67079aecc452b_xin[.]exe

resource	yara_rule
sample	autoit_exe

45:b5:e2:0f:6e:33:d3:a6:4a:fe:15:76:c0:88:59:10
Certificate

Issuer

CN=☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ

Not Before

08/10/2024, 13:04

Not After

09/10/2034, 13:04

Subject

CN=☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎☕︎եեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեեփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփփ

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Certificate

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Not Before

15/01/2024, 00:00

Not After

14/04/2035, 23:59

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Certificate

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

22/03/2021, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

47:28:57:6f:a7:e3:0c:02:11:21:35:b7:f7:17:9c:a0:d7:61:5c:5d:03:8a:33:41:63:3e:41:4c:7f:99:1e:6d
Signer

Actual PE Digest

47:28:57:6f:a7:e3:0c:02:11:21:35:b7:f7:17:9c:a0:d7:61:5c:5d:03:8a:33:41:63:3e:41:4c:7f:99:1e:6d

Digest Algorithm

sha256

PE Digest Matches

true

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

wsock32

gethostbyname

recv

send

socket

inet_ntoa

setsockopt

ntohs

WSACleanup

WSAStartup

sendto

htons

__WSAFDIsSet

select

accept

listen

bind

inet_addr

ioctlsocket

recvfrom

WSAGetLastError

closesocket

gethostname

connect

version

GetFileVersionInfoW

VerQueryValueW

GetFileVersionInfoSizeW

winmm

timeGetTime

waveOutSetVolume

mciSendStringW

comctl32

ImageList_ReplaceIcon

ImageList_Destroy

ImageList_Remove

ImageList_SetDragCursorImage

ImageList_BeginDrag

ImageList_DragEnter

ImageList_DragLeave

ImageList_EndDrag

ImageList_DragMove

InitCommonControlsEx

ImageList_Create

mpr

WNetGetConnectionW

WNetCancelConnection2W

WNetUseConnectionW

WNetAddConnection2W

wininet

HttpOpenRequestW

InternetCloseHandle

InternetOpenW

InternetSetOptionW

InternetCrackUrlW

HttpQueryInfoW

InternetQueryOptionW

InternetConnectW

HttpSendRequestW

FtpOpenFileW

FtpGetFileSize

InternetOpenUrlW

InternetReadFile

InternetQueryDataAvailable

psapi

GetProcessMemoryInfo

iphlpapi

IcmpSendEcho

IcmpCloseHandle

IcmpCreateFile

userenv

DestroyEnvironmentBlock

LoadUserProfileW

CreateEnvironmentBlock

UnloadUserProfile

uxtheme

IsThemeActive

kernel32

WaitForSingleObject

HeapAlloc

GetProcessHeap

HeapFree

Sleep

GetCurrentThreadId

MultiByteToWideChar

MulDiv

GetVersionExW

IsWow64Process

GetSystemInfo

FreeLibrary

LoadLibraryA

GetProcAddress

SetErrorMode

GetModuleFileNameW

WideCharToMultiByte

lstrcpyW

lstrlenW

GetModuleHandleW

QueryPerformanceCounter

VirtualFreeEx

OpenProcess

VirtualAllocEx

WriteProcessMemory

ReadProcessMemory

CreateFileW

SetFilePointerEx

SetEndOfFile

ReadFile

WriteFile

FlushFileBuffers

TerminateProcess

CreateToolhelp32Snapshot

Process32FirstW

Process32NextW

SetFileTime

GetFileAttributesW

FindFirstFileW

FindClose

GetLongPathNameW

GetShortPathNameW

DeleteFileW

FindNextFileW

CopyFileExW

GetFullPathNameW

CreateDirectoryW

RemoveDirectoryW

SetSystemPowerState

QueryPerformanceFrequency

LoadResource

LockResource

SizeofResource

OutputDebugStringW

GetTempPathW

GetTempFileNameW

DeviceIoControl

LoadLibraryW

GetLocalTime

CompareStringW

EnterCriticalSection

DuplicateHandle

GetStdHandle

CreatePipe

TerminateThread

LoadLibraryExW

FindResourceExW

CopyFileW

VirtualFree

FormatMessageW

GetExitCodeProcess

GetPrivateProfileStringW

WritePrivateProfileStringW

GetPrivateProfileSectionW

WritePrivateProfileSectionW

GetPrivateProfileSectionNamesW

FileTimeToLocalFileTime

FileTimeToSystemTime

SystemTimeToFileTime

LocalFileTimeToFileTime

GetDriveTypeW

GetDiskFreeSpaceExW

GetDiskFreeSpaceW

GetVolumeInformationW

SetVolumeLabelW

CreateHardLinkW

SetFileAttributesW

CreateEventW

SetEvent

GetEnvironmentVariableW

SetEnvironmentVariableW

GlobalLock

GlobalUnlock

GlobalAlloc

GetFileSize

GlobalFree

GlobalMemoryStatusEx

Beep

GetSystemDirectoryW

HeapReAlloc

HeapSize

GetComputerNameW

GetWindowsDirectoryW

GetCurrentProcessId

GetProcessIoCounters

CreateProcessW

GetProcessId

SetPriorityClass

VirtualAlloc

SetCurrentDirectoryW

IsDebuggerPresent

GetCurrentDirectoryW

lstrcmpiW

GetLastError

RaiseException

InitializeCriticalSectionAndSpinCount

DeleteCriticalSection

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetStartupInfoW

IsProcessorFeaturePresent

GetSystemTimeAsFileTime

CreateThread

GetCurrentProcess

GetCurrentThread

LeaveCriticalSection

InitializeSListHead

RtlUnwindEx

RtlPcToFileHeader

SetLastError

TlsAlloc

ResetEvent

WaitForSingleObjectEx

TlsGetValue

TlsSetValue

TlsFree

EncodePointer

ExitProcess

GetModuleHandleExW

ExitThread

ResumeThread

FreeLibraryAndExitThread

GetACP

GetDateFormatW

GetTimeFormatW

LCMapStringW

GetStringTypeW

GetFileType

SetStdHandle

GetConsoleCP

GetConsoleMode

ReadConsoleW

GetTimeZoneInformation

FindFirstFileExW

IsValidCodePage

GetOEMCP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetEnvironmentStringsW

FreeEnvironmentStringsW

SetEnvironmentVariableA

CloseHandle

WriteConsoleW

MoveFileW

RtlCaptureContext

user32

GetMenuStringW

GetSubMenu

GetCaretPos

IsZoomed

GetWindowLongW

GetMonitorInfoW

SetWindowLongW

SetLayeredWindowAttributes

FlashWindow

GetClassLongPtrW

TranslateAcceleratorW

IsDialogMessageW

GetSysColor

InflateRect

DrawFocusRect

DrawTextW

FrameRect

DrawFrameControl

FillRect

PtInRect

DestroyAcceleratorTable

CreateAcceleratorTableW

SetCursor

GetWindowDC

GetSystemMetrics

SetWindowLongPtrW

GetActiveWindow

CharNextW

wsprintfW

RedrawWindow

DrawMenuBar

DestroyMenu

SetMenu

GetWindowTextLengthW

CreateMenu

IsDlgButtonChecked

DefDlgProcW

CallWindowProcW

ReleaseCapture

SetCapture

BlockInput

GetMessageW

LockWindowUpdate

DispatchMessageW

TranslateMessage

PeekMessageW

GetInputState

UnregisterHotKey

CharLowerBuffW

MonitorFromPoint

MonitorFromRect

LoadImageW

mouse_event

ExitWindowsEx

SetActiveWindow

FindWindowExW

EnumThreadWindows

IsCharUpperW

InsertMenuItemW

IsMenu

TrackPopupMenuEx

GetCursorPos

DeleteMenu

CheckMenuRadioItem

GetMenuItemID

GetMenuItemCount

SetMenuItemInfoW

GetMenuItemInfoW

SetForegroundWindow

IsIconic

FindWindowW

GetClipboardData

keybd_event

SendInput

GetAsyncKeyState

SetKeyboardState

GetKeyboardState

GetKeyState

VkKeyScanW

LoadStringW

DialogBoxParamW

MessageBeep

EndDialog

SendDlgItemMessageW

GetDlgItem

SetWindowTextW

CopyRect

ReleaseDC

GetDC

EndPaint

BeginPaint

GetClientRect

GetMenu

DestroyWindow

EnumWindows

GetDesktopWindow

IsWindow

IsWindowEnabled

IsWindowVisible

EnableWindow

InvalidateRect

GetWindowThreadProcessId

AttachThreadInput

GetFocus

GetWindowTextW

ScreenToClient

SendMessageTimeoutW

EnumChildWindows

CharUpperBuffW

GetClassNameW

GetParent

GetDlgCtrlID

SendMessageW

MapVirtualKeyW

PostMessageW

IsCharLowerW

IsCharAlphaNumericW

IsCharAlphaW

GetKeyboardLayoutNameW

ClientToScreen

RegisterHotKey

GetCursorInfo

SetWindowPos

CopyImage

AdjustWindowRectEx

SetRect

SetClipboardData

EmptyClipboard

CountClipboardFormats

SetMenuDefaultItem

CloseClipboard

GetWindowRect

SetUserObjectSecurity

IsClipboardFormatAvailable

CloseDesktop

CloseWindowStation

OpenDesktopW

SetProcessWindowStation

GetProcessWindowStation

OpenWindowStationW

GetUserObjectSecurity

MessageBoxW

DefWindowProcW

MoveWindow

SetFocus

PostQuitMessage

KillTimer

CreatePopupMenu

RegisterWindowMessageW

SetTimer

ShowWindow

CreateWindowExW

RegisterClassExW

LoadIconW

LoadCursorW

GetSysColorBrush

GetForegroundWindow

MessageBoxA

DestroyIcon

SystemParametersInfoW

OpenClipboard

GetWindowLongPtrW

gdi32

EndPath

DeleteObject

GetDeviceCaps

ExtCreatePen

StrokePath

SetPixel

CloseFigure

LineTo

AngleArc

MoveToEx

Ellipse

PolyDraw

GetTextExtentPoint32W

CreateCompatibleBitmap

BeginPath

Rectangle

SetViewportOrgEx

GetObjectW

SetBkMode

RoundRect

SetBkColor

CreatePen

CreateSolidBrush

SetTextColor

CreateFontW

GetTextFaceW

GetStockObject

CreateDCW

GetPixel

DeleteDC

GetDIBits

StretchBlt

SelectObject

CreateCompatibleDC

StrokeAndFillPath

comdlg32

GetSaveFileNameW

GetOpenFileNameW

advapi32

GetAce

RegEnumValueW

RegDeleteValueW

RegDeleteKeyW

RegEnumKeyExW

RegOpenKeyExW

RegCloseKey

RegQueryValueExW

RegConnectRegistryW

InitializeSecurityDescriptor

InitializeAcl

AdjustTokenPrivileges

OpenThreadToken

OpenProcessToken

LookupPrivilegeValueW

DuplicateTokenEx

CreateProcessAsUserW

CreateProcessWithLogonW

GetLengthSid

CopySid

LogonUserW

AllocateAndInitializeSid

CheckTokenMembership

FreeSid

GetTokenInformation

RegSetValueExW

GetSecurityDescriptorDacl

GetAclInformation

RegCreateKeyExW

AddAce

SetSecurityDescriptorDacl

InitiateSystemShutdownExW

GetUserNameW

shell32

DragFinish

DragQueryPoint

ShellExecuteExW

DragQueryFileW

SHEmptyRecycleBinW

SHGetPathFromIDListW

SHBrowseForFolderW

SHCreateShellItem

SHGetDesktopFolder

SHGetSpecialFolderLocation

SHGetFolderPathW

SHFileOperationW

ExtractIconExW

Shell_NotifyIconW

ShellExecuteW

ole32

CoTaskMemAlloc

CoTaskMemFree

CLSIDFromString

ProgIDFromCLSID

CLSIDFromProgID

OleSetMenuDescriptor

MkParseDisplayName

OleSetContainedObject

CoCreateInstance

IIDFromString

StringFromGUID2

CreateStreamOnHGlobal

OleInitialize

OleUninitialize

CoInitialize

CoUninitialize

GetRunningObjectTable

CoGetInstanceFromFile

CoGetObject

CoInitializeSecurity

CoCreateInstanceEx

CoSetProxyBlanket

oleaut32

VariantChangeType

DispCallFunc

CreateStdDispatch

CreateDispTypeInfo

UnRegisterTypeLi

UnRegisterTypeLibForUser

RegisterTypeLibForUser

RegisterTypeLi

LoadTypeLibEx

VariantCopyInd

VariantTimeToSystemTime

SysFreeString

SafeArrayDestroyDescriptor

SafeArrayDestroyData

SafeArrayUnaccessData

VariantInit

VariantClear

VariantCopy

SysAllocString

SafeArrayCreateVector

VarR8FromDec

SafeArrayAllocDescriptorEx

SafeArrayAllocData

SysStringLen

SafeArrayGetVartype

OleLoadPicture

QueryPathOfRegTypeLi

SysReAllocString

SafeArrayAccessData

.text
Size: 717KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