idman642build64_.rar
- SHA256 59b21e9cc08c5d6a845eb8eca79d507dd3615824aabe8b667fb554e926f46f2e
Overview
overview
8Static
static
3Fix/IDMan.exe
windows10-2004-x64
7Fix/IDMan.exe
windows11-ltsc_2024-x64
7Join Teleg...re.url
windows10-2004-x64
1Join Teleg...re.url
windows11-ltsc_2024-x64
1idman642build64.exe
windows10-2004-x64
6idman642build64.exe
windows11-ltsc_2024-x64
8idman642build64f.exe
windows10-2004-x64
8idman642build64f.exe
windows11-ltsc_2024-x64
8Behavioral task
behavioral1
Sample
Fix/IDMan.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
22 signatures
150 seconds
Behavioral task
behavioral2
Sample
Fix/IDMan.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
23 signatures
150 seconds
Behavioral task
behavioral3
Sample
Join Telegram for more.url
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Join Telegram for more.url
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
idman642build64.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
17 signatures
150 seconds
Behavioral task
behavioral6
Sample
idman642build64.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
27 signatures
150 seconds
Behavioral task
behavioral7
Sample
idman642build64f.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
27 signatures
150 seconds
Behavioral task
behavioral8
Sample
idman642build64f.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
26 signatures
150 seconds
General
- Target idman642build64_.rar
- Size 25.5MB
- Sample260809-rafkqsygla
- SHA256 59b21e9cc08c5d6a845eb8eca79d507dd3615824aabe8b667fb554e926f46f2e
- MD5 05d67f57593af990b3febc9710b5cd12
- SHA1 243c6d685f6f56fca0fb29a9b0d4d0cb9f2015b6
- SHA512 f1dc3766e96cc8b2fc837ab2b205c023cc83c7c68c970c2535f131e0f9aeb8f481d12c26fc2a7635f6967daa709be3596a96839968feffbf3975824ce7a78341
- SSDEEP 393216:9knsFlvuwwpnMS9asvW+y7MDRjze5Z2aUX7zDa9ocu0U3yNHuKfnmHWmTrKNgc:KSlWwNJ+y+e5Z2auDaWb0U3qmXTrIb
- TLSH T11E4733F586AF4008ADA335A1DE43F8055EA093D4EFE1F3742CB246DA6AD1CD546E24F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
File Explorer
-
idman642build64_.rar.rar 25.5MB
-
!!!Readme_first!!!!.txt2KB
-
Fix/IDMan.exe.exe 5.8MB
-
Fix/reg.txt202B
-
IDM_6.4x_Crack_v20.6-Ali.Dbg [Password 1234].zip.zip 64KB
-
Changelog.txt7KB
-
Join Telegram QR.png.png 12KB
-
Join Telegram for more.url.url 130B
-
idman642build64.exe.exe 11.9MB
-
idman642build64f.exe.exe 11.9MB
!!!Readme_first!!!!.txt
- SHA256 3c80166e5451cd7ea33a87d32cf83b6ce454279efb59440a73b63e08980dd3f6
- MD5 4300f997515a805fcd95727fc1cd27be
- SHA1 7442ad8a21e75d9780ff9ce44323d03be2218f3f
- SHA512 36519fcbdd831bc6f7515643a31c6941b51744752fd317519152a8335144e530aa2974acfa7204769d6cabd012a0952033775f5ac5c369c4187878775ca934c0
- TLSH T14F4100027EED1D02BDF13D825A3DD0B10EAA22D054388FE62779344585DEF74AB97B92
- MD5 SHA1 SHA512 TLSH
Fix/IDMan.exe
- IMPHASH 9bcc668d98b2652155102e7af63269cb
- SHA256 c3b99b8812bb6168794582bc1afcac9bd8dcd1cc61b3c23c6a56b6339c62d45b
- MD5 4965f7f297fce41ac2556067b722f03e
- SHA1 450d10b825f6973bd1ad16a9fa4de31e5d5d7ca8
- SHA512 6fe1661836e23aeef1c1e58e5e8e89510112e66106fc360fcb7ba2c835238d4530e372a628311c5e4653f987c681a3f89f5a120ceb88f083117a018a8251d308
