CapCut_9_5_0_4050_capcutpc_msstore_creatortool[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
CapCut_9_5_0_4050_capcutpc_msstore_creatortool.exe
Size 533.7MB
Sample260919-mshetsec25
SHA256 fdb3f29ef140025daa1d32167befd3c9eb2478760ec651715c8946d0ec730221
MD5 834339aa5ac78e6c032756f6291d39a8
SHA1 8511822b52ae0fe332b6bdbb4eb8a053b4046891
SHA512 6ac81161cc7a70c2d50a04a712cf2c7a8462d05edbbea479cae6f1e18fbdded235a29b584bedd064577ebf23b1371e19493707904f1ad542b1676c3ff4b9456e
SSDEEP 12582912:iFxBrqgHltrDcjRq2Oakec8pqxXxSeSdECWYFvkLCVgr4:ifBrNdAMec4qNxSeSdEytSr4
TLSH
T11F49332BB738416AD0B6D13DC553A606E5B0B88A83708BD722E55D5A3F27BF1AC3C711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

CapCut_9_5_0_4050_capcutpc_msstore_creatortool.exe

.exe 533.7MB

CapCut_9_5_0_4050_capcutpc_msstore_creatortool.exe

IMPHASH e1e3b2aadb2ca0d037dd1536100c8181
SHA256 fdb3f29ef140025daa1d32167befd3c9eb2478760ec651715c8946d0ec730221
MD5 834339aa5ac78e6c032756f6291d39a8
SHA1 8511822b52ae0fe332b6bdbb4eb8a053b4046891
SHA512 6ac81161cc7a70c2d50a04a712cf2c7a8462d05edbbea479cae6f1e18fbdded235a29b584bedd064577ebf23b1371e19493707904f1ad542b1676c3ff4b9456e
SSDEEP 12582912:iFxBrqgHltrDcjRq2Oakec8pqxXxSeSdECWYFvkLCVgr4:ifBrNdAMec4qNxSeSdEytSr4
TLSH
T11F49332BB738416AD0B6D13DC553A606E5B0B88A83708BD722E55D5A3F27BF1AC3C711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

99:fe:74:d0:7f:72:c9:08:ea:4e:d5:8b:54:1b:7c:64:90:78:50:87:bf:ce:c9:30:b5:6c:54:cb:fa:40:8d:57

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

Chains

Sep 11, 2026

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=201923456H,CN=Bytedance Pte. Ltd.,O=Bytedance Pte. Ltd.,L=Singapore,C=SG,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025347

Serial Number

0f:76:a4:51:32:93:8a:47:f6:53:2f:ea:5b:22:10:0d

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 8, 2025 - Aug 7, 2028

Subject

CN=Sectigo Public Time Stamping Signer R37,O=Sectigo Limited,ST=Greater London,C=GB

Serial Number

e7:4e:f2:55:b0:50:4f:fa:db:a6:df:f7:fc:8b:a3:15

Issuer

CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 25, 2026 - Jun 24, 2037

Subject

CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB

Serial Number

90:ac:08:72:20:fd:c5:a7:c4:6b:5c:c7:0d:f7:3d:06

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 25, 2026 - Mar 24, 2041

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Jan 18, 2038

Minor OS version

Major OS version

Entry point

857856

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\76724\LVInstaller\VideofusionInstaller\src\JIanyingInstaller\x64\CC_RELEASE\JYInstaller.pdb

