Isaeva-Cracked[.]rar

Sharing

Copy URL Twitter E-mail

General

Target
Isaeva-Cracked.rar
Size 19.3MB
Sample261113-mxevhatv9m
SHA256 f22e1beea8cdc42138720ce72d3d46a11c36aabfc77ee8a2a1e91a03175eff10
MD5 48d7a1c4bb61a2a2ac813d72c0453425
SHA1 78d3017025f400bd1a0e2dcfb7ea33805ff2312a
SHA512 93630cb9ef61c1861a9efe2a043a50c1192ca03199110e00e3ba2ecf01934288f8ccce43e1e27d7fd7be93ccf3791160bd39bc2b87d4eea13c486f7fcba988e8
SSDEEP 393216:xdj2bRkeCQn3ZejtdfkSyT9nWJUJOY866HwuMqcS3EMCbdUi/kYTcQT:3e33Zej3f4TdWeIYd6QwCB5cY/
TLSH
T1D8173393249E10268BB01F6D51906BC29817ACD9AFF3C754D2292DDE4CD382BD73B936
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Isaeva-Module.dll
unpack001/Isaeva.exe

File Explorer

Isaeva-Cracked.rar

.rar 19.3MB
Isaeva-Module.dll

.dll 12.0MB
Isaeva.exe

.exe 16.7MB
WebView2Loader.dll

.dll 190KB

Isaeva-Cracked.rar

SHA256 f22e1beea8cdc42138720ce72d3d46a11c36aabfc77ee8a2a1e91a03175eff10
MD5 48d7a1c4bb61a2a2ac813d72c0453425
SHA1 78d3017025f400bd1a0e2dcfb7ea33805ff2312a
SHA512 93630cb9ef61c1861a9efe2a043a50c1192ca03199110e00e3ba2ecf01934288f8ccce43e1e27d7fd7be93ccf3791160bd39bc2b87d4eea13c486f7fcba988e8
SSDEEP 393216:xdj2bRkeCQn3ZejtdfkSyT9nWJUJOY866HwuMqcS3EMCbdUi/kYTcQT:3e33Zej3f4TdWeIYd6QwCB5cY/
TLSH
T1D8173393249E10268BB01F6D51906BC29817ACD9AFF3C754D2292DDE4CD382BD73B936
MD5 SHA1 SHA512 SSDEEP TLSH

Isaeva-Module.dll

IMPHASH d3cde77ad4bdc2673260abdca5a3b563
SHA256 22e9c0b31d2f9bbff74b3df1c1f2c2a81bfc95e0ff9204cf7328c09e42df3934
MD5 65d16ed4a7d4db7dca61d563d91313cd
SHA1 7e448761841213cb9c0a5341ee7ce5b0b1eeefdf
SHA512 bc62bc8d123cf3f3745d58a49ae2398647b4445553620f426236ef211af08c3c0dbd118bab0577cba3377b10bcb6c76180ebeb5b130bd1ae6c82fb39e9d2e738
SSDEEP 196608:vQXzllgSE7Hrls/90RbNHGePway05GidIK3M1tad:oXUSCq/90RbNHGePwQQpUQ
TLSH
T1BAC6BF36A25802E8D53EC1B8CA968F13F7713844033153DBB69869575FAB7F06A7E381
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5255792

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString WindowsGetStringRawBuffer WindowsCreateString

