General

Malware Config

Signatures

Files

• 87ab17e508a10e428e8866ae491876252f7f5c6a060ee99bfa34b8c321abeedd

  .7z
• ????-???/.__MACOS__/.__MACOS__/.__MACOS__/.__MACOS1__/360zip - ??.exe

  .exe windows x86

  bdb66b6977e4287a95f73e4309d7b1ba

  
  

  Code Sign

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:1f:3a:05:7a:1d:ce:4b:f7:d7:6d:0c:7a:df:83:7e

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-11-2019 00:00

  Not After

  04-02-2023 12:00

  Subject

  CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0c:83:09:ba:16:54:68:50:e6:05:e7:5d:77:3e:56:de

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-11-2019 00:00

  Not After

  04-02-2023 12:00

  Subject

  CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  28-01-2021 11:08

  Not After

  01-03-2032 11:08

  Subject

  CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20-06-2018 00:00

  Not After

  10-12-2034 00:00

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  10-12-2014 00:00

  Not After

  10-12-2034 00:00

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  98:73:99:72:74:26:3e:17:67:74:86:dd:59:6d:90:c5:31:4d:f0:e0:ed:1f:24:2d:15:d4:bd:d8:6a:49:a4:ea

  Signer

  Actual PE Digest

  98:73:99:72:74:26:3e:17:67:74:86:dd:59:6d:90:c5:31:4d:f0:e0:ed:1f:24:2d:15:d4:bd:d8:6a:49:a4:ea

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

  19-01-2022 07:45

  Valid: true

  Chain 1

  CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  ba:d8:cd:2b:fb:87:d3:f3:9e:58:2e:17:18:cc:26:a9:c4:9b:1c:2a