winmm

timeGetTime

kernel32

OpenProcess FreeLibrary CreateToolhelp32Snapshot Process32FirstW Process32NextW GetCurrentProcess Sleep CreateThread GetCurrentThreadId ProcessIdToSessionId GetUserDefaultLocaleName GetDiskFreeSpaceExW GetModuleHandleA LoadLibraryExW GetCurrentProcessId SetErrorMode CreateFileMappingW MapViewOfFileEx UnmapViewOfFile lstrcmpiW CreateProcessW GetLocaleInfoW GetUserDefaultLCID GetCommandLineW GetEnvironmentVariableW GetVolumeInformationW TerminateProcess GetExitCodeProcess GetLocalTime GetTickCount GetSystemDirectoryW lstrcmpW CopyFileW MoveFileExW TerminateThread GetTickCount64 GetPrivateProfileStringA WritePrivateProfileStringA MoveFileW MapViewOfFile OutputDebugStringA SetEvent ResetEvent CreateEventW GetNativeSystemInfo GetProductInfo IsWow64Process AcquireSRWLockExclusive GetCurrentDirectoryW DuplicateHandle FindFirstFileExW QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimeAsFileTime FlushFileBuffers GetFileSizeEx SetEndOfFile LocalFree SetFilePointerEx SetFileTime IsDebuggerPresent GetModuleHandleExW VirtualAlloc VirtualFree TlsGetValue VirtualQuery TlsSetValue TlsAlloc TlsFree GetSystemInfo RtlCaptureStackBackTrace InitOnceExecuteOnce RtlVirtualUnwind InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache LCMapStringEx FlsAlloc FlsGetValue FlsSetValue FlsFree WriteConsoleW GetLocaleInfoEx GetStringTypeW CompareStringEx GetCPInfo WaitForSingleObjectEx RtlCaptureContext RtlLookupFunctionEntry UnhandledExceptionFilter GetVersionExW SetLastError IsProcessorFeaturePresent GetStartupInfoW RtlPcToFileHeader RtlUnwindEx RtlUnwind SetStdHandle GetFileType GetConsoleOutputCP GetConsoleMode ExitProcess SetFileAttributesW ExpandEnvironmentStringsW TryAcquireSRWLockExclusive ReleaseSRWLockExclusive LeaveCriticalSection EnterCriticalSection InitializeCriticalSection SetUnhandledExceptionFilter WideCharToMultiByte MultiByteToWideChar CloseHandle WriteFile ReadFile GetFileSize CreateFileW GetModuleFileNameW InitializeCriticalSectionAndSpinCount RemoveDirectoryW GetFileAttributesW FindNextFileW FindFirstFileW GetStdHandle FindClose CreateDirectoryW LoadLibraryW FindResourceW SizeofResource LockResource LoadResource GetProcAddress GetModuleHandleW FindResourceExW DeleteCriticalSection InitializeCriticalSectionEx GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError RaiseException DecodePointer GetTempPathW DeleteFileW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW InitializeSListHead EncodePointer OutputDebugStringW LoadLibraryExA IsValidLocale EnumSystemLocalesW VirtualProtect WaitForSingleObject ReadConsoleW GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW

user32

GetWindowLongW SetTimer KillTimer SetWindowPos MapWindowPoints GetClientRect GetParent GetMonitorInfoW MonitorFromWindow GetWindow SetForegroundWindow SetFocus CharNextW IsIconic IsWindowVisible ShowWindow PostMessageW SetWindowLongW LoadImageW GetWindowDC ReleaseDC SetWindowTextW GetWindowPlacement PeekMessageW MessageBoxW LoadCursorW SetWindowLongPtrW GetWindowRect GetSystemMetrics DestroyWindow PostQuitMessage DefWindowProcW SendMessageW DispatchMessageW TranslateMessage GetMessageW GetDesktopWindow GetDC UnregisterClassW OffsetRect UpdateLayeredWindow ScreenToClient CreateDialogParamW wsprintfW SetCursor IsWindow EnableWindow BringWindowToTop GetCursorPos

gdi32

DeleteObject GetDeviceCaps DeleteDC CreateCompatibleDC CreateDIBSection SelectObject GetStockObject GetObjectA

advapi32

AccessCheck RegDeleteValueW RegQueryInfoKeyW RegEnumKeyExW RegDeleteKeyExW LookupPrivilegeValueW AdjustTokenPrivileges GetTokenInformation DuplicateTokenEx OpenProcessToken SetNamedSecurityInfoW GetNamedSecurityInfoW IsValidSid InitializeSid InitializeAcl GetSidSubAuthority GetSidLengthRequired GetLengthSid GetAclInformation GetAce CopySid AddAce RegSetValueExW RegOpenKeyExW RegDeleteKeyW RegCreateKeyExW RegCloseKey RegQueryValueExW RegOpenKeyW SystemFunction036 BuildExplicitAccessWithNameW DuplicateToken GetFileSecurityW InitializeSecurityDescriptor MapGenericMask SetSecurityDescriptorDacl SetEntriesInAclW

shell32

ShellExecuteExW ShellExecuteW SHBrowseForFolderW CommandLineToArgvW SHGetPathFromIDListW SHCreateDirectoryExW SHFileOperationW SHGetFolderPathW SHChangeNotify

ole32

CoCreateInstance CoInitialize CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoInitializeEx PropVariantClear CoUninitialize

oleaut32

SysFreeString SysAllocString VarUI4FromStr SysAllocStringLen VariantClear

shlwapi

PathRemoveFileSpecW PathFileExistsW ord12 SHCreateStreamOnFileEx StrStrIW PathIsNetworkPathW PathFindExtensionW PathGetDriveNumberW ord176 PathIsDirectoryW SHGetValueW PathAppendW SHSetValueW

comctl32

_TrackMouseEvent InitCommonControlsEx

winhttp

WinHttpReadData WinHttpSetTimeouts WinHttpCloseHandle WinHttpOpen WinHttpCrackUrl WinHttpQueryDataAvailable WinHttpSetOption WinHttpOpenRequest WinHttpSendRequest WinHttpReceiveResponse WinHttpConnect WinHttpQueryHeaders

gdiplus

GdipSaveGraphics GdipDrawImageRectRectI GdipFillRectangleI GdipSetSmoothingMode GdipGetImageHeight GdipGetImageWidth GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush GdipFree GdipAlloc GdiplusShutdown GdiplusStartup GdipSetClipRectI GdipGraphicsClear GdipCreateFromHDC GdipDeleteGraphics GdipDisposeImage GdipCloneImage GdipDeleteFont GdipDeleteFontFamily GdipDrawImage GdipSetSolidFillColor GdipDrawImagePointRectI GdipGetImageGraphicsContext GdipCreateBitmapFromScan0 GdipDrawString GdipSetTextRenderingHint GdipSetStringFormatLineAlign GdipCreateFontFamilyFromName GdipCreateFont GdipCreateFontFromDC GdipCreateFontFromLogfontA GdipLoadImageFromStream GdipLoadImageFromStreamICM GdipTranslateWorldTransform GdipCreateImageAttributes GdipDisposeImageAttributes GdipRestoreGraphics GdipSetImageAttributesColorMatrix GdipCreateStringFormat GdipDeleteStringFormat GdipMeasureString GdipSetStringFormatTrimming GdipSetStringFormatAlign GdipSetStringFormatFlags

??0MemoryAllocatorDumpGuid@trace_event@base@@QEAA@_K@Z ??0ReadOnlySharedMemoryRegion@base@@AEAA@VPlatformSharedMemoryRegion@subtle@1@@Z ??0ReadOnlySharedMemoryRegion@base@@QEAA@$$QEAV01@@Z ??0ReadOnlySharedMemoryRegion@base@@QEAA@XZ ??0UnsafeSharedMemoryRegion@base@@AEAA@VPlatformSharedMemoryRegion@subtle@1@@Z ??0UnsafeSharedMemoryRegion@base@@QEAA@$$QEAV01@@Z ??0UnsafeSharedMemoryRegion@base@@QEAA@XZ ??0WritableSharedMemoryRegion@base@@AEAA@VPlatformSharedMemoryRegion@subtle@1@@Z ??0WritableSharedMemoryRegion@base@@QEAA@$$QEAV01@@Z ??0WritableSharedMemoryRegion@base@@QEAA@XZ ??1ReadOnlySharedMemoryRegion@base@@QEAA@XZ ??1UnsafeSharedMemoryRegion@base@@QEAA@XZ ??1WritableSharedMemoryRegion@base@@QEAA@XZ ??4MemoryAllocatorDumpGuid@trace_event@base@@QEAAAEAV012@$$QEAV012@@Z ??4MemoryAllocatorDumpGuid@trace_event@base@@QEAAAEAV012@AEBV012@@Z ??4ReadOnlySharedMemoryRegion@base@@QEAAAEAV01@$$QEAV01@@Z ??4UnsafeSharedMemoryRegion@base@@QEAAAEAV01@$$QEAV01@@Z ??4WritableSharedMemoryRegion@base@@QEAAAEAV01@$$QEAV01@@Z ??8MemoryAllocatorDumpGuid@trace_event@base@@QEBA_NAEBV012@@Z ??9MemoryAllocatorDumpGuid@trace_event@base@@QEBA_NAEBV012@@Z ??MMemoryAllocatorDumpGuid@trace_event@base@@QEBA_NAEBV012@@Z ?ConvertToReadOnly@WritableSharedMemoryRegion@base@@SA?AVReadOnlySharedMemoryRegion@2@V12@@Z ?ConvertToUnsafe@WritableSharedMemoryRegion@base@@SA?AVUnsafeSharedMemoryRegion@2@V12@@Z ?Create@ReadOnlySharedMemoryRegion@base@@SA?AUMappedReadOnlyRegion@2@_K@Z ?Create@UnsafeSharedMemoryRegion@base@@SA?AV12@_K@Z ?Create@WritableSharedMemoryRegion@base@@SA?AV12@_K@Z ?Deserialize@ReadOnlySharedMemoryRegion@base@@SA?AV12@VPlatformSharedMemoryRegion@subtle@2@@Z ?Deserialize@UnsafeSharedMemoryRegion@base@@SA?AV12@VPlatformSharedMemoryRegion@subtle@2@@Z ?Deserialize@WritableSharedMemoryRegion@base@@SA?AV12@VPlatformSharedMemoryRegion@subtle@2@@Z ?Duplicate@ReadOnlySharedMemoryRegion@base@@QEBA?AV12@XZ ?Duplicate@UnsafeSharedMemoryRegion@base@@QEBA?AV12@XZ ?GetGUID@ReadOnlySharedMemoryRegion@base@@QEBAAEBVUnguessableToken@2@XZ ?GetGUID@UnsafeSharedMemoryRegion@base@@QEBAAEBVUnguessableToken@2@XZ ?GetGUID@WritableSharedMemoryRegion@base@@QEBAAEBVUnguessableToken@2@XZ ?GetPlatformHandle@ReadOnlySharedMemoryRegion@base@@QEBAPEAXXZ ?GetPlatformHandle@UnsafeSharedMemoryRegion@base@@QEBAPEAXXZ ?GetSize@ReadOnlySharedMemoryRegion@base@@QEBA_KXZ ?GetSize@UnsafeSharedMemoryRegion@base@@QEBA_KXZ ?GetSize@WritableSharedMemoryRegion@base@@QEBA_KXZ ?IsValid@ReadOnlySharedMemoryRegion@base@@QEBA_NXZ ?IsValid@UnsafeSharedMemoryRegion@base@@QEBA_NXZ ?IsValid@WritableSharedMemoryRegion@base@@QEBA_NXZ ?Map@ReadOnlySharedMemoryRegion@base@@QEBA?AVReadOnlySharedMemoryMapping@2@XZ ?Map@UnsafeSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@XZ ?Map@WritableSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@XZ ?MapAt@ReadOnlySharedMemoryRegion@base@@QEBA?AVReadOnlySharedMemoryMapping@2@J_K@Z ?MapAt@UnsafeSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@J_K@Z ?MapAt@WritableSharedMemoryRegion@base@@QEBA?AVWritableSharedMemoryMapping@2@J_K@Z ?TakeHandleForSerialization@ReadOnlySharedMemoryRegion@base@@SA?AVPlatformSharedMemoryRegion@subtle@2@V12@@Z ?TakeHandleForSerialization@UnsafeSharedMemoryRegion@base@@SA?AVPlatformSharedMemoryRegion@subtle@2@V12@@Z ?TakeHandleForSerialization@WritableSharedMemoryRegion@base@@SA?AVPlatformSharedMemoryRegion@subtle@2@V12@@Z ?ThrowBadVariantAccess@variant_internal@absl@@YAXXZ ?ToUint64@MemoryAllocatorDumpGuid@trace_event@base@@QEBA_KXZ ?UnsafeGetPlatformHandle@WritableSharedMemoryRegion@base@@QEBAPEAXXZ ?create_hook_@ReadOnlySharedMemoryRegion@base@@0P6A?AUMappedReadOnlyRegion@2@_K@ZEA ?create_hook_@UnsafeSharedMemoryRegion@base@@0P6A?AV12@_K@ZEA ?create_hook_@WritableSharedMemoryRegion@base@@0P6A?AV12@_K@ZEA ?empty@MemoryAllocatorDumpGuid@trace_event@base@@QEBA_NXZ ?g_swallow_stream@logging@@3PEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@EA ?kDisableBestEffortTasks@switches@@3QBDB ?kDisableBreakpad@switches@@3QBDB ?kDisableFeatures@switches@@3QBDB ?kDisableHighResTimer@switches@@3QBDB ?kDisableLowEndDeviceMode@switches@@3QBDB ?kDisableUsbKeyboardDetect@switches@@3QBDB ?kEnableBackgroundThreadPool@switches@@3QBDB ?kEnableCrashReporter@switches@@3QBDB ?kEnableFeatures@switches@@3QBDB ?kEnableLowEndDeviceMode@switches@@3QBDB ?kForceFieldTrials@switches@@3QBDB ?kFullMemoryCrashReport@switches@@3QBDB ?kLogBestEffortTasks@switches@@3QBDB ?kNoErrorDialogs@switches@@3QBDB ?kProfilingAtStart@switches@@3QBDB ?kProfilingFile@switches@@3QBDB ?kProfilingFlush@switches@@3QBDB ?kTestChildProcess@switches@@3QBDB ?kTestDoNotInitializeIcu@switches@@3QBDB ?kTraceToFile@switches@@3QBDB ?kTraceToFileName@switches@@3QBDB ?kV@switches@@3QBDB ?kVModule@switches@@3QBDB ?kWaitForDebugger@switches@@3QBDB ?set_create_hook@ReadOnlySharedMemoryRegion@base@@CAXP6A?AUMappedReadOnlyRegion@2@_K@Z@Z ?set_create_hook@UnsafeSharedMemoryRegion@base@@CAXP6A?AV12@_K@Z@Z ?set_create_hook@WritableSharedMemoryRegion@base@@CAXP6A?AV12@_K@Z@Z ?throw_bad_optional_access@optional_internal@absl@@YAXXZ GetHandleVerifier

Name

.text

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

246KB

Virtual Size

245KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

57KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

CapCut_9_5_0_4050_capcutpc_msstore_creatortool.exe

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

winhttp

gdiplus

generic