BOOTH Library Manager_0[.]3[.]0_x64-setup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
BOOTH Library Manager_0.3.0_x64-setup.exe
Size 18.9MB
Sample260727-xbggback21
SHA256 a06b182a293d544ec1b152319447d06b640f23c69ae1b397c72cbb051507513b
MD5 f4aa73a394373f59c2d521e00a8df411
SHA1 7a6c05003f7b91177655015a7fb25d341db34921
SHA512 8dc5ef2494c56b09b757929d0c9e2c84ed7a5e0593342c40f41be3a18490d5b2975d15c31957ab0dac5451b3e694ff40f89f5bc50dc58ce5ceba0d394bad1e09
SSDEEP 393216:66gg8JgLVBLPiFSGqVyIp4owQolcpuOjCYPaTHNtq9SR8McofXy0dyGsR1:6/g8J2VFiFSXMIpFAofyXt7vi04lR1
TLSH
T1131733946499A8D1D3AB52F47F2F0712912B102219068B67D7FFB7BEF8C2780FDA4644
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

BOOTH Library Manager_0.3.0_x64-setup.exe

.exe 18.9MB
$PLUGINSDIR/NSISdl.dll

.dll 25KB
$PLUGINSDIR/StartMenu.dll

.dll 17KB
$PLUGINSDIR/System.dll

.dll 22KB
$PLUGINSDIR/modern-wizard.bmp

25KB
$PLUGINSDIR/nsDialogs.dll

.dll 19KB
$PLUGINSDIR/nsis_tauri_utils.dll

.dll 43KB
booth_library_manager_client.exe

.exe 49.7MB

BOOTH Library Manager_0.3.0_x64-setup.exe

IMPHASH 46ce5c12b293febbeb513b196aa7f843
SHA256 a06b182a293d544ec1b152319447d06b640f23c69ae1b397c72cbb051507513b
MD5 f4aa73a394373f59c2d521e00a8df411
SHA1 7a6c05003f7b91177655015a7fb25d341db34921
SHA512 8dc5ef2494c56b09b757929d0c9e2c84ed7a5e0593342c40f41be3a18490d5b2975d15c31957ab0dac5451b3e694ff40f89f5bc50dc58ce5ceba0d394bad1e09
SSDEEP 393216:66gg8JgLVBLPiFSGqVyIp4owQolcpuOjCYPaTHNtq9SR8McofXy0dyGsR1:6/g8J2VFiFSXMIpFAofyXt7vi04lR1
TLSH
T1131733946499A8D1D3AB52F47F2F0712912B102219068B67D7FFB7BEF8C2780FDA4644
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

a2:15:ac:e0:96:fd:59:a5:98:91:fb:67:53:84:06:c8:85:8c:d7:89:30:a0:a8:1a:cd:3c:ef:90:4c:f5:11:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Chains

Jul 27, 2026

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Serial Number

0a:ef:51:6c:f9:64:f1:3b:dc:08:bc:33:82:5c:f4:df

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 14, 2025 - May 20, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

13983

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

RemoveDirectoryW lstrcmpiA GetTempFileNameW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW WriteFile GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize CreateFileW GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject ExitProcess

$PLUGINSDIR/NSISdl.dll

IMPHASH db80d5e142e716e818b7f4614dcade3c
SHA256 7587ca943e8bf34ab081de464ff5007b6407db196ed535ff72582df9fd653f6f
MD5 351037f0b524b93fafae23d5b1447380
SHA1 ca62aa22fa5a85f21b8ce8204b6d650ecc1c8323
SHA512 f14ce56fce3bddc009c9c4e10f30a6b5c36b9114b492b7f42ed10b3b701fa755b445cce66f5e5210ee9ed968a620aec5f02882c1d8830fef944da238278113fd
SSDEEP 768:trSQMCOp0yamMRWysieAYi2CxU5G5ALL2P:tzS2yaVnp72C6OP
TLSH
T1D9C28E539A504CF0CF62597070D6363AAEB29FAA199084C313F78C5ACF51303BBBD999
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

d4:af:1e:26:87:53:62:57:41:89:7d:aa:5a:4a:0e:8e:44:21:57:4c:c9:c9:e0:dc:db:5f:91:1d:d1:ed:59:8d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Chains

Jul 27, 2026

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Serial Number

0a:ef:51:6c:f9:64:f1:3b:dc:08:bc:33:82:5c:f4:df

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 14, 2025 - May 20, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

9321

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/StartMenu.dll

IMPHASH 646971a3aef724d6f553f40ae84fe26b
SHA256 75703ac8e46ce1447c1f00e22416c3f7c06a7970293d0286bfc05bf12d44c6be
MD5 e8161d52db2a698083e07cb87d7dd027
SHA1 b3efe7247527455ff39bc4a280a8dac2f326cbfc
SHA512 e935afb68ea0fb519393a09111e3d631fcafa90c0841aff8c41f6cfac425e8024bf4d813aa1874ae9767ef4903b294c5dcd7eef9eceaf49148366a266330b09e
SSDEEP 384:CuTF64UqAfncvrwIYi/uCxw6KSxy8RbmL4nNy8sz:rTF64XZYi2Cx9N5ALvz
TLSH
T127826BB3D2D00822ED579A7074D2AA33AF71F2655B90C1D3211682CA9B51783FFBC725
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

ce:4b:5f:ca:79:2c:97:ec:4f:db:81:5a:27:58:ae:61:bf:92:0f:a0:c2:65:57:3c:31:61:63:88:97:6b:5c:fa

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Chains

Jul 27, 2026

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Serial Number

0a:ef:51:6c:f9:64:f1:3b:dc:08:bc:33:82:5c:f4:df

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 14, 2025 - May 20, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

6430

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 86424aeb9a385761d7e5943f10a954158f8e65acf3ab4ac7267556e8e08fc757
MD5 48a963cf10c86bf6453aff0eb2e1b9f1
SHA1 0021be43d782e48d61941e2e3fd164135034d120
SHA512 821a6a531c0a24be8d75e8755aa8c71cfbecc6ce7798ad1579ef82f187d30a3bc9b7b0a1107e6a5505401068dcbb210f964c79bfcdca00ea50b3208198d322d1
SSDEEP 384:9q/Qlt7wiij/lMRv/9V4b4rJIYi/uCxvSSy8RbmL4nNyTRIX6:4aeiijipNeYi2Cx6S5ALMX6
TLSH
T1B9A29D138B904CF1E9139D3034D4AA36AFB6B89D1AD081D367E7C0916B513C76AFD297
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

32:e2:dd:5c:bb:84:b8:2a:05:d0:1b:81:81:41:e4:c0:f5:01:8c:f3:f4:3b:ca:45:1d:82:40:88:53:6a:7d:af

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Chains

Jul 27, 2026

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Serial Number

0a:ef:51:6c:f9:64:f1:3b:dc:08:bc:33:82:5c:f4:df

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 14, 2025 - May 20, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsDialogs.dll

IMPHASH 3b477381217c97b22146297f93df2a92
SHA256 0813574b66576af128ee1f649daca05e33997152d9abb346c4a3554118412adb
MD5 19fac92868e9c4577659563bf2a6f1f9
SHA1 c6b81a74f56a543e7bfcb913bead043be9441199
SHA512 3c896faad90d950185c579a03591ba9d7403548fc075462b55ba076da49b9d71adfcd1e42cb7c2403776e6d6409d9cde6434e5579393788312d7d7877e445d01
SSDEEP 384:KA7k8985U30WAw0htIFctIYi/uCxTeVjy8RbmL4nNyAad:HNi5U3/Aw0fYYi2CxT+j5ALn
TLSH
T187928DA385941C33CD97AA3134D86A3EDFB9636864C0DCC3A267C5456B613523FBC39A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

65:c9:93:51:55:cb:57:a4:8e:f4:dc:52:eb:9c:e2:7f:53:97:8a:df:39:6e:04:b2:3b:66:4c:c4:b1:fa:69:f5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Chains

Jul 27, 2026

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Serial Number

0a:ef:51:6c:f9:64:f1:3b:dc:08:bc:33:82:5c:f4:df

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 14, 2025 - May 20, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis_tauri_utils.dll

