PrivacyKeeper[91199475445][.]appinstaller

resource
unpack001/BelezaAIPrivacyKeeper.exe

PrivacyKeeper[91199475445].appinstaller

SHA256 ad0955197daf93200f0234f9c95fcd2a5a680f02c973f6ad7c67e8475b8677b9
MD5 e63126aede00bec72325c96ce7f4d1a6
SHA1 292ed89abf43aa96498458289c674052ba9e51d7
SHA512 750ccabd19b2a93a2390d6d644863f08cc3cd0e26cce60db0200cacf817eb5b937255b08c1f6e9d047698143953ecba7e0fd7eeb6beb8e85f22218c015c9e28e
SSDEEP 98304:/RJpe9R7LL4sU8zYQA9aHJTmkC58YWCED1nvYQ6X2J1UMdX:/R67A3899k8YWPDxvkX2XTX
TLSH
T18916331C6753E62FE229113CF29E0DA271518AE7A3E0839343E9B15B4581572CD1EFEB
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

N/A

Digest Algorithm

sha256

Digest Matches

Trusted

Signing Certificate

CN=31E36F3F-1F26-4209-AA73-9C18172AA2E6

Chains

Jul 6, 2026

CN=31E36F3F-1F26-4209-AA73-9C18172AA2E6

CN=Microsoft Marketplace CA G 026,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=31E36F3F-1F26-4209-AA73-9C18172AA2E6

Serial Number

33:00:66:78:5a:00:42:1e:3e:d5:8d:4b:02:00:01:00:66:78:5a

Issuer

CN=Microsoft Marketplace CA G 026,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageKeyEncipherment

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 6, 2026 - Jul 9, 2026

Subject

CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:12:44:a2:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 28, 2011 - Mar 28, 2031

Subject

CN=Microsoft Marketplace CA G 026,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:5b:4e:9a:32:69:b8:ad:80:0d:00:00:00:00:00:5b

Issuer

CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 11, 2024 - Apr 11, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A935-03E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:27:d5:c0:83:c3:b1:2e:57:2d:00:01:00:00:02:27

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Feb 19, 2026 - May 17, 2027

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

AppxBlockMap.xml

SHA256 0884b58f99ad7569d6e457402ff40ebade4e7bdf6e19ce2b8223bc7f75b919fd
MD5 4d97cd72ffdbb8d051d479a94e01342f
SHA1 11ca9d1825ffe26854dc5bd5eee5d35d107d9387
SHA512 c5776755da735eb23266cbd1d04447cc1005c49bc1429ca242ed1b8b9ae4695b8ce200bf4212c4b861b4e90890de82a33da3fdf552c12ecffb0961d617d7577c
SSDEEP 192:2HyVK7BDi5A75faR5dWM1MI81BBjXhKLBTNUV7zeg7biaNr5PGtRPNs1v6pZqlVv:aDSHHSgmFPjMwLv2wwpZO
TLSH
T13462EAA0563EFE3B915C0BF94F6AF5581C35582767672E1F9C8AC0B6082B8760F630D9
MD5 SHA1 SHA512 SSDEEP TLSH

AppxManifest.xml

SHA256 c72bab8c37c2844e98d82da265a8ea07d7df49d47a20dfd16be96958509608a0
MD5 903cba71a6a3c858d5785b2347a65e4f
SHA1 116ce9c2b4985df152c9ea8003744a4a25dd0ce4
SHA512 443a4ad3fc71eb5658cc40d637ff78604c83b96ed05299d6f70ce02aa8899458561543fcfbe7158978e98f747eef7b435dfcc3baa857dd03275a7d4878cef495
TLSH
T1B251778AB0D40AA043B19931EB77A3C7FF29898785DE4490F8DC502B2F7756E0637A56
MD5 SHA1 SHA512 TLSH

AppxMetadata/CodeIntegrity.cat

SHA256 435f498df06e5bbc7a956e2e6aa946528d0fa24d691eed08e322169c169199e8
MD5 1ab21f3a9f6d047f72ce029cc9f2c61c
SHA1 7373acf1b9587cc30b47a75f06908c8ac138330c
SHA512 8b312afbd741f5ae0f5e15bf15c944ca6023ba79852539377035f15d6ea9521a2bc5623239d1beac0a256146e38c44dda3f40dcf2651d1376e1f12c6f3b7b04f
SSDEEP 192:jg/vAUzFE6siJFg9F4XzVcPBubnzXrATNceKyX01k9z3AUXGgkYoAj:jg3A+ai3g9F4DVc5ufXrAUyR9zVXGLYT
TLSH
T1FE423AE29E3C84C3EC8F6D5052E8ED9BBC3D47D75560A0BA06B6F68809537C6EB1446C
MD5 SHA1 SHA512 SSDEEP TLSH

AppxSignature.p7x

SHA256 6072666386a780f6ed17144036035e7e98c3b3eb1a465c3358204b256f4aa392
MD5 35be0d4a669e10d5e078bc4ca50ea383
SHA1 b859c36a28311d96e03a3b92d64c7bd557a9ca0e
SHA512 42e1577853a7f02a740117c0dd81938bc23b46811d080721cc77c9a8e5d09da16c5448829afc794b660240a0fd2bd8e41fd761132433851b0d63db4846140c4f
SSDEEP 192:9zFE6siJFg9F4XzVcPBubrz1is+lKX01k9z3AUTm+c9:5ai3g9F4DVc5u71idlKR9z1TK
TLSH
T1614249D58A7891C7CC8FBD4063E8DE877C3D43D31520A4724AA6F9981D937C6EB1952C
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/LargeTile.png

SHA256 da425838fd877ec21c18bc308b243d172877f7c166598b83f6bd83fbe808dc7a
MD5 dc5dcd3a22bbacbbc3d880a963acd9f3
SHA1 f8451e58ec49aae9a2ac9f51057908a79b61ea13
SHA512 88630b2b56fe6f374cc99dfe11b3420a3d4b4ffb5c29148d10cbed686cc34972dbea67918d7127cff4fc4ad7fe02994ea3e24e86e2fdae2635f267d5ffff178d
SSDEEP 96:OcMBdriK4QLsx7iHtmnP/lAtYSIkw5fl0ui31rch5tulET68uX7Mt5Dt2DPjix:OcIJiMLsxGHteyqn/fl05G/tLOXQgTmx
TLSH
T1C7D17DABD3E2D123BE07DC2873A816A06015CB529A525DE8495D6A8ECF249010E5CE5E
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/LargeTile.scale-100.png

