2026-06-30_2554d4b3678a5786101c7ef1dd96922a_elex_maze_rhadamanthys

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-30_2554d4b3678a5786101c7ef1dd96922a_elex_maze_rhadamanthys
Size 1.9MB
Sample260701-acy2escs61
SHA256 ee55d81219b1b9a04137e772cb5da083601f01487e97f2bdd9162966c7f95d5f
MD5 2554d4b3678a5786101c7ef1dd96922a
SHA1 997538a9eae16142d13dfeadc32f6119253bb45d
SHA512 05c37e51a4c4cc3c8ea9d83d56b4a3e746a5a00f7ad33b7f2d1de487a34511f53800896541452c7380aee1c741386f6a1364589505484b0177c70579bcc8f4b5
SSDEEP 49152:1iSM/m5YbaNcLqDjxEAV8TvH5JzcPGQ6ek65z:QDm1jjmA+5JzcuQN7z
TLSH
T17D953378A3A808F2D53209B643BE9B8366761D3137E454E3637C7A957A331D1E23DB90
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
2026-06-30_2554d4b3678a5786101c7ef1dd96922a_elex_maze_rhadamanthys
unpack001/$PLUGINSDIR/RCWidgetPlugin.dll

File Explorer

2026-06-30_2554d4b3678a5786101c7ef1dd96922a_elex_maze_rhadamanthys

.exe 1.9MB
$PLUGINSDIR/Assist.dll

.dll 1.2MB
$PLUGINSDIR/RCWidgetPlugin.dll

.dll 1.1MB
$PLUGINSDIR/System.dll

.dll 33KB
$PLUGINSDIR/libcurl_x86.dll

.dll 2.8MB
$_54_/Protect/libcurl_x86.dll

.dll 2.8MB
$_63_/$_63_/libcurl_x86.dll

.dll 2.8MB
$_63_/13.7.0.41868/$_63_/13.7.0.41868/libcurl_x86.dll

.dll 2.8MB
13.7.0.41868/libcurl_x86.dll

.dll 2.8MB

2026-06-30_2554d4b3678a5786101c7ef1dd96922a_elex_maze_rhadamanthys

IMPHASH c552a31531df962b2298e689961d15c2
SHA256 ee55d81219b1b9a04137e772cb5da083601f01487e97f2bdd9162966c7f95d5f
MD5 2554d4b3678a5786101c7ef1dd96922a
SHA1 997538a9eae16142d13dfeadc32f6119253bb45d
SHA512 05c37e51a4c4cc3c8ea9d83d56b4a3e746a5a00f7ad33b7f2d1de487a34511f53800896541452c7380aee1c741386f6a1364589505484b0177c70579bcc8f4b5
SSDEEP 49152:1iSM/m5YbaNcLqDjxEAV8TvH5JzcPGQ6ek65z:QDm1jjmA+5JzcuQN7z
TLSH
T17D953378A3A808F2D53209B643BE9B8366761D3137E454E3637C7A957A331D1E23DB90
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20368

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA GetPrivateProfileStringW WritePrivateProfileStringW MoveFileW MultiByteToWideChar WideCharToMultiByte CreateFileW GetFileSize GetTickCount GetModuleFileNameW GetProcAddress GetCommandLineW SetEnvironmentVariableW WriteFile GetTempPathW SetErrorMode HeapAlloc HeapFree GetProcessHeap GetCurrentProcess GetCurrentProcessId ExitProcess GetVersion GetWindowsDirectoryW LoadLibraryW CopyFileW GetDiskFreeSpaceW CreateThread GlobalLock GlobalUnlock lstrcmpiW lstrlenW CreateDirectoryW GetTempFileNameW RemoveDirectoryW WaitForSingleObject GetExitCodeProcess CreateProcessW GetSystemDirectoryW GetModuleHandleA lstrcmpiA lstrcpyA lstrcatW MoveFileExW TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent VirtualQuery RtlUnwind IsProcessorFeaturePresent lstrcmpW FormatMessageW MulDiv LocalFree GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep GetLastError CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW lstrcpynW ExpandEnvironmentStringsW

user32

ScreenToClient GetSysColor GetWindowLongW SetClassLongW LoadCursorW SystemParametersInfoW wsprintfA DispatchMessageW PeekMessageW SetDlgItemTextW GetDlgItemTextW SetCursor CharPrevW MessageBoxIndirectW GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu CharNextA GetSystemMenu IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW RegisterClassW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW CreateDialogParamW DestroyWindow PostMessageW LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC DefWindowProcW DrawTextW BeginPaint EndPaint GetClientRect SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect SetTimer

gdi32

SetBkColor GetDeviceCaps SetTextColor SetBkMode SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW

shell32

ShellExecuteExW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegQueryValueExW LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken RegSetValueExW RegCreateKeyExW SetFileSecurityW RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegOpenKeyExW

comctl32

ImageList_Create ImageList_Destroy ImageList_AddMasked ord17

ole32

OleUninitialize OleInitialize CoCreateInstance CoTaskMemFree

$PLUGINSDIR/Assist.dll

IMPHASH 1ae349b09f182f0074a07d24f76d1bec
SHA256 802f344643ad2ae5fc907f2c734b13341fdd21d8d82b39e1f2116417e642a7f9
MD5 7de30dac5d4c3bc2f15fded711aa7cf5
SHA1 732987eddf2085f4970c9b1bf7eccc878fd93aaa
SHA512 693557660b0f094cf3aafc816b9dcf5f1c72d3641db4b142aa0c7d7067a25fe2a7b6d498b88e3dc7a1c5a79d907f43bdbcb578af64ae69b6db79e492072b3300
SSDEEP 24576:l5zq1y3LlQMybGzsdUJWGHlCJrbBbogT8rqlH4TGrZ:jWkJ2azO28rVbLTGqZ4TGd
TLSH
T14F454A21A645C377E56D11B0172C9E6E502C75312B6088CBF3C52F6A29F0ED26637FAB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

8a:f6:61:a7:a1:c6:bf:d5:b1:d0:69:5b:5b:6e:0c:df:f9:1f:18:4b:db:39:45:fb:e8:f0:d5:ed:a1:56:d4:e0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 26, 2025

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

c5:a2:37:7a:d5:71:ae:30:b2:2b:8f:46:c5:26:fc:4e:23:34:47:5a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

Dec 26, 2025

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

Major OS version

Entry point

772380

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\dllplugin\Qingniao_vest_dll\InstallerTool\bin\Win32\Release\pdb\Assist.pdb

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

kernel32

DecodePointer DeleteCriticalSection DeleteFileW WritePrivateProfileStringW lstrcpynW TerminateProcess GetModuleFileNameW GetProcessId WaitForSingleObject GetFileAttributesW OpenProcess SetFileAttributesW GetPrivateProfileStringW Sleep CloseHandle LoadLibraryW GetProcAddress MoveFileExW FreeLibrary lstrlenW GetShortPathNameW lstrcmpiW GetCurrentProcessId OutputDebugStringA GetCurrentThreadId GetLocalTime MultiByteToWideChar GlobalAlloc GlobalFree WideCharToMultiByte lstrcpyW GetModuleHandleExW GetCommandLineW InitializeCriticalSectionAndSpinCount LocalFree GetTickCount MoveFileW lstrcatW CreateProcessW GetVersionExW WriteFile SetFilePointer CreateFileW GetFileSize RemoveDirectoryW MoveFileWithProgressW CopyFileExW LockResource GetSystemInfo LoadResource FindResourceW GetModuleHandleW FindFirstFileW GetLongPathNameW GetFileAttributesExW RaiseException GetCurrentProcess WaitForMultipleObjects GetACP GetExitCodeProcess ReadFile SetFileTime SetEndOfFile GetFileTime SuspendThread GetExitCodeThread TerminateThread SwitchToThread OpenThread ResumeThread EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetLogicalDriveStringsW ExpandEnvironmentStringsW FindNextFileW FindClose HeapFree HeapAlloc GetProcessHeap CreateMutexW ReleaseMutex GetEnvironmentVariableW CreateDirectoryW GetFullPathNameW GetTempPathW GetCurrentDirectoryW GetWindowsDirectoryW CopyFileW GetTempFileNameW FormatMessageW CreateEventW GetCommandLineA ResetEvent InterlockedExchangeAdd GetFileSizeEx LoadLibraryExW InterlockedExchange SetLastError GlobalMemoryStatusEx FindFirstFileExW HeapSize GetLastError InitializeCriticalSectionEx DeviceIoControl IsValidCodePage GetOEMCP QueryDosDeviceW SetEvent GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetConsoleCP GetFileType GetStdHandle FileTimeToSystemTime WriteConsoleW FlushFileBuffers SetStdHandle ReadConsoleW GetConsoleMode SetFilePointerEx ExitProcess FreeLibraryAndExitThread ExitThread CreateThread InterlockedFlushSList RtlUnwind SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW IsDebuggerPresent OutputDebugStringW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime EncodePointer CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead HeapCreate VirtualProtect InterlockedCompareExchange Thread32Next Thread32First CreateToolhelp32Snapshot HeapReAlloc HeapDestroy GetThreadContext FlushInstructionCache SetThreadContext VirtualFree VirtualAlloc VirtualQuery

user32

wsprintfW

advapi32

RegCreateKeyExW AdjustTokenPrivileges DuplicateTokenEx GetUserNameW

shell32

SHGetFolderPathW ShellExecuteExW SHChangeNotify SHGetSpecialFolderPathW ord190 ord155 ShellExecuteW

ole32

CoTaskMemAlloc CoCreateInstance CoUninitialize CoInitialize CoInitializeSecurity CoSetProxyBlanket PropVariantClear

oleaut32

SysAllocString VariantClear SysFreeString

shlwapi

StrStrIW PathAppendW PathRemoveFileSpecW StrCatW StrCmpW

wtsapi32

WTSQuerySessionInformationW WTSFreeMemory

CheckFileBeforeLaunch CheckFiles CheckParentProcess CleanAnimateMark CopyImportantFileWithTransaction CreateDownloadFolder CreateLowIntegrityProcess CreateReleaseFileProcessTmpFile DeleteCustom2345ExplorerTargetShortCut DeleteInstallFile DeleteScheduledTask EncodeJifenID EncodeRecommendPcsafeUnionCustom EncodeUnion FindProc FindProc2345Explorer FindSubstring Get2345ExplorerPath GetCurrentChannelID GetCurrentSystemTime GetDownloadSafecenterCloudConfig GetInstallSafecenterCloudConfig GetJifenInstallerParams GetJifenUnionNameInstallerParams GetLastUpgradeTimeFlag GetParentProcessName GetSetDefaultBrowserWithSimulateClick GetUnionCustomInstallerParams GetUnionNameInstallerParams GetUpdateInstallSafecenterCloudConfig ImpersonateUser Init InitCustomStatService InitStatInfo InitStatService Install2345MgrDLL IsWin10OrLater IsWin10Redstone5OrLater KillProc KillProc2345Explorer KillProcessByPathAndName KillProcessByPid MyCopyFile MyMoveFile OpenOfficialWebsite OpenUrl PinToStartMenu PinToTaskBar PreProcessShortCut RevertUser SendCustomStatInfo SendStat SendStatInfo SetLastUpgradeTime SetWriteUpgradeErrorStatistics ShieldUnlock StartCloudConfigRequest StartInstallServiceProcess StartPreReleaseFileProcess StopShield TerminateCloudConfigRequest TryNotifySafeCenterProductInstalled TryNotifySafeCenterProductUninstalled UnInstallSafeCenter UninitCustomStatService UninitStatService Uninstall2345MgrDLL UninstallShield UninstallToolFile UninstallToolProcess UnpinFromStartMenu UnpinFromTaskBar WaitForReleaseFileProcess WmiRegDeleteKey WriteInstallData WriteLog

$PLUGINSDIR/RCWidgetPlugin.dll

SHA256 d85f7d03765eaaf31e0d8d6ef77f4894a4d54d33f4c49abebfa8e3cad55882dc
MD5 c3b4896ece0a20de651fc6d42241f2ae
SHA1 c31648a4ca79621caa0c5cdc53054dab3fe44159
SHA512 95497ce8c0dbb791833d0a5914d7ee73d41546ef4b403101d2de55336d161c304e1b00caa5c1a0f337fbc03065d55083206f8eba513af6231ae131a1297d285d
SSDEEP 24576:G3Bj94iC8aWxbHfeZU1hDmD62mGBRjAZB:GBC8aoKF4
TLSH
T1BC451A2193068B67D98915F0AB2D5E6F501C7A2837A458C3F3C85F2628E1DD36B33E5B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1271393

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 216ff05c01e38b13fee53b7ace6b1894
SHA256 d99ab4b1a24c00d6367a45148183228f33e89ee943494d0456c519435c0e5842
MD5 588fd9fe5e2863d0c3997eb8d7baa4bb
SHA1 6be2371ce245f8af5eba3a22ace8489bfb9d7995
SHA512 be412336fcd8f144990e3740036fb9b39bb605eb938879118fe47c0fcec5f7e741cb60efdd2fb058e9bc7b97db226f1160304d20b0ae1ee2282173c9928d2a60
SSDEEP 384:8xoXlBT3SaMINWf52+4kb1VBNyT8E9VF3ZJ5PxWnRWVolCZsHLIaPxh8E9VF0Nyl:8ypSvIWb3JVErPxAlfTPxWEQT+J
TLSH
T1CDE25C129B546CF1ED9A4E3530E8E92B6E30B7915BD1C5E3576AC0005B913C37AF82EE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

e2:2a:29:61:3d:2e:db:f3:c1:d8:06:ab:50:62:3e:3c:ce:8a:52:6d:8c:a2:53:79:ce:9c:25:cb:c3:dd:a4:98

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 15, 2022

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

01:ff:77:6e:f8:da:13:72:ac:88:d1:3e:ed:4e:11:10:e9:9f:01:22

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

Chains

Dec 15, 2022

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

Serial Number

06:ea:0d:de:d5:5e:c1:e1:a2:9f:c5:fb:5d:ab:4f:b2

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

Serial Number

05:aa:43:30:0d:17:67:ac:12:49:43:54:21:65:bb:9e

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

Major OS version

Entry point

7584

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/libcurl_x86.dll

IMPHASH affed3da4abfd43a9b4aa4c7b17dd300
SHA256 5e99492341fdb5ef86ba7379565b8e7f7b4412b87947a26eb0522a13bb0ed100
MD5 940c40feb0f6fe025298748f5901930a
SHA1 c05dc39a537cef090c6120b54d313dfa9092ed68
SHA512 2b0ffbc5b40b935eb57ec4bbff22e6137c602de5bf8ff9a3aeda245f25f2349b38402de49fcdf19547f0ed63d64a656e8db617d3e2dec94868c8988049192a33
SSDEEP 49152:a+qw+WcbiTL8zYG4CwrX2/oDqQDX7UMfSPTD/9z9Iyj:a+qwAiTL8z22yTX7pfUD/9
TLSH
T1FAD5AE13FB828472E9DA017961BB977F4E3E5A109328C9C387A129B59E301D1773F399
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

63:4d:bd:bb:ce:e9:5e:9f:50:a3:77:7c:d4:8c:b8:f1:54:6d:f7:c0:5c:f1:0f:da:ce:fc:65:11:6f:98:39:f2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

May 30, 2023

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

3e:5f:a5:a4:48:2d:9e:fb:7f:bf:bf:9e:5c:d5:00:0e:87:66:75:ce

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

May 30, 2023

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

Major OS version

Entry point

1921896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\Temp\RCFL\vendor\depends2017\curl\out\bin\Win32\release_static\pdb\libcurl_x86.pdb

ws2_32

gethostbyname closesocket sendto recvfrom WSACleanup WSAStartup htonl select __WSAFDIsSet ioctlsocket WSAWaitForMultipleEvents WSASetEvent WSAResetEvent WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent listen accept gethostname freeaddrinfo getaddrinfo WSAIoctl WSASetLastError socket setsockopt recv ntohs htons getsockopt getsockname getpeername connect bind WSAGetLastError send getnameinfo shutdown

wldap32

ord219 ord46 ord14 ord301 ord147 ord133 ord79 ord142 ord167 ord127 ord27 ord26 ord117 ord41 ord208 ord216 ord145

crypt32

CertGetCertificateContextProperty CertDuplicateCertificateContext CertFindCertificateInStore CertOpenStore CertOpenSystemStoreW CertGetIntendedKeyUsage CertGetEnhancedKeyUsage CertFreeCertificateContext CertEnumCertificatesInStore CertCloseStore

kernel32

EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW DecodePointer GetDateFormatW GetACP GetCurrentThread HeapAlloc SetStdHandle HeapFree GetConsoleCP GetModuleFileNameW GetModuleFileNameA ExitProcess SetConsoleCtrlHandler SetFilePointerEx FreeLibraryAndExitThread ResumeThread ExitThread CreateThread FileTimeToSystemTime SystemTimeToTzSpecificLocalTime SetEndOfFile SetCurrentDirectoryW GetCurrentDirectoryW GetFullPathNameW GetFullPathNameA HeapReAlloc FlushFileBuffers FindFirstFileExA FindFirstFileExW GetStringTypeW FindNextFileA InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SleepEx MultiByteToWideChar WideCharToMultiByte IsValidCodePage CloseHandle GetEnvironmentVariableA Sleep MoveFileExW GetLastError SetLastError FormatMessageW FreeLibrary GetProcAddress LoadLibraryW GetModuleHandleW GetSystemDirectoryW QueryPerformanceFrequency WaitForMultipleObjects GetFileType GetStdHandle ReadFile PeekNamedPipe GetTickCount QueryPerformanceCounter VerSetConditionMask GetModuleHandleA VerifyVersionInfoW GetSystemTimeAsFileTime CompareFileTime GetEnvironmentVariableW GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW WriteFile InitializeCriticalSectionAndSpinCount GetCurrentThreadId TlsAlloc TlsGetValue TlsSetValue GetDriveTypeW GetModuleHandleExW GetCurrentProcessId SwitchToFiber DeleteFiber CreateFiber ConvertFiberToThread ConvertThreadToFiber LoadLibraryA FindClose FindFirstFileW FindNextFileW GetSystemTime SystemTimeToFileTime CreateFileW GetFileAttributesExW RaiseException EncodePointer LoadLibraryExW GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW GetProcessHeap DeleteFileW WriteConsoleW GetTimeZoneInformation HeapSize OutputDebugStringA OutputDebugStringW WaitForSingleObject TlsFree RtlUnwind InterlockedFlushSList UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent InitializeSListHead IsDebuggerPresent GetStartupInfoW InterlockedPushEntrySList WaitForSingleObjectEx

user32

MessageBoxW GetUserObjectInformationW GetProcessWindowStation

advapi32

CryptEnumProvidersW CryptSignHashW CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey ReportEventW RegisterEventSourceW DeregisterEventSource CryptGenRandom CryptReleaseContext CryptAcquireContextW

curl_easy_cleanup curl_easy_duphandle curl_easy_escape curl_easy_getinfo curl_easy_header curl_easy_init curl_easy_nextheader curl_easy_option_by_id curl_easy_option_by_name curl_easy_option_next curl_easy_pause curl_easy_perform curl_easy_recv curl_easy_reset curl_easy_send curl_easy_setopt curl_easy_strerror curl_easy_unescape curl_easy_upkeep curl_escape curl_formadd curl_formfree curl_formget curl_free curl_getdate curl_getenv curl_global_cleanup curl_global_init curl_global_init_mem curl_global_sslset curl_maprintf curl_mfprintf curl_mime_addpart curl_mime_data curl_mime_data_cb curl_mime_encoder curl_mime_filedata curl_mime_filename curl_mime_free curl_mime_headers curl_mime_init curl_mime_name curl_mime_subparts curl_mime_type curl_mprintf curl_msnprintf curl_msprintf curl_multi_add_handle curl_multi_assign curl_multi_cleanup curl_multi_fdset curl_multi_info_read curl_multi_init curl_multi_perform curl_multi_poll curl_multi_remove_handle curl_multi_setopt curl_multi_socket curl_multi_socket_action curl_multi_socket_all curl_multi_strerror curl_multi_timeout curl_multi_wait curl_multi_wakeup curl_mvaprintf curl_mvfprintf curl_mvprintf curl_mvsnprintf curl_mvsprintf curl_pushheader_byname curl_pushheader_bynum curl_share_cleanup curl_share_init curl_share_setopt curl_share_strerror curl_slist_append curl_slist_free_all curl_strequal curl_strnequal curl_unescape curl_url curl_url_cleanup curl_url_dup curl_url_get curl_url_set curl_url_strerror curl_version curl_version_info

$_54_/Protect/libcurl_x86.dll

IMPHASH affed3da4abfd43a9b4aa4c7b17dd300
SHA256 5e99492341fdb5ef86ba7379565b8e7f7b4412b87947a26eb0522a13bb0ed100
MD5 940c40feb0f6fe025298748f5901930a
SHA1 c05dc39a537cef090c6120b54d313dfa9092ed68
SHA512 2b0ffbc5b40b935eb57ec4bbff22e6137c602de5bf8ff9a3aeda245f25f2349b38402de49fcdf19547f0ed63d64a656e8db617d3e2dec94868c8988049192a33
SSDEEP 49152:a+qw+WcbiTL8zYG4CwrX2/oDqQDX7UMfSPTD/9z9Iyj:a+qwAiTL8z22yTX7pfUD/9
TLSH
T1FAD5AE13FB828472E9DA017961BB977F4E3E5A109328C9C387A129B59E301D1773F399
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

63:4d:bd:bb:ce:e9:5e:9f:50:a3:77:7c:d4:8c:b8:f1:54:6d:f7:c0:5c:f1:0f:da:ce:fc:65:11:6f:98:39:f2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

May 30, 2023

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

3e:5f:a5:a4:48:2d:9e:fb:7f:bf:bf:9e:5c:d5:00:0e:87:66:75:ce

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

May 30, 2023

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

Major OS version

Entry point

1921896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\Temp\RCFL\vendor\depends2017\curl\out\bin\Win32\release_static\pdb\libcurl_x86.pdb

ws2_32

wldap32

ord219 ord46 ord14 ord301 ord147 ord133 ord79 ord142 ord167 ord127 ord27 ord26 ord117 ord41 ord208 ord216 ord145

crypt32

kernel32

user32

MessageBoxW GetUserObjectInformationW GetProcessWindowStation

advapi32

$_63_/$_63_/libcurl_x86.dll

IMPHASH affed3da4abfd43a9b4aa4c7b17dd300
SHA256 5e99492341fdb5ef86ba7379565b8e7f7b4412b87947a26eb0522a13bb0ed100
MD5 940c40feb0f6fe025298748f5901930a
SHA1 c05dc39a537cef090c6120b54d313dfa9092ed68
SHA512 2b0ffbc5b40b935eb57ec4bbff22e6137c602de5bf8ff9a3aeda245f25f2349b38402de49fcdf19547f0ed63d64a656e8db617d3e2dec94868c8988049192a33
SSDEEP 49152:a+qw+WcbiTL8zYG4CwrX2/oDqQDX7UMfSPTD/9z9Iyj:a+qwAiTL8z22yTX7pfUD/9
TLSH
T1FAD5AE13FB828472E9DA017961BB977F4E3E5A109328C9C387A129B59E301D1773F399
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

63:4d:bd:bb:ce:e9:5e:9f:50:a3:77:7c:d4:8c:b8:f1:54:6d:f7:c0:5c:f1:0f:da:ce:fc:65:11:6f:98:39:f2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

May 30, 2023

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

3e:5f:a5:a4:48:2d:9e:fb:7f:bf:bf:9e:5c:d5:00:0e:87:66:75:ce

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

May 30, 2023

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

Major OS version

Entry point

1921896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\Temp\RCFL\vendor\depends2017\curl\out\bin\Win32\release_static\pdb\libcurl_x86.pdb

ws2_32

wldap32

ord219 ord46 ord14 ord301 ord147 ord133 ord79 ord142 ord167 ord127 ord27 ord26 ord117 ord41 ord208 ord216 ord145

crypt32

kernel32

user32

MessageBoxW GetUserObjectInformationW GetProcessWindowStation

advapi32

$_63_/13.7.0.41868/$_63_/13.7.0.41868/libcurl_x86.dll

IMPHASH affed3da4abfd43a9b4aa4c7b17dd300
SHA256 5e99492341fdb5ef86ba7379565b8e7f7b4412b87947a26eb0522a13bb0ed100
MD5 940c40feb0f6fe025298748f5901930a
SHA1 c05dc39a537cef090c6120b54d313dfa9092ed68
SHA512 2b0ffbc5b40b935eb57ec4bbff22e6137c602de5bf8ff9a3aeda245f25f2349b38402de49fcdf19547f0ed63d64a656e8db617d3e2dec94868c8988049192a33
SSDEEP 49152:a+qw+WcbiTL8zYG4CwrX2/oDqQDX7UMfSPTD/9z9Iyj:a+qwAiTL8z22yTX7pfUD/9
TLSH
T1FAD5AE13FB828472E9DA017961BB977F4E3E5A109328C9C387A129B59E301D1773F399
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

63:4d:bd:bb:ce:e9:5e:9f:50:a3:77:7c:d4:8c:b8:f1:54:6d:f7:c0:5c:f1:0f:da:ce:fc:65:11:6f:98:39:f2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

May 30, 2023

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

3e:5f:a5:a4:48:2d:9e:fb:7f:bf:bf:9e:5c:d5:00:0e:87:66:75:ce

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

May 30, 2023

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

Major OS version

Entry point

1921896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\Temp\RCFL\vendor\depends2017\curl\out\bin\Win32\release_static\pdb\libcurl_x86.pdb

ws2_32

wldap32

ord219 ord46 ord14 ord301 ord147 ord133 ord79 ord142 ord167 ord127 ord27 ord26 ord117 ord41 ord208 ord216 ord145

crypt32

kernel32

user32

MessageBoxW GetUserObjectInformationW GetProcessWindowStation

advapi32

13.7.0.41868/libcurl_x86.dll

IMPHASH affed3da4abfd43a9b4aa4c7b17dd300
SHA256 5e99492341fdb5ef86ba7379565b8e7f7b4412b87947a26eb0522a13bb0ed100
MD5 940c40feb0f6fe025298748f5901930a
SHA1 c05dc39a537cef090c6120b54d313dfa9092ed68
SHA512 2b0ffbc5b40b935eb57ec4bbff22e6137c602de5bf8ff9a3aeda245f25f2349b38402de49fcdf19547f0ed63d64a656e8db617d3e2dec94868c8988049192a33
SSDEEP 49152:a+qw+WcbiTL8zYG4CwrX2/oDqQDX7UMfSPTD/9z9Iyj:a+qwAiTL8z22yTX7pfUD/9
TLSH
T1FAD5AE13FB828472E9DA017961BB977F4E3E5A109328C9C387A129B59E301D1773F399
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

63:4d:bd:bb:ce:e9:5e:9f:50:a3:77:7c:d4:8c:b8:f1:54:6d:f7:c0:5c:f1:0f:da:ce:fc:65:11:6f:98:39:f2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

May 30, 2023

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

3e:5f:a5:a4:48:2d:9e:fb:7f:bf:bf:9e:5c:d5:00:0e:87:66:75:ce

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

May 30, 2023

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

Major OS version

Entry point

1921896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\Temp\RCFL\vendor\depends2017\curl\out\bin\Win32\release_static\pdb\libcurl_x86.pdb

ws2_32

wldap32

ord219 ord46 ord14 ord301 ord147 ord133 ord79 ord142 ord167 ord127 ord27 ord26 ord117 ord41 ord208 ord216 ord145

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-30_2554d4b3678a5786101c7ef1dd96922a_elex_maze_rhadamanthys

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/Assist.dll

version

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

wtsapi32

generic

$PLUGINSDIR/RCWidgetPlugin.dll

$PLUGINSDIR/System.dll

PE Signature issue

kernel32

user32

ole32

generic

$PLUGINSDIR/libcurl_x86.dll

ws2_32

wldap32

crypt32

kernel32

user32

advapi32

generic

$_54_/Protect/libcurl_x86.dll

ws2_32

wldap32

crypt32

kernel32

user32

advapi32

generic

$_63_/$_63_/libcurl_x86.dll

ws2_32

wldap32

crypt32

kernel32

user32

advapi32

generic

$_63_/13.7.0.41868/$_63_/13.7.0.41868/libcurl_x86.dll

ws2_32

wldap32

crypt32

kernel32

user32

advapi32

generic

13.7.0.41868/libcurl_x86.dll

ws2_32

wldap32

crypt32

kernel32

user32

advapi32

generic