SetupApp_x64_n[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

SetupApp_x64_n.zip
Size

4.1MB
MD5

31e2a0ba330f195a4a9fd83fe01cb0aa
SHA1

2aca2605f1e9dca9b55e9875412f37707fb5507a
SHA256

0e90f08e676a99510ce1c883000ed2e5aff8a9f58d9c1339a5091739a48aee7d
SHA512

0ea263e77455aeb881d86b207c830607a3c9351cf1b1fcba966fd88a12d2f6e706ef760f149dfbed40ef03be52afaf4361f6dbb4ac8fb4387024cf4231e453da
SSDEEP

98304:nOWkgn9wJ3JU9Gy2IHDuUpFqIdzzWyBkVsU7n:nOWkUa5U9L2IHDlCyIsU7n

Score

N/A

Malware Config

Signatures

Files

SetupApp_x64_n.zip
.zip
SetupApp_x64_n/Resource/CMap/Identity-H
SetupApp_x64_n/Resource/CMap/Identity-V
SetupApp_x64_n/Resource/CMap/UCS2-GBK-EUC
SetupApp_x64_n/Resource/CMap/UniKS-UTF16-H
SetupApp_x64_n/Resource/CMap/UniKS-UTF16-V
SetupApp_x64_n/Resource/Font/AdobePIStd.otf
SetupApp_x64_n/Resource/Font/CourierStd-Bold.otf
SetupApp_x64_n/Resource/Font/CourierStd-BoldOblique.otf
SetupApp_x64_n/Resource/Font/CourierStd-Oblique.otf
SetupApp_x64_n/Resource/Font/CourierStd.otf
SetupApp_x64_n/Resource/Font/MinionPro-Bold.otf
SetupApp_x64_n/Resource/Font/MinionPro-BoldIt.otf
SetupApp_x64_n/Resource/Font/MinionPro-It.otf
SetupApp_x64_n/Resource/Font/MinionPro-Regular.otf
SetupApp_x64_n/Resource/Font/MyriadPro-Bold.otf
SetupApp_x64_n/Resource/Font/MyriadPro-BoldIt.otf
SetupApp_x64_n/Resource/Font/MyriadPro-It.otf
SetupApp_x64_n/Resource/Font/MyriadPro-Regular.otf
SetupApp_x64_n/Resource/Font/Pfm/SY______.PFM
SetupApp_x64_n/Resource/Font/Pfm/zx______.pfm
SetupApp_x64_n/Resource/Font/Pfm/zy______.pfm
SetupApp_x64_n/Resource/Font/SY______.PFB
SetupApp_x64_n/Resource/Font/ZX______.PFB
SetupApp_x64_n/Resource/Font/ZY______.PFB
SetupApp_x64_n/Resource/SaslPrep/SaslPrepProfile_norm_bidi.spp
SetupApp_x64_n/Resource/TypeSupport/Unicode/ICU/icudt26l.dat
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/Adobe/symbol.txt
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/Adobe/zdingbat.txt
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/Mac/CENTEURO.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/Mac/CORPCHAR.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/Mac/CROATIAN.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/Mac/CYRILLIC.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/Mac/GREEK.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/Mac/ICELAND.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/Mac/ROMAN.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/Mac/ROMANIAN.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/Mac/SYMBOL.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/Mac/TURKISH.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/Mac/UKRAINE.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/win/CP1250.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/win/CP1251.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/win/CP1252.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/win/CP1253.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/win/CP1254.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/win/CP1257.TXT
SetupApp_x64_n/Resource/TypeSupport/Unicode/Mappings/win/CP1258.TXT
SetupApp_x64_n/SetupApp_x64_n.exe
.exe windows x64

4cea7ae85c87ddc7295d39ff9cda31d1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a6:aa:65:52:f3:0b:cf:09:23:99:a8:31:bf:c3:da:1e
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

16-02-2022 00:00

Not After

16-02-2023 23:59

Subject

CN=Rare Ideas\, LLC,O=Rare Ideas\, LLC,ST=New York,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11-05-2022 00:00

Not After

10-08-2033 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6c:b9:a6:78:8b:e6:6c:6c:38:4e:b1:59:18:10:f6:04:52:b1:92:4c:b7:bf:cd:21:be:44:61:17:9c:8e:e3:22
Signer

Actual PE Digest

6c:b9:a6:78:8b:e6:6c:6c:38:4e:b1:59:18:10:f6:04:52:b1:92:4c:b7:bf:cd:21:be:44:61:17:9c:8e:e3:22

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Rare Ideas\, LLC,O=Rare Ideas\, LLC,ST=New York,C=US

24-11-2022 14:54
Valid: true

Chain 1

CN=Rare Ideas\, LLC,O=Rare Ideas\, LLC,ST=New York,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

