Library.zip
- SHA256 e5b4a45eab2cffe9489a2b69b2a5e6fa333e5b54668a3ae90ae9411546c7dcc3
Overview
overview
10Static
static
8Library/An...32.xll
windows11-21h2-x64
10Library/An...N.xlam
windows11-21h2-x64
10Library/An...S.xlam
windows11-21h2-x64
10Library/An...S.xlam
windows11-21h2-x64
1Library/An...B.xlam
windows11-21h2-x64
1Library/EUROTOOL.xlam
windows11-21h2-x64
1Library/SO...R.xlam
windows11-21h2-x64
1Library/SO...32.dll
windows11-21h2-x64
1Behavioral task
behavioral1
Sample
Library/Analysis/ANALYS32.xll
Resource
win11-20260513-en
windows11-21h2-x64
6 signatures
900 seconds
Behavioral task
behavioral2
Sample
Library/Analysis/ATPVBAEN.xlam
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
900 seconds
Behavioral task
behavioral3
Sample
Library/Analysis/ATPVBAES.xlam
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
900 seconds
Behavioral task
behavioral4
Sample
Library/Analysis/FUNCRES.xlam
Resource
win11-20260513-en
windows11-21h2-x64
5 signatures
900 seconds
Behavioral task
behavioral5
Sample
Library/Analysis/PROCDB.xlam
Resource
win11-20260513-en
windows11-21h2-x64
5 signatures
900 seconds
Behavioral task
behavioral6
Sample
Library/EUROTOOL.xlam
Resource
win11-20260513-en
windows11-21h2-x64
5 signatures
900 seconds
Behavioral task
behavioral7
Sample
Library/SOLVER/SOLVER.xlam
Resource
win11-20260513-en
windows11-21h2-x64
6 signatures
900 seconds
Behavioral task
behavioral8
Sample
Library/SOLVER/SOLVER32.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
General
- Target Library.zip
- Size 2.0MB
- Sample260908-thbb4atvdt
- SHA256 e5b4a45eab2cffe9489a2b69b2a5e6fa333e5b54668a3ae90ae9411546c7dcc3
- MD5 9be9cf25f981d5e396012194b79739f7
- SHA1 6eb968b1e637ec5ff42b5649d5788c16fab6bc2b
- SHA512 3952a21700fb22d39c5a4cfbcc6ff71e742d5a127a62e376eae41ebca3bfd389bf1fc84cec0f522f6ae54b7cb042c70b4005ef4f6200ae612db05c67d072eb95
- SSDEEP 49152:Nr1fDHqFYvKkpCXVuVVj/9U8wyF9mBamEgBe75ZNC:dvKkpUovjxFiUg8t3C
- TLSH T179A5335CFF19537FFC2D43E09258A015B5FA8A62918D7EC2B289037698EFC845D6A370
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
-
resource static1/unpack001/Library/Analysis/ATPVBAEN.XLAM
File Explorer
-
Library.zip.zip 2.0MB
-
Library/Analysis/ANALYS32.XLL.xll 181KB
-
Library/Analysis/ATPVBAEN.XLAM.xlam 51KB
-
Library/Analysis/ATPVBAES.XLAM.xlam 51KB
-
Library/Analysis/FUNCRES.XLAM.xlam 167KB
-
Library/Analysis/PROCDB.XLAM.xlam 713KB
-
Library/EUROTOOL.XLAM.xlam 343KB
-
Library/SOLVER/SOLVER.XLAM.xlam 712KB
-
Library/SOLVER/SOLVER32.DLL.dll 209KB
Library/Analysis/ANALYS32.XLL
- IMPHASH f9d0511c06cc0956ef7824dcc4dd311c
- SHA256 3b3637df2d14a6345d9f7307939152af6d05c5650b2ecdfe957a6c57c6b8ae93
- MD5 4db666d6a14942d98df66cc8a5d30e3e
- SHA1 8ac8c644326fa4bef030df2aebd2f95c16f385ac
- SHA512 0c8cf9ffece6d7b3699c3be133a7ea25189cd57c1ef38f3c4a77da2a7c82e8389d48273d269644dccf07f8081a091e1d9dcab73a861bb2498cc309f9d2b4611b
- SSDEEP 3072:WaJCWniTyw6crvthMuqBVOFUK06vTPkkXPDlDYUxtvsz/3UQ51pVjDq4QffSM+:jJ9SNcVofYkfDhYEtvYfnVD9l
- TLSH T187043C02A3D511E8F873D674CA77A233EA7179959328973F0321C9601F3A760EE3E619
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ce:04:41:1a:e8:db:f3:d3:a3:d6:d7:63:c1:e8:c7:a1:94:a3:79:68:f9:8d:a1:de:92:27:53:ec:c0:ed:76:33
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft 3rd Party Application Component,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 31, 2026
CN=Microsoft 3rd Party Application Component,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
ce:04:41:1a:e8:db:f3:d3:a3:d6:d7:63:c1:e8:c7:a1:94:a3:79:68:f9:8d:a1:de:92:27:53:ec:c0:ed:76:33
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Office,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 31, 2026
CN=Microsoft Office,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Office,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f2:94:69:e3:a5:bf:c7:c3:b2:00:00:00:00:01:f2
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3303-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:21:33:c0:35:fb:d2:0f:21:a4:00:01:00:00:02:21
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Subject
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:1c:48:9f:81:df:a1:b0:b7:77:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Jun 23, 2035
Subject
CN=Microsoft 3rd Party Application Component,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:76:e8:2d:ab:fd:f7:dd:db:65:00:00:00:00:01:76
Issuer
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 13, 2026 - May 11, 2027
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:3605-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:b0:43:35:66:cf:af:95:e8:00:01:00:00:02:13
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 14, 2025 - Nov 13, 2026
Minor OS version
1
Major OS version
6
Entry point
127040
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
d:\dbs\el\omr\target\x64\ship\xladdin\x-none\ANALYS32.pdb
kernel32
GetModuleHandleA
GlobalAlloc
GlobalFree
GetProcAddress
GlobalLock
GlobalUnlock
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
QueryPerformanceCounter
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memset
__std_type_info_destroy_list
__C_specific_handler
wcschr
__std_terminate
__C_specific_handler_noexcept
memcpy
api-ms-win-crt-string-l1-1-0
isdigit
wcsncmp
wcscat_s
wcsnlen
_wcsnicmp
wcslen
wcscpy_s
wcsncat_s
towlower
wcscmp
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-heap-l1-1-0
malloc
free
api-ms-win-crt-convert-l1-1-0
_gcvt_s
mbstowcs_s
wcstod
api-ms-win-crt-runtime-l1-1-0
_cexit
_initterm_e
_configure_narrow_argv
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_initterm
_seh_filter_dll
api-ms-win-crt-math-l1-1-0
tan
ceil
exp
floor
fmod
log
sqrt
pow
sin
SetExcel12EntryPt
accrint
accrintm
besseli
besselj
besselk
bessely
bin2dec
bin2hex
bin2oct
convert
coupdaybs
coupdays
coupdaysnc
coupncd
coupnum
couppcd
cumipmt
cumprinc
dec2bin
dec2hex
dec2oct
delta
disc