- SSDEEP 98304:6+/mEfM78Z4CfoCCPaP4Vhc18frP3wbzWFimaI7dloOY:a01Z47V7gbzWFimaI7dlRY
- TLSH T19E569E51BF8C817AC95A1531072DAF2A402ABC98773465D3B2743E7EEC753C26C3A61B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
2286046
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
s:\IDM_projects\IDM_vs2008_2\Release\IDMan.pdb
kernel32
GlobalHandle
InterlockedIncrement
GlobalFlags
GetCPInfo
GetOEMCP
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
SetErrorMode
WritePrivateProfileStringA
FindResourceExA
RtlUnwind
GetTimeFormatA
GetDateFormatA
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetSystemTimeAsFileTime
GetTimeZoneInformation
HeapReAlloc
GetLocalTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RemoveDirectoryA
SetEnvironmentVariableA
SetCurrentDirectoryA
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GlobalReAlloc
GetStartupInfoA
VirtualAlloc
VirtualQuery
ExitThread
HeapSize
IsDebuggerPresent
IsValidCodePage
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
GetStdHandle
GetConsoleCP
GetConsoleMode
SetHandleCount
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
LoadLibraryExA
GetProfileIntA
GetTickCount
GetFullPathNameA
FindFirstFileA
DuplicateHandle
UnlockFile
LockFile
GetThreadLocale
lstrcmpA
SuspendThread
ResumeThread
SetThreadPriority
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
RaiseException
InterlockedExchange
LocalReAlloc
GetDiskFreeSpaceW
GetVolumeInformationW
SetThreadExecutionState
CreateProcessA
GetSystemInfo
InterlockedDecrement
GetComputerNameA
FreeResource
GetCurrentDirectoryA
GetACP
GetSystemDefaultLangID
GetUserDefaultLangID
EnterCriticalSection
LeaveCriticalSection
CreateThread
SleepEx
lstrcpynA
ReadFile
CreateDirectoryA
CopyFileA
MoveFileA
LocalAlloc
FormatMessageA
CreateDirectoryW
CopyFileW
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetModuleFileNameA
TlsFree
TlsGetValue
GetFileAttributesExW
FileTimeToSystemTime
CreateWaitableTimerA
SetWaitableTimer
CancelWaitableTimer
DeviceIoControl
SetFileAttributesW
FlushFileBuffers
InitializeCriticalSection
DeleteCriticalSection
GetVolumeInformationA
GetCommandLineW
GetWindowsDirectoryW
SetFileAttributesA
DeleteFileA
SetEvent
TerminateProcess
lstrlenA
LoadLibraryW
VirtualProtect
lstrcmpiA
GetDriveTypeW
GetLocaleInfoA
GetVersion
SetLastError
LoadLibraryA
GetProcessId
GetCurrentProcessId
lstrlenW
GetSystemDirectoryA
GetSystemDirectoryW
lstrcatA
SetFilePointer
SetEndOfFile
GetFileAttributesA
GetWindowsDirectoryA
GetModuleFileNameW
GetModuleHandleA
WriteFile
GetExitCodeProcess
MoveFileW
DeleteFileW
RemoveDirectoryW
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CreateProcessW
CompareFileTime
FindFirstFileW
FindNextFileW
FindClose
CreateEventA
WaitForMultipleObjects
ResetEvent
GetCurrentProcess
GetSystemTime
SystemTimeToFileTime
SetFileTime
GlobalAlloc
GlobalFree
MoveFileExW
GetProcessHeap
HeapFree
HeapAlloc
OpenProcess
GetVersionExA
CreateFileA
CreateFileW
FreeLibrary
Sleep
CreateMutexA
OpenMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
GetModuleHandleW
GetProcAddress
GlobalSize
GlobalLock
GlobalUnlock
GetFileAttributesW
GetLastError
FormatMessageW
LocalFree
MulDiv
