
Source: C:\Users\u ser\AppDat a\Local\Te mp\WZSE1.T MP\WINX64\ SETUP\SETU P64.EXEĬode function: 12_2_00007 FF7DEE82BA 0 CryptCAT AdminAcqui reContext, GetLastErr or,CreateF ileW,GetLa stError,Cr yptCATAdmi nCalcHashF romFileHan dle,GetLas tError,Cry ptCATAdmin CalcHashFr omFileHand le,GetLast Error,Cryp tCATAdminE numCatalog FromHash,G etLastErro r,CryptCAT CatalogInf oFromConte xt,GetLast Error,GetF ileAttribu tesW,SetFi leAttribut esW,Delete FileW,GetL astError,C loseHandle ,CryptCATA dminReleas eContext,G etLastErro r,īinary contains paths to debug symbols Source:īinary string: e_wpgi40.p dbL source : SETUP64. Source: C:\Users\u ser\AppDat a\Local\Te mp\WZSE0.T MP\WINX64\ SETUP\SETU P64.EXEĬode function: 11_2_6A8E2 71C memset ,?_set_se_ translator EAU_EXCEPT ION_POINTE ateFileW,G etLastErro r,memset,C ryptCATAdm inCalcHash FromFileHa ndle,GetLa stError,me mset,CharL owerW,Clos eHandle,Ce rtFreeCert ificateCon text,?_set _se_transl AXIPEAU_EX CEPTION_PO ,Ĭode function: 11_2_6A8E1 D30 Create FileW,mall oc,CryptCA TAdminCalc HashFromFi leHandle,C loseHandle ,free,

Uses Microsoft's Enhanced Cryptographic Provider Source: C:\Users\u ser\AppDat a\Local\Te mp\WZSE0.T MP\WINX64\ SETUP\SETU P64.EXEĬode function: 11_2_6A8E1 E74 CryptQ ueryObject ,CertGetCT LContextPr operty,mal loc,CertGe tCTLContex tProperty, GetLastErr or,GetLast Error,Cert FreeCTLCon text,GetLa stError,fr ee,
