Wooting[.]Background[.]Service_0[.]5[.]1_x64-setup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Wooting.Background.Service_0.5.1_x64-setup.exe
Size 5.9MB
Sample261024-x1a1tswwfx
SHA256 4965cccdc73a8a8182aa70bf0387a86e3b6b215bb1db2118767c5da0821ed21f
MD5 58b210fad4571ab96cd6c3ac42d5d9b5
SHA1 1f8b8a9c486cc16b17dd951f1ca8fe4a51068da7
SHA512 9e3cc0e617589c32a612df0051697c2c35e7f663e0a5090b6fc6e20de2d8890162d1516052dcea2dcc137fce0dab6ea4922a53662aa3e30acb3c41bdfdb8942e
SSDEEP 98304:GPyhH3C450SMuGIcG+/EVkVue/golgMvW2XaSXWTvjEiNJ/QmfrBQnKS5:GWy4euKzcqgAZXaS2QsJVByKG
TLSH
T18D56339099B0DC26D2AB5DF88CBCE67C8532F8B3752CB12787D81985752B4CAD560B33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Wooting.Background.Service_0.5.1_x64-setup.exe

.exe 5.9MB
$PLUGINSDIR/NSISdl.dll

.dll 25KB
$PLUGINSDIR/StartMenu.dll

.dll 17KB
$PLUGINSDIR/System.dll

.dll 22KB
$PLUGINSDIR/modern-wizard.bmp

25KB
$PLUGINSDIR/nsDialogs.dll

.dll 19KB
$PLUGINSDIR/nsis_tauri_utils.dll

.dll 43KB
wooting-bg-service.exe

.exe 24.3MB

Wooting.Background.Service_0.5.1_x64-setup.exe

IMPHASH 46ce5c12b293febbeb513b196aa7f843
SHA256 4965cccdc73a8a8182aa70bf0387a86e3b6b215bb1db2118767c5da0821ed21f
MD5 58b210fad4571ab96cd6c3ac42d5d9b5
SHA1 1f8b8a9c486cc16b17dd951f1ca8fe4a51068da7
SHA512 9e3cc0e617589c32a612df0051697c2c35e7f663e0a5090b6fc6e20de2d8890162d1516052dcea2dcc137fce0dab6ea4922a53662aa3e30acb3c41bdfdb8942e
SSDEEP 98304:GPyhH3C450SMuGIcG+/EVkVue/golgMvW2XaSXWTvjEiNJ/QmfrBQnKS5:GWy4euKzcqgAZXaS2QsJVByKG
TLSH
T18D56339099B0DC26D2AB5DF88CBCE67C8532F8B3752CB12787D81985752B4CAD560B33
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

ec:1b:b3:72:ec:db:86:87:c2:97:6d:32:72:c7:bf:bc:df:12:cb:15:63:2a:82:54:5b:74:49:37:3a:55:98:3f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=66048427,CN=Wooting Technologies B.V.,O=Wooting Technologies B.V.,STREET=Buitenbrinkweg 81,L=Ermelo,ST=Gelderland,C=NL,1.2.840.113549.1.9.1=#0c116a65726f656e40776f6f74696e672e696f,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 19, 2026

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

Serial Number

75:44:ef:ef:18:6d:d4:6d:53:14:35:64

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 7, 2025 - Jan 8, 2028

Minor OS version

Major OS version

Entry point

13983

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

RemoveDirectoryW lstrcmpiA GetTempFileNameW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW WriteFile GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize CreateFileW GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject ExitProcess

$PLUGINSDIR/NSISdl.dll

IMPHASH db80d5e142e716e818b7f4614dcade3c
SHA256 856a5212b160840ab35c7ed568d98307551e1818c931e3e75adcb9aaf5154feb
MD5 eab54cf33474d3af1131f0aac04c1c58
SHA1 5ba1a5f871c76f074a5e5359f2fbea78c55378d9
SHA512 5e1e8e02717911a20834482d16707322d980001cfd43c27cee30fb9d2990eb21be65191a0952b140e969a8d682aba714d8762c200361473736ee765da54f6f2d
SSDEEP 384:brSQMCOUILnCaSPy/yhJzmGSMRWyOUKie7NyAmL4D6ki2NrA+LWlTiA25ghB:brSQMCOp0yamMRWysieaLz2NrA+s+3e
TLSH
T149C2AF17A92044F2DF521A7030D63A3B6EF2DF9229A448C38BB7884D8F5134377BD889
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

d4:af:1e:26:87:53:62:57:41:89:7d:aa:5a:4a:0e:8e:44:21:57:4c:c9:c9:e0:dc:db:5f:91:1d:d1:ed:59:8d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