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
GetCommandLineA
SizeofResource
user32
DeferWindowPos
GetClassInfoA
GetClassInfoExA
GetScrollPos
SetMenu
MapWindowPoints
GetMessageTime
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetLastActivePopup
GetClassLongA
IsChild
WinHelpA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
IsClipboardFormatAvailable
CharUpperA
InflateRect
IsRectEmpty
MapDialogRect
SetWindowContextHelpId
SetRectEmpty
GetAsyncKeyState
IsZoomed
UnregisterClassA
PostThreadMessageA
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
GetWindowPlacement
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
IsDialogMessageA
SendDlgItemMessageA
GetDlgItemTextA
GetMenuState
DrawFrameControl
SetRect
DrawStateA
DeleteMenu
DrawIconEx
IntersectRect
GetSysColorBrush
FrameRect
PeekMessageA
SetActiveWindow
WindowFromPoint
ClientToScreen
UnionRect
SetClassLongA
SetDlgItemTextA
ModifyMenuA
GetMenuItemInfoW
FillRect
CopyIcon
GetKeyboardLayoutList
SetPropA
GetPropA
RemovePropA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
PostQuitMessage
DestroyIcon
GetDlgItemTextW
DialogBoxIndirectParamW
AdjustWindowRectEx
EndDialog
GetClassNameA
SetCursorPos
SetLayeredWindowAttributes
UpdateWindow
CloseWindow
CreateWindowExA
RegisterClassA
DefDlgProcA
DestroyWindow
GetWindowLongA
BeginPaint
EndPaint
GetWindowDC
GetMenu
RegisterWindowMessageA
GetKeyState
RegisterClipboardFormatA
GetDlgCtrlID
LoadImageW
LoadImageA
SetWindowsHookExA
DestroyMenu
CreatePopupMenu
TrackPopupMenu
GetMessagePos
LoadCursorA
SetCursor
ReleaseCapture
GetSystemMetrics
AppendMenuW
ModifyMenuW
DrawTextW
UnhookWindowsHookEx
SetWindowLongA
CallWindowProcA
SystemParametersInfoA
CheckMenuItem
SetClipboardViewer
ChangeClipboardChain
SetCapture
GetCapture
ScreenToClient
IsIconic
DrawMenuBar
RemoveMenu
EnableMenuItem
DrawFocusRect
DrawIcon
EqualRect
OffsetRect
CharUpperBuffW
GetWindow
EnumWindows
SetForegroundWindow
IsWindowVisible
wsprintfW
MessageBoxA
GetComboBoxInfo
MessageBoxW
LoadBitmapA
SetPropW
SystemParametersInfoW
CheckMenuRadioItem
GetSubMenu
GetMenuItemID
GetMenuItemCount
AppendMenuA
GetCursorPos
GetClientRect
CopyRect
PtInRect
FindWindowA
GetWindowThreadProcessId
MsgWaitForMultipleObjects
GetParent
SetParent
KillTimer
SetTimer
InvalidateRect
GetFocus
SetFocus
SendMessageW
GetForegroundWindow
ExitWindowsEx
wsprintfA
ReleaseDC
MessageBeep
MoveWindow
GetWindowTextLengthA
ShowWindow
SetDlgItemTextW
GetWindowTextLengthW
PostMessageA
IsWindowEnabled
GetWindowTextA
IsWindow
CreateWindowExW
SetWindowPos
SetWindowTextA
GetWindowRect
SetWindowTextW
GetWindowTextW
LoadStringA
DefWindowProcW
GetDesktopWindow
LoadIconA
GetDC
SendMessageA
GetDlgItem
GetSysColor
EnableWindow
CallNextHookEx
gdi32
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreateBitmap
GetBkColor
GetCharWidthA
StretchDIBits
GetTextColor
GetRgnBox
EnumFontFamiliesExA
GetWindowExtEx
GetViewportExtEx
GetObjectA
SelectClipRgn
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetBkMode
RestoreDC
SaveDC
GetClipBox
CopyMetaFileA
SetStretchBltMode
GetMapMode
SetMapMode
LPtoDP
DPtoLP
ExtTextOutW
CreateRectRgnIndirect
CreateFontIndirectA