IMPHASH 2030931b38a854dde8cdd69245a8096a
SHA256 09e55e4aa502df69a61dcc00e9ec38180dff360eb152bd6ee6a63077979f01b0
MD5 8719243ad5ce0243e6cc3fb42effe268
SHA1 0849a26e3321bd19d87fe79dd06d3e5021ad373b
SHA512 e422dc220cf119eb451be84058fd5856ff89aeaf138b25a85b5d710daccfe56ab8fded4a2f45ff275cd6219fde14da925932c8d580a3b4b501a43a22a61fe02b
SSDEEP 768:y/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVGbYi2CxM5ALSL:0wODZzTrAV5Oevq4DtXHVGb72CcL
TLSH
T1CA137C49FDC47D66D6CF44702488463E9A7FC8081A40C997E3715EA3CA92332AFD926F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

83:3a:0c:a6:a9:ea:fe:42:8b:8c:66:14:d5:bb:78:4d:6e:28:98:d1:44:45:77:45:9c:98:93:7f:05:54:8f:4a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Chains

Jul 27, 2026

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Serial Number

0a:ef:51:6c:f9:64:f1:3b:dc:08:bc:33:82:5c:f4:df

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 14, 2025 - May 20, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

nsis_tauri_utils.pdb

booth_library_manager_client.exe

IMPHASH ad9c32c610d503a335788a5d3a6e074a
SHA256 35ee67e01cab7ef44171ba7d015246c2fbe67d2b30c86725adf310ef615a6160
MD5 4608dda5be12c695fe389bbfc2589b2c
SHA1 d146916f8cd15d9f84ebbc4ce510a5091e9cba1f
SHA512 962f811abd1f6ac7657ec7fca9945d6b2998d6a3465a19b4acc6a7aa4ee72522b2920166bcb07dc5a99ec6b34030ef05562d1c193f982201fd11234be3074ab6
SSDEEP 786432:1LpHqAOMDGskagwYXPMaBlWgfXTAPWOQx2qPbHs0Zt9:1LpHqAOMDdkagwYXPMaBEMtOQxHbHs2
TLSH
T1E2B74BE17A5A556DC09AC474824646E27A313CCA0B3469FF4484B6F83F79AF41E3837B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

96:fe:c9:9f:3f:cf:d2:7d:fa:1c:e3:84:dc:b2:07:2f:ec:c7:d4:dd:9a:44:9b:19:5e:2c:70:57:c3:9c:62:77

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Chains

Jul 27, 2026

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=0110-01-046319,CN=pixiv Inc.,O=pixiv Inc.,L=Shibuya-Ku,ST=Tokyo,C=JP,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024a50

Serial Number

0a:ef:51:6c:f9:64:f1:3b:dc:08:bc:33:82:5c:f4:df

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 14, 2025 - May 20, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

26064332

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

booth_library_manager_client.pdb

kernel32

DeviceIoControl Process32NextW Process32FirstW CreateToolhelp32Snapshot LocalFree GetProcessIoCounters GetSystemTimes GetProcessTimes OpenProcess VirtualQueryEx ReadProcessMemory GetCurrentProcessId K32GetPerformanceInfo GlobalMemoryStatusEx FormatMessageW WaitForSingleObject FreeLibrary RtlVirtualUnwind TlsSetValue TlsGetValue TlsAlloc InitOnceExecuteOnce AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive GetModuleHandleA InitializeSRWLock SetLastError FindNextFileW WideCharToMultiByte LoadLibraryW SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableW CreateSymbolicLinkW GetFinalPathNameByHandleW CreateMutexA SwitchToThread ExitProcess GetUserPreferredUILanguages FindClose lstrlenW LoadLibraryA CreateFileW MoveFileExW FindFirstFileExW CopyFileExW RemoveDirectoryW GetCommandLineW GetCurrentDirectoryW SetThreadStackGuarantee AddVectoredExceptionHandler UnhandledExceptionFilter SetFilePointerEx SetUnhandledExceptionFilter GetFullPathNameW IsProcessorFeaturePresent WakeAllConditionVariable CreateDirectoryW GetEnvironmentStringsW TerminateProcess CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFileInformationByHandleEx GetSystemTimePreciseAsFileTime RtlLookupFunctionEntry RtlCaptureContext ReadFileEx CreateThread QueryPerformanceFrequency SetFileTime SetFileInformationByHandle SleepEx WriteFileEx LCIDToLocaleName GetProcAddress LoadLibraryExA FreeEnvironmentStringsW CompareStringOrdinal DeleteCriticalSection TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection RaiseException FormatMessageA QueryPerformanceCounter GetEnvironmentVariableW GetNativeSystemInfo GetSystemInfo GetDriveTypeW GetLastError CreateMutexW ReleaseMutex GetCurrentThreadId GetTimeZoneInformationForYear SystemTimeToFileTime SleepConditionVariableSRW InitializeSListHead GetQueuedCompletionStatusEx CancelIoEx GetOverlappedResult IsDebuggerPresent GetComputerNameExW PostQueuedCompletionStatus SetFileCompletionNotificationModes CreateIoCompletionPort SetHandleInformation DuplicateHandle GetCurrentProcess AreFileApisANSI ReadFile HeapCreate WriteFile GetDiskFreeSpaceW LockFile SetFilePointer GetFullPathNameA GetFileAttributesW OutputDebugStringA OutputDebugStringW GetModuleFileNameW LoadLibraryExW SetEndOfFile GetCurrentThread GetModuleHandleW Sleep SetNamedPipeHandleState RtlUnwindEx RtlPcToFileHeader HeapAlloc EncodePointer HeapFree GetProcessHeap CloseHandle InitializeCriticalSectionAndSpinCount GetStdHandle GetConsoleMode GetUserDefaultUILanguage GetFileInformationByHandle FlushFileBuffers GetTickCount MapViewOfFile CreateFileMappingW GetSystemTime GetSystemTimeAsFileTime GetFileSize LockFileEx UnlockFile HeapDestroy HeapCompact HeapReAlloc DeleteFileW DeleteFileA WaitForSingleObjectEx CreateFileA FlushViewOfFile GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA GetTempPathA MultiByteToWideChar HeapSize HeapValidate UnmapViewOfFile GetTempPathW UnlockFileEx TlsFree

