MetaMansion.zip
- SHA256 5bbe4ff9dc3e2fb44d356785216d39faa2ea386b1a5227798aea9c2d18b8b3fa
Overview
overview
8Static
static
MetaMansio...nk.dll
windows7-x64
1MetaMansio...nk.dll
windows10-2004-x64
1MetaMansio...up.exe
windows7-x64
8MetaMansio...up.exe
windows10-2004-x64
8MetaMansio...her.js
windows7-x64
1MetaMansio...her.js
windows10-2004-x64
1MetaMansio...x.html
windows7-x64
1MetaMansio...x.html
windows10-2004-x64
MetaMansio...ent.js
windows7-x64
1MetaMansio...ent.js
windows10-2004-x64
1MetaMansio...ent.js
windows7-x64
1MetaMansio...ent.js
windows10-2004-x64
1MetaMansio...ris.js
windows7-x64
1MetaMansio...ris.js
windows10-2004-x64
1MetaMansio...x.html
windows7-x64
1MetaMansio...x.html
windows10-2004-x64
MetaMansio...nit.js
windows7-x64
1MetaMansio...nit.js
windows10-2004-x64
MetaMansio...ins.js
windows7-x64
1MetaMansio...ins.js
windows10-2004-x64
5MetaMansio...ant.js
windows7-x64
1MetaMansio...ant.js
windows10-2004-x64
1MetaMansio...ion.js
windows7-x64
1MetaMansio...ion.js
windows10-2004-x64
1MetaMansio...cc.dll
windows7-x64
1MetaMansio...cc.dll
windows10-2004-x64
1MetaMansio...58.msi
windows7-x64
8MetaMansio...58.msi
windows10-2004-x64
8MetaMansio...67.msi
windows7-x64
8MetaMansio...67.msi
windows10-2004-x64
8MetaMansio...58.msi
windows7-x64
8MetaMansio...58.msi
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
MetaMansion/DirectInk.dll
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
MetaMansion/DirectInk.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
MetaMansion/MetaMansionSetup.exe
Resource
win7-20220812-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
MetaMansion/MetaMansionSetup.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral5
Sample
MetaMansion/WebResources/Resource0/app1/dc-app-launcher.js
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
MetaMansion/WebResources/Resource0/app1/dc-app-launcher.js
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
MetaMansion/WebResources/Resource0/app1/index.html
Resource
win7-20220812-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral8
Sample
MetaMansion/WebResources/Resource0/app1/index.html
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
MetaMansion/WebResources/Resource0/appmeasurement/prod/appmeasurement.js
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
MetaMansion/WebResources/Resource0/appmeasurement/prod/appmeasurement.js
Resource
win10v2004-20220901-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
MetaMansion/WebResources/Resource0/appmeasurement/stage/appmeasurement.js
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
MetaMansion/WebResources/Resource0/appmeasurement/stage/appmeasurement.js
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
MetaMansion/WebResources/Resource0/base_uris.js
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
MetaMansion/WebResources/Resource0/base_uris.js
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
MetaMansion/WebResources/Resource0/index.html
Resource
win7-20220812-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral16
Sample
MetaMansion/WebResources/Resource0/index.html
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
MetaMansion/WebResources/Resource0/init.js
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
MetaMansion/WebResources/Resource0/init.js
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
MetaMansion/WebResources/Resource0/plugins.js
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
MetaMansion/WebResources/Resource0/plugins.js
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
MetaMansion/WebResources/Resource0/variant.js
Resource
win7-20220901-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
MetaMansion/WebResources/Resource0/variant.js
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
MetaMansion/WebResources/Resource0/version.js
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
MetaMansion/WebResources/Resource0/version.js
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
MetaMansion/ccme_ecc.dll
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
MetaMansion/ccme_ecc.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
MetaMansion/icucnv58.msi
Resource
win7-20220901-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral28
Sample
MetaMansion/icucnv58.msi
Resource
win10v2004-20220901-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral29
Sample
MetaMansion/icucnv67.msi
Resource
win7-20220901-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral30
Sample
MetaMansion/icucnv67.msi
Resource
win10v2004-20220812-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral31
Sample
MetaMansion/icudt58.msi
Resource
win7-20220812-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral32
Sample
MetaMansion/icudt58.msi
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target MetaMansion.zip
- Size 9.0MB
- Sample221014-tn3crsdhal
- SHA256 5bbe4ff9dc3e2fb44d356785216d39faa2ea386b1a5227798aea9c2d18b8b3fa
- MD5 ea564d7cdc5c1a83b828af5df400b19e
- SHA1 fa3549c613e2074ce8a30b622536c73f3d58b530
- SHA512 d510021ee1d916cafb6ae24e62d8598939d37212ce0aac2fdc386735540fd4ddda0b3ae36ecd8800a27f9bf264d5ed9d82d05aafaa717d0855e12b5e10e701fa
- SSDEEP 196608:dOC9RQVmSh9q/aVdHaFsDbMEs6fAqehWrBq3cw803Gp00E:IquD4/0d6xEmRWrBDw803G4
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
MetaMansion.zip.zip 9.0MB
-
MetaMansion/DirectInk.dll.dll 158KB
-
MetaMansion/MetaMansionSetup.exe.exe 668.4MB
-
MetaMansion/Resource/CMap/Identity-H8KB
-
MetaMansion/Resource/CMap/Identity-V2KB
-
MetaMansion/Resource/CMap/UCS2-GBK-EUC238KB
-
MetaMansion/Resource/CMap/UniKS-UTF16-H128KB
-
MetaMansion/Resource/CMap/UniKS-UTF16-V3KB
-
MetaMansion/Resource/Font/AdobePIStd.otf83KB
-
MetaMansion/Resource/Font/CourierStd-Bold.otf29KB
-
MetaMansion/Resource/Font/CourierStd-BoldOblique.otf31KB
-
MetaMansion/Resource/Font/CourierStd-Oblique.otf31KB
-
MetaMansion/Resource/Font/CourierStd.otf30KB
-
MetaMansion/Resource/Font/MinionPro-Bold.otf205KB
-
MetaMansion/Resource/Font/MinionPro-BoldIt.otf245KB
-
MetaMansion/Resource/Font/MinionPro-It.otf246KB
-
MetaMansion/Resource/Font/MinionPro-Regular.otf205KB
-
MetaMansion/Resource/Font/MyriadPro-Bold.otf88KB
-
MetaMansion/Resource/Font/MyriadPro-BoldIt.otf90KB
-
MetaMansion/Resource/Font/MyriadPro-It.otf88KB
-
MetaMansion/Resource/Font/MyriadPro-Regular.otf88KB
-
MetaMansion/Resource/Font/Pfm/SY______.PFM672B
-
MetaMansion/Resource/Font/Pfm/zx______.pfm683B
-
MetaMansion/Resource/Font/Pfm/zy______.pfm684B
-
MetaMansion/Resource/Font/SY______.PFB33KB
-
MetaMansion/Resource/Font/ZX______.PFB73KB
-
MetaMansion/Resource/Font/ZY______.PFB94KB
-
MetaMansion/Resource/SaslPrep/SaslPrepProfile_norm_bidi.spp13KB
-
MetaMansion/Resource/TypeSupport/Unicode/ICU/icudt26l.dat209KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt10KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt12KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT12KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT18KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT13KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT13KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT13KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT13KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT14KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT14KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT15KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT12KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT4KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT9KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT9KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT9KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT8KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT9KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT9KB
-
MetaMansion/Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT9KB
-
MetaMansion/WebResources/Resource0/app1/dc-app-launcher.js.js 264KB
-
MetaMansion/WebResources/Resource0/app1/index.html3KB
-
MetaMansion/WebResources/Resource0/appmeasurement/prod/appmeasurement.js.js 63KB
-
MetaMansion/WebResources/Resource0/appmeasurement/stage/appmeasurement.js.js 64KB
-
MetaMansion/WebResources/Resource0/base_uris.js.js 5KB
-
MetaMansion/WebResources/Resource0/index.html.html 3KB
-
MetaMansion/WebResources/Resource0/init.js.js 7KB
-
MetaMansion/WebResources/Resource0/plugins.js.js 30KB
-
MetaMansion/WebResources/Resource0/variant.js268B
-
MetaMansion/WebResources/Resource0/version.js2KB
-
MetaMansion/ccme_ecc.dll.dll 548KB
-
MetaMansion/icucnv58.dll.msi 15KB
-
MetaMansion/icucnv67.dll.msi 15KB
-
MetaMansion/icudt58.dll.msi 15KB
-
MetaMansion/icudt67.dll.msi 15KB
-
MetaMansion/x86/ACE.dll.dll 1.1MB
-
MetaMansion/x86/AGM.dll.dll 5.8MB
-
MetaMansion/x86/AIDE.dll.dll 2.0MB
-
MetaMansion/x86/AdobeXMP.dll.dll 887KB
-
MetaMansion/x86/BIB.dll.dll 119KB
-
MetaMansion/x86/BIBUtils.dll.dll 170KB
-
MetaMansion/x86/CoolType.dll.dll 3.2MB
-
MetaMansion/x86/JP2KLib.dll.dll 508KB
MetaMansion/DirectInk.dll
- IMPHASH 76ab0bd1c8f81a651bad2440e8635ea7
- SHA256 7dc1bd1186ad5833093c330339ca242f578c8eb1a83fb12f7f656b91f40f5fee
- MD5 3b07d9d84170b84221e767bb8e0d25f1
- SHA1 38b94df5ac561d094599bebe212449bf76297634
- SHA512 0600d38f9495a145d4d7805630a10678a7e13a799835f9c1159e5388237aad654f5c36cc945adb6b71801133cf8ef4e15847510da251a00cb6ff325ee88ad9cd
- SSDEEP 3072:9uU/yqDKcelwIgSJbaTCi4C+YGZiKSME9gFZmK/Q:AUNilzba14Lgg1Q
- MD5 SHA1 SHA512 SSDEEP
Digest
1c:2f:68:ed:48:e5:91:c1:45:d1:4d:68:70:fe:ac:64:7d:a0:52:98:33:fe:f1:c9:4e:23:5c:bc:89:84:2b:90
Digest Algorithm
sha256
PE Digests Matches
Trusted
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 19, 2020 - Dec 21, 2022
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
Major OS version
Entry point
37712
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
dcomp
DCompositionCreateDevice2
kernel32
HeapFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
HeapSize
GetLastError
GlobalAlloc
HeapReAlloc
RaiseException
HeapAlloc
GlobalLock
WriteConsoleW
GetProcessHeap
GlobalUnlock
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
DeleteCriticalSection
RtlCaptureContext
GetFileType
GetStdHandle
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
CloseHandle
InitializeCriticalSectionAndSpinCount
CreateEventW
GetModuleHandleW
GetProcAddress
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
user32
PtInRect
ClientToScreen
ScreenToClient
GetWindowRect
PostMessageW
InvalidateRect
GetPointerType
SetCursorPos
GetCursorPos
ole32
CreateStreamOnHGlobal
CoCreateInstance
d2d1
ord1
d3d11
D3D11CreateDevice
gdiplus
GdipSaveImageToStream
GdipDeletePen
GdipGetImageEncodersSize
GdipCreatePen1
GdiplusStartup
GdipDrawCurve
GdipFillRectangleI
GdipGetImageGraphicsContext
