vibe_3[.]2[.]2_x64-setup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
vibe_3.2.2_x64-setup.exe
Size 41.7MB
Sample260916-tljsms1vds
SHA256 e2437fa44ac32b3bc4ed636c1a1141f8b8cca38bb841e7c4535e5ef6e3971081
MD5 fde9270d1034f36cdb593b935bcec935
SHA1 648f211ac315037f4768f7f190e6c94e3efd6501
SHA512 f611528f6a3dc27886305641485b69f35aea40f664ee885a3b049bf64c86ca01f3cb8278f36da080ff750ffee1a4f3bb83eb7f1d113fa987afe4130c50867fde
SSDEEP 786432:EAy9zXnW6ScQr0Dn2ZupsrzsjtIrtwSZ+tQCAtFuDOUaKFgh:EFawD2ZyJgtwfmPFuDOCgh
TLSH
T1A2A733743479CD55C3668CB9A09A62B75E08A7E27D4DF40DEF327DB96710AD0CCB8882
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/NSISdl.dll
unpack001/$PLUGINSDIR/StartMenu.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsExec.dll

File Explorer

vibe_3.2.2_x64-setup.exe

.exe 41.7MB
$PLUGINSDIR/NSISdl.dll

.dll 15KB
$PLUGINSDIR/StartMenu.dll

.dll 7KB
$PLUGINSDIR/System.dll

.dll 12KB
$PLUGINSDIR/modern-wizard.bmp

25KB
$PLUGINSDIR/nsDialogs.dll

.dll 9KB
$PLUGINSDIR/nsExec.dll

.dll 7KB
$PLUGINSDIR/nsis_tauri_utils.dll

.dll 41KB
ffmpeg.exe

.exe 98.1MB
vibe-server.exe

.exe 72.1MB
vibe.exe

.exe 15.1MB

vibe_3.2.2_x64-setup.exe

IMPHASH 46ce5c12b293febbeb513b196aa7f843
SHA256 e2437fa44ac32b3bc4ed636c1a1141f8b8cca38bb841e7c4535e5ef6e3971081
MD5 fde9270d1034f36cdb593b935bcec935
SHA1 648f211ac315037f4768f7f190e6c94e3efd6501
SHA512 f611528f6a3dc27886305641485b69f35aea40f664ee885a3b049bf64c86ca01f3cb8278f36da080ff750ffee1a4f3bb83eb7f1d113fa987afe4130c50867fde
SSDEEP 786432:EAy9zXnW6ScQr0Dn2ZupsrzsjtIrtwSZ+tQCAtFuDOUaKFgh:EFawD2ZyJgtwfmPFuDOCgh
TLSH
T1A2A733743479CD55C3668CB9A09A62B75E08A7E27D4DF40DEF327DB96710AD0CCB8882
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

fd:b2:d6:9d:75:6e:7e:36:bb:13:cd:b0:f1:c5:80:06:69:7e:c3:c0:9a:5f:93:d7:d5:b2:b8:a5:47:7b:43:c7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Yaakov Kolani,O=Yaakov Kolani,L=Kiryat Arba,C=IL

Chains

Sep 5, 2026

CN=Yaakov Kolani,O=Yaakov Kolani,L=Kiryat Arba,C=IL

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1c:cf:9d:67:cd:e2:19:ff:12:d9:9a:ff:36:82:e5:a7

Issuer

CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 7, 2019 - Mar 3, 2034

Subject

CN=Yaakov Kolani,O=Yaakov Kolani,L=Kiryat Arba,C=IL

Serial Number

5d:ae:e5:4e:41:8c:8b:c0:65:d4:5d:19:ea:50:e4:d3

Issuer

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 24, 2026 - Feb 17, 2027

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Minor OS version

Major OS version

Entry point

13983

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

RemoveDirectoryW lstrcmpiA GetTempFileNameW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW WriteFile GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize CreateFileW GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject ExitProcess

$PLUGINSDIR/NSISdl.dll

IMPHASH db80d5e142e716e818b7f4614dcade3c
SHA256 ddf40229dd9d6b268902d8dea88c8a04aacf1af218dd29f6dcd35babc54ac08d
MD5 8eabbe36e8b52e69322780d0f541fd19
SHA1 e5fa3eca8d2035e4fa006b7123c348348e4e6de4
SHA512 4189fabff409be4bc7a8e81be58fb18e32398e4ef4c01a70cf823d79e76f47c4681734808fd61db8728c73d2bcad890b09aa09d5a0f0b0c3ad581be1beaf9ce7
SSDEEP 384:jrSQMCOUILnCaSPy/yhJzmGSMRWyOUKie:jrSQMCOp0yamMRWysie
TLSH
T17B623C16B62084F5DBB2167034D73B3E6BB28F6A1A2848C34BF35C4E9E52307B675D85
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9321

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/StartMenu.dll

IMPHASH 646971a3aef724d6f553f40ae84fe26b
SHA256 fe330320459637d8dd2b5d84d07925c38ec264152ffd3b1760a4d44d76536caa
MD5 b9b71990b37e04a56cadbcbfa694f30f
SHA1 3b7627deb793446d6b12b7b94266cc592982a5c2
SHA512 b4aa947aba471ce0ba37ab859391f6a157887c882c920a3081d482f63a83317ae75b428ebae226f835798517abb676114ee42bf13bd4c4291cebbb5e9658f2e5
SSDEEP 96:VIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/x3lkCTcaqHCI:ShE+A0+sF6piUFkA1lncviI
TLSH
T1FFF1C776F3D20673F9AB427428632F231B2AF521576581A7890316CE7A61DE3FD34B11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6430

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsDialogs.dll

IMPHASH 3b477381217c97b22146297f93df2a92
SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
MD5 8f0e7415f33843431df308bb8e06af81
SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
TLSH
T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsExec.dll

IMPHASH 68b7023f8923dd087549802f8fa631c3
SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
MD5 8fe362ffdfa66269b8a64e3a87f68e52
SHA1 b5daaa60a6b8591a670da9fc3a2d6f896d55f568
SHA512 8f2904e01b0835683a0f11114a09da291ba527d867e73db2765185f780f2278debd9c5fc4281a42a6065c5ef5947bdc6239ae4c5835df62c71e1fce80d8bf942
SSDEEP 96:JXzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHnDQ:JgQHDb2vSuOc41ZfUNQZGdHD
TLSH
T1F8E1193571C02DF7E08D89707816BD2F83F4D43627BA05A04A771AD579D0AF6EE28B42
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis_tauri_utils.dll

