SaNet.st.Disk.Drill.Enterprise.6.3.1398.0.zip
- SHA256 bf267acff6b64b53adb4fd99ee84bb85eb25e0b3000e8b6e1ae454246ba0f4d3
Overview
overview
8Static
static
5SaNet.st.D....0.zip
windows10-2004-x64
1SaNet.st.D....0.zip
windows11-ltsc_2024-x64
8SaNet.st.D...DD.exe
windows10-2004-x64
1SaNet.st.D...DD.exe
windows11-ltsc_2024-x64
1SaNet.st.D...DD.exe
windows10-2004-x64
1SaNet.st.D...DD.exe
windows11-ltsc_2024-x64
1SaNet.st.D...in.exe
windows10-2004-x64
4SaNet.st.D...in.exe
windows11-ltsc_2024-x64
6Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral2
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
31 signatures
600 seconds
Behavioral task
behavioral3
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral4
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
600 seconds
Behavioral task
behavioral5
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral6
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
600 seconds
Behavioral task
behavioral7
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/disk-drill-win.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
6 signatures
600 seconds
Behavioral task
behavioral8
Sample
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/disk-drill-win.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
19 signatures
600 seconds
General
- Target SaNet.st.Disk.Drill.Enterprise.6.3.1398.0.zip
- Size 60.6MB
- Sample261024-rhfkpscs5j
- SHA256 bf267acff6b64b53adb4fd99ee84bb85eb25e0b3000e8b6e1ae454246ba0f4d3
- MD5 258b4c96ad58bf533bf55d0059c5df54
- SHA1 b2581d4e6094ae8f4d1396d20f08cd85086d63ff
- SHA512 9c31a88f4a895e17133db863c2345cafcd159ef5c69cef6dd71a57421a9a7351e672575d451cd6e54ba01c2b23ded3d454531a159339ec35185126cc6a5c60ec
- SSDEEP 1572864:0vQsECqwThwNU+0DfwreEMEwVsSiw3xtqquBVqJAWnhZdhkAdlG1KWS:pcvHs6BKBVquWpRd0K9
- TLSH T1B1D733DF5AD03CC6FBB8DB36E62C6E041CD64A0DC0DB49DE9561E36F2622AE29714344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.exe - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.dll
File Explorer
-
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0.zip.zip 60.6MB
-
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.dll.exe 9.9MB
-
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.exe.exe 389KB
-
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/disk-drill-win.exe.exe 54.0MB
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.dll
- SHA256 b5173243479cc80c1d8544ef8ca9e0c8c581daf49e83f23b3a782ee4af32d593
- MD5 2c8fdd779c1e9387284b212c4d129d90
- SHA1 ee97f4086620a5a8b544913f3ceb6479530f3b8b
- SHA512 ac0845c623be2ffa45d446e6e4331d82a67a3b6e2c4c13bfc10a3d6ec7b92e539d6ee33753f1f454b56a2f810f961e7bcf4cbe8b55a1887bec65c5a3283ac50b
- SSDEEP 196608:1FwZydILuHWBLyOlJXfAdl+26XU7jl+T2UhayOlJOvMG:vm/BL3Xf042EUv4qUha3OvM
- TLSH T185A6F11536A8D43EC06F4AB0D9A301181A74FC4667E19A5714FBBE0D3CF67828D29B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.text
Size
9.6MB
Virtual Size
9.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
225KB
Virtual Size
225KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/Crack UZ1/DD.exe
- IMPHASH 7a8c872f8e13d32f36a675b52eda1d6e
- SHA256 ef336831c4d12ef8fb98864ce90930941b92998c6284a104d6a7327b2afbe352
- MD5 621da4bb43610338a835f2d5dd5034b3
- SHA1 4d73c1c9798646c86e2ac3f9e13fb8d14021128c
- SHA512 04411772492e76158d1da63f7ed38a4d74acb1ac99780209ff7eaec49094bdbff20c79268b567e2f4bf95c7ad817606b158757ab505c99c051814c8f21dd892a
- SSDEEP 12288:BCgIrbvDm8mZTy9mg5qLbWelryGyNj8may:QiLZuog5hGryGyNj8may
- TLSH T1C6849E22F684117ED16AB535C4634D51BA723C5987709ACB07B27EBE3E2B2D09E38713
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
ae:bc:3a:06:de:79:8e:54:31:9a:ca:e7:67:fb:f7:fc:70:24:11:be:15:ec:a0:88:44:a2:44:e9:5a:7f:a3:c1
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=7954709,CN=CleverFiles Inc.,O=CleverFiles Inc.,L=Claymont,ST=Delaware,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Jun 19, 2026
SERIALNUMBER=7954709,CN=CleverFiles Inc.,O=CleverFiles Inc.,L=Claymont,ST=Delaware,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2013 - Jan 15, 2038
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=7954709,CN=CleverFiles Inc.,O=CleverFiles Inc.,L=Claymont,ST=Delaware,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0a:8d:24:43:7d:63:ed:d6:10:26:a2:65:07:28:18:4d
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 31, 2024 - Jan 6, 2028
Subject
CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE
Serial Number
84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4
Issuer
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2025 - Jan 10, 2037
Subject
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Serial Number
83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 16, 2025 - Jul 16, 2041
Subject
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 9, 2020 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Minor OS version
0
Major OS version
6
Entry point
75200
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
shell32
ShellExecuteW
advapi32
RegCloseKey
ReportEventW
RegisterEventSourceW
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
kernel32
GetSystemTimeAsFileTime
TlsFree
CreateActCtxW
ActivateActCtx
GetLastError
FindResourceW
GetWindowsDirectoryW
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryExW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetStdHandle
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetConsoleMode
GetFileAttributesExW
LoadLibraryA
WriteConsoleW
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
OutputDebugStringW
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
user32
MessageBoxW
api-ms-win-crt-runtime-l1-1-0
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___wargv
__p___argc
_exit
exit
_initterm_e
_errno
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
abort
_invoke_watson
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
malloc
_callnewh
free
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64_s
wcsftime
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfwprintf
__p__commode
fputwc
__acrt_iob_func
__stdio_common_vswprintf
_set_fmode
_wfsopen
fflush
setvbuf
__stdio_common_vsnwprintf_s
api-ms-win-crt-locale-l1-1-0
_create_locale
___mb_cur_max_func
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_configthreadlocale
setlocale
_lock_locales
_free_locale
_unlock_locales
api-ms-win-crt-string-l1-1-0
strlen
strcmp
wcsncmp
toupper
strcpy_s
_wcsdup
wcsnlen
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
91KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
49KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
225KB
Virtual Size
228KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=35207,
count=12, id=260, version=35207,
count=87, id=261, version=35207,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33140,
count=209, id=1, productName=Unmarked objects,
count=10, id=265, version=35217,
count=1, id=258, version=35217,
SaNet.st.Disk.Drill.Enterprise.6.3.1398.0/disk-drill-win.exe
- IMPHASH a4f9a8cc2c50637fc36c9d1fb0cbe186
- SHA256 9bb6f0bdf474f8333f7567121296c983db145c3a67a0c23b92ff1f8a66a5e12f
- MD5 7f9487eaf5b2e641acde6f422b90c4ad
- SHA1 19ea70014c329d0c4725c346e167b138219e96d3
- SHA512 12d8512af95242ad783f0806798086af63bcf79444ca827d8cafcda923b3de39919784abede7886ed4aeb0d58b01a4973e9683c70f135bffe4c573211496fa99
- SSDEEP 1572864:UWMUZXtM+4zcBraoJ9V4s4I1wzMe2/nt5m3qfzCZtS6x:brDfb1wo3/uoz2SM
- TLSH T13BC733B623E028E6D6F98336E5548531BEB07D0D232244ABC5A5FD2D3F36A6125BF305
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d4:06:7d:9c:14:27:6d:2d:ad:8e:7c:09:88:f5:dd:70:53:48:57:31:62:61:6a:9d:11:4b:d6:a0:00:6b:ea:8a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=7954709,CN=CleverFiles Inc.,O=CleverFiles Inc.,L=Claymont,ST=Delaware,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Jun 19, 2026
SERIALNUMBER=7954709,CN=CleverFiles Inc.,O=CleverFiles Inc.,L=Claymont,ST=Delaware,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2013 - Jan 15, 2038
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=7954709,CN=CleverFiles Inc.,O=CleverFiles Inc.,L=Claymont,ST=Delaware,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0a:8d:24:43:7d:63:ed:d6:10:26:a2:65:07:28:18:4d
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 31, 2024 - Jan 6, 2028
Subject
CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE
Serial Number
84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4
Issuer
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2025 - Jan 10, 2037
Subject
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Serial Number
83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 16, 2025 - Jul 16, 2041
Subject
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 9, 2020 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Minor OS version