GdipCloneBrush
GdipSetCompositingMode
GdipFree
GdipCreateSolidFill
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipDisposeImage
GdipAlloc
GdipDeleteBrush
GdipCloneImage
GdipGetImageEncoders
GdipSetCompositingQuality
GdipCreateBitmapFromScan0
BeginDry
ChangeInkPresenterColor
ChangeInkPresenterLineWidth
ChangeInkPresenterOpacity
ChangeInkPresenterSize
CreateNewInkPresenter
DirectInkLoopBackLineDrawingTest
DisableInkPresenter
DisableMouse
DisablePen
DisableTouch
EnableInkPresenter
EnableTouchPenMouse
EndDry
GetEraserPoint
GetLastRightClickPoint
GetSignature
InitializeDirectInk
SetSignature
ShouldAppIgnorePointerDownMessage
TearDownDirectInk
TearDownInkPresenter
Name
.text
Size
88KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
47KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MetaMansion/MetaMansionSetup.exe
- IMPHASH 4cea7ae85c87ddc7295d39ff9cda31d1
- SHA256 b02510505204d269d0d056ac0f0c8342a457600b2dbedf062c62462346b43d78
- MD5 0154a5c63d82a3621926088e069907cf
- SHA1 c32ecb6867e42662e141cc779d80dedbe7980439
- SHA512 890fb7150d185f0b2a31241dcc008a9df5e355c8aac24672770fd44bcc440cb78c29c0a2c442857d54ac33d62130562a3cd1124580e71dcfded0df4cc3a8b5ef
- SSDEEP 12288:yfFWWgdnBuc1/z+Zjbrxy8oh75hwsplr8qNM:GF8BucV8nrEd5hwYgqNM
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7a:7c:1e:b1:21:eb:3b:1a:1a:7b:12:64:81:18:10:24:f4:77:87:08:c2:78:e8:64:e2:77:3e:f2:a1:d2:6d:eb
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
PE Signature issue
Digest
62:14:f3:1f:b5:11:9d:3c:10:a4:be:7c:8b:e1:b1:c1:d4:46:98:85
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Rare Ideas\, LLC,O=Rare Ideas\, LLC,POSTALCODE=10009,STREET=PO Box 227,L=New York,ST=NY,C=US
Serial Number
af:1c:39:06:7a:47:22:8c:47:99:a8:8f:1c:31:ee:e8
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 19, 2017 - Feb 19, 2018
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=Rare Ideas\, LLC,O=Rare Ideas\, LLC,POSTALCODE=10009,STREET=PO Box 227,L=New York,ST=NY,C=US
Serial Number
af:1c:39:06:7a:47:22:8c:47:99:a8:8f:1c:31:ee:e8
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 19, 2017 - Feb 19, 2018
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=GlobalSign TSA for Advanced - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:06:f1:0f:ce:68:f0:9b:fa:e5:5b:18:cd:8f:20:01:77
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 24, 2016 - Jun 24, 2027
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
Major OS version
Entry point
31152
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
advapi32
GetTokenInformation
RegDeleteValueA
RegOpenKeyExA
RegQueryInfoKeyA
FreeSid
OpenProcessToken
RegSetValueExA
RegCreateKeyExA
LookupPrivilegeValueA
AllocateAndInitializeSid
RegQueryValueExA
EqualSid
RegCloseKey
AdjustTokenPrivileges
kernel32
_lopen
_llseek
CompareStringA
GetLastError
GetFileAttributesA
GetSystemDirectoryA
LoadLibraryA
DeleteFileA
GlobalAlloc
GlobalFree
CloseHandle
WritePrivateProfileStringA
IsDBCSLeadByte
GetWindowsDirectoryA
SetFileAttributesA
GetProcAddress
GlobalLock
LocalFree
RemoveDirectoryA
FreeLibrary
_lclose
CreateDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GlobalUnlock
ReadFile
SizeofResource
WriteFile
GetDriveTypeA
LoadLibraryExA
SetFileTime
SetFilePointer
FindResourceA
CreateMutexA
GetVolumeInformationA
WaitForSingleObject
GetCurrentDirectoryA
FreeResource
GetVersion
SetCurrentDirectoryA
GetTempPathA
LocalFileTimeToFileTime
CreateFileA
SetEvent
TerminateThread
GetVersionExA
LockResource
GetSystemInfo
CreateThread
ResetEvent
LoadResource
ExitProcess
GetModuleHandleW
CreateProcessA
FormatMessageA
GetTempFileNameA
DosDateTimeToFileTime
CreateEventA
GetExitCodeProcess
ExpandEnvironmentStringsA
LocalAlloc
lstrcmpA
FindNextFileA
GetCurrentProcess
FindFirstFileA
GetModuleFileNameA
GetShortPathNameA
Sleep
GetStartupInfoW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
EnumResourceLanguagesA
GetDiskFreeSpaceA
MulDiv
FindClose
gdi32
GetDeviceCaps
user32
ShowWindow
MsgWaitForMultipleObjects
SetWindowPos
GetDC
GetWindowRect
DispatchMessageA
GetSystemMetrics
CallWindowProcA
SetWindowTextA
MessageBoxA
SendDlgItemMessageA
SendMessageA
GetDlgItem
DialogBoxIndirectParamA
GetWindowLongPtrA
SetWindowLongPtrA
SetForegroundWindow
ReleaseDC
EnableWindow
CharNextA
LoadStringA
CharPrevA
EndDialog
MessageBeep
ExitWindowsEx
SetDlgItemTextA
CharUpperA
GetDesktopWindow
PeekMessageA
GetDlgItemTextA
msvcrt
?terminate@@YAXXZ
_commode
_fmode
_acmdln
__C_specific_handler
memset
__setusermatherr
_ismbblead
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
memcpy_s
_vsnprintf
_initterm
memcpy
comctl32
ord17
cabinet
ord20
ord21
ord23
ord22
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
1020B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
843KB
Virtual Size
842KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MetaMansion/Resource/CMap/Identity-H
- SHA256 aae946bc17203b5df12838d07ae5cafc9e85a1d42d1b94d8475ab2d42b77a5cb
- MD5 40f5dc1383e3e8f870ed8f763ed51878
- SHA1 474a429de3b9feba36cfa4ce4edcd4fae3cddc5b
- SHA512 69b6d3af2ccaae9437fe4e0206c44d29ec7a51f39334826737907e1126505071ba888f4134de55a07cf14256b47daf6d29cc73bab60f3c6cd7d8bb30e24778fb
- SSDEEP 192:QJeSrsQrsil/3gU+uSpo4cvkikNwA+KZwOyKXuU8fy:QJhrsQrsWPsu+oVkEKZnNz8fy
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/CMap/Identity-V
- SHA256 7483db44e4449a7ae232b30d6cba0d8746592757d0e91be82ec45b646c608807
- MD5 b5084cbf0ab0c3deac97e06cd3cb2ecc
- SHA1 c32458cda1951cecffb69aa2f7e3a1ea8bf36251
- SHA512 b15f65a2ab21121a4b815932a7e2dcafcf27f458bce532ae46bbcbd6b1134153027bf3e138fab42457a89bc892256b4796bbb9f1e3a85f9f4c5202015b56e3a5
- MD5 SHA1 SHA512
MetaMansion/Resource/CMap/UCS2-GBK-EUC
- SHA256 66cdcaed3aa94525c59a82a39a93b96885883bffadea1e572464d559d21443a6
- MD5 fb9d6cd4449ec7478ee8ad1bd7465bf5
- SHA1 3d42495890e0f2acc6b564eaa79fe020fdd2fc79
- SHA512 259467113cda70ba8d399e233bef8a718f76bc6b977ac54c216bd53796a8003e7a7276031388e282f1f4430fc2fcd269b06341f2082a9442a65bbccdeb767eb1
- SSDEEP 6144:JAYrjXraHOiu06s7SSC2RGaC4J7G27r7Sbtg2j35GEE9:JAYrj7aHOip6rShXC4J7G27r7Sbtg2j0
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/CMap/UniKS-UTF16-H
- SHA256 ab87d320c81e4c761b7a4cbd342e212db4ebe169b5d10848f2f57d828874e342
- MD5 f65c06189a55139e13885d9716bfe35c
- SHA1 394285fed905d0f4c2c21230da50626b0a31a037
- SHA512 caf07d2623861f60d79acfb313978b89f9cd8feea0bed0fe28d25286d197b62b9ef9a41130586d731dc43aeae817eaaa87c9cac31d9bd1fdb82591146e0fa2cb
- SSDEEP 3072:EbOks6xITS4gmLJpAEhFDDvBB4TS+JjXsc:jjTvIN3
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/CMap/UniKS-UTF16-V
- SHA256 7e403dae40df21fe3f9b221f7ce750f7f5bff9cc73d82d011c4bcc48a0db60ed
- MD5 aba47550affb435a1dcc6b70efab5b52
- SHA1 754168e2c3b58fcfcb57b3ecf5ca5eebddfa1f47
- SHA512 d46537b67ef7137fc0b715e43f23322dd1189db352235a4a5ad89cb6af3d3fecaa51c1c93dcea2a7e8fb8d25b18c3b0f2ab2f23df7a5a76126a47389ffac00b2
- MD5 SHA1 SHA512
MetaMansion/Resource/Font/AdobePIStd.otf
- SHA256 5dbc496c0b5a12d9f9ffdb83a46b9fcda8d1fc1fcd50832c783be5e9277a698e
- MD5 8653bfe4c32a8528e981748e28c59570
- SHA1 dec8dd8cba986f5852286c8b8e45c6270aeab65a
- SHA512 66e39798ca8bba9af51f44e81b77ac1703f488b6361bfb05de632fbb2726e5f1291f0210be0fc933459bea78fa433177b33e34be977c079c97c5330d6590e7fb
- SSDEEP 1536:PmsMC/asb+Q+fGZNbDvdtlT9Mnlx643McbQqc80U0zy26RR38e8kscXqHZ3MD4ea:BMjlINbrdFMnP6hcbQq8Bn6IPksF8E
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/Font/CourierStd-Bold.otf
- SHA256 a3c25f2ec60f8d44f150cd4e478067b06cc7267fbaaf844da600ce1c31c6e5c1
- MD5 404952ec4d0ae00dd2f58fb980a99326
- SHA1 2dfa0796be958109d1558b771c3c8c77049a3945
- SHA512 e9f60c1536663b11a8d262a49bd92b80bc619e26408464350a122b4cfa149900da754c78ea7e84a314f4c914497005409cc83dc8b5f55d725bba1bd5acb2ce89
- SSDEEP 768:UYJufmmvVJkJ7pFIJRUQXzUKOXBdbOIYvQXGPgfJVXhU:UYJu+mvPg9eYCzUKOXBdqIWQX4gfVU
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/Font/CourierStd-BoldOblique.otf
- SHA256 698fd9169ad62bd6faedd1c8e8637abc9cc65b3b1a5ba8698242b1447303fbee
- MD5 6804e7413898972e05823add91b1dfc5
- SHA1 4dfc3cecd9d3c26afaca087a69376eb6abfedeaf
- SHA512 f89a494aa7dae22022cb4bddf911c9fb8f40220c5d49bba79e5b7f97191fcc2740088437d3e56e6903e0b10aaf5535b4ce08dbe793a0e800d23038196ebf5fc6
- SSDEEP 768:edluzc2NPniJMT9BvYsWShVcbZks6AnkXhUZxX:edluz3piJMpusWShVcbZkfAnk2Z1
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/Font/CourierStd-Oblique.otf
- SHA256 c54815a2729d633e400a6835679613090c20b91da6cb40fa761aaa475efb77f5
- MD5 71ec484296a30c9379607e36158ca809
- SHA1 6dba5afa525bfb38b653e30492d59d839dc7a0c9
- SHA512 0a53ed3ebd858d093cdfc2b2acc104453c6e211416ae24a93c2a77feb3c7a5af8e2a27ca367194f8a6d7294cf36bec84a3b0c6af1ccb8047d9b0c72622a9c8df
- SSDEEP 768:jhDq/ufETG+B8jqsYTvBTOYDjcXfwMXY6TnP1xaH9UzGb4dmA:jk/uf3YTpIPzo6TtxY9UzGb6
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/Font/CourierStd.otf
- SHA256 54cb5c8e9775cb432afe32b0af688536354ad04ef9c9f1450ee7c88a73bc884d
- MD5 f4c2d3851e2781b2b3ff60a2e34e81ac
- SHA1 779f9fee6d37c37a03601ec1ab406d055e8e7692
- SHA512 218cf55522d6edd88ad92acaa6d440f0f7ff2a0688948a834ef21eff7ca6a915622723720dae234e412e788ee7b722261b1a238a12d05c7f63f24d854fdad43d
- SSDEEP 768:px0Kx7uekYqrdC/MNVO6MFsSStwPHMjz9Qc3:j3RuexqrdGYmJStYHmz913
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/Font/MinionPro-Bold.otf
- SHA256 6af523a01b268ddaab5177e6c0df5024f7192d72b0b1ca9523721fbaa2aa9257
- MD5 b3870be83f40b14cb382bd498920a137
- SHA1 08b27bce2db468785348f42e39b2e80d9107fb1a
- SHA512 0979d123ba7d84b564aa0f018ae49ed7a2c4610882e574547abade7abd2e743630ccc82dfe95c3fbe963731e33df5d34c2e307fd28a2e7670e2aacbe3b87f70e
- SSDEEP 6144:3z2HDNf6XZFWrRBPt2a+C5vDgtTBbhRRkBPgdG:3zaNWZFyBPONbhXkBPOG
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/Font/MinionPro-BoldIt.otf
- SHA256 beb1ca56f9b4f89fb1549fe63a4bc578d2bd8747f967c1df26dacd3ded3f0223
- MD5 a7487befbf3c7ba8c957d269d9ba24e1
- SHA1 75063a3db5e857b5565fe8ac9ceca74440cf2ef2
- SHA512 1694a64790aeac2d789c75a2c664a62d19c3a487730bd368e2c76a78852046e94a158467dbed26783f8eb1c17e0d76e2c3150f6ec82131cc2bbb385ef931c1cd
- SSDEEP 6144:tj64FsxSslGgShJ2rgoyGgg4sB+73Lc8n+zYBYg:R6MsxS5rxglmOg
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/Font/MinionPro-It.otf
- SHA256 90def22f2b7b3e4aa78a160084a7a2c8f28883b700abaedc004dc74cbc2d9b4c
- MD5 45e2315e99f24ab596f9d3aed29a0fc3
- SHA1 a73342db05275c6858984f25c0d1278e93bfbee9
- SHA512 1d479beda9f70055b0596e18d9f41dace4141defb3ba9d01f21c0262e889fe37b7d9f3558b37e7716196de5c2aa7668bb8b115a5bf4540763239f22a4d530cf9
- SSDEEP 6144:H5Pf8kkiiO4vviV+eehOtHU5VLO+++A3++awYHt:H5n8qrIthf5VU2Ht
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/Font/MinionPro-Regular.otf
- SHA256 327cb2238a82a89176ff6601139cbd0a5cdd8f8e1e057343eae13fa9b1e10ab8
- MD5 a4ea2690cfd854b24c968ac6cdce9c33
- SHA1 efc3bc793479df1a34d76c42063997ad0e73c6b6
