igfx_win_101[.]1191[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

igfx_win_101.1191.zip
Size

555.9MB
MD5

a6b0742d0216ec3bbb60deeaeebbd131
SHA1

4886dc602e44be2c0f27416b8b0fd665483f1a06
SHA256

5e89f146dc4e1d3ba9bdd13e01c3a19d9933ce02ede5360540afcdafd4f2c4bc
SHA512

19e0cd436b6991b5799dbb7873090f8aa88450584aafac331ed30cb87b1f58685e289f4dd11065a44b8b8c4a85522df195a2548f9be999aa97bb4857c84bb9ff
SSDEEP

12582912:5XCz5ZZpgjLP6tvLTeY1QEZebVzolZL/aKYOEaxs426DtkyciKpiXVkF+oO3FOHL:kVZoH6t/r1vZepojL/aKJZ1dVK9QM

Score

3^/10

Malware Config

Signatures

Unsigned PE 66 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Graphics/ControlLib.dll
unpack001/Graphics/DisplayAudio/10.26/IntcDAud.sys
unpack001/Graphics/DisplayAudio/10.27/IntcDAud.sys
unpack001/Graphics/DisplayAudio/11.1/IntcDAud.sys
unpack001/Graphics/DisplayAudio/11.2/IntcDAud.sys
unpack001/Graphics/DnnlPlugin.dll
unpack001/Graphics/GSCAuxDriverx64.sys
unpack001/Graphics/GfxDownloadWrapper.exe
unpack001/Graphics/IntelCpHDCPSvc.exe
unpack001/Graphics/IntelCpHeciSvc.exe
unpack001/Graphics/IntelGraphicsAGS.exe
unpack001/Graphics/iga32.dll
unpack001/Graphics/iga64.dll
unpack001/Graphics/igc32.dll
unpack001/Graphics/igc64.dll
unpack001/Graphics/igd10iumd32.dll
unpack001/Graphics/igd10iumd64.dll
unpack001/Graphics/igd11dxva32.dll
unpack001/Graphics/igd11dxva64.dll
unpack001/Graphics/igd12dxva32.dll
unpack001/Graphics/igd12dxva64.dll
unpack001/Graphics/igd12um32icl.dll
unpack001/Graphics/igd12um32ldr.dll
unpack001/Graphics/igd12um32xel.dll
unpack001/Graphics/igd12um64icl.dll
unpack001/Graphics/igd12um64ldr.dll
unpack001/Graphics/igd12um64xel.dll
unpack001/Graphics/igd12umd32.dll
unpack001/Graphics/igd12umd64.dll
unpack001/Graphics/igd9dxva32.dll
unpack001/Graphics/igd9dxva64.dll
unpack001/Graphics/igdde32.dll
unpack001/Graphics/igdde64.dll
unpack001/Graphics/igdext32.dll
unpack001/Graphics/igdext64.dll
unpack001/Graphics/igdfcl64.dll
unpack001/Graphics/igdgmm32.dll
unpack001/Graphics/igdgmm64.dll
unpack001/Graphics/igdinfo32.dll
unpack001/Graphics/igdinfo64.dll
unpack001/Graphics/igdkmd64.sys
unpack001/Graphics/igdkmdn64.sys
unpack001/Graphics/igdkmdnd64.sys
unpack001/Graphics/igdmd32.dll
unpack001/Graphics/igdmd64.dll
unpack001/Graphics/igdml32.dll
unpack001/Graphics/igdml64.dll
unpack001/Graphics/igdumdim32.dll
unpack001/Graphics/igdumdim64.dll
unpack001/Graphics/igfx11cmrt32.dll
unpack001/Graphics/igfx11cmrt64.dll
unpack001/Graphics/igfxCUIService.exe
unpack001/Graphics/igfxCUIServiceN.exe
unpack001/Graphics/igfxEM.exe
unpack001/Graphics/igfxEMN.exe
unpack001/Graphics/igfxSDK.exe
unpack001/Graphics/igfxcmrt32.dll
unpack001/Graphics/igfxcmrt64.dll
unpack001/Graphics/igfxexps.dll
unpack001/Graphics/igfxext.exe
unpack001/Graphics/igfxextN.exe
unpack001/Graphics/igsc.dll
unpack001/Graphics/igvk32.dll
unpack001/Graphics/igvk64.dll
unpack001/Graphics/intel_gfx_api-x64.dll
unpack001/Graphics/intel_gfx_api-x86.dll

Files

igfx_win_101.1191.zip
.zip
Graphics/AGS.dll
.dll windows x86

Password: infected

dae02f32a21e03ce65412f6e56942daa

Code Sign

75:88:9c:92:04:d0:5f:66:02:e0:b5:36:d2:e9:ab:03
Certificate

Issuer

CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB

Not Before

19/08/2021, 00:00

Not After

19/08/2022, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Folsom,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:db
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

25/05/2021, 00:00

Not After

24/05/2036, 23:59

Subject

CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f4:41:37:2d:69:63:9a:cf:ca:ba:33:20:60:a0:13:51:61:2b:f7:fd:32:4e:fd:8a:79:07:e7:48:8e:d3:19:f9
Signer

Actual PE Digest

f4:41:37:2d:69:63:9a:cf:ca:ba:33:20:60:a0:13:51:61:2b:f7:fd:32:4e:fd:8a:79:07:e7:48:8e:d3:19:f9

Digest Algorithm

sha256

PE Digest Matches

true

f4:41:37:2d:69:63:9a:cf:ca:ba:33:20:60:a0:13:51:61:2b:f7:fd:32:4e:fd:8a:79:07:e7:48:8e:d3:19:f9
Signer

Actual PE Digest

f4:41:37:2d:69:63:9a:cf:ca:ba:33:20:60:a0:13:51:61:2b:f7:fd:32:4e:fd:8a:79:07:e7:48:8e:d3:19:f9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/AGSOfflinePackage.zip
.zip

Password: infected
AGSOfflinePackage/AGS.igdb
AGSOfflinePackage/Detector/Detector.dll
.dll windows x86

Password: infected

dae02f32a21e03ce65412f6e56942daa

Code Sign

75:88:9c:92:04:d0:5f:66:02:e0:b5:36:d2:e9:ab:03
Certificate

Issuer

CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB

Not Before

19/08/2021, 00:00

Not After

19/08/2022, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Folsom,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:db
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

25/05/2021, 00:00

Not After

24/05/2036, 23:59

Subject

CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7a:32:e2:93:0d:c8:3c:72:87:94:7c:91:0c:6c:78:d4:50:da:28:46:6f:8b:e9:60:57:db:c3:c9:dc:c4:3f:8b
Signer

Actual PE Digest

7a:32:e2:93:0d:c8:3c:72:87:94:7c:91:0c:6c:78:d4:50:da:28:46:6f:8b:e9:60:57:db:c3:c9:dc:c4:3f:8b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AGSOfflinePackage/Libs/AGS.Core.dll
.dll windows x86

Password: infected

dae02f32a21e03ce65412f6e56942daa

Code Sign

75:88:9c:92:04:d0:5f:66:02:e0:b5:36:d2:e9:ab:03
Certificate

Issuer

CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB

Not Before

19/08/2021, 00:00

Not After

19/08/2022, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Folsom,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:db
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

25/05/2021, 00:00

Not After

24/05/2036, 23:59

Subject

CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

18:d6:36:81:d0:4e:6d:bc:21:e3:34:48:01:55:47:8f:59:c9:95:14:3a:38:df:d7:27:f8:80:4b:54:cd:4e:1a
Signer

Actual PE Digest

18:d6:36:81:d0:4e:6d:bc:21:e3:34:48:01:55:47:8f:59:c9:95:14:3a:38:df:d7:27:f8:80:4b:54:cd:4e:1a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AGSOfflinePackage/Libs/AGSRunner.bin
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

75:88:9c:92:04:d0:5f:66:02:e0:b5:36:d2:e9:ab:03
Certificate

Issuer

CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB

Not Before

19/08/2021, 00:00

Not After

19/08/2022, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Folsom,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:db
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

25/05/2021, 00:00

Not After

24/05/2036, 23:59

Subject

CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:22:bf:89:95:ac:59:18:8e:98:bc:45:97:e3:33:ac:22:6b:15:e2:9b:32:55:11:ad:5d:b7:6d:01:ad:62:25
Signer

Actual PE Digest

03:22:bf:89:95:ac:59:18:8e:98:bc:45:97:e3:33:ac:22:6b:15:e2:9b:32:55:11:ad:5d:b7:6d:01:ad:62:25

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AGSOfflinePackage/Libs/LiteDB.dll
.dll windows x86

Password: infected

dae02f32a21e03ce65412f6e56942daa

Code Sign

75:88:9c:92:04:d0:5f:66:02:e0:b5:36:d2:e9:ab:03
Certificate

Issuer

CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB

Not Before

19/08/2021, 00:00

Not After

19/08/2022, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Folsom,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:db
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

25/05/2021, 00:00

Not After

24/05/2036, 23:59

Subject

CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

25:ab:75:8d:9b:43:33:47:57:f0:df:54:37:b6:6e:ce:b0:fa:44:6f:99:03:5e:1a:6a:22:bc:9d:09:8e:c7:ff
Signer

Actual PE Digest

25:ab:75:8d:9b:43:33:47:57:f0:df:54:37:b6:6e:ce:b0:fa:44:6f:99:03:5e:1a:6a:22:bc:9d:09:8e:c7:ff

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 345KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AGSOfflinePackage/Libs/Newtonsoft.Json.dll
.dll windows x86

Password: infected

dae02f32a21e03ce65412f6e56942daa

Code Sign

75:88:9c:92:04:d0:5f:66:02:e0:b5:36:d2:e9:ab:03
Certificate

Issuer

CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB

Not Before

19/08/2021, 00:00

Not After

19/08/2022, 23:59

Subject

CN=Intel Corporation,O=Intel Corporation,L=Folsom,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:db
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

25/05/2021, 00:00

Not After

24/05/2036, 23:59

Subject

CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a7:cc:fe:41:40:99:65:07:53:c6:c7:f4:1c:e3:22:5f:f1:9e:7a:db:83:aa:c0:1c:bd:9b:44:a1:54:ff:58:a1
Signer

Actual PE Digest

a7:cc:fe:41:40:99:65:07:53:c6:c7:f4:1c:e3:22:5f:f1:9e:7a:db:83:aa:c0:1c:bd:9b:44:a1:54:ff:58:a1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 649KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/ColorImageEnhancement.wmv
Graphics/ControlLib.dll
.dll windows x64

Password: infected

452af74b3ae0f825d196ccd43b4248a4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

setupapi

SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList

dxgi

CreateDXGIFactory1

shell32

ord680

kernel32

ReadFile
CreateFileW
OutputDebugStringA
GetModuleFileNameA
WideCharToMultiByte
ReadConsoleW
GetCurrentApplicationUserModelId
CreateDirectoryA
FindClose
FindFirstFileW
FindNextFileW
GetLastError
SetStdHandle
FlushFileBuffers
GetStringTypeW
CloseHandle
SetLastError
SetEvent
HeapSize
WaitForMultipleObjectsEx
CreateEventW
OpenEventW
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
FreeLibrary
GetProcAddress
LoadLibraryW
GetProcessHeap
GetVersion
GetModuleHandleA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapReAlloc
GetCommandLineA
GetCPInfo
GetOEMCP
SetEndOfFile
WriteConsoleW
ResetEvent
InitOnceBeginInitialize
InitOnceComplete
QueryPerformanceCounter
QueryPerformanceFrequency
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
GetStdHandle
GetFileType
MultiByteToWideChar
SetEnvironmentVariableW
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
DeleteFileW
FindFirstFileExW
IsValidCodePage
GetACP

advapi32

RegGetValueW

user32

GetDisplayConfigBufferSizes
SetDisplayConfig
QueryDisplayConfig
wsprintfW

ntdll

RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
RtlInitAnsiString

gdi32

D3DKMTQueryAdapterInfo
D3DKMTOpenAdapterFromDeviceName
D3DKMTCloseAdapter
D3DKMTEscape

Exports

Exports

ctlAUXAccess
ctlCheckDriverVersion
ctlClose
ctlEngineGetActivity
ctlEngineGetProperties
ctlEnumEngineGroups
ctlEnumFans
ctlEnumFrequencyDomains
ctlEnumMemoryModules
ctlEnumPowerDomains
ctlEnumTemperatureSensors
ctlEnumerateDevices
ctlEnumerateDisplayOutputs
ctlFanGetConfig
ctlFanGetProperties
ctlFanGetState
ctlFanSetDefaultMode
ctlFanSetFixedSpeedMode
ctlFanSetSpeedTableMode
ctlFrequencyGetAvailableClocks
ctlFrequencyGetProperties
ctlFrequencyGetRange
ctlFrequencyGetState
ctlFrequencyGetThrottleTime
ctlFrequencySetRange
ctlGetAdaperDisplayEncoderProperties
ctlGetCurrentScaling
ctlGetCurrentSharpness
ctlGetDeviceProperties
ctlGetDisplayProperties
ctlGetPowerOptimizationCaps
ctlGetPowerOptimizationSetting
ctlGetSet3DFeature
ctlGetSetRetroScaling
ctlGetSetVideoProcessingFeature
ctlGetSharpnessCaps
ctlGetSupported3DCapabilities
ctlGetSupportedRetroScalingCapability
ctlGetSupportedScalingCapability
ctlGetSupportedVideoProcessingCapabilities
ctlGetZeDevice
ctlI2CAccess
ctlInit
ctlMemoryGetBandwidth
ctlMemoryGetProperties
ctlMemoryGetState
ctlOverclockGetProperties
ctlOverclockGpuFrequencyOffsetGet
ctlOverclockGpuFrequencyOffsetSet
ctlOverclockGpuLockGet
ctlOverclockGpuLockSet
ctlOverclockGpuVoltageOffsetGet
ctlOverclockGpuVoltageOffsetSet
ctlOverclockPowerLimitGet
ctlOverclockPowerLimitSet
ctlOverclockTemperatureLimitGet
ctlOverclockTemperatureLimitSet
ctlOverclockVramFrequencyOffsetGet
ctlOverclockVramFrequencyOffsetSet
ctlOverclockVramVoltageOffsetGet
ctlOverclockVramVoltageOffsetSet
ctlOverclockWaiverSet
ctlPanelDescriptorAccess
ctlPciGetProperties
ctlPciGetState
ctlPixelTransformationGetConfig
ctlPixelTransformationSetConfig
ctlPowerGetEnergyCounter
ctlPowerGetLimits
ctlPowerGetProperties
ctlPowerSetLimits
ctlPowerTelemetryGet
ctlReservedCall
ctlSetCurrentScaling
ctlSetCurrentSharpness
ctlSetPowerOptimizationSetting
ctlTemperatureGetProperties
ctlTemperatureGetState
ctlWaitForPropertyChange

Sections

.text
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/ControlLib32.dll
.dll windows x86

9e22d483279fd961529b9dd963ff748a

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

72:89:75:27:2d:30:cd:8b:3a:e8:fc:8a:b9:81:22:1d:73:de:ab:e9:dc:a0:81:6c:3a:cf:2a:d8:bb:f9:5e:93
Signer

Actual PE Digest

72:89:75:27:2d:30:cd:8b:3a:e8:fc:8a:b9:81:22:1d:73:de:ab:e9:dc:a0:81:6c:3a:cf:2a:d8:bb:f9:5e:93

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList

dxgi

CreateDXGIFactory1

shell32

ord680

kernel32

CreateFileW
SetStdHandle
OutputDebugStringA
GetModuleFileNameA
WideCharToMultiByte
ReadFile
GetCurrentApplicationUserModelId
CreateDirectoryA
FindClose
FindFirstFileW
FindNextFileW
GetLastError
FlushFileBuffers
GetStringTypeW
GetProcessHeap
CloseHandle
SetLastError
SetEvent
ReadConsoleW
WaitForMultipleObjectsEx
CreateEventW
OpenEventW
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
FreeLibrary
GetProcAddress
LoadLibraryW
FreeEnvironmentStringsW
GetVersion
GetModuleHandleA
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
HeapSize
GetCPInfo
GetOEMCP
GetACP
HeapReAlloc
SetEndOfFile
WriteConsoleW
ResetEvent
InitOnceBeginInitialize
InitOnceComplete
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
InterlockedFlushSList
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
GetStdHandle
GetFileType
MultiByteToWideChar
SetEnvironmentVariableW
DecodePointer
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
DeleteFileW
FindFirstFileExW
IsValidCodePage

advapi32

RegGetValueW

user32

GetDisplayConfigBufferSizes
SetDisplayConfig
QueryDisplayConfig
wsprintfW

ntdll

RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
RtlInitAnsiString

gdi32

D3DKMTQueryAdapterInfo
D3DKMTOpenAdapterFromDeviceName
D3DKMTCloseAdapter
D3DKMTEscape

Exports

Exports

ctlAUXAccess
ctlCheckDriverVersion
ctlClose
ctlEngineGetActivity
ctlEngineGetProperties
ctlEnumEngineGroups
ctlEnumFans
ctlEnumFrequencyDomains
ctlEnumMemoryModules
ctlEnumPowerDomains
ctlEnumTemperatureSensors
ctlEnumerateDevices
ctlEnumerateDisplayOutputs
ctlFanGetConfig
ctlFanGetProperties
ctlFanGetState
ctlFanSetDefaultMode
ctlFanSetFixedSpeedMode
ctlFanSetSpeedTableMode
ctlFrequencyGetAvailableClocks
ctlFrequencyGetProperties
ctlFrequencyGetRange
ctlFrequencyGetState
ctlFrequencyGetThrottleTime
ctlFrequencySetRange
ctlGetAdaperDisplayEncoderProperties
ctlGetCurrentScaling
ctlGetCurrentSharpness
ctlGetDeviceProperties
ctlGetDisplayProperties
ctlGetPowerOptimizationCaps
ctlGetPowerOptimizationSetting
ctlGetSet3DFeature
ctlGetSetRetroScaling
ctlGetSetVideoProcessingFeature
ctlGetSharpnessCaps
ctlGetSupported3DCapabilities
ctlGetSupportedRetroScalingCapability
ctlGetSupportedScalingCapability
ctlGetSupportedVideoProcessingCapabilities
ctlGetZeDevice
ctlI2CAccess
ctlInit
ctlMemoryGetBandwidth
ctlMemoryGetProperties
ctlMemoryGetState
ctlOverclockGetProperties
ctlOverclockGpuFrequencyOffsetGet
ctlOverclockGpuFrequencyOffsetSet
ctlOverclockGpuLockGet
ctlOverclockGpuLockSet
ctlOverclockGpuVoltageOffsetGet
ctlOverclockGpuVoltageOffsetSet
ctlOverclockPowerLimitGet
ctlOverclockPowerLimitSet
ctlOverclockTemperatureLimitGet
ctlOverclockTemperatureLimitSet
ctlOverclockVramFrequencyOffsetGet
ctlOverclockVramFrequencyOffsetSet
ctlOverclockVramVoltageOffsetGet
ctlOverclockVramVoltageOffsetSet
ctlOverclockWaiverSet
ctlPanelDescriptorAccess
ctlPciGetProperties
ctlPciGetState
ctlPixelTransformationGetConfig
ctlPixelTransformationSetConfig
ctlPowerGetEnergyCounter
ctlPowerGetLimits
ctlPowerGetProperties
ctlPowerSetLimits
ctlPowerTelemetryGet
ctlReservedCall
ctlSetCurrentScaling
ctlSetCurrentSharpness
ctlSetPowerOptimizationSetting
ctlTemperatureGetProperties
ctlTemperatureGetState
ctlWaitForPropertyChange

Sections

.text
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/DisplayAudio/10.26/IntcDAud.inf
Graphics/DisplayAudio/10.26/IntcDAud.sys
.exe windows x64

0d6293848546352e38beafab7756190c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeClearEvent
KeSetEvent
KeInitializeSemaphore
KeReleaseSemaphore
KeWaitForSingleObject
IoBuildSynchronousFsdRequest
IofCallDriver
IoGetDeviceObjectPointer
IoAllocateWorkItem
IoFreeWorkItem
IoQueueWorkItem
IoRegisterPlugPlayNotification
IoUnregisterPlugPlayNotification
IoUnregisterPlugPlayNotificationEx
ObfReferenceObject
ObfDereferenceObject
RtlInitUnicodeString
ExCreateCallback
ExRegisterCallback
ExUnregisterCallback
ExNotifyCallback
RtlIntegerToUnicodeString
RtlUnicodeStringToInteger
RtlCompareUnicodeString
swscanf_s
KeWaitForMultipleObjects
PsCreateSystemThread
ObReferenceObjectByHandle
ZwClose
MmGetSystemRoutineAddress
RtlGetVersion
ExAllocatePoolWithTag
KeInitializeEvent
IoSetCompletionRoutineEx
IoWMIRegistrationControl
EtwRegister
EtwUnregister
EtwWriteTransfer
PoCallDriver
IoGetLowerDeviceObject
RtlFreeUnicodeString
IoCancelIrp
IofCompleteRequest
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
KeDelayExecutionThread
KeQueryTimeIncrement
PsTerminateSystemThread
RtlIsNtDdiVersionAvailable
PoRequestPowerIrp
IoAllocateIrp
IoFreeIrp
RtlCopyUnicodeString
IoSetDeviceInterfacePropertyData
ExFreePool
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
MmAllocatePagesForMdlEx
MmFreePagesFromMdl
RtlAnsiCharToUnicodeChar
RtlEqualUnicodeString
ExFreePoolWithTag
_purecall
RtlUnicodeToMultiByteN

hal

KeStallExecutionProcessor
KeQueryPerformanceCounter

portcls.sys

PcGetPhysicalDeviceObject
PcInitializeAdapterDriver
PcDispatchIrp
PcAddAdapterDevice
PcNewRegistryKey
PcForwardIrpSynchronous
PcRegisterSubdevice
PcRegisterPhysicalConnection
PcNewPort

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/DisplayAudio/10.26/intcdaud.cat
Graphics/DisplayAudio/10.27/IntcDAud.inf
Graphics/DisplayAudio/10.27/IntcDAud.sys
.exe windows x64

d4db3c566b5f91e940ea60cc7bacb31c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeClearEvent
KeInitializeSemaphore
KeReleaseSemaphore
KeWaitForSingleObject
PsTerminateSystemThread
IoBuildSynchronousFsdRequest
IofCallDriver
IoGetDeviceObjectPointer
IoRegisterPlugPlayNotification
IoUnregisterPlugPlayNotification
IoUnregisterPlugPlayNotificationEx
ObfReferenceObject
ObfDereferenceObject
KeSetEvent
KeDelayExecutionThread
KeWaitForMultipleObjects
PsCreateSystemThread
ObReferenceObjectByHandle
ZwClose
_purecall
RtlInitUnicodeString
MmGetSystemRoutineAddress
RtlGetVersion
ExAllocatePoolWithTag
KeInitializeEvent
IoSetCompletionRoutineEx
IoWMIRegistrationControl
EtwRegister
EtwUnregister
EtwWriteTransfer
PoCallDriver
IoGetLowerDeviceObject
RtlCompareUnicodeString
RtlFreeUnicodeString
IofCompleteRequest
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
KeQueryTimeIncrement
RtlIsNtDdiVersionAvailable
PoRequestPowerIrp
IoAllocateIrp
IoFreeIrp
RtlCopyUnicodeString
IoSetDeviceInterfacePropertyData
IoCancelIrp
RtlAnsiCharToUnicodeChar
ExFreePoolWithTag
RtlEqualUnicodeString
ExFreePool

portcls.sys

PcInitializeAdapterDriver
PcDispatchIrp
PcAddAdapterDevice
PcNewRegistryKey
PcGetPhysicalDeviceObject
PcRegisterSubdevice
PcRegisterPhysicalConnection
PcNewPort
PcForwardIrpSynchronous

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/DisplayAudio/10.27/intcdaud.cat
Graphics/DisplayAudio/11.1/IntcDAud.inf
Graphics/DisplayAudio/11.1/IntcDAud.sys
.exe windows x64

d4db3c566b5f91e940ea60cc7bacb31c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeClearEvent
KeInitializeSemaphore
KeReleaseSemaphore
KeWaitForSingleObject
PsTerminateSystemThread
IoBuildSynchronousFsdRequest
IofCallDriver
IoGetDeviceObjectPointer
IoRegisterPlugPlayNotification
IoUnregisterPlugPlayNotification
IoUnregisterPlugPlayNotificationEx
ObfReferenceObject
ObfDereferenceObject
KeSetEvent
KeDelayExecutionThread
KeWaitForMultipleObjects
PsCreateSystemThread
ObReferenceObjectByHandle
ZwClose
_purecall
RtlInitUnicodeString
MmGetSystemRoutineAddress
RtlGetVersion
ExAllocatePoolWithTag
KeInitializeEvent
IoSetCompletionRoutineEx
IoWMIRegistrationControl
EtwRegister
EtwUnregister
EtwWriteTransfer
PoCallDriver
IoGetLowerDeviceObject
RtlCompareUnicodeString
RtlFreeUnicodeString
IofCompleteRequest
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
KeQueryTimeIncrement
RtlIsNtDdiVersionAvailable
PoRequestPowerIrp
IoAllocateIrp
IoFreeIrp
RtlCopyUnicodeString
IoSetDeviceInterfacePropertyData
IoCancelIrp
RtlAnsiCharToUnicodeChar
ExFreePoolWithTag
RtlEqualUnicodeString
ExFreePool

portcls.sys

PcInitializeAdapterDriver
PcDispatchIrp
PcAddAdapterDevice
PcNewRegistryKey
PcGetPhysicalDeviceObject
PcRegisterSubdevice
PcRegisterPhysicalConnection
PcNewPort
PcForwardIrpSynchronous

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/DisplayAudio/11.1/intcdaud.cat
Graphics/DisplayAudio/11.2/IntcDAud.inf
Graphics/DisplayAudio/11.2/IntcDAud.sys
.exe windows x64

7bf2714b4de545af408d7d6536cbad1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeSetEvent
KeDelayExecutionThread
KeWaitForSingleObject
KeInitializeSemaphore
KeReleaseSemaphore
KeWaitForMultipleObjects
PsCreateSystemThread
ObReferenceObjectByHandle
ObfDereferenceObject
ZwClose
RtlInitUnicodeString
MmGetSystemRoutineAddress
RtlGetVersion
ExAllocatePoolWithTag
ExFreePoolWithTag
IoSetCompletionRoutineEx
IoWMIRegistrationControl
EtwRegister
EtwUnregister
EtwWriteTransfer
KeClearEvent
IoGetLowerDeviceObject
RtlCompareUnicodeString
RtlFreeUnicodeString
IofCompleteRequest
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
KeQueryTimeIncrement
PsTerminateSystemThread
_purecall
RtlIsNtDdiVersionAvailable
PoRequestPowerIrp
IoAllocateIrp
IoFreeIrp
RtlCopyUnicodeString
IoSetDeviceInterfacePropertyData
IoCancelIrp
RtlAnsiCharToUnicodeChar
PoCallDriver
KeInitializeEvent
ExFreePool

portcls.sys

PcDispatchIrp
PcAddAdapterDevice
PcNewRegistryKey
PcForwardIrpSynchronous
PcInitializeAdapterDriver
PcRegisterPhysicalConnection
PcNewPort
PcGetPhysicalDeviceObject
PcRegisterSubdevice

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/DisplayAudio/11.2/intcdaud.cat
Graphics/DnnlPlugin.dll
.dll windows x64

8cfc9f5745111c937cfca2425b2eeefc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentVariableA
GetSystemInfo
QueryPerformanceCounter
QueryPerformanceFrequency
VirtualProtect
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SwitchToThread
GetCurrentThreadId
GetProcAddress
LoadLibraryA
lstrcmpA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
OutputDebugStringW
FormatMessageA
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
InitOnceBeginInitialize
InitOnceComplete
CloseHandle
WaitForSingleObjectEx
Sleep
GetExitCodeThread
GetNativeSystemInfo
RtlPcToFileHeader
RaiseException
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WideCharToMultiByte
LocalFree
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
SetFileInformationByHandle
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitOnceExecuteOnce
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetModuleHandleW
GetFileInformationByHandleEx
CreateSymbolicLinkW
CompareStringEx
GetCPInfo
GetLocaleInfoEx
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwindEx
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetCurrentThread
HeapFree
HeapAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapReAlloc
HeapSize
HeapQueryInformation
SetConsoleCtrlHandler
GetFileSizeEx
SetFilePointerEx
ReadFile
ReadConsoleW
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
WriteConsoleW
SetEndOfFile
RtlUnwind

Exports

Exports

GetConvolution
GetConvolutionAlt
GetPooling
GetPoolingAlt
ReleaseEngine
ReleaseMemory
SetEngine

Sections

.text
Size: 38.1MB - Virtual size: 38.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 847KB - Virtual size: 846KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 826B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 735KB - Virtual size: 734KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/FilmModeDetection.wmv
Graphics/GSCAuxDriver.inf
Graphics/GSCAuxDriverx64.sys
.exe windows x64

13a4bda3ce81d40b2232fb967d9e7da2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

wpprecorder.sys

imp_WppRecorderReplay
WppAutoLogStop
WppAutoLogStart
WppAutoLogTrace

ntoskrnl.exe

KeSetEvent
KeWaitForMultipleObjects
KeQuerySystemTimePrecise
MmMapIoSpace
MmUnmapIoSpace
RtlInitUnicodeString
MmGetSystemRoutineAddress
IoWMIRegistrationControl
memmove_s
IoAllocateErrorLogEntry
KeReadStateEvent
_vsnwprintf
strnlen
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlAppendUnicodeStringToString
RtlFreeUnicodeString
ZwCreateFile
ZwQueryInformationFile
ZwReadFile
ZwClose
ExFreePoolWithTag
IoGetDeviceInterfaces
KeResetEvent
RtlCopyUnicodeString
KeClearEvent
KeInitializeEvent
RtlTimeFieldsToTime
IoWriteErrorLogEntry

wdfldr.sys

WdfVersionBind
WdfVersionUnbind
WdfVersionBindClass
WdfVersionUnbindClass

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/GfxDownloadWrapper.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Graphics/HdBusExt.inf
Graphics/ImageStabilization.wmv
Graphics/IntelCpHDCPSvc.exe
.exe windows x64

dfa5dd36d0c824cfc665c5f0c1b341cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
ReadFile
WriteFile
DeviceIoControl
ReleaseMutex
GetCommandLineW
CreateFileW
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
SleepEx
GetCurrentProcess
FlushFileBuffers
GetModuleFileNameW
FindClose
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
LCMapStringW
GetCurrentThreadId
OutputDebugStringA
CreateThread
CreateSemaphoreExW
ReleaseSemaphore
SetEvent
CloseHandle
WriteConsoleW
GetVersion
GetModuleHandleA
LoadLibraryW
GetProcAddress
GetCurrentProcessId
DeleteCriticalSection
GetFileType
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
lstrcmpiW
MultiByteToWideChar
InitializeCriticalSectionEx
GetLastError
RaiseException
DecodePointer
Sleep
CreateEventW
WaitForSingleObject
QueryPerformanceFrequency
GetStdHandle
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
WaitForMultipleObjects
CreateMutexW
QueryPerformanceCounter
TlsAlloc
EncodePointer
SetLastError
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryEnterCriticalSection
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess

advapi32

AdjustTokenPrivileges
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
EventWriteTransfer
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
EventUnregister
EventRegister
NotifyServiceStatusChangeW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerExW
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
ChangeServiceConfig2W
ChangeServiceConfigW
LookupPrivilegeValueW
OpenProcessToken

user32

GetWindowRect
EnumChildWindows
MessageBoxW
CharNextW
IsChild
PostThreadMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LoadStringW
EnumDisplayDevicesW
GetDisplayConfigBufferSizes
QueryDisplayConfig
CharUpperW

oleaut32

SafeArrayGetVartype
VariantInit
VariantClear
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SysFreeString
SafeArrayRedim
SafeArrayDestroy
SafeArrayCreate
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
SysStringLen
SafeArrayCopy

setupapi

CM_Get_Device_Interface_ListW
CM_Get_Device_Interface_List_SizeW

ole32

CoSetProxyBlanket
CoTaskMemRealloc
CoInitializeEx
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoReleaseServerProcess
CoCreateInstance
CoAddRefServerProcess
CoInitializeSecurity
CoRevokeClassObject
OleRun

api-ms-win-devices-config-l1-1-1

CM_Unregister_Notification
CM_Register_Notification

ntdll

RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString

Sections

.text
Size: 205KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/IntelCpHeciSvc.exe
.exe windows x64

997697ab724741456c3bab642ada075e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineW
SetStdHandle
ExpandEnvironmentStringsW
GetCommandLineA
GetStdHandle

api-ms-win-core-file-l1-1-0

CreateDirectoryW
SetEndOfFile
FlushFileBuffers
SetFilePointerEx
FindNextFileW
FindFirstFileExW
CreateFileW
ReadFile
WriteFile
GetFileType
FindClose

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
SetLastError
UnhandledExceptionFilter
RaiseException
GetLastError

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-synch-l1-1-0

WaitForSingleObjectEx
ResetEvent
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
CreateEventW
WaitForMultipleObjectsEx
WaitForSingleObject
SetEvent
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
DeleteCriticalSection

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
TerminateProcess
ResumeThread
CreateThread
GetStartupInfoW
GetCurrentProcessId
TlsFree
TlsSetValue
TlsAlloc
GetCurrentThreadId
ExitProcess
OpenProcessToken
TlsGetValue

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-processthreads-l1-1-1

OpenProcess
IsProcessorFeaturePresent

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
LoadStringW
GetProcAddress
GetModuleFileNameW
FreeLibrary
LoadLibraryExW
LoadResource
SizeofResource
GetModuleHandleW

api-ms-win-core-libraryloader-l1-2-1

FindResourceW

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW

api-ms-win-core-string-l2-1-0

CharNextW
CharUpperW

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

api-ms-win-core-registry-l1-1-0

RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExA
RegDeleteValueW
RegQueryValueExA
RegSetValueExW
RegEnumKeyExW

api-ms-win-core-registry-l2-1-0

RegDeleteKeyW

api-ms-win-core-com-l1-1-0

CoResumeClassObjects
CoAddRefServerProcess
CoReleaseServerProcess
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoInitializeSecurity
CoUninitialize
CoInitializeEx
CoTaskMemRealloc
CoRevokeClassObject
CoRegisterClassObject

oleaut32

SysStringLen
SysFreeString
LoadRegTypeLi
VarUI4FromStr
SafeArrayCreate
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
RegisterTypeLi
SysAllocString
SafeArrayLock
SafeArrayUnlock
SafeArrayCopy
SafeArrayGetVartype
VariantInit
VariantClear
LoadTypeLi

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-sysinfo-l1-1-0

GetVersionExW
GetSystemTimeAsFileTime

api-ms-win-devices-config-l1-1-1

CM_Unregister_Notification
CM_Get_Device_Interface_ListW
CM_Register_Notification
CM_Get_Device_Interface_List_SizeW

api-ms-win-core-io-l1-1-0

DeviceIoControl
GetOverlappedResult

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapFree
GetProcessHeap
HeapReAlloc
HeapSize

api-ms-win-security-base-l1-1-0

GetSecurityDescriptorLength
MakeAbsoluteSD
AdjustTokenPrivileges

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-security-lsalookup-l2-1-0

LookupPrivilegeValueW

api-ms-win-service-management-l2-1-0

ChangeServiceConfigW
QueryServiceConfigW

api-ms-win-service-management-l1-1-0

OpenServiceW
CloseServiceHandle
CreateServiceW
DeleteService
OpenSCManagerW

api-ms-win-service-winsvc-l1-1-0

ControlService

api-ms-win-service-core-l1-1-0

SetServiceStatus
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW

user32

DispatchMessageW
TranslateMessage
GetMessageW
PostThreadMessageW

api-ms-win-core-localization-l1-2-0

IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCPInfo
GetLocaleInfoW
LCMapStringW
GetOEMCP
GetACP
IsValidCodePage

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlUnwindEx
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringW

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-console-l1-1-0

WriteConsoleW
GetConsoleCP
GetConsoleMode
ReadConsoleW

Exports

Exports

MessageBoxW

Sections

.text
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/IntelGpuCompiler32.dll
.dll windows x86

7b4b4ec0feedf10219c5e01ef4d62a1d

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

95:d0:a8:00:09:1b:d9:aa:18:22:4b:ba:c4:0b:7c:f0:fe:7b:e7:95:a4:6a:5c:f8:b3:94:94:6f:0a:6d:30:8f
Signer

Actual PE Digest

95:d0:a8:00:09:1b:d9:aa:18:22:4b:ba:c4:0b:7c:f0:fe:7b:e7:95:a4:6a:5c:f8:b3:94:94:6f:0a:6d:30:8f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSectionEx
FreeLibrary
GetProcAddress
LoadLibraryExA
LoadLibraryA
LoadLibraryW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
LCMapStringW
GetStdHandle
GetFileType
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetStdHandle
HeapSize
HeapReAlloc
CloseHandle
CreateFileW
WriteConsoleW
DecodePointer

Exports

Exports

_OpenCompiler@4

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/IntelGpuCompiler64.dll
.dll windows x64

8319a0c69479dc47b6b05f4ed74cd15f

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

40:bc:b5:b0:07:e1:32:96:3a:e7:62:2d:f8:11:76:c2:97:f3:19:a5:45:95:ee:9a:78:a5:42:16:b5:67:47:08
Signer

Actual PE Digest

40:bc:b5:b0:07:e1:32:96:3a:e7:62:2d:f8:11:76:c2:97:f3:19:a5:45:95:ee:9a:78:a5:42:16:b5:67:47:08

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSectionEx
FreeLibrary
GetProcAddress
LoadLibraryExA
LoadLibraryA
LoadLibraryW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
QueryPerformanceCounter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
LCMapStringW
GetStdHandle
GetFileType
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetStdHandle
HeapSize
HeapReAlloc
CloseHandle
CreateFileW
WriteConsoleW

Exports

Exports

OpenCompiler

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/IntelGraphicsAGS.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/Intel_OpenCL_ICD32.dll
.dll windows x86

add2a33c3aaaa81b147bb1454f7b0809

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

76:09:93:0b:69:7e:72:47:ab:af:8e:94:eb:bc:a2:f3:30:38:87:eb:68:2b:28:3e:5c:4b:5c:cf:e7:a8:9d:15
Signer

Actual PE Digest

76:09:93:0b:69:7e:72:47:ab:af:8e:94:eb:bc:a2:f3:30:38:87:eb:68:2b:28:3e:5c:4b:5c:cf:e7:a8:9d:15

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cfgmgr32

CM_Get_Sibling
CM_Get_DevNode_Status
CM_Get_DevNode_PropertyW
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
CM_Get_Device_IDW
CM_Open_DevNode_Key
CM_Locate_DevNodeW
CM_Get_Child

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsDeleteString

api-ms-win-core-winrt-l1-1-0

RoInitialize
RoUninitialize
RoActivateInstance

kernel32

InitOnceExecuteOnce
FreeLibrary
HeapSize
LoadLibraryExA
LoadLibraryA
MultiByteToWideChar
GetEnvironmentVariableA
CloseHandle
GetCurrentProcess
IsWow64Process
RaiseException
GetTimeZoneInformation
GetFileType
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
GetLastError
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStringTypeW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
RtlUnwind
InterlockedFlushSList
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapAlloc
HeapReAlloc
HeapFree
GetACP
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetStdHandle
WriteConsoleW

ole32

StringFromGUID2

advapi32

RegEnumValueA
RegOpenKeyExA
OpenProcessToken
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
RegQueryValueExA
RegCloseKey

Exports

Exports

clBuildProgram
clCloneKernel
clCompileProgram
clCreateBuffer
clCreateBufferWithProperties
clCreateCommandQueue
clCreateCommandQueueWithProperties
clCreateContext
clCreateContextFromType
clCreateFromGLBuffer
clCreateFromGLRenderbuffer
clCreateFromGLTexture
clCreateFromGLTexture2D
clCreateFromGLTexture3D
clCreateImage
clCreateImage2D
clCreateImage3D
clCreateImageWithProperties
clCreateKernel
clCreateKernelsInProgram
clCreatePipe
clCreateProgramWithBinary
clCreateProgramWithBuiltInKernels
clCreateProgramWithIL
clCreateProgramWithSource
clCreateSampler
clCreateSamplerWithProperties
clCreateSubBuffer
clCreateSubDevices
clCreateUserEvent
clEnqueueAcquireGLObjects
clEnqueueBarrier
clEnqueueBarrierWithWaitList
clEnqueueCopyBuffer
clEnqueueCopyBufferRect
clEnqueueCopyBufferToImage
clEnqueueCopyImage
clEnqueueCopyImageToBuffer
clEnqueueFillBuffer
clEnqueueFillImage
clEnqueueMapBuffer
clEnqueueMapImage
clEnqueueMarker
clEnqueueMarkerWithWaitList
clEnqueueMigrateMemObjects
clEnqueueNDRangeKernel
clEnqueueNativeKernel
clEnqueueReadBuffer
clEnqueueReadBufferRect
clEnqueueReadImage
clEnqueueReleaseGLObjects
clEnqueueSVMFree
clEnqueueSVMMap
clEnqueueSVMMemFill
clEnqueueSVMMemcpy
clEnqueueSVMMigrateMem
clEnqueueSVMUnmap
clEnqueueTask
clEnqueueUnmapMemObject
clEnqueueWaitForEvents
clEnqueueWriteBuffer
clEnqueueWriteBufferRect
clEnqueueWriteImage
clFinish
clFlush
clGetCommandQueueInfo
clGetContextInfo
clGetDeviceAndHostTimer
clGetDeviceIDs
clGetDeviceInfo
clGetEventInfo
clGetEventProfilingInfo
clGetExtensionFunctionAddress
clGetExtensionFunctionAddressForPlatform
clGetGLObjectInfo
clGetGLTextureInfo
clGetHostTimer
clGetImageInfo
clGetKernelArgInfo
clGetKernelInfo
clGetKernelSubGroupInfo
clGetKernelWorkGroupInfo
clGetMemObjectInfo
clGetPipeInfo
clGetPlatformIDs
clGetPlatformInfo
clGetProgramBuildInfo
clGetProgramInfo
clGetSamplerInfo
clGetSupportedImageFormats
clLinkProgram
clReleaseCommandQueue
clReleaseContext
clReleaseDevice
clReleaseEvent
clReleaseKernel
clReleaseMemObject
clReleaseProgram
clReleaseSampler
clRetainCommandQueue
clRetainContext
clRetainDevice
clRetainEvent
clRetainKernel
clRetainMemObject
clRetainProgram
clRetainSampler
clSVMAlloc
clSVMFree
clSetCommandQueueProperty
clSetContextDestructorCallback
clSetDefaultDeviceCommandQueue
clSetEventCallback
clSetKernelArg
clSetKernelArgSVMPointer
clSetKernelExecInfo
clSetMemObjectDestructorCallback
clSetProgramReleaseCallback
clSetProgramSpecializationConstant
clSetUserEventStatus
clUnloadCompiler
clUnloadPlatformCompiler
clWaitForEvents

Sections

.text
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/Intel_OpenCL_ICD64.dll
.dll windows x64

89d64f02e82757ab2983507dadbbad3c

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

42:33:f0:d6:9a:a6:46:08:2b:4a:19:55:76:8c:fa:b9:ff:73:cc:fb:eb:e4:71:08:6c:36:6c:37:c6:81:5e:41
Signer

Actual PE Digest

42:33:f0:d6:9a:a6:46:08:2b:4a:19:55:76:8c:fa:b9:ff:73:cc:fb:eb:e4:71:08:6c:36:6c:37:c6:81:5e:41

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

cfgmgr32

CM_Get_Sibling
CM_Get_DevNode_Status
CM_Get_DevNode_PropertyW
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
CM_Get_Device_IDW
CM_Open_DevNode_Key
CM_Locate_DevNodeW
CM_Get_Child

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsDeleteString

api-ms-win-core-winrt-l1-1-0

RoInitialize
RoUninitialize
RoActivateInstance

kernel32

InitOnceExecuteOnce
HeapSize
GetProcAddress
LoadLibraryExA
LoadLibraryA
MultiByteToWideChar
GetEnvironmentVariableA
CloseHandle
GetCurrentProcess
RaiseException
GetTimeZoneInformation
GetFileType
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
GetLastError
FreeLibrary
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStringTypeW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
RtlPcToFileHeader
RtlUnwindEx
InterlockedFlushSList
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapAlloc
HeapReAlloc
HeapFree
GetACP
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetStdHandle
WriteConsoleW

ole32

StringFromGUID2

advapi32

RegEnumValueA
RegOpenKeyExA
OpenProcessToken
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
RegQueryValueExA
RegCloseKey

Exports

Exports

clBuildProgram
clCloneKernel
clCompileProgram
clCreateBuffer
clCreateBufferWithProperties
clCreateCommandQueue
clCreateCommandQueueWithProperties
clCreateContext
clCreateContextFromType
clCreateFromGLBuffer
clCreateFromGLRenderbuffer
clCreateFromGLTexture
clCreateFromGLTexture2D
clCreateFromGLTexture3D
clCreateImage
clCreateImage2D
clCreateImage3D
clCreateImageWithProperties
clCreateKernel
clCreateKernelsInProgram
clCreatePipe
clCreateProgramWithBinary
clCreateProgramWithBuiltInKernels
clCreateProgramWithIL
clCreateProgramWithSource
clCreateSampler
clCreateSamplerWithProperties
clCreateSubBuffer
clCreateSubDevices
clCreateUserEvent
clEnqueueAcquireGLObjects
clEnqueueBarrier
clEnqueueBarrierWithWaitList
clEnqueueCopyBuffer
clEnqueueCopyBufferRect
clEnqueueCopyBufferToImage
clEnqueueCopyImage
clEnqueueCopyImageToBuffer
clEnqueueFillBuffer
clEnqueueFillImage
clEnqueueMapBuffer
clEnqueueMapImage
clEnqueueMarker
clEnqueueMarkerWithWaitList
clEnqueueMigrateMemObjects
clEnqueueNDRangeKernel
clEnqueueNativeKernel
clEnqueueReadBuffer
clEnqueueReadBufferRect
clEnqueueReadImage
clEnqueueReleaseGLObjects
clEnqueueSVMFree
clEnqueueSVMMap
clEnqueueSVMMemFill
clEnqueueSVMMemcpy
clEnqueueSVMMigrateMem
clEnqueueSVMUnmap
clEnqueueTask
clEnqueueUnmapMemObject
clEnqueueWaitForEvents
clEnqueueWriteBuffer
clEnqueueWriteBufferRect
clEnqueueWriteImage
clFinish
clFlush
clGetCommandQueueInfo
clGetContextInfo
clGetDeviceAndHostTimer
clGetDeviceIDs
clGetDeviceInfo
clGetEventInfo
clGetEventProfilingInfo
clGetExtensionFunctionAddress
clGetExtensionFunctionAddressForPlatform
clGetGLObjectInfo
clGetGLTextureInfo
clGetHostTimer
clGetImageInfo
clGetKernelArgInfo
clGetKernelInfo
clGetKernelSubGroupInfo
clGetKernelWorkGroupInfo
clGetMemObjectInfo
clGetPipeInfo
clGetPlatformIDs
clGetPlatformInfo
clGetProgramBuildInfo
clGetProgramInfo
clGetSamplerInfo
clGetSupportedImageFormats
clLinkProgram
clReleaseCommandQueue
clReleaseContext
clReleaseDevice
clReleaseEvent
clReleaseKernel
clReleaseMemObject
clReleaseProgram
clReleaseSampler
clRetainCommandQueue
clRetainContext
clRetainDevice
clRetainEvent
clRetainKernel
clRetainMemObject
clRetainProgram
clRetainSampler
clSVMAlloc
clSVMFree
clSetCommandQueueProperty
clSetContextDestructorCallback
clSetDefaultDeviceCommandQueue
clSetEventCallback
clSetKernelArg
clSetKernelArgSVMPointer
clSetKernelExecInfo
clSetMemObjectDestructorCallback
clSetProgramReleaseCallback
clSetProgramSpecializationConstant
clSetUserEventStatus
clUnloadCompiler
clUnloadPlatformCompiler
clWaitForEvents

Sections

.text
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/acxdac.cat
Graphics/c_32.cpa
Graphics/c_64.cpa
Graphics/cp_resources.bin
Graphics/cpa_32.vp
Graphics/cpa_64.vp
Graphics/cui_dch.inf
Graphics/dev_32.vp
Graphics/dev_64.vp
Graphics/fw/dg1_gfx_fwupdate.bin
Graphics/gscauxdriver.cat
Graphics/gscheci.cat
Graphics/gscheci.inf
Graphics/h265e_32.vp
Graphics/h265e_64.vp
Graphics/hdbusext.cat
Graphics/he_32.vp
Graphics/he_64.vp
Graphics/ig11icd32.dll
.dll windows x86

cf00ed5b3d7818339349c7999991b06c

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

70:1c:29:cf:ba:a8:5a:97:c2:c9:71:c5:37:f5:a8:e7:99:a7:a6:ff:9f:a9:d2:29:86:bc:07:02:72:42:5a:7c
Signer

Actual PE Digest

70:1c:29:cf:ba:a8:5a:97:c2:c9:71:c5:37:f5:a8:e7:99:a7:a6:ff:9f:a9:d2:29:86:bc:07:02:72:42:5a:7c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentStrings
FreeEnvironmentStringsA
FindResourceW
LoadResource
LockResource
CreateFileA
WriteFile
GetUserDefaultLangID
QueryPerformanceFrequency
VerSetConditionMask
VerifyVersionInfoW
WaitForMultipleObjects
GetLastError
GetModuleFileNameA
QueryPerformanceCounter
SetLastError
EnterCriticalSection
CloseHandle
GetCurrentThreadId
GetModuleHandleW
CreateMutexW
ReleaseMutex
CreateThread
GetSystemInfo
FreeLibrary
LoadLibraryExA
GetSystemDirectoryA
GetCurrentProcessId
Sleep
SwitchToThread
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetEnvironmentVariableA
SetEnvironmentVariableA
CreateEventW
GetExitCodeThread
GetModuleHandleExA
ResetEvent
GetFileAttributesA
WaitForSingleObject
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
TerminateThread
GetEnvironmentVariableW
OpenEventA
OpenFileMappingW
OutputDebugStringA
GetCurrentProcess
LeaveCriticalSection
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
WriteConsoleW
TryEnterCriticalSection
GetStdHandle
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetFileAttributesW
GetFileInformationByHandle
GetFinalPathNameByHandleW
ReadFile
SetFileInformationByHandle
SetFileTime
DuplicateHandle
GetSystemTime
VirtualQuery
CreateFileMappingW
GetModuleFileNameW
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetProcessHeap
SetUnhandledExceptionFilter
LoadLibraryW
GlobalAlloc
GlobalFree
CreateDirectoryA
SetEvent
RaiseException
GetCommandLineW
GetNativeSystemInfo
GetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
TerminateProcess
LocalFree
FormatMessageA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WaitForSingleObjectEx
GetSystemTimePreciseAsFileTime
ReleaseSRWLockShared
AcquireSRWLockShared
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
SetStdHandle
SetFilePointerEx
SetEndOfFile
GetConsoleOutputCP
ReadConsoleW
HeapFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
HeapSize
GetFileSizeEx
IsValidCodePage
GetACP
GetOEMCP
FreeResource

gdi32

GetClipBox
CreateCompatibleDC
BitBlt
GetObjectType
GetCurrentObject
SetPixelFormat
DeleteObject
SelectObject
DeleteDC
CreateDIBSection
GetDeviceCaps

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

ole32

CoTaskMemAlloc

user32

IntersectRect

shell32

SHGetFolderPathA

Exports

Exports

DrvCopyContext
DrvCreateContext
DrvCreateLayerContext
DrvDeleteContext
DrvDescribeLayerPlane
DrvDescribePixelFormat
DrvGetLayerPaletteEntries
DrvGetProcAddress
DrvPresentBuffers
DrvRealizeLayerPalette
DrvReleaseContext
DrvSetCallbackProcs
DrvSetContext
DrvSetLayerPaletteEntries
DrvSetPixelFormat
DrvShareLists
DrvSwapBuffers
DrvSwapLayerBuffers
DrvValidateVersion
DumpRegistryKeyDefinitions
RegisterProcTableCallback

Sections

.text
Size: 9.6MB - Virtual size: 9.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 601KB - Virtual size: 675KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 670KB - Virtual size: 670KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/ig11icd64.dll
.dll windows x64

8a28ee850b54f3a2ecea2da78ae942f0

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f6:8a:99:78:89:16:8f:23:f6:f4:3f:0e:80:fa:8d:5f:b4:04:12:a1:e1:e3:aa:29:64:34:0a:78:bb:89:f1:4e
Signer

Actual PE Digest

f6:8a:99:78:89:16:8f:23:f6:f4:3f:0e:80:fa:8d:5f:b4:04:12:a1:e1:e3:aa:29:64:34:0a:78:bb:89:f1:4e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentStrings
FreeEnvironmentStringsA
FindResourceW
LoadResource
LockResource
CreateFileA
WriteFile
GetUserDefaultLangID
QueryPerformanceFrequency
VerSetConditionMask
VerifyVersionInfoW
WaitForMultipleObjects
GetLastError
GetModuleFileNameA
QueryPerformanceCounter
SetLastError
EnterCriticalSection
CloseHandle
GetCurrentThreadId
CreateMutexW
GetModuleHandleW
CreateThread
FreeLibrary
LoadLibraryExA
GetSystemDirectoryA
GetCurrentProcessId
Sleep
SwitchToThread
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetEnvironmentVariableA
SetEnvironmentVariableA
CreateEventW
GetExitCodeThread
__C_specific_handler
GetModuleHandleExA
VirtualAlloc
VirtualFree
ResetEvent
GetFileAttributesA
RtlUnwind
GetSystemInfo
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
TerminateThread
GetEnvironmentVariableW
OpenEventA
OpenFileMappingW
OutputDebugStringA
WaitForSingleObject
ReleaseMutex
LeaveCriticalSection
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetFileType
WriteConsoleW
TryEnterCriticalSection
GetStdHandle
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetFileAttributesW
GetFileInformationByHandle
GetFinalPathNameByHandleW
ReadFile
SetFileInformationByHandle
SetFileTime
DuplicateHandle
GetCurrentProcess
GetSystemTime
VirtualQuery
CreateFileMappingW
GetModuleFileNameW
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
FreeResource
GetEnvironmentStringsW
RtlCaptureContext
SetUnhandledExceptionFilter
LoadLibraryW
GlobalAlloc
GlobalFree
CreateDirectoryA
SetEvent
RaiseException
GetCommandLineW
GetNativeSystemInfo
GetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
TerminateProcess
LocalFree
FormatMessageA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WaitForSingleObjectEx
GetSystemTimePreciseAsFileTime
ReleaseSRWLockShared
AcquireSRWLockShared
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
SetStdHandle
SetFilePointerEx
SetEndOfFile
GetConsoleOutputCP
ReadConsoleW
HeapFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
HeapSize
GetFileSizeEx
IsValidCodePage
GetACP
GetOEMCP
GetProcessHeap
GetCommandLineA

gdi32

GetClipBox
CreateCompatibleDC
BitBlt
GetObjectType
GetCurrentObject
SetPixelFormat
DeleteObject
SelectObject
DeleteDC
CreateDIBSection
GetDeviceCaps

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

ole32

CoTaskMemAlloc

user32

IntersectRect

shell32

SHGetFolderPathA

Exports

Exports

DrvCopyContext
DrvCreateContext
DrvCreateLayerContext
DrvDeleteContext
DrvDescribeLayerPlane
DrvDescribePixelFormat
DrvGetLayerPaletteEntries
DrvGetProcAddress
DrvPresentBuffers
DrvRealizeLayerPalette
DrvReleaseContext
DrvSetCallbackProcs
DrvSetContext
DrvSetLayerPaletteEntries
DrvSetPixelFormat
DrvShareLists
DrvSwapBuffers
DrvSwapLayerBuffers
DrvValidateVersion
DumpRegistryKeyDefinitions
RegisterProcTableCallback

Sections

.text
Size: 11.3MB - Virtual size: 11.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 426KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 331KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/ig9icd32.dll
.dll windows x86

cf00ed5b3d7818339349c7999991b06c

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:c4:75:91:13:74:5f:ed:9b:49:8a:6d:e2:9f:34:0f:e3:bd:c0:cb:d6:eb:d5:4f:a2:3f:ec:22:07:a3:59:84
Signer

Actual PE Digest

0d:c4:75:91:13:74:5f:ed:9b:49:8a:6d:e2:9f:34:0f:e3:bd:c0:cb:d6:eb:d5:4f:a2:3f:ec:22:07:a3:59:84

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentStrings
FreeEnvironmentStringsA
FindResourceW
LoadResource
LockResource
CreateFileA
WriteFile
GetUserDefaultLangID
QueryPerformanceFrequency
VerSetConditionMask
VerifyVersionInfoW
WaitForMultipleObjects
GetLastError
GetModuleFileNameA
QueryPerformanceCounter
SetLastError
EnterCriticalSection
CloseHandle
GetCurrentThreadId
GetModuleHandleW
CreateMutexW
ReleaseMutex
CreateThread
GetSystemInfo
FreeLibrary
LoadLibraryExA
GetSystemDirectoryA
GetCurrentProcessId
Sleep
SwitchToThread
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetEnvironmentVariableA
SetEnvironmentVariableA
CreateEventW
GetExitCodeThread
GetModuleHandleExA
ResetEvent
GetFileAttributesA
WaitForSingleObject
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
TerminateThread
GetEnvironmentVariableW
OpenEventA
OpenFileMappingW
OutputDebugStringA
GetCurrentProcess
LeaveCriticalSection
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
WriteConsoleW
TryEnterCriticalSection
GetStdHandle
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetFileAttributesW
GetFileInformationByHandle
GetFinalPathNameByHandleW
ReadFile
SetFileInformationByHandle
SetFileTime
DuplicateHandle
GetSystemTime
VirtualQuery
CreateFileMappingW
GetModuleFileNameW
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetProcessHeap
SetUnhandledExceptionFilter
LoadLibraryW
GlobalAlloc
GlobalFree
CreateDirectoryA
SetEvent
RaiseException
GetCommandLineW
GetNativeSystemInfo
GetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
TerminateProcess
LocalFree
FormatMessageA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WaitForSingleObjectEx
GetSystemTimePreciseAsFileTime
ReleaseSRWLockShared
AcquireSRWLockShared
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
SetStdHandle
SetFilePointerEx
SetEndOfFile
GetConsoleOutputCP
ReadConsoleW
HeapFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
HeapSize
GetFileSizeEx
IsValidCodePage
GetACP
GetOEMCP
FreeResource

gdi32

GetClipBox
CreateCompatibleDC
BitBlt
GetObjectType
GetCurrentObject
SetPixelFormat
DeleteObject
SelectObject
DeleteDC
CreateDIBSection
GetDeviceCaps

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

ole32

CoTaskMemAlloc

user32

IntersectRect

shell32

SHGetFolderPathA

Exports

Exports

DrvCopyContext
DrvCreateContext
DrvCreateLayerContext
DrvDeleteContext
DrvDescribeLayerPlane
DrvDescribePixelFormat
DrvGetLayerPaletteEntries
DrvGetProcAddress
DrvPresentBuffers
DrvRealizeLayerPalette
DrvReleaseContext
DrvSetCallbackProcs
DrvSetContext
DrvSetLayerPaletteEntries
DrvSetPixelFormat
DrvShareLists
DrvSwapBuffers
DrvSwapLayerBuffers
DrvValidateVersion
DumpRegistryKeyDefinitions
RegisterProcTableCallback

Sections

.text
Size: 9.4MB - Virtual size: 9.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 589KB - Virtual size: 671KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 667KB - Virtual size: 666KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/ig9icd64.dll
.dll windows x64

8a28ee850b54f3a2ecea2da78ae942f0

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:37:45:b3:64:fc:86:c7:10:2b:bf:5f:f8:21:f8:42:e8:22:60:5e:e7:b7:3b:00:e6:c1:e8:c9:25:41:23:68
Signer

Actual PE Digest

1a:37:45:b3:64:fc:86:c7:10:2b:bf:5f:f8:21:f8:42:e8:22:60:5e:e7:b7:3b:00:e6:c1:e8:c9:25:41:23:68

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentStrings
FreeEnvironmentStringsA
FindResourceW
LoadResource
LockResource
CreateFileA
WriteFile
GetUserDefaultLangID
QueryPerformanceFrequency
VerSetConditionMask
VerifyVersionInfoW
WaitForMultipleObjects
GetLastError
GetModuleFileNameA
QueryPerformanceCounter
SetLastError
EnterCriticalSection
CloseHandle
GetCurrentThreadId
CreateMutexW
GetModuleHandleW
CreateThread
FreeLibrary
LoadLibraryExA
GetSystemDirectoryA
GetCurrentProcessId
Sleep
SwitchToThread
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetEnvironmentVariableA
SetEnvironmentVariableA
CreateEventW
GetExitCodeThread
__C_specific_handler
GetModuleHandleExA
VirtualAlloc
VirtualFree
ResetEvent
GetFileAttributesA
RtlUnwind
GetSystemInfo
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
TerminateThread
GetEnvironmentVariableW
OpenEventA
OpenFileMappingW
OutputDebugStringA
WaitForSingleObject
ReleaseMutex
LeaveCriticalSection
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetFileType
WriteConsoleW
TryEnterCriticalSection
GetStdHandle
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetFileAttributesW
GetFileInformationByHandle
GetFinalPathNameByHandleW
ReadFile
SetFileInformationByHandle
SetFileTime
DuplicateHandle
GetCurrentProcess
GetSystemTime
VirtualQuery
CreateFileMappingW
GetModuleFileNameW
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
FreeResource
GetEnvironmentStringsW
RtlCaptureContext
SetUnhandledExceptionFilter
LoadLibraryW
GlobalAlloc
GlobalFree
CreateDirectoryA
SetEvent
RaiseException
GetCommandLineW
GetNativeSystemInfo
GetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
TerminateProcess
LocalFree
FormatMessageA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WaitForSingleObjectEx
GetSystemTimePreciseAsFileTime
ReleaseSRWLockShared
AcquireSRWLockShared
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
SetStdHandle
SetFilePointerEx
SetEndOfFile
GetConsoleOutputCP
ReadConsoleW
HeapFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
HeapSize
GetFileSizeEx
IsValidCodePage
GetACP
GetOEMCP
GetProcessHeap
GetCommandLineA

gdi32

GetClipBox
CreateCompatibleDC
BitBlt
GetObjectType
GetCurrentObject
SetPixelFormat
DeleteObject
SelectObject
DeleteDC
CreateDIBSection
GetDeviceCaps

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

ole32

CoTaskMemAlloc

user32

IntersectRect

shell32

SHGetFolderPathA

Exports

Exports

DrvCopyContext
DrvCreateContext
DrvCreateLayerContext
DrvDeleteContext
DrvDescribeLayerPlane
DrvDescribePixelFormat
DrvGetLayerPaletteEntries
DrvGetProcAddress
DrvPresentBuffers
DrvRealizeLayerPalette
DrvReleaseContext
DrvSetCallbackProcs
DrvSetContext
DrvSetLayerPaletteEntries
DrvSetPixelFormat
DrvShareLists
DrvSwapBuffers
DrvSwapLayerBuffers
DrvValidateVersion
DumpRegistryKeyDefinitions
RegisterProcTableCallback

Sections

.text
Size: 11.1MB - Virtual size: 11.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 421KB - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 331KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/iga32.dll
.dll windows x86

bf427163f221d2a6bced85a4d7f3f75b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetStdHandle
IsDebuggerPresent
DebugBreak
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetConsoleMode
SetConsoleMode
QueryPerformanceFrequency
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetCurrentThreadId
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
GetStringTypeW
GetCPInfo
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetFileType
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
WriteFile
GetConsoleOutputCP
GetFileSizeEx
SetFilePointerEx
HeapReAlloc
SetStdHandle
FlushFileBuffers
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
CreateFileW
HeapSize
WriteConsoleW

Exports

Exports

iga_assemble
iga_context_assemble
iga_context_create
iga_context_disassemble
iga_context_disassemble_instruction
iga_context_get_errors
iga_context_get_warnings
iga_context_release
iga_create_context
iga_diagnostic_get_message
iga_diagnostic_get_offset
iga_diagnostic_get_text_column
iga_diagnostic_get_text_extent
iga_diagnostic_get_text_line
iga_diagnostic_get_type
iga_disassemble
iga_disassemble_instruction
iga_get_errors
iga_get_interface
iga_get_warnings
iga_opspec_description
iga_opspec_enumerate
iga_opspec_from_op
iga_opspec_mnemonic
iga_opspec_name
iga_opspec_op
iga_opspec_op_encoding
iga_platform_names
iga_platform_symbol_suffix
iga_platforms_list
iga_release_context
iga_status_to_string
iga_version_string
kv_create
kv_delete
kv_get_channel_offset
kv_get_default_label_name
kv_get_destination_data_type
kv_get_destination_indirect_imm_off
kv_get_destination_mme_number
kv_get_destination_modifier
kv_get_destination_region
kv_get_destination_register
kv_get_destination_register_kind
kv_get_destination_register_type
kv_get_destination_sub_register
kv_get_execution_size
kv_get_flag_modifier
kv_get_flag_register
kv_get_flag_sub_register
kv_get_has_destination
kv_get_inst_size
kv_get_inst_syntax
kv_get_inst_targets
kv_get_is_inverse_predicate
kv_get_mask_control
kv_get_message_len
kv_get_message_len_ext
kv_get_message_sfid
kv_get_message_type
kv_get_message_type_ext
kv_get_number_sources
kv_get_opcode
kv_get_opgroup
kv_get_predicate
kv_get_send_descs
kv_get_send_exbso
kv_get_send_exdesc_immoff
kv_get_send_indirect_descs
kv_get_source_data_type
kv_get_source_immediate
kv_get_source_indirect_imm_off
kv_get_source_mme_number
kv_get_source_modifier
kv_get_source_region
kv_get_source_register
kv_get_source_register_kind
kv_get_source_register_type
kv_get_source_sub_register
kv_get_subfunction
kv_get_swsb_info
kv_has_inst_opt
kv_is_inst_target
kv_is_source_vector

Sections

.text
Size: 818KB - Virtual size: 818KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/iga64.dll
.dll windows x64

62d6909c077363b2b2ba330a05e2181d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetStdHandle
IsDebuggerPresent
DebugBreak
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetConsoleMode
SetConsoleMode
QueryPerformanceFrequency
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetCurrentThreadId
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
GetStringTypeW
GetCPInfo
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetFileType
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
WriteFile
GetConsoleOutputCP
GetFileSizeEx
SetFilePointerEx
HeapReAlloc
SetStdHandle
FlushFileBuffers
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
CreateFileW
HeapSize
WriteConsoleW
RtlUnwind

Exports

Exports

iga_assemble
iga_context_assemble
iga_context_create
iga_context_disassemble
iga_context_disassemble_instruction
iga_context_get_errors
iga_context_get_warnings
iga_context_release
iga_create_context
iga_diagnostic_get_message
iga_diagnostic_get_offset
iga_diagnostic_get_text_column
iga_diagnostic_get_text_extent
iga_diagnostic_get_text_line
iga_diagnostic_get_type
iga_disassemble
iga_disassemble_instruction
iga_get_errors
iga_get_interface
iga_get_warnings
iga_opspec_description
iga_opspec_enumerate
iga_opspec_from_op
iga_opspec_mnemonic
iga_opspec_name
iga_opspec_op
iga_opspec_op_encoding
iga_platform_names
iga_platform_symbol_suffix
iga_platforms_list
iga_release_context
iga_status_to_string
iga_version_string
kv_create
kv_delete
kv_get_channel_offset
kv_get_default_label_name
kv_get_destination_data_type
kv_get_destination_indirect_imm_off
kv_get_destination_mme_number
kv_get_destination_modifier
kv_get_destination_region
kv_get_destination_register
kv_get_destination_register_kind
kv_get_destination_register_type
kv_get_destination_sub_register
kv_get_execution_size
kv_get_flag_modifier
kv_get_flag_register
kv_get_flag_sub_register
kv_get_has_destination
kv_get_inst_size
kv_get_inst_syntax
kv_get_inst_targets
kv_get_is_inverse_predicate
kv_get_mask_control
kv_get_message_len
kv_get_message_len_ext
kv_get_message_sfid
kv_get_message_type
kv_get_message_type_ext
kv_get_number_sources
kv_get_opcode
kv_get_opgroup
kv_get_predicate
kv_get_send_descs
kv_get_send_exbso
kv_get_send_exdesc_immoff
kv_get_send_indirect_descs
kv_get_source_data_type
kv_get_source_immediate
kv_get_source_indirect_imm_off
kv_get_source_mme_number
kv_get_source_modifier
kv_get_source_region
kv_get_source_register
kv_get_source_register_kind
kv_get_source_register_type
kv_get_source_sub_register
kv_get_subfunction
kv_get_swsb_info
kv_has_inst_opt
kv_is_inst_target
kv_is_source_vector

Sections

.text
Size: 980KB - Virtual size: 980KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igc32.dll
.dll windows x86

9d6a6f9f009b5b5a57b7135240122c20

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadResource
LockResource
SizeofResource
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetFileType
WriteConsoleW
GetEnvironmentVariableW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetDiskFreeSpaceExA
GetFileAttributesW
GetFileInformationByHandle
GetFinalPathNameByHandleW
ReadFile
SetFileInformationByHandle
SetFileTime
CloseHandle
DuplicateHandle
GetLastError
SetLastError
Sleep
GetCurrentProcess
GetSystemInfo
GetSystemTime
VirtualQuery
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
MoveFileExW
GetModuleHandleExA
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
FindResourceExW
IsDebuggerPresent
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
ExpandEnvironmentStringsW
SetUnhandledExceptionFilter
GetCurrentThread
GetCurrentThreadId
LoadLibraryW
SetConsoleCtrlHandler
GetCurrentProcessId
QueryPerformanceFrequency
QueryPerformanceCounter
GetProcAddress
RaiseException
WaitForSingleObject
GetModuleHandleW
GetCommandLineW
GetProcessTimes
GetNativeSystemInfo
GetConsoleMode
SearchPathW
TerminateProcess
GetExitCodeProcess
CreateProcessW
CreateJobObjectW
AssignProcessToJobObject
SetInformationJobObject
LocalFree
FormatMessageA
DebugBreak
GetLargePageMinimum
VirtualFree
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
GetSystemTimePreciseAsFileTime
InitOnceBeginInitialize
InitOnceComplete
WaitForSingleObjectEx
GetExitCodeThread
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
GetStringTypeW
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
LoadLibraryExW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
SetEvent
WaitForMultipleObjectsEx
CreateEventExW
CreateThread
GetThreadPriority
GetTickCount64
ReleaseSemaphore
CreateSemaphoreExW
UnregisterWaitEx
RegisterWaitForSingleObject
FlushProcessWriteBuffers
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
RtlUnwind
ExitProcess
FreeLibrary
GetModuleHandleExW
SetStdHandle
SetFilePointerEx
SetEndOfFile
ExitThread
FreeLibraryAndExitThread
HeapValidate
HeapWalk
WriteFile
GetConsoleOutputCP
ReadConsoleW
HeapAlloc
HeapFree
InitializeCriticalSectionAndSpinCount
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
HeapReAlloc
HeapSize
GetTimeZoneInformation
GetProcessHeap
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
K32EnumProcessModules
GetModuleFileNameA
FlushInstructionCache
VirtualAlloc

ole32

CoTaskMemFree

shell32

SHGetKnownFolderPath

advapi32

OpenProcessToken
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
RegGetValueW
RegOpenKeyExA
RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueW

Exports

Exports

CIFCreateMain
Create
Delete
JITCompile
JITCompile_v2
OpenCompiler10
OpenCompiler12
OpenCompiler9
OpenOGLCompiler
OpenVulkanCompiler
Register
freeBlock
getJITVersion

Sections

.text
Size: 21.1MB - Virtual size: 21.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 841KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15.7MB - Virtual size: 15.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 801KB - Virtual size: 800KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igc64.dll
.dll windows x64

3926faabeb633c30b6e237f70290dd04

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

LoadResource
LockResource
SizeofResource
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetFileType
WriteConsoleW
GetEnvironmentVariableW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetDiskFreeSpaceExA
GetFileAttributesW
GetFileInformationByHandle
GetFinalPathNameByHandleW
ReadFile
SetFileInformationByHandle
SetFileTime
CloseHandle
DuplicateHandle
GetLastError
SetLastError
Sleep
GetCurrentProcess
GetSystemInfo
GetSystemTime
VirtualQuery
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
MoveFileExW
GetModuleHandleExA
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
FindResourceExW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
RtlCaptureContext
ExpandEnvironmentStringsW
SetUnhandledExceptionFilter
GetCurrentThread
GetCurrentThreadId
LoadLibraryW
SetConsoleCtrlHandler
IsDebuggerPresent
GetCurrentProcessId
QueryPerformanceFrequency
QueryPerformanceCounter
RaiseException
WaitForSingleObject
__C_specific_handler
GetModuleHandleW
GetCommandLineW
GetProcessTimes
GetNativeSystemInfo
GetConsoleMode
SearchPathW
TerminateProcess
GetExitCodeProcess
CreateProcessW
CreateJobObjectW
AssignProcessToJobObject
SetInformationJobObject
LocalFree
FormatMessageA
DebugBreak
GetProcAddress
GetLargePageMinimum
VirtualFree
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
GetSystemTimePreciseAsFileTime
InitOnceBeginInitialize
InitOnceComplete
WaitForSingleObjectEx
GetExitCodeThread
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
GetStringTypeW
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
LoadLibraryExW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
SetEvent
WaitForMultipleObjectsEx
CreateEventExW
CreateThread
GetThreadPriority
GetTickCount64
ReleaseSemaphore
CreateSemaphoreExW
UnregisterWaitEx
RegisterWaitForSingleObject
FlushProcessWriteBuffers
TlsAlloc
TlsFree
RtlUnwindEx
RtlPcToFileHeader
ExitProcess
FreeLibrary
GetModuleHandleExW
SetStdHandle
SetFilePointerEx
SetEndOfFile
ExitThread
FreeLibraryAndExitThread
HeapValidate
HeapWalk
WriteFile
GetConsoleOutputCP
ReadConsoleW
HeapAlloc
HeapFree
InitializeCriticalSectionAndSpinCount
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
HeapReAlloc
HeapSize
GetTimeZoneInformation
GetProcessHeap
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
K32EnumProcessModulesEx
GetModuleFileNameA
FlushInstructionCache
VirtualAlloc
RtlUnwind

ole32

CoTaskMemFree

shell32

SHGetKnownFolderPath

advapi32

OpenProcessToken
AdjustTokenPrivileges
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
RegGetValueW
RegOpenKeyExA
RegCloseKey
LookupPrivilegeValueW

Exports

Exports

CIFCreateMain
Create
Delete
JITCompile
JITCompile_v2
OpenCompiler10
OpenCompiler12
OpenCompiler9
OpenOGLCompiler
OpenVulkanCompiler
Register
freeBlock
getJITVersion

Sections

.text
Size: 26.5MB - Virtual size: 26.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8.0MB - Virtual size: 8.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15.7MB - Virtual size: 15.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igcc_dch.inf
Graphics/igd10iumd32.dll
.dll windows x86

5dda52a44b7339132f55aba6366cbab1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegOpenKeyExA
RegEnumValueA
RegQueryValueExA
RegCloseKey
RegEnumKeyExA
RegQueryInfoKeyA
OpenProcessToken
AllocateAndInitializeSid
EqualSid
FreeSid
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegNotifyChangeKeyValue
EventWrite
EventUnregister
EventRegister
EventWriteTransfer

kernel32

TlsFree
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
GetSystemInfo
GetModuleFileNameW
CreateEventA
GetModuleHandleA
QueryPerformanceCounter
GetCurrentProcessId
WaitForMultipleObjects
SetThreadPriority
GetCurrentThread
QueryPerformanceFrequency
Sleep
GetTickCount
FreeLibrary
GetProcAddress
GetSystemDirectoryA
GetFileInformationByHandleEx
TlsAlloc
TlsSetValue
TlsGetValue
TerminateThread
LoadLibraryW
OutputDebugStringW
WideCharToMultiByte
VirtualFree
VirtualAlloc
GetSystemTimeAsFileTime
FormatMessageA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
GetSystemTimePreciseAsFileTime
ReleaseSRWLockShared
AcquireSRWLockShared
GetStringTypeW
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
SwitchToThread
GetExitCodeThread
EncodePointer
DecodePointer
LocalFree
LCMapStringEx
CompareStringEx
GetCPInfo
GetLocaleInfoEx
GetLastError
GetFileAttributesExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
ReleaseMutex
InitializeSListHead
FreeLibraryWhenCallbackReturns
GetCurrentProcess
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CreateThread
InterlockedFlushSList
UnregisterWaitEx
RegisterWaitForSingleObject
SetLastError
LoadLibraryExW
RtlUnwind
RaiseException
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
GetFileType
WriteConsoleW
ExitProcess
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
ReadFile
ReadConsoleW
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
SetEndOfFile
CloseThreadpoolWork
SubmitThreadpoolWork
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
CreateMutexA
CloseHandle
WaitForSingleObject
GetModuleHandleW
CreateThreadpoolWork
InitOnceBeginInitialize
InitOnceComplete
UnlockFile
LockFileEx
GetOverlappedResult
FindFirstChangeNotificationW
K32EnumProcessModules
GetFileTime
GetFileSize
FindFirstFileW
DeleteFileA
CompareFileTime
LoadLibraryExA
GetModuleFileNameA
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSection
SetFilePointer
GetVersion
SetEvent
GetEnvironmentVariableA
IsWow64Process
GetSystemWow64DirectoryA
CreateFileA
CreateDirectoryW
GetFileAttributesW

ole32

OleRun

crypt32

CertFindCertificateInStore
CryptMsgGetParam
CryptQueryObject
CryptStringToBinaryA
CertNameToStrA

bcrypt

BCryptImportKeyPair
BCryptOpenAlgorithmProvider
BCryptSetProperty
BCryptFinishHash
BCryptHashData
BCryptGenerateSymmetricKey
BCryptGetProperty
BCryptDecrypt
BCryptVerifySignature
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptDestroyKey
BCryptCreateHash

ncrypt

NCryptDeleteKey
NCryptFreeObject
NCryptOpenStorageProvider
NCryptVerifySignature
NCryptImportKey

user32

DispatchMessageW
TranslateMessage
GetWindowRect
MessageBoxW
IsChild
PostThreadMessageW
EnumChildWindows
EnumDisplayDevicesW
GetDisplayConfigBufferSizes
QueryDisplayConfig
GetMessageW

shlwapi

PathCanonicalizeW
PathFileExistsW

ntdll

RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString

Exports

Exports

GTPin_Init
OpenAdapter10
OpenAdapter10_2

Sections

.text
Size: 8.3MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12.4MB - Virtual size: 12.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd10iumd64.dll
.dll windows x64

de194aab361871816af7ea02ef4dd8e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

advapi32

RegOpenKeyExA
RegEnumValueA
RegQueryValueExA
RegCloseKey
RegEnumKeyExA
RegQueryInfoKeyA
OpenProcessToken
AllocateAndInitializeSid
EqualSid
FreeSid
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegNotifyChangeKeyValue
EventWrite
EventUnregister
EventRegister
EventWriteTransfer

kernel32

TlsFree
VirtualAlloc
GetLastError
VirtualFree
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
GetSystemInfo
GetModuleFileNameW
CreateEventA
GetModuleHandleA
QueryPerformanceCounter
GetCurrentProcessId
WaitForMultipleObjects
SetThreadPriority
GetCurrentThread
QueryPerformanceFrequency
Sleep
GetTickCount
FreeLibrary
GetProcAddress
GetSystemDirectoryA
RtlUnwind
GetFileInformationByHandleEx
TlsAlloc
TlsSetValue
TlsGetValue
TerminateThread
LoadLibraryW
OutputDebugStringW
WideCharToMultiByte
GetSystemTimeAsFileTime
FormatMessageA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
GetSystemTimePreciseAsFileTime
ReleaseSRWLockShared
AcquireSRWLockShared
GetStringTypeW
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
SwitchToThread
GetExitCodeThread
EncodePointer
DecodePointer
LocalFree
LCMapStringEx
CompareStringEx
GetCPInfo
GetLocaleInfoEx
GetFileAttributesExW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
ReleaseMutex
GetModuleHandleW
InitializeSListHead
FreeLibraryWhenCallbackReturns
GetCurrentProcess
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CreateThread
InterlockedFlushSList
UnregisterWaitEx
RegisterWaitForSingleObject
SetLastError
LoadLibraryExW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
GetFileType
WriteConsoleW
ExitProcess
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
ReadFile
ReadConsoleW
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
SetEndOfFile
CloseThreadpoolWork
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
CreateMutexA
CloseHandle
WaitForSingleObject
GetStartupInfoW
SubmitThreadpoolWork
CreateThreadpoolWork
InitOnceBeginInitialize
InitOnceComplete
UnlockFile
LockFileEx
GetOverlappedResult
FindFirstChangeNotificationW
K32EnumProcessModules
GetFileTime
GetFileSize
FindFirstFileW
DeleteFileA
CompareFileTime
LoadLibraryExA
GetModuleFileNameA
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSection
GetVersion
SetEvent
GetEnvironmentVariableA
IsWow64Process
GetSystemWow64DirectoryA
SetFilePointer
CreateFileA
GetFileAttributesW
CreateDirectoryW

ole32

OleRun

crypt32

CertFindCertificateInStore
CryptMsgGetParam
CryptQueryObject
CryptStringToBinaryA
CertNameToStrA

bcrypt

BCryptImportKeyPair
BCryptOpenAlgorithmProvider
BCryptSetProperty
BCryptFinishHash
BCryptHashData
BCryptGenerateSymmetricKey
BCryptGetProperty
BCryptDecrypt
BCryptVerifySignature
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptDestroyKey
BCryptCreateHash

ncrypt

NCryptDeleteKey
NCryptFreeObject
NCryptOpenStorageProvider
NCryptVerifySignature
NCryptImportKey

user32

IsChild
GetWindowRect
PostThreadMessageW
DispatchMessageW
MessageBoxW
TranslateMessage
EnumChildWindows
EnumDisplayDevicesW
GetDisplayConfigBufferSizes
QueryDisplayConfig
GetMessageW

shlwapi

PathFileExistsW
PathCanonicalizeW

ntdll

RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString

Exports

Exports

GTPin_Init
OpenAdapter10
OpenAdapter10_2

Sections

.text
Size: 12.0MB - Virtual size: 12.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12.8MB - Virtual size: 12.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd10mg32.dll
.dll windows x86

e2db94c5db456012f8c872b0ae89603e

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

53:af:ad:23:41:9f:de:b2:1f:48:6d:bf:0f:42:9a:60:20:29:2c:74:08:74:f3:a1:ef:55:ca:60:c1:00:c0:df
Signer

Actual PE Digest

53:af:ad:23:41:9f:de:b2:1f:48:6d:bf:0f:42:9a:60:20:29:2c:74:08:74:f3:a1:ef:55:ca:60:c1:00:c0:df

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
GetModuleFileNameW
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW
DecodePointer

Exports

Exports

OpenMultiGPU11

Sections

.text
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd10mg64.dll
.dll windows x64

707404586edb102e7d5bb69ac01a7d75

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9c:d1:86:94:8b:ab:cc:61:30:d5:62:d7:9e:fc:4d:3b:81:0b:e7:4e:6b:c3:87:34:34:f6:f2:80:79:e9:cc:2b
Signer

Actual PE Digest

9c:d1:86:94:8b:ab:cc:61:30:d5:62:d7:9e:fc:4d:3b:81:0b:e7:4e:6b:c3:87:34:34:f6:f2:80:79:e9:cc:2b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
GetModuleFileNameW
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW

Exports

Exports

OpenMultiGPU11

Sections

.text
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd11dxva32.dll
.dll windows x86

fa8408adbff40c5b964fc0d54f3ae845

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForMultipleObjectsEx
CreateEventExA
CreateSemaphoreExW
Sleep
GetCurrentThreadId
GetThreadId
GetSystemInfo
CreateThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
FreeLibrary
GetModuleFileNameA
GetProcAddress
LoadLibraryExA
ReleaseSemaphore
SetEvent
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
CloseHandle
WriteFile
SetFilePointer
ReadFile
GetCurrentProcess
GetModuleHandleA
K32GetProcessImageFileNameA
InitializeCriticalSectionAndSpinCount
ResetEvent
GetCurrentProcessId
GetSystemWow64DirectoryA
VerSetConditionMask
VerifyVersionInfoW
OpenEventA
GetProcessId
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetModuleHandleExW
CreateFileW
SetLastError
DeviceIoControl
WaitForSingleObjectEx
SetEndOfFile
GetFileSize
CreateFileA
CreateDirectoryA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetErrorMode
GetSystemTimePreciseAsFileTime
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
FormatMessageA
WideCharToMultiByte
LocalFree
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
WakeAllConditionVariable
SleepConditionVariableSRW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetStdHandle
GetFileType
GetModuleFileNameW
WriteConsoleW
ExitProcess
GetCurrentThread
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
OutputDebugStringW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle

advapi32

RegNotifyChangeKeyValue
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
EventWrite
EventUnregister
EventRegister
RegGetValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
CryptDestroyHash
RegCreateKeyExA
RegCloseKey

setupapi

CM_Get_DevNode_Registry_PropertyW
CM_Get_Device_ID_ListW
CM_Locate_DevNodeW
CM_Open_DevNode_Key
CM_Get_Device_Interface_ListW
CM_Get_Device_Interface_List_SizeW
CM_Get_Device_ID_List_SizeW

ole32

StringFromGUID2
CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitializeSecurity
CoSetProxyBlanket

oleaut32

SafeArrayUnlock
VariantInit
SafeArrayGetVartype
SafeArrayCopy
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayRedim
SafeArrayCreate
SafeArrayDestroy
VariantClear

api-ms-win-devices-config-l1-1-1

CM_MapCrToWin32Err

Exports

Exports

?MosGetMemNinjaCounter@MosUtilities@@SGHXZ
?MosGetMemNinjaCounterGfx@MosUtilities@@SGHXZ
?MosSetUltFlag@MosUtilities@@SGXE@Z
@GTPin_Init@12
DumpRegistryKeyDefinitions
DumpRegistryKeyDefinitions3
_MOS_GetMemNinjaCounter@0
_MOS_GetMemNinjaCounterGfx@0
_MOS_SetUltFlag@4
_OpenDxva11@4

Sections

.text
Size: 8.8MB - Virtual size: 8.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54.7MB - Virtual size: 54.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7.3MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd11dxva64.dll
.dll windows x64

56090249b2e7295da87f07fe6e4d0d41

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForMultipleObjectsEx
CreateEventExA
CreateSemaphoreExW
Sleep
GetCurrentThreadId
GetThreadId
GetSystemInfo
CreateThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
FreeLibrary
GetModuleFileNameA
GetProcAddress
LoadLibraryExA
ReleaseSemaphore
SetEvent
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
CloseHandle
WriteFile
SetFilePointer
ReadFile
GetCurrentProcess
GetModuleHandleA
K32GetProcessImageFileNameA
InitializeCriticalSectionAndSpinCount
ResetEvent
GetCurrentProcessId
VerSetConditionMask
VerifyVersionInfoW
OpenEventA
GetProcessId
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetModuleHandleExW
CreateFileW
SetLastError
DeviceIoControl
RtlUnwind
WaitForSingleObjectEx
GetFileSize
CreateFileA
CreateDirectoryA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetErrorMode
GetSystemTimePreciseAsFileTime
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
FormatMessageA
WideCharToMultiByte
LocalFree
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetStdHandle
GetFileType
GetModuleFileNameW
WriteConsoleW
ExitProcess
GetCurrentThread
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
OutputDebugStringW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
SetEndOfFile

advapi32

RegCreateKeyExA
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
EventWrite
EventUnregister
EventRegister
RegGetValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegNotifyChangeKeyValue
CryptDestroyHash
RegCloseKey

setupapi

CM_Get_Device_ID_List_SizeW
CM_Open_DevNode_Key
CM_Locate_DevNodeW
CM_Get_DevNode_Registry_PropertyW
CM_Get_Device_ID_ListW
CM_Get_Device_Interface_List_SizeW
CM_Get_Device_Interface_ListW

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
StringFromGUID2

oleaut32

VariantClear
VariantInit
SafeArrayGetVartype
SafeArrayCopy
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayCreate
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetUBound

api-ms-win-devices-config-l1-1-1

CM_MapCrToWin32Err

Exports

Exports

?MosGetMemNinjaCounter@MosUtilities@@SAHXZ
?MosGetMemNinjaCounterGfx@MosUtilities@@SAHXZ
?MosSetUltFlag@MosUtilities@@SAXE@Z
DumpRegistryKeyDefinitions
DumpRegistryKeyDefinitions3
GTPin_Init
MOS_GetMemNinjaCounter
MOS_GetMemNinjaCounterGfx
MOS_SetUltFlag
OpenDxva11

Sections

.text
Size: 9.4MB - Virtual size: 9.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55.3MB - Virtual size: 55.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd12dxva32.dll
.dll windows x86

8992413e4e29f9a7183d1b207c25ef9c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObjectEx
WaitForMultipleObjectsEx
CreateEventExA
CreateSemaphoreExW
Sleep
GetCurrentThreadId
GetThreadId
GetSystemInfo
CreateThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
FreeLibrary
GetModuleFileNameA
ReleaseSemaphore
LoadLibraryExA
SetEvent
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
CloseHandle
WriteFile
SetFilePointer
ReadFile
InitializeCriticalSectionAndSpinCount
ResetEvent
GetCurrentProcessId
VerSetConditionMask
VerifyVersionInfoW
GetSystemWow64DirectoryA
GetProcessId
GetCurrentProcess
OpenEventA
K32GetProcessImageFileNameA
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetFileSize
CreateFileA
CreateDirectoryA
GetModuleHandleA
LeaveCriticalSection
GetProcAddress
SetErrorMode
GetSystemTimePreciseAsFileTime
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
FormatMessageA
WideCharToMultiByte
LocalFree
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
WakeAllConditionVariable
SleepConditionVariableSRW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
GetFileType
GetModuleFileNameW
WriteConsoleW
ExitProcess
GetCurrentThread
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
HeapAlloc
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
OutputDebugStringW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
SetEndOfFile
DeviceIoControl
EnterCriticalSection

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
EventWrite
EventUnregister
EventRegister
RegGetValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegNotifyChangeKeyValue
RegCreateKeyExA
RegCloseKey

ole32

CoUninitialize
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
StringFromGUID2

oleaut32

VariantInit
VariantClear
SafeArrayGetVartype
SafeArrayCopy
SafeArrayCreate
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock

setupapi

CM_Get_Device_ID_List_SizeW
CM_Open_DevNode_Key
CM_Locate_DevNodeW
CM_Get_Device_ID_ListW
CM_Get_DevNode_Registry_PropertyW

api-ms-win-devices-config-l1-1-1

CM_MapCrToWin32Err

Exports

Exports

?MosGetMemNinjaCounter@MosUtilities@@SGHXZ
?MosGetMemNinjaCounterGfx@MosUtilities@@SGHXZ
?MosSetUltFlag@MosUtilities@@SGXE@Z
@GTPin_Init@12
DumpRegistryKeyDefinitions
_MOS_GetMemNinjaCounter@0
_MOS_GetMemNinjaCounterGfx@0
_MOS_SetUltFlag@4
_OpenDxva12@4

Sections

.text
Size: 8.6MB - Virtual size: 8.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54.7MB - Virtual size: 54.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7.3MB - Virtual size: 7.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd12dxva64.dll
.dll windows x64

3f5fa8da34bad34e188831cccf86bf82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObjectEx
WaitForMultipleObjectsEx
CreateEventExA
CreateSemaphoreExW
Sleep
GetCurrentThreadId
GetThreadId
GetSystemInfo
CreateThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
FreeLibrary
ReleaseSemaphore
GetProcAddress
LoadLibraryExA
SetEvent
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
CloseHandle
WriteFile
SetFilePointer
ReadFile
InitializeCriticalSectionAndSpinCount
ResetEvent
GetCurrentProcessId
VerSetConditionMask
VerifyVersionInfoW
GetProcessId
GetCurrentProcess
OpenEventA
K32GetProcessImageFileNameA
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetFileSize
CreateFileA
CreateDirectoryA
GetModuleHandleA
LeaveCriticalSection
GetModuleFileNameA
SetErrorMode
GetSystemTimePreciseAsFileTime
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
FormatMessageA
WideCharToMultiByte
LocalFree
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
GetFileType
GetModuleFileNameW
WriteConsoleW
ExitProcess
GetCurrentThread
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
HeapAlloc
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
OutputDebugStringW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
SetEndOfFile
RtlUnwind
EnterCriticalSection
DeviceIoControl

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
EventWrite
EventUnregister
EventRegister
RegGetValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegNotifyChangeKeyValue
RegCreateKeyExA
RegCloseKey

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
StringFromGUID2

oleaut32

VariantClear
VariantInit
SafeArrayGetVartype
SafeArrayCreate
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayCopy

setupapi

CM_Get_Device_ID_List_SizeW
CM_Open_DevNode_Key
CM_Locate_DevNodeW
CM_Get_Device_ID_ListW
CM_Get_DevNode_Registry_PropertyW

api-ms-win-devices-config-l1-1-1

CM_MapCrToWin32Err

Exports

Exports

?MosGetMemNinjaCounter@MosUtilities@@SAHXZ
?MosGetMemNinjaCounterGfx@MosUtilities@@SAHXZ
?MosSetUltFlag@MosUtilities@@SAXE@Z
DumpRegistryKeyDefinitions
GTPin_Init
MOS_GetMemNinjaCounter
MOS_GetMemNinjaCounterGfx
MOS_SetUltFlag
OpenDxva12

Sections

.text
Size: 9.1MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55.3MB - Virtual size: 55.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd12um32icl.dll
.dll windows x86

c431c835ce342503e66ef89f5404fe64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateDirectoryW
GetCurrentApplicationUserModelId
OpenProcess
GetCurrentProcessId
K32EnumProcessModules
K32GetModuleFileNameExA
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetOEMCP
WriteFile
GetFileAttributesW
GetProcessHeap
VirtualAlloc
MultiByteToWideChar
VirtualFree
WideCharToMultiByte
GetModuleFileNameW
CreateToolhelp32Snapshot
Module32First
Module32Next
GetCommandLineA
FindResourceA
LoadResource
LockResource
GetUserDefaultLangID
FreeResource
GetLastError
SetLastError
InitializeCriticalSection
InitializeSRWLock
ReleaseSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockShared
AcquireSRWLockExclusive
GetACP
IsValidCodePage
CreateDirectoryA
GetTimeZoneInformation
CreateFile2
GetModuleHandleA
DeleteCriticalSection
EnterCriticalSection
GetSystemWow64DirectoryA
LeaveCriticalSection
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetModuleFileNameA
LoadLibraryExA
CloseHandle
SetStdHandle
ReadConsoleW
CompareFileTime
CreateFileW
DeleteFileA
FindClose
FindFirstFileW
FindNextFileW
GetFileSize
GetFileTime
LocalFree
FreeLibrary
FindFirstChangeNotificationW
GetFileSizeEx
ReadFile
SetEndOfFile
GetOverlappedResult
SetEvent
WaitForSingleObject
CreateEventA
LockFileEx
UnlockFile
WaitForSingleObjectEx
FormatMessageA
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
GetCurrentThreadId
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
RaiseException
GetStringTypeW
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimePreciseAsFileTime
Sleep
GetExitCodeThread
GetCurrentDirectoryW
FindFirstFileExW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
SetFilePointerEx
GetFileInformationByHandleEx
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
IsProcessorFeaturePresent
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetLocaleInfoEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetStdHandle
GetFileType
WriteConsoleW
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
OutputDebugStringW
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
FlushFileBuffers

user32

GetAsyncKeyState

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
FreeSid
EqualSid
AllocateAndInitializeSid
OpenProcessToken
RegSetValueExA
EventWrite
EventUnregister
EventRegister
GetTokenInformation
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

bcrypt

BCryptGenerateSymmetricKey
BCryptGetProperty
BCryptDecrypt
BCryptSetProperty
BCryptOpenAlgorithmProvider

crypt32

CryptMsgGetParam
CertNameToStrA
CertFindCertificateInStore
CryptQueryObject
CryptStringToBinaryA

shlwapi

PathCanonicalizeW
PathFileExistsW

Exports

Exports

OpenAdapter_Gen11LP

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd12um32ldr.dll
.dll windows x86

a14c4f1b7b096d9531651bf56835d374

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
LoadLibraryExA
GetModuleFileNameA
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW
DecodePointer

Exports

Exports

OpenAdapter12

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd12um32xel.dll
.dll windows x86

bbf5c6adbc53b81c6bd926d412080a5a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateDirectoryW
GetCurrentApplicationUserModelId
OpenProcess
GetCurrentProcessId
K32EnumProcessModules
K32GetModuleFileNameExA
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetOEMCP
WriteFile
GetFileAttributesW
GetProcessHeap
VirtualAlloc
MultiByteToWideChar
VirtualFree
WideCharToMultiByte
GetModuleFileNameW
CreateToolhelp32Snapshot
Module32First
Module32Next
GetCommandLineA
FindResourceA
LoadResource
LockResource
GetUserDefaultLangID
FreeResource
GetLastError
SetLastError
InitializeCriticalSection
InitializeSRWLock
ReleaseSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockShared
AcquireSRWLockExclusive
GetACP
IsValidCodePage
CreateDirectoryA
GetTimeZoneInformation
CreateFile2
LoadLibraryW
GetModuleHandleA
DeleteCriticalSection
EnterCriticalSection
GetSystemWow64DirectoryA
LeaveCriticalSection
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetModuleFileNameA
LoadLibraryExA
CloseHandle
SetStdHandle
ReadConsoleW
CompareFileTime
CreateFileW
DeleteFileA
FindClose
FindFirstFileW
FindNextFileW
GetFileSize
GetFileTime
LocalFree
FreeLibrary
FindFirstChangeNotificationW
GetFileSizeEx
ReadFile
SetEndOfFile
GetOverlappedResult
SetEvent
WaitForSingleObject
CreateEventA
LockFileEx
UnlockFile
WaitForSingleObjectEx
FormatMessageA
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
GetCurrentThreadId
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimePreciseAsFileTime
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
RaiseException
GetStringTypeW
Sleep
GetExitCodeThread
GetCurrentDirectoryW
FindFirstFileExW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
SetFilePointerEx
GetFileInformationByHandleEx
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
IsProcessorFeaturePresent
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetLocaleInfoEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetStdHandle
GetFileType
WriteConsoleW
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
OutputDebugStringW
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
FlushFileBuffers

user32

GetAsyncKeyState

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
FreeSid
EqualSid
AllocateAndInitializeSid
OpenProcessToken
RegSetValueExA
EventWrite
EventUnregister
EventRegister
GetTokenInformation
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

bcrypt

BCryptGenerateSymmetricKey
BCryptGetProperty
BCryptDecrypt
BCryptSetProperty
BCryptOpenAlgorithmProvider

crypt32

CryptMsgGetParam
CertNameToStrA
CertFindCertificateInStore
