af485e5523581d76f3aa7f94d7830f62a78b33de979857e607b41c58fad1b8ba

Sharing

Copy URL Twitter E-mail

General

Target

af485e5523581d76f3aa7f94d7830f62a78b33de979857e607b41c58fad1b8ba
Size

1.5MB
MD5

718d92e50ae9776864c5a37b1e480db8
SHA1

b5e33e4ff238d372abdfe56648bd8289deec9805
SHA256

af485e5523581d76f3aa7f94d7830f62a78b33de979857e607b41c58fad1b8ba
SHA512

257928e07be0bd0a452ad0d8bcb5a993c1b277479fd79aa7506e77fb21231b99713760943426505a95d11af4e5a30288d23c8deecf76c6cc907502e1f72c5437
SSDEEP

49152:0f4RyYYjPPnVXoiOlEsycYhnyjcFVjBULufdF75m:PR/Y7fVtOikjaGufs

Score

N/A

Malware Config

Signatures

Files

af485e5523581d76f3aa7f94d7830f62a78b33de979857e607b41c58fad1b8ba
.exe windows x86

d5284cee37f586f76a98a837c48cf059

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

19/09/2018, 00:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

26:df:09:9e:8d:36:54:43:eb:18:42:b5
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

27/08/2018, 09:38

Not After

27/08/2021, 09:38

Subject

CN=DVDFab Software Inc.,O=DVDFab Software Inc.,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f6:10:28:1b:02:54:83:ff:5f:34:a4:f4:fa:1e:f2:9d:5c:18:3e:3f
Signer

Actual PE Digest

f6:10:28:1b:02:54:83:ff:5f:34:a4:f4:fa:1e:f2:9d:5c:18:3e:3f

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=DVDFab Software Inc.,O=DVDFab Software Inc.,L=Beijing,ST=Beijing,C=CN

07/05/2020, 08:30
Valid: true

Chain 1

CN=DVDFab Software Inc.,O=DVDFab Software Inc.,L=Beijing,ST=Beijing,C=CN

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Chain 2

CN=DVDFab Software Inc.,O=DVDFab Software Inc.,L=Beijing,ST=Beijing,C=CN

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderLocation
CommandLineToArgvW
ShellExecuteExA
SHGetPathFromIDListA
ShellExecuteA

kernel32

FormatMessageA
LocalFree
CreateDirectoryA
RemoveDirectoryA
GetProcAddress
GetModuleHandleA
HeapAlloc
HeapFree
GetProcessHeap
MapViewOfFileEx
GetExitCodeProcess
GetLongPathNameA
FreeLibrary
LoadLibraryA
DeleteFileA
CreateFileMappingA
ReleaseSemaphore
CreateSemaphoreA
UnmapViewOfFile
ReleaseMutex
WaitForSingleObject
FindClose
FindNextFileA
FindFirstFileA
GetDiskFreeSpaceA
GetDriveTypeA
GetFileAttributesA
GetFileSize
SetFileAttributesA
DuplicateHandle
GetCurrentProcess
SwitchToThread
GetTickCount
Sleep
GetProcessTimes
GetCurrentProcessId
CreateEventA
SetEvent
GetSystemInfo
CreateMutexA
GetLastError
CloseHandle
CreateFileA
TerminateProcess
WideCharToMultiByte
MultiByteToWideChar
OutputDebugStringW
GetStringTypeExA
GetUserDefaultLCID
LCMapStringA
LCMapStringW
GetStringTypeExW
CreateWaitableTimerA
GetLogicalProcessorInformation
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
SetWaitableTimer
OpenEventA
WaitForMultipleObjectsEx
QueryPerformanceFrequency
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
GetModuleHandleW
CreateEventW
ResetEvent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
lstrlenA
SetConsoleTitleA
FreeConsole
AllocConsole
WriteFile
GetStdHandle
GetSystemTimeAsFileTime
OutputDebugStringA
GetWindowsDirectoryW
GetStartupInfoW
CreateProcessW
DeleteCriticalSection
InitializeCriticalSectionEx
CreatePipe
RaiseException
DecodePointer
GetVolumeInformationW
GetCurrentThreadId
WaitForSingleObjectEx
SystemTimeToFileTime
FileTimeToSystemTime
DosDateTimeToFileTime
FileTimeToDosDateTime
GetLocalTime
HeapReAlloc
ReadFile
IsDBCSLeadByte
GlobalLock
GlobalUnlock
GetVersionExA
GetSystemDirectoryA
CreateProcessA
GetDiskFreeSpaceExA
MoveFileExA
MoveFileA
CopyFileA
QueryDosDeviceA
GetShortPathNameA
GetModuleFileNameW
GetModuleFileNameA
GetWindowsDirectoryA
DeviceIoControl
GetVolumeInformationA
GetTempPathA
SetFilePointer
GetCommandLineW

