ppsspp_win[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

ppsspp_win.zip
Size

22.8MB
MD5

57c5ac8fbee0db49d637ab2587fc80b1
SHA1

535b04f36fe0673dea24ade3a709202e5dcc2c19
SHA256

f4401ce34aae6233c0d3a163903ca035700bf3122eef2030dfc4d79b3e58055d
SHA512

b5244035ebafafe28978328e62bb276be12182d9992f5d9b5c7c4d445495c6340b436b3783e04a949be1dcea3ea3adf7bd913f987c8471425d69db4be1f36d76
SSDEEP

393216:OPK6ardELGiw0hSUn1wjAIxVdIIOXp+vBv4IiI1VXNClFthkN1GJywdORU9Xfov4:eqrdWrhj6N1OZ2vDv1wFhywdqyvog

Score

1^/10

Malware Config

Signatures

Files

ppsspp_win.zip
.zip
PPSSPPWindows.exe
.exe windows x86

5e19e39b6db8aaa7f31edb44370b9699

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mfplat

MFShutdown
MFCreateAttributes
MFStartup

shlwapi

ord219

winmm

timeBeginPeriod
timeEndPeriod

dsound

ord11

comctl32

ImageList_Create
ImageList_ReplaceIcon
InitCommonControlsEx

d3d9

Direct3DCreate9

opengl32

glReadPixels
glReadBuffer
glLogicOp
glGetTexLevelParameteriv
glGetTexImage
glGetFloatv
glFrontFace
glDepthRange
glDepthMask
glDepthFunc
glCullFace
glColorMask
glClearStencil
glClearDepth
glTexSubImage2D
glTexParameterf
glStencilOp
glStencilMask
glGetError
glGetIntegerv
glGetString
wglGetCurrentDC
wglGetProcAddress
wglCreateContext
wglDeleteContext
wglMakeCurrent
glBindTexture
glBlendFunc
glClear
glClearColor
glDeleteTextures
glDisable
glDrawElements
glEnable
glGenTextures
glPixelStorei
glScissor
glTexImage2D
glStencilFunc
glTexParameteri
glViewport
glDrawArrays

kernel32

SetEvent
WaitForSingleObject
CreateEventW
SetThreadPriority
OutputDebugStringA
GetConsoleWindow
GetCommandLineW
GetTempPathW
GetExitCodeProcess
GlobalUnlock
GlobalLock
LocalFree
GetLocaleInfoW
GetCurrentDirectoryW
GetModuleFileNameW
GlobalAlloc
GlobalFree
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
CreateFileW
CloseHandle
GlobalAddAtomW
CopyFileW
GetProcessAffinityMask
CreateSemaphoreA
GetModuleHandleA
CreateEventA
ReleaseSemaphore
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
ReadConsoleW
FlushFileBuffers
HeapQueryInformation
HeapSize
HeapReAlloc
GetConsoleMode
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
DuplicateHandle
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
IsDebuggerPresent
GetFileInformationByHandle
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
GetTickCount
LoadLibraryExW
VirtualQuery
DeleteCriticalSection
RtlUnwind
TerminateProcess
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
ResetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetStringTypeW
GetFileInformationByHandleEx
GetTickCount64
SleepConditionVariableCS
SetFileInformationByHandle
LCMapStringEx
DecodePointer
EncodePointer
GetLocaleInfoEx
InitializeCriticalSectionEx
InitOnceComplete
InitOnceBeginInitialize
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryAcquireSRWLockExclusive
GetExitCodeThread
WaitForSingleObjectEx
TlsFree
TlsSetValue
TlsGetValue
GetLastError
ExitProcess
Sleep
GetModuleHandleW
WideCharToMultiByte
LoadLibraryW
GetProcAddress
FreeLibrary
AreFileApisANSI
LeaveCriticalSection
EnterCriticalSection
SetLastError
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
MapViewOfFileEx
GetDiskFreeSpaceExW
MulDiv
GetTempFileNameW
lstrlenW
WaitNamedPipeW
FindFirstFileW
InitializeCriticalSection
PeekNamedPipe
CreateDirectoryW
TlsAlloc
GetFileTime
GetFileSizeEx
GetFileType
GetFileAttributesW
SetFileAttributesW
MoveFileExW
WriteFile
SetEndOfFile
SetFilePointerEx
ReadFile
GetSystemTimeAsFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateMutexW
ReleaseMutex
SetThreadExecutionState
IsWow64Process
GetLogicalProcessorInformation
GetCurrentProcess
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
InitializeSRWLock
FormatMessageA
GetLogicalDriveStringsW
FindNextFileW
FindFirstFileExW
MultiByteToWideChar
CreateThread
FindClose
QueryPerformanceFrequency
QueryPerformanceCounter
FormatMessageW
SetConsoleTitleW
DeleteFileW
SetConsoleWindowInfo
SetConsoleScreenBufferSize
SetConsoleOutputCP
SetConsoleCP
SetConsoleCtrlHandler
WriteConsoleW
FreeConsole
AllocConsole
VirtualFree
VirtualProtect
VirtualAlloc
GetSystemInfo
DebugBreak
VerifyVersionInfoW
GetNativeSystemInfo
VerSetConditionMask
GetCurrentThreadId
GetCurrentThread
RaiseException
SetErrorMode
RemoveDirectoryW
GetLongPathNameW
GetFullPathNameW
GetFileAttributesExW
OutputDebugStringW