Oct 19, 2026

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

Serial Number

75:44:ef:ef:18:6d:d4:6d:53:14:35:64

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 7, 2025 - Jan 8, 2028

Minor OS version

Major OS version

Entry point

9321

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/StartMenu.dll

IMPHASH 646971a3aef724d6f553f40ae84fe26b
SHA256 bb19db8b385b1f4f43fb19d0746170edfe4709c78c0d5591a8faa1cf4aabf11a
MD5 7dd040daef9795c979656f10c8e20fb0
SHA1 6bbbd61b4f9446741b9c4ef26034e044c6ba0127
SHA512 5e365cc913e9ea4899f14bfc1440029ea29db59fa0daf2291dcfec2d935ed8c250944b6ba6da156a735b326321bdea4883632bd3d03c2e4e0db4a4bc6471b151
SSDEEP 384:HuTF64UqAfncvr5NyAmL4D6ki2NrA+LWlTiA2yR7Ui:OTF64XILz2NrA+s+32
TLSH
T165826C77A9D00563EB4B9A7070D66A236FB9B24227A480D35407828D1BA07D3BF7C719
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

ce:4b:5f:ca:79:2c:97:ec:4f:db:81:5a:27:58:ae:61:bf:92:0f:a0:c2:65:57:3c:31:61:63:88:97:6b:5c:fa

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

Oct 19, 2026

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

Serial Number

75:44:ef:ef:18:6d:d4:6d:53:14:35:64

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 7, 2025 - Jan 8, 2028

Minor OS version

Major OS version

Entry point

6430

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 4af4492118210b510271fafbd8a24affff9bbda04078aa6dfe986effb8c5476a
MD5 d33341fe75eff6b4667a2624d474ef9d
SHA1 84b12285434faca738116d69584dfb4017c2c51f
SHA512 d8d172dcf46315caca97ef0b89311d701cc3afcc96cffa696e49f027e49d0073b95c15c3e68831aaf50940d1dbda9e2abce6fad7fd0e4a02422f9e05c9e413f7
SSDEEP 384:l/Qlt7wiij/lMRv/9V4b4rlNyAmL4D6ki2NrA+LWlTiA2BSKUwT9:laeiijipN8Lz2NrA+s+3/
TLSH
T112A28F134B6048F3FB429D3460D8AE275FBEBA4626E444D3DBA781855E603C72EBD187
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

32:e2:dd:5c:bb:84:b8:2a:05:d0:1b:81:81:41:e4:c0:f5:01:8c:f3:f4:3b:ca:45:1d:82:40:88:53:6a:7d:af

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

Oct 19, 2026

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

Serial Number

75:44:ef:ef:18:6d:d4:6d:53:14:35:64

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 7, 2025 - Jan 8, 2028

Minor OS version

Major OS version

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsDialogs.dll

IMPHASH 3b477381217c97b22146297f93df2a92
SHA256 88fe12b665c2bb5cae5fbba6e8fa0b89ffe1e0a58cd706fc0938e7d80c497c2a
MD5 40b5187402cbbe60f0143ad85b4d2eb2
SHA1 a0b12b84d91fb5f248eeb3e42c9fbe09267ddca5
SHA512 d4cf29b96befc5c3b16b5f30cecc7de127dbfbfbef94f3ac73a66ca767ee9c6e7c4efe5d75579ee05c6592ab29574d3c584b43c320d896e5b57af07b8cd592bf
SSDEEP 384:9A7k8985U30WAw0htIFcmNyAmL4D6ki2NrA+LWlTiA2NeKbR:mNi5U3/Aw0f1Lz2NrA+s+3NT
TLSH
T17E926D5394641873DB879A3A70D85A2FDEBD6342B1D05C82D227C6492A743E23F7C38B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

65:c9:93:51:55:cb:57:a4:8e:f4:dc:52:eb:9c:e2:7f:53:97:8a:df:39:6e:04:b2:3b:66:4c:c4:b1:fa:69:f5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

Oct 19, 2026

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

Serial Number

75:44:ef:ef:18:6d:d4:6d:53:14:35:64

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 7, 2025 - Jan 8, 2028

Minor OS version

Major OS version

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis_tauri_utils.dll

IMPHASH 2030931b38a854dde8cdd69245a8096a
SHA256 cdb27369ca77d7ed080c23276f543a1a7319b095ffde1bab404e0b06db9d8fc5
MD5 16097772736a223277cb3e1b69ba16db
SHA1 a1a85619640a2cc645362239442e0bdba67195e4
SHA512 61a0c97f6d3be346f59bd50d3d335fb75adc6f9c837c9cd0f120a19169f70997edb0acc1e9027f54bd2a9e9c657fcc92857c7dfd87a3c7335e80020f3f8be31b
SSDEEP 768:J/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVGlLz2NrA+s+3JEs:RwODZzTrAV5Oevq4DtXHVGZh+Ks
TLSH
T1CB137B08FDC52E66E7CF09711488453F4A7FC9082750C9A7E3625E92C9A2332AFD925F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

83:3a:0c:a6:a9:ea:fe:42:8b:8c:66:14:d5:bb:78:4d:6e:28:98:d1:44:45:77:45:9c:98:93:7f:05:54:8f:4a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

Oct 19, 2026

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

Serial Number

75:44:ef:ef:18:6d:d4:6d:53:14:35:64

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 7, 2025 - Jan 8, 2028

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

nsis_tauri_utils.pdb

wooting-bg-service.exe

IMPHASH 6966168cf32d3c057c850b13b0392667
SHA256 87c33777d726b3f7f0866a81df536cc98f50de9c25fc6f8ea85ef568dedc4517
MD5 7557f3c9f8154d4123ff9816d719b159
SHA1 5bed5f0c913d838797236250ca343db00ee3f993
SHA512 b0516597c7521b70c201e31170feca66c88c6732dd8449fa2f46f9b6356a80c78bced4bcd2ab731b9ed2b1a8f04966a40bd0e2ac763f80ed3919da5cbbfa2e7a
SSDEEP 393216:jXYw0Q1An5F1R0czbS7rde1/M6FbUCC/4ASj8PkS:jXYw0Q1An5F1R0cvS7rdeZC/4JSkS
TLSH
T1554707247A5A9968D09BC47483478AB25A7130DB0B35B9FF44C496392F7EBF42F38358
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

59:ef:9b:28:45:38:f0:64:e7:04:d8:e3:79:a5:69:a7:24:01:66:f2:f4:f8:1d:3c:61:f8:3c:ea:1b:10:07:26

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

Oct 19, 2026

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

Serial Number

75:44:ef:ef:18:6d:d4:6d:53:14:35:64

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 7, 2025 - Jan 8, 2028

Minor OS version

Major OS version

Entry point

17348240

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wooting_bg_service.pdb

kernel32

GetSystemTimeAsFileTime GetModuleHandleW FormatMessageW HeapAlloc HeapFree GetProcessHeap EncodePointer LoadLibraryA LoadLibraryW lstrlenW FlsGetValue LoadLibraryExA GetProcAddress OutputDebugStringA OutputDebugStringW GetModuleFileNameW LoadLibraryExW GetModuleHandleA LocalAlloc RaiseException MapViewOfFile VirtualQuery UnmapViewOfFile GlobalMemoryStatusEx GetSystemInfo SleepConditionVariableSRW WakeAllConditionVariable GetCurrentThreadId ReleaseMutex GetLastError MoveFileExW GetFullPathNameW RtlPcToFileHeader CloseHandle LCIDToLocaleName WideCharToMultiByte GetUserDefaultUILanguage GetTimeZoneInformationForYear CreateMutexW CreateFileW SetNamedPipeHandleState GetFileAttributesW FreeLibrary LocalFree SetLastError InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared GetStdHandle GetConsoleMode SetConsoleMode InitOnceExecuteOnce QueryFullProcessImageNameW TlsAlloc TlsGetValue TlsSetValue GetDiskFreeSpaceExW CreateEventA FindFirstVolumeW FindNextVolumeW GetConsoleScreenBufferInfo SetConsoleTextAttribute ResetEvent MultiByteToWideChar GetCurrentProcess DuplicateHandle SetHandleInformation GetFileInformationByHandle FindVolumeClose GetVolumePathNamesForVolumeNameW WaitForSingleObject K32GetPerformanceInfo GetCurrentProcessId GetDriveTypeW GetVolumeInformationW OpenProcess InitializeSListHead InitializeCriticalSectionEx RtlUnwindEx SetUnhandledExceptionFilter DeleteCriticalSection GetEnvironmentVariableW SystemTimeToTzSpecificLocalTime SystemTimeToFileTime DeviceIoControl RtlVirtualUnwind CreateFileMappingW ReadFile WriteFile GetOverlappedResult CancelIo PostQueuedCompletionStatus CreateIoCompletionPort SetFileCompletionNotificationModes CancelIoEx GetQueuedCompletionStatusEx Sleep CompareStringOrdinal FreeEnvironmentStringsW SetFileInformationByHandle CopyFileExW HeapReAlloc QueryPerformanceCounter CreateThread ReadFileEx SleepEx WriteFileEx RtlCaptureContext RtlLookupFunctionEntry GetSystemTimePreciseAsFileTime SetFileTime GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetEnvironmentStringsW CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetCommandLineW FindFirstFileExW FindClose ExitProcess SwitchToThread WaitForSingleObjectEx CreateMutexA GetFinalPathNameByHandleW CreateSymbolicLinkW DeleteFileW SetEnvironmentVariableW WriteConsoleW GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer FlsFree FlsAlloc GetModuleHandleExW IsThreadAFiber FlsSetValue GetTempPathW QueryPerformanceFrequency FindNextFileW

