coursework[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

coursework.zip
Size

16.8MB
MD5

88bf5de29fb0ecd4938c1370e8db29b7
SHA1

3832989221f950f7be98c037809fb55fb519b685
SHA256

e5124b369e2d7b4f4d4c188aa493614a964e6b87ef07338791509d8f6093765b
SHA512

96ac1db308c105e8c5fa75aaea2c072a5346863d9d5ec7f75c5b389f4280b7b2f79a4d6b6acb4910bc915684982fdfa4716858937319a54941bf0debef9573f1
SSDEEP

393216:PI4RjED+kdSMT+r2AZ5NOJWE98G1b21gj38O2eyDuR3g6B:PXo+apyrsf98ab21HEBB

Score

N/A

Malware Config

Signatures

Files

coursework.zip
.zip
awt.dll
.dll windows x64

087023461587dc333c691a9134a97b3c

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:4c:0f:6d:7a:10:03:04:38:55:b6:98:0b:9f:24:e4
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

21/03/2022, 00:00

Not After

21/03/2023, 23:59

Subject

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

59:97:cb:0f:97:90:94:bd:1c:43:19:42:69:4d:1d:a8:7b:0a:42:59
Signer

Actual PE Digest

59:97:cb:0f:97:90:94:bd:1c:43:19:42:69:4d:1d:a8:7b:0a:42:59

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

15/12/2022, 13:55
Valid: true

Chain 1

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetTickCount
GetVersionExW
FreeLibrary
GetModuleHandleW
GetProcAddress
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
MultiByteToWideChar
GetLastError
WaitForSingleObject
GlobalAlloc
GlobalFree
lstrcpynW
lstrlenW
GetProfileStringW
SetLastError
GlobalSize
GlobalUnlock
GlobalLock
LocalFree
FormatMessageW
GetACP
GetLocaleInfoW
ExpandEnvironmentStringsW
lstrcpyW
CloseHandle
ReleaseMutex
CreateMutexW
LocalAlloc
SetCurrentDirectoryW
GetCurrentDirectoryW
GetVersion
ReadFile
SetFilePointer
WideCharToMultiByte
GetCurrentProcessId
LCMapStringW
GetEnvironmentVariableW
GetFileAttributesW
SetEvent
ResetEvent
CreateEventW
LoadLibraryW
lstrcmpW
GetWindowsDirectoryW
GetSystemDefaultLangID
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
InitializeSListHead
Sleep
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateFileW
InitializeCriticalSection

jvm

jio_snprintf
JVM_CurrentTimeMillis
JVM_RaiseSignal

java

JNU_NewObjectByName
getEncodingFromLangID
getJavaIDFromLangID
JNU_CallMethodByNameV
JNU_GetFieldByName
JNU_ThrowIllegalArgumentException
JNU_ClassString
JNU_ThrowByName
JNU_ThrowIOException
JNU_GetStaticFieldByName
JNU_NewStringPlatform
JNU_ThrowArrayIndexOutOfBoundsException
JNU_SetFieldByName
JNU_CallStaticMethodByName
JNU_ThrowInternalError
JNU_GetEnv
JDK_LoadSystemLibrary
JNU_CallMethodByName
JNU_ThrowOutOfMemoryError
JNU_ThrowNullPointerException
JNU_IsInstanceOfByName

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegNotifyChangeKeyValue

oleaut32

SysAllocString
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantClear

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

wcschr
wcsstr
strchr
memset
__C_specific_handler
__std_type_info_destroy_list
memcpy
__std_terminate
_CxxThrowException
__CxxFrameHandler3
memcmp
_purecall
strstr
memmove

api-ms-win-crt-heap-l1-1-0

calloc
_set_new_mode
malloc
free
realloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswscanf
__stdio_common_vsprintf
__acrt_iob_func
fflush
fopen
__stdio_common_vswprintf_s
__stdio_common_vfprintf
__stdio_common_vsscanf
__stdio_common_vswprintf

api-ms-win-crt-string-l1-1-0

wcsncmp
tolower
_strupr_s
_wcsicmp
wcsncpy_s
wcscpy_s
strcspn
wcstok
strcmp
strncmp
wcsncpy
_wcsdup
iswspace

api-ms-win-crt-environment-l1-1-0

_wgetenv
getenv

api-ms-win-crt-math-l1-1-0

cos
sin
sqrt
floor
ceil
pow
round

api-ms-win-crt-utility-l1-1-0

qsort
bsearch

api-ms-win-crt-runtime-l1-1-0

terminate
_cexit
_initterm
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_control87
_set_new_handler
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_beginthreadex
_invalid_parameter_noinfo
_errno
_initterm_e
_crt_atexit
_seh_filter_dll