user32

GetWindowTextA
SetWindowTextA
MessageBoxA
EnableWindow
DialogBoxParamW
GetWindowTextW
EndDialog
GetDlgItem
FillRect
GetSystemMenu
SendMessageW
MessageBoxW
GetClientRect
SetWindowTextW
DrawTextExW
DefWindowProcW
GetAsyncKeyState
RegisterClipboardFormatA
SetClipboardData
TranslateAcceleratorW
LoadAcceleratorsW
GetClipboardData
DispatchMessageW
TranslateMessage
GetMessageW
GetKeyboardLayout
SetWindowPos
ReleaseDC
LoadImageW
ClipCursor
ShowCursor
AdjustWindowRect
SetMenuInfo
GetSystemMetrics
IsIconic
GetWindowPlacement
ShowOwnedPopups
GetDoubleClickTime
PostQuitMessage
GetMessageExtraInfo
SetParent
IsDialogMessageW
CreateDialogParamW
BringWindowToTop
TrackPopupMenuEx
GetSubMenu
ScreenToClient
SetPropW
RegisterRawInputDevices
GetRawInputData
GetMenuBarInfo
PtInRect
MapVirtualKeyW
SetCursor
GetMenuItemInfoW
RemoveMenu
AppendMenuW
GetMenuItemCount
DrawMenuBar
IsDlgButtonChecked
ClientToScreen
SetMenuDefaultItem
ModifyMenuW
GetDC
TrackMouseEvent
PostMessageW
GetCursorPos
SetMenu
GetMenu
LoadMenuW
EmptyClipboard
CloseClipboard
OpenClipboard
SendMessageA
GetWindowTextLengthW
RedrawWindow
SendDlgItemMessageW
CheckMenuItem
wsprintfW
MapWindowPoints
GetFocus
SetDlgItemTextW
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExW
CallWindowProcW
GetWindowRect
SetCapture
EnableMenuItem
ReleaseCapture
IsWindowVisible
DrawIconEx
DestroyIcon
LoadIconW
LoadCursorW
GetParent
SetWindowLongW
GetWindowLongW
GetSysColorBrush
SetScrollRange
InvalidateRect
EndPaint
BeginPaint
UpdateWindow
KillTimer
SetTimer
SetFocus
RegisterClassExW

gdi32

GetDeviceCaps
GetStockObject
SwapBuffers
SetPixelFormat
ChoosePixelFormat
CreateBrushIndirect
SetBkColor
GetBkColor
TextOutW
TextOutA
MoveToEx
SetTextAlign
SetTextColor
SetBkMode
SelectObject
Rectangle
LineTo
GetTextExtentPoint32W
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateFontW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateDIBSection
GetTextMetricsW
AddFontResourceExW
GetTextFaceW
SetMapMode

comdlg32

GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError

shell32

ShellExecuteW
SHGetFolderPathW
SHBrowseForFolderW
DragQueryFileW
DragAcceptFiles
CommandLineToArgvW
ShellExecuteExW
SHOpenFolderAndSelectItems
SHParseDisplayName
SHGetPathFromIDListW

ole32

CoTaskMemAlloc
CoSetProxyBlanket
CoUninitialize
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoInitializeEx
PropVariantClear