GetTextMetricsA
GetStockObject
CreateCompatibleBitmap
DeleteObject
SelectObject
StretchBlt
BitBlt
DeleteDC
TranslateCharsetInfo
GetDIBits
CreateDIBSection
GetObjectW
CreateFontIndirectW
GetDeviceCaps
CreatePen
SetTextColor
SetBkColor
CreateSolidBrush
GetTextExtentPoint32W
GetTextExtentPoint32A
CreateFontA
CreateCompatibleDC
comdlg32
ChooseFontW
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegRestoreKeyA
RegQueryValueExA
RegQueryValueA
RegOpenKeyA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
RegEnumKeyW
RegDeleteKeyW
DuplicateTokenEx
GetLengthSid
SetTokenInformation
CreateProcessAsUserW
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
GetUserNameW
GetUserNameA
RegCloseKey
RegLoadKeyA
RegSaveKeyA
RegEnumValueA
RegCreateKeyExW
RegFlushKey
RegDeleteValueW
RegSetValueExW
RegNotifyChangeKeyValue
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryValueExW
RegEnumKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
comctl32
ord17
ImageList_GetIcon
shlwapi
StrCmpLogicalW
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFindExtensionA
Name
.text
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
877KB
Virtual Size
877KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
40KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
216KB
Virtual Size
216KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=150, version=20413,
count=17, id=109, productName=VS2005 build 50727, version=50727,
count=15, id=123, productName=VS2005 build 50727, version=50727,
count=44, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=215, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=132, productName=VS2008 build 21022, version=21022,
count=756, id=1, productName=Unmarked objects,
count=477, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
Fix/reg.txt
- SHA256 2d6673a621ceaebbb6e153d90144847b64933c783739c0a0a53b709754f155de
- MD5 efa7addfde26ba78b734acc0e148d463
- SHA1 ea634ab7ddb30cd5ea680073b1865b150bb7a914
- SHA512 0c89f06d6347de5e8844c217a4b75140775e049311e758776e5b090343e64f5e53304d95a25f18179ce5916ea47a8c82e84ae16baee71c07c75b055aefa67919
- TLSH T10CD012A655F81058B0739341DA3184B157343C20013A8B6C00C0151614D28210967BF3
- MD5 SHA1 SHA512 TLSH
IDM_6.4x_Crack_v20.6-Ali.Dbg [Password 1234].zip
- SHA256 c537afd82091793889f87e64bc7e8884cfc5d60e63fcc4f876313f516ee5077d
- MD5 799eeb0f38443d21874d7caff3434dd7
- SHA1 e37c163f8632f45d232f13041789e7e9a8611edd
- SHA512 515fb2f5558737bac1ea66225021e692764f5430e10f501bdfea845c68a9eccfeb48837ec53344359fd31eb5ea061e427872fcaf98a3881df5a21dba86b30f82
- SSDEEP 1536:L4IL68473lQGtriwXZsD66dmyihKqjemp5xsbwrEX:sIL68qBtriwXZATQiG5xsbZ
- TLSH T10B530273E783D223FCFC23A968DDB15B792853E154E659A130EDE032C0EA69805DB16D
- MD5 SHA1 SHA512 SSDEEP TLSH
Changelog.txt
- SHA256 879e9704dde39b8827b99422c0494c7bcc50f91cc621e9504ce3d894079d64b3
- MD5 57771249a68936829638f23d0c00d9d7
- SHA1 da711d567116ddee586fea6f13b9e15dd0865672
- SHA512 9f0cdd480d3ff38966555d2b3be7b096bdc7cdec1b9afb63744e3440adb534bc39bbe4cf1b6ca37cac775e87a803335c728e23a2c8f2287cadcb5314a1c53ddf
- SSDEEP 96:DuGROLUG3E3QqGqiiYmEDfE3jCVxE/+86p3xiOn1Zucp3pn09bDGuUO8vJY1h4Lx:hE+QdviYzDfI+8W3bZvpZnq3GuUUj4t
