bundle.msixbundle
- SHA256 3f740e7019e11ff455af374945edb25413e0567c1eb6a16afefb23a496545649
Overview
overview
8Static
static
1AppPackage...4.appx
windows11-21h2-x64
AppxBlockMap.xml
windows11-21h2-x64
4AppxManifest.xml
windows11-21h2-x64
4AppxMetada...ty.cat
windows11-21h2-x64
8AppxSignature.p7x
windows11-21h2-x64
3ExplorerHooks.dll
windows11-21h2-x64
1ExplorerTAP.dll
windows11-21h2-x64
1ProgramLog.dll
windows11-21h2-x64
1TranslucentTB.exe
windows11-21h2-x64
Xaml.dll
windows11-21h2-x64
1[Content_Types].xml
windows11-21h2-x64
4resources.pri
windows11-21h2-x64
3AppPackage...0.appx
windows11-21h2-x64
AppxBlockMap.xml
windows11-21h2-x64
4AppxManifest.xml
windows11-21h2-x64
4AppxSignature.p7x
windows11-21h2-x64
3[Content_Types].xml
windows11-21h2-x64
4resources.pri
windows11-21h2-x64
3AppPackage...4.appx
windows11-21h2-x64
AppxBlockMap.xml
windows11-21h2-x64
4AppxManifest.xml
windows11-21h2-x64
4AppxMetada...ty.cat
windows11-21h2-x64
8AppxSignature.p7x
windows11-21h2-x64
3ExplorerHooks.dll
windows11-21h2-x64
1ExplorerTAP.dll
windows11-21h2-x64
1ProgramLog.dll
windows11-21h2-x64
1TranslucentTB.exe
windows11-21h2-x64
1Xaml.dll
windows11-21h2-x64
1AppxBlockMap.xml
windows11-21h2-x64
4AppxMetada...st.xml
windows11-21h2-x64
4AppxSignature.p7x
windows11-21h2-x64
3[Content_Types].xml
windows11-21h2-x64
4Static task
static1
Behavioral task
behavioral1
Sample
AppPackage_2026.2.0.0_ARM64.appx
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
AppxBlockMap.xml
Resource
win11-20260911-en
windows11-21h2-x64
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
AppxManifest.xml
Resource
win11-20260911-en
windows11-21h2-x64
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
AppxMetadata/CodeIntegrity.cat
Resource
win11-20260911-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
AppxSignature.p7x
Resource
win11-20260911-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
ExplorerHooks.dll
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
ExplorerTAP.dll
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
ProgramLog.dll
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
TranslucentTB.exe
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Xaml.dll
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
[Content_Types].xml
Resource
win11-20260911-en
windows11-21h2-x64
10 signatures
150 seconds
Behavioral task
behavioral12
Sample
resources.pri
Resource
win11-20260911-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral13
Sample
AppPackage_2026.2.0.0_scale-400.appx
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
AppxBlockMap.xml
Resource
win11-20260911-en
windows11-21h2-x64
10 signatures
150 seconds
Behavioral task
behavioral15
Sample
AppxManifest.xml
Resource
win11-20260911-en
windows11-21h2-x64
10 signatures
150 seconds
Behavioral task
behavioral16
Sample
AppxSignature.p7x
Resource
win11-20260911-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral17
Sample
[Content_Types].xml
Resource
win11-20260911-en
windows11-21h2-x64
10 signatures
150 seconds
Behavioral task
behavioral18
Sample
resources.pri
Resource
win11-20260911-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral19
Sample
AppPackage_2026.2.0.0_x64.appx
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
AppxBlockMap.xml
Resource
win11-20260911-en
windows11-21h2-x64
10 signatures
150 seconds
Behavioral task
behavioral21
Sample
AppxManifest.xml
Resource
win11-20260911-en
windows11-21h2-x64
10 signatures
150 seconds
Behavioral task
behavioral22
Sample
AppxMetadata/CodeIntegrity.cat
Resource
win11-20260911-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
AppxSignature.p7x
Resource
win11-20260911-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral24
Sample
ExplorerHooks.dll
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral25
Sample
ExplorerTAP.dll
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
ProgramLog.dll
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
TranslucentTB.exe
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
Xaml.dll
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
AppxBlockMap.xml
Resource
win11-20260911-en
windows11-21h2-x64
10 signatures
150 seconds
Behavioral task
behavioral30
Sample
AppxMetadata/AppxBundleManifest.xml
Resource
win11-20260911-en
windows11-21h2-x64
10 signatures
150 seconds
Behavioral task
behavioral31
Sample
AppxSignature.p7x
Resource
win11-20260911-en
windows11-21h2-x64
4 signatures
150 seconds
General
- Target bundle.msixbundle
- Size 4.0MB
- Sample261003-pv82nsdb97
- SHA256 3f740e7019e11ff455af374945edb25413e0567c1eb6a16afefb23a496545649
- MD5 a28d78e7fcc97002c2dbfb42c582fd24
- SHA1 2f4553836345cba9e212f8142bd350844648536f
- SHA512 0bc8c5e61ca15f292e1210c648e07d4f123e65906e0ebf25a175dfdbc5c483c8c7ea83014ccb02a61728665ad4eb9029181a82cef8c015b92e143614d52941ca
- SSDEEP 98304:andEsINI98IVtbNUnM6N74P9FBUTJqCLXDW8jQ:Ot38IVvUnGBU5LTW8jQ
- TLSH T16316332D6DA09560F56DC93505E36B699E27C24353E0F83537CC498DFF30EAA4888E8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
bundle.msixbundle.zip 4.0MB
-
AppPackage_2026.2.0.0_ARM64.msix.appx 1.7MB
-
AppxBlockMap.xml.xml 6KB
-
AppxManifest.xml4KB
-
AppxMetadata/CodeIntegrity.cat12KB
-
AppxSignature.p7x11KB
-
Assets/SmallTile.png.png 12KB
-
Assets/SplashScreen.jpeg.jpg 159KB
-
Assets/Square150x150Logo.png.png 12KB
-
Assets/Square44x44Logo.altform-lightunplated.png.png 12KB
-
Assets/Square44x44Logo.altform-unplated.png.png 12KB
-
Assets/Square44x44Logo.png.png 12KB
-
Assets/Square44x44Logo.targetsize-256.png.png 15KB
-
Assets/Square44x44Logo.targetsize-256_altform-lightunplated.png.png 15KB
-
Assets/Square44x44Logo.targetsize-256_altform-unplated.png.png 15KB
-
Assets/StoreLogo.png.png 14KB
-
Assets/Wide310x150Logo.jpeg.jpg 90KB
-
ExplorerHooks.dll178KB
-
ExplorerTAP.dll523KB
-
ProgramLog.dll393KB
-
TranslucentTB.exe858KB
-
Xaml.dll1.3MB
-
[Content_Types].xml.xml 792B
-
resources.pri112KB
-
AppPackage_2026.2.0.0_scale-400.msix.appx 519KB
-
AppxBlockMap.xml.xml 1KB
-
AppxManifest.xml.xml 774B
-
AppxSignature.p7x11KB
-
Assets/SmallTile.scale-400.png.png 32KB
-
Assets/SplashScreen.scale-400.jpeg.jpg 201KB
-
Assets/Square150x150Logo.scale-400.png.png 41KB
-
Assets/StoreLogo.scale-400.png.png 31KB
-
Assets/Wide310x150Logo.scale-400.jpeg.jpg 198KB
-
[Content_Types].xml.xml 565B
-
resources.pri5KB
-
AppPackage_2026.2.0.0_x64.msix.appx 1.8MB
-
AppxBlockMap.xml.xml 6KB
-
AppxManifest.xml4KB
-
AppxMetadata/CodeIntegrity.cat12KB
-
AppxSignature.p7x11KB
-
Assets/SmallTile.png.png 12KB
-
Assets/SplashScreen.jpeg.jpg 159KB
-
Assets/Square150x150Logo.png.png 12KB
-
Assets/Square44x44Logo.altform-lightunplated.png.png 12KB
-
Assets/Square44x44Logo.altform-unplated.png.png 12KB
-
Assets/Square44x44Logo.png.png 12KB
-
Assets/Square44x44Logo.targetsize-256.png.png 15KB
-
Assets/Square44x44Logo.targetsize-256_altform-lightunplated.png.png 15KB
-
Assets/Square44x44Logo.targetsize-256_altform-unplated.png.png 15KB
-
Assets/StoreLogo.png.png 14KB
-
Assets/Wide310x150Logo.jpeg.jpg 90KB
-
ExplorerHooks.dll.dll 202KB
-
ExplorerTAP.dll.dll 552KB
-
ProgramLog.dll.dll 404KB
-
TranslucentTB.exe.exe 859KB
-
Xaml.dll.dll 1.1MB
-
[Content_Types].xml.xml 792B
-
resources.pri112KB
-
AppxBlockMap.xml.xml 422B
-
AppxMetadata/AppxBundleManifest.xml.xml 2KB
-
AppxSignature.p7x11KB
-
[Content_Types].xml.xml 469B
AppPackage_2026.2.0.0_ARM64.msix
- SHA256 634130222078ea96a5e4712715d38fff49f0dccd2b2cab78b13779501986142d
- MD5 d64752cc0ee3c44df08002b44412811d
- SHA1 f2ed8063faac5dc6b8e1cb196c2ce5ffd1ca6186
- SHA512 03e0ff6ad9ad393b3940e5530798b036796c388de7c96c5810c0791bcc4753bd866c1ee21773cbbd1ffd665662f3911b8c947c8bfbda1b93be3ab73307834aaa
- SSDEEP 49152:5f/3MoEotI+c3AL9uZIVKYbNUnMM7jbbA:5ndEsINI98IVtbNUnM6U
- TLSH T12785335AA9619170F118853106F2D7A5DF33C793A2D0F81133CE0E8A7F7499E5A8DB4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
N/A
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
CN=04797BBC-C7BB-462F-9B66-331C81E27C0E
Chains
Aug 31, 2026
CN=04797BBC-C7BB-462F-9B66-331C81E27C0E
CN=Microsoft Marketplace CA G 028,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=04797BBC-C7BB-462F-9B66-331C81E27C0E
Serial Number
33:00:62:5e:1e:70:bf:9d:c5:c6:7a:bb:94:00:01:00:62:5e:1e
Issuer
CN=Microsoft Marketplace CA G 028,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageKeyEncipherment
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 31, 2026 - Sep 3, 2026
Subject
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:12:44:a2:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 28, 2011 - Mar 28, 2031
Subject
CN=Microsoft Marketplace CA G 028,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:5d:9f:04:ec:95:b7:02:b4:6f:00:00:00:00:00:5d
Issuer
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 11, 2024 - Apr 11, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8900-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:22:41:d2:f6:aa:ff:c8:b5:ff:00:01:00:00:02:22
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
AppxBlockMap.xml
- SHA256 c58a49b0c944f2d332bf4b133d4f5704f8036c7f39416e4b1509f3ed801c2312
- MD5 08d92d0865cc5fd3f80a43fe5cc9bf8a
- SHA1 1c9a7fe29999821f8b85156111691d39275326af
- SHA512 ddefff75c21dfa257104f4fc3c3a4633a63efc29b3753ae941b9069232b6b840cac9ac56011e1e9611f6c55fce962b6e353658eae9679e27b9585ca6c9cf7486
- SSDEEP 192:2HwPVwgiSQ6DC+TEsBzWth82mYmkiOEbcAO92ZuA4HdySLtgBXNXfi9di:acDtQIJGfXHd3t8pfa8
- TLSH T19AE1D8A0523DFE3A826C4BFE4F69F1441C21982713676E5F9C8A85F21C6F4635E630E6
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxManifest.xml
- SHA256 2da2fa4def14cb4719075b7da4797d98e6e7992f4fd9b252e9f8ee93991ed596
- MD5 75ae3693871412de06ab01dbe5f4489b
- SHA1 032f310960a655c516c97b9756ab393cf70bb60e
- SHA512 ae0de113e899b630446b66e2db3ea107c7bc738b263e856139c213cf9aeb76d6f91a80664263ecee881354e1dd01da976f5d8aa9031893ebe73fa108c2a54810
- SSDEEP 96:EXATANPANJAN8ANNATAGtMhSnnFX6zrcDfD8kaDfD8NDfDxb2H9/KV20AJBqaKE:bEmcNME8x9dyHkVSJSE
- TLSH T1BB913356E0C80E7442719965E373A287F63D46D754E88848F8EDE90B1FB769E0233723
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxMetadata/CodeIntegrity.cat
- SHA256 a02f010dff05ee032ea278f3c00e9f2734ffef9764e2ec51c3ad0bda3c9fee9e
- MD5 3839c07f0a6b863d697dae0081731c8f
- SHA1 48ff5d1eb75dcb8c85520663f8d9c50a948400fd
- SHA512 69995e8c0752c45700eed29a20f2e73f4f5917c4750f975ca82c929b5b21d2c32108682f584d4439fbd0c2fba0f84cba5c72f6d26681f753944613691a3de7eb
- SSDEEP 192:Zqrzhr4nXEL1MiUiJFg9cbCzwgLC5tiJR5zQR3JKX01k9z3AglMC:4Z1MiUi3g9cb8P25EJR9fR9zxlMC
- TLSH T123525B858D3841C7EC8BAC5092ECEE5B7C3D17DB185090766A7BFA9409933C2FB2952D
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxSignature.p7x
- SHA256 4454efbe2f0f15c45c28d02e8f693b488bf82fd28208788439fc84ee089bba42
- MD5 d30c7b587a30ce282b7fa7fb1c08deba
- SHA1 73e1c2513dfa00c67c88c0f89ecccdd9c282cd9f
- SHA512 3ca406bad29a7ecf3a35a12838b88c0ca478d7087a832711756789955916f92694dc134ca505bbfb3da4c5af415185a8fefbe1774071b6590041f7f354a55de8
- SSDEEP 192:Gzhr4nXEL1MiUiJFg9cbCzwgLC5tiJRdznAk2K13X01k9z3Aua9S:oZ1MiUi3g9cb8P25EJRZnj2QR9z+A
- TLSH T188423AD14A7891C6DD9BBC8051ECED877C3C53C35940A1A16AB6FAC42D933CAEB2853D
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/SmallTile.png
- SHA256 fb8f43888766402cad8552dab2d0ec796a9e675b22fb7e17decc5f1239273eb3
- MD5 41ef072e24a4be8034f7ddcf7ff4c218
- SHA1 680ce1dca0b5795f2e2eff1a0d02ececa6f0a743
- SHA512 3a4f2aef77e26d2bd343e93d503374e5a6fd2bcaf622d029a1b2733c1905dbdaba85f603198cd786f2c3c78b405ba0094a3c48c84dc77181ebd6c1837af14991
- SSDEEP 192:Q5/ofkaXGaXGyM+lEpNk+Jx4OqgB+vqLAIrt8QSI1:QCbGaWelzu3Ui18Q5
- TLSH T1F042AFBEF89256C7541CC92318F8643D9A3701638E916DA431DFD8296F162FA0DDE0D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/SplashScreen.jpeg
- SHA256 2e18f60892b528de45b01a79dd07c45cbf5760539663f5fea74115dedb137cc4
- MD5 050c5f18c89e71a524f61e67f03f9138
- SHA1 3ec9081e4b96f1afcc3c792e10e287fb2f910086
- SHA512 2c31e1214fbad036467d59854c0502a9ba46e001e9214c40ce3155a5707c081d4cf7bf2e41249e17674fa46524a9a22f397345bbe1b5bd0d2a33f2d53dd8c60d
- SSDEEP 3072:tmFUkm7tGaQE1HSnjaPu7SrzEiSGQmKTrVTWE1uibQNvIs3Hoxe:thR7tvvSuPswGGQlN0NvVI4
- TLSH T15AF312CD66A18528F6A984F302723AED5B0687F3B3D8BE547B5C01E0EB818F85D5D91C
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Square150x150Logo.png
- SHA256 f19d18d33fb5891b668a7f8cec506f75326cc18fbd96f1696da2584afd864a84
- MD5 d2b13975b3133f5088c8667a9401fc75
- SHA1 0f26a92675d350c7aa7b4abf51fc1c55a324e1c7
- SHA512 fb6f447b0aa27911c7cb4cda8b4306876710d30aa2dda3543d8115fa3a769011a2af6817e169998fd3171580fa21e96456f0627d0d946ff01c8e704636af93f5
- SSDEEP 192:IgRukT6jhVtRLN7NkUbbNkD22yjNJYGR9MrTCo/ASzpXE1WF9/KYMS:IUTotBDFa62uNJY3WojXn9/KYZ
- TLSH T10B429D9CE5D0A601700CAC3915D6562F9F03C287CB9BDE0FF98D889AFF622960E415CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Square44x44Logo.altform-lightunplated.png
- SHA256 c838516295f9c3efdc44db77e7a2227b8fcf72faadba2a9989b1e5717d84d9c7
- MD5 e0d416cc8012069419554031f5c48e85
- SHA1 8d1e3a846657ac2fdebf55c056a6d0170bcbc660
- SHA512 6c98e169808814a6f618c5e7154d664ebde986041751f771720ad63e8b90d395b7e043c59a9eb15d9b44394c36ecf9056ae7093e668e63a9ef4e12b4a89781cd
- SSDEEP 192:NBBZY9wGiPHRvZ1QEiO9yqUNpzT1KdWle7naQhzSj4pkiS6VPsQ1F:N7O9wVPHRvZ2lrz1vle7LzSj9sN1F
- TLSH T1E542AE09BC723090BB1CAD8945EA02A57426D54306CF5CC979CF897F1FA83FB1A87557
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Square44x44Logo.altform-unplated.png
- SHA256 11cec4078b210ef590a6d27597997ad33efaabf5a313d0896f4311483efd78f1
- MD5 6055f44990e4275881dedd85b4f7b763
- SHA1 27e78b34ce7e86e300b1c20794c9c3ffcad7235f
- SHA512 06f8e6b70274e70346bf2599ac4b261ecc067a0a71e3d6b256d39102c10b2a5f671d3eaa5f04b7b1f6c2408efd7380546c4d919d10374955d4a481b3676a121e
- SSDEEP 192:B6TGuRHRMaDDJbLzAk5XoRqLvmO1/Q8LBwS74pk0emPQ97sQ1F:B6TGGNJfX+qb1Jt79LV1F
- TLSH T137428E29E56331C07E9C8E8E71D6C4564B3746075250EC6BB74F48A9AF307EA284BBC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Square44x44Logo.png
- SHA256 82bb920d21502e85cd961a5bfb1908d7f43139ffadfb5267c9df25664e20717b
- MD5 ba84424f4d701d413c4c39ac1ad1b3ea
- SHA1 94205a0d96a43ec9ad38d0acedfde7992e89bd0f
- SHA512 230f9662e3715a90d5ca7adb4dcbb95f3f26a1045fb17d9a184afae97ff0648f1f98d8d76eaf1d6afd5ab85a0841241331ea2961b156bfb278c059e9f1f7c614
- SSDEEP 192:3hsVHrVUKFVzBFQr1xUDPtqTPV4Vq4pk8+NGpMusQ1F:3hsVVUKDzHM1+DVW4Vq9TwZ1F
- TLSH T159429F58A9233B917129D82380DD05551A3AD217D14BFCB2F94EA8F71F602DE0D5E5F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Square44x44Logo.targetsize-256.png
- SHA256 9be741e745cd9c63537f773c0a7e3571dd7f6d955d54475d80eb6aca0fae850f
- MD5 8cb1535ae323ba7839a56df8670b6389
- SHA1 eeaf7d7d0485c1ed83a65afa6680dfbf4d90a94c
- SHA512 25640d4b4feab092fa2d95f58c2ad25c691f6a0fc0fbc9dae3efb5488c40df5c5fe6fd2e1b82168300a47766acc3960378124169a6b4f6cf62275ad5cadefd2c
- SSDEEP 384:2r0Nw7bI/H773oIzJAtI0moUl+s+rJrqtp1wMaTB4DVu:JNX/PDzJB0gl+swJrqtpYWU
- TLSH T1A862D01D3DC86561FDB9C9BACAB3A561E99491B67BBB81E915470600018AC358FCCFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Square44x44Logo.targetsize-256_altform-lightunplated.png
- SHA256 9be741e745cd9c63537f773c0a7e3571dd7f6d955d54475d80eb6aca0fae850f
- MD5 8cb1535ae323ba7839a56df8670b6389
- SHA1 eeaf7d7d0485c1ed83a65afa6680dfbf4d90a94c
- SHA512 25640d4b4feab092fa2d95f58c2ad25c691f6a0fc0fbc9dae3efb5488c40df5c5fe6fd2e1b82168300a47766acc3960378124169a6b4f6cf62275ad5cadefd2c
- SSDEEP 384:2r0Nw7bI/H773oIzJAtI0moUl+s+rJrqtp1wMaTB4DVu:JNX/PDzJB0gl+swJrqtpYWU
- TLSH T1A862D01D3DC86561FDB9C9BACAB3A561E99491B67BBB81E915470600018AC358FCCFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Square44x44Logo.targetsize-256_altform-unplated.png
- SHA256 9be741e745cd9c63537f773c0a7e3571dd7f6d955d54475d80eb6aca0fae850f
- MD5 8cb1535ae323ba7839a56df8670b6389
- SHA1 eeaf7d7d0485c1ed83a65afa6680dfbf4d90a94c
- SHA512 25640d4b4feab092fa2d95f58c2ad25c691f6a0fc0fbc9dae3efb5488c40df5c5fe6fd2e1b82168300a47766acc3960378124169a6b4f6cf62275ad5cadefd2c
- SSDEEP 384:2r0Nw7bI/H773oIzJAtI0moUl+s+rJrqtp1wMaTB4DVu:JNX/PDzJB0gl+swJrqtpYWU
- TLSH T1A862D01D3DC86561FDB9C9BACAB3A561E99491B67BBB81E915470600018AC358FCCFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/StoreLogo.png
- SHA256 813e337ee4afeebe7871dc4862b0f564fb7d0289d6853cd75ed742c2d253cf9f
- MD5 151bc7f8ec8768dd7257fd52b5c1b031
- SHA1 c76a6e54c592db99b9507b3418df630e2fbd5968
- SHA512 bbede86dc657ef53071db9e5470b9cd8676bf81a73390c93efcde9d8b97f7035374333d852a49b55dd5c446d473c6584f9bbef36b900b22f1656a1414b1bb2ec
- SSDEEP 384:XNy9S/+m9bQxIr8dxOxxR2s8xcTsfb4pE5jW:XNM8ExIOohR8x3UpCC
- TLSH T12152BFA084B230B2364CB9F571EE451D0A758A8F896439CAF0ADCD2E9F507F45CCD0B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Wide310x150Logo.jpeg
- SHA256 66d61a21ad3a52e37f23220c377aa81ea3993a35f5908a49db5ccc0295dee521
- MD5 a7059a6e09a1911e5db7b843e403368a
- SHA1 816b49a60def36887b925aa0beaa4e745fc59aa1
- SHA512 c57c832fb235311b5ef0861887373b50f2346b26c52f81883ed7b67a811569db21c0d9892f9878766f630cce9443423e348757623deeb888c006745e81faa0cc
- SSDEEP 1536:XQYOe//ApQkTnkOF+nGus8kcpNFvhn1kM89NiTJczQvaEy5J1PLwMbXjlq2rNG8N:NbKQckOwnGFcpNFtlWMTFCZ57LwMjc2Z
- TLSH T179930255ED405691EF6D0537A8F2931A23400A04AFE19B6BF1AE41DFEF700EAF94424F
- MD5 SHA1 SHA512 SSDEEP TLSH
ExplorerHooks.dll
- SHA256 8c25fce3dfa9f034b8a1f38494f6bc9b5431562db60e5fed2dcf9272fddf2c04
- MD5 29e2f9a8e22da3002a3d28ca1a1e0dff
- SHA1 2236e5876bce1e1eccd4053044675f538fc9823e
- SHA512 ef006de51abf724df3c5d0f8c1bc5ebce6326e9a798131b735d227bd1e8e5da60950d0bf5303eb5e91b79d664294dd5ee3c8262eeac5168d6a74c7216fa117d3
- SSDEEP 3072:ul/BXMywiU4yxj7KMy3b//IccZuxyYrkRv86EGO6Tu:A/BTfKZuxyLva0u
- TLSH T1EF044A916B8D2843EBC3E77CCC574D50713BBA688A30C98B7153026EED5EBC0DAB0566
- MD5 SHA1 SHA512 SSDEEP TLSH
ExplorerTAP.dll
- SHA256 123b456e35487ca8ff490d11d234ce1dd917e509f025791a74668e307806b802
- MD5 018d55236a6a27f80867c8a7f5df2900
- SHA1 51730936c85247abc364b27ae951d97dca1bdd85
- SHA512 07cdd4d8c7da31edbf70bf3ab77e8478258fb44dce68c40f01e61775e6f1d5cd92fdd55a1f46fa204051f20aa4ba64e403b4f58bed14f4427fc007b709f2149c
- SSDEEP 6144:dqqD9SqzJ5MJSj198QnUgcqgdQbDDWQph0lhSMXlBXBWnVuNhLUFNjWU5C8nS:dq++4XjDDWQph0lhSMXliVuNKmF8S
- TLSH T13CB48E507B8DDF11D2C2D37CCDA74F54322BB9684670868B3197022FED9ABC5DAA1123
- MD5 SHA1 SHA512 SSDEEP TLSH
ProgramLog.dll
- SHA256 14e003c985a8c10783579649331d5372506e34109e8b4e43417bdf784e36e56c
- MD5 1cd638a76b70cc03a91b276624992941
- SHA1 ea4537b88f6533fb37717f3f6233a13fab1496f0
- SHA512 3b8c03ed07a0caff0c021406e535140e58d77160646549798b70a7c276f8a0c86ad96c19c9457baf641e839a853db7ddd7fe71dd322472eb2de0d863f1cdf612
- SSDEEP 6144:Jo2QBmcRipa7VmK2KfdZcph0lhSMXlBXBWnw7FLfQakRkn5+L5XGNQa:BQ1RipuVmbEqph0lhSMXliwxL45y7
- TLSH T139848C64EF4DA821E3C4E17D8EF14F70363BA918A771028B702A435EDDE6BD1DD66122
- MD5 SHA1 SHA512 SSDEEP TLSH
TranslucentTB.exe
- SHA256 25500e798081b7eccacf5607972a08e0af000d64b5f7024abd836dab6da9179b
- MD5 3987c9b31491e042a7dc0efbd1e97470
- SHA1 792f9055349ece0d65f227de07c0f6d7e7824206
- SHA512 06b1d9b35c708f9d4c817f575dec51ea489ff65eba1caba5afcd767b6959a55dd476192d697af6811d9a6a4bd10ea1bab2dda923a2a77041cc43266f3d113935
- SSDEEP 24576:auA9RPh0h0lhSMXlbf7GKpDMr8U+HpoAxYciwxyDXTCJCIT07TTvh7Msyysr:auoLj7G0DMr8U+HpoAxYciwxyDXTCoIl
- TLSH T109155B616A9CE854E2E6D37CAEB58BB03037BC04C631824B715A7B1DFCBA6D48D51732
- MD5 SHA1 SHA512 SSDEEP TLSH
Xaml.dll
- SHA256 47405bb4db7f247f9adce3cdbc558883dc7c714c8f768153a7d033ca3592629a
- MD5 58f8fffc5b2455a92f18b570c1bef850
- SHA1 0d4134e6de07acebf048b8afb31906052aeac38a
- SHA512 931ac2232bbb7504a03ca62f56bce80378477781997294a955e2fb386ccc54afe05e0a03d056fd31cb71e39a18cab0435bc658959a6deb8b799c572bf28b55af
- SSDEEP 12288:1+AbydK32lt1SpNRFOreeWNYGCpYSuQozdkVVMhmmG1ph0lhSMXl+6Wh8DacaJUh:1pp5WHh0lhSMXlihYa6rOO
- TLSH T181551961AA4CD974D1C3727C6EBADBF83637F9289B308156759F032FBC927D58948022
- MD5 SHA1 SHA512 SSDEEP TLSH
[Content_Types].xml
- SHA256 9fa0ec5d966c2449058afbe075f986a1e735c92bd894a0a25d2582486bf2b691
- MD5 fe688ff30809e951ae38cc076e310be3
- SHA1 810bd8489afe11b389b3d9cb11cbdaa69fe99b3b
- SHA512 f37cf8549b350d0d33235f33fbf83b65925b1e8f6778676cf0aed3dce06ba5e966e398947744d1235777d1ed51d606a5b419bc4e21c639e80af30d61a8819a78
- TLSH T15C0161D2707E9CB007A689BFDA676C501233147DA4E47B0DBF9E564EA0E075B01B13C8
- MD5 SHA1 SHA512 TLSH
resources.pri
- SHA256 337a47232a8b4775b894dd37b7fc5328dd440f4366afc119de288fe42a6384a1
- MD5 0ab95f8ca43feb4739d6ec52a8e135d1
- SHA1 f9e9e0fe1637241edadf2d5068fb9759501650da
- SHA512 2cf44b4b17ef290e8b0791540c9afb5d8a323caee29083d5d158639faca051b123637a3f626dd73b98bb376ab92cffba8ef00e0e12fce94c55d203f0a5817962
- SSDEEP 3072:DjccHutxkxVFlPmzOvqgqzuP1fCSTHKzwtB3aS1VA1jBtY4CI21+JGB:XxutaLrFlPPSY4C5
- TLSH T1FCB37414ABF50315F2B3EB75ADB20715B872BD73A931CB1E0059031E2972A419AB1B7F
- MD5 SHA1 SHA512 SSDEEP TLSH
AppPackage_2026.2.0.0_scale-400.msix
- SHA256 2ee2002e2734514f97b35debceea378ed8382a4c020a27b7d0d78a2fdd3564fb
- MD5 115221d0ad5f5bf7dabc2cd185afa2a8
- SHA1 304c406da7fec3e960223b8774a155f79d20de54
- SHA512 7a9faf1b7731479cc5508e9a03dd61db49be96ecd7ed4054b65be4c43e79ed644339e438606ab91d80a938197757a119b90c9a20657175d34d1acfb1bf29e1b1
- SSDEEP 6144:CYNUrhTwIdz/njGRilvB6Kgr/yy/L13OluC3dpHFg/hqOel7a3jtFCXfedkfRz23:CYelTVdzPjJbtSLpMn9mB9vCGdkymg
- TLSH T184B4233B5E28D8A0FB6F883910C60F5E5E1F4113D1A94AFBB3CC469DBF74E624549892
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
N/A
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
CN=04797BBC-C7BB-462F-9B66-331C81E27C0E
Chains
Aug 31, 2026
CN=04797BBC-C7BB-462F-9B66-331C81E27C0E
CN=Microsoft Marketplace CA G 028,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=04797BBC-C7BB-462F-9B66-331C81E27C0E
Serial Number
33:00:62:5e:1e:70:bf:9d:c5:c6:7a:bb:94:00:01:00:62:5e:1e
Issuer
CN=Microsoft Marketplace CA G 028,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageKeyEncipherment
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 31, 2026 - Sep 3, 2026
Subject
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:12:44:a2:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 28, 2011 - Mar 28, 2031
Subject
CN=Microsoft Marketplace CA G 028,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:5d:9f:04:ec:95:b7:02:b4:6f:00:00:00:00:00:5d
Issuer
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 11, 2024 - Apr 11, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:F002-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:20:24:e1:e6:e0:17:b9:b4:8e:00:01:00:00:02:20
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
AppxBlockMap.xml
- SHA256 93b7e0deb35720a24617a014adc080f7e7f3bd4b3f5e8c1ca45e9664e0908a3b
- MD5 e093c2ee73953c6848de753e083b48d0
- SHA1 a09c2185eaae3b465b4b283f0aa1b4c40239837e
- SHA512 5b3de06d7ffe1e39549e0355b00321b34fa0239bde48da5bdf6eb54522095ebc1ad8b871ac12928215722c57f01c5776315ac44f534c1a89de4e78b5ca1dd6c4
- TLSH T127310F70903DBF2A403C0BBE0F39F0542CB649576B9B4D1FEC86C6B5085B9251AB30C5
- MD5 SHA1 SHA512 TLSH
AppxManifest.xml
- SHA256 508dca8f6dfc2adefe2e8b862db55016f67e2d824ec5d155e5a74123cd5795ab
- MD5 cb8ad5481da175f05bbc46826bc6a901
- SHA1 c95a5552247f8d14ef2e0df25d6cc59527d16c47
- SHA512 cfd4e6bc1993abb6a74885d3668b80477bf501f2deaeffd90a468824e4c703016e3d8c5c234b38ad827dac65bd1888885d56b91c309ca98b0e9d8598b1aa92de
- TLSH T160012042E0480EB44B34BCBC637EE183A25BA23620BE939CECDDAD0626D42D70163132
- MD5 SHA1 SHA512 TLSH
AppxSignature.p7x
- SHA256 4decd4750cb1bb233b678313c8ce56a779a49dfb579e2ebd720c1bfe1b70e7c0
- MD5 14aed840a73f6128a532eb450964e73f
- SHA1 c3bfc4c564a8113ae001d3b218c0a69fe8ad1521
- SHA512 4ee97f79a2744c3fa308d159d5d6e29ec145d738bc798e08d703b6f045f8e744591cf62b05098d37380cc7a49102787ec38cbe73888d35198f4b0cc894762e4c
- SSDEEP 192:lzhr4nXEL1MiUiJFg9cbCzwgLC5tiJRNzZyAU9NBJYh5wE3X01k9z3AiSn4:hZ1MiUi3g9cb8P25EJRpZyAU9xDE3R91
- TLSH T16C424BD68E7881C7ED8AEC4051ECEE873C3D03C71960A4A22AB9FAD41D473D69B1852D
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/SmallTile.scale-400.png
- SHA256 ccfe2922e5e5620f4acfa1c1a2feff2515831acbbd888510bed8932ac03df4f4
- MD5 3329bff00b8d3aea3334e71d1ef6e29d
- SHA1 f770e37f7cd24ac493cd92a0c873f495e6a55e58
- SHA512 cedb32cdd21d9f30b62cba8583a1194b62e68aa1a94c52de5f3d292b33196e0aeb2d1a6371a3c8fe7ff7a7173f5d4b79c3c060fcd7ec9e1754d6553c20b09811
- SSDEEP 768:nsajMbM9z22Nlmf7NH1e15yqbafX5+lgNzYsjz0o5V:saaMAqOJ1k8WWzLFz
- TLSH T15EE2E03DEA78BEB5A09A415F3092447A1BBB84836BDE4E87BBCC01C26F640D11D538C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/SplashScreen.scale-400.jpeg
- SHA256 4c9634ac99ef09ba7a503e269c6fe388323d9c20627e04c5db339bbf5ca3b738
- MD5 56b4d10883525fd9259ef5f60386f810
- SHA1 c90ebba17ae529a0b1f9bcbfdfa39b93e3bd991d
- SHA512 4537c12f1bc5a9f188ce2570991966d56640d1f668b70b235a67ea7689020e2e89e1b0c6ac21344387f010e62a73e0f779670c41e55a2ff6c337c7f5f97bfab2
- SSDEEP 3072:cl2a9q4yVeAKBYjntolsYLXferBkQC7fRA4uEM1oAxxT/P9uMBeV7Zz:cl7a3jtFCXfedkfRz2xTX4Rz
- TLSH T17614127B1B059855F72FC87C609A174EAA196507F60261FB33CC41AAFF34D76482EC16
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Square150x150Logo.scale-400.png
- SHA256 2ed8dce4a05bafd98935a67d79d0381f06fbd8a203747a9efe76f72721f8fb62
- MD5 e3d420cfaa1e3f152e851eabd0e9aaea
- SHA1 720df0a7d98dfa566503c203cd74a0757cc90766
- SHA512 33659764fae34acdca66023c951c6d3f39a3c5d4e2e65bc94aecdffa0af5b8670af5e9e2af9cc97068ee6df723f9978d82102766e8777d50164951fd4a4524be
- SSDEEP 768:ptqaPHKn0EqEal1Z8o55zcGkPdgtyQ4IBFs1Q+XTbPaWuayMqLI+GcbVO8L2QPob:pAaPHK0Aal1WoT6gtl4IBFkHPaH0+r58
- TLSH T17413D0682DB8E090EC0F797368A49F0752DF065D1AE39985F58C4DAD4FB0F4A0EC029A
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/StoreLogo.scale-400.png
- SHA256 d2e28f8a2acf9c5d0e6c7031bd66bbf961e8d1eda76517e3983eec58cae442ec
- MD5 d066aabd7eeeb94b9af159b349fd56ca
