Adobe_Lightroom[.]7z

Sharing

Copy URL Twitter E-mail

General

Target

Adobe_Lightroom.7z
Size

2.3MB
MD5

5ff38a9a5b4ad3b70125ef5423a8e915
SHA1

72f4ee9e1d58d0e00892cdcd91dd597a88d27761
SHA256

38a2bd02318b7edcc66e4b7566e50090199e2123c7ea1d3534a8ad6e42cd5131
SHA512

35b6812888e708d1fdd83366f5bd144735f0a416207eb4b8447113c3701a5a46263a3c8074503cc0073fcdd557e2ab8f610de6f205402da7d18fed8e50d26d11
SSDEEP

49152:HtkSxfaazzUhfCEc1rqOKkkPksq03cbDfMG1jw/mzeCnZEYAnTN/yWU/wPhg/z:rxfaaz4CfK0R0ypcRZtU4+/z

Score

N/A

Malware Config

Signatures

Files

Adobe_Lightroom.7z
.7z

Password: 6392
Adobe_Lightroom/Setup.exe
.exe windows x86

Password: 6392

bd1643c4afc1d991fbe68ef01fa53f83

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

32:93:00:d5:99:01:60:67:a3:e8:6c:ed
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

08/09/2017, 12:04

Not After

08/09/2020, 12:04

Subject

CN=IP Izmaylov Artem Andreevich,O=IP Izmaylov Artem Andreevich,L=Tula,ST=Tula oblast,C=RU,1.2.840.113549.1.9.1=#0c0f737570706f72744061696d702e7275

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

14/06/2018, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign TSA for Advanced - G3 - 003-02,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

29/03/2029, 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

32:93:00:d5:99:01:60:67:a3:e8:6c:ed
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

08/09/2017, 12:04

Not After

08/09/2020, 12:04

Subject

CN=IP Izmaylov Artem Andreevich,O=IP Izmaylov Artem Andreevich,L=Tula,ST=Tula oblast,C=RU,1.2.840.113549.1.9.1=#0c0f737570706f72744061696d702e7275

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

14/06/2018, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign TSA for Advanced - G3 - 003-02,O=GMO GlobalSign K.K.,C=JP

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02/08/2011, 10:00

Not After

29/03/2029, 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:a7:59:9f:5a:40:4d:2b:7e:a9:c7:c7:54:37:6b:02:a6:14:ed:5e
Signer

Actual PE Digest

61:a7:59:9f:5a:40:4d:2b:7e:a9:c7:c7:54:37:6b:02:a6:14:ed:5e

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=IP Izmaylov Artem Andreevich,O=IP Izmaylov Artem Andreevich,L=Tula,ST=Tula oblast,C=RU,1.2.840.113549.1.9.1=#0c0f737570706f72744061696d702e7275

25/03/2020, 08:57
Valid: true

Chain 1

CN=IP Izmaylov Artem Andreevich,O=IP Izmaylov Artem Andreevich,L=Tula,ST=Tula oblast,C=RU,1.2.840.113549.1.9.1=#0c0f737570706f72744061696d702e7275

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

1c:98:8d:85:9a:e6:66:51:19:b0:3c:92:8b:2b:87:ea:d3:86:c8:b4:f8:e4:70:75:eb:45:56:33:d0:c7:4f:af
Signer

Actual PE Digest

1c:98:8d:85:9a:e6:66:51:19:b0:3c:92:8b:2b:87:ea:d3:86:c8:b4:f8:e4:70:75:eb:45:56:33:d0:c7:4f:af

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=IP Izmaylov Artem Andreevich,O=IP Izmaylov Artem Andreevich,L=Tula,ST=Tula oblast,C=RU,1.2.840.113549.1.9.1=#0c0f737570706f72744061696d702e7275

25/03/2020, 08:57
Valid: true

Chain 1

CN=IP Izmaylov Artem Andreevich,O=IP Izmaylov Artem Andreevich,L=Tula,ST=Tula oblast,C=RU,1.2.840.113549.1.9.1=#0c0f737570706f72744061696d702e7275

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyA
RegSetValueA
GetUserNameA
RegCloseKey
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegQueryValueExA
RegDeleteKeyA

gdi32

GetPolyFillMode

comctl32

ImageList_SetBkColor
CreateToolbarEx
ImageList_Remove
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
InitCommonControlsEx

kernel32

GetModuleHandleA
GetProcAddress
FreeConsole
AssignProcessToJobObject
CreateFileW
GetFileInformationByHandle
SetEndOfFile
SetFileValidData
CreateMutexW
GetNativeSystemInfo
GetThreadTimes
GetSystemInfo
GetProcessHeap
GetLogicalDrives
LocalUnlock
GetProcessPriorityBoost
SetFilePointer
PeekNamedPipe
AddAtomW
GetModuleFileNameA
LocalShrink
DeleteAtom
CreateEventW
GetCommandLineA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 364KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe_Lightroom/pol/nbizp64.dll
.dll windows x64

Password: 6392

059eb3baa45e35c79fae66f7279059ee

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/05/2022, 19:23

Not After

04/05/2023, 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

aa:30:60:38:bc:d4:8c:7d:7b:7d:86:02:57:07:20:8a:7f:ad:f8:75:58:ab:8b:7a:87:ea:5c:98:d2:a1:8f:56
Signer

Actual PE Digest

aa:30:60:38:bc:d4:8c:7d:7b:7d:86:02:57:07:20:8a:7f:ad:f8:75:58:ab:8b:7a:87:ea:5c:98:d2:a1:8f:56

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/12/2022, 13:55
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntdll

LdrAccessResource
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
NtRegisterThreadTerminatePort
TpCallbackSetEventOnCompletion
NtSecureConnectPort
RtlCopySid
NtRequestWaitReplyPort
RtlLengthSid
TpSimpleTryPost
NtQueryInformationProcess
LdrFindResourceEx_U
RtlRaiseException
RtlQueryActivationContextApplicationSettings
NtQueryInformationToken
NtOpenProcessToken
NtOpenThreadToken
wcsnlen
strncpy
RtlCompareMemory
wcschr
wcsrchr
RtlNtStatusToDosError
RtlNtPathNameToDosPathName
RtlpEnsureBufferSize
_wcsnicmp
memset
memcpy
memcmp
floor
__C_specific_handler
NtUnmapViewOfSection
NtMapViewOfSection
NtCreateSection
NtQueryInformationFile
NtOpenFile
RtlDosPathNameToNtPathName_U
RtlDeleteCriticalSection
RtlInitializeCriticalSection
NtClose
NtQueryValueKey
NtOpenKey
_vsnwprintf
RtlInitUnicodeString
_wcsicmp
RtlMultiByteToUnicodeN
RtlFreeUnicodeString
RtlCreateUnicodeStringFromAsciiz
_stricmp
_strnicmp
RtlDecodePointer
RtlEncodePointer
NtVdmControl
RtlUnicodeToMultiByteN
memmove
RtlUnicodeToMultiByteSize
RtlFreeHeap
RtlAllocateHeap
RtlLeaveCriticalSection
RtlEnterCriticalSection
swprintf_s
wcscpy_s
_vsnprintf

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar

api-ms-win-core-localization-l1-2-1

GetOEMCP
GetLocaleInfoW
IsDBCSLeadByte
GetACP
GetUserDefaultLCID
IsDBCSLeadByteEx
IsValidLocale
ConvertDefaultLocale

api-ms-win-core-heap-l2-1-0

GlobalAlloc
GlobalFree
LocalReAlloc
LocalAlloc
LocalFree

api-ms-win-core-libraryloader-l1-2-0

LockResource
FindResourceExW
SizeofResource
LoadResource
GetModuleHandleW
DisableThreadLibraryCalls
LoadLibraryExW
FreeLibrary
GetProcAddress
LoadLibraryExA

api-ms-win-core-sysinfo-l1-2-1

GetSystemWindowsDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetWindowsDirectoryW
GetTickCount
GetLocalTime

api-ms-win-core-memory-l1-1-2

CreateFileMappingW
VirtualUnlock
MapViewOfFile
UnmapViewOfFile

api-ms-win-core-errorhandling-l1-1-1

UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetLastError

api-ms-win-core-processenvironment-l1-2-0

ExpandEnvironmentStringsW
SearchPathW

api-ms-win-core-file-l1-2-1

SetFilePointerEx
GetDriveTypeW
CreateFileW
WriteFile
SetFilePointer
GetFullPathNameW
ReadFile
GetFileSizeEx
DeleteFileW
GetTempFileNameW
GetTempPathW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegOpenKeyExA
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegCloseKey
RegEnumValueW
RegQueryValueExW

api-ms-win-core-file-l2-1-1

CopyFileExW

api-ms-win-core-synch-l1-2-0

InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
CreateEventA
DeleteCriticalSection
WaitForSingleObject
InitializeCriticalSection

api-ms-win-core-string-l2-1-0

CharLowerBuffW

api-ms-win-core-processthreads-l1-1-2

GetCurrentProcessId
ProcessIdToSessionId
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
TlsFree
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThread

api-ms-win-security-base-l1-2-0

GetSidSubAuthorityCount
GetSidSubAuthority

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-kernel32-legacy-l1-1-1

MulDiv

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock
GlobalUnlock
GlobalSize

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW
lstrlenA
lstrlenW

api-ms-win-core-stringansi-l1-1-0

CharUpperBuffA

gdi32

CreateScalableFontResourceW
RemoveFontResourceW
LpkGetEditControl
ghICM
DxTrimNotificationListHead
semDxTrimNotification
LpkpInitializeEditControl
GdiBatchLimit
ExtSelectClipRgn
hGetPEBHandle
vSetPldc
bCreateDCW
bDeleteLDC
ExtEscape
fpClosePrinter
DeleteDC
CreateDCW
pGdiDevCaps
pldcGet
gW32PID
GdiGetEntry
gMaxGdiHandleCount
pGdiSharedHandleTable
GdiSetLastError
DeleteObject
pGdiSharedMemory
StretchDIBits
StartPage
StartDocW
SetWorldTransform
SetTextColor
SetTextAlign
SetStretchBltMode
SetPolyFillMode
SetBkMode
SelectObject
SelectClipRgn
SelectClipPath
SaveDC
RestoreDC
Rectangle
PolyBezierTo
MoveToEx
LineTo
IntersectClipRect
GetRgnBox
GetRegionData
GetFontData
GetDeviceCaps
GetClipBox
FillPath
ExtTextOutW
ExtTextOutA
EndPath
EndPage
EndDoc
CreateRectRgn
CreateDCA
CloseFigure
BeginPath
Escape
AbortDoc
GetTextMetricsA
InternalDeleteDC
SetMiterLimit
StrokePath
PolyDraw
PolylineTo
SetICMMode

user32

MessageBeep
IsThreadDesktopComposited
InitializeLpkHooks
IntersectRect
PostQuitMessage
TranslateMessage
MsgWaitForMultipleObjectsEx
GetKeyboardLayout
PeekMessageW
DispatchMessageW
GetActiveWindow
SetRect
GetSysColor
GetAppCompatFlags
CharUpperW
SetProcessDefaultLayout
GetKeyboardLayoutList
CreateCaret
InvalidateRect
GetWindowLongPtrW
CheckMenuItem
UserRealizePalette
GetWindowRect
EnableMenuItem
GetAppCompatFlags2
InflateRect
SetWindowLongPtrW
SendMessageW
GetSystemMetrics
GetClientRect
GetThreadDpiAwarenessContext
ReleaseDC
GetDC
SendMessageA

win32u

NtGdiCreateBitmapFromDxSurface2
NtGdiCreateClientObj
NtGdiCreateColorSpace
NtGdiCreateColorTransform
NtGdiCreateCompatibleBitmap
NtGdiCreateCompatibleDC
NtGdiCreateDIBBrush
NtGdiCreateDIBSection
NtGdiCreateDIBitmapInternal
NtGdiCreateEllipticRgn
NtGdiCreateHatchBrushInternal
NtGdiCreateMetafileDC
NtGdiCreateOPMProtectedOutput
NtGdiCreateOPMProtectedOutputs
NtGdiCreatePaletteInternal
NtGdiCreatePatternBrushInternal
NtGdiCreatePen
NtGdiCreateRectRgn
NtGdiCreateRoundRectRgn
NtGdiCreateServerMetaFile
NtGdiCreateSessionMappedDIBSection
NtGdiCreateSolidBrush
NtGdiD3dContextCreate
NtGdiD3dContextDestroy
NtGdiD3dContextDestroyAll
NtGdiD3dDrawPrimitives2
NtGdiD3dValidateTextureStageState
NtGdiDDCCIGetCapabilitiesString
NtGdiDDCCIGetCapabilitiesStringLength
NtGdiDDCCIGetTimingReport
NtGdiDDCCIGetVCPFeature
NtGdiDDCCISaveCurrentSettings
NtGdiDDCCISetVCPFeature
NtGdiDdAddAttachedSurface
NtGdiDdAlphaBlt
NtGdiDdAttachSurface
NtGdiDdBeginMoCompFrame
NtGdiDdBlt
NtGdiDdCanCreateD3DBuffer
NtGdiDdCanCreateSurface
NtGdiDdColorControl
NtGdiDdCreateD3DBuffer
NtGdiDdCreateDirectDrawObject
NtGdiDdCreateFullscreenSprite
NtGdiDdCreateMoComp
NtGdiDdCreateSurface
NtGdiDdCreateSurfaceEx
NtGdiDdCreateSurfaceObject
NtGdiDdDDIAbandonSwapChain
NtGdiDdDDIAcquireKeyedMutex
NtGdiDdDDIAcquireKeyedMutex2
NtGdiDdDDIAcquireSwapChain
NtGdiDdDDIAdjustFullscreenGamma
NtGdiDdDDICacheHybridQueryValue
NtGdiDdDDIChangeVideoMemoryReservation
NtGdiDdDDICheckExclusiveOwnership
NtGdiDdDDICheckMonitorPowerState
NtGdiDdDDICheckMultiPlaneOverlaySupport
NtGdiDdDDICheckMultiPlaneOverlaySupport2
NtGdiDdDDICheckMultiPlaneOverlaySupport3
NtGdiDdDDICheckOcclusion
NtGdiDdDDICheckSharedResourceAccess
NtGdiDdDDICheckVidPnExclusiveOwnership
NtGdiDdDDICloseAdapter
NtGdiDdDDIConfigureSharedResource
NtGdiDdDDICreateAllocation
NtGdiDdDDICreateContext
NtGdiDdDDICreateContextVirtual
NtGdiDdDDICreateDCFromMemory
NtGdiDdDDICreateDevice
NtGdiDdDDICreateKeyedMutex
NtGdiDdDDICreateKeyedMutex2
NtGdiDdDDICreateOutputDupl
NtGdiDdDDICreateOverlay
NtGdiDdDDICreatePagingQueue
NtGdiDdDDICreateSwapChain
NtGdiDdDDICreateSynchronizationObject
NtGdiDdDDIDestroyAllocation
NtGdiDdDDIDestroyAllocation2
NtGdiDdDDIDestroyContext
NtGdiDdDDIDestroyDCFromMemory
NtGdiDdDDIDestroyDevice
NtGdiDdDDIDestroyKeyedMutex
NtGdiDdDDIDestroyOutputDupl
NtGdiDdDDIDestroyOverlay
NtGdiDdDDIDestroyPagingQueue
NtGdiDdDDIDestroySynchronizationObject
NtGdiDdDDIEnumAdapters
NtGdiDdDDIEnumAdapters2
NtGdiDdDDIEscape
NtGdiDdDDIEvict
NtGdiDdDDIFlipOverlay
NtGdiDdDDIFlushHeapTransitions
NtGdiDdDDIFreeGpuVirtualAddress
NtGdiDdDDIGetCachedHybridQueryValue
NtGdiDdDDIGetContextInProcessSchedulingPriority
NtGdiDdDDIGetContextSchedulingPriority
NtGdiDdDDIGetDWMVerticalBlankEvent
NtGdiDdDDIGetDeviceState
NtGdiDdDDIGetDisplayModeList
NtGdiDdDDIGetMultisampleMethodList
NtGdiDdDDIGetOverlayState
NtGdiDdDDIGetPresentHistory
NtGdiDdDDIGetPresentQueueEvent
NtGdiDdDDIGetProcessSchedulingPriorityClass
NtGdiDdDDIGetResourcePresentPrivateDriverData
NtGdiDdDDIGetRuntimeData
NtGdiDdDDIGetScanLine
NtGdiDdDDIGetSetSwapChainMetadata
NtGdiDdDDIGetSharedPrimaryHandle
NtGdiDdDDIGetSharedResourceAdapterLuid
NtGdiDdDDIInvalidateActiveVidPn
NtGdiDdDDIInvalidateCache
NtGdiDdDDILock
NtGdiDdDDILock2
NtGdiDdDDIMakeResident
NtGdiDdDDIMapGpuVirtualAddress
NtGdiDdDDIMarkDeviceAsError
NtGdiDdDDINetDispGetNextChunkInfo
NtGdiDdDDINetDispQueryMiracastDisplayDeviceStatus
NtGdiDdDDINetDispQueryMiracastDisplayDeviceSupport
NtGdiDdDDINetDispStartMiracastDisplayDevice
NtGdiDdDDINetDispStopMiracastDisplayDevice
NtGdiDdDDINetDispStopSessions
NtGdiDdDDIOfferAllocations
NtGdiDdDDIOpenAdapterFromDeviceName
NtGdiDdDDIOpenAdapterFromHdc
NtGdiDdDDIOpenAdapterFromLuid
NtGdiDdDDIOpenKeyedMutex
NtGdiDdDDIOpenKeyedMutex2
NtGdiDdDDIOpenNtHandleFromName
NtGdiDdDDIOpenResource
NtGdiDdDDIOpenResourceFromNtHandle
NtGdiDdDDIOpenSwapChain
NtGdiDdDDIOpenSyncObjectFromNtHandle
NtGdiDdDDIOpenSyncObjectFromNtHandle2
NtGdiCreateBitmapFromDxSurface
NtGdiDdDDIOpenSynchronizationObject
NtGdiDdDDIOutputDuplGetFrameInfo
NtGdiDdDDIOutputDuplGetMetaData
NtGdiDdDDIOutputDuplGetPointerShapeData
NtGdiDdDDIOutputDuplPresent
NtGdiDdDDIOutputDuplReleaseFrame
NtGdiDdDDIPinDirectFlipResources
NtGdiDdDDIPollDisplayChildren
NtGdiDdDDIPresent
NtGdiDdDDIPresentMultiPlaneOverlay
NtGdiDdDDIPresentMultiPlaneOverlay2
NtGdiDdDDIPresentMultiPlaneOverlay3
NtGdiDdDDIQueryAdapterInfo
NtGdiDdDDIQueryAllocationResidency
NtGdiDdDDIQueryClockCalibration
NtGdiDdDDIQueryFSEBlock
NtGdiDdDDIQueryProcessOfferInfo
NtGdiDdDDIQueryRemoteVidPnSourceFromGdiDisplayName
NtGdiDdDDIQueryResourceInfo
NtGdiDdDDIQueryResourceInfoFromNtHandle
NtGdiDdDDIQueryStatistics
NtGdiDdDDIQueryVidPnExclusiveOwnership
NtGdiDdDDIQueryVideoMemoryInfo
NtGdiDdDDIReclaimAllocations
NtGdiDdDDIReclaimAllocations2
NtGdiDdDDIReleaseKeyedMutex
NtGdiDdDDIReleaseKeyedMutex2
NtGdiDdDDIReleaseProcessVidPnSourceOwners
NtGdiDdDDIReleaseSwapChain
NtGdiDdDDIRender
NtGdiDdDDIReserveGpuVirtualAddress
NtGdiDdDDISetAllocationPriority
NtGdiDdDDISetContextInProcessSchedulingPriority
NtGdiDdDDISetContextSchedulingPriority
NtGdiDdDDISetDisplayMode
NtGdiDdDDISetDisplayPrivateDriverFormat
NtGdiDdDDISetDodIndirectSwapchain
NtGdiDdDDISetFSEBlock
NtGdiDdDDISetGammaRamp
NtGdiDdDDISetHwProtectionTeardownRecovery
NtGdiDdDDISetProcessSchedulingPriorityClass
NtGdiDdDDISetQueuedLimit
NtGdiDdDDISetStablePowerState
NtGdiDdDDISetStereoEnabled
NtGdiDdDDISetSyncRefreshCountWaitTarget
NtGdiDdDDISetVidPnSourceHwProtection
NtGdiDdDDISetVidPnSourceOwner
NtGdiDdDDISetVidPnSourceOwner1
NtGdiDdDDIShareObjects
NtGdiDdDDISharedPrimaryLockNotification
NtGdiDdDDISharedPrimaryUnLockNotification
NtGdiDdDDISignalSynchronizationObject
NtGdiDdDDISignalSynchronizationObjectFromCpu
NtGdiDdDDISignalSynchronizationObjectFromGpu
NtGdiDdDDISignalSynchronizationObjectFromGpu2
NtGdiDdDDISubmitCommand
NtGdiDdDDITrimProcessCommitment
NtGdiDdDDIUnlock
NtGdiDdDDIUnlock2
NtGdiDdDDIUnpinDirectFlipResources
NtGdiDdDDIUpdateAllocationProperty
NtGdiDdDDIUpdateGpuVirtualAddress
NtGdiDdDDIUpdateOverlay
NtGdiDdDDIWaitForIdle
NtGdiDdDDIWaitForSynchronizationObject
NtGdiDdDDIWaitForSynchronizationObjectFromCpu
NtGdiDdDDIWaitForSynchronizationObjectFromGpu
NtGdiDdDDIWaitForVerticalBlankEvent
NtGdiDdDDIWaitForVerticalBlankEvent2