api-ms-win-core-winrt-l1-1-0

RoUninitialize RoInitialize RoGetActivationFactory

api-ms-win-shcore-stream-winrt-l1-1-0

CreateStreamOverRandomAccessStream

ntdll

VerSetConditionMask

kernel32

HeapAlloc HeapFree GetProcessHeap CreateFileMappingA ReleaseSRWLockExclusive AcquireSRWLockExclusive SleepEx TlsFree TlsSetValue OutputDebugStringA MultiByteToWideChar GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock GetModuleHandleA GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency IsDBCSLeadByte GetProcAddress FreeLibrary QueryPerformanceCounter CreateDirectoryW ReadFile FindFirstFileW GetFileSizeEx FindNextFileW GetCurrentProcess WriteFile GetEnvironmentVariableW FindClose CreateFileW Sleep GetTickCount64 GetLastError K32GetProcessMemoryInfo DeleteFileW CloseHandle GetActiveProcessorCount GetLocalTime LocalFree GetCurrentProcessId GetSystemTimeAsFileTime GetProcessTimes FormatMessageA SetEvent ResetEvent CreateEventA RaiseException VirtualQuery WaitForSingleObject GetCurrentThreadStackLimits ReadProcessMemory SetLastError MoveFileExW GetModuleHandleW FlushFileBuffers GetConsoleWindow AllocConsole GetModuleFileNameW GetFileAttributesW SetFilePointerEx GetTempFileNameW SizeofResource FindResourceA GetCurrentThreadId CreateFileA LockResource GetWindowsDirectoryA LoadResource CreateDirectoryA GetModuleFileNameA GetProcessWorkingSetSizeEx SetInformationJobObject AssignProcessToJobObject CreateJobObjectW GetTempPathA SetProcessWorkingSetSizeEx GlobalMemoryStatusEx UnmapViewOfFile OpenFileMappingA MapViewOfFile GetSystemInfo VirtualProtect LoadLibraryExA GetFinalPathNameByHandleW TlsGetValue TlsAlloc SetFileInformationByHandle CreateFile2 AreFileApisANSI GetFileInformationByHandleEx InitOnceComplete InitOnceBeginInitialize GetFileAttributesExW FindFirstFileExW GetCurrentDirectoryW GetLocaleInfoEx AcquireSRWLockShared ReleaseSRWLockShared InitializeSListHead SleepConditionVariableSRW WakeAllConditionVariable FormatMessageW CreateThread WaitForSingleObjectEx GetEnvironmentVariableA WaitForMultipleObjects PeekNamedPipe GetFileType GetStdHandle VerifyVersionInfoW GetTickCount OpenEventA DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection GetFullPathNameW

msvcp140

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z _Xtime_get_ticks ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z _Thrd_detach ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ ??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@ ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?fail@ios_base@std@@QEBA_NXZ ??Bios_base@std@@QEBA_NXZ ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z _Cnd_wait ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?_Winerror_map@std@@YAHH@Z _Tolower ??_7ctype_base@std@@6B@ _Toupper ??1ctype_base@std@@UEAA@XZ ?_Getctype@_Locinfo@std@@QEBA?AU_Ctypevec@@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z _Mtx_trylock ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z _Thrd_hardware_concurrency _Cnd_unregister_at_thread_exit ?__ExceptionPtrCreate@@YAXPEAX@Z ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?classic@locale@std@@SAAEBV12@XZ ?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z ?__ExceptionPtrToBool@@YA_NPEBX@Z ?__ExceptionPtrDestroy@@YAXPEAX@Z ?__ExceptionPtrCurrentException@@YAXPEAX@Z ?__ExceptionPtrRethrow@@YAXPEBX@Z _Cnd_register_at_thread_exit ?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?_Xinvalid_argument@std@@YAXPEBD@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A __crtLCMapStringA ?uncaught_exceptions@std@@YAHXZ _Cnd_broadcast _Thrd_join _Query_perf_counter _Thrd_id ?_Syserror_map@std@@YAPEBDH@Z ?_Xbad_function_call@std@@YAXXZ _Query_perf_frequency _Cnd_signal _Mtx_unlock _Mtx_lock ?_Random_device@std@@YAIXZ ?_Throw_Cpp_error@std@@YAXH@Z ??1_Facet_base@std@@UEAA@XZ ??0_Locinfo@std@@QEAA@PEBD@Z ??1_Locinfo@std@@QEAA@XZ ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ??0facet@locale@std@@IEAA@_K@Z ??1facet@locale@std@@MEAA@XZ ?tolower@?$ctype@D@std@@QEBADD@Z ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z _Strcoll ??_7facet@locale@std@@6B@ ?id@?$collate@D@std@@2V0locale@2@A ?_Xlength_error@std@@YAXPEBD@Z ?id@?$ctype@D@std@@2V0locale@2@A ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Id_cnt@id@locale@std@@0HA ?_Xbad_alloc@std@@YAXXZ ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ _Strxfrm ??_7_Facet_base@std@@6B@ _Cnd_do_broadcast_at_thread_exit

msvcp140_atomic_wait

__std_atomic_notify_all_direct __std_atomic_wait_direct

dcomp

DCompositionCreateDevice

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception wcschr longjmp memchr __std_terminate _CxxThrowException memmove memcpy memcmp __intrinsic_setjmp strrchr strstr _purecall __C_specific_handler __RTtypeid __std_type_info_compare __std_exception_copy __std_exception_destroy strchr __std_type_info_destroy_list __current_exception_context __C_specific_handler_noexcept memset

api-ms-win-crt-stdio-l1-1-0

fgetpos ungetc fgets fsetpos _fseeki64 _get_stream_buffer_pointers feof _close fputc fputs fgetc _wsopen_s __stdio_common_vswprintf_s ftell __stdio_common_vsnprintf_s __acrt_iob_func fflush fclose _lseeki64 fseek _write _read _wfopen __stdio_common_vsscanf fread _wfsopen __stdio_common_vsprintf setvbuf fwrite __stdio_common_vfprintf

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

malloc _callnewh _aligned_malloc free _aligned_free realloc calloc

api-ms-win-crt-convert-l1-1-0

wcstombs_s atof strtoul strtoull atoi strtod strtoll strtol

api-ms-win-crt-string-l1-1-0

toupper isalnum isblank isspace strpbrk strcspn strncat wcsnlen strncpy_s isxdigit isdigit strncpy strspn towlower islower _wcsnicmp _wcsicmp wcsncmp wcsncpy_s wcscpy_s tolower _strdup strcpy strncmp strlen isalpha wcslen strcpy_s strcmp _stricmp

api-ms-win-crt-math-l1-1-0

ceil atan2f atan2 atan expf acosf acos _dclass floor floorf fmod fmodf log log10 log2 llround cos logf pow _dsign powf roundf trunc cosf sin round sinf sinh sqrt sqrtf tanh tan tanf _fdopen frexp ceilf cosh lround modf exp asin ldexp

api-ms-win-crt-runtime-l1-1-0

strerror_s _configure_narrow_argv _resetstkoflw _initialize_narrow_environment abort terminate _invoke_watson _initterm_e strerror _initialize_onexit_table _errno _register_onexit_function _execute_onexit_table _initterm _beginthreadex _cexit _seh_filter_dll _crt_atexit

api-ms-win-crt-locale-l1-1-0

___lc_collate_cp_func ___lc_locale_name_func localeconv ___lc_codepage_func

api-ms-win-crt-filesystem-l1-1-0

_unlink _fstat64 _fullpath _lock_file _wstat64 _unlock_file

api-ms-win-crt-time-l1-1-0

_time64 strftime _localtime64_s _gmtime64_s

api-ms-win-crt-environment-l1-1-0

getenv _dupenv_s

Isaeva.exe

SHA256 b391d2cc439be83b0bf4c6f859095d53ad95d228b5a8f5e836f27ed229431e16
MD5 b5e8f67419108292ef89bb291d075ff8
SHA1 87b1489bd16041e3e05e8c951ce80239d132a01c
SHA512 082fb271bab528f2b399cf3a240db7eaccf8ce2144f67ec7af5ffbddb9805f42349567c7641402753f7166e253595d9df462d21402e38e31527476362fbf60f8
SSDEEP 393216:WYca4JblL3UODCyWZs6h32jiLHTOjuJxkAU:hilLkQCrllj7xkN
TLSH
T16C0722C0A7DECC3BDD6E06B5DCA10069CFE6C146A203DB4F157E64E62ACB3451D88A97
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

WebView2Loader.dll

IMPHASH 8596af6dd51622a07d3ec94b56ffd325
SHA256 3426dcc55fdfb8b5e7ac623cf33b4ccf283fbf68a0c5a65bddfdb4d749a8abee
MD5 f1426c839cbf0e9a4eae7c67916cedff
SHA1 60cdeba80ce6357d9598947bd65f2db31e5efa2c
SHA512 392d172f8e960a2d18d18175813e091c27d12065db06c4fcaabb6429bbb1306a3087fff33e51bf9226759b34d454109c11a310711ff9f7c6f9d8f78164b661f3
SSDEEP 3072:hJoWXgNjIFnTf75x2v/KUUbPXGUIufAuzA2dTZnaZED3JU9jfbKuFjaS3:LKI175Av/KLB9zz3nyED3JU9DKC
TLSH
T142145D06B3E940F6F976D67C89A38A46F67278110710AAEF0360473D5F2BBD49A3D721
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

50:fb:9e:c0:21:af:a3:68:11:4c:c5:76:f2:69:83:67:59:5c:74:f2:13:50:cb:fb:bc:be:9b:f0:74:51:a1:be

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 20, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:33:4e:c2:48:56:4c:2b:5c:6f:00:00:00:00:02:33

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:2b:bb:00:50:ff:4d:3b:9a:a1:00:01:00:00:02:2b

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 19, 2026 - May 17, 2027

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

Major OS version

Entry point

40592

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WebView2Loader.dll.pdb

kernel32

AcquireSRWLockExclusive CloseHandle CreateFileW DeleteCriticalSection EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetFileAttributesW GetFileType GetLastError GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringEx LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalAlloc LocalFree MultiByteToWideChar OpenEventW OutputDebugStringA OutputDebugStringW QueryPerformanceCounter RaiseException ReleaseSRWLockExclusive RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SleepConditionVariableSRW TerminateProcess UnhandledExceptionFilter VirtualProtect VirtualQuery WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

Name

.text

Size

110KB

Virtual Size

110KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

52KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Isaeva-Cracked.rar

Isaeva-Module.dll

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-shcore-stream-winrt-l1-1-0

ntdll

kernel32

msvcp140

msvcp140_atomic_wait

dcomp

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

generic

Isaeva.exe

generic

WebView2Loader.dll

kernel32

generic