- SHA1 ff38369f079fbc962b0d679ec390f1dc36552ac2
- SHA512 8e32dd9e37ac0c7e352f4cd0163757ed7c410d89496b0f5c6538db8758cd16de0c54baf493ec95a96b3a41218e67b4a32f093b99ae88ed75903a7aa4d33ee080
- SSDEEP 768:zzTD4JPowoAhWaRlULITrk53GtwSt2jTqjzl42:nTzSkaLUUkwynjTi42
- TLSH T115E2E15A6BB7227955BD0C572FD1A5BC3E0982F3D8C08CE4B9DF3413AF8039561A25D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Wide310x150Logo.scale-400.jpeg
- SHA256 1b5e4256fbdcfd11e644f2e8c8e92abfef4e615d7c15c2ac38653fc30a20ff26
- MD5 3165d646fa9e19a79e701b3368530d70
- SHA1 f370532ad2f4e0e188f50bf74f487f61d9aee9f5
- SHA512 79e17c09a1b5b221c53832258720c2d99e9b7941caceb98bfec4ef126e4806984dbd2b03f2292cd0fdc95eca5883c0e277f9ccb9f43fc5a173be42e1cea287c4
- SSDEEP 3072:dG0RSJsk2oBALhYgr/yyFdLVxR3Ol/lYC3Oy8EHMPYBO1ar+s0R7NEJKfn:vRilvB6Kgr/yy/L13OluC3dpHFg/hqw
- TLSH T16D141322ED054EA627E9860B41C61FDCDE1C5622C13C0BBA7764E765FA78F21D24CE52
- MD5 SHA1 SHA512 SSDEEP TLSH
[Content_Types].xml
- SHA256 78505619b00ed2b1f5031d92ed848243f1bee5b4eef415254791aa2b1882dd6e
- MD5 e447f1c59436ada673317c01057dbbbb
- SHA1 2642c12c8acfb220b04a6b0570fbcdcab56a42f6
- SHA512 71713cdaf15845d2a4f0587c22ea8575dc16a342a3cb12e5f92840eb307c181ec07f82c7a5fbe7b5dddfb2223a602f8809feaed59eb76bc07d87c73b07e90666
- TLSH T1FCF081D2B13A9CB0037189F9DE2369051272147D90F9374DBFDB464E50D079700B13C4
- MD5 SHA1 SHA512 TLSH
resources.pri
- SHA256 2dd165fddbd37f2862c944617903e648677ad0bf84983634a8aa2ed5f0cb5fff
- MD5 caab9a3a8f7d86d11c5d995cb92a33a6
- SHA1 2d23bce3c18ce5cbdbd4200cb5d1b1a824026503
- SHA512 80690d61433352bdaadf71d0437249667e918107859e1fa7acb38766b9e2b3321fbe5815d2c8a7750e9736eeecfd40227179f13e38b6b60c88b302edf4c8b223
- SSDEEP 96:W/IIgrGB9NnUyXgrQegbWJ5uYUeNTQl1T10ipjUxIxX9awOQk5IQCw:W/4CUyZekWHtdpQl1T10iNUxSX9ROrMw
- TLSH T147C10F12A578EE84C127B339F8B343F5EEA05EF152F2CFAD056453859F505486EB223A
- MD5 SHA1 SHA512 SSDEEP TLSH
AppPackage_2026.2.0.0_x64.msix
- SHA256 aef837663ed7af6b530e071b49a70ff916f8bd7813e542cdb3872fe5806f60f4
- MD5 bd2e9f5494790dc55d2cd2584ee170fa
- SHA1 ac5bb34ecccd59f436052cc6d88678f327f272c5
- SHA512 a28db359e01a4b03b3c8f150bf90c060fe95cafd7905a3babbd32577ce95ce53c2606ffcf3c1294018c2d7e54143303ea74e1d3876e51b248312d6d9776ec329
- SSDEEP 24576:Nf/tFRtYQ3BafRsf0Ug7zYbCLN9GAkZ7oWXoq7LoU9B/NqSpx70RD:Nf/tz+WBUscJzYbCLXP7WXoZU9GWx7AD
- TLSH T11285331C54E4A550F85EC9BD09A77B385516C2824BB0F9757FEC8488FF306E98884EAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
N/A
Digest Algorithm
sha256
Digest Matches
Trusted
Signing Certificate
CN=04797BBC-C7BB-462F-9B66-331C81E27C0E
Chains
Aug 31, 2026
CN=04797BBC-C7BB-462F-9B66-331C81E27C0E
CN=Microsoft Marketplace CA G 028,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=04797BBC-C7BB-462F-9B66-331C81E27C0E
Serial Number
33:00:62:5e:1e:70:bf:9d:c5:c6:7a:bb:94:00:01:00:62:5e:1e
Issuer
CN=Microsoft Marketplace CA G 028,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageKeyEncipherment
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 31, 2026 - Sep 3, 2026
Subject
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:12:44:a2:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 28, 2011 - Mar 28, 2031
Subject
CN=Microsoft Marketplace CA G 028,OU=EOC,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:5d:9f:04:ec:95:b7:02:b4:6f:00:00:00:00:00:5d
Issuer
CN=Microsoft MarketPlace PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 11, 2024 - Apr 11, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3303-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:21:33:c0:35:fb:d2:0f:21:a4:00:01:00:00:02:21
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2026 - May 17, 2027
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
AppxBlockMap.xml
- SHA256 e0f52d862fd6f2f7ba6a82b37d92dfebff175322ed1f1e36515e58c804e68ff6
- MD5 3851858302c5a568ce28f835162346d4
- SHA1 699ede1d67609da03ed3b07725d9b220e316d18a
- SHA512 0d376bc6beeade8dd76fa22d77689cc6b279735117552e01fe17596fbad3fd87926acb456a19f6ca318e8d7512f4602562c616b344126be5df9be0d68a1b0f83
- SSDEEP 192:2HpVwhfiSQ6DC+TEskBdMock8xztZgBrmAuaMsenzapZ85CuP1ch:abmt/oulcBrYAIzpl1U
- TLSH T1DDE1FBA0413DFE76425C5BFE8FA9F1442C61882357672E1E9C8A96B20C6F5734E630E5
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxManifest.xml
- SHA256 44112b7087298f326a4b94637cf9e3d63794463eb6691973a3ec5a93f166235f
- MD5 89fffbf24385260e5d10f9ed6d43211c
- SHA1 b9b85c9c40c432ce50ca5c9cbc33421a57f52363
- SHA512 7df6c8d1a18069f5a2bc09375ad675c91907042eb2a0df9f9a4d70bd4362fca498c17cccb8de9d014a51a2ad8a3bbe2fbddd78616a80ba1943e4efc12df78bc7
- SSDEEP 96:EXATANPANJAN8ANNATAGtMhSn/FFX6zrcDfD8kaDfD8NDfDxb2H9/KV20AJBqaKE:bEmcNME8/39dyHkVSJSE
- TLSH T142913356E0C80E7442719965E3B3A287F63D46D750E88848F8EDE90B1FB769E0233723
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxMetadata/CodeIntegrity.cat
- SHA256 ae007ece6a4bffade867cf88b51463f438c9bf23f76764bc7ba4e9a82e84e952
- MD5 feb97ca9ddd9cd3ade985a7b78b68710
- SHA1 3910c6aa777af5d19da8f8198fcb6755c32f50bf
- SHA512 a95c4fae0805732abef37c489654ed1ad79650de9a1c917f2c98e661e896510d63aa4f6f66035979dd94b827e60f1cae241069e0f30e942a5f61b58585df3038
- SSDEEP 192:DKhSWJzhr4nXEL1MiUiJFg9cbCzwgLC5tiJR5zJasQcxX01k9z3AMLbZiKu5:DUZ1MiUi3g9cb8P25EJR9JzLxR9znZy
- TLSH T1155249E1492482C6EE9FAC5011F8FE577C7D13D7094090752AB7FA9409A33C6FB1856E
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxSignature.p7x
- SHA256 b00b4313ffd2f8b4f5e361492a5ef86168ab6a2e2a5b5d0c4c9e7d1709629fdb
- MD5 dd5f9b2336f720804816ec9e5871e016
- SHA1 4bddd476473ebe3886ff582fdd607b39a46208e1
- SHA512 17226578f8d5df6ad78051ca17908cf65c16852729150cbe8f73b62f3b10e6285206a352c47c98b7a51fd924a98df9b3a1c5b40991c77b7b52f5350100eb5888
- SSDEEP 192:cSNzhr4nXEL1MiUiJFg9cbCzwgLC5tiJRdzmh7ms+3NxPOxFX01k9z3AJ0HPZ6lH:xZ1MiUi3g9cb8P25EJRZt9fPOxFR9zYJ
- TLSH T190423BC54E788187EE8BBC8052ECED477C3D53C71550A46266B9FA881D933C6EB2852D
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/SmallTile.png
- SHA256 fb8f43888766402cad8552dab2d0ec796a9e675b22fb7e17decc5f1239273eb3
- MD5 41ef072e24a4be8034f7ddcf7ff4c218
- SHA1 680ce1dca0b5795f2e2eff1a0d02ececa6f0a743
- SHA512 3a4f2aef77e26d2bd343e93d503374e5a6fd2bcaf622d029a1b2733c1905dbdaba85f603198cd786f2c3c78b405ba0094a3c48c84dc77181ebd6c1837af14991
- SSDEEP 192:Q5/ofkaXGaXGyM+lEpNk+Jx4OqgB+vqLAIrt8QSI1:QCbGaWelzu3Ui18Q5
- TLSH T1F042AFBEF89256C7541CC92318F8643D9A3701638E916DA431DFD8296F162FA0DDE0D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/SplashScreen.jpeg
- SHA256 2e18f60892b528de45b01a79dd07c45cbf5760539663f5fea74115dedb137cc4
- MD5 050c5f18c89e71a524f61e67f03f9138
- SHA1 3ec9081e4b96f1afcc3c792e10e287fb2f910086
- SHA512 2c31e1214fbad036467d59854c0502a9ba46e001e9214c40ce3155a5707c081d4cf7bf2e41249e17674fa46524a9a22f397345bbe1b5bd0d2a33f2d53dd8c60d
- SSDEEP 3072:tmFUkm7tGaQE1HSnjaPu7SrzEiSGQmKTrVTWE1uibQNvIs3Hoxe:thR7tvvSuPswGGQlN0NvVI4
- TLSH T15AF312CD66A18528F6A984F302723AED5B0687F3B3D8BE547B5C01E0EB818F85D5D91C
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Square150x150Logo.png
- SHA256 f19d18d33fb5891b668a7f8cec506f75326cc18fbd96f1696da2584afd864a84
- MD5 d2b13975b3133f5088c8667a9401fc75
- SHA1 0f26a92675d350c7aa7b4abf51fc1c55a324e1c7
- SHA512 fb6f447b0aa27911c7cb4cda8b4306876710d30aa2dda3543d8115fa3a769011a2af6817e169998fd3171580fa21e96456f0627d0d946ff01c8e704636af93f5
- SSDEEP 192:IgRukT6jhVtRLN7NkUbbNkD22yjNJYGR9MrTCo/ASzpXE1WF9/KYMS:IUTotBDFa62uNJY3WojXn9/KYZ
- TLSH T10B429D9CE5D0A601700CAC3915D6562F9F03C287CB9BDE0FF98D889AFF622960E415CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Square44x44Logo.altform-lightunplated.png
- SHA256 c838516295f9c3efdc44db77e7a2227b8fcf72faadba2a9989b1e5717d84d9c7
- MD5 e0d416cc8012069419554031f5c48e85
- SHA1 8d1e3a846657ac2fdebf55c056a6d0170bcbc660
- SHA512 6c98e169808814a6f618c5e7154d664ebde986041751f771720ad63e8b90d395b7e043c59a9eb15d9b44394c36ecf9056ae7093e668e63a9ef4e12b4a89781cd
- SSDEEP 192:NBBZY9wGiPHRvZ1QEiO9yqUNpzT1KdWle7naQhzSj4pkiS6VPsQ1F:N7O9wVPHRvZ2lrz1vle7LzSj9sN1F
- TLSH T1E542AE09BC723090BB1CAD8945EA02A57426D54306CF5CC979CF897F1FA83FB1A87557
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Square44x44Logo.altform-unplated.png
- SHA256 11cec4078b210ef590a6d27597997ad33efaabf5a313d0896f4311483efd78f1
- MD5 6055f44990e4275881dedd85b4f7b763
- SHA1 27e78b34ce7e86e300b1c20794c9c3ffcad7235f
- SHA512 06f8e6b70274e70346bf2599ac4b261ecc067a0a71e3d6b256d39102c10b2a5f671d3eaa5f04b7b1f6c2408efd7380546c4d919d10374955d4a481b3676a121e
- SSDEEP 192:B6TGuRHRMaDDJbLzAk5XoRqLvmO1/Q8LBwS74pk0emPQ97sQ1F:B6TGGNJfX+qb1Jt79LV1F
- TLSH T137428E29E56331C07E9C8E8E71D6C4564B3746075250EC6BB74F48A9AF307EA284BBC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Square44x44Logo.png
- SHA256 82bb920d21502e85cd961a5bfb1908d7f43139ffadfb5267c9df25664e20717b
- MD5 ba84424f4d701d413c4c39ac1ad1b3ea
- SHA1 94205a0d96a43ec9ad38d0acedfde7992e89bd0f
- SHA512 230f9662e3715a90d5ca7adb4dcbb95f3f26a1045fb17d9a184afae97ff0648f1f98d8d76eaf1d6afd5ab85a0841241331ea2961b156bfb278c059e9f1f7c614
- SSDEEP 192:3hsVHrVUKFVzBFQr1xUDPtqTPV4Vq4pk8+NGpMusQ1F:3hsVVUKDzHM1+DVW4Vq9TwZ1F
- TLSH T159429F58A9233B917129D82380DD05551A3AD217D14BFCB2F94EA8F71F602DE0D5E5F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Square44x44Logo.targetsize-256.png
- SHA256 9be741e745cd9c63537f773c0a7e3571dd7f6d955d54475d80eb6aca0fae850f
- MD5 8cb1535ae323ba7839a56df8670b6389
- SHA1 eeaf7d7d0485c1ed83a65afa6680dfbf4d90a94c
- SHA512 25640d4b4feab092fa2d95f58c2ad25c691f6a0fc0fbc9dae3efb5488c40df5c5fe6fd2e1b82168300a47766acc3960378124169a6b4f6cf62275ad5cadefd2c
- SSDEEP 384:2r0Nw7bI/H773oIzJAtI0moUl+s+rJrqtp1wMaTB4DVu:JNX/PDzJB0gl+swJrqtpYWU
- TLSH T1A862D01D3DC86561FDB9C9BACAB3A561E99491B67BBB81E915470600018AC358FCCFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Square44x44Logo.targetsize-256_altform-lightunplated.png
- SHA256 9be741e745cd9c63537f773c0a7e3571dd7f6d955d54475d80eb6aca0fae850f
- MD5 8cb1535ae323ba7839a56df8670b6389
- SHA1 eeaf7d7d0485c1ed83a65afa6680dfbf4d90a94c
- SHA512 25640d4b4feab092fa2d95f58c2ad25c691f6a0fc0fbc9dae3efb5488c40df5c5fe6fd2e1b82168300a47766acc3960378124169a6b4f6cf62275ad5cadefd2c
- SSDEEP 384:2r0Nw7bI/H773oIzJAtI0moUl+s+rJrqtp1wMaTB4DVu:JNX/PDzJB0gl+swJrqtpYWU
- TLSH T1A862D01D3DC86561FDB9C9BACAB3A561E99491B67BBB81E915470600018AC358FCCFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Square44x44Logo.targetsize-256_altform-unplated.png
- SHA256 9be741e745cd9c63537f773c0a7e3571dd7f6d955d54475d80eb6aca0fae850f
- MD5 8cb1535ae323ba7839a56df8670b6389
- SHA1 eeaf7d7d0485c1ed83a65afa6680dfbf4d90a94c
- SHA512 25640d4b4feab092fa2d95f58c2ad25c691f6a0fc0fbc9dae3efb5488c40df5c5fe6fd2e1b82168300a47766acc3960378124169a6b4f6cf62275ad5cadefd2c
- SSDEEP 384:2r0Nw7bI/H773oIzJAtI0moUl+s+rJrqtp1wMaTB4DVu:JNX/PDzJB0gl+swJrqtpYWU
- TLSH T1A862D01D3DC86561FDB9C9BACAB3A561E99491B67BBB81E915470600018AC358FCCFCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/StoreLogo.png
- SHA256 813e337ee4afeebe7871dc4862b0f564fb7d0289d6853cd75ed742c2d253cf9f
- MD5 151bc7f8ec8768dd7257fd52b5c1b031
- SHA1 c76a6e54c592db99b9507b3418df630e2fbd5968
- SHA512 bbede86dc657ef53071db9e5470b9cd8676bf81a73390c93efcde9d8b97f7035374333d852a49b55dd5c446d473c6584f9bbef36b900b22f1656a1414b1bb2ec
- SSDEEP 384:XNy9S/+m9bQxIr8dxOxxR2s8xcTsfb4pE5jW:XNM8ExIOohR8x3UpCC
- TLSH T12152BFA084B230B2364CB9F571EE451D0A758A8F896439CAF0ADCD2E9F507F45CCD0B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Assets/Wide310x150Logo.jpeg
- SHA256 66d61a21ad3a52e37f23220c377aa81ea3993a35f5908a49db5ccc0295dee521
- MD5 a7059a6e09a1911e5db7b843e403368a
- SHA1 816b49a60def36887b925aa0beaa4e745fc59aa1
- SHA512 c57c832fb235311b5ef0861887373b50f2346b26c52f81883ed7b67a811569db21c0d9892f9878766f630cce9443423e348757623deeb888c006745e81faa0cc
- SSDEEP 1536:XQYOe//ApQkTnkOF+nGus8kcpNFvhn1kM89NiTJczQvaEy5J1PLwMbXjlq2rNG8N:NbKQckOwnGFcpNFtlWMTFCZ57LwMjc2Z
- TLSH T179930255ED405691EF6D0537A8F2931A23400A04AFE19B6BF1AE41DFEF700EAF94424F
- MD5 SHA1 SHA512 SSDEEP TLSH
ExplorerHooks.dll
- IMPHASH 6ab98815cb560488cb9d3ed04883bef0
- SHA256 5ab9ca00b41a0676c94430c43a5de106acef2ade5c42e6c2ee45912de7a718d6
- MD5 b1ce351b4812020e8d531d218b9a664f
- SHA1 ee89ed57ce3767edcc5f3c908a6f1286c7314bcd
- SHA512 77a43602e2fccfde7194a29f34312ec00252fcb57b3e2cb9f0d2f31786b58cb295865c3ea641e0c8377b1392704450edf6aa9063d8c8ee50bdca3cd240019176
- SSDEEP 3072:407LPedcnFReLzZL85PF1NLu7UUTweaY9KXTLDfTf:ydcTEgnNLuUYsXrf
- TLSH T1E2144B557AAB04FAE967923489534F05B372F81507208BEF039246BC9F3B7D29D3A724
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e4:7d:2a:63:d5:ae:73:1a:66:aa:ab:88:9c:b9:ab:f4:5a:62:2e:a3:57:c8:0f:84:dc:08:8b:c9:ef:92:ca:24
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Charles Milette,O=Charles Milette,L=Greenfield Park,ST=Québec,C=CA
Chains
Aug 31, 2026
CN=Charles Milette,O=Charles Milette,L=Greenfield Park,ST=Québec,C=CA
CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Charles Milette,O=Charles Milette,L=Greenfield Park,ST=Québec,C=CA
Serial Number
33:00:05:29:d9:2e:5a:3f:9e:39:4f:48:22:00:00:00:05:29:d9
Issuer
CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 29, 2026 - Sep 1, 2026
Subject
CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:15:05:3e:6e:19:8e:93:29:d9:00:00:00:00:00:15
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 26, 2026 - Mar 26, 2031
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:57:24:d3:95:e0:a2:e9:c9:31:00:00:00:00:00:57
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2025 - Oct 22, 2026
Minor OS version
0
Major OS version
6
Entry point
28384
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
ExplorerHooks.pdb
kernel32
SetLastError
OpenProcess
GetLastError
CloseHandle
GetCurrentThreadId
FormatMessageW
OutputDebugStringW
IsDebuggerPresent
HeapCreate
HeapFree
GetCurrentProcess
PssWalkMarkerFree
PssFreeSnapshot
HeapAlloc
PssWalkMarkerCreate
HeapDestroy
PssWalkSnapshot
GetCurrentProcessId
PssCaptureSnapshot
OpenThread
GetProcAddress
FreeLibrary
LoadLibraryExW
WaitForSingleObject
CreateEventW
Sleep
SetEvent
TerminateThread
CreateThread
GetThreadId
ExitProcess
TerminateProcess
ResumeThread
VirtualAllocEx
VirtualQueryEx
ReadProcessMemory
WriteProcessMemory
MultiByteToWideChar
GetCurrentThread
SuspendThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
GetModuleHandleW
WriteConsoleW
CreateFileW
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
HeapReAlloc
HeapSize
SetStdHandle
GetStringTypeW
SetFilePointerEx
GetProcessHeap
LCMapStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
RtlPcToFileHeader
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
ole32
CoCreateInstance
CoUninitialize
CoCreateFreeThreadedMarshaler
CoInitializeEx
user32
GetMessageW
DefWindowProcW
DestroyWindow
CreateWindowExW
UnregisterClassW
RegisterClassExW
DispatchMessageW
TranslateMessage
PostThreadMessageW
SendMessageTimeoutW
PostMessageW
RegisterWindowMessageW
GetWindowThreadProcessId
CallNextHookEx
SetWindowsHookExW
FindWindowW
InjectExplorerHook
Name
.text
Size
111KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
50KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourd
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=137, id=261, version=33145,
count=12, id=260, version=33145,
count=8, id=259, version=33145,
count=9, id=259, version=35207,
count=14, id=260, version=35207,
count=38, id=261, version=35207,
count=7, id=257, version=33145,
count=150, id=1, productName=Unmarked objects,
count=4, id=261, version=35228,
count=6, id=265, version=35228,
count=1, id=256, version=35228,
count=1, id=255, version=35228,
count=1, id=258, version=35228,
ExplorerTAP.dll
- IMPHASH d638dce697750ad9b70221d716418873
- SHA256 c48f1a06168acd7839269dde0d15ccf5d09c702512b94dd6ba9a05df1b153dc2
- MD5 17381d24eeb7e72b65542b31b51d6369
- SHA1 467b04f860c6993922e6177740561281e52e0166
- SHA512 0937f17c2da5215abc1678dde872ae1d6a203ad0cd7b110881547a343a3f3fd1363ec4917ad94d2b129eed6c68a45ff678d48f008918076a3b5d23c324793779
- SSDEEP 6144:YJaS/eoIXT8tqlWm5F0T1pe7bvp2ph0lhSMXlBXBWn7DDZTZdKfx7EYl:5IIDyq4m5Fqe7bvp2ph0lhSMXli3BGl
- TLSH T1A8C4BE0172A647FAE567C178C85B4B09FA72784107905BEF13E08AAA4F6BBC44E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8b:7c:75:82:37:4e:e9:0e:e2:9e:62:b2:40:97:0b:5f:d3:81:8a:e8:97:a6:6b:5b:47:1e:70:f6:67:04:98:4c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Charles Milette,O=Charles Milette,L=Greenfield Park,ST=Québec,C=CA
Chains
Aug 31, 2026
CN=Charles Milette,O=Charles Milette,L=Greenfield Park,ST=Québec,C=CA
CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Charles Milette,O=Charles Milette,L=Greenfield Park,ST=Québec,C=CA
Serial Number
33:00:05:29:d9:2e:5a:3f:9e:39:4f:48:22:00:00:00:05:29:d9
Issuer
CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 29, 2026 - Sep 1, 2026
Subject
CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:15:05:3e:6e:19:8e:93:29:d9:00:00:00:00:00:15
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 26, 2026 - Mar 26, 2031
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:A500-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:56:7e:8f:9d:58:08:8e:e9:60:00:00:00:00:00:56
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2025 - Oct 22, 2026
Minor OS version
0
Major OS version
6
Entry point
149856
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
ExplorerTAP.pdb
ole32
HWND_UserUnmarshal64
HWND_UserMarshal64
HWND_UserMarshal
HWND_UserSize
CoRegisterClassObject
HWND_UserUnmarshal
CoTaskMemAlloc
HWND_UserSize64
HWND_UserFree64
CoRegisterPSClsid
CoRevokeClassObject
HWND_UserFree
CoCreateFreeThreadedMarshaler
CoTaskMemFree
oleaut32
GetErrorInfo
SetErrorInfo
GetActiveObject
RevokeActiveObject
RegisterActiveObject
SysStringLen
SysFreeString
rpcrt4
CStdStubBuffer_Connect
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
IUnknown_Release_Proxy
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_AddRef
CStdStubBuffer_DebugServerQueryInterface
IUnknown_AddRef_Proxy
CStdStubBuffer_Invoke
NdrCStdStubBuffer_Release
NdrDllGetClassObject
NdrOleFree
user32
SetWindowsHookExW
UnhookWindowsHookEx
GetAncestor
GetWindowThreadProcessId
CallNextHookEx
kernel32
ReleaseSRWLockExclusive
FlushFileBuffers
SetStdHandle
WriteConsoleW
CreateFileW
HeapSize
GetConsoleMode
GetConsoleOutputCP
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetFilePointerEx
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetFileType
GetStdHandle
HeapFree
SetLastError
GetCurrentThreadId
OpenProcess
FormatMessageW
GetLastError
OutputDebugStringW
WaitForSingleObjectEx
CloseHandle
HeapAlloc
GetProcessHeap
WideCharToMultiByte
IsDebuggerPresent
CreateThread
CreateEventExW
GetModuleFileNameW
Sleep
SetEvent
GetProcAddress
GetCurrentProcessId
FreeLibrary
LoadLibraryExW
GetCurrentProcess
RegisterWaitForSingleObject
UnregisterWait
TerminateProcess
GetProcessId
UnregisterWaitEx
ExitProcess
VirtualAllocEx
VirtualQueryEx
ReadProcessMemory
WriteProcessMemory
MultiByteToWideChar
VirtualProtect
VirtualQuery
GetModuleHandleW
GetExitCodeThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
GetModuleHandleExW
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
WakeAllConditionVariable
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
FreeLibraryAndExitThread
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitThread
WriteFile
api-ms-win-core-winrt-error-l1-1-1
RoOriginateLanguageException
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
api-ms-win-core-winrt-error-l1-1-0
RoFailFastWithErrorContext
DllGetClassObject
InjectExplorerTAP
Name
.text
Size
265KB
Virtual Size
265KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.orpc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
231KB
Virtual Size
230KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.detourd
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=260, version=33145,
count=8, id=259, version=33145,
count=10, id=259, version=35207,
count=14, id=260, version=35207,
count=81, id=261, version=35207,
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=257, version=33145,
count=206, id=1, productName=Unmarked objects,
count=158, id=261, version=33145,
count=4, id=261, version=35228,
count=16, id=265, version=35228,
count=1, id=256, version=35228,
count=1, id=255, version=35228,
count=1, id=258, version=35228,
ProgramLog.dll
- IMPHASH 35da10e2b497ad6f6e032c895c446c6d
- SHA256 0ac96ac53f5575369ad7b2f12ee2bd272e77438de8d041ec8aa6d4b900d2f701
- MD5 f1d12283389bb52e12874a9f63e6cedb
- SHA1 6df7becdf36ee5f25d0920a2979a1724eb4a2033
- SHA512 971b2ab7e6c3d71572850304c00648bfea2f97b8b52e7091fd1962f7ff0c2556fc728b70fe6f84230f287e40fe2ed714fea5442ef32027ddb33358313c506a13
- SSDEEP 6144:lY7Pfd9HIeHyph0lhSMXlBXBWn87Pddg0:6FiOyph0lhSMXli8Zd
- TLSH T13694BE16FB8941A9E14BC2B9896B4E45FA73788C43415AEF13A8C4675F2B7D02F3E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
34:68:61:b4:82:10:fa:28:35:8a:c0:b4:22:69:71:3d:c7:d5:79:10:89:ab:20:57:05:11:11:ee:c1:b1:7a:01
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Charles Milette,O=Charles Milette,L=Greenfield Park,ST=Québec,C=CA
Chains
Aug 31, 2026
CN=Charles Milette,O=Charles Milette,L=Greenfield Park,ST=Québec,C=CA
CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Charles Milette,O=Charles Milette,L=Greenfield Park,ST=Québec,C=CA
Serial Number
33:00:05:29:d9:2e:5a:3f:9e:39:4f:48:22:00:00:00:05:29:d9
Issuer
CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 29, 2026 - Sep 1, 2026
Subject
CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:15:05:3e:6e:19:8e:93:29:d9:00:00:00:00:00:15
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 26, 2026 - Mar 26, 2031
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:A500-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:56:7e:8f:9d:58:08:8e:e9:60:00:00:00:00:00:56
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2025 - Oct 22, 2026
Minor OS version
0
Major OS version
6
Entry point
189632
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
ProgramLog.pdb
oleaut32
SysFreeString
SysStringLen
api-ms-win-core-winrt-error-l1-1-0
RoFailFastWithErrorContext
SetRestrictedErrorInfo
user32
MessageBoxExW
msvcp140
?_Winerror_map@std@@YAHH@Z
_Thrd_detach
_Cnd_do_broadcast_at_thread_exit
?id@?$numpunct@_W@std@@2V0locale@2@A
_Mbrtowc
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
_Mtx_unlock
_Thrd_join
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
_Xtime_get_ticks
_Thrd_id
_Mtx_lock
?_Syserror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPEBD@Z
?_Id_cnt@id@locale@std@@0HA
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Throw_Cpp_error@std@@YAXH@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Cnd_signal
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetFileInformationByHandleEx
GetProcAddress
GetModuleHandleW
GetTempPathW
GetFileAttributesExW
GetFileAttributesW
FindFirstFileW
FindClose
CreateDirectoryW
GetLocaleInfoEx
FormatMessageA
GetProcessTimes
MultiByteToWideChar
HeapFree
GetDynamicTimeZoneInformation
GetCurrentThreadId
FormatMessageW
DisableThreadLibraryCalls
HeapAlloc
GetCurrentProcessId
GetProcessHeap
WideCharToMultiByte
GetLastError
DebugBreak
IsDebuggerPresent
SetLastError
LocalFree
WriteFile
CreateFileW
OutputDebugStringW
CloseHandle
FlushFileBuffers
GetCurrentProcess
OutputDebugStringA
TerminateProcess
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
_CxxThrowException
__std_type_info_destroy_list
__current_exception
__std_exception_destroy
__std_exception_copy
_purecall
__std_terminate
memcmp
memcpy
memset
__C_specific_handler
memmove
api-ms-win-crt-heap-l1-1-0
calloc
_callnewh
malloc
free
api-ms-win-crt-time-l1-1-0
_localtime64_s
_gmtime64_s
strftime
api-ms-win-crt-math-l1-1-0
_ldclass
_fdsign
_ldsign
_fdclass
_dclass
ceilf
_dsign
api-ms-win-crt-runtime-l1-1-0
_errno
_wassert
_invoke_watson
terminate
abort
_beginthreadex
_wcserror_s
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_invalid_parameter_noinfo
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vswprintf
__stdio_common_vfprintf
api-ms-win-crt-string-l1-1-0
isdigit
??$Handle@$03@impl@Error@@YAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@0Usource_location@3@@Z
??$Handle@$04@impl@Error@@YAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@0Usource_location@3@@Z
?GetLogMessage@impl@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$basic_string_view@_WU?$char_traits@_W@std@@@4@0@Z
?GetSink@Log@@SA?AV?$shared_ptr@V?$lazy_file_sink@Vmutex@std@@@@@std@@XZ
?HandleCriticalWithErrorInfo@impl@Error@@YAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@0Usource_location@4@JPEAUIRestrictedErrorInfo@@@Z
?Initialize@Log@@SAXAEBV?$optional@Vpath@filesystem@std@@@std@@@Z
?IsInitialized@Log@@SA_NXZ
?Log@impl@Error@@YAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@W4level_enum@level@spdlog@@Usource_location@4@@Z
?MessageFromErrno@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?MessageFromHRESULT@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@J@Z
?MessageFromHresultError@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBUhresult_error@winrt@@@Z
?MessageFromIRestrictedErrorInfo@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAUIRestrictedErrorInfo@@J@Z
?MessageFromStdErrorCode@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBVerror_code@3@@Z
?ShouldLogInternal@impl@Error@@YA_NW4level_enum@level@spdlog@@@Z
?state@?$lazy_file_sink@Vmutex@std@@@@QEAA?AW4lazy_sink_state@@XZ
Name
.text
Size
190KB
Virtual Size
190KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
181KB
Virtual Size
181KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=28, id=261, version=35207,
count=6, id=257, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=257, version=33145,
count=162, id=1, productName=Unmarked objects,
count=8, id=265, version=35228,
count=1, id=256, version=35228,
count=1, id=255, version=35228,
count=1, id=258, version=35228,
TranslucentTB.exe
- IMPHASH e1c9743455eea7fa3e69a72253791a27
- SHA256 f933f5bf70405e13feadbcc53883f2676b5a8a1dae214b52c0fe0971c583a0ff
- MD5 2530d19b54bf03133f908f7ece4f2239
- SHA1 0e232b94ead1e75768623c837566766d77d97318
- SHA512 65717e277c10fc0341734340639deaea485ab4d20bb9ad56ae0a13a52cf3fc879d438df3ef0fd77c736693369474b58b835b9e6fd0d6f94d6dad184dde85daeb
- SSDEEP 24576:gS6wzMAUbDat/ZzG81k9rvah0lhSMXl3VsZqTC7eqgMsyys:gfgMA0Q/5J1k97319T/Msyys
- TLSH T1FC158E16B6D8C1E9E077C279C96785B1FA323C54877096EB0290BD2E3E37AD4493E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a9:29:af:03:a4:b6:3a:3c:14:5c:fe:10:82:b3:b4:5c:9a:c5:04:c2:3d:be:bd:1b:c3:74:1b:d2:c7:46:c4:18
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Charles Milette,O=Charles Milette,L=Greenfield Park,ST=Québec,C=CA
Chains
Aug 31, 2026
CN=Charles Milette,O=Charles Milette,L=Greenfield Park,ST=Québec,C=CA
CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Charles Milette,O=Charles Milette,L=Greenfield Park,ST=Québec,C=CA
Serial Number
33:00:05:29:d9:2e:5a:3f:9e:39:4f:48:22:00:00:00:05:29:d9
Issuer
CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 29, 2026 - Sep 1, 2026
Subject
CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:15:05:3e:6e:19:8e:93:29:d9:00:00:00:00:00:15
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 26, 2026 - Mar 26, 2031
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7A00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:58:65:cd:eb:3f:a1:d7:fc:d2:00:00:00:00:00:58
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2025 - Oct 22, 2026
Minor OS version
0
Major OS version
6
Entry point
397392
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
TranslucentTB.pdb
advapi32
RegCloseKey
comctl32
ord380
dwmapi
DwmExtendFrameIntoClientArea
DwmGetWindowAttribute
gdi32
CreateRectRgn
CombineRgn
CreateRectRgnIndirect
DeleteObject
CreateSolidBrush
api-ms-win-core-heap-l1-1-0
HeapSetInformation
HeapFree
GetProcessHeap
HeapAlloc
api-ms-win-core-errorhandling-l1-1-0
RaiseException
GetLastError
SetLastError
api-ms-win-core-processthreads-l1-1-0
GetCurrentProcessId
ExitProcess
GetCurrentProcess
CreateThread
TerminateProcess
GetCurrentThreadId
api-ms-win-core-localization-l1-2-0
GetLocaleInfoW
SetThreadPreferredUILanguages
LCMapStringEx
FormatMessageW
SetProcessPreferredUILanguages
LocaleNameToLCID
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-libraryloader-l1-2-0
GetModuleHandleW
LoadLibraryExW
LoadResource
GetProcAddress
LockResource
FindResourceExW
FreeLibrary
LoadLibraryExA
api-ms-win-core-string-l1-1-0
WideCharToMultiByte
CompareStringOrdinal
api-ms-win-core-psapi-l1-1-0
QueryFullProcessImageNameW
api-ms-win-core-synch-l1-1-0
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetWaitableTimer
CancelWaitableTimer
CreateMutexExW
api-ms-win-core-synch-l1-2-1
CreateWaitableTimerW
WaitForMultipleObjects
api-ms-win-core-debug-l1-1-0
OutputDebugStringW
IsDebuggerPresent
api-ms-win-core-file-l2-1-0
MoveFileExW
ReadDirectoryChangesW
ReplaceFileW
api-ms-win-core-sysinfo-l1-2-0
VerSetConditionMask
api-ms-win-core-io-l1-1-1
CancelIo
api-ms-win-core-memory-l1-1-0
VirtualFree
VirtualQuery
VirtualAlloc
VirtualProtect
api-ms-win-core-file-l1-1-0
CreateFileW
api-ms-win-core-sysinfo-l1-1-0
GetSystemInfo
api-ms-win-core-version-l1-1-0
GetFileVersionInfoSizeExW
VerQueryValueW
GetFileVersionInfoExW
api-ms-win-core-com-l1-1-0
CoTaskMemAlloc
CoGetApartmentType
CoGetObjectContext
CoCreateFreeThreadedMarshaler
CoCreateInstance
CoUninitialize
CoInitializeEx
CoTaskMemFree
api-ms-win-core-processthreads-l1-1-1
OpenProcess
GetProcessMitigationPolicy
FlushInstructionCache
SetProcessMitigationPolicy
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
Sleep
WaitOnAddress
api-ms-win-core-memory-l1-1-3
SetProcessValidCallTargets
api-ms-win-shcore-scaling-l1-1-1
GetDpiForMonitor
shell32
Shell_NotifyIconGetRect
Shell_NotifyIconW
SHGetKnownFolderPath
SHAppBarMessage
ShellExecuteExW
shlwapi
AssocQueryKeyW
user32
UnhookWindowsHookEx
GetForegroundWindow
GetTopWindow
UnregisterPowerSettingNotification
InSendMessage
GetWindowLongPtrW
EnumDisplayMonitors
SetWindowRgn
SetWindowLongPtrW
EnumChildWindows
GetWindow
SetUserObjectInformationW
DestroyMenu
TrackPopupMenu
CreatePopupMenu
MonitorFromRect
InsertMenuItemW
GetMenuItemInfoW
GetCursorPos
SetFocus
FillRect
MonitorFromPoint
GetAncestor
TrackMouseEvent
ClientToScreen
GetMessageW
CreateWindowExW
DestroyWindow
SystemParametersInfoW
GetSysColor
GetWindowTextW
IsZoomed
IsWindowVisible
GetWindowTextLengthW
RegisterClassExW
SetClassLongPtrW
UnregisterClassW
RegisterPowerSettingNotification
AllowSetForegroundWindow
PostMessageW
FindWindowExW
GetDpiForWindow
SendMessageW
RegisterHotKey
RegisterWindowMessageW
MessageBoxExW
GetDesktopWindow
DefWindowProcW
SetWinEventHook
UnhookWinEvent
GetWindowRect
IsIconic
SetWindowPos
MonitorFromWindow
SetWindowTextW
ShowWindow
IsWindow
DispatchMessageW
DestroyIcon
GetMonitorInfoW
PeekMessageW
MsgWaitForMultipleObjectsEx
TranslateMessage
LoadCursorW
GetClientRect
GetWindowThreadProcessId
PostQuitMessage
SetForegroundWindow
BeginPaint
EndPaint
SetLayeredWindowAttributes
GetClassNameW
UnregisterHotKey
kernel32
RegisterApplicationRestart
CreateToolhelp32Snapshot
GetSystemPowerStatus
Module32FirstW
Module32NextW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
MultiByteToWideChar
GetFileInformationByHandleEx
CopyFileW
GetTempPathW
SetFileInformationByHandle
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
FindFirstFileW
FindClose
CreateDirectoryW
GetLocaleInfoEx
FormatMessageA
LocalFree
SetSearchPathMode
GetCurrentPackageFamilyName
GetCurrentPackageFullName
GetModuleHandleA
VerifyVersionInfoW
ntdll
RtlFreeUnicodeString
RtlInitAnsiString
RtlAnsiStringToUnicodeString
programlog
?GetLogMessage@impl@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$basic_string_view@_WU?$char_traits@_W@std@@@4@0@Z
?HandleCriticalWithErrorInfo@impl@Error@@YAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@0Usource_location@4@JPEAUIRestrictedErrorInfo@@@Z
??$Handle@$04@impl@Error@@YAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@0Usource_location@3@@Z
?ShouldLogInternal@impl@Error@@YA_NW4level_enum@level@spdlog@@@Z
?MessageFromHRESULT@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@J@Z
?MessageFromHresultError@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBUhresult_error@winrt@@@Z
?MessageFromStdErrorCode@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBVerror_code@3@@Z
??$Handle@$03@impl@Error@@YAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@0Usource_location@3@@Z
?GetSink@Log@@SA?AV?$shared_ptr@V?$lazy_file_sink@Vmutex@std@@@@@std@@XZ
?MessageFromErrno@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?state@?$lazy_file_sink@Vmutex@std@@@@QEAA?AW4lazy_sink_state@@XZ
?Log@impl@Error@@YAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@W4level_enum@level@spdlog@@Usource_location@4@@Z
?Initialize@Log@@SAXAEBV?$optional@Vpath@filesystem@std@@@std@@@Z
msvcp140_atomic_wait
__std_atomic_notify_one_direct
__std_atomic_wait_direct
msvcp140
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
_Query_perf_frequency
_Thrd_yield
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
_Thrd_detach
_Wcsxfrm
?id@?$collate@_W@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@_W@std@@2V0locale@2@A
_Wcscoll
_Cnd_do_broadcast_at_thread_exit
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
_Thrd_join
_Thrd_id
?_Syserror_map@std@@YAPEBDH@Z
?id@?$numpunct@_W@std@@2V0locale@2@A
?_Winerror_map@std@@YAHH@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Id_cnt@id@locale@std@@0HA
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Throw_Cpp_error@std@@YAXH@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Query_perf_counter
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcmp
memmove
strchr
memcpy
memset
__C_specific_handler
_CxxThrowException
__std_terminate
__std_exception_destroy
__std_exception_copy
_purecall
__current_exception
__current_exception_context
api-ms-win-crt-runtime-l1-1-0
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
abort
_c_exit
_register_thread_local_exe_atexit_callback
_set_app_type
_seh_filter_exe
_invoke_watson
_invalid_parameter_noinfo
_cexit
_errno
_wassert
_configure_wide_argv
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_beginthreadex
terminate
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
malloc
calloc
realloc
_callnewh
api-ms-win-crt-string-l1-1-0
iswspace
api-ms-win-crt-stdio-l1-1-0
fwrite
fclose
_wfopen_s
__p__commode
_set_fmode
fread
_wfsopen
__stdio_common_vswprintf
api-ms-win-crt-math-l1-1-0
_fdsign
pow
_dclass
_fdclass
_ldsign
lroundf
_ldclass
ceilf
_dsign
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
oleaut32
SysStringLen
SysFreeString
SetErrorInfo
GetErrorInfo
api-ms-win-core-winrt-error-l1-1-0
RoFailFastWithErrorContext
RoTransformError
api-ms-win-core-winrt-error-l1-1-1
RoOriginateLanguageException
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
api-ms-win-core-threadpool-l1-2-0
TrySubmitThreadpoolCallback
api-ms-win-core-com-l1-1-1
RoGetAgileReference
Name
.text
Size
432KB
Virtual Size
431KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
273KB
Virtual Size
272KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
106KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=259, version=35207,
count=9, id=260, version=35207,
count=8, id=257, version=35207,
count=2, id=257, version=35228,
count=1, id=263, version=33145,
count=3, id=259, version=33145,
count=4, id=260, version=33145,
count=1, id=262, version=33145,
count=74, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=44, id=261, version=35207,
count=15, id=257, version=33145,
count=364, id=1, productName=Unmarked objects,
count=20, id=265, version=35228,
count=1, id=255, version=35228,
count=12, id=151,
count=1, id=258, version=35228,
Xaml.dll
- IMPHASH 559bc13f68d3a337fdf73f02d0de33bf
- SHA256 473cc6ed8e9a1f37dbfee0c0b4ef04de9bbe5b8872b7f75d7cb2c9e50576f13c
- MD5 c58038bdccc8944b3c8e1a8960110c34
- SHA1 21743e444b76b07a8c256c35ce3267fafdc35928
- SHA512 3483dde9e4400baced747c84a9e42af17d29e465ece7b8cbefbcc7a32a795eaab1010b44b713aaae6fdbbd61f697d961c5330f953e2e6d94cfbd21ca471060b9
- SSDEEP 24576:Hzw8TQN3NrgKCNh0lhSMXl9dwsaamUreK:H08o9rNLwg
- TLSH T172355C12A2AA52EAD5BDD47DD6174916F9B1782047309FDB0271850E4F3BFF80B3EA21
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8f:b6:94:e6:bf:0f:56:1c:a1:35:4b:cb:ff:9d:94:b6:cb:f6:7f:ad:f1:68:bd:bf:97:dd:aa:3d:14:80:5d:d2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Charles Milette,O=Charles Milette,L=Greenfield Park,ST=Québec,C=CA
Chains
Aug 31, 2026
CN=Charles Milette,O=Charles Milette,L=Greenfield Park,ST=Québec,C=CA
CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Charles Milette,O=Charles Milette,L=Greenfield Park,ST=Québec,C=CA
Serial Number
33:00:05:29:d9:2e:5a:3f:9e:39:4f:48:22:00:00:00:05:29:d9
Issuer
CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 29, 2026 - Sep 1, 2026
Subject
CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:15:05:3e:6e:19:8e:93:29:d9:00:00:00:00:00:15
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 26, 2026 - Mar 26, 2031
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:55:d9:dd:69:26:28:f9:f8:e2:00:00:00:00:00:55
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2025 - Oct 22, 2026
Minor OS version
0
Major OS version
6
Entry point
713824
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Xaml.pdb
user32
IntersectRect
msvcp140
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?_Xbad_function_call@std@@YAXXZ
_Wcsxfrm
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$collate@_W@std@@2V0locale@2@A
?id@?$ctype@_W@std@@2V0locale@2@A
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
_Thrd_yield
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Id_cnt@id@locale@std@@0HA
?id@?$numpunct@_W@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Xbad_alloc@std@@YAXXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
_Mbrtowc
??0_Lockit@std@@QEAA@H@Z
_Wcscoll
?_Xout_of_range@std@@YAXPEBD@Z
?_Incref@facet@locale@std@@UEAAXXZ
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Lockit@std@@QEAA@XZ
??1_Locinfo@std@@QEAA@XZ
kernel32
EnterCriticalSection
EncodePointer
TrySubmitThreadpoolCallback
GetLastError
InterlockedPushEntrySList
LoadLibraryExW
FreeLibrary
GetProcAddress
MultiByteToWideChar
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetSystemPowerStatus
HeapFree
HeapAlloc
GetProcessHeap
GetCurrentThreadId
InterlockedFlushSList
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_type_info_destroy_list
memset
memcpy
memcmp
wcsrchr
_purecall
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_terminate
memmove
strchr
__C_specific_handler
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_initialize_onexit_table
_seh_filter_dll
_execute_onexit_table
_crt_atexit
_register_onexit_function
_configure_narrow_argv
_cexit
_initterm
_invoke_watson
_initterm_e
_errno
_invalid_parameter_noinfo
abort
api-ms-win-crt-string-l1-1-0
iswspace
api-ms-win-crt-math-l1-1-0
floorf
floor
fmod
round
pow
ceil
_ldclass
_fdclass
_dclass
_fdsign
_dsign
_ldsign
sqrt
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
realloc
free
calloc
api-ms-win-crt-convert-l1-1-0
wcstol
ole32
CoCreateFreeThreadedMarshaler
RoGetAgileReference
CoGetObjectContext
CoGetApartmentType
CoTaskMemAlloc
CoTaskMemFree
oleaut32
SysFreeString
GetErrorInfo
SetErrorInfo
SysStringLen
api-ms-win-core-winrt-error-l1-1-1
RoOriginateLanguageException
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
api-ms-win-core-winrt-error-l1-1-0
RoTransformError
RoFailFastWithErrorContext
DllCanUnloadNow
DllGetActivationFactory
VSDesignerCanUnloadNow
VSDesignerDllMain
Name
.text
Size
730KB
Virtual Size
730KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
300KB
Virtual Size
299KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=30, id=261, version=35207,
count=6, id=257, version=35207,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33145,
count=150, id=1, productName=Unmarked objects,
count=33, id=265, version=35228,
count=1, id=256, version=35228,
count=1, id=258, version=35228,
[Content_Types].xml
- SHA256 dbeac373cb9bbc86fc2f8edc9f17b5d5b20f338693db2d32b52bb53787f00656
- MD5 2c9e514c88ab4fff2a57b790d5d73e19
- SHA1 443f26a9f88eb48661d1928bcfec38ff3400414d
- SHA512 590d29d5f9c01de804bca42fa35eca784f0723a0dac779cf2fbd555f54282b61786ef8dd89a8dd0ab6fe0e2e02fca2ebe5e01e4777532c6c63695e113fc26288
- TLSH T1170161D2707E9CB007A689BFDA676C501233147DA4E47B0DBF9E564EA0E075B01B13C8
- MD5 SHA1 SHA512 TLSH
resources.pri
- SHA256 1de147029b8d12cce770c1f34003b6f525d59a7b162157a9cb1f44ec2be3f827
- MD5 bfd55c133f1f4e0e4f6d12374f1716c2
- SHA1 c75d6fa8fb008b5b464b7ad6bd7dbb555e1f93a9
- SHA512 28415361f595ffb9eb3b9158cb60223a38eb8ca15f259ecac7570c7852239cea420457d805049f97ab8eb708f697e7c4d3b0f332f457ac011c85c2fe6f311d13
- SSDEEP 3072:ejccHutxkxV1NPmcQvqgqzuPlfCSTHKzwtB3aS1VA1jBtY4CI21+JGR:IxutaLPylPfSY4Cp
- TLSH T1E8B38414ABF50315F2B3EB75ADB20715B872BD73A931CB1E0059031E2972A419AB1B7F
- MD5 SHA1 SHA512 SSDEEP TLSH
AppxBlockMap.xml
- SHA256 099de4e7222426091cf77e88587cc5fa0a2ac5bd59998ef0bccb71f33155c3a0
- MD5 459d9ccafb8c4cf4f3dc53633f9c80b1
- SHA1 571d059a04cefec27335c78a21efb5c62a613d4f
- SHA512 3e72311496e8f9eef341dbb2ff3c7a3aa963304312ca4dcaed116b1bebc7f0183b3ba90550ced64006e2e98559eb6854661604332ae8e2e12457432979f8fc9e
- TLSH T122E0AB94D0B97C224225CE640BBCE0183952629B016D8AF6ECC9CC2A205A0D529023C6
- MD5 SHA1 SHA512 TLSH
AppxMetadata/AppxBundleManifest.xml
- SHA256 8ef55dc08b9cca563e54c1a2f696396edeae57a7236c3c002ab6119358be8aac
- MD5 083c1323bf838342682c24d2ba1f69f9
- SHA1 1a19cb2f84d73f2e354e36b9c82e94d1a1031a72
- SHA512 8a349a43110026b99b567f80b5658810d9c41d137a5b051d2e47b693747484b8cd65903d1c6b09b284e778d5a8a01ebb40b658dd854e73c1d77b2ef4f4294ef9
- TLSH T147414957706D2CBC1231045FF2786D42A11FAE248C39A06CD9FEBD3B27EF64900A1765
- MD5 SHA1 SHA512 TLSH
AppxSignature.p7x
- SHA256 d43b3d31927057d8e981ef124893bf23f58ff80120f76d10d22451860f0196b0
- MD5 d0b5c3c763cbfda1c62375209a8d6356
- SHA1 213d00262731e94751873949ea70e91b3bf3e51d
- SHA512 abf878e7dbe6a5a83a999cc623225ee7f917e2ded431757b2d6df7279df915cf978222cd3f6919af6f9fb9608a4eec50a7f71dd15bdac3e5d4e8e81f0f957778
- SSDEEP 192:vuzhr4nXEL1MiUiJFg9cbCzwgLC5tiJRZzwSsrbuK/X01k9z3ACTqBRKBL6n:vQZ1MiUi3g9cb8P25EJRdw1riSR9zZG3
- TLSH T1D7423AD68E3882C6ED8FAD4062FCED9B3C3C43C70850A0A256B6F9851D973C5EB1852D
- MD5 SHA1 SHA512 SSDEEP TLSH
[Content_Types].xml
- SHA256 3054f940f18b3f9c0a1db7658cf7f200e7b81e06a10823bc282d19528b1496d1
- MD5 671f697929cb7be9d6cb4f138d1750d0
- SHA1 1173d78a57a1a795a92d404d4ccea2117f517467
- SHA512 a6758da07e0b58c2a1678ce9f4e95a3e4900eea36e469f238197e2d096a2cdfad290f860e8db8f41324d2d98c0227ca5eb0e9b5bb701e08996093d5509ab80a6
- TLSH T16BF05CD2B17A4C7003F68D7EDD23AA58127200BD54EE2749BFF65B4E11C465B12913D8
- MD5 SHA1 SHA512 TLSH