GetTokenInformation
RegDeleteValueA
RegOpenKeyExA
RegQueryInfoKeyA
FreeSid
OpenProcessToken
RegSetValueExA
RegCreateKeyExA
LookupPrivilegeValueA
AllocateAndInitializeSid
RegQueryValueExA
EqualSid
RegCloseKey
AdjustTokenPrivileges

kernel32

_lopen
_llseek
CompareStringA
GetLastError
GetFileAttributesA
GetSystemDirectoryA
LoadLibraryA
DeleteFileA
GlobalAlloc
GlobalFree
CloseHandle
WritePrivateProfileStringA
IsDBCSLeadByte
GetWindowsDirectoryA
SetFileAttributesA
GetProcAddress
GlobalLock
LocalFree
RemoveDirectoryA
FreeLibrary
_lclose
CreateDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GlobalUnlock
ReadFile
SizeofResource
WriteFile
GetDriveTypeA
LoadLibraryExA
SetFileTime
SetFilePointer
FindResourceA
CreateMutexA
GetVolumeInformationA
WaitForSingleObject
GetCurrentDirectoryA
FreeResource
GetVersion
SetCurrentDirectoryA
GetTempPathA
LocalFileTimeToFileTime
CreateFileA
SetEvent
TerminateThread
GetVersionExA
LockResource
GetSystemInfo
CreateThread
ResetEvent
LoadResource
ExitProcess
GetModuleHandleW
CreateProcessA
FormatMessageA
GetTempFileNameA
DosDateTimeToFileTime
CreateEventA
GetExitCodeProcess
ExpandEnvironmentStringsA
LocalAlloc
lstrcmpA
FindNextFileA
GetCurrentProcess
FindFirstFileA
GetModuleFileNameA
GetShortPathNameA
Sleep
GetStartupInfoW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
EnumResourceLanguagesA
GetDiskFreeSpaceA
MulDiv
FindClose

gdi32

GetDeviceCaps

user32

ShowWindow
MsgWaitForMultipleObjects
SetWindowPos
GetDC
GetWindowRect
DispatchMessageA
GetSystemMetrics
CallWindowProcA
SetWindowTextA
MessageBoxA
SendDlgItemMessageA
SendMessageA
GetDlgItem
DialogBoxIndirectParamA
GetWindowLongPtrA
SetWindowLongPtrA
SetForegroundWindow
ReleaseDC
EnableWindow
CharNextA
LoadStringA
CharPrevA
EndDialog
MessageBeep
ExitWindowsEx
SetDlgItemTextA
CharUpperA
GetDesktopWindow
PeekMessageA
GetDlgItemTextA

msvcrt

?terminate@@YAXXZ
_commode
_fmode
_acmdln
__C_specific_handler
memset
__setusermatherr
_ismbblead
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
memcpy_s
_vsnprintf
_initterm
memcpy

comctl32

ord17

cabinet

ord20
ord21
ord23
ord22

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 581KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SetupApp_x64_n/WebResources/Resource0/app1/dc-app-launcher.js
.js
SetupApp_x64_n/WebResources/Resource0/app1/index.html
SetupApp_x64_n/WebResources/Resource0/appmeasurement/prod/appmeasurement.js
.js
SetupApp_x64_n/WebResources/Resource0/appmeasurement/stage/appmeasurement.js
.js
SetupApp_x64_n/WebResources/Resource0/base_uris.js
.js
SetupApp_x64_n/WebResources/Resource0/index.html
.html
SetupApp_x64_n/WebResources/Resource0/init.js
.js
SetupApp_x64_n/WebResources/Resource0/plugins.js
.js
SetupApp_x64_n/WebResources/Resource0/variant.js
SetupApp_x64_n/WebResources/Resource0/version.js
SetupApp_x64_n/icucnv58.dll
.msi
SetupApp_x64_n/icucnv67.dll
.msi
SetupApp_x64_n/icudt58.dll
.msi
SetupApp_x64_n/icudt67.dll
.msi
SetupApp_x64_n/x86/ACE.dll
.dll windows x86

23076d501d734740bd988395f9a2bdc0

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29-04-2022 00:00

Not After

01-05-2024 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

15:ad:5d:15:fc:72:09:57:11:7f:e0:d3:ae:46:a9:a5:57:76:b6:2d:5c:5f:30:2e:cb:74:93:a1:44:12:fb:31
Signer

Actual PE Digest

15:ad:5d:15:fc:72:09:57:11:7f:e0:d3:ae:46:a9:a5:57:76:b6:2d:5c:5f:30:2e:cb:74:93:a1:44:12:fb:31

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

04-07-2022 20:10
Valid: true

Chain 1

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
CloseHandle
WaitForSingleObject
CreateThread
ReleaseSemaphore
CreateSemaphoreA
GetSystemTime
GetModuleFileNameW
SystemTimeToFileTime
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
GlobalMemoryStatus
GetProfileStringA
CreateDirectoryW
MultiByteToWideChar
CreateFileW
DeleteFileW
GetCurrentProcessId
FindFirstFileW
FindNextFileW
GetFileAttributesW
ReadFile
SetFilePointerEx
WriteFile
GetLastError
MoveFileExW
FileTimeToSystemTime
WideCharToMultiByte
IsValidCodePage
GetACP
Sleep
GetCurrentProcess
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThreadId
QueryPerformanceCounter
GetProcAddress
GetModuleHandleA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
VerifyVersionInfoW
GetSystemInfo
IsProcessorFeaturePresent
FindClose
VerSetConditionMask
IsDebuggerPresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead

user32

LoadStringA

gdi32

GetICMProfileW
DeleteDC
CreateDCW
CreateDCA

advapi32

RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
RegQueryValueExA

shell32

SHGetFolderPathW

ole32

CoCreateInstance

msvcp140

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ

vcruntime140

__current_exception
strstr
_except_handler4_common
__std_type_info_destroy_list
__CxxFrameHandler3
memcmp
wcsstr
_purecall
memmove
__current_exception_context
__std_exception_destroy
__std_exception_copy
memset
memcpy
__RTDynamicCast
__std_terminate
_CxxThrowException

api-ms-win-crt-math-l1-1-0

fabs
pow
log10
log2
sqrt
log
_fdsign

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_initterm_e
_invalid_parameter_noinfo
_errno
_initterm
terminate
_cexit
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_crt_atexit

api-ms-win-crt-string-l1-1-0

strncpy
strncmp
strcat
wcstok_s
wcscmp
strcmp
strlen
strnlen
towupper
strcpy

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__stdio_common_vsscanf
__acrt_iob_func
__stdio_common_vsprintf_s
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

_callnewh
free
realloc
malloc

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_time64
_gmtime64

api-ms-win-crt-utility-l1-1-0

qsort

Exports

Exports

ACEGetVersion
ACEHasFeature
ACEInitDelayed
ACEInitialize
ACEInitializeEx
ACETerminate

Sections

.text
Size: 844KB - Virtual size: 843KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SetupApp_x64_n/x86/AIDE.dll
.dll windows x86

35310b00e41c70ccb762d39f144b9fc0

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-12-2020 00:00

Not After

21-12-2022 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f8:d5:86:13:9f:0e:a8:06:96:1c:b2:3f:07:d6:09:97:f4:49:9a:f0:b2:e5:e0:4c:e1:aa:15:bd:27:b5:8e:99
Signer

Actual PE Digest

f8:d5:86:13:9f:0e:a8:06:96:1c:b2:3f:07:d6:09:97:f4:49:9a:f0:b2:e5:e0:4c:e1:aa:15:bd:27:b5:8e:99

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

04-06-2022 23:20
Valid: true

Chain 1

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

windowscodecs

WICConvertBitmapSource

kernel32

InitializeSListHead
DisableThreadLibraryCalls
CloseHandle
WaitForSingleObject
CreateThread
GetSystemInfo
ReleaseSemaphore
CreateSemaphoreA
FreeLibrary
GetProcAddress
LoadLibraryA
ExitProcess
IsProcessorFeaturePresent
GetTempPathA
DeleteFileA
GetTempFileNameA
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
EnterCriticalSection

ole32

CoInitializeEx
CoCreateInstance
PropVariantClear

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

vcruntime140

__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
strstr
strrchr
_setjmp3
__CxxLongjmpUnwind
longjmp
memchr
memset
memmove
__CxxFrameHandler3
_CxxThrowException
__std_exception_destroy
_purecall
__std_exception_copy
__std_terminate
memcpy

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
exit
_initterm_e
_initterm
_cexit
_crt_atexit
abort
_wassert
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table

api-ms-win-crt-math-l1-1-0

ldexp
_libm_sse2_log10_precise
_libm_sse2_log_precise
floor
ceil
_libm_sse2_sqrt_precise
_CIatan2
frexp
_libm_sse2_pow_precise
_libm_sse2_exp_precise

api-ms-win-crt-heap-l1-1-0

malloc
_aligned_malloc
_aligned_free
free
calloc
realloc
_callnewh

api-ms-win-crt-stdio-l1-1-0

fopen_s
fseek
ftell
feof
__stdio_common_vsnprintf_s
fclose
fwrite
fflush
__stdio_common_vsprintf
fread
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-utility-l1-1-0

bsearch
srand
rand
qsort

api-ms-win-crt-string-l1-1-0

tolower
strncmp

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

??0AIDEDimension@AIDE@@QAE@II@Z
??0AIDEDimension@AIDE@@QAE@XZ
??0AIDEFormatType@AIDE@@QAE@H@Z
??0AIDEFormatType@AIDE@@QAE@XZ
??0AIDEInputOutputStreamCallBacks@AIDE@@QAE@XZ
??0AIDEInputStreamCallBacks@AIDE@@QAE@XZ
??0AIDELibInitCallBacks@AIDE@@QAE@XZ
??0AIDEOutputStreamCallBacks@AIDE@@QAE@XZ
??0AIDEPoint@AIDE@@QAE@II@Z
??0AIDEPoint@AIDE@@QAE@XZ
??0AIDEProgressCallback@AIDE@@QAE@XZ
??0ComponentInfo@AIDE@@QAE@IW4AIDEComponentType@1@@Z
??0ComponentInfo@AIDE@@QAE@XZ
??0PaletteInfo@AIDE@@QAE@XZ
??0PixelPartInfo@AIDE@@QAE@XZ
??1AIDEDimension@AIDE@@QAE@XZ
??1AIDEFormatType@AIDE@@QAE@XZ
??1AIDEInputOutputStreamCallBacks@AIDE@@QAE@XZ
??1AIDEInputStreamCallBacks@AIDE@@QAE@XZ
??1AIDELibInitCallBacks@AIDE@@QAE@XZ
??1AIDEOutputStreamCallBacks@AIDE@@QAE@XZ
??1AIDEPoint@AIDE@@QAE@XZ
??1AIDEProgressCallback@AIDE@@QAE@XZ
??1ComponentInfo@AIDE@@QAE@XZ
??1PaletteInfo@AIDE@@QAE@XZ
??1PixelPartInfo@AIDE@@QAE@XZ
??4AIDEDimension@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEFormatType@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEInputOutputStreamCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEInputStreamCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDELayerSize@AIDE@@QAEAAU01@ABU01@@Z
??4AIDELibInitCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEOutputStreamCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEPoint@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEProgressCallback@AIDE@@QAEAAU01@ABU01@@Z
??4ComponentInfo@AIDE@@QAEAAU01@ABU01@@Z
??4PaletteInfo@AIDE@@QAEAAU01@ABU01@@Z
??4PixelPartInfo@AIDE@@QAEAAU01@ABU01@@Z
?AIDEDecodeOptionsSetComponentOrder@@YA?AW4AIDEError@AIDE@@PAVDecodeOptions@Impl@2@W4AIDEComponentOrder@2@I@Z
?mVersion@AIDEInputOutputStreamCallBacks@AIDE@@2IB
?mVersion@AIDEInputStreamCallBacks@AIDE@@2IB
?mVersion@AIDELibInitCallBacks@AIDE@@2IB
?mVersion@AIDEOutputStreamCallBacks@AIDE@@2IB
?mVersion@AIDEProgressCallback@AIDE@@2IB
AIDECreateLibInstance
AIDEDecodeOptionsSetBitDepth
AIDEDecodeOptionsSetColorSpace
AIDEDecodeOptionsSetDirectDecode
AIDEDecodeOptionsSetImageOrientation
AIDEDecodeOptionsSetImageResampling
AIDEDecodeOptionsSetIntValue
AIDEDecodeOptionsSetMaxDimensions
AIDEDecodeOptionsSetNoDecodeErrors
AIDEDecodeOptionsSetPackingType
AIDEDecodeOptionsSetPalette
AIDEDecodeOptionsSetPrivateChunkNames
AIDEDecodeOptionsSetTransparency
AIDEDecoderDecodeNextImage
AIDEDecoderDecodeNextTile
AIDEDecoderFillPixelPartBuffers
AIDEDecoderGetColorInfo
AIDEDecoderGetColorSpace
AIDEDecoderGetCommonColorBitDepth
AIDEDecoderGetComponentCount
AIDEDecoderGetComponentInfo
AIDEDecoderGetDirectDecode
AIDEDecoderGetEXIF_1_Data
AIDEDecoderGetEXIF_3_Data
AIDEDecoderGetFormatType
AIDEDecoderGetGlobalTransparencyIndex
AIDEDecoderGetICCProfile
AIDEDecoderGetIPTCData
AIDEDecoderGetImageResolution
AIDEDecoderGetImageSize
AIDEDecoderGetMetaDataBlob
AIDEDecoderGetMetaDataBlobAtIndex
AIDEDecoderGetMetaDataBlobClientBuffer
AIDEDecoderGetMetaDataIntegerValue
AIDEDecoderGetPackingInfo
AIDEDecoderGetPaletteColorInfo
AIDEDecoderGetPaletteFullyTransparentValue
AIDEDecoderGetPaletteInfo
AIDEDecoderGetPaletteTransparencyType
AIDEDecoderGetPixelPartInfo
AIDEDecoderGetPixelPartInfoBigFilesSupported
AIDEDecoderGetTileInfo
AIDEDecoderGetTransparencyType
AIDEDecoderGetXMPData
AIDEDecoderHasPalettedComponent
AIDEDecoderSetMaxTileBufferSize
AIDEDecoderSetMaxTileBufferSizeBigFilesSupported
AIDEDestroyLibInstance
AIDEEncoderEncodeNRows
AIDEEncoderEncodeNextImage
AIDEEncoderFinishEncoding
AIDEEncoderGetFormatType
AIDEEncoderRegisterProgressCallback
AIDEEncoderSetColorSpace
AIDEEncoderSetCommonColorBitDepth
AIDEEncoderSetEXIF_1_Data
AIDEEncoderSetEXIF_3_Data
AIDEEncoderSetICCProfile
AIDEEncoderSetIPTCData
AIDEEncoderSetImageResampling
AIDEEncoderSetImageResolution
AIDEEncoderSetImageSize
AIDEEncoderSetMetaDataBlob
AIDEEncoderSetMetaDataIntegerValue
AIDEEncoderSetPaletteFullyTransparentIndex
AIDEEncoderSetPaletteInfo
AIDEEncoderSetPaletteTransparencyType
AIDEEncoderSetPixelPartInfo
AIDEEncoderSetPixelPartInfoBigFilesSupported
AIDEEncoderSetTileInfo
AIDEEncoderSetTransparencyType
AIDEEncoderSetXMPData
AIDEEncoderWriteHeader
AIDEEncoderWritePixelPartBuffers
AIDEJXREncodeOptionsSetAlphaChannelFormat
AIDEJXREncodeOptionsSetAlphaChannelQuality
AIDEJXREncodeOptionsSetBitStreamOrdering
AIDEJXREncodeOptionsSetChromaSubSampling
AIDEJXREncodeOptionsSetCompressionType
AIDEJXREncodeOptionsSetImageQuality
AIDEJXREncodeOptionsSetOverlapLevel
AIDEJXREncodeOptionsSetTilingSlices
AIDEJpegEncodeOptionsSetAIQuality
AIDEJpegEncodeOptionsSetCustomQuality
AIDEJpegEncodeOptionsSetEncodeMethod
AIDEJpegEncodeOptionsSetEncodeMode
AIDEJpegEncodeOptionsSetPackingType
AIDEJpegEncodeOptionsSetQualityLevel
AIDEJpegEncodeOptionsSetSave4WebQuality
AIDEJpegEncodeOptionsSetUseClipping
AIDELibBuildDate
AIDELibCreateBmpEncodeOptions
AIDELibCreateDecodeOptions
AIDELibCreateDecoder
AIDELibCreateDecoderForFormatType
AIDELibCreateEncoderForBMP
AIDELibCreateEncoderForGIF
AIDELibCreateEncoderForICON
AIDELibCreateEncoderForJPEG
AIDELibCreateEncoderForJXR
AIDELibCreateEncoderForPDF
AIDELibCreateEncoderForPNG
AIDELibCreateEncoderForRAW
AIDELibCreateEncoderForTIFF
AIDELibCreateEncoderForWEBP
AIDELibCreateGifEncodeOptions
AIDELibCreateIconEncodeOptions
AIDELibCreateInputOutputStream
AIDELibCreateInputStream
AIDELibCreateInputStreamUncached
AIDELibCreateJXREncodeOptions
AIDELibCreateJpegEncodeOptions
AIDELibCreateOutputStream
AIDELibCreatePdfEncodeOptions
AIDELibCreatePngEncodeOptions
AIDELibCreateRawEncodeOptions
AIDELibCreateTiffEncodeOptions
AIDELibCreateWebPEncodeOptions
AIDELibDestroyBmpEncodeOptions
AIDELibDestroyDecodeOptions
AIDELibDestroyDecoder
AIDELibDestroyEncoder
AIDELibDestroyGifEncodeOptions
AIDELibDestroyIconEncodeOptions
AIDELibDestroyInputOutputStream
AIDELibDestroyInputStream
AIDELibDestroyJXREncodeOptions
AIDELibDestroyJpegEncodeOptions
AIDELibDestroyOutputStream
AIDELibDestroyPdfEncodeOptions
AIDELibDestroyPngEncodeOptions
AIDELibDestroyRawEncodeOptions
AIDELibDestroyTiffEncodeOptions
AIDELibDestroyWebPEncodeOptions
AIDELibVersion
AIDEPngEncodeOptionsSetAttemptPaletteCreation
AIDEPngEncodeOptionsSetCompressionLevel
AIDEPngEncodeOptionsSetForcedPaletteCreation
AIDEPngEncodeOptionsSetInterlaced
AIDEPngEncodeOptionsSetPHYChunk
AIDEPngEncodeOptionsSetPalettizationTechnique
AIDERawEncodeOptionsSetBlurMethod
AIDETiffEncodeOptionsDiableLayer
AIDETiffEncodeOptionsSetCompressionScheme
AIDETiffEncodeOptionsSetCustomEncodeParams
AIDETiffEncodeOptionsSetPyramidParams
AIDETiffEncodeOptionsSetPyramidParamsCustomLayers
AIDETiffEncodeOptionsSetTileSize
AIDEWebPEncodeOptionsSetCompressionType
AIDEWebPEncodeOptionsSetImageQuality
AIDEWritePrivateChunk

