8+54FNl8kk5gqs9TrQEvNmsY8cXIFbkXE2nt/Gl:IoE2mBKy8+54FNl8Vgn9Trvv0L3IFoXi
- TLSH T159F33BBD6783AB05DB23BCFDC944D3F2BDA142355624921E2E09FE22654A5D2E00F3D9
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/msjh_boot.ttf
- SHA256 a4024a228a8a9fa21264fcd31031b96ad8d89d0ec47aec426144d41279f9e18d
- MD5 3fbd8a777650ef9eb554fd80eae2781f
- SHA1 52b63f9a3dfb974952eb0b1401195cec00f44a05
- SHA512 5e88ebda554d948f192a75912bf38ade4d668f856d0ad1bbfa8767853dd7cc8494a450c1f20fa8929f587a19b139af6f1079085377d7acb0c481352f3bc0d666
- SSDEEP 3072:FHTk5OhPZlutjS2GGNjJVPnwd16OcPDyeJ3H0RTuG9Xr:rhP6JS2BdJK7ncbvJQTDb
- TLSH T193044AEE97866706CA237CF9D445E3D23DA181214259870F6E06FF522E0EDE0E55F3A8
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/msjhn_boot.ttf
- SHA256 96ab2bac3405605327312288599c94dabe459cd5197a295e130a00401ee5a87d
- MD5 749bddad4ea8e9b5ff96961b3fdd5d70
- SHA1 30a93d26dd57a4f00aec2c3d122115d66f9574e6
- SHA512 a64a09d267636d7329afaa748b30353d258b9ff10ef6fa2676aa507e75a8748032801dccbdb9e5256f95d37ccb3ff85ef810c3a369c704acada7fb0b97408de0
- SSDEEP 3072:5LIfgf7bdvrvnJA+PpDf8+5q820RBqTbtJRKr/w3BEAoJ1hXEk2Xn:5ogNKy8+5q8C/tJRKrIREAUXEh3
- TLSH T1FF044CFDA797AB05D7237CFDC845D2E2BDA181345621921F1E05FE22790A8D2E04F3A9
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/msyh_boot.ttf
- SHA256 325ce0bccb4efe084c7f9e853f55cf90ffd3330ed83ac2d545fb42c865d63988
- MD5 9d2d5bc2f2ec4a08518c69573727e2fd
- SHA1 991848829899d03da6102d07df73b4c6ff19dc98
- SHA512 a445f978d8c83cc0fd093e86fd26dbed450d628942466739f407b652dfc8727e93d1558bc0369795bc3e76c5ef224fab6630385b32824f0a5a9e98d05e012f65
- SSDEEP 3072:2hTk5OhPZlutjS2GVohZLacGMuheTC4EBoVpe/Kx/B:2hP6JS25ZLacGMKeJbeCZ
- TLSH T11E045CEEA7893B05DA377DF9C445E3E23C51422146288B1E6A07FF852E0F8E4E51F694
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/msyhn_boot.ttf
- SHA256 dcb3b1507384af5b47466b66e3f1b8bb104ce53ab2ecfd9ecf2e06939b0c3310
- MD5 d48bf8878cceab3ea3cca42e9c974f5a
- SHA1 0fc82c971c217112ed1694fe1719f00cb15adedd
- SHA512 a0a421851280de3adff3248c53a8b96eaa8f3a095b508de9a0340270e39cd9d381c6f15075c17bd1f7fb7096532027aa612632047b476e8a1c35db7a138472f8
- SSDEEP 3072:aLIfN2bdvrvnJA+PpDf8+52iqYJIrA/j3CuqXZ07tIXEui4:aoNQKy8+52fxrA/FY07+XE+
- TLSH T1A0045DFD778A7A05D7337CFCC949D2F2BD6142251624922F5E09FE167A0A4E2E00F299
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/segmono_boot.ttf
- SHA256 588b5903dadc40ef733d2faad8ba49022b0d7b39727153b9befa016b02088cd5
- MD5 3d2af2ed7e7bb2648e2094038af6304b
- SHA1 06a69117df9a64da73925d9f4ba731fcb5fbef6f
- SHA512 29b05b6b817245f32c8a44a7b69181cfb5c6cee72e93c9159f68e2d9f6cdcc7c234e41ba3011c62673071192b6ef4aec0eefbc4e33134edb42b2305b93c097a3
- SSDEEP 768:rMqc6zKj4VbPfNmZHjHw1/9bnvRm1PvRmuU9zu5D:rMqc6zKj4VbPfQy1/RUPJd8zud
- TLSH T1E7236C6EF363A906D15B68F08559A7C22A3BFAB66911421F62CDFF3E54423C1CD0437A
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/segoe_slboot.ttf
- SHA256 779f185224db9f6977a872a166ec3fc093b9f2293cafa157c4d4a4f88dc06a3f
- MD5 8a56643bdc4e058fa685e2f57cf2f849
- SHA1 410442766bae3d965616a51828da9b4163bee189
- SHA512 2ffb4c7dca40638e0b6269a24456110c9a7d0a1258626a10f078c1ed921c8234bea79348fa1893f4a7009413faa442333b226bfd1141a1f6adc052af6e6ac68d
- SSDEEP 1536:fqS4sxWLu54v4HqVZaGDF2ifS2GdwFwXjhu/P2nXzA:fx4sGu+v4HqVZxDRS2Gpi+Xk
- TLSH T1F0A3D6ED27C23B06DB27A9FDC889D3E23C61522457685B1E6517FF902E0A5E0F46F248
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/segoen_slboot.ttf
- SHA256 8875bf19b09c4ad873bac91286ffbbd72544dbc5ad7a1061fecbd1c6590bb46a
- MD5 76ad65de5d17b5ac8a6ad17b9002cd1d
- SHA1 84667ce8a50b7434ac55bbcf79e0049d001960e0
- SHA512 ff14a6a003ec4a71f42eef1e9aa98fbb75acf2188d4d9df91e9e60303236d8b845f080f129297839997d5bab0fcf01a29820376bcf981127edf5fb2e2fb4f7a9
- SSDEEP 1536:6b2zjP0EhVts4nrTXI/moLp+cXGmIPRBqPPnzun:ySP0ES4rTXI/9LpPXEc/6
- TLSH T1F2A3A6BC3B83BB01DB63A5F9C998C2F5BD6146345725962F2C15FE226A1A0D2F40F349
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Fonts/wgl4_boot.ttf
- SHA256 a3dda256eab6124e8d0857271dcb992a335edf910af3ba47d621e69f6672c8c3
- MD5 550d817bf0e03e7f2afe378d8f262c92
- SHA1 a557ecfc48931412d47f9c4dcd5421c6cf61427a
- SHA512 365f0ae07be87642ea21eaf1603f69878374c72407efe474f45792df7157be9e5314e0aa5c954f0e8ebd4e8822836717a276575d9c8d905bcd5f54341bbd2d78
- SSDEEP 768:68KlPfaMmkeN4bKJX5zJN+D3eegCLmlor54NBHyh87kUJ3JnP/Ba/32UUU5wD2Uh:OCiuJXNuofSUBozIvS0iPPnXzSl3
- TLSH T1402327433B029199CD9A9EBC93FCCDAE2EBE9E830540D428EA55F58750A33D1A738175
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/Resources/bootres.dll
- SHA256 1c6a0a574e408fcac126a8fef5046e73abc8715cfb7c44b5cdcbe6ee2748588e
- MD5 4f0b7465603947bd3eb3f41c17537ea5
- SHA1 5ce09081a95c4e9ff05271531cd4444eb4f1e3a7
- SHA512 42362405f83c51fb87eb5252b512bddf771d5a9078c340e3c9be6f82fdbfc82473ce1434d4fefa9cefad429c4f2a3768d5384363a6a5b9ad87686b36d7faed5f
- SSDEEP 3072:wPdIkpGZuFNOB6SOtaDBpIg7cg82LGObXOp043KdYMTl92f:qtMZeOoSOqpIgzqaXOe46ddA
- TLSH T1D2F312E3EBF80747ECAB7C75D7D94A1AB43E12E901014831EAD7793F1462AC58930679
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2f:b8:d1:74:ca:8d:a9:f5:3a:a4:43:9d:31:49:47:6c:79:c2:4b:b0:67:9a:0e:aa:f5:30:f9:bf:da:9b:78:98
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:86:78:e5:19:89:f8:24:4b:cc:00:01:00:00:01:86
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
4KB
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
148KB
Virtual Size
146KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=30795,
count=1, id=258, version=30795,
EFI/Microsoft/Boot/Resources/en-US/bootres.dll.mui
- SHA256 317dfb5bf12aa6b8c8b6ae3598d2c048c319b6bf7f6a9a0cc2f8c5a5404d8ee2
- MD5 15cbf7c727691209727a6731a1e42ee0
- SHA1 79b7e231cc4700fd266f31be858538b056b5d38f
- SHA512 432d2c4a8ece0a4f1d8d3bfe36410a6a81096d75cd8746bd2607cf47af82dcf72dec712bf745f19ee6b12e31ecbb71702699df99aa49e90a4ccdd2bd6439ffec
- SSDEEP 192:nvg5WUUwWpcCroDBQABJd01b3CFaqDu0K9X01k9z3AibIvv:OWUUwWIDBRJG3CFYj9R9zLk
- TLSH T12652D68297F90102F9BA6E3053B9DA923D3D3AC71971912E5691E01C1CE7784DE20BBF
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3f:96:a8:44:fd:44:aa:76:74:3e:6e:62:80:a5:ca:fd:80:6a:58:81:3a:51:f7:ad:a4:5c:9c:86:f0:dc:5a:44
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:A240-4B82-130E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8d:7a:55:2e:78:74:99:2a:b7:00:01:00:00:01:8d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
224B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=30795,
count=1, id=258, version=30795,
EFI/Microsoft/Boot/bg-BG/bootmgfw.efi.mui
- SHA256 35b91f36a5a517b13b1c9d2c658cf6386588bae0052a5af8f7dd9f5677082685
- MD5 24bdf5341576cd9a53db1158b308aa7e
- SHA1 86132b3b5a922e422cda11d57e8cb97352d66bd3
- SHA512 cade8c9c974cfa4b17ad4cbad1f2c33a05580a492273d43b7e9cb0c8462d306de8cd0bee65aace985ba44041350449e668499fff84cfb30a1a9bce003160eca9
- SSDEEP 768:mzQNhV0DvWaeUirptQRDAuOuvRNllCv/xx1PkdAYmq19zx38e:4DOPtcEv/hPkddJzd8e
- TLSH T1228334476BFF0000F9669A2D5D7B41E11A77BB502A38896D019F3C4E87A3E725B21BD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0c:0f:cd:93:92:5e:6b:31:59:3b:7f:4a:ba:35:b4:9a:4d:2f:b9:6b:3e:51:fd:2c:8a:80:3b:ed:b3:5a:2a:d7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/bg-BG/bootmgr.efi.mui
- SHA256 e503f03699284ed4a8c3b3a1e6db36e2dc885adc48f2e2ad44d2923d1eaa6c2b
- MD5 8c5a40fb58f9114ebaaba1088c26a2fb
- SHA1 da24ceb3d9e01859fb838203b419419f510b700b
- SHA512 968586f36d337556ca25d8ec05dd0875bd5d692c7085cd0b8e9d2fdbba2c3dfe1c5fcf0c6e654692f643c4ed19c542d86da6453f29fc0e65c6042a27045cb720
- SSDEEP 768:MzQNhV0DvWaeUirptQRDAuOuvRNllCv/x61Prqcj05sN9zAw5:yDOPtcEv/QPrlQyvzAw5
- TLSH T10A8334476BFF0000FA669A2D5D7B41E11A777B502A38896D019F3C4E87A3E725B21BD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
02:1f:af:33:58:5d:91:10:26:b5:b4:f0:57:c5:f3:0c:6f:35:53:db:ec:3b:7d:e9:09:76:ca:93:84:c3:64:4a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:0842-4BE6-C29A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:42:16:66:04:5c:f3:f4:8d:00:01:00:00:01:87
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/boot.stl
- SHA256 1ae1820ade56c274ec7043545dcc7ef51c2a5b69024d3d5db8ca62faf492c153
- MD5 218dae021cb3ca31981959acd0bd5027
- SHA1 3b63269b662891b3b1243a333a5ae460c96ce33d
- SHA512 52f54bc3649da925b8b23b428d0815e9af5b668a31ba0acf35f833e48c6c546994b7ff5506f9f7ba1948162cf3b925074939e9cb63b2792bcf49422eb9f8857b
- SSDEEP 96:JwIi09eZiMHDEiDij6KVh8Sk1vOfoDD0BDEdf6PYjISm2gry7fbDEe/9Qvqo:JSgeZ0/QvOf7q6vSDf3qvqo
- TLSH T1EDA13BB2C5B8E643DA875C6042A4FDCB7E3C178304A09C266ADAF4C441577E1EB9C16F
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/bootmgfw.efi
- SHA256 b5632b54120f887ec3d1f1f405ad75c71a2c066ddb34e54efa374c4f7190b2c1
- MD5 12c9ac55b01b5b8f4b45d50dcdc2c64a
- SHA1 e03dbcca78e871f20c213aac1e75d3d14c961e74
- SHA512 83ad45b5ef394ecd67e5b48cf52e5789dbafa6259c23d6db83978b3c2e1f5da76cb5f5eb948254d3c28ea4ce46bc99073c3cf396089d582a64ad7681c57d3572
- SSDEEP 49152:mNiJExO4mqS9mdljqWi9e07EU/MuDDB7JMSx3:mxx/qPVn3
- TLSH T1BFC59F43B3F811F9E5BBD274C56B421BEBF278052634875F42A44A992F63F316A2D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e4:15:8a:30:92:97:ff:40:a6:9f:93:a3:14:74:f6:93:22:43:3f:12:6d:90:bd:12:03:57:af:1c:9e:7c:64:14
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 11, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:8c:38:5d:5c:2e:74:83:cc:fb:00:00:00:00:03:8c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 5, 2022 - May 4, 2023
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
0
Entry point
203200
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_EFI_APPLICATION
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
bootmgfw.pdb
Name
.text
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
TRANSIT
Size
512B
Virtual Size
29B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
273KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
msrodata
Size
512B
Virtual Size
496B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=259, version=28900,
count=49, id=260, version=30795,
count=18, id=261, version=30795,
count=1, productName=Unmarked objects (old),
count=30, id=259, version=30795,
count=671, id=264, version=30795,
count=1, id=256, version=30795,
count=1, id=255, version=30795,
count=1, id=258, version=30795,
EFI/Microsoft/Boot/bootmgr.efi
- SHA256 1daabfb51e8a289d6db78d98d3f7f94ab69a3799c38bb101751d01b74107788b
- MD5 37f54eae78a55082e974413aa42f2cb7
- SHA1 af0461570e046bef824db2b0e1e6c0544b4e5655
- SHA512 86f098d69ab60e1efc736507c73c76ce185d5b56e3b765cf64328bca135ea8c3ad0f43d48436456c3b173b3e996e62f133b279378322cd5c2bebe44358df976f
- SSDEEP 49152:dBKLaMSWhiFugyzoiHWsBvxNYPO9o85ea:dBK2wzXEa
- TLSH T153C59E43B3F811F8E5BBD274C56A8217EBF278152634875F42A44A991F23B71AE2D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8f:eb:fc:eb:a8:8e:10:d2:c0:b5:62:ec:8b:b0:2f:d9:da:d3:e4:93:d3:c0:57:ae:05:bf:4e:21:8e:bc:7f:7f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 11, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 5, 2022 - May 4, 2023
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
0
Entry point
203648
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_BOOT_APPLICATION
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
bootmgr.pdb
Name
.text
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
TRANSIT
Size
512B
Virtual Size
29B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
271KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
msrodata
Size
512B
Virtual Size
496B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=259, version=28900,
count=49, id=260, version=30795,
count=18, id=261, version=30795,
count=1, productName=Unmarked objects (old),
count=30, id=259, version=30795,
count=669, id=264, version=30795,
count=1, id=256, version=30795,
count=1, id=255, version=30795,
count=1, id=258, version=30795,
EFI/Microsoft/Boot/cs-CZ/bootmgfw.efi.mui
- SHA256 c59cd534e90085a33907542b6ffd0422abd1f0ccbaaeb51cbbd5ce1c0ae3673d
- MD5 a042ba508d0a32462bc33536948d1123
- SHA1 f11e9402bcb6d9c66c58795292e96297a586490c
- SHA512 a36ced3476a1be5dfc1218601005d7224d389cefceba2b9adde59b18269b42630db0224a323da7c65dda0153837303f883ee58b48ef4dfa776020864dbf4f18e
- SSDEEP 768:/NGlvaBRDAuOueycQadWwnJwyB1PaM9zph:/N3HAdWwnJwwPhzT
- TLSH T16F83C4435BFE0004F6B76F6DA87A15710E3779957938C52E115C2D8E8BE3E828861FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5d:a9:a9:e0:03:fe:7c:34:5e:2e:9b:2a:22:b1:d2:38:ca:34:05:69:e1:4e:1e:23:9d:e0:5b:f9:c5:e3:63:95
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a0:e9:bb:8c:bb:0e:a2:d1:7a:00:01:00:00:01:a0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/cs-CZ/bootmgr.efi.mui
- SHA256 7e83dab071ef5a69f36f4e5c01795733d4d8a34d830d685d6a479a2726c184d0
- MD5 1b0c3e1ba9376e402caaaa20de668a9a
- SHA1 6ada3a1e077debefb2c61fe08c4f79f8a7798094
- SHA512 53a2d654b3c68f1692fce519bbacb291f46b30db8e79be5c506c5556a2a676f36f67010debc3fe11b6a399d182d0ba2a962fbfdb97252cba6f86575673332131
- SSDEEP 768:HNGlvaBRDAuOueycQadWwnJwy41PnUJu9zJ32:HN3HAdWwnJwrPuqzJG
- TLSH T1BB83B4435BFA0004F5B76F6DA87A15710E3779957938C52E119C2D8E8BE3E828861FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
52:0d:05:2b:c9:b3:2d:43:f5:79:31:92:9f:cd:3c:40:e3:7c:4d:e6:ec:7f:39:76:fd:de:ab:13:f1:fc:3b:1c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:12BC-E3AE-74EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a1:01:85:55:99:b9:54:5d:8a:00:01:00:00:01:a1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/cs-CZ/memtest.efi.mui
- SHA256 4b6c65fcbe3c413181ee9e465646240a9694accea59bbcee73771778eac95804
- MD5 2a860f483a71219d7103649e26cca3e2
- SHA1 a9327c18e00e8ad998b49856026b1f26a160a95c
- SHA512 035e19b402d97198cc86990b7d3742617740fa72c0929b7237c7c0cf50b332d9872a09625d3f67621cba67d77eab88627c336e446e9db5f7d5d500fcd8608c4d
- SSDEEP 384:mQouJzuN5x0mVZHorzHlvLGWQRrzBpRv8TgXzgTQr1mG6r118/3fWp3fS/pfj1iS:houJzE5pR+8cM/upa/1Y1PxPZ9zBk
- TLSH T1C32345036BFA0104F6F76F75697616611E3B7DA2A938C12D1298698D4EF3F419C20BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b7:20:b7:ab:78:3c:fc:b3:16:9d:c4:53:85:df:90:8d:5f:be:0f:64:82:e2:0d:91:61:5b:2a:7b:12:16:2a:88
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/da-DK/bootmgfw.efi.mui
- SHA256 66b8d81eba08065e476caa92ab0a7b1f708ff071304c791b8981577978dc1e15
- MD5 74db3607c94ca94aa368e77adbc4f18e
- SHA1 58c4ee35d6d62b1076df815b35385f0168edc130
- SHA512 d78b82f737cf23d760de7d498631922d9a6f4d84f8a998a605bb54e990bb5045e8d46d0bebcd8074a7980f54c070ac2c2fdba77ad24085f6211ddd7b7b04b0f6
- SSDEEP 1536:3DdW8H0Fn0TKsI3poE3tlc61st2c4poh8735mLlSiUPgqz0E:3DdW8H0Fn0TKsI3poE3tlc61st2c4poC
- TLSH T17273B0535BEB0004F5B76F29AC7A51640E37BD95683CC92D116C2C8D8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f5:c2:60:5e:13:df:07:d5:1a:23:a6:51:d5:8d:6f:bd:07:51:cc:23:e6:cb:31:e6:0a:99:cb:54:44:29:d0:40
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:12BC-E3AE-74EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a1:01:85:55:99:b9:54:5d:8a:00:01:00:00:01:a1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
68KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/da-DK/bootmgr.efi.mui
- SHA256 98f5a25203f33d3082fb638e305bb30d3be2d647de17ebbbe2db9eed5d2c6356
- MD5 088c2dd168bf5004389ccd7dccd9aa72
- SHA1 7984823754fda5fc89297bcf3e367db632d2166d
- SHA512 6f5606ee462145ddd4d2df3ddb84afd4faff501d951b07b450b4446acbc3ccfcfa5a04a3dfc5d30e03ff5090f6e6e538c86511963453f9e24c51cc1877e69e64
- SSDEEP 1536:+DdW8H0Fn0TKsI3poE3tlc61st2c4poh8735mLlSi7PqSz8:+DdW8H0Fn0TKsI3poE3tlc61st2c4poM
- TLSH T11873A0535BEB0004F5B76F29A87A11640E37BD95683CD92D116C2C8D8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6d:ee:a9:f5:39:80:c9:b0:76:11:f7:70:10:41:56:34:13:e5:31:ee:e7:b1:5f:91:13:48:f7:a8:b0:82:d5:46
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a0:e9:bb:8c:bb:0e:a2:d1:7a:00:01:00:00:01:a0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
68KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/da-DK/memtest.efi.mui
- SHA256 03bf562e65cbc7ff6ee294220d19b2d625affdc8d042a021dfcbd7d71ca01df8
- MD5 bf67b7f14f170612e27e0eb81c40a088
- SHA1 89915fe4f84f6a9d7326a869877a7e148630ba96
- SHA512 94f311a0b1f7e2b68b37e73bfda671235fd03ad083e11207a33fa51e8f6dc281c1068eed300b672b1baf3461fa7702fa43b10cefb77ab91e6ff77dd06b0751bb
- SSDEEP 384:9QouJzuN5x0mVZHorzHlvL2W/MBWWrzBpRv8TgXYXhDBRJZO4/P/R9zfPhV:KouJzE59F+8uh1P7PZ9zv
- TLSH T15E2326435BFA0104F6F76F35697656601E3BBD92A83CC22D1298689D4EF3F419C21BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b5:0d:83:2c:90:1c:48:22:21:1c:ac:33:52:a7:bc:c2:3d:00:4c:80:42:32:29:70:49:27:61:55:99:6d:2d:8c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/de-DE/bootmgfw.efi.mui
- SHA256 a70b80336d8dfe3cffcff583f2ce51a41c6e8b58e41c965fba80327bdd2eb435
- MD5 d3dce04ad8e2da1f465c5fc1e9232982
- SHA1 b4001ca8cbc7bfcf76e634d10901c3884f0c9425
- SHA512 4b6d900464f9e102ed0888ced9e5e31cde81c6e2772ab7635508713f2f888600116a389f5e2b725d68ef26734ee1a8be9bde51dad40abb62b3aa7f83d666c660
- SSDEEP 1536:iuCOTA419z7MJs4VTeGbHrRJHt1P5EzV8:iuCOTA419z7gs4UGbHrRJ7hEK
- TLSH T13383D2534BEB0104F5B76F696C7A12601E33BD956C78D92D125C288E8BF3E428961FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ee:08:74:c9:dd:f0:ff:7f:6b:0e:6c:e3:51:3c:71:2a:f9:5c:4e:83:44:ab:f1:f7:9f:86:f9:d1:8b:d8:79:12
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:49BC-E37A-233C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:97:03:cf:59:9c:6b:89:78:3f:00:01:00:00:01:97
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
72KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/de-DE/bootmgr.efi.mui
- SHA256 3e574d507452d1a5c7ddd13933090f9e21eedb213c67c4667571177be116d76e
- MD5 9d535f66a153bb1ad0e871e0755899ac
- SHA1 aa7845193ed951e8e48d7d2321ec300111246290
- SHA512 8e3c3002a5dcc9af4ece41626da6a5e063c2cae029e1625bbbbec2ea676cfcc196489b4925f8a2cf4ee6f08411a3107a109ae3c8523d3c1cc2fc455c29f68912
- SSDEEP 768:UuCOTd2BFk19z7MJh24VTeWRDAuOuerddK55rRJHtbz1P0K289zB:UuCOTA419z7MJs4VTeGbHrRJHt1P7FzB
- TLSH T10F83D2534BEB0104F5B76F696C7A12601E33BD956C78C92D125C288E8BF3E428961FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
39:cc:9c:1e:1d:55:96:c3:79:43:54:a5:16:4f:ca:73:03:2c:e6:0b:2c:e8:39:86:18:b2:60:1b:11:8d:50:5a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
72KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/de-DE/memtest.efi.mui
- SHA256 32e499c4b707840afab7bf9dace4012880f7610170f5ad2a392f790ab0ce60f3
- MD5 8cceeb43b632625016284e1658729f51
- SHA1 2f2551c91fe4d09a5bd4240bd655ef9d1deb97a5
- SHA512 5f4db7162624970ed386cbd92736d4b1272b9972e859123b181a47ce4ab39a46072bc11bee89bb799aadb2fdb9ad6d1176beb7815bef7b646e3325eb1f2044db
- SSDEEP 384:0QouJzuN5x0mVZHorzHlvLgW/lGrzBpRv8TgXVK6idZM6DBRJtVTN4tgR9zaMAs:zouJzE5mG+8qO61PnTNx9zdN
- TLSH T18C2335435BFA0104F6F76F75697616601E7BBDA2A838C52D0298689D4EF3F419C20BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
13:9e:c6:03:47:ff:c1:45:1a:82:eb:ed:fe:d9:c1:ae:a6:e2:3a:14:f2:66:78:43:a2:ee:07:71:21:7b:7f:51
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:2AD4-4B92-FA01,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:86:78:e5:19:89:f8:24:4b:cc:00:01:00:00:01:86
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/el-GR/bootmgfw.efi.mui
- SHA256 50df161d9e229a966636acb7533258130877f66b8fcd7f519db3261733f820ef
- MD5 d7fd04311cdc989fb14b5b4d2d692c46
- SHA1 9846bd2973d7f308ab57fac65868fb630ba59725
- SHA512 b269951128a9d81940618b29ae000b40e86c2c20b4ec2fd520933dd906766a9ba112423d1cc9b8e81c3e2b679600fbc3ecac3a36c13c3b357cef20ec8fafd13e
- SSDEEP 768:wqk7ontORDAuOuTF0UeUrtk1PeUJu9zyjd:1k7Utu2Ur+PLqzyjd
- TLSH T1EB83D3470BFF0100EAB659B9983751650E37B9911838DD3E21AC384ECBAFD5289D2F97
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1d:88:3f:3d:78:32:40:ef:c7:6f:5c:41:90:06:59:31:dc:99:ef:6c:0a:1b:b2:89:94:ce:09:ae:95:d3:4d:2b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:12BC-E3AE-74EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a1:01:85:55:99:b9:54:5d:8a:00:01:00:00:01:a1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
73KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/el-GR/bootmgr.efi.mui
- SHA256 91a748409ef43632b11995b75726817f0ad6c2e5c2420fc8f7369fa18d161aed
- MD5 fcb8c9886fd766b60a7853fa892f4c6e
- SHA1 2680810988e38ffcea9e18739d935330ac10ef52
- SHA512 be917a0c5517b12b4fa6b1b6a4b23d93921d6be29ab59eb619f069fd7b20a69518aed8d84f78c7d865e0a3d2b2c677b220f7ce8f62645882e04b302dbbbdf762
- SSDEEP 768:Cqk7ontORDAuOuTF0UeUrtQ1PRAlQ9zpoU5:Lk7Utu2UriP1zpo6
- TLSH T14783E4470BFF0100EAB659B9983741654E37B9911838DD3E21AC384ECBAFD5289D2F97
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fe:f2:f0:39:6f:cb:c0:f7:52:bd:84:92:60:7b:0b:be:b7:46:38:9d:4b:97:f3:73:2d:70:15:f4:94:34:40:28
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
73KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/el-GR/memtest.efi.mui
- SHA256 8900dd3d3be05b033da7451a14fe696c3fd7ffdee345cedfa75b8126ab7454e1
- MD5 c329a8bd944e8e445d08aa70ad21632f
- SHA1 21281e0c4c01ac5d85dde6fd70f471875a315179
- SHA512 2d7731d36ed262ed4dbf464f634d3d0dcedef55197ff6309a04281e6b4ee947d857300669e7e767d91305671a5780776055368c6b7979c8caea06fef8d594beb
- SSDEEP 384:VQouJzuN5x0mVZHorzHlvLwWsu+rzBpRv8TgXrR1GoLUGz7C2OBA40s2OBA4AC2F:CouJzE5K++8l3Lgg1PUPZ9zM
- TLSH T1772389475BFB0104FAF76FB5597212210E3BBD926838C62D1194684D8EF7F418CA1BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a2:5a:e8:e4:0b:e2:d9:22:0b:75:bb:cc:f5:c4:20:98:0a:fa:89:bc:93:77:24:96:c3:ac:72:ba:9f:4f:3f:1f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
36KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/en-GB/bootmgfw.efi.mui
- SHA256 02b112500c680161664e0edd3f3f5e6893cf3e92c2158bc698c875dc750c406c
- MD5 b6177a8fa1aa811d1d46aa58fed85377
- SHA1 9ed091206a1fb82f6bab1f8a21eab2441206ad7e
- SHA512 0af017cb522db7917a3c617452e72f1bb285da47e0fa0e8ecd6b54843324c7e17152b4987088cb2cf7d2c6a135706565195d3f44eec8b13d4e188dde54dd5ce7
- SSDEEP 384:nAueYsrVuGdAoEttqwLSZfqR3MW1JIF1dpWX7WarzBpAv8TXAuOuOxJhSlq44Upy:2wWSvDRDAuOuOxJhfILo1Py19zx3h0
- TLSH T16673D0535BFB0004F6B76E6DA87A11640E37BD956838C92D115C2C8E8BF3E528D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8d:77:e3:6a:89:05:78:59:de:98:41:84:61:04:e2:50:e7:7e:9b:10:b2:33:15:4c:67:de:6b:a8:58:84:c9:98
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
66KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/en-GB/bootmgr.efi.mui
- SHA256 435d35a61134c7f95b80bd6cefc407fea085b3141b769e1380da7145dadfb894
- MD5 3b878be753610d801a16e249d05767b0
- SHA1 52c6160403e18c7450a03a5afe0c2518a45a9c29
- SHA512 8c4452ce2dcef1a626608f2169030b8e39e0dfe10453a533f9bf8de8c2ba9749dfb10476ca9c82e0fe0eccde93d4774689b5f644e661d7e4e9c8d123e0012eb6
- SSDEEP 384:vAueYsrVuGdAoEttqwLSZfqR3MW1JIF1dpWX7WarzBpAv8TXAuOuOxJhSlq44Up1:uwWSvDRDAuOuOxJhfILU1PiZ49zyH