IMPHASH 2030931b38a854dde8cdd69245a8096a
SHA256 3cdcfc2b3ec0cdecb5851374e02459f7c415aa84fb7ba9007b2c7888c317e949
MD5 f46432131c353ed71485cf06ecdb83fe
SHA1 814d8ec79cf2dd7bc4c67085a3cf5a0fe81eb83c
SHA512 e21a589edea81626ec329bfa70f741e22a45143f737945087ea0a622a3bcbf83956e4ced7afa8d891560e021291c1b0165b0d58f94fc0b16b29ca7e3475e56dc
SSDEEP 768:I/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVGY4LL9rA+MEM:awODZzTrAV5Oevq4DtXHVGY4NM
TLSH
T12D136B59FDC57DA6E7CF05702488463F9A7FC8081600C9A7E3615EA2C9D2332AED526F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

83:3a:0c:a6:a9:ea:fe:42:8b:8c:66:14:d5:bb:78:4d:6e:28:98:d1:44:45:77:45:9c:98:93:7f:05:54:8f:4a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Yaakov Kolani,O=Yaakov Kolani,L=Kiryat Arba,C=IL

Chains

Sep 5, 2026

CN=Yaakov Kolani,O=Yaakov Kolani,L=Kiryat Arba,C=IL

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1c:cf:9d:67:cd:e2:19:ff:12:d9:9a:ff:36:82:e5:a7

Issuer

CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 7, 2019 - Mar 3, 2034

Subject

CN=Yaakov Kolani,O=Yaakov Kolani,L=Kiryat Arba,C=IL

Serial Number

5d:ae:e5:4e:41:8c:8b:c0:65:d4:5d:19:ea:50:e4:d3

Issuer

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 24, 2026 - Feb 17, 2027

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

nsis_tauri_utils.pdb

ffmpeg.exe

IMPHASH 5cad00689313f229dd6e241fede1bc3f
SHA256 b4141b6dfae78f076ed44e0993f4e90e077db8720ddf8dd696cf5540a6c5e125
MD5 007356a6eb2a977e0f4f96fe647e6d2c
SHA1 cd753d9af3925d25d4a448f6ac3cbcab2b672c36
SHA512 233d0174f61497b75f721b5d321e8cf49a26ac3a34a4b8062f2644806eb9b99c1ccf2ca6a5772c3739995f171534960aeadf16c69523dfea0283fbc085a45a0e
SSDEEP 1572864:C8ehSJwxeBKaKmHXU+fSwdcYS/aEHBt6w5Hnflkg+rkVRJsZRw+cJfagAoCFhbzz:rvN
TLSH
T165388D9EE1E3909CC127D4B0437EFB73BA24786C11246E7A62D9DA306E62FC0571AF54
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Digest

88:04:6a:f0:4a:5d:c9:04:74:54:75:d4:1e:19:73:92:24:3b:12:f1:e4:bd:a3:d0:d3:dc:4d:6c:a3:76:8a:43

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Yaakov Kolani,O=Yaakov Kolani,L=Kiryat Arba,C=IL

Chains

Sep 5, 2026

CN=Yaakov Kolani,O=Yaakov Kolani,L=Kiryat Arba,C=IL

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1c:cf:9d:67:cd:e2:19:ff:12:d9:9a:ff:36:82:e5:a7

Issuer

CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 7, 2019 - Mar 3, 2034

Subject

CN=Yaakov Kolani,O=Yaakov Kolani,L=Kiryat Arba,C=IL

Serial Number

5d:ae:e5:4e:41:8c:8b:c0:65:d4:5d:19:ea:50:e4:d3

Issuer

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 24, 2026 - Feb 17, 2027

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Minor OS version

Major OS version

Entry point

5184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

CryptAcquireContextW CryptCreateHash CryptDecrypt CryptDestroyHash CryptGenRandom CryptGetHashParam CryptGetProvParam CryptReleaseContext CryptSetHashParam CryptSetProvParam CryptSignHashA DeregisterEventSource GetUserNameA InitializeSecurityDescriptor RegCloseKey RegEnumKeyExW RegEnumValueW RegOpenKeyExA RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExA RegQueryValueExW RegisterEventSourceW ReportEventW SetSecurityDescriptorDacl SystemFunction036

avrt

AvRevertMmThreadCharacteristics AvSetMmThreadCharacteristicsW

bcrypt

BCryptCloseAlgorithmProvider BCryptGenRandom BCryptOpenAlgorithmProvider

crypt32

CertCloseStore CertDeleteCertificateFromStore CertEnumCRLsInStore CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext CertGetCertificateContextProperty CertOpenStore CertOpenSystemStoreW PFXImportCertStore

gdi32

BitBlt CombineRgn CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateFontIndirectW CreateRectRgn CreateSolidBrush DeleteDC DeleteObject EnumFontFamiliesW ExtCreateRegion ExtSelectClipRgn ExtTextOutW GdiFlush GetCharWidth32A GetClipBox GetClipRgn GetDIBColorTable GetDeviceCaps GetFontData GetFontUnicodeRanges GetGlyphIndicesW GetGlyphOutlineW GetGraphicsMode GetObjectA GetObjectW GetOutlineTextMetricsA GetStockObject GetTextFaceW GetTextMetricsA GetWorldTransform IntersectClipRect ModifyWorldTransform RestoreDC SaveDC SelectClipRgn SelectObject SetBkMode SetGraphicsMode SetMapMode SetTextAlign SetTextColor SetWorldTransform StretchDIBits

iphlpapi

GetAdaptersAddresses if_indextoname if_nametoindex

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared AreFileApisANSI CancelIoEx CloseHandle ConvertFiberToThread ConvertThreadToFiberEx CreateEventA CreateEventW CreateFiberEx CreateFileA CreateFileMappingA CreateFileW CreateHardLinkW CreateMutexA CreateSemaphoreA CreateSemaphoreW CreateThread DebugBreak DeleteCriticalSection DeleteFiber DeleteFileW DuplicateHandle EnterCriticalSection EnumResourceLanguagesA EnumSystemLocalesA FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileExW FindFirstFileW FindNextFileW FormatMessageA FormatMessageW FreeLibrary GetACP GetCommandLineW GetComputerNameA GetConsoleMode GetConsoleScreenBufferInfo GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDiskFreeSpaceExW GetEnvironmentVariableA GetEnvironmentVariableW GetExitCodeThread GetFileAttributesA GetFileAttributesExA GetFileAttributesW GetFileInformationByHandle GetFileSize GetFileSizeEx GetFileType GetFinalPathNameByHandleA GetFullPathNameA GetFullPathNameW GetHandleInformation GetLastError GetLocaleInfoA GetLongPathNameA GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleExA GetModuleHandleExW GetModuleHandleW GetNumaHighestNodeNumber GetNumaNodeProcessorMaskEx GetProcAddress GetProcessAffinityMask GetProcessHeap GetProcessTimes GetStdHandle GetSystemDirectoryA GetSystemInfo GetSystemTime GetSystemTimeAdjustment GetSystemTimeAsFileTime GetTempFileNameW GetTempPathA GetTempPathW GetThreadContext GetThreadLocale GetThreadPriority GetThreadTimes GetTickCount GetTimeZoneInformation GetVersion GetVersionExA GetWindowsDirectoryA HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeSRWLock IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage K32GetProcessMemoryInfo LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree MapViewOfFile MoveFileExA MoveFileExW MultiByteToWideChar OpenFileMappingA OpenProcess OutputDebugStringA PeekNamedPipe QueryFullProcessImageNameW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleA ReadConsoleW ReadFile RegisterWaitForSingleObject ReleaseMutex ReleaseSRWLockExclusive ReleaseSRWLockShared ReleaseSemaphore RemoveDirectoryW ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetConsoleMode SetConsoleTextAttribute SetDllDirectoryA SetEvent SetHandleInformation SetLastError SetProcessAffinityMask SetSystemTime SetThreadContext SetThreadErrorMode SetThreadGroupAffinity SetThreadPriority SetUnhandledExceptionFilter SignalObjectAndWait Sleep SleepConditionVariableCS SleepConditionVariableSRW SuspendThread SwitchToFiber SwitchToThread SystemTimeToFileTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnmapViewOfFile UnregisterWait VirtualAlloc VirtualFree VirtualLock VirtualProtect VirtualQuery VirtualUnlock WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile __C_specific_handler lstrcmpiW

msimg32

AlphaBlend

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-convert-l1-1-0

atof atoi mbrtowc mbsrtowcs mbstowcs strtol strtoll strtoul strtoull strtoumax wcrtomb wcstombs wcstombs_s wcstoul

api-ms-win-crt-environment-l1-1-0

__p__environ _wgetcwd _wgetenv getenv getenv_s

api-ms-win-crt-filesystem-l1-1-0

_access _chmod _findclose _findfirst64i32 _findnext64i32 _fstat64 _fstat64 _fstat64i32 _fstat64i32 _fullpath _lock_file _mkdir _rmdir _rmdir _mkdir _stat64 _stat64 _stat64i32 _stat64i32 _unlink _unlock_file _waccess _wchdir _unlink _wchmod _wfindfirst64i32 _wfindnext64i32 _wfullpath _wmkdir _wrename _wrmdir _wstat64 _wstat64i32 _wunlink rename

api-ms-win-crt-heap-l1-1-0

_aligned_free _aligned_malloc _aligned_realloc _set_new_mode calloc free malloc realloc

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func _configthreadlocale _create_locale _free_locale localeconv setlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr _fdopen _hypot acos acosf asin asinf asinhf atan atan2 atan2f atanf cbrt cbrtf ceil ceilf cos cosf cosh erf erff exp exp2 exp2f expf expm1 fabs floor floorf fmax fmaxf fmin fminf fmod frexp hypot llround log log10 log10f log1p log1pf log2 log2f logf lrint lrintf lround lroundf modf nextafter pow powf round roundf sin sinf sinh sinhf sqrt sqrtf tan tanf tanh tanhf trunc

api-ms-win-crt-multibyte-l1-1-0

_mbsrchr

api-ms-win-crt-private-l1-1-0

__intrinsic_setjmp longjmp memchr memcmp memcpy memmove strchr strrchr strstr wcsrchr wcsstr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _assert _beginthreadex _cexit _configure_narrow_argv _crt_atexit _endthreadex _errno _exit _get_errno _initialize_narrow_environment _getpid _set_app_type _initterm _initterm_e _register_thread_local_exe_atexit_callback _set_errno _set_invalid_parameter_handler _wassert abort exit perror raise signal strerror strerror_s

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf __stdio_common_vsprintf __stdio_common_vswprintf _chsize_s _close _close _dup _dup2 _fileno _fileno _fseeki64 _fseeki64 _ftelli64 _ftelli64 _get_osfhandle _getmaxstdio _isatty _kbhit _isatty _locking _lseeki64 _lseeki64 _open _open _open_osfhandle _read _setmaxstdio _setmode _setmode _sopen _wfopen _wopen _write _write _wsopen fclose feof ferror fflush fgetc fgets fopen fopen_s fputc fputs fputwc fread fseek ftell fwrite getc getchar getwc putc putchar puts putwc rewind setvbuf ungetc ungetwc

api-ms-win-crt-string-l1-1-0

_strdup _stricmp _strdup _stricmp _strnicmp _strnicmp _wcsdup _wcsdup _wcsnicmp isalnum isalpha isblank isdigit isprint isspace isupper iswctype isxdigit mbrlen memset strcat strcmp strcoll strcpy strcpy_s strcspn strlen strncat strncmp strncpy strncpy_s strnlen strpbrk strspn strtok strtok_s strxfrm tolower toupper towlower towupper wcscat wcscmp wcscoll wcscpy wcscpy_s wcslen wcsncpy wcsnlen wcsxfrm wctype