- SHA512 f722b32c397179b25e33b88771cb588c6f23a615533e3dcb21b34052e2930f935dab58b7ee5a3098912a41e6266b5f26b86602cf57bff41917d634e55a86c52e
- SSDEEP 3072:kP2Ea79vZp3MeJymLbVQbKH3L9jLU2jRM5eUlVsXGUPHTfeoAL3sBgL/4tHRkBDB:kP2h76QRMUoVsXdwsBw/kxkBgW
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/Font/MyriadPro-Bold.otf
- SHA256 2d09971801f2c18fc5a825379404113db237866073ab463a9bf0f3da8c62459a
- MD5 e6d1585e6c81e3206948d8548d914fec
- SHA1 4bfa4d5ad9995bd89e2d443009e4ffb728a1f74b
- SHA512 058cf93ea2be4e98e752a4090f295e00bad37b7db9d4461cf7484409af5087853653fd82aa7475a85950b48367a1d9168cc8983791b78dabeb8af4f84397a264
- SSDEEP 1536:ruMpOn479vZp3MeJymLbVQbZg8Lm52cqU5mJm2Tg9gHsF+JSqyi+GGGCRqBtUwah:CU179vZp3MeJymLbVQbZ3CrqUwJmStEh
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/Font/MyriadPro-BoldIt.otf
- SHA256 7bcfa54cb8fb5b64dfe36f411d5265f7f71dc6f3b685c7ed0eb3753ee194bb45
- MD5 01e3d8472c3cbc43799fed290b0dc219
- SHA1 916a7e55b47d079e0bf0e3fea9ef8f48af3d53c4
- SHA512 e70a72670e5267582bd652abc73de091d8978856b757001c7b5efcc110a331b45ee0334c5864685c3054b627e0c750a050396842ed66c43a8b43aa33e6342b1c
- SSDEEP 1536:fpMBiTX79vZp3MeJymLbVQbaRRQQmzcJfttExKBUBq8YRfyraMvxvxM+RP/YxTRV:hA879vZp3MeJymLbVQbaRRQzzcJfttEo
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/Font/MyriadPro-It.otf
- SHA256 f234adafb66ad5e47a024ff4881c2edc347d0453c15e811288ef10eb573cc33e
- MD5 4413059068c27d82ad49621ae4aaeb5b
- SHA1 ca0e2f5ce7303031e1b97f6eb3402e45e3786a3b
- SHA512 5f68440fb0fe825a3742bdeb5ea089bb124d878de7cea74ab3270b888125f66d3e0ec62d562bceea194dc68ce9a40ea1bef5d5980ce7ea207d91f04a20298412
- SSDEEP 1536:E5Mgi/379vZp3MeJymLbVQbnbkVGcjf0DoEgNT8QcZaQwHhFzeKuvGujl2u1X2Y2:AFi79vZp3MeJymLbVQbnqVjf1EAXcN0D
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/Font/MyriadPro-Regular.otf
- SHA256 c812279db1ed52876e3b59791645424cb4714cb710f60da45f1b40757c3263e3
- MD5 1aed3bcf1b764f4ac6d9b988b0e724c0
- SHA1 6e149809ff93e683307ab3154fdd57eb24c5e9a3
- SHA512 8fb3591513bee4d9c77eb6380d9f05e7e423434bf667759765d14ce8cdc89d969230516f271b28f508ba5fba0e21b7623239e16c02599fa36b0900d199805bc4
- SSDEEP 1536:SVM7Ouk79vZp3MeJymLbVQb2RG4m1Gnb0LBaJx1llp8PUUNMF7BM7omdoZNaDq5i:2QK79vZp3MeJymLbVQbtf1GRxH8sUN20
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/Font/Pfm/SY______.PFM
- SHA256 035af7591938139c78f8ad715047c16cd439c6a7791035deec013439921e6925
- MD5 692b5b1be7394e93fd6e0750cae81474
- SHA1 208ceb86c2dde35c78fb40ac0f2573f4e4ff499c
- SHA512 9b7ef79d488361bd1e94072b4fdaf17854881e673dc4a2981c31a65a185de987ec6c605753e1a645e74acd9fb030cfd81f5f0bb81661b3c43dfaa5ef46e0caeb
- MD5 SHA1 SHA512
MetaMansion/Resource/Font/Pfm/zx______.pfm
- SHA256 b3e66a48a576f1d90277aefb89af9cfd370e7c216978234bfe66b6ab6fa2c0fd
- MD5 705cd85804c3dc1eef81b624ea813bfb
- SHA1 5d5807713d14f45b9e5bce0576ade157bad5a701
- SHA512 dbbf44d7fc2087e5318fca440eb4c0396a9166aab64de31a901c0fe3c049a5577c021e43406e611d9eada020233c1ba008db46026f5a88d5c26c25125fae46ba
- MD5 SHA1 SHA512
MetaMansion/Resource/Font/Pfm/zy______.pfm
- SHA256 1a5660f3f8bb9d18fd6a710d70af26cf1e167fe040d7daf3ce41e527236e1fec
- MD5 7d3be2ec810fa01a9ea7d2a26551cff7
- SHA1 7962465ce36a83666fe7a3edcb31e125ed597e93
- SHA512 cd4ba616364f37aa8294c9a2a6b64ed3cf0b011cfcffa9056295b5fc23348c2b3cfa96a25954c6dc472053daa1f9f4b08176a515c95abab6ffd7077deb8d7959
- MD5 SHA1 SHA512
MetaMansion/Resource/Font/SY______.PFB
- SHA256 b0480c6f9cee6bb87c1ae159a89a8a9d1ffa46e0ab70461fdf2fc291e2c94b4a
- MD5 6fd0724d1fee177adad6a13c65af5268
- SHA1 6efe2355d68306e2d5083895ced81002f7934ebc
- SHA512 61185eafc64bf732a07add78ff6cf1ba3d0c988b64097f376018e5e710e35840a2556523ae6634c27ce45e47ffbdf36778452ccb3fa1f015dbcb02689f1e1797
- SSDEEP 768:2igXv39LX995GGTC4/HrcgXB7qtyiq/wX7RUzKR5tn:2dXv3JAGTC4DdHiAwlUzKR7n
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/Font/ZX______.PFB
- SHA256 ba8f3996fad32c042bf1f474a08b7452f252060882dc4de5a97ec389209e2301
- MD5 5eb6497ffaa36909f6b2a824054bd4d9
- SHA1 cc04c0ccad1e9c10552f1ab7fac45b0b529de299
- SHA512 dd7a1b26dd041266404d86d6616c765eedbfc71460cbcf15fcc02de1704ae7e2892b25b6134017621f470768d4eb4a64010ec7ffec459d0c669f107c66841caa
- SSDEEP 1536:TGYo+k47OpUT9E64XnuCibOb9z6DU40fbmbZUHs:I47Opy9EBXVbVsUnTmbZR
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/Font/ZY______.PFB
- SHA256 1182fcc2fb887713fb954a804f83fae3417c27b6929ecb07c5034dac24586e8b
- MD5 72abd7f6b6b7e6f2ccb06626aa8b46f1
- SHA1 f9cc5efb748f4068aa08290ee58aa41f8bd4bb81
- SHA512 d34a8d9fac3efea7504f87b203c9074f7589cc726fce0b23132eb14d75d2f9a5d67c13952f0f1fce02fa44b786bdd17828c355471bd974b8d78a29abfc8c7823
- SSDEEP 1536:SnSFGnyhqkcpFyFmkscxLFNv2FRle4Y/p+Nsz8Rc1wNbsGvStIjQIRiCt6b7VkV/:ESFSiqJKskP2FurRjp1cVvRj2j6/YhM
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/SaslPrep/SaslPrepProfile_norm_bidi.spp
- SHA256 f2501579fc7ab062324b4e1a45428f69f9a37e0363a4fc1d3734157b587b92e1
- MD5 787dcae108ef9d5fcd9f60ce6387e7b1
- SHA1 83a906239423183910e617273d6023c534e47e5c
- SHA512 c65d3bc01406054d9932e2c840980978a5be4bed7bf8dd60a063304017f0d8b8618d7e7688b365110976822896256cb98ed6ce40c2b6032e0d06637d73c8e283
- SSDEEP 24:j2Lc2SuJAoYYY6JB/BsSh7F3eQfWiLLN+LEEEEEEEEEEEEEEEEEEEEEEEEEEEEp:2c29CoX5JBNhCiLx+l
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/ICU/icudt26l.dat
- SHA256 b388595d6e96e51430bec6022b1a5635ca541e60936abd73342ae8319dfe6802
- MD5 525de57b8d1167a4efb7eb00c013354f
- SHA1 3f1ac2d2b6807c3ed2fc41351262712b72fad749
- SHA512 dfd950d1220f46bf5f75c4130902bb63a4447c435d25386461a4e4653e73dc6780577fb51b14b182a1f2b1a38585914237625b199d806b6f80f9becc64eeff32
- SSDEEP 3072:C5em1am14oBR+pa3sHxW5D+eXHdsdj5xkq7KV2Sq71c64ZAr3Abyc7dAzATXcErQ:CR1R/UFTSO1TPcaMm
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
- SHA256 52dbabcdebe38f3e19e9071d6796fe49f1463f03d2d82064aab4a10bfbd4dddf
- MD5 31d752fa13b4d1fc7b7b4747a3f6d3f9
- SHA1 eaafd280b2ea187f078674b9a1d5a8206ccf4a13
- SHA512 ed402d201b19c9edeeefa17d2f82a480b8d16ce3235668a91bdd0e6f3b59cbb55bc7119a272c34d1c4e88999b6fe08697d65d65e7b4de44c197e57f2ff44f079
- SSDEEP 192:sRDIlhfxjh5/q7Wr6KyfyHnW9WSQftm15VkCnl2moTTEmbZ3mrZWlBAjnBmnVRn8:sVCx27WuKy0W9WDlSVPlwd3C/BCVBFyB
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
- SHA256 e7651bcf12532af30c79c499e7a280ccbcd7f208436999a21b1500b07149bc95
- MD5 691886379048a5f9065ee903757af29b
- SHA1 9f6453e6f027e771602ad98c5379eaa2b2469463
- SHA512 e2934bd4f36cc21e1d71c4fcfc3c31d091a54f04762b0cf7b20fd6bf70ce30fd209a406020c82c565005bc0677471eb524b5a537059e29e4231955fc9307216c
- SSDEEP 192:IcRDIlhXomP1RueMV1tQdS6t0Ftjzt8CFrMbyaYQgtrtXiPIn:IcV+ombupV1mdS5SC+20I
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
- SHA256 ae8fdf0311fe249ee1a3e08fe36c394ca2da791c622b665ddebcb623ac248903
- MD5 3ea4a9a2765040c721374ccbb8e7bd59
- SHA1 bae4c79a9e9c27cbb7308bb364f69566387cce45
- SHA512 1a86665a081c73d170ac6ba9a3abfbedecd71557b274d99e254a446e852e6c62cc0bf383eeafbfc1722f63af65b4e4bc73f9e0ebc6fd790317b08ffd488be289
- SSDEEP 192:X1ei8BsiHo6ZD5OSlEZGWRBnBb7ec56ZXj3nZv0CU8+zLtVoeuq/W+vsAfzMUMQi:FeDsiV4SlTWRRBb7e6b6D
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
- SHA256 83246b8c942cbacf1031445a99e62acbb4733ef4167bebfba2bd852869824eab
- MD5 0fbad8e1c335ac42617936aa6f89ec89
- SHA1 02ba453abfbe24b25c35a2d75c6134714b3d7d43
- SHA512 ab9e0bb4cae4c72cbccf7d061f1f181dc86277e8e59424802422c6641bec864d3e87b2261d56cb7991e3f60c5c6f56a814073f7d180745b8499c05c39f93842a
- SSDEEP 384:+aT8iQfVsEByru8n1ePc1RJ1lX1HEvSZ3:dIqEc/X1kvSZ3
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
- SHA256 f353d83def5c9632ffd1925a0f1480e3dc0e00c096aff5680e448cbfd97fad05
- MD5 5c36e2cba7fdd612c575d50974ef708a
- SHA1 b7a92b10de26a0e23434152694302e4867b011dc
- SHA512 9a2a71bf2de141f7e0a295ad40824e63b7b18f1d530d90b5edeec78dd23eaab733d40f95ec320ee2c7686a113bee58fb92d48875d347c669c4c82f9ac27af76e
- SSDEEP 192:xO1i8BsiHo9EB0QguBwjEZGWRBnBb7ec56ZcjVNs0sDTZLzPF5Ofzwswsc3ATpGE:A1Dsi1BwjTWRRBb7e6vY9PspP
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
- SHA256 10738cd5bba3b23c02d3655bf2afdf72daeaaef778cda562c6d10ae8d25ca591
- MD5 db4ed5c205fddd693dc9ce69cccad036
- SHA1 ffae0be88d51d71fb1e496156564e55f874efad9
- SHA512 0402d575c17d03e7af8bf44f36ead7d4ccd283375b65d94597ed927a3975d5427483c681a2c604b6f61d796e9c92868620594b7661de6321920c23a6ba281c96
- SSDEEP 192:BWDRi8BsiHopYZXC4JqANEZGWRBnBb7ec56ZmuZ6VfDjCfzB+CXp1:kDRDsiZZXC4qWTWRRBb7e6/o6NIXD
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
- SHA256 1ce082e86367551b2a21465d1b1c2edc103242f7d565411dcea0762e3dd63aa1
- MD5 962d73ae58ea74dfa492bda68064f130
- SHA1 b3ecd08894988a66c190ab75b88c3cc752aba34f
- SHA512 5c3c8ee79c6714097b58276905f2532b1d8be07fbe8db129624f130bd6622bba604393673d2932a08df79eea83caeaf2ce157893ede76bef6fc1027573ea8592
- SSDEEP 192:mHQSi8BsiHoGHUdfJt8skBEZGWRBnBb7ec56ZSj2z0sVRQvWJ9mfzDmb+mtGf0D:yhDsiydb8siTWRRBb7e6qvVCe8X2
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
- SHA256 e04b3c96f65a27030b5e4b071d8e61b8ede1d94cf7bf7845262b29be2b7656ac
- MD5 48f0f1332aca28076f1d479d8a1c0447
- SHA1 e19b21754d221f5fa53aecfb01b2578d9974f35d
- SHA512 7360aab0683f102420e850e5b0ca7e366f605aec7a3be4305dc0fb27270209a006dc5ae1a28f68a7c4241bd1a674a215ce9c197e25aa3e18744691c1b987abe6
- SSDEEP 192:496i8BsiHo4wg68wkw3EZGWRBnBb7ec56ZcjVNs0sDTZLF8GYpfzIiB7Ubc3jTpM:66Dsi61kw3TWRRBb7e6vYMGPaO
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
- SHA256 a58f56f7cf7767658cff9fdfd1ba182cc74a513b3a2b6f34e44625ff811f53dd
- MD5 94a43862cb0159469484841d8370e552
- SHA1 45afc896bb3ef65a7c77550244a52e7212de89ad
- SHA512 eb6454659fd8cb0a631875e27bba01023eb3c75740379c2deb514bc08577221a7914f2717f141134aebc596cb4b34a523548a50f3448abede2b87b4ccfcb93d5
- SSDEEP 192:5iQi8BsiHo/F876g2pSSwpEZGWRBnBb7ec56ZcjVNs0sDTZLzGYpfzwUbc3jTpGN:VDsi88PSwpTWRRBb7e6vY9GcaO
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
- SHA256 ff13110e8b448b033f464184a1a07b4cd32f0f0fea203a4401c284073fffad66
- MD5 d39f6c0a8cfe6f118ffd105cf44dea90
- SHA1 6c0ae83fd83e5b1af2d288b149e0f7907dd378cc
- SHA512 75a42575a542e95a9736deac09fe5480a52d514d9b09c2542a9bf7af1de104a3f83b29bf0c317b4d593d572bc1548728f2fb68115ab1506c5784528ae33710ed
- SSDEEP 192:boRi8BsiHo/rUgyxUHwsEZGWRBnBb7ec56ZcjVNs0sDTZLzDvXYpfzTUbc3jTpGN:sRDsifxUHwsTWRRBb7e6vY9rhaO
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
- SHA256 c57c451d4a524159bf143573cd0568869c8eed814a999bff7f3e560dabd39f1d
- MD5 46485e1a024abc31e8b9d2b4ca9a3b39
- SHA1 57f5f3109969a8dd8e71e1e925dee37f2b61c016
- SHA512 fbaff075b556b461ba6dd731ec52dfe9d3a2be202995e8da1d4794aedb812652a198ffcdaa0052c95fa57f94edb5d51342b1a38e10f62a7ca506c41b759195e3
- SSDEEP 384:UDsinsKkRUJXEe3fLMxtASwgzWgfL3SR14oLLQQU0Kp9b:UY/wufLiR9LLQQUjp9b
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
- SHA256 9ecde6f591caed9c2ce4438884da5f22e35fbdbb97e8d80b43129b23a6791891
- MD5 6bfac3d4ab3ac941a0b2a29a56de6f64
- SHA1 cdc38c3e0de96c3f2b50448cf3dcf42d52e7e243
- SHA512 1e2645df84c5392b09e85dac63970ba49dec9dee63c06548f7717fbfca2643646c1668202217ec836a663c4938fa45774d3c7a9a7254b926d75b0a32c90fd3ee
- SSDEEP 192:y7gi8BsiHoGV1zjbweEZGWRBnBb7ec56ZcjVNs0sDTZLzGYpfzRzUUbc3jTpGNlw:WgDsiX1zjbweTWRRBb7e6vY9Gka3
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
- SHA256 98dd24a56e7d0e2bd2fc6a8bf429aa7bd3820b0d2d90456b972914639d2278ed
- MD5 96431211151b2e58c23262cce683e033
- SHA1 ff90820ba88a249c4f8bb605d6f9d6cfcb896257
- SHA512 28dcd7c9e41cd378f88a14dafa5ae4cec291206feea3bae7a26c6f5681059ccbbf54a59c075a19f752e48658204c388b4495b707e7249f3622e827c24c83630b
- SSDEEP 96:OEyDE8TDyKJzAfa4evYBTY/qHoUbExiNU/qnTxFA:gD2i8BsiHobGHA
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
- SHA256 cf79ba755416ae5628a9dd1f870306b5a45fd6b256efed0c2ac1cc2ccb3307f0
- MD5 3c9476725fbfeeffb9f549d995ee2815
- SHA1 8e2502eb4fc5137ae6e776d1f1804a3afb6eae31
- SHA512 ff35c0a6a878c303567d957c0e465cd9bcd0678c1be3953b3438c686b4f739fb6f47a465465119b474d468d46b19397955e688fc2b92f71abbec276be072f5c8
- SSDEEP 192:a0LuVb+Mu1eIqY/tJVLTjbew68i/+raRKUWKfThEYh4AIhvDHFzxn62hxSAWUMuA:aV3+qw7VLTjbewlKfn+Qx
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
- SHA256 f87ed4480cfddb8f5f6226292338ca407ccc7b1a543f3832f1d20aff6cb72a58
- MD5 2926366654dbc6711ee71ba2589161c3
- SHA1 455e6e5e78d03349454cb1c6b0175e9bf2b943ce
- SHA512 a9a69e32a16ecf7de291e4fa00c6cb349048ceb2f4070406c16b050439a4c2420a7da0f1fc9a0b76e21439b8deabcdd2085c3c14411a6032226c74274dd1e49b
- SSDEEP 192:3BHVb+Mu1eIqY/tJVLTjbew6a7ifHYhgjVJa66Oz9L:3v3+qw7VLTjbew/3GMOd
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
- SHA256 fca3ab5882f0a562794f05d7f15a39157c59d7c07fcbac79ab7cf3d12c979541
- MD5 93fb108016f8a1e87e4129b21fe9984b
- SHA1 f6d6b1cac29fdffe774e5175cb60970ba373a656
- SHA512 e0679ddb288423557170c09bf6848d6d8d74f9e70bd751131db7bd248446606db856a86af7ac8e3500b2950261de199a5ede444d8bf451ee1ccc6cc854151342
- SSDEEP 192:YUsVb+Mu1eIqY/tJVLTjbew6SiNNzu6NSCYyhrt0K5n9dWGufxvH+Gv:Y93+qw7VLTjbewtUSLO+RV
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
- SHA256 2d36bec3e1ecbf2b6de8a37c98717ae21ca8c5bc0b487556996b3fff2b6f6fd9
- MD5 6b77baac03038b028948d2a667efdaa1
- SHA1 6afbc63ab3a2b0bf10cbe802f7633da3e3198417
- SHA512 d7541266b100ac879be8139108344121b10390350b93d26c6f5c5279c18503d7b6829332281a892369de4d578090987d1310201262c181addbc3b9d9495bd209
- SSDEEP 192:Nz9Vb+Mu1eIqY/tJVLTjbew6Si/0eTmVvZOzdTWb7D:Nr3+qw7VLTjbewGsB
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
- SHA256 32fa83c6f8ad346e66e544640942906e0a91cc0d2075324b7f244695de5740a5
- MD5 65d7c9205e1a1393b8530670add4e596
- SHA1 535cada91e5fba038e0fd9f2214f91a83c3be45d
- SHA512 95798f9e068a82380bdbdf649a2dd2f7cc72206444de0a7b9ab2de2cbd9938dc0856f2a0faeb29bcc965900448dfb0e7dddef0cc8e1c5711896f1b82d40a3ca1
- SSDEEP 192:uWKVb+Mu1eIqY/tJVLTjbew6SiNAH6NSCYyhrUJ0KXdWG0xvfxvHZ:ul3+qw7VLTjbewfUSL5y/D
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
- SHA256 7cb16a0b949f8573b06f22f091c44a1ea251cc9904591fceb2743475302c4640
- MD5 002134c7ea7f619246bbf445caad9f08
- SHA1 def97351b77ebf6210b6bfb69b8bc3a4f9a64c36
- SHA512 95e4620258b0189b993bb56f2219f73d84145bd8e5b45f9ad70899d8da0e742bb3ead8697e5335e4de895bed925f6212d96f813b0ce9383ae42a967cca2730ca
- SSDEEP 192:BPJVb+Mu1eIqY/tJVLTjbew68i/vgIey4tvPhSiY+21KBrNbxlv0:BT3+qw7VLTjbew9Wo77A
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
- SHA256 f53d0ffb7f3c8182794331cfdd2fbcf77ff6dbdb05b415c98cc8d6fc49dce2fb
- MD5 88e9b5216b90d0332bd2cd4fcee88a22
- SHA1 748ec8b8b4427f3b48b23b3b224c1cffea2dd169
- SHA512 9d5d6e0cf41e9054d3c9253cec0a482dd97e412794523e352c06d39666931b1d8291fef1c5bbef629eb7c1bb53d866fe2eb925cb314026bf027eaabb1208f0bb
- SSDEEP 192:Sy2Vb+Mu1eIqY/tJVLTjbew6SiNne6NSCYh3hDDEYx1W/nxKHK:S13+qw7VLTjbew/USLkfz
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/WebResources/Resource0/app1/dc-app-launcher.js
- SHA256 007d6ad1c7e18ea4d8481feda64ccd6a15e1b9c6969918a3bdfc16b1e87dadba
- MD5 3b7dfe9956103743fb3b5f372694a3bf
- SHA1 201eb2fa8c40b98a1ecb392b163b20568cf4e448
- SHA512 1bdc0f8448c3d0f572ad89c964bb98f88049e22db7b5cfa02ce442d92daf4bc4f613f47c8d832a5fee881a8080f52fac5afb8f2db869e058ac1a5d8b5fc23236
- SSDEEP 1536:CEDsQ2fPHr170nL1wPvvk9mQhlquCaqDa+5sDa+5RDa+58Da+5ZDa+5hr/Da+5dd:CEIQ2B3Pkg4qM7czhrJPz3nflJb3pB
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/WebResources/Resource0/app1/index.html
- SHA256 efbc2f1ea39a9e840c755820be8b50ee6a78ed604514980b984b9ab1ae18a97f
- MD5 0b31851506ed8c5919d9252172b78cf0
- SHA1 1d791bd5fd1717197ffbfa50620eb0affd3f03cb
- SHA512 8b33cfe591d23c2bbea14cc54bcddbd8f25833a23ecbfbb2ef85f1a6757d15f93bba99f357d31306732e2b32dec7d01068bb3f0f814dd727b6797f5e60f8c9d8
- MD5 SHA1 SHA512
MetaMansion/WebResources/Resource0/appmeasurement/prod/appmeasurement.js
- SHA256 92a4d2c711a9afb4a041255b6923d4d75a0ca8c292d582a72399416bba73ed38
- MD5 c5e93a5eb1ab10949d31bb5f80f95809
- SHA1 d180d65e1319d55e122a59cb75379902612005a8
- SHA512 d0835be6c987644fd1d3ed02ce965166196c54f329ee05499ad9002f36f368b6533d82ac2d70302c40fe403e3281926ee3982863ff03000a2984c5189d8a6e81
- SSDEEP 768:t8GmzOmjiXyJpDFhEBs3bojmI9iJRKyyNRM/8xaGvjjTEMFkc0HI/0z0YJAojzJ8:uDji4DFhEBsKiJEf6223AyDzJJwH
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/WebResources/Resource0/appmeasurement/stage/appmeasurement.js
- SHA256 d2e99f204e8d86f3bbf34e0239d4ed3aead088ee930614bdaa8d7480edd50ab5
- MD5 5b138ea720b0276b00eca90f5d581768
- SHA1 569dc66647a384bbc3439e7f15e82cfdba353770
- SHA512 c261d0a3df412a0a395408b0ed5b3961eb1f14939e9594e9409a224b4f4dd82ae03eecbdaaff5e64b5b9389c6b6a3e85effab9df3de1c4427c1b30031cb09502
- SSDEEP 1536:4gqbt5rOLWUSlZSANE1Pcl9MBN666qtxNf92:4bngY9MVtx2
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/WebResources/Resource0/base_uris.js
- SHA256 c2cf0161fb2bfb426c736ee457cc365a9ba52a9b3d01d1801bacf4713415e649
- MD5 001ec2c7b9a24fb99a7728d25f96191e
- SHA1 27c9890698b098e25c5a58b09294759112fb188c
- SHA512 deb8b577a081b851925a008ed703fe16af42d803e1608e3a3a4e91cc000ea571401bd2e94b5f25bf767517cef74ff0d0f239834a25925c5d63f521638e0949e8
- SSDEEP 96:GDfoX6ECy6hkreVF3FCIwfXDFSIAJJaDt:GDfoXfCy6hkMhFCIwfTFSIAJJax
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/WebResources/Resource0/index.html
- SHA256 bd50e83afd31dfd5f9810d389236ac00dc9f5b93f5000121022d8d56166d4c06
- MD5 b497fa31315258244c91634b4e002098
- SHA1 c5eaef2948415dfa872885c10a205833d1b01814
- SHA512 bbb7303d69669a743a4978c69db559654ff4b80bbda4964f68d248ee82e015eedfc7177fc20b85ea82fde9ed82b3dd24032dc218b368deb2278ad76d4c3608f6
- MD5 SHA1 SHA512
MetaMansion/WebResources/Resource0/init.js
- SHA256 2a474fa03e9e77fa0b2692482f25c48880f52502b322f7ab09d76f23bfcf812d
- MD5 d2050a17401cabe7ad9490e3be993609
- SHA1 2221cb3ed990a86a11111905a8866efe9c87301c
- SHA512 b2475d422123533a670d157c16b9ab206d1fed48d471c31b1de51c75d0a6dcef6a880ae5a88d3368c4ec605fe5d659cf4f6a30fe407e98fd4e94ea21df2f91bf
- SSDEEP 192:aDfjikWCX1AsuqDxSPmsoDIkCy6hv6nGinCbIyWkVlmAdFjWSeCI81b7dc88X5:aXiiX1AsuqTsxlv6HYc981bz8X5
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/WebResources/Resource0/plugins.js
- SHA256 6f61feb0bbf1ee38b9ad118d3b203b71f4384fbf336a184ee55da6748a2e0d21
- MD5 65b922f8273d662c21a78710a9971a45
- SHA1 f2d959466ba2d6a6852aff141566d93fd6dbcfde
- SHA512 1ed6aa3739f63c895ede0fd2dc81a2f4354411a94909d8aa93a0aa1a997d1f4cad493bac4e4902b9b46bb9b8b56fa2720597ce6a9be6601952dc3e0d9c69bba5
- SSDEEP 768:a7aQ8ovfxUvNZUzLdtfx06FPExdEZk+Enk9PEZk+rnlVKfXGh0cGh0wdh3U78V9l:aO5iGMBtfx06FPExdOk+ak9POk+DlVKz
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/WebResources/Resource0/variant.js
- SHA256 49090f650668507294012663db5648e28e7e20e1eee4df6cd5c4493330ba5994
- MD5 243c7e5e12458bf5312653892d5d59bf
- SHA1 2178f717d5f59df70ee6d1999792847ef686f68b
- SHA512 26d7113f7ee309454dbcdd8ea55416a8b76184fab9dcb9e74d7de9704cdd11858fa95d84780e45299cc3c417d5385dfcd735da9149f756f6a93c719ec680b9f6
- MD5 SHA1 SHA512
MetaMansion/WebResources/Resource0/version.js
- SHA256 029a3ec8b4cd2b5205c3ea398777c9a6bd14c97db05f6861727eff9544d22571
- MD5 2f6342f2f52ae86321ed33c891887e99
- SHA1 0138ec0e8b1418464d61f0cdc3cddf3812c29393
- SHA512 6f9fefec2ead24529076cc1a5481ef52b03d3c0dede578fce302961ee6d2d486d8b97d44c7be5d0f5fa23ad58cded3a286ab41c4b7ae85555d34b85811d6c07d
- MD5 SHA1 SHA512
MetaMansion/ccme_ecc.dll
- IMPHASH 85fa29bd3c72ce2d14f3f8e4207261d4
- SHA256 cd87094bdb78dbff8a593bef3952495414b2256eb75ac2d466da276d17e8bd9f
- MD5 19f2641706952f221d5f1066d064db4d
- SHA1 84bf37c1bd5cb3f35cd2aa934cd9c17cb2690282
- SHA512 155a8d9fe2fe238cbc341cb0f088b5be0b58bc2f0ab70eae488972c0e8cd0e16ae3afef64ab96e0c63f14ac53b2ab167f906e2b94bec7ba87b494121edf5ed67
- SSDEEP 6144:Ra3lDLZaFal9tiA1GzrTJdln27EEvdABkVJAOlRs5DIcxkjSuo64hTQ0IL0QpC7K:RUlD9aFal94PDlGuBk3Js5DIqjv
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
356940
Magic Number
523
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
msvcr120
__C_specific_handler
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_initterm_e
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCapturePreviousContext
_initterm
_malloc_crt
free
_amsg_exit
__CppXcptFilter
memmove_s
memcpy_s
memcmp
__clean_type_info_names_internal
memset
kernel32
IsDebuggerPresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
R_FIPS_MODULE_resource
Name
.text
Size
347KB
Virtual Size
346KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
42KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
139KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MetaMansion/icucnv58.dll
- SHA256 47d1821888a1212a141e27007fe99b3fc77b40fc5926fd6c054b850c5911817c
- MD5 94871d17e0b37fea5685c8d3f2f4acc9
- SHA1 925f06a6fbe14dc7c69695c73baa9c8242d5f2c7
- SHA512 fc6fb7753f6f407ccdcc9376c17270f35144e6a23c6dea143f6de9f1e2bbca6e65998121a629ec1b43279c85a97077ad49ee85edb92f07040aebcea6f950363c
- SSDEEP 192:kFNMi7v56OIYiYF8rVs9+qARrkUWJfsHR9y2sE9jBFL2UzZUXjo:kF6idIYiI9yrkU4i/8E9VFL2UtUXjo
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/icucnv67.dll
- SHA256 ee7e175ca56e43932878a617e3a1ac3c005e33ad6964277fea811417ca10d2f2
- MD5 c89f7b63c258a2d8b68a4bdaf5bbb2d4
- SHA1 b1181f70adef2cfc1b884aa4a895984843ca326c
- SHA512 39ca6c5ad801795bbaafe1c85719afdd7ced663ac2fb6530130797a40cd4ed7047d33292c5b41601408488cb5ed4926f9e0744d158a44b128bf517e0562d6e47
- SSDEEP 192:+0NMi7v56dIYiYF8rVs9+qARHk/2WJfsHR9y2sE9jBFL2UzZ9O:+06iuIYiI9yHk/24i/8E9VFL2Ut9
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/icudt58.dll
- SHA256 35400ebcb8010330e18910ddc81ff5d47386af6f93616b96202112c94f67bfc2
- MD5 82189149f0a7e4eaf7da185fffb8d694
- SHA1 4dfcdd52c86b4a3752beab5e335ea60a37a4a6e2
- SHA512 9ea783257b751006479d3bafd30cfb95d9dfcb15bc7798bab15e86437109662b17ed9ce5a3ef98803b21809e3b992dc97a83c392ee3923dfee31d3215b7a8676
- SSDEEP 192:+FNMi7v56OIYiYF8rVs9+qARrkDWJfsHR9y2sE9jBFL2UzZQiU:+F6idIYiI9yrkD4i/8E9VFL2UtQiU
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/icudt67.dll
- SHA256 6bb13375779535aa693f51038540381efba654676b1471a10b61c5ad616fb81e
- MD5 d73b8ebe06c05cddad49297f668b481e
- SHA1 44b139944043d4c4c5a33e1782cd8256f3fa70aa
- SHA512 8dfe75a0219fa67803da33adea82f6e08fd568c938adad3174f9248f060306e4725852282538691a22fff29a9cd50af66c9d884c94f15c9ed392b9f3048844d6
- SSDEEP 192:NFNMi7v56OIYiYF8rVs9+qARrk3WJfsHR9y2sE9jBFL2UzZQp:NF6idIYiI9yrk34i/8E9VFL2UtQ
- MD5 SHA1 SHA512 SSDEEP
MetaMansion/x86/ACE.dll
- IMPHASH 23076d501d734740bd988395f9a2bdc0
- SHA256 f9675304d13efaee32e6b4a3317b64231a59b684532a898d12b4e7ed88518afd
- MD5 d0ae82cdf9911bec3eddda128602af04
- SHA1 58e167521f2b028d03aeb6c926d34c2c969fa9c6
- SHA512 c1520462a8e02ab09e2a101207e88cf6861b48c32b7c2523047251496479740a84987fb19aba4dc8610abe2c81e5f7dbc80c51b8667f4953e17dda583d27557d
- SSDEEP 24576:tmGLzPLOXbuKR17zBXE+MXRHRg2yTEg863NzSxoopoo+F:v3jOyY7zB0+MXRHRg2iBrdzSqF
- MD5 SHA1 SHA512 SSDEEP
Digest
15:ad:5d:15:fc:72:09:57:11:7f:e0:d3:ae:46:a9:a5:57:76:b6:2d:5c:5f:30:2e:cb:74:93:a1:44:12:fb:31
Digest Algorithm
sha256
PE Digests Matches
Trusted
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2022 - May 1, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 9, 2022 - Nov 9, 2031
Minor OS version
Major OS version
Entry point
7040
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetSystemTimeAsFileTime
CloseHandle
WaitForSingleObject
CreateThread
ReleaseSemaphore
CreateSemaphoreA
GetSystemTime
GetModuleFileNameW
SystemTimeToFileTime
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
GlobalMemoryStatus
GetProfileStringA
CreateDirectoryW
MultiByteToWideChar
CreateFileW
DeleteFileW
GetCurrentProcessId
FindFirstFileW
FindNextFileW
GetFileAttributesW
ReadFile
SetFilePointerEx
WriteFile
GetLastError
MoveFileExW
FileTimeToSystemTime
WideCharToMultiByte
IsValidCodePage
GetACP
Sleep
GetCurrentProcess
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThreadId
QueryPerformanceCounter
GetProcAddress
GetModuleHandleA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
VerifyVersionInfoW
GetSystemInfo
IsProcessorFeaturePresent
FindClose
VerSetConditionMask
IsDebuggerPresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
user32
LoadStringA
gdi32
GetICMProfileW
DeleteDC
CreateDCW
CreateDCA
advapi32
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
RegQueryValueExA
shell32
SHGetFolderPathW
ole32
CoCreateInstance
msvcp140
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
vcruntime140
__current_exception
strstr
_except_handler4_common
__std_type_info_destroy_list
__CxxFrameHandler3
memcmp
wcsstr
_purecall
memmove
__current_exception_context
__std_exception_destroy
__std_exception_copy
memset
memcpy
__RTDynamicCast
__std_terminate
_CxxThrowException
api-ms-win-crt-math-l1-1-0
fabs
pow
log10
log2
sqrt
log
_fdsign
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_initterm_e
_invalid_parameter_noinfo
_errno
_initterm
terminate
_cexit
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_crt_atexit
api-ms-win-crt-string-l1-1-0
strncpy
strncmp
strcat
wcstok_s
wcscmp
strcmp
strlen
strnlen
towupper
strcpy
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
__stdio_common_vsscanf
__acrt_iob_func
__stdio_common_vsprintf_s
__stdio_common_vsprintf
api-ms-win-crt-heap-l1-1-0
_callnewh
free
realloc
malloc
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64
api-ms-win-crt-utility-l1-1-0
qsort
ACEGetVersion
ACEHasFeature
ACEInitDelayed
ACEInitialize
ACEInitializeEx
ACETerminate
Name
.text
Size
844KB
Virtual Size
843KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
248KB
Virtual Size
247KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MetaMansion/x86/AGM.dll
- IMPHASH 0c4ef399e3ebaa650bb9619d8524550c
- SHA256 ee32f4cbba3a601d57064695a8ed5955e1b9af984110d34504b8d5ebb132c084
- MD5 b39b8d45413692ff856e9ba907256c2f
- SHA1 ab06b594a57b8bbe0f4c4ba80a12129953521667
- SHA512 1dcc8bbbc55ac27b0a0b96e28de73338b972e2998bc9c33439c32b721de811b2c9ecf6d7953dfbdfadcbcc0c64f56871d09ae953a449c516578e9e8b3e1df661
- SSDEEP 98304:lUpuc5sPE5fMZywrovF+rMnV17FVgvhiWaOuBue5SlIN:cuMCEZ3wrovF+a5Z
- MD5 SHA1 SHA512 SSDEEP
Digest
8f:e0:d2:5a:90:d1:6b:ae:1a:ac:33:7e:43:cd:1b:9d:1a:a2:81:49:42:ab:65:f1:e9:0d:38:e7:3a:26:df:38
Digest Algorithm
sha256
PE Digests Matches
Trusted
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2022 - May 1, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 9, 2022 - Nov 9, 2031
Minor OS version
Major OS version
Entry point
31616
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetModuleFileNameA
VerSetConditionMask
IsProcessorFeaturePresent
VerifyVersionInfoW
QueryPerformanceCounter
IsDebuggerPresent
TerminateProcess
GetWindowsDirectoryA
UnhandledExceptionFilter
CreateEventW
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
GetModuleHandleW
VirtualQuery
VirtualProtect
RaiseException
InitializeSListHead
GetSystemDirectoryW
GetSystemDirectoryA
GetCurrentDirectoryA
GetFileSize
ReadFile
SetCurrentDirectoryA
GlobalSize
WaitForSingleObject
GetProfileStringW
GetSystemDefaultLCID
GetLocaleInfoA
GetACP
GetFileTime
CreateFileA
LoadLibraryA
FindNextFileA
FindFirstFileA
FindClose
GetUserDefaultLangID
GetThreadLocale
GetTimeFormatW
GetTimeFormatA
GetDateFormatW
GetDateFormatA
GetCurrentProcess
DuplicateHandle
CreateSemaphoreA
GetVersionExA
GetThreadPriority
SetThreadPriority
GetCurrentThread
lstrcmpW
GetEnvironmentVariableW
GlobalHandle
GetTempFileNameW
GetTempPathW
DeleteFileW
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
GlobalFree
GlobalAlloc
LoadLibraryW
FreeLibrary
GetLocalTime
GlobalLock
GlobalUnlock
OutputDebugStringA
GetTempPathA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SystemTimeToFileTime
CreateWaitableTimerA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
SetWaitableTimer
GetLastError
HeapFree
HeapAlloc
GetProcessHeap
ResetEvent
SetEvent
GetCurrentThreadId
GetCurrentProcessId
GetProcAddress
Sleep
ReleaseSemaphore
WaitForMultipleObjectsEx
WaitForSingleObjectEx
CloseHandle
GetTickCount
GetSystemInfo
GetModuleHandleA
OpenEventA
CreateEventA
GetSystemTimeAsFileTime
LocalFree
SetUnhandledExceptionFilter
FormatMessageA
user32
DestroyWindow
SetWindowPos
LoadCursorA
LoadIconA
CreateWindowExA
SetActiveWindow
CharNextW
GetMonitorInfoA
EnumDisplayMonitors
UnregisterClassA
RegisterClassA
GetClientRect
GetActiveWindow
WindowFromDC
GetDC
ReleaseDC
GetWindowRect
ScrollWindowEx
OffsetRect
MonitorFromPoint
MonitorFromWindow
GetSystemMetrics
GetDesktopWindow
DefWindowProcA
gdi32
EndPath
CloseFigure
BeginPath
AbortDoc
EndPage
StartPage
EndDoc
StartDocW
GetDIBColorTable
CreateDIBSection
ModifyWorldTransform
SetWorldTransform
GetWorldTransform
SetStretchBltMode
SetROP2
StretchDIBits
StretchBlt
SetPolyFillMode
SetGraphicsMode
SetDIBits
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RealizePalette
ResetDCW
RestoreDC
Rectangle
PatBlt
FillPath
LineTo
IntersectClipRect
GetViewportOrgEx
GetStockObject
GetRgnBox
GetRegionData
GetGraphicsMode
GetDeviceCaps
GetCurrentObject
GetClipRgn
GetClipBox
ExtEscape
Escape
EqualRgn
DeleteObject
DeleteDC
CreateRectRgn
CreatePatternBrush
CreatePolyPolygonRgn
CreatePalette
CreateICW
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CombineRgn
BitBlt
PolyBezierTo
PolylineTo
SetBrushOrgEx
PolyDraw
SelectClipPath
SetMiterLimit
StrokePath
ExtCreatePen
OffsetRgn
MoveToEx
GetObjectA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegGetValueA
RegSetValueExA
ole32
CreateStreamOnHGlobal
msvcp140
_Xtime_get_ticks
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?is@?$ctype@_W@std@@QBE_NF_W@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
_Mtx_init_in_situ
_Mtx_destroy_in_situ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?uncaught_exception@std@@YA_NXZ
?_Xinvalid_argument@std@@YAXPBD@Z
_Query_perf_counter
_Query_perf_frequency
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PAV32@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?id@?$ctype@D@std@@2V0locale@2@A
shlwapi
PathRemoveFileSpecA
PathAppendA
vcruntime140
__std_type_info_compare
memchr
wcschr
strchr
wcsstr
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
memcpy
_purecall
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
__RTDynamicCast
memmove
__std_terminate
memset
memcmp
strstr
api-ms-win-crt-heap-l1-1-0
free
malloc
calloc
realloc
api-ms-win-crt-string-l1-1-0
strtok_s
tolower
isdigit
toupper
_wcsicmp
strncmp
wcsncpy
strcat_s
strcpy_s
wcscpy_s
_stricmp
strncpy
_wcsnicmp
api-ms-win-crt-convert-l1-1-0
atoi
_ltoa_s
strtol
api-ms-win-crt-filesystem-l1-1-0
remove
_lock_file
_unlock_file
rename
api-ms-win-crt-stdio-l1-1-0
fwrite
_fseeki64
fsetpos
fread
fputc
fgetpos
ungetc
setvbuf
feof
fopen
fputs
fgetc
fflush
setbuf
__stdio_common_vsprintf
freopen
getc
fclose
_get_stream_buffer_pointers
fopen_s
__stdio_common_vsprintf_s
__stdio_common_vfprintf
__stdio_common_vswprintf
__acrt_iob_func
ferror
clearerr
fgets
rewind
ftell
fseek
_wfopen_s
ungetwc
fputwc
__stdio_common_vsscanf
fgetwc
api-ms-win-crt-runtime-l1-1-0
_initterm
_invalid_parameter_noinfo_noreturn
terminate
_cexit
_crt_atexit
_execute_onexit_table
_beginthreadex
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_errno
_control87
_initterm_e
strerror
api-ms-win-crt-time-l1-1-0
_gmtime64
_localtime64
_time64
api-ms-win-crt-math-l1-1-0
_libm_sse2_atan_precise
floor
_hypot
_fdclass
_CIfmod
_isnan
_libm_sse2_cos_precise
_CIatan2
ldexp
ceil
_libm_sse2_sqrt_precise
_libm_sse2_log_precise
_libm_sse2_sin_precise
_libm_sse2_pow_precise
_libm_sse2_log10_precise
modf
api-ms-win-crt-utility-l1-1-0
qsort
AGMGetVersion
AGMInitialize
AGMTerminate
Name
.text
Size
4.0MB
Virtual Size
4.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
166KB
Virtual Size
339KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
306KB
Virtual Size
305KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MetaMansion/x86/AIDE.dll
- IMPHASH 35310b00e41c70ccb762d39f144b9fc0
- SHA256 d3ba1adbfeef8f19e4aa570299c06d39a87dfc5fe3d85946270b722e44dacda7
- MD5 ad388ce4c2cc3aaff605994da782d57e
- SHA1 f43c3f588c77a34e8b81b63247ac1d7657016050
- SHA512 f8e8f0fc5d8e01f8afe1aac55d3a301fa0019c6e80099616abf5a41c09aeabd0294e4391ddac170c2cd5bcff0b9e9cb4b559a2eca50a273e398083542065e27b
- SSDEEP 49152:h50rEANbHm4w0H5QZXjr/nZA9XANcZ4T5lQ:b0rEcbG4w0H5QZTrnZEmlu
- MD5 SHA1 SHA512 SSDEEP
Digest
f8:d5:86:13:9f:0e:a8:06:96:1c:b2:3f:07:d6:09:97:f4:49:9a:f0:b2:e5:e0:4c:e1:aa:15:bd:27:b5:8e:99
Digest Algorithm
sha256
PE Digests Matches
Trusted
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 19, 2020 - Dec 21, 2022
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Minor OS version
Major OS version
Entry point