api-ms-win-crt-convert-l1-1-0

strtod
_i64tow
wcstoul
_wtoi

api-ms-win-crt-locale-l1-1-0

setlocale

api-ms-win-crt-filesystem-l1-1-0

_wfullpath

api-ms-win-crt-time-l1-1-0

_localtime64
wcsftime
_ftime64

Exports

Exports

??0D3DContext@@AEAA@PEAUIDirect3D9@@I@Z
??0D3DContext@@QEAA@AEBV0@@Z
??0D3DPipelineManager@@AEAA@XZ
??0D3DVertexCacher@@AEAA@XZ
??1D3DContext@@UEAA@XZ
??1D3DPipelineManager@@AEAA@XZ
??1D3DVertexCacher@@QEAA@XZ
??4D3DContext@@QEAAAEAV0@AEBV0@@Z
??4D3DPipelineManager@@QEAAAEAV0@AEBV0@@Z
??4D3DVertexCacher@@QEAAAEAV0@AEBV0@@Z
??_7D3DContext@@6B@
?BeginScene@D3DContext@@QEAAJC@Z
?BeginShapeClip@D3DContext@@QEAAJXZ
?CheckAdaptersInfo@D3DPipelineManager@@AEAAJXZ
?CheckAndResetDevice@D3DContext@@QEAAJXZ
?CheckDeviceCaps@D3DPipelineManager@@AEAAJI@Z
?CheckForBadHardware@D3DPipelineManager@@CAJKK_J@Z
?CheckOSVersion@D3DPipelineManager@@CAJXZ
?ConfigureContext@D3DContext@@QEAAJPEAU_D3DPRESENT_PARAMETERS_@@@Z
?CreateDefaultFocusWindow@D3DPipelineManager@@AEAAPEAUHWND__@@XZ
?CreateFragmentProgram@D3DContext@@AEAAPEAUIDirect3DPixelShader9@@PEAPEAKPEAUShaderList@@J@Z
?CreateInstance@D3DContext@@SAJPEAUIDirect3D9@@IPEAPEAV1@@Z
?CreateInstance@D3DPipelineManager@@CAPEAV1@XZ
?CreateInstance@D3DVertexCacher@@SAJPEAVD3DContext@@PEAPEAV1@@Z
?D3DBL_CopyImageToIntXrgbSurface@@YAJPEAUSurfaceDataRasInfo@@HPEAVD3DResource@@JJJJJJ@Z
?D3DBL_CopySurfaceToIntArgbImage@@YAJPEAUIDirect3DSurface9@@PEAUSurfaceDataRasInfo@@JJJJJJ@Z
?D3DBlitLoops_IsoBlit@@YAJPEAUJNIEnv_@@PEAVD3DContext@@_J2EJEEJJJJNNNN@Z
?D3DBlitToSurfaceViaTexture@@YAJPEAVD3DContext@@PEAUSurfaceDataRasInfo@@HPEAU_D3DSDOps@@EJJJJJNNNN@Z
?D3DEnabledOnAdapter@D3DPipelineManager@@AEAAJI@Z
?D3DRenderer_DrawAAParallelogram@@YAJPEAVD3DContext@@MMMMMMMM@Z
?D3DRenderer_DrawLine@@YAJPEAVD3DContext@@JJJJ@Z
?D3DRenderer_DrawParallelogram@@YAJPEAVD3DContext@@MMMMMMMM@Z
?D3DRenderer_DrawPoly@@YAJPEAVD3DContext@@JEJJPEAJ1@Z
?D3DRenderer_DrawRect@@YAJPEAVD3DContext@@JJJJ@Z
?D3DRenderer_DrawScanlines@@YAJPEAVD3DContext@@JPEAJ@Z
?D3DRenderer_FillAAParallelogram@@YAJPEAVD3DContext@@MMMMMM@Z
?D3DRenderer_FillParallelogram@@YAJPEAVD3DContext@@MMMMMM@Z
?D3DRenderer_FillRect@@YAJPEAVD3DContext@@JJJJ@Z
?D3DRenderer_FillSpans@@YAJPEAVD3DContext@@JPEAJ@Z
?DeleteInstance@D3DPipelineManager@@CAXXZ
?DisableAAParallelogramProgram@D3DContext@@QEAAJXZ
?DrawLine@D3DVertexCacher@@QEAAJHHHH@Z
?DrawParallelogramAA@D3DVertexCacher@@QEAAJMMMMMMMMMMMM@Z
?DrawPoly@D3DVertexCacher@@QEAAJJEJJPEAJ0@Z
?DrawRect@D3DVertexCacher@@QEAAJHHHH@Z
?DrawScanlines@D3DVertexCacher@@QEAAJJPEAJ@Z
?DrawTexture@D3DVertexCacher@@QEAAJMMMMMMMM@Z
?DrawTexture@D3DVertexCacher@@QEAAJMMMMMMMMMMMM@Z
?EnableAAParallelogramProgram@D3DContext@@QEAAJXZ
?EnableBasicGradientProgram@D3DContext@@QEAAJJ@Z
?EnableConvolveProgram@D3DContext@@QEAAJJ@Z
?EnableFragmentProgram@D3DContext@@AEAAJPEAPEAKPEAUShaderList@@J@Z
?EnableLCDTextProgram@D3DContext@@QEAAJXZ
?EnableLinearGradientProgram@D3DContext@@QEAAJJ@Z
?EnableLookupProgram@D3DContext@@QEAAJJ@Z
?EnableRadialGradientProgram@D3DContext@@QEAAJJ@Z
?EnableRescaleProgram@D3DContext@@QEAAJJ@Z
?EndScene@D3DContext@@QEAAJXZ
?EndShapeClip@D3DContext@@QEAAJXZ
?EnsureCapacity@D3DVertexCacher@@AEAAJW4_D3DPRIMITIVETYPE@@I@Z
?FillParallelogram@D3DVertexCacher@@QEAAJMMMMMM@Z
?FillParallelogramAA@D3DVertexCacher@@QEAAJMMMMMM@Z
?FillRect@D3DVertexCacher@@QEAAJHHHH@Z
?FillSpans@D3DVertexCacher@@QEAAJJPEAJ@Z
?FlushVertexQueue@D3DContext@@QEAAJXZ
?GDICheckForBadHardware@D3DPipelineManager@@CAJXZ
?Get3DDevice@D3DContext@@QEAAPEAUIDirect3DDevice9@@XZ
?Get3DObject@D3DContext@@QEAAPEAUIDirect3D9@@XZ
?GetAdapterOrdinalByHmon@D3DPipelineManager@@AEAAIPEAUHMONITOR__@@@Z
?GetAdapterOrdinalForScreen@D3DPipelineManager@@QEAAIJ@Z
?GetClipType@D3DContext@@QEAA?AW4ClipType@@XZ
?GetColor@D3DVertexCacher@@QEAAJXZ
?GetContextCaps@D3DContext@@QEAAHXZ
?GetCurrentFocusWindow@D3DPipelineManager@@QEAAPEAUHWND__@@XZ
?GetD3DContext@D3DPipelineManager@@QEAAJIPEAPEAVD3DContext@@@Z
?GetD3DObject@D3DPipelineManager@@QEAAPEAUIDirect3D9@@XZ
?GetDeviceCaps@D3DContext@@QEAAPEAU_D3DCAPS9@@XZ
?GetDeviceType@D3DPipelineManager@@QEAA?AW4_D3DDEVTYPE@@XZ
?GetFreeVertices@D3DVertexCacher@@QEAAIXZ
?GetGrayscaleGlyphCache@D3DContext@@QEAAPEAVD3DGlyphCache@@XZ
?GetInstance@D3DPipelineManager@@SAPEAV1@XZ
?GetLCDGlyphCache@D3DContext@@QEAAPEAVD3DGlyphCache@@XZ
?GetMaskCache@D3DContext@@QEAAPEAVD3DMaskCache@@XZ
?GetMatchingDepthStencilFormat@D3DPipelineManager@@QEAA?AW4_D3DFORMAT@@IW42@0@Z
?GetPaintState@D3DContext@@QEAAJXZ
?GetPresentationParams@D3DContext@@QEAAPEAU_D3DPRESENT_PARAMETERS_@@XZ
?GetResourceManager@D3DContext@@QEAAPEAVD3DResourceManager@@XZ
?HandleAdaptersChange@D3DPipelineManager@@SAJPEAPEAUHMONITOR__@@I@Z
?HandleLostDevices@D3DPipelineManager@@QEAAJXZ
?Init@D3DVertexCacher@@QEAAJPEAVD3DContext@@@Z
?InitAdapters@D3DPipelineManager@@AEAAJXZ
?InitContext@D3DContext@@QEAAJXZ
?InitContextCaps@D3DContext@@AEAAJXZ
?InitD3D@D3DPipelineManager@@AEAAJXZ
?InitDepthStencilBuffer@D3DContext@@AEAAJPEAU_D3DSURFACE_DESC@@@Z
?InitDevice@D3DContext@@AEAAJPEAUIDirect3DDevice9@@@Z
?InitGrayscaleGlyphCache@D3DContext@@QEAAJXZ
?InitLCDGlyphCache@D3DContext@@QEAAJXZ
?IsAlphaRTSurfaceSupported@D3DContext@@QEAAHXZ
?IsAlphaRTTSupported@D3DContext@@QEAAHXZ
?IsDepthStencilBufferOk@D3DContext@@AEAAHPEAU_D3DSURFACE_DESC@@@Z
?IsDynamicTextureSupported@D3DContext@@QEAAHXZ
?IsGradientInstructionExtensionSupported@D3DContext@@QEAAHXZ
?IsHWRasterizer@D3DContext@@QEAAHXZ
?IsIdentityTx@D3DContext@@QEAAHXZ
?IsImmediateIntervalSupported@D3DContext@@QEAAHXZ
?IsMultiTexturingSupported@D3DContext@@QEAAHXZ
?IsOpaqueRTTSupported@D3DContext@@QEAAHXZ
?IsPixelShader20Supported@D3DContext@@QEAAHXZ
?IsPixelShader30Supported@D3DContext@@QEAAHXZ
?IsPow2TexturesOnly@D3DContext@@QEAAHXZ
?IsSquareTexturesOnly@D3DContext@@QEAAHXZ
?IsStretchRectFilteringSupported@D3DContext@@QEAAHW4_D3DTEXTUREFILTERTYPE@@@Z
?IsTextureFilteringSupported@D3DContext@@QEAAHW4_D3DTEXTUREFILTERTYPE@@@Z
?IsTextureFormatSupported@D3DContext@@QEAAHW4_D3DFORMAT@@K@Z
?ReleaseAdapters@D3DPipelineManager@@AEAAJXZ
?ReleaseContextResources@D3DContext@@QEAAXXZ
?ReleaseD3D@D3DPipelineManager@@AEAAJXZ
?ReleaseDefPoolResources@D3DContext@@QEAAXXZ
?ReleaseDefPoolResources@D3DVertexCacher@@QEAAXXZ
?Render@D3DVertexCacher@@QEAAJH@Z
?ResetClip@D3DContext@@QEAAJXZ
?ResetComposite@D3DContext@@QEAAJXZ
?ResetContext@D3DContext@@QEAAJXZ
?ResetTransform@D3DContext@@QEAAJXZ
?SelectDeviceType@D3DPipelineManager@@AEAA?AW4_D3DDEVTYPE@@XZ
?SetAlphaComposite@D3DContext@@QEAAJJMJ@Z
?SetColor@D3DVertexCacher@@QEAAXJ@Z
?SetFSFocusWindow@D3DPipelineManager@@QEAAPEAUHWND__@@IPEAU2@@Z
?SetPaintState@D3DContext@@QEAAXJ@Z
?SetRectClip@D3DContext@@QEAAJHHHH@Z
?SetRenderTarget@D3DContext@@QEAAJPEAUIDirect3DSurface9@@@Z
?SetTexture@D3DContext@@QEAAJPEAUIDirect3DTexture9@@K@Z
?SetTransform@D3DContext@@QEAAJNNNNNN@Z
?Sync@D3DContext@@QEAAJXZ
?UpdateState@D3DContext@@QEAAJC@Z
?UpdateTextureColorState@D3DContext@@QEAAJKK@Z
?UploadTileToTexture@D3DContext@@QEAAJPEAVD3DResource@@PEAXJJJJJJJW4TileFormat@@PEAJ3@Z
?pMgr@D3DPipelineManager@@0PEAV1@EA
AWTIsHeadless
AccelGlyphCache_RemoveAllCellInfos
DSFreeDrawingSurface
DSGetComponent
DSGetDrawingSurface
DSLockAWT
DSUnlockAWT
Disposer_AddRecord
GDIWinSD_InitDC
GDIWindowSurfaceData_GetComp
GDIWindowSurfaceData_GetOps
GDIWindowSurfaceData_GetOpsNoSetup
GDIWindowSurfaceData_GetWindow
GetNativePrim
GrPrim_CompGetAlphaInfo
GrPrim_CompGetXorColor
GrPrim_CompGetXorInfo
GrPrim_Sg2dGetClip
GrPrim_Sg2dGetCompInfo
GrPrim_Sg2dGetEaRGB
GrPrim_Sg2dGetLCDTextContrast
GrPrim_Sg2dGetPixel
J2dTraceImpl
J2dTraceInit
JNI_OnLoad
Java_java_awt_AWTEvent_initIDs
Java_java_awt_AWTEvent_nativeSetSource
Java_java_awt_Button_initIDs
Java_java_awt_CheckboxMenuItem_initIDs
Java_java_awt_Checkbox_initIDs
Java_java_awt_Choice_initIDs
Java_java_awt_Color_initIDs