  Signer

  Actual PE Digest

  ba:d8:cd:2b:fb:87:d3:f3:9e:58:2e:17:18:cc:26:a9:c4:9b:1c:2a

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

  19-01-2022 07:45

  Valid: true

  Chain 1

  CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  lstrcpynW

  lstrlenA

  GetFileAttributesExW

  GlobalSize

  OutputDebugStringW

  FormatMessageW

  CreateMutexW

  GetShortPathNameW

  GetLogicalDrives

  GetDriveTypeW

  GetVolumeInformationW

  lstrcatW

  GetFileTime

  GetDateFormatW

  GetTimeFormatW

  CompareStringW

  OpenProcess

  OpenEventW

  GetSystemTime

  SystemTimeToFileTime

  CopyFileW

  CompareFileTime

  SleepEx

  FlushFileBuffers

  UnmapViewOfFile

  CreateFileMappingW

  GetSystemInfo

  MapViewOfFile

  SetFilePointerEx

  GetTempFileNameW

  WaitForMultipleObjects

  lstrcmpA

  lstrcmpiA

  GetFileAttributesA

  GetCurrentThread

  GetThreadContext

  VirtualQuery

  SetThreadPriority

  VirtualAlloc

  OpenThread

  GetThreadPriority

  VirtualProtect

  SuspendThread

  ResumeThread

  GetFullPathNameW

  FileTimeToLocalFileTime

  GetModuleHandleExW

  SetEnvironmentVariableA

  SetStdHandle

  DeviceIoControl

  WriteConsoleA

  GetLocaleInfoW

  GetModuleHandleA

  IsValidLocale

  EnumSystemLocalesA

  GetUserDefaultLCID

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetStringTypeA

  GetConsoleMode

  GetConsoleCP

  GetStartupInfoA

  SetHandleCount

  GetTimeZoneInformation

  InitializeCriticalSectionAndSpinCount

  GetModuleFileNameA

  HeapCreate

  IsValidCodePage

  GetOEMCP

  GetACP

  CompareStringA

  GetStringTypeW

  LCMapStringW

  LCMapStringA

  RtlUnwind

  GetFileType

  WriteConsoleW

  GetCPInfo

  CreateThread

  ExitThread

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TlsFree

  TlsAlloc

  ReleaseMutex

  HeapWalk

  HeapLock

  HeapUnlock

  TlsSetValue

  TlsGetValue

  LocalFileTimeToFileTime

  GetSystemTimeAsFileTime

  CreateFileA

  VirtualFree

  IsProcessorFeaturePresent

  LoadLibraryA

  GetProcessHeap

  HeapSize

  HeapReAlloc

  HeapFree

  HeapAlloc

  HeapDestroy

  GetLocaleInfoA

  GetLocalTime

  GetDiskFreeSpaceW

  InterlockedExchange

  FileTimeToSystemTime

  Module32NextW

  Module32FirstW

  Process32NextW

  Process32FirstW

  CreateToolhelp32Snapshot

  MoveFileW

  GetLongPathNameW

  GetTempPathW

  lstrcpyW

  MoveFileExW

  SetEndOfFile

  WideCharToMultiByte

  GetCurrentProcessId

  SetFilePointer

  GetFileSizeEx

  ResetEvent

  SetEvent

  CreateEventW

  GetTickCount

  SetLastError

  GetSystemWindowsDirectoryW

  MulDiv

  GetPrivateProfileStringW

  OpenMutexW

  GetSystemDirectoryW

  CreateProcessW

  GetStartupInfoW

  GetCommandLineW

  GetFileSize

  WriteFile

  GetStdHandle

  LoadLibraryExW

  lstrcmpiW

  GetWindowsDirectoryW

  Sleep

  InterlockedCompareExchange

  TerminateProcess

  SetFileAttributesW

  RemoveDirectoryW

  GetFileAttributesW

  CreateFileW

  ReadFile

  CreateDirectoryW

  CloseHandle

  WaitForSingleObject

  DeleteCriticalSection

  InitializeCriticalSection

  GetModuleHandleW

  SetPriorityClass

  MultiByteToWideChar

  LocalFree

  GetCurrentThreadId

  FlushInstructionCache

  GetCurrentProcess

  GetLastError

  WritePrivateProfileStringW

  FindNextFileW

  FindClose

  FindFirstFileW

  DeleteFileW

  InterlockedDecrement

  InterlockedIncrement

  ExitProcess

  LoadLibraryW

  EnterCriticalSection

  GetProcAddress

  GetPrivateProfileIntW

  LeaveCriticalSection

  FreeLibrary

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GetVersionExW

  lstrlenW

  GlobalFree

  RaiseException

  FreeResource

  GetVersion

  GetModuleFileNameW

  FindResourceExW

  FindResourceW

  LoadResource

  LockResource

  SizeofResource

  GetConsoleOutputCP

  LocalAlloc

  user32

  GetFocus

  SetScrollInfo

  ShowScrollBar

  ReleaseDC

  UnregisterClassA

  GetDC

  GetClientRect

  SendMessageW

  GetParent

  InvalidateRect

  PostMessageW

  SetWindowLongW

  EndDialog

  GetWindowLongW

  KillTimer

  MapWindowPoints

  GetCursorPos

  SetTimer

  LoadCursorW

  SetWindowTextW

  LoadIconW