api-ms-win-crt-time-l1-1-0

_ftime64 _gmtime64 _gmtime64_s _localtime64 _localtime64_s _mktime64 _time32 _time64 _wutime64 clock strftime wcsftime

api-ms-win-crt-utility-l1-1-0

bsearch div qsort rand rand_s srand

ncrypt

NCryptDecrypt NCryptDeleteKey NCryptFreeObject NCryptGetProperty NCryptOpenKey NCryptOpenStorageProvider NCryptSignHash

ole32

CLSIDFromString CoCreateInstance CoGetMalloc CoInitialize CoInitializeEx CoTaskMemAlloc CoTaskMemFree CoUninitialize CreateBindCtx OleLoadFromStream OleSaveToStream PropVariantClear StringFromCLSID StringFromGUID2

oleaut32

OleCreatePropertyFrame

shell32

CommandLineToArgvW SHGetKnownFolderPath SHGetSpecialFolderPathA

shlwapi

SHCreateStreamOnFileA

user32

AdjustWindowRectEx BeginPaint CopyIcon CreateWindowExA DefWindowProcA DestroyCursor DestroyWindow DispatchMessageA DrawIcon EndPaint EnumDisplayMonitors EnumWindows FillRect FindWindowW FrameRect GetClassNameW GetClientRect GetCursorInfo GetDC GetDesktopWindow GetForegroundWindow GetIconInfo GetMessageA GetProcessWindowStation GetSystemMetrics GetUserObjectInformationW GetWindowLongPtrA GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId IsIconic IsWindowVisible LoadCursorA MapWindowPoints MessageBoxW MonitorFromWindow PeekMessageA PostThreadMessageA ReleaseDC SendMessageA SetLayeredWindowAttributes SetWindowLongPtrA SetWindowRgn ShowWindow SystemParametersInfoA TranslateMessage

avicap32

capCreateCaptureWindowA capGetDriverDescriptionA

winmm

waveInAddBuffer waveInClose waveInGetDevCapsW waveInGetNumDevs waveInOpen waveInPrepareHeader waveInReset waveInStart waveInStop waveInUnprepareHeader waveOutClose waveOutGetDevCapsW waveOutGetNumDevs waveOutOpen waveOutPrepareHeader waveOutUnprepareHeader waveOutWrite

ws2_32

WSACleanup WSACloseEvent WSACreateEvent WSAEventSelect WSAGetLastError WSAGetOverlappedResult WSAIoctl WSARecvFrom WSAResetEvent WSASendTo WSASetLastError WSASocketA WSAStartup WSAStringToAddressA WSAWaitForMultipleEvents __WSAFDIsSet accept bind closesocket connect freeaddrinfo getaddrinfo gethostbyaddr gethostbyname gethostname getnameinfo getpeername getservbyname getservbyport getsockname getsockopt htonl htons inet_addr inet_ntoa inet_ntop inet_pton ioctlsocket listen ntohl ntohs recv recvfrom select send sendto setsockopt shutdown socket

_pixman_internal_only_get_implementation pixman_add_trapezoids pixman_add_traps pixman_add_triangles pixman_blt pixman_composite_glyphs pixman_composite_glyphs_no_mask pixman_composite_trapezoids pixman_composite_triangles pixman_compute_composite_region pixman_disable_out_of_bounds_workaround pixman_edge_init pixman_edge_step pixman_f_transform_bounds pixman_f_transform_from_pixman_transform pixman_f_transform_init_identity pixman_f_transform_init_rotate pixman_f_transform_init_scale pixman_f_transform_init_translate pixman_f_transform_invert pixman_f_transform_multiply pixman_f_transform_point pixman_f_transform_point_3d pixman_f_transform_rotate pixman_f_transform_scale pixman_f_transform_translate pixman_fill pixman_format_supported_destination pixman_format_supported_source pixman_glyph_cache_create pixman_glyph_cache_destroy pixman_glyph_cache_freeze pixman_glyph_cache_insert pixman_glyph_cache_lookup pixman_glyph_cache_remove pixman_glyph_cache_thaw pixman_glyph_get_extents pixman_glyph_get_mask_format pixman_image_composite pixman_image_composite32 pixman_image_composite64f pixman_image_create_bits pixman_image_create_bits_no_clear pixman_image_create_conical_gradient pixman_image_create_linear_gradient pixman_image_create_radial_gradient pixman_image_create_solid_fill pixman_image_fill_boxes pixman_image_fill_rectangles pixman_image_get_component_alpha pixman_image_get_data pixman_image_get_depth pixman_image_get_destroy_data pixman_image_get_format pixman_image_get_height pixman_image_get_stride pixman_image_get_width pixman_image_ref pixman_image_set_accessors pixman_image_set_alpha_map pixman_image_set_clip_region pixman_image_set_clip_region32 pixman_image_set_clip_region64f pixman_image_set_component_alpha pixman_image_set_destroy_function pixman_image_set_dither pixman_image_set_dither_offset pixman_image_set_filter pixman_image_set_has_client_clip pixman_image_set_indexed pixman_image_set_repeat pixman_image_set_source_clipping pixman_image_set_transform pixman_image_unref pixman_line_fixed_edge_init pixman_rasterize_edges pixman_rasterize_trapezoid pixman_region32_clear pixman_region32_contains_point pixman_region32_contains_pointf pixman_region32_contains_rectangle pixman_region32_copy pixman_region32_empty pixman_region32_equal pixman_region32_extents pixman_region32_fini pixman_region32_init pixman_region32_init_from_image pixman_region32_init_rect pixman_region32_init_rectf pixman_region32_init_rects pixman_region32_init_with_extents pixman_region32_intersect pixman_region32_intersect_rect pixman_region32_intersect_rectf pixman_region32_inverse pixman_region32_n_rects pixman_region32_not_empty pixman_region32_rectangles pixman_region32_reset pixman_region32_selfcheck pixman_region32_subtract pixman_region32_translate pixman_region32_translatef pixman_region32_union pixman_region32_union_rect pixman_region32_union_rectf pixman_region64f_clear pixman_region64f_contains_point pixman_region64f_contains_pointf pixman_region64f_contains_rectangle pixman_region64f_copy pixman_region64f_empty pixman_region64f_equal pixman_region64f_extents pixman_region64f_fini pixman_region64f_init pixman_region64f_init_from_image pixman_region64f_init_rect pixman_region64f_init_rectf pixman_region64f_init_rects pixman_region64f_init_with_extents pixman_region64f_intersect pixman_region64f_intersect_rect pixman_region64f_intersect_rectf pixman_region64f_inverse pixman_region64f_n_rects pixman_region64f_not_empty pixman_region64f_rectangles pixman_region64f_reset pixman_region64f_selfcheck pixman_region64f_subtract pixman_region64f_translate pixman_region64f_translatef pixman_region64f_union pixman_region64f_union_rect pixman_region64f_union_rectf pixman_region_clear pixman_region_contains_point pixman_region_contains_pointf pixman_region_contains_rectangle pixman_region_copy pixman_region_empty pixman_region_equal pixman_region_extents pixman_region_fini pixman_region_init pixman_region_init_from_image pixman_region_init_rect pixman_region_init_rectf pixman_region_init_rects pixman_region_init_with_extents pixman_region_intersect pixman_region_intersect_rect pixman_region_intersect_rectf pixman_region_inverse pixman_region_n_rects pixman_region_not_empty pixman_region_rectangles pixman_region_reset pixman_region_selfcheck pixman_region_set_static_pointers pixman_region_subtract pixman_region_translate pixman_region_translatef pixman_region_union pixman_region_union_rect pixman_region_union_rectf pixman_sample_ceil_y pixman_sample_floor_y pixman_transform_bounds pixman_transform_from_pixman_f_transform pixman_transform_init_identity pixman_transform_init_rotate pixman_transform_init_scale pixman_transform_init_translate pixman_transform_invert pixman_transform_is_identity pixman_transform_is_int_translate pixman_transform_is_inverse pixman_transform_is_scale pixman_transform_multiply pixman_transform_point pixman_transform_point_31_16 pixman_transform_point_31_16_3d pixman_transform_point_31_16_affine pixman_transform_point_3d pixman_transform_rotate pixman_transform_scale pixman_transform_translate pixman_version pixman_version_string

Name

.text

Size

80.4MB

Virtual Size

80.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

195KB

Virtual Size

195KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

13.5MB

Virtual Size

13.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1000KB

Virtual Size

1000KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

11.4MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

297KB

Virtual Size

297KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

vibe-server.exe

IMPHASH 242498463b6045d755affe99511e8bc8
SHA256 285b2f24046ffc11675f9cab4da06639a8fa94e275a57dff2225c7a6411841c6
MD5 7069ecef645ac4a34d9c4c5d36ef7630
SHA1 e9286d769f6d1f0b87b5f38d9326dd0030d734b4
SHA512 e6e7d72177d825d476482e932152d2a68be86c7a9fef7fa220f02c1d5b28d3b86ded20ca877b2fe8a79a76fe8f2f4f10b307c39f37cd19351ea0aa849631cdeb
SSDEEP 196608:8P/dek08V83q2UizkMPupo+oc4kXyJrucwBkCdRrYT5jde5pOXmUX5s30QqRpUkZ:I1ek08y4M3689wz25jps30QqRpU4
TLSH
T1E2F7A515FDF29F37EC2A467D81F76110B92CE09CAB52C757221CB63876527306AA722C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

ff:61:46:4c:3d:be:e6:e2:1b:89:a5:17:79:67:ec:15:a6:fd:47:f5:b6:1c:03:69:ec:15:e4:05:86:03:08:90

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Yaakov Kolani,O=Yaakov Kolani,L=Kiryat Arba,C=IL

Chains

Sep 5, 2026

CN=Yaakov Kolani,O=Yaakov Kolani,L=Kiryat Arba,C=IL

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1c:cf:9d:67:cd:e2:19:ff:12:d9:9a:ff:36:82:e5:a7

Issuer

CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 7, 2019 - Mar 3, 2034

Subject

CN=Yaakov Kolani,O=Yaakov Kolani,L=Kiryat Arba,C=IL

Serial Number

5d:ae:e5:4e:41:8c:8b:c0:65:d4:5d:19:ea:50:e4:d3

Issuer

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 24, 2026 - Feb 17, 2027

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Minor OS version

Major OS version

Entry point

10730480

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

vibe_server.pdb

bcryptprimitives

ProcessPrng

kernel32

FindFirstFileW GlobalMemoryStatusEx K32GetPerformanceInfo CloseHandle VirtualQueryEx GetProcessTimes GetExitCodeProcess GetSystemTimes GetProcessIoCounters AcquireSRWLockShared GetProcessHeap ReadProcessMemory ReleaseSRWLockShared FormatMessageA HeapFree SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetProcAddress GetModuleHandleW HeapAlloc CreateToolhelp32Snapshot GetCurrentProcessId Process32FirstW Process32NextW OpenProcess WaitForSingleObject GetLastError LocalFree CreateEventW WakeAllConditionVariable GetConsoleScreenBufferInfo SetConsoleTextAttribute SetThreadAffinityMask SetThreadInformation SetThreadPriority GetCurrentThread LoadLibraryW GetModuleFileNameW InitOnceExecuteOnce LoadLibraryA AcquireSRWLockExclusive CancelIoEx WriteFile GetOverlappedResult ReadFile GetQueuedCompletionStatusEx PostQueuedCompletionStatus SetFileCompletionNotificationModes CreateIoCompletionPort MoveFileExW SetConsoleCtrlHandler ReleaseSRWLockExclusive FormatMessageW GetCurrentProcess DuplicateHandle CreateFileW GetConsoleMode SetConsoleMode SetNamedPipeHandleState GetSystemInfo GetFileAttributesExW CreateFile2 AreFileApisANSI FreeLibrary SetHandleInformation SleepConditionVariableSRW FindNextFileW GetTempPathW GetModuleHandleA WaitForMultipleObjects GetFileType IsThreadAFiber FlsSetValue GetModuleHandleExW FlsAlloc FlsFree GetFileAttributesW GetConsoleOutputCP WriteConsoleW GetEnvironmentVariableW DeleteFileW GetLocaleInfoEx ReleaseMutex CreateMutexA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread ExitProcess FindClose FindFirstFileExW lstrlenW GetCommandLineW GetCurrentDirectoryW AddVectoredExceptionHandler SetFilePointerEx CreateDirectoryW GetEnvironmentStringsW CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFileInformationByHandleEx GetFileInformationByHandle SetFileTime CancelIo GetSystemTimePreciseAsFileTime WriteFileEx SleepEx ReadFileEx CreateThread HeapReAlloc GetStdHandle SetFileInformationByHandle GetCurrentThreadId GetFullPathNameW SetLastError FreeEnvironmentStringsW CompareStringOrdinal SetErrorMode MultiByteToWideChar QueryPerformanceFrequency QueryPerformanceCounter SetThreadStackGuarantee GetFinalPathNameByHandleW

advapi32

OpenProcessToken GetTokenInformation GetLengthSid IsValidSid RegCloseKey CopySid RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegCreateKeyTransactedW RegOpenKeyTransactedW RegOpenKeyExA RegQueryValueExA

ntdll

NtCreateFile NtReadFile NtCancelIoFileEx RtlLookupFunctionEntry NtDeviceIoControlFile RtlVirtualUnwind NtWriteFile NtOpenFile NtCreateNamedPipeFile RtlGetVersion NtQueryInformationProcess RtlCaptureContext RtlNtStatusToDosError

pdh

PdhGetFormattedCounterValue PdhAddEnglishCounterW PdhRemoveCounter PdhEnumObjectsW PdhOpenQueryW PdhCollectQueryData PdhCloseQuery

powrprof

CallNtPowerInformation

psapi

GetModuleFileNameExW GetProcessMemoryInfo

shell32

CommandLineToArgvW

oleaut32

GetErrorInfo

ws2_32

closesocket WSASocketW listen WSAIoctl WSAGetLastError send shutdown recv connect ioctlsocket WSASend accept getsockopt getsockname getpeername bind setsockopt WSAStartup WSACleanup getaddrinfo freeaddrinfo

secur32

DecryptMessage EncryptMessage ApplyControlToken QueryContextAttributesW FreeCredentialsHandle DeleteSecurityContext FreeContextBuffer InitializeSecurityContextW AcceptSecurityContext AcquireCredentialsHandleA

crypt32

CertFreeCertificateContext CertCloseStore CertDuplicateCertificateContext CertEnumCertificatesInStore CertDuplicateCertificateChain CertFreeCertificateChain CertDuplicateStore CertAddCertificateContextToStore CertOpenStore CertVerifyCertificateChainPolicy CertGetCertificateChain

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

msvcp140

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?width@ios_base@std@@QEAA_J_J@Z ?width@ios_base@std@@QEBA_JXZ ?setf@ios_base@std@@QEAAHHH@Z ?flags@ios_base@std@@QEBAHXZ ?good@ios_base@std@@QEBA_NXZ ??Bios_base@std@@QEBA_NXZ _Cnd_broadcast _Cnd_wait ?uncaught_exception@std@@YA_NXZ ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Throw_Cpp_error@std@@YAXH@Z _Mtx_unlock _Mtx_lock ?_Winerror_map@std@@YAHH@Z ?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Syserror_map@std@@YAPEBDH@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

vcomp140

_vcomp_fork _vcomp_barrier omp_get_num_threads omp_get_thread_num _vcomp_set_num_threads _vcomp_single_begin _vcomp_single_end

vcruntime140

__std_terminate memcpy __CxxFrameHandler3 memcmp memmove memset _purecall __std_exception_copy __std_exception_destroy _CxxThrowException __C_specific_handler __current_exception __current_exception_context

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-math-l1-1-0

expf trunc floorf ldexp lroundf sinf cosf log10 sin log2f cos sqrtf log2 ceil log exp tanhf expm1f fmaxf fminf truncf erff fmaf powf __setusermatherr ceilf round pow roundf logf fma

api-ms-win-crt-string-l1-1-0

wcslen isprint strlen strcmp

api-ms-win-crt-runtime-l1-1-0

_exit _initterm_e _initterm _get_initial_narrow_environment abort _initialize_narrow_environment __p___argc _configure_narrow_argv _cexit _c_exit _set_app_type _seh_filter_exe exit terminate _errno _register_thread_local_exe_atexit_callback _crt_atexit _register_onexit_function _initialize_onexit_table __p___argv strerror

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode _wfopen _ftelli64 __stdio_common_vsprintf _fseeki64 fread fflush _set_fmode fclose fputs __stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

_aligned_malloc realloc _callnewh _aligned_free calloc malloc _set_new_mode free

api-ms-win-crt-convert-l1-1-0

strtoull atoi strtoul

api-ms-win-crt-environment-l1-1-0

getenv _putenv_s

api-ms-win-crt-locale-l1-1-0

_configthreadlocale ___lc_codepage_func

vibe.exe

IMPHASH 41165825215065a43b480eac3a8c5b16
SHA256 53c0103662048966adca0c7bbae8499efe622cce4198ee08e7eb76eb6ae426a0
MD5 c8ebd1ab5dad4ce25e154bf6bfc7a72d
SHA1 cf1778415ff4e031fcc47c368e472857ba9171bb
SHA512 ce10b1d8d39e601f495b2ee7c770281591978bdf8616b6ba92662fcf75411b9aeed8253a4974bdace1b6f188a2ef96bfb463e7f78580ac43a504386d371b1b1b
SSDEEP 196608:L1iC7Fn79xYAcT8mbQOUwakfOZk5Pq9MrvUaHuS0WX:L1h9OAcTpbQOUhkfcklq9MrvZF0M
TLSH
T15BF68D03F66181E8C06EC5B8D35AA233EB76B88D093472EB5BD44B212F66F506F1D749
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

90:78:04:33:c5:3d:f4:32:bf:9c:7f:be:79:ff:8e:01:59:66:a4:c1:92:f7:ae:77:1d:ca:c5:10:1a:74:1e:74

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Yaakov Kolani,O=Yaakov Kolani,L=Kiryat Arba,C=IL

Chains

Sep 5, 2026

CN=Yaakov Kolani,O=Yaakov Kolani,L=Kiryat Arba,C=IL

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1c:cf:9d:67:cd:e2:19:ff:12:d9:9a:ff:36:82:e5:a7

Issuer

CN=SSL.com Root Certification Authority ECC,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 7, 2019 - Mar 3, 2034

Subject

CN=Yaakov Kolani,O=Yaakov Kolani,L=Kiryat Arba,C=IL

Serial Number

5d:ae:e5:4e:41:8c:8b:c0:65:d4:5d:19:ea:50:e4:d3

Issuer

CN=SSL.com Code Signing Intermediate CA ECC R2,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 24, 2026 - Feb 17, 2027

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Minor OS version

Major OS version

Entry point

10573856

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

vibe.pdb

kernel32

TerminateProcess GetExitCodeProcess ExitProcess CreateThread SetHandleInformation QueryPerformanceCounter SleepEx IsThreadAFiber FlsSetValue FlsFree FlsAlloc WriteConsoleW WaitForSingleObject GetConsoleOutputCP GetConsoleMode GetStdHandle CreateMutexA GetCurrentProcess CreateProcessW Sleep GetProcessIoCounters ReleaseSemaphore CreateSemaphoreW WaitForSingleObjectEx DuplicateHandle CreateWaitableTimerExW SetWaitableTimer OpenProcess GetCurrentProcessId FreeLibrary WaitForMultipleObjectsEx CreateEventW SetEvent GetCurrentThread SetNamedPipeHandleState SetThreadStackGuarantee CreateMutexW QueryPerformanceFrequency CreateEventA GetProcessTimes SetLastError AttachConsole ReleaseMutex WaitForMultipleObjects WakeAllConditionVariable GetCurrentThreadId GetSystemTimes IsWow64Process SleepConditionVariableSRW LoadLibraryExW OutputDebugStringW OutputDebugStringA GetProcAddress LoadLibraryExA FlsGetValue EncodePointer FormatMessageW SwitchToThread SetThreadExecutionState GetSystemTimeAsFileTime TlsSetValue GetModuleHandleA TlsGetValue TlsAlloc InitOnceExecuteOnce AcquireSRWLockShared InitializeSListHead RtlUnwindEx GetBinaryTypeW FindClose AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive InitializeSRWLock GlobalFree RtlPcToFileHeader GlobalLock GlobalSize WideCharToMultiByte GlobalUnlock CopyFileExW RaiseException GetOverlappedResult GetModuleHandleW VirtualQueryEx ReadProcessMemory HeapReAlloc Process32NextW GetUserDefaultUILanguage LCIDToLocaleName SetUnhandledExceptionFilter AddVectoredExceptionHandler SetFilePointerEx Process32FirstW CreateToolhelp32Snapshot GetLastError GlobalAlloc GetSystemTimePreciseAsFileTime MultiByteToWideChar GetUserPreferredUILanguages FindNextFileW RtlCaptureContext RemoveVectoredExceptionHandler lstrlenW DeviceIoControl CreateSymbolicLinkW MoveFileExW GetFinalPathNameByHandleW DeleteFileW RemoveDirectoryW GetTempPathW GetQueuedCompletionStatusEx PostQueuedCompletionStatus ReadFile CreateIoCompletionPort SetFileCompletionNotificationModes WriteFile CancelIoEx GetModuleFileNameW GetComputerNameExW GetFileAttributesW GetTimeZoneInformationForYear GetWindowsDirectoryW InitializeCriticalSectionEx GetSystemDirectoryW HeapAlloc CloseHandle CompareStringOrdinal CreateDirectoryW FlushFileBuffers GetFileInformationByHandleEx GetFileInformationByHandle HeapFree LocalFree FindFirstFileExW LoadLibraryA SetFileInformationByHandle SetFileTime GetProcessHeap LoadLibraryW GetFullPathNameW CreateFileW ReadDirectoryChangesW CancelIo ReadFileEx WriteFileEx GetSystemInfo GetNativeSystemInfo GetModuleHandleExW RtlLookupFunctionEntry RtlVirtualUnwind DeleteCriticalSection SetEnvironmentVariableW GetCommandLineW FreeEnvironmentStringsW GetEnvironmentStringsW GetEnvironmentVariableW GetCurrentDirectoryW

advapi32

RegEnumKeyExW GetLengthSid RegDeleteValueW RegCloseKey IsValidSid GetTokenInformation OpenProcessToken SystemFunction036 RegCreateKeyTransactedW RegGetValueW CopySid RegOpenKeyExW RegOpenKeyTransactedW RevertToSelf ImpersonateAnonymousToken RegQueryValueExW RegCreateKeyExW RegSetValueExW RegDeleteTreeW EventRegister EventUnregister EventSetInformation EventWriteTransfer

combase

CoTaskMemFree CoIncrementMTAUsage CoTaskMemAlloc CoCreateFreeThreadedMarshaler

user32

GetTouchInputInfo CloseTouchInputHandle MonitorFromPoint GetKeyState ScreenToClient SetCapture AdjustWindowRect UpdateWindow InvalidateRect EnumDisplayMonitors RegisterTouchWindow IsWindowEnabled EnableWindow UnregisterHotKey MonitorFromRect RedrawWindow SetParent GetWindow RegisterRawInputDevices ReleaseCapture ToUnicodeEx GetKeyboardState GetMonitorInfoW ChangeDisplaySettingsExW InvalidateRgn RegisterClassExW GetMenuItemInfoW RegisterClassW GetRawInputData SetTimer OpenClipboard KillTimer SetClipboardData PostMessageW RegisterClipboardFormatW CloseClipboard GetKeyboardLayout GetWindowLongPtrW GetParent FindWindowExW ValidateRect SetCursorPos SetCursor LoadCursorW SendInput MapVirtualKeyExW IsWindow IsIconic SetPropW GetUpdateRect MapVirtualKeyW ClipCursor GetClipCursor VkKeyScanExW ShowCursor SetWindowTextW GetWindowTextLengthW SetWindowDisplayAffinity SetFocus EmptyClipboard DestroyIcon GetWindowPlacement SetWindowPlacement AdjustWindowRectEx GetMenu GetWindowLongW SetWindowLongW GetSystemMenu RegisterWindowMessageA GetAsyncKeyState RegisterHotKey FlashWindowEx IsClipboardFormatAvailable MonitorFromWindow GetMessageW TranslateMessage DispatchMessageW DestroyWindow SetWindowLongPtrW SetWindowRgn DefWindowProcW GetSystemMetrics PostThreadMessageW PeekMessageW MsgWaitForMultipleObjectsEx SetMenuItemInfoW GetDC ReleaseDC IsProcessDPIAware TrackPopupMenu SetForegroundWindow GetCursorPos GetWindowRect GetClientRect GetMenuBarInfo PostQuitMessage ShowWindow SystemParametersInfoA SetMenu CreateIcon RemoveMenu CheckMenuItem DrawMenuBar EnableMenuItem CreatePopupMenu CreateMenu AppendMenuW InsertMenuW CreateAcceleratorTableW DestroyAcceleratorTable DestroyMenu ClientToScreen TrackMouseEvent DrawTextW FillRect TranslateAcceleratorW SystemParametersInfoW SendMessageW DrawIconEx GetWindowTextW IsWindowVisible EnumWindows GetWindowThreadProcessId GetForegroundWindow GetClipboardData GetActiveWindow MapWindowPoints OffsetRect GetWindowDC EnumChildWindows DispatchMessageA GetMessageA SetWindowPos ChangeWindowMessageFilterEx CreateWindowExW FindWindowW

oleaut32

SafeArrayUnaccessData SysFreeString GetErrorInfo SetErrorInfo VariantClear SysAllocStringLen SafeArrayAccessData SysStringLen

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

ole32

CoSetProxyBlanket StringFromIID RegisterDragDrop CoInitialize CoInitializeSecurity OleInitialize CoInitializeEx RevokeDragDrop PropVariantClear CoCreateInstance CoUninitialize

ws2_32

ioctlsocket sendto WSAGetLastError recvfrom getsockopt connect send getsockname setsockopt recv WSASocketW bind closesocket WSAStartup WSACleanup getaddrinfo freeaddrinfo WSASendMsg getpeername shutdown socket WSASend WSAIoctl

comctl32

SetWindowSubclass TaskDialogIndirect DefSubclassProc RemoveWindowSubclass

shlwapi

SHCreateMemStream

iphlpapi

NotifyRouteChange2 GetAdaptersAddresses SendARP GetIfEntry2 CancelMibChangeNotify2 NotifyUnicastIpAddressChange

shell32

SHCreateItemFromParsingName CommandLineToArgvW DragQueryFileW ILCreateFromPathW DragFinish SHAppBarMessage Shell_NotifyIconW ShellExecuteW Shell_NotifyIconGetRect ShellExecuteExW ILFree SHGetKnownFolderPath SHOpenFolderAndSelectItems SHParseDisplayName

mmdevapi

ActivateAudioInterfaceAsync

ntdll

NtCreateFile NtCancelIoFileEx NtDeviceIoControlFile RtlGetVersion NtWriteFile NtReadFile NtOpenFile NtQueryInformationProcess RtlNtStatusToDosError NtCreateNamedPipeFile

powrprof

CallNtPowerInformation

pdh

PdhRemoveCounter PdhCloseQuery

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

bcryptprimitives

ProcessPrng

dwmapi

DwmGetWindowAttribute DwmEnableBlurBehindWindow DwmSetWindowAttribute

gdi32

CombineRgn CreateRectRgn BitBlt GetDeviceCaps CreateCompatibleDC CreateDIBSection SelectObject DeleteDC CreateSolidBrush SetBkMode DeleteObject SetTextColor

secur32

AcceptSecurityContext AcquireCredentialsHandleA FreeContextBuffer InitializeSecurityContextW EncryptMessage ApplyControlToken DecryptMessage DeleteSecurityContext FreeCredentialsHandle QueryContextAttributesW

psapi

GetProcessMemoryInfo GetModuleFileNameExW

crypt32

CertGetCertificateChain CertDuplicateStore CertAddEncodedCertificateToStore CertEnumCertificatesInStore CertCloseStore CertVerifyCertificateChainPolicy CertFreeCertificateChainEngine CertAddCertificateContextToStore CertFreeCertificateChain CertSetCertificateContextProperty CertFreeCertificateContext CertDuplicateCertificateContext CertOpenStore CertCreateCertificateChainEngine CertDuplicateCertificateChain

bcrypt

BCryptGenRandom

api-ms-win-crt-string-l1-1-0

strcpy_s wcslen strlen wcscmp _wcsicmp strcmp

api-ms-win-crt-math-l1-1-0

round trunc __setusermatherr floor fmod pow cbrt roundf exp

api-ms-win-crt-stdio-l1-1-0

__p__commode __acrt_iob_func __stdio_common_vsscanf __stdio_common_vsprintf freopen __stdio_common_vfprintf _set_fmode _setmode fwrite ftell fseek fread _fileno fopen fgets ferror feof fclose fflush

api-ms-win-crt-runtime-l1-1-0

terminate abort strerror _crt_atexit _seh_filter_exe _register_onexit_function _invoke_watson _wassert _errno signal _set_app_type _set_invalid_parameter_handler _configure_narrow_argv _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _initialize_narrow_environment _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_onexit_table

api-ms-win-crt-convert-l1-1-0

_wtoi _ultow_s strtol wcstol

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-heap-l1-1-0

calloc realloc _set_new_mode malloc free _callnewh

api-ms-win-crt-utility-l1-1-0

bsearch

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Name

.text

Size

10.3MB

Virtual Size

10.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

33KB

Virtual Size

55KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

220KB

Virtual Size

220KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

55KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

86KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

vibe_3.2.2_x64-setup.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/NSISdl.dll

advapi32

wsock32

user32

kernel32

generic

$PLUGINSDIR/StartMenu.dll

kernel32

user32

gdi32

shell32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/nsExec.dll

advapi32

user32

kernel32

generic

$PLUGINSDIR/nsis_tauri_utils.dll

kernel32

advapi32

user32

shell32

generic

ffmpeg.exe

advapi32

avrt

bcrypt

crypt32

gdi32

iphlpapi

kernel32

msimg32

api-ms-win-crt-conio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

ncrypt

ole32

oleaut32

shell32

shlwapi