3440483ba755123af8ee148236c8e964fa92d401ad89d380e6e92b4fdaca270a

Sharing

Copy URL

Twitter E-mail

General

Target

3440483ba755123af8ee148236c8e964fa92d401ad89d380e6e92b4fdaca270a
Size

790KB
MD5

2cbb7891eb3d479bc5165cc96dd9cd50
SHA1

270462c2c2fcb17bb20737acb97e95ed6338bd67
SHA256

3440483ba755123af8ee148236c8e964fa92d401ad89d380e6e92b4fdaca270a
SHA512

3e5cc8bd57139c0d5144037918298c17e3526da86c179c9f4f079cfd64b92d0d7ebcc94c30051f75f7cf906c1d9e52183d7ad148ba9b0996332c95f537c1eeda
SSDEEP

12288:5//Xr2OQuNEs0di4iX2oBOM/Zh55a26b1uyh2pBjvrEH7Xm:JQs0S2oBOmTbak3rEH7Xm

Score

1^/10

Malware Config

Signatures

Files

3440483ba755123af8ee148236c8e964fa92d401ad89d380e6e92b4fdaca270a
.dll windows:5 windows x86 arch:x86

eced284be3f78793b6340c448081adab

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:b5:7e:e8:07:45:95:de:33:f1:ea:d7:df:b3:dd:43
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

03/08/2022, 00:00

Not After

29/07/2025, 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:b5:7e:e8:07:45:95:de:33:f1:ea:d7:df:b3:dd:43
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

03/08/2022, 00:00

Not After

29/07/2025, 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:a8:5c:62:2f:a0:b6:ee:d3:29:3d:97:91:1b:e1:45:cf:b7:44:fb:8f:f5:ba:12:3d:e8:97:03:77:a4:83:aa
Signer

Actual PE Digest

36:a8:5c:62:2f:a0:b6:ee:d3:29:3d:97:91:1b:e1:45:cf:b7:44:fb:8f:f5:ba:12:3d:e8:97:03:77:a4:83:aa

Digest Algorithm

sha256

PE Digest Matches

false

d8:9e:7b:85:1a:d8:28:45:14:d5:d4:38:bf:3b:a2:08:31:57:e3:69
Signer

Actual PE Digest

d8:9e:7b:85:1a:d8:28:45:14:d5:d4:38:bf:3b:a2:08:31:57:e3:69

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\winapps\5.0\dll\vc\DiskCleaner\soucecode\Release\DiskCleaner.pdb

Imports

uxtheme

DrawThemeBackground
OpenThemeData
CloseThemeData
SetWindowTheme

scanfile

DeleteItemTree
GetFileInfoByFileNumber
IsScanFileThreadLived
StopScanFile
MatchMask
ScanAll

shortcutfixer

CreateShortcuts
GetShortcutsTargetPath
CloseShortcuts
IsValidShortcuts
ResolveShortcuts

lockdll

_GoLike@8
_GoHomePage@8
ord6
ord2
ord9

restorecenter

GetBackupFileList
IsSaveLogFile
RegRestoreV2
IsEnableBackupModule
CreateBackupFile
ShowBackupListDialog
GetLogFilePath

languages

ord5
ord8
ord6
ord3
ord9
ord4

mfc90u

ord586
ord790
ord1047
ord337
ord613
ord6780
ord1533
ord5938
ord5941
ord601
ord316
ord5852
ord2696
ord6095
ord4541
ord4410
ord290
ord3637
ord6094
ord587
ord792
ord585
ord788
ord1723
ord4451
ord3149
ord6172
ord3231
ord3150
ord554
ord758
ord1041
ord2431
ord3941
ord4037
ord2706
ord3157
ord2705
ord2708
ord1585
ord5399
ord1787
ord2707
ord6517
ord2137
ord5652
ord6794
ord5595
ord2227
ord2265
ord2269
ord2288
ord2297
ord2289
ord2078
ord4396
ord5802
ord4320
ord6524
ord5611
ord5403
ord2627
ord1431
ord1425
ord5429
ord1432
ord4616
ord6204
ord3768
ord6686
ord320
ord1261
ord3158
ord4398
ord4040
ord791
ord3665
ord3674
ord1707
ord5778
ord6822
ord2571
ord795
ord590
ord5322
ord5497
ord6494
ord3686
ord3687
ord6493
ord1222
ord3622
ord6514
ord5895
ord2901
ord5770
ord6079
ord3187
ord3513
ord3456
ord2469
ord3537
ord6574
ord6723
ord4455
ord899
ord2478
ord3349
ord5881
ord3324
ord5920
ord906
ord700
ord448
ord1043
ord5887
ord1044
ord783
ord581
ord291
ord287
ord5767
ord1219
ord6811
ord1276
ord1166
ord1039
ord5883
ord4351
ord1856
ord712
ord464
ord1070
ord3868
ord2458
ord1243
ord2523
ord3589
ord5891
ord6168
ord711
ord463
ord6353
ord6275
ord3500
ord6813
ord784
ord582
ord6171
ord935
ord5979
ord1607
ord285
ord3220
ord4171
ord782
ord580
ord6604
ord2593
ord6577
ord3165
ord6349
ord4270
ord3167
ord2243
ord339
ord6666
ord2097
ord3488
ord333
ord6311
ord2267
ord2597
ord321
ord3160
ord4774
ord4741
ord5078
ord4815
ord3146
ord1063
ord1088
ord1688
ord2595
ord2146
ord2596
ord1357
ord1108
ord2130
ord3577
ord2282
ord4512
ord1248
ord4442
ord686
ord2470
ord6091
ord1354
ord3543
ord2106
ord1183
ord3486
ord2479
ord4490
ord4448
ord4423
ord6801
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord3115
ord4905
ord3670
ord2447
ord4211
ord710
ord462
ord794
ord589
ord4043
ord1599
ord5867
ord6013
ord4405
ord3399
ord2209
ord664
ord405
ord6659
ord2728
ord2702
ord1503
ord2602
ord615
ord3496
ord4654
ord1667
ord2277
ord4510
ord1601
ord2103
ord938
ord2326
ord6355
ord2360
ord3145
ord6347
ord4266
ord4262
ord693
ord3563
ord3252
ord4658
ord2280
ord1603
ord1855
ord814
ord266
ord5851
ord265
ord1552
ord1542
ord608
ord324
ord5535
ord663
ord404
ord2694
ord1254
ord1250
ord2758
ord6063
ord6572
ord6060
ord6566
ord4579
ord6569
ord6372
ord6183
ord6096
ord6101
ord6040
ord5863
ord5850
ord6418
ord6174
ord5974
ord2141
ord6547
ord1353
ord636
ord367
ord3741
ord3933
ord4131
ord6187
ord2592
ord6065
ord4527
ord4044
ord1137
ord611
ord3489
ord4652
ord1665
ord2274
ord2676
ord6164
ord799
ord744
ord524
ord811
ord2069
ord1064
ord1938
ord750
ord3627
ord1708
ord1779
ord778
ord595
ord797
ord3654
ord4681
ord3286
ord5664
ord4660
ord1493
ord6411
ord3355
ord1719
ord2283
ord280
ord5632
ord4631
ord5324
ord2208
ord1810
ord1809
ord1675
ord3353
ord6408
ord1754
ord1751
ord4345
ord1492
ord4664
ord5602
ord2074
ord5512
ord6800
ord4603
ord5653
ord3743
ord5154
ord4702
ord1728
ord6466
ord5685
ord5683
ord960
ord965
ord969
ord967
ord971
ord2615
ord2635
ord2619
ord2625
ord2623
ord2621
ord2638
ord2633
ord2617
ord2640
ord2628
ord2610
ord2612
ord801
ord296
ord802
ord322
ord1076
ord2630
ord2375
ord2368
ord1641
ord6802
ord4174
ord6804
ord3682
ord5404
ord6376
ord3226
ord1442
ord5625
ord2139
ord1792
ord1791
ord1727
ord5650
ord2771
ord2983
ord3112
ord4728
ord2966
ord3140
ord2774
ord2893
ord2764
ord4080
ord5939
ord6170
ord2551
ord436
ord4081
ord4071
ord2891
ord4348
ord4910
ord4682
ord2537
ord2904
ord6579
ord5008
ord5167
ord4516
ord1145
ord1271
ord1273
ord6760
ord1152
ord391
ord4000
ord2057
ord286
ord639
ord374
ord3794
ord813
ord600
ord4518
ord4173
ord4519
ord605
ord1274
ord1241
ord1239
ord1264
ord1180
ord1233
ord2084

msvcr90

_invalid_parameter_noinfo
iswspace
_wtoi
_wcstoui64
towupper
_swprintf
srand
rand
wcsstr
strstr
strncpy_s
__argc
__wargv
_beginthreadex
_endthreadex
_purecall
wcschr
__CxxFrameHandler3
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
memcpy
memset
?terminate@@YAXXZ
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
wcscpy_s
wcstod
ceil
_localtime64_s
_time64
_wtoi64
_recalloc
calloc
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
_resetstkoflw
malloc
_wcsnicmp
wcsncpy_s
memcpy_s
wcstol
_wcsdup
free
_wcsicmp
memmove_s
wcsrchr
iswalpha
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
_CxxThrowException

kernel32

FindClose
FindNextFileW
FindFirstFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
GetSystemTime
DeleteCriticalSection
InitializeCriticalSection
GetVolumeInformationW
GetPrivateProfileSectionW
lstrlenW
lstrcmpW
CloseHandle
WaitForMultipleObjects
ResumeThread
GetCurrentProcess
DuplicateHandle
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
SetLastError
GetCommandLineW
ExpandEnvironmentStringsW
GetSystemTimeAsFileTime
RemoveDirectoryW
GetModuleFileNameW
GetFileAttributesW
DeleteFileW
MultiByteToWideChar
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
CreateThread
Sleep
FreeLibrary
WideCharToMultiByte
CreateFileW
GetDiskFreeSpaceW
MoveFileW
SetFilePointer
LocalFree
VirtualAlloc
VirtualFree
SetFilePointerEx
WriteFile
WaitForSingleObject
QueryDosDeviceW
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
Process32NextW
GetVersionExW
TerminateProcess
GetWindowsDirectoryW
WinExec
GetPrivateProfileStringA
lstrlenA
SetFileTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCurrentThreadId
ReadFile
GetCurrentDirectoryW
LocalFileTimeToFileTime
CreateDirectoryW
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
LocalAlloc
GetTickCount
GetLocalTime
UnmapViewOfFile
GetFileSize
GetFileInformationByHandle
GetPrivateProfileStringW

user32

DrawEdge
DrawFocusRect
FrameRect
RegisterWindowMessageW
DestroyCursor
MessageBeep
TrackMouseEvent
GetMessagePos
InflateRect
CopyIcon
GetMenuState
ModifyMenuW
PeekMessageW
CheckMenuItem
GetMenuBarInfo
UnionRect
GetMenuItemInfoW
GetWindowLongW
CreateMenu
InsertMenuW
MessageBoxW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
CallWindowProcW
GetSysColorBrush
GetWindow
MsgWaitForMultipleObjects
GetSysColor
GetWindowTextW
GetParent
UpdateWindow
GetWindowThreadProcessId
SetRect
AppendMenuW
CreatePopupMenu
ScreenToClient
GetSystemMetrics
GetDesktopWindow
EnumChildWindows
GetClassNameW
TranslateAcceleratorW
KillTimer
IsWindowVisible
GetMenuItemID
GetMenuItemCount
GetCursorPos
FillRect
ReleaseCapture
SetCapture
ReleaseDC
GetDC
LoadCursorW
SetCursor
PtInRect
RedrawWindow
GetSubMenu
LoadMenuW
LoadAcceleratorsW
LoadIconW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetClientRect
CopyRect
SetWindowLongW
OffsetRect
LoadBitmapW
SetRectEmpty
IsWindow
wsprintfW
DispatchMessageW
GetWindowRect
InvalidateRect
LoadImageW
SetTimer
SendMessageW
EnableMenuItem
EnableWindow
GetScrollInfo

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
GetDIBColorTable
CreateFontW
GetMapMode
RestoreDC
GetTextExtentPoint32W
SaveDC
GetDeviceCaps
BitBlt
GetCurrentPositionEx
CreateFontIndirectW
SetTextColor
CreateDIBSection
SetDIBColorTable
GetStockObject
Escape
ExtTextOutW
TextOutW
FillPath
BeginPath
FrameRgn
FillRgn
SetBrushOrgEx
CreatePatternBrush
CreateRoundRectRgn
GetCurrentObject
GetBkColor
GetBkMode
CreatePen
CreateSolidBrush
RectVisible
StretchBlt
SelectObject
DeleteDC
GetTextColor
GetObjectW
DeleteObject
PtVisible
EndPath

msimg32

GradientFill
TransparentBlt
AlphaBlend

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
SHGetSpecialFolderPathW
ord165
ShellExecuteW
ShellExecuteExW
SHGetDesktopFolder
SHGetFileInfoW
SHFileOperationW
SHGetDataFromIDListW
SHEmptyRecycleBinW
CommandLineToArgvW

comctl32

_TrackMouseEvent

shlwapi

PathIsDirectoryW
PathFileExistsW
PathMatchSpecW
ColorHLSToRGB
PathCompactPathW

ole32

CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree
CreateStreamOnHGlobal

oleaut32

VariantClear
SysFreeString
VarDateFromStr
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
SysStringLen
SysAllocString

msvcp90

??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

gdiplus

GdipCreateBitmapFromStream
GdiplusStartup
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdiplusShutdown

config

ord10
ord1
ord3
ord12
ord9
ord2
ord4
ord11
ord13
ord7
GUCIsSeparate

settings

GetSafeDeleteType
IsOnlyDelete24HousrOlderTempFiles

psapi

GetProcessImageFileNameW

zlib1

uncompress

log

OutLogLine
CloseOutLog
CreateOutLog
SaveOutLog
ClearOutLog

checkupdate

ord6

wininet

FindNextUrlCacheEntryW
FindFirstUrlCacheEntryW
FindCloseUrlCache
DeleteUrlCacheEntryW

Exports

Exports

CreateObject
DeleteCheckedGarbageFile
DiskCleaner_Backup
DiskCleaner_Clear
DiskCleaner_GetResultCount
DiskCleaner_GetResultSize
DiskCleaner_GetTypeImageList
DiskCleaner_GetTypeInfo
DiskCleaner_Initialize
DiskCleaner_Scan
DiskCleaner_SetOptionDialog
DiskCleaner_ShowResultDialog
DiskCleaner_StopClear
DiskCleaner_StopScan
GetSearchGarbageFileCount
GetSearchGarbageFileCurPath
GetSearchGarbageFileProgress
IsEndSearchGarbageFile
OneClickSearchGarbageFile
OpenGarbageFileView
RestoreGarbageFileBackup
SearchMultiGarbageFile
ShowDiskCleaner
ShowGarbageTypeManager
ShowOptions
ShowSearchResult
StopDeleteGarbageFile
StopOneClickSearchGarbageFile

Sections

.text
Size: 428KB - Virtual size: 427KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eced284be3f78793b6340c448081adab

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0b:b5:7e:e8:07:45:95:de:33:f1:ea:d7:df:b3:dd:43Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0b:b5:7e:e8:07:45:95:de:33:f1:ea:d7:df:b3:dd:43Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

36:a8:5c:62:2f:a0:b6:ee:d3:29:3d:97:91:1b:e1:45:cf:b7:44:fb:8f:f5:ba:12:3d:e8:97:03:77:a4:83:aaSigner

d8:9e:7b:85:1a:d8:28:45:14:d5:d4:38:bf:3b:a2:08:31:57:e3:69Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

uxtheme

scanfile

shortcutfixer

lockdll

restorecenter

languages

mfc90u

msvcr90

kernel32

user32

gdi32

msimg32

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

msvcp90

gdiplus

config

settings

psapi

zlib1

log

checkupdate

wininet

Exports

Exports

Sections

.text Size: 428KB - Virtual size: 427KB

.rdata Size: 95KB - Virtual size: 94KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 116KB - Virtual size: 115KB

.reloc Size: 49KB - Virtual size: 48KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0b:b5:7e:e8:07:45:95:de:33:f1:ea:d7:df:b3:dd:43
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0b:b5:7e:e8:07:45:95:de:33:f1:ea:d7:df:b3:dd:43
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

36:a8:5c:62:2f:a0:b6:ee:d3:29:3d:97:91:1b:e1:45:cf:b7:44:fb:8f:f5:ba:12:3d:e8:97:03:77:a4:83:aa
Signer

d8:9e:7b:85:1a:d8:28:45:14:d5:d4:38:bf:3b:a2:08:31:57:e3:69
Signer

.text
Size: 428KB - Virtual size: 427KB

.rdata
Size: 95KB - Virtual size: 94KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 116KB - Virtual size: 115KB

.reloc
Size: 49KB - Virtual size: 48KB