  CreatePopupMenu

  GetMenuItemCount

  MonitorFromPoint

  ScreenToClient

  MoveWindow

  UpdateWindow

  SetWindowRgn

  IsWindowEnabled

  ClientToScreen

  WindowFromPoint

  SetCursor

  LoadImageW

  FillRect

  ReleaseCapture

  SetCapture

  GetCapture

  PtInRect

  EndPaint

  BeginPaint

  DeleteMenu

  GetMenuItemInfoW

  SetMenuItemInfoW

  InsertMenuW

  InflateRect

  GetSysColor

  GetWindowDC

  GetSystemMetrics

  GetClassNameW

  GetAncestor

  GetKeyState

  IsDialogMessageW

  SetRect

  LockWindowUpdate

  SetParent

  LoadBitmapW

  EnableMenuItem

  IsClipboardFormatAvailable

  GetMenuState

  RegisterClipboardFormatW

  GetClipboardData

  CheckMenuItem

  GetMenuStringW

  wvsprintfW

  SetRectEmpty

  AppendMenuW

  InsertMenuItemW

  GetMessagePos

  GetSysColorBrush

  SystemParametersInfoW

  GetDlgItemInt

  SetDlgItemInt

  GetClassInfoW

  RegisterClassW

  GetPropW

  IsIconic

  FindWindowExW

  PostThreadMessageW

  GetSubMenu

  LoadMenuW

  RedrawWindow

  MessageBeep

  SetWindowPos

  GetWindowRect

  GetMonitorInfoW

  MonitorFromWindow

  GetWindow

  GetActiveWindow

  DestroyIcon

  MessageBoxW

  DefWindowProcW

  GetDlgItem

  ShowWindow

  GetWindowTextW

  GetWindowTextLengthW

  CallWindowProcW

  PostQuitMessage

  OpenClipboard

  EmptyClipboard

  SetClipboardData

  CloseClipboard

  IsWindowVisible

  SetActiveWindow

  SetForegroundWindow

  SetDlgItemTextW

  SetFocus

  BringWindowToTop

  EnableWindow

  IsDlgButtonChecked

  RegisterWindowMessageW

  IsWindow

  DestroyWindow

  DispatchMessageA

  DispatchMessageW

  TranslateMessage

  GetMessageA

  GetMessageW

  IsWindowUnicode

  PeekMessageW

  MsgWaitForMultipleObjects

  GetIconInfo

  CharLowerBuffW

  CreateWindowExW

  DestroyMenu

  FindWindowW

  GetDesktopWindow

  CharNextW

  GetMenuItemID

  TrackPopupMenu

  SetMenuDefaultItem

  CreateDialogParamW

  IntersectRect

  IsMenu

  DrawTextW

  GetCaretPos

  CopyRect

  DrawEdge

  SetPropW

  GetDlgCtrlID

  FrameRect

  AdjustWindowRectEx

  GetScrollPos

  GetScrollInfo

  ScrollWindow

  SetScrollPos

  IsRectEmpty

  GetClassInfoExW

  RegisterClassExW

  DialogBoxParamW

  wsprintfW

  gdi32

  GetTextMetricsW

  CreateDCW

  EnumFontFamiliesExW

  GetTextExtentPointA

  GetTextMetricsA

  CreatePenIndirect

  RoundRect

  GetCurrentObject

  CreateSolidBrush

  CombineRgn

  CreateRectRgn

  GetPixel

  SetTextColor

  SetBkMode

  SetStretchBltMode

  RestoreDC

  SaveDC

  CreateDIBSection

  DPtoLP

  CreateBitmap

  ExtTextOutW

  SetBkColor

  StretchBlt

  SetViewportOrgEx

  BitBlt

  GetTextExtentPoint32W

  CreateRoundRectRgn

  CreatePolygonRgn

  CreateFontW

  GetDeviceCaps

  CreateCompatibleBitmap

  SelectObject

  DeleteDC

  CreateCompatibleDC

  DeleteObject

  CreateFontIndirectW

  GetStockObject

  GetBkColor

  GetTextColor

  CreatePatternBrush

  GetObjectW

  PatBlt

  comdlg32

  ChooseColorW

  GetOpenFileNameW

  GetSaveFileNameW

  ChooseFontW

  advapi32

  RegQueryValueExA

  RegSetValueExW

  RegCreateKeyExW

  RegDeleteValueW

  RegOpenKeyExW

  RegQueryValueExW

  RegDeleteKeyW

  RegQueryInfoKeyW

  RegEnumKeyExW

  GetTokenInformation

  ConvertStringSecurityDescriptorToSecurityDescriptorW

  GetNamedSecurityInfoW

  BuildExplicitAccessWithNameW

  SetEntriesInAclW

  SetNamedSecurityInfoW

  ConvertSidToStringSidW

  LookupAccountNameW

  SaferComputeTokenFromLevel

  CreateProcessAsUserW

  SaferCreateLevel

  SaferCloseLevel

  OpenProcessToken

  RegCloseKey

  shell32

  SHCreateDirectoryExW

  ord190

  ord18

  ord21

  SHGetFileInfoW

  SHGetSpecialFolderLocation

  SHGetPathFromIDListW

  SHGetFolderPathW

  SHBindToParent

  SHGetMalloc

  SHGetDesktopFolder

  ord23

  SHChangeNotify

  Shell_NotifyIconW

  SHGetSpecialFolderPathW

  ord680

  CommandLineToArgvW

  ord4

  ShellExecuteW

  SHCreateDirectoryExA

  ord16

  ord71

  ord153

  ord17

  ShellExecuteExW

  ord155

  DragQueryPoint

  DragQueryFileW

  SHFileOperationW

  ord152

  DragAcceptFiles

  ord2

  ord165

  SHGetSpecialFolderPathA

  SHBrowseForFolderW

  ole32

  CreateStreamOnHGlobal

  CoCreateGuid

  OleCreateStaticFromData

  OleSetContainedObject

  StgCreateDocfileOnILockBytes

  CreateILockBytesOnHGlobal

  OleDuplicateData

  ReleaseStgMedium

  CoTaskMemAlloc

  StgCreateDocfile

  IIDFromString

  DoDragDrop

  CoUninitialize

  CoInitialize

  OleInitialize

  CoTaskMemRealloc

  CoCreateInstance

  CoTaskMemFree

  oleaut32

  SysAllocStringLen

  SysAllocString

  VariantClear

  SysAllocStringByteLen

  SysFreeString

  SysStringLen

  VariantInit

  SafeArrayCreateVector

  OleTranslateColor

  SysStringByteLen

  OleLoadPicture

  SystemTimeToVariantTime

  VariantTimeToSystemTime

  VarUI4FromStr

  shlwapi

  PathRemoveFileSpecW

  PathAppendW

  PathCombineW

  PathFileExistsW

  SHGetValueW

  PathIsRelativeW

  PathFindExtensionW

  PathRemoveExtensionW

  StrCmpIW

  PathAddBackslashW

  PathIsDirectoryW

  ord437

  PathFindFileNameW

  PathCanonicalizeW

  SHGetValueA

  SHSetValueA

  SHDeleteValueW

  PathAddExtensionW

  PathCompactPathExW

  PathIsUNCW

  PathRemoveBackslashW

  PathSearchAndQualifyW

  StrRStrIW

  StrStrIW

  PathRenameExtensionW

  SHSetValueW

  StrCmpW

  PathIsPrefixW

  PathFileExistsA

  UrlUnescapeW

  StrStrIA

  SHDeleteKeyW

  comctl32

  InitCommonControlsEx

  ImageList_Draw

  ImageList_Create

  ImageList_Destroy

  ImageList_Remove

  ImageList_SetImageCount

  ImageList_Replace

  _TrackMouseEvent

  gdiplus

  GdiplusShutdown

  GdipDeleteGraphics

  GdipCreateHBITMAPFromBitmap

  GdipDrawImageRectI

  GdipSetInterpolationMode

  GdipGraphicsClear

  GdipGetImageGraphicsContext

  GdipGetImageHorizontalResolution

  GdipGetImageVerticalResolution

  GdipBitmapSetResolution

  GdipBitmapGetPixel

  GdipBitmapUnlockBits

  GdipBitmapSetPixel

  GdipGetImagePixelFormat

  GdipBitmapLockBits

  GdiplusStartup

  GdipGetImageHeight

  GdipCreateBitmapFromHBITMAP

  GdipDisposeImage

  GdipCloneImage

  GdipCreateBitmapFromScan0

  GdipFree

  GdipAlloc

  GdipGetImageWidth

  wininet

  InternetOpenW

  InternetCloseHandle

  InternetConnectW

  HttpOpenRequestW

  InternetCanonicalizeUrlW

  InternetReadFile

  InternetSetFilePointer

  InternetCrackUrlW

  InternetSetOptionW

  InternetQueryOptionW

  HttpSendRequestW

  HttpQueryInfoW

  setupapi

  SetupIterateCabinetW

  urlmon

  URLDownloadToFileW

  crypt32

  CryptBinaryToStringA

  CryptStringToBinaryA

  oleacc

  AccessibleObjectFromPoint

  secur32

  GetUserNameExW

  netapi32

  Netbios

  rpcrt4

  NdrClientCall2

  RpcStringBindingComposeW

  RpcBindingFromStringBindingW

  RpcStringFreeW

  RpcBindingFree

  Sections

  .text

  Size: 1.5MB - Virtual size: 1.5MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 242KB - Virtual size: 241KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 193KB - Virtual size: 221KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 85KB - Virtual size: 84KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 99KB - Virtual size: 98KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• ????-???/.__MACOS__/.__MACOS__/.__MACOS__/.__MACOS1__/360zip.exe

  .exe windows x86

  bdb66b6977e4287a95f73e4309d7b1ba

  
  

  Code Sign

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:1f:3a:05:7a:1d:ce:4b:f7:d7:6d:0c:7a:df:83:7e

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-11-2019 00:00

  Not After

  04-02-2023 12:00

  Subject

  CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0c:83:09:ba:16:54:68:50:e6:05:e7:5d:77:3e:56:de

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-11-2019 00:00

  Not After

  04-02-2023 12:00

  Subject

  CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  28-01-2021 11:08

  Not After

  01-03-2032 11:08

  Subject

  CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20-06-2018 00:00

  Not After

  10-12-2034 00:00

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  10-12-2014 00:00

  Not After

  10-12-2034 00:00

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  98:73:99:72:74:26:3e:17:67:74:86:dd:59:6d:90:c5:31:4d:f0:e0:ed:1f:24:2d:15:d4:bd:d8:6a:49:a4:ea