Java_java_awt_Component_initIDs
Java_java_awt_Container_initIDs
Java_java_awt_Cursor_finalizeImpl
Java_java_awt_Cursor_initIDs
Java_java_awt_Dialog_initIDs
Java_java_awt_Dimension_initIDs
Java_java_awt_Event_initIDs
Java_java_awt_FileDialog_initIDs
Java_java_awt_FontMetrics_initIDs
Java_java_awt_Font_initIDs
Java_java_awt_Frame_initIDs
Java_java_awt_Insets_initIDs
Java_java_awt_KeyboardFocusManager_initIDs
Java_java_awt_Label_initIDs
Java_java_awt_MenuBar_initIDs
Java_java_awt_MenuComponent_initIDs
Java_java_awt_MenuItem_initIDs
Java_java_awt_Menu_initIDs
Java_java_awt_Rectangle_initIDs
Java_java_awt_ScrollPaneAdjustable_initIDs
Java_java_awt_ScrollPane_initIDs
Java_java_awt_Scrollbar_initIDs
Java_java_awt_TextArea_initIDs
Java_java_awt_TextField_initIDs
Java_java_awt_Toolkit_initIDs
Java_java_awt_TrayIcon_initIDs
Java_java_awt_Window_initIDs
Java_java_awt_event_InputEvent_initIDs
Java_java_awt_event_KeyEvent_initIDs
Java_java_awt_event_MouseEvent_initIDs
Java_java_awt_image_BufferedImage_initIDs
Java_java_awt_image_ColorModel_initIDs
Java_java_awt_image_IndexColorModel_initIDs
Java_java_awt_image_Kernel_initIDs
Java_java_awt_image_Raster_initIDs
Java_java_awt_image_SampleModel_initIDs
Java_java_awt_image_SinglePixelPackedSampleModel_initIDs
Java_sun_awt_DebugSettings_setCTracingOn__Z
Java_sun_awt_DebugSettings_setCTracingOn__ZLjava_lang_String_2
Java_sun_awt_DebugSettings_setCTracingOn__ZLjava_lang_String_2I
Java_sun_awt_FontDescriptor_initIDs
Java_sun_awt_PlatformFont_initIDs
Java_sun_awt_SunToolkit_closeSplashScreen
Java_sun_awt_Win32FontManager_deRegisterFontWithPlatform
Java_sun_awt_Win32FontManager_getEUDCFontFile
Java_sun_awt_Win32FontManager_registerFontWithPlatform
Java_sun_awt_Win32GraphicsConfig_getBounds
Java_sun_awt_Win32GraphicsConfig_initIDs
Java_sun_awt_Win32GraphicsDevice_configDisplayMode
Java_sun_awt_Win32GraphicsDevice_enterFullScreenExclusive
Java_sun_awt_Win32GraphicsDevice_enumDisplayModes
Java_sun_awt_Win32GraphicsDevice_exitFullScreenExclusive
Java_sun_awt_Win32GraphicsDevice_getCurrentDisplayMode
Java_sun_awt_Win32GraphicsDevice_getDefaultPixIDImpl
Java_sun_awt_Win32GraphicsDevice_getMaxConfigsImpl
Java_sun_awt_Win32GraphicsDevice_getNativeScaleX
Java_sun_awt_Win32GraphicsDevice_getNativeScaleY
Java_sun_awt_Win32GraphicsDevice_initDevice
Java_sun_awt_Win32GraphicsDevice_initIDs
Java_sun_awt_Win32GraphicsDevice_initNativeScale
Java_sun_awt_Win32GraphicsDevice_isPixFmtSupported
Java_sun_awt_Win32GraphicsDevice_makeColorModel
Java_sun_awt_Win32GraphicsDevice_setNativeScale
Java_sun_awt_Win32GraphicsEnvironment_getDefaultScreen
Java_sun_awt_Win32GraphicsEnvironment_getNumScreens
Java_sun_awt_Win32GraphicsEnvironment_getXResolution
Java_sun_awt_Win32GraphicsEnvironment_getYResolution
Java_sun_awt_Win32GraphicsEnvironment_initDisplay
Java_sun_awt_Win32GraphicsEnvironment_isVistaOS
Java_sun_awt_image_BufImgSurfaceData_initIDs
Java_sun_awt_image_BufImgSurfaceData_initRaster
Java_sun_awt_image_ByteComponentRaster_initIDs
Java_sun_awt_image_BytePackedRaster_initIDs
Java_sun_awt_image_DataBufferNative_getElem
Java_sun_awt_image_DataBufferNative_setElem
Java_sun_awt_image_GifImageDecoder_initIDs
Java_sun_awt_image_GifImageDecoder_parseImage
Java_sun_awt_image_ImageRepresentation_initIDs
Java_sun_awt_image_ImageRepresentation_setDiffICM
Java_sun_awt_image_ImageRepresentation_setICMpixels
Java_sun_awt_image_ImagingLib_convolveBI
Java_sun_awt_image_ImagingLib_convolveRaster
Java_sun_awt_image_ImagingLib_init
Java_sun_awt_image_ImagingLib_lookupByteBI
Java_sun_awt_image_ImagingLib_lookupByteRaster
Java_sun_awt_image_ImagingLib_transformBI
Java_sun_awt_image_ImagingLib_transformRaster
Java_sun_awt_image_IntegerComponentRaster_initIDs
Java_sun_awt_image_ShortComponentRaster_initIDs
Java_sun_awt_shell_Win32ShellFolder2_bindToObject
Java_sun_awt_shell_Win32ShellFolder2_combinePIDLs
Java_sun_awt_shell_Win32ShellFolder2_compareIDs
Java_sun_awt_shell_Win32ShellFolder2_compareIDsByColumn
Java_sun_awt_shell_Win32ShellFolder2_copyFirstPIDLEntry
Java_sun_awt_shell_Win32ShellFolder2_disposeIcon
Java_sun_awt_shell_Win32ShellFolder2_doGetColumnInfo
Java_sun_awt_shell_Win32ShellFolder2_doGetColumnValue
Java_sun_awt_shell_Win32ShellFolder2_extractIcon
Java_sun_awt_shell_Win32ShellFolder2_getAttributes0
Java_sun_awt_shell_Win32ShellFolder2_getDisplayNameOf
Java_sun_awt_shell_Win32ShellFolder2_getEnumObjects
Java_sun_awt_shell_Win32ShellFolder2_getExecutableType
Java_sun_awt_shell_Win32ShellFolder2_getFileSystemPath0
Java_sun_awt_shell_Win32ShellFolder2_getFolderType
Java_sun_awt_shell_Win32ShellFolder2_getIShellIcon
Java_sun_awt_shell_Win32ShellFolder2_getIcon
Java_sun_awt_shell_Win32ShellFolder2_getIconBits
Java_sun_awt_shell_Win32ShellFolder2_getIconIndex
Java_sun_awt_shell_Win32ShellFolder2_getIconResource
Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation
Java_sun_awt_shell_Win32ShellFolder2_getNextChild
Java_sun_awt_shell_Win32ShellFolder2_getNextPIDLEntry
Java_sun_awt_shell_Win32ShellFolder2_getStandardViewButton0
Java_sun_awt_shell_Win32ShellFolder2_getSystemIcon
Java_sun_awt_shell_Win32ShellFolder2_hiResIconAvailable
Java_sun_awt_shell_Win32ShellFolder2_initDesktop
Java_sun_awt_shell_Win32ShellFolder2_initIDs
Java_sun_awt_shell_Win32ShellFolder2_initSpecial
Java_sun_awt_shell_Win32ShellFolder2_loadKnownFolders
Java_sun_awt_shell_Win32ShellFolder2_parseDisplayName0
Java_sun_awt_shell_Win32ShellFolder2_releaseEnumObjects
Java_sun_awt_shell_Win32ShellFolder2_releaseIShellFolder
Java_sun_awt_shell_Win32ShellFolder2_releasePIDL
Java_sun_awt_shell_Win32ShellFolderManager2_initializeCom
Java_sun_awt_shell_Win32ShellFolderManager2_uninitializeCom
Java_sun_awt_windows_ThemeReader_closeTheme
Java_sun_awt_windows_ThemeReader_getBoolean
Java_sun_awt_windows_ThemeReader_getColor
Java_sun_awt_windows_ThemeReader_getEnum
Java_sun_awt_windows_ThemeReader_getInt
Java_sun_awt_windows_ThemeReader_getPartSize
Java_sun_awt_windows_ThemeReader_getPoint
Java_sun_awt_windows_ThemeReader_getPosition
Java_sun_awt_windows_ThemeReader_getSysBoolean
Java_sun_awt_windows_ThemeReader_getThemeBackgroundContentMargins
Java_sun_awt_windows_ThemeReader_getThemeMargins
Java_sun_awt_windows_ThemeReader_getThemeTransitionDuration
Java_sun_awt_windows_ThemeReader_initThemes
Java_sun_awt_windows_ThemeReader_isThemePartDefined
Java_sun_awt_windows_ThemeReader_openTheme
Java_sun_awt_windows_ThemeReader_paintBackground
Java_sun_awt_windows_ThemeReader_setWindowTheme
Java_sun_awt_windows_WButtonPeer_create
Java_sun_awt_windows_WButtonPeer_initIDs
Java_sun_awt_windows_WButtonPeer_setLabel
Java_sun_awt_windows_WCanvasPeer_create
Java_sun_awt_windows_WCanvasPeer_setNativeBackgroundErase
Java_sun_awt_windows_WCheckboxMenuItemPeer_setState
Java_sun_awt_windows_WCheckboxPeer_create
Java_sun_awt_windows_WCheckboxPeer_getCheckMarkSize
Java_sun_awt_windows_WCheckboxPeer_setCheckboxGroup
Java_sun_awt_windows_WCheckboxPeer_setLabel
Java_sun_awt_windows_WCheckboxPeer_setState
Java_sun_awt_windows_WChoicePeer_addItems
Java_sun_awt_windows_WChoicePeer_closeList
Java_sun_awt_windows_WChoicePeer_create
Java_sun_awt_windows_WChoicePeer_remove
Java_sun_awt_windows_WChoicePeer_removeAll
Java_sun_awt_windows_WChoicePeer_reshape
Java_sun_awt_windows_WChoicePeer_select
Java_sun_awt_windows_WClipboard_closeClipboard
Java_sun_awt_windows_WClipboard_getClipboardData
Java_sun_awt_windows_WClipboard_getClipboardFormats
Java_sun_awt_windows_WClipboard_init
Java_sun_awt_windows_WClipboard_openClipboard
Java_sun_awt_windows_WClipboard_publishClipboardData
Java_sun_awt_windows_WClipboard_registerClipboardViewer
Java_sun_awt_windows_WComponentPeer__1dispose
Java_sun_awt_windows_WComponentPeer__1setBackground
Java_sun_awt_windows_WComponentPeer__1setFont
Java_sun_awt_windows_WComponentPeer__1setForeground
Java_sun_awt_windows_WComponentPeer_addNativeDropTarget
Java_sun_awt_windows_WComponentPeer_beginValidate
Java_sun_awt_windows_WComponentPeer_createPrintedPixels
Java_sun_awt_windows_WComponentPeer_disable
Java_sun_awt_windows_WComponentPeer_enable
Java_sun_awt_windows_WComponentPeer_endValidate
Java_sun_awt_windows_WComponentPeer_getLocationOnScreen
Java_sun_awt_windows_WComponentPeer_getTargetGC
Java_sun_awt_windows_WComponentPeer_hide
Java_sun_awt_windows_WComponentPeer_isObscured
Java_sun_awt_windows_WComponentPeer_nativeHandleEvent
Java_sun_awt_windows_WComponentPeer_nativeHandlesWheelScrolling
Java_sun_awt_windows_WComponentPeer_pSetParent
Java_sun_awt_windows_WComponentPeer_pShow
Java_sun_awt_windows_WComponentPeer_removeNativeDropTarget
Java_sun_awt_windows_WComponentPeer_reshape
Java_sun_awt_windows_WComponentPeer_reshapeNoCheck
Java_sun_awt_windows_WComponentPeer_setFocus
Java_sun_awt_windows_WComponentPeer_setRectangularShape
Java_sun_awt_windows_WComponentPeer_setZOrder
Java_sun_awt_windows_WComponentPeer_start
Java_sun_awt_windows_WComponentPeer_updateWindow
Java_sun_awt_windows_WCustomCursor_createCursorIndirect
Java_sun_awt_windows_WCustomCursor_getCursorHeight
Java_sun_awt_windows_WCustomCursor_getCursorWidth
Java_sun_awt_windows_WDataTransferer_dragQueryFile
Java_sun_awt_windows_WDataTransferer_getClipboardFormatName
Java_sun_awt_windows_WDataTransferer_imageDataToPlatformImageBytes
Java_sun_awt_windows_WDataTransferer_platformImageBytesToImageData
Java_sun_awt_windows_WDataTransferer_registerClipboardFormat
Java_sun_awt_windows_WDefaultFontCharset_canConvert
Java_sun_awt_windows_WDefaultFontCharset_initIDs
Java_sun_awt_windows_WDesktopPeer_ShellExecute
Java_sun_awt_windows_WDesktopPeer_init
Java_sun_awt_windows_WDesktopPeer_moveToTrash
Java_sun_awt_windows_WDesktopPeer_setSuddenTerminationEnabled
Java_sun_awt_windows_WDesktopProperties_getWindowsParameters
Java_sun_awt_windows_WDesktopProperties_init
Java_sun_awt_windows_WDesktopProperties_initIDs
Java_sun_awt_windows_WDesktopProperties_playWindowsSound
Java_sun_awt_windows_WDialogPeer_createAwtDialog
Java_sun_awt_windows_WDialogPeer_endModal
Java_sun_awt_windows_WDialogPeer_pSetIMMOption
Java_sun_awt_windows_WDialogPeer_showModal
Java_sun_awt_windows_WDragSourceContextPeer_createDragSource
Java_sun_awt_windows_WDragSourceContextPeer_doDragDrop
Java_sun_awt_windows_WDragSourceContextPeer_setNativeCursor
Java_sun_awt_windows_WDropTargetContextPeerFileStream_freeStgMedium
Java_sun_awt_windows_WDropTargetContextPeerIStream_Available
Java_sun_awt_windows_WDropTargetContextPeerIStream_Close
Java_sun_awt_windows_WDropTargetContextPeerIStream_Read
Java_sun_awt_windows_WDropTargetContextPeerIStream_ReadBytes
Java_sun_awt_windows_WDropTargetContextPeer_dropDone
Java_sun_awt_windows_WDropTargetContextPeer_getData
Java_sun_awt_windows_WEmbeddedFramePeer_create
Java_sun_awt_windows_WEmbeddedFramePeer_getBoundsPrivate
Java_sun_awt_windows_WEmbeddedFrame_initIDs
Java_sun_awt_windows_WEmbeddedFrame_isPrinterDC
Java_sun_awt_windows_WEmbeddedFrame_notifyModalBlockedImpl
Java_sun_awt_windows_WEmbeddedFrame_printBand
Java_sun_awt_windows_WFileDialogPeer__1dispose
Java_sun_awt_windows_WFileDialogPeer__1hide
Java_sun_awt_windows_WFileDialogPeer__1show
Java_sun_awt_windows_WFileDialogPeer_getLocationOnScreen
Java_sun_awt_windows_WFileDialogPeer_initIDs
Java_sun_awt_windows_WFileDialogPeer_setFilterString
Java_sun_awt_windows_WFileDialogPeer_toBack
Java_sun_awt_windows_WFileDialogPeer_toFront
Java_sun_awt_windows_WFontMetrics_bytesWidth
Java_sun_awt_windows_WFontMetrics_charsWidth
Java_sun_awt_windows_WFontMetrics_init
Java_sun_awt_windows_WFontMetrics_initIDs
Java_sun_awt_windows_WFontMetrics_stringWidth
Java_sun_awt_windows_WFontPeer_initIDs
Java_sun_awt_windows_WFramePeer_clearMaximizedBounds
Java_sun_awt_windows_WFramePeer_createAwtFrame
Java_sun_awt_windows_WFramePeer_getState
Java_sun_awt_windows_WFramePeer_getSysMenuHeight
Java_sun_awt_windows_WFramePeer_initIDs
Java_sun_awt_windows_WFramePeer_pSetIMMOption
Java_sun_awt_windows_WFramePeer_setMaximizedBounds
Java_sun_awt_windows_WFramePeer_setMenuBar0
Java_sun_awt_windows_WFramePeer_setState
Java_sun_awt_windows_WFramePeer_synthesizeWmActivate
Java_sun_awt_windows_WGlobalCursorManager_findHeavyweightUnderCursor
Java_sun_awt_windows_WGlobalCursorManager_getCursorPos
Java_sun_awt_windows_WGlobalCursorManager_getLocationOnScreen
Java_sun_awt_windows_WGlobalCursorManager_setCursor
Java_sun_awt_windows_WInputMethodDescriptor_getNativeAvailableLocales
Java_sun_awt_windows_WInputMethod_createNativeContext
Java_sun_awt_windows_WInputMethod_destroyNativeContext
Java_sun_awt_windows_WInputMethod_disableNativeIME
Java_sun_awt_windows_WInputMethod_enableNativeIME
Java_sun_awt_windows_WInputMethod_endCompositionNative
Java_sun_awt_windows_WInputMethod_getConversionStatus
Java_sun_awt_windows_WInputMethod_getNativeIMMDescription
Java_sun_awt_windows_WInputMethod_getNativeLocale
Java_sun_awt_windows_WInputMethod_getOpenStatus
Java_sun_awt_windows_WInputMethod_handleNativeIMEEvent
Java_sun_awt_windows_WInputMethod_isCompositionStringAvailable
Java_sun_awt_windows_WInputMethod_openCandidateWindow
Java_sun_awt_windows_WInputMethod_setConversionStatus
Java_sun_awt_windows_WInputMethod_setNativeLocale
Java_sun_awt_windows_WInputMethod_setOpenStatus
Java_sun_awt_windows_WInputMethod_setStatusWindowVisible
Java_sun_awt_windows_WKeyboardFocusManagerPeer_getNativeFocusOwner
Java_sun_awt_windows_WKeyboardFocusManagerPeer_getNativeFocusedWindow
Java_sun_awt_windows_WKeyboardFocusManagerPeer_setNativeFocusOwner
Java_sun_awt_windows_WLabelPeer_create
Java_sun_awt_windows_WLabelPeer_lazyPaint
Java_sun_awt_windows_WLabelPeer_setAlignment
Java_sun_awt_windows_WLabelPeer_setText
Java_sun_awt_windows_WLightweightFramePeer_overrideNativeHandle
Java_sun_awt_windows_WListPeer_addItems
Java_sun_awt_windows_WListPeer_create
Java_sun_awt_windows_WListPeer_delItems
Java_sun_awt_windows_WListPeer_deselect
Java_sun_awt_windows_WListPeer_getMaxWidth
Java_sun_awt_windows_WListPeer_isSelected
Java_sun_awt_windows_WListPeer_makeVisible
Java_sun_awt_windows_WListPeer_select
Java_sun_awt_windows_WListPeer_setMultipleSelections
Java_sun_awt_windows_WListPeer_updateMaxItemWidth
Java_sun_awt_windows_WMenuBarPeer_addMenu
Java_sun_awt_windows_WMenuBarPeer_create
Java_sun_awt_windows_WMenuBarPeer_delMenu
Java_sun_awt_windows_WMenuItemPeer__1dispose
Java_sun_awt_windows_WMenuItemPeer__1setFont
Java_sun_awt_windows_WMenuItemPeer__1setLabel
Java_sun_awt_windows_WMenuItemPeer_create
Java_sun_awt_windows_WMenuItemPeer_enable
Java_sun_awt_windows_WMenuItemPeer_initIDs
Java_sun_awt_windows_WMenuPeer_createMenu
Java_sun_awt_windows_WMenuPeer_createSubMenu
Java_sun_awt_windows_WMenuPeer_delItem
Java_sun_awt_windows_WMouseInfoPeer_fillPointWithCoords
Java_sun_awt_windows_WMouseInfoPeer_isWindowUnderMouse
Java_sun_awt_windows_WObjectPeer_initIDs
Java_sun_awt_windows_WPageDialogPeer__1show
Java_sun_awt_windows_WPageDialog_initIDs
Java_sun_awt_windows_WPanelPeer_initIDs
Java_sun_awt_windows_WPopupMenuPeer__1show
Java_sun_awt_windows_WPopupMenuPeer_createMenu
Java_sun_awt_windows_WPrintDialogPeer__1show
Java_sun_awt_windows_WPrintDialogPeer_initIDs
Java_sun_awt_windows_WPrintDialogPeer_toBack
Java_sun_awt_windows_WPrintDialogPeer_toFront
Java_sun_awt_windows_WPrintDialog_initIDs
Java_sun_awt_windows_WPrinterJob__1startDoc
Java_sun_awt_windows_WPrinterJob_abortDoc
Java_sun_awt_windows_WPrinterJob_beginPath
Java_sun_awt_windows_WPrinterJob_closeFigure
Java_sun_awt_windows_WPrinterJob_deleteDC
Java_sun_awt_windows_WPrinterJob_deviceEndPage
Java_sun_awt_windows_WPrinterJob_deviceStartPage
Java_sun_awt_windows_WPrinterJob_drawDIBImage
Java_sun_awt_windows_WPrinterJob_endDoc
Java_sun_awt_windows_WPrinterJob_endPath

Sections

.text
Size: 975KB - Virtual size: 975KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 352KB - Virtual size: 351KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
fakebanklogin.exe
.exe windows x64

cd6ecc0b7b632b49d6d41829d5cb20d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

advapi32

RegEnumKeyExA
RegOpenKeyExA
RegOpenKeyExW
GetUserNameW
OpenProcessToken
RegQueryInfoKeyA
RegQueryValueExA
RegQueryValueExW
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
MapGenericMask
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
CryptGetKeyParam
CryptGetProvParam
CryptExportKey
CryptEncrypt
CryptDecrypt
GetFileSecurityW
DuplicateTokenEx
AccessCheck
OpenThreadToken
RegCloseKey

ws2_32

freeaddrinfo
getaddrinfo
WSARecv
WSAIoctl
WSAStartup
WSAEventSelect
getnameinfo
socket
shutdown
WSAGetLastError
gethostname
setsockopt
htons
htonl
getsockopt
connect
select
getsockname
closesocket
ntohs
ntohl
__WSAFDIsSet
ioctlsocket
WSASend

userenv

GetUserProfileDirectoryW

kernel32

FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFinalPathNameByHandleW
GetFullPathNameW
GetLogicalDrives
GetVolumeInformationW
GetVolumePathNameW
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
DeviceIoControl
FormatMessageW
GetFileTime
SetFilePointerEx
GetModuleHandleExW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetProcessTimes
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
OpenProcess
CreateDirectoryW
CreatePipe
CreateProcessW
GetProcessId
WideCharToMultiByte
GetConsoleWindow
GetFileType
PeekNamedPipe
GetNumberOfConsoleInputEvents
PeekConsoleInputA
GetTempPathA
ReleaseSemaphore
GetSystemTimeAsFileTime
GetProcessAffinityMask
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetModuleHandleW
VerifyVersionInfoW
SetHandleInformation
ReOpenFile
VerSetConditionMask
GlobalFree
FormatMessageA
LocalFree
GetUserDefaultLCID
GetUserGeoID
GetGeoInfoA
GetLocaleInfoA
MultiByteToWideChar
GetDynamicTimeZoneInformation
GetTimeZoneInformation
WriteFile
WakeAllConditionVariable
WaitForSingleObject
VirtualQuery
VirtualProtect
IsValidCodePage
GetWindowsDirectoryA
GetSystemDirectoryA
DeleteFileW
ReadFile
GetFileSizeEx
GetDiskFreeSpaceW
GetHandleInformation
VirtualFree
VirtualAlloc
UnmapViewOfFile
SwitchToThread
SleepConditionVariableCS
Sleep
SetEvent
ResumeThread
ResetEvent
QueryPerformanceFrequency
QueryPerformanceCounter
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
InitializeConditionVariable
GlobalMemoryStatusEx
GetWindowsDirectoryW
GetVersionExA
GetTempPathW
GetSystemInfo
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameW
GetLastError
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
GetCurrentDirectoryW
FlushFileBuffers
EnterCriticalSection
DuplicateHandle
CreateFileW
CreateFileMappingW
CreateEventA
CloseHandle
AddVectoredContinueHandler
SetLastError

vcruntime140

wcsrchr
wcsstr
wcschr
memset
memmove
memcpy
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__C_specific_handler

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

signal
raise
_set_app_type
exit
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
abort
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_exit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
strerror
__p___argc
strerror_s
_errno
_beginthreadex
_seh_filter_exe

api-ms-win-crt-environment-l1-1-0

getenv
_wgetdcwd
_wgetcwd
_wgetenv

api-ms-win-crt-heap-l1-1-0

malloc
free
calloc
_callnewh
_set_new_mode
realloc

api-ms-win-crt-string-l1-1-0

strncpy
strncpy_s
_wcsupr
strcpy
wcscat
iswctype
wcsncmp
wcscmp
_strdup
wcsncat
wcslen
_wcsdup
strlen
strcmp
towupper
wcstok_s
isdigit
strcat
wcscpy

api-ms-win-crt-convert-l1-1-0

wcstombs
atoi
strtoull

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__p__commode
__stdio_common_vswprintf
__stdio_common_vswscanf
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsprintf
fputs
__stdio_common_vsnprintf_s
fclose
fopen
_set_fmode

api-ms-win-crt-filesystem-l1-1-0

_wrename
_wfullpath

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

ncrypt

NCryptExportKey

winhttp

WinHttpGetProxyForUrl
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser

secur32

AcquireCredentialsHandleA
CompleteAuthToken
InitializeSecurityContextA
FreeCredentialsHandle
DeleteSecurityContext

iphlpapi

GetIfTable
GetIpAddrTable
GetFriendlyIfIndex
GetAdaptersAddresses

Exports

Exports

IsolateEnterStub__CEntryPointNativeFunctions__attachThread__fe8e89788bae97cf98065b8b062da14102a906b7__2b64db5eac3e1a5e679637d48826f72a2be23a42
IsolateEnterStub__CEntryPointNativeFunctions__createIsolate__c5b5663bc8e51fac8eb7cc2a6c1952957d7e49f1__e3f95e216b9b0443e095f98421be4f9508afbc9d
IsolateEnterStub__CEntryPointNativeFunctions__detachAllThreadsAndTearDownIsolate__803a26f98b4febfb61e3b676ead8b433cc2f21b3__3cdc54b389bc5e287aebc9dca36a2fb081fc5b39
IsolateEnterStub__CEntryPointNativeFunctions__detachThread__573569b4c2b1f6ab146362c4435fcfe4abea4692__9d3359159eb3fd8426ba331efd872dbe28268132
IsolateEnterStub__CEntryPointNativeFunctions__getCurrentThread__669b6d90f89f02f4f21a6830554f612197337b86__1bf20bd8ee8d1284f6f76462b563914eae6bfc68
IsolateEnterStub__CEntryPointNativeFunctions__getIsolate__75d5a57aa8fca0d2471ea17ca517f44cfdf0f2fc__293fe173aeaef5a23ac83062148fca98f49d7f18
IsolateEnterStub__CEntryPointNativeFunctions__tearDownIsolate__fa8c10625da916d6c43ee2eea372e6d2349f2fa0__f2c185b4673374474a8deac159ef6df212b755b6
IsolateEnterStub__JLIMemAllocSymbol__JLI__MemAlloc__1157de2418b7477f9959d040c633739b3919d208__3da178e4e0d49b656d5446ebf7ca412349561292
IsolateEnterStub__JNIInvocationInterface_0024Exports__JNI__CreateJavaVM__8df18e9ea6eb1ed7b1c899a0bbc578da0e2cc0ad__3d26790b83b03d9c10db0419f30f48d545478b3d
IsolateEnterStub__JNIInvocationInterface_0024Exports__JNI__GetCreatedJavaVMs__a8346bf814329333010f55369a80ae610088db0e__442c1b35ff12eecc1b833843d889f8d0e24ec2a4
IsolateEnterStub__JNIInvocationInterface_0024Exports__JNI__GetDefaultJavaVMInitArgs__e85ea02793eeddf2ada6e1599b1df16bb01b9094__a58831a7d5f4ea86fd5300341ffa8d1f8f5e6e43
IsolateEnterStub__JavaMainWrapper__run__5087f5482cc9a6abc971913ece43acb471d2631b__a61fe6c26e84dd4037e4629852b5488bfcc16e7e
IsolateEnterStub__VmLocatorSymbol__vmLocatorSymbol__bec84cad1f8708102cd8814ef3e496531bf6ff5b__bbf2dbb2d6a07a8e1dae8a3072b01ad86ecc1a50
IsolateEnterStub__WindowsSubstrateSegfaultHandler__handler__e4ef6b716ca19d889d8c88199f44a529900bb37b__73b86451bd5061fd6755a740aa7b5098751a99a9
JDK_LoadSystemLibrary
JLI_MemAlloc
JNI_CreateJavaVM
JNI_GetCreatedJavaVMs
JNI_GetDefaultJavaVMInitArgs
JNU_CallMethodByName
JNU_CallMethodByNameV
JNU_CallStaticMethodByName
JNU_ClassString
JNU_GetEnv
JNU_GetFieldByName
JNU_GetStaticFieldByName
JNU_IsInstanceOfByName
JNU_NewObjectByName
JNU_NewStringPlatform
JNU_SetFieldByName
JNU_ThrowArrayIndexOutOfBoundsException
JNU_ThrowByName
JNU_ThrowIOException
JNU_ThrowIllegalArgumentException
JNU_ThrowInternalError
JNU_ThrowNullPointerException
JNU_ThrowOutOfMemoryError
JVM_ActiveProcessorCount
JVM_AddModuleExports
JVM_AddModuleExportsToAll
JVM_AddModuleExportsToAllUnnamed
JVM_AddReadsModule
JVM_AreNestMates
JVM_ArrayCopy
JVM_AssertionStatusDirectives
JVM_BeforeHalt
JVM_CallStackWalk
JVM_ConstantPoolGetClassAt
JVM_ConstantPoolGetClassAtIfLoaded
JVM_ConstantPoolGetClassRefIndexAt
JVM_ConstantPoolGetDoubleAt
JVM_ConstantPoolGetFieldAt
JVM_ConstantPoolGetFieldAtIfLoaded
JVM_ConstantPoolGetFloatAt
JVM_ConstantPoolGetIntAt
JVM_ConstantPoolGetLongAt
JVM_ConstantPoolGetMemberRefInfoAt
JVM_ConstantPoolGetMethodAt
JVM_ConstantPoolGetMethodAtIfLoaded
JVM_ConstantPoolGetNameAndTypeRefIndexAt
JVM_ConstantPoolGetNameAndTypeRefInfoAt
JVM_ConstantPoolGetSize
JVM_ConstantPoolGetStringAt
JVM_ConstantPoolGetTagAt
JVM_ConstantPoolGetUTF8At
JVM_CurrentThread
JVM_CurrentTimeMillis
JVM_DefineArchivedModules
JVM_DefineClassWithSource
JVM_DefineModule
JVM_DesiredAssertionStatus
JVM_DoPrivileged
JVM_DumpClassListToFile
JVM_DumpDynamicArchive
JVM_DumpThreads
JVM_FillInStackTrace
JVM_FindClassFromBootLoader
JVM_FindClassFromCaller
JVM_FindClassFromClass
JVM_FindLibraryEntry
JVM_FindLoadedClass
JVM_FindPrimitiveClass
JVM_FindSignal
JVM_FreeMemory
JVM_GC
JVM_GetAllThreads
JVM_GetAndClearReferencePendingList
JVM_GetArrayElement
JVM_GetArrayLength
JVM_GetCPClassNameUTF
JVM_GetCPFieldClassNameUTF
JVM_GetCPFieldModifiers
JVM_GetCPFieldSignatureUTF
JVM_GetCPMethodClassNameUTF
JVM_GetCPMethodModifiers
JVM_GetCPMethodNameUTF
JVM_GetCPMethodSignatureUTF
JVM_GetCallerClass
JVM_GetClassAccessFlags
JVM_GetClassAnnotations
JVM_GetClassCPEntriesCount
JVM_GetClassCPTypes
JVM_GetClassConstantPool
JVM_GetClassContext
JVM_GetClassDeclaredConstructors
JVM_GetClassDeclaredFields
JVM_GetClassDeclaredMethods
JVM_GetClassFieldsCount
JVM_GetClassInterfaces
JVM_GetClassMethodsCount
JVM_GetClassModifiers
JVM_GetClassNameUTF
JVM_GetClassSignature
JVM_GetClassSigners
JVM_GetClassTypeAnnotations
JVM_GetDeclaredClasses
JVM_GetDeclaringClass
JVM_GetEnclosingMethodInfo
JVM_GetExtendedNPEMessage
JVM_GetFieldIxModifiers
JVM_GetFieldTypeAnnotations
JVM_GetInheritedAccessControlContext
JVM_GetInterfaceVersion
JVM_GetLastErrorString
JVM_GetManagement
JVM_GetMethodIxArgsSize
JVM_GetMethodIxByteCode
JVM_GetMethodIxByteCodeLength
JVM_GetMethodIxExceptionIndexes
JVM_GetMethodIxExceptionTableEntry
JVM_GetMethodIxExceptionTableLength
JVM_GetMethodIxExceptionsCount
JVM_GetMethodIxLocalsCount
JVM_GetMethodIxMaxStack
JVM_GetMethodIxModifiers
JVM_GetMethodIxNameUTF
JVM_GetMethodIxSignatureUTF
JVM_GetMethodParameters
JVM_GetMethodTypeAnnotations
JVM_GetNanoTimeAdjustment
JVM_GetNestHost
JVM_GetNestMembers
JVM_GetPermittedSubclasses
JVM_GetPrimitiveArrayElement
JVM_GetProperties
JVM_GetProtectionDomain
JVM_GetRandomSeedForDumping
JVM_GetRecordComponents
JVM_GetSimpleBinaryName
JVM_GetStackAccessControlContext
JVM_GetSystemPackage
JVM_GetSystemPackages
JVM_GetTemporaryDirectory
JVM_GetThreadInterruptEvent
JVM_GetVmArguments
JVM_Halt
JVM_HasReferencePendingList
JVM_HoldsLock
JVM_IHashCode
JVM_InitAgentProperties
JVM_InitClassName
JVM_InitStackTraceElement
JVM_InitStackTraceElementArray
JVM_InitializeFromArchive
JVM_InitializeSocketLibrary
JVM_InternString
JVM_Interrupt
JVM_InvokeMethod
JVM_IsArrayClass
JVM_IsCDSDumpingEnabled
JVM_IsConstructorIx
JVM_IsDumpingClassList
JVM_IsHiddenClass
JVM_IsInterface
JVM_IsPrimitiveClass
JVM_IsRecord
JVM_IsSameClassPackage
JVM_IsSharingEnabled
JVM_IsSupportedJNIVersion
JVM_IsThreadAlive
JVM_IsVMGeneratedMethodIx
JVM_LatestUserDefinedLoader
JVM_LoadLibrary
JVM_LogLambdaFormInvoker
JVM_LookupDefineClass
JVM_LookupLambdaProxyClassFromArchive
JVM_MaxMemory
JVM_MaxObjectInspectionAge
JVM_MoreStackWalk
JVM_NanoTime
JVM_NativePath
JVM_NewArray
JVM_NewInstanceFromConstructor
JVM_NewMultiArray
JVM_PhantomReferenceRefersTo
JVM_RaiseSignal
JVM_RawMonitorCreate
JVM_RawMonitorDestroy
JVM_RawMonitorEnter
JVM_RawMonitorExit
JVM_ReferenceClear
JVM_ReferenceRefersTo
JVM_RegisterLambdaProxyClassForArchiving
JVM_RegisterSignal
JVM_ReleaseUTF
JVM_ResumeThread
JVM_SetArrayElement
JVM_SetBootLoaderUnnamedModule
JVM_SetClassSigners
JVM_SetNativeThreadName
JVM_SetPrimitiveArrayElement
JVM_SetThreadPriority
JVM_Sleep
JVM_StartThread
JVM_StopThread
JVM_SupportsCX8
JVM_SuspendThread
JVM_TotalMemory
JVM_UnloadLibrary
JVM_WaitForReferencePendingList
JVM_Yield
Java_java_lang_System_currentTimeMillis
Java_java_lang_System_nanoTime
Java_jdk_internal_misc_VM_getNanoTimeAdjustment
WindowsSubstrateSegfaultHandler__handler__e4ef6b716ca19d889d8c88199f44a529900bb37b
__svm_version_info
__svm_vm_is_static_binary
__svm_vm_java_version
__svm_vm_target_ccompiler
__svm_vm_target_libc
__svm_vm_target_libraries
__svm_vm_target_platform
__svm_vm_target_staticlibraries
getEncodingFromLangID
getJavaIDFromLangID
graal_attach_thread
graal_create_isolate
graal_detach_all_threads_and_tear_down_isolate
graal_detach_thread
graal_get_current_thread
graal_get_isolate
graal_tear_down_isolate
graal_vm_locator_symbol
initialize
jio_fprintf
jio_snprintf
main

Sections

.text
Size: 24.7MB - Virtual size: 24.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svm_hea
Size: 21.3MB - Virtual size: 21.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 200KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
fontmanager.dll
.dll windows x64

02c11449acde0ceb5061ea60217dd214

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:4c:0f:6d:7a:10:03:04:38:55:b6:98:0b:9f:24:e4
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

21/03/2022, 00:00

Not After

21/03/2023, 23:59

Subject

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

83:43:31:6c:d6:5c:3c:ad:d3:e3:61:ca:4d:8c:e8:54:7f:82:77:cb
Signer

Actual PE Digest

83:43:31:6c:d6:5c:3c:ad:d3:e3:61:ca:4d:8c:e8:54:7f:82:77:cb

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

15/12/2022, 13:55
Valid: true

Chain 1

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

freetype

FT_Property_Set
FT_Library_SetLcdFilter
FT_Done_FreeType
FT_New_Memory_Face
FT_Outline_Embolden
FT_Outline_Translate
FT_Outline_Get_CBox
FT_Outline_Decompose
FT_Activate_Size
FT_Outline_Get_BBox
FT_Matrix_Multiply
FT_MulFix
FT_Get_Char_Index
FT_Render_Glyph
FT_Set_Transform
FT_Load_Glyph
FT_Open_Face
FT_Done_Face
FT_Set_Char_Size
FT_Init_FreeType

java

JNU_NewStringPlatform
JNU_ThrowOutOfMemoryError
JNU_ThrowInternalError
JNU_ThrowArrayIndexOutOfBoundsException

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyW
RegEnumValueW

user32

GetDesktopWindow
FillRect
ReleaseDC
GetWindowDC
SystemParametersInfoA
GetDC

gdi32

GetFontData
GetDIBits
GetDeviceCaps
DeleteObject
GetStockObject
CreateCompatibleDC
CreateCompatibleBitmap
EnumFontFamiliesExW
SetTextColor
ExtTextOutW
GetGlyphOutlineA
SelectObject
SetBkColor
CreateFontIndirectW
GetTextMetricsA
SetMapMode

awt

GrPrim_Sg2dGetCompInfo
GetNativePrim
GrPrim_Sg2dGetPixel
GrPrim_Sg2dGetEaRGB
GrPrim_Sg2dGetLCDTextContrast
AccelGlyphCache_RemoveAllCellInfos
SurfaceData_GetOps
SurfaceData_IntersectBounds
GrPrim_Sg2dGetClip
SurfaceData_InitOps

kernel32

EnterCriticalSection
DeleteCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetWindowsDirectoryA
GetSystemDirectoryA
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

wcsrchr
wcsstr
memset
strstr
__std_type_info_destroy_list
__C_specific_handler
strchr
memcpy
memmove
strrchr
memcmp

api-ms-win-crt-heap-l1-1-0

realloc
calloc
free
malloc

api-ms-win-crt-math-l1-1-0

ceilf
floorf
sqrt
pow
floor

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

strncpy
strncmp
_wcsicmp
strcmp
_stricmp

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_errno

Exports

Exports

Java_sun_awt_Win32FontManager_getFontPath
Java_sun_awt_Win32FontManager_populateFontFileNameMap0
Java_sun_font_ColorGlyphSurfaceData_initOps
Java_sun_font_ColorGlyphSurfaceData_setCurrentGlyph
Java_sun_font_FileFontStrike__1getGlyphImageFromWindows
Java_sun_font_FileFontStrike_initNative
Java_sun_font_FreetypeFontScaler_createScalerContextNative
Java_sun_font_FreetypeFontScaler_disposeNativeScaler
Java_sun_font_FreetypeFontScaler_getFontMetricsNative
Java_sun_font_FreetypeFontScaler_getGlyphAdvanceNative
Java_sun_font_FreetypeFontScaler_getGlyphCodeNative
Java_sun_font_FreetypeFontScaler_getGlyphImageNative
Java_sun_font_FreetypeFontScaler_getGlyphMetricsNative
Java_sun_font_FreetypeFontScaler_getGlyphOutlineBoundsNative
Java_sun_font_FreetypeFontScaler_getGlyphOutlineNative
Java_sun_font_FreetypeFontScaler_getGlyphPointNative
Java_sun_font_FreetypeFontScaler_getGlyphVectorOutlineNative
Java_sun_font_FreetypeFontScaler_getMissingGlyphCodeNative
Java_sun_font_FreetypeFontScaler_getNumGlyphsNative
Java_sun_font_FreetypeFontScaler_getUnitsPerEMNative
Java_sun_font_FreetypeFontScaler_initIDs
Java_sun_font_FreetypeFontScaler_initNativeScaler
Java_sun_font_NullFontScaler_getGlyphImage
Java_sun_font_NullFontScaler_getNullScalerContext
Java_sun_font_StrikeCache_freeIntMemory
Java_sun_font_StrikeCache_freeIntPointer
Java_sun_font_StrikeCache_freeLongMemory
Java_sun_font_StrikeCache_freeLongPointer
Java_sun_font_StrikeCache_getGlyphCacheDescription
Java_sun_font_SunFontManager_initIDs
Java_sun_font_SunLayoutEngine_createFace
Java_sun_font_SunLayoutEngine_disposeFace
Java_sun_font_SunLayoutEngine_shape
Java_sun_java2d_loops_DrawGlyphListAA_DrawGlyphListAA
Java_sun_java2d_loops_DrawGlyphListLCD_DrawGlyphListLCD
Java_sun_java2d_loops_DrawGlyphList_DrawGlyphList
getSunFontIDs
isNullScalerContext

Sections

.text
Size: 419KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 195KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
freetype.dll
.dll windows x64

5e250e7752ee0689def0314a0cbaca29

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:4c:0f:6d:7a:10:03:04:38:55:b6:98:0b:9f:24:e4
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

21/03/2022, 00:00

Not After

21/03/2023, 23:59

Subject

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

67:50:99:e6:f7:d2:ae:13:34:03:8d:48:57:66:83:f8:52:3d:5a:67
Signer

Actual PE Digest

67:50:99:e6:f7:d2:ae:13:34:03:8d:48:57:66:83:f8:52:3d:5a:67

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

15/12/2022, 13:55
Valid: true

Chain 1

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

memset
memcpy
strstr
memcmp
memmove
longjmp
strrchr
memchr
__intrinsic_setjmp
__C_specific_handler
__std_type_info_destroy_list

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-string-l1-1-0

strncmp
strcmp
strncpy

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-stdio-l1-1-0

ftell
fseek
fread
fopen
fclose

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_cexit
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment

Exports

Exports

FT_Activate_Size
FT_Add_Default_Modules
FT_Add_Module
FT_Angle_Diff
FT_Atan2
FT_Attach_File
FT_Attach_Stream
FT_Bitmap_Blend
FT_Bitmap_Convert
FT_Bitmap_Copy
FT_Bitmap_Done
FT_Bitmap_Embolden
FT_Bitmap_Init
FT_Bitmap_New
FT_CeilFix
FT_Cos
FT_DivFix
FT_Done_Face
FT_Done_FreeType
FT_Done_Glyph
FT_Done_Library
FT_Done_MM_Var
FT_Done_Size
FT_Face_CheckTrueTypePatents
FT_Face_GetCharVariantIndex
FT_Face_GetCharVariantIsDefault
FT_Face_GetCharsOfVariant
FT_Face_GetVariantSelectors
FT_Face_GetVariantsOfChar
FT_Face_Properties
FT_Face_SetUnpatentedHinting
FT_FloorFix
FT_Get_Advance
FT_Get_Advances
FT_Get_CID_From_Glyph_Index
FT_Get_CID_Is_Internally_CID_Keyed
FT_Get_CID_Registry_Ordering_Supplement
FT_Get_CMap_Format
FT_Get_CMap_Language_ID
FT_Get_Char_Index
FT_Get_Charmap_Index
FT_Get_Color_Glyph_ClipBox
FT_Get_Color_Glyph_Layer
FT_Get_Color_Glyph_Paint
FT_Get_Colorline_Stops
FT_Get_FSType_Flags
FT_Get_First_Char
FT_Get_Font_Format
FT_Get_Gasp
FT_Get_Glyph
FT_Get_Glyph_Name
FT_Get_Kerning
FT_Get_MM_Blend_Coordinates
FT_Get_MM_Var
FT_Get_MM_WeightVector
FT_Get_Module
FT_Get_Multi_Master
FT_Get_Name_Index
FT_Get_Next_Char
FT_Get_PS_Font_Info
FT_Get_PS_Font_Private
FT_Get_PS_Font_Value
FT_Get_Paint
FT_Get_Paint_Layers
FT_Get_Postscript_Name
FT_Get_Renderer
FT_Get_Sfnt_LangTag
FT_Get_Sfnt_Name
FT_Get_Sfnt_Name_Count
FT_Get_Sfnt_Table
FT_Get_SubGlyph_Info
FT_Get_Track_Kerning
FT_Get_Transform
FT_Get_TrueType_Engine_Type
FT_Get_Var_Axis_Flags
FT_Get_Var_Blend_Coordinates
FT_Get_Var_Design_Coordinates
FT_Get_X11_Font_Format
FT_GlyphSlot_Embolden
FT_GlyphSlot_Oblique
FT_GlyphSlot_Own_Bitmap
FT_Glyph_Copy
FT_Glyph_Get_CBox
FT_Glyph_Stroke
FT_Glyph_StrokeBorder
FT_Glyph_To_Bitmap
FT_Glyph_Transform
FT_Has_PS_Glyph_Names
FT_Init_FreeType
FT_Library_SetLcdFilter
FT_Library_SetLcdFilterWeights
FT_Library_SetLcdGeometry
FT_Library_Version
FT_List_Add
FT_List_Finalize
FT_List_Find
FT_List_Insert
FT_List_Iterate
FT_List_Remove
FT_List_Up
FT_Load_Char
FT_Load_Glyph
FT_Load_Sfnt_Table
FT_Matrix_Invert
FT_Matrix_Multiply
FT_MulDiv
FT_MulFix
FT_New_Face
FT_New_Glyph
FT_New_Library
FT_New_Memory_Face
FT_New_Size
FT_Open_Face
FT_Outline_Check
FT_Outline_Copy
FT_Outline_Decompose
FT_Outline_Done
FT_Outline_Embolden
FT_Outline_EmboldenXY
FT_Outline_GetInsideBorder
FT_Outline_GetOutsideBorder
FT_Outline_Get_BBox
FT_Outline_Get_Bitmap
FT_Outline_Get_CBox
FT_Outline_Get_Orientation
FT_Outline_New
FT_Outline_Render
FT_Outline_Reverse
FT_Outline_Transform
FT_Outline_Translate
FT_Property_Get
FT_Property_Set
FT_Reference_Face
FT_Reference_Library
FT_Remove_Module
FT_Render_Glyph
FT_Request_Size
FT_RoundFix
FT_Select_Charmap
FT_Select_Size
FT_Set_Char_Size
FT_Set_Charmap
FT_Set_Debug_Hook
FT_Set_Default_Log_Handler
FT_Set_Default_Properties
FT_Set_Log_Handler
FT_Set_MM_Blend_Coordinates
FT_Set_MM_Design_Coordinates
FT_Set_MM_WeightVector
FT_Set_Named_Instance
FT_Set_Pixel_Sizes
FT_Set_Renderer
FT_Set_Transform
FT_Set_Var_Blend_Coordinates
FT_Set_Var_Design_Coordinates
FT_Sfnt_Table_Info
FT_Sin
FT_Stroker_BeginSubPath
FT_Stroker_ConicTo
FT_Stroker_CubicTo
FT_Stroker_Done
FT_Stroker_EndSubPath
FT_Stroker_Export
FT_Stroker_ExportBorder
FT_Stroker_GetBorderCounts
FT_Stroker_GetCounts
FT_Stroker_LineTo
FT_Stroker_New
FT_Stroker_ParseOutline
FT_Stroker_Rewind
FT_Stroker_Set
FT_Tan
FT_Trace_Set_Default_Level
FT_Trace_Set_Level
FT_Vector_From_Polar
FT_Vector_Length
FT_Vector_Polarize
FT_Vector_Rotate
FT_Vector_Transform
FT_Vector_Unit
TT_New_Context
TT_RunIns

Sections

.text
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
java.dll
.dll windows x64

56a88817cb1de8169e1b686f8cb0af1f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
memset
memcpy

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm_e
_initterm
_cexit
_execute_onexit_table

fakebanklogin.exe

JNU_CallMethodByNameV
JNU_CallStaticMethodByName
JNU_ClassString
JNU_CallMethodByName
JDK_LoadSystemLibrary
JNU_GetFieldByName
JNU_GetStaticFieldByName
JNU_IsInstanceOfByName
JNU_NewObjectByName
JNU_NewStringPlatform
JNU_SetFieldByName
JNU_ThrowArrayIndexOutOfBoundsException
JNU_ThrowByName
JNU_ThrowIOException
JNU_ThrowIllegalArgumentException
JNU_ThrowInternalError
JNU_ThrowNullPointerException
JNU_ThrowOutOfMemoryError
getEncodingFromLangID
getJavaIDFromLangID
jio_snprintf
JNU_GetEnv

Exports

Exports

JDK_LoadSystemLibrary
JNU_CallMethodByName
JNU_CallMethodByNameV
JNU_CallStaticMethodByName
JNU_ClassString
JNU_GetEnv
JNU_GetFieldByName
JNU_GetStaticFieldByName
JNU_IsInstanceOfByName
JNU_NewObjectByName
JNU_NewStringPlatform
JNU_SetFieldByName
JNU_ThrowArrayIndexOutOfBoundsException
JNU_ThrowByName
JNU_ThrowIOException
JNU_ThrowIllegalArgumentException
JNU_ThrowInternalError
JNU_ThrowNullPointerException
JNU_ThrowOutOfMemoryError
getEncodingFromLangID
getJavaIDFromLangID
jio_snprintf

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
javaaccessbridge.dll
.dll windows x64

3355c048bc17a02ef3193ae3f95f1bca

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:4c:0f:6d:7a:10:03:04:38:55:b6:98:0b:9f:24:e4
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

21/03/2022, 00:00

Not After

21/03/2023, 23:59

Subject

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

93:86:df:c2:5d:19:60:c4:0a:08:b5:ed:49:7d:38:47:cb:b7:d8:6a
Signer

Actual PE Digest

93:86:df:c2:5d:19:60:c4:0a:08:b5:ed:49:7d:38:47:cb:b7:d8:6a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

15/12/2022, 13:55
Valid: true

Chain 1

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle
GetLastError
MapViewOfFile
UnmapViewOfFile
OpenFileMappingA
GetSystemTimeAsFileTime
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
WriteConsoleW
SetEndOfFile
ReadConsoleW
ReadFile
HeapReAlloc
HeapSize
CreateFileW
GetStringTypeW
SetFilePointerEx
GetFileSizeEx
SetStdHandle
GetConsoleMode
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
FlushFileBuffers
WriteFile
GetConsoleCP

user32

GetMessageA
CreateDialogParamA
PostMessageA
DispatchMessageA
TranslateMessage
RegisterWindowMessageA
PostQuitMessage
PostThreadMessageA
SendMessageA

jawt

JAWT_GetAWT

Exports

Exports

Java_com_sun_java_accessibility_internal_AccessBridge_caretUpdate
Java_com_sun_java_accessibility_internal_AccessBridge_focusGained
Java_com_sun_java_accessibility_internal_AccessBridge_focusLost
Java_com_sun_java_accessibility_internal_AccessBridge_javaShutdown
Java_com_sun_java_accessibility_internal_AccessBridge_jawtGetComponentFromNativeWindowHandle
Java_com_sun_java_accessibility_internal_AccessBridge_jawtGetNativeWindowHandleFromComponent
Java_com_sun_java_accessibility_internal_AccessBridge_menuCanceled
Java_com_sun_java_accessibility_internal_AccessBridge_menuDeselected
Java_com_sun_java_accessibility_internal_AccessBridge_menuSelected
Java_com_sun_java_accessibility_internal_AccessBridge_mouseClicked
Java_com_sun_java_accessibility_internal_AccessBridge_mouseEntered
Java_com_sun_java_accessibility_internal_AccessBridge_mouseExited
Java_com_sun_java_accessibility_internal_AccessBridge_mousePressed
Java_com_sun_java_accessibility_internal_AccessBridge_mouseReleased
Java_com_sun_java_accessibility_internal_AccessBridge_popupMenuCanceled
Java_com_sun_java_accessibility_internal_AccessBridge_popupMenuWillBecomeInvisible
Java_com_sun_java_accessibility_internal_AccessBridge_popupMenuWillBecomeVisible
Java_com_sun_java_accessibility_internal_AccessBridge_propertyActiveDescendentChange
Java_com_sun_java_accessibility_internal_AccessBridge_propertyCaretChange
Java_com_sun_java_accessibility_internal_AccessBridge_propertyChildChange
Java_com_sun_java_accessibility_internal_AccessBridge_propertyDescriptionChange
Java_com_sun_java_accessibility_internal_AccessBridge_propertyNameChange
Java_com_sun_java_accessibility_internal_AccessBridge_propertySelectionChange
Java_com_sun_java_accessibility_internal_AccessBridge_propertyStateChange
Java_com_sun_java_accessibility_internal_AccessBridge_propertyTableModelChange
Java_com_sun_java_accessibility_internal_AccessBridge_propertyTextChange
Java_com_sun_java_accessibility_internal_AccessBridge_propertyValueChange
Java_com_sun_java_accessibility_internal_AccessBridge_propertyVisibleDataChange
Java_com_sun_java_accessibility_internal_AccessBridge_runDLL
Java_com_sun_java_accessibility_internal_AccessBridge_sendDebugString

Sections

.text
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
javajpeg.dll
.dll windows x64

c477060f0232899b3eca15e3f1abe121

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:4c:0f:6d:7a:10:03:04:38:55:b6:98:0b:9f:24:e4
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

21/03/2022, 00:00

Not After

21/03/2023, 23:59

Subject

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

66:b4:bc:6c:ed:a2:98:5e:f4:dd:d7:b9:26:97:49:fa:fe:8a:2f:76
Signer

Actual PE Digest

66:b4:bc:6c:ed:a2:98:5e:f4:dd:d7:b9:26:97:49:fa:fe:8a:2f:76

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

15/12/2022, 13:55
Valid: true

Chain 1

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

java

JNU_GetEnv
jio_snprintf
JNU_ThrowNullPointerException
JNU_ThrowByName

kernel32

TerminateProcess
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
memmove
memset
__intrinsic_setjmp
longjmp
memcpy

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsscanf

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-runtime-l1-1-0

_cexit
_initialize_onexit_table
_execute_onexit_table
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment

Exports

Exports

JNI_OnLoad
Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_abortRead
Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_clearNativeReadAbortFlag
Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_disposeReader
Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_initJPEGImageReader
Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_initReaderIDs
Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_readImage
Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_readImageHeader
Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_resetLibraryState
Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_resetReader
Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_setOutColorSpace
Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_setSource
Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_abortWrite
Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_disposeWriter
Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_initJPEGImageWriter
Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_initWriterIDs
Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_resetWriter
Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_setDest
Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_writeImage
Java_com_sun_imageio_plugins_jpeg_JPEGImageWriter_writeTables
Java_sun_awt_image_JPEGImageDecoder_initIDs
Java_sun_awt_image_JPEGImageDecoder_readImage

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
jawt.dll
.dll windows x64

296e866906c73b0d818acce15f67dac7

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:4c:0f:6d:7a:10:03:04:38:55:b6:98:0b:9f:24:e4
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

21/03/2022, 00:00

Not After

21/03/2023, 23:59

Subject

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d4:5d:15:1f:82:33:cb:5a:cb:48:d3:b2:9a:49:ff:60:82:c5:46:3e
Signer

Actual PE Digest

d4:5d:15:1f:82:33:cb:5a:cb:48:d3:b2:9a:49:ff:60:82:c5:46:3e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

15/12/2022, 13:55
Valid: true

Chain 1

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

awt

DSGetComponent
awt_SynthesizeWindowActivation
awt_SetBounds
awt_CreateEmbeddedFrame
DSGetDrawingSurface
DSUnlockAWT
DSLockAWT
DSFreeDrawingSurface

kernel32

IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
memset

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_initialize_narrow_environment
_execute_onexit_table
_initialize_onexit_table
_cexit
_initterm
_initterm_e
_configure_narrow_argv

Exports

Exports

JAWT_GetAWT

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
jvm.dll
.dll windows x64

a8e27eb8e9c03ee2ccb6a1b91fba46c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
memset
memcpy

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_initterm
_cexit

fakebanklogin.exe

jio_snprintf
JVM_RaiseSignal
JVM_CurrentTimeMillis

Exports

Exports

JVM_CurrentTimeMillis
JVM_RaiseSignal
jio_snprintf

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
lcms.dll
.dll windows x64

18a01efdc4e995b2d3eb8bb9b1427996

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:4c:0f:6d:7a:10:03:04:38:55:b6:98:0b:9f:24:e4
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

21/03/2022, 00:00

Not After

21/03/2023, 23:59

Subject

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

af:5a:4d:63:0b:e3:85:b2:82:f5:15:73:d6:06:19:48:63:1f:9c:e3
Signer

Actual PE Digest

af:5a:4d:63:0b:e3:85:b2:82:f5:15:73:d6:06:19:48:63:1f:9c:e3

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

15/12/2022, 13:55
Valid: true

Chain 1

CN=BELLSOFT,O=BELLSOFT,ST=California,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

awt

J2dTraceImpl
Disposer_AddRecord

java

JNU_ThrowByName
JNU_ThrowIllegalArgumentException

kernel32

UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId

vcruntime140

memcpy
memcmp
__C_specific_handler
__std_type_info_destroy_list
memmove
memset

api-ms-win-crt-stdio-l1-1-0

fseek
fwrite
fread
fopen
fclose
__stdio_common_vsprintf
ftell

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc

api-ms-win-crt-math-l1-1-0

sqrt
log10
exp
pow
sqrtf
_dclass
floor
log
ceil
_fdclass

api-ms-win-crt-string-l1-1-0

strncpy

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-time-l1-1-0

_time64
_gmtime64

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_initterm_e
_initterm
_configure_narrow_argv
_seh_filter_dll

Exports

Exports

JNI_OnLoad
Java_sun_java2d_cmm_lcms_LCMS_colorConvert
Java_sun_java2d_cmm_lcms_LCMS_createNativeTransform
Java_sun_java2d_cmm_lcms_LCMS_getProfileDataNative
Java_sun_java2d_cmm_lcms_LCMS_getProfileID
Java_sun_java2d_cmm_lcms_LCMS_getTagNative
Java_sun_java2d_cmm_lcms_LCMS_initLCMS
Java_sun_java2d_cmm_lcms_LCMS_loadProfileNative
Java_sun_java2d_cmm_lcms_LCMS_setTagDataNative

Sections

.text
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

087023461587dc333c691a9134a97b3c

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

4c:4c:0f:6d:7a:10:03:04:38:55:b6:98:0b:9f:24:e4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43Certificate

Extended Key Usages

Key Usages

59:97:cb:0f:97:90:94:bd:1c:43:19:42:69:4d:1d:a8:7b:0a:42:59Signer

Signature Validations

Verification

15/12/2022, 13:55 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

jvm

java

advapi32

oleaut32

msvcp140

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

Exports

Exports

Sections

.text Size: 975KB - Virtual size: 975KB

.rdata Size: 352KB - Virtual size: 351KB

.data Size: 52KB - Virtual size: 196KB

.pdata Size: 61KB - Virtual size: 60KB

.rsrc Size: 78KB - Virtual size: 78KB

.reloc Size: 14KB - Virtual size: 14KB

cd6ecc0b7b632b49d6d41829d5cb20d7

Headers

DLL Characteristics

File Characteristics

Imports

version

advapi32

ws2_32

userenv

kernel32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

ncrypt

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

4c:4c:0f:6d:7a:10:03:04:38:55:b6:98:0b:9f:24:e4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

59:97:cb:0f:97:90:94:bd:1c:43:19:42:69:4d:1d:a8:7b:0a:42:59
Signer

15/12/2022, 13:55
Valid: true

.text
Size: 975KB - Virtual size: 975KB

.rdata
Size: 352KB - Virtual size: 351KB

.data
Size: 52KB - Virtual size: 196KB

.pdata
Size: 61KB - Virtual size: 60KB

.rsrc
Size: 78KB - Virtual size: 78KB

.reloc
Size: 14KB - Virtual size: 14KB

.text
Size: 24.7MB - Virtual size: 24.7MB

.rdata
Size: 60KB - Virtual size: 57KB

.data
Size: 8KB - Virtual size: 9KB

.pdata
Size: 8KB - Virtual size: 6KB

.rodata
Size: 36KB - Virtual size: 32KB

.svm_hea
Size: 21.3MB - Virtual size: 21.3MB

.reloc
Size: 200KB - Virtual size: 197KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

4c:4c:0f:6d:7a:10:03:04:38:55:b6:98:0b:9f:24:e4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

83:43:31:6c:d6:5c:3c:ad:d3:e3:61:ca:4d:8c:e8:54:7f:82:77:cb
Signer

15/12/2022, 13:55
Valid: true

.text
Size: 419KB - Virtual size: 418KB

.rdata
Size: 195KB - Virtual size: 194KB

.data
Size: 1024B - Virtual size: 8KB

.pdata
Size: 19KB - Virtual size: 18KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 512B - Virtual size: 216B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate