fabf407c929745d9cc96b0f7025a0929[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
fabf407c929745d9cc96b0f7025a0929.bin
Size 37.5MB
Sample240908-cf4ges1bpg
SHA256 fd1f22bc2ba7e424aefb96a8871bb40f1b051e4e2620ad1d9e00347e521e671f
MD5 5501e5fff5ee9ae802fa8edb416c4b65
SHA1 0f6cf5933e1fb5e52e0b21523ea11bc492637d09
SHA512 80d6867996dc6fc5daae2ef5fc1abc291317db5705b5c29b4b64f22a3f871a0b859b3f108989ddbcb91aa138eb42c0954995b832aebb781541043362442df6c2
SSDEEP 786432:VS5UO/DdxfJ4WjXjrrvrlsc17kXfM2yh/3qn+oqUqbUh:VjS/br7R1wFyh/3KQgh
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/msimg32.dll

File Explorer

fabf407c929745d9cc96b0f7025a0929.bin

.zip 37.5MB
199db74699251a30044f0a2e0eadd51cbbee650d61e10b75bd8eb0064c1fef2d.zip

.zip 37.6MB
2023 HSA.ren

.pdf 50.1MB
2023 Schedule C.exe

.exe 6.1MB
msimg32.dll

.dll 2.9MB

fabf407c929745d9cc96b0f7025a0929.bin

SHA256 fd1f22bc2ba7e424aefb96a8871bb40f1b051e4e2620ad1d9e00347e521e671f
MD5 5501e5fff5ee9ae802fa8edb416c4b65
SHA1 0f6cf5933e1fb5e52e0b21523ea11bc492637d09
SHA512 80d6867996dc6fc5daae2ef5fc1abc291317db5705b5c29b4b64f22a3f871a0b859b3f108989ddbcb91aa138eb42c0954995b832aebb781541043362442df6c2
SSDEEP 786432:VS5UO/DdxfJ4WjXjrrvrlsc17kXfM2yh/3qn+oqUqbUh:VjS/br7R1wFyh/3KQgh
MD5 SHA1 SHA512 SSDEEP

Password

infected

2023 Schedule C.exe

IMPHASH e456fbce099e309bfeaff191fcf3b1ee
SHA256 08c7fb6067acc8ac207d28ab616c9ea5bc0d394956455d6a3eecb73f8010f7a2
MD5 4864a55cff27f686023456a22371e790
SHA1 6ed30c0371fe167d38411bfa6d720fcdcacc4f4c
SHA512 4bd3a16435cca6ce7a7aa829eb967619a8b7c02598474e634442cffc55935870d54d844a04496bf9c7e8c29c40fae59ac6eb39c8550c091d06a28211491d0bfb
SSDEEP 98304:VZQIM+/nv/CDoAkYwpAa5ge1zZ/jtdZwUkQ:bJCKlA2VKUz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Password

infected

Digest

20:3e:9f:9c:65:a4:62:ce:88:5d:59:c6:1d:1c:ac:b2:d0:fa:2e:e7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Haihaisoft Limited,O=Haihaisoft Limited,L=Hong Kong,ST=Hong Kong,C=HK,1.2.840.113549.1.9.1=#0c156a6f7365706840686169686169736f66742e636f6d

Chains

Nov 22, 2017

CN=Haihaisoft Limited,O=Haihaisoft Limited,L=Hong Kong,ST=Hong Kong,C=HK,1.2.840.113549.1.9.1=#0c156a6f7365706840686169686169736f66742e636f6d

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Serial Number

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Jun 15, 2016 - Jun 15, 2024

Subject

CN=Haihaisoft Limited,O=Haihaisoft Limited,L=Hong Kong,ST=Hong Kong,C=HK,1.2.840.113549.1.9.1=#0c156a6f7365706840686169686169736f66742e636f6d