- TLSH T1F573DF535BFB0004F6B76E6DA87A11640E37BD956838C92D115C2C8E8BF3E528D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6e:e7:75:1a:b7:13:cc:ac:87:38:80:cd:a3:4e:4b:54:a7:5e:f9:35:87:5f:48:56:1c:12:58:7e:fd:c7:25:3b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
66KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/en-US/bootmgfw.efi.mui
- SHA256 450417c35621faad8782e06cb59690ff92b070d4b428e63841edec3cfe2f4f3f
- MD5 bb500a3a9472f812d2a57bf948802ce8
- SHA1 85b1ace177c130f44daa1265891b4aa80514e9e5
- SHA512 d432da69906639dba70d5dc0dd2a901c6af7638973b60e5ea085c3c3630631bb6d64e9a867cb82fd7a35e4508cd6ff8db6dfba2fb99f99a3d98d8b51fc8b78d6
- SSDEEP 384:vAueYsrVuGdAoEtt7wLSZkqR3MV1JFRF1dk9WX7W2rzBpAv8TXAuOuOxJhSlq448:fwWpOQyfRDAuOuOxJhfILN1POM9zpv
- TLSH T18873D0535BFB0004F6B76E6DA87A11640E37BD956838C92D115C2C8E8BF3E528D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8a:de:9f:18:64:ce:17:53:8e:04:e5:c5:9d:fd:2e:e1:c0:de:7c:fb:16:c7:d8:72:ce:55:26:03:ca:7f:1e:e1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a0:e9:bb:8c:bb:0e:a2:d1:7a:00:01:00:00:01:a0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
66KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/en-US/bootmgr.efi.mui
- SHA256 ece0937937dce115646cddf21b6c5e1f7e3e16f2719c104b777596fd715a603a
- MD5 740bdc6c96db3fa8f5a8d5c437d13dba
- SHA1 6cc4962251d77511a6b28097ad4a2c730d4af1f6
- SHA512 90cc4ec9ac3a00e4acdbefa52e6d3118c32ad750cc0f7e9bdfa094aa20efa53b3d582d78c9d1ad4e766a650f35ac8952176696813f36cf703d76985612e4f6ea
- SSDEEP 384:EAueYsrVuGdAoEtt7wLSZkqR3MV1JFRF1dk9WX7W2rzBpAv8TXAuOuOxJhSlq44V:awWpOQyfRDAuOuOxJhfILO1PbPZ9ztF
- TLSH T16773D0535BFB0004F6B76E6DA87A11640E37BD956838C92D115C2C8E8BF3E528D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
11:91:f1:22:81:b5:5a:30:01:85:b5:0e:a4:73:d6:df:c7:2a:2a:44:b9:7a:46:3f:7f:e0:ae:93:6e:b1:4d:fc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
66KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/en-US/memtest.efi.mui
- SHA256 b904f69a6c3c7a36b3ea8792353aac04b86856cac3e7d45e34e026fbc5fc0add
- MD5 960bced3877d9a650e589659ad53578a
- SHA1 691ad9c215078187a640256f113b244febf76eb0
- SHA512 37ea4659010743d86e5ab5c4d91b9094945ca2d0501852ccf8e7c12b870bd9687a0898ba151043e8f8309ea0c7d1ac789b0c7259c5cf535f69071ef982e769fb
- SSDEEP 384:WQouJzuN5x0mVZHorzHlvLeW9LW2rzBpRv8TgXLkkvwgvKcvwFnDBRJJlYWF//dj:RouJzE5UP+8On1PcWF//dj9zroY
- TLSH T16B2325436BFA0104F6F77F3569B616601E37BDA1A838C66D1198689D4EF3F419C20BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a4:6d:5c:f2:ff:fb:63:36:b6:dc:f6:49:c5:2f:7f:60:fe:4b:ae:1b:7e:bc:c8:fe:b2:e3:ca:b2:df:6d:78:4c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/es-ES/bootmgfw.efi.mui
- SHA256 2f576963954a3388ab39a4d4749921f45dcc43657cebe392600666876647c0d8
- MD5 69076b850ad6604b5f44c6669584f85d
- SHA1 8349e9cd521d241f15f458a1773a9fb1a24c7f35
- SHA512 b249de1bc1912840b72c93cbc60152961145822d53d62904df07fe739bfa691826f61a0769354b80f0f4600c3423b2e7beedc60982205137dbd477d28671ed2d
- SSDEEP 384:mIdkxA7Jz3xFzO0RAmWy0rzBpAv8TXAuOuq4fHyXmH1YBI2LmDBRJZdS1x85zR9Y:g0RT0RDAuOuq4fHH2Lm1PZY109zk
- TLSH T1AD83B1535BFA0105F6B76F2DA97A15640E37BD91A83CC92D015C284E8BF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
37:33:3a:e3:09:ff:29:34:87:b2:9f:d1:d6:c4:09:72:d0:88:7e:97:75:50:51:c9:df:31:c5:3b:7e:6d:1d:df
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:8A82-E34F-9DDA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:99:c8:8f:af:ad:b6:7d:be:8b:00:01:00:00:01:99
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/es-ES/bootmgr.efi.mui
- SHA256 954e27bedbab41e825d499dbc684f62dc6e2f643eaafef8440460ed74fd6c75b
- MD5 d8f6ce001b533c98606b6539cc705f5f
- SHA1 ecc9e51ca280c4571509ad27ea7f18478a97cceb
- SHA512 8c6cc457ca4d1e0d7e21ad4f4c4d1c5aaecf11ec57c8d086bea8fcf280e6d07cf100e6b8daf16c313b62f85dca4fac22ca059f9b596fbef86bb341103e45d32d
- SSDEEP 384:c7dkxA7Jz3xFzO0RAmWy0rzBpAv8TXAuOuq4fHyXmH1YBI2LbDBRJo931Z0R9zb/:H0RT0RDAuOuq4fHH2Lb1PoDZ49z9x
- TLSH T1A983B1535BFA0105F6B76F2DA97A15640E37BD91A83CC92D015C284E8BF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b9:4e:32:5a:40:9d:55:4b:02:b2:9d:ab:db:20:d1:0c:ae:b8:60:bb:21:bc:1e:e9:a1:c0:6b:4d:f3:1a:2b:fe
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/es-ES/memtest.efi.mui
- SHA256 6d207a2dd01f68b3c9004dfa0950ea00132468829c14e462a70f0cdab5f7f11a
- MD5 9520e72fa5e0503eb416b37b29a9aa2c
- SHA1 80bbe706db0d81550b2a639ba13c65e742592f4e
- SHA512 69b151af6deb280e781e21fba9c74c0cae87a2d43bdbcb5e9b8b89e745aebaa9cc8d80d001bb6fd966c09fd736177cd0a04ba1ee1cde89af7f6137b0f3683a1d
- SSDEEP 384:FQouJzuN5x0mVZHorzHlvLQmWLkrzBpRv8TgXEEJjDBRJjdCFYj9R9zLkHuu:youJzE5Hk+8EQj1PjyYj/9z0
- TLSH T1932314436BFA0104F6F76F39A9B655601E3B7D91AC38C52D1298689D4EF3F418D20BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
65:f5:c6:16:20:17:2f:bc:86:41:db:b7:48:ef:99:9d:bd:05:da:69:8d:98:04:c0:20:1c:a8:7b:7e:ba:70:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:A240-4B82-130E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8d:7a:55:2e:78:74:99:2a:b7:00:01:00:00:01:8d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/es-MX/bootmgfw.efi.mui
- SHA256 ef20440a3b16d3a7cd65bbb19165382fa2c70808811495b3edd00af2b487a405
- MD5 c574257764fc7706d13dcc1dda586c2c
- SHA1 4b86fd2c070b2944ce8dc30f7db259294783bd70
- SHA512 a258b02e298c6cd3acdee40046a13ac015580f7b36bd4eab00885738af1fd69f1b813b35176eb746f0b6e30f6ef21bbfad0f95aa4daa85946e19b135171ea3a2
- SSDEEP 384:QbdkxA7Sr3xFa9fXBWyYrzBpAv8TXAuOuq4fHyXmH1YIb5LoCDBRJlTuvpNR9z7e:ufXzYRDAuOuq4fHH5L91PZy19zx3c
- TLSH T1EE83B1535BFA0104F6B76F2DA97A15640E37BD95A83CC92D015C284E8BF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
98:60:16:cb:70:73:23:58:7c:f1:b2:a1:f8:03:c3:c8:46:20:f0:dd:eb:b5:11:d0:36:71:9c:1f:70:ec:3d:c9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/es-MX/bootmgr.efi.mui
- SHA256 bf893049793b16ffe20998b81ff2937d9d6dbcfcc520cd88b1fe51040c6fd11b
- MD5 1f64203da36834ef2b844c5950640f9e
- SHA1 7b9296340f94f81608470929ac2894f6782c6c73
- SHA512 cf62d0b1b7fdb2de230f6edca7c7b80baddfd3a5c12a3e45595a4599db2e0e1fc15d755969ab976b7d9af4529aedad8cb55d9635cba5461d5ed5608dddaa99c9
- SSDEEP 384:VsdkxA7Sr3xFa9fXBWyYrzBpAv8TXAuOuq4fHyXmH1YIb5LcDBRJRx4TKAR9z5Oh:YfXzYRDAuOuq4fHH5Lc1P74289zgh
- TLSH T1DD83A1535BFA0105F6B76F2DA97A11640E37BD95A83CC92D015C284E8BF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2e:f7:0b:c2:61:b8:ca:44:ed:ca:26:ee:2a:aa:4c:f0:13:92:19:50:1d:6b:ad:eb:7e:74:d5:87:91:6f:b7:b7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/et-EE/bootmgfw.efi.mui
- SHA256 7b4acd695681d1838f8976802db32acd9b665931e957061a7c023d37fccec417
- MD5 9357c8b010bb5a1556771e7c16142035
- SHA1 15df97fb49e2128253c3b88ff0fdd67fdf53b6e1
- SHA512 670c05b74c543985c307442025ebca3e2ac4b34ea283fd2bbfa0c1903f60f5eabba8aa39bc6f0d5add12bb16e3964399a0938e36dd2c32d2718bdf9769af7ec8
- SSDEEP 768:aCSMc4R1GJRDAuOuf4TJUS041Po19zx3x:3SfbSlPAzdx
- TLSH T1D57394535BEA0004F6F76E6DA87A51640E377D966C38C92D115C2C4E8BF3E82C961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
36:ec:9a:4d:76:39:a1:e9:41:7e:0e:7b:be:f1:26:d1:4a:d3:69:6a:80:6c:f8:85:2d:d3:65:77:34:79:c4:92
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
67KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/et-EE/bootmgr.efi.mui
- SHA256 8f448fe80ac3c17518a942d474a2d943ab47601a1b3fc427bb55785d78cc306f
- MD5 8a76eb05cc6334b6050db57403570df7
- SHA1 42056871e8cafcfea09e55a0e5d5db2460ae5ad4
- SHA512 4f37b20f8bae848936b4ea14be9972ed1cca3e519025f49247cd3e047334dbd40d3f249a2cee6fb0afb9a826403e03f2a273e9addeff3dca98a1597919c613cc
- SSDEEP 768:eCSMc4R1GJRDAuOuf4TJUS061PTR289zt7:DSfbSTPFFzt7
- TLSH T15173A2535BFA0004F6F76E2DA87A51640E377D966C38C92D115C2C4E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0d:29:55:6e:79:ec:5b:4c:93:74:d0:03:f4:2c:e5:1e:15:9d:05:6b:da:c6:35:00:5d:bd:fd:fe:bb:25:e9:45
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
67KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/fi-FI/bootmgfw.efi.mui
- SHA256 7ce99fe15c8480d3f31ba51f96ff5ceb5641c7ba904d33a3a35558a0a743a197
- MD5 2a09247c746b20670259bcb70d2509b1
- SHA1 6567d954df09888caa0391eb932ec2403f4cf082
- SHA512 ed621f49c3bb3812379e41ba53562391338f9baad025b9254a00c7d156dee37357c782283b9122a0b351a948ddf235970b106ef48037bcfa9d174c179490c591
- SSDEEP 768:wZU99J1S7rBn+RDAuOuH5fn2016i1P7HuZ49z:wI9Jc7Rev11Pbz
- TLSH T1A583BF434BFF0014F6F75E69A9BA51200E337D956C7CD92D165C2C4E8BA3E828961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
34:ea:96:82:ce:3a:cd:a7:42:70:1b:84:4d:07:4f:97:a4:eb:bc:e2:da:1b:ec:a4:e4:cf:7f:5b:5a:88:25:2f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/fi-FI/bootmgr.efi.mui
- SHA256 102d635172caa22563894b90350b2272edb01089e0ee8a600832a0a9d7028f9c
- MD5 bd9b812da91dbb674247fde58b6a2444
- SHA1 6d638cb57326e5a3ab825358c53fac3fec3ecd7f
- SHA512 103fa0a07ca5641fda57064a273a08cbbb45780ba0598ffc6ded12182c17890ed7dc9fb44bf6232d73084c0338f50ac83f0cba0141262b486a07978a6a75040f
- SSDEEP 768:DZU99J1S7rBn+RDAuOuH5fn2016g1PoO19zx3/P:DI9Jc7Rev1/PLzd/P
- TLSH T18883BF434BFF0014F6B75E69ADBA51200E337D956C7CD92D165C2C4E8BA3E828961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e7:6e:8f:e9:23:66:71:4a:6a:b4:23:37:88:81:67:e4:02:0e:e7:57:43:f2:32:4d:25:4f:77:d5:35:53:a0:9f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/fi-FI/memtest.efi.mui
- SHA256 0c99f3f8a31f8909b281271f75f367616c0d403215d8cad417e08fbc214f50cb
- MD5 0e9e114961a16921dabb6cabeef5dfb8
- SHA1 be0a58d2bc4bf62d6283033d0240efd9e330bf1a
- SHA512 e7fccdae252c58edc9bcf8b8a11b97ab89f48bb165afd28ec4fe9ac8d241bf55a7ab2e2f8c9597198bcd6547acafeb655d1df4cb160e1b707fd6393c9c8f6314
- SSDEEP 384:sQouJzuN5x0mVZHorzHlvLxWsdWJrzBpRv8TgXvqmxMSMDBRJx2TKAR9z5kFYo:rouJzE5ou+8DxMSM1Px2289z2FYo
- TLSH T1212344035BFA0104F6F76F35697616611E3BBDA26C78C52D1698689D8EF3E41CC20BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8f:d9:b0:10:96:6c:c9:52:f4:e8:4d:e1:36:d2:55:8b:01:28:01:0f:73:e5:4d:89:31:be:6d:8b:c4:71:d6:82
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/fr-CA/bootmgfw.efi.mui
- SHA256 faa80295bb12d46dd8dc8f6da4ba4940fcb26a57089eb389a1a7f212894a7773
- MD5 53b3c351c06eb655cdad449800c6eca1
- SHA1 f1d24418969b373a5da1b9934fbf863f43e031f7
- SHA512 5a92af49c922b7ab2d3bf132a20b85c911298eabd4228b57fe2d067994058c820f1896b896c4ca8b2ce458300406fac97ae2efc8348d8b5b667253f2779a8cf0
- SSDEEP 1536:qxe7fGOut+oIM8gDFGCVy/tG8sv6LtnjPmzdX0:qxnOut+oIkoOJ0
- TLSH T1FF83B3535BFA0100F6B77F69A87A15640E377D966838C52D119C288E8FB3F428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5e:5b:99:57:35:93:1c:b4:7e:dd:db:86:a6:79:1b:11:1e:91:a5:5f:74:84:43:f8:fd:8a:fa:63:aa:ba:a0:64
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/fr-CA/bootmgr.efi.mui
- SHA256 daa25dca8a64fc09a0953262f76e2b50148c78be527e7c8b9d8939b8f774d8e3
- MD5 729d3b383925b631d0f5c7f966feecef
- SHA1 7c80ec6a9f8ed679b21b31413f1cd3ccbed734e2
- SHA512 3c8fce7a18672d60403c6317d85d3ff2eb4670e232ee9bbb83e17df4e04259bb4cd6418fa7958cd99d115bcdd5646d28748f16267dee6ad50c124275b32f68ff
- SSDEEP 1536:Gxe7fGOut+oIM8gDFGCVy/tG8sv6LtnEP/z/:GxnOut+oIkDHL
- TLSH T1AB83B3535BFA0105F6B77F69A87A11240E377D966838C52D119C288E8FF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f3:97:7a:1c:80:52:29:00:68:05:0c:66:b1:53:28:60:db:2d:f1:7a:b1:34:ec:a5:fb:6b:6b:f7:df:1d:ed:3c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a0:e9:bb:8c:bb:0e:a2:d1:7a:00:01:00:00:01:a0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/fr-FR/bootmgfw.efi.mui
- SHA256 6a16d88d05a6dd884a8c8eb1ed3538d5fe6b1a9aecc39ded5ee9ec28ed64e354
- MD5 984006c362ce1fd7339972399e62bf4b
- SHA1 8e55569db1ccfe3a3a5dee7d7e8cbb7dd29b061a
- SHA512 045b0ae64685c115484f6bf31531d3221831b3575301bc1a4b6b7581623a194dd63e08e79f3872b89e6a8d5bb2729f6fde02da5ddd0b4cebdf44c33fed88d7b4
- SSDEEP 1536:IcRT9uMgM8gDlGCVy/lG8s6Ltn4P9qzga:19uMgWY1
- TLSH T1A283A3535BFA0105F6B77F29A87A11640E377D966838C52D119C288E8FF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
93:47:51:18:9b:d5:08:64:b4:df:b9:ce:01:6b:ed:d8:1a:fe:59:53:0f:d3:ca:32:ad:b0:48:6e:95:f5:25:24
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:12BC-E3AE-74EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a1:01:85:55:99:b9:54:5d:8a:00:01:00:00:01:a1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
72KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/fr-FR/bootmgr.efi.mui
- SHA256 70bc9bbccd792161357cc9dd637505a152ad7714d0d7bf903f854d2da6a1e942
- MD5 f7c3b846f4cf8b08bd9283e319468561
- SHA1 68aa9a713ad0650cd686e99eab23152f411833c3
- SHA512 db0462873fd76b3e81a6aef87253fb48f4db31dea9f01c8c3859eecb6a6348ce7bb9f35ace75056d642f2a54da4808a76717440e355652769c5ba12ed1d3b597
- SSDEEP 1536:GcRT9uMgM8gDlGCVy/lG8s6LtnmPUqz5x:X9uMgcB3
- TLSH T19383A3535BFA0101F6B77F29A87A11640E377D966838C52D119C288E8FF3E428D65FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4e:53:9e:b5:6c:03:62:67:3d:6f:48:99:37:96:36:e7:3c:4c:d0:1e:2b:7f:a5:a4:2d:10:f7:c5:08:69:88:76
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:12BC-E3AE-74EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a1:01:85:55:99:b9:54:5d:8a:00:01:00:00:01:a1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
72KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/fr-FR/memtest.efi.mui
- SHA256 595562191560648fc19fc33cdea5a4e32dd2ab7e84043d4a48dfc1a5be08e241
- MD5 a00694f96fab6ba640cf030e601f64b8
- SHA1 f7cbe7d06236cad64516c76788945180eed35280
- SHA512 e176b935d4fc635b5ef0bea9766d29326f1b545452fa77f6f3210add233a3b46c0c761b4353c71d4efa98f011cd2516155123bfcc94ccdb4feda47ca34969af1
- SSDEEP 768:vouJzE5SK+8J6qfuCfEufuoT1PahlQ9zppu:vouJwAVuZPPzppu
- TLSH T14C23044367EA0104F6F76F39A9B615601E3B7D96AC38C52D1298689D4EF3F41CC21BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
82:79:23:03:44:a9:f8:20:54:0a:a9:ed:3b:5e:bd:c3:9d:2a:1d:01:01:3d:ad:f6:83:ef:dc:1f:bb:ba:27:fc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/hr-HR/bootmgfw.efi.mui
- SHA256 0aed9cef4ec3341525742561bb261787ff18d9edd25590ffc86d9aa1d2c62609
- MD5 ca47b57212299a932db33bd728043b4f
- SHA1 a0be8bf2d1f4514a272eaa5ec18a00c1f316bb35
- SHA512 0dad3330e994eb979295d61c85aec6b34615e7a6f17e0531af23dd02f6fa4a648c0f6a7185ee84d7e54b4b504cbfb7576183516282be17a45ef4295fb4c388ec
- SSDEEP 768:BFlZKgRDAuOuVo6VAIv15zVHawIK7P5ayghaf5wrz1Par19zx3K:bKsrj2u3zVHrmchKPazzdK
- TLSH T14283B5435BFE0104F9B76E6DA9BA11640E377D657838C52D105C2C8E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f4:5d:ae:93:9c:b8:f4:a7:16:6b:7f:9c:c1:e6:e8:62:84:23:e1:72:88:11:57:88:66:f3:2c:74:d5:de:96:5b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/hr-HR/bootmgr.efi.mui
- SHA256 7cdcf8101cbde7b7a72a97d93b28fb187b68d23bcccc5b78caed0de2ec86acd1
- MD5 78176e5174c1168bb7db418e155aed3b
- SHA1 0fa9ca1e8ed1fec751513dbe385eac393227ae29
- SHA512 6692a993cb9fb6ffc4a5180df0e4cb70fe991f8f33de7edd201298ad4dbd72d40454a3aebec9aec56dac8cd45085a509ffbde18d913e3c83a53559559f73d903
- SSDEEP 768:1FlZKgRDAuOuVo6VAIv15zVHawIK7P5ayghaf5wru1P2Z49z0U:/Ksrj2u3zVHrmchhPnz0U
- TLSH T1BD83C5435BFE0104F9F76E6DA87A11640E3B7D657838C52D115C2C8E8BF3E928961BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d8:46:9d:8c:93:34:cd:0c:2b:ce:7e:7a:fc:87:9a:75:e3:b3:e4:ae:66:50:05:18:e4:40:17:a6:c9:cf:c0:3f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/hu-HU/bootmgfw.efi.mui
- SHA256 cc50632219fce17f4ca9da8149d6b4c78b48e4741365f60ef7b7609febfeef03
- MD5 0cdcf2c89e13f610d62b02ecbecb1dde
- SHA1 aad38de4a19414eed13082c91047ce1d1d9c6b2f
- SHA512 ba58572ebf617d275db953fa72245c835bd245eeea078dc64f37ea8741e64426b4af33105d6686a56d0dc689a2bd3ca9f176f63e5812a2455ed18c9c90f605ef
- SSDEEP 1536:0VWhRNokfZ0sS/gSx/mjUL84UjlYTFVo9GtTugWOypPgm9VzB6bZyC+2h2Kn62l7:0ohRNokfZ0JgSx/mjUL84UjlYTFVo9GP
- TLSH T1CB83C1435BEE0004F5B75E297CBA52640E37BD55683CD92D519C288E8BF3E82C961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
20:58:92:45:5a:58:54:06:09:14:3a:5e:7c:87:b9:ec:ae:a4:c4:87:6e:97:bf:f6:28:23:ef:46:23:6e:c8:6c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
72KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/hu-HU/bootmgr.efi.mui
- SHA256 99acdaf311f52a870507ac6c5165937f34b156a39a60686cc083452a2dd7e1dd
- MD5 3a79a32bafbb655b9d338bf1f73c0e9c
- SHA1 4064f7940455e514914b2d5988679f8925aa964f
- SHA512 b52b7c0b139ec5e51b8129bfa52dc2678e3e78702ac58743a21be6921f566e6244e81fb1e5ad8c9662dc2f25ad25666b2c63390492c3cd691f206c8bd88be19c
- SSDEEP 1536:YVWhRNokfZ0sS/gSx/mjUL84UjlYTFVo9GtTugWOypPgm9VzB6bZyC+2h2Kn62ls:YohRNokfZ0JgSx/mjUL84UjlYTFVo9Gw
- TLSH T1FC83C1435BEE0004F5B75E29BCBA51640E37BD55683CD92D519C288E8BF3E82C961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
51:1d:24:27:bf:cd:f4:a1:4c:c7:9e:67:f1:f0:2c:d1:5d:f0:1a:72:2f:24:17:45:d6:47:d1:24:2b:03:ac:e2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
72KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/hu-HU/memtest.efi.mui
- SHA256 445c5504b083e12a464b62ab6a92ab67b82862de417df6cee0553e697d269c33
- MD5 694a588f0c46377e962d973490146e1e
- SHA1 954c09aab9fa6c23aa1708f33ad5b0be29a254ea
- SHA512 b5a9303ebdeecc7f08f0195b24b4cb4d9cb23dd5784b8e91394acddc69f18f8500805ebb83002c8478764c22a769579d6b3c10f21d575e14fa266b6a3fc38f74
- SSDEEP 768:ikouJzE505c+8rnToDpyDloJ9bs1PTbKc289zK7:7ouJw2NmnggP3XFzc
- TLSH T17B2323035BFA0104F6F76F7569B656611E3BBD91A93CC62D0298698D4EF3F418C20BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
28:9d:17:04:47:17:0e:af:b6:2f:0b:a6:f4:c6:11:e6:68:4d:16:5a:97:70:0e:2c:e5:26:e3:83:28:89:19:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/it-IT/bootmgfw.efi.mui
- SHA256 44639845d7cf815bb0a27d0b82db9fa06b411dd1f783b21576abf2f8eeb796db
- MD5 f3cec06d72c75681d0622731c5c0597d
- SHA1 3379e1e45514e049f94f14020ff35b92133666ea
- SHA512 6c9bffec197c10476cb0df24876921a615a0227cc567ac9a7336c8a066f1af69e649955d4eadf1992ccba5043b29c22b106e7c0c04df9b28589c65f88ed33fdb
- SSDEEP 768:NcKszAGRDAuOuyvgoPZpBAaHX1PtUM9zpJ:ivzA2WBnFPhzH
- TLSH T1EC83CF535BFE0104F5F76E29A87A15640E37BD95683CD92D019C288E8BF3E528C61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
43:82:7a:ca:85:c0:2f:62:9d:48:70:2d:a5:84:c9:98:88:ba:83:be:68:21:1d:59:3b:e4:8b:9d:8d:98:53:1b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a0:e9:bb:8c:bb:0e:a2:d1:7a:00:01:00:00:01:a0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/it-IT/bootmgr.efi.mui
- SHA256 83bc5bca4579e29c61fb4403a1fc6036cf54d4246224b1e5427e57e920439301
- MD5 e776f79de6d2a971e145fdeda4836c70
- SHA1 387f945120ca43d5bc0dde22ae7a3d3e199eec18
- SHA512 21498732125b8dc3aea19f2030ec46daf4f4ca30fd147d756bf2a6bb0b4d9c410e73da4c18063c036486d16f19cb7f6441a9456e328a2f9f9750b2ad3af0c76d
- SSDEEP 768:IcKszAGRDAuOuyvgoPZpBAaHE1PI46lQ9zpC:VvzA2WBn0PpzpC
- TLSH T1B483BF535BFE0104F5F76E2DA87A11640E37BD95683CD92D019C288E8BF3E528961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
20:38:3a:d9:5a:2f:8d:42:01:01:e2:c9:03:6e:12:4a:36:14:1c:42:86:de:a1:5d:53:c6:59:cb:29:55:3a:e9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/it-IT/memtest.efi.mui
- SHA256 cdf69d221d2355589ea8b811a748290af57e6c321811135f3d6277a48ae453c3
- MD5 09f90167589ceddee2eddda11a77a2b3
- SHA1 7701572e36ea8c90979d0572cb86416a2f044174
- SHA512 ea165fb132fa4ce39a09212612b055510b6d7be4f25297d9ae7c51153b27a572d9899b7e4bb7957a401b83c30aa241004eafff4e945307cdc579bd27222c02e7
- SSDEEP 384:27QouJzuN5x0mVZHorzHlvLeWqWrzBpRv8TgXP2451eDBRJ1leLR9zusRK99dq:fouJzE5HW+8P247e1Pred9zuhq
- TLSH T1912337436BFA0104F6F76F39697656601E3B7D91A83CC62D0298689D4EF3F418C21BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
54:f4:50:66:8a:67:23:26:83:1a:d8:03:41:f0:9d:3b:a7:10:74:f4:03:6d:f0:12:8d:f1:42:76:19:a3:e2:fa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/ja-JP/bootmgfw.efi.mui
- SHA256 0a4d0dfa1b53754604092b301b977d781bdef1e60c91ed5072aed5100e4cc800
- MD5 002ed04e16d89291ff8c33d1e5939dae
- SHA1 1d522054184c8dab401ff0ff2b2a0eff18a62dc2
- SHA512 510ea7358c358575a40b20ce056d8c2ab5ea63a4c373f2436d9c5142fd50a91a87b12f82f30c44fd8ba80e4a4feae8d72d3efc95d16e781cf9eda5c0507a845a
- SSDEEP 768:JGrtkXzU3RXRDAuOuc4EU+Xxp2+1PcM9zpjZ/f:JGrtkXKBQhPPDzNxf
- TLSH T12B6324435BEB0004E5B75A7DA87B60641E37B954687CC96D119C2C8ECBF3E428962FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
62:73:81:5d:2b:c7:d6:1e:6b:6d:c6:ee:13:6d:46:dc:a5:61:d5:5a:59:a3:96:fe:e4:c0:82:bf:bc:df:8e:68
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a0:e9:bb:8c:bb:0e:a2:d1:7a:00:01:00:00:01:a0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
59KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/ja-JP/bootmgr.efi.mui
- SHA256 fbcb8b8b2691addec94c78f5789b8e373f8ecb13a2e17b83097d000c91878f96
- MD5 6f70c13559589575227f48c6285eab70
- SHA1 e785572a8ca06e5e7bdba3e257efd442ff8987d7
- SHA512 57e40fd44ef06fdca1174c6e1597d925580f78f7031501dfee5c9e0d48a702ee683da6ccbcefbd8d21a1bda674a62168f6bc050e40f9f13ff7013570ac735adf
- SSDEEP 768:4GrtkXzU3RXRDAuOuc4EU+Xxp2W1P2Z49zRtn:4GrtkXKBQhTPnz7
- TLSH T12F6315435BEB0004E5B75A7DA87B60601E37B954687CC96D119C2C8ECBF3E828961FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
15:3d:cb:a3:b2:28:d9:f1:6d:9f:dd:ff:b6:5c:43:8c:ce:b4:a7:9b:ec:78:6d:57:cf:51:0d:da:03:95:2a:2c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
59KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/ja-JP/memtest.efi.mui
- SHA256 0f761092348a75706a1d463b718ced2c09bd32ec77c31fb4a710513b88c8e4ac
- MD5 20147059e60771cfa1022c5afecaa8a5
- SHA1 f1c29a9e5a21308192a5e4d5ebcfef6c1b4e5ff5
- SHA512 a2a688c7e5e5df3f9f744499eee33c980bb926f21486cb1a3559516c705f4311548d5d1445115c8de28d83454e5e3fe49b33a946b38d147c0f2c51403a631f74
- SSDEEP 384:XQouJzuN5x0mVZHorzHlvLHW+LWurzBpRv8TgXaoxeQf+fGlvS9DBRJEavj05sev:AouJzE5Mn+8dxeIY1PEwj05sN9zAZD
- TLSH T1EA1367435BFA0104F6F76F35997656701E3BBDA1A838C52D1298688D8EF3F418C21BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d4:2e:f0:4c:98:84:47:3b:b2:ac:6f:6b:80:57:ae:23:5a:26:c1:61:9e:f7:56:47:06:dd:2c:1c:e5:1d:6c:50
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:0842-4BE6-C29A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:42:16:66:04:5c:f3:f4:8d:00:01:00:00:01:87
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
33KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/ko-KR/bootmgfw.efi.mui
- SHA256 01d5287134fa35ddc4c7ef9bff3b0f63aa708a2a3ef592f640fd2a4647e9fe83
- MD5 eefd427d07e98249ebf8d9fb0a1e592f
- SHA1 c67d7d285f3d9cd5da3effaa60a8b835bc57759e
- SHA512 61cdc620804f5b0dffb7aff88c46d31425c05410212cd5e213c680c7f75e2849275562d59d683f67482693e999747072b866c72872ce0e0a4c948ebf7a0ec8d7
- SSDEEP 384:N4sb4RtZHpCTAZlp5jAW87WZrzBpAv8TXAuOus2Lj9j5WLiTYnbvfIIpNhPRDBRa:ypCToEYRDAuOus2LjjQIEfPR1P8Z49z6
- TLSH T12A6328435BFB0000F5765A6DA97B51600E37B955683CC92D11AC2C8ECBF3E928962FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b2:1d:73:f0:cc:e3:ef:72:e3:ea:f5:a5:b6:54:5b:23:bc:7d:a4:68:e5:51:5c:ed:e2:d0:ba:b9:7a:38:6c:ee
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
58KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/ko-KR/bootmgr.efi.mui
- SHA256 e02921f2bbab04caa61cd7a7991ea5d6b363c844580b2091abec8ae1c6544ffc
- MD5 95d248981e57ca6a7b57e028ffb5a8ea
- SHA1 de6dd446da80dce29be78edcd0f09b3bcaf53ac3
- SHA512 2a8c7f200165cb93646bcfdc1ad54d5094db3339fdd1ef0b8a76bb1a31d9ceaf528b533cf587c6545d2ba1f4fb95a5045d287e49eee47349e19469210af2b6a7
- SSDEEP 768:YpCToEYRDAuOus2LjjQIEfP61Py2/M9zVMp:2eUIIEaP/EzVW
- TLSH T1A86329534BFB0000F5765A6DA97B51600E37B955683CC92D11AC2C8ECBF3E528962FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8c:15:1e:38:09:bd:c4:cb:d4:4f:ac:6f:a0:ef:f4:a1:1d:40:f5:23:06:dc:ef:cd:eb:1b:27:aa:b5:24:a8:32
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:49BC-E37A-233C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:97:03:cf:59:9c:6b:89:78:3f:00:01:00:00:01:97
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
58KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/ko-KR/memtest.efi.mui
- SHA256 8a2921275f5987b08fc8c7dbbf1b46731bf211617bb899e8093c3b3ca9981e51
- MD5 9809b931cdd5b0d4e4cb8d49398b8e4d
- SHA1 e56e5bebd9aba37cf79265933f896d7e53350a35
- SHA512 a67376bfbd8f1331667ad146a2e7f5925d3753e62b5fc64116ecbe15fe8c942e71f33a50a17846d08a770d4473c166919d0665648fa008ffb8eca634184436c4
- SSDEEP 384:VQouJzuN5x0mVZHorzHlvLgWILWZrzBpRv8TgXN/xsxXOX2pqNDBRJevWF//dJRb:CouJzE5ro+8H/N1PwWF//dj9zHx
- TLSH T1601377035BFA0104F6F76F39A97616611E3BBD91A83CC52D1198689E5EF3F418C21BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7c:99:7f:ae:54:8a:0e:fa:63:5d:5b:96:7b:a6:ef:04:8a:84:f4:94:4a:e2:fd:88:41:2d:c4:46:c2:3e:de:4c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
33KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/lt-LT/bootmgfw.efi.mui
- SHA256 509037152be41ed123ac0a942d16e135ec2b40c157bea0cfefe35bc33676d40f
- MD5 8aaa815d168bcc8f4f43a1622ead8118
- SHA1 a07e0b23a4e71ef0220ee6aea8981efcaffd1a61
- SHA512 9ff3805589e9cf25f5282764c122b833f5ea500cd9e46d9528046bea3ccf8bf905724672d3b23c276fe555505033e62f58e8f45a9f52b073e298c8029d64882d
- SSDEEP 768:eCTWnnV87YEvO7RVI2jdTITOIpRDAuOuVr3QTkNlQV1lhKTYrIlaNC5anT1PC191:edd7njI/MRhKTY5NCUZPmzdNR
- TLSH T13073E4435BFA0004F6F35E6DA9BA55640E377955283CC92E115C2C8ECBF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
99:31:ac:9d:33:9e:7b:d9:de:36:4b:df:eb:5f:0b:15:fc:a9:c2:61:b1:a3:cf:c7:8b:bb:ec:7e:28:c9:53:b1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
68KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/lt-LT/bootmgr.efi.mui
- SHA256 d0ced5037d7fee645e2dee8eb4748fd4384ee84945ebd3c66870a607f6665e3b
- MD5 ba2c7d5f9311433f5a02477003c9cf57
- SHA1 87c491bd31f875cb3716a1a14e83d9e4db3ae442
- SHA512 3e99e457cd9e673e0d263ac52f68b107a5b94b7014ae3a6e69d13f165b0dc28f54d0fc575921933713834b32386f24cee22ff4c0a8c3f2a50d551b44ff869e85
- SSDEEP 768:CCTWnnV87YEvO7RVI2jdTITOIpRDAuOuVr3QTkNlQV1lhKTYrIlaNC5anw1PTWFr:Cdd7njI/MRhKTY5NCUoPTWZzkQ
- TLSH T18373E4435BFA0004F6F75E6DA8BA55640E377955283CC92E115C2C8ECBF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
44:1c:b3:57:2d:29:96:b8:21:75:c2:83:d9:7b:7d:04:99:ec:38:e5:bc:ca:fd:6c:e4:cb:2c:f0:97:e5:ad:52
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
68KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/lv-LV/bootmgfw.efi.mui
- SHA256 e3ea778a8e274a64e8cb02d705ff4ba99e2cc5deb226dbd864c0751869ebb603
- MD5 c18009c87c2327da75dbf64d83961c75
- SHA1 c330df98d4008f6fdd489c7e03f992ba32cf0e11
- SHA512 7a535f73f55599cf906216e1c7556cac54de8ed047282ff51779e78403886e7613d2529bc366f694a2fca297e5bd5172c13778d1efa38da05d24cd1424876ade
- SSDEEP 768:99wzT3ndUSNsITJlH9/6dMRDAuOuvrhqELNCjOUe2SjLIZ3DwDoY1Po109zRc:sUSNJ6+9INkJPo6zRc
- TLSH T19473D3935BFA0005F6F35E6DA9BA51600E3779552C3CC92E115C2C4E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
76:88:4e:2b:06:34:41:4e:af:ab:60:da:72:86:5c:15:7d:ae:67:9f:a5:28:61:77:5d:62:7e:84:d1:44:96:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:8A82-E34F-9DDA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:99:c8:8f:af:ad:b6:7d:be:8b:00:01:00:00:01:99
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
68KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/lv-LV/bootmgr.efi.mui
- SHA256 b9187bd2882f2b058d1b05b1fafcf821f01e411f4e5856a212ffa4bc94934e3f
- MD5 e7c864a2071cf8931b45a5a6a97c2840
- SHA1 9d678ebd5c8665c5af152841917b51aab8572c95
- SHA512 a0028f1d7d866eebb49ce53005c039cdb4fa9ea287d896a21413f516606cc549b32b824d464ee21438b02bbb57bf969dbbe851aef15b1d3d62211b97739c819d
- SSDEEP 768:n9wzT3ndUSNsITJlH9/6dMRDAuOuvrhqELNCjOUe2SjLIZ3DwDow1P9pWF//dj90:KUSNJ6+9INk5P9pWZz0H
- TLSH T18873D3935BFA0005F6F35E6DA9BA11601E3779552C3CC92E115C2C4E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
59:a1:d0:68:11:71:55:2f:76:cc:14:bd:81:62:2a:56:6f:61:bb:72:8e:c0:a3:18:34:cd:9d:3a:26:dc:c3:78
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:3BD4-4B80-69C3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:89:b4:bf:86:30:84:1c:4b:8f:00:01:00:00:01:89
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
68KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/memtest.efi
- SHA256 fad6d4c93f0975679380b113d91a3729337f927c7473301bd5c64ee8c6a6f0ee
- MD5 421052d2e78f6c670999af4ae0275bf5
- SHA1 71a3af6c277e0b27064eff5c92249e3cd01c5336
- SHA512 a1092a5e75af75ccf3a4259449d2b187cd122f42d82203c1504324a3cf47fec12eb7557c02cae06700a9f82dee3d28f83ac10af8c057989a9a32c7138406be96
- SSDEEP 49152:tRHSHcLqK2Mr5Gi3BYHK/e9OSS4JXvHPy1:tv5uXPo
- TLSH T1F3B59F43B3E811F9D5BBD274CA5A821BFBF178162734874F42A44A992F23B716E2D311
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e9:13:2d:0a:47:50:2a:f1:03:fd:65:5a:bd:bf:b3:62:8d:7f:2c:2f:f7:d2:74:58:4e:8d:bc:98:cf:87:d7:41
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 11, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 5, 2022 - May 4, 2023
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:60BC-E383-2635,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a6:59:45:83:39:4d:9e:eb:4b:00:01:00:00:01:a6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
0
Entry point
6748
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_BOOT_APPLICATION
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
memtest.pdb
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
TRANSIT
Size
512B
Virtual Size
29B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
219KB
Virtual Size
218KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
349KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
msrodata
Size
512B
Virtual Size
496B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=259, version=28900,
count=50, id=260, version=30795,
count=17, id=261, version=30795,
count=1, productName=Unmarked objects (old),
count=30, id=259, version=30795,
count=638, id=264, version=30795,
count=1, id=256, version=30795,
count=1, id=255, version=30795,
count=1, id=258, version=30795,
EFI/Microsoft/Boot/nb-NO/bootmgfw.efi.mui
- SHA256 9413c093c1f7796b71c4ae1421b3c165c67509a94a323250b496eddba0d158b9
- MD5 8cb16484a8a4ffab4499d807b06930c9
- SHA1 fa4c324933c7b3df2920161dda3901dd96827e33
- SHA512 852236f08092a31debf2eb27f94900a5cd54d1506ad408818a3254436581ecfc0c38b0948d7b9b98a76092c643478ccccc9a1c61a1ec13f77818d2e6b0233d74
- SSDEEP 1536:z5WcrUAu4y4rQCe5eze/85hIlMKxEBVTPYWbvLHtTErVNEymP5cGPfz:z5WcrUAu4y4rQCe5eze/85hIlMKxEBVl
- TLSH T1F773B1535BFB0004F5B75F6DA8BA11640E37BD956838C92D115C2C8E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:92:08:32:0c:20:ee:8d:90:74:de:db:5d:51:84:4d:b7:2b:0b:20:9f:1b:ed:5c:18:09:b0:4f:27:6c:75:48
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/nb-NO/bootmgr.efi.mui
- SHA256 d869ed83a48d866d8ea28c3dbd0275be8d9ddf4dbb2dab094891cfae4b710581
- MD5 9fb43a95041fa738f584b8a1107cf358
- SHA1 a072f1a83dc4d8bb31bf741fd9e716678b9dd7bd
- SHA512 ebcabc85fb151a97c69ded525d0af0c6c818bdf46881f463dc8c6eb1b8df824d83d89b9c2c6442de7065ba98cfa5c811a38d852463ed9306fffb9957b165fdf5
- SSDEEP 1536:d5WcrUAu4y4rQCe5eze/85hIlMKxEBVTPYWbvLHtTErVNEymP5caPszdf:d5WcrUAu4y4rQCe5eze/85hIlMKxEBVa
- TLSH T1CD73B1535BFB0004F5B75F6DA8BA11640E37BD956838C92D115C2C8E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
02:83:6a:49:41:e5:c3:8b:a8:ce:ca:d8:4f:e6:2c:5d:bf:36:0e:c4:99:7a:a4:83:9a:2a:f7:46:35:d3:bb:95
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/nb-NO/memtest.efi.mui
- SHA256 38d79977347ad4bea563bab24af464565529495d8f9f2ed432b057e7753ed0f6
- MD5 9366413a4f5f15a548fe425d695e5011
- SHA1 723a18e097a9dd2a4b5827af29cdeb3f4160a1e7
- SHA512 490e4abdd84972e0348df11e96f601b8322b9d1d389f52ffbadeac37d9f8bf03c18c625e9d0c02a4273a6cb249b409cbf0d57160bf4421290f4cdc5450869a5c
- SSDEEP 384:qAFVMQouJzuN5x0mVZHorzHlvL6WgYrzBpRv8TgXyd98Ls/DBRJk6q/P/R9zfEev:NouJzE5VY+8yd9Ws1Pk5PZ9zp
- TLSH T15D2324436BFA0104F6F76F39697616601E37BDA1A838C66D0198689D4EF3F419C21BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
13:f7:b4:87:f0:27:bc:0c:12:52:28:a8:20:63:54:24:37:b7:f5:e2:12:75:66:0e:a9:61:54:ba:79:90:d0:d1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/nl-NL/bootmgfw.efi.mui
- SHA256 52179f863e9f4bcc8857dee79363481590954e631d8690ea691303adcbf0c296
- MD5 00255897c30842569a7f844229a8567c
- SHA1 fd97ba66575bd7213ca0371ccce87717e550ece4
- SHA512 96b09a7d87ba9b3b5c9d6285cf15306b21777385491bcd79ed45326f5187364a9747299633d2a0cb97227ac637f802a7e8da1cb94db4b572355c2662c30d3f97
- SSDEEP 1536:/oZ8yofsFtLw9+fYQG12PMJUOrndHPtRzT:/oZ8yofsFtLw9+fYQG12PMJUOrxP
- TLSH T19583A2435BFA0004F5B76F69AC7A51600E37BD956C38D92D116C2C9E8BF3E428961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c0:8d:1b:08:c7:f8:31:cc:83:13:18:27:a2:22:57:9d:5a:d1:1d:d3:cb:c7:f1:37:9e:1c:66:f5:37:f3:a6:13
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a0:e9:bb:8c:bb:0e:a2:d1:7a:00:01:00:00:01:a0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/nl-NL/bootmgr.efi.mui
- SHA256 1a23ee4fa27ae641c8c158b5bc767c44ad41e242fea40af3ec5d88ea735d24cf
- MD5 8eed44ee8281538d3fa9cb0d20cf5250
- SHA1 f1f6b25d290c260160d2b2a67961615341a8c425
- SHA512 82f80a332d19c056e75cd6c56179e2b36de123d84de0d7d34f6e98a2dfe1304f1f76ca4cf5fe9323e31173b59532855bf3eeb61ab927a14635653bed067ae154
- SSDEEP 1536:AoZ8yofsFtLw9+fYQG12PMJUOrndLPhzG:AoZ8yofsFtLw9+fYQG12PMJUOr95S
- TLSH T1CC83B3435BFA0004F5B76F69AC7A51600E37BD956C38D92D116C2C9E8BF3E428961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b2:ad:9c:dc:d1:05:44:51:fb:5e:7b:3a:6f:68:f3:66:b6:fe:f4:49:c6:76:d0:8b:13:a3:79:71:ba:5c:7c:8e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a0:e9:bb:8c:bb:0e:a2:d1:7a:00:01:00:00:01:a0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/nl-NL/memtest.efi.mui
- SHA256 9c4c73d9d4e91fea452215e336f1ba8b1c57e8ba876230bf7650ee7cf542b880
- MD5 9217331ad471a8c54f8fddab9dee40ab
- SHA1 6af8f66304bacca8260d633512a76d9d2f7320fc
- SHA512 51690c91b94a2ae298c59959902fbf15a523ae900b9b525f425c190e57aaa1a524a2e4d8a0ed77e65fb7f36dc7f712b24f0477b08002b0d6afaaca97ccc7cf60
- SSDEEP 768:BouJzE5fJ+8FdysB2tshgjgferbs1Pvy289z4P/2:BouJwhc0dJgjgferbMP6Fz4PO
- TLSH T1482335035BFA0104F6F76F35697656601E3BBDA1A838C62D1298689D4EF3F419C21BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ec:3a:e7:b9:0f:e3:5a:2d:e3:e3:fa:12:9a:30:83:59:77:9c:8d:46:a4:be:8c:a2:da:d7:9e:d7:01:3a:08:03
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/pl-PL/bootmgfw.efi.mui
- SHA256 15795b6729545dffe3a8753199b2a3b89cd80e40d52e5153f4338e210a640790