dollarde
dollarfr
duration
edate
effect
eomonth
erf
erfc
fDialog
fExit
factdouble
fnAmorDegrc
fnAmorLinc
fnAnova1
fnAnova1Q
fnAnova2
fnAnova2Q
fnAnova3
fnAnova3Q
fnDescr
fnDescrQ
fnExpon
fnExponQ
fnFourier
fnFourierQ
fnFtestV
fnFtestVQ
fnHistogram
fnHistogramQ
fnMCorrel
fnMCorrelQ
fnMCovar
fnMCovarQ
fnMoveAvg
fnMoveAvgQ
fnRandBetween
fnRandom
fnRandomQ
fnRankPerc
fnRankPercQ
fnRegress
fnRegressQ
fnSample
fnSampleQ
fnTtestEq
fnTtestEqQ
fnTtestM
fnTtestMQ
fnTtestUeq
fnTtestUeqQ
fnWeekNum
fnZtestM
fnZtestMQ
fncomplex
fvschedule
gcd
gestep
hex2bin
hex2dec
hex2oct
imabs
imaginary
imargument
imconjugate
imcos
imdiv
imexp
imln
imlog10
imlog2
impower
improduct
imreal
imsin
imsqrt
imsub
imsum
intrate
iseven
isodd
lcm
mduration
mround
multinomial
networkdays
nominal
oct2bin
oct2dec
oct2hex
oddfprice
oddfyield
oddlprice
oddlyield
price
pricedisc
pricemat
quotient
received
seriessum
sqrtpi
tbilleq
tbillp
tbilly
workday
xirr
xlAddInManagerInfo12
xlAutoAdd
xlAutoClose
xlAutoOpen
xlAutoRegister12
xlAutoRemove
xnpv
yearfrac
yield
yielddisc
yieldmat
Name
.text
Size
123KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=257, version=35403,
count=3, id=259, version=35403,
count=8, id=260, version=35403,
count=16, id=261, version=35403,
count=3, id=257, version=33145,
count=65, id=1, productName=Unmarked objects,
count=56, id=265, version=35731,
count=1, id=256, version=35731,
count=1, id=255, version=35731,
count=1, id=258, version=35731,
Library/Analysis/ATPVBAEN.XLAM
- SHA256 7f3c6cdab8e86ecf6f6617d91204003fc025c3e51867749fd9606441c172afa8
- MD5 3f67ba6071c1dadf5deec7021b865326
- SHA1 cf818c134f76e6587756a5e72b4fb99c10b66893
- SHA512 214cd533cb2d978f003f1f99d060648d33c87df6d963b46e870173b49d573e7738e1f1a13709fad9c3b32024aa8e40b7491c095303f0bea5ad23a561037383fc
- SSDEEP 1536:2HZO8uYUW9wBuWXL7eEhjxKD4WpZG0lWimvTr6EUpJAMiv:b3GwECL7e4xKkE4GB0TupJ6v
- TLSH T1CB33010DEB206D3AE1FE3978E40C52C0A615718DDA457F8B2513FBAF6468547136F48E
- MD5 SHA1 SHA512 SSDEEP TLSH
Sheet2
ThisWorkbook
Sheet1
VBA_Functions_and_Subs
Library/Analysis/ATPVBAES.XLAM
- SHA256 6dfd020ef4dbf11ba4797aaa35932a2528f4b66ff6346035ecd282b83a27d134
- MD5 caf3f21315f2af921e2a8d77eaf58c89
- SHA1 e907bec7625570b41c3be25cf58d61faf60acd60
- SHA512 bbc7a7b22de0b3f294b543cad67c078e9d6deb0ad14c6ef77907ffbeeff4056f7920d7db916aec88239707357619000f655ae333e24cdccc14978d89786018c1
- SSDEEP 1536:2HZUYm0aJN+hbL9EzUQ1992/F57WPJRip:maJNyL0UK99o/aPWp
- TLSH T1AD33F17D9366FAD0D2B55D3C59101074A6E938289820FE4B2897871E6F42EEF0B744DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Sheet2
ThisWorkbook
Sheet1
VBA_Functions_and_Subs
Library/Analysis/FUNCRES.XLAM
- SHA256 d3147b2243cfe3e87f4f90b761d9ebdc4f14c3165e9a78b02fbf3d23a3f0eb42
- MD5 8a861bc32f8cfa4654c3f082dcfbd6f6
- SHA1 d912ec3c61d4bb6acce20d1bd3dac578d18d3065
- SHA512 7b5b1719fb73d256eb945db91c035a7cd393f300cb0bb96a9f1fae9b023975ebc920076ce32c83a5bbcd74a94487ee639533e14d4f40e82b600e74605771fdc6
- SSDEEP 3072:WAqtgDRCDgtR26WL/cDN1J/Y+mbobEUG8pb+6JMZv+a/6BOvZdsS:xqtUVsLEDJRjlG8pb+JvCBOhP
- TLSH T162F3020E770EF9ABE1BE68384068D0D97158309218AEE886346BFF5C75814D26F7D9DC
- MD5 SHA1 SHA512 SSDEEP TLSH
ThisWorkbook
Sheet3
Sheet27
Sheet2
Sheet4
Sheet5
Sheet6
Sheet7
Sheet8
Sheet9
Sheet10
Sheet11
Sheet12
Sheet13
Sheet14
Sheet15
Sheet16
Sheet17
Sheet18
Sheet19
Sheet20
Sheet21
Sheet22
Sheet23
Sheet24
Sheet25
Sheet26
RibbonX_Code
Library/Analysis/PROCDB.XLAM
- SHA256 93accde6c554b1472a884396e28489f999d6db6802221f7fb087f604bb2eca54
- MD5 8320a77fa063b4aaf87d44462241498d
- SHA1 0c6016c0e0ffe59d95ef061c4ffa6378dd96a43b
- SHA512 bacb5eb24df0b47d31005e393ba00016305a37d8610aea7a931f42bd7a2a2a714c3af54cd065789844fe7879e9aa1396a33263f4d7ee3330af4f5e8ea7fd3d0f
- SSDEEP 12288:DQU8w5CWKHICs/8bs8X8IiV7zuNawhkLP/8lvq8TLpy94VBJSRF3Ow4MDDp:DQ2CZB345yNrK7UvTT9BJSRtjN
- TLSH T199F4234FE456B83CF2381939D391ABF20B889E63C896F0AA12157A4433DF6D39B4D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Library/EUROTOOL.XLAM
- SHA256 2c4afe4afede252158a732edb0c3754b9cb984a7cc2eb6eefac47c1ef38c9753
- MD5 2028fd9f38bc13a2d2dfcac423bbf1e8
- SHA1 112aa47f13dcf6f8bad37d41ff236ad7c68fa776
- SHA512 b743848ac33c0885c298c19cc9b0daad6d497db24b8e01d4b62282e7533c4e46f6b44a159bad1cb8f314bae571bd8a7a14e8954203b611969e0b8e588a279525
- SSDEEP 6144:OtLsVwhkah0PVWhQ/aaV3KNBUvRIjr6uA6OYTOgsL:sLsVISWC8BYfLHfz
- TLSH T17374C096F4BC769DF00C4134E6BBE7AC675A483826440D4E79817692B9D308CB74BECE
- MD5 SHA1 SHA512 SSDEEP TLSH
Library/SOLVER/SOLVER.XLAM
- SHA256 4e768f8f2db07dbfdcb1204124126756daaa4559e6676990ddf1ee494ec5842e
- MD5 6b99dd78fcd8b66b63f2912af7ef35c8
- SHA1 22c9327f2922dff579f5603ff38efba94cf9a9e1
- SHA512 852e61c7c21c182bf02e2be4189e5697621ce68eb066a577d47e9a3478d17f9ab3f27285a265e744d827f72275cb609d4ac8e5c7da865d01f92a727d394b71dd
- SSDEEP 12288:ObWyEoKSA+6OXyr01eHHpHHeQUC+yHzOx5yyYEDDrxY5s1wq+EHUv6Y58B77eIf/:GWVopVXyrQaJH+hC+yHqvYE/reW3+Smk
- TLSH T1B2F423AB6BAB3C21CD76103814E0C7D8DA60AA81D01D51ED4CD5F27C53EBAFB5A9DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
RibbonX_Callbacks
Sheet5
ThisWorkbook
Sheet2
VBA_Functions1
VBA_Functions
Sheet3
Sheet28
dlgFinish
Sheet27
DialogLinks
dlgInterrupt
dlgMerge
SolverCode
dlgScenario
SolverCalls
Sheet4
modLocalize
Sheet6
Sheet30
Sheet29
Sheet7
Sheet8
Sheet9
Sheet10
Sheet11
Sheet12
Sheet13
Sheet14
Sheet15
Sheet16
Sheet17
Sheet18
Sheet19
Sheet20
Sheet21
Sheet22
Sheet23
Sheet24
Sheet25
Sheet26
dlgOptions
Library/SOLVER/SOLVER32.DLL
- IMPHASH 567267bc5b13ac380d0057eda5211496
- SHA256 284b092331780531ff2edd5f1fe3a13e0e7684a580739ddef82f83393703cad4
- MD5 926b6c4a628b2d73e52a0eab10576d57
- SHA1 825be56ed1b72849b4f3cebbee9b3ab83641521b
- SHA512 c25446d13c7a5a962b5dc6052028d8b22a6b91f959ae93e34f05ee8fa619853ce2d46810328fe988f9b00e34eeea31efcb9908677a8b518659d27670941eaffa
- SSDEEP 3072:bRbuszx8X+c6WyFiGrZRh86UsqmYUx7wfTv61caXfjXm:FbLuuvBPrZL86oUx7Im1rW
- TLSH T129246C16B6D411BAC0539470A76EF537FB76B01523A45D3F03C2DA022F8B691BE1B36A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bd:a3:3a:fa:a6:29:67:2d:87:b3:40:5d:dd:0d:58:85:a9:d0:f0:df:8b:da:49:c2:37:4b:4c:92:32:3c:9e:dd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 31, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
bd:a3:3a:fa:a6:29:67:2d:87:b3:40:5d:dd:0d:58:85:a9:d0:f0:df:8b:da:49:c2:37:4b:4c:92:32:3c:9e:dd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 31, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:1c:48:9f:81:df:a1:b0:b7:77:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Jun 23, 2035
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:4d:67:f3:0e:1c:99:8f:b5:78:00:00:00:00:01:4d
Issuer
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 23, 2026 - Apr 21, 2027
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A935-03E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:27:d5:c0:83:c3:b1:2e:57:2d:00:01:00:00:02:27
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:b9:77:d5:eb:af:db:70:7b:64:00:00:00:00:00:b9
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 13, 2025 - Nov 10, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:23:4f:d9:60:24:53:cf:fe:2b:00:01:00:00:02:23
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Minor OS version
1
Major OS version
6
Entry point
160992
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
d:\dbs\el\omr\target\x64\ship\xladdin\x-none\SOLVER32.pdb
kernel32
GetModuleFileNameW
GlobalMemoryStatus
GetModuleHandleA
GetProcAddress
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
LocalFree
oleaut32
VariantClear
VariantChangeType
VariantInit
SysAllocString
SysFreeString
mso20win32client
ord21217
ord7228
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_terminate
__std_exception_copy
_CxxThrowException
memcpy
memmove
__std_type_info_destroy_list
memset
__C_specific_handler
__std_exception_destroy
msvcp140
?_Xbad_alloc@std@@YAXXZ
api-ms-win-crt-math-l1-1-0
ceil
asin
floor
exp
sqrt
ldexp
frexp
log
pow
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
realloc
api-ms-win-crt-string-l1-1-0
wcscpy_s
strlen
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf
__stdio_common_vswprintf_s
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initialize_onexit_table
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initterm
api-ms-win-crt-locale-l1-1-0
__initialize_lconv_for_unsigned_char
Solv
SolveInternal
Name
.text
Size
157KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
124B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35403,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=27, id=261, version=35403,
count=2, id=257, version=35731,
count=1, id=260, version=33145,
count=5, id=257, version=33145,
count=101, id=1, productName=Unmarked objects,
count=72, id=265, version=35731,
count=1, id=256, version=35731,
count=1, id=255, version=35731,
count=1, id=151,
count=1, id=258, version=35731,