Static task
static1
Behavioral task
behavioral1
Sample
81031d876f36d8ca2f1b73aa8bde63134c66f60991070b183e2c1f40463d695c.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
81031d876f36d8ca2f1b73aa8bde63134c66f60991070b183e2c1f40463d695c.exe
Resource
win10-20240221-en
General
-
Target
81031d876f36d8ca2f1b73aa8bde63134c66f60991070b183e2c1f40463d695c
-
Size
5.4MB
-
MD5
b474dc1155af2463f2f9f603e39264fb
-
SHA1
b30e2bcb582a0c300c057428bd3f2b8169f5c7b6
-
SHA256
81031d876f36d8ca2f1b73aa8bde63134c66f60991070b183e2c1f40463d695c
-
SHA512
0687187c8cea7098947e57c84da1a81cbf2f9380f19242ff3f94104bd70b7a21a41c1aa6de508e4a8d65acd31fe85ff1aec4e89c69a0836046cc6fe99b12c7e4
-
SSDEEP
98304:sn8n3+dVJpuOH9FjvWlc/N/zF3+GHGsCMuQkL3rLliu/OP3anh7AaFOMlrZf:sn8n3+7hPvWlc/v0LQkL3/gOnh7ALMlN
Malware Config
Signatures
Files
-
81031d876f36d8ca2f1b73aa8bde63134c66f60991070b183e2c1f40463d695c.exe windows:6 windows x86 arch:x86
b279e2f2b98cf3638cb7de1d8ce825da
Code Sign
4a:b6:f2:ca:d3:e6:41:4a:ac:7d:42:1a:95:6d:71:1fCertificate
IssuerCN=SAMSUNG PRO B960-P WIFI DDR6,OU=Universal Gen Core Pentium,O=\ Intel,L=¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§,C=6G BluetoothNot Before31-01-2024 10:51Not After06-06-2025 00:00SubjectCN=SAMSUNG PRO B960-P WIFI DDR6,OU=Universal Gen Core Pentium,O=\ Intel,L=¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§¢ÖÙ™£ç¿™\<k_§,C=6G Bluetooth39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before03-05-2023 00:00Not After02-08-2034 23:59SubjectCN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ab:8c:a2:e1:82:d7:15:ab:a1:2f:86:e4:9f:8c:fa:9c:7c:59:fb:f0:ef:60:91:66:3b:4c:df:a4:97:23:d5:61Signer
Actual PE Digestab:8c:a2:e1:82:d7:15:ab:a1:2f:86:e4:9f:8c:fa:9c:7c:59:fb:f0:ef:60:91:66:3b:4c:df:a4:97:23:d5:61Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
wsprintfA
gdi32
CreateCompatibleBitmap
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
CoInitialize
ws2_32
WSAStartup
crypt32
CryptUnprotectData
shlwapi
PathFindExtensionA
gdiplus
GdipGetImageEncoders
setupapi
SetupDiEnumDeviceInfo
ntdll
RtlUnicodeStringToAnsiString
rstrtmgr
RmStartSession
Exports
Exports
Start
Sections
.text Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp³» Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp³» Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp³» Size: 5.4MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