SHA256 76c10c3de8272aa9a43ef26ffc9f3546b86fddbdb7c2da094379ffe32c1fd939
MD5 0f6ba6c38bcb87fade786c315ef3ed05
SHA1 e9738c0125504beb0abc3417dda1489774f5d521
SHA512 b430113c648e59ec07d0abf4b6ea13eed068b712354356812e3032d5b034515f255c3355f2b5f3ef3e9d8c6e1b0b8e50598744df5f09247a14a058b01b7a6240
SSDEEP 192:AOtttttcmphDRPk2YLyZLPzb+FaPQSAGHPorPfp6ymStttttt0:vphDhkR6LbaCvgp63
TLSH
T1E3027D7836083454E7097FE5F9EFF0A8A67F6CA03E1749117C596838DD100DBE992342
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/LargeTile.scale-125.png

SHA256 ec2b0f1760eacf6d085c3d2209f122f3082d4ce81bfb4b67051b43d5be2392b7
MD5 842ed86e0b3fe832cb42975f06763778
SHA1 e7f1199415a3b9c2de0335f16c8200ee629a5bb0
SHA512 e62a342342c77abd69a6233f11a7877fbb5fb801c322fde6e46da0d6de7963fe17bec2d33a756172afd92403a73d97d2570dfd46ac8df28b7e322ed207445029
SSDEEP 192:cHf3JMqW3//IrGjRL8lao9zPHRGCE6B0CEO+/KZyi4UOh+m:axw3/T9QUuDPECEOJ/4TQm
TLSH
T1E0328EE2178C50C4F66D314AFEF8ED11AB9CE68755CE3B409A26E0EC85C34184CFB924
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/LargeTile.scale-150.png

SHA256 6e2f6c1197abdb945beb9470f07757d4d3e4b6bb8f55da5532fa87e9146b08a7
MD5 419e4eb28fbc91efbf60eb936740bbce
SHA1 bc23cacea28956101f116da35003e68c2f34a79b
SHA512 0fff1dc6fafecaf49de486d4e8d4f073c8de2a34e1adf384621a2f9bf91fd8508712c4c13b18a013bc437fcba55c32167fd7f9d15a7a802d5358a7b994ad5af9
SSDEEP 384:AssssssssssssssssssspocgdlGMtsXVcqLzIOkiqbu7rkQGClRgsssssssssssS:AsssssssssssssssssssiY4SLL/kvbuQ
TLSH
T1F0524C6CA3CFC782F5825CC8A788CC87CDEC679B9580E526B565FC246A598F844C34F6
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/LargeTile.scale-200.png

SHA256 029b38afeca7c880c56c32f0b70adc4468474d98acd1f1f925ec2ea56ccd48e5
MD5 1bc158f4dcb46ca28ed168e4872e8bc3
SHA1 1c40aee472bd085ce4b4c035608416740e149956
SHA512 2f8d2c1200621699205b91bcaaf391712d5e0aace5a3ac591f5b93a196ff0b29f3c5977aff9329c7330898f119908beaa7afae159d62dd7a7e8a81a449f10684
SSDEEP 384:sCf/saPjzSHNqt+D7q4/tVAdlXBCAN1+g9F2LRO4LQ2pwoM6:vUa2Y+SMVArB4g9iJM6
TLSH
T19A829F435848787CB0697B1AA4EBBC7034506699EEBB4D230D5215A1840EF7EDD70FEB
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/LargeTile.scale-400.png

SHA256 b70e82cbf9088fc224182ef6fcf292a27431a05f876d54b2e8dcc0a858904a82
MD5 f8e5ac8ad45b7ef2b21e80fab6161959
SHA1 e45512bd856cee0a4ac61da9340fc9e13ee8f5e3
SHA512 0d1c1488b02d549ff08e5ddef113aab8707f7e80d1a5d81c7fc6292c76d07ca0179d761a56b9548e0d891fc914a15fba2f19fef0ae43f548a0eb88aa7886c607
SSDEEP 768:nHYlvp4VucvH5Cz65EAQ69nIoue6FRVe8rUfffffffffff9SX4yFX4HA+htbz4C9:nHsp4TRCGrNORs8wSX4iX4HA+htbz4+b
TLSH
T11F23AE555B67C853FB1C0134CFAF9F38AE73828DB22AD663A3B2F82251835275527059
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/SmallTile.png

SHA256 da425838fd877ec21c18bc308b243d172877f7c166598b83f6bd83fbe808dc7a
MD5 dc5dcd3a22bbacbbc3d880a963acd9f3
SHA1 f8451e58ec49aae9a2ac9f51057908a79b61ea13
SHA512 88630b2b56fe6f374cc99dfe11b3420a3d4b4ffb5c29148d10cbed686cc34972dbea67918d7127cff4fc4ad7fe02994ea3e24e86e2fdae2635f267d5ffff178d
SSDEEP 96:OcMBdriK4QLsx7iHtmnP/lAtYSIkw5fl0ui31rch5tulET68uX7Mt5Dt2DPjix:OcIJiMLsxGHteyqn/fl05G/tLOXQgTmx
TLSH
T1C7D17DABD3E2D123BE07DC2873A816A06015CB529A525DE8495D6A8ECF249010E5CE5E
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/SmallTile.scale-100.png

SHA256 3c861b4d933526817e64c7960cecd2d033d4392cfa976c0f28603a37fcbbb653
MD5 4df5ed1c83ce26cb7e357c9ffa7106fa
SHA1 4d0a24c06e4535f9c2d4c747a6fef4fe5c89cccb
SHA512 0c42aeffab90c78fb0c4a0d512e059af32ca4851f4cd0890e0e16034d9723f58a859037cf3d6f6682fd4f4881b8d2266cdf0e81693c29a993f3106ae7476c47e
TLSH
T16141FAC2E691492DCB8AE4E6F3DA0510412785C76A398B8D5BC8A5958F2D0EAC8D17A2
MD5 SHA1 SHA512 TLSH

Assets/SmallTile.scale-125.png

SHA256 83dad8c409281ecd1166fa9fc7b831083f1d734bb2787ea608cccc6a3517635e
MD5 ca1b11e5a37d01b469fdadb261afe254
SHA1 bd1c7a898e67a6c9ca4afdda5f240f2e22cdc214
SHA512 c96158070a5c58ec7d25cd419d6d1b1044f51595878a3b0688e63e4f41a6c10cd164958dc0c6c46b18b90f39e3d7e73a15d8e1a170965774bdefd4d488bf11aa
TLSH
T114514AF33A446B8A5E576F3AC58203F332E65CC752A07396830909360305B3BDA6F792
MD5 SHA1 SHA512 TLSH

Assets/SmallTile.scale-150.png

SHA256 70ee0e8dd94c1874641a260be7a95d81980cdca09e7bac427ea6533c053c97bf
MD5 1eb13e065e81e12521d220c3755bd4ba
SHA1 ca55c31aed9277399f000eca439a07299d741641
SHA512 3156fd23d2220cc18e852faacbf6767b0f4349580d092cea78a3cd56b42881c52c1359bcfba33521e6353f01f32aea4a526907cb1509e8e48bb553c93d208f21
TLSH
T1BC512A862289512E738F5613CE292DD96851E0402A18F68FECF77CE0FC26E79D753453
MD5 SHA1 SHA512 TLSH

Assets/SmallTile.scale-200.png

SHA256 83e921c106357c5fd5418264fa8165bea7f6ee5b66d769a961a946bb7cb4c873
MD5 ec1f38bbe52e12705f1ddf4cd6e4e520
SHA1 aa43aa470382c712bf45908e2668a0ac86d1b90a
SHA512 41a41cfe246ea8902a3b0714e4c4ad987284cf1f87e7ee7f5f49d419e520eb0ab7ad4b016866928fd3994749eb6471d0e5522fe41d19145df10a3ef7993a90f8
TLSH
T1A4814CE2F9633DCCDA54451F2D8DB36E00CAA30F8100A9965AF10EC73ED95632662589
MD5 SHA1 SHA512 TLSH

Assets/SmallTile.scale-400.png

SHA256 4a6b2a6d230f178821c2759f3c890fc7467cb3c6a47694860575cd2910196fde
MD5 68269348fb9f9458927c06cb0a223a73
SHA1 51bc0467b1db0fd17033033df98b19d291b3625d
SHA512 734f6c0aa7bf44452244a81c01834ed0c8befd6e738a3782ee245b97e9f2f0758aa13f7b4813c6e3e1a310a8ec67279e3f409d39cdecae928824c793fa38bbeb
SSDEEP 96:H9q4lpGWl+90m5xD9ax1apu8eyVciqvjy1f1vNosmI9Yi+y8YyHAWVcIQ:dqnUm/D9axIpuxKciOjIosH93zKAt
TLSH
T12BF137BE6F1CA18C9A34975CE9D38D8A23E1EAD7D8387460D077DC8350C5858889E373
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/SplashScreen.png

SHA256 a9f0c626f2262aea5116702171a813c7ac586f92ca4bb96ac6dc913d70d0892f
MD5 6ceea3a96d96c5362a2dfa10bfd411d8
SHA1 f682266eaa9ba76e35ff6b111a30fec536fd0867
SHA512 28215d541559e34930fc575983dd2fa272d878d67341cdf5e0807927702db5ca4492b0f6631717a107a2c6fbd1fbd758363a3b006d0b2e9183901edfee332a47
SSDEEP 192:bABBrvTvJ5800MDCd1DrjVJSMQrKsoPG4o15vvAjmGSY+fdam3dhjjts+ukolB:uZTvt07ddjVJir5nr/n9I+fZHC+ukoB
TLSH
T1D942AE073191AE5DE36C533560AF2E38B28B2036AFDBCB7A181B04BB4D44954F619C1C
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square150x150Logo.png

SHA256 da425838fd877ec21c18bc308b243d172877f7c166598b83f6bd83fbe808dc7a
MD5 dc5dcd3a22bbacbbc3d880a963acd9f3
SHA1 f8451e58ec49aae9a2ac9f51057908a79b61ea13
SHA512 88630b2b56fe6f374cc99dfe11b3420a3d4b4ffb5c29148d10cbed686cc34972dbea67918d7127cff4fc4ad7fe02994ea3e24e86e2fdae2635f267d5ffff178d
SSDEEP 96:OcMBdriK4QLsx7iHtmnP/lAtYSIkw5fl0ui31rch5tulET68uX7Mt5Dt2DPjix:OcIJiMLsxGHteyqn/fl05G/tLOXQgTmx
TLSH
T1C7D17DABD3E2D123BE07DC2873A816A06015CB529A525DE8495D6A8ECF249010E5CE5E
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square150x150Logo.scale-100.png

SHA256 d9f5bb556176628c7e4e2b755107334d1e865ff81525a211cdaa80559e24feff
MD5 3f3acc2203dc643b84343ea155105516
SHA1 2ffb6c40fbe0831da8bb818e578952564dc031c9
SHA512 2b9bc3c6ebf30a4963a157ae2aa4d3c9270ebd19d1208de88ae1140ebb18feda3b0d301177300bce2482f58a112679459bba3c5ee66665c9ee70cfb175dcb270
SSDEEP 96:LO7x/lf079lDKSn2+U9I62gR3B163Oirlpn6:al9iDKEQ9I6J3G3OirC
TLSH
T13E817DAE8E752D6B81F8156FEE2A5064A4A838BB53DE18082FC2E2164D224D4B2DD4D4
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square150x150Logo.scale-125.png

SHA256 ef530209c394c3138c30470694156c078200b9ffdfc01dec0b7ceb9f81eeb946
MD5 66109c07de8702f15ac0a3254379360c
SHA1 9aa668006cf985de3747423b6e0f99711c50e7d9
SHA512 38ffba4c9e84f2aaaf2e68ae6fbe93d4462a686a45e385793dafdbdab165a76fd267e4e4f4324a5fa4bd7a8b9127fa8646b247085a3b1645318436ac48939e83
SSDEEP 96:9QzQw7or+uQQKUQs6aeWONUOD4dM1F93xXjso+PFMpXLXYiXab+:9Qr7oSuQBbaJNOh1Hdj+dfCaC
TLSH
T1C8B16C5578E8C0AC65D01AF642CC66F648F330DA8339503799A45235065AB3CFCFAED5
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square150x150Logo.scale-150.png

SHA256 885cc917f157b04f024af6fe2f5e545e42a23ba810e85e8ce4df3ede0945b05c
MD5 04513774f863fa4a4afff0191c33e5ac
SHA1 9ad6606393d7e6e59dc950a86fba12fe888f32e2
SHA512 19024a74de50c3bc759d21c15d392fa9c920440a546b93b70453c24977d28333186af97363586eb41b08f960490baf05f277bc7c6838ce833143b4be9278682c
SSDEEP 96:iaawshnWYHJHYFAIaz2g6lt99gR/LrPQCnJ7nIRI6gKmJ69ztLJN5HRP8/h8dTgs:iaawwWjFAIaz6f4ZYkJ7nIRIbJ69zLDj
TLSH
T170C18FAC5BCC64997F1C71E8718650EF19701AC7154EC4A0DFB7A0EA222A9AB46185C7
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square150x150Logo.scale-200.png

SHA256 f15800997be1ccd803913a06d6832c67fa3626aa47fbbe78a0a02c8c6310418b
MD5 0f3c0996853f67215e528f80846c5b25
SHA1 a857ae807afc82e8bc47df3c764f7e0e974a1729
SHA512 8295893f9dafe26b1679e4108339318da981cd629ec3a94babee3873f67428e2d218d92475ce21eb766979c305043090815e40b801857c1977fda1a14c09b246
SSDEEP 192:eddddddaAkmR3Zlb4BPsaiCZxM826V1ME+ILtysTqBCyddddddM:UdddddazKbUib826voMtTqBzddddddM
TLSH
T156026C6AEFCD73C88CD3150213DA991F829D2A51D2F0F15708DA1567CCE1ADA1B9CCAB
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square150x150Logo.scale-400.png

SHA256 f180bbcb7b33efa37cb928257316d5083ada9521a1048cd7089eec4b5b718a67
MD5 5a253e27e652fd3f4ec5ef40db77367c
SHA1 05c66d85b3d32a0cef98620ddb9ae36d6f122a48
SHA512 176fdf3b52e5261220343a6752b6cd5700977d18ca4d550c13aea6079642b302416846dd0759ebd0f63c8421092c102f2ba51a9efedd4c6c86cff25bb1f4f48c
SSDEEP 384:4UxLDoGYxDUnVn09Ix1+5aAehswoVVruH7:4UxLexDUnVn0e3XAehswkZi
TLSH
T183829EE0DEE25B0F39671156A0883A27604F0677777D4A3D40A1EAA46A019A2CF5FFC2
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square44x44Logo.png

SHA256 da425838fd877ec21c18bc308b243d172877f7c166598b83f6bd83fbe808dc7a
MD5 dc5dcd3a22bbacbbc3d880a963acd9f3
SHA1 f8451e58ec49aae9a2ac9f51057908a79b61ea13
SHA512 88630b2b56fe6f374cc99dfe11b3420a3d4b4ffb5c29148d10cbed686cc34972dbea67918d7127cff4fc4ad7fe02994ea3e24e86e2fdae2635f267d5ffff178d
SSDEEP 96:OcMBdriK4QLsx7iHtmnP/lAtYSIkw5fl0ui31rch5tulET68uX7Mt5Dt2DPjix:OcIJiMLsxGHteyqn/fl05G/tLOXQgTmx
TLSH
T1C7D17DABD3E2D123BE07DC2873A816A06015CB529A525DE8495D6A8ECF249010E5CE5E
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Square44x44Logo.scale-100.png

SHA256 ab436f9ce53523d36de342eb84c6f6dbb1d15c0b4cac49d9003f5a2bec654688
MD5 18962d7a9275a93d882d7b8ee34868ef
SHA1 1a2d09e8beb438ed65dbcb309c771f60706b936b
SHA512 b4fee8cee4a30b6cbf458776eacb857b55ebd8171e58ae99deaf6d85640622172f165f519391e7c68e670dc1caf8acc0ff4c28098c5abd4733a810832f5ae4dc
TLSH
T133212B1301F9FF1A784B4E68050D481AF8D60FFB30670306F5B94160493C2D88FB0294
MD5 SHA1 SHA512 TLSH

Assets/Square44x44Logo.scale-125.png

SHA256 6f841c4190db5a71804bb5a28c79e200b669d09f0c5771e9b03d7d6dd63796d5
MD5 4059b820de2da5930327213710e61015
SHA1 a52b427ab77007fa3581fca84ab99b20fd26bb62
SHA512 42dab9918bb929291e1762547e349e6384cfb6da933877ad528889c1f61ac7a4d686cd483cd6b00e2148934e7c61e6b346dae99bb68be9c06e28157f112ee41b
TLSH
T18331E8F02E9647CABD6920322E7D742B40B6679B6061401C36D9C4A1C9AA712C9D4FEF
MD5 SHA1 SHA512 TLSH

Assets/Square44x44Logo.scale-150.png

SHA256 f7c25faa5e7eeb59fb9690c2bf43bd806ff232be20119bb425078cac3d3a2748
MD5 10a42008664f9cca2730e8865076fed2
SHA1 4456c2865ffcc89cd6747f9b4b95648994d27848
SHA512 cf9d40fcd3d5989076e56e83d0c2fd90d1392bf7bc7a4460e1aa7d091a5c7475ae9e392d8bcda88b959ffcd3ad16377501b97b4bcdf2677cdbb5395f5bfebdf2
TLSH
T134410C756F4B2A6BD10C90A4C74521E1E13D1E97F5C22CD98A1CF007B00AB6DD06204B
MD5 SHA1 SHA512 TLSH

