brwsr_installupd_stable-ver(102[.]32[.]119)[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

brwsr_installupd_stable-ver(102.32.119).zip
Size

1.6MB
MD5

2a0bc12da82d254938c6a3208e01f59a
SHA1

c1e7d29bbe60e2d3d8ef3e83cb9c38699d8ece73
SHA256

dc207762edb90234600c83ebc767324c5b729de06040066e0a28e723c92d32de
SHA512

e2e0de9ac909f3742d1ee76ff434931d5e6e6076eb86907df852a256624765e088149cb1880dda552e8e35a045204dde5f9ae0ac332435fe91cb2c37dbe2cda9
SSDEEP

49152:NNBWSzAToXCEOLlaXcGIKrz3ceyiTGYa545:XBPSZL7GIKEed6z45

Score

1^/10

Malware Config

Signatures

Files

brwsr_installupd_stable-ver(102.32.119).zip
.zip
Docs/THA/adaptusr.htm
Docs/THA/caution.jpg
.jpg
Docs/THA/index.htm
Docs/THA/japan.jpg
.jpg
Docs/THA/korea.jpg
.jpg
Docs/THA/regs.htm
Docs/THA/specs.htm
Docs/THA/style.css
Docs/THA/support.htm
.html
Docs/THA/taiwan.jpg
.jpg
Docs/THA/warning.jpg
.jpg
Docs/THA/warranty.htm
.html
Docs/TRK/adaptusr.htm
Docs/TRK/caution.jpg
.jpg
Docs/TRK/index.htm
Docs/TRK/japan.jpg
.jpg
Docs/TRK/korea.jpg
.jpg
Docs/TRK/regs.htm
Docs/TRK/specs.htm
Docs/TRK/style.css
Docs/TRK/support.htm
.html
Docs/TRK/taiwan.jpg
.jpg
Docs/TRK/warning.jpg
.jpg
Docs/TRK/warranty.htm
.html
Docs/releasenotes.htm
.html
Install Updater (win-msi-stable).url
License/IBL Pinvoke.net License.txt
License/MIT License.txt
License/Microsoft Enterprise WDK License for VS 2019.txt
License/Microsoft Public License.txt
License/Microsoft Reciprocal License.txt
License/Microsoft Visual Studio 2017 Enterprise.txt
License/Microsoft Windows 10 SDK License.txt
License/apache_license.txt
License/brown_crc32.txt
License/doxegen.txt
License/express_logic_threadx.txt
License/gladman_older_rijndael_license.txt
License/hackers_delight_algorithms_code.txt
License/hostapd_authenticator.txt
License/jouni_malinen_wpa_supplicant.txt
License/msft_sdk_license.txt
License/msft_vs_2019_license.txt
License/msft_vs_autogenerated_code.txt
License/oss_notice_intel_conectivity_wireless_firmware_code.txt
License/tmake.txt
Local/Win32/Drivers/Netwtn04.INF
Local/Win32/Drivers/netwtn04.cat
Local/Win32/Installer/setup.xml
.xml
Local/Win64/Drivers/Netwtw04.INF
Local/Win64/Drivers/Netwtw06.INF
Local/Win64/Drivers/Netwtw08.INF
Local/Win64/Drivers/Netwtw6e.INF
Local/Win64/Drivers/netwtw04.cat
Local/Win64/Drivers/netwtw06.cat
Local/Win64/Drivers/netwtw08.cat
Local/Win64/Drivers/netwtw6e.cat
Local/Win64/Installer/Extensions/PieExtension.INF
Local/Win64/Installer/Extensions/WifiDrv04Customizations.cat
Local/Win64/Installer/Extensions/WifiDrv04Customizations.inf
Local/Win64/Installer/Extensions/WifiDrv06Customizations.cat
Local/Win64/Installer/Extensions/WifiDrv06Customizations.inf
Local/Win64/Installer/Extensions/WifiDrv08Customizations.cat
Local/Win64/Installer/Extensions/WifiDrv08Customizations.inf
Local/Win64/Installer/Extensions/pieextension.cat
Local/Win64/Installer/setup.xml
.xml
Local/Win64/Tools/Diagnostics/ETW/Driver/RegisterCustomerManifest.bat
Local/Win64/Tools/Diagnostics/ETW/Driver/UnRegisterCustomerManifest.bat
Local/Win64/Tools/Diagnostics/ETW/Driver/WlanDriverEventsCustomer.man
.xml
Local/Win64/Tools/Diagnostics/ETW/RegisterAllManifests.bat
Local/Win64/Tools/Diagnostics/ETW/UnRegisterAllManifests.bat
Local/Win64/Tools/Diagnostics/RESOURCES/IntelWiFiDriverEtw_driver_customer.dll
.dll windows x86