- MD5 934393b4e1acf7664005e9eea4208d9e
- SHA1 9f65d3ab4617e2b6798e4086206006bb1d12aed0
- SHA512 ecb34ade3f5659e537c9d3ce5739daa3b634af73ba215449dbcea28b2b58a1f6a91c2f891bc306a467d4a7dbea60203e7aa347664d939556c1b5a6f9ca77c8a8
- SSDEEP 768:vCqbL8VbYO4QZ73aAetRDAuOuNoOuv1y758B1PTM9zpQ:vpkeTaY56PIzW
- TLSH T1B58316435BFA0004FAB75F6DA87B21644E377D516838C56E115C2C8E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
20:9a:fc:24:9e:83:17:cc:ef:06:25:b9:d4:b0:91:7e:38:59:3f:2b:80:02:ec:14:b8:e9:9b:d9:f3:90:f5:11
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a0:e9:bb:8c:bb:0e:a2:d1:7a:00:01:00:00:01:a0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
71KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/pl-PL/bootmgr.efi.mui
- SHA256 d73faf9e9ccfe2f90d4220f9da0054ec30dc8102d20c2036f08d8c6ccdfadc1e
- MD5 430b2302029349ebf047ec2bcbde391f
- SHA1 d44922e99e052e0791ee2866aa47d22ab9068a4f
- SHA512 cd220014aea7fc559b10ddab696c27e9c5c9f4ce3a347dcd6afba3cace656a8a7321978e8aa620f12b6324cab7642854cdab6fb8aac9af5a62e535db7fcfa2ed
- SSDEEP 768:uCqbL8VbYO4QZ73aAetRDAuOuNoOuv1y758y1PdDZ49zk:upkeTaY5LPczk
- TLSH T13F8315435BFA0004FAB75F6DA87B21644E377D516838C56E115C2C8E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
44:5c:55:2f:94:1e:a4:79:43:39:e2:02:75:f8:52:2e:42:fc:64:b2:0b:f1:a9:b4:1f:b4:63:c5:34:cc:18:c4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
71KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/pl-PL/memtest.efi.mui
- SHA256 3a601223b6fc94a869bb5d5da0fdf9b0d358d01c262ccf7b09a963c3891a16ff
- MD5 67d85aa4cd0248fa00a9dbb2f384ef56
- SHA1 5ea05911b868669cf942a176f88149245b549209
- SHA512 2e9f6a9325cd2b9a781a268acf479829128620f7c4fc15e4016ac338deb75346c071d38008ee5f873411dbf9df80231bc5db8f5f52d01151f38103ce01420d83
- SSDEEP 384:kQouJzuN5x0mVZHorzHlvL/WkdrzBpRv8TgX3UzLsysmscXzqzczmLDBRJvONcMO:jouJzE5Cd+83ULgL1Pmn6K9z07
- TLSH T1552337036BFA0104F6F76F75997616604E3BBDA1A938C26D1294698D4EF3F41CC21BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8f:c1:6a:06:0b:82:88:b1:40:65:65:b4:15:af:9a:5f:f0:de:b8:b0:89:58:51:5e:3c:f0:cf:f0:78:48:dc:11
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/pt-BR/bootmgfw.efi.mui
- SHA256 a0f4ae116c40da9c22970513f23d2b70c30afb6b6dcc4c0f290ebb976c1ccf55
- MD5 97cd39b7908d1102a88a562ff067ea44
- SHA1 9cd013822ede5eb798ce37d59ea7ea9094fd3c22
- SHA512 0b7910f7cb874987b33b471fe021b35ab3abd532f6e535679009ec3ae3589d2b5fbcb52ea513fb69589779cf3f783252e11002d95d29eaab6778b57d6c858b11
- SSDEEP 768:4e8dF63JfvkCC9p+R4RDAuOuc1DM6p4dw1PhZ49z6:T8dF63JfsCC9p+R0epXPUz6
- TLSH T10583A0535BFE1104FAB76E2DA97A11640E377D91683CC92D015C289E8BF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
4d:9d:92:11:2d:88:a3:9c:3c:34:4d:bf:50:16:4e:34:7a:0a:27:d4:34:2d:ca:76:a0:94:7e:f7:42:7e:00:6b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/pt-BR/bootmgr.efi.mui
- SHA256 e1f311a4cabf3583fe3f727140a6a28e29ce1844aeb2b930f3713baab2e171a8
- MD5 0542be46d66b5529a11596892bce303e
- SHA1 bcc702eed5587fde7e1d28f3876fa86082d52702
- SHA512 5bdb6560dca408817dc87196ecb112ddcd87cd3f9a48f22dfeb0081453acd6e6008a928516f8cc625479927a3a4c94492513f3d201430a6ea5db856914b92bd3
- SSDEEP 768:Ge8dF63JfvkCC9p+R4RDAuOuc1DM6p441PffXYj/9zqik:J8dF63JfsCC9p+R0ep1PfAZzNk
- TLSH T19C839F535BFE0104FAB76E2DA97A15640E377D91683CC92D015C289E8BF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
48:c1:dc:24:d1:ee:00:dc:44:af:a8:94:3d:61:03:3d:1a:14:ab:36:d1:bd:32:31:24:c4:48:e5:73:8d:46:16
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:A240-4B82-130E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8d:7a:55:2e:78:74:99:2a:b7:00:01:00:00:01:8d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/pt-BR/memtest.efi.mui
- SHA256 1e8121340ac9a7da4b1a7a23167c48dff69c56c33592a0cd06d17637c7fd8e40
- MD5 900e47819a0d2f9e5e2064ba1d05c13a
- SHA1 deb008713649ebe5c39b2c162c546f07b65b3d1c
- SHA512 06e1710f13e7e318e932541a7e4cadaaf2892c4c1690f6285ae43886c88846cf0c241138c366441d7d2df588832e612b167479ecffbc4206bbe987516e0c930b
- SSDEEP 384:UQouJzuN5x0mVZHorzHlvLvWmorzBpRv8TgXF4LneyBdDBRJd/P/R9zfqQzd:TouJzE5wo+8FkeyBd1PFPZ9ziQx
- TLSH T11323F3435BFA0104F6F76F3969B656601E3BBDA1AC38C62D1194689D4EF3F418C21BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fa:14:7f:d9:bd:6a:0e:4e:2f:02:9b:37:ce:24:9c:24:1d:d2:53:62:38:24:6e:d2:d8:36:8e:b7:24:8d:47:6d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/pt-PT/bootmgfw.efi.mui
- SHA256 4b370c0667290d264191ddbd153db05adc3d9be198d371ed25ae4a8c50d2c21c
- MD5 520bddc75586fac5da0a14c9aa254346
- SHA1 92fae6bc01dafd1e20230f78a09ab9c9b06ced14
- SHA512 89eaad884e0efa19dfa6998958b3858444510509dd44e178f0b1dff890bbf54330bfea25e767dbbfa39a97ebde083be53ea823795fa908366c81fbf644c61d29
- SSDEEP 768:++BeenwGHC8w39Hf/40RDAuOu71ZSeDcF1PIZ49zSs:XBeenwGHhw39Hf/4QRDePlzSs
- TLSH T16C83A1435BFE0104FAB76E6DA97A15640E377991683CC92D015C289E8FF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f3:87:07:c1:d1:90:64:97:ba:68:b0:ee:27:af:d5:a5:6e:a0:6b:7a:36:ae:4a:99:30:35:76:55:68:1c:55:3d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/pt-PT/bootmgr.efi.mui
- SHA256 8d76336ac52a2645d6b038bfcb2cf3a1388fe24462f5eb9767b95896c11bf34d
- MD5 3969e1df7c16bfe8b0913e8a749d8bd2
- SHA1 49a14af2bf0957184c3b24e590f1dd72df44ea44
- SHA512 8ec82c302355ca367409adcac9e0c8cb02b9d46a6e6e33317603e16655c9baaacb093f06665252580f1fc11a15f328b96a49c47d5a525fdadd0948dc6b2b1125
- SSDEEP 768:v+BeenwGHC8w39Hf/40RDAuOu71ZSeDcW1PVpZ49zs:mBeenwGHhw39Hf/4QRDDPV8zs
- TLSH T14883A2435BFE0104FAB76E6DA97A55640E377991683CC92D015C288E8FF3E428D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ad:10:4a:40:69:a3:c7:94:d0:9a:62:12:00:0a:f8:c6:4e:93:fa:d6:04:fb:92:14:d8:6b:4d:bf:39:51:ba:35
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/pt-PT/memtest.efi.mui
- SHA256 b7f37f74721f3910030ad7bd5c8a88726e4c7b576e00d5cded45f78daf6767b6
- MD5 af211f872e7c3ecf0407ccee678c7d3b
- SHA1 de11e017f2111e2fcda5cbab90f44dcd5fdead0d
- SHA512 0ce641f5d8d0e59380f3e5e8fe6c87dbf725ecb4253a469cd7ff99f5f99f05d47fccd6496eb43f4a399abc0cb5e1c6fea4f4179ca4acb0278ec18367be799844
- SSDEEP 384:OQouJzuN5x0mVZHorzHlvL0WmErzBpRv8TgXpuJE2F2Rcov+DBRJjv/P/R9zf9XP:JouJzE5xE+8Aa2F2Rcov+1Pj3PZ9z9P
- TLSH T1A62304435BFA0104F6F76F3969B656601E3BBD91AC38C52D0294689D4EF3F419C21BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7f:3e:eb:a9:08:99:f5:4d:6e:1a:bc:f2:be:42:46:8d:37:77:5d:61:98:2d:5c:ca:d2:ba:a7:8c:bf:66:3d:25
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/qps-ploc/memtest.efi.mui
- SHA256 736e248514d23955a41553fca071dbc5fac2eb1eac02c53288100c745efa8c9c
- MD5 a12d65256b3e8c914451f1f55bfb6faf
- SHA1 ea7bee7eccb8438ed072914ea048dea2504a5db0
- SHA512 3716feb8cd97cf37e74a03e5017f82101344764402bd52a47ab94027d3dd1153cd1b1739ea4b436fd354088af5da07563ddd3665e36c882a81e66365bcab211e
- SSDEEP 768:lq1uOm1Oi45Sx5x+8sED9qkvDbRppf1PpNlQ9zpR:s1uTO0x50dkvNdPqzpR
- TLSH T1944330475BDA0040EC36263DD47A81253A337AA5153CC42E349AE94D8BF3A175F2EFA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
b7:2d:3f:b5:ce:fc:70:b4:b1:87:95:92:4b:af:38:52:81:19:e7:d2:b0:30:5d:ed:be:c1:93:10:cb:b0:74:5a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/ro-RO/bootmgfw.efi.mui
- SHA256 88d3695fe0dc3f4342dfe75295b9c10030de1b0d8b33d7f63261a0ac1e06fdd0
- MD5 a65c49685a2db05d9d5e9fe876ab2ce3
- SHA1 485a2bc587ac1cc9c845d2a9ad9f48328e7e9c9d
- SHA512 ad505aea4fc7576de140bcab2e97dea4aeb268fa27aff64c8322e1497691dabc7a17898cdc033326f66f94ecd2e240d39ff8853282cf10376b507cecf566e69a
- SSDEEP 768:je3EFLvo2kiYQq9pRDAuOu3LMUjJwC1PY19zx3xn:jecTq9/5J/PQzdxn
- TLSH T11773B4535BFA0104F6B76B2DA87A15640E377D56683CC92D115C2C8E8BF3E828D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
16:e7:72:d0:84:c5:c7:cc:31:a8:58:6c:4e:73:11:16:db:9d:a8:36:00:48:3c:3d:e4:2f:0c:58:80:e1:09:f4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/ro-RO/bootmgr.efi.mui
- SHA256 36b85d0b69ebee3e44289f51cf2bf90d21903bd19f38bc79f86c789dd3279ccd
- MD5 8e7130f80b2036d1a083bd553884da42
- SHA1 e4b32c38ceca491577d7ec3e390d1109e5ad8292
- SHA512 d0877c098f46795639f1be26145044d63ffa404bc3ac811a6aadee328540292658c2ae52f20563c1da68f275c6d399631724724c43b97623ac755b90aabf7dea
- SSDEEP 768:Ue3EFLvo2kiYQq9pRDAuOu3LMUjJwa1PJ19zx3G3AA:UecTq9/5JLP9zd+H
- TLSH T1C173B3535BFA0104F6B76B2DA87A15640E377D56683CC92D115C2C8E8BF3E828D61FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
25:b1:5d:c2:1d:93:b8:17:c9:99:f9:65:4d:8a:04:f2:98:46:dd:21:88:53:b7:b4:d4:ff:2c:8c:3f:eb:8c:32
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/ru-RU/bootmgfw.efi.mui
- SHA256 b06f80fdcbe640ffa7e9ccb3574c76dc820cff80678e5c3d0218c762a1d57d1d
- MD5 fd3b9d68695e17776ae100edad56cae4
- SHA1 03f5c82c067bc9705c36c87f58cd615bf4db699f
- SHA512 d66b94aca565ef9433a0fdfc9f815e4189366f05fade29b23e56f8e7985c330a0de0f3c8626333a6d901ebe928600222ba68e2ac45a1468ca9ea491d5b818d27
- SSDEEP 768:BV3UPUEDAi1J65cL1GXRDAuOuexU8zLJR41PrB9UJu9zH/xt:ed1GByJ+PrqqzHj
- TLSH T1D98366475BFF0000E9669A2D697B04E10A77BB502A3CC96D119E3C4DC7A3E726A21FD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
85:f0:e2:ff:76:63:12:f3:61:b1:45:59:e5:41:f8:74:22:17:1c:bb:39:9e:e9:82:d4:6c:cd:66:38:ce:19:1f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:12BC-E3AE-74EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a1:01:85:55:99:b9:54:5d:8a:00:01:00:00:01:a1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/ru-RU/bootmgr.efi.mui
- SHA256 c0e922ac4ba798efbf99f18264ce45a542312d472b7da96e662f77647b6b4426
- MD5 7f58dec4700693dc21b8b3be6fe5c444
- SHA1 9edaf683d3c3c9fdcdabfd61d0e4e7ff77e17d5f
- SHA512 2253970ccca56e2f9ca0faf6ee43bc91f664db1726456efccec9a70243dcd45e1af3ec3b4f86da74b13a451cfd6771a6502859f9f6c9dcf84d13768c5c964448
- SSDEEP 768:yV3UPUEDAi1J65cL1GXRDAuOuexU8zLJRJ1PPulQ9zpiJ:fd1GByJxPZzpw
- TLSH T17A8355475BFF0000E9669A2D597B01E10A77BB502A3CC96D119E3C4EC7A3E726A21FD7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0a:93:48:f7:59:e2:10:06:ea:a2:20:9d:12:9e:ab:cd:d2:ff:08:04:8b:03:e3:66:3e:28:16:5a:55:57:2f:d2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/ru-RU/memtest.efi.mui
- SHA256 4a376b9400691c7da0c1b6ffdbd101276b40051caa1dc198471bffa9d591d2ee
- MD5 88552709f07a1979b0a4e95fe380addf
- SHA1 5cf26c2633d2e4af96465ed02b2516f926b0cd7e
- SHA512 96f117b8772adb48c9c2e92e0cb531905c49df5b7719c6195fe56aff26bd08e58bdce011ac5b524c361944510280779434ba81ee43cb835a833b1f45126a714d
- SSDEEP 384:zzQouJzuN5x0mVZHorzHlvL7WSGHrzBpRv8TgXbAJ3Usq+zRg+z9q+JxGDBRJgvq:zkouJzE5LH+8wG1Pgvj05sN9zAV
- TLSH T11723A9076BFA0104F6F76B35597216A01E3BBEA1693CC16D0199688D4EF3F619D30BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
14:79:85:8f:d9:98:7d:f7:6d:29:1b:e0:a7:ce:19:16:42:13:4b:e7:e7:00:d6:2a:08:bb:0c:1a:7a:f0:c5:f3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:0842-4BE6-C29A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:87:42:16:66:04:5c:f3:f4:8d:00:01:00:00:01:87
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/sk-SK/bootmgfw.efi.mui
- SHA256 ef30364c28be1b009fc8c75d83fe88df826cb2d6ac77f12fc82f0c7b5cd0ecbd
- MD5 7a75f7d69aa90f054b10a994897251ca
- SHA1 1aeeade718008f5814d929a1f964413a13fa1d88
- SHA512 c5f77f7ae13cd3fa6f865c0fe7002c4c13c9f1dfd77c8640300309194c4e22e0b6b2fc170aec488d5110627e8a58c47013f5d70ab0930bd5d413ec5da41110e2
- SSDEEP 768:GX/86lht9RDAuOu1w03S7oBr1PsM9zptV:GX/flhtjq7ozPzz9
- TLSH T16283C3535BFE0004F5B76E69A8BA11740E377D957838C52E115C2D4E8BF3E828961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
36:15:91:af:4c:6e:4f:b1:79:03:81:1a:80:f9:1f:c0:bb:7c:0c:2a:cc:66:79:cf:a1:76:c2:29:19:f5:1f:2e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:3E7A-E359-A25D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a0:e9:bb:8c:bb:0e:a2:d1:7a:00:01:00:00:01:a0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/sk-SK/bootmgr.efi.mui
- SHA256 6e7e2447f383523a96af7116ce0d4db8c450b34495523cf7d4071a469576551c
- MD5 b302b966357cfb2fc85ae89072894b36
- SHA1 9ce09ae28eb42005c43454143a1aaf95863739d9
- SHA512 2bcc6c694140cab832f05aa834638943b066e7acbaf7a5673401d5224e3d07741dcde40ff8974ead9a6c020da3eefe4d2d0f715cb4a970dfb5a44ee949383187
- SSDEEP 384:GuUz9c3pc4CC86U/uGYo86xfghfrTykQ4l8btD+JGEburAbmbZlIptajNIvWr7W8:AX/86lht9RDAuOu1w03S7oBk1POPZ9zj
- TLSH T14083C3535BFE0004F5B76E69A8BA11740E377D957838C52E115C2D8E8BF3E828961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6e:b4:e6:ca:9a:6d:b5:d9:8f:93:e5:9f:24:d8:97:2b:1f:40:7d:d2:77:ec:28:5a:2b:d6:3a:59:d6:92:7f:de
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8f:f3:51:a8:eb:5a:72:dd:cc:00:01:00:00:01:8f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/sl-SI/bootmgfw.efi.mui
- SHA256 c62a3120b4bec1cbc66fde8624634680a529c96de570be11c3e55bede1ba2e68
- MD5 038c38a0253ef16e8ace63bad37a7bad
- SHA1 d81ee3b50ce5031c14d6a6f1b0a48b7c1046f8f4
- SHA512 9d47097eac28e086e9dfd2ee9b772a12815f512b2e94242badfb1534e180b56e3c35d18651e5c71ed55c8cf14f73f7a8f0d83324254fc67b89538e22a285ded9
- SSDEEP 768:J3XOMsE30LvhRDAuOu/sauqjgMzOfO68HP+Ni1Pmqhy/M9zVhd:RXOzI0LvnVP+kPmqhqEzVL
- TLSH T1E873B3435BFA0104F5F76F69A87A11640E377DA5783CC52D115C2C8E8BE3E9289A1FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3b:97:7a:de:ca:b5:b5:48:54:35:d3:b9:1d:3b:a2:ce:1f:ec:d5:48:0d:39:6c:22:17:ec:cb:38:23:8e:21:3e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:49BC-E37A-233C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:97:03:cf:59:9c:6b:89:78:3f:00:01:00:00:01:97
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/sl-SI/bootmgr.efi.mui
- SHA256 ab3d32282b4db233b60e35c1c9a1c724015ab1682eec4044b4eb888a282e6f0b
- MD5 7d869f0da66b07cfaed43dc6b21cc621
- SHA1 8019c5c76e8b6f9070e8e6c8b2bffc53d9b2f7cf
- SHA512 b489c854c3003150e4c634b05af3f38b75cef5f689b0071c77501766f31a2bcbc423c9e8381fe6deb68f19a10765c0b59b9dcfcee1d6a3d7d4a07b42fa1d18a2
- SSDEEP 768:wwXOMsE30LvhRDAuOu/sauqjgMzOfO68HP+Nw1PudTm289z2AX:xXOzI0LvnVP+WPMSFzR
- TLSH T16683B4435BFA0104F5F76F6DA87A11640E377D657838C52D119C2C8E8BE3E9289A1FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
87:e4:89:d2:ae:be:17:09:f0:f3:1a:75:b0:3d:3e:57:e8:98:82:ce:18:7d:7a:06:41:10:35:c4:e8:3d:f9:cb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/sr-Latn-RS/bootmgfw.efi.mui
- SHA256 6d5c83b4b6116b6d83b75c5ff8dc0ea4f342d10a5034605e39ec27e66d77a9f0
- MD5 1f45e7106f408d69f56af1a653d09372
- SHA1 31a9e342ac0f1962d7facaf968c3902401ed807d
- SHA512 ce0e9108ab3bd0497672a4e33bbef4609eed0a506c831b20a3422ee7f989ac3643d410bf2e6c2b704c55eb8bec0156af998b3501660cf7b52d8947f1da337956
- SSDEEP 768:2B+5Xtix+NoPY6b7RRDAuOuBjwoMHRKtsavq0hYJ/d1P5109zYD:WPDXQHh0yNP56zYD
- TLSH T12983D3435BFE0104F9F76E6DA87A11640E377DA57838C52D115C288E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
cf:be:4b:b1:8b:ec:56:a1:e1:f3:97:dd:54:72:88:01:c7:93:5e:f8:6e:43:be:2c:76:8a:36:82:eb:d5:b3:50
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:8A82-E34F-9DDA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:99:c8:8f:af:ad:b6:7d:be:8b:00:01:00:00:01:99
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/sr-Latn-RS/bootmgr.efi.mui
- SHA256 135dae48ee710d2754326394dd416f9d9720cf19eed381efa1d00b6386c14b5c
- MD5 a756b9f5c154ec243089266d4f281adc
- SHA1 5c99dc6d66f2cd99d8e2ff63ac7e79701e1cad6f
- SHA512 2bc2a7c1bd6a0308652bc4c88b7999ec7e64659db20af6f0cbd1c7781bf57e4cecaa7eb8ee4137780fd1ccf8bdf1a9d0a7591b4d0bb3b38e0becad7da16c4479
- SSDEEP 768:NB+5Xtix+NoPY6b7RRDAuOuBjwoMHRKtsavq0hYJ/Q1PpG289z1:jPDXQHh0yiPoFz1
- TLSH T11F83D4435BFE0104F9F76E6DA97A11640E377DA17838C52D115C288E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f5:b4:04:ee:59:c0:f5:1f:3c:6e:0f:12:55:bc:aa:74:67:62:75:d9:2e:64:a4:68:6a:40:47:5b:7f:1a:10:22
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/sv-SE/bootmgfw.efi.mui
- SHA256 6bf569fb8771c767b024b32332e7ff55d6311f8b681d6f78679464a27891c65a
- MD5 10c596fa20c4d190dc4743093aec7ff7
- SHA1 d46421385617b56e908afb76ba616977f3894a9f
- SHA512 de62afc3b2247218cf6c490f98602b32e3d6ffd015c935ca29e5be8e50096c5046afdf9fdcb26389a79c58c8a5e934a6d55c2ee2bac625f2e5ed4ba7f2792cd1
- SSDEEP 768:F0goQn8RDFrxjtRDAuOuqnKcu55+8d1PBUJu9zDF9:F0goQAxVTJ55+6P0qzDF9
- TLSH T1C973C0434BEB0004F9B75B69AC7A55600E37BD95683CD92D115C2C8E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a1:06:84:d3:35:50:d5:09:1c:e5:cc:88:b2:9b:70:84:a5:ec:e9:c9:89:5f:09:3e:01:3d:d1:a0:b4:fb:ea:e2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:12BC-E3AE-74EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a1:01:85:55:99:b9:54:5d:8a:00:01:00:00:01:a1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/sv-SE/bootmgr.efi.mui
- SHA256 114b0268727292c15105e345be8b929b9427073bda788f86496197ddd53286b8
- MD5 62d55121d20513b3581236664514dddf
- SHA1 3e269a2d5eb7c4ad8afc04812640886064383c0d
- SHA512 214caed7fb65df671a593948e6fb0d65d5b550d03e28bac6b29460f37a4d9a74a1d4bc256362bca95ff9702f42c1441c30dd081791cd8ec4bb8cdd81c682018d
- SSDEEP 768:60goQn8RDFrxjtRDAuOuqnKcu55+8Y1PJaYj/9zqK:60goQAxVTJ55+JPvZzqK
- TLSH T1D083C1435BEB0004F9B75F69AC7A51600E37BD95683CD92D115C2C8E8BF3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6b:93:32:d9:15:93:ee:e6:72:d4:80:9b:64:7f:8d:1f:83:db:e5:15:5c:0b:9e:eb:4c:8d:9f:c0:03:c4:4e:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:A240-4B82-130E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8d:7a:55:2e:78:74:99:2a:b7:00:01:00:00:01:8d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
69KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/sv-SE/memtest.efi.mui
- SHA256 5ae103c9608c006be8f100117d3906db37111ada8160979674a3d1c9382efc37
- MD5 484ee03734e6c7b8e8a3ca041ff83ace
- SHA1 6851c9256fa27ecf109335cd7c2819f4cd36504d
- SHA512 c4b09c296b6fb9f5df8c81fdd2bd0ef1bf393a30f3281b700496a575b977a4f63721cd515a9219270b96695064148ab15c4b76d771bd9d9a3e0938dd3c0261af
- SSDEEP 384:gQouJzuN5x0mVZHorzHlvLeWfx9rzBpRv8TgXH2VTktsDBRJcaleLR9zusRK9z:nouJzE5Y9+8H2VTss1Pcked9zuN
- TLSH T1152336435BFA0104F6F76F79697656601E37BDA1A838C62D0298689D4EF3F418C21BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d5:e2:7c:20:a6:ac:20:3f:66:98:8f:83:30:f9:c7:72:e8:7a:21:d7:86:26:05:16:74:a1:64:21:ae:28:96:86
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/tr-TR/bootmgfw.efi.mui
- SHA256 3c2ccace13a46f70846d1792a50b222a886eacf1e2828216f1c5cff67a524cef
- MD5 beddae00a5fa16ac48f7833fbb1bfc1e
- SHA1 c9a51ed36a317f184ba200b0134127157652851c
- SHA512 ab3a8ebf6f719bee2a9426c19aff7e1d4ea051c8d9597bf65c35c3c4268c833914a3cfbe4c60f403ecc49d7dbed2cf8665eb68340a231e6fb1488a2e17f3db8c
- SSDEEP 768:zOvS0zP4UOGSIxsbQ2ZgmHsRDAuOu0nPP0tcTIptP4rqw4o0tjDU1PHlZ49z2:zOvSqPyUsbXZH4Dc4tLVo0BDkPHIz2
- TLSH T1A273C4434BEE0004F9F75F6DA87A51600E777DA57838C92E115C2C5E8BB3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d9:44:1e:93:64:57:2f:d2:78:5e:36:bc:58:c3:7b:2f:58:8d:f7:79:9c:7a:c1:d1:0d:b4:f6:48:9f:7c:37:52
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
68KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/tr-TR/bootmgr.efi.mui
- SHA256 7cda4b0388fc286c7b5c371034210e1d3470324506966a374aadef7be38b1034
- MD5 de8f7d8446a8fdd52802f4f030768484
- SHA1 0274858aef3a97271a353bd2f90f5618d0098684
- SHA512 94b9ea41915a393e23f3b830e70e165d9e39aaf4ff174c80c7d9d4ec03765f7ac75a4280e58926a51deff0aaa6ad032ca588b61fb8d9d8782dbb0d307e42fab4
- SSDEEP 768:lOvS0zP4UOGSIxsbQ2ZgmHsRDAuOu0nPP0tcTIptP4rqw4o0tjDJ1PdP19zx3dB:lOvSqPyUsbXZH4Dc4tLVo0BDvPhzddB
- TLSH T18473D5434BEE0004FAF75F6DA87A51600E777DA57838C52E115C2C5E8BB3E928961FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
16:bc:b7:dc:bf:14:20:ff:b9:63:98:b9:5a:d3:e3:f5:06:b4:ba:ea:84:70:0c:d3:64:a4:28:d8:0c:a3:4d:08
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
68KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/tr-TR/memtest.efi.mui
- SHA256 8bd0be593b86986d3445fe1942403926a91134467f04376a8bef74166f6deda5
- MD5 ca3310c22f73e2ac2791248a9c7484a3
- SHA1 b974afb3e740911e36ce682987ed3fb7247e1d5a
- SHA512 e2397dc8c7e19e770051cd2b4bf21b87e9bb013529e3aa2065defc59661af19e23abcaf55836a13dd17267e8f4de4307c81f9c6f296f62540564e9d06f9128a7
- SSDEEP 768:vouJzE5Nc+8/OE6wXb/wdbLwVbCMNMda2f+1P8MufiC9zYz:vouJwDz7BwbwxwIMNMda2fmP8VzYz
- TLSH T1452345035BFA0104FAF76F35A97612611E7B7DA1B838C52D1298689D4EF3E518C24BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0a:11:38:d7:9d:6a:c4:19:f9:89:43:4c:c3:78:bd:40:7c:70:9a:e7:3f:44:3a:55:69:c9:fa:6b:27:5c:6d:72
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:897A-E356-1701,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ab:09:09:ef:ab:63:d4:e8:a9:00:01:00:00:01:ab
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
35KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/uk-UA/bootmgfw.efi.mui
- SHA256 ac756df49ededba27876fc69650cc8b40dacb7c57d65baf5aaa33b5597815750
- MD5 c5b6f674ce2a808176dda2198d473de4
- SHA1 8b96e91a89792d0280ede509aef303af5f62a7d5
- SHA512 c06b127b9bb7d2ad070a654a5ec3792433ba98b75bf5731a75233ada8e5f3e7fc07311085ade9991843d645ec357f8c93a6f68e6d2f71d656b427d54b6dd9f4a
- SSDEEP 768:LdP6hIJo3dKPddlL8dRDAuOuziiiI2u1b1PLfZ49zUAA:r8YL8D4u/PL2zUAA
- TLSH T1788367079BFF0000E9769A2D597740A10A77BA402A7CC9AD119E3C5DD7E3E729A21FD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e5:cc:49:87:cc:ca:a9:a5:5d:89:d1:ef:f2:fb:d7:a4:f6:ae:74:35:21:1a:30:31:bb:66:a3:ea:4c:b8:b2:96
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/uk-UA/bootmgr.efi.mui
- SHA256 8bcb389feecc18731927d8993ddb2e7781ce68f346ab3b2feb4e20c208b5d436
- MD5 699a16707da92e37e5ac32dc6d050a1a
- SHA1 6176d136cb41b7c4369e4d1fe613c9d3228f4619
- SHA512 463b47cbbb68556caf8ec301db2e039dbd845eac8a4fc34e4436bce2b9282902f72fe900ee68fdb40b6296e2142c26bc8cdf4906674b6d0ee8af825a19a11943
- SSDEEP 768:PdP6hIJo3dKPddlL8dRDAuOuziiiI2u1i1Pkoa289zgJ:v8YL8D4uAPvaFzgJ
- TLSH T1978368079BFF0000E9769A2D597740A10A77BA402A7CC9AD119E3C5DD7E3E729A21FD3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
f6:20:1f:3a:56:74:f5:b0:f4:69:92:b4:f0:8e:3a:03:04:cc:4a:a2:93:e3:1c:0d:da:c4:f3:0d:52:69:48:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:8D41-4BF7-B3B7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:88:2e:cd:c6:81:41:e1:bc:2a:00:01:00:00:01:88
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
70KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/winsipolicy.p7b
- SHA256 36e91cf80b87a895fc2005815de3333a5dd3c4cb3dd7c56c93ebdf15c46eec04
- MD5 9b54f89e296217dc8b1f6107394c4f0b
- SHA1 039e50ae9a420fd10de143fa0db81c12dee12e60
- SHA512 1271e3ebd0630f52c9a6fa73dc3ee9473e21f57bca7ab97e1336c9755c83b64f641220e94620f3e114f15b61b518431bc236df06d56cf0bad02bb9d487a86033
- SSDEEP 96:4J9MuF4TSFflq82nmyc2DXQDbzRoRxhh3pVB1RwDD0pBDXiebs/Am2grWXGuyDXa:WbzMmycyxjB1RDBQABJJ
- TLSH T11D228382BFE9C715D6614A306DBAD38A5A39BE81CC52424F32D5FB0D1C733949A14E2A
- MD5 SHA1 SHA512 SSDEEP TLSH
EFI/Microsoft/Boot/zh-CN/bootmgfw.efi.mui
- SHA256 e6b5ab975a8e7d22e2b72a8eadc31137bf910186bb1f95f00bb0e034b09aeccd