0
Major OS version
6
Entry point
391632
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
D:\a\wix\wix\build\burn\Release\x64\burn.pdb
kernel32
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseMutex
CreateEventW
GetCurrentProcess
CreateThread
GetNativeSystemInfo
VerSetConditionMask
GetSystemTime
GetComputerNameW
VerifyVersionInfoW
GetDateFormatW
CompareStringW
GetUserDefaultUILanguage
GetUserDefaultLangID
GetSystemDefaultLangID
GetStringTypeW
CreateProcessW
DuplicateHandle
GetExitCodeProcess
CompareStringOrdinal
ProcessIdToSessionId
OpenProcess
GetProcessId
SetProcessShutdownParameters
CreateSemaphoreW
LocalFileTimeToFileTime
GetExitCodeThread
DosDateTimeToFileTime
CompareStringA
SetThreadExecutionState
ReleaseSemaphore
CreateMutexW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
FreeLibrary
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RtlPcToFileHeader
GetStdHandle
GetModuleHandleExW
GetFileType
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
WriteConsoleW
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
ExpandEnvironmentStringsW
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetModuleFileNameW
GetSystemWow64DirectoryW
GetSystemDirectoryW
GetLocalTime
SetLastError
GetTempPathW
GetVolumePathNameW
GetTempFileNameW
GetFullPathNameW
CopyFileW
GlobalFree
GlobalAlloc
Sleep
SetFileTime
SetFilePointerEx
SetEndOfFile
ReadFile
LoadLibraryExA
GetFileSizeEx
LCMapStringW
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
FormatMessageW
LocalFree
MoveFileExW
SetFileAttributesW
RemoveDirectoryW
GetFileAttributesW
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
GetCurrentDirectoryW
LoadLibraryExW
GetProcAddress
GetModuleHandleW
WaitForMultipleObjects
WaitForSingleObject
HeapSetInformation
GetLastError
lstrlenA
GetCurrentProcessId
GetModuleHandleA
MulDiv
GetSystemWindowsDirectoryW
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
LoadResource
LockResource
SizeofResource
FindResourceExA
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GetTimeZoneInformation
WriteFile
SetFilePointer
CreateFileA
ExitProcess
CloseHandle
InitializeCriticalSectionAndSpinCount
CreateFileW
user32
GetDC
ReleaseDC
MonitorFromPoint
MonitorFromWindow
ShowWindow
IsDialogMessageW
LoadCursorW
GetMonitorInfoW
SetWindowLongPtrW
GetWindowLongPtrW
GetCursorPos
MessageBoxW
SetWindowPos
CreateWindowExW
UnregisterClassW
RegisterClassW
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
WaitForInputIdle
IsWindow
PostMessageW
LoadBitmapW
gdi32
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC
CreateDCW
CreateCompatibleDC
GetDeviceCaps
advapi32
GetUserNameW
CryptAcquireContextW
CryptReleaseContext
QueryServiceConfigW
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
OpenProcessToken
AllocateAndInitializeSid
CheckTokenMembership
GetTokenInformation
AdjustTokenPrivileges
IsWellKnownSid
LookupPrivilegeValueW
RegCreateKeyExW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
ControlService
CloseServiceHandle
ChangeServiceConfigW
SetEntriesInAclW
DecryptFileW
InitializeAcl
CreateWellKnownSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
ReportEventW
OpenEventLogW
CloseEventLog
RegQueryInfoKeyW
RegDeleteValueW
RegQueryValueExW
InitiateSystemShutdownExW
RegOpenKeyExW
RegCloseKey
SetNamedSecurityInfoW
RegDeleteKeyW
RegEnumKeyExW
RegEnumValueW
RegSetValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetEntriesInAclA
ole32
CoInitializeEx
CoInitialize
CoInitializeSecurity
CoUninitialize
CLSIDFromProgID
CoTaskMemFree
StringFromGUID2
CoCreateInstance
oleaut32
SysFreeString
VariantInit
SysAllocString
VariantClear
shell32
ShellExecuteExW
CommandLineToArgvW
SHGetFolderPathW
Name
.text
Size
548KB
Virtual Size
548KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
266KB
Virtual Size
266KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
424B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
240KB
Virtual Size
239KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=143, id=261, version=30795,
count=9, id=259, version=33808,
count=18, id=260, version=33808,
count=46, id=261, version=33808,
count=11, id=260, version=30795,
count=2, id=262, version=30795,
count=15, id=257, version=30795,
count=357, id=1, productName=Unmarked objects,
count=89, id=261, version=34120,
count=1, id=255, version=34120,
count=3, id=151,
count=1, id=258, version=34120,