- TLSH T1A2F1BE7E7893B41233BA8646B7973571CE3C5DDCFF66C06536A063491FE08D8826C4AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Join Telegram QR.png
- SHA256 6410f1b81043eafddad750345986726c2ac6313d38aa7290ccfeeab93992c87f
- MD5 484407264e37be1ee4266bad02a7474c
- SHA1 da9b0076594a74ab9e1fdd602f6eee06f5b3202d
- SHA512 3b5e84a53359f777e66259acfe188a1c68b63f667e45f31bcbfc2af70ebbf715bba811090d647c92466aab407c2fddcb03704c776ca150bdc18675d59ef4e5ec
- SSDEEP 192:mSoD9woyOCALC2ZdgxP9ztSMaNc9tRIcXgs/x/dLqT8iKvhD+6XnhfU2QZLN:JityTaC0Kl+iKW1RdeT8iKpainMN
- TLSH T11642C1E1952D80AB4FE8950F90094CE031AF7FB4E18B3D7817C4277B6A64384567EC64
- MD5 SHA1 SHA512 SSDEEP TLSH
Extracted URLs
-
qr https://t.me/cracksurldotcom
Join Telegram for more.url
- SHA256 970dfdac6e4da786167be4432834ecda2c81ef8182529c2325dbeb9caf31bf2e
- MD5 cb33842079e21618d7f4fa3cc09f9cd1
- SHA1 fea3d2fd206edf20ebdb7147464a269911d01a68
- SHA512 9b9086ae12313ab898f2947513167158988a52e823b86b986e8b1608bf05635ddfeeee1df1a2034b29c71523e9de7bd2df9167ebe22271d610317faceddc7dc7
- TLSH T14BC09B5F4505434ED241E44550B0F904948E75A56CD2D05C5248DEC71CD90D6C845B36
- MD5 SHA1 SHA512 TLSH
idman642build64.exe
- IMPHASH 7cd322a21a166e5f354457c41d1d9fb7
- SHA256 2613854939069bf9338e79dd8dd94ed2ff4258e3aa0e768fc0ca904f2f094edd
- MD5 58e7299cc418093e8cac14880618a44f
- SHA1 966dac71abd843e894807edfed82cac8ab0e927f
- SHA512 ca6215295eb373cad48f7216f8edea2f1af7557e65d70f5df993be4e891fa6bd7476e7681fe2d1a2679ed275f27190d053fcd8881ab3e3dbe020c3f0575dd00c
- SSDEEP 196608:zDb5pg+o9wpfd5FRCKIKhQWJNY+SUtUz1CwrCcf2f/eG9OZqRvZ0FkD2pegNBWnm:z5Zo9wVF4KIRSrY13CVfP4ZoukKpvXSo
- TLSH T167C633CFB4A2CA5FE6E85878CD76C93998143C46EB080343BB6A3EFE35B51979045436
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d9:cd:ac:e0:62:a4:9f:87:75:9a:a0:44:56:40:2e:59:75:4a:a1:c7:1a:10:a7:7c:77:07:31:21:31:25:ba:87
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=4038361,CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
May 16, 2026
SERIALNUMBER=4038361,CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=4038361,CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=4038361,CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
02:1f:21:76:1a:52:ac:88:51:fd:3b:11:65:3a:e5:33
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 23, 2025 - Nov 9, 2028
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
5
Entry point
23418
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExA
RegCloseKey
user32
FindWindowA
ShowWindow
SetForegroundWindow
CreateDialogParamA
SetWindowTextA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfW
DestroyWindow
PostQuitMessage
wsprintfA
MessageBoxA
SendMessageA
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
kernel32
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
GetDiskFreeSpaceW
GetProcAddress
GetModuleHandleA
FreeLibrary
LoadLibraryA
GetCurrentProcess
LocalFree
lstrlenA
CloseHandle
WriteFile
SetFilePointer
CreateFileW
FormatMessageA
GetLastError
CreateThread
CreateProcessW
GetModuleFileNameW
GetExitCodeThread
WaitForSingleObject
CreateDirectoryW
GetFileAttributesW
GetTempPathW
GetVersionExA
ExitProcess