- MD5 14cd3be9a0c4d2c74b79a16f18469f00
- SHA1 14a0dd6f8de715647e44cea33802956031298465
- SHA512 8a9643d97c888bc0307d6461440fbd06a65a8b1d6c53f581e8e9338dbe1b9ff902e3d07cc1d41ab4aacd6eb64804412b653628bca987b285b0b9cd7bd9e703bb
- SSDEEP 768:oTydu+DyEyRDAuOuNNzvJTKsE1PT/19zx3u:oyd5OESfK1Pjzdu
- TLSH T1685305434BEB0004E9B65A7DA87B51640E337A55683CC96D11AC3C8ECBF3E528961FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a9:9b:5b:72:85:82:9e:ba:f8:d5:8c:29:cb:59:26:e8:af:3a:24:d4:02:82:46:15:7e:d2:13:fd:3e:81:f3:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:2264-E33E-780C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:98:76:b3:8c:c5:d0:05:a1:01:00:01:00:00:01:98
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
54KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/zh-CN/bootmgr.efi.mui
- SHA256 343019c15579e207c0132306b8d991f9afac2b50434e3e53604b31107ed22682
- MD5 04bd1791c0a167b67db8d0f204cf32e4
- SHA1 5766a410711aaa2ebce0e165209bc3fa335a3eff
- SHA512 4b8a81ea80f52698ea90fc82ee76eef521a5aa3fb62d02c94878f6b2b7e5b16612296ab605f25e19a796328e4320c5dc0d73300a76ae1a98f48d5cfadfa4ba8e
- SSDEEP 768:iTydu+DyEyRDAuOuNNzvJTKsN1PMblQ9zpWJ:Kyd5OESfKCP3zp0
- TLSH T18F5306534BEB0004E9B75A7DA87B51640E337A55683CC92D11AC2C8ECBF3E528961FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d3:69:5f:23:33:2c:a5:64:b1:d1:4c:a5:d7:43:7e:52:df:55:b9:b1:86:8b:13:bf:8e:e0:29:c7:52:71:57:96
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:FC41-4BD4-D220,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8e:59:db:46:00:a8:10:94:cc:00:01:00:00:01:8e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
54KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/zh-CN/memtest.efi.mui
- SHA256 93de47a7c1fe126ca4325c443d869d05f7c2e6a69456b1c437ae2ff813a41a75
- MD5 ec18f8ab86875be906e2c9efca4ef399
- SHA1 76fc13d6fe246f5ef6b96aa676c2b9ea6241def9
- SHA512 33f1429a1ff152abe9947bdf3fac0841d872fa98e481728ae37c869b30d66a638d428c88dd1c47daf7e907661d2ccdb1e51933f7ab80f8010249cca5e0384652
- SSDEEP 384:2QouJzuN5x0mVZHorzHlvLHWHOLW7rzBpRv8TgXDTZotjJDyDBRJ5+NcM6a1R9zp:xouJzE5FOi+8DitjJm1P8n6K9zjt
- TLSH T18D1368435BFA0104F6F76F35A97656611E3B7DA1A838C62D0198689D8EF3F419C20BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fb:b1:5f:cd:f0:0b:cc:58:9a:5c:20:ad:20:6e:f9:ae:e1:c0:4e:04:c1:b0:f2:02:93:07:a3:14:c9:50:60:72
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3b:65:5f:ae:fa:db:75:e9:d6:00:00:00:00:03:3b
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F7A6-E251-150A,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a5:00:de:08:c4:40:07:71:4e:00:01:00:00:01:a5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
32KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/zh-TW/bootmgfw.efi.mui
- SHA256 a2d71b38208dbf67a77cced0cc2beb4e8c3f6df07271a4ee0560fe32777bbe3c
- MD5 4b8ecff227b3c4ed98ee2f66ca25f68c
- SHA1 dd825c196b1afc69e71b9f1a66bff8f7185c2942
- SHA512 5a5f58bf49a8109c6a1cec91564947ea2d2a63838f6e2a5a3d8bfbd8e1d8b278a7f68724e77cb7aa55116ed42192a45602e1a9761b81cb6ab26170e9d0d2bcae
- SSDEEP 384:wnOlkNvoOYCRW67WnrzBpAv8TXAuOu5IJ4exiAuPadA177DBRJJq1Z0R9zb2:wOWNv0Cj+RDAuOu5IJ4qi1771PiZ49z6
- TLSH T1215307535BFB0004E9B65A6DA87B51640E377954283CC97D11AC2C8ECBF3E528962FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
04:5f:83:49:1d:d1:21:35:8e:a2:2d:5c:32:24:18:ce:bb:67:9a:4b:20:84:9f:ee:86:cf:6e:2e:5b:77:09:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
54KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/zh-TW/bootmgr.efi.mui
- SHA256 245f7fb50e7c6c89b409df2dda37ef858d50a5b0c190ffe7608ab6ce531b1fe8
- MD5 86deee01b4607b33ee1f952fd35510b5
- SHA1 7ac0fa2ddeae8241f3805b28dd6ce9fa1573b4f6
- SHA512 ae880f9f9cf8bef11e36a90969c020165d3a4dbb8c94b0bccef39502d4d368c55add608af78657a49d89949bef96a0c1cc4d3e753e654e015d6e8e435d004eca
- SSDEEP 768:qOWNv0Cj+RDAuOu5IJ4qi17Q1PeZ49zeCC:N6je8i1kPvzK
- TLSH T1745306535BFB0004E9B65A6DA87B50640E377955283CC97D11AC2C8ECBF3E528962FE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
92:56:b0:0d:86:b4:67:d2:9e:f5:32:59:7a:5a:f2:c0:2b:3b:00:1e:a8:b7:38:1d:c9:38:ad:95:5b:bb:33:cb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:DD8C-E337-2FAE,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9c:0f:a6:4d:61:d2:9e:4b:28:00:01:00:00:01:9c
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
54KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
EFI/Microsoft/Boot/zh-TW/memtest.efi.mui
- SHA256 3e47a4380712281c2d610fd3b617571314065d087794e369ff98f9800cd0c17a
- MD5 857542f6e14661326e8fee90110933c9
- SHA1 97d3f99b2287becc6c8dcabf164a06ae527c9cc9
- SHA512 08c6b89d528c2ba54e9c40a3b3d74e808a846ad5596e881287f026ed5b686edeaa0a63a0345a5ec0b575022956c9131c1a4735102a540ccfe63a3c76848eeae7
- SSDEEP 384:oQouJzuN5x0mVZHorzHlvLrWkLWnrzBpRv8TgXEP/8vB5mYDBRJwFgeCFYj9R9z6:vouJzE5+u+8vvB5mY1PR9Yj/9z6
- TLSH T1711368036BFA0104F6F76F35A97656601E3BBD91A838C52D1198689D8EF3F418C21BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
aa:b4:4f:d0:7f:f9:60:5f:54:37:db:44:6d:7e:61:ab:2d:ac:08:e3:4f:af:10:2a:2a:33:9f:23:fe:8b:1d:ce
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 6, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 2, 2021 - Sep 1, 2022
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:A240-4B82-130E,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:8d:7a:55:2e:78:74:99:2a:b7:00:01:00:00:01:8d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 28, 2021 - Jan 26, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
5
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rsrc
Size
32KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
PEVersion
- SHA256 abca6c3d36b80c93e537e6ab9db49db4234e8b71244936dd537e743f0b656ed9
- MD5 695b1e4ea14a79745f55805749ce85e4
- SHA1 3359de52c8ae993fe0f8fe9c5168a0065bd3c7a4
- SHA512 2f336c4055595dd8c1208b1761912ff4ef1e98bb7cbd7965a1afb42256be78781bb663e5f87a9bd110b237acdf24130c70dd37828a00f56726e7230617fae05f
- MD5 SHA1 SHA512
RMBuilder.xml
- SHA256 482e104c7e3f866236613245eb3a24b08762961e23680432ee4d03ee18136cc1
- MD5 536653d18d19fedb466099ef6e6cebbb
- SHA1 07f171d3e8db6c6679ff9e12fe39fcf6d8994d09
- SHA512 d3d7404679ad875d998f60298a62b5301a74f5b57e5c6694066d6105374a973de71c646a4138e9c67b6a096d8153258fb42d50a254bd5db656b32b1afb9cb9a0
- TLSH T10271459966E440C4E13529D3D71A2A0CFE40D2FB693D6A09FC9E83977FB54D49103063
- MD5 SHA1 SHA512 TLSH
Version
- SHA256 000b84e9f3c94e3c705754d5a32f4105c0af84a7ee0359109bc9c7c79888d42a
- MD5 ef515f7a2c38a161ed4ba6dfee2afb05
- SHA1 3cb4911534893e2d19f05d6d19535cd628278bb6
- SHA512 85527a2758035c181ad92cd75fe1b4b8cfb51149f1433f8bf6d51583ececbb3ad82bbc9eacee25e4e7feee104f65abc12f56d3f36e59c7d30978ba3f6ddbfd59
- MD5 SHA1 SHA512
bootmgfw.efi
- SHA256 b5632b54120f887ec3d1f1f405ad75c71a2c066ddb34e54efa374c4f7190b2c1
- MD5 12c9ac55b01b5b8f4b45d50dcdc2c64a
- SHA1 e03dbcca78e871f20c213aac1e75d3d14c961e74
- SHA512 83ad45b5ef394ecd67e5b48cf52e5789dbafa6259c23d6db83978b3c2e1f5da76cb5f5eb948254d3c28ea4ce46bc99073c3cf396089d582a64ad7681c57d3572
- SSDEEP 49152:mNiJExO4mqS9mdljqWi9e07EU/MuDDB7JMSx3:mxx/qPVn3
- TLSH T1BFC59F43B3F811F9E5BBD274C56B421BEBF278052634875F42A44A992F63F316A2D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e4:15:8a:30:92:97:ff:40:a6:9f:93:a3:14:74:f6:93:22:43:3f:12:6d:90:bd:12:03:57:af:1c:9e:7c:64:14
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 11, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:8c:38:5d:5c:2e:74:83:cc:fb:00:00:00:00:03:8c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 5, 2022 - May 4, 2023
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D6BD-E3E7-1685,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:9e:fd:c2:2d:d8:31:5a:b6:b1:00:01:00:00:01:9e
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
0
Entry point
203200
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_EFI_APPLICATION
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
bootmgfw.pdb
Name
.text
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
TRANSIT
Size
512B
Virtual Size
29B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
273KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
msrodata
Size
512B
Virtual Size
496B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=259, version=28900,
count=49, id=260, version=30795,
count=18, id=261, version=30795,
count=1, productName=Unmarked objects (old),
count=30, id=259, version=30795,
count=671, id=264, version=30795,
count=1, id=256, version=30795,
count=1, id=255, version=30795,
count=1, id=258, version=30795,
bootmgr
- SHA256 60e59fb52b794f515457827c562c6cb39835f5d2d5ee0a6584d796b56bdebaff
- MD5 6db7e48b2d1d43fddbc9cc566f4fda60
- SHA1 b7d606d99e4c598008ce39e9ac58e1e413bacc55
- SHA512 8005cf6e443c8c066e573c35929da808de8bb69df54e8d0aafdaf3349042b3e8187eb6219c7c01a70593c921789b5faac14b82c5c7733c9e6a4d908df1ad68e1
- SSDEEP 6144:7NicxMkvCYBFct3xgo8T2rWRVmliTiwJF+/XavVTT0Cx3sNiWNsXqoIcB+QxfHVJ:7Ip7BqxccFR0kujNsNHfx9Q5U4AlvV3
- TLSH T11D9423D99B99F62EC61692F1261F183749B2B11337E489D7BBCB6851CC4621C3B1C327
- MD5 SHA1 SHA512 SSDEEP TLSH
bootmgr.efi
- SHA256 1daabfb51e8a289d6db78d98d3f7f94ab69a3799c38bb101751d01b74107788b
- MD5 37f54eae78a55082e974413aa42f2cb7
- SHA1 af0461570e046bef824db2b0e1e6c0544b4e5655
- SHA512 86f098d69ab60e1efc736507c73c76ce185d5b56e3b765cf64328bca135ea8c3ad0f43d48436456c3b173b3e996e62f133b279378322cd5c2bebe44358df976f
- SSDEEP 49152:dBKLaMSWhiFugyzoiHWsBvxNYPO9o85ea:dBK2wzXEa
- TLSH T153C59E43B3F811F8E5BBD274C56A8217EBF278152634875F42A44A991F23B71AE2D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8f:eb:fc:eb:a8:8e:10:d2:c0:b5:62:ec:8b:b0:2f:d9:da:d3:e4:93:d3:c0:57:ae:05:bf:4e:21:8e:bc:7f:7f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 11, 2022
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 5, 2022 - May 4, 2023
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:AE2C-E32B-1AFC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:96:49:5b:62:e1:2f:dd:f7:4f:00:01:00:00:01:96
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 2, 2021 - Feb 28, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
0
Entry point
203648
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_BOOT_APPLICATION
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
bootmgr.pdb
Name
.text
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
TRANSIT
Size
512B
Virtual Size
29B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
271KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
msrodata
Size
512B
Virtual Size
496B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=259, version=28900,
count=49, id=260, version=30795,
count=18, id=261, version=30795,
count=1, productName=Unmarked objects (old),
count=30, id=259, version=30795,
count=669, id=264, version=30795,
count=1, id=256, version=30795,
count=1, id=255, version=30795,
count=1, id=258, version=30795,
sources/boot.wim
- SHA256 c71f403d5fb381cf6158103f3a049c479c46bdd128f0b3c88fa71e6147cbfb5d
- MD5 e1abd83c4ad41d504f41936f4f18bffe
- SHA1 92cffbe7aca5bbddabc7d96348f35db4cb124464
- SHA512 b708ef118cae84c7b7d28abec83e1b4ad42a5473faf8649b57a055d30105b3b5152b3c87c7beb6e9d117a88a554e70afa42af97d4c43d4c2deac60fad334c134
- SSDEEP 12582912:R/cNKLudH5dGa2ai8/F5zfWOsOJaKxLSA6aa52f2g+:R0NKCx5Hi+WGJtuA6b4f9+
- TLSH T1AC693383E3A42961EA7A8135C1934746F739FC122B15CB9FD029B6642FB3BE5AD35310
- MD5 SHA1 SHA512 SSDEEP TLSH