advapi32

OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegOpenKeyA
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegQueryValueA
RegSetValueA
RegSetValueExA
SetSecurityDescriptorDacl
ReadEventLogA
CloseEventLog
OpenEventLogA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
InitializeSecurityDescriptor

qt5core

?qt_metacast@QSharedMemory@@UAEPAXPBD@Z
?qt_metacall@QTimer@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QSharedMemory@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?metaObject@QTimer@@UBEPBUQMetaObject@@XZ
?metaObject@QSharedMemory@@UBEPBUQMetaObject@@XZ
?start@QTimer@@QAEXH@Z
??1QTimer@@UAE@XZ
??0QTimer@@QAE@PAVQObject@@@Z
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z
??0QUrl@@QAE@ABVQString@@W4ParsingMode@0@@Z
?height@QSize@@QBEHXZ
?width@QSize@@QBEHXZ
??0QSize@@QAE@XZ
?exists@QFile@@SA_NABVQString@@@Z
?toInt@QVariant@@QBEHPA_N@Z
??1QVariant@@QAE@XZ
?property@QObject@@QBE?AVQVariant@@PBD@Z
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z
?setObjectName@QObject@@QAEXABVQString@@@Z
?objectName@QObject@@QBE?AVQString@@XZ
?registerNormalizedTypedef@QMetaType@@SAHABVQByteArray@@H@Z
?registerNormalizedType@QMetaType@@SAHABVQByteArray@@P6AXPAX@ZP6APAX1PBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PBUQMetaObject@@@Z
?cap@QRegExp@@QAE?AVQString@@H@Z
?matchedLength@QRegExp@@QBEHXZ
??1QRegExp@@QAE@XZ
??0QRegExp@@QAE@ABVQString@@W4CaseSensitivity@Qt@@W4PatternSyntax@0@@Z
??BQCharRef@@QBE?AVQChar@@XZ
?fromStdString@QString@@SA?AV1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??8QString@@QBE_NPBD@Z
??4QString@@QAEAAV0@PBD@Z
??8@YA_NABVQString@@0@Z
?number@QString@@SA?AV1@NDH@Z
?toInt@QString@@QBEHPA_NH@Z
?fromLocal8Bit@QString@@SA?AV1@PBDH@Z
?toLocal8Bit@QString@@QGBE?AVQByteArray@@XZ
?remove@QString@@QAEAAV1@HH@Z
?append@QString@@QAEAAV1@ABV1@@Z
?mid@QString@@QBE?AV1@HH@Z
?indexOf@QString@@QBEHAAVQRegExp@@H@Z
?arg@QString@@QBE?AV1@HHHVQChar@@@Z
??AQString@@QAE?AVQCharRef@@H@Z
?clear@QString@@QAEXXZ
?isEmpty@QString@@QBE_NXZ
?length@QString@@QBEHXZ
?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z
??0QString@@QAE@ABV0@@Z
?qt_metacast@QTimer@@UAEPAXPBD@Z
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
?qt_metacast@QObject@@UAEPAXPBD@Z
?qt_metacall@QObject@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?staticMetaObject@QObject@@2UQMetaObject@@B
??4QString@@QAEAAV0@$$QAV0@@Z
??0QObject@@QAE@PAV0@@Z
??1QObject@@UAE@XZ
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
??0QString@@QAE@XZ
??0QString@@QAE@$$QAV0@@Z
??YQString@@QAEAAV0@ABV0@@Z
?fromUtf8@QString@@SA?AV1@PBDH@Z
??0QString@@QAE@PBD@Z
?instance@QCoreApplication@@SAPAV1@XZ
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
??4QString@@QAEAAV0@ABV0@@Z
??0QString@@QAE@VQChar@@@Z
?append@QByteArray@@QAEAAV1@PBD@Z
?append@QByteArray@@QAEAAV1@D@Z
?data@QByteArray@@QAEPADXZ
??BQByteArray@@QBEPBDXZ
?reserve@QByteArray@@QAEXH@Z
??1QByteArray@@QAE@XZ
??0QByteArray@@QAE@PBDH@Z
??0QByteArray@@QAE@XZ
??0QChar@@QAE@UQLatin1Char@@@Z
??1Connection@QMetaObject@@QAE@XZ
?connectSlotsByName@QMetaObject@@SAXPAVQObject@@@Z
?className@QMetaObject@@QBEPBDXZ
?qBadAlloc@@YAXXZ
?setUrl@QUrl@@QAEXABVQString@@W4ParsingMode@1@@Z
??1QUrl@@QAE@XZ
??0QUrl@@QAE@ABV0@@Z
??0QUrl@@QAE@XZ
?load@QTranslator@@QAE_NABVQString@@000@Z
??1QTranslator@@UAE@XZ
??0QTranslator@@QAE@PAVQObject@@@Z
?setCodecForLocale@QTextCodec@@SAXPAV1@@Z
?codecForName@QTextCodec@@SAPAV1@PBD@Z
?error@QSharedMemory@@QBE?AW4SharedMemoryError@1@XZ
?data@QSharedMemory@@QAEPAXXZ
?detach@QSharedMemory@@QAE_NXZ
?attach@QSharedMemory@@QAE_NW4AccessMode@1@@Z
?create@QSharedMemory@@QAE_NHW4AccessMode@1@@Z
??1QSharedMemory@@UAE@XZ
??0QSharedMemory@@QAE@ABVQString@@PAVQObject@@@Z
?registerResource@QResource@@SA_NABVQString@@0@Z
?installTranslator@QCoreApplication@@SA_NPAVQTranslator@@@Z
?timerEvent@QTimer@@MAEXPAVQTimerEvent@@@Z
??1QString@@QAE@XZ