CreateMutexA
ExitThread
MapViewOfFile
SetFileTime
GetFileTime
CreateFileMappingA
GetFileSize
UnmapViewOfFile
RtlUnwind
HeapFree
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapAlloc
RaiseException
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
Sleep
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
InitializeCriticalSectionAndSpinCount
Name
.text
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=123, productName=VS2005 build 50727, version=50727,
count=119, id=1, productName=Unmarked objects,
count=38, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
idman642build64f.exe
- IMPHASH 7cd322a21a166e5f354457c41d1d9fb7
- SHA256 02933c70840aabd6b0a700128fa65b7b919ea5f8d2085b470d180965e496a387
- MD5 7af612c5464071c18ec5d7ffea8d41e5
- SHA1 ce8902da9b6e59f55debe09b2d99cf11b4ec8b82
- SHA512 ffc1c3a6a839b11a4522bde1d19b868e608a09543cd5747d7f2afb37a39abc54cbdad8ea20fb875a7a028385946eb4641b508345d52bb341fa718651dea8153e
- SSDEEP 196608:J6b5pCq6nDF/9r8lZS+vYDhxVmhQWJNY+SUtUz1CwrCcf2f/eG9OZqRvZ0FkD2p8:JwAqc9r8lZL6xV9SrY13CVfP4ZoukKp8
- TLSH T12AC633CFB5B189A6E98C58BCCD3680B699153D52EE0803D3B73A3EEF38B51865545833
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
eb:a9:7d:44:7c:18:08:2f:ce:53:26:25:6d:37:c8:10:3a:d5:34:2c:50:36:be:d8:bf:09:43:2d:18:bc:0f:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=4038361,CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
May 16, 2026
SERIALNUMBER=4038361,CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=4038361,CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=4038361,CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
02:1f:21:76:1a:52:ac:88:51:fd:3b:11:65:3a:e5:33
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 23, 2025 - Nov 9, 2028
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
5
Entry point
23418
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExA
RegCloseKey
user32
FindWindowA
ShowWindow
SetForegroundWindow
CreateDialogParamA
SetWindowTextA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfW
DestroyWindow
PostQuitMessage
wsprintfA
MessageBoxA
SendMessageA
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
kernel32
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
GetDiskFreeSpaceW
GetProcAddress
GetModuleHandleA
FreeLibrary
LoadLibraryA
GetCurrentProcess
LocalFree
lstrlenA
CloseHandle
WriteFile
SetFilePointer
CreateFileW
FormatMessageA
GetLastError
CreateThread
CreateProcessW
GetModuleFileNameW
GetExitCodeThread
WaitForSingleObject
CreateDirectoryW
GetFileAttributesW
GetTempPathW
GetVersionExA
ExitProcess
CreateMutexA
ExitThread
MapViewOfFile
SetFileTime
GetFileTime
CreateFileMappingA
GetFileSize
UnmapViewOfFile
RtlUnwind
HeapFree
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapAlloc
RaiseException
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
Sleep
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
InitializeCriticalSectionAndSpinCount
Name
.text
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=123, productName=VS2005 build 50727, version=50727,
count=119, id=1, productName=Unmarked objects,
count=38, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,