Serial Number

6a:e1:85:c2:92:81:e4:14:ea:62:0e:1d

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 13, 2017 - Feb 13, 2021

Subject

CN=GlobalSign TSA for Advanced - G3 - 001-02,O=GMO GlobalSign K.K.,C=JP

Serial Number

40:cb:42:89:5c:3e:74:94:26:97:ad:2f

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 24, 2017 - Feb 24, 2028

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:31:89:c6:50:04

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 2, 2011 - Mar 29, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

Major OS version

Entry point

588420

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

m:\sumatrapdf\hpreader-windows-standard\hpreader\Release\hpreader.pdb

wininet

HttpOpenRequestW HttpQueryInfoW InternetConnectW FtpCommandA FtpFindFirstFileA HttpEndRequestW InternetWriteFile HttpSendRequestExA InternetQueryOptionW HttpSendRequestA InternetGetCookieA InternetGetLastResponseInfoW InternetConnectA HttpQueryInfoA InternetGetLastResponseInfoA InternetCloseHandle InternetSetOptionW InternetOpenA InternetCreateUrlA InternetCrackUrlA InternetCanonicalizeUrlA InternetReadFile InternetOpenUrlW HttpOpenRequestA InternetOpenW

gdiplus

GdipGetImageWidth GdipInvertMatrix GdipCloneImage GdipDeleteMatrix GdipSaveImageToFile GdipTransformMatrixPoints GdipCreateHBITMAPFromBitmap GdipGetImageEncoders GdipRotateMatrix GdipDisposeImage GdipGetImageEncodersSize GdipTranslateMatrix GdipDrawImageI GdipGetImageVerticalResolution GdipSetWorldTransform GdipSetClipRectI GdipCreateMatrix GdipCreateBitmapFromStream GdipGetImageHeight GdipScaleMatrix GdipCloneBitmapAreaI GdipGetImageHorizontalResolution GdipCreateBitmapFromStreamICM GdipFillEllipseI GdipCreatePen1 GdipDrawLineI GdipFillRectangleI GdipSetCompositingQuality GdipCreateFromHDC GdipSetPageUnit GdipAlloc GdipCreateSolidFill GdipSetSmoothingMode GdipDeleteGraphics GdipCloneBrush GdipDeletePen GdipFree GdiplusShutdown GdipDeleteBrush GdipSetPenDashOffset GdipSetPenLineJoin GdipSetPixelOffsetMode GdipCreatePath GdipCloneFontFamily GdipRestoreGraphics GdipBitmapLockBits GdipStringFormatGetGenericTypographic GdipSetInterpolationMode GdipGetCellAscent GdipFillPath GdipCreateFontFamilyFromName GdipCreateRegion GdipDeletePrivateFontCollection GdipFillRectangle GdipTranslateWorldTransform GdipSetCompositingMode GdipGetWorldTransform GdipNewPrivateFontCollection GdipDrawString GdipCreateImageAttributes GdipGetGenericFontFamilySansSerif GdipClonePath GdipDeleteRegion GdipTransformPath GdipGetClipBoundsI GdipDeletePath GdipCreateRegionPath GdipCreateFont GdipCreateMatrix2 GdipSaveGraphics GdiplusStartup GdipDisposeImageAttributes GdipBitmapUnlockBits GdipIsStyleAvailable GdipSetClipRegion GdipGetFontCollectionFamilyList GdipCreatePath2 GdipSetImageAttributesColorMatrix GdipDrawImageRectRectI GdipGetEmHeight GdipAddPathPath GdipFillPolygon GdipPrivateAddFontFile GdipGetFamilyName GdipDrawImagePointsRect GdipSetTextRenderingHint GdipSetPageScale GdipDrawPath GdipGetClip GdipDeleteFont GdipCreateBitmapFromScan0 GdipGetDpiY GdipSetPenDashArray GdipGetImageGraphicsContext GdipDrawImageRectI GdipGetFontCollectionFamilyCount GdipGetMatrixElements GdipTransformRegion GdipCreateRegionRectI GdipGetRegionBounds GdipSetPenLineCap197819 GdipWidenPath GdipCreatePen2 GdipDeleteFontFamily GdipSetPenMiterLimit