NtGdiDdDeleteDirectDrawObject
NtGdiDdDeleteSurfaceObject
NtGdiDdDestroyD3DBuffer
NtGdiDdDestroyFullscreenSprite
NtGdiDdDestroyMoComp
NtGdiDdDestroySurface
NtGdiDdEndMoCompFrame
NtGdiDdFlip
NtGdiDdFlipToGDISurface
NtGdiDdGetAvailDriverMemory
NtGdiDdGetBltStatus
NtGdiDdGetDC
NtGdiDdGetDriverInfo
NtGdiDdGetDriverState
NtGdiDdGetDxHandle
NtGdiDdGetFlipStatus
NtGdiDdGetInternalMoCompInfo
NtGdiDdGetMoCompBuffInfo
NtGdiDdGetMoCompFormats
NtGdiDdGetMoCompGuids
NtGdiDdGetScanLine
NtGdiDdLock
NtGdiDdLockD3D
NtGdiDdNotifyFullscreenSpriteUpdate
NtGdiDdQueryDirectDrawObject
NtGdiDdQueryMoCompStatus
NtGdiDdQueryVisRgnUniqueness
NtGdiDdReenableDirectDrawObject
NtGdiDdReleaseDC
NtGdiDdRenderMoComp
NtGdiDdResetVisrgn
NtGdiDdSetColorKey
NtGdiDdSetExclusiveMode
NtGdiDdSetGammaRamp
NtGdiDdSetOverlayPosition
NtGdiDdUnattachSurface
NtGdiDdUnlock
NtGdiDdUnlockD3D
NtGdiDdUpdateOverlay
NtGdiDdWaitForVerticalBlank
NtGdiDeleteClientObj
NtGdiDeleteColorSpace
NtGdiDeleteColorTransform
NtGdiDeleteObjectApp
NtGdiDescribePixelFormat
NtGdiDestroyOPMProtectedOutput
NtGdiDestroyPhysicalMonitor
NtGdiDoBanding
NtGdiDoPalette
NtGdiDrawEscape
NtGdiDrawStream
NtGdiDvpAcquireNotification
NtGdiDvpCanCreateVideoPort
NtGdiDvpColorControl
NtGdiDvpCreateVideoPort
NtGdiDvpDestroyVideoPort
NtGdiDvpFlipVideoPort
NtGdiDvpGetVideoPortBandwidth
NtGdiDvpGetVideoPortConnectInfo
NtGdiDvpGetVideoPortField
NtGdiDvpGetVideoPortFlipStatus
NtGdiDvpGetVideoPortInputFormats
NtGdiDvpGetVideoPortLine
NtGdiDvpGetVideoPortOutputFormats
NtGdiDvpGetVideoSignalStatus
NtGdiDvpReleaseNotification
NtGdiDvpUpdateVideoPort
NtGdiDvpWaitForVideoPortSync
NtGdiDwmCreatedBitmapRemotingOutput
NtGdiDxgGenericThunk
NtGdiEllipse
NtGdiEnableEudc
NtGdiEndDoc
NtGdiEndGdiRendering
NtGdiEndPage
NtGdiEndPath
NtGdiEngAlphaBlend
NtGdiEngAssociateSurface
NtGdiEngBitBlt
NtGdiEngCheckAbort
NtGdiEngComputeGlyphSet
NtGdiEngCopyBits
NtGdiEngCreateBitmap
NtGdiEngCreateClip
NtGdiEngCreateDeviceBitmap
NtGdiEngCreateDeviceSurface
NtGdiEngCreatePalette
NtGdiEngDeleteClip
NtGdiEngDeletePalette
NtGdiEngDeletePath
NtGdiEngDeleteSurface
NtGdiEngEraseSurface
NtGdiEngFillPath
NtGdiEngGradientFill
NtGdiEngLineTo
NtGdiEngLockSurface
NtGdiEngMarkBandingSurface
NtGdiEngPaint
NtGdiEngPlgBlt
NtGdiEngStretchBlt
NtGdiEngStretchBltROP
NtGdiEngStrokeAndFillPath
NtGdiEngStrokePath
NtGdiEngTextOut
NtGdiEngTransparentBlt
NtGdiEngUnlockSurface
NtGdiEnumFonts
NtGdiEnumObjects
NtGdiEqualRgn
NtGdiEudcLoadUnloadLink
NtGdiExcludeClipRect
NtGdiExtCreatePen
NtGdiExtCreateRegion
NtGdiExtEscape
NtGdiExtFloodFill
NtGdiExtGetObjectW
NtGdiExtSelectClipRgn
NtGdiExtTextOutW
NtGdiFONTOBJ_cGetAllGlyphHandles
NtGdiFONTOBJ_cGetGlyphs
NtGdiFONTOBJ_pQueryGlyphAttrs
NtGdiFONTOBJ_pfdg
NtGdiFONTOBJ_pifi
NtGdiFONTOBJ_pvTrueTypeFontFile
NtGdiFONTOBJ_pxoGetXform
NtGdiFONTOBJ_vGetInfo
NtGdiFillPath
NtGdiFillRgn
NtGdiFlattenPath
NtGdiFlush
NtGdiFontIsLinked
NtGdiForceUFIMapping
NtGdiFrameRgn
NtGdiFullscreenControl
NtGdiGetAndSetDCDword
NtGdiGetAppClipBox
NtGdiGetBitmapBits
NtGdiGetBitmapDimension
NtGdiGetBoundsRect
NtGdiGetCOPPCompatibleOPMInformation
NtGdiGetCertificate
NtGdiGetCertificateByHandle
NtGdiGetCertificateSize
NtGdiGetCertificateSizeByHandle
NtGdiGetCharABCWidthsW
NtGdiGetCharSet
NtGdiGetCharWidthInfo
NtGdiGetCharWidthW
NtGdiGetCharacterPlacementW
NtGdiGetColorAdjustment
NtGdiGetColorSpaceforBitmap
NtGdiGetCurrentDpiInfo
NtGdiGetDCDword
NtGdiGetDCObject
NtGdiGetDCPoint
NtGdiGetDCforBitmap
NtGdiGetDIBitsInternal
NtGdiGetDeviceCaps
NtGdiGetDeviceCapsAll
NtGdiGetDeviceGammaRamp
NtGdiGetDeviceWidth
NtGdiGetDhpdev
NtGdiGetETM
NtGdiGetEmbUFI
NtGdiGetEmbedFonts
NtGdiGetEntry
NtGdiGetEudcTimeStampEx
NtGdiGetFontData
NtGdiGetFontFileData
NtGdiGetFontFileInfo
NtGdiGetFontResourceInfoInternalW
NtGdiGetGlyphIndicesW
NtGdiGetGlyphIndicesWInternal
NtGdiGetGlyphOutline
NtGdiGetKerningPairs
NtGdiGetLinkedUFIs
NtGdiGetMiterLimit
NtGdiGetMonitorID
NtGdiGetNearestColor
NtGdiGetNearestPaletteIndex
NtGdiGetNumberOfPhysicalMonitors
NtGdiGetOPMInformation
NtGdiGetOPMRandomNumber
NtGdiGetObjectBitmapHandle
NtGdiGetOutlineTextMetricsInternalW
NtGdiGetPath
NtGdiGetPerBandInfo
NtGdiGetPhysicalMonitorDescription
NtGdiGetPhysicalMonitors
NtGdiGetPixel
NtGdiGetRandomRgn
NtGdiGetRasterizerCaps
NtGdiGetRealizationInfo
NtGdiGetRegionData
NtGdiGetRgnBox
NtGdiGetServerMetaFileBits
NtGdiGetSpoolMessage
NtGdiGetStats
NtGdiGetStringBitmapW
NtGdiGetSuggestedOPMProtectedOutputArraySize
NtGdiGetSystemPaletteUse
NtGdiGetTextExtent
NtGdiGetTextExtentExW
NtGdiGetTextFaceW
NtGdiGetTextMetricsW
NtGdiGetTransform
NtGdiGetUFI
NtGdiGetUFIPathname
NtGdiGetWidthTable
NtGdiGradientFill
NtGdiHLSurfGetInformation
NtGdiHLSurfSetInformation
NtGdiHT_Get8BPPFormatPalette
NtGdiHT_Get8BPPMaskPalette
NtGdiHfontCreate
NtGdiIcmBrushInfo
NtGdiInit
NtGdiInitSpool
NtGdiIntersectClipRect
NtGdiInvertRgn
NtGdiLineTo
NtGdiMakeFontDir
NtGdiMakeInfoDC
NtGdiMakeObjectUnXferable
NtGdiMakeObjectXferable
NtGdiMaskBlt
NtGdiMirrorWindowOrg
NtGdiModifyWorldTransform
NtGdiMonoBitmap
NtGdiMoveTo
NtGdiOffsetClipRgn
NtGdiOffsetRgn
NtGdiOpenDCW
NtGdiPATHOBJ_bEnum
NtGdiPATHOBJ_bEnumClipLines
NtGdiPATHOBJ_vEnumStart
NtGdiPATHOBJ_vEnumStartClipLines
NtGdiPATHOBJ_vGetBounds
NtGdiPatBlt
NtGdiPathToRegion
NtGdiPlgBlt
NtGdiPolyDraw
NtGdiPolyPatBlt
NtGdiPolyPolyDraw
NtGdiPolyTextOutW
NtGdiPtInRegion
NtGdiPtVisible
NtGdiQueryFontAssocInfo
NtGdiQueryFonts
NtGdiRectInRegion
NtGdiRectVisible
NtGdiRectangle
NtGdiRemoveFontMemResourceEx
NtGdiRemoveFontResourceW
NtGdiRemoveMergeFont
NtGdiResetDC
NtGdiResizePalette
NtGdiRestoreDC
NtGdiRoundRect
NtGdiSTROBJ_bEnum
NtGdiSTROBJ_bEnumPositionsOnly
NtGdiSTROBJ_bGetAdvanceWidths
NtGdiSTROBJ_dwGetCodePage
NtGdiSTROBJ_vEnumStart
NtGdiSaveDC
NtGdiScaleViewportExtEx
NtGdiScaleWindowExtEx
NtGdiSelectBitmap
NtGdiSelectBrush
NtGdiSelectClipPath
NtGdiSelectFont
NtGdiSelectPen
NtGdiSetBitmapAttributes
NtGdiSetBitmapBits
NtGdiSetBitmapDimension
NtGdiSetBoundsRect
NtGdiSetBrushAttributes
NtGdiSetBrushOrg
NtGdiSetColorAdjustment
NtGdiSetColorSpace
NtGdiSetDIBitsToDeviceInternal
NtGdiSetDeviceGammaRamp
NtGdiSetFontEnumeration
NtGdiSetFontXform
NtGdiSetIcmMode
NtGdiSetLayout
NtGdiSetLinkedUFIs
NtGdiSetMagicColors
NtGdiSetMetaRgn
NtGdiSetMiterLimit
NtGdiSetOPMSigningKeyAndSequenceNumbers
NtGdiSetPUMPDOBJ
NtGdiSetPixel
NtGdiSetPixelFormat

api-ms-win-core-heap-l1-2-0

GetProcessHeap
HeapAlloc
HeapFree
HeapSize

api-ms-win-core-delayload-l1-1-1

DelayLoadFailureHook
ResolveDelayLoadedAPI

api-ms-win-core-privateprofile-l1-1-1

GetProfileIntW
GetProfileStringW

api-ms-win-core-localization-private-l1-1-0

NlsGetCacheUpdateCount

Exports

Exports

AbortDocImpl
AbortPath
AddFontMemResourceEx
AddFontResourceA
AddFontResourceExA
AddFontResourceExW
AddFontResourceTracking
AddFontResourceWImpl
AngleArc
AnimatePalette
AnyLinkedFonts
Arc
ArcTo
BeginPath
BeginPathImpl
BitBlt
CancelDC
CheckColorsInGamut
ChoosePixelFormat
Chord
ClearBitmapAttributes
ClearBrushAttributes
CloseEnhMetaFile
CloseFigure
CloseFigureImpl
CloseMetaFile
ColorCorrectPalette
ColorMatchToTarget
CombineTransform
CopyEnhMetaFileA
CopyEnhMetaFileW
CopyMetaFileA
CopyMetaFileW
CreateBitmap
CreateBitmapIndirect
CreateBrushIndirect
CreateColorSpaceA
CreateColorSpaceW
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDCAImpl
CreateDCExW
CreateDCW
CreateDIBPatternBrush
CreateDIBPatternBrushPt
CreateDIBSection
CreateDIBitmap
CreateDiscardableBitmap
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateEnhMetaFileA
CreateEnhMetaFileW
CreateFontA
CreateFontIndirectA
CreateFontIndirectExA
CreateFontIndirectExW
CreateFontIndirectW
CreateFontIndirectWImpl
CreateFontW
CreateHalftonePalette
CreateHatchBrush
CreateICA
CreateICW
CreateMetaFileA
CreateMetaFileW
CreatePalette
CreatePatternBrush
CreatePen
CreatePenIndirect
CreatePolyPolygonRgn
CreateRectRgn
CreateRoundRectRgn
CreateScalableFontResourceA
CreateScalableFontResourceWImpl
CreateSessionMappedDIBSection
CreateSolidBrush
DPtoLP
DeleteColorSpace
DeleteDC
DeleteEMFSpoolData
DeleteEnhMetaFile
DeleteMetaFile
DescribePixelFormat
DeviceCapabilitiesExA
DocumentEventEx
DrawEscape
DwmCreatedBitmapRemotingOutput
DwmGetDirtyRgnImpl
Ellipse
EndDoc
EndDocImpl
EndFormPage
EndPage
EndPageImpl
EndPath
EndPathImpl
EngAcquireSemaphore
EngComputeGlyphSet
EngCreateSemaphore
EngDeleteSemaphore
EngFindResource
EngFreeModule
EngGetCurrentCodePage
EngGetDriverName
EngGetPrinterDataFileName
EngLoadModule
EngMultiByteToUnicodeN
EngMultiByteToWideChar
EngQueryEMFInfo
EngQueryLocalTime
EngReleaseSemaphore
EngUnicodeToMultiByteN
EngWideCharToMultiByte
EnumEnhMetaFile
EnumFontFamiliesA
EnumFontFamiliesExA
EnumFontFamiliesExW
EnumFontFamiliesW
EnumFontsA
EnumFontsW
EnumICMProfilesA
EnumICMProfilesW
EnumMetaFile
EnumObjects
EscapeImpl
EudcLoadLinkW
EudcUnloadLinkW
ExcludeClipRect
ExtCreatePen
ExtEscapeImpl
ExtFloodFill
ExtSelectClipRgnImpl
ExtTextOutA
ExtTextOutAImpl
ExtTextOutW
ExtTextOutWImpl
FillPath
FillPathImpl
FillRgn
FixBrushOrgEx
FlattenPath
FloodFill
FontIsLinked
FrameRgn
GdiAddFontResourceW
GdiAddGlsBounds
GdiAddGlsRecord
GdiAlphaBlend
GdiArtificialDecrementDriver
GdiCleanCacheDC
GdiComment
GdiConsoleTextOut
GdiConvertAndCheckDC
GdiConvertBitmap
GdiConvertBitmapV5
GdiConvertBrush
GdiConvertDC
GdiConvertEnhMetaFile
GdiConvertFont
GdiConvertMetaFilePict
GdiConvertPalette
GdiConvertRegion
GdiConvertToDevmodeW
GdiCreateLocalEnhMetaFile
GdiCreateLocalMetaFilePict
GdiDeleteLocalDC
GdiDeleteSpoolFileHandle
GdiDescribePixelFormat
GdiDllInitialize
GdiDllInitializeWrapper
GdiDrawStream
GdiEndDocEMF
GdiEndPageEMF
GdiEntry1
GdiEntry10
GdiEntry11
GdiEntry12
GdiEntry14
GdiEntry15
GdiEntry16
GdiEntry2
GdiEntry3
GdiEntry4
GdiEntry5
GdiEntry6
GdiEntry7
GdiEntry8
GdiEntry9
GdiFixUpHandle
GdiFlush
GdiGetBatchLimit
GdiGetBitmapBitsSize
GdiGetCharDimensions
GdiGetDC
GdiGetDevmodeForPage
GdiGetLocalBrush
GdiGetLocalDC
GdiGetLocalFont
GdiGetPageCount
GdiGetPageHandle
GdiGetSpoolFileHandle
GdiGradientFill
GdiInitializeLanguagePack
GdiIsMetaFileDC
GdiIsMetaPrintDC
GdiIsPlayMetafileDC
GdiIsScreenDC
GdiIsUMPDSandboxingEnabled
GdiLoadType1Fonts
GdiPlayDCScript
GdiPlayEMF
GdiPlayJournal
GdiPlayPageEMF
GdiPlayPrivatePageEMF
GdiPlayScript
GdiPrinterThunk
GdiProcessSetup
GdiQueryTable
GdiRealizationInfo
GdiReleaseLocalDC
GdiResetDCEMF
GdiSetAttrs
GdiSetBatchLimit
GdiSetPixelFormat
GdiSetServerAttr
GdiStartDocEMF
GdiStartPageEMF
GdiSupportsFontChangeEvent
GdiSwapBuffers
GdiTransparentBlt
GdiValidateHandle
GetArcDirection
GetAspectRatioFilterEx
GetBitmapAttributes
GetBitmapBits
GetBitmapDimensionEx
GetBkColor
GetBkMode
GetBoundsRect
GetBrushAttributes
GetBrushOrgEx
GetCharABCWidthsA
GetCharABCWidthsFloatA
GetCharABCWidthsFloatW
GetCharABCWidthsI
GetCharABCWidthsW
GetCharWidth32A
GetCharWidth32W
GetCharWidthA
GetCharWidthFloatA
GetCharWidthFloatW
GetCharWidthI
GetCharWidthW
GetCharacterPlacementA
GetCharacterPlacementW
GetClipBox
GetClipBoxImpl
GetClipRgn
GetCodePage
GetColorAdjustment
GetColorSpace
GetCurrentObject
GetCurrentPositionEx
GetDCBrushColor
GetDCOrgEx
GetDCPenColor
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetETM
GetEUDCTimeStamp
GetEUDCTimeStampExW
GetEnhMetaFileA
GetEnhMetaFileBits
GetEnhMetaFileDescriptionA
GetEnhMetaFileDescriptionW
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetEnhMetaFilePixelFormat
GetEnhMetaFileW
GetFontAssocStatus
GetFontData
GetFontDataImpl
GetFontFileData
GetFontFileInfo
GetFontLanguageInfo
GetFontRealizationInfo
GetFontResourceInfoW
GetFontUnicodeRanges
GetGlyphIndicesA
GetGlyphIndicesW
GetGlyphOutlineA
GetGlyphOutlineW
GetGlyphOutlineWow
GetGraphicsMode
GetHFONT
GetICMProfileA
GetICMProfileW
GetKerningPairsA
GetKerningPairsW
GetLayout
GetLogColorSpaceA
GetLogColorSpaceW
GetMapMode
GetMetaFileA
GetMetaFileBitsEx
GetMetaFileW
GetMetaRgn
GetMiterLimit
GetNearestColor
GetNearestPaletteIndex
GetObjectA
GetObjectType
GetObjectW
GetOutlineTextMetricsA
GetOutlineTextMetricsW
GetPaletteEntries
GetPath
GetPixel
GetPixelFormat
GetPolyFillMode
GetProcessSessionFonts
GetROP2
GetRandomRgn
GetRasterizerCaps
GetRegionData
GetRelAbs
GetRgnBox
GetStockObject
GetStretchBltMode
GetStringBitmapA
GetSystemPaletteEntries
GetSystemPaletteUse
GetTextAlign
GetTextCharacterExtra
GetTextCharset
GetTextCharsetInfo
GetTextColor
GetTextExtentExPointA
GetTextExtentExPointI
GetTextExtentExPointW
GetTextExtentExPointWPri
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
GetTextExtentPointI
GetTextExtentPointW
GetTextFaceA
GetTextFaceAliasW
GetTextFaceW
GetTextMetricsAImpl
GetTextMetricsW
GetTransform
GetViewportExtEx
GetViewportOrgEx
GetWinMetaFileBits
GetWindowExtEx
GetWindowOrgEx
GetWorldTransform
IcmDeleteLocalDC
IcmReleaseCachedColorSpace
IntersectClipRect
IntersectClipRectImpl
InvertRgn
IsValidEnhMetaRecord
IsValidEnhMetaRecordOffExt
LPtoDP
LineDDA
LineTo
LineToImpl
LpkDrawTextEx
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkPresent
LpkTabbedTextOut
LpkUseGDIWidthCache
MF16_DeleteObject
MF_DeleteObject
MaskBlt
MirrorRgn
ModerncoreGdiInit
ModifyWorldTransform
MoveToEx
MoveToExImpl
NamedEscape
NtGdiAbortDoc
NtGdiAbortPath
NtGdiAddEmbFontToDC
NtGdiAddFontMemResourceEx
NtGdiAddFontResourceW
NtGdiAddRemoteFontToDC
NtGdiAddRemoteMMInstanceToDC
NtGdiAlphaBlend
NtGdiAngleArc
NtGdiAnyLinkedFonts
NtGdiArcInternal
NtGdiBRUSHOBJ_DeleteRbrush
NtGdiBRUSHOBJ_hGetColorTransform
NtGdiBRUSHOBJ_pvAllocRbrush
NtGdiBRUSHOBJ_pvGetRbrush
NtGdiBRUSHOBJ_ulGetBrushColor
NtGdiBeginGdiRendering
NtGdiBeginPath
NtGdiBitBlt
NtGdiCLIPOBJ_bEnum
NtGdiCLIPOBJ_cEnumStart
NtGdiCLIPOBJ_ppoGetPath
NtGdiCancelDC
NtGdiChangeGhostFont
NtGdiCheckBitmapBits
NtGdiClearBitmapAttributes
NtGdiClearBrushAttributes
NtGdiCloseFigure
NtGdiColorCorrectPalette
NtGdiCombineRgn
NtGdiCombineTransform
NtGdiComputeXformCoefficients
NtGdiConfigureOPMProtectedOutput
NtGdiConvertMetafileRect
NtGdiCreateBitmap
NtGdiCreateBitmapFromDxSurface
NtGdiCreateBitmapFromDxSurface2
NtGdiCreateClientObj
NtGdiCreateColorSpace
NtGdiCreateColorTransform
NtGdiCreateCompatibleBitmap
NtGdiCreateCompatibleDC
NtGdiCreateDIBBrush
NtGdiCreateDIBSection
NtGdiCreateDIBitmapInternal
NtGdiCreateEllipticRgn
NtGdiCreateHalftonePalette
NtGdiCreateHatchBrushInternal
NtGdiCreateMetafileDC
NtGdiCreateOPMProtectedOutput
NtGdiCreateOPMProtectedOutputs
NtGdiCreatePaletteInternal
NtGdiCreatePatternBrushInternal
NtGdiCreatePen
NtGdiCreateRectRgn
NtGdiCreateRoundRectRgn
NtGdiCreateServerMetaFile
NtGdiCreateSessionMappedDIBSection
NtGdiCreateSolidBrush
NtGdiD3dContextCreate
NtGdiD3dContextDestroy
NtGdiD3dContextDestroyAll
NtGdiD3dDrawPrimitives2
NtGdiD3dValidateTextureStageState
NtGdiDDCCIGetCapabilitiesString
NtGdiDDCCIGetCapabilitiesStringLength
NtGdiDDCCIGetTimingReport
NtGdiDDCCIGetVCPFeature
NtGdiDDCCISaveCurrentSettings
NtGdiDDCCISetVCPFeature
NtGdiDdAddAttachedSurface
NtGdiDdAlphaBlt
NtGdiDdAttachSurface
NtGdiDdBeginMoCompFrame
NtGdiDdBlt
NtGdiDdCanCreateD3DBuffer
NtGdiDdCanCreateSurface
NtGdiDdColorControl
NtGdiDdCreateD3DBuffer
NtGdiDdCreateDirectDrawObject
NtGdiDdCreateFullscreenSprite
NtGdiDdCreateMoComp
NtGdiDdCreateSurface
NtGdiDdCreateSurfaceEx
NtGdiDdCreateSurfaceObject
NtGdiDdDDIAbandonSwapChain
NtGdiDdDDIAcquireKeyedMutex
NtGdiDdDDIAcquireKeyedMutex2
NtGdiDdDDIAcquireSwapChain
NtGdiDdDDIAdjustFullscreenGamma
NtGdiDdDDICacheHybridQueryValue
NtGdiDdDDIChangeVideoMemoryReservation
NtGdiDdDDICheckExclusiveOwnership
NtGdiDdDDICheckMonitorPowerState
NtGdiDdDDICheckMultiPlaneOverlaySupport
NtGdiDdDDICheckMultiPlaneOverlaySupport2
NtGdiDdDDICheckMultiPlaneOverlaySupport3
NtGdiDdDDICheckOcclusion
NtGdiDdDDICheckSharedResourceAccess
NtGdiDdDDICheckVidPnExclusiveOwnership
NtGdiDdDDICloseAdapter
NtGdiDdDDIConfigureSharedResource
NtGdiDdDDICreateAllocation
NtGdiDdDDICreateContext
NtGdiDdDDICreateContextVirtual
NtGdiDdDDICreateDCFromMemory
NtGdiDdDDICreateDevice
NtGdiDdDDICreateKeyedMutex
NtGdiDdDDICreateKeyedMutex2
NtGdiDdDDICreateOutputDupl

Sections

.text
Size: 769KB - Virtual size: 769KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 641KB - Virtual size: 640KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe_Lightroom/pol/pacdi64.dll
.dll windows x64

Password: 6392

bc747d18cc28dff374db67cdcf580b6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

malloc
_amsg_exit
_XcptFilter
_vsnprintf
wcsnlen
memcpy_s
_wcsdup
wcscpy_s
_wcsupr_s
_initterm
wcsncpy_s
sqrtf
sqrt
sinf
_finite
memmove
wcsstr
wcsncmp
_wtoi
_vsnwprintf
__C_specific_handler
free
_purecall
_resetstkoflw
atan
atan2
cos
cosf
exp
floor
floorf
fmodf
log
memcmp
memcpy
memset
pow
sin
wcscmp

api-ms-win-core-synch-l1-2-0

EnterCriticalSection
Sleep
CreateEventA
DeleteCriticalSection
LeaveCriticalSection
WaitForSingleObject
InitializeCriticalSection
SetEvent

api-ms-win-core-processthreads-l1-1-2

GetCurrentThreadId
OpenProcessToken
CreateThread
TerminateProcess
GetCurrentProcessId
GetCurrentProcess

api-ms-win-core-heap-l1-2-0

HeapCreate
HeapReAlloc
HeapAlloc
HeapFree
HeapDestroy

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventRegister
EventWrite

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls
GetModuleHandleA
LoadLibraryExW
GetModuleHandleW
FreeLibrary
GetModuleFileNameW
LoadResource
LoadLibraryExA
GetProcAddress
GetModuleFileNameA
LockResource
FreeLibraryAndExitThread

api-ms-win-core-com-l1-1-1

CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
PropVariantClear

api-ms-win-core-heap-l2-1-0

LocalReAlloc
GlobalFree
GlobalAlloc
LocalFree
LocalAlloc

api-ms-win-core-file-l1-2-1

SetEndOfFile
GetFileSize
ReadFile
CreateFileW
CreateFileA
GetFileTime
FlushFileBuffers
LockFile
SetFilePointer
GetFileInformationByHandle
WriteFile
UnlockFile

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-memory-l1-1-2

UnmapViewOfFile
VirtualAlloc
MapViewOfFile
VirtualFree

api-ms-win-security-base-l1-2-0

GetTokenInformation

api-ms-win-core-errorhandling-l1-1-1

SetUnhandledExceptionFilter
SetLastError
UnhandledExceptionFilter
GetLastError

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar

api-ms-win-core-sysinfo-l1-2-1

GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
GetSystemDirectoryW

api-ms-win-core-localization-l1-2-1

GetACP
LocaleNameToLCID
ConvertDefaultLocale
IsDBCSLeadByteEx
IsValidLocale
GetSystemDefaultLCID
GetLocaleInfoW

api-ms-win-core-processenvironment-l1-2-0

SearchPathW

api-ms-win-core-rtlsupport-l1-2-0

RtlVirtualUnwind
RtlRaiseException
RtlCaptureContext
RtlLookupFunctionEntry

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-libraryloader-l1-2-2

FindResourceW

api-ms-win-core-kernel32-legacy-l1-1-1

CreateFileMappingA
FindResourceExA
MulDiv

api-ms-win-core-heap-obsolete-l1-1-0

GlobalSize
GlobalLock
GlobalUnlock

api-ms-win-core-localization-obsolete-l1-3-0

CompareStringA

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiA
lstrcmpiW

user32

IntersectRect
IsRectEmpty
LoadImageW
ClientToScreen
GetClassLongA
GetWindowLongA
GetDCEx
CreateIconIndirect
GetIconInfo
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects
UnregisterClassA
DestroyWindow
SetWindowPos
CreateWindowExA
RegisterWindowMessageA
UnionRect
RegisterClassA
DefWindowProcA
GetSysColor
GetWindowRect
WindowFromDC
GetClientRect
GetDesktopWindow
GetSystemMetrics
SystemParametersInfoA
GetDC
ReleaseDC
SetRectEmpty
InflateRect
OffsetRect

gdi32

Escape
ArcTo
SetArcDirection
SetPaletteEntries
ResizePalette
RoundRect
Ellipse
Pie
Chord
Arc
AngleArc
PolyDraw
GetPath
AbortPath
FlattenPath
WidenPath
GetTextCharset
GetCurrentPositionEx
GetWinMetaFileBits
PlayEnhMetaFile
ExcludeClipRect
GetRgnBox
OffsetClipRgn
PlgBlt
BitBlt
OffsetViewportOrgEx
SetMapperFlags
CombineTransform
ScaleViewportExtEx
ScaleWindowExtEx
IsValidEnhMetaRecordOffExt
CreatePen
CreateDIBitmap
CreatePatternBrush
GetClipRgn
ExtCreateRegion
SelectClipPath
PolyPolyline
Polyline
StrokeAndFillPath
FillPath
PolyBezier
SetPolyFillMode
LineTo
ModifyWorldTransform
GetGraphicsMode
ExtTextOutA
ExtSelectClipRgn
GetPixel
SetMiterLimit
FillRgn
CreateSolidBrush
StrokePath
EndPath
CloseFigure
PolylineTo
PolyBezierTo
MoveToEx
BeginPath
StretchBlt
GetNearestPaletteIndex
CreateCompatibleBitmap
GetNearestColor
SetStretchBltMode
PolyPolygon
PlayMetaFileRecord
SetTextJustification
SetTextAlign
Polygon
IntersectClipRect
CreatePenIndirect
ExtCreatePen
DPtoLP
CreateDIBPatternBrushPt
Rectangle
SetROP2
GetROP2
GetWorldTransform
CombineRgn
StretchDIBits
GetPolyFillMode
GetArcDirection
GetTextAlign
GetBkMode
GetMiterLimit
GetWindowExtEx
GetViewportExtEx
GetWindowOrgEx
GetMapMode
SelectClipRgn
SetBrushOrgEx
GetTextColor
GetBkColor
TranslateCharsetInfo
GetTextCharsetInfo
ExtTextOutW
SetBitmapBits
SetDIBColorTable
CreateDCA
CreateEnhMetaFileW
GdiComment
GetEnhMetaFileBits
CopyMetaFileA
CopyEnhMetaFileA
GetEnhMetaFileW
GetMetaFileW
GetObjectType
GetEnhMetaFileHeader
GetMetaFileBitsEx
SetMetaFileBitsEx
CloseEnhMetaFile
PlayMetaFile
CreateEnhMetaFileA
SetEnhMetaFileBits
DeleteMetaFile
DeleteEnhMetaFile
SetWorldTransform
SetGraphicsMode
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetMapMode
SaveDC
SetMetaRgn
EnumMetaFile
EnumEnhMetaFile
PlayEnhMetaFileRecord
RestoreDC
DrawEscape
CreateICA
EnumFontFamiliesExW
GetTextFaceW
GetTextMetricsW
CreateFontIndirectA
CreateFontIndirectW
RealizePalette
GetPaletteEntries
SetDIBits
SetBkMode
SetBkColor
SetTextColor
CreateBitmap
PatBlt
CreateBrushIndirect
GdiFlush
CreateDIBSection
GetObjectW
GetStockObject
GetDIBColorTable
DeleteDC
GetDIBits
SelectObject
CreateCompatibleDC
SelectPalette
ExtEscape
GetObjectA
GetCurrentObject
DeleteObject
GetViewportOrgEx
GetRegionData
GetRandomRgn
CreateRectRgn
LPtoDP
GetDCOrgEx
SetICMMode
GetDeviceCaps
GetSystemPaletteEntries
CreatePalette
GetSystemPaletteUse

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI
DelayLoadFailureHook

Exports

Exports

GdipAddPathArc
GdipAddPathArcI
GdipAddPathBezier
GdipAddPathBezierI
GdipAddPathBeziers
GdipAddPathBeziersI
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathClosedCurve2I
GdipAddPathClosedCurveI
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathCurve2I
GdipAddPathCurve3
GdipAddPathCurve3I
GdipAddPathCurveI
GdipAddPathEllipse
GdipAddPathEllipseI
GdipAddPathLine
GdipAddPathLine2
GdipAddPathLine2I
GdipAddPathLineI
GdipAddPathPath
GdipAddPathPie
GdipAddPathPieI
GdipAddPathPolygon
GdipAddPathPolygonI
GdipAddPathRectangle
GdipAddPathRectangleI
GdipAddPathRectangles
GdipAddPathRectanglesI
GdipAddPathString
GdipAddPathStringI
GdipAlloc
GdipBeginContainer
GdipBeginContainer2
GdipBeginContainerI
GdipBitmapApplyEffect
GdipBitmapConvertFormat
GdipBitmapCreateApplyEffect
GdipBitmapGetHistogram
GdipBitmapGetHistogramSize
GdipBitmapGetPixel
GdipBitmapLockBits
GdipBitmapSetPixel
GdipBitmapSetResolution
GdipBitmapUnlockBits
GdipClearPathMarkers
GdipCloneBitmapArea
GdipCloneBitmapAreaI
GdipCloneBrush
GdipCloneCustomLineCap
GdipCloneFont
GdipCloneFontFamily
GdipCloneImage
GdipCloneImageAttributes
GdipCloneMatrix
GdipClonePath
GdipClonePen
GdipCloneRegion
GdipCloneStringFormat
GdipClosePathFigure
GdipClosePathFigures
GdipCombineRegionPath
GdipCombineRegionRect
GdipCombineRegionRectI
GdipCombineRegionRegion
GdipComment
GdipConvertToEmfPlus
GdipConvertToEmfPlusToFile
GdipConvertToEmfPlusToStream
GdipCreateAdjustableArrowCap
GdipCreateBitmapFromDirectDrawSurface
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateCachedBitmap
GdipCreateCustomLineCap
GdipCreateEffect
GdipCreateFont
GdipCreateFontFamilyFromName
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCreateFontFromLogfontW
GdipCreateFromHDC
GdipCreateFromHDC2
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipCreateHalftonePalette
GdipCreateHatchBrush
GdipCreateImageAttributes
GdipCreateLineBrush
GdipCreateLineBrushFromRect
GdipCreateLineBrushFromRectI
GdipCreateLineBrushFromRectWithAngle
GdipCreateLineBrushFromRectWithAngleI
GdipCreateLineBrushI
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCreateMatrix3I
GdipCreateMetafileFromEmf
GdipCreateMetafileFromFile
GdipCreateMetafileFromStream
GdipCreateMetafileFromWmf
GdipCreateMetafileFromWmfFile
GdipCreatePath
GdipCreatePath2
GdipCreatePath2I
GdipCreatePathGradient
GdipCreatePathGradientFromPath
GdipCreatePathGradientI
GdipCreatePathIter
GdipCreatePen1
GdipCreatePen2
GdipCreateRegion
GdipCreateRegionHrgn
GdipCreateRegionPath
GdipCreateRegionRect
GdipCreateRegionRectI
GdipCreateRegionRgnData
GdipCreateSolidFill
GdipCreateStreamOnFile
GdipCreateStringFormat
GdipCreateTexture
GdipCreateTexture2
GdipCreateTexture2I
GdipCreateTextureIA
GdipCreateTextureIAI
GdipDeleteBrush
GdipDeleteCachedBitmap
GdipDeleteCustomLineCap
GdipDeleteEffect
GdipDeleteFont
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeleteMatrix
GdipDeletePath
GdipDeletePathIter
GdipDeletePen
GdipDeletePrivateFontCollection
GdipDeleteRegion
GdipDeleteStringFormat
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawArc
GdipDrawArcI
GdipDrawBezier
GdipDrawBezierI
GdipDrawBeziers
GdipDrawBeziersI
GdipDrawCachedBitmap
GdipDrawClosedCurve
GdipDrawClosedCurve2
GdipDrawClosedCurve2I
GdipDrawClosedCurveI
GdipDrawCurve
GdipDrawCurve2
GdipDrawCurve2I
GdipDrawCurve3
GdipDrawCurve3I
GdipDrawCurveI
GdipDrawDriverString
GdipDrawEllipse
GdipDrawEllipseI
GdipDrawImage
GdipDrawImageFX
GdipDrawImageI
GdipDrawImagePointRect
GdipDrawImagePointRectI
GdipDrawImagePoints
GdipDrawImagePointsI
GdipDrawImagePointsRect
GdipDrawImagePointsRectI
GdipDrawImageRect
GdipDrawImageRectI
GdipDrawImageRectRect
GdipDrawImageRectRectI
GdipDrawLine
GdipDrawLineI
GdipDrawLines
GdipDrawLinesI
GdipDrawPath
GdipDrawPie
GdipDrawPieI
GdipDrawPolygon
GdipDrawPolygonI
GdipDrawRectangle
GdipDrawRectangleI
GdipDrawRectangles
GdipDrawRectanglesI
GdipDrawString
GdipEmfToWmfBits
GdipEndContainer
GdipEnumerateMetafileDestPoint
GdipEnumerateMetafileDestPointI
GdipEnumerateMetafileDestPoints
GdipEnumerateMetafileDestPointsI
GdipEnumerateMetafileDestRect
GdipEnumerateMetafileDestRectI
GdipEnumerateMetafileSrcRectDestPoint
GdipEnumerateMetafileSrcRectDestPointI
GdipEnumerateMetafileSrcRectDestPoints
GdipEnumerateMetafileSrcRectDestPointsI
GdipEnumerateMetafileSrcRectDestRect
GdipEnumerateMetafileSrcRectDestRectI
GdipFillClosedCurve
GdipFillClosedCurve2
GdipFillClosedCurve2I
GdipFillClosedCurveI
GdipFillEllipse
GdipFillEllipseI
GdipFillPath
GdipFillPie
GdipFillPieI
GdipFillPolygon
GdipFillPolygon2
GdipFillPolygon2I
GdipFillPolygonI
GdipFillRectangle
GdipFillRectangleI
GdipFillRectangles
GdipFillRectanglesI
GdipFillRegion
GdipFindFirstImageItem
GdipFindNextImageItem
GdipFlattenPath
GdipFlush
GdipFree
GdipGetAdjustableArrowCapFillState
GdipGetAdjustableArrowCapHeight
GdipGetAdjustableArrowCapMiddleInset
GdipGetAdjustableArrowCapWidth
GdipGetAllPropertyItems
GdipGetBrushType
GdipGetCellAscent
GdipGetCellDescent
GdipGetClip
GdipGetClipBounds
GdipGetClipBoundsI
GdipGetCompositingMode
GdipGetCompositingQuality
GdipGetCustomLineCapBaseCap
GdipGetCustomLineCapBaseInset
GdipGetCustomLineCapStrokeCaps
GdipGetCustomLineCapStrokeJoin
GdipGetCustomLineCapType
GdipGetCustomLineCapWidthScale
GdipGetDC
GdipGetDpiX
GdipGetDpiY
GdipGetEffectParameterSize
GdipGetEffectParameters
GdipGetEmHeight
GdipGetEncoderParameterList
GdipGetEncoderParameterListSize
GdipGetFamily
GdipGetFamilyName
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFontUnit
GdipGetGenericFontFamilyMonospace
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetHatchBackgroundColor
GdipGetHatchForegroundColor
GdipGetHatchStyle
GdipGetHemfFromMetafile
GdipGetImageAttributesAdjustedPalette
GdipGetImageBounds
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipGetImageDimension
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageFlags
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImageItemData
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageThumbnail
GdipGetImageType
GdipGetImageVerticalResolution
GdipGetImageWidth
GdipGetInterpolationMode
GdipGetLineBlend
GdipGetLineBlendCount
GdipGetLineColors
GdipGetLineGammaCorrection
GdipGetLinePresetBlend
GdipGetLinePresetBlendCount
GdipGetLineRect
GdipGetLineRectI
GdipGetLineSpacing
GdipGetLineTransform
GdipGetLineWrapMode
GdipGetLogFontA
GdipGetLogFontW
GdipGetMatrixElements
GdipGetMetafileDownLevelRasterizationLimit
GdipGetMetafileHeaderFromEmf
GdipGetMetafileHeaderFromFile
GdipGetMetafileHeaderFromMetafile
GdipGetMetafileHeaderFromStream
GdipGetMetafileHeaderFromWmf
GdipGetNearestColor
GdipGetPageScale
GdipGetPageUnit
GdipGetPathData
GdipGetPathFillMode
GdipGetPathGradientBlend
GdipGetPathGradientBlendCount
GdipGetPathGradientCenterColor
GdipGetPathGradientCenterPoint
GdipGetPathGradientCenterPointI
GdipGetPathGradientFocusScales
GdipGetPathGradientGammaCorrection
GdipGetPathGradientPath
GdipGetPathGradientPointCount
GdipGetPathGradientPresetBlend
GdipGetPathGradientPresetBlendCount
GdipGetPathGradientRect
GdipGetPathGradientRectI
GdipGetPathGradientSurroundColorCount
GdipGetPathGradientSurroundColorsWithCount
GdipGetPathGradientTransform
GdipGetPathGradientWrapMode
GdipGetPathLastPoint
GdipGetPathPoints
GdipGetPathPointsI
GdipGetPathTypes
GdipGetPathWorldBounds
GdipGetPathWorldBoundsI
GdipGetPenBrushFill
GdipGetPenColor
GdipGetPenCompoundArray
GdipGetPenCompoundCount
GdipGetPenCustomEndCap
GdipGetPenCustomStartCap
GdipGetPenDashArray
GdipGetPenDashCap197819
GdipGetPenDashCount
GdipGetPenDashOffset
GdipGetPenDashStyle
GdipGetPenEndCap
GdipGetPenFillType
GdipGetPenLineJoin
GdipGetPenMiterLimit
GdipGetPenMode
GdipGetPenStartCap
GdipGetPenTransform
GdipGetPenUnit
GdipGetPenWidth
GdipGetPixelOffsetMode
GdipGetPointCount
GdipGetPropertyCount
GdipGetPropertyIdList
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGetPropertySize
GdipGetRegionBounds
GdipGetRegionBoundsI
GdipGetRegionData
GdipGetRegionDataSize
GdipGetRegionHRgn
GdipGetRegionScans
GdipGetRegionScansCount
GdipGetRegionScansI
GdipGetRenderingOrigin
GdipGetSmoothingMode
GdipGetSolidFillColor
GdipGetStringFormatAlign
GdipGetStringFormatDigitSubstitution
GdipGetStringFormatFlags
GdipGetStringFormatHotkeyPrefix
GdipGetStringFormatLineAlign
GdipGetStringFormatMeasurableCharacterRangeCount
GdipGetStringFormatTabStopCount
GdipGetStringFormatTabStops
GdipGetStringFormatTrimming
GdipGetTextContrast
GdipGetTextRenderingHint
GdipGetTextureImage
GdipGetTextureTransform
GdipGetTextureWrapMode
GdipGetVisibleClipBounds
GdipGetVisibleClipBoundsI
GdipGetWorldTransform
GdipGraphicsClear
GdipGraphicsSetAbort
GdipImageForceValidation
GdipImageGetFrameCount
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageRotateFlip
GdipImageSelectActiveFrame
GdipImageSetAbort
GdipInitializePalette
GdipInvertMatrix
GdipIsClipEmpty
GdipIsEmptyRegion
GdipIsEqualRegion
GdipIsInfiniteRegion
GdipIsMatrixEqual
GdipIsMatrixIdentity
GdipIsMatrixInvertible
GdipIsOutlineVisiblePathPoint
GdipIsOutlineVisiblePathPointI
GdipIsStyleAvailable
GdipIsVisibleClipEmpty
GdipIsVisiblePathPoint
GdipIsVisiblePathPointI
GdipIsVisiblePoint
GdipIsVisiblePointI
GdipIsVisibleRect
GdipIsVisibleRectI
GdipIsVisibleRegionPoint
GdipIsVisibleRegionPointI
GdipIsVisibleRegionRect
GdipIsVisibleRegionRectI
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipMeasureCharacterRanges
GdipMeasureDriverString
GdipMeasureString
GdipMultiplyLineTransform
GdipMultiplyMatrix
GdipMultiplyPathGradientTransform
GdipMultiplyPenTransform
GdipMultiplyTextureTransform
GdipMultiplyWorldTransform
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPathIterCopyData
GdipPathIterEnumerate
GdipPathIterGetCount
GdipPathIterGetSubpathCount
GdipPathIterHasCurve
GdipPathIterIsValid
GdipPathIterNextMarker
GdipPathIterNextMarkerPath
GdipPathIterNextPathType
GdipPathIterNextSubpath
GdipPathIterNextSubpathPath
GdipPathIterRewind
GdipPlayMetafileRecord
GdipPlayTSClientRecord
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipRecordMetafile
GdipRecordMetafileFileName
GdipRecordMetafileFileNameI
GdipRecordMetafileI
GdipRecordMetafileStream
GdipRecordMetafileStreamI
GdipReleaseDC
GdipRemovePropertyItem
GdipResetClip
GdipResetImageAttributes
GdipResetLineTransform
GdipResetPageTransform
GdipResetPath
GdipResetPathGradientTransform
GdipResetPenTransform
GdipResetTextureTransform
GdipResetWorldTransform
GdipRestoreGraphics
GdipReversePath
GdipRotateLineTransform
GdipRotateMatrix
GdipRotatePathGradientTransform
GdipRotatePenTransform
GdipRotateTextureTransform
GdipRotateWorldTransform
GdipSaveAdd
GdipSaveAddImage
GdipSaveGraphics
GdipSaveImageToFile
GdipSaveImageToStream
GdipScaleLineTransform
GdipScaleMatrix

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe_Lightroom/pol/qznkd.dll
.dll windows x64

Password: 6392

bfedebcea2d3c4238dbf6724cc05c122

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

__C_specific_handler
_initterm
free
_amsg_exit
_XcptFilter
memcpy
_onexit
__CxxFrameHandler3
??1type_info@@UEAA@XZ
memset
_lock
_unlock
__dllonexit
wcsncmp
_wtol
_CxxThrowException
??0exception@@QEAA@AEBQEBD@Z
memmove
_callnewh
malloc
_purecall
wcsstr
??_V@YAXPEAX@Z
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
??3@YAXPEAX@Z
iswdigit
_wcsnicmp
toupper
wcscpy_s
swscanf_s
_wtoi
wcsrchr
wcsnlen
_wcsicmp
_vsnwprintf
wcstoul
strchr
_errno
strtoul
wcschr
_tzset
_time64
_gmtime64
wcsftime
_itow
_itow_s
wcscmp

api-ms-win-core-heap-l2-1-0

LocalReAlloc
LocalAlloc
GlobalFree
GlobalAlloc
LocalFree

api-ms-win-core-registry-l1-1-0

RegCloseKey
RegDeleteValueW
RegQueryInfoKeyW
RegEnumValueW
RegSetValueExW
RegGetValueW
RegEnumKeyExW
RegNotifyChangeKeyValue
RegGetKeySecurity
RegSetKeySecurity
RegQueryValueExA
RegQueryValueExW
RegCreateKeyExW
RegOpenCurrentUser
RegOpenKeyExW
RegDeleteKeyExW

api-ms-win-core-string-l1-1-0

CompareStringW
MultiByteToWideChar
CompareStringEx

api-ms-win-core-synch-l1-2-0

AcquireSRWLockShared
CreateEventW
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
ReleaseSRWLockShared
DeleteCriticalSection
AcquireSRWLockExclusive
SetEvent
ReleaseSRWLockExclusive
SetWaitableTimer
InitializeCriticalSectionEx
InitializeCriticalSectionAndSpinCount
CreateWaitableTimerExW
WaitForMultipleObjectsEx
ResetEvent
WaitForSingleObject
InitializeSRWLock
Sleep
WaitForSingleObjectEx
OpenEventW

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-processthreads-l1-1-2

OpenThreadToken
SetProcessMitigationPolicy
GetCurrentThreadId
GetCurrentThread
SetThreadPriority
GetProcessMitigationPolicy
CreateThread
GetCurrentProcessId
TerminateProcess
CreateProcessAsUserW
SetPriorityClass
OpenProcessToken
ResumeThread
GetCurrentProcess
SetThreadToken

api-ms-win-core-errorhandling-l1-1-1

SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError
GetLastError

api-ms-win-core-sysinfo-l1-2-1

GetTickCount64
GetProductInfo
GetOsSafeBootMode
GetSystemTime
GetComputerNameExW
GetTickCount
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetVersionExW
GetLocalTime

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
SetThreadpoolTimer
CloseThreadpoolTimer

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary
LoadLibraryExW
LoadStringW
GetModuleFileNameW
GetModuleHandleW
GetModuleHandleExW
FreeLibraryAndExitThread
GetProcAddress

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-rtlsupport-l1-2-0

RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry

rpcrt4

RpcServerInterfaceGroupClose
RpcServerInterfaceGroupActivate
RpcStringFreeW
RpcServerInterfaceGroupCreateW
UuidFromStringW
UuidCreate
UuidToStringW
RpcRaiseException
RpcBindingToStringBindingW
RpcStringBindingParseW
RpcImpersonateClient
RpcRevertToSelf
RpcServerUnsubscribeForNotification
RpcAsyncCompleteCall
NdrServerCall2
RpcServerSubscribeForNotification
RpcAsyncAbortCall
Ndr64AsyncServerCallAll
NdrServerCallAll
NdrAsyncServerCall
RpcServerInterfaceGroupDeactivate

api-ms-win-core-path-l1-1-0

PathCchCombineEx

api-ms-win-core-file-l1-2-1

GetFileSizeEx
GetFileAttributesW
WriteFile
SetFilePointer
FindClose
ReadFile
FindFirstFileW
SetFileAttributesW
DeleteFileW
FindNextFileW
CreateFileW
CreateDirectoryW
GetFileAttributesExW
RemoveDirectoryW

api-ms-win-security-base-l1-2-0

GetTokenInformation
EqualSid
RevertToSelf
SetTokenInformation
CreateWellKnownSid
GetSecurityDescriptorLength
IsWellKnownSid
GetSidSubAuthorityCount
AccessCheck
ImpersonateLoggedOnUser
GetSidSubAuthority
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetAce
AddAccessAllowedAce
InitializeAcl
GetLengthSid
FreeSid
CheckTokenMembership
DuplicateTokenEx
AllocateAndInitializeSid
AccessCheckByType
IsValidSid
CopySid
IsValidSecurityDescriptor
GetSecurityDescriptorDacl
MapGenericMask
AddAccessAllowedAceEx
SetSecurityDescriptorControl
SetSecurityDescriptorGroup
MakeSelfRelativeSD
SetSecurityDescriptorOwner
SetFileSecurityW

api-ms-win-core-processenvironment-l1-2-0

ExpandEnvironmentStringsW

api-ms-win-core-file-l2-1-1

MoveFileExW

api-ms-win-core-debug-l1-1-1

OutputDebugStringW

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime
FileTimeToSystemTime

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-threadpool-private-l1-1-0

RegisterWaitForSingleObjectEx

api-ms-win-core-job-l2-1-0

TerminateJobObject
SetInformationJobObject
CreateJobObjectW
AssignProcessToJobObject

api-ms-win-security-grouppolicy-l1-1-0

LeaveCriticalPolicySectionInternal
RsopLoggingEnabledInternal

api-ms-win-security-lsalookup-l1-1-1

LookupAccountSidLocalW

api-ms-win-security-activedirectoryclient-l1-1-0

DsUnBindW
DsBindWithSpnExW
DsFreeNameResultW
DsCrackNamesW

api-ms-win-core-threadpool-legacy-l1-1-0

QueueUserWorkItem
UnregisterWaitEx

api-ms-win-core-kernel32-legacy-l1-1-1

GetComputerNameW
WTSGetActiveConsoleSessionId

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW
lstrlenW
lstrcmpW

api-ms-win-core-localization-obsolete-l1-3-0

CompareStringA

api-ms-win-core-heap-obsolete-l1-1-0

LocalFlags

api-ms-win-core-privateprofile-l1-1-1

GetPrivateProfileIntW
GetProfileIntW
GetPrivateProfileStringW

sysntfy

SysNotifyStopServer
SysNotifyStartServer

ntdll

vDbgPrintEx
EtwEventWriteTransfer
EtwEventSetInformation
RtlAllocateHeap
ZwClose
AlpcGetMessageAttribute
AlpcInitializeMessageAttribute
TpWaitForAlpcCompletion
ZwAlpcConnectPort
RtlWaitOnAddress
ZwAlpcQueryInformation
TpReleaseAlpcCompletion
ZwAlpcSendWaitReceivePort
ZwAlpcDisconnectPort
TpAllocAlpcCompletion
ZwAlpcCancelMessage
NtDuplicateToken
RtlIpv4AddressToStringW
RtlEqualSid
RtlTimeToSecondsSince1980
NtQuerySystemTime
NtFsControlFile
NtOpenFile
NtSetInformationProcess
RtlPublishWnfStateData
RtlAdjustPrivilege
WinSqmSetDWORD
EtwEventUnregister
EtwEventRegister
EtwEventWrite
EtwEventActivityIdControl
NtQueryInformationToken
RtlFreeUnicodeString
RtlInitUnicodeString
RtlConvertSidToUnicodeString
RtlCopySid
EtwEventEnabled
RtlLengthSid
RtlNtStatusToDosError
NtClose
RtlFreeHeap
RtlWakeAddressAll

nlaapi

NlaRegisterQuery
NlaQueryNetDataEx
NlaGetInternetCapability
NlaRefreshQuery
NlaDeletePluginRequests
NlaAddToPluginRequests
NlaCreatePluginRequests
NlaCloseQuery
NlaDeleteTypeSet
NlaGetIntranetCapability
NlaDeleteDataSet
NlaQueryNetData
NlaQueryNetSignatures
NlaOpenQuery
NlaAddToTypeSet
NlaCreateTypeSet

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI
DelayLoadFailureHook

api-ms-win-core-localization-l1-2-1

FormatMessageW
FindNLSString

api-ms-win-core-memory-l1-1-2

MapViewOfFile
UnmapViewOfFile
CreateFileMappingW

api-ms-win-core-heap-l1-2-0

HeapFree
HeapAlloc
GetProcessHeap

Exports

Exports

DllCanUnloadNow
DllGetClassObject
GenerateRsopPolicy
GroupPolicyClientServiceMain
IsSecureCachingDisabled
ProcessGroupPolicyCompletedExInternal
ProcessGroupPolicyCompletedInternal
RsopAccessCheckByTypeInternal
RsopFileAccessCheckInternal
RsopResetPolicySettingStatusInternal
RsopSetPolicySettingStatusInternal
SvchostPushServiceGlobals

Sections

.text
Size: 698KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 435KB - Virtual size: 434KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 33B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe_Lightroom/pol/vmvy.dll
.dll windows x64

Password: 6392

4fe95de4bffba851ad3b23f2e96148f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

memmove
??1type_info@@UEAA@XZ
_onexit
__dllonexit
_unlock
_lock
__C_specific_handler
_initterm
free
_amsg_exit
_XcptFilter
memcpy
__CxxFrameHandler3
_CxxThrowException
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
_callnewh
malloc
_wtol
wcsrchr
wcstoul
wcsstr
wcschr
_itow_s
qsort
_wcsnicmp
_wtoi
_vsnwprintf
_wcsicmp
??_V@YAXPEAX@Z
_purecall
??3@YAXPEAX@Z
memset
strchr
wcscmp

gpapi

ord115

rpcrt4

IUnknown_Release_Proxy
CStdStubBuffer_AddRef
CStdStubBuffer_CountRefs
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
IUnknown_QueryInterface_Proxy
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect
IUnknown_AddRef_Proxy
CStdStubBuffer_DebugServerQueryInterface
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrOleAllocate
NdrOleFree

api-ms-win-core-com-midlproxystub-l1-1-0

ObjectStublessClient17
ObjectStublessClient9
ObjectStublessClient8
ObjectStublessClient10
ObjectStublessClient12
ObjectStublessClient16
NdrProxyForwardingFunction15
ObjectStublessClient6
ObjectStublessClient19
ObjectStublessClient21
ObjectStublessClient13
ObjectStublessClient7
ObjectStublessClient14
ObjectStublessClient18
NdrProxyForwardingFunction20
ObjectStublessClient11
ObjectStublessClient22
ObjectStublessClient3
ObjectStublessClient4
ObjectStublessClient5

api-ms-win-core-com-l1-1-1

CoTaskMemAlloc
CreateStreamOnHGlobal
StringFromCLSID
CoCreateInstance
CoSetProxyBlanket
StringFromGUID2
CoCreateGuid
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls
FreeLibraryAndExitThread
LoadLibraryExA
LockResource
GetProcAddress
GetModuleHandleW
FindResourceExW
GetModuleFileNameW
GetModuleHandleExW
LoadStringW
LoadResource
LoadLibraryExW
FreeLibrary

api-ms-win-core-heap-l2-1-0

GlobalFree
LocalReAlloc
GlobalAlloc
LocalAlloc
LocalFree

oleaut32

SysAllocString
SafeArrayDestroy
SafeArrayCreate
VariantInit
VariantClear
SysStringLen
SafeArrayGetElement
SafeArrayPutElement
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocStringLen
VariantTimeToDosDateTime
SysFreeString

api-ms-win-core-errorhandling-l1-1-1

SetLastError
GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter

api-ms-win-core-libraryloader-l1-2-2

LoadLibraryW

api-ms-win-core-debug-l1-1-1

OutputDebugStringA
OutputDebugStringW
DebugBreak

api-ms-win-security-sddl-l1-1-0

ConvertStringSidToSidW
ConvertSidToStringSidW

api-ms-win-security-base-l1-2-0

CreateWellKnownSid
GetSecurityDescriptorOwner
GetLengthSid
AddAuditAccessAceEx
AddAuditAccessObjectAce
AddAccessDeniedAceEx
AddAccessDeniedObjectAce
AddAccessAllowedAceEx
AddAccessAllowedObjectAce
CopySid
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
InitializeAcl
GetSecurityDescriptorSacl
GetSidIdentifierAuthority
AccessCheckByType
GetSecurityDescriptorGroup
GetAce
AddAccessAllowedAce
AllocateAndInitializeSid
GetSidSubAuthority
GetSidSubAuthorityCount
IsValidSid
FreeSid
SetSecurityDescriptorControl
MakeSelfRelativeSD
GetSecurityDescriptorControl
GetSecurityDescriptorLength
DuplicateTokenEx
IsWellKnownSid

api-ms-win-core-registry-l1-1-0

RegEnumValueW
RegOpenKeyExA
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA
RegOpenCurrentUser
RegDeleteTreeW

api-ms-win-core-processenvironment-l1-2-0

ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
GetCommandLineW

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
CompareStringW

api-ms-win-core-sysinfo-l1-2-1

GetTickCount
GetComputerNameExW
GetSystemTimeAsFileTime
GetLocalTime
GetTickCount64
GetSystemDirectoryW

api-ms-win-core-processthreads-l1-1-2

TerminateProcess
CreateThread
GetCurrentProcessId
GetCurrentThreadId
GetCurrentThread
OpenProcessToken
OpenThreadToken
GetCurrentProcess

api-ms-win-core-file-l1-2-1

GetFileAttributesExW
FindFirstFileW
GetFileSizeEx
CreateDirectoryW
FindNextFileW
GetTempFileNameW
FileTimeToLocalFileTime
WriteFile
SetFileAttributesW
GetTempPathW
CompareFileTime
RemoveDirectoryW
DeleteFileW
SetFilePointer
CreateFileW
ReadFile
FindClose

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-localization-l1-2-1

FormatMessageW

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime
SystemTimeToFileTime

api-ms-win-core-synch-l1-2-0

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetEvent
InitializeCriticalSectionEx
InitializeCriticalSectionAndSpinCount
OpenEventW
Sleep
CreateEventW

api-ms-win-core-string-l2-1-0

CharNextW

api-ms-win-core-datetime-l1-1-1

GetDateFormatW
GetTimeFormatW

api-ms-win-core-path-l1-1-0

PathCchRenameExtension
PathCchCombineEx

api-ms-win-core-file-l2-1-1

MoveFileExW

api-ms-win-security-lsalookup-l2-1-1

LookupAccountNameW
LookupAccountSidW

api-ms-win-core-rtlsupport-l1-2-0

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-memory-l1-1-2

MapViewOfFile
CreateFileMappingW
UnmapViewOfFile

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW
lstrlenW

api-ms-win-core-heap-obsolete-l1-1-0

GlobalUnlock
GlobalLock

api-ms-win-core-shlwapi-obsolete-l1-2-0

StrStrW
StrStrIW

api-ms-win-core-privateprofile-l1-1-1

WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW

api-ms-win-core-kernel32-legacy-l1-1-1

GetComputerNameW
DosDateTimeToFileTime

api-ms-win-core-sidebyside-l1-1-0

ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
CreateActCtxW
QueryActCtxW

ntdll

RtlSecondsSince1970ToTime
RtlFreeSid
RtlUnicodeStringToInteger
RtlAllocateAndInitializeSid
RtlCopySid
RtlLengthSid
NtQueryInformationToken
RtlFreeUnicodeString
RtlInitUnicodeString
RtlConvertSidToUnicodeString

activeds

ord4
ord6
ord5
ord9
ord7
ord15

dssec

ord2

dsuiext

ord10

framedynos

?GetSYSTEMTIME@WBEMTime@@QEBAHPEAU_SYSTEMTIME@@@Z
??4WBEMTime@@QEAAAEBV0@QEAG@Z

gdi32

GetBkColor
GetTextColor
DeleteObject
SetBkColor
GetTextExtentPoint32W
SetTextColor
CreateFontIndirectW
GetDeviceCaps
ExtTextOutW

ole32

ReleaseStgMedium
CoInitialize

user32

RemoveMenu
EnableMenuItem
GetMenuItemCount
CheckMenuItem
CheckMenuRadioItem
TrackPopupMenu
DestroyMenu
PostMessageW
SetWindowLongPtrW
GetSysColor
LoadBitmapW
DialogBoxParamW
IsDlgButtonChecked
SendDlgItemMessageW
GetWindowLongPtrW
RegisterClipboardFormatW
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
EndDialog
CheckDlgButton
WaitForInputIdle
IsWindow
SystemParametersInfoW
GetDC
ReleaseDC
DrawMenuBar
InvalidateRect
UpdateWindow
ShowWindow
MsgWaitForMultipleObjectsEx
PeekMessageW
TranslateMessage
DispatchMessageW
GetDlgItemTextW
CheckRadioButton
IsWindowEnabled
LoadIconW
LoadImageW
SendMessageW
GetSubMenu
LoadMenuW
SetCursor
LoadCursorW
GetWindowLongW
SetWindowLongW
EnableWindow
GetDlgItem
GetParent
SetDlgItemTextW
GetClientRect
GetSystemMetrics
GetWindowRect
MapWindowPoints
MoveWindow
MessageBoxW
SetFocus
PtInRect
ClientToScreen

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI
DelayLoadFailureHook

api-ms-win-core-heap-l1-2-0

HeapAlloc
HeapFree
GetProcessHeap

Exports

Exports

BrowseForGPO
CreateGPOLink
DeleteAllGPOLinks
DeleteGPOLink
DllCanUnloadNow
DllGetClassObject
ExportRSoPData
ImportRSoPData

Sections

.text
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 518KB - Virtual size: 517KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe_Lightroom/pol/wislqa64.dll
.dll windows x64

Password: 6392

ff584db2fcf8d3f8983494ce0a0ad88b

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/05/2022, 19:23

Not After

04/05/2023, 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

53:50:16:ea:a7:cc:7f:a7:be:23:e8:3f:c7:b1:78:69:a4:a8:cc:0f:76:a0:10:b3:ab:39:04:53:14:2c:d9:97
Signer

Actual PE Digest

53:50:16:ea:a7:cc:7f:a7:be:23:e8:3f:c7:b1:78:69:a4:a8:cc:0f:76:a0:10:b3:ab:39:04:53:14:2c:d9:97

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/12/2022, 13:55
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

?terminate@@YAXXZ
_onexit
__dllonexit
??3@YAXPEAX@Z
_unlock
_lock
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
memmove
memcpy
_CxxThrowException
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
_callnewh
fclose
iswdigit
fread
_wfopen_s
malloc
??1type_info@@UEAA@XZ
strstr
_wtol
_wcsnicmp
_wcstoui64
free
wcscpy_s
swprintf_s
strchr
_set_errno
strtol
strncpy_s
_vsnprintf
??_V@YAXPEAX@Z
_strnicmp
_wtoi
wcsrchr
wcscat_s
_wcslwr_s
_wcsicmp
wcsstr
wcschr
wcstol
_errno
sprintf_s
isdigit
wcsncmp
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
_purecall
memcpy_s
_vsnwprintf
memset
memcmp
__CxxFrameHandler3
_wtof
isspace
strcpy_s
strncmp
_wcslwr
strnlen
_vscwprintf
wcscmp

rpcrt4

UuidCreate

wdscore

ConstructPartialMsgVW
CurrentIP
WdsSetupLogMessageW

bcrypt

BCryptCreateHash
BCryptHashData
BCryptDestroyHash
BCryptFinishHash
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptCloseAlgorithmProvider

kernel32

SleepConditionVariableSRW
DelayLoadFailureHook
QueryDosDeviceW
GetLogicalDriveStringsW
LocalAlloc
RtlCompareMemory
GetModuleHandleExA
OutputDebugStringA
WriteFile
VirtualFree
VirtualAlloc
GetSystemDirectoryW
InitializeCriticalSection
CreateSemaphoreW
OpenWaitableTimerW
CreateEventW
LeaveCriticalSection
WaitForMultipleObjects
CreateWaitableTimerW
EnterCriticalSection
SetWaitableTimer
MoveFileExW
GetCommandLineW
CreateMutexW
GetTempFileNameW
GetTempPathW
DeleteFileW
GetFileAttributesW
QueryPerformanceCounter
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
Sleep
GetPriorityClass
SetPriorityClass
QueryProcessCycleTime
GetCurrentThread
lstrcmpiW
GetComputerNameW
GetSystemFirmwareTable
InitializeCriticalSectionEx
DeleteCriticalSection
LoadLibraryW
GetSystemWindowsDirectoryW
SystemTimeToFileTime
GetLocalTime
FindFirstFileW
FindClose
FindNextFileW
GetModuleFileNameA
HeapFree
GetModuleHandleExW
GetCurrentThreadId
FormatMessageW
HeapAlloc
GetProcAddress
GetProcessHeap
GetModuleHandleW
DebugBreak
lstrcmpW
CompareStringOrdinal
CloseHandle
CreateFileW
ReadFile
DeviceIoControl
SetLastError
GetSystemTimeAsFileTime
VerifyVersionInfoW
VerSetConditionMask
GetSystemTime
GetComputerNameExW
GetLastError
GetVersionExW
GetProductInfo
lstrcmpiA
LoadLibraryExW
FreeLibrary
HeapReAlloc
OutputDebugStringW
IsDebuggerPresent
WaitForSingleObject
ReleaseSemaphore
OpenSemaphoreW
RaiseException
ReleaseMutex
WaitForSingleObjectEx
GetTickCount
WTSGetActiveConsoleSessionId
GetModuleFileNameW
LocalFree
GetCurrentProcess
GetFileAttributesExW
GetLongPathNameW
ExpandEnvironmentStringsW
MultiByteToWideChar
GetCurrentProcessId
CreateMutexExW
CreateSemaphoreExW
CreateEventExW
SetEvent
LoadLibraryExA

ntdll

NtLoadKeyEx
RtlReleaseRelativeName
RtlInitUnicodeString
RtlGetThreadErrorMode
RtlSetThreadErrorMode
RtlDosPathNameToNtPathName_U_WithStatus
NtQueryLicenseValue
RtlReAllocateHeap
ZwEnumerateKey
ZwClose
ZwCreateFile
ZwQueryInformationFile
ZwUnmapViewOfSection
ZwMapViewOfSection
ZwCreateSection
RtlSecondsSince1970ToTime
RtlTimeToTimeFields
LdrResSearchResource
RtlVerifyVersionInfo
RtlImageDirectoryEntryToData
ZwOpenKey
ZwQueryValueKey
RtlDosPathNameToRelativeNtPathName_U
RtlEqualString
RtlEnterCriticalSection
RtlInitAnsiString
RtlMultiByteToUnicodeN
RtlInitializeCriticalSection
RtlLeaveCriticalSection
EtwEventUnregister
EtwEventWrite
EtwEventRegister
RtlInitString
RtlxAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
RtlUpcaseUnicodeChar
RtlGetNativeSystemInformation
ZwQuerySystemInformation
RtlTimeToSecondsSince1970
RtlDeleteCriticalSection
RtlFreeUnicodeString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlStringFromGUID
RtlRandomEx
RtlFreeHeap
NtQueryKey
RtlAllocateHeap
RtlFreeSid
RtlAllocateAndInitializeSid
RtlAdjustPrivilege
WinSqmIsOptedInEx
RtlComputeCrc32
RtlDecompressBuffer
RtlNtStatusToDosError
RtlInitUnicodeStringEx

Exports

Exports

CalculateCensusId
DoCensusRun
EnumerateOfficeAddins
EnumerateOfficeDocuments
GetCITDataApr
GetCITTelemetryPoints
RunGeneralTelemetry
RunInUserCxtW
SysprepCleanupEnableCustomTrigger

Sections

.text
Size: 372KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe_Lightroom/readME.txt

Sharing

General

Malware Config

Signatures

Files

Password: 6392

Password: 6392

bd1643c4afc1d991fbe68ef01fa53f83

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

32:93:00:d5:99:01:60:67:a3:e8:6c:edCertificate

Extended Key Usages

Key Usages

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2Certificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:31:89:c6:50:04Certificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

32:93:00:d5:99:01:60:67:a3:e8:6c:edCertificate

Extended Key Usages

Key Usages

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2Certificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:31:89:c6:50:04Certificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

61:a7:59:9f:5a:40:4d:2b:7e:a9:c7:c7:54:37:6b:02:a6:14:ed:5eSigner

Signature Validations

Verification

25/03/2020, 08:57 Valid: true

Chain 1

1c:98:8d:85:9a:e6:66:51:19:b0:3c:92:8b:2b:87:ea:d3:86:c8:b4:f8:e4:70:75:eb:45:56:33:d0:c7:4f:afSigner

Signature Validations

Verification

25/03/2020, 08:57 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

gdi32

comctl32

kernel32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 364KB - Virtual size: 366KB

.reloc Size: 2KB - Virtual size: 2KB

Password: 6392

059eb3baa45e35c79fae66f7279059ee

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8dCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

aa:30:60:38:bc:d4:8c:7d:7b:7d:86:02:57:07:20:8a:7f:ad:f8:75:58:ab:8b:7a:87:ea:5c:98:d2:a1:8f:56Signer

Signature Validations

Verification

15/12/2022, 13:55 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

api-ms-win-core-string-l1-1-0

api-ms-win-core-localization-l1-2-1

api-ms-win-core-heap-l2-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-memory-l1-1-2

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

32:93:00:d5:99:01:60:67:a3:e8:6c:ed
Certificate

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2
Certificate

04:00:00:00:00:01:31:89:c6:50:04
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

32:93:00:d5:99:01:60:67:a3:e8:6c:ed
Certificate

50:67:fa:46:ce:6c:fe:95:15:a6:9e:b2
Certificate

04:00:00:00:00:01:31:89:c6:50:04
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

61:a7:59:9f:5a:40:4d:2b:7e:a9:c7:c7:54:37:6b:02:a6:14:ed:5e
Signer

25/03/2020, 08:57
Valid: true

1c:98:8d:85:9a:e6:66:51:19:b0:3c:92:8b:2b:87:ea:d3:86:c8:b4:f8:e4:70:75:eb:45:56:33:d0:c7:4f:af
Signer

25/03/2020, 08:57
Valid: true

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 364KB - Virtual size: 366KB

.reloc
Size: 2KB - Virtual size: 2KB

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

aa:30:60:38:bc:d4:8c:7d:7b:7d:86:02:57:07:20:8a:7f:ad:f8:75:58:ab:8b:7a:87:ea:5c:98:d2:a1:8f:56
Signer

15/12/2022, 13:55
Valid: false

.text
Size: 769KB - Virtual size: 769KB

.rdata
Size: 641KB - Virtual size: 640KB

.data
Size: 1024B - Virtual size: 15KB

.pdata
Size: 28KB - Virtual size: 28KB

.didat
Size: 512B - Virtual size: 48B

.rsrc
Size: 70KB - Virtual size: 70KB

.reloc
Size: 7KB - Virtual size: 6KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 220KB - Virtual size: 220KB