AirToLiquid-1[.]4[.]7[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

AirToLiquid-1.4.7.exe
Size

8.0MB
MD5

098acb40e817fadeddd9220387356930
SHA1

2f343ecf6fdc8e667934dc237c240e9373876fad
SHA256

cbb546ab14af45c25d2527eeaa0534c9273bd3d2be2308a69273eee3c3186a1e
SHA512

31286a319442160787fad8944313bbe634a9d130136691eaae072d7772251fae529d15010c653e565ec7bb671039b9df4be716fca14b622a2d448d35dbd8acf9
SSDEEP

196608:MEuDEUeN7LvBg/x3s0oAjz1Gm30y1Tzj/BlGpIa:MEUeN7LvBg/x3qY1Go0mB

Score

1^/10

Malware Config

Signatures

Files

AirToLiquid-1.4.7.exe
.exe windows:6 windows x86 arch:x86

ad1220a146336c8aa982a44122b493dd

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:3a:b2:fc:5f:a9:f1:06:01:e9:dd:ac:71:2a:e6:09
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

26/05/2021, 00:00

Not After

29/05/2024, 23:59

Subject

SERIALNUMBER=91440300MA5DGKMA1U,CN=深圳比特微电子科技有限公司,O=深圳比特微电子科技有限公司,L=深圳市,ST=广东省,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c09e6b7b1e59cb3e5b882,1.3.6.1.4.1.311.60.2.1.2=#0c09e5b9bfe4b89ce79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2b:ee:98:3e:ec:88:97:87:aa:93:32:a8:6b:e6:97:e0:22:34:af:fb:28:88:6f:73:ef:34:6a:a2:2b:3f:da:6e
Signer

Actual PE Digest

2b:ee:98:3e:ec:88:97:87:aa:93:32:a8:6b:e6:97:e0:22:34:af:fb:28:88:6f:73:ef:34:6a:a2:2b:3f:da:6e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\vmshare\wtools\WhatsMinerTool\Release\WhatsMinerTool.pdb

Imports

kernel32

WriteConsoleW
DeleteFileW
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
FindFirstFileExW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetFilePointerEx
GetTimeZoneInformation
HeapQueryInformation
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
GetFullPathNameW
SetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
GetConsoleOutputCP
GetFileAttributesExW
CreateDirectoryW
SetEnvironmentVariableW
GetFileInformationByHandle
GetDriveTypeW
CreateFileW
SetConsoleCtrlHandler
ExitProcess
RtlUnwind
ResetEvent
PeekNamedPipe
MoveFileExW
SleepEx
ReleaseMutex
ExitThread
LCMapStringEx
GetCurrentProcessorNumber
GetStringTypeW
InitOnceComplete
InitOnceBeginInitialize
QueryPerformanceFrequency
TryEnterCriticalSection
GetNativeSystemInfo
SwitchToThread
OutputDebugStringW
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetUserDefaultLCID
GetTempFileNameA
SearchPathA
GetProfileIntA
GetTempPathA
GetTickCount
FindResourceExW
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
GetStartupInfoW
ExpandEnvironmentStringsA
GetLocaleInfoEx
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetCPInfo
GetOEMCP
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
lstrcpyA
GetACP
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
lstrcmpA
GetCurrentThread
ResumeThread
SetThreadPriority
FileTimeToSystemTime
InitializeSListHead
SystemTimeToTzSpecificLocalTime
FindNextFileA
FileTimeToLocalFileTime
GetThreadLocale
lstrcmpiA
DuplicateHandle
GetVolumeInformationA
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFullPathNameA
FlushFileBuffers
FindFirstFileA
GetVersionExA
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleA
GetModuleFileNameW
GetSystemDirectoryW
EncodePointer
FormatMessageA
MulDiv
LocalFree
GlobalLock
GlobalUnlock
GlobalSize
AcquireSRWLockShared
ReleaseSRWLockShared
SystemTimeToFileTime
GetSystemTime
GetCurrentDirectoryW
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
FindNextFileW
FindFirstFileW
FindClose
LoadLibraryW
FreeLibrary
ConvertThreadToFiber
ConvertFiberToThread
QueryPerformanceCounter
FormatMessageW
CreateFiber
DeleteFiber
SwitchToFiber
MultiByteToWideChar
GetModuleHandleW
WriteFile
GetFileType
GetEnvironmentVariableW
GetStdHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
GetModuleHandleExW
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
SleepConditionVariableSRW
WakeConditionVariable
InitializeConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
LoadResource
GetSystemDefaultLangID
GetPrivateProfileIntA
OpenProcess
TerminateProcess
CreateMutexA
RemoveDirectoryA
ReadFile
GetFileSize
GetCurrentDirectoryA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleFileNameA
ReplaceFileA
SetEvent
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetLastError
RaiseException
DecodePointer
LoadLibraryA
GetProcAddress
WriteProcessMemory
GetCurrentProcessId
GetCurrentProcess
SetUnhandledExceptionFilter
CreateFileA
CreateDirectoryA
GetCurrentThreadId
GetSystemTimeAsFileTime
OutputDebugStringA
GetFileAttributesA
GetEnvironmentVariableA
WaitForMultipleObjects
GlobalFree
GlobalAlloc
CreateEventA
WaitForSingleObject
CopyFileA
Sleep
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WritePrivateProfileStringA
GetPrivateProfileStringA
CreateThread
CloseHandle
DeleteFileA
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
VerifyVersionInfoW

user32

DeleteMenu
SetRect
MessageBeep
IsClipboardFormatAvailable
GetAsyncKeyState
CopyImage
LoadImageW
DestroyIcon
InvalidateRect
TrackMouseEvent
RealChildWindowFromPoint
LoadCursorA
GetSysColorBrush
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
MapDialogRect
SetWindowContextHelpId
SetCursor
ShowOwnedPopups
PostQuitMessage
TranslateMessage
GetMessageA
WindowFromPoint
CharUpperA
WaitMessage
MapVirtualKeyA
GetKeyNameTextA
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
ScrollWindow
SetCapture
IsWindowEnabled
CheckDlgButton
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetMenuDefaultItem
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateA
SetClassLongA
SetWindowRgn
SetParent
DrawEdge
IsZoomed
LoadMenuW
ReleaseCapture
LoadCursorW
CharNextA
CopyAcceleratorTableA
InvalidateRgn
IsRectEmpty
GetNextDlgGroupItem
DrawFocusRect
SetScrollRange
LoadImageA
GetScrollRange
RedrawWindow
ValidateRect
SetForegroundWindow
GetSystemMenu
BringWindowToTop
CallWindowProcA
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExA
GetClassInfoExA
SetCursorPos
SendMessageA
EnableWindow
EnumChildWindows
MessageBoxA
UnregisterClassA
wsprintfA
DrawFrameControl
GetMessagePos
IsIconic
GetKeyState
SetTimer
KillTimer
GetSystemMetrics
CreatePopupMenu
AppendMenuA
DrawIcon
DrawTextA
GetDC
GetClientRect
GetCursorPos
ScreenToClient
FindWindowA
GetWindowThreadProcessId
LoadIconA
LoadIconW
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
RemoveMenu
DrawTextExA
GrayStringA
TabbedTextOutA
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
ClientToScreen
GetSysColor
FillRect
CopyRect
InflateRect
IntersectRect
SetFocus
SetScrollPos
GetScrollPos
GetWindowTextA
GetWindowTextLengthA
GetWindowLongA
GetWindow
SendDlgItemMessageA
SetRectEmpty
GetClassInfoA
OffsetRect
GetParent
CopyIcon
FrameRect
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatA
UnionRect
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
PostThreadMessageA
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
CharUpperBuffA
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
LoadBitmapW
RegisterWindowMessageA
DispatchMessageA
PeekMessageA
GetMessageTime
PostMessageA
DefWindowProcA
RegisterClassA

gdi32

SetTextAlign
GetObjectA
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectA
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32A
GetTextMetricsA
GetBkColor
GetTextColor
GetRgnBox
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateCompatibleBitmap
ExtSelectClipRgn
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
SetROP2
Rectangle
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceA
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
CreateFontA
GetDeviceCaps
SetTextColor
CopyMetaFileA
CreateDCA
BitBlt
CreateBitmap
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
EnumFontFamiliesExA
SelectObject
LineTo
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
CreateDIBitmap

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

CryptEncrypt
CryptHashData
CryptGetHashParam
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegGetValueA
CryptImportKey

shell32

SHGetFileInfoA
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
SHAppBarMessage
DragQueryFileA
SHGetDesktopFolder
SHBrowseForFolderA
DragFinish

shlwapi

PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindFileNameA
PathFindExtensionA
PathFileExistsA
StrFormatKBSizeA

uxtheme

IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
GetWindowTheme
GetThemeSysColor

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData

oleaut32

VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocStringByteLen
SysFreeString
SysAllocString
OleCreateFontIndirect
SysStringLen

oledlg

ord8

ws2_32

inet_ntop
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
gethostname
__WSAFDIsSet
closesocket
connect
ioctlsocket
htons
inet_addr
recv
select
send
socket
WSAStartup
WSACleanup
bind
htonl
WSAGetLastError
setsockopt
accept
listen
WSAIoctl
WSASocketA
WSAGetOverlappedResult
getpeername
WSAAsyncSelect
sendto
recvfrom
getsockopt
WSARecvFrom
WSAConnect
WSASetLastError
inet_pton
ntohs
WSASend
WSARecv
freeaddrinfo
getaddrinfo
getsockname

dbghelp

MiniDumpWriteDump
SymFromAddr

iphlpapi

GetAdaptersInfo

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

bcrypt

BCryptGenRandom

gdiplus

GdipAlloc
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdiplusShutdown
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipFree
GdiplusStartup
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipBitmapLockBits

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

crypt32

CertGetCertificateContextProperty
CertFreeCertificateContext
CertDuplicateCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore

wldap32

ord208
ord216
ord301
ord167
ord14
ord117
ord219
ord145
ord41
ord147
ord133
ord79
ord142
ord26
ord27
ord46
ord127

Sections

.text
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 122KB - Virtual size: 668KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 351KB - Virtual size: 350KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad1220a146336c8aa982a44122b493dd

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77Certificate

Key Usages

04:3a:b2:fc:5f:a9:f1:06:01:e9:dd:ac:71:2a:e6:09Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

2b:ee:98:3e:ec:88:97:87:aa:93:32:a8:6b:e6:97:e0:22:34:af:fb:28:88:6f:73:ef:34:6a:a2:2b:3f:da:6eSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

oledlg

ws2_32

dbghelp

iphlpapi

version

bcrypt

gdiplus

oleacc

imm32

winmm

crypt32

wldap32

Sections

.text Size: 6.0MB - Virtual size: 6.0MB

.rdata Size: 1.5MB - Virtual size: 1.5MB

.data Size: 122KB - Virtual size: 668KB

.rsrc Size: 36KB - Virtual size: 35KB

.reloc Size: 351KB - Virtual size: 350KB

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

04:3a:b2:fc:5f:a9:f1:06:01:e9:dd:ac:71:2a:e6:09
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

2b:ee:98:3e:ec:88:97:87:aa:93:32:a8:6b:e6:97:e0:22:34:af:fb:28:88:6f:73:ef:34:6a:a2:2b:3f:da:6e
Signer

.text
Size: 6.0MB - Virtual size: 6.0MB

.rdata
Size: 1.5MB - Virtual size: 1.5MB

.data
Size: 122KB - Virtual size: 668KB

.rsrc
Size: 36KB - Virtual size: 35KB

.reloc
Size: 351KB - Virtual size: 350KB