  Signer

  Actual PE Digest

  98:73:99:72:74:26:3e:17:67:74:86:dd:59:6d:90:c5:31:4d:f0:e0:ed:1f:24:2d:15:d4:bd:d8:6a:49:a4:ea

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

  19-01-2022 07:45

  Valid: true

  Chain 1

  CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  ba:d8:cd:2b:fb:87:d3:f3:9e:58:2e:17:18:cc:26:a9:c4:9b:1c:2a

  Signer

  Actual PE Digest

  ba:d8:cd:2b:fb:87:d3:f3:9e:58:2e:17:18:cc:26:a9:c4:9b:1c:2a

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

  19-01-2022 07:45

  Valid: true

  Chain 1

  CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  lstrcpynW

  lstrlenA

  GetFileAttributesExW

  GlobalSize

  OutputDebugStringW

  FormatMessageW

  CreateMutexW

  GetShortPathNameW

  GetLogicalDrives

  GetDriveTypeW

  GetVolumeInformationW

  lstrcatW

  GetFileTime

  GetDateFormatW

  GetTimeFormatW

  CompareStringW

  OpenProcess

  OpenEventW

  GetSystemTime

  SystemTimeToFileTime

  CopyFileW

  CompareFileTime

  SleepEx

  FlushFileBuffers

  UnmapViewOfFile

  CreateFileMappingW

  GetSystemInfo

  MapViewOfFile

  SetFilePointerEx

  GetTempFileNameW

  WaitForMultipleObjects

  lstrcmpA

  lstrcmpiA

  GetFileAttributesA

  GetCurrentThread

  GetThreadContext

  VirtualQuery

  SetThreadPriority

  VirtualAlloc

  OpenThread

  GetThreadPriority

  VirtualProtect

  SuspendThread

  ResumeThread

  GetFullPathNameW

  FileTimeToLocalFileTime

  GetModuleHandleExW

  SetEnvironmentVariableA

  SetStdHandle

  DeviceIoControl

  WriteConsoleA

  GetLocaleInfoW

  GetModuleHandleA

  IsValidLocale

  EnumSystemLocalesA

  GetUserDefaultLCID

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetStringTypeA

  GetConsoleMode

  GetConsoleCP

  GetStartupInfoA

  SetHandleCount

  GetTimeZoneInformation

  InitializeCriticalSectionAndSpinCount

  GetModuleFileNameA

  HeapCreate

  IsValidCodePage

  GetOEMCP

  GetACP

  CompareStringA

  GetStringTypeW

  LCMapStringW

  LCMapStringA

  RtlUnwind

  GetFileType

  WriteConsoleW

  GetCPInfo

  CreateThread

  ExitThread

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TlsFree

  TlsAlloc

  ReleaseMutex

  HeapWalk

  HeapLock

  HeapUnlock

  TlsSetValue

  TlsGetValue

  LocalFileTimeToFileTime

  GetSystemTimeAsFileTime

  CreateFileA

  VirtualFree

  IsProcessorFeaturePresent

  LoadLibraryA

  GetProcessHeap

  HeapSize

  HeapReAlloc

  HeapFree

  HeapAlloc

  HeapDestroy

  GetLocaleInfoA

  GetLocalTime

  GetDiskFreeSpaceW

  InterlockedExchange

  FileTimeToSystemTime

  Module32NextW

  Module32FirstW

  Process32NextW

  Process32FirstW

  CreateToolhelp32Snapshot

  MoveFileW

  GetLongPathNameW

  GetTempPathW

  lstrcpyW

  MoveFileExW

  SetEndOfFile

  WideCharToMultiByte

  GetCurrentProcessId

  SetFilePointer

  GetFileSizeEx

  ResetEvent

  SetEvent

  CreateEventW

  GetTickCount

  SetLastError

  GetSystemWindowsDirectoryW

  MulDiv

  GetPrivateProfileStringW

  OpenMutexW

  GetSystemDirectoryW

  CreateProcessW

  GetStartupInfoW

  GetCommandLineW

  GetFileSize

  WriteFile

  GetStdHandle

  LoadLibraryExW

  lstrcmpiW

  GetWindowsDirectoryW

  Sleep

  InterlockedCompareExchange

  TerminateProcess

  SetFileAttributesW

  RemoveDirectoryW

  GetFileAttributesW

  CreateFileW

  ReadFile

  CreateDirectoryW

  CloseHandle

  WaitForSingleObject

  DeleteCriticalSection

  InitializeCriticalSection

  GetModuleHandleW

  SetPriorityClass

  MultiByteToWideChar

  LocalFree

  GetCurrentThreadId

  FlushInstructionCache

  GetCurrentProcess

  GetLastError

  WritePrivateProfileStringW

  FindNextFileW

  FindClose

  FindFirstFileW

  DeleteFileW

  InterlockedDecrement

  InterlockedIncrement

  ExitProcess

  LoadLibraryW

  EnterCriticalSection

  GetProcAddress

  GetPrivateProfileIntW

  LeaveCriticalSection

  FreeLibrary

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GetVersionExW

  lstrlenW

  GlobalFree

  RaiseException

  FreeResource

  GetVersion

  GetModuleFileNameW

  FindResourceExW

  FindResourceW

  LoadResource

  LockResource

  SizeofResource

  GetConsoleOutputCP

  LocalAlloc

  user32

  GetFocus

  SetScrollInfo

  ShowScrollBar

  ReleaseDC

  UnregisterClassA

  GetDC

  GetClientRect

  SendMessageW

  GetParent

  InvalidateRect

  PostMessageW

  SetWindowLongW

  EndDialog

  GetWindowLongW

  KillTimer

  MapWindowPoints

  GetCursorPos

  SetTimer

  LoadCursorW

  SetWindowTextW

  LoadIconW

  CreatePopupMenu

  GetMenuItemCount

  MonitorFromPoint

  ScreenToClient

  MoveWindow

  UpdateWindow

  SetWindowRgn

  IsWindowEnabled

  ClientToScreen

  WindowFromPoint

  SetCursor

  LoadImageW

  FillRect

  ReleaseCapture

  SetCapture

  GetCapture

  PtInRect

  EndPaint

  BeginPaint

  DeleteMenu

  GetMenuItemInfoW

  SetMenuItemInfoW

  InsertMenuW

  InflateRect

  GetSysColor

  GetWindowDC

  GetSystemMetrics

  GetClassNameW

  GetAncestor

  GetKeyState

  IsDialogMessageW

  SetRect

  LockWindowUpdate

  SetParent

  LoadBitmapW

  EnableMenuItem

  IsClipboardFormatAvailable

  GetMenuState

  RegisterClipboardFormatW

  GetClipboardData

  CheckMenuItem

  GetMenuStringW

  wvsprintfW

  SetRectEmpty

  AppendMenuW

  InsertMenuItemW

  GetMessagePos

  GetSysColorBrush

  SystemParametersInfoW

  GetDlgItemInt

  SetDlgItemInt

  GetClassInfoW

  RegisterClassW

  GetPropW

  IsIconic

  FindWindowExW

  PostThreadMessageW

  GetSubMenu

  LoadMenuW

  RedrawWindow

  MessageBeep

  SetWindowPos

  GetWindowRect

  GetMonitorInfoW

  MonitorFromWindow

  GetWindow

  GetActiveWindow

  DestroyIcon

  MessageBoxW

  DefWindowProcW

  GetDlgItem

  ShowWindow

  GetWindowTextW

  GetWindowTextLengthW

  CallWindowProcW

  PostQuitMessage

  OpenClipboard

  EmptyClipboard

  SetClipboardData

  CloseClipboard

  IsWindowVisible

  SetActiveWindow

  SetForegroundWindow

  SetDlgItemTextW

  SetFocus

  BringWindowToTop

  EnableWindow

  IsDlgButtonChecked

  RegisterWindowMessageW

  IsWindow

  DestroyWindow

  DispatchMessageA

  DispatchMessageW

  TranslateMessage

  GetMessageA

  GetMessageW

  IsWindowUnicode

  PeekMessageW

  MsgWaitForMultipleObjects

  GetIconInfo

  CharLowerBuffW

  CreateWindowExW

  DestroyMenu

  FindWindowW

  GetDesktopWindow

  CharNextW

  GetMenuItemID

  TrackPopupMenu

  SetMenuDefaultItem

  CreateDialogParamW

  IntersectRect

  IsMenu

  DrawTextW

  GetCaretPos

  CopyRect

  DrawEdge

  SetPropW

  GetDlgCtrlID

  FrameRect

  AdjustWindowRectEx

  GetScrollPos

  GetScrollInfo

  ScrollWindow

  SetScrollPos

  IsRectEmpty

  GetClassInfoExW

  RegisterClassExW

  DialogBoxParamW

  wsprintfW

  gdi32

  GetTextMetricsW

  CreateDCW

  EnumFontFamiliesExW

  GetTextExtentPointA

  GetTextMetricsA

  CreatePenIndirect

  RoundRect

  GetCurrentObject

  CreateSolidBrush

  CombineRgn

  CreateRectRgn

  GetPixel

  SetTextColor

  SetBkMode

  SetStretchBltMode

  RestoreDC

  SaveDC

  CreateDIBSection

  DPtoLP

  CreateBitmap

  ExtTextOutW

  SetBkColor

  StretchBlt

  SetViewportOrgEx

  BitBlt

  GetTextExtentPoint32W

  CreateRoundRectRgn

  CreatePolygonRgn

  CreateFontW

  GetDeviceCaps

  CreateCompatibleBitmap

  SelectObject

  DeleteDC

  CreateCompatibleDC

  DeleteObject

  CreateFontIndirectW

  GetStockObject

  GetBkColor

  GetTextColor

  CreatePatternBrush

  GetObjectW

  PatBlt

  comdlg32

  ChooseColorW

  GetOpenFileNameW

  GetSaveFileNameW

  ChooseFontW

  advapi32

  RegQueryValueExA

  RegSetValueExW

  RegCreateKeyExW

  RegDeleteValueW

  RegOpenKeyExW

  RegQueryValueExW

  RegDeleteKeyW

  RegQueryInfoKeyW

  RegEnumKeyExW

  GetTokenInformation

  ConvertStringSecurityDescriptorToSecurityDescriptorW

  GetNamedSecurityInfoW

  BuildExplicitAccessWithNameW

  SetEntriesInAclW

  SetNamedSecurityInfoW

  ConvertSidToStringSidW

  LookupAccountNameW

  SaferComputeTokenFromLevel

  CreateProcessAsUserW

  SaferCreateLevel

  SaferCloseLevel

  OpenProcessToken

  RegCloseKey

  shell32

  SHCreateDirectoryExW

  ord190

  ord18

  ord21

  SHGetFileInfoW

  SHGetSpecialFolderLocation

  SHGetPathFromIDListW

  SHGetFolderPathW

  SHBindToParent

  SHGetMalloc

  SHGetDesktopFolder

  ord23

  SHChangeNotify

  Shell_NotifyIconW

  SHGetSpecialFolderPathW

  ord680

  CommandLineToArgvW

  ord4

  ShellExecuteW

  SHCreateDirectoryExA

  ord16

  ord71

  ord153

  ord17

  ShellExecuteExW

  ord155

  DragQueryPoint

  DragQueryFileW

  SHFileOperationW

  ord152

  DragAcceptFiles

  ord2

  ord165

  SHGetSpecialFolderPathA

  SHBrowseForFolderW

  ole32

  CreateStreamOnHGlobal

  CoCreateGuid

  OleCreateStaticFromData

  OleSetContainedObject

  StgCreateDocfileOnILockBytes

  CreateILockBytesOnHGlobal

  OleDuplicateData

  ReleaseStgMedium

  CoTaskMemAlloc

  StgCreateDocfile

  IIDFromString

  DoDragDrop

  CoUninitialize

  CoInitialize

  OleInitialize

  CoTaskMemRealloc

  CoCreateInstance

  CoTaskMemFree

  oleaut32

  SysAllocStringLen

  SysAllocString

  VariantClear

  SysAllocStringByteLen

  SysFreeString

  SysStringLen

  VariantInit

  SafeArrayCreateVector

  OleTranslateColor

  SysStringByteLen

  OleLoadPicture

  SystemTimeToVariantTime

  VariantTimeToSystemTime

  VarUI4FromStr

  shlwapi

  PathRemoveFileSpecW

  PathAppendW

  PathCombineW

  PathFileExistsW

  SHGetValueW

  PathIsRelativeW

  PathFindExtensionW

  PathRemoveExtensionW

  StrCmpIW

  PathAddBackslashW

  PathIsDirectoryW

  ord437

  PathFindFileNameW

  PathCanonicalizeW

  SHGetValueA

  SHSetValueA

  SHDeleteValueW

  PathAddExtensionW

  PathCompactPathExW

  PathIsUNCW

  PathRemoveBackslashW

  PathSearchAndQualifyW

  StrRStrIW

  StrStrIW

  PathRenameExtensionW

  SHSetValueW

  StrCmpW

  PathIsPrefixW

  PathFileExistsA

  UrlUnescapeW

  StrStrIA

  SHDeleteKeyW

  comctl32

  InitCommonControlsEx

  ImageList_Draw

  ImageList_Create

  ImageList_Destroy

  ImageList_Remove

  ImageList_SetImageCount

  ImageList_Replace

  _TrackMouseEvent

  gdiplus

  GdiplusShutdown

  GdipDeleteGraphics

  GdipCreateHBITMAPFromBitmap

  GdipDrawImageRectI

  GdipSetInterpolationMode

  GdipGraphicsClear

  GdipGetImageGraphicsContext

  GdipGetImageHorizontalResolution

  GdipGetImageVerticalResolution

  GdipBitmapSetResolution

  GdipBitmapGetPixel

  GdipBitmapUnlockBits

  GdipBitmapSetPixel

  GdipGetImagePixelFormat

  GdipBitmapLockBits

  GdiplusStartup

  GdipGetImageHeight

  GdipCreateBitmapFromHBITMAP

  GdipDisposeImage

  GdipCloneImage

  GdipCreateBitmapFromScan0

  GdipFree

  GdipAlloc

  GdipGetImageWidth

  wininet

  InternetOpenW

  InternetCloseHandle

  InternetConnectW

  HttpOpenRequestW

  InternetCanonicalizeUrlW

  InternetReadFile

  InternetSetFilePointer

  InternetCrackUrlW

  InternetSetOptionW

  InternetQueryOptionW

  HttpSendRequestW

  HttpQueryInfoW

  setupapi

  SetupIterateCabinetW

  urlmon

  URLDownloadToFileW

  crypt32

  CryptBinaryToStringA

  CryptStringToBinaryA

  oleacc

  AccessibleObjectFromPoint

  secur32

  GetUserNameExW

  netapi32

  Netbios

  rpcrt4

  NdrClientCall2

  RpcStringBindingComposeW

  RpcBindingFromStringBindingW

  RpcStringFreeW

  RpcBindingFree

  Sections

  .text

  Size: 1.5MB - Virtual size: 1.5MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 242KB - Virtual size: 241KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 193KB - Virtual size: 221KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 85KB - Virtual size: 84KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 99KB - Virtual size: 98KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• ????-???/.__MACOS__/.__MACOS__/.__MACOS__/.__MACOS1__/log.com

  .exe windows x64

  e96dce1e422c5b221c7fdfc911692eb8

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  kernel32

  SizeofResource

  VirtualFree

  VirtualAlloc

  EnumSystemCodePagesW

  FreeResource

  Sleep

  FormatMessageW

  GetLastError

  LockResource

  CloseHandle

  LoadResource

  FindResourceW

  GetCurrentDirectoryW

  LocalFree

  WriteConsoleW

  EncodePointer

  DecodePointer

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSectionEx

  DeleteCriticalSection

  MultiByteToWideChar

  WideCharToMultiByte

  LCMapStringEx

  GetStringTypeW

  GetCPInfo

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  IsProcessorFeaturePresent

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  GetSystemTimeAsFileTime

  InitializeSListHead

  IsDebuggerPresent

  GetStartupInfoW

  GetModuleHandleW

  RtlUnwindEx

  RtlPcToFileHeader

  RaiseException

  SetLastError

  InitializeCriticalSectionAndSpinCount

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  FreeLibrary

  GetProcAddress

  LoadLibraryExW

  GetStdHandle

  WriteFile

  GetModuleFileNameW

  ExitProcess

  GetModuleHandleExW

  GetCommandLineA

  GetCommandLineW

  HeapAlloc

  HeapFree

  CompareStringW

  LCMapStringW

  GetLocaleInfoW

  IsValidLocale

  GetUserDefaultLCID

  EnumSystemLocalesW

  GetFileType

  FlushFileBuffers

  GetConsoleOutputCP

  GetConsoleMode

  ReadFile

  GetFileSizeEx

  SetFilePointerEx

  ReadConsoleW

  HeapReAlloc

  FindClose

  FindFirstFileExW

  FindNextFileW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetEnvironmentVariableW

  SetStdHandle

  GetProcessHeap

  HeapSize

  CreateFileW

  RtlUnwind

  Sections

  .text

  Size: 155KB - Virtual size: 155KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 75KB - Virtual size: 74KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  _RDATA

  Size: 512B - Virtual size: 244B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 258KB - Virtual size: 257KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• ????-???/????-???.docx.lnk

  .lnk