Code Sign

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05-04-2021 00:00

Not After

05-04-2023 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-07-2015 21:03

Not After

22-07-2025 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

13:84:ab:4f:f5:18:54:05:fe:85:36:93:96:46:43:75:30:27:57:ef:3c:73:c5:af:c7:c0:6c:39:1c:2d:7c:6d
Signer

Actual PE Digest

13:84:ab:4f:f5:18:54:05:fe:85:36:93:96:46:43:75:30:27:57:ef:3c:73:c5:af:c7:c0:6c:39:1c:2d:7c:6d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Local/Win64/Tools/Diagnostics/RegisterCustomerEtwPcwFiles.bat
Local/Win64/Tools/Diagnostics/UnRegisterCustomerEtwPcwFiles.bat
Local/Win64/Utilities/PIE/IntelIHVPipeClient.dll
.dll windows x64

039e9a407709cdca269b74b7dc579631

Code Sign

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07-04-2021 00:00

Not After

07-04-2023 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-07-2015 21:03

Not After

22-07-2025 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2022 19:58

Not After

08-03-2023 19:58

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:eb:b1:22:33:2f:29:82:3b:e8:df:a8:ac:a4:0a:6a:9d:83:19:6c:d6:fc:22:c3:27:82:01:03:c9:2a:bc:90
Signer

Actual PE Digest

0d:eb:b1:22:33:2f:29:82:3b:e8:df:a8:ac:a4:0a:6a:9d:83:19:6c:d6:fc:22:c3:27:82:01:03:c9:2a:bc:90

Digest Algorithm

sha256

PE Digest Matches

true

0d:eb:b1:22:33:2f:29:82:3b:e8:df:a8:ac:a4:0a:6a:9d:83:19:6c:d6:fc:22:c3:27:82:01:03:c9:2a:bc:90
Signer

Actual PE Digest

0d:eb:b1:22:33:2f:29:82:3b:e8:df:a8:ac:a4:0a:6a:9d:83:19:6c:d6:fc:22:c3:27:82:01:03:c9:2a:bc:90

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleFileNameA
GetCurrentProcess
GetLastError
K32GetModuleBaseNameA
WideCharToMultiByte
CreateDirectoryA
__C_specific_handler
WaitForSingleObject
CloseHandle
CreateThread
OutputDebugStringW
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExA
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
OutputDebugStringA
FormatMessageA
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
LocalFree
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetCurrentThread
HeapFree
HeapAlloc
GetStdHandle
GetFileType
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
ReadConsoleW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
SetConsoleCtrlHandler
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
HeapSize
WriteConsoleW
SetEndOfFile
RtlUnwind

Exports

Exports

IhvExpInitHandlers

Sections

.text
Size: 720KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Local/Win64/Utilities/PIE/Intel_PIE_IHV.dll
.dll windows x64

b5f1a38dea6b7586e075ecefe76e7c4f

Code Sign

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07-04-2021 00:00

Not After

07-04-2023 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-07-2015 21:03

Not After

22-07-2025 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2022 19:58

Not After

08-03-2023 19:58

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

54:2e:c0:32:c4:c5:f7:13:f8:47:29:e6:19:45:7f:7e:f9:3e:a8:cd:dd:d4:e1:d3:4e:79:ab:e4:73:cc:93:f3
Signer

Actual PE Digest

54:2e:c0:32:c4:c5:f7:13:f8:47:29:e6:19:45:7f:7e:f9:3e:a8:cd:dd:d4:e1:d3:4e:79:ab:e4:73:cc:93:f3

Digest Algorithm

sha256

PE Digest Matches

true

54:2e:c0:32:c4:c5:f7:13:f8:47:29:e6:19:45:7f:7e:f9:3e:a8:cd:dd:d4:e1:d3:4e:79:ab:e4:73:cc:93:f3
Signer

Actual PE Digest

54:2e:c0:32:c4:c5:f7:13:f8:47:29:e6:19:45:7f:7e:f9:3e:a8:cd:dd:d4:e1:d3:4e:79:ab:e4:73:cc:93:f3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
Sleep
InitializeCriticalSectionEx
GetLastError
RaiseException
WriteConsoleW
DeleteCriticalSection
MultiByteToWideChar
__C_specific_handler
WideCharToMultiByte
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
OutputDebugStringW
CloseHandle
WriteFile
GetConsoleMode
GetConsoleOutputCP
GetTickCount
FlushFileBuffers
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExA
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
RtlPcToFileHeader
FormatMessageA
IsProcessorFeaturePresent
InitOnceComplete
InitOnceBeginInitialize
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFilePointerEx
AreFileApisANSI
GetFileInformationByHandleEx
LocalFree
WaitForSingleObjectEx
QueryPerformanceCounter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetCPInfo
ExitProcess
GetModuleFileNameW
GetStdHandle
GetFileType
LCMapStringW
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle

ext-ms-win-networking-wlanapi-l1-1-0

WlanOpenHandle
WlanEnumInterfaces
WlanQueryInterface

Exports

Exports

AgentGetVersion
AgentInitHandlers
Dot11ExtIhvGetVersionInfo
Dot11ExtIhvInitService
Dot11ExtPipeIhvInitService

Sections

.text
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Local/Win64/Utilities/PIE/Intel_PIE_SDK_Common.dll
.dll windows x64

18ebcea81178260ee42841662e0ee1a0

Code Sign

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07-04-2021 00:00

Not After

07-04-2023 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-07-2015 21:03

Not After

22-07-2025 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2022 19:58

Not After

08-03-2023 19:58

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

71:87:23:d3:ec:e0:04:ed:db:f3:7b:fe:54:b0:76:79:65:41:b4:b2:45:14:e4:a0:a4:60:43:02:9c:34:05:eb
Signer

Actual PE Digest

71:87:23:d3:ec:e0:04:ed:db:f3:7b:fe:54:b0:76:79:65:41:b4:b2:45:14:e4:a0:a4:60:43:02:9c:34:05:eb

Digest Algorithm

sha256

PE Digest Matches

true

71:87:23:d3:ec:e0:04:ed:db:f3:7b:fe:54:b0:76:79:65:41:b4:b2:45:14:e4:a0:a4:60:43:02:9c:34:05:eb
Signer

Actual PE Digest

71:87:23:d3:ec:e0:04:ed:db:f3:7b:fe:54:b0:76:79:65:41:b4:b2:45:14:e4:a0:a4:60:43:02:9c:34:05:eb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapFree
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
RaiseException
HeapAlloc
LocalFree
DeleteCriticalSection
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
OutputDebugStringW
CloseHandle
WriteFile
GetProcAddress
Sleep
LoadLibraryW
FreeLibrary
MultiByteToWideChar
FormatMessageA
GetSystemInfo
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
WideCharToMultiByte
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetStringTypeW
SetFilePointerEx
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
CreateFileW
WriteConsoleW
AcquireSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockExclusive
ReleaseSRWLockShared
DeleteTimerQueueTimer
CreateTimerQueueTimer
CreateTimerQueue
DeleteTimerQueueEx
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx

Exports

Exports

ProcessCmdInternal_adapter_hdr_pBuff
ProcessCmdInternal_adapter_hdr_ppBuff
ProcessCmdInternal_adapter_pHdr
ProcessCmdInternal_pBuff
ProcessCmdInternal_pHdr_pBuff
ProcessCmdInternal_pHdr_ppBuff

Sections

.text
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Local/Win64/Utilities/PIE/Intel_PIE_Service.exe
.exe windows x64

b5642bea84125a41c567298a0893574a

Code Sign

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07-04-2021 00:00

Not After

07-04-2023 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-07-2015 21:03

Not After

22-07-2025 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2022 19:58

Not After

08-03-2023 19:58

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7a:93:35:cd:16:24:15:c7:92:4f:ab:0b:47:8f:f3:7f:23:64:a1:ec:57:77:c8:a5:09:67:0d:ce:ef:6b:8c:f4
Signer

Actual PE Digest

7a:93:35:cd:16:24:15:c7:92:4f:ab:0b:47:8f:f3:7f:23:64:a1:ec:57:77:c8:a5:09:67:0d:ce:ef:6b:8c:f4

Digest Algorithm

sha256

PE Digest Matches

true

7a:93:35:cd:16:24:15:c7:92:4f:ab:0b:47:8f:f3:7f:23:64:a1:ec:57:77:c8:a5:09:67:0d:ce:ef:6b:8c:f4
Signer

Actual PE Digest

7a:93:35:cd:16:24:15:c7:92:4f:ab:0b:47:8f:f3:7f:23:64:a1:ec:57:77:c8:a5:09:67:0d:ce:ef:6b:8c:f4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapFree
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
HeapDestroy
WriteConsoleW
DeleteCriticalSection
GetProcessHeap
GetWindowsDirectoryW
GetPrivateProfileStringW
CopyFileW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventW
CloseHandle
ResetEvent
SetEvent
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForSingleObject
CloseThreadpoolWork
GetConsoleMode
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
OutputDebugStringW
WriteFile
GetProcAddress
Sleep
LoadLibraryW
FreeLibrary
MultiByteToWideChar
MoveFileExW
CreateDirectoryW
GetCurrentProcess
GetTickCount
ReadFile
CreateProcessW
GetExitCodeProcess
PeekNamedPipe
CreatePipe
AcquireSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockExclusive
ReleaseSRWLockShared
DeleteTimerQueueTimer
CreateTimerQueueTimer
CreateTimerQueue
DeleteTimerQueueEx
GetConsoleOutputCP
FlushFileBuffers
GetSystemInfo
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
FormatMessageA
LocalFree
GetCurrentDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
SetFilePointerEx
AreFileApisANSI
GetFileInformationByHandleEx
WideCharToMultiByte
GetStringTypeW
EncodePointer
LCMapStringEx
GetCPInfo
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDriveTypeW
GetFileType
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetCommandLineA
GetCommandLineW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW

Sections

.text
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Local/Win64/Utilities/PIE/MurocApi.dll
.dll windows x64

97eeae54d4e6cc0ccfd5998eddfe1080

Code Sign

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

07-04-2021 00:00

Not After

07-04-2023 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-07-2015 21:03

Not After

22-07-2025 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2022 19:58

Not After

08-03-2023 19:58

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3b:3f:c8:bb:75:83:b6:0d:07:03:22:38:c2:7c:54:3c:0d:5a:95:e2:db:d2:5a:73:d1:c0:8b:5b:44:48:a8:f4
Signer

Actual PE Digest

3b:3f:c8:bb:75:83:b6:0d:07:03:22:38:c2:7c:54:3c:0d:5a:95:e2:db:d2:5a:73:d1:c0:8b:5b:44:48:a8:f4

Digest Algorithm

sha256

PE Digest Matches

true

3b:3f:c8:bb:75:83:b6:0d:07:03:22:38:c2:7c:54:3c:0d:5a:95:e2:db:d2:5a:73:d1:c0:8b:5b:44:48:a8:f4
Signer

Actual PE Digest

3b:3f:c8:bb:75:83:b6:0d:07:03:22:38:c2:7c:54:3c:0d:5a:95:e2:db:d2:5a:73:d1:c0:8b:5b:44:48:a8:f4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapFree
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
RaiseException
HeapAlloc
WriteConsoleW
DeleteCriticalSection
GetProcessHeap
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
OutputDebugStringW
CloseHandle
WriteFile
MultiByteToWideChar
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleHandleW
LoadLibraryExA
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFilePointerEx
AreFileApisANSI
GetFileInformationByHandleEx
WideCharToMultiByte
FormatMessageA
LocalFree
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetCPInfo
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetFileType
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode

Exports

Exports

DeregisterIntelCallback
DeregisterMsgFromDrvCallback
FreeListMemory
Get11ACTxRxData
Get11nAntennaInUse
GetAPIVersion
GetAdapterConfiguration
GetAdapterFeatures
GetAdapterFeaturesEx
GetAdapterList
GetAdapterListEx
GetAntennaSelectionMode
GetAssocStatistics
GetAssociationInfo
GetAssociationStatus
GetBand
GetCachedScanListCount
GetChannelNoiseInformation
GetConnectedRSSI
GetDeviceInfo
GetMCSTxRxData
GetProsetInstallationInfo
GetProtocolPreference
GetRadioState
GetRadioStateEx
GetRoamingAggressiveness
GetRxSensitivitySettings
GetScanList
GetScanListEx
GetScanOptimizationConfiguration
GetSupportedRates
GetTxRate
GetTxRxData
GetVersionInfo
Is11acInOperation
Is11nInOperation
ReSetRoamingAggressiveness
ReSetScanOptimizationConfiguration
RegisterIntelCallback
RegisterMsgFromDrvCallback
Set11nChannelWidth
Set11nMode
SetAntennaSelectionMode
SetPlatformMaxTxPower
SetProtocolPreference
SetRadioState
SetRadioStateEx
SetRoamingAggressiveness
SetRxSensitivityValues
SetScanOptimizationConfiguration
SetTxAntenna
WifiCmdTimingMeasurementRequest
WifiCmdTimingPtmWa
WifiCmdTriggerTimingMeasurementRequest
WifiConfigurationRemoteWake
WifiGet11ACTxRxData
WifiGetAdapterConfiguration
WifiGetAdapterFeatures
WifiGetAdapterList
WifiGetAdapterListEx
WifiGetAllAssociationInformation
WifiGetAntennaSelectionMode
WifiGetAssocStatistics
WifiGetAssociationInfo
WifiGetBSSConfigurationStatistics
WifiGetChannelNoiseInformation
WifiGetCoexCharacteristics
WifiGetDeviceInfo
WifiGetMCSTxRxData
WifiGetProsetInstallationInfo
WifiGetScanList
WifiGetTxRxData
WifiGetVersionInfo
WifiGetWOWLANConfiguration
WifiGetWOWLANWakeData
WifiIsRemoteWakeSupported
WifiLegacyGoSetScanFilter
WifiPanQueryPreferredChannelSetting
WifiPanQuerySupportedChannels
WifiPanReSetDiscoveryFilter
WifiPanReSetLegacyGoScanFilter
WifiPanResetPreferredChannelSettings
WifiPanSetDiscoveryFilter
WifiPanSetPreferredChannelSettings
WifiSendMsgToDrv
WifiSet11nChannelWidth
WifiSetAntennaSelectionMode
WifiSetLTEConfigInfo
WifiSetLTEDynamicInfo
WifiSetLTEModemStateInfo
WifiSetLTESpsInfo
WifiSetRemoteWakeArpOffload
WifiSetRemoteWakeConfiguration
WifiSetS5Configuration
WifiSetWOWLANConfiguration
WifiSetWiFiPreferredChannels
WifiSetWiFiReportedChannel

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Local/Win64/Utilities/PIE/PieComponent.INF
Local/Win64/Utilities/PIE/PieExtension.INF
Local/Win64/Utilities/PIE/piecomponent.cat
Local/Win64/Utilities/PIE/pieextension.cat
Local/Win64/Utilities/Special Configs/WifiDrv04Customizations.cat
Local/Win64/Utilities/Special Configs/WifiDrv04Customizations.inf
Local/Win64/Utilities/Special Configs/WifiDrv06Customizations.cat
Local/Win64/Utilities/Special Configs/WifiDrv06Customizations.inf
Local/Win64/Utilities/Special Configs/WifiDrv08Customizations.cat
Local/Win64/Utilities/Special Configs/WifiDrv08Customizations.inf
readme.rtf
.rtf
verfile.tic

Sharing

General

Malware Config

Signatures

Files

Code Sign

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:feCertificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

13:84:ab:4f:f5:18:54:05:fe:85:36:93:96:46:43:75:30:27:57:ef:3c:73:c5:af:c7:c0:6c:39:1c:2d:7c:6dSigner

Headers

DLL Characteristics

File Characteristics

Sections

.rdata Size: 1024B - Virtual size: 810B

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 512B - Virtual size: 8B

039e9a407709cdca269b74b7dc579631

Code Sign

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dcCertificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

0d:eb:b1:22:33:2f:29:82:3b:e8:df:a8:ac:a4:0a:6a:9d:83:19:6c:d6:fc:22:c3:27:82:01:03:c9:2a:bc:90Signer

0d:eb:b1:22:33:2f:29:82:3b:e8:df:a8:ac:a4:0a:6a:9d:83:19:6c:d6:fc:22:c3:27:82:01:03:c9:2a:bc:90Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 720KB - Virtual size: 720KB

.rdata Size: 162KB - Virtual size: 161KB

.data Size: 9KB - Virtual size: 17KB

.pdata Size: 35KB - Virtual size: 35KB

.didat Size: 512B - Virtual size: 48B

_RDATA Size: 512B - Virtual size: 148B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

b5f1a38dea6b7586e075ecefe76e7c4f

Code Sign

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

58:b1:c1:c4:3e:99:9c:1c:f7:c6:94:a1:d7:76:d0:fe
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

13:84:ab:4f:f5:18:54:05:fe:85:36:93:96:46:43:75:30:27:57:ef:3c:73:c5:af:c7:c0:6c:39:1c:2d:7c:6d
Signer

.rdata
Size: 1024B - Virtual size: 810B

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 512B - Virtual size: 8B

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

0d:eb:b1:22:33:2f:29:82:3b:e8:df:a8:ac:a4:0a:6a:9d:83:19:6c:d6:fc:22:c3:27:82:01:03:c9:2a:bc:90
Signer

0d:eb:b1:22:33:2f:29:82:3b:e8:df:a8:ac:a4:0a:6a:9d:83:19:6c:d6:fc:22:c3:27:82:01:03:c9:2a:bc:90
Signer

.text
Size: 720KB - Virtual size: 720KB

.rdata
Size: 162KB - Virtual size: 161KB

.data
Size: 9KB - Virtual size: 17KB

.pdata
Size: 35KB - Virtual size: 35KB

.didat
Size: 512B - Virtual size: 48B

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

54:2e:c0:32:c4:c5:f7:13:f8:47:29:e6:19:45:7f:7e:f9:3e:a8:cd:dd:d4:e1:d3:4e:79:ab:e4:73:cc:93:f3
Signer

54:2e:c0:32:c4:c5:f7:13:f8:47:29:e6:19:45:7f:7e:f9:3e:a8:cd:dd:d4:e1:d3:4e:79:ab:e4:73:cc:93:f3
Signer

.text
Size: 286KB - Virtual size: 285KB

.rdata
Size: 160KB - Virtual size: 160KB

.data
Size: 13KB - Virtual size: 21KB

.pdata
Size: 13KB - Virtual size: 12KB

.didat
Size: 512B - Virtual size: 272B

_RDATA
Size: 512B - Virtual size: 384B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB

70:71:1b:35:6e:72:4b:35:55:aa:b1:49:d9:d2:a9:70
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

71:87:23:d3:ec:e0:04:ed:db:f3:7b:fe:54:b0:76:79:65:41:b4:b2:45:14:e4:a0:a4:60:43:02:9c:34:05:eb
Signer

71:87:23:d3:ec:e0:04:ed:db:f3:7b:fe:54:b0:76:79:65:41:b4:b2:45:14:e4:a0:a4:60:43:02:9c:34:05:eb
Signer

.text
Size: 209KB - Virtual size: 209KB

.rdata
Size: 134KB - Virtual size: 133KB

.data
Size: 8KB - Virtual size: 58KB

.pdata
Size: 10KB - Virtual size: 9KB

.didat
Size: 512B - Virtual size: 168B

_RDATA
Size: 512B - Virtual size: 384B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB