General

Malware Config

Signatures

Files

• b2f547ccd7c5b9990bf95ee054717a6e.bin

  .rar
• WinThruster/Animation.gif

  .gif
• WinThruster/Brazilian.ini
• WinThruster/Cookies.txt
• WinThruster/Danish.ini
• WinThruster/Dutch.ini
• WinThruster/En.chm

  .chm
• WinThruster/English.ini
• WinThruster/Finnish.ini
• WinThruster/French.ini
• WinThruster/GExts.txt
• WinThruster/German.ini
• WinThruster/HomePage.url
• WinThruster/Italian.ini
• WinThruster/Japanese.ini
• WinThruster/Norwegian.ini
• WinThruster/Portuguese.ini
• WinThruster/Russian.ini
• WinThruster/SList.db
• WinThruster/SList.txt
• WinThruster/SchedTasks.txt
• WinThruster/Services1.txt
• WinThruster/Services2.txt
• WinThruster/SiteNtf.txt
• WinThruster/Spanish.ini
• WinThruster/Swedish.ini
• WinThruster/Turkish.ini
• WinThruster/WTNotifications.exe

  .exe windows:6 windows x86 arch:x86

  cf787544fdeb17a8420c6379b88bceeb

  
  

  Code Sign

  48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

  Certificate

  Issuer

  CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  25-05-2021 00:00

  Not After

  31-12-2028 23:59

  Subject

  CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e

  Certificate

  Issuer

  CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

  Not Before

  22-03-2021 00:00

  Not After

  21-03-2036 23:59

  Subject

  CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  f0:6c:33:7b:02:62:01:7f:ca:46:6b:d7:4c:53:0b:a5

  Certificate

  Issuer

  CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

  Not Before

  05-12-2023 00:00

  Not After

  04-12-2026 23:59

  Subject

  SERIALNUMBER=E0460582008-6,CN=Solvusoft Corporation,O=Solvusoft Corporation,ST=Nevada,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13064e6576616461,1.3.6.1.4.1.311.60.2.1.3=#13025553

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

  Certificate

  Issuer

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  03-05-2023 00:00

  Not After

  02-08-2034 23:59

  Subject

  CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-05-2019 00:00

  Not After

  18-01-2038 23:59

  Subject

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  63:11:e3:6e:2c:b2:02:b9:5d:cf:98:47:c6:53:d4:a8:c3:bc:96:1f:40:80:97:54:db:08:65:9f:be:1d:84:e1

  Signer

  Actual PE Digest

  63:11:e3:6e:2c:b2:02:b9:5d:cf:98:47:c6:53:d4:a8:c3:bc:96:1f:40:80:97:54:db:08:65:9f:be:1d:84:e1