advapi32

RegSetValueExW RegCreateKeyTransactedW RegCreateKeyExW RegOpenKeyTransactedW RegOpenKeyExW RegCloseKey OpenProcessToken RegQueryValueExW SystemFunction036 RegDeleteTreeW CopySid GetTokenInformation RegGetValueW IsValidSid GetLengthSid EventUnregister EventSetInformation EventWriteTransfer EventRegister

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

ole32

CoInitializeEx OleInitialize RegisterDragDrop RevokeDragDrop CoCreateInstance CoInitialize CoUninitialize CoTaskMemAlloc

combase

CoTaskMemFree CoCreateFreeThreadedMarshaler

comctl32

RemoveWindowSubclass TaskDialogIndirect SetWindowSubclass DefSubclassProc

shlwapi

SHCreateMemStream

shell32

SHAppBarMessage SHOpenFolderAndSelectItems SHParseDisplayName DragQueryFileW ShellExecuteW ILCreateFromPathW DragFinish CommandLineToArgvW ShellExecuteExW SHCreateItemFromParsingName ILFree SHGetKnownFolderPath

ws2_32

bind WSASocketW send recv connect ioctlsocket WSASend getsockopt closesocket getsockname getpeername setsockopt WSAIoctl WSAGetLastError getaddrinfo freeaddrinfo WSACleanup WSAStartup shutdown

oleaut32

SysStringLen SysFreeString GetErrorInfo SetErrorInfo

pdh

PdhRemoveCounter PdhOpenQueryW PdhEnumObjectsW PdhGetFormattedCounterValue PdhAddEnglishCounterW PdhCloseQuery PdhCollectQueryData

powrprof

CallNtPowerInformation

ntdll

NtReadFile NtCancelIoFileEx NtCreateFile RtlGetVersion NtOpenFile RtlNtStatusToDosError NtCreateNamedPipeFile NtQueryInformationProcess NtWriteFile NtDeviceIoControlFile

psapi

GetProcessMemoryInfo GetModuleFileNameExW

bcryptprimitives

ProcessPrng

user32

GetWindowRect VkKeyScanW DestroyMenu GetParent FindWindowExW SetWindowRgn GetDC ReleaseDC ShowWindow SetFocus MapWindowPoints SetParent GetWindow RegisterWindowMessageA RegisterRawInputDevices MsgWaitForMultipleObjectsEx SetCapture ReleaseCapture SetWindowDisplayAffinity DestroyIcon TrackPopupMenu SetPropW PostQuitMessage SetMenu SystemParametersInfoA RemoveMenu SetWindowLongPtrW GetWindowLongPtrW GetRawInputData AppendMenuW InsertMenuW FindWindowW GetForegroundWindow GetActiveWindow UpdateWindow InvalidateRect SetCursorPos FlashWindowEx InvalidateRgn GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW SetCursor LoadCursorW CloseTouchInputHandle GetTouchInputInfo IsWindowEnabled SystemParametersInfoW FillRect GetMonitorInfoW MonitorFromRect MonitorFromWindow GetCursorPos ClientToScreen GetClientRect GetWindowLongW ScreenToClient GetUpdateRect MapVirtualKeyW ValidateRect DefWindowProcW PostThreadMessageW PeekMessageW PostMessageW DispatchMessageW GetMessageW RegisterTouchWindow GetSystemMetrics IsWindow AdjustWindowRectEx MonitorFromPoint EnumDisplayMonitors IsIconic SendMessageW EnumChildWindows DispatchMessageA TranslateMessage GetMessageA SetWindowPos CreateWindowExW RegisterClassExW RedrawWindow AdjustWindowRect TranslateAcceleratorW DestroyWindow GetWindowTextLengthW GetWindowTextW SetWindowTextW IsWindowVisible GetClipCursor ClipCursor ShowCursor GetMenu SetForegroundWindow SendInput EnableWindow TrackMouseEvent IsProcessDPIAware GetSystemMenu EnableMenuItem SetWindowLongW GetKeyboardState GetAsyncKeyState GetKeyState MapVirtualKeyExW ToUnicodeEx GetKeyboardLayout CreateIcon GetMenuItemInfoW CheckMenuItem GetMenuBarInfo OffsetRect GetWindowDC DrawTextW DrawIconEx CreateMenu CreatePopupMenu DrawMenuBar SetMenuItemInfoW CreateAcceleratorTableW DestroyAcceleratorTable

gdi32

CreateDIBSection CreateCompatibleDC SetBkMode BitBlt CombineRgn SelectObject DeleteDC CreateSolidBrush DeleteObject GetDeviceCaps SetTextColor CreateRectRgn

dwmapi

DwmGetWindowAttribute DwmSetWindowAttribute DwmEnableBlurBehindWindow

crypt32

CertVerifyCertificateChainPolicy CertGetCertificateChain CertOpenStore CertCreateCertificateChainEngine CertFreeCertificateChainEngine CertAddEncodedCertificateToStore CertSetCertificateContextProperty CertFreeCertificateChain CertFreeCertificateContext CertCloseStore

bcrypt

BCryptGenRandom

api-ms-win-crt-math-l1-1-0

floor trunc ceil fmaf roundf log ceilf powf __setusermatherr round logf floorf cosf exp truncf fma pow log2f log2

api-ms-win-crt-string-l1-1-0

wcslen _wcsicmp wcscmp wcsncmp strncmp strcpy_s strlen strcmp strspn strcspn

api-ms-win-crt-runtime-l1-1-0

__p___argv _configure_narrow_argv _initialize_narrow_environment terminate _crt_atexit _errno _register_onexit_function _get_initial_narrow_environment _initterm abort _beginthreadex _endthreadex _initterm_e _initialize_onexit_table exit _wassert _exit _register_thread_local_exe_atexit_callback _c_exit _cexit _seh_filter_exe _set_app_type __p___argc

api-ms-win-crt-convert-l1-1-0

strtol _ultow_s _wtoi wcstol

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-stdio-l1-1-0

fflush fclose __acrt_iob_func feof __stdio_common_vsscanf __p__commode ftell fwrite _set_fmode _setmode fgets fopen _fileno fread __stdio_common_vsprintf fseek __stdio_common_vfprintf ferror

api-ms-win-crt-heap-l1-1-0

_callnewh malloc _msize realloc _set_new_mode free calloc

api-ms-win-crt-utility-l1-1-0

bsearch qsort

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

BOOTH Library Manager_0.3.0_x64-setup.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/NSISdl.dll

advapi32

wsock32

user32

kernel32

generic

$PLUGINSDIR/StartMenu.dll

kernel32

user32

gdi32

shell32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/nsis_tauri_utils.dll

kernel32

advapi32

user32

shell32

generic

booth_library_manager_client.exe

kernel32

advapi32

api-ms-win-core-synch-l1-2-0

ole32

combase

comctl32

shlwapi

shell32

ws2_32

oleaut32

pdh

powrprof

ntdll

psapi

bcryptprimitives

user32

gdi32

dwmapi

crypt32

bcrypt

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic