Davinci Resolve 18[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

Davinci Resolve 18.zip
Size

151.3MB
MD5

ef9f9112a675f01b2b90afb2e0aa48a6
SHA1

25510dce4a45f00e06332543af15b555dc50d1e1
SHA256

ddd38149085877e10833dd060f46ad5b939b15f3bd5c44e03324da455e8955b0
SHA512

a36bfa61aa318fb8e088504fe0fc8ead10cc5429dc27874277db40d46aedbd72e62211b606a443c945b4aafbe796d555e54452bb7e002f482ced3462d623c6ea
SSDEEP

3145728:QpZbI0ebdm/MtqLWXwEuEa5TbHRVG8x0gr1bhGTxtstGL8NJv54UWttmR3:gbkZ1qLHEaHLZ5h0xt4mUu2

Score

1^/10

Malware Config

Signatures

Files

Davinci Resolve 18.zip
.zip

Password: 1234
Davinci Resolve 18/Davinci Resolve 18.exe
.exe windows x86

Password: 1234

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 755KB - Virtual size: 754KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Davinci Resolve 18/abiod.dll
.dll windows x64

Password: 1234

f13e537fb73ac9fba443d473ab249712

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-12-2020 00:00

Not After

21-12-2022 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

35:ef:92:c6:80:7c:f8:44:0d:51:da:5e:c4:27:3b:43:e8:ed:4c:b6:c3:de:0a:ee:ae:a1:65:69:2a:d1:b5:0c
Signer

Actual PE Digest

35:ef:92:c6:80:7c:f8:44:0d:51:da:5e:c4:27:3b:43:e8:ed:4c:b6:c3:de:0a:ee:ae:a1:65:69:2a:d1:b5:0c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

02-03-2022 20:35
Valid: true

Chain 1

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msi

ord205
ord70
ord16
ord96
ord72
ord116
ord158
ord211
ord14
ord111
ord131
ord8
ord92
ord113
ord145
ord115
ord139
ord58
ord47
ord103
ord74
ord49
ord167
ord118
ord125
ord17
ord160
ord159
ord32

shlwapi

SHDeleteEmptyKeyW
SHCopyKeyW
SHDeleteKeyW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

FindNextFileW
GetFullPathNameW
ReadFile
RemoveDirectoryW
SetFileAttributesW
SetFilePointer
CloseHandle
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
WaitForSingleObject
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
ProcessIdToSessionId
OpenProcess
GetWindowsDirectoryW
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryW
LocalAlloc
LocalFree
FormatMessageW
lstrcmpW
FindFirstFileW
lstrcpyW
lstrcatW
lstrlenW
CopyFileW
MoveFileExW
GetUserDefaultUILanguage
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetSystemDirectoryW
lstrcmpiW
GetCommandLineW
SetLastError
GetExitCodeProcess
CreateProcessW
GetSystemTime
MoveFileW
SystemTimeToFileTime
WideCharToMultiByte
VerSetConditionMask
VerifyVersionInfoW
GetShortPathNameW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableW
GetDriveTypeW
FindClose
DeleteFileW
CreateFileW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetCurrentThread
GetStdHandle
GetFileType
MultiByteToWideChar
GetDateFormatW
RtlUnwind
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetConsoleCtrlHandler
GetStringTypeW
GetFileSizeEx
SetFilePointerEx
SetStdHandle
GetTimeZoneInformation
HeapSize
HeapReAlloc
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
ReadConsoleW
OutputDebugStringW
WriteConsoleW
lstrcpynW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
LoadLibraryExW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree

user32

GetSystemMetrics
wsprintfW

advapi32

RegCloseKey
RegUnLoadKeyW
RegLoadKeyW
RegEnumValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyExW
RegCreateKeyW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegSetValueExW
RegFlushKey
RegDeleteKeyW
RegQueryInfoKeyW
ConvertSidToStringSidW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW
OpenSCManagerW
EnumServicesStatusExW
CloseServiceHandle
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyA
RegEnumKeyExW
RegCreateKeyExW
CreateProcessWithTokenW
LookupPrivilegeValueW
LookupAccountSidW
GetTokenInformation
FreeSid
EqualSid
DuplicateTokenEx
AllocateAndInitializeSid
AdjustTokenPrivileges
OpenProcessToken
CreateProcessAsUserW

ole32

CoCreateInstance
CLSIDFromString
CoInitializeEx

Exports

Exports

AcrobatMaintenanceRemove
AddAsianLanguageSupport
AddChineseSLanguageSupport
AddChineseTLanguageSupport
AddEBookSupport
AddExtendedLanguageSupport
AddFeature
AddFeatureEx
AddJapaneseLanguageSupport
AddKoreanLanguageSupport
AddPDFMaker
AddPDFMakerEx
ApplyUpdates
ApplyUpdatesEx
ApplyUpdatesExRD
CaptureDistillerSettingsEx
CreateAcroUserSettings
FileRenameShortToLong
IsBrowserIntegrated
MaintenanceRepair
MigrateUserRegistry
MigrateUserRegistryEx
ReaderMaintenanceRemove
RemoveFeature
RemoveFeatureEx
RemoveUpdates
RemoveUpdatesEx
RemoveUpdatesExRD
SetShortNameFixUp
SetupUpdaterForReboot
TurnOffPDFMakerIOD
TurnOnPDFMakerIOD
UpdateCache
ValidateInstaller

Sections

.text
Size: 534KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Davinci Resolve 18/ace.dll
.dll windows x86

Password: 1234

23076d501d734740bd988395f9a2bdc0

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-12-2020 00:00

Not After

21-12-2022 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

57:ed:9b:1d:5a:7c:6c:25:f0:62:ac:52:81:e1:d8:0e:6e:a6:30:b0:f6:06:1a:9a:7b:71:a7:b2:9d:04:bf:d0
Signer

Actual PE Digest

57:ed:9b:1d:5a:7c:6c:25:f0:62:ac:52:81:e1:d8:0e:6e:a6:30:b0:f6:06:1a:9a:7b:71:a7:b2:9d:04:bf:d0

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

02-08-2022 21:10
Valid: true

Chain 1

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
CloseHandle
WaitForSingleObject
CreateThread
ReleaseSemaphore
CreateSemaphoreA
GetSystemTime
GetModuleFileNameW
SystemTimeToFileTime
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
GlobalMemoryStatus
GetProfileStringA
CreateDirectoryW
MultiByteToWideChar
CreateFileW
DeleteFileW
GetCurrentProcessId
FindFirstFileW
FindNextFileW
GetFileAttributesW
ReadFile
SetFilePointerEx
WriteFile
GetLastError
MoveFileExW
FileTimeToSystemTime
WideCharToMultiByte
IsValidCodePage
GetACP
Sleep
GetCurrentProcess
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThreadId
QueryPerformanceCounter
GetProcAddress
GetModuleHandleA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
VerifyVersionInfoW
GetSystemInfo
IsProcessorFeaturePresent
FindClose
VerSetConditionMask
IsDebuggerPresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead

user32

LoadStringA

gdi32

GetICMProfileW
DeleteDC
CreateDCW
CreateDCA

advapi32

RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
RegQueryValueExA

shell32

SHGetFolderPathW

ole32

CoCreateInstance

msvcp140

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ

vcruntime140

__current_exception
strstr
_except_handler4_common
__std_type_info_destroy_list
__CxxFrameHandler3
memcmp
wcsstr
_purecall
memmove
__current_exception_context
__std_exception_destroy
__std_exception_copy
memset
memcpy
__RTDynamicCast
__std_terminate
_CxxThrowException

api-ms-win-crt-math-l1-1-0

fabs
pow
log10
log2
sqrt
log
_fdsign

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_initterm_e
_invalid_parameter_noinfo
_errno
_initterm
terminate
_cexit
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_crt_atexit

api-ms-win-crt-string-l1-1-0

strncpy
strncmp
strcat
wcstok_s
wcscmp
strcmp
strlen
strnlen
towupper
strcpy

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__stdio_common_vsscanf
__acrt_iob_func
__stdio_common_vsprintf_s
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

_callnewh
free
realloc
malloc

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_time64
_gmtime64

api-ms-win-crt-utility-l1-1-0

qsort

Exports

Exports

ACEGetVersion
ACEHasFeature
ACEInitDelayed
ACEInitialize
ACEInitializeEx
ACETerminate

Sections

.text
Size: 844KB - Virtual size: 843KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Davinci Resolve 18/agm.dll
.dll windows x86

Password: 1234

0c4ef399e3ebaa650bb9619d8524550c

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-12-2020 00:00

Not After

21-12-2022 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:01:b6:07:e2:76:e8:06:db:7b:ca:e5:b2:08:e5:dc:0c:3a:e6:9a:b3:c9:3d:10:61:20:62:42:a0:40:36:db
Signer

Actual PE Digest

fb:01:b6:07:e2:76:e8:06:db:7b:ca:e5:b2:08:e5:dc:0c:3a:e6:9a:b3:c9:3d:10:61:20:62:42:a0:40:36:db

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

02-08-2022 21:10
Valid: true

Chain 1

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
VerSetConditionMask
IsProcessorFeaturePresent
VerifyVersionInfoW
QueryPerformanceCounter
IsDebuggerPresent
TerminateProcess
GetWindowsDirectoryA
UnhandledExceptionFilter
CreateEventW
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
GetModuleHandleW
VirtualQuery
VirtualProtect
RaiseException
InitializeSListHead
GetSystemDirectoryW
GetSystemDirectoryA
GetCurrentDirectoryA
GetFileSize
ReadFile
SetCurrentDirectoryA
GlobalSize
WaitForSingleObject
GetProfileStringW
GetSystemDefaultLCID
GetLocaleInfoA
GetACP
GetFileTime
CreateFileA
LoadLibraryA
FindNextFileA
FindFirstFileA
FindClose
GetUserDefaultLangID
GetThreadLocale
GetTimeFormatW
GetTimeFormatA
GetDateFormatW
GetDateFormatA
GetCurrentProcess
DuplicateHandle
CreateSemaphoreA
GetVersionExA
GetThreadPriority
SetThreadPriority
GetCurrentThread
lstrcmpW
GetEnvironmentVariableW
GlobalHandle
GetTempFileNameW
GetTempPathW
DeleteFileW
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
GlobalFree
GlobalAlloc
LoadLibraryW
FreeLibrary
GetLocalTime
GlobalLock
GlobalUnlock
OutputDebugStringA
GetTempPathA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SystemTimeToFileTime
CreateWaitableTimerA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
SetWaitableTimer
GetLastError
HeapFree
HeapAlloc
GetProcessHeap
ResetEvent
SetEvent
GetCurrentThreadId
GetCurrentProcessId
GetProcAddress
Sleep
ReleaseSemaphore
WaitForMultipleObjectsEx
WaitForSingleObjectEx
CloseHandle
GetTickCount
GetSystemInfo
GetModuleHandleA
OpenEventA
CreateEventA
GetSystemTimeAsFileTime
LocalFree
SetUnhandledExceptionFilter
FormatMessageA

user32

DestroyWindow
SetWindowPos
LoadCursorA
LoadIconA
CreateWindowExA
SetActiveWindow
CharNextW
GetMonitorInfoA
EnumDisplayMonitors
UnregisterClassA
RegisterClassA
GetClientRect
GetActiveWindow
WindowFromDC
GetDC
ReleaseDC
GetWindowRect
ScrollWindowEx
OffsetRect
MonitorFromPoint
MonitorFromWindow
GetSystemMetrics
GetDesktopWindow
DefWindowProcA

gdi32

EndPath
CloseFigure
BeginPath
AbortDoc
EndPage
StartPage
EndDoc
StartDocW
GetDIBColorTable
CreateDIBSection
ModifyWorldTransform
SetWorldTransform
GetWorldTransform
SetStretchBltMode
SetROP2
StretchDIBits
StretchBlt
SetPolyFillMode
SetGraphicsMode
SetDIBits
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RealizePalette
ResetDCW
RestoreDC
Rectangle
PatBlt
FillPath
LineTo
IntersectClipRect
GetViewportOrgEx
GetStockObject
GetRgnBox
GetRegionData
GetGraphicsMode
GetDeviceCaps
GetCurrentObject
GetClipRgn
GetClipBox
ExtEscape
Escape
EqualRgn
DeleteObject
DeleteDC
CreateRectRgn
CreatePatternBrush
CreatePolyPolygonRgn
CreatePalette
CreateICW
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CombineRgn
BitBlt
PolyBezierTo
PolylineTo
SetBrushOrgEx
PolyDraw
SelectClipPath
SetMiterLimit
StrokePath
ExtCreatePen
OffsetRgn
MoveToEx
GetObjectA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegGetValueA
RegSetValueExA

ole32

CreateStreamOnHGlobal

msvcp140

_Xtime_get_ticks
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?is@?$ctype@_W@std@@QBE_NF_W@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
_Mtx_init_in_situ
_Mtx_destroy_in_situ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?uncaught_exception@std@@YA_NXZ
?_Xinvalid_argument@std@@YAXPBD@Z
_Query_perf_counter
_Query_perf_frequency
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PAV32@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?id@?$ctype@D@std@@2V0locale@2@A

shlwapi

PathRemoveFileSpecA
PathAppendA

vcruntime140

__std_type_info_compare
memchr
wcschr
strchr
wcsstr
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
memcpy
_purecall
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
__RTDynamicCast
memmove
__std_terminate
memset
memcmp
strstr

api-ms-win-crt-heap-l1-1-0

free
malloc
calloc
realloc

api-ms-win-crt-string-l1-1-0

strtok_s
tolower
isdigit
toupper
_wcsicmp
strncmp
wcsncpy
strcat_s
strcpy_s
wcscpy_s
_stricmp
strncpy
_wcsnicmp

api-ms-win-crt-convert-l1-1-0

atoi
_ltoa_s
strtol

api-ms-win-crt-filesystem-l1-1-0

remove
_lock_file
_unlock_file
rename

api-ms-win-crt-stdio-l1-1-0

fwrite
_fseeki64
fsetpos
fread
fputc
fgetpos
ungetc
setvbuf
feof
fopen
fputs
fgetc
fflush
setbuf
__stdio_common_vsprintf
freopen
getc
fclose
_get_stream_buffer_pointers
fopen_s
__stdio_common_vsprintf_s
__stdio_common_vfprintf
__stdio_common_vswprintf
__acrt_iob_func
ferror
clearerr
fgets
rewind
ftell
fseek
_wfopen_s
ungetwc
fputwc
__stdio_common_vsscanf
fgetwc

api-ms-win-crt-runtime-l1-1-0

_initterm
_invalid_parameter_noinfo_noreturn
terminate
_cexit
_crt_atexit
_execute_onexit_table
_beginthreadex
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_errno
_control87
_initterm_e
strerror

api-ms-win-crt-time-l1-1-0

_gmtime64
_localtime64
_time64

api-ms-win-crt-math-l1-1-0

_libm_sse2_atan_precise
floor
_hypot
_fdclass
_CIfmod
_isnan
_libm_sse2_cos_precise
_CIatan2
ldexp
ceil
_libm_sse2_sqrt_precise
_libm_sse2_log_precise
_libm_sse2_sin_precise
_libm_sse2_pow_precise
_libm_sse2_log10_precise
modf

api-ms-win-crt-utility-l1-1-0

qsort

Exports

Exports

AGMGetVersion
AGMInitialize
AGMTerminate

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 166KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Davinci Resolve 18/data/672e650785354b5bacb9ee5d485d00a7_84805bb4cbc648b98588585433bcb927_cull.bytes
Davinci Resolve 18/data/672e650785354b5bacb9ee5d485d00a7_a47eddb05be24c31a83c01662810dfcb_cull.bytes
Davinci Resolve 18/data/core_ui.ff
Davinci Resolve 18/data/d3b1b57fafe24aea8e26c061ad90b3a0_6a92ac2ff46341e79a92c94a9dd3eeb4_cull.bytes
Davinci Resolve 18/datacache.dll
.dll windows x86

Password: 1234

31386d2af4010e6933948002809c5899

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-01-2021 00:00

Not After

06-01-2031 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2013 12:00

Not After

15-01-2038 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07-10-2021 00:00

Not After

09-10-2024 23:59

Subject

CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3c:ab:7d:1b:07:43:db:67:20:97:84:3d:b2:c2:e5:dc:51:97:5f:39:7a:8a:91:ca:55:2f:b4:a3:0d:ec:bb:65
Signer

Actual PE Digest

3c:ab:7d:1b:07:43:db:67:20:97:84:3d:b2:c2:e5:dc:51:97:5f:39:7a:8a:91:ca:55:2f:b4:a3:0d:ec:bb:65

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

13-12-2021 21:13
Valid: true

Chain 1

CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

tier0

LOG_GENERAL
LoggingSystem_Log
LoggingSystem_IsChannelEnabled
??0CThreadLocalBase@GenericThreadLocals@@QAE@XZ
??1CThreadLocalBase@GenericThreadLocals@@QAE@XZ
?Lock@CThreadMutex@@QAEXXZ
?Unlock@CThreadMutex@@QAEXXZ
??0CThreadMutex@@QAE@XZ
??1CThreadMutex@@QAE@XZ
Plat_ExitProcess
WriteMiniDump
??1CThreadEvent@@QAE@XZ
CreateSimpleThread
Plat_FloatTime
DevMsg
ThreadInMainThread
Plat_MSTime
ThreadSetDebugName
??0CThreadEvent@@QAE@_N@Z
?Set@CThreadEvent@@QAE_NXZ
?Reset@CThreadEvent@@QAE_NXZ
?Wait@CThreadEvent@@QAE_NI@Z
Plat_IsInDebugSession
?DevWarning@@YAXPBDZZ
?Get@CThreadLocalBase@GenericThreadLocals@@QBEPAXXZ
?g_nThreadID@@3V?$CThreadLocalInt@H@GenericThreadLocals@@A
Error
ThreadSleep
?DevMsg@@YAXPBDZZ
Msg
Warning
g_pMemAlloc
?Lock@CThreadFastMutex@@ACEXII@Z
ThreadInterlockedAssignIf64

vstdlib

KeyValuesSystem

kernel32

CreateFileW
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
DecodePointer
EncodePointer
GetStringTypeW
GetACP
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
GetFileType
GetStdHandle
LCMapStringW
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
TlsSetValue
InitializeCriticalSectionAndSpinCount
GetLastError
TlsAlloc
GetProcAddress
FreeLibrary
TlsGetValue
TlsFree
LoadLibraryExW
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
GetCurrentProcessId
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
RtlUnwind
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
RaiseException
InterlockedFlushSList

Exports

Exports

CreateInterface

Sections

.text
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Davinci Resolve 18/etc/mp_rise.xpak
Davinci Resolve 18/etc/sharedassets86.assets.resS
Davinci Resolve 18/legal/Air/JSByteCodeWin.bin
Davinci Resolve 18/legal/Air/nppdf32.dll
.dll windows x64

Password: 1234

bb3e21dc98d37d2b327894f48b35b963

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-12-2020 00:00

Not After

21-12-2022 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c5:98:96:75:5f:68:ca:7e:d3:32:37:62:53:87:96:52:1a:97:35:1f:42:46:5d:28:a7:65:94:79:ff:a3:f0:28
Signer

Actual PE Digest

c5:98:96:75:5f:68:ca:7e:d3:32:37:62:53:87:96:52:1a:97:35:1f:42:46:5d:28:a7:65:94:79:ff:a3:f0:28

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

07-09-2022 15:10
Valid: true

Chain 1

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

uxtheme

SetWindowTheme

kernel32

ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
DeleteFileA
GetTempPathA
GetTempFileNameA
GetModuleFileNameA
LoadLibraryA
OpenFile
CopyFileA
GetVolumeInformationW
WriteFile
SetNamedPipeHandleState
OpenMutexW
GetTickCount
lstrlenW
FreeLibrary
LoadLibraryExA
GetFileAttributesW
GetLongPathNameW
RaiseException
InitializeCriticalSectionEx
GetVersionExW
GetTempPathW
ExpandEnvironmentStringsW
CreateActCtxW
VirtualQuery
GetModuleHandleW
CreateDirectoryA
CreateFileA
SetFilePointer
QueryPerformanceCounter
GetLocalTime
EnterCriticalSection
CallNamedPipeW
GetModuleHandleA
LoadLibraryW
FormatMessageA
GetSystemDirectoryA
FindClose
FindFirstFileW
CreateEventW
GetExitCodeProcess
GetCurrentThreadId
SetThreadPriority
CreateProcessW
GetThreadId
OpenProcess
lstrcpyW
CreateSemaphoreA
SetDllDirectoryW
VerSetConditionMask
VerifyVersionInfoW
GetFileType
TransactNamedPipe
WaitNamedPipeW
ResetEvent
CreateMutexW
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
InitializeCriticalSection
SetLastError
WideCharToMultiByte
MultiByteToWideChar
OpenFileMappingA
CreateFileMappingA
UnmapViewOfFile
GetProcAddress
GetModuleHandleExW
GetModuleFileNameW
ResumeThread
TerminateThread
ExitThread
CreateThread
Sleep
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
TryEnterCriticalSection
LocalFree
LeaveCriticalSection
FlushViewOfFile
MapViewOfFile
GetCurrentProcessId
GetLastError
OutputDebugStringA
ReadFile
GetFileSize
CreateFileW
GetCurrentProcess
CloseHandle
VirtualProtect
GetSystemInfo

user32

GetWindow
GetWindowThreadProcessId
EnumWindows
GetParent
GetDesktopWindow
IsWindowUnicode
PostQuitMessage
DispatchMessageW
GetMessageW
GetMessageA
FindWindowW
MsgWaitForMultipleObjects
GetActiveWindow
WaitForInputIdle
wsprintfW
GetAncestor
CreateWindowExW
FindWindowA
SendMessageA
RegisterWindowMessageA
SetWindowLongPtrA
GetWindowLongPtrA
SetWindowLongA
GetWindowLongA
ClientToScreen
SetCursor
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetForegroundWindow
GetSubMenu
LoadMenuA
GetFocus
IsChild
CallWindowProcA
LoadStringW
LoadStringA
DestroyCursor
LoadCursorA
MessageBoxA
KillTimer
SetTimer
SetFocus
SystemParametersInfoA
GetClassNameA
GetWindowRect
GetClientRect
RemovePropW
GetPropW
SetPropW
InvalidateRect
GetWindowRgn
SetWindowRgn
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
GetDlgItem
EndDialog
CreateDialogParamA
IsWindowVisible
SetWindowPos
ShowWindow
DestroyWindow
IsWindow
DefWindowProcA
PostMessageW
PostMessageA
PeekMessageA
DispatchMessageA
TranslateMessage

gdi32

PlayEnhMetaFile
GetEnhMetaFileA
DeleteEnhMetaFile
GetDeviceCaps
Escape
SetTextColor
SetBkColor
GetStockObject
FillRgn
DeleteObject
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
LPtoDP

advapi32

RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
RegEnumValueW
RegQueryInfoKeyW
GetTokenInformation
RegEnumKeyExW

ole32

CoCreateInstance
CoTaskMemFree

msvcp140

?id@?$ctype@G@std@@2V0locale@2@A
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_Xout_of_range@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?widen@?$ctype@G@std@@QEBAGD@Z
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ

vcruntime140

memcmp
memcpy
__std_type_info_destroy_list
memmove
memset
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__current_exception_context
_purecall
__C_specific_handler
strchr
__current_exception
wcsstr
strrchr
strstr
memchr
wcsrchr
__std_terminate

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_errno
_invalid_parameter_noinfo
_initialize_onexit_table
_cexit
_set_invalid_parameter_handler
_initterm_e
_register_onexit_function
_seh_filter_dll
_configure_narrow_argv
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
terminate
_initterm
_crt_atexit

api-ms-win-crt-string-l1-1-0

strcat_s
strcat
strncmp
wcsncpy_s
strcmp
strlen
strcpy
wcslen
_stricmp
_strnicmp
strncpy
strcpy_s
wcscat
_wcsicmp
wcsncmp
_wcsnicmp
wcstok_s
wcsncat_s
wcscpy_s
wcscat_s
_wcsdup
_wcslwr_s
iswdigit
towlower
tolower

api-ms-win-crt-stdio-l1-1-0

fwrite
fseek
fread
fopen
fclose
__stdio_common_vsscanf
__stdio_common_vsprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsnprintf_s
_wfopen_s
__stdio_common_vfwscanf
__stdio_common_vsprintf
__stdio_common_vswprintf_s
tmpfile
__stdio_common_vswprintf

api-ms-win-crt-locale-l1-1-0

localeconv
setlocale

api-ms-win-crt-heap-l1-1-0

free
calloc
malloc
_callnewh

api-ms-win-crt-convert-l1-1-0

wcstol
_itow_s
_wtof
_itoa
_wtol

api-ms-win-crt-filesystem-l1-1-0

_waccess_s
_wsplitpath_s
_unlink

api-ms-win-crt-multibyte-l1-1-0

_mbscmp

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-environment-l1-1-0

_wputenv_s
_wgetenv

api-ms-win-crt-math-l1-1-0

ceilf

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

shell32

SHGetFolderPathA

Exports

Exports

NP_AcrobatProtectedInitialize
NP_ApolloEntry
NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Davinci Resolve 18/legal/DigSig.api
.dll windows x64

Password: 1234

d6eb26b2838b50952eba6bcbf262b172

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-12-2020 00:00

Not After

21-12-2022 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09-06-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

10:98:a1:6b:32:19:4b:a8:cc:48:b6:70:10:1e:a6:09:d6:d0:91:01:e8:a0:b5:2c:48:40:42:88:13:dd:a1:13
Signer

Actual PE Digest

10:98:a1:6b:32:19:4b:a8:cc:48:b6:70:10:1e:a6:09:d6:d0:91:01:e8:a0:b5:2c:48:40:42:88:13:dd:a1:13

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

02-08-2022 21:10
Valid: true

Chain 1

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpyA
GetModuleFileNameA
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
OutputDebugStringW
lstrlenA
lstrcatA
GetProcAddress
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
MulDiv
FindAtomW
InitializeSListHead
GetTickCount

user32

GetSystemMetrics
MoveWindow
SetPropW
GetDesktopWindow
ReleaseDC
GetDC
wsprintfA
FindWindowA
GetWindowRect
SetFocus
GetFocus
GetPropW

gdi32

GetCharWidthA
CreateFontIndirectA
CreateCompatibleDC
DeleteDC
DeleteObject
CreateDIBSection
SelectObject

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__std_type_info_destroy_list
__current_exception_context
__current_exception
strstr
memchr
__C_specific_handler
strrchr
strchr
__RTDynamicCast
memcmp
memset
_CxxThrowException
__std_exception_destroy
memcpy
_purecall
__std_terminate
__std_exception_copy
memmove

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

strncmp
isdigit
strlen
_strnicmp
wcscpy_s
strpbrk
strcmp
tolower
isalpha

api-ms-win-crt-runtime-l1-1-0

_set_invalid_parameter_handler
_initterm_e
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_initterm
_errno
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
terminate

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s

api-ms-win-crt-utility-l1-1-0

qsort
abs

api-ms-win-crt-convert-l1-1-0

_ltoa_s
atoi
_itoa_s
_ui64toa_s

api-ms-win-crt-math-l1-1-0

ceilf
fabs
cos
sin
atan2f
acos

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-time-l1-1-0

_gmtime64
_localtime64
_time64

api-ms-win-crt-multibyte-l1-1-0

_mbsstr

Exports

Exports

?ObsoleteProc@@YAXXZ
PlugInMain

Sections

.text
Size: 1002KB - Virtual size: 1001KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 222KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Davinci Resolve 18/legal/mip_protection_sdk.dll
.dll windows x64

Password: 1234

8f3c8d3cc1c2188537440ca755a42087

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:31

Not After

02-12-2021 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a5:aa:f7:8a:98:07:b3:3a:92:11:4e:89:32:f8:0f:92:e1:38:ef:da:f9:53:7b:24:a4:00:d6:7e:e3:ee:c6:03
Signer

Actual PE Digest

a5:aa:f7:8a:98:07:b3:3a:92:11:4e:89:32:f8:0f:92:e1:38:ef:da:f9:53:7b:24:a4:00:d6:7e:e3:ee:c6:03

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

07-02-2023 20:40
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

rpcrt4

UuidCreate

msvcp140

_Cnd_timedwait
_Cnd_broadcast
?_Throw_Cpp_error@std@@YAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
_Thrd_start
_Thrd_detach
_Mtx_init
_Mtx_destroy
_Cnd_init
_Cnd_destroy
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Thrd_join
_Thrd_id
_Cnd_destroy_in_situ
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
_Cnd_init_in_situ
??0codecvt_base@std@@QEAA@_K@Z
??1codecvt_base@std@@UEAA@XZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?do_encoding@codecvt_base@std@@MEBAHXZ
?do_max_length@codecvt_base@std@@MEBAHXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Syserror_map@std@@YAPEBDH@Z
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?exceptions@ios_base@std@@QEAAXH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
_Mtx_current_owns
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
_Xtime_get_ticks
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
_Cnd_wait
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z

kernel32

InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
MultiByteToWideChar
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
Sleep
CreateMutexA
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
LoadLibraryExA
GetProcAddress
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
GetModuleHandleW
GetModuleFileNameA
GetVersion
GetCurrentProcessId
GetLastError
GetCurrentThreadId
RaiseException
QueryPerformanceCounter
GetSystemTimeAsFileTime

vcruntime140

_purecall
__std_terminate
memcmp
memcpy
memmove
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
memset
memchr
__C_specific_handler
strchr
__std_type_info_destroy_list

Exports

Exports

?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@@Z
?CreateDelegationLicenseSettings@DelegationLicenseSettings@mipns@@SA?AV?$shared_ptr@VDelegationLicenseSettings@mipns@@@std@@AEBVPublishingLicenseInfo@2@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@_N@Z
?CreateFromProtectionDescriptor@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBVProtectionDescriptor@2@@Z
?CreateFromTemplate@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?CreateFromUserRights@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBV?$vector@VUserRights@mipns@@V?$allocator@VUserRights@mipns@@@std@@@4@@Z
?CreateFromUserRoles@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBV?$vector@VUserRoles@mipns@@V?$allocator@VUserRoles@mipns@@@std@@@4@@Z
?CreateStreamFromBuffer@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@PEAE_J@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_iostream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_istream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_ostream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateWithCustomFeatureSettings@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@AEBV?$map@W4FlightingFeature@mipns@@_NU?$less@W4FlightingFeature@mipns@@@std@@V?$allocator@U?$pair@$$CBW4FlightingFeature@mipns@@_N@std@@@4@@4@@Z
?GetBlockSize@CustomProtectedStream@mipns@@SA_JV?$shared_ptr@VProtectionHandler@mipns@@@std@@@Z
?GetMsftCert@mipns@@YAAEBV?$vector@EV?$allocator@E@std@@@std@@XZ
?GetMsftCertPEM@mipns@@YAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetPublishingLicenseInfo@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VPublishingLicenseInfo@mipns@@@std@@AEBV?$vector@EV?$allocator@E@std@@@4@@Z
?GetVersion@ProtectionProfile@mipns@@SAPEBDXZ
?Load@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VProtectionProfile@mipns@@@std@@AEBVSettings@12@@Z
?LoadAsync@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VAsyncControl@mipns@@@std@@AEBVSettings@12@AEBV?$shared_ptr@X@4@@Z
MIP_CC_CreateDictionary
MIP_CC_CreateHttpDelegate
MIP_CC_CreateLoggerDelegate
MIP_CC_CreateMipContext
MIP_CC_CreateMipContextWithCustomFeatureSettings
MIP_CC_CreateProtectionDescriptorFromTemplate
MIP_CC_CreateProtectionDescriptorFromUserRights
MIP_CC_CreateProtectionDescriptorFromUserRoles
MIP_CC_CreateProtectionEngineSettingsWithEngineId
MIP_CC_CreateProtectionEngineSettingsWithEngineIdAndAuthCallback
MIP_CC_CreateProtectionEngineSettingsWithIdentity
MIP_CC_CreateProtectionEngineSettingsWithIdentityAndAuthCallback
MIP_CC_CreateProtectionHandlerConsumptionSettings
MIP_CC_CreateProtectionHandlerConsumptionSettingsWithPreLicense
MIP_CC_CreateProtectionHandlerPublishingSettings
MIP_CC_CreateProtectionProfileSettings
MIP_CC_CreateStringList
MIP_CC_CreateTaskDispatcherDelegate
MIP_CC_CreateTelemetryConfiguration
MIP_CC_Dictionary_GetEntries
MIP_CC_ExecuteDispatchedTask
MIP_CC_LoadProtectionProfile
MIP_CC_NotifyHttpDelegateResponse
MIP_CC_ProtectionDescriptor_DoesAllowOfflineAccess
MIP_CC_ProtectionDescriptor_DoesContentExpire
MIP_CC_ProtectionDescriptor_GetContentId
MIP_CC_ProtectionDescriptor_GetContentValidUntil
MIP_CC_ProtectionDescriptor_GetDescription
MIP_CC_ProtectionDescriptor_GetDescriptionSize
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrl
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrlSize
MIP_CC_ProtectionDescriptor_GetLabelId
MIP_CC_ProtectionDescriptor_GetName
MIP_CC_ProtectionDescriptor_GetNameSize
MIP_CC_ProtectionDescriptor_GetOwner
MIP_CC_ProtectionDescriptor_GetOwnerSize
MIP_CC_ProtectionDescriptor_GetProtectionType
MIP_CC_ProtectionDescriptor_GetReferrer
MIP_CC_ProtectionDescriptor_GetReferrerSize
MIP_CC_ProtectionDescriptor_GetTemplateId
MIP_CC_ProtectionEngineSettings_SetAllowCloudServiceOnly
MIP_CC_ProtectionEngineSettings_SetClientData
MIP_CC_ProtectionEngineSettings_SetCloud
MIP_CC_ProtectionEngineSettings_SetCloudEndpointBaseUrl
MIP_CC_ProtectionEngineSettings_SetCustomSettings
MIP_CC_ProtectionEngineSettings_SetSessionId
MIP_CC_ProtectionEngineSettings_SetUnderlyingApplicationId
MIP_CC_ProtectionEngine_CreateProtectionHandlerForConsumption
MIP_CC_ProtectionEngine_CreateProtectionHandlerForPublishing
MIP_CC_ProtectionEngine_GetClientData
MIP_CC_ProtectionEngine_GetClientDataSize
MIP_CC_ProtectionEngine_GetEngineId
MIP_CC_ProtectionEngine_GetEngineIdSize
MIP_CC_ProtectionEngine_GetRightsForLabelId
MIP_CC_ProtectionEngine_GetTemplates
MIP_CC_ProtectionEngine_GetTemplatesSize
MIP_CC_ProtectionHandlerConsumptionSettings_SetDelegatedUserEmail
MIP_CC_ProtectionHandlerConsumptionSettings_SetIsOfflineOnly
MIP_CC_ProtectionHandlerPublishingSettings_SetDelegatedUserEmail
MIP_CC_ProtectionHandlerPublishingSettings_SetIsAuditedExtractionAllowed
MIP_CC_ProtectionHandlerPublishingSettings_SetIsDeprecatedAlgorithmPreferred
MIP_CC_ProtectionHandlerPublishingSettings_SetIsPublishingFormatJson
MIP_CC_ProtectionHandlerPublishingSettings_SetPreLicenseUserEmail
MIP_CC_ProtectionHandler_DecryptBuffer
MIP_CC_ProtectionHandler_DoesUseDeprecatedAlgorithm
MIP_CC_ProtectionHandler_EncryptBuffer
MIP_CC_ProtectionHandler_GetBlockSize
MIP_CC_ProtectionHandler_GetCipherMode
MIP_CC_ProtectionHandler_GetContentId
MIP_CC_ProtectionHandler_GetIssuedUser
MIP_CC_ProtectionHandler_GetIssuedUserSize
MIP_CC_ProtectionHandler_GetOwner
MIP_CC_ProtectionHandler_GetOwnerSize
MIP_CC_ProtectionHandler_GetProtectedContentSize
MIP_CC_ProtectionHandler_GetProtectionDescriptor
MIP_CC_ProtectionHandler_GetRights
MIP_CC_ProtectionHandler_GetSerializedPreLicense
MIP_CC_ProtectionHandler_GetSerializedPreLicenseSize
MIP_CC_ProtectionHandler_GetSerializedPublishingLicense
MIP_CC_ProtectionHandler_GetSerializedPublishingLicenseSize
MIP_CC_ProtectionProfileSettings_SetCanCacheLicenses
MIP_CC_ProtectionProfileSettings_SetCustomSettings
MIP_CC_ProtectionProfileSettings_SetHttpDelegate
MIP_CC_ProtectionProfileSettings_SetSessionId
MIP_CC_ProtectionProfileSettings_SetTaskDispatcherDelegate
MIP_CC_ProtectionProfile_AddEngine
MIP_CC_ReleaseDictionary
MIP_CC_ReleaseHttpDelegate
MIP_CC_ReleaseLoggerDelegate
MIP_CC_ReleaseMipContext
MIP_CC_ReleaseProtectionDescriptor
MIP_CC_ReleaseProtectionEngine
MIP_CC_ReleaseProtectionEngineSettings
MIP_CC_ReleaseProtectionHandler
MIP_CC_ReleaseProtectionHandlerConsumptionSettings
MIP_CC_ReleaseProtectionHandlerPublishingSettings
MIP_CC_ReleaseProtectionProfile
MIP_CC_ReleaseProtectionProfileSettings
MIP_CC_ReleaseStringList
MIP_CC_ReleaseTaskDispatcherDelegate
MIP_CC_ReleaseTelemetryConfiguration
MIP_CC_ReleaseTemplateDescriptor
MIP_CC_StringList_GetStrings
MIP_CC_TelemetryConfiguration_AddMaskedProperty
MIP_CC_TelemetryConfiguration_SetCustomSettings
MIP_CC_TelemetryConfiguration_SetHostName
MIP_CC_TelemetryConfiguration_SetHttpDelegate
MIP_CC_TelemetryConfiguration_SetIsFastShutdownEnabled
MIP_CC_TelemetryConfiguration_SetIsLocalCachingEnabled
MIP_CC_TelemetryConfiguration_SetIsNetworkDetectionEnabled
MIP_CC_TelemetryConfiguration_SetIsTelemetryOptedOut
MIP_CC_TelemetryConfiguration_SetIsTraceLoggingEnabled
MIP_CC_TelemetryConfiguration_SetLibraryName
MIP_CC_TelemetryConfiguration_SetTaskDispatcherDelegate
MIP_CC_TemplateDescriptor_GetDescription
MIP_CC_TemplateDescriptor_GetDescriptionSize
MIP_CC_TemplateDescriptor_GetId
MIP_CC_TemplateDescriptor_GetName
MIP_CC_TemplateDescriptor_GetNameSize

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 550KB - Virtual size: 549KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 180KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Davinci Resolve 18/legal/mip_upe_sdk.dll
.dll windows x64

7d54da0b140f8a051164951e25d4f8c5

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:31

Not After

02-12-2021 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e2:d7:ed:b8:13:60:7f:a4:66:f1:dd:19:f2:d1:d2:b1:60:21:45:5e:76:41:99:fb:1e:38:9e:16:c8:d3:3a:d5
Signer

Actual PE Digest

e2:d7:ed:b8:13:60:7f:a4:66:f1:dd:19:f2:d1:d2:b1:60:21:45:5e:76:41:99:fb:1e:38:9e:16:c8:d3:3a:d5

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

07-02-2023 20:40
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

rpcrt4

UuidCreate

msvcp140

_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_timedwait
_Cnd_broadcast
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?_XGetLastError@std@@YAXXZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Strcoll
_Strxfrm
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??Bid@locale@std@@QEAA_KXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
_Thrd_start
_Thrd_detach
_Mtx_init
_Mtx_destroy
_Cnd_init
_Cnd_destroy
_Mtx_lock
_Cnd_do_broadcast_at_thread_exit
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Thrd_join
_Thrd_id
?always_noconv@codecvt_base@std@@QEBA_NXZ
_Mtx_current_owns
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Xtime_get_ticks
?_Syserror_map@std@@YAPEBDH@Z
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Xbad_alloc@std@@YAXXZ
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
_Mtx_unlock
_Cnd_signal
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

kernel32

InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
GetProcAddress
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
GetModuleHandleA
MultiByteToWideChar
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
Sleep
CreateMutexA
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
GetModuleHandleW
GetModuleFileNameA
GetVersion
GetComputerNameExW
GetCurrentProcessId
GetLastError
GetCurrentThreadId
RaiseException
QueryPerformanceCounter
GetSystemTimeAsFileTime

vcruntime140

_purecall
__std_terminate
memcpy
memmove
__CxxFrameHandler3
memchr
memcmp
memset
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_compare
strchr
__C_specific_handler
__std_type_info_destroy_list

Exports

Exports

?Create@ComputeEngine@mipns@@SA?AV?$shared_ptr@VComputeEngine@mipns@@@std@@AEBVSyncFilePolicyData@2@AEBVSettings@12@@Z
?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@@Z
?CreateContext@ComputeEngine@mipns@@SA?AV?$shared_ptr@VComputeEngineContext@mipns@@@std@@AEBV?$map@W4FlightingFeature@mipns@@_NU?$less@W4FlightingFeature@mipns@@@std@@V?$allocator@U?$pair@$$CBW4FlightingFeature@mipns@@_N@std@@@4@@4@_N@Z
?CreateWithCustomFeatureSettings@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@AEBV?$map@W4FlightingFeature@mipns@@_NU?$less@W4FlightingFeature@mipns@@@std@@V?$allocator@U?$pair@$$CBW4FlightingFeature@mipns@@_N@std@@@4@@4@@Z
?GetMsftCert@mipns@@YAAEBV?$vector@EV?$allocator@E@std@@@std@@XZ
?GetMsftCertPEM@mipns@@YAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetVersion@PolicyProfile@mipns@@SAPEBDXZ
?IsLabeled@PolicyHandler@mipns@@SA_NAEBV?$vector@VMetadataEntry@mipns@@V?$allocator@VMetadataEntry@mipns@@@std@@@std@@AEBV?$shared_ptr@VMipContext@mipns@@@4@@Z
?Load@PolicyProfile@mipns@@SA?AV?$shared_ptr@VPolicyProfile@mipns@@@std@@AEBVSettings@12@@Z
?LoadAsync@PolicyProfile@mipns@@SA?AV?$shared_ptr@VAsyncControl@mipns@@@std@@AEBVSettings@12@AEBV?$shared_ptr@X@4@@Z
MIP_CC_ActionResult_GetActions
MIP_CC_Action_GetId
MIP_CC_Action_GetType
MIP_CC_AddContentFooterAction_GetAlignment
MIP_CC_AddContentFooterAction_GetFontColor
MIP_CC_AddContentFooterAction_GetFontColorSize
MIP_CC_AddContentFooterAction_GetFontName
MIP_CC_AddContentFooterAction_GetFontNameSize
MIP_CC_AddContentFooterAction_GetFontSize
MIP_CC_AddContentFooterAction_GetMargin
MIP_CC_AddContentFooterAction_GetText
MIP_CC_AddContentFooterAction_GetTextSize
MIP_CC_AddContentFooterAction_GetUIElementName
MIP_CC_AddContentFooterAction_GetUIElementNameSize
MIP_CC_AddContentHeaderAction_GetAlignment
MIP_CC_AddContentHeaderAction_GetFontColor
MIP_CC_AddContentHeaderAction_GetFontColorSize
MIP_CC_AddContentHeaderAction_GetFontName
MIP_CC_AddContentHeaderAction_GetFontNameSize
MIP_CC_AddContentHeaderAction_GetFontSize
MIP_CC_AddContentHeaderAction_GetMargin
MIP_CC_AddContentHeaderAction_GetText
MIP_CC_AddContentHeaderAction_GetTextSize
MIP_CC_AddContentHeaderAction_GetUIElementName
MIP_CC_AddContentHeaderAction_GetUIElementNameSize
MIP_CC_AddWatermarkAction_GetFontColor
MIP_CC_AddWatermarkAction_GetFontColorSize
MIP_CC_AddWatermarkAction_GetFontName
MIP_CC_AddWatermarkAction_GetFontNameSize
MIP_CC_AddWatermarkAction_GetFontSize
MIP_CC_AddWatermarkAction_GetLayout
MIP_CC_AddWatermarkAction_GetText
MIP_CC_AddWatermarkAction_GetTextSize
MIP_CC_AddWatermarkAction_GetUIElementName
MIP_CC_AddWatermarkAction_GetUIElementNameSize
MIP_CC_ContentLabel_GetAssignmentMethod
MIP_CC_ContentLabel_GetCreationTime
MIP_CC_ContentLabel_GetExtendedProperties
MIP_CC_ContentLabel_GetLabel
MIP_CC_ContentLabel_IsProtectionAppliedFromLabel
MIP_CC_CreateDictionary
MIP_CC_CreateHttpDelegate
MIP_CC_CreateLoggerDelegate
MIP_CC_CreateMetadataDictionary
MIP_CC_CreateMipContext
MIP_CC_CreateMipContextWithCustomFeatureSettings
MIP_CC_CreatePolicyEngineSettingsWithEngineId
MIP_CC_CreatePolicyEngineSettingsWithEngineIdAndAuthCallback
MIP_CC_CreatePolicyEngineSettingsWithIdentity
MIP_CC_CreatePolicyEngineSettingsWithIdentityAndAuthCallback
MIP_CC_CreatePolicyProfileSettings
MIP_CC_CreateProtectionDescriptorFromTemplate
MIP_CC_CreateProtectionDescriptorFromUserRights
MIP_CC_CreateProtectionDescriptorFromUserRoles
MIP_CC_CreateStringList
MIP_CC_CreateTaskDispatcherDelegate
MIP_CC_CreateTelemetryConfiguration
MIP_CC_CustomAction_GetName
MIP_CC_CustomAction_GetNameSize
MIP_CC_CustomAction_GetProperties
MIP_CC_Dictionary_GetEntries
MIP_CC_ExecuteDispatchedTask
MIP_CC_Label_GetAutoTooltip
MIP_CC_Label_GetAutoTooltipSize
MIP_CC_Label_GetChildren
MIP_CC_Label_GetChildrenSize
MIP_CC_Label_GetColor
MIP_CC_Label_GetColorSize
MIP_CC_Label_GetCustomSettings
MIP_CC_Label_GetDescription
MIP_CC_Label_GetDescriptionSize
MIP_CC_Label_GetId
MIP_CC_Label_GetName
MIP_CC_Label_GetNameSize
MIP_CC_Label_GetParent
MIP_CC_Label_GetSensitivity
MIP_CC_Label_GetTooltip
MIP_CC_Label_GetTooltipSize
MIP_CC_Label_IsActive
MIP_CC_LoadPolicyProfile
MIP_CC_MetadataAction_GetMetadataToAdd
MIP_CC_MetadataAction_GetMetadataToRemove
MIP_CC_MetadataDictionary_GetEntries
MIP_CC_NotifyHttpDelegateResponse
MIP_CC_PolicyEngineSettings_ConfigureFunctionality
MIP_CC_PolicyEngineSettings_SetClientData
MIP_CC_PolicyEngineSettings_SetCloud
MIP_CC_PolicyEngineSettings_SetCloudEndpointBaseUrl
MIP_CC_PolicyEngineSettings_SetCustomSettings
MIP_CC_PolicyEngineSettings_SetDelegatedUserEmail
MIP_CC_PolicyEngineSettings_SetLabelFilter
MIP_CC_PolicyEngineSettings_SetSessionId
MIP_CC_PolicyEngine_CreatePolicyHandler
MIP_CC_PolicyEngine_GetClientData
MIP_CC_PolicyEngine_GetClientDataSize
MIP_CC_PolicyEngine_GetEngineId
MIP_CC_PolicyEngine_GetEngineIdSize
MIP_CC_PolicyEngine_GetLabelById
MIP_CC_PolicyEngine_GetLastPolicyFetchTime
MIP_CC_PolicyEngine_GetMoreInfoUrl
MIP_CC_PolicyEngine_GetMoreInfoUrlSize
MIP_CC_PolicyEngine_GetPolicyDataXml
MIP_CC_PolicyEngine_GetPolicyDataXmlSize
MIP_CC_PolicyEngine_GetPolicyFileId
MIP_CC_PolicyEngine_GetPolicyFileIdSize
MIP_CC_PolicyEngine_GetSensitivityFileId
MIP_CC_PolicyEngine_GetSensitivityFileIdSize
MIP_CC_PolicyEngine_GetSensitivityLabels
MIP_CC_PolicyEngine_GetSensitivityLabelsSize
MIP_CC_PolicyEngine_GetSensitivityTypes
MIP_CC_PolicyEngine_GetSensitivityTypesDataXml
MIP_CC_PolicyEngine_GetSensitivityTypesDataXmlSize
MIP_CC_PolicyEngine_GetSensitivityTypesSize
MIP_CC_PolicyEngine_GetTenantId
MIP_CC_PolicyEngine_GetTenantIdSize
MIP_CC_PolicyEngine_HasClassificationRules
MIP_CC_PolicyEngine_IsLabelingRequired
MIP_CC_PolicyEngine_SendApplicationAuditEvent
MIP_CC_PolicyHandler_ComputeActions
MIP_CC_PolicyHandler_GetSensitivityLabel
MIP_CC_PolicyHandler_NotifyCommittedActions
MIP_CC_PolicyProfileSettings_SetCustomSettings
MIP_CC_PolicyProfileSettings_SetHttpDelegate
MIP_CC_PolicyProfileSettings_SetSessionId
MIP_CC_PolicyProfileSettings_SetTaskDispatcherDelegate
MIP_CC_PolicyProfile_AcquireAuthToken
MIP_CC_PolicyProfile_AddEngine
MIP_CC_ProtectAdhocDkAction_GetDoubleKeyEncryptionUrl
MIP_CC_ProtectAdhocDkAction_GetDoubleKeyEncryptionUrlSize
MIP_CC_ProtectByEncryptOnlyAction_GetTemplateId
MIP_CC_ProtectByTemplateAction_GetDoubleKeyEncryptionUrl
MIP_CC_ProtectByTemplateAction_GetDoubleKeyEncryptionUrlSize
MIP_CC_ProtectByTemplateAction_GetTemplateId
MIP_CC_ProtectByTemplateAction_IsDoubleKey
MIP_CC_ProtectDoNotForwardDkAction_GetDoubleKeyEncryptionUrl
MIP_CC_ProtectDoNotForwardDkAction_GetDoubleKeyEncryptionUrlSize
MIP_CC_ProtectionDescriptor_DoesAllowOfflineAccess
MIP_CC_ProtectionDescriptor_DoesContentExpire
MIP_CC_ProtectionDescriptor_GetContentId
MIP_CC_ProtectionDescriptor_GetContentValidUntil
MIP_CC_ProtectionDescriptor_GetDescription
MIP_CC_ProtectionDescriptor_GetDescriptionSize
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrl
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrlSize
MIP_CC_ProtectionDescriptor_GetLabelId
MIP_CC_ProtectionDescriptor_GetName
MIP_CC_ProtectionDescriptor_GetNameSize
MIP_CC_ProtectionDescriptor_GetOwner
MIP_CC_ProtectionDescriptor_GetOwnerSize
MIP_CC_ProtectionDescriptor_GetProtectionType
MIP_CC_ProtectionDescriptor_GetReferrer
MIP_CC_ProtectionDescriptor_GetReferrerSize
MIP_CC_ProtectionDescriptor_GetTemplateId
MIP_CC_ReleaseActionResult
MIP_CC_ReleaseContentLabel
MIP_CC_ReleaseDictionary
MIP_CC_ReleaseHttpDelegate
MIP_CC_ReleaseLabel
MIP_CC_ReleaseLoggerDelegate
MIP_CC_ReleaseMetadataDictionary
MIP_CC_ReleaseMipContext
MIP_CC_ReleasePolicyEngine
MIP_CC_ReleasePolicyEngineSettings
MIP_CC_ReleasePolicyHandler
MIP_CC_ReleasePolicyProfile
MIP_CC_ReleasePolicyProfileSettings
MIP_CC_ReleaseProtectionDescriptor
MIP_CC_ReleaseSensitivityType
MIP_CC_ReleaseStringList
MIP_CC_ReleaseTaskDispatcherDelegate
MIP_CC_ReleaseTelemetryConfiguration
MIP_CC_RemoveContentFooterAction_GetUIElementNames
MIP_CC_RemoveContentHeaderAction_GetUIElementNames
MIP_CC_RemoveWatermarkAction_GetUIElementNames
MIP_CC_SensitivityType_GetRulePackage
MIP_CC_SensitivityType_GetRulePackageId
MIP_CC_SensitivityType_GetRulePackageIdSize
MIP_CC_SensitivityType_GetRulePackageSize
MIP_CC_StringList_GetStrings
MIP_CC_TelemetryConfiguration_AddMaskedProperty
MIP_CC_TelemetryConfiguration_SetCustomSettings
MIP_CC_TelemetryConfiguration_SetHostName
MIP_CC_TelemetryConfiguration_SetHttpDelegate
MIP_CC_TelemetryConfiguration_SetIsFastShutdownEnabled
MIP_CC_TelemetryConfiguration_SetIsLocalCachingEnabled
MIP_CC_TelemetryConfiguration_SetIsNetworkDetectionEnabled
MIP_CC_TelemetryConfiguration_SetIsTelemetryOptedOut
MIP_CC_TelemetryConfiguration_SetIsTraceLoggingEnabled
MIP_CC_TelemetryConfiguration_SetLibraryName
MIP_CC_TelemetryConfiguration_SetTaskDispatcherDelegate

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 486KB - Virtual size: 485KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 159KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Davinci Resolve 18/profiles/Microsoft.CodeAnalysis.CSharp.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cc:cb:b8:13:eb:5d:72:2d:45:00:00:00:00:00:cc
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:148C-C4B9-2066,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17-11-2016 22:09

Not After

17-02-2018 22:09

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c0:4f:95:1a:be:46:3b:53:2a:da:3d:cd:0b:27:ac:3a:88:96:af:17
Signer

Actual PE Digest

c0:4f:95:1a:be:46:3b:53:2a:da:3d:cd:0b:27:ac:3a:88:96:af:17

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

04-02-2017 23:22
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Davinci Resolve 18/profiles/mono-2.0.dll__5011
.dll windows x86

22513079c36fcff4ed3d0b55d36fda62

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mswsock

TransmitFile

ws2_32

inet_pton
WSASocketW
WSAIoctl
gethostname
ntohl
htonl
getsockopt
getpeername
htons
getnameinfo
freeaddrinfo
getaddrinfo
getprotobyname
WSAGetLastError
socket
shutdown
setsockopt
send
ioctlsocket
inet_addr
recvfrom
sendto
WSASetLastError
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSARecv
WSASend
WSAWaitForMultipleEvents
accept
bind
closesocket
connect
getsockname
listen
recv
select
WSACleanup
ntohs
WSAStartup
__WSAFDIsSet

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
CoInitializeEx
CoUninitialize
CoTaskMemFree

oleaut32

SafeArrayCreate
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayPutElement
SafeArrayPtrOfIndex
SysAllocStringLen
SysFreeString
SysStringLen
SafeArrayDestroy
SafeArrayGetDim

psapi

GetModuleFileNameExW
GetModuleBaseNameW
EnumProcesses
EnumProcessModules
GetModuleInformation

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

advapi32

BuildTrusteeWithSidW
RevertToSelf
ImpersonateLoggedOnUser
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetEffectiveRightsFromAclW
SetEntriesInAclW
LookupAccountSidW
GetTokenInformation
GetLengthSid
FreeSid
DuplicateToken
CopySid
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
CreateProcessWithLogonW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW

winmm

timeSetEvent
timeGetDevCaps
timeKillEvent
timeEndPeriod
timeBeginPeriod

kernel32

ReleaseMutex
GetFileInformationByHandleEx
FlushViewOfFile
OpenFileMappingW
SetHandleInformation
VerLanguageNameW
SetProcessWorkingSetSize
GetProcessWorkingSetSize
OpenProcess
GetProcessId
GetPriorityClass
SetPriorityClass
CreateProcessW
GetExitCodeProcess
TerminateProcess
GetProcessTimes
GlobalFree
GlobalReAlloc
GlobalAlloc
DuplicateHandle
GetComputerNameW
IsWow64Process
OutputDebugStringW
SetEnvironmentVariableW
CreateMutexW
GetEnvironmentStringsW
GetConsoleMode
FileTimeToSystemTime
ReplaceFileW
MoveFileW
GetStdHandle
CreatePipe
WriteFile
UnlockFile
SetFileTime
SetFilePointer
SetFileAttributesW
SetEndOfFile
RemoveDirectoryW
ReadFile
LockFile
GetVolumeInformationW
GetLogicalDriveStringsW
GetFileType
GetFileTime
GetFileAttributesExW
GetFileAttributesW
GetDriveTypeW
GetDiskFreeSpaceExW
OpenMutexW
OpenSemaphoreW
OpenEventW
GetTickCount
DebugBreak
InitializeCriticalSection
GetExitCodeThread
GetVersion
GetEnvironmentVariableW
GetLocaleInfoA
GetThreadLocale
GetACP
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
CopyFileW
GetStartupInfoW
SetCurrentDirectoryW
FreeEnvironmentStringsW
FlushFileBuffers
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
FreeLibrary
GetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
FreeConsole
SetUnhandledExceptionFilter
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
GetSystemInfo
GetProcAddress
LoadLibraryW
CloseHandle
GetCurrentThreadId
OpenThread
GetThreadContext
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
ReleaseSemaphore
WaitForSingleObjectEx
TlsAlloc
TlsGetValue
TlsSetValue
CreateSemaphoreW
MultiByteToWideChar
Sleep
TlsFree
RaiseException
WaitForSingleObject
QueueUserAPC
GetCurrentProcess
SwitchToThread
CreateThread
ExitThread
SuspendThread
ResumeThread
SetThreadContext
VirtualQuery
GetModuleHandleW
VirtualAlloc
VirtualFree
VirtualProtect
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
GetTickCount64
GetCurrentProcessId
GetSystemTimes
SetEvent
ResetEvent
WaitForMultipleObjectsEx
CreateEventW
SetLastError
SetErrorMode
LocalFree
FormatMessageW
GetCommandLineW
CreateFileW
GetFileSize
ExitProcess
GetSystemDirectoryW
DisableThreadLibraryCalls
GetModuleFileNameW
SignalObjectAndWait
GetCurrentThread
SetThreadPriority
GlobalMemoryStatusEx
GetVersionExW
GetCurrentDirectoryW

user32

SendMessageTimeoutW
WaitForInputIdle
MessageBoxA
MessageBoxW

shell32

ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW
SHGetKnownFolderPath

vcruntime140

strstr
__std_type_info_destroy_list
_except_handler4_common
wcschr
memmove
strrchr
strchr
memset
memcpy

api-ms-win-crt-runtime-l1-1-0

exit
terminate
_exit
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_errno
_wsystem
strerror
_control87
abort
system

api-ms-win-crt-convert-l1-1-0

strtoull
strtoul
atoi
strtol
atol

api-ms-win-crt-stdio-l1-1-0

_open
_read
_getcwd
fclose
__stdio_common_vsprintf
ferror
_fileno
_write
fread
_wmktemp
_wopen
fwrite
fputs
__stdio_common_vfprintf
fopen
_wfopen
_get_osfhandle
fgets
fflush
feof
__acrt_iob_func
fseek
ftell
_close
__stdio_common_vsscanf

api-ms-win-crt-string-l1-1-0

_stricmp
wcscpy
wcscmp
wcscat
_strdup
strtok_s
isxdigit
strcpy
strcat
wcslen
strlen
strncpy
isalpha
strcmp
strncmp
tolower
isalnum
isdigit
isspace

api-ms-win-crt-locale-l1-1-0

setlocale

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-math-l1-1-0

floor
_Cbuild
creal
cimag
ceil
_libm_sse2_tan_precise
sqrt
_libm_sse2_sin_precise
_fdclass
_libm_sse2_pow_precise
_libm_sse2_log_precise
_libm_sse2_log10_precise
_libm_sse2_exp_precise
_libm_sse2_cos_precise
_dclass
_cabs
_except1
_libm_sse2_atan_precise
_libm_sse2_sqrt_precise
_libm_sse2_asin_precise
_fdopen
_libm_sse2_acos_precise
_CItanh
_CIsinh
copysign
modf
_CIatan2
_CIcosh
_CIfmod

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc
calloc

api-ms-win-crt-filesystem-l1-1-0

_unlink
_stat64i32
_fstat64i32
rename
_access
_wmkdir

api-ms-win-crt-time-l1-1-0

_localtime64
_utime64
strftime
_time64

Exports

Exports

MonoFixupCorEE
mono_add_internal_call
mono_aot_get_method
mono_aot_register_module
mono_array_addr_with_size
mono_array_class_get
mono_array_clone
mono_array_element_size
mono_array_length
mono_array_new
mono_array_new_full
mono_array_new_specific
mono_assemblies_cleanup
mono_assemblies_init
mono_assembly_addref
mono_assembly_close
mono_assembly_fill_assembly_name
mono_assembly_foreach
mono_assembly_get_assemblyref
mono_assembly_get_image
mono_assembly_get_main
mono_assembly_get_name
mono_assembly_get_object
mono_assembly_getrootdir
mono_assembly_invoke_load_hook
mono_assembly_invoke_search_hook
mono_assembly_load
mono_assembly_load_from
mono_assembly_load_from_full
mono_assembly_load_full
mono_assembly_load_module
mono_assembly_load_reference
mono_assembly_load_references
mono_assembly_load_with_partial_name
mono_assembly_loaded
mono_assembly_loaded_full
mono_assembly_name_free
mono_assembly_name_get_culture
mono_assembly_name_get_name
mono_assembly_name_get_pubkeytoken
mono_assembly_name_get_version
mono_assembly_name_new
mono_assembly_names_equal
mono_assembly_open
mono_assembly_open_full
mono_assembly_set_main
mono_assembly_setrootdir
mono_bitset_alloc_size
mono_bitset_clear
mono_bitset_clear_all
mono_bitset_clone
mono_bitset_copyto
mono_bitset_count
mono_bitset_equal
mono_bitset_find_first
mono_bitset_find_first_unset
mono_bitset_find_last
mono_bitset_find_start
mono_bitset_foreach
mono_bitset_free
mono_bitset_intersection
mono_bitset_intersection_2
mono_bitset_invert
mono_bitset_mem_new
mono_bitset_new
mono_bitset_set
mono_bitset_set_all
mono_bitset_size
mono_bitset_sub
mono_bitset_test
mono_bitset_test_bulk
mono_bitset_union
mono_bounded_array_class_get
mono_breakpoint_clean_code
mono_check_corlib_version
mono_class_array_element_size
mono_class_data_size
mono_class_describe_statics
mono_class_enum_basetype
mono_class_from_generic_parameter
mono_class_from_mono_type
mono_class_from_name
mono_class_from_name_case
mono_class_from_typeref
mono_class_from_typeref_checked
mono_class_get
mono_class_get_byref_type
mono_class_get_element_class
mono_class_get_event_token
mono_class_get_events
mono_class_get_field
mono_class_get_field_from_name
mono_class_get_field_token
mono_class_get_fields
mono_class_get_flags
mono_class_get_full
mono_class_get_image
mono_class_get_interfaces
mono_class_get_method_from_name
mono_class_get_method_from_name_flags
mono_class_get_methods
mono_class_get_name
mono_class_get_namespace
mono_class_get_nested_types
mono_class_get_nesting_type
mono_class_get_parent
mono_class_get_properties
mono_class_get_property_from_name
mono_class_get_property_token
mono_class_get_rank
mono_class_get_type
mono_class_get_type_token
mono_class_implements_interface
mono_class_inflate_generic_method
mono_class_inflate_generic_type
mono_class_init
mono_class_instance_size
mono_class_interface_offset
mono_class_is_assignable_from
mono_class_is_delegate
mono_class_is_enum
mono_class_is_subclass_of
mono_class_is_valid_enum
mono_class_is_valuetype
mono_class_min_align
mono_class_name_from_token
mono_class_num_events
mono_class_num_fields
mono_class_num_methods
mono_class_num_properties
mono_class_value_size
mono_class_vtable
mono_cli_rva_image_map
mono_code_manager_cleanup
mono_code_manager_commit
mono_code_manager_destroy
mono_code_manager_init
mono_code_manager_invalidate
mono_code_manager_new
mono_code_manager_new_dynamic
mono_code_manager_reserve
mono_code_manager_reserve_align
mono_code_manager_set_read_only
mono_code_manager_size
mono_compile_method
mono_conc_hashtable_destroy
mono_conc_hashtable_foreach
mono_conc_hashtable_insert
mono_conc_hashtable_lookup
mono_conc_hashtable_new
mono_conc_hashtable_new_full
mono_conc_hashtable_remove
mono_config_cleanup
mono_config_for_assembly
mono_config_is_server_mode
mono_config_parse
mono_config_parse_memory
mono_config_set_server_mode
mono_config_string_for_assembly_file
mono_context_get
mono_context_get_desc
mono_context_get_domain_id
mono_context_get_id
mono_context_init
mono_context_set
mono_counter_get_name
mono_counter_get_section
mono_counter_get_size
mono_counter_get_type
mono_counter_get_unit
mono_counter_get_variance
mono_counters_cleanup
mono_counters_dump
mono_counters_enable
mono_counters_foreach
mono_counters_init
mono_counters_on_register
mono_counters_register
mono_counters_register_with_size
mono_counters_sample
mono_custom_attrs_construct
mono_custom_attrs_free
mono_custom_attrs_from_assembly
mono_custom_attrs_from_class
mono_custom_attrs_from_event
mono_custom_attrs_from_field
mono_custom_attrs_from_index
mono_custom_attrs_from_method
mono_custom_attrs_from_param
mono_custom_attrs_from_property
mono_custom_attrs_get_attr
mono_custom_attrs_has_attr
mono_debug_add_delegate_trampoline
mono_debug_add_method
mono_debug_cleanup
mono_debug_close_image
mono_debug_close_mono_symbol_file
mono_debug_domain_create
mono_debug_domain_unload
mono_debug_enabled
mono_debug_find_method
mono_debug_free_locals
mono_debug_free_method_jit_info
mono_debug_free_source_location
mono_debug_il_offset_from_address
mono_debug_init
mono_debug_lookup_locals
mono_debug_lookup_method
mono_debug_lookup_method_addresses
mono_debug_lookup_source_location
mono_debug_open_image_from_memory
mono_debug_open_mono_symbols
mono_debug_print_stack_frame
mono_debug_print_vars
mono_debug_remove_method
mono_debug_symfile_free_location
mono_debug_symfile_is_loaded
mono_debug_symfile_lookup_locals
mono_debug_symfile_lookup_location
mono_debug_symfile_lookup_method
mono_debugger_agent_parse_options
mono_debugger_agent_register_transport
mono_debugger_agent_transport_handshake
mono_debugger_insert_breakpoint
mono_debugger_method_has_breakpoint
mono_debugger_run_finally
mono_declsec_flags_from_assembly
mono_declsec_flags_from_class
mono_declsec_flags_from_method
mono_declsec_get_assembly_action
mono_declsec_get_class_action
mono_declsec_get_demands
mono_declsec_get_inheritdemands_class
mono_declsec_get_inheritdemands_method
mono_declsec_get_linkdemands
mono_declsec_get_method_action
mono_digest_get_public_token
mono_disasm_code
mono_disasm_code_one
mono_dl_fallback_register
mono_dl_fallback_unregister
mono_dl_open
mono_dllmap_insert
mono_domain_add_class_static_data
mono_domain_assembly_open
mono_domain_create
mono_domain_create_appdomain
mono_domain_finalize
mono_domain_foreach
mono_domain_free
mono_domain_from_appdomain
mono_domain_get
mono_domain_get_by_id
mono_domain_get_friendly_name
mono_domain_get_id
mono_domain_has_type_resolve
mono_domain_is_unloading
mono_domain_owns_vtable_slot
mono_domain_set
mono_domain_set_config
mono_domain_set_internal
mono_domain_try_type_resolve
mono_domain_try_unload
mono_domain_unload
mono_emit_native_call
mono_environment_exitcode_get
mono_environment_exitcode_set
mono_error_cleanup
mono_error_get_error_code
mono_error_get_message
mono_error_init
mono_error_init_flags
mono_error_ok
mono_escape_uri_string
mono_event_get_add_method
mono_event_get_flags
mono_event_get_name
mono_event_get_object
mono_event_get_parent
mono_event_get_raise_method
mono_event_get_remove_method
mono_exception_from_name
mono_exception_from_name_domain
mono_exception_from_name_msg
mono_exception_from_name_two_strings
mono_exception_from_token
mono_exception_from_token_two_strings
mono_exception_walk_trace
mono_field_from_token
mono_field_full_name
mono_field_get_data
mono_field_get_flags
mono_field_get_name
mono_field_get_object
mono_field_get_offset
mono_field_get_parent
mono_field_get_type
mono_field_get_value
mono_field_get_value_object
mono_field_set_value
mono_field_static_get_value
mono_field_static_set_value
mono_file_map
mono_file_map_close
mono_file_map_fd
mono_file_map_open
mono_file_map_size
mono_file_unmap
mono_free
mono_free_bstr
mono_free_method
mono_free_verify_list
mono_g_hash_table_destroy
mono_g_hash_table_find
mono_g_hash_table_foreach
mono_g_hash_table_foreach_remove
mono_g_hash_table_insert
mono_g_hash_table_lookup
mono_g_hash_table_lookup_extended
mono_g_hash_table_new_type
mono_g_hash_table_print_stats
mono_g_hash_table_remove
mono_g_hash_table_replace
mono_g_hash_table_size
mono_gc_collect
mono_gc_collection_count
mono_gc_get_generation
mono_gc_get_heap_size
mono_gc_get_used_size
mono_gc_invoke_finalizers
mono_gc_max_generation
mono_gc_reference_queue_add
mono_gc_reference_queue_free
mono_gc_reference_queue_new
mono_gc_register_finalizer_callbacks
mono_gc_register_root
mono_gc_toggleref_add
mono_gc_toggleref_register_callback
mono_gc_walk_heap
mono_gc_wbarrier_arrayref_copy
mono_gc_wbarrier_generic_nostore
mono_gc_wbarrier_generic_store
mono_gc_wbarrier_generic_store_atomic
mono_gc_wbarrier_object_copy
mono_gc_wbarrier_set_arrayref
mono_gc_wbarrier_set_field
mono_gc_wbarrier_value_copy
mono_gchandle_free
mono_gchandle_get_target
mono_gchandle_new
mono_gchandle_new_weakref
mono_get_array_class
mono_get_boolean_class
mono_get_byte_class
mono_get_char_class
mono_get_config_dir
mono_get_corlib
mono_get_dbnull_object
mono_get_delegate_begin_invoke
mono_get_delegate_end_invoke
mono_get_delegate_invoke
mono_get_double_class
mono_get_enum_class
mono_get_exception_appdomain_unloaded
mono_get_exception_argument
mono_get_exception_argument_null
mono_get_exception_argument_out_of_range
mono_get_exception_arithmetic
mono_get_exception_array_type_mismatch
mono_get_exception_bad_image_format
mono_get_exception_bad_image_format2
mono_get_exception_cannot_unload_appdomain
mono_get_exception_class
mono_get_exception_divide_by_zero
mono_get_exception_execution_engine
mono_get_exception_field_access
mono_get_exception_file_not_found
mono_get_exception_file_not_found2
mono_get_exception_index_out_of_range
mono_get_exception_invalid_cast
mono_get_exception_invalid_operation
mono_get_exception_io
mono_get_exception_method_access
mono_get_exception_missing_field
mono_get_exception_missing_method
mono_get_exception_not_implemented
mono_get_exception_not_supported
mono_get_exception_null_reference
mono_get_exception_out_of_memory
mono_get_exception_overflow
mono_get_exception_reflection_type_load
mono_get_exception_runtime_wrapped
mono_get_exception_security
mono_get_exception_serialization
mono_get_exception_stack_overflow
mono_get_exception_synchronization_lock
mono_get_exception_thread_abort
mono_get_exception_thread_interrupted
mono_get_exception_thread_state
mono_get_exception_type_initialization
mono_get_exception_type_load
mono_get_inflated_method
mono_get_int16_class
mono_get_int32_class
mono_get_int64_class
mono_get_intptr_class
mono_get_jit_info_from_method
mono_get_machine_config
mono_get_method
mono_get_method_constrained
mono_get_method_full
mono_get_object_class
mono_get_root_domain
mono_get_runtime_build_info
mono_get_sbyte_class
mono_get_single_class
mono_get_string_class
mono_get_thread_class
mono_get_uint16_class
mono_get_uint32_class
mono_get_uint64_class
mono_get_uintptr_class
mono_get_void_class
mono_guid_to_string
mono_guid_to_string_minimal
mono_image_add_to_name_cache
mono_image_addref
mono_image_close
mono_image_ensure_section
mono_image_ensure_section_idx
mono_image_fixup_vtable
mono_image_get_assembly
mono_image_get_entry_point
mono_image_get_filename
mono_image_get_guid
mono_image_get_name
mono_image_get_public_key
mono_image_get_resource
mono_image_get_strong_name
mono_image_get_table_info
mono_image_get_table_rows
mono_image_has_authenticode_entry
mono_image_init
mono_image_init_name_cache
mono_image_is_dynamic
mono_image_load_file_for_image
mono_image_load_module
mono_image_loaded
mono_image_loaded_by_guid
mono_image_loaded_by_guid_full
mono_image_loaded_full
mono_image_lookup_resource
mono_image_open
mono_image_open_from_data
mono_image_open_from_data_full
mono_image_open_from_data_with_name
mono_image_open_full
mono_image_rva_map
mono_image_strerror
mono_image_strong_name_position
mono_images_cleanup
mono_images_init
mono_init
mono_init_from_assembly
mono_init_version
mono_inst_name
mono_install_assembly_load_hook
mono_install_assembly_postload_refonly_search_hook
mono_install_assembly_postload_search_hook
mono_install_assembly_preload_hook
mono_install_assembly_refonly_preload_hook
mono_install_assembly_refonly_search_hook
mono_install_assembly_search_hook
mono_install_ftnptr_eh_callback
mono_install_load_aot_data_hook
mono_install_runtime_cleanup
mono_install_unhandled_exception_hook
mono_is_debugger_attached
mono_jit_cleanup
mono_jit_exec
mono_jit_info_get_code_size
mono_jit_info_get_code_start
mono_jit_info_get_method
mono_jit_info_table_find
mono_jit_init
mono_jit_init_version
mono_jit_parse_options
mono_jit_set_aot_mode
mono_jit_set_aot_only
mono_jit_set_domain
mono_jit_set_trace_options
mono_jit_thread_attach
mono_ldstr
mono_ldtoken
mono_load_remote_field
mono_load_remote_field_new
mono_loader_register_module
mono_lock_free_alloc
mono_lock_free_allocator_check_consistency
mono_lock_free_allocator_init_allocator

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 844KB - Virtual size: 843KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 293B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Davinci Resolve 18/x64/AIDE.dll
.dll windows x86

35310b00e41c70ccb762d39f144b9fc0

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-12-2020 00:00

Not After

21-12-2022 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f8:d5:86:13:9f:0e:a8:06:96:1c:b2:3f:07:d6:09:97:f4:49:9a:f0:b2:e5:e0:4c:e1:aa:15:bd:27:b5:8e:99
Signer

Actual PE Digest

f8:d5:86:13:9f:0e:a8:06:96:1c:b2:3f:07:d6:09:97:f4:49:9a:f0:b2:e5:e0:4c:e1:aa:15:bd:27:b5:8e:99

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

04-06-2022 23:20
Valid: true

Chain 1

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

windowscodecs

WICConvertBitmapSource

kernel32

InitializeSListHead
DisableThreadLibraryCalls
CloseHandle
WaitForSingleObject
CreateThread
GetSystemInfo
ReleaseSemaphore
CreateSemaphoreA
FreeLibrary
GetProcAddress
LoadLibraryA
ExitProcess
IsProcessorFeaturePresent
GetTempPathA
DeleteFileA
GetTempFileNameA
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
EnterCriticalSection

ole32

CoInitializeEx
CoCreateInstance
PropVariantClear

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

vcruntime140

__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
strstr
strrchr
_setjmp3
__CxxLongjmpUnwind
longjmp
memchr
memset
memmove
__CxxFrameHandler3
_CxxThrowException
__std_exception_destroy
_purecall
__std_exception_copy
__std_terminate
memcpy

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
exit
_initterm_e
_initterm
_cexit
_crt_atexit
abort
_wassert
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table

api-ms-win-crt-math-l1-1-0

ldexp
_libm_sse2_log10_precise
_libm_sse2_log_precise
floor
ceil
_libm_sse2_sqrt_precise
_CIatan2
frexp
_libm_sse2_pow_precise
_libm_sse2_exp_precise

api-ms-win-crt-heap-l1-1-0

malloc
_aligned_malloc
_aligned_free
free
calloc
realloc
_callnewh

api-ms-win-crt-stdio-l1-1-0

fopen_s
fseek
ftell
feof
__stdio_common_vsnprintf_s
fclose
fwrite
fflush
__stdio_common_vsprintf
fread
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-utility-l1-1-0

bsearch
srand
rand
qsort

api-ms-win-crt-string-l1-1-0

tolower
strncmp

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

??0AIDEDimension@AIDE@@QAE@II@Z
??0AIDEDimension@AIDE@@QAE@XZ
??0AIDEFormatType@AIDE@@QAE@H@Z
??0AIDEFormatType@AIDE@@QAE@XZ
??0AIDEInputOutputStreamCallBacks@AIDE@@QAE@XZ
??0AIDEInputStreamCallBacks@AIDE@@QAE@XZ
??0AIDELibInitCallBacks@AIDE@@QAE@XZ
??0AIDEOutputStreamCallBacks@AIDE@@QAE@XZ
??0AIDEPoint@AIDE@@QAE@II@Z
??0AIDEPoint@AIDE@@QAE@XZ
??0AIDEProgressCallback@AIDE@@QAE@XZ
??0ComponentInfo@AIDE@@QAE@IW4AIDEComponentType@1@@Z
??0ComponentInfo@AIDE@@QAE@XZ
??0PaletteInfo@AIDE@@QAE@XZ
??0PixelPartInfo@AIDE@@QAE@XZ
??1AIDEDimension@AIDE@@QAE@XZ
??1AIDEFormatType@AIDE@@QAE@XZ
??1AIDEInputOutputStreamCallBacks@AIDE@@QAE@XZ
??1AIDEInputStreamCallBacks@AIDE@@QAE@XZ
??1AIDELibInitCallBacks@AIDE@@QAE@XZ
??1AIDEOutputStreamCallBacks@AIDE@@QAE@XZ
??1AIDEPoint@AIDE@@QAE@XZ
??1AIDEProgressCallback@AIDE@@QAE@XZ
??1ComponentInfo@AIDE@@QAE@XZ
??1PaletteInfo@AIDE@@QAE@XZ
??1PixelPartInfo@AIDE@@QAE@XZ
??4AIDEDimension@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEFormatType@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEInputOutputStreamCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEInputStreamCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDELayerSize@AIDE@@QAEAAU01@ABU01@@Z
??4AIDELibInitCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEOutputStreamCallBacks@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEPoint@AIDE@@QAEAAU01@ABU01@@Z
??4AIDEProgressCallback@AIDE@@QAEAAU01@ABU01@@Z
??4ComponentInfo@AIDE@@QAEAAU01@ABU01@@Z
??4PaletteInfo@AIDE@@QAEAAU01@ABU01@@Z
??4PixelPartInfo@AIDE@@QAEAAU01@ABU01@@Z
?AIDEDecodeOptionsSetComponentOrder@@YA?AW4AIDEError@AIDE@@PAVDecodeOptions@Impl@2@W4AIDEComponentOrder@2@I@Z
?mVersion@AIDEInputOutputStreamCallBacks@AIDE@@2IB
?mVersion@AIDEInputStreamCallBacks@AIDE@@2IB
?mVersion@AIDELibInitCallBacks@AIDE@@2IB
?mVersion@AIDEOutputStreamCallBacks@AIDE@@2IB
?mVersion@AIDEProgressCallback@AIDE@@2IB
AIDECreateLibInstance
AIDEDecodeOptionsSetBitDepth
AIDEDecodeOptionsSetColorSpace
AIDEDecodeOptionsSetDirectDecode
AIDEDecodeOptionsSetImageOrientation
AIDEDecodeOptionsSetImageResampling
AIDEDecodeOptionsSetIntValue
AIDEDecodeOptionsSetMaxDimensions
AIDEDecodeOptionsSetNoDecodeErrors
AIDEDecodeOptionsSetPackingType
AIDEDecodeOptionsSetPalette
AIDEDecodeOptionsSetPrivateChunkNames
AIDEDecodeOptionsSetTransparency
AIDEDecoderDecodeNextImage
AIDEDecoderDecodeNextTile
AIDEDecoderFillPixelPartBuffers
AIDEDecoderGetColorInfo
AIDEDecoderGetColorSpace
AIDEDecoderGetCommonColorBitDepth
AIDEDecoderGetComponentCount
AIDEDecoderGetComponentInfo
AIDEDecoderGetDirectDecode
AIDEDecoderGetEXIF_1_Data
AIDEDecoderGetEXIF_3_Data
AIDEDecoderGetFormatType
AIDEDecoderGetGlobalTransparencyIndex
AIDEDecoderGetICCProfile
AIDEDecoderGetIPTCData
AIDEDecoderGetImageResolution
AIDEDecoderGetImageSize
AIDEDecoderGetMetaDataBlob
AIDEDecoderGetMetaDataBlobAtIndex
AIDEDecoderGetMetaDataBlobClientBuffer
AIDEDecoderGetMetaDataIntegerValue
AIDEDecoderGetPackingInfo
AIDEDecoderGetPaletteColorInfo
AIDEDecoderGetPaletteFullyTransparentValue
AIDEDecoderGetPaletteInfo
AIDEDecoderGetPaletteTransparencyType
AIDEDecoderGetPixelPartInfo
AIDEDecoderGetPixelPartInfoBigFilesSupported
AIDEDecoderGetTileInfo
AIDEDecoderGetTransparencyType
AIDEDecoderGetXMPData
AIDEDecoderHasPalettedComponent
AIDEDecoderSetMaxTileBufferSize
AIDEDecoderSetMaxTileBufferSizeBigFilesSupported
AIDEDestroyLibInstance
AIDEEncoderEncodeNRows
AIDEEncoderEncodeNextImage
AIDEEncoderFinishEncoding
AIDEEncoderGetFormatType
AIDEEncoderRegisterProgressCallback
AIDEEncoderSetColorSpace
AIDEEncoderSetCommonColorBitDepth
AIDEEncoderSetEXIF_1_Data
AIDEEncoderSetEXIF_3_Data
AIDEEncoderSetICCProfile
AIDEEncoderSetIPTCData
AIDEEncoderSetImageResampling
AIDEEncoderSetImageResolution
AIDEEncoderSetImageSize
AIDEEncoderSetMetaDataBlob
AIDEEncoderSetMetaDataIntegerValue
AIDEEncoderSetPaletteFullyTransparentIndex
AIDEEncoderSetPaletteInfo
AIDEEncoderSetPaletteTransparencyType
AIDEEncoderSetPixelPartInfo
AIDEEncoderSetPixelPartInfoBigFilesSupported
AIDEEncoderSetTileInfo
AIDEEncoderSetTransparencyType
AIDEEncoderSetXMPData
AIDEEncoderWriteHeader
AIDEEncoderWritePixelPartBuffers
AIDEJXREncodeOptionsSetAlphaChannelFormat
AIDEJXREncodeOptionsSetAlphaChannelQuality
AIDEJXREncodeOptionsSetBitStreamOrdering
AIDEJXREncodeOptionsSetChromaSubSampling
AIDEJXREncodeOptionsSetCompressionType
AIDEJXREncodeOptionsSetImageQuality
AIDEJXREncodeOptionsSetOverlapLevel
AIDEJXREncodeOptionsSetTilingSlices
AIDEJpegEncodeOptionsSetAIQuality
AIDEJpegEncodeOptionsSetCustomQuality
AIDEJpegEncodeOptionsSetEncodeMethod
AIDEJpegEncodeOptionsSetEncodeMode
AIDEJpegEncodeOptionsSetPackingType
AIDEJpegEncodeOptionsSetQualityLevel
AIDEJpegEncodeOptionsSetSave4WebQuality
AIDEJpegEncodeOptionsSetUseClipping
AIDELibBuildDate
AIDELibCreateBmpEncodeOptions
AIDELibCreateDecodeOptions
AIDELibCreateDecoder
AIDELibCreateDecoderForFormatType
AIDELibCreateEncoderForBMP
AIDELibCreateEncoderForGIF
AIDELibCreateEncoderForICON
AIDELibCreateEncoderForJPEG
AIDELibCreateEncoderForJXR
AIDELibCreateEncoderForPDF
AIDELibCreateEncoderForPNG
AIDELibCreateEncoderForRAW
AIDELibCreateEncoderForTIFF
AIDELibCreateEncoderForWEBP
AIDELibCreateGifEncodeOptions
AIDELibCreateIconEncodeOptions
AIDELibCreateInputOutputStream
AIDELibCreateInputStream
AIDELibCreateInputStreamUncached
AIDELibCreateJXREncodeOptions
AIDELibCreateJpegEncodeOptions
AIDELibCreateOutputStream
AIDELibCreatePdfEncodeOptions
AIDELibCreatePngEncodeOptions
AIDELibCreateRawEncodeOptions
AIDELibCreateTiffEncodeOptions
AIDELibCreateWebPEncodeOptions
AIDELibDestroyBmpEncodeOptions
AIDELibDestroyDecodeOptions
AIDELibDestroyDecoder
AIDELibDestroyEncoder
AIDELibDestroyGifEncodeOptions
AIDELibDestroyIconEncodeOptions
AIDELibDestroyInputOutputStream
AIDELibDestroyInputStream
AIDELibDestroyJXREncodeOptions
AIDELibDestroyJpegEncodeOptions
AIDELibDestroyOutputStream
AIDELibDestroyPdfEncodeOptions
AIDELibDestroyPngEncodeOptions
AIDELibDestroyRawEncodeOptions
AIDELibDestroyTiffEncodeOptions
AIDELibDestroyWebPEncodeOptions
AIDELibVersion
AIDEPngEncodeOptionsSetAttemptPaletteCreation
AIDEPngEncodeOptionsSetCompressionLevel
AIDEPngEncodeOptionsSetForcedPaletteCreation
AIDEPngEncodeOptionsSetInterlaced
AIDEPngEncodeOptionsSetPHYChunk
AIDEPngEncodeOptionsSetPalettizationTechnique
AIDERawEncodeOptionsSetBlurMethod
AIDETiffEncodeOptionsDiableLayer
AIDETiffEncodeOptionsSetCompressionScheme
AIDETiffEncodeOptionsSetCustomEncodeParams
AIDETiffEncodeOptionsSetPyramidParams
AIDETiffEncodeOptionsSetPyramidParamsCustomLayers
AIDETiffEncodeOptionsSetTileSize
AIDEWebPEncodeOptionsSetCompressionType
AIDEWebPEncodeOptionsSetImageQuality
AIDEWritePrivateChunk

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Davinci Resolve 18/x64/DarkTheme.acrotheme
Davinci Resolve 18/x64/JP2KLib.dll
.dll windows x86

83b05223f39b8593905fca1ffc7a2eba

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19-12-2020 00:00

Not After

21-12-2022 23:59

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

58:1b:1d:8f:72:c6:d6:23:4d:16:57:a6:90:20:b0:b6:bb:8e:cd:6f:4b:f7:aa:de:e3:22:ec:4a:ea:5f:87:18
Signer

Actual PE Digest

58:1b:1d:8f:72:c6:d6:23:4d:16:57:a6:90:20:b0:b6:bb:8e:cd:6f:4b:f7:aa:de:e3:22:ec:4a:ea:5f:87:18

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

04-06-2022 23:21
Valid: true

Chain 1

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Acrobat DC,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

vcruntime140

__current_exception
__std_type_info_destroy_list
_CxxThrowException
memset
__current_exception_context
_except_handler4_common
__CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

_libm_sse2_sqrt_precise
_except1
log10
_libm_sse2_pow_precise
fabs
ceil
sqrt
pow
_libm_sse2_log_precise

api-ms-win-crt-string-l1-1-0

strncmp
strlen

api-ms-win-crt-utility-l1-1-0

abs

api-ms-win-crt-stdio-l1-1-0

fputc
fflush
fclose
__acrt_iob_func
putc
fwrite
__stdio_common_vfprintf
fopen_s

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_register_onexit_function
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
_initterm
_initialize_onexit_table
_seh_filter_dll

api-ms-win-crt-heap-l1-1-0

free

kernel32

InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId

Exports

Exports

??0JP2KCodeStm@@QAE@XZ
??0JP2KMemFuncs@@QAE@XZ
??0JP2KMemFuncsEx@@QAE@XZ
??1JP2KCodeStm@@QAE@XZ
??4IJP2KException@@QAEAAV0@$$QAV0@@Z
??4IJP2KException@@QAEAAV0@ABV0@@Z
??4JP2KBufID_I@@QAEAAU0@$$QAU0@@Z
??4JP2KBufID_I@@QAEAAU0@ABU0@@Z
??4JP2KClientData@@QAEAAU0@$$QAU0@@Z
??4JP2KClientData@@QAEAAU0@ABU0@@Z
??4JP2KClientProcs@@QAEAAU0@$$QAU0@@Z
??4JP2KClientProcs@@QAEAAU0@ABU0@@Z
??4JP2KCodeStm@@QAEAAV0@ABV0@@Z
??4JP2KDecOpt@@QAEAAU0@$$QAU0@@Z
??4JP2KDecOpt@@QAEAAU0@ABU0@@Z
??4JP2KEncOpt@@QAEAAU0@$$QAU0@@Z
??4JP2KEncOpt@@QAEAAU0@ABU0@@Z
??4JP2KException@@QAEAAU0@$$QAU0@@Z
??4JP2KException@@QAEAAU0@ABU0@@Z
??4JP2KImageDataParms@@QAEAAU0@$$QAU0@@Z
??4JP2KImageDataParms@@QAEAAU0@ABU0@@Z
??4JP2KImageDataProcs@@QAEAAU0@$$QAU0@@Z
??4JP2KImageDataProcs@@QAEAAU0@ABU0@@Z
??4JP2KMemFuncs@@QAEAAU0@$$QAU0@@Z
??4JP2KMemFuncs@@QAEAAU0@ABU0@@Z
??4JP2KMemFuncsEx@@QAEAAU0@$$QAU0@@Z
??4JP2KMemFuncsEx@@QAEAAU0@ABU0@@Z
??4JP2KStreamProcs@@QAEAAU0@$$QAU0@@Z
??4JP2KStreamProcs@@QAEAAU0@ABU0@@Z
??4JP2KStreamProcsEx@@QAEAAU0@$$QAU0@@Z
??4JP2KStreamProcsEx@@QAEAAU0@ABU0@@Z
??4JP2KUserActions@@QAEAAU0@$$QAU0@@Z
??4JP2KUserActions@@QAEAAU0@ABU0@@Z
?ClearErrState@IJP2KException@@QAEXXZ
?Clone@IJP2KException@@QAEXPAV1@@Z
?Die@JP2KCodeStm@@QAEXXZ
?GetCurPos@JP2KCodeStm@@QAE_JXZ
?GetErrString@IJP2KException@@QAEPADXZ
?GetOpenMode@JP2KCodeStm@@QAE?AW4JP2KStmOpenMode@@XZ
?GetStmBase@JP2KCodeStm@@QAEPAXXZ
?GetStmProcs@JP2KCodeStm@@QAEPAUJP2KStreamProcsEx@@XZ
?GetTotalLength@JP2KCodeStm@@QAE_KXZ
?InitJP2KCodeStm@JP2KCodeStm@@QAEH_KHPAXPAUJP2KStreamProcsEx@@W4JP2KStmOpenMode@@H@Z
?IsReadable@JP2KCodeStm@@QAE_NXZ
?IsSeekable@JP2KCodeStm@@QAE_NXZ
?IsWritable@JP2KCodeStm@@QAE_NXZ
?ReadOnly@JP2KCodeStm@@QAE_NXZ
?StmLengthUnknown@JP2KCodeStm@@QAE_NXZ
?TellPos@JP2KCodeStm@@QAE_JXZ
?WriteOnly@JP2KCodeStm@@QAE_NXZ
?flushWriteBuffer@JP2KCodeStm@@QAEHXZ
?read@JP2KCodeStm@@QAEHPAEH@Z
?seek@JP2KCodeStm@@QAE_JH_J@Z
?write@JP2KCodeStm@@QAEHPAEH@Z
CIEParamsAreDefaults
ColorSpecIsJP2Compatibile
InitDefaultCIEParams
JP2KCopyRect
JP2KDecOptCreate
JP2KDecOptDestroy
JP2KDecOptInitToDefaults
JP2KEncOptClone
JP2KEncOptCreate
JP2KEncOptDestroy
JP2KEncOptGetGeomParams
JP2KEncOptInitToDefaults
JP2KEncOptInitToDefaultsUsingImageGeometry
JP2KGetMemObj
JP2KGetMemObjEx
JP2KImageCompletedDecoding
JP2KImageCompressAndWriteTile
JP2KImageCompressImage
JP2KImageCompressTile
JP2KImageCreate
JP2KImageDataCreate
JP2KImageDataDestroy
JP2KImageDataFreeImageBuffer
JP2KImageDataGetHeight
JP2KImageDataGetImageBuffer
JP2KImageDataGetSizeofImageDataType
JP2KImageDataGetWidth
JP2KImageDataInit
JP2KImageDataSetHeight
JP2KImageDataSetImageBuffer
JP2KImageDataSetImageBufferType
JP2KImageDataSetSizeOfImageDataType
JP2KImageDataSetWidth
JP2KImageDecodeImageRegion
JP2KImageDecodeImageWithoutSeeking
JP2KImageDecodeTileInterleaved
JP2KImageDecodeTileInterleavedIncremental
JP2KImageDecodeTilePlanar
JP2KImageDestroy
JP2KImageEncodeImage
JP2KImageEstimatePeakDecodeMemoryRequirement
JP2KImageEstimateSizeofRegionToDecode
JP2KImageFileIsJP2K
JP2KImageFileIsJP2KEx
JP2KImageFindQualityNumbersEmbedded
JP2KImageGeometryComputeTransformedPoint
JP2KImageGeometryComputeTransformedPointUsingOrientations
JP2KImageGeometryComputeTransformedRect
JP2KImageGeometryComputeTransformedRectUsingOrientations
JP2KImageGeometryCopyInit
JP2KImageGeometryCreate
JP2KImageGeometryDestroy
JP2KImageGeometryGetImageResolutionBoundingBox
JP2KImageGeometryGetNumXTiles
JP2KImageGeometryGetNumYTiles
JP2KImageGeometryGetParams
JP2KImageGeometryGetTileBoundingBox
JP2KImageGeometryGetTileCompBoundingBox
JP2KImageGeometryGetTileCompResolutionBoundingBox
JP2KImageGeometryGetTileNum
JP2KImageGeometryGetTileResolutionBoundingBox
JP2KImageGeometryGetTileResolutionBoundingBoxOfRegion
JP2KImageGeometryGetXIndex
JP2KImageGeometryGetYIndex
JP2KImageGeometryInit
JP2KImageGeometryMapCanvasCoordRectToComponentRect
JP2KImageGeometryMapCanvasCoordRectToLowerResComponentRect
JP2KImageGeometryMapRectToLowerRes
JP2KImageGeometryParamsAreInConsistent
JP2KImageGeometryTransformRect
JP2KImageGeometryTransformRectUsingOrientations
JP2KImageGetAlphaChannelCodeStreamSize
JP2KImageGetBitDepths
JP2KImageGetChannelIndex
JP2KImageGetChromaKey
JP2KImageGetClientData
JP2KImageGetCodeStream
JP2KImageGetColorSpecList
JP2KImageGetComponentType
JP2KImageGetDecodeOptions
JP2KImageGetDecodedImage
JP2KImageGetEncodeOptions
JP2KImageGetErrorDetails
JP2KImageGetGMLData
JP2KImageGetGeometryParams
JP2KImageGetGlobalTransparencyChannelNum
JP2KImageGetICCProfile
JP2KImageGetInterleavedColorData
JP2KImageGetMaxCodeStreamLength
JP2KImageGetMaxRes
JP2KImageGetMemObj
JP2KImageGetMemObjEx
JP2KImageGetMinCodeStreamLength
JP2KImageGetNumColorChannels
JP2KImageGetNumComponents
JP2KImageGetNumComponentsDoneInProgPlay
JP2KImageGetNumQualitySteps
JP2KImageGetNumTileComps
JP2KImageGetNumTiles
JP2KImageGetNumUUIDBoxes
JP2KImageGetNumXMLBoxes
JP2KImageGetOrientationForDecode
JP2KImageGetPalette
JP2KImageGetPreviewData
JP2KImageGetPreviewDataOfRegion
JP2KImageGetStreamProcs
JP2KImageGetStreamProcsEx
JP2KImageGetTempFileStream
JP2KImageGetTileComponent
JP2KImageGetTransparencyChannelNum
JP2KImageGetTransparencyCodeStreamSize
JP2KImageGetTransparencyType
JP2KImageGetUUIDBoxes
JP2KImageGetXMLBoxes
JP2KImageGlobalTransparencyChannelPresent
JP2KImageIncrementalDecodingIsEnabled
JP2KImageIncrementalDecodingIsRequired
JP2KImageInitDecoder
JP2KImageInitDecoderEx
JP2KImageInitEncoder
JP2KImageInitEncoderEx
JP2KImageIsGMLDataPresent
JP2KImageNumProgresionStepsInCompressImage
JP2KImageNumProgressionStepsInEncodeImage
JP2KImageOptimizeImage
JP2KImagePalettePresent
JP2KImagePlay
JP2KImagePlayProgression
JP2KImagePlayProgressionStart
JP2KImagePlayProgressionStop
JP2KImageReorderCodeStream
JP2KImageResolutionInfoPresent
JP2KImageRewind
JP2KImageSetAlphaChannelsForPreview
JP2KImageSetOrientationForDecode
JP2KImageSetReplayOptions
JP2KImageSkipDecodingOfAlphaChannels
JP2KImageTransparencyChannelPresent
JP2KImageUUIDPresent
JP2KImageUpdateCodestreamSize
JP2KImageValidate
JP2KImageWriteJPXHeaders
JP2KImageXMLPresent
JP2KImageZoom
JP2KLibBuildDate
JP2KLibInit
JP2KLibInitEx
JP2KLibShutDown
JP2KLibVersion
JP2KTileComponentGetDecOpt
JP2KTileComponentGetDecodeParams
JP2KTileComponentGetEncOpt
JP2KTileComponentGetHeight
JP2KTileComponentGetOutputImage
JP2KTileComponentGetProgData
JP2KTileComponentGetTileGeometryParams
JP2KTileComponentGetWaveletData
JP2KTileComponentGetWidth
JP2KTileComponentReleaseWaveletData
JP2KTileComponentResetTileCompDataIsValid
JP2KTileComponentResetTileCompDataReady
JP2KTileComponentSetDecodeOptions
JP2KTileComponentSetDecodeParams
JP2KTileComponentSetEncodeOptions
JP2KTileComponentSetIsAlphaChannel
JP2KTileComponentSetOutputImage
JP2KTileComponentSetProgData
JP2KTileComponentSetTileCompDataIsValid
JP2KTileComponentSetTileCompDataReady
JP2KTileComponentSetTileGeometryParams
JP2KTileComponentSetWaveletData
JP2KTileComponentTileCompDataIsValid
JP2KTileComponentTileCompDataReady
JP2KTileComponentValidate
JP2KTileGeometryCreate
JP2KTileGeometryDestroy
JP2KTileGeometryGetResolutionCoords
JP2KTileGeometryGetResolutionCoordsofRegion
JP2KTileGeometryInit
JP2KTileGeometryInitUsingTileIndices
JP2KTileGeometryRegionIsTile

Sections

.text
Size: 445KB - Virtual size: 445KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Davinci Resolve 18/x64/LightTheme.acrotheme

Sharing

General

Malware Config

Signatures

Files

Password: 1234

Password: 1234

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 755KB - Virtual size: 754KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: 1234

f13e537fb73ac9fba443d473ab249712

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:eaCertificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

35:ef:92:c6:80:7c:f8:44:0d:51:da:5e:c4:27:3b:43:e8:ed:4c:b6:c3:de:0a:ee:ae:a1:65:69:2a:d1:b5:0cSigner

Signature Validations

Verification

02-03-2022 20:35 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

msi

shlwapi

version

kernel32

user32

advapi32

ole32

Exports

Exports

Sections

.text Size: 534KB - Virtual size: 533KB

.rdata Size: 139KB - Virtual size: 139KB

.data Size: 4KB - Virtual size: 10KB

.pdata Size: 28KB - Virtual size: 27KB

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

Password: 1234

23076d501d734740bd988395f9a2bdc0

Code Sign

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:eaCertificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0Certificate

Extended Key Usages

Key Usages

57:ed:9b:1d:5a:7c:6c:25:f0:62:ac:52:81:e1:d8:0e:6e:a6:30:b0:f6:06:1a:9a:7b:71:a7:b2:9d:04:bf:d0Signer

Signature Validations

Verification

02-08-2022 21:10 Valid: true

.text
Size: 755KB - Virtual size: 754KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

35:ef:92:c6:80:7c:f8:44:0d:51:da:5e:c4:27:3b:43:e8:ed:4c:b6:c3:de:0a:ee:ae:a1:65:69:2a:d1:b5:0c
Signer

02-03-2022 20:35
Valid: true

.text
Size: 534KB - Virtual size: 533KB

.rdata
Size: 139KB - Virtual size: 139KB

.data
Size: 4KB - Virtual size: 10KB

.pdata
Size: 28KB - Virtual size: 27KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

57:ed:9b:1d:5a:7c:6c:25:f0:62:ac:52:81:e1:d8:0e:6e:a6:30:b0:f6:06:1a:9a:7b:71:a7:b2:9d:04:bf:d0
Signer

02-08-2022 21:10
Valid: true

.text
Size: 844KB - Virtual size: 843KB

.rdata
Size: 248KB - Virtual size: 247KB

.data
Size: 7KB - Virtual size: 13KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 46KB - Virtual size: 45KB

01:1f:39:a2:26:1a:99:3d:d1:51:76:da:6f:e4:fb:ea
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

fb:01:b6:07:e2:76:e8:06:db:7b:ca:e5:b2:08:e5:dc:0c:3a:e6:9a:b3:c9:3d:10:61:20:62:42:a0:40:36:db
Signer

02-08-2022 21:10
Valid: true