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  winmm

  timeGetTime

  wininet

  InternetGetConnectedState

  comctl32

  FlatSB_SetScrollInfo

  ImageList_DragMove

  ImageList_Destroy

  _TrackMouseEvent

  ImageList_DragShowNolock

  ImageList_Add

  ImageList_GetDragImage

  FlatSB_SetScrollProp

  ImageList_Create

  ImageList_EndDrag

  ImageList_DrawEx

  ImageList_SetImageCount

  FlatSB_GetScrollPos

  FlatSB_SetScrollPos

  InitializeFlatSB

  FlatSB_GetScrollInfo

  ImageList_Write

  ImageList_DrawIndirect

  ImageList_SetBkColor

  ImageList_GetBkColor

  ImageList_BeginDrag

  ImageList_GetIcon

  ImageList_GetImageCount

  ImageList_DragEnter

  ImageList_GetIconSize

  ImageList_SetIconSize

  ImageList_Read

  ImageList_DragLeave

  ImageList_Draw

  ImageList_Remove

  shell32

  ExtractIconW

  SHGetFolderPathW

  Shell_NotifyIconW

  SHAppBarMessage

  ShellExecuteW

  crtdll

  isspace

  isprint

  tolower

  user32

  CopyImage

  CreateWindowExW

  GetMenuItemInfoW

  SetMenuItemInfoW

  DefFrameProcW

  GetDCEx

  PeekMessageW

  MonitorFromWindow

  GetDlgCtrlID

  GetUpdateRect

  SetTimer

  WindowFromPoint

  BeginPaint

  RegisterClipboardFormatW

  FrameRect

  MapVirtualKeyW

  IsWindowUnicode

  RegisterWindowMessageW

  FillRect

  GetMenuStringW

  DispatchMessageW

  SendMessageA

  IsClipboardFormatAvailable

  DefMDIChildProcW

  EnumWindows

  GetClassInfoW

  ShowOwnedPopups

  GetSystemMenu

  GetScrollRange

  SetScrollPos

  GetScrollPos

  GetActiveWindow

  SetActiveWindow

  DrawEdge

  GetKeyboardLayoutList

  LoadBitmapW

  DrawFocusRect

  EnumChildWindows

  GetScrollBarInfo

  ReleaseCapture

  UnhookWindowsHookEx

  LoadCursorW

  GetCapture

  SetCapture

  CreatePopupMenu

  ScrollWindow

  ShowCaret

  GetMenuItemID

  GetLastActivePopup

  CharLowerBuffW

  GetSystemMetrics

  SetWindowLongW

  PostMessageW

  DrawMenuBar

  SetParent

  IsZoomed

  CharUpperBuffW

  GetClientRect

  IsChild

  ClientToScreen

  GetClipboardData

  SetWindowPlacement

  IsIconic

  CallNextHookEx

  GetMonitorInfoW

  ShowWindow

  CheckMenuItem

  CharUpperW

  DefWindowProcW

  GetForegroundWindow

  SetForegroundWindow

  GetWindowTextW

  EnableWindow

  GetShellWindow

  DestroyWindow

  IsDialogMessageW

  EndMenu

  RegisterClassW

  CharNextW

  GetWindowThreadProcessId

  RedrawWindow

  GetDC

  GetFocus

  SetFocus

  EndPaint

  ReleaseDC

  MsgWaitForMultipleObjectsEx

  LoadKeyboardLayoutW

  GetClassLongW

  ActivateKeyboardLayout

  GetParent

  DrawTextW

  SetScrollRange

  InsertMenuItemW

  PeekMessageA

  GetPropW

  SetClassLongW

  MessageBoxW

  MessageBeep

  SetPropW

  RemovePropW

  UpdateWindow

  GetSubMenu

  MsgWaitForMultipleObjects

  DestroyMenu

  DestroyIcon

  SetWindowsHookExW

  IsWindowVisible

  DispatchMessageA

  UnregisterClassW

  GetTopWindow

  SendMessageW

  AdjustWindowRectEx

  DrawIcon

  GetLastInputInfo

  IsWindow

  EnumThreadWindows

  InvalidateRect

  GetKeyboardState

  DrawFrameControl

  ScreenToClient

  SetCursor

  CreateIcon

  CreateMenu

  LoadStringW

  CharLowerW

  SetWindowPos

  SetWindowRgn

  GetMenuItemCount

  RemoveMenu

  GetSysColorBrush

  GetKeyboardLayoutNameW

  GetWindowDC

  TranslateMessage

  DrawTextExW

  MapWindowPoints

  EnumDisplayMonitors

  CallWindowProcW

  DestroyCursor

  EnumClipboardFormats

  GetScrollInfo

  SetWindowTextW

  GetMessageExtraInfo

  EnableScrollBar

  GetSysColor

  TrackPopupMenu

  DrawIconEx

  PostQuitMessage

  GetClassNameW

  ShowScrollBar

  EnableMenuItem

  GetIconInfo

  GetMessagePos

  SetScrollInfo

  GetKeyNameTextW

  GetDesktopWindow

  GetCursorPos

  SetCursorPos

  HideCaret

  GetMenu

  GetMenuState

  SetMenu

  SetRect

  GetKeyState

  FindWindowExW

  MonitorFromPoint

  ValidateRect

  SystemParametersInfoW

  LoadIconW

  GetCursor

  GetWindow

  GetWindowLongW

  GetWindowRect

  InsertMenuW

  KillTimer

  WaitMessage

  IsWindowEnabled

  IsDialogMessageA

  TranslateMDISysAccel

  GetWindowPlacement

  CreateIconIndirect

  FindWindowW

  DeleteMenu

  GetKeyboardLayout

  version

  GetFileVersionInfoSizeW

  VerQueryValueW

  GetFileVersionInfoW

  oleaut32

  SafeArrayPutElement

  GetErrorInfo

  VariantInit

  VariantClear

  SysFreeString

  SafeArrayAccessData

  SysReAllocStringLen

  SafeArrayCreate

  SafeArrayGetElement

  GetActiveObject

  SysAllocStringLen

  SafeArrayUnaccessData

  SafeArrayPtrOfIndex

  VariantCopy

  SafeArrayGetUBound

  SafeArrayGetLBound

  VariantCopyInd

  VariantChangeType

  advapi32

  RegSetValueExW

  RegEnumKeyExW

  GetUserNameW

  CloseEventLog

  RegDeleteKeyW

  NotifyChangeEventLog

  RegOpenKeyExW

  RegQueryInfoKeyW

  RegDeleteValueW

  GetNumberOfEventLogRecords

  RegNotifyChangeKeyValue

  OpenEventLogW

  RegFlushKey

  RegQueryValueExW

  RegEnumValueW

  ReadEventLogW

  RegCloseKey

  RegCreateKeyExW

  msvcrt

  isupper

  isalpha

  isalnum

  toupper

  memchr

  memcmp

  memcpy

  memset

  isprint

  isspace

  iscntrl

  isxdigit

  ispunct

  isgraph

  islower

  tolower

  winhttp

  WinHttpGetIEProxyConfigForCurrentUser

  WinHttpSetTimeouts

  WinHttpSetStatusCallback

  WinHttpConnect

  WinHttpReceiveResponse

  WinHttpQueryAuthSchemes

  WinHttpGetProxyForUrl

  WinHttpReadData

  WinHttpCloseHandle

  WinHttpQueryHeaders

  WinHttpOpenRequest

  WinHttpAddRequestHeaders

  WinHttpOpen

  WinHttpWriteData

  WinHttpSetCredentials

  WinHttpQueryDataAvailable

  WinHttpSetOption

  WinHttpSendRequest

  WinHttpQueryOption

  kernel32

  SetFileAttributesW

  QueryDosDeviceW

  GetACP

  GetExitCodeProcess

  CloseHandle

  LocalFree

  GetCurrentProcessId

  SizeofResource

  TerminateThread

  QueryPerformanceFrequency

  IsDebuggerPresent

  FindNextFileW

  GetFullPathNameW

  VirtualFree

  GetProcessHeap

  ExitProcess

  HeapAlloc

  GetCPInfoExW

  GlobalSize

  GetSystemTime

  RtlUnwind

  GetCPInfo

  GetStdHandle

  GetTimeZoneInformation

  FileTimeToLocalFileTime

  GetModuleHandleW

  FreeLibrary

  HeapDestroy

  FileTimeToDosDateTime

  ReadFile

  CreateProcessW

  GetLastError

  GetModuleFileNameW

  SetLastError

  GlobalAlloc

  GlobalUnlock

  FindResourceW

  OpenMutexW

  CreateThread

  CompareStringW

  MapViewOfFile

  CreateMutexW

  LoadLibraryA

  GetVolumeInformationW

  ResetEvent

  MulDiv

  FreeResource

  GetDriveTypeW

  GetVersion

  RaiseException

  GlobalAddAtomW

  FindFirstChangeNotificationW

  FormatMessageW

  OpenProcess

  SwitchToThread

  GetExitCodeThread

  GetCurrentThread

  GetLogicalDrives

  GlobalMemoryStatusEx

  ExpandEnvironmentStringsW

  GetPriorityClass

  LoadLibraryExW

  SetPriorityClass

  LockResource

  FileTimeToSystemTime

  GetCurrentThreadId

  UnhandledExceptionFilter

  MoveFileExW

  VirtualQuery

  GlobalFindAtomW

  VirtualQueryEx

  GlobalFree

  Sleep

  EnterCriticalSection

  SetFilePointer

  ReleaseMutex

  LoadResource

  SuspendThread

  GetTickCount

  WritePrivateProfileStringW

  GetFileSize

  GetStartupInfoW

  GlobalDeleteAtom

  GetFileAttributesW

  InitializeCriticalSection

  GetThreadPriority

  GetCurrentProcess

  SetThreadPriority

  GlobalLock

  VirtualAlloc

  GetTempPathW

  GetCommandLineW

  GetSystemInfo

  LeaveCriticalSection

  GetProcAddress

  ResumeThread

  GetLogicalDriveStringsW

  GetVersionExW

  VerifyVersionInfoW

  HeapCreate

  GetWindowsDirectoryW

  DeviceIoControl

  LCMapStringW

  GetDiskFreeSpaceW

  VerSetConditionMask

  FindFirstFileW

  GetUserDefaultUILanguage

  UnmapViewOfFile

  GlobalHandle

  lstrlenW

  QueryPerformanceCounter

  SetEndOfFile

  HeapFree

  WideCharToMultiByte

  FindClose

  MultiByteToWideChar

  CreateMutexA

  LoadLibraryW

  SetEvent

  CreateFileW

  GetLocaleInfoW

  EnumResourceNamesW

  GetSystemDirectoryW

  DeleteFileW

  FindCloseChangeNotification

  GetEnvironmentVariableW

  GetLocalTime

  WaitForSingleObject

  GetSystemPowerStatus

  WriteFile

  CreateFileMappingW

  ExitThread

  CreatePipe

  DeleteCriticalSection

  GetDateFormatW

  TlsGetValue

  SetErrorMode

  GetComputerNameW

  IsValidLocale

  TlsSetValue

  CreateDirectoryW

  GetSystemDefaultUILanguage

  EnumCalendarInfoW

  LocalAlloc

  RemoveDirectoryW

  CreateEventW

  GetPrivateProfileStringW

  WaitForMultipleObjectsEx

  GetThreadLocale

  SetThreadLocale

  sqlite3

  sqlite3_close

  sqlite3_free

  sqlite3_open

  sqlite3_exec

  ole32

  IsEqualGUID

  ProgIDFromCLSID

  OleInitialize

  CLSIDFromProgID

  OleUninitialize

  CoInitialize

  CoCreateInstance

  CoUninitialize

  CoTaskMemFree

  CoTaskMemAlloc

  StringFromCLSID

  gdi32

  Arc

  Pie

  SetBkMode

  SelectPalette

  CreateCompatibleBitmap

  GetEnhMetaFileHeader

  ExcludeClipRect

  SetWindowOrgEx

  RectVisible

  MaskBlt

  AngleArc

  DeleteEnhMetaFile

  ResizePalette

  Chord

  SetTextColor

  SetDIBits

  StretchBlt

  SetViewportOrgEx

  CreateRectRgn

  RealizePalette

  GetDIBColorTable

  SetDIBColorTable

  RoundRect

  RestoreDC

  SetRectRgn

  GetTextMetricsW

  GetWindowOrgEx

  CreatePalette

  CreateBrushIndirect

  PatBlt

  SetEnhMetaFileBits

  PolyBezierTo

  GetStockObject

  CreateSolidBrush

  Polygon

  Rectangle

  MoveToEx

  DeleteDC

  SaveDC

  PlayEnhMetaFile

  BitBlt

  Ellipse

  FrameRgn

  GetDeviceCaps

  GetBitmapBits

  GetTextExtentPoint32W

  GetClipBox

  Polyline

  IntersectClipRect

  GetEnhMetaFileBits

  GetSystemPaletteEntries

  CreateBitmap

  SetWinMetaFileBits

  CreateDIBitmap

  GetStretchBltMode

  CreateDIBSection

  CreatePenIndirect

  GetDIBits

  GetEnhMetaFilePaletteEntries

  SetStretchBltMode

  CreateFontIndirectW

  PolyBezier

  LineTo

  GetRgnBox

  CreateHalftonePalette

  DeleteObject

  SelectObject

  ExtFloodFill

  UnrealizeObject

  CopyEnhMetaFileW

  SetBkColor

  CreateCompatibleDC

  GetObjectW

  GetBrushOrgEx

  GetCurrentPositionEx

  GetWinMetaFileBits

  SetROP2

  GetNearestPaletteIndex

  GetTextExtentPointW

  ExtTextOutW

  SetBrushOrgEx

  GetEnhMetaFileDescriptionW

  GetPixel

  ArcTo

  GdiFlush

  SetPixel

  EnumFontFamiliesExW

  StretchDIBits

  GetPaletteEntries

  Exports

  Exports

  __dbk_fcall_wrapper

  dbkFCallWrapperAddr

  Sections

  .text

  Size: 3.7MB - Virtual size: 3.7MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .itext

  Size: 16KB - Virtual size: 15KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 136KB - Virtual size: 136KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 30KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 14KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .didata

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 512B - Virtual size: 117B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .tls

  Size: - Virtual size: 88B

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 512B - Virtual size: 93B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 337KB - Virtual size: 336KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 802KB - Virtual size: 802KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• WinThruster/WinThruster.exe

  .exe windows:6 windows x86 arch:x86

  0c11072c16f540b4f0df077a19f96d0d

  
  