1664992
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
windowscodecs
WICConvertBitmapSource
kernel32
InitializeSListHead
DisableThreadLibraryCalls
CloseHandle
WaitForSingleObject
CreateThread
GetSystemInfo
ReleaseSemaphore
CreateSemaphoreA
FreeLibrary
GetProcAddress
LoadLibraryA
ExitProcess
IsProcessorFeaturePresent
GetTempPathA
DeleteFileA
GetTempFileNameA
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
EnterCriticalSection
ole32
CoInitializeEx
CoCreateInstance
PropVariantClear
msvcp140
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
vcruntime140
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
strstr
strrchr
_setjmp3
__CxxLongjmpUnwind
longjmp
memchr
memset
memmove
__CxxFrameHandler3
_CxxThrowException
__std_exception_destroy
_purecall
__std_exception_copy
__std_terminate
memcpy
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
exit
_initterm_e
_initterm
_cexit
_crt_atexit
abort
_wassert
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
api-ms-win-crt-math-l1-1-0
ldexp
_libm_sse2_log10_precise
_libm_sse2_log_precise
floor
ceil
_libm_sse2_sqrt_precise
_CIatan2
frexp
_libm_sse2_pow_precise
_libm_sse2_exp_precise
api-ms-win-crt-heap-l1-1-0
malloc
_aligned_malloc
_aligned_free
free
calloc
realloc
_callnewh
api-ms-win-crt-stdio-l1-1-0
fopen_s
fseek
ftell
feof
__stdio_common_vsnprintf_s
fclose
fwrite
fflush
__stdio_common_vsprintf
fread
__stdio_common_vfprintf
__acrt_iob_func
api-ms-win-crt-utility-l1-1-0
bsearch
srand
rand
qsort
api-ms-win-crt-string-l1-1-0
tolower
strncmp
api-ms-win-crt-convert-l1-1-0
atoi
api-ms-win-crt-environment-l1-1-0
getenv
??0AIDEDimension@AIDE@@QAE@II@Z
??0AIDEDimension@AIDE@@QAE@XZ
??0AIDEFormatType@AIDE@@QAE@H@Z
??0AIDEFormatType@AIDE@@QAE@XZ
??0AIDEInputOutputStreamCallBacks@AIDE@@QAE@XZ
??0AIDEInputStreamCallBacks@AIDE@@QAE@XZ
??0AIDELibInitCallBacks@AIDE@@QAE@XZ
??0AIDEOutputStreamCallBacks@AIDE@@QAE@XZ
??0AIDEPoint@AIDE@@QAE@II@Z
??0AIDEPoint@AIDE@@QAE@XZ
??0AIDEProgressCallback@AIDE@@QAE@XZ
??0ComponentInfo@AIDE@@QAE@IW4AIDEComponentType@1@@Z
??0ComponentInfo@AIDE@@QAE@XZ
??0PaletteInfo@AIDE@@QAE@XZ
??0PixelPartInfo@AIDE@@QAE@XZ
??1AIDEDimension@AIDE@@QAE@XZ
??1AIDEFormatType@AIDE@@QAE@XZ
??1AIDEInputOutputStreamCallBacks@AIDE@@QAE@XZ
??1AIDEInputStreamCallBacks@AIDE@@QAE@XZ
??1AIDELibInitCallBacks@AIDE@@QAE@XZ
??1AIDEOutputStreamCallBacks@AIDE@@QAE@XZ
??1AIDEPoint@AIDE@@QAE@XZ
??1AIDEProgressCallback@AIDE@@QAE@XZ
??1ComponentInfo@AIDE@@QAE@XZ
??1PaletteInfo@AIDE@@QAE@XZ
??1PixelPartInfo@AIDE@@QAE@XZ
??4AIDEDimension@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEFormatType@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEInputOutputStreamCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEInputStreamCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDELayerSize@AIDE@@QAEAAU01@ABU01@@Z
??4AIDELibInitCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEOutputStreamCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEPoint@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEProgressCallback@AIDE@@QAEAAU01@ABU01@@Z
??4ComponentInfo@AIDE@@QAEAAU01@ABU01@@Z
??4PaletteInfo@AIDE@@QAEAAU01@ABU01@@Z
??4PixelPartInfo@AIDE@@QAEAAU01@ABU01@@Z
?AIDEDecodeOptionsSetComponentOrder@@YA?AW4AIDEError@AIDE@@PAVDecodeOptions@Impl@2@W4AIDEComponentOrder@2@I@Z
?mVersion@AIDEInputOutputStreamCallBacks@AIDE@@2IB
?mVersion@AIDEInputStreamCallBacks@AIDE@@2IB
?mVersion@AIDELibInitCallBacks@AIDE@@2IB
?mVersion@AIDEOutputStreamCallBacks@AIDE@@2IB
?mVersion@AIDEProgressCallback@AIDE@@2IB
AIDECreateLibInstance
AIDEDecodeOptionsSetBitDepth
AIDEDecodeOptionsSetColorSpace
AIDEDecodeOptionsSetDirectDecode
AIDEDecodeOptionsSetImageOrientation
AIDEDecodeOptionsSetImageResampling
AIDEDecodeOptionsSetIntValue
AIDEDecodeOptionsSetMaxDimensions
AIDEDecodeOptionsSetNoDecodeErrors
AIDEDecodeOptionsSetPackingType
AIDEDecodeOptionsSetPalette
AIDEDecodeOptionsSetPrivateChunkNames
AIDEDecodeOptionsSetTransparency
AIDEDecoderDecodeNextImage
AIDEDecoderDecodeNextTile
AIDEDecoderFillPixelPartBuffers
AIDEDecoderGetColorInfo
AIDEDecoderGetColorSpace
AIDEDecoderGetCommonColorBitDepth
AIDEDecoderGetComponentCount
AIDEDecoderGetComponentInfo
AIDEDecoderGetDirectDecode
AIDEDecoderGetEXIF_1_Data
AIDEDecoderGetEXIF_3_Data
AIDEDecoderGetFormatType
AIDEDecoderGetGlobalTransparencyIndex
AIDEDecoderGetICCProfile
AIDEDecoderGetIPTCData
AIDEDecoderGetImageResolution
AIDEDecoderGetImageSize
AIDEDecoderGetMetaDataBlob
AIDEDecoderGetMetaDataBlobAtIndex
AIDEDecoderGetMetaDataBlobClientBuffer
AIDEDecoderGetMetaDataIntegerValue
AIDEDecoderGetPackingInfo
AIDEDecoderGetPaletteColorInfo
AIDEDecoderGetPaletteFullyTransparentValue
AIDEDecoderGetPaletteInfo
AIDEDecoderGetPaletteTransparencyType
AIDEDecoderGetPixelPartInfo
AIDEDecoderGetPixelPartInfoBigFilesSupported
AIDEDecoderGetTileInfo
AIDEDecoderGetTransparencyType
AIDEDecoderGetXMPData
AIDEDecoderHasPalettedComponent
AIDEDecoderSetMaxTileBufferSize
AIDEDecoderSetMaxTileBufferSizeBigFilesSupported
AIDEDestroyLibInstance
AIDEEncoderEncodeNRows
AIDEEncoderEncodeNextImage
AIDEEncoderFinishEncoding
AIDEEncoderGetFormatType
AIDEEncoderRegisterProgressCallback
AIDEEncoderSetColorSpace
AIDEEncoderSetCommonColorBitDepth
AIDEEncoderSetEXIF_1_Data
AIDEEncoderSetEXIF_3_Data
AIDEEncoderSetICCProfile
AIDEEncoderSetIPTCData
AIDEEncoderSetImageResampling
AIDEEncoderSetImageResolution
AIDEEncoderSetImageSize
AIDEEncoderSetMetaDataBlob
AIDEEncoderSetMetaDataIntegerValue
AIDEEncoderSetPaletteFullyTransparentIndex
AIDEEncoderSetPaletteInfo
AIDEEncoderSetPaletteTransparencyType
AIDEEncoderSetPixelPartInfo
AIDEEncoderSetPixelPartInfoBigFilesSupported
AIDEEncoderSetTileInfo
AIDEEncoderSetTransparencyType
AIDEEncoderSetXMPData
AIDEEncoderWriteHeader
AIDEEncoderWritePixelPartBuffers
AIDEJXREncodeOptionsSetAlphaChannelFormat
AIDEJXREncodeOptionsSetAlphaChannelQuality
AIDEJXREncodeOptionsSetBitStreamOrdering
AIDEJXREncodeOptionsSetChromaSubSampling
AIDEJXREncodeOptionsSetCompressionType
AIDEJXREncodeOptionsSetImageQuality
AIDEJXREncodeOptionsSetOverlapLevel
AIDEJXREncodeOptionsSetTilingSlices
AIDEJpegEncodeOptionsSetAIQuality
AIDEJpegEncodeOptionsSetCustomQuality
AIDEJpegEncodeOptionsSetEncodeMethod
AIDEJpegEncodeOptionsSetEncodeMode
AIDEJpegEncodeOptionsSetPackingType
AIDEJpegEncodeOptionsSetQualityLevel
AIDEJpegEncodeOptionsSetSave4WebQuality
AIDEJpegEncodeOptionsSetUseClipping
AIDELibBuildDate
AIDELibCreateBmpEncodeOptions
AIDELibCreateDecodeOptions
AIDELibCreateDecoder
AIDELibCreateDecoderForFormatType
AIDELibCreateEncoderForBMP
AIDELibCreateEncoderForGIF
AIDELibCreateEncoderForICON
AIDELibCreateEncoderForJPEG
AIDELibCreateEncoderForJXR
AIDELibCreateEncoderForPDF
AIDELibCreateEncoderForPNG
AIDELibCreateEncoderForRAW
AIDELibCreateEncoderForTIFF
AIDELibCreateEncoderForWEBP
AIDELibCreateGifEncodeOptions
AIDELibCreateIconEncodeOptions
AIDELibCreateInputOutputStream
AIDELibCreateInputStream
AIDELibCreateInputStreamUncached
AIDELibCreateJXREncodeOptions
AIDELibCreateJpegEncodeOptions
AIDELibCreateOutputStream
AIDELibCreatePdfEncodeOptions
AIDELibCreatePngEncodeOptions
AIDELibCreateRawEncodeOptions
AIDELibCreateTiffEncodeOptions
AIDELibCreateWebPEncodeOptions
AIDELibDestroyBmpEncodeOptions
AIDELibDestroyDecodeOptions
AIDELibDestroyDecoder
AIDELibDestroyEncoder
AIDELibDestroyGifEncodeOptions
AIDELibDestroyIconEncodeOptions
AIDELibDestroyInputOutputStream
AIDELibDestroyInputStream
AIDELibDestroyJXREncodeOptions
AIDELibDestroyJpegEncodeOptions
AIDELibDestroyOutputStream
AIDELibDestroyPdfEncodeOptions
AIDELibDestroyPngEncodeOptions
AIDELibDestroyRawEncodeOptions
AIDELibDestroyTiffEncodeOptions
AIDELibDestroyWebPEncodeOptions
AIDELibVersion
AIDEPngEncodeOptionsSetAttemptPaletteCreation
AIDEPngEncodeOptionsSetCompressionLevel
AIDEPngEncodeOptionsSetForcedPaletteCreation
AIDEPngEncodeOptionsSetInterlaced
AIDEPngEncodeOptionsSetPHYChunk
AIDEPngEncodeOptionsSetPalettizationTechnique
AIDERawEncodeOptionsSetBlurMethod
AIDETiffEncodeOptionsDiableLayer
AIDETiffEncodeOptionsSetCompressionScheme
AIDETiffEncodeOptionsSetCustomEncodeParams
AIDETiffEncodeOptionsSetPyramidParams
AIDETiffEncodeOptionsSetPyramidParamsCustomLayers
AIDETiffEncodeOptionsSetTileSize
AIDEWebPEncodeOptionsSetCompressionType
AIDEWebPEncodeOptionsSetImageQuality
AIDEWritePrivateChunk
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
300KB
Virtual Size
299KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
30KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MetaMansion/x86/AdobeXMP.dll
- IMPHASH 6af9b18d0fde4654e8b2a5c75a9563ec
- SHA256 e958f4ed8272a96e599ff9f0a79331e7b5109104a9d20d3f760c7eb162daf7e0
- MD5 7c3033588c1a187918cf3fd246069a3f
- SHA1 2b637a9d37de604ae8e98fcbc73746ccc0402b31
- SHA512 80d513d25477081c84af87e8127a02bb332204ad7399ac653a27ca726e446fd25518d36189bf90b10cbf34119d35501e006a2e06dbca5a96dc2348aff6b6fe91
- SSDEEP 24576:7CaZsdfNjJaN0OdQfLCKVkDavzVi5p5bafAAy4:7ZspNQVQdkahi5zaf5R
- MD5 SHA1 SHA512 SSDEEP
Digest
16:5e:8f:63:35:31:dd:76:c0:23:f7:3e:30:cc:20:bd:18:56:20:a3:bc:89:98:1f:61:7a:d9:b1:13:2c:c5:f8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 19, 2020 - Dec 21, 2022
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Minor OS version
Major OS version
Entry point
619888
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetCurrentProcessId
GetSystemTimeAsFileTime
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
DeleteCriticalSection
ResetEvent
WaitForSingleObjectEx
InitializeSListHead
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentThreadId
DisableThreadLibraryCalls
InitializeCriticalSectionAndSpinCount
ole32
CoCreateGuid
msvcp140
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?uncaught_exception@std@@YA_NXZ
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
vcruntime140
_except_handler4_common
__std_type_info_destroy_list
_CxxThrowException
__std_type_info_compare
memcmp
_purecall
__std_exception_copy
memcpy
memmove
__std_exception_destroy
__std_terminate
__CxxFrameHandler3
__RTDynamicCast
memset
memchr
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_invalid_parameter_noinfo_noreturn
_cexit
_seh_filter_dll
_initterm
_initterm_e
_errno
_configure_narrow_argv
api-ms-win-crt-string-l1-1-0
strncmp
strlen
strcmp
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsscanf
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
realloc
api-ms-win-crt-locale-l1-1-0
__initialize_lconv_for_unsigned_char
setlocale
api-ms-win-crt-time-l1-1-0
_gmtime64_s
_localtime64_s
_mktime64
_time64
_difftime64
api-ms-win-crt-convert-l1-1-0
strtod
api-ms-win-crt-utility-l1-1-0
rand_s
api-ms-win-crt-environment-l1-1-0
getenv
WXMPDocOps_BranchXMP_1
WXMPDocOps_CTor_1
WXMPDocOps_Clone_1
WXMPDocOps_CreateID_1
WXMPDocOps_DecrementRefCount_1
WXMPDocOps_EnsureIDsExist_1
WXMPDocOps_GetMetaRef_1
WXMPDocOps_GetPartChangeID_1
WXMPDocOps_HasPartChanged_1
WXMPDocOps_IncrementRefCount_1
WXMPDocOps_IsDirty_1
WXMPDocOps_NewXMP_1
WXMPDocOps_NoteChange_1
WXMPDocOps_OpenXMP_1
WXMPDocOps_PrepareForSave_1
WXMPDocOps_SetAppName_1
WXMPIterator_DecrementRefCount_1
WXMPIterator_IncrementRefCount_1
WXMPIterator_Next_1
WXMPIterator_PropCTor_1
WXMPIterator_Skip_1
WXMPIterator_TableCTor_1
WXMPMeta_AppendArrayItem_1
WXMPMeta_CTor_1
WXMPMeta_Clone_1
WXMPMeta_CountArrayItems_1
WXMPMeta_DecrementRefCount_1
WXMPMeta_DeleteArrayItem_1
WXMPMeta_DeleteLocalizedText_1
WXMPMeta_DeleteNamespace_1
WXMPMeta_DeleteProperty_1
WXMPMeta_DeleteQualifier_1
WXMPMeta_DeleteStructField_1
WXMPMeta_DoesArrayItemExist_1
WXMPMeta_DoesPropertyExist_1
WXMPMeta_DoesQualifierExist_1
WXMPMeta_DoesStructFieldExist_1
WXMPMeta_DumpNamespaces_1
WXMPMeta_DumpObject_1
WXMPMeta_DumpPropertyTraits_1
WXMPMeta_Erase_1
WXMPMeta_GetArrayItem_1
WXMPMeta_GetGlobalOptions_1
WXMPMeta_GetIXMPMetadata_1
WXMPMeta_GetLocalizedText_1
WXMPMeta_GetMemProcs_1
WXMPMeta_GetNamespacePrefix_1
WXMPMeta_GetNamespaceURI_1
WXMPMeta_GetObjectName_1
WXMPMeta_GetObjectOptions_1
WXMPMeta_GetProperty_1
WXMPMeta_GetProperty_Bool_1
WXMPMeta_GetProperty_Date_1
WXMPMeta_GetProperty_Float_1
WXMPMeta_GetProperty_Int64_1
WXMPMeta_GetProperty_Int_1
WXMPMeta_GetQualifier_1
WXMPMeta_GetStructField_1
WXMPMeta_GetVersionInfo_1
WXMPMeta_GetXMPDOMFactoryInstance_1
WXMPMeta_IncrementRefCount_1
WXMPMeta_Initialize_1
WXMPMeta_MarkStaleProperties_1
WXMPMeta_ParseFromBuffer_1
WXMPMeta_RegisterAssertNotify_1
WXMPMeta_RegisterNamespace_1
WXMPMeta_RegisterPropertyTraits_1
WXMPMeta_ResetErrorCallbackLimit_1
WXMPMeta_SerializeToBuffer_1
WXMPMeta_SetArrayItem_1
WXMPMeta_SetDefaultErrorCallback_1
WXMPMeta_SetErrorCallback_1
WXMPMeta_SetGlobalOptions_1
WXMPMeta_SetLocalizedText_1
WXMPMeta_SetObjectName_1
WXMPMeta_SetObjectOptions_1
WXMPMeta_SetProperty_1
WXMPMeta_SetProperty_Bool_1
WXMPMeta_SetProperty_Date_1
WXMPMeta_SetProperty_Float_1
WXMPMeta_SetProperty_Int64_1
WXMPMeta_SetProperty_Int_1
WXMPMeta_SetQualifier_1
WXMPMeta_SetStructField_1
WXMPMeta_Sort_1
WXMPMeta_Terminate_1
WXMPMeta_UnregisterAssertNotify_1
WXMPMeta_Use_CPP_DOM_APIs_1
WXMPUtils_AppendProperties_1
WXMPUtils_ApplyTemplate_1
WXMPUtils_CatenateArrayItems_1
WXMPUtils_CollectMultiFileXMP_1
WXMPUtils_CompareDateTime_1
WXMPUtils_ComposeArrayItemPath_1
WXMPUtils_ComposeFieldSelector_1
WXMPUtils_ComposeLangSelector_1
WXMPUtils_ComposeQualifierPath_1
WXMPUtils_ComposeStructFieldPath_1
WXMPUtils_ConvertFromBool_1
WXMPUtils_ConvertFromDate_1
WXMPUtils_ConvertFromFloat_1
WXMPUtils_ConvertFromInt64_1
WXMPUtils_ConvertFromInt_1
WXMPUtils_ConvertToBool_1
WXMPUtils_ConvertToDate_1
WXMPUtils_ConvertToFloat_1
WXMPUtils_ConvertToInt64_1
WXMPUtils_ConvertToInt_1
WXMPUtils_ConvertToLocalTime_1
WXMPUtils_ConvertToUTCTime_1
WXMPUtils_CurrentDateTime_1
WXMPUtils_DecodeFromBase64_1
WXMPUtils_DistributeMultiFileXMP_1
WXMPUtils_DuplicateSubtree_1
WXMPUtils_EncodeToBase64_1
WXMPUtils_GetBulkMarkers_1
WXMPUtils_GetDateRange_1
WXMPUtils_GetMergedListPath_1
WXMPUtils_IsPropertyMultiValued_1
WXMPUtils_MergeFromJPEG_1
WXMPUtils_PackageForJPEG_1
WXMPUtils_RemoveMultiValueInfo_1
WXMPUtils_RemoveProperties_1
WXMPUtils_SeparateArrayItems_1
WXMPUtils_SetBulkMarkers_1
WXMPUtils_SetTimeZone_1
XMP_GetAssertNotify
XMP_NewExpatAdapter
Name
.text
Size
648KB
Virtual Size
647KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
161KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MetaMansion/x86/BIB.dll
- IMPHASH 1d0257e1aac91706ba5a3464d653bbcc
- SHA256 ca53407b356fcdea51a6d536447ed6b88ad14c87facf421080d141cae837eedc
- MD5 404de37b800b661ebfaa218b20c8c0c6
- SHA1 2a2416b663ee9d9ec6325d2c70bf05be27a73eac
- SHA512 e6d66bcb0da4ca5456dab376385c73a918fc13c4b0ab9a05d2324dbb7a9fcf197d727acfbedb15e55452b916c9afde0ed01b233868a88ae0f34ee01306289430
- SSDEEP 3072:x9mmiJ1WvqJ7fW7n/WY0EZrZsibdumKr9igRsNpKN02+OzHwn:TkaqJi7M0dO
- MD5 SHA1 SHA512 SSDEEP
Digest
4e:82:9e:48:90:6d:15:fd:16:9a:60:b0:00:eb:8a:88:89:43:56:6f:3a:83:a7:8a:ce:a5:dc:73:8f:9c:69:84
Digest Algorithm
sha256
PE Digests Matches
Trusted
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2022 - May 1, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 9, 2022 - Nov 9, 2031
Minor OS version
Major OS version
Entry point
4832
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
EnterCriticalSection
LeaveCriticalSection
CloseHandle
QueryPerformanceCounter
InitializeCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
CreateThread
GetSystemTimeAsFileTime
GetModuleHandleA
GetProcAddress
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetACP
Sleep
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
InitializeSListHead
msvcp140
?_Xlength_error@std@@YAXPBD@Z
vcruntime140
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
memset
__std_exception_destroy
_purecall
memcpy
__std_terminate
__CxxFrameHandler3
memmove
_CxxThrowException
__current_exception
__std_exception_copy
__RTDynamicCast
api-ms-win-crt-string-l1-1-0
strlen
strcmp
api-ms-win-crt-stdio-l1-1-0
fseek
fread
fopen
fflush
ferror
fwrite
feof
fclose
ftell
_wfopen
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
_invalid_parameter_noinfo
terminate
_errno
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
api-ms-win-crt-math-l1-1-0
log
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-heap-l1-1-0
free
malloc
_callnewh
BIBGetGetProcAddress
BIBGetVersion
BIBInitialize
BIBInitialize2
BIBInitialize3
BIBInitialize4
BIBLockSmithAssertNoLocksImpl
BIBLockSmithDeleteImpl
BIBLockSmithLockImpl
BIBLockSmithUnlockImpl
BIBTerminate
Name
.text
Size
65KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MetaMansion/x86/BIBUtils.dll
- IMPHASH 6ec1b6b05b219bb02c165a7efc6c6592
- SHA256 0f2b3d012a9abe420bc36c62847bba6ca4478ceebc018bad2b19f22d481fcc10
- MD5 79622b56347c1fd44b74bd4ea74cb813
- SHA1 51c1e13a4b5aad657c570149c529dd4963adf77a
- SHA512 ebc329e0d1d869107043e5b0a0e05d4322fa0a2bbc2c30411d51ce1b4b33778ee94f82ad072cc8cf75222f488e52bf52dfb7481edfdef3e39fd58259685ad195
- SSDEEP 3072:0VMWnX3e6TCL2ssOGpibdy1ZLKDZW7TPtAlgeoVA/sis/zquLtyQh1g:0JnHeKk2s03q0nh
- MD5 SHA1 SHA512 SSDEEP
Digest
04:8d:86:7f:c2:82:50:d9:cf:83:97:16:d4:b7:e0:83:50:ed:25:f8:63:08:ac:60:eb:c3:64:24:4e:0f:c7:40
Digest Algorithm
sha256
PE Digests Matches
Trusted
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2022 - May 1, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 9, 2022 - Nov 9, 2031
Minor OS version
Major OS version
Entry point
94032
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetCurrentDirectoryA
GetTempPathA
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
vcruntime140
_except_handler4_common
__std_type_info_destroy_list
_purecall
__std_terminate
__std_exception_copy
memset
memcpy
__RTDynamicCast
__CxxFrameHandler3
_CxxThrowException
strstr
__std_exception_destroy
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_seh_filter_dll
_errno
_configure_narrow_argv
_initterm
_initterm_e
_invalid_parameter_noinfo
api-ms-win-crt-string-l1-1-0
strcspn
isdigit
isprint
isalpha
strspn
api-ms-win-crt-convert-l1-1-0
atof
atoi
api-ms-win-crt-filesystem-l1-1-0
rename
remove
_stat64i32
api-ms-win-crt-stdio-l1-1-0
_sopen_dispatch
__stdio_common_vsscanf
_close
__stdio_common_vsprintf_s
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
BIBUtilsGetVersion
BIBUtilsInitialize
BIBUtilsTerminate
Name
.text
Size
102KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MetaMansion/x86/CoolType.dll
- IMPHASH 4802bc9f23feb1a2452c8519e072c9db
- SHA256 d4a0db913fa555808ce627114fe6e2725970499c70364edbedf47d907d52242d
- MD5 6fb9f15b6a1dd1ee9cdb9b4ef290d69e
- SHA1 c5955655e9b96004a72bbb09aa72996f3ddaa539
- SHA512 24be26d2e0dc3e05f786ce3eee815247261fe99e1bff08e689d71bf68e7d5340e942aaaefd9203569f63c23a5f5cb46c1ff6a2d91f2753fd6d78240fffa7beed
- SSDEEP 49152:37sVoVC47fsPVTs57ovd2MMg6NYpnd3EQUyfha+P/u6LSXvowU7u9qRXApP4Cqrt:37RCwfsdTk+dlb73ELyfhlf9K4Cqi3
- MD5 SHA1 SHA512 SSDEEP
Digest
df:22:f2:13:c9:82:c5:d8:5e:42:5f:71:26:d1:af:c2:d7:7d:3c:3d:aa:70:fb:be:55:61:45:17:02:f8:a2:66
Digest Algorithm
sha256
PE Digests Matches
Trusted
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2022 - May 1, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 9, 2022 - Nov 9, 2031
Minor OS version
Major OS version
Entry point
8832
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
LocalAlloc
LocalFree
GetSystemDefaultLCID
GetUserDefaultLCID
CreateEventA
GetVersionExA
GetSystemTime
SystemTimeToFileTime
GetLastError
GetACP
FileTimeToLocalFileTime
FileTimeToSystemTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
FlushFileBuffers
GetCurrentProcess
MoveFileExW
VerSetConditionMask
IsProcessorFeaturePresent
GetSystemInfo
VerifyVersionInfoW
FreeLibrary
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExA
SetLastError
GetTickCount
WaitForMultipleObjects
FindNextChangeNotification
FindCloseChangeNotification
FindClose
GetCurrentProcessId
lstrlenA
CreateFileA
WaitForSingleObject
ResetEvent
SetEvent
CompareStringA
GetPrivateProfileStringA
SetFilePointer
ReadFile
GetFileSize
ReadDirectoryChangesW
CloseThreadpoolIo
WaitForThreadpoolIoCallbacks
StartThreadpoolIo
CancelThreadpoolIo
CreateThreadpoolIo
CloseHandle
GetModuleHandleA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WriteFile
InitializeCriticalSection
VirtualQuery
VirtualProtect
RaiseException
InitializeSListHead
user32
GetDC
ReleaseDC
MonitorFromPoint
DestroyWindow
CreateWindowExA
RegisterClassA
GetDesktopWindow
DefWindowProcA
gdi32
SetTextAlign
SetBkMode
GetTextExtentPointI
GetDeviceCaps
GdiFlush
ExtTextOutA
GetObjectA
GetTextMetricsA
SetTextColor
SetBkColor
PatBlt
GetTextExtentPointA
GetCurrentObject
GetCharABCWidthsA
GetBitmapBits
CreateBitmap
SelectObject
GetFontData
DeleteDC
CreateCompatibleDC
DeleteObject
advapi32
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegGetValueW
shell32
SHGetKnownFolderPath
SHGetMalloc
SHGetFolderPathW
SHGetSpecialFolderLocation
ole32
CoGetClassObject
CoInitializeEx
CoUninitialize
CoTaskMemFree
msvcp140
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?_Xlength_error@std@@YAXPBD@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Xinvalid_argument@std@@YAXPBD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?_Random_device@std@@YAIXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
vcruntime140
strchr
_purecall
__std_exception_copy
__std_exception_destroy
__RTDynamicCast
strstr
wcsstr
memcmp
wcschr
memchr
strrchr
__CxxLongjmpUnwind
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
_setjmp3
memset
memcpy
__std_terminate
memmove
__CxxFrameHandler3
_CxxThrowException
wcsrchr
longjmp
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_initterm_e
_configure_narrow_argv
_set_thread_local_invalid_parameter_handler
_initterm
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_errno
_invalid_parameter_noinfo
_initialize_onexit_table
_register_onexit_function
abort
api-ms-win-crt-string-l1-1-0
isupper
strspn
wcsncmp
wcsnlen
wcscmp
wcscpy_s
wcscat_s
strcspn
wcstok_s
strlen
strcat
wcsncat_s
strpbrk
toupper
strtok_s
strtok
isxdigit
isalnum
isdigit
tolower
wcslen
isspace
strcmp
wcscat
_wcsnicmp
_wcsicmp
wcsncpy_s
strncpy
strncmp
strcpy
isalpha
wcscpy
towupper
api-ms-win-crt-utility-l1-1-0
rand
labs
qsort
bsearch
abs
api-ms-win-crt-stdio-l1-1-0
fgets
_get_stream_buffer_pointers
setvbuf
_wfopen
ungetc
fwrite
_fseeki64
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
fputc
fsetpos
__stdio_common_vsnprintf_s
fgetpos
__stdio_common_vfprintf_s
gets_s
__stdio_common_vfwprintf_s
__stdio_common_vfprintf
__stdio_common_vsprintf_s
fread
__acrt_iob_func
clearerr
feof
ferror
_fileno
fputs
fseek
ftell
_get_osfhandle
_open_osfhandle
fgetwc
fputwc
fgetc
fflush
ungetwc
fclose
api-ms-win-crt-math-l1-1-0
_except1
_fdopen
log
atan2
floor
asin
log10
tan
ceil
atan
fabs
pow
sqrt
api-ms-win-crt-convert-l1-1-0
atol
strtol
strtoul
atoi
_ui64tow_s
_ltow_s
_ultow_s
strtof
_i64tow_s
_itoa_s
_ltoa_s
_ultoa_s
mbstowcs_s
_itow_s
strtod
_ui64toa_s
_i64toa_s
api-ms-win-crt-heap-l1-1-0
free
malloc
realloc
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
_makepath_s
_wremove
_waccess
_stat64i32
_wsplitpath_s
_wfullpath
_splitpath_s
api-ms-win-crt-time-l1-1-0
_localtime64
_time64
_mktime64
_gmtime64
CTCleanup
CTGetVersion
CTInit
Name
.text
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
743KB
Virtual Size
743KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
107KB
Virtual Size
158KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
155KB
Virtual Size
154KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MetaMansion/x86/JP2KLib.dll
- IMPHASH 83b05223f39b8593905fca1ffc7a2eba
- SHA256 979851cac4a2a0e394f06ca7139d7402911048b094f550dd9b33d1203ae92862
- MD5 73c0da5c825e3a2275dbef4f8dae0813
- SHA1 6f6191867fddf3c284066dd855512198c509d64c
- SHA512 aa01cba77cf94d3a4c66ac7169414d4d7f91d8965d312bb46430b766affe0ff93c241a84ad9e1796c08c28fcbc613c9d98cde37b2b4914e801abff6c638a111b
- SSDEEP 12288:tskp3VH/G2LrUUIGVC3hCDfF5AzO5qkkZalIf+AGzVYu5uRcyef0njWcArh45j:tsK3VH/dlIGAGzqu07ef0qO
- MD5 SHA1 SHA512 SSDEEP
Digest
58:1b:1d:8f:72:c6:d6:23:4d:16:57:a6:90:20:b0:b6:bb:8e:cd:6f:4b:f7:aa:de:e3:22:ec:4a:ea:5f:87:18
Digest Algorithm
sha256
PE Digests Matches
Trusted
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 19, 2020 - Dec 21, 2022
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Minor OS version
Major OS version
Entry point
453408
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
vcruntime140
__current_exception
__std_type_info_destroy_list
_CxxThrowException
memset
__current_exception_context
_except_handler4_common
__CxxFrameHandler3
api-ms-win-crt-math-l1-1-0
_libm_sse2_sqrt_precise
_except1
log10
_libm_sse2_pow_precise
fabs
ceil
sqrt
pow
_libm_sse2_log_precise
api-ms-win-crt-string-l1-1-0
strncmp
strlen
api-ms-win-crt-utility-l1-1-0
abs
api-ms-win-crt-stdio-l1-1-0
fputc
fflush
fclose
__acrt_iob_func
putc
fwrite
__stdio_common_vfprintf
fopen_s
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_register_onexit_function
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
_initterm
_initialize_onexit_table
_seh_filter_dll
api-ms-win-crt-heap-l1-1-0
free
kernel32
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
??0JP2KCodeStm@@QAE@XZ
??0JP2KMemFuncs@@QAE@XZ
??0JP2KMemFuncsEx@@QAE@XZ
??1JP2KCodeStm@@QAE@XZ
??4IJP2KException@@QAEAAV0@$$QAV0@@Z
??4IJP2KException@@QAEAAV0@ABV0@@Z
??4JP2KBufID_I@@QAEAAU0@$$QAU0@@Z
??4JP2KBufID_I@@QAEAAU0@ABU0@@Z
??4JP2KClientData@@QAEAAU0@$$QAU0@@Z
??4JP2KClientData@@QAEAAU0@ABU0@@Z
??4JP2KClientProcs@@QAEAAU0@$$QAU0@@Z
??4JP2KClientProcs@@QAEAAU0@ABU0@@Z
??4JP2KCodeStm@@QAEAAV0@ABV0@@Z
??4JP2KDecOpt@@QAEAAU0@$$QAU0@@Z
??4JP2KDecOpt@@QAEAAU0@ABU0@@Z
??4JP2KEncOpt@@QAEAAU0@$$QAU0@@Z
??4JP2KEncOpt@@QAEAAU0@ABU0@@Z
??4JP2KException@@QAEAAU0@$$QAU0@@Z
??4JP2KException@@QAEAAU0@ABU0@@Z
??4JP2KImageDataParms@@QAEAAU0@$$QAU0@@Z
??4JP2KImageDataParms@@QAEAAU0@ABU0@@Z
??4JP2KImageDataProcs@@QAEAAU0@$$QAU0@@Z
??4JP2KImageDataProcs@@QAEAAU0@ABU0@@Z
??4JP2KMemFuncs@@QAEAAU0@$$QAU0@@Z
??4JP2KMemFuncs@@QAEAAU0@ABU0@@Z
??4JP2KMemFuncsEx@@QAEAAU0@$$QAU0@@Z
??4JP2KMemFuncsEx@@QAEAAU0@ABU0@@Z
??4JP2KStreamProcs@@QAEAAU0@$$QAU0@@Z
??4JP2KStreamProcs@@QAEAAU0@ABU0@@Z
??4JP2KStreamProcsEx@@QAEAAU0@$$QAU0@@Z
??4JP2KStreamProcsEx@@QAEAAU0@ABU0@@Z
??4JP2KUserActions@@QAEAAU0@$$QAU0@@Z
??4JP2KUserActions@@QAEAAU0@ABU0@@Z
?ClearErrState@IJP2KException@@QAEXXZ
?Clone@IJP2KException@@QAEXPAV1@@Z
?Die@JP2KCodeStm@@QAEXXZ
?GetCurPos@JP2KCodeStm@@QAE_JXZ
?GetErrString@IJP2KException@@QAEPADXZ
?GetOpenMode@JP2KCodeStm@@QAE?AW4JP2KStmOpenMode@@XZ
?GetStmBase@JP2KCodeStm@@QAEPAXXZ
?GetStmProcs@JP2KCodeStm@@QAEPAUJP2KStreamProcsEx@@XZ
?GetTotalLength@JP2KCodeStm@@QAE_KXZ
?InitJP2KCodeStm@JP2KCodeStm@@QAEH_KHPAXPAUJP2KStreamProcsEx@@W4JP2KStmOpenMode@@H@Z
?IsReadable@JP2KCodeStm@@QAE_NXZ
?IsSeekable@JP2KCodeStm@@QAE_NXZ
?IsWritable@JP2KCodeStm@@QAE_NXZ
?ReadOnly@JP2KCodeStm@@QAE_NXZ
?StmLengthUnknown@JP2KCodeStm@@QAE_NXZ
?TellPos@JP2KCodeStm@@QAE_JXZ
?WriteOnly@JP2KCodeStm@@QAE_NXZ
?flushWriteBuffer@JP2KCodeStm@@QAEHXZ
?read@JP2KCodeStm@@QAEHPAEH@Z
?seek@JP2KCodeStm@@QAE_JH_J@Z
?write@JP2KCodeStm@@QAEHPAEH@Z
CIEParamsAreDefaults
ColorSpecIsJP2Compatibile
InitDefaultCIEParams
JP2KCopyRect
JP2KDecOptCreate
JP2KDecOptDestroy
JP2KDecOptInitToDefaults
JP2KEncOptClone
JP2KEncOptCreate
JP2KEncOptDestroy
JP2KEncOptGetGeomParams
JP2KEncOptInitToDefaults
JP2KEncOptInitToDefaultsUsingImageGeometry
JP2KGetMemObj
JP2KGetMemObjEx
JP2KImageCompletedDecoding
JP2KImageCompressAndWriteTile
JP2KImageCompressImage
JP2KImageCompressTile
JP2KImageCreate
JP2KImageDataCreate
JP2KImageDataDestroy
JP2KImageDataFreeImageBuffer
JP2KImageDataGetHeight
JP2KImageDataGetImageBuffer
JP2KImageDataGetSizeofImageDataType
JP2KImageDataGetWidth
JP2KImageDataInit
JP2KImageDataSetHeight
JP2KImageDataSetImageBuffer
JP2KImageDataSetImageBufferType
JP2KImageDataSetSizeOfImageDataType
JP2KImageDataSetWidth
JP2KImageDecodeImageRegion
JP2KImageDecodeImageWithoutSeeking
JP2KImageDecodeTileInterleaved
JP2KImageDecodeTileInterleavedIncremental
JP2KImageDecodeTilePlanar
JP2KImageDestroy
JP2KImageEncodeImage
JP2KImageEstimatePeakDecodeMemoryRequirement
JP2KImageEstimateSizeofRegionToDecode
JP2KImageFileIsJP2K
JP2KImageFileIsJP2KEx
JP2KImageFindQualityNumbersEmbedded
JP2KImageGeometryComputeTransformedPoint
JP2KImageGeometryComputeTransformedPointUsingOrientations
JP2KImageGeometryComputeTransformedRect
JP2KImageGeometryComputeTransformedRectUsingOrientations
JP2KImageGeometryCopyInit
JP2KImageGeometryCreate
JP2KImageGeometryDestroy
JP2KImageGeometryGetImageResolutionBoundingBox
JP2KImageGeometryGetNumXTiles
JP2KImageGeometryGetNumYTiles
JP2KImageGeometryGetParams
JP2KImageGeometryGetTileBoundingBox
JP2KImageGeometryGetTileCompBoundingBox
JP2KImageGeometryGetTileCompResolutionBoundingBox
JP2KImageGeometryGetTileNum
JP2KImageGeometryGetTileResolutionBoundingBox
JP2KImageGeometryGetTileResolutionBoundingBoxOfRegion
JP2KImageGeometryGetXIndex
JP2KImageGeometryGetYIndex
JP2KImageGeometryInit
JP2KImageGeometryMapCanvasCoordRectToComponentRect
JP2KImageGeometryMapCanvasCoordRectToLowerResComponentRect
JP2KImageGeometryMapRectToLowerRes
JP2KImageGeometryParamsAreInConsistent
JP2KImageGeometryTransformRect
JP2KImageGeometryTransformRectUsingOrientations
JP2KImageGetAlphaChannelCodeStreamSize
JP2KImageGetBitDepths
JP2KImageGetChannelIndex
JP2KImageGetChromaKey
JP2KImageGetClientData
JP2KImageGetCodeStream
JP2KImageGetColorSpecList
JP2KImageGetComponentType
JP2KImageGetDecodeOptions
JP2KImageGetDecodedImage
JP2KImageGetEncodeOptions
JP2KImageGetErrorDetails
JP2KImageGetGMLData
JP2KImageGetGeometryParams
JP2KImageGetGlobalTransparencyChannelNum
JP2KImageGetICCProfile
JP2KImageGetInterleavedColorData
JP2KImageGetMaxCodeStreamLength
JP2KImageGetMaxRes
JP2KImageGetMemObj
JP2KImageGetMemObjEx
JP2KImageGetMinCodeStreamLength
JP2KImageGetNumColorChannels
JP2KImageGetNumComponents
JP2KImageGetNumComponentsDoneInProgPlay
JP2KImageGetNumQualitySteps
JP2KImageGetNumTileComps
JP2KImageGetNumTiles
JP2KImageGetNumUUIDBoxes
JP2KImageGetNumXMLBoxes
JP2KImageGetOrientationForDecode
JP2KImageGetPalette
JP2KImageGetPreviewData
JP2KImageGetPreviewDataOfRegion
JP2KImageGetStreamProcs
JP2KImageGetStreamProcsEx
JP2KImageGetTempFileStream
JP2KImageGetTileComponent
JP2KImageGetTransparencyChannelNum
JP2KImageGetTransparencyCodeStreamSize
JP2KImageGetTransparencyType
JP2KImageGetUUIDBoxes
JP2KImageGetXMLBoxes
JP2KImageGlobalTransparencyChannelPresent
JP2KImageIncrementalDecodingIsEnabled
JP2KImageIncrementalDecodingIsRequired
JP2KImageInitDecoder
JP2KImageInitDecoderEx
JP2KImageInitEncoder
JP2KImageInitEncoderEx
JP2KImageIsGMLDataPresent
JP2KImageNumProgresionStepsInCompressImage
JP2KImageNumProgressionStepsInEncodeImage
JP2KImageOptimizeImage
JP2KImagePalettePresent
JP2KImagePlay
JP2KImagePlayProgression
JP2KImagePlayProgressionStart
JP2KImagePlayProgressionStop
JP2KImageReorderCodeStream
JP2KImageResolutionInfoPresent
JP2KImageRewind
JP2KImageSetAlphaChannelsForPreview
JP2KImageSetOrientationForDecode
JP2KImageSetReplayOptions
JP2KImageSkipDecodingOfAlphaChannels
JP2KImageTransparencyChannelPresent
JP2KImageUUIDPresent
JP2KImageUpdateCodestreamSize
JP2KImageValidate
JP2KImageWriteJPXHeaders
JP2KImageXMLPresent
JP2KImageZoom
JP2KLibBuildDate
JP2KLibInit
JP2KLibInitEx
JP2KLibShutDown
JP2KLibVersion
JP2KTileComponentGetDecOpt
JP2KTileComponentGetDecodeParams
JP2KTileComponentGetEncOpt
JP2KTileComponentGetHeight
JP2KTileComponentGetOutputImage
JP2KTileComponentGetProgData
JP2KTileComponentGetTileGeometryParams
JP2KTileComponentGetWaveletData
JP2KTileComponentGetWidth
JP2KTileComponentReleaseWaveletData
JP2KTileComponentResetTileCompDataIsValid
JP2KTileComponentResetTileCompDataReady
JP2KTileComponentSetDecodeOptions
JP2KTileComponentSetDecodeParams
JP2KTileComponentSetEncodeOptions
JP2KTileComponentSetIsAlphaChannel
JP2KTileComponentSetOutputImage
JP2KTileComponentSetProgData
JP2KTileComponentSetTileCompDataIsValid
JP2KTileComponentSetTileCompDataReady
JP2KTileComponentSetTileGeometryParams
JP2KTileComponentSetWaveletData
JP2KTileComponentTileCompDataIsValid
JP2KTileComponentTileCompDataReady
JP2KTileComponentValidate
JP2KTileGeometryCreate
JP2KTileGeometryDestroy
JP2KTileGeometryGetResolutionCoords
JP2KTileGeometryGetResolutionCoordsofRegion
JP2KTileGeometryInit
JP2KTileGeometryInitUsingTileIndices
JP2KTileGeometryRegionIsTile
Name
.text
Size
445KB
Virtual Size
445KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