oleaut32

SysFreeString
SysAllocString
VariantInit

ws2_32

shutdown
gethostname
socket
ioctlsocket
WSACleanup
getaddrinfo
freeaddrinfo
inet_ntop
setsockopt
getsockopt
WSAIoctl
inet_pton
WSAAddressToStringW
WSAStartup
__WSAFDIsSet
htonl
getnameinfo
inet_addr
ntohl
htons
select
WSAGetLastError
bind
closesocket
connect
getpeername
getsockname
listen
ntohs
recv
recvfrom
send
sendto
accept

dinput8

DirectInput8Create

version

GetFileVersionInfoW
GetFileVersionInfoSizeA
VerQueryValueW

advapi32

RegSetValueExW
CryptAcquireContextA
GetSecurityInfo
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW

iphlpapi

GetBestInterfaceEx
GetAdaptersAddresses

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

.text
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 190KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 440KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PPSSPPWindows64.exe
.exe windows x64

11e9e6b0a77786b9d02f126baca504d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mfplat

MFShutdown
MFCreateAttributes
MFStartup

shlwapi

ord219

winmm

timeBeginPeriod
timeEndPeriod

dsound

ord11

comctl32

ImageList_Create
ImageList_ReplaceIcon
InitCommonControlsEx

d3d9

Direct3DCreate9

opengl32

glReadPixels
glReadBuffer
glLogicOp
glGetTexLevelParameteriv
glGetTexImage
glGetFloatv
glFrontFace
glDepthRange
glDepthMask
glDepthFunc
glCullFace
glColorMask
glClearStencil
glClearDepth
glStencilFunc
glStencilMask
glTexSubImage2D
glTexParameterf
glGetError
glGetIntegerv
glGetString
wglGetCurrentDC
wglGetProcAddress
wglCreateContext
wglDeleteContext
wglMakeCurrent
glBindTexture
glBlendFunc
glClear
glClearColor
glDeleteTextures
glDisable
glDrawElements
glEnable
glGenTextures
glPixelStorei
glScissor
glTexImage2D
glStencilOp
glTexParameteri
glViewport
glDrawArrays

kernel32

SetEvent
WaitForSingleObject
CreateEventW
SetThreadPriority
OutputDebugStringA
GetConsoleWindow
GetCommandLineW
GetTempPathW
GetExitCodeProcess
GlobalUnlock
GlobalLock
LocalFree
GetLocaleInfoW
GetCurrentDirectoryW
GetModuleFileNameW
GlobalAlloc
GlobalFree
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
CreateFileW
CloseHandle
GlobalAddAtomW
CopyFileW
GetProcessAffinityMask
CreateSemaphoreA
GetModuleHandleA
CreateEventA
ReleaseSemaphore
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
ReadConsoleW
FlushFileBuffers
HeapQueryInformation
HeapSize
HeapReAlloc
GetConsoleMode
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
DuplicateHandle
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
IsDebuggerPresent
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetTickCount
RtlUnwind
SetLastError
DeleteCriticalSection
RtlUnwindEx
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
InitializeSListHead
GetCurrentProcessId
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ResetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetStringTypeW
GetFileInformationByHandleEx
GetTickCount64
SleepConditionVariableCS
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetFileInformationByHandle
LCMapStringEx
DecodePointer
EncodePointer
GetLocaleInfoEx
InitializeCriticalSectionEx
InitOnceComplete
InitOnceBeginInitialize
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryAcquireSRWLockExclusive
GetExitCodeThread
WaitForSingleObjectEx
GetLastError
ExitProcess
Sleep
GetModuleHandleW
WideCharToMultiByte
LoadLibraryW
GetProcAddress
FreeLibrary
AreFileApisANSI
LeaveCriticalSection
EnterCriticalSection
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
MapViewOfFileEx
GetDiskFreeSpaceExW
MulDiv
GetTempFileNameW
lstrlenW
WaitNamedPipeW
FindFirstFileW
InitializeCriticalSection
GetFileInformationByHandle
CreateDirectoryW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileTime
GetFileSizeEx
GetFileType
GetFileAttributesW
SetFileAttributesW
MoveFileExW
WriteFile
SetEndOfFile
SetFilePointerEx
ReadFile
GetSystemTimeAsFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateMutexW
ReleaseMutex
SetThreadExecutionState
GetLogicalProcessorInformation
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
InitializeSRWLock
FormatMessageA
GetLogicalDriveStringsW
FindNextFileW
MultiByteToWideChar
LoadLibraryExW
FindFirstFileExW
FindClose
QueryPerformanceFrequency
QueryPerformanceCounter
FormatMessageW
SetConsoleTitleW
DeleteFileW
SetConsoleWindowInfo
SetConsoleScreenBufferSize
SetConsoleOutputCP
SetConsoleCP
SetConsoleCtrlHandler
WriteConsoleW
FreeConsole
AllocConsole
VirtualQuery
VirtualFree
VirtualProtect
VirtualAlloc
GetSystemInfo
DebugBreak
VerifyVersionInfoW
GetNativeSystemInfo
VerSetConditionMask
GetCurrentThreadId
GetCurrentThread
RaiseException
SetErrorMode
RemoveDirectoryW
GetLongPathNameW
GetFullPathNameW
GetFileAttributesExW
OutputDebugStringW

user32

GetWindowTextA
SetWindowTextA
MessageBoxA
EnableWindow
DialogBoxParamW
GetWindowTextW
EndDialog
GetDlgItem
FillRect
GetSystemMenu
SendMessageW
MessageBoxW
GetClientRect
SetWindowTextW
DrawTextExW
DefWindowProcW
GetAsyncKeyState
RegisterClipboardFormatA
SetClipboardData
TranslateAcceleratorW
LoadAcceleratorsW
GetClipboardData
DispatchMessageW
TranslateMessage
GetMessageW
GetKeyboardLayout
SetWindowPos
ReleaseDC
LoadImageW
ClipCursor
ShowCursor
AdjustWindowRect
SetMenuInfo
GetSystemMetrics
IsIconic
GetWindowPlacement
ShowOwnedPopups
GetDoubleClickTime
PostQuitMessage
GetMessageExtraInfo
SetParent
IsDialogMessageW
CreateDialogParamW
BringWindowToTop
TrackPopupMenuEx
GetSubMenu
ScreenToClient
SetPropW
RegisterRawInputDevices
GetRawInputData
GetMenuBarInfo
PtInRect
MapVirtualKeyW
SetCursor
GetMenuItemInfoW
RemoveMenu
AppendMenuW
GetMenuItemCount
DrawMenuBar
IsDlgButtonChecked
ClientToScreen
SetMenuDefaultItem
ModifyMenuW
GetDC
TrackMouseEvent
PostMessageW
GetCursorPos
SetMenu
GetMenu
LoadMenuW
EmptyClipboard
CloseClipboard
OpenClipboard
SendMessageA
GetWindowTextLengthW
RedrawWindow
SendDlgItemMessageW
CheckMenuItem
wsprintfW
MapWindowPoints
GetFocus
SetDlgItemTextW
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExW
CallWindowProcW
GetWindowRect
SetCapture
EnableMenuItem
ReleaseCapture
IsWindowVisible
DrawIconEx
DestroyIcon
LoadIconW
LoadCursorW
GetParent
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
GetSysColorBrush
SetScrollRange
InvalidateRect
EndPaint
BeginPaint
UpdateWindow
KillTimer
SetTimer
SetFocus
RegisterClassExW

gdi32

GetDeviceCaps
GetStockObject
SwapBuffers
SetPixelFormat
ChoosePixelFormat
CreateBrushIndirect
SetBkColor
GetBkColor
TextOutW
TextOutA
MoveToEx
SetTextAlign
SetTextColor
SetBkMode
SelectObject
Rectangle
LineTo
GetTextExtentPoint32W
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateFontW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateDIBSection
GetTextMetricsW
AddFontResourceExW
GetTextFaceW
SetMapMode

comdlg32

GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError

shell32

ShellExecuteW
SHGetFolderPathW
SHBrowseForFolderW
DragQueryFileW
DragAcceptFiles
CommandLineToArgvW
ShellExecuteExW
SHOpenFolderAndSelectItems
SHParseDisplayName
SHGetPathFromIDListW

ole32

CoTaskMemAlloc
CoSetProxyBlanket
CoUninitialize
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoInitializeEx
PropVariantClear

oleaut32

SysFreeString
SysAllocString
VariantInit

ws2_32

shutdown
gethostname
socket
ioctlsocket
WSACleanup
getaddrinfo
freeaddrinfo
inet_ntop
setsockopt
getsockopt
WSAIoctl
inet_pton
WSAAddressToStringW
WSAStartup
__WSAFDIsSet
htonl
getnameinfo
inet_addr
ntohl
htons
select
WSAGetLastError
accept
closesocket
connect
getpeername
getsockname
listen
ntohs
recv
recvfrom
send
sendto
bind

dinput8

DirectInput8Create

version

GetFileVersionInfoW
GetFileVersionInfoSizeA
VerQueryValueW

advapi32

RegSetValueExW
CryptAcquireContextA
GetSecurityInfo
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW

iphlpapi

GetBestInterfaceEx
GetAdaptersAddresses

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

.text
Size: 10.9MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 279KB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 373KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
README.md
assets/7z.png
.png
assets/Roboto-Condensed.ttf
assets/asciifont_atlas.meta
assets/asciifont_atlas.zim
assets/compat.ini
assets/compatvr.ini
assets/debugger/asset-manifest.json
assets/debugger/favicon.ico
assets/debugger/index.html
assets/debugger/manifest.json
assets/debugger/static/css/main.3eab8a01.css
assets/debugger/static/css/main.3eab8a01.css.map
assets/debugger/static/js/main.fe87e942.js
.js
assets/debugger/static/js/main.fe87e942.js.LICENSE.txt
assets/debugger/static/js/main.fe87e942.js.map
assets/debugger/static/media/logo.94f885ce93dfb6d29a122402a15cccca.svg
assets/flash0/font/jpn0.pgf
assets/flash0/font/kr0.pgf
assets/flash0/font/ltn0.pgf
assets/flash0/font/ltn1.pgf
assets/flash0/font/ltn10.pgf
assets/flash0/font/ltn11.pgf
assets/flash0/font/ltn12.pgf
assets/flash0/font/ltn13.pgf
assets/flash0/font/ltn14.pgf
assets/flash0/font/ltn15.pgf
assets/flash0/font/ltn2.pgf
assets/flash0/font/ltn3.pgf
assets/flash0/font/ltn4.pgf
assets/flash0/font/ltn5.pgf
assets/flash0/font/ltn6.pgf
assets/flash0/font/ltn7.pgf
assets/flash0/font/ltn8.pgf
assets/flash0/font/ltn9.pgf
assets/font_atlas.meta
assets/font_atlas.zim
assets/gamecontrollerdb.txt
assets/knownfuncs.ini
assets/lang/README.md
assets/lang/ar_AE.ini
assets/lang/az_AZ.ini
assets/lang/bg_BG.ini
assets/lang/ca_ES.ini
assets/lang/cz_CZ.ini
assets/lang/da_DK.ini
assets/lang/de_DE.ini
assets/lang/dr_ID.ini
assets/lang/en_US.ini
assets/lang/es_ES.ini
assets/lang/es_LA.ini
assets/lang/fa_IR.ini
assets/lang/fi_FI.ini
assets/lang/fr_FR.ini
assets/lang/gl_ES.ini
assets/lang/gr_EL.ini
assets/lang/he_IL.ini
assets/lang/he_IL_invert.ini
assets/lang/hr_HR.ini
assets/lang/hu_HU.ini
assets/lang/id_ID.ini
assets/lang/it_IT.ini
assets/lang/ja_JP.ini
assets/lang/jv_ID.ini
assets/lang/ko_KR.ini
assets/lang/lo_LA.ini
assets/lang/lt-LT.ini
assets/lang/ms_MY.ini
assets/lang/nl_NL.ini
assets/lang/no_NO.ini
assets/lang/pl_PL.ini
assets/lang/pt_BR.ini
assets/lang/pt_PT.ini
assets/lang/ro_RO.ini
assets/lang/ru_RU.ini
assets/lang/sv_SE.ini
assets/lang/tg_PH.ini
assets/lang/th_TH.ini
assets/lang/tr_TR.ini
assets/lang/uk_UA.ini
assets/lang/vi_VN.ini
assets/lang/zh_CN.ini
assets/lang/zh_TW.ini
assets/langregion.ini
assets/mime/ppsspp.xml
.xml
assets/ppge_atlas.meta
assets/ppge_atlas.zim
assets/rargray.png
.png
assets/sfx_back.wav
assets/sfx_confirm.wav
assets/sfx_select.wav
assets/sfx_toggle_off.wav
assets/sfx_toggle_on.wav
assets/shaders/4xhqglsl.fsh
assets/shaders/4xhqglsl.vsh
assets/shaders/5xBR-lv2.fsh
assets/shaders/5xBR.fsh
assets/shaders/5xBR.vsh
assets/shaders/GaussianDownscale.fsh
assets/shaders/aacolor.fsh
assets/shaders/aacolor.vsh
assets/shaders/bloom.fsh
assets/shaders/cartoon.fsh
assets/shaders/cartoon.vsh
assets/shaders/colorcorrection.fsh
assets/shaders/crt.fsh
assets/shaders/defaultshaders.ini
assets/shaders/fxaa.fsh
assets/shaders/fxaa.vsh
assets/shaders/natural.fsh
assets/shaders/natural.vsh
assets/shaders/naturalA.fsh
assets/shaders/naturalA.vsh
assets/shaders/persistence.fsh
assets/shaders/psp_color.fsh
assets/shaders/scanlines.fsh
assets/shaders/sharpen.fsh
assets/shaders/stereo_red_blue.fsh
assets/shaders/stereo_sbs.fsh
assets/shaders/tex_2xbrz.csh
assets/shaders/tex_4xbrz.csh
assets/shaders/tex_mmpx.csh
assets/shaders/upscale_catmull_rom.fsh
assets/shaders/upscale_catmull_rom.vsh
assets/shaders/upscale_mitchell_netravali.fsh
assets/shaders/upscale_mitchell_netravali.vsh
assets/shaders/upscale_spline36.fsh
assets/shaders/upscale_spline36.vsh
assets/shaders/videoAA.fsh
assets/shaders/vignette.fsh
assets/themes/defaultthemes.ini
assets/ui_atlas.meta
assets/ui_atlas.zim
assets/unknown.png
.png
assets/zip.png
.png
d3dcompiler_47.dll
.dll windows x64

2ce80dc262aecd9b9f45ee13d6b30c08

Code Sign

33:00:00:00:34:24:31:40:c9:a0:c1:79:8d:00:00:00:00:00:34
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27/03/2013, 20:08

Not After

27/06/2014, 20:08

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/01/2013, 22:33

Not After

24/04/2014, 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:16:11:04:b4:88:38:8c:be:c3:00:00:00:00:00:16
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30/08/2012, 17:49

Not After

30/11/2013, 17:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ab:03:c2:89:51:77:ec:8e:32:be:09:f8:2b:0a:85:88:db:5f:d4:2a:86:a6:ad:00:10:29:d8:39:4f:b2:07
Signer

Actual PE Digest

08:ab:03:c2:89:51:77:ec:8e:32:be:09:f8:2b:0a:85:88:db:5f:d4:2a:86:a6:ad:00:10:29:d8:39:4f:b2:07

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

09/03/2023, 19:02
Valid: false

31:17:9e:ab:c5:82:ed:f0:dc:03:42:34:e2:18:08:28:16:db:fd:78
Signer

Actual PE Digest

31:17:9e:ab:c5:82:ed:f0:dc:03:42:34:e2:18:08:28:16:db:fd:78

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

22/08/2013, 12:18
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

__dllonexit
_unlock
_lock
?terminate@@YAXXZ
??1type_info@@UEAA@XZ
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
_strtoui64
sscanf
_isnan
strtoul
_vsnprintf
isxdigit
atof
setlocale
_strdup
_mbstrlen
_vsnwprintf
strnlen
modf
strrchr
strncpy_s
memcpy_s
isalnum
_finite
_clearfp
_controlfp
strcpy_s
malloc
_strnicmp
_fpclass
strncmp
isspace
strstr
strchr
free
sprintf_s
_stricmp
_purecall
memmove
qsort
isalpha
toupper
atoi
isdigit
_onexit
??2@YAPEAX_K@Z
getenv
??3@YAXPEAX@Z
wcsncmp
wcsncpy_s
_wcsicmp
memcpy
memset
fclose
strcat_s
bsearch
_CxxThrowException
memcmp
_snwprintf_s
wcschr
iswdigit
__unDName
fread
fseek
_wfsopen
vsprintf_s
wcstol
_wcsnicmp
_wsplitpath_s
towlower
wcscpy_s
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
swprintf_s
wcsncat_s
wcsrchr
_wfullpath
_wmakepath_s
_time64
_chsize
_close
_read
_write
_lseeki64
_get_osfhandle
_open_osfhandle
_wcsdup
wcscat_s
ftell
_mbscmp
_memicmp
_wgetenv
tolower
_wsopen
__CxxFrameHandler3
acos
asin
atan
atan2
ceil
cos
cosh
exp
floor
floorf
fmod
log
pow
sin
sinh
sqrt
strcmp
tan
tanh

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegOpenKeyExW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW

kernel32

LocalFree
LocalAlloc
GetVersion
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetLastError
CreateFileMappingW
UnmapViewOfFile
GetFileSize
CreateFileA
GetSystemInfo
VirtualAlloc
VirtualFree
GetProcAddress
LoadLibraryExW
GetEnvironmentVariableA
GetFullPathNameA
GetFullPathNameW
TlsFree
TlsGetValue
TlsSetValue
TlsAlloc
Sleep
LCMapStringW
GetFileAttributesW
SetFileAttributesW
CopyFileExW
DeleteFileW
GetFileType
DeviceIoControl
ExpandEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
SetFilePointer
FlushViewOfFile
MapViewOfFileEx
GetModuleFileNameA
MapViewOfFile
DisableThreadLibraryCalls
CreateFileW
GetLastError
GetFileSizeEx
ReadFile
CloseHandle
WriteFile
WideCharToMultiByte
FreeLibrary
lstrcmpiA
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
HeapCreate
HeapDestroy
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetProcessHeap
HeapFree

rpcrt4

UuidCreate

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dcompiler_47.x86.dll
.dll windows x86

f63cad154afed6da772d0ab361f448f6

Code Sign

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/09/2012, 21:12

Not After

04/12/2013, 21:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/01/2013, 22:33

Not After

24/04/2014, 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:16:11:04:b4:88:38:8c:be:c3:00:00:00:00:00:16
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30/08/2012, 17:49

Not After

30/11/2013, 17:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ab:69:30:eb:d8:d5:6c:83:dd:de:d2:5c:78:4a:69:da:61:fc:c5:96:29:e5:ab:ad:9d:48:a5:e2:d1:66:17:bb
Signer

Actual PE Digest

ab:69:30:eb:d8:d5:6c:83:dd:de:d2:5c:78:4a:69:da:61:fc:c5:96:29:e5:ab:ad:9d:48:a5:e2:d1:66:17:bb

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

09/03/2023, 19:02
Valid: false

69:26:3d:60:06:7a:72:dd:e2:38:44:52:38:d1:d7:f8:7e:61:16:0d
Signer

Actual PE Digest

69:26:3d:60:06:7a:72:dd:e2:38:44:52:38:d1:d7:f8:7e:61:16:0d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

22/08/2013, 05:04
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_amsg_exit
_XcptFilter
_strtoui64
sscanf
_isnan
_vsnprintf
strtoul
isxdigit
atof
setlocale
_strdup
_mbstrlen
_vsnwprintf
strnlen
ceil
modf
strrchr
strncpy_s
memcpy_s
isalnum
_finite
_clearfp
_controlfp
strcpy_s
malloc
_strnicmp
_fpclass
strncmp
isspace
strstr
strchr
free
sprintf_s
_stricmp
_purecall
memmove
qsort
isalpha
toupper
atoi
_except_handler4_common
tolower
??2@YAPAXI@Z
getenv
??3@YAXPAX@Z
wcsncmp
wcsncpy_s
_wcsicmp
memcpy
memset
fclose
strcat_s
bsearch
_CxxThrowException
_snwprintf_s
wcschr
iswdigit
__unDName
fread
fseek
_wfsopen
vsprintf_s
wcstol
_wcsnicmp
_wsplitpath_s
towlower
wcscpy_s
??_U@YAPAXI@Z
??_V@YAXPAX@Z
swprintf_s
wcsncat_s
wcsrchr
_wmakepath_s
time
_wfullpath
_wcsdup
_wgetenv
_chsize
_close
_read
_write
_lseeki64
_get_osfhandle
_open_osfhandle
wcscat_s
ftell
_mbscmp
_memicmp
isdigit
_wsopen
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
__CxxFrameHandler3
_ftol2
_ftol2_sse
floor

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegOpenKeyExW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW

kernel32

SetLastError
LocalFree
LocalAlloc
GetVersion
InterlockedDecrement
InterlockedIncrement
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
GetFileSize
GetSystemInfo
VirtualAlloc
VirtualFree
GetProcAddress
LoadLibraryExW
GetEnvironmentVariableA
GetFullPathNameA
GetFullPathNameW
TlsFree
TlsGetValue
TlsSetValue
TlsAlloc
Sleep
HeapFree
GetFileAttributesW
SetFileAttributesW
CopyFileExW
DeleteFileW
GetFileType
DeviceIoControl
ExpandEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
SetFilePointer
FlushViewOfFile
MapViewOfFileEx
GetModuleFileNameA
CreateFileA
DisableThreadLibraryCalls
CreateFileW
GetLastError
GetFileSizeEx
ReadFile
CloseHandle
WriteFile
WideCharToMultiByte
FreeLibrary
lstrcmpiA
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
HeapCreate
HeapDestroy
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetProcessHeap

rpcrt4

UuidCreate

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e19e39b6db8aaa7f31edb44370b9699

Headers

DLL Characteristics

File Characteristics

Imports

mfplat

shlwapi

winmm

dsound

comctl32

d3d9

opengl32

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

ws2_32

dinput8

version

advapi32

iphlpapi

Exports

Exports

Sections

.text Size: 8.9MB - Virtual size: 8.9MB

.rdata Size: 2.0MB - Virtual size: 2.0MB

.data Size: 190KB - Virtual size: 3.3MB

.rodata Size: 4KB - Virtual size: 3KB

_RDATA Size: 188KB - Virtual size: 188KB

.rsrc Size: 132KB - Virtual size: 131KB

.reloc Size: 440KB - Virtual size: 439KB

11e9e6b0a77786b9d02f126baca504d5

Headers

DLL Characteristics

File Characteristics

Imports

mfplat

shlwapi

winmm

dsound

comctl32

d3d9

opengl32

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

ws2_32

dinput8

version

advapi32

iphlpapi

Exports

Exports

Sections

.text Size: 10.9MB - Virtual size: 10.9MB

.rdata Size: 2.7MB - Virtual size: 2.7MB

.data Size: 279KB - Virtual size: 3.5MB

.pdata Size: 373KB - Virtual size: 372KB

.rodata Size: 3KB - Virtual size: 3KB

_RDATA Size: 197KB - Virtual size: 197KB

.rsrc Size: 132KB - Virtual size: 131KB

.reloc Size: 79KB - Virtual size: 78KB

2ce80dc262aecd9b9f45ee13d6b30c08

Code Sign

33:00:00:00:34:24:31:40:c9:a0:c1:79:8d:00:00:00:00:00:34Certificate

Extended Key Usages

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0Certificate

Extended Key Usages

.text
Size: 8.9MB - Virtual size: 8.9MB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 190KB - Virtual size: 3.3MB

.rodata
Size: 4KB - Virtual size: 3KB

_RDATA
Size: 188KB - Virtual size: 188KB

.rsrc
Size: 132KB - Virtual size: 131KB

.reloc
Size: 440KB - Virtual size: 439KB

.text
Size: 10.9MB - Virtual size: 10.9MB

.rdata
Size: 2.7MB - Virtual size: 2.7MB

.data
Size: 279KB - Virtual size: 3.5MB

.pdata
Size: 373KB - Virtual size: 372KB

.rodata
Size: 3KB - Virtual size: 3KB

_RDATA
Size: 197KB - Virtual size: 197KB

.rsrc
Size: 132KB - Virtual size: 131KB

.reloc
Size: 79KB - Virtual size: 78KB

33:00:00:00:34:24:31:40:c9:a0:c1:79:8d:00:00:00:00:00:34
Certificate

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:16:11:04:b4:88:38:8c:be:c3:00:00:00:00:00:16
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

08:ab:03:c2:89:51:77:ec:8e:32:be:09:f8:2b:0a:85:88:db:5f:d4:2a:86:a6:ad:00:10:29:d8:39:4f:b2:07
Signer

09/03/2023, 19:02
Valid: false

31:17:9e:ab:c5:82:ed:f0:dc:03:42:34:e2:18:08:28:16:db:fd:78
Signer

22/08/2013, 12:18
Valid: false

.text
Size: 3.7MB - Virtual size: 3.7MB

.data
Size: 35KB - Virtual size: 69KB

.pdata
Size: 117KB - Virtual size: 116KB

.idata
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 68KB - Virtual size: 68KB

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Certificate

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:16:11:04:b4:88:38:8c:be:c3:00:00:00:00:00:16
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

ab:69:30:eb:d8:d5:6c:83:dd:de:d2:5c:78:4a:69:da:61:fc:c5:96:29:e5:ab:ad:9d:48:a5:e2:d1:66:17:bb
Signer

09/03/2023, 19:02
Valid: false

69:26:3d:60:06:7a:72:dd:e2:38:44:52:38:d1:d7:f8:7e:61:16:0d
Signer

22/08/2013, 05:04
Valid: false

.text
Size: 3.1MB - Virtual size: 3.1MB

.data
Size: 23KB - Virtual size: 55KB