  Code Sign

  48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

  Certificate

  Issuer

  CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  25-05-2021 00:00

  Not After

  31-12-2028 23:59

  Subject

  CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e

  Certificate

  Issuer

  CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

  Not Before

  22-03-2021 00:00

  Not After

  21-03-2036 23:59

  Subject

  CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  f0:6c:33:7b:02:62:01:7f:ca:46:6b:d7:4c:53:0b:a5

  Certificate

  Issuer

  CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

  Not Before

  05-12-2023 00:00

  Not After

  04-12-2026 23:59

  Subject

  SERIALNUMBER=E0460582008-6,CN=Solvusoft Corporation,O=Solvusoft Corporation,ST=Nevada,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13064e6576616461,1.3.6.1.4.1.311.60.2.1.3=#13025553

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

  Certificate

  Issuer

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  03-05-2023 00:00

  Not After

  02-08-2034 23:59

  Subject

  CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-05-2019 00:00

  Not After

  18-01-2038 23:59

  Subject

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:e1:4d:24:d9:a2:3e:ab:8e:fe:3f:81:4e:73:3a:0d:0c:ac:76:9b:00:1d:f3:05:6d:3c:8c:9c:9c:35:c1:d4

  Signer

  Actual PE Digest

  04:e1:4d:24:d9:a2:3e:ab:8e:fe:3f:81:4e:73:3a:0d:0c:ac:76:9b:00:1d:f3:05:6d:3c:8c:9c:9c:35:c1:d4

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ws2_32

  ntohl

  htons

  htonl

  select

  WSAStartup

  __WSAFDIsSet

  WSACleanup

  closesocket

  socket

  recv

  ioctlsocket

  WSAGetLastError

  GetNameInfoW

  connect

  shutdown

  inet_addr

  send

  version

  GetFileVersionInfoSizeW

  VerQueryValueW

  GetFileVersionInfoW

  user32

  CopyImage

  MoveWindow

  SetMenuItemInfoW

  GetMenuItemInfoW

  DefFrameProcW

  GetDlgCtrlID

  FrameRect

  RegisterWindowMessageW

  GetMenuStringW

  FillRect

  SendMessageA

  IsClipboardFormatAvailable

  EnumWindows

  ShowOwnedPopups

  GetClassInfoW

  GetScrollRange

  SetActiveWindow

  GetActiveWindow

  DrawEdge

  GetKeyboardLayoutList

  LoadBitmapW

  EnumChildWindows

  GetScrollBarInfo

  UnhookWindowsHookEx

  SetCapture

  GetCapture

  CreatePopupMenu

  ShowCaret

  GetMenuItemID

  CharLowerBuffW

  PostMessageW

  SetWindowLongW

  IsZoomed

  SetParent

  DrawMenuBar

  GetClientRect

  IsChild

  IntersectRect

  IsIconic

  CallNextHookEx

  ShowWindow

  SetForegroundWindow

  GetWindowTextW

  GetAsyncKeyState

  IsDialogMessageW

  DestroyWindow

  RegisterClassW

  EndMenu

  CharNextW

  GetFocus

  GetDC

  SetFocus

  ReleaseDC

  ExitWindowsEx

  GetClassLongW

  SetScrollRange

  DrawTextW

  PeekMessageA

  MessageBeep

  SetClassLongW

  LockWindowUpdate

  RemovePropW

  GetSubMenu

  EqualRect

  DestroyIcon

  IsWindowVisible

  PtInRect

  DispatchMessageA

  UnregisterClassW

  GetTopWindow

  SendMessageW

  GetMessageTime

  NotifyWinEvent

  CreateMenu

  LoadStringW

  CharLowerW

  SetWindowRgn

  SetWindowPos

  GetMenuItemCount

  GetSysColorBrush

  GetWindowDC

  DrawTextExW

  CharLowerBuffA

  EnumClipboardFormats

  ScrollDC

  GetScrollInfo

  SetWindowTextW

  GetMessageExtraInfo

  GetSysColor

  EnableScrollBar

  TrackPopupMenu

  DrawIconEx

  GetClassNameW

  GetMessagePos

  GetIconInfo

  SetScrollInfo

  GetKeyNameTextW

  GetDesktopWindow

  SetCursorPos

  GetCursorPos

  SetMenu

  GetMenuState

  GetMenu

  SetRect

  GetKeyState

  IsRectEmpty

  ValidateRect

  GetCursor

  KillTimer

  BeginDeferWindowPos

  WaitMessage

  TranslateMDISysAccel

  GetWindowPlacement

  GetClipboardFormatNameW

  CreateIconIndirect

  CreateWindowExW

  ChildWindowFromPoint

  GetMessageW

  GetDCEx

  InsertMenuItemA

  PeekMessageW

  MonitorFromWindow

  GetUpdateRect

  MessageBoxA

  SetTimer

  WindowFromPoint

  BeginPaint

  RegisterClipboardFormatW

  MapVirtualKeyW

  OffsetRect

  IsWindowUnicode

  DispatchMessageW

  TrackPopupMenuEx

  DefMDIChildProcW

  GetSystemMenu

  SetScrollPos

  GetScrollPos

  InflateRect

  DrawFocusRect

  ReleaseCapture

  LoadCursorW

  ScrollWindow

  GetLastActivePopup

  UnionRect

  GetCursorInfo

  GetSystemMetrics

  CharUpperBuffW

  ClientToScreen

  SetClipboardData

  GetClipboardData

  SetWindowPlacement

  GetMonitorInfoW

  CheckMenuItem

  CharUpperW

  DefWindowProcW

  GetForegroundWindow

  ToAscii

  EnableWindow

  GetWindowThreadProcessId

  RedrawWindow

  EndPaint

  MsgWaitForMultipleObjectsEx

  LoadKeyboardLayoutW

  ActivateKeyboardLayout

  GetParent

  InsertMenuItemW

  GetPropW

  MessageBoxW

  SetPropW

  UpdateWindow

  MsgWaitForMultipleObjects

  OemToCharA

  DestroyMenu

  SetWindowsHookExW

  EmptyClipboard

  GetDlgItem

  AdjustWindowRectEx

  IsWindow

  DrawIcon

  EnumThreadWindows

  InvalidateRect

  GetKeyboardState

  ScreenToClient

  DrawFrameControl

  BringWindowToTop

  SetCursor

  CreateIcon

  RemoveMenu

  SubtractRect

  GetKeyboardLayoutNameW

  OpenClipboard

  TranslateMessage

  MapWindowPoints

  EnumDisplayMonitors

  CallWindowProcW

  CloseClipboard

  DestroyCursor

  CharUpperBuffA

  CopyIcon

  PostQuitMessage

  ShowScrollBar

  EnableMenuItem

  DeferWindowPos

  HideCaret

  EndDeferWindowPos

  FindWindowExW

  MonitorFromPoint

  LoadIconW

  SystemParametersInfoW

  GetWindow

  GetWindowLongW

  GetWindowRect

  InsertMenuW

  IsWindowEnabled

  IsDialogMessageA

  GetMenuDefaultItem

  FindWindowW

  GetKeyboardLayout

  DeleteMenu

  oleaut32

  SafeArrayPutElement

  GetErrorInfo

  VariantInit

  VariantClear

  SysFreeString

  SafeArrayAccessData

  SysReAllocStringLen

  SafeArrayCreate

  SafeArrayGetElement

  GetActiveObject

  SysAllocStringLen

  SafeArrayUnaccessData

  SafeArrayPtrOfIndex

  VariantCopy

  SafeArrayGetUBound

  SafeArrayGetLBound

  VariantCopyInd

  VariantChangeType

  advapi32

  CloseServiceHandle

  RegSetValueExW

  ControlService

  ConvertStringSidToSidW

  GetUserNameW

  RegQueryInfoKeyW

  DeleteService

  StartServiceW

  LookupAccountSidW

  ChangeServiceConfigW

  RegCreateKeyExW

  OpenServiceW

  EnumDependentServicesW

  RegEnumKeyExW

  QueryServiceConfig2W

  QueryServiceStatus

  AdjustTokenPrivileges

  QueryServiceConfigW

  RegDeleteKeyW

  LookupPrivilegeValueW

  OpenSCManagerW

  RegOpenKeyExA

  RegOpenKeyExW

  OpenProcessToken

  RegDeleteValueW

  RegFlushKey

  RegEnumValueW

  RegQueryValueExW

  RegCloseKey

  EnumServicesStatusW

  msvcrt

  isupper

  isalpha

  isalnum

  toupper

  memchr

  memcmp

  memcpy

  memset

  isprint

  isspace

  iscntrl

  isxdigit

  ispunct

  isgraph

  islower

  tolower

  netapi32

  NetApiBufferFree

  NetShareEnum

  winhttp

  WinHttpGetIEProxyConfigForCurrentUser

  WinHttpSetTimeouts

  WinHttpSetStatusCallback

  WinHttpConnect

  WinHttpReceiveResponse

  WinHttpQueryAuthSchemes

  WinHttpGetProxyForUrl

  WinHttpReadData

  WinHttpCloseHandle

  WinHttpQueryHeaders

  WinHttpOpenRequest

  WinHttpAddRequestHeaders

  WinHttpOpen

  WinHttpWriteData

  WinHttpSetCredentials

  WinHttpQueryDataAvailable

  WinHttpSetOption

  WinHttpSendRequest

  WinHttpQueryOption

  kernel32

  SetFileAttributesW

  GetFileType

  QueryDosDeviceW

  GetACP

  GetExitCodeProcess

  CloseHandle

  LocalFree

  GetCurrentProcessId

  SizeofResource

  lstrcmpiW

  TerminateThread

  QueryPerformanceFrequency

  SetProcessWorkingSetSize

  IsDebuggerPresent

  FindNextFileW

  GetFullPathNameW

  VirtualFree

  GetProcessHeap

  ExitProcess

  HeapAlloc

  GetCPInfoExW

  GlobalSize

  GetLongPathNameW

  RtlUnwind

  GetCPInfo

  GetStdHandle

  GetTimeZoneInformation

  FileTimeToLocalFileTime

  SystemTimeToTzSpecificLocalTime

  GetModuleHandleW

  FreeLibrary

  HeapDestroy

  FileTimeToDosDateTime

  ReadFile

  GetUserDefaultLCID

  GetDiskFreeSpaceA

  FindFirstFileA

  CreateProcessW

  GetLastError

  GetModuleFileNameW

  SetLastError

  GlobalAlloc

  GlobalUnlock

  FindResourceW

  lstrlenA

  OpenMutexW

  CreateThread

  CompareStringW

  CopyFileW

  lstrcpyA

  MapViewOfFile

  CreateMutexW

  LoadLibraryA

  GetVolumeInformationW

  ResetEvent

  MulDiv

  CreateFileA

  FreeResource

  GetDriveTypeW

  GetVersion

  RaiseException

  GlobalAddAtomW

  FormatMessageW

  OpenProcess

  SwitchToThread

  GetExitCodeThread

  GetCurrentThread

  GetLogicalDrives

  GlobalMemoryStatusEx

  ExpandEnvironmentStringsW

  LockResource

  LoadLibraryExW

  TerminateProcess

  FileTimeToSystemTime

  GetCurrentThreadId

  UnhandledExceptionFilter

  MoveFileExW

  GlobalFindAtomW

  VirtualQuery

  GlobalFree

  VirtualQueryEx

  Sleep

  EnterCriticalSection

  SetFilePointer

  ReleaseMutex

  LoadResource

  SuspendThread

  GetTickCount

  WritePrivateProfileStringW

  lstrcmpiA

  FindNextFileA

  GetTempFileNameW

  GetFileSize

  GlobalDeleteAtom

  GetStartupInfoW

  GetFileAttributesW

  InitializeCriticalSection

  GetThreadPriority

  GetCurrentProcess

  GlobalLock

  SetThreadPriority

  AllocConsole

  VirtualAlloc

  GetTempPathW

  GetCommandLineW

  GetSystemInfo

  LeaveCriticalSection

  GetProcAddress

  ResumeThread

  GetLogicalDriveStringsW

  GetVersionExW

  GetModuleHandleA

  VerifyVersionInfoW

  HeapCreate

  GetWindowsDirectoryW

  DeviceIoControl

  LCMapStringW

  GetDiskFreeSpaceW

  VerSetConditionMask

  FindFirstFileW

  GetUserDefaultUILanguage

  GetConsoleOutputCP

  UnmapViewOfFile

  GetConsoleCP

  GlobalHandle

  lstrlenW

  QueryPerformanceCounter

  SetEndOfFile

  lstrcmpW

  HeapFree

  WideCharToMultiByte

  FindClose

  MultiByteToWideChar

  CreateMutexA

  LoadLibraryW

  SetEvent

  GetLocaleInfoW

  CreateFileW

  EnumResourceNamesW

  GetSystemDirectoryW

  GetDriveTypeA

  DeleteFileW

  IsDBCSLeadByteEx

  FreeConsole

  GetEnvironmentVariableW

  GetLocalTime

  WaitForSingleObject

  WriteFile

  CreateFileMappingW

  ExitThread

  CreatePipe

  DeleteCriticalSection

  GetDateFormatW

  TlsGetValue

  SetErrorMode

  GetComputerNameW

  IsValidLocale

  SleepEx

  TlsSetValue

  CreateDirectoryW

  GetSystemDefaultUILanguage

  EnumCalendarInfoW

  LocalAlloc

  RemoveDirectoryW

  CreateEventW

  GetPrivateProfileStringW

  WaitForMultipleObjectsEx

  GetThreadLocale

  SetThreadLocale

  sqlite3

  sqlite3_errcode

  sqlite3_bind_text

  sqlite3_close

  sqlite3_free

  sqlite3_column_bytes

  sqlite3_open

  sqlite3_last_insert_rowid

  sqlite3_bind_int

  sqlite3_column_int64

  sqlite3_exec

  sqlite3_bind_double

  sqlite3_column_decltype

  sqlite3_bind_blob

  sqlite3_prepare

  sqlite3_column_blob

  sqlite3_finalize

  sqlite3_errmsg

  sqlite3_column_name

  sqlite3_column_type

  sqlite3_column_text

  sqlite3_step

  sqlite3_column_count

  sqlite3_column_double

  wlanapi

  WlanOpenHandle

  WlanQueryInterface

  WlanEnumInterfaces

  WlanFreeMemory

  WlanCloseHandle

  shfolder

  SHGetFolderPathW

  wsock32

  gethostbyaddr

  WSACleanup

  gethostbyname

  bind

  gethostname

  closesocket

  WSAGetLastError

  connect

  inet_addr

  getpeername

  WSAAsyncSelect

  WSAAsyncGetServByName

  WSACancelAsyncRequest

  send

  ntohs

  htons

  WSAStartup

  getservbyname

  getsockname

  listen

  socket

  inet_ntoa

  ioctlsocket

  WSAAsyncGetHostByName

  gdi32

  Pie

  SetBkMode

  GetRandomRgn

  CreateCompatibleBitmap

  GetEnhMetaFileHeader

  CloseEnhMetaFile

  RectVisible

  AngleArc

  ResizePalette

  SetAbortProc

  SetTextColor

  GetTextColor

  StretchBlt

  RoundRect

  SelectClipRgn

  RestoreDC

  SetRectRgn

  GetTextMetricsW

  GetWindowOrgEx

  CreatePalette

  CreateDCW

  PolyBezierTo

  CreateICW

  GetStockObject

  CreateSolidBrush

  Polygon

  MoveToEx

  PlayEnhMetaFile

  Ellipse

  StartPage

  GetBitmapBits

  GetTextExtentPoint32A

  StartDocW

  GetSystemPaletteEntries

  GetEnhMetaFileBits

  GetEnhMetaFilePaletteEntries

  CreatePenIndirect

  SetMapMode

  GetMapMode

  CreateFontIndirectW

  PolyBezier

  LPtoDP

  EndDoc

  GetObjectW

  GetCurrentObject

  GetWinMetaFileBits

  SetROP2

  GetEnhMetaFileDescriptionW

  ArcTo

  CreateEnhMetaFileW

  Arc

  CreateRectRgnIndirect

  SelectPalette

  ExcludeClipRect

  MaskBlt

  SetWindowOrgEx

  CreatePatternBrush

  EndPage

  DeleteEnhMetaFile

  Chord

  SetDIBits

  SetViewportOrgEx

  CreateRectRgn

  RealizePalette

  SetDIBColorTable

  GetDIBColorTable

  CreateBrushIndirect

  PatBlt

  SetEnhMetaFileBits

  Rectangle

  SaveDC

  DeleteDC

  BitBlt

  FrameRgn

  GetDeviceCaps

  GetTextExtentPoint32W

  GetClipBox

  GetClipRgn

  IntersectClipRect

  Polyline

  CreateBitmap

  CombineRgn

  SetWinMetaFileBits

  CreateDIBitmap

  GetStretchBltMode

  CreateDIBSection

  SetStretchBltMode

  GetDIBits

  LineTo

  GetRgnBox

  EnumFontsW

  CreateHalftonePalette

  SelectObject

  DeleteObject

  ExtFloodFill

  UnrealizeObject

  CopyEnhMetaFileW

  OffsetRgn

  SetBkColor

  GetBkColor

  CreateCompatibleDC

  GetBrushOrgEx

  GetCurrentPositionEx

  GetNearestPaletteIndex

  CreateRoundRectRgn

  GetTextExtentPointW

  ExtTextOutW

  SetBrushOrgEx

  GetPixel

  GdiFlush

  SetPixel

  EnumFontFamiliesExW

  StretchDIBits

  GetPaletteEntries

  ntdll

  NtQuerySystemInformation

  winmm

  timeGetTime

  timeSetEvent

  timeKillEvent

  oleacc

  LresultFromObject

  AccessibleObjectFromWindow

  wininet

  InternetGetConnectedState

  winspool.drv

  DocumentPropertiesW

  ClosePrinter

  OpenPrinterW

  GetDefaultPrinterW

  EnumPrintersW

  comdlg32

  GetSaveFileNameW

  GetOpenFileNameW

  comctl32

  FlatSB_SetScrollInfo

  InitCommonControls

  ImageList_DragMove

  ImageList_Destroy

  _TrackMouseEvent

  ImageList_DragShowNolock

  ImageList_Add

  ImageList_GetDragImage

  FlatSB_SetScrollProp

  ImageList_Create

  ImageList_EndDrag

  ImageList_DrawEx

  ImageList_SetImageCount

  FlatSB_GetScrollPos

  FlatSB_SetScrollPos

  InitializeFlatSB

  FlatSB_GetScrollInfo

  ImageList_Write

  ImageList_DrawIndirect

  ImageList_SetBkColor

  ImageList_GetBkColor

  ImageList_BeginDrag

  ImageList_GetIcon

  ImageList_GetImageCount

  ImageList_DragEnter

  ImageList_GetIconSize

  ImageList_SetIconSize

  ImageList_Read

  ImageList_DragLeave

  ImageList_Draw

  ImageList_Remove

  ImageList_ReplaceIcon

  ImageList_SetOverlayImage

  shell32

  SHBrowseForFolderW

  SHGetSpecialFolderLocation

  Shell_NotifyIconW

  SHGetDataFromIDListW

  SHGetDataFromIDListA

  SHGetPathFromIDListW

  ShellExecuteExA

  ShellExecuteExW

  ExtractIconW

  SHGetMalloc

  ILCreateFromPathW

  SHGetFileInfoA

  SHGetFolderPathW

  SHGetDesktopFolder

  ILFree

  SHFileOperationA

  SHFileOperationW

  SHAppBarMessage

  ShellExecuteW

  ExtractIconExW

  crtdll

  isspace

  isprint

  tolower

  ole32

  CreateDataAdviseHolder

  CreateBindCtx

  MkParseDisplayName

  CoCreateInstance

  OleGetClipboard

  OleSetClipboard

  IsEqualGUID

  CreateStreamOnHGlobal

  CreateILockBytesOnHGlobal

  CLSIDFromProgID

  CoGetClassObject

  CoInitialize

  OleDraw

  CoTaskMemAlloc

  DoDragDrop

  StringFromCLSID

  RevokeDragDrop

  IsAccelerator

  CoUninitialize

  ReleaseStgMedium

  RegisterDragDrop

  StgOpenStorage

  OleInitialize

  ProgIDFromCLSID

  StgOpenStorageOnILockBytes

  CoInitializeEx

  OleUninitialize

  CoDisconnectObject

  StgIsStorageFile

  CoTaskMemFree

  OleSetMenuDescriptor

  iphlpapi

  GetAdaptersAddresses

  GetIpNetTable

  ConvertLengthToIpv4Mask

  SendARP

  Exports

  Exports

  __dbk_fcall_wrapper

  dbkFCallWrapperAddr

  Sections

  .text

  Size: 7.3MB - Virtual size: 7.3MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .itext

  Size: 19KB - Virtual size: 19KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 161KB - Virtual size: 160KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 33KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 20KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .didata

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 512B - Virtual size: 117B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .tls

  Size: - Virtual size: 92B

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 512B - Virtual size: 93B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 637KB - Virtual size: 637KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2.2MB - Virtual size: 2.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• WinThruster/ids.txt
• WinThruster/net.db
• WinThruster/sqlite3.dll

  .dll windows:4 windows x86 arch:x86

  e727d00364cd87d72f56e7ba919d1d40

  
  

  Code Sign

  48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

  Certificate

  Issuer

  CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  25-05-2021 00:00

  Not After

  31-12-2028 23:59

  Subject

  CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

  Certificate

  Issuer

  CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

  Not Before

  22-03-2021 00:00

  Not After

  21-03-2036 23:59

  Subject

  CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0d:16:b3:6a:00:0e:93:ec:51:49:b6:6f:d9:a4:31:5d

  Certificate

  Issuer

  CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

  Not Before

  06-05-2022 00:00

  Not After

  05-05-2025 23:59

  Subject

  CN=Solvusoft Corporation,O=Solvusoft Corporation,ST=Nevada,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43

  Certificate

  Issuer

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  11-05-2022 00:00

  Not After

  10-08-2033 23:59

  Subject

  CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-05-2019 00:00

  Not After

  18-01-2038 23:59

  Subject

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e7:78:f7:84:93:87:3a:3e:30:43:90:c8:00:53:e1:ee:d0:39:03:43:6e:32:f8:8e:6d:da:0b:c6:fd:c0:3a:c5

  Signer

  Actual PE Digest

  e7:78:f7:84:93:87:3a:3e:30:43:90:c8:00:53:e1:ee:d0:39:03:43:6e:32:f8:8e:6d:da:0b:c6:fd:c0:3a:c5

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  AreFileApisANSI

  CloseHandle

  CreateFileA

  CreateFileMappingA

  CreateFileMappingW

  CreateFileW

  CreateMutexW

  DeleteCriticalSection

  DeleteFileA

  DeleteFileW

  EnterCriticalSection

  FlushFileBuffers

  FlushViewOfFile

  FormatMessageA

  FormatMessageW

  FreeLibrary

  GetCurrentProcess

  GetCurrentProcessId

  GetCurrentThreadId

  GetDiskFreeSpaceA

  GetDiskFreeSpaceW

  GetFileAttributesA

  GetFileAttributesExW

  GetFileAttributesW

  GetFileSize

  GetFullPathNameA

  GetFullPathNameW

  GetLastError

  GetModuleHandleA

  GetProcAddress

  GetProcessHeap

  GetSystemInfo

  GetSystemTime

  GetSystemTimeAsFileTime

  GetTempPathA

  GetTempPathW

  GetTickCount

  GetVersionExA

  GetVersionExW

  HeapAlloc

  HeapCompact

  HeapCreate

  HeapDestroy

  HeapFree

  HeapReAlloc

  HeapSize

  HeapValidate

  InitializeCriticalSection

  InterlockedCompareExchange

  LeaveCriticalSection

  LoadLibraryA

  LoadLibraryW

  LocalFree

  LockFile

  LockFileEx

  MapViewOfFile

  MultiByteToWideChar

  OutputDebugStringA

  OutputDebugStringW

  QueryPerformanceCounter

  ReadFile

  SetEndOfFile

  SetFilePointer

  SetUnhandledExceptionFilter

  Sleep

  SystemTimeToFileTime

  TerminateProcess

  TlsGetValue

  TryEnterCriticalSection

  UnhandledExceptionFilter

  UnlockFile

  UnlockFileEx

  UnmapViewOfFile

  VirtualProtect

  VirtualQuery

  WaitForSingleObject

  WaitForSingleObjectEx

  WideCharToMultiByte

  WriteFile

  msvcrt

  __dllonexit

  __setusermatherr

  _amsg_exit

  _beginthreadex

  _endthreadex

  _errno

  _initterm

  _iob

  _lock

  _onexit

  localtime

  calloc

  cosh

  fprintf

  free

  fwrite

  malloc

  memcmp

  memmove

  qsort

  realloc

  sinh

  strcmp

  strcspn

  strlen

  strncmp

  strrchr

  _unlock

  abort

  acos

  asin

  atan

  tan

  tanh

  vfprintf

  Exports

  Exports

  sqlite3_aggregate_context

  sqlite3_aggregate_count

  sqlite3_auto_extension

  sqlite3_autovacuum_pages

  sqlite3_backup_finish

  sqlite3_backup_init

  sqlite3_backup_pagecount

  sqlite3_backup_remaining

  sqlite3_backup_step

  sqlite3_bind_blob

  sqlite3_bind_blob64

  sqlite3_bind_double

  sqlite3_bind_int

  sqlite3_bind_int64

  sqlite3_bind_null

  sqlite3_bind_parameter_count

  sqlite3_bind_parameter_index

  sqlite3_bind_parameter_name

  sqlite3_bind_pointer

  sqlite3_bind_text

  sqlite3_bind_text16

  sqlite3_bind_text64

  sqlite3_bind_value

  sqlite3_bind_zeroblob

  sqlite3_bind_zeroblob64

  sqlite3_blob_bytes

  sqlite3_blob_close

  sqlite3_blob_open

  sqlite3_blob_read

  sqlite3_blob_reopen

  sqlite3_blob_write

  sqlite3_busy_handler

  sqlite3_busy_timeout

  sqlite3_cancel_auto_extension

  sqlite3_changes

  sqlite3_changes64

  sqlite3_clear_bindings

  sqlite3_close

  sqlite3_close_v2

  sqlite3_collation_needed

  sqlite3_collation_needed16

  sqlite3_column_blob

  sqlite3_column_bytes

  sqlite3_column_bytes16

  sqlite3_column_count

  sqlite3_column_database_name

  sqlite3_column_database_name16

  sqlite3_column_decltype

  sqlite3_column_decltype16

  sqlite3_column_double

  sqlite3_column_int

  sqlite3_column_int64

  sqlite3_column_name

  sqlite3_column_name16

  sqlite3_column_origin_name

  sqlite3_column_origin_name16

  sqlite3_column_table_name

  sqlite3_column_table_name16

  sqlite3_column_text

  sqlite3_column_text16

  sqlite3_column_type

  sqlite3_column_value

  sqlite3_commit_hook

  sqlite3_compileoption_get

  sqlite3_compileoption_used

  sqlite3_complete

  sqlite3_complete16

  sqlite3_config

  sqlite3_context_db_handle

  sqlite3_create_collation

  sqlite3_create_collation16

  sqlite3_create_collation_v2

  sqlite3_create_filename

  sqlite3_create_function

  sqlite3_create_function16

  sqlite3_create_function_v2

  sqlite3_create_module

  sqlite3_create_module_v2

  sqlite3_create_window_function

  sqlite3_data_count

  sqlite3_data_directory

  sqlite3_database_file_object

  sqlite3_db_cacheflush

  sqlite3_db_config

  sqlite3_db_filename

  sqlite3_db_handle

  sqlite3_db_mutex

  sqlite3_db_name

  sqlite3_db_readonly

  sqlite3_db_release_memory

  sqlite3_db_status

  sqlite3_declare_vtab

  sqlite3_deserialize

  sqlite3_drop_modules

  sqlite3_enable_load_extension

  sqlite3_enable_shared_cache

  sqlite3_errcode

  sqlite3_errmsg

  sqlite3_errmsg16

  sqlite3_error_offset

  sqlite3_errstr

  sqlite3_exec

  sqlite3_expanded_sql

  sqlite3_expired

  sqlite3_extended_errcode

  sqlite3_extended_result_codes

  sqlite3_file_control

  sqlite3_filename_database

  sqlite3_filename_journal

  sqlite3_filename_wal

  sqlite3_finalize

  sqlite3_free

  sqlite3_free_filename

  sqlite3_free_table

  sqlite3_get_autocommit

  sqlite3_get_auxdata

  sqlite3_get_table

  sqlite3_global_recover

  sqlite3_hard_heap_limit64

  sqlite3_initialize

  sqlite3_interrupt

  sqlite3_keyword_check

  sqlite3_keyword_count

  sqlite3_keyword_name

  sqlite3_last_insert_rowid

  sqlite3_libversion

  sqlite3_libversion_number

  sqlite3_limit

  sqlite3_load_extension

  sqlite3_log

  sqlite3_malloc

  sqlite3_malloc64

  sqlite3_memory_alarm

  sqlite3_memory_highwater

  sqlite3_memory_used

  sqlite3_mprintf

  sqlite3_msize

  sqlite3_mutex_alloc

  sqlite3_mutex_enter

  sqlite3_mutex_free

  sqlite3_mutex_leave

  sqlite3_mutex_try

  sqlite3_next_stmt

  sqlite3_open

  sqlite3_open16

  sqlite3_open_v2

  sqlite3_os_end

  sqlite3_os_init

  sqlite3_overload_function

  sqlite3_prepare

  sqlite3_prepare16

  sqlite3_prepare16_v2

  sqlite3_prepare16_v3

  sqlite3_prepare_v2

  sqlite3_prepare_v3

  sqlite3_preupdate_blobwrite

  sqlite3_preupdate_count

  sqlite3_preupdate_depth

  sqlite3_preupdate_hook

  sqlite3_preupdate_new

  sqlite3_preupdate_old

  sqlite3_profile

  sqlite3_progress_handler

  sqlite3_randomness

  sqlite3_realloc

  sqlite3_realloc64

  sqlite3_release_memory

  sqlite3_reset

  sqlite3_reset_auto_extension

  sqlite3_result_blob

  sqlite3_result_blob64

  sqlite3_result_double

  sqlite3_result_error

  sqlite3_result_error16

  sqlite3_result_error_code

  sqlite3_result_error_nomem

  sqlite3_result_error_toobig

  sqlite3_result_int

  sqlite3_result_int64

  sqlite3_result_null

  sqlite3_result_pointer

  sqlite3_result_subtype

  sqlite3_result_text

  sqlite3_result_text16

  sqlite3_result_text16be

  sqlite3_result_text16le

  sqlite3_result_text64

  sqlite3_result_value

  sqlite3_result_zeroblob

  sqlite3_result_zeroblob64

  sqlite3_rollback_hook

  sqlite3_rtree_geometry_callback

  sqlite3_rtree_query_callback

  sqlite3_serialize

  sqlite3_set_authorizer

  sqlite3_set_auxdata

  sqlite3_set_last_insert_rowid

  sqlite3_shutdown

  sqlite3_sleep

  sqlite3_snprintf

  sqlite3_soft_heap_limit

  sqlite3_soft_heap_limit64

  sqlite3_sourceid

  sqlite3_sql

  sqlite3_status

  sqlite3_status64

  sqlite3_step

  sqlite3_stmt_busy

  sqlite3_stmt_isexplain

  sqlite3_stmt_readonly

  sqlite3_stmt_status

  sqlite3_str_append

  sqlite3_str_appendall

  sqlite3_str_appendchar

  sqlite3_str_appendf

  sqlite3_str_errcode

  sqlite3_str_finish

  sqlite3_str_length

  sqlite3_str_new

  sqlite3_str_reset

  sqlite3_str_value

  sqlite3_str_vappendf

  sqlite3_strglob

  sqlite3_stricmp

  sqlite3_strlike

  sqlite3_strnicmp

  sqlite3_system_errno

  sqlite3_table_column_metadata

  sqlite3_temp_directory

  sqlite3_test_control

  sqlite3_thread_cleanup

  sqlite3_threadsafe

  sqlite3_total_changes

  sqlite3_total_changes64

  sqlite3_trace

  sqlite3_trace_v2

  sqlite3_transfer_bindings

  sqlite3_txn_state

  sqlite3_update_hook

  sqlite3_uri_boolean

  sqlite3_uri_int64

  sqlite3_uri_key

  sqlite3_uri_parameter

  sqlite3_user_data

  sqlite3_value_blob

  sqlite3_value_bytes

  sqlite3_value_bytes16

  sqlite3_value_double

  sqlite3_value_dup

  sqlite3_value_encoding

  sqlite3_value_free

  sqlite3_value_frombind

  sqlite3_value_int

  sqlite3_value_int64

  sqlite3_value_nochange

  sqlite3_value_numeric_type

  sqlite3_value_pointer

  sqlite3_value_subtype

  sqlite3_value_text

  sqlite3_value_text16

  sqlite3_value_text16be

  sqlite3_value_text16le

  sqlite3_value_type

  sqlite3_version

  sqlite3_vfs_find

  sqlite3_vfs_register

  sqlite3_vfs_unregister

  sqlite3_vmprintf

  sqlite3_vsnprintf

  sqlite3_vtab_collation

  sqlite3_vtab_config

  sqlite3_vtab_distinct

  sqlite3_vtab_in

  sqlite3_vtab_in_first

  sqlite3_vtab_in_next

  sqlite3_vtab_nochange

  sqlite3_vtab_on_conflict

  sqlite3_vtab_rhs_value

  sqlite3_wal_autocheckpoint

  sqlite3_wal_checkpoint

  sqlite3_wal_checkpoint_v2

  sqlite3_wal_hook

  sqlite3_win32_is_nt

  sqlite3_win32_mbcs_to_utf8

  sqlite3_win32_mbcs_to_utf8_v2

  sqlite3_win32_set_directory

  sqlite3_win32_set_directory16

  sqlite3_win32_set_directory8

  sqlite3_win32_sleep

  sqlite3_win32_unicode_to_utf8

  sqlite3_win32_utf8_to_mbcs

  sqlite3_win32_utf8_to_mbcs_v2

  sqlite3_win32_utf8_to_unicode

  sqlite3_win32_write_debug

  sqlite3changegroup_add

  sqlite3changegroup_add_strm

  sqlite3changegroup_delete

  sqlite3changegroup_new

  sqlite3changegroup_output

  sqlite3changegroup_output_strm

  sqlite3changeset_apply

  sqlite3changeset_apply_strm

  sqlite3changeset_apply_v2

  sqlite3changeset_apply_v2_strm

  sqlite3changeset_concat

  sqlite3changeset_concat_strm

  sqlite3changeset_conflict

  sqlite3changeset_finalize

  sqlite3changeset_fk_conflicts

  sqlite3changeset_invert

  sqlite3changeset_invert_strm

  sqlite3changeset_new

  sqlite3changeset_next

  sqlite3changeset_old

  sqlite3changeset_op

  sqlite3changeset_pk

  sqlite3changeset_start

  sqlite3changeset_start_strm

  sqlite3changeset_start_v2

  sqlite3changeset_start_v2_strm

  sqlite3rebaser_configure

  sqlite3rebaser_create

  sqlite3rebaser_delete

  sqlite3rebaser_rebase

  sqlite3rebaser_rebase_strm

  sqlite3session_attach

  sqlite3session_changeset

  sqlite3session_changeset_size

  sqlite3session_changeset_strm

  sqlite3session_config

  sqlite3session_create

  sqlite3session_delete

  sqlite3session_diff

  sqlite3session_enable

  sqlite3session_indirect

  sqlite3session_isempty

  sqlite3session_memory_used

  sqlite3session_object_config

  sqlite3session_patchset

  sqlite3session_patchset_strm

  sqlite3session_table_filter

  Sections

  .text

  Size: 718KB - Virtual size: 717KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 81KB - Virtual size: 81KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .bss

  Size: - Virtual size: 1KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .idata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .CRT

  Size: 512B - Virtual size: 44B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: 512B - Virtual size: 32B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /4

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /19

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /31

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /45

  Size: 11KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /57

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /70

  Size: 1024B - Virtual size: 803B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /81

  Size: 15KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  /92

  Size: 1024B - Virtual size: 848B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• WinThruster/topapps.txt
• WinThruster/unins000.dat
• WinThruster/unins000.exe

  .exe windows:6 windows x86 arch:x86

  9825b4c9a35eb9a5c5e347cb9ca988ee

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_BYTES_REVERSED_LO

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_BYTES_REVERSED_HI

  Imports

  mpr

  WNetEnumResourceW

  WNetGetUniversalNameW

  WNetGetConnectionW

  WNetCloseEnum

  WNetOpenEnumW

  comdlg32

  GetSaveFileNameW

  GetOpenFileNameW

  comctl32

  FlatSB_SetScrollInfo

  InitCommonControls

  ImageList_DragMove

  ImageList_Destroy

  _TrackMouseEvent

  ImageList_DragShowNolock

  ImageList_Add

  FlatSB_SetScrollProp

  ImageList_GetDragImage

  ImageList_Create

  ImageList_EndDrag

  ImageList_DrawEx

  ImageList_SetImageCount

  FlatSB_GetScrollPos

  FlatSB_SetScrollPos

  InitializeFlatSB

  FlatSB_GetScrollInfo

  ImageList_Write

  ImageList_SetBkColor

  ImageList_GetBkColor

  ImageList_BeginDrag

  ImageList_GetIcon

  ImageList_GetImageCount

  ImageList_DragEnter

  ImageList_GetIconSize

  ImageList_SetIconSize

  ImageList_Read

  ImageList_DragLeave

  ImageList_Draw

  ImageList_Remove

  shell32

  SHBrowseForFolderW

  SHGetMalloc

  SHGetFileInfoW

  SHChangeNotify

  Shell_NotifyIconW

  ShellExecuteW

  SHGetPathFromIDListW

  ShellExecuteExW

  user32

  CopyImage

  CreateWindowExW

  GetMenuItemInfoW

  SetMenuItemInfoW

  DefFrameProcW

  GetDCEx

  GetMessageW

  PeekMessageW

  MonitorFromWindow

  GetDlgCtrlID

  ScrollWindowEx

  SetTimer

  WindowFromPoint

  BeginPaint

  RegisterClipboardFormatW

  FrameRect

  MapVirtualKeyW

  OffsetRect

  IsWindowUnicode

  RegisterWindowMessageW

  FillRect

  GetMenuStringW

  DispatchMessageW

  SendMessageA

  DefMDIChildProcW

  EnumWindows

  GetClassInfoW

  GetSystemMenu

  WaitForInputIdle

  ShowOwnedPopups

  GetScrollRange

  GetScrollPos

  SetScrollPos

  GetActiveWindow

  SetActiveWindow

  DrawEdge

  InflateRect

  GetKeyboardLayoutList

  OemToCharBuffA

  LoadBitmapW

  DrawFocusRect

  EnumChildWindows

  GetScrollBarInfo

  SendNotifyMessageW

  ReleaseCapture

  UnhookWindowsHookEx

  LoadCursorW

  GetCapture

  SetCapture

  CreatePopupMenu

  ScrollWindow

  ShowCaret

  GetMenuItemID

  GetLastActivePopup

  CharLowerBuffW

  GetSystemMetrics

  SetWindowLongW

  PostMessageW

  DrawMenuBar

  SetParent

  IsZoomed

  CharUpperBuffW

  GetClientRect

  IsChild

  ClientToScreen

  SetWindowPlacement

  IsIconic

  CallNextHookEx

  GetMonitorInfoW

  ShowWindow

  CheckMenuItem

  CharUpperW

  DefWindowProcW

  GetForegroundWindow

  SetForegroundWindow

  GetWindowTextW

  EnableWindow

  DestroyWindow

  IsDialogMessageW

  EndMenu

  RegisterClassW

  CharNextW

  GetWindowThreadProcessId

  RedrawWindow

  GetDC

  GetFocus

  SetFocus

  EndPaint

  ExitWindowsEx

  ReleaseDC

  MsgWaitForMultipleObjectsEx

  LoadKeyboardLayoutW

  GetClassLongW

  ActivateKeyboardLayout

  GetParent

  CharToOemBuffA

  DrawTextW

  SetScrollRange

  InsertMenuItemW

  PeekMessageA

  GetPropW

  SetClassLongW

  MessageBoxW

  MessageBeep

  SetPropW

  SetRectEmpty

  UpdateWindow

  RemovePropW

  GetSubMenu

  MsgWaitForMultipleObjects

  DestroyMenu

  DestroyIcon

  SetWindowsHookExW

  IsWindowVisible

  DispatchMessageA

  UnregisterClassW

  GetTopWindow

  SendMessageW

  AdjustWindowRectEx

  DrawIcon

  IsWindow

  EnumThreadWindows

  InvalidateRect

  GetKeyboardState

  DrawFrameControl

  ScreenToClient

  SendMessageTimeoutW

  BringWindowToTop

  SetCursor

  CreateIcon

  CreateMenu

  LoadStringW

  CharLowerW

  SetWindowPos

  SetWindowRgn

  GetMenuItemCount

  RemoveMenu

  AppendMenuW

  GetSysColorBrush

  GetKeyboardLayoutNameW

  GetWindowDC

  TranslateMessage

  DrawTextExW

  MapWindowPoints

  EnumDisplayMonitors

  CallWindowProcW

  DestroyCursor

  ReplyMessage

  GetScrollInfo

  SetWindowTextW

  GetMessageExtraInfo

  EnableScrollBar

  GetSysColor

  TrackPopupMenu

  DrawIconEx

  PostQuitMessage

  GetClassNameW

  ShowScrollBar

  EnableMenuItem

  GetIconInfo

  GetMessagePos

  LoadImageW

  SetScrollInfo

  GetKeyNameTextW

  GetDesktopWindow

  GetCursorPos

  SetCursorPos

  HideCaret

  GetMenu

  GetMenuState

  SetMenu

  SetRect

  GetKeyState

  FindWindowExW

  MonitorFromPoint

  SystemParametersInfoW

  LoadIconW

  GetCursor

  GetWindow

  GetWindowLongW

  GetWindowRect

  InsertMenuW

  KillTimer

  WaitMessage

  IsWindowEnabled

  IsDialogMessageA

  TranslateMDISysAccel

  GetWindowPlacement

  FindWindowW

  DeleteMenu

  GetKeyboardLayout

  version

  GetFileVersionInfoSizeW

  VerQueryValueW

  GetFileVersionInfoW

  oleaut32

  SafeArrayPutElement

  LoadTypeLib

  GetErrorInfo

  VariantInit

  VariantClear

  SysFreeString

  SysReAllocStringLen

  SafeArrayCreate

  SafeArrayGetElement

  GetActiveObject

  SysAllocStringLen

  SafeArrayPtrOfIndex

  SafeArrayGetUBound

  SafeArrayGetLBound

  VariantCopy

  RegisterTypeLib

  VariantChangeType

  VariantCopyInd

  advapi32

  RegSetValueExW

  RegEnumKeyExW

  AdjustTokenPrivileges

  OpenThreadToken

  GetUserNameW

  RegDeleteKeyW

  LookupPrivilegeValueW

  OpenProcessToken

  RegOpenKeyExW

  RegQueryInfoKeyW

  AllocateAndInitializeSid

  FreeSid

  EqualSid

  RegDeleteValueW

  RegFlushKey

  RegQueryValueExW

  RegEnumValueW

  GetTokenInformation

  InitializeSecurityDescriptor

  RegCloseKey

  RegCreateKeyExW

  SetSecurityDescriptorDacl

  netapi32

  NetWkstaGetInfo

  NetApiBufferFree

  msvcrt

  memcpy

  winhttp

  WinHttpGetIEProxyConfigForCurrentUser

  WinHttpSetTimeouts

  WinHttpSetStatusCallback

  WinHttpConnect

  WinHttpReceiveResponse

  WinHttpQueryAuthSchemes

  WinHttpGetProxyForUrl

  WinHttpReadData

  WinHttpCloseHandle

  WinHttpQueryHeaders

  WinHttpOpenRequest

  WinHttpAddRequestHeaders

  WinHttpOpen

  WinHttpWriteData

  WinHttpSetCredentials

  WinHttpQueryDataAvailable

  WinHttpSetOption

  WinHttpSendRequest

  WinHttpQueryOption

  kernel32

  SetFileAttributesW

  SetFileTime

  GetACP

  GetExitCodeProcess

  IsBadWritePtr

  CloseHandle

  LocalFree

  GetCurrentProcessId

  SizeofResource

  VirtualProtect

  TerminateThread

  QueryPerformanceFrequency

  IsDebuggerPresent

  FindNextFileW

  GetFullPathNameW

  VirtualFree

  HeapAlloc

  ExitProcess

  WriteProfileStringW

  GetCPInfoExW

  RtlUnwind

  GetCPInfo

  GetStdHandle

  GetTimeZoneInformation

  FileTimeToLocalFileTime

  GetModuleHandleW

  FreeLibrary

  HeapDestroy

  CompareFileTime

  ReadFile

  CreateProcessW

  TransactNamedPipe

  GetLastError

  GetModuleFileNameW

  SetLastError

  FindResourceW

  OpenMutexW

  CreateThread

  CompareStringW

  CopyFileW

  CreateMutexW

  LoadLibraryA

  ResetEvent

  MulDiv

  FreeResource

  GetDriveTypeW

  GetVersion

  RaiseException

  MoveFileW

  GlobalAddAtomW

  GetSystemTimeAsFileTime

  FormatMessageW

  OpenProcess

  SwitchToThread

  GetExitCodeThread

  OutputDebugStringW

  GetCurrentThread

  GetLogicalDrives

  LocalFileTimeToFileTime

  SetNamedPipeHandleState

  LoadLibraryExW

  TerminateProcess

  LockResource

  FileTimeToSystemTime

  GetShortPathNameW

  GetCurrentThreadId

  UnhandledExceptionFilter

  MoveFileExW

  GlobalFindAtomW

  VirtualQuery

  GlobalFree

  VirtualQueryEx

  Sleep

  EnterCriticalSection

  SetFilePointer

  ReleaseMutex

  FlushFileBuffers

  LoadResource

  SuspendThread

  GetTickCount

  WritePrivateProfileStringW

  GetFileSize

  GlobalDeleteAtom

  GetStartupInfoW

  GetFileAttributesW

  GetCurrentDirectoryW

  SetCurrentDirectoryW

  InitializeCriticalSection

  GetThreadPriority

  GetCurrentProcess

  SetThreadPriority

  VirtualAlloc

  GetSystemInfo

  GetCommandLineW

  LeaveCriticalSection

  GetProcAddress

  ResumeThread

  GetVersionExW

  VerifyVersionInfoW

  HeapCreate

  GetWindowsDirectoryW

  DeviceIoControl

  LCMapStringW

  GetDiskFreeSpaceW

  VerSetConditionMask

  FindFirstFileW

  GetUserDefaultUILanguage

  lstrlenW

  QueryPerformanceCounter

  SetEndOfFile

  lstrcmpW

  HeapFree

  WideCharToMultiByte

  FindClose

  MultiByteToWideChar

  LoadLibraryW

  SetEvent

  CreateFileW

  GetLocaleInfoW

  GetSystemDirectoryW

  DeleteFileW

  GetEnvironmentVariableW

  GetLocalTime

  WaitForSingleObject

  WriteFile

  CreateNamedPipeW

  ExitThread

  DeleteCriticalSection

  GetDateFormatW

  TlsGetValue

  SetErrorMode

  GetComputerNameW

  IsValidLocale

  TlsSetValue

  CreateDirectoryW

  GetOverlappedResult

  GetSystemDefaultUILanguage

  EnumCalendarInfoW

  GetProfileStringW

  LocalAlloc

  GetUserDefaultLangID

  RemoveDirectoryW

  IsDBCSLeadByte

  CreateEventW

  GetPrivateProfileStringW

  WaitForMultipleObjectsEx

  GetThreadLocale

  SetThreadLocale

  ole32

  StgCreateDocfileOnILockBytes

  CoCreateInstance

  CLSIDFromString

  CoUninitialize

  IsEqualGUID

  OleInitialize

  CoFreeUnusedLibraries

  CreateILockBytesOnHGlobal

  CLSIDFromProgID

  OleUninitialize

  CoDisconnectObject

  CoInitialize

  CoTaskMemFree

  CoTaskMemAlloc

  StringFromCLSID

  gdi32

  Arc

  Pie

  SetBkMode

  SelectPalette

  CreateCompatibleBitmap

  ExcludeClipRect

  RectVisible

  SetWindowOrgEx

  MaskBlt

  AngleArc

  Chord

  SetTextColor

  StretchBlt

  SetDIBits

  SetViewportOrgEx

  CreateRectRgn

  RealizePalette

  SetDIBColorTable

  GetDIBColorTable

  RoundRect

  RestoreDC

  SetRectRgn

  GetTextMetricsW

  RemoveFontResourceW

  GetWindowOrgEx

  CreatePalette

  CreateBrushIndirect

  PatBlt

  LineDDA

  PolyBezierTo

  GetStockObject

  CreateSolidBrush

  Polygon

  Rectangle

  MoveToEx

  DeleteDC

  SaveDC

  BitBlt

  Ellipse

  FrameRgn

  GetDeviceCaps

  GetBitmapBits

  GetTextExtentPoint32W

  GetClipBox

  Polyline

  IntersectClipRect

  GetSystemPaletteEntries

  CreateBitmap

  AddFontResourceW

  CreateDIBitmap

  GetStretchBltMode

  CreateDIBSection

  CreatePenIndirect

  SetStretchBltMode

  GetDIBits

  CreateFontIndirectW

  PolyBezier

  LineTo

  GetRgnBox

  EnumFontsW

  CreateHalftonePalette

  DeleteObject

  SelectObject

  ExtFloodFill

  UnrealizeObject

  SetBkColor

  CreateCompatibleDC

  GetObjectW

  GetBrushOrgEx

  GetCurrentPositionEx

  SetROP2

  GetTextExtentPointW

  ExtTextOutW

  SetBrushOrgEx

  GetPixel

  ArcTo

  GdiFlush

  SetPixel

  EnumFontFamiliesExW

  GetPaletteEntries

  Exports

  Exports

  TMethodImplementationIntercept

  __dbk_fcall_wrapper

  dbkFCallWrapperAddr

  Sections

  .text

  Size: 2.8MB - Virtual size: 2.8MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .itext

  Size: 10KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 36KB - Virtual size: 36KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 30KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 14KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .didata

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 512B - Virtual size: 151B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .tls

  Size: - Virtual size: 76B

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 512B - Virtual size: 93B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 248KB - Virtual size: 247KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