ntdll

NtReadFile NtOpenFile NtCreateNamedPipeFile NtCancelIoFileEx RtlNtStatusToDosError NtDeviceIoControlFile RtlGetVersion NtWriteFile NtCreateFile

bcryptprimitives

ProcessPrng

shell32

DragQueryFileW SHOpenFolderAndSelectItems ILFree ShellExecuteExW SHGetKnownFolderPath SHAppBarMessage ILCreateFromPathW ShellExecuteW Shell_NotifyIconGetRect Shell_NotifyIconW ExtractIconExW SHCreateItemFromParsingName DragFinish

user32

CloseTouchInputHandle IsWindowVisible GetKeyState MapVirtualKeyExW ToUnicodeEx CreateIcon GetMenu RegisterClassW ChangeWindowMessageFilterEx TrackPopupMenu KillTimer SendMessageW MonitorFromPoint GetWindowThreadProcessId SetTimer GetMenuItemInfoW GetMenuBarInfo OffsetRect GetIconInfo GetAsyncKeyState GetTouchInputInfo RegisterTouchWindow RegisterDeviceNotificationA CreateWindowExA GetWindowDC DrawTextW CreateMenu DestroyWindow TranslateAcceleratorW AdjustWindowRect RedrawWindow IsIconic AdjustWindowRectEx CreateWindowExW RegisterClassA IsWindow GetSystemMetrics DrawMenuBar DestroyAcceleratorTable GetMessageW TranslateMessage DispatchMessageW PostMessageW LoadCursorW PeekMessageW PostThreadMessageW DefWindowProcW ValidateRect MapVirtualKeyW DefWindowProcA CreateAcceleratorTableW GetKeyboardState SetMenuItemInfoW CheckMenuItem GetUpdateRect GetRawInputData SystemParametersInfoA SetPropW DestroyIcon SetWindowDisplayAffinity ClipCursor GetClipCursor ShowCursor SetWindowLongW EnableMenuItem GetSystemMenu ReleaseCapture SetCapture MsgWaitForMultipleObjectsEx EnumDisplayMonitors RegisterRawInputDevices RegisterWindowMessageA GetWindow SetParent MapWindowPoints GetWindowTextLengthW GetWindowTextW SetFocus ShowWindow GetWindowRect GetParent FindWindowExW SetWindowRgn EnableWindow IsWindowEnabled ReleaseDC GetDC IsProcessDPIAware DrawIconEx SetWindowTextW InsertMenuW AppendMenuW RemoveMenu SetForegroundWindow SendInput GetWindowInfo SetWindowLongPtrW GetWindowLongPtrW CreatePopupMenu EnumChildWindows DispatchMessageA GetMessageA EnumDesktopWindows FindWindowW SetMenu PostQuitMessage RegisterClassExW DestroyMenu GetForegroundWindow GetActiveWindow UpdateWindow InvalidateRect SetCursorPos GetKeyboardLayout FlashWindowEx InvalidateRgn SetWindowPos GetWindowPlacement SetWindowPlacement ChangeDisplaySettingsExW SetCursor TrackMouseEvent SystemParametersInfoW FillRect GetMonitorInfoW MonitorFromRect MonitorFromWindow GetCursorPos ClientToScreen GetClientRect GetWindowLongW ScreenToClient VkKeyScanW

ole32

CoInitializeSecurity CoInitializeEx CoInitialize CoCreateInstance CoSetProxyBlanket OleInitialize RegisterDragDrop RevokeDragDrop CoUninitialize

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

gdi32

DeleteDC CreateSolidBrush CreateRectRgn CreateDIBSection GetObjectW GetDIBits DeleteObject SetTextColor SetBkMode CreateCompatibleDC GetDeviceCaps BitBlt SelectObject CombineRgn

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute DwmGetWindowAttribute

comctl32

SetWindowSubclass RemoveWindowSubclass DefSubclassProc TaskDialogIndirect

shlwapi

SHCreateMemStream

combase

CoTaskMemFree CoCreateFreeThreadedMarshaler CoIncrementMTAUsage CoTaskMemAlloc

oleaut32

SysFreeString SysAllocString SysStringLen SetErrorInfo GetErrorInfo VariantClear

psapi

GetProcessMemoryInfo

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

advapi32

RegQueryValueExW RegGetValueW RegEnumKeyExW RegCloseKey RegDeleteValueW RegSetValueExW RegOpenKeyExW SystemFunction036 EventRegister EventSetInformation EventUnregister EventWriteTransfer

crypt32

CertAddEncodedCertificateToStore CertCreateCertificateChainEngine CertFreeCertificateChainEngine CertOpenStore CertGetCertificateChain CertVerifyCertificateChainPolicy CertFreeCertificateContext CertSetCertificateContextProperty CertCloseStore CertFreeCertificateChain

bcrypt

BCryptGenRandom

ws2_32

getaddrinfo socket WSAGetLastError WSAIoctl setsockopt shutdown listen bind send recv connect ioctlsocket WSASend accept getsockopt getsockname getpeername WSAStartup freeaddrinfo closesocket WSASocketW

setupapi

SetupDiGetDeviceInterfaceDetailW SetupDiDestroyDeviceInfoList SetupDiGetClassDevsW SetupDiEnumDeviceInterfaces

iphlpapi

GetAdaptersAddresses FreeMibTable GetIfEntry2 GetIfTable2

pdh

PdhGetFormattedCounterValue PdhOpenQueryA PdhCollectQueryData PdhCloseQuery PdhRemoveCounter PdhAddEnglishCounterW

powrprof

CallNtPowerInformation

api-ms-win-crt-math-l1-1-0

round roundf floor __setusermatherr pow ceil sinf expf trunc fmod ceilf floorf

api-ms-win-crt-string-l1-1-0

wcscmp wcsncpy towupper _wcsicmp wcslen _wcsdup strcmp strcpy_s strlen

api-ms-win-crt-convert-l1-1-0

strtol _wtoi _ultow_s wcstol

api-ms-win-crt-runtime-l1-1-0

terminate _crt_atexit _errno _register_onexit_function _initialize_onexit_table abort __p___argv _wassert _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argc _seh_filter_exe _set_app_type _exit _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-stdio-l1-1-0

_set_fmode feof _setmode ferror fclose __stdio_common_vsprintf __p__commode __stdio_common_vswprintf __stdio_common_vfprintf fgets fopen _fileno fread fseek ftell fwrite fflush __stdio_common_vsscanf __acrt_iob_func

api-ms-win-crt-heap-l1-1-0

calloc realloc _callnewh _set_new_mode free malloc

api-ms-win-crt-utility-l1-1-0

bsearch

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

Wooting.Background.Service_0.5.1_x64-setup.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/NSISdl.dll

advapi32

wsock32

user32

kernel32

generic

$PLUGINSDIR/StartMenu.dll

kernel32

user32

gdi32

shell32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/nsis_tauri_utils.dll

kernel32

advapi32

user32

shell32

generic

wooting-bg-service.exe

kernel32

ntdll

bcryptprimitives

shell32

user32

ole32

api-ms-win-core-synch-l1-2-0

gdi32

dwmapi

comctl32

shlwapi

combase

oleaut32

psapi

version

api-ms-win-core-winrt-l1-1-0

advapi32

crypt32

bcrypt

ws2_32

setupapi

iphlpapi

pdh

powrprof

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0