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SetupApp_x64_n/x86/BIB.dll
.dll windows x86

1d0257e1aac91706ba5a3464d653bbcc

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29-04-2022 00:00

Not After

01-05-2024 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:82:9e:48:90:6d:15:fd:16:9a:60:b0:00:eb:8a:88:89:43:56:6f:3a:83:a7:8a:ce:a5:dc:73:8f:9c:69:84
Signer

Actual PE Digest

4e:82:9e:48:90:6d:15:fd:16:9a:60:b0:00:eb:8a:88:89:43:56:6f:3a:83:a7:8a:ce:a5:dc:73:8f:9c:69:84

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

04-07-2022 20:10
Valid: true

Chain 1

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
CloseHandle
QueryPerformanceCounter
InitializeCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
CreateThread
GetSystemTimeAsFileTime
GetModuleHandleA
GetProcAddress
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetACP
Sleep
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
InitializeSListHead

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
memset
__std_exception_destroy
_purecall
memcpy
__std_terminate
__CxxFrameHandler3
memmove
_CxxThrowException
__current_exception
__std_exception_copy
__RTDynamicCast

api-ms-win-crt-string-l1-1-0

strlen
strcmp

api-ms-win-crt-stdio-l1-1-0

fseek
fread
fopen
fflush
ferror
fwrite
feof
fclose
ftell
_wfopen

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_invalid_parameter_noinfo
terminate
_errno
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit

api-ms-win-crt-math-l1-1-0

log

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

Exports

Exports

BIBGetGetProcAddress
BIBGetVersion
BIBInitialize
BIBInitialize2
BIBInitialize3
BIBInitialize4
BIBLockSmithAssertNoLocksImpl
BIBLockSmithDeleteImpl
BIBLockSmithLockImpl
BIBLockSmithUnlockImpl
BIBTerminate

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SetupApp_x64_n/x86/BIBUtils.dll
.dll windows x86

6ec1b6b05b219bb02c165a7efc6c6592

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

29-04-2022 00:00

Not After

01-05-2024 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:8d:86:7f:c2:82:50:d9:cf:83:97:16:d4:b7:e0:83:50:ed:25:f8:63:08:ac:60:eb:c3:64:24:4e:0f:c7:40
Signer

Actual PE Digest

04:8d:86:7f:c2:82:50:d9:cf:83:97:16:d4:b7:e0:83:50:ed:25:f8:63:08:ac:60:eb:c3:64:24:4e:0f:c7:40

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

04-07-2022 20:10
Valid: true

Chain 1

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetCurrentDirectoryA
GetTempPathA
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead

vcruntime140

_except_handler4_common
__std_type_info_destroy_list
_purecall
__std_terminate
__std_exception_copy
memset
memcpy
__RTDynamicCast
__CxxFrameHandler3
_CxxThrowException
strstr
__std_exception_destroy

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_seh_filter_dll
_errno
_configure_narrow_argv
_initterm
_initterm_e
_invalid_parameter_noinfo

api-ms-win-crt-string-l1-1-0

strcspn
isdigit
isprint
isalpha
strspn

api-ms-win-crt-convert-l1-1-0

atof
atoi

api-ms-win-crt-filesystem-l1-1-0

rename
remove
_stat64i32

api-ms-win-crt-stdio-l1-1-0

_sopen_dispatch
__stdio_common_vsscanf
_close
__stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

Exports

Exports

BIBUtilsGetVersion
BIBUtilsInitialize
BIBUtilsTerminate

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SetupApp_x64_n/x86/JP2KLib.dll
.dll windows x86

83b05223f39b8593905fca1ffc7a2eba

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-12-2020 00:00

Not After

21-12-2022 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

58:1b:1d:8f:72:c6:d6:23:4d:16:57:a6:90:20:b0:b6:bb:8e:cd:6f:4b:f7:aa:de:e3:22:ec:4a:ea:5f:87:18
Signer

Actual PE Digest

58:1b:1d:8f:72:c6:d6:23:4d:16:57:a6:90:20:b0:b6:bb:8e:cd:6f:4b:f7:aa:de:e3:22:ec:4a:ea:5f:87:18

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

04-06-2022 23:21
Valid: true

Chain 1

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

vcruntime140

__current_exception
__std_type_info_destroy_list
_CxxThrowException
memset
__current_exception_context
_except_handler4_common
__CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

_libm_sse2_sqrt_precise
_except1
log10
_libm_sse2_pow_precise
fabs
ceil
sqrt
pow
_libm_sse2_log_precise

api-ms-win-crt-string-l1-1-0

strncmp
strlen

api-ms-win-crt-utility-l1-1-0

abs

api-ms-win-crt-stdio-l1-1-0

fputc
fflush
fclose
__acrt_iob_func
putc
fwrite
__stdio_common_vfprintf
fopen_s

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_register_onexit_function
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
_initterm
_initialize_onexit_table
_seh_filter_dll

api-ms-win-crt-heap-l1-1-0

free

kernel32

InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId

Exports

Exports

??0JP2KCodeStm@@QAE@XZ
??0JP2KMemFuncs@@QAE@XZ
??0JP2KMemFuncsEx@@QAE@XZ
??1JP2KCodeStm@@QAE@XZ
??4IJP2KException@@QAEAAV0@$$QAV0@@Z
??4IJP2KException@@QAEAAV0@ABV0@@Z
??4JP2KBufID_I@@QAEAAU0@$$QAU0@@Z
??4JP2KBufID_I@@QAEAAU0@ABU0@@Z
??4JP2KClientData@@QAEAAU0@$$QAU0@@Z
??4JP2KClientData@@QAEAAU0@ABU0@@Z
??4JP2KClientProcs@@QAEAAU0@$$QAU0@@Z
??4JP2KClientProcs@@QAEAAU0@ABU0@@Z
??4JP2KCodeStm@@QAEAAV0@ABV0@@Z
??4JP2KDecOpt@@QAEAAU0@$$QAU0@@Z
??4JP2KDecOpt@@QAEAAU0@ABU0@@Z
??4JP2KEncOpt@@QAEAAU0@$$QAU0@@Z
??4JP2KEncOpt@@QAEAAU0@ABU0@@Z
??4JP2KException@@QAEAAU0@$$QAU0@@Z
??4JP2KException@@QAEAAU0@ABU0@@Z
??4JP2KImageDataParms@@QAEAAU0@$$QAU0@@Z
??4JP2KImageDataParms@@QAEAAU0@ABU0@@Z
??4JP2KImageDataProcs@@QAEAAU0@$$QAU0@@Z
??4JP2KImageDataProcs@@QAEAAU0@ABU0@@Z
??4JP2KMemFuncs@@QAEAAU0@$$QAU0@@Z
??4JP2KMemFuncs@@QAEAAU0@ABU0@@Z
??4JP2KMemFuncsEx@@QAEAAU0@$$QAU0@@Z
??4JP2KMemFuncsEx@@QAEAAU0@ABU0@@Z
??4JP2KStreamProcs@@QAEAAU0@$$QAU0@@Z
??4JP2KStreamProcs@@QAEAAU0@ABU0@@Z
??4JP2KStreamProcsEx@@QAEAAU0@$$QAU0@@Z
??4JP2KStreamProcsEx@@QAEAAU0@ABU0@@Z
??4JP2KUserActions@@QAEAAU0@$$QAU0@@Z
??4JP2KUserActions@@QAEAAU0@ABU0@@Z
?ClearErrState@IJP2KException@@QAEXXZ
?Clone@IJP2KException@@QAEXPAV1@@Z
?Die@JP2KCodeStm@@QAEXXZ
?GetCurPos@JP2KCodeStm@@QAE_JXZ
?GetErrString@IJP2KException@@QAEPADXZ
?GetOpenMode@JP2KCodeStm@@QAE?AW4JP2KStmOpenMode@@XZ
?GetStmBase@JP2KCodeStm@@QAEPAXXZ
?GetStmProcs@JP2KCodeStm@@QAEPAUJP2KStreamProcsEx@@XZ
?GetTotalLength@JP2KCodeStm@@QAE_KXZ
?InitJP2KCodeStm@JP2KCodeStm@@QAEH_KHPAXPAUJP2KStreamProcsEx@@W4JP2KStmOpenMode@@H@Z
?IsReadable@JP2KCodeStm@@QAE_NXZ
?IsSeekable@JP2KCodeStm@@QAE_NXZ
?IsWritable@JP2KCodeStm@@QAE_NXZ
?ReadOnly@JP2KCodeStm@@QAE_NXZ
?StmLengthUnknown@JP2KCodeStm@@QAE_NXZ
?TellPos@JP2KCodeStm@@QAE_JXZ
?WriteOnly@JP2KCodeStm@@QAE_NXZ
?flushWriteBuffer@JP2KCodeStm@@QAEHXZ
?read@JP2KCodeStm@@QAEHPAEH@Z
?seek@JP2KCodeStm@@QAE_JH_J@Z
?write@JP2KCodeStm@@QAEHPAEH@Z
CIEParamsAreDefaults
ColorSpecIsJP2Compatibile
InitDefaultCIEParams
JP2KCopyRect
JP2KDecOptCreate
JP2KDecOptDestroy
JP2KDecOptInitToDefaults
JP2KEncOptClone
JP2KEncOptCreate
JP2KEncOptDestroy
JP2KEncOptGetGeomParams
JP2KEncOptInitToDefaults
JP2KEncOptInitToDefaultsUsingImageGeometry
JP2KGetMemObj
JP2KGetMemObjEx
JP2KImageCompletedDecoding
JP2KImageCompressAndWriteTile
JP2KImageCompressImage
JP2KImageCompressTile
JP2KImageCreate
JP2KImageDataCreate
JP2KImageDataDestroy
JP2KImageDataFreeImageBuffer
JP2KImageDataGetHeight
JP2KImageDataGetImageBuffer
JP2KImageDataGetSizeofImageDataType
JP2KImageDataGetWidth
JP2KImageDataInit
JP2KImageDataSetHeight
JP2KImageDataSetImageBuffer
JP2KImageDataSetImageBufferType
JP2KImageDataSetSizeOfImageDataType
JP2KImageDataSetWidth
JP2KImageDecodeImageRegion
JP2KImageDecodeImageWithoutSeeking
JP2KImageDecodeTileInterleaved
JP2KImageDecodeTileInterleavedIncremental
JP2KImageDecodeTilePlanar
JP2KImageDestroy
JP2KImageEncodeImage
JP2KImageEstimatePeakDecodeMemoryRequirement
JP2KImageEstimateSizeofRegionToDecode
JP2KImageFileIsJP2K
JP2KImageFileIsJP2KEx
JP2KImageFindQualityNumbersEmbedded
JP2KImageGeometryComputeTransformedPoint
JP2KImageGeometryComputeTransformedPointUsingOrientations
JP2KImageGeometryComputeTransformedRect
JP2KImageGeometryComputeTransformedRectUsingOrientations
JP2KImageGeometryCopyInit
JP2KImageGeometryCreate
JP2KImageGeometryDestroy
JP2KImageGeometryGetImageResolutionBoundingBox
JP2KImageGeometryGetNumXTiles
JP2KImageGeometryGetNumYTiles
JP2KImageGeometryGetParams
JP2KImageGeometryGetTileBoundingBox
JP2KImageGeometryGetTileCompBoundingBox
JP2KImageGeometryGetTileCompResolutionBoundingBox
JP2KImageGeometryGetTileNum
JP2KImageGeometryGetTileResolutionBoundingBox
JP2KImageGeometryGetTileResolutionBoundingBoxOfRegion
JP2KImageGeometryGetXIndex
JP2KImageGeometryGetYIndex
JP2KImageGeometryInit
JP2KImageGeometryMapCanvasCoordRectToComponentRect
JP2KImageGeometryMapCanvasCoordRectToLowerResComponentRect
JP2KImageGeometryMapRectToLowerRes
JP2KImageGeometryParamsAreInConsistent
JP2KImageGeometryTransformRect
JP2KImageGeometryTransformRectUsingOrientations
JP2KImageGetAlphaChannelCodeStreamSize
JP2KImageGetBitDepths
JP2KImageGetChannelIndex
JP2KImageGetChromaKey
JP2KImageGetClientData
JP2KImageGetCodeStream
JP2KImageGetColorSpecList
JP2KImageGetComponentType
JP2KImageGetDecodeOptions
JP2KImageGetDecodedImage
JP2KImageGetEncodeOptions
JP2KImageGetErrorDetails
JP2KImageGetGMLData
JP2KImageGetGeometryParams
JP2KImageGetGlobalTransparencyChannelNum
JP2KImageGetICCProfile
JP2KImageGetInterleavedColorData
JP2KImageGetMaxCodeStreamLength
JP2KImageGetMaxRes
JP2KImageGetMemObj
JP2KImageGetMemObjEx
JP2KImageGetMinCodeStreamLength
JP2KImageGetNumColorChannels
JP2KImageGetNumComponents
JP2KImageGetNumComponentsDoneInProgPlay
JP2KImageGetNumQualitySteps
JP2KImageGetNumTileComps
JP2KImageGetNumTiles
JP2KImageGetNumUUIDBoxes
JP2KImageGetNumXMLBoxes
JP2KImageGetOrientationForDecode
JP2KImageGetPalette
JP2KImageGetPreviewData
JP2KImageGetPreviewDataOfRegion
JP2KImageGetStreamProcs
JP2KImageGetStreamProcsEx
JP2KImageGetTempFileStream
JP2KImageGetTileComponent
JP2KImageGetTransparencyChannelNum
JP2KImageGetTransparencyCodeStreamSize
JP2KImageGetTransparencyType
JP2KImageGetUUIDBoxes
JP2KImageGetXMLBoxes
JP2KImageGlobalTransparencyChannelPresent
JP2KImageIncrementalDecodingIsEnabled
JP2KImageIncrementalDecodingIsRequired
JP2KImageInitDecoder
JP2KImageInitDecoderEx
JP2KImageInitEncoder
JP2KImageInitEncoderEx
JP2KImageIsGMLDataPresent
JP2KImageNumProgresionStepsInCompressImage
JP2KImageNumProgressionStepsInEncodeImage
JP2KImageOptimizeImage
JP2KImagePalettePresent
JP2KImagePlay
JP2KImagePlayProgression
JP2KImagePlayProgressionStart
JP2KImagePlayProgressionStop
JP2KImageReorderCodeStream
JP2KImageResolutionInfoPresent
JP2KImageRewind
JP2KImageSetAlphaChannelsForPreview
JP2KImageSetOrientationForDecode
JP2KImageSetReplayOptions
JP2KImageSkipDecodingOfAlphaChannels
JP2KImageTransparencyChannelPresent
JP2KImageUUIDPresent
JP2KImageUpdateCodestreamSize
JP2KImageValidate
JP2KImageWriteJPXHeaders
JP2KImageXMLPresent
JP2KImageZoom
JP2KLibBuildDate
JP2KLibInit
JP2KLibInitEx
JP2KLibShutDown
JP2KLibVersion
JP2KTileComponentGetDecOpt
JP2KTileComponentGetDecodeParams
JP2KTileComponentGetEncOpt
JP2KTileComponentGetHeight
JP2KTileComponentGetOutputImage
JP2KTileComponentGetProgData
JP2KTileComponentGetTileGeometryParams
JP2KTileComponentGetWaveletData
JP2KTileComponentGetWidth
JP2KTileComponentReleaseWaveletData
JP2KTileComponentResetTileCompDataIsValid
JP2KTileComponentResetTileCompDataReady
JP2KTileComponentSetDecodeOptions
JP2KTileComponentSetDecodeParams
JP2KTileComponentSetEncodeOptions
JP2KTileComponentSetIsAlphaChannel
JP2KTileComponentSetOutputImage
JP2KTileComponentSetProgData
JP2KTileComponentSetTileCompDataIsValid
JP2KTileComponentSetTileCompDataReady
JP2KTileComponentSetTileGeometryParams
JP2KTileComponentSetWaveletData
JP2KTileComponentTileCompDataIsValid
JP2KTileComponentTileCompDataReady
JP2KTileComponentValidate
JP2KTileGeometryCreate
JP2KTileGeometryDestroy
JP2KTileGeometryGetResolutionCoords
JP2KTileGeometryGetResolutionCoordsofRegion
JP2KTileGeometryInit
JP2KTileGeometryInitUsingTileIndices
JP2KTileGeometryRegionIsTile

Sections

.text
Size: 445KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4cea7ae85c87ddc7295d39ff9cda31d1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

a6:aa:65:52:f3:0b:cf:09:23:99:a8:31:bf:c3:da:1eCertificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

6c:b9:a6:78:8b:e6:6c:6c:38:4e:b1:59:18:10:f6:04:52:b1:92:4c:b7:bf:cd:21:be:44:61:17:9c:8e:e3:22Signer

Signature Validations

Verification

24-11-2022 14:54 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

comctl32

cabinet

version

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 7KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 581KB - Virtual size: 580KB

.reloc Size: 512B - Virtual size: 32B

23076d501d734740bd988395f9a2bdc0

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0Certificate

Extended Key Usages

Key Usages

15:ad:5d:15:fc:72:09:57:11:7f:e0:d3:ae:46:a9:a5:57:76:b6:2d:5c:5f:30:2e:cb:74:93:a1:44:12:fb:31Signer

Signature Validations

Verification

04-07-2022 20:10 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

msvcp140

vcruntime140

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

a6:aa:65:52:f3:0b:cf:09:23:99:a8:31:bf:c3:da:1e
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

6c:b9:a6:78:8b:e6:6c:6c:38:4e:b1:59:18:10:f6:04:52:b1:92:4c:b7:bf:cd:21:be:44:61:17:9c:8e:e3:22
Signer

24-11-2022 14:54
Valid: true

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 7KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 581KB - Virtual size: 580KB

.reloc
Size: 512B - Virtual size: 32B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

15:ad:5d:15:fc:72:09:57:11:7f:e0:d3:ae:46:a9:a5:57:76:b6:2d:5c:5f:30:2e:cb:74:93:a1:44:12:fb:31
Signer

04-07-2022 20:10
Valid: true

.text
Size: 844KB - Virtual size: 843KB

.rdata
Size: 248KB - Virtual size: 247KB

.data
Size: 7KB - Virtual size: 13KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 46KB - Virtual size: 45KB

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

f8:d5:86:13:9f:0e:a8:06:96:1c:b2:3f:07:d6:09:97:f4:49:9a:f0:b2:e5:e0:4c:e1:aa:15:bd:27:b5:8e:99
Signer

04-06-2022 23:20
Valid: true

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 300KB - Virtual size: 299KB

.data
Size: 30KB - Virtual size: 92KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 53KB - Virtual size: 53KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

04:52:96:f8:fc:d8:29:a7:5d:c9:42:94:f5:a4:15:a4
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate