file.exe
- IMPHASH 6a368102586dffa13aabff685459b467
- SHA256 71f17c5e06548f128eb4f0cfafd247cc79894331f996c383fa5c2bcddfe9c5b8
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
9b:dc:5f:ce:5f:77:02:27:fe:ef:2f:ec:92:85:a2:31:43:03:b4:86:82:9d:dd:22:29:df:73:00:75:c3:05:c8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Windows Theme Screen Ruler,O=EastWood Install Solutions,L=Taipei,C=TW
PE Signature issue
Digest
bf:2b:ee:37:db:e8:90:b9:7a:9a:cf:4f:b0:d2:21:ea:80:48:d7:61
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Windows Theme Screen Ruler,O=EastWood Install Solutions,L=Taipei,C=TW
Subject
CN=Windows Theme Screen Ruler,O=EastWood Install Solutions,L=Taipei,C=TW
Serial Number
56:b7:3d:18:e9:ba:c3:a2:49:2a:c9:78:d2:b4:a5:ea
Issuer
CN=Windows Theme Screen Ruler,O=EastWood Install Solutions,L=Taipei,C=TW
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 2, 2026 - Aug 2, 2027
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Subject
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Serial Number
90:ac:08:72:20:fd:c5:a7:c4:6b:5c:c7:0d:f7:3d:06
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Mar 24, 2041
Subject
CN=Sectigo Public Time Stamping Signer R37,O=Sectigo Limited,ST=Greater London,C=GB
Serial Number
e7:4e:f2:55:b0:50:4f:fa:db:a6:df:f7:fc:8b:a3:15
Issuer
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Jun 24, 2037
Minor OS version
0
Major OS version
6
Entry point
3751565
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
Virtual Size
187KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.IYWD
Size
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.dam[
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.#deC
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