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

WaitForMultipleObjects QueryPerformanceCounter SetThreadExecutionState QueryPerformanceFrequency GetSystemTime GetTickCount CreateFileA GetFileSize SetFilePointer ReadFile LocalFree FormatMessageW SetLastError GetVersionExA GetModuleHandleW lstrcmpW LoadLibraryA CompareStringW GlobalFindAtomW FreeResource GetModuleFileNameW MoveFileW GetThreadLocale WriteFile FlushFileBuffers LockFile UnlockFile SetEndOfFile DuplicateHandle GetVolumeInformationW GetFullPathNameW FileTimeToLocalFileTime GetFileAttributesExW LocalFileTimeToFileTime SetFileTime GetFileAttributesW GetFileSizeEx GetFileTime InterlockedExchange CompareStringA LoadLibraryExW lstrcmpA EnumResourceLanguagesW ConvertDefaultLocale WritePrivateProfileStringW ResetEvent GlobalGetAtomNameW RaiseException LocalAlloc TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree lstrlenA GlobalFlags SetErrorMode GetSystemDirectoryW GetStartupInfoW HeapAlloc HeapFree UnhandledExceptionFilter IsDebuggerPresent ExitProcess GetDriveTypeW HeapReAlloc RtlUnwind VirtualProtect VirtualAlloc HeapSize GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree GetCPInfo GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode LCMapStringW InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetFileAttributesA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetFileInformationByHandle PeekNamedPipe GetCurrentDirectoryA SetCurrentDirectoryA GetTimeZoneInformation LCMapStringA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateProcessA GetProcessHeap FreeEnvironmentStringsA GetEnvironmentStrings SetEnvironmentVariableA GetDriveTypeA GetFullPathNameA GetLongPathNameW AllocConsole CreateProcessW SetConsoleScreenBufferSize GetConsoleScreenBufferInfo GetVersion InterlockedCompareExchange CreateDirectoryA FindFirstFileA FindNextFileA DeleteFileA IsDBCSLeadByte SetFileAttributesA DeviceIoControl lstrcpynW GetWindowsDirectoryW GetOverlappedResult ReadDirectoryChangesW ResumeThread SuspendThread GetCurrentProcessId Module32NextW GetCurrentThreadId GetModuleHandleA GetModuleFileNameA GetSystemInfo Module32FirstW GlobalMemoryStatusEx OpenThread CreateFileW Thread32Next GetVersionExW Thread32First FormatMessageA GetCurrentThread SetEvent SetUnhandledExceptionFilter VirtualQuery GetLocaleInfoA GetThreadContext GetLogicalDrives GetShortPathNameW GetTempPathW GetExitCodeProcess GetTempFileNameW GetEnvironmentVariableW GetUserDefaultUILanguage GetTimeFormatW GetLocaleInfoW GetDateFormatW DeleteCriticalSection CreateEventW EnterCriticalSection GetPrivateProfileIntW LeaveCriticalSection InitializeCriticalSection GetPrivateProfileStringW GetSystemTimeAsFileTime GetCommandLineW GlobalAddAtomW GlobalDeleteAtom GlobalUnlock WaitForSingleObject GetProfileStringW GlobalLock InterlockedIncrement MulDiv InterlockedDecrement FreeLibrary GetProcAddress LoadLibraryW GetCurrentProcess lstrcatW lstrcpyW QueryDosDeviceW lstrcmpiW GetLogicalDriveStringsW GlobalFree GlobalAlloc TerminateProcess OpenProcess TerminateThread GetACP WideCharToMultiByte SetFileAttributesW CreateDirectoryW FileTimeToSystemTime lstrlenW Sleep SystemTimeToFileTime GetLocalTime FindClose DeleteFileW FindResourceW LoadResource LockResource SizeofResource FindNextFileW FindFirstFileW Process32NextW Process32FirstW GetLastError CreateToolhelp32Snapshot CreateThread MultiByteToWideChar CloseHandle MoveFileA

user32

SetWindowTextW IsWindowEnabled GetWindowThreadProcessId CharUpperW GetNextDlgTabItem CreateDialogIndirectParamW GetActiveWindow GetDesktopWindow GetMenuCheckMarkDimensions SetMenuItemBitmaps MapDialogRect SetWindowContextHelpId RegisterClipboardFormatW ValidateRect TranslateMessage GetMessageW ShowOwnedPopups LoadMenuW TranslateAcceleratorW BringWindowToTop SetRectEmpty InsertMenuItemW LoadAcceleratorsW InflateRect GetSysColorBrush GetMenuItemInfoW UnregisterClassW CharNextW CopyAcceleratorTableW IsRectEmpty SetRect InvalidateRgn PostThreadMessageW MonitorFromWindow OemToCharA CharToOemA CharLowerA CharUpperA CharToOemBuffW OemToCharBuffA GetClassInfoW RegisterClassW AdjustWindowRectEx EqualRect DeferWindowPos GetDlgCtrlID CopyRect PtInRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindow GetMenuState GetMenuItemCount GetSubMenu IsCharAlphaNumericW wsprintfA GetMonitorInfoW MonitorFromRect FindWindowExW LoadImageW GetNextDlgGroupItem ClientToScreen SetWindowRgn DrawFocusRect OffsetRect DrawEdge WindowFromPoint HideCaret ShowCaret SetClassLongW PostQuitMessage IsZoomed IsDialogMessageW TrackMouseEvent IsCharUpperW CharLowerW GetForegroundWindow GetScrollInfo LoadBitmapW ShowScrollBar GetCursor IsWindowVisible UnregisterHotKey SetScrollInfo GetScrollPos DialogBoxIndirectParamW DialogBoxParamW EndDialog SendDlgItemMessageW CheckDlgButton IsDlgButtonChecked CheckRadioButton SetDlgItemTextW SetActiveWindow CloseClipboard SetCapture GetCapture EmptyClipboard OpenClipboard ReleaseCapture SetClipboardData PostMessageW ReuseDDElParam MessageBeep UnpackDDElParam GetDlgItem EndPaint SetCursor ScreenToClient DrawTextW BeginPaint GetDC ReleaseDC GetSysColor SetWindowPos GetCursorPos DrawFrameControl GetMenuItemID GetParent ModifyMenuW CheckMenuRadioItem SetMenu InsertMenuW CheckMenuItem GetMenu DrawIcon GetSystemMetrics IsIconic FillRect wsprintfW MoveWindow SetParent IsWindow FindWindowW DestroyWindow GetWindowRect TrackPopupMenu SetForegroundWindow CreateMenu SetFocus GetWindowLongW AppendMenuW EnableMenuItem SetWindowLongW RedrawWindow CreatePopupMenu RemoveMenu MapWindowPoints DestroyMenu SetMenuItemInfoW CallWindowProcW GetMessagePos RegisterClassExW LoadIconW CreateWindowExW UpdateWindow DefWindowProcW EnableWindow InvalidateRect KillTimer GetFocus SetTimer RegisterHotKey ShowWindow SystemParametersInfoW GetWindowDC GrayStringW DrawTextExW TabbedTextOutW RegisterWindowMessageW SendDlgItemMessageA WinHelpW IsChild SetWindowsHookExW CallNextHookEx GetClassLongW GetClassNameW SetPropW GetPropW RemovePropW SendMessageW LoadCursorW GetClientRect GetWindowTextLengthW GetWindowTextW GetLastActivePopup DispatchMessageW BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime PeekMessageW GetKeyState GetClassInfoExW MessageBoxW

gdi32

GetObjectW BitBlt GetPixel CreateRectRgn CombineRgn CreateDIBitmap GetClipBox SaveDC RestoreDC GetViewportExtEx GetWindowExtEx PtVisible RectVisible TextOutW ExtTextOutW Escape SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx CreateCompatibleBitmap ScaleWindowExtEx LineTo ExtSelectClipRgn CreatePatternBrush CreateBitmap CreateRectRgnIndirect GetMapMode GetBkColor GetTextColor GetRgnBox Rectangle StretchBlt GetDIBits SelectClipRgn SetDIBits CreateCompatibleDC ExcludeClipRect SetWorldTransform SetGraphicsMode SetStretchBltMode CreateRoundRectRgn CreatePen RoundRect GetStockObject EndPage StartPage DeleteDC CreateDCW SetMapMode StartDocW EndDoc AbortDoc SetTextColor CreateFontIndirectW GetDeviceCaps SetBkColor SetBkMode SelectObject CreateSolidBrush DeleteObject GetTextExtentPoint32W CreateFontW SetWindowExtEx FloodFill MoveToEx

msimg32

AlphaBlend

comdlg32

GetSaveFileNameW GetOpenFileNameW CommDlgExtendedError PrintDlgExW GetFileTitleW

winspool.drv

DocumentPropertiesW OpenPrinterW ord203 ClosePrinter

advapi32

RegOpenKeyExW SetFileSecurityA SetFileSecurityW RegQueryValueExW RegDeleteValueW RegQueryValueExA RegSetKeySecurity SetSecurityDescriptorDacl InitializeSecurityDescriptor RegCloseKey RegQueryValueW RegDeleteKeyW RegOpenKeyW RegEnumKeyW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegSetValueExW RegCreateKeyExW

shell32

SHGetFileInfoW SHChangeNotify SHAddToRecentDocs DragQueryFileW DragFinish SHGetFolderPathW SHGetDesktopFolder ShellExecuteExW SHBindToParent DragAcceptFiles SHGetSpecialFolderPathW ShellExecuteW

comctl32

InitCommonControlsEx CreatePropertySheetPageW _TrackMouseEvent ImageList_Draw

shlwapi

StrStrW StrRStrIW StrStrIW PathStripToRootW PathIsUNCW PathFindFileNameW PathFindExtensionW SHDeleteKeyW PathAppendW SHSetValueW PathIsRelativeW

oledlg

OleUIBusyW

ole32

CoSetProxyBlanket CoTaskMemFree CoTaskMemAlloc CLSIDFromProgID CLSIDFromString OleUninitialize CoFreeUnusedLibraries OleInitialize CoGetClassObject StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal CoRevokeClassObject OleIsCurrentClipboard OleFlushClipboard CoRegisterMessageFilter CreateStreamOnHGlobal CoCreateGuid CoUninitialize CoCreateInstance CoInitialize

oleaut32

SysStringLen VariantClear VariantInit SysAllocString SysAllocStringLen VariantChangeType VariantCopy DispCallFunc LoadRegTypeLi SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetElemsize SafeArrayCreate SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect SysFreeString

psapi

EnumProcesses GetProcessImageFileNameW

ws2_32

closesocket recv gethostname gethostbyname WSAStartup socket htons bind listen WSAGetLastError accept send connect

msimg32.dll

IMPHASH 21290d9d3a8c60157412c08f4b84b335
SHA256 5b1aa2286d1b856ce45fc1bf075f36454aaac664460afb91185c4cc451291b62
MD5 abd99b6d60ee5d44f0e5448d3947b281
SHA1 ef799bbe58d3d576e9e27e60e17e071725c975d8
SHA512 faf79a91f57c1e1c863e75614c0f4c9fb0acabdf7d4097c1554f09e1aef14f8efc0de3bc4261f3728da77fc548878532ceb1f76a1db1df485fcc10772419379c
SSDEEP 49152:hk8XGHSOdOoyWzL/bI7UAnuqSrtdBDmfKtTaeBiDw0uv+Kx55+v0UbpeQM/TNSWs:XGy0FfDEUYuqSvBDmS3YDw0+eha78
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

171542

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

NBUidai.pdb

psapi

GetModuleInformation

dbghelp

SymFunctionTableAccess64 SymSetOptions SymGetOptions SymCleanup SymFromAddr SymUnloadModule64 SymLoadModuleEx SymSetSearchPath SymInitialize SymGetLineFromAddr64 SymGetModuleBase64 StackWalk64

bcrypt

BCryptDestroyKey BCryptEncrypt BCryptVerifySignature BCryptCloseAlgorithmProvider BCryptGenRandom BCryptDestroyHash BCryptFinishHash BCryptHashData BCryptCreateHash BCryptDecrypt BCryptGenerateSymmetricKey BCryptGetProperty BCryptSetProperty BCryptOpenAlgorithmProvider

crypt32

PFXExportCertStoreEx PFXVerifyPassword PFXIsPFXBlob PFXImportCertStore CertCreateSelfSignCertificate CertStrToNameA CertNameToStrA CryptAcquireCertificatePrivateKey CryptImportPublicKeyInfoEx2 CertAddCertificateLinkToStore CertAddCertificateContextToStore CertGetCertificateContextProperty CertSetCertificateContextProperty CertFreeCertificateContext CertCreateCertificateContext CertFindCertificateInStore CertCloseStore CertOpenStore CryptDecodeObjectEx

ncrypt

NCryptOpenKey NCryptOpenStorageProvider NCryptFreeObject NCryptCreatePersistedKey NCryptSetProperty NCryptFinalizeKey NCryptDecrypt NCryptSignHash NCryptDeleteKey

netapi32

NetWkstaGetInfo NetApiBufferFree

kernel32

ResetEvent SetEvent QueryPerformanceFrequency GetModuleHandleA ClearCommError SetupComm GetCommProperties GetCommState GetCommTimeouts PurgeComm SetCommState SetCommTimeouts WaitForSingleObjectEx CreateEventW GetTempPathW GetTimeZoneInformation GetFileAttributesExW DeleteFileW SetEndOfFile CreateEventA CreateWaitableTimerA SetWaitableTimer DeviceIoControl GetFileAttributesExA DeleteFileA CreateFileA CreateFileW OutputDebugStringW WriteConsoleW DecodePointer ReadConsoleW ReadFile FlushFileBuffers LocalFree FormatMessageA CloseHandle GetLastError WaitForSingleObject Sleep GetCurrentProcess CreateThread GetCurrentThread GetCurrentThreadId FreeLibrary GetProcAddress LoadLibraryExA GetSystemTimeAsFileTime SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SystemTimeToFileTime InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree GetEnvironmentVariableA GetCurrentDirectoryA GetSystemDirectoryA GetWindowsDirectoryA GetStdHandle IsDebuggerPresent OutputDebugStringA WriteConsoleA RtlCaptureContext VirtualQuery GetModuleFileNameA CreateDirectoryA GetFileAttributesA MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId InitializeSListHead GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount LoadLibraryExW EncodePointer RaiseException WideCharToMultiByte ExitProcess GetModuleHandleExW GetModuleFileNameW HeapFree GetACP HeapAlloc HeapReAlloc GetFileType GetStringTypeW FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap SetStdHandle HeapSize WriteFile GetConsoleCP GetConsoleMode SetFilePointerEx

setupapi

SetupDiGetClassDevsA SetupDiGetDevicePropertyW SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailA SetupDiBuildDriverInfoList SetupDiEnumDriverInfoA SetupDiDestroyDriverInfoList SetupDiGetDeviceInstanceIdA SetupDiGetDeviceRegistryPropertyA SetupDiOpenDevRegKey

winusb

WinUsb_AbortPipe WinUsb_Initialize WinUsb_Free WinUsb_GetDescriptor WinUsb_QueryInterfaceSettings WinUsb_GetPowerPolicy WinUsb_SetPowerPolicy WinUsb_FlushPipe WinUsb_QueryDeviceInformation WinUsb_ControlTransfer WinUsb_WritePipe WinUsb_ReadPipe WinUsb_SetPipePolicy WinUsb_QueryPipe WinUsb_GetOverlappedResult

user32

RegisterDeviceNotificationA SendMessageA UnregisterDeviceNotification ShowWindow RegisterClassExA RegisterClassA TranslateMessage DestroyWindow IsWindow CreateWindowExA UnregisterClassA PostQuitMessage DefWindowProcA PostMessageA DispatchMessageA GetMessageA

advapi32

CryptGenRandom CryptReleaseContext CryptAcquireContextA RegQueryValueExA RegCloseKey

AlphaBlend NBDeviceDestroy NBDeviceGetIdA NBDeviceGetState NBDeviceSupportsNBUApi NBErrorsClear NBErrorsGetMessageA NBErrorsSetLastA NBUAbort NBUCapture NBUCaptureAndExtract NBUCaptureStreaming NBUCloseConnection NBUCloseSession NBUDfuGetHWVersion NBUDfuIsBootloader NBUDfuUpdateFirmware NBUDiagnostics NBUEcho NBUEnumCloseHandle NBUEnumGetDevInfo NBUEnumerateDevices NBUFactoryReset NBUFinalize NBUFingerPresent NBUFingerPresent2SL NBUFirmwareUpdate NBUFree NBUGetBasicInfo NBUGetBasicInfoEx NBUGetBootloaderInfo NBUGetCaptureAndExtractStatus NBUGetCapturedImage NBUGetCommParameters NBUGetDiagnosticsResult NBUGetExtractedTemplate NBUGetRDCommandResult NBUGetRDCommandStatus NBUGetSensorParameter NBUGetStatus NBUGetSupportedScanSizes NBUGetSupportedScanTypes NBUGetValue NBUInit NBUInitEx NBUInitialize NBUInitializeCustom NBUIsReopenRecommended NBUNextRxFwUpdateFinish NBUNextRxFwUpdateStart NBUNextRxFwUpdateUpload NBUNextRxUploadFirmwareImage NBUOpenConnection NBUOpenSession NBUOpenSessionSM2 NBUParseScanFormat NBURDCommand NBURDDumpAllEncryptedData NBURDLoadEncryptedData NBUReboot NBUReopenConnection NBUSearchExtraData NBUSensorCommand NBUSetApplicationKey NBUSetCommParameters NBUSetLED NBUSetValue NBUTerminate NBUUploadFirmwareImage NBUidaiCaptureA NBUidaiCaptureFaceResponseCreateA NBUidaiCaptureFaceResponseDestroyA NBUidaiFree NBUidaiGetDeviceInfoA NBUidaiGetStatus NBUidaiInitializeA NBUidaiInitializeExA NBUidaiKeepAlive NBUidaiLibraryGetVersion NBUidaiPlayIntegrityCheck NBUidaiPlayIntegrityCheckWithToken NBUidaiPlayIntegrityResponseCreateA NBUidaiPlayIntegrityResponseDestroyA NBUidaiPlayIntegritySetCallbackA NBUidaiReceivePacketCreateA NBUidaiReceivePacketDestroyA NBUidaiReset NBUidaiRotateKeys NBUidaiSafetyNetResponseCreateA NBUidaiSafetyNetResponseDestroyA NBUidaiTerminate

fabf407c929745d9cc96b0f7025a0929.bin

199db74699251a30044f0a2e0eadd51cbbee650d61e10b75bd8eb0064c1fef2d.zip

2023 HSA.ren

2023 Schedule C.exe

wininet

gdiplus

version

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

psapi

ws2_32

generic

msimg32.dll

psapi

dbghelp

bcrypt

crypt32

ncrypt

netapi32

kernel32

setupapi

winusb

user32

advapi32

generic