qt5gui

??0QCursor@@QAE@W4CursorShape@Qt@@@Z
??1QCursor@@QAE@XZ
?setCursor@QWindow@@QAEXABVQCursor@@@Z
??0QImage@@QAE@XZ
??1QImage@@UAE@XZ
?size@QImage@@QBE?AVQSize@@XZ
?load@QImage@@QAE_NABVQString@@PBD@Z
?openUrl@QDesktopServices@@SA_NABVQUrl@@@Z
??0QIcon@@QAE@XZ
??1QIcon@@QAE@XZ
?screen@QWindow@@QBEPAVQScreen@@XZ
?logicalDotsPerInch@QScreen@@QBENXZ
?format@QWindow@@UBE?AVQSurfaceFormat@@XZ
?moveEvent@QWindow@@MAEXPAVQMoveEvent@@@Z
?nativeEvent@QWindow@@MAE_NABVQByteArray@@PAXPAJ@Z
?size@QWindow@@UBE?AVQSize@@XZ
?surfaceHandle@QWindow@@EBEPAVQPlatformSurface@@XZ
?surfaceType@QWindow@@UBE?AW4SurfaceType@QSurface@@XZ
?tabletEvent@QWindow@@MAEXPAVQTabletEvent@@@Z
?touchEvent@QWindow@@MAEXPAVQTouchEvent@@@Z
?addFile@QIcon@@QAEXABVQString@@ABVQSize@@W4Mode@1@W4State@1@@Z

qt5qml

?qmlregister@QQmlPrivate@@YAHW4RegistrationType@1@PAX@Z
?setContextProperty@QQmlContext@@QAEXABVQString@@PAVQObject@@@Z
?qdeclarativeelement_destructor@QQmlPrivate@@YAXPAVQObject@@@Z

qt5quick

?mousePressEvent@QQuickItem@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QQuickView@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QQuickItem@@MAEXPAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QQuickWindow@@MAEXPAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QQuickItem@@MAEXPAVQMouseEvent@@@Z
?keyReleaseEvent@QQuickView@@MAEXPAVQKeyEvent@@@Z
?keyReleaseEvent@QQuickItem@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QQuickView@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QQuickItem@@MAEXPAVQKeyEvent@@@Z
?itemChange@QQuickItem@@MAEXW4ItemChange@1@ABTItemChangeData@1@@Z
?isTextureProvider@QQuickItem@@UBE_NXZ
?inputMethodQuery@QQuickItem@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?inputMethodEvent@QQuickItem@@MAEXPAVQInputMethodEvent@@@Z
?hoverMoveEvent@QQuickItem@@MAEXPAVQHoverEvent@@@Z
?hoverLeaveEvent@QQuickItem@@MAEXPAVQHoverEvent@@@Z
?hoverEnterEvent@QQuickItem@@MAEXPAVQHoverEvent@@@Z
?hideEvent@QQuickWindow@@MAEXPAVQHideEvent@@@Z
?geometryChanged@QQuickItem@@MAEXABVQRectF@@0@Z
?focusOutEvent@QQuickWindow@@MAEXPAVQFocusEvent@@@Z
?resizeEvent@QQuickView@@MAEXPAVQResizeEvent@@@Z
?focusObject@QQuickWindow@@UBEPAVQObject@@XZ
?focusInEvent@QQuickWindow@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QQuickItem@@MAEXPAVQFocusEvent@@@Z
?exposeEvent@QQuickWindow@@MAEXPAVQExposeEvent@@@Z
?mouseReleaseEvent@QQuickItem@@MAEXPAVQMouseEvent@@@Z
?event@QQuickItem@@MAE_NPAVQEvent@@@Z
?dropEvent@QQuickItem@@MAEXPAVQDropEvent@@@Z
?dragMoveEvent@QQuickItem@@MAEXPAVQDragMoveEvent@@@Z
?dragLeaveEvent@QQuickItem@@MAEXPAVQDragLeaveEvent@@@Z
?dragEnterEvent@QQuickItem@@MAEXPAVQDragEnterEvent@@@Z
?contains@QQuickItem@@UBE_NABVQPointF@@@Z
?componentComplete@QQuickItem@@MAEXXZ
?clipRect@QQuickItem@@UBE?AVQRectF@@XZ
?classBegin@QQuickItem@@MAEXXZ
?childMouseEventFilter@QQuickItem@@MAE_NPAV1@PAVQEvent@@@Z
?boundingRect@QQuickItem@@UBE?AVQRectF@@XZ
?accessibleRoot@QQuickWindow@@UBEPAVQAccessibleInterface@@XZ
?setSource@QQuickView@@QAEXABVQUrl@@@Z
?rootObject@QQuickView@@QBEPAVQQuickItem@@XZ
?rootContext@QQuickView@@QBEPAVQQmlContext@@XZ
??1QQuickView@@UAE@XZ
??0QQuickView@@QAE@PAVQWindow@@@Z
??1QQuickItem@@UAE@XZ
??0QQuickItem@@QAE@PAV0@@Z
?staticMetaObject@QQuickView@@2UQMetaObject@@B
?qt_metacall@QQuickView@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QQuickView@@UAEPAXPBD@Z
?staticMetaObject@QQuickItem@@2UQMetaObject@@B
?qt_metacall@QQuickItem@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QQuickItem@@UAEPAXPBD@Z
?mousePressEvent@QQuickView@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QQuickView@@MAEXPAVQMouseEvent@@@Z
?mouseUngrabEvent@QQuickItem@@MAEXXZ
?event@QQuickWindow@@MAE_NPAVQEvent@@@Z
?releaseResources@QQuickItem@@MAEXXZ
?showEvent@QQuickWindow@@MAEXPAVQShowEvent@@@Z
?textureProvider@QQuickItem@@UBEPAVQSGTextureProvider@@XZ
?timerEvent@QQuickView@@MAEXPAVQTimerEvent@@@Z
?touchEvent@QQuickItem@@MAEXPAVQTouchEvent@@@Z
?touchUngrabEvent@QQuickItem@@MAEXXZ
?updatePaintNode@QQuickItem@@MAEPAVQSGNode@@PAV2@PAUUpdatePaintNodeData@1@@Z
?updatePolish@QQuickItem@@MAEXXZ
?wheelEvent@QQuickItem@@MAEXPAVQWheelEvent@@@Z
?wheelEvent@QQuickWindow@@MAEXPAVQWheelEvent@@@Z
?windowDeactivateEvent@QQuickItem@@MAEXXZ
?focusOutEvent@QQuickItem@@MAEXPAVQFocusEvent@@@Z

qt5widgets

?qt_metacast@QDialog@@UAEPAXPBD@Z
?qt_metacall@QDialog@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?staticMetaObject@QDialog@@2UQMetaObject@@B
??0QApplication@@QAE@AAHPAPADH@Z
??1QApplication@@UAE@XZ
?exec@QApplication@@SAHXZ
?show@QWidget@@QAEXXZ
?setWindowTitle@QWidget@@QAEXABVQString@@@Z
?setWindowIcon@QWidget@@QAEXABVQIcon@@@Z
?isActiveWindow@QWidget@@QBE_NXZ
?activateWindow@QWidget@@QAEXXZ
?setFocusPolicy@QWidget@@QAEXW4FocusPolicy@Qt@@@Z
?showMinimized@QWidget@@QAEXXZ
?showNormal@QWidget@@QAEXXZ
?raise@QWidget@@QAEXXZ
?resize@QWidget@@QAEXHH@Z
?isMinimized@QWidget@@QBE_NXZ
?setWindowFlags@QWidget@@QAEXV?$QFlags@W4WindowType@Qt@@@@@Z
?createWindowContainer@QWidget@@SAPAV1@PAVQWindow@@PAV1@V?$QFlags@W4WindowType@Qt@@@@@Z
??0QDialog@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z
??1QDialog@@UAE@XZ
?setContentsMargins@QLayout@@QAEXHHHH@Z
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z
?setSpacing@QBoxLayout@@QAEXH@Z
??0QVBoxLayout@@QAE@PAVQWidget@@@Z
??1QVBoxLayout@@UAE@XZ
?accept@QDialog@@UAEXXZ
?actionEvent@QWidget@@MAEXPAVQActionEvent@@@Z
?addItem@QBoxLayout@@UAEXPAVQLayoutItem@@@Z
?changeEvent@QWidget@@MAEXPAVQEvent@@@Z
?childEvent@QLayout@@MAEXPAVQChildEvent@@@Z
?closeEvent@QDialog@@MAEXPAVQCloseEvent@@@Z
?contextMenuEvent@QDialog@@MAEXPAVQContextMenuEvent@@@Z
?controlTypes@QLayout@@UBE?AV?$QFlags@W4ControlType@QSizePolicy@@@@XZ
?count@QBoxLayout@@UBEHXZ
?devType@QWidget@@UBEHXZ
?done@QDialog@@UAEXH@Z
?dragEnterEvent@QWidget@@MAEXPAVQDragEnterEvent@@@Z
?dragLeaveEvent@QWidget@@MAEXPAVQDragLeaveEvent@@@Z
?dragMoveEvent@QWidget@@MAEXPAVQDragMoveEvent@@@Z
?focusInEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?dropEvent@QWidget@@MAEXPAVQDropEvent@@@Z
?enterEvent@QWidget@@MAEXPAVQEvent@@@Z
?event@QWidget@@MAE_NPAVQEvent@@@Z
?eventFilter@QDialog@@MAE_NPAVQObject@@PAVQEvent@@@Z
?exec@QDialog@@UAEHXZ
?focusNextPrevChild@QWidget@@MAE_N_N@Z
?focusOutEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?widget@QLayoutItem@@UAEPAVQWidget@@XZ
?wheelEvent@QWidget@@MAEXPAVQWheelEvent@@@Z
?takeAt@QBoxLayout@@UAEPAVQLayoutItem@@H@Z
?tabletEvent@QWidget@@MAEXPAVQTabletEvent@@@Z
?spacerItem@QLayoutItem@@UAEPAVQSpacerItem@@XZ
?sizeHint@QDialog@@UBE?AVQSize@@XZ
?sizeHint@QBoxLayout@@UBE?AVQSize@@XZ
?showEvent@QDialog@@MAEXPAVQShowEvent@@@Z
?sharedPainter@QWidget@@MBEPAVQPainter@@XZ
?setVisible@QDialog@@UAEX_N@Z
?setGeometry@QBoxLayout@@UAEXABVQRect@@@Z
?resizeEvent@QDialog@@MAEXPAVQResizeEvent@@@Z
?reject@QDialog@@UAEXXZ
?redirected@QWidget@@MBEPAVQPaintDevice@@PAVQPoint@@@Z
?qt_metacast@QVBoxLayout@@UAEPAXPBD@Z
?qt_metacall@QVBoxLayout@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?paintEvent@QWidget@@MAEXPAVQPaintEvent@@@Z
?paintEngine@QWidget@@UBEPAVQPaintEngine@@XZ
?open@QDialog@@UAEXXZ
?nativeEvent@QWidget@@MAE_NABVQByteArray@@PAXPAJ@Z
?moveEvent@QWidget@@MAEXPAVQMoveEvent@@@Z
?mouseReleaseEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?minimumSizeHint@QDialog@@UBE?AVQSize@@XZ
?minimumSize@QBoxLayout@@UBE?AVQSize@@XZ
?minimumHeightForWidth@QBoxLayout@@UBEHH@Z
?metric@QWidget@@MBEHW4PaintDeviceMetric@QPaintDevice@@@Z
?metaObject@QVBoxLayout@@UBEPBUQMetaObject@@XZ
?maximumSize@QBoxLayout@@UBE?AVQSize@@XZ
?leaveEvent@QWidget@@MAEXPAVQEvent@@@Z
?layout@QLayout@@UAEPAV1@XZ
?keyReleaseEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QDialog@@MAEXPAVQKeyEvent@@@Z
?itemAt@QBoxLayout@@UBEPAVQLayoutItem@@H@Z
?isEmpty@QLayout@@UBE_NXZ
?invalidate@QBoxLayout@@UAEXXZ
?inputMethodQuery@QWidget@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?inputMethodEvent@QWidget@@MAEXPAVQInputMethodEvent@@@Z
?initPainter@QWidget@@MBEXPAVQPainter@@@Z
?indexOf@QLayout@@UBEHPAVQWidget@@@Z
?hideEvent@QWidget@@MAEXPAVQHideEvent@@@Z
?geometry@QLayout@@UBE?AVQRect@@XZ
?hasHeightForWidth@QBoxLayout@@UBE_NXZ
?hasHeightForWidth@QWidget@@UBE_NXZ
?heightForWidth@QWidget@@UBEHH@Z
?heightForWidth@QBoxLayout@@UBEHH@Z
?expandingDirections@QBoxLayout@@UBE?AV?$QFlags@W4Orientation@Qt@@@@XZ

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

libcurl

curl_global_init
curl_global_cleanup
curl_slist_append
curl_easy_strerror
curl_easy_getinfo
curl_slist_free_all
curl_formadd
curl_easy_cleanup
curl_easy_perform
curl_easy_setopt
curl_easy_init

zlib

deflateInit2_
crc32
deflate
compressBound
inflateEnd
inflate
deflateEnd
inflateInit2_

msvcp140

?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Syserror_map@std@@YAPBDH@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?id@?$numpunct@D@std@@2V0locale@2@A
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?classic@locale@std@@SAABV12@XZ
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
??0_Locinfo@std@@QAE@PBD@Z
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QBE_JXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?eof@ios_base@std@@QBE_NXZ
??7ios_base@std@@QBE_NXZ
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPAD_J@Z
?pubseekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?pubseekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?global@locale@std@@SA?AV12@ABV12@@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_Getname@_Locinfo@std@@QBEPBDXZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@HPBD@Z
?_Xruntime_error@std@@YAXPBD@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?fail@ios_base@std@@QBE_NXZ
?tolower@?$ctype@D@std@@QBEDD@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?flags@ios_base@std@@QAEHH@Z
?exceptions@ios_base@std@@QAEXH@Z
?narrow@?$ctype@D@std@@QBEDDD@Z
?widen@?$ctype@D@std@@QBEDD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??Bios_base@std@@QBE_NXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
??Bid@locale@std@@QAEIXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?precision@ios_base@std@@QAE_J_J@Z
?setf@ios_base@std@@QAEHHH@Z
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
?_W_Getmonths@_Locinfo@std@@QBEPBGXZ
?_W_Getdays@_Locinfo@std@@QBEPBGXZ
?_Getmonths@_Locinfo@std@@QBEPBDXZ
?_Getdays@_Locinfo@std@@QBEPBDXZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
_Mbrtowc
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ

iphlpapi

GetAdaptersInfo

bcrypt

BCryptOpenAlgorithmProvider
BCryptGenRandom
BCryptCloseAlgorithmProvider

vmprotectsdk32

VMProtectBegin
VMProtectEnd

vcruntime140

__std_exception_destroy
_CxxThrowException
memcmp
memset
__std_type_info_compare
__std_type_info_name
memchr
strchr
strstr
__std_terminate
_purecall
_except_handler3
__std_type_info_destroy_list
__CxxFrameHandler3
__RTDynamicCast
__std_exception_copy
memmove
_except_handler4_common
memcpy

api-ms-win-crt-runtime-l1-1-0

_cexit
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo_noreturn
_crt_at_quick_exit
_crt_atexit
_seh_filter_exe
_errno
_configure_narrow_argv
strerror
_set_app_type
_c_exit
_beginthreadex
perror
_invalid_parameter_noinfo
_register_onexit_function
_get_narrow_winmain_command_line
_seh_filter_dll
terminate
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
exit
_exit
_execute_onexit_table
_controlfp_s

api-ms-win-crt-string-l1-1-0

towlower
strcmp
strcpy
wcslen
towupper
_stricmp
_strnicmp
strncpy
toupper
tolower
isalnum
isalpha
isspace
ispunct
strcpy_s
strncmp
isdigit
strlen

api-ms-win-crt-heap-l1-1-0

realloc
malloc
_recalloc
calloc
_set_new_mode
free
_callnewh

api-ms-win-crt-stdio-l1-1-0

fgets
rewind
__stdio_common_vfprintf
__stdio_common_vsprintf_s
ungetc
setvbuf
fwrite
_fseeki64
fopen
fread
fputc
fgetpos
fgetc
fflush
fclose
_get_stream_buffer_pointers
__stdio_common_vsprintf
__acrt_iob_func
fsetpos
ftell
_set_fmode
__stdio_common_vsscanf
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s
ferror
__p__commode
_fileno
_setmode
fseek

api-ms-win-crt-filesystem-l1-1-0

_splitpath_s
_splitpath
rename
_unlock_file
_lock_file
_makepath
_stat64i32

api-ms-win-crt-convert-l1-1-0

wcstombs
atof
atoi
mbstowcs
strtol

api-ms-win-crt-locale-l1-1-0

localeconv
setlocale
_configthreadlocale

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-time-l1-1-0

_time64
_localtime64

api-ms-win-crt-math-l1-1-0

floor
__setusermatherr
_fdopen
_except1
_libm_sse2_pow_precise

oleaut32

SysFreeString
VariantClear
GetErrorInfo
VariantInit
VariantChangeType
SetErrorInfo
CreateErrorInfo
SysAllocString

ole32

CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoCreateInstance

user32

UnregisterClassA
CloseClipboard
LoadStringA
LoadStringW
SystemParametersInfoA
GetDesktopWindow
IsClipboardFormatAvailable
GetClipboardData
ExitWindowsEx
SetWindowPos
CharNextA
OpenClipboard

Sections

.text
Size: 916KB - Virtual size: 916KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 401KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5284cee37f586f76a98a837c48cf059

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6aCertificate

Key Usages

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

26:df:09:9e:8d:36:54:43:eb:18:42:b5Certificate

Extended Key Usages

Key Usages

f6:10:28:1b:02:54:83:ff:5f:34:a4:f4:fa:1e:f2:9d:5c:18:3e:3fSigner

Signature Validations

Verification

07/05/2020, 08:30 Valid: true

Chain 1

Chain 2

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

advapi32

qt5core

qt5gui

qt5qml

qt5quick

qt5widgets

version

libcurl

zlib

msvcp140

iphlpapi

bcrypt

vmprotectsdk32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

oleaut32

ole32

user32

Sections

.text Size: 916KB - Virtual size: 916KB

.rdata Size: 170KB - Virtual size: 170KB

.data Size: 17KB - Virtual size: 19KB

.rsrc Size: 401KB - Virtual size: 400KB

.reloc Size: 43KB - Virtual size: 42KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Certificate

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

26:df:09:9e:8d:36:54:43:eb:18:42:b5
Certificate

f6:10:28:1b:02:54:83:ff:5f:34:a4:f4:fa:1e:f2:9d:5c:18:3e:3f
Signer

07/05/2020, 08:30
Valid: true

.text
Size: 916KB - Virtual size: 916KB

.rdata
Size: 170KB - Virtual size: 170KB

.data
Size: 17KB - Virtual size: 19KB

.rsrc
Size: 401KB - Virtual size: 400KB

.reloc
Size: 43KB - Virtual size: 42KB