Assets/Square44x44Logo.scale-200.png

SHA256 fd5d8b4f0dc395ccc664ac5bda704e33af3a5ec6ec8298e095589a53733b6ae7
MD5 a09b240d6cb8a2cf52cbebe8564c45ee
SHA1 c3308182a42b5b26a8fa9e04e896743d5359b79c
SHA512 547760d696d1432547ef3585c42c7ce68451f86dd1c57d6e6d9b5b940cd9e73c1b39ba1ce5263fd9528a3047e1c96b755df1df1a904a2c12a0e330a8d94155a8
TLSH
T1C2513B91F9E696EB059E6C36E9EFDA0AF0E753E45E01FD1C0C342019DED042806C1BC1
MD5 SHA1 SHA512 TLSH

Assets/Square44x44Logo.scale-400.png

SHA256 eba588b286eb4baccc2cae9b1979f1782c75c630b1f27767e191fd34a006b9d8
MD5 d0511eb77c6dd170b9846bb494ae696c
SHA1 31af23fdd6d19f20597dc83bb74c67621fd2e129
SHA512 475543126ac5a7db04abb9e9faf84f6f948d2fd917b63baa33b8e25182056d51012dfd192c88f047c47246de6ad7e0f6833ae0ac7ca11b08a6ed79adf3732581
SSDEEP 96:xt5RXc7xYpRFLkQuZtmW9h2LfLYw6z/SyADfyYy3dkcpIaYwLUn4bfD:xNXcoFyj9hOLYw1yk6YQIahLw4/
TLSH
T1CBA15DA77A09F6DD93D0E4A67F42416960A67B316483C418334B387D5D3206341E867F
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/StoreLogo.png

SHA256 da425838fd877ec21c18bc308b243d172877f7c166598b83f6bd83fbe808dc7a
MD5 dc5dcd3a22bbacbbc3d880a963acd9f3
SHA1 f8451e58ec49aae9a2ac9f51057908a79b61ea13
SHA512 88630b2b56fe6f374cc99dfe11b3420a3d4b4ffb5c29148d10cbed686cc34972dbea67918d7127cff4fc4ad7fe02994ea3e24e86e2fdae2635f267d5ffff178d
SSDEEP 96:OcMBdriK4QLsx7iHtmnP/lAtYSIkw5fl0ui31rch5tulET68uX7Mt5Dt2DPjix:OcIJiMLsxGHteyqn/fl05G/tLOXQgTmx
TLSH
T1C7D17DABD3E2D123BE07DC2873A816A06015CB529A525DE8495D6A8ECF249010E5CE5E
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/StoreLogo.scale-100.png

SHA256 4df792dcadea83675135211266746861bceba9868aa73e53431357893dba74fc
MD5 7fbc460ec1499d81bcec92ff4aa3a62c
SHA1 368c8396ea5a6de8d4d9702877c86d988cbc4034
SHA512 d364c5c8600593816112a8e0fa1db83d9686e9bd419fbb53db6e63391ee9fab85131af98cf9b2c331af98d50b09cda989c9f62a69f875247bb79e45593c6cdbb
TLSH
T16031ECED0A8108CDDDDBB82EC9D6875D55A8121926F9754CFC7E3C1DB8DB2C64401C27
MD5 SHA1 SHA512 TLSH

Assets/StoreLogo.scale-125.png

SHA256 1e3489a074ff48399cc21e984aae3c4ff63e6811ccab928e8826a17ceb4f0839
MD5 f248d69783effec8a5b42c1b38305bfe
SHA1 e57b980633ff7196e703fe04fab02fe432e8a9f8
SHA512 74f4fe7b1a97beed17a9cb3b4108a812adf9b2aa21f9289d1ebbe6903d2d63fa6c8182a675880e39a171cb0f7356dd24e9316e16381fa199184ca6960e014fd4
TLSH
T1183119D0246CB409DA4F39B15EC2041939CAC29E96C4F8B97D05321D05C546AA42325B
MD5 SHA1 SHA512 TLSH

Assets/StoreLogo.scale-150.png

SHA256 684beaf4a4625298dba8452a7876e5644edbb1e685841a573f14a2effb001033
MD5 1f8699ea90fc7311205669ea9c495907
SHA1 450bf754c12393f0a7a94bcafd68f31350596917
SHA512 35e45910b297ab5cd44d88e77c1102a22fbfef851d62e46ef4ddd787270a9f72632e0c3a16a517033234934b4c815bf092f9a83981a56481cf41338a3d30cd3d
TLSH
T1DF413C4F709DDD2CFA1044392A2F00348231D7F013A14C249DC6CEA59AD8AD6194B073
MD5 SHA1 SHA512 TLSH

Assets/StoreLogo.scale-200.png

SHA256 0649153d802c119ba46b82859453f9ad3f683bfc34ac34c96e23f9dbf589df8c
MD5 6513be1a107a4d2c864e0e09d98269ec
SHA1 d1a782a5fe91173e215d8ab405d66b1e479d7687
SHA512 f916f0bda781c5c5967b0618414e8921d8dba2326edf939908f2309411759e62a95b5e482f69dfc9de89051f69ed2b6ddb4789f277782519170c453cb126cce0
TLSH
T15E514A980380B478747EAEF702B7E19B1F29C6F1FAAD9648B2ECDAC0601E804454339C
MD5 SHA1 SHA512 TLSH

Assets/StoreLogo.scale-400.png

SHA256 6b688da9222345f6cd21c953541a65aad7c7bb83dcb5917e62fbd01851e9d85d
MD5 ed4e5a340d2077e5df7be84927790f60
SHA1 8c04a81edcca7c1a4189cebc85e13db81f509341
SHA512 96487d41ab63d25daea7da73b902ed065c7cf5d7749df0517446d87beb38a17bfeb64a3a2a7f3ecc5444567b6cd92ac8feba4daaeb6d7c6958bcd95780bcb1d5
SSDEEP 96:VS3ifRHh05dfvO895b6xOz9r6zrKyuBfX1OJl:VSSpkRTb6xOIzrKl/Sl
TLSH
T18CB14B6BBE516F3B988E4ECA1290C9420EC7B34D2FF649D09346EA6DC3F5D04254DB12
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Wide310x150Logo.png

SHA256 a9f0c626f2262aea5116702171a813c7ac586f92ca4bb96ac6dc913d70d0892f
MD5 6ceea3a96d96c5362a2dfa10bfd411d8
SHA1 f682266eaa9ba76e35ff6b111a30fec536fd0867
SHA512 28215d541559e34930fc575983dd2fa272d878d67341cdf5e0807927702db5ca4492b0f6631717a107a2c6fbd1fbd758363a3b006d0b2e9183901edfee332a47
SSDEEP 192:bABBrvTvJ5800MDCd1DrjVJSMQrKsoPG4o15vvAjmGSY+fdam3dhjjts+ukolB:uZTvt07ddjVJir5nr/n9I+fZHC+ukoB
TLSH
T1D942AE073191AE5DE36C533560AF2E38B28B2036AFDBCB7A181B04BB4D44954F619C1C
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Wide310x150Logo.scale-100.png

SHA256 478a7173731802a381d6b2de4940da65479ced08c0df3939fa240e061ea371fc
MD5 e82c9a32abe079ea00d564b60ee76ef8
SHA1 e4e99d1076208acfdd91ca89fb9af0cc2b292e46
SHA512 f051eb4a1a38c619efc87305e071da7b396b95cd5ffbb28d2b722cc23b162bad9fe38a390ae7856f36817aea27d39d62e73770adb4393204231154d98dd68ad9
SSDEEP 192:c9fH2BbOSaP44vLV6e6BD9tcReZFHBBADf2Ss127MwtQYyFZF1whKHd2iOmKyhdl:aIbOdQuVj6nOgZF/ADf2Ss1gMtYMWK9p
TLSH
T163429F47B0EC7DADB17CA75582FD8819211943F57FBBCB2788131CA0D2247085AA9C9F
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Wide310x150Logo.scale-125.png

SHA256 94bca1feb942e9aa61ef1f7d1a6d81574de30f391a84cb8f4f4994b5df44614d
MD5 d28ba75ceb521a2a091bce429a9bb35f
SHA1 ff4fba1adb77c683438135cb0d311840f68a6ff8
SHA512 c1c4874790eaceaeeee60a0034dfbc0b5fbad4dbaf30f578839a79ad40ee16e8a7b2d2712112e9483634828d393d3c57ec9055c72948875ecc340051fa2b3afc
SSDEEP 384:A98Dv4ruB324cJqJgqJxa1nJ01lgObSE5q6THLS706oEA:+OM2324cJRsxEJclxr5qL7WP
TLSH
T12062B0374D801FD2C93463B2A667CE093EA9EE1713E852055BACAF4D9F21177095E0BB
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Wide310x150Logo.scale-150.png

SHA256 ef47479bae5bb1600cf8e1373193809ab786a88a2e597c18e2bc39a508b4fe9e
MD5 114c49b7b93cdcb111aa0f674d8dc887
SHA1 993b74e8fef5940e2dcb8d939c4be31f26590107
SHA512 88664c86a1616078117048591f24b91a9e25a32782653e59f0ba32a7ca2670059b42fbd6b0a1437f724504783d2ecfaf5b3609adfb535bed2e7e027b639f6105
SSDEEP 384:xnymkVVg/qqPK0zmUX8xTDh9SqMS7mrizcG+d9rMnoPFH2XOvA3C:NEVgDP7F8BDh9Bmzzd9rMnoNH2XCYC
TLSH
T16782B0B19F56DF11C3D9E23C6BF21EA73932446EE1D48C9E07B254B63B919082B241C8
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Wide310x150Logo.scale-200.png

SHA256 0b6daeb6a7ed4a97b139e2e9bfeffc22df0b3747ac7c1fade4614ead0e227d72
MD5 d07c2aff136b323c0ebfe2d4fcabdbd5
SHA1 49451c60b9826f53c1d986da7602a95d0a548f31
SHA512 846dba767c7fe2b6bf435cc56fcef06038ee3d491e7903ca2b655fd1970094bb27c5adaf2387532077b33118001775d347d2af34a6ee4b83a2ef1418c6e91b93
SSDEEP 768:nAtU7t8uifUK2Qvg3OxP57CIuEuHOZkSd1u:nAUWuifUK2QuOpxptZkSd1u
TLSH
T197C2AE0C3F7FC9A1C6C110315CABDAA4E76145CA35A586E36B1B603996C90FC98D85EE
MD5 SHA1 SHA512 SSDEEP TLSH

Assets/Wide310x150Logo.scale-400.png

SHA256 0838c9adabe28083aabfbd071b058b6876ec6a30f0dc987be03fbce6eb63e66c
MD5 0d2080d3216585ebe701ef0a1a09a970
SHA1 a1c37afb4748917a33258897c5d7566b54e93468
SHA512 49ccbc02540eeebb147392f30a60396ebaf344b4c522758851b2f5688d432ee29165fe9a620a0355a0d69eb184a0da0495071ee5495ea45fb8ea0d139c0237c4
SSDEEP 1536:vMavB+gudNuleUgewNpbuHdNR897OW/LFoth:vMYBodNdsdYJOWTeth
TLSH
T10A73CF9C1535D61DCE61107E24B718C033A487BAA74C65D782FAF42D7A03A36CC6A7F9
MD5 SHA1 SHA512 SSDEEP TLSH

BelezaAIPrivacyKeeper.exe

IMPHASH 2f2baf1dc370abac315dc61eb6d1db86
SHA256 0274302e1027e12231d96e7518199d88a48736a5dceb75cea177dd554ef79531
MD5 00d1426822ed8ab9790fbf460ae1cdac
SHA1 5be2d406ce2899548b19c6ecf71254ccbe7de416
SHA512 b955bd580f4a3ff8d60e71677713ba90d58d35106ef808391a46ab8c3d4e0aeecf6836f58b5158f67685673b1dc32dd47c49f982be3f4738c2aa356ad603d674
SSDEEP 98304:Ab3R+R2NxF76Q5VGBel2Lv2nuPYsOqh+s:AzR+UxD5VgqaCqh
TLSH
T128766D03F6A281ECC06EC174835AA733FB72B88D4530B2AB57E45B212E56F50AF5D749
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

webview2loader

CreateCoreWebView2EnvironmentWithOptions GetAvailableCoreWebView2BrowserVersionString

kernel32

CloseHandle CreateFileMappingA CreateToolhelp32Snapshot GetCurrentProcess GetCurrentProcessId GetCurrentThread GetProcAddress LoadLibraryA MapViewOfFile Module32FirstW Module32NextW ReleaseMutex RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnmapViewOfFile WideCharToMultiByte lstrlenW GetTimeZoneInformationForYear GetComputerNameExW GetLastError GetModuleHandleA Sleep CompareStringOrdinal DeleteFileW DuplicateHandle ExitProcess FindClose FindFirstFileExW FindNextFileW FormatMessageW FreeLibrary GetCurrentThreadId GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFinalPathNameByHandleW GetFullPathNameW GetModuleFileNameW GetModuleHandleW GetNativeSystemInfo GetProcessHeap GetSystemDirectoryW GetSystemInfo GetSystemTimePreciseAsFileTime GetTempPathW GetTickCount GetUserDefaultUILanguage GetUserPreferredUILanguages GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalSize GlobalUnlock HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete LCIDToLocaleName LoadLibraryExA LoadLibraryW MultiByteToWideChar SetFileCompletionNotificationModes SetFileInformationByHandle SetFileTime SetHandleInformation SetLastError SetThreadStackGuarantee SetWaitableTimer SleepEx SwitchToThread TlsAlloc TlsFree TlsGetValue TlsSetValue WaitForMultipleObjects WaitForSingleObject CreateEventW CancelIo CancelIoEx CreateDirectoryW CreateFileW CreateIoCompletionPort CreateMutexW CreateProcessW CreateThread CreateWaitableTimerExW DeviceIoControl GetConsoleMode GetConsoleOutputCP GetOverlappedResult GetQueuedCompletionStatusEx GetStdHandle PostQueuedCompletionStatus ReadFile ReadFileEx SetNamedPipeHandleState WriteConsoleW WriteFile WriteFileEx AddVectoredExceptionHandler DeleteCriticalSection EnterCriticalSection FreeEnvironmentStringsW GetCommandLineW GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableW InitializeCriticalSection LeaveCriticalSection Process32FirstW Process32NextW QueryPerformanceCounter QueryPerformanceFrequency RaiseException RtlUnwindEx SetEnvironmentVariableW SetUnhandledExceptionFilter VirtualProtect VirtualQuery __C_specific_handler

bcryptprimitives

ProcessPrng

advapi32

RegCloseKey RegDeleteValueW RegGetValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW ImpersonateAnonymousToken RegCreateKeyExW RevertToSelf SystemFunction036

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

comctl32

DefSubclassProc RemoveWindowSubclass SetWindowSubclass TaskDialogIndirect

dwmapi

DwmEnableBlurBehindWindow DwmGetWindowAttribute DwmSetWindowAttribute

gdi32

BitBlt CombineRgn CreateCompatibleDC CreateDIBSection CreateRectRgn CreateSolidBrush DeleteDC DeleteObject GetDeviceCaps SelectObject SetBkMode SetTextColor

ntdll

RtlNtStatusToDosError NtCancelIoFileEx NtCreateFile NtDeviceIoControlFile NtOpenFile NtReadFile NtWriteFile RtlGetVersion NtCreateNamedPipeFile

ole32

CoCreateFreeThreadedMarshaler CoCreateInstance CoIncrementMTAUsage CoInitialize CoInitializeEx CoTaskMemAlloc CoTaskMemFree CoUninitialize OleInitialize RegisterDragDrop RevokeDragDrop

oleaut32

GetErrorInfo SetErrorInfo SysAllocStringLen SysFreeString SysStringLen

shell32

DragFinish DragQueryFileW ILCreateFromPathW ILFree SHAppBarMessage SHGetKnownFolderPath SHOpenFolderAndSelectItems ShellExecuteExW ShellExecuteW Shell_NotifyIconGetRect Shell_NotifyIconW

shlwapi

SHCreateMemStream

user32

AdjustWindowRect AdjustWindowRectEx AppendMenuW AttachThreadInput CallNextHookEx ChangeDisplaySettingsExW ChangeWindowMessageFilterEx CheckMenuItem ClientToScreen ClipCursor CloseClipboard CloseTouchInputHandle CreateAcceleratorTableW CreateIcon CreateMenu CreatePopupMenu CreateWindowExW DefWindowProcW DestroyAcceleratorTable DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DispatchMessageW DrawIconEx DrawMenuBar DrawTextW EmptyClipboard EnableMenuItem EnableWindow EnumChildWindows EnumDisplayMonitors EnumWindows FillRect FindWindowExW FindWindowW FlashWindowEx GetActiveWindow GetAsyncKeyState GetClassNameW GetClientRect GetClipCursor GetClipboardData GetCursorPos GetDC GetForegroundWindow GetKeyState GetKeyboardLayout GetKeyboardState GetLastInputInfo GetMenu GetMenuBarInfo GetMenuItemInfoW GetMessageA GetMessageW GetMonitorInfoW GetParent GetRawInputData GetSystemMenu GetSystemMetrics GetTouchInputInfo GetUpdateRect GetWindow GetWindowDC GetWindowLongPtrW GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InsertMenuW InvalidateRect InvalidateRgn IsClipboardFormatAvailable IsIconic IsProcessDPIAware IsWindow IsWindowEnabled IsWindowVisible KillTimer LoadCursorW MapVirtualKeyExW MapVirtualKeyW MapWindowPoints MonitorFromPoint MonitorFromRect MonitorFromWindow MoveWindow MsgWaitForMultipleObjectsEx OffsetRect OpenClipboard PeekMessageW PostMessageW PostQuitMessage PostThreadMessageW RedrawWindow RegisterClassExW RegisterClassW RegisterClipboardFormatW RegisterRawInputDevices RegisterTouchWindow RegisterWindowMessageA ReleaseCapture ReleaseDC RemoveMenu ScreenToClient SendInput SendMessageW SetCapture SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetMenu SetMenuItemInfoW SetParent SetPropW SetTimer SetWinEventHook SetWindowDisplayAffinity SetWindowLongPtrW SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowTextW SetWindowsHookExW ShowCursor ShowWindow SystemParametersInfoA SystemParametersInfoW ToUnicodeEx TrackMouseEvent TrackPopupMenu TranslateAcceleratorW TranslateMessage UnhookWinEvent UnhookWindowsHookEx UpdateWindow ValidateRect VkKeyScanW

ws2_32

WSACleanup WSAGetLastError WSAIoctl WSASend WSASocketW WSAStartup bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket recv send setsockopt shutdown

msvcrt

__getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _fmode _fpreset _initterm _onexit abort calloc ceil exit floor fmod fprintf free fwrite malloc memcmp memcpy memmove memset pow signal strerror strlen strncmp vfprintf wcslen

bcrypt

BCryptGenRandom

Name

.text

Size

5.4MB

Virtual Size

5.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

113KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

154KB

Virtual Size

154KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

WebView2Loader.dll

IMPHASH 90db803f7a0acc2517ef287c1dc1bb76
SHA256 8427b1fc58ec707813e5c0a51eb5d69397bb333250a7b891be4d3b123f1e0f1c
MD5 b7f10b8066ee96c628e09c439b8d0b9b
SHA1 3a2fe02d9d43100056b7dd1ccd2dfb3f30ad0f55
SHA512 4ce26a59faadfa0a20e098caf297f3403ac1542706f72879ed7248dee4026a5c7ffc3aa95912d8e3510ac7593082429ce0e83978a5843cfce52fb475cc975333
SSDEEP 3072:1mJgy7/ph9euiDNQ6A93jJBC9JGv6T/MEtJ6mj4UrqhQ:w/NVZ6A93j//EtJnrX
TLSH
T173F35C5BB2E900BBE17BC278C5A34A15E772B8111760AAEF036447791F137D0AE3DB61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

20:0a:0b:1d:57:67:2c:96:ed:25:eb:8b:ac:94:71:7c:b9:ef:20:b6:a5:c9:21:f6:fb:30:b0:72:47:ef:a7:71

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Dec 1, 2025

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

10

Entry point

18608

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WebView2Loader.dll.pdb

kernel32

AcquireSRWLockExclusive CloseHandle CreateFileW DeleteCriticalSection EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesW GetFileType GetLastError GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW MultiByteToWideChar OutputDebugStringA OutputDebugStringW QueryPerformanceCounter RaiseException ReleaseSRWLockExclusive RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

Name

.text

Size

86KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

[Content_Types].xml

SHA256 57af2151d8d493f98ed285267cf67621b959d076ec12ac18b08f233f66849a4e
MD5 efdaae18184c6eaf3409956e8c9ac8d6
SHA1 7777bb3d2b0772cf43bfb64994f46fc3d4fd7a44
SHA512 b1d0229aaf80a116ece419f93e82b27ec66387a5a6155ec67808d1fc366101713a6d6f900cf407ac0777e5da6bad61bdcfd35aed7a37201eb2682117277babb9
TLSH
T144019ED2707A9CB003A28DBFCD27A8541233007D54E93B4DBFA95A4EA0E075B01B13C9
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer

PrivacyKeeper[91199475445].appinstaller

AppxBlockMap.xml

AppxManifest.xml

AppxMetadata/CodeIntegrity.cat

AppxSignature.p7x

Assets/LargeTile.png

Assets/LargeTile.scale-100.png

Assets/LargeTile.scale-125.png

Assets/LargeTile.scale-150.png

Assets/LargeTile.scale-200.png

Assets/LargeTile.scale-400.png

Assets/SmallTile.png

Assets/SmallTile.scale-100.png

Assets/SmallTile.scale-125.png

Assets/SmallTile.scale-150.png

Assets/SmallTile.scale-200.png

Assets/SmallTile.scale-400.png

Assets/SplashScreen.png

Assets/Square150x150Logo.png

Assets/Square150x150Logo.scale-100.png

Assets/Square150x150Logo.scale-125.png

Assets/Square150x150Logo.scale-150.png

Assets/Square150x150Logo.scale-200.png

Assets/Square150x150Logo.scale-400.png

Assets/Square44x44Logo.png

Assets/Square44x44Logo.scale-100.png

Assets/Square44x44Logo.scale-125.png

Assets/Square44x44Logo.scale-150.png

Assets/Square44x44Logo.scale-200.png

Assets/Square44x44Logo.scale-400.png

Assets/StoreLogo.png

Assets/StoreLogo.scale-100.png

Assets/StoreLogo.scale-125.png

Assets/StoreLogo.scale-150.png

Assets/StoreLogo.scale-200.png

Assets/StoreLogo.scale-400.png

Assets/Wide310x150Logo.png

Assets/Wide310x150Logo.scale-100.png

Assets/Wide310x150Logo.scale-125.png

Assets/Wide310x150Logo.scale-150.png

Assets/Wide310x150Logo.scale-200.png

Assets/Wide310x150Logo.scale-400.png

BelezaAIPrivacyKeeper.exe

webview2loader

kernel32

bcryptprimitives

advapi32

api-ms-win-core-synch-l1-2-0

api-ms-win-core-winrt-l1-1-0

comctl32

dwmapi

gdi32

ntdll

ole32

oleaut32

shell32

shlwapi

user32

ws2_32

msvcrt

bcrypt

generic

WebView2Loader.dll

kernel32

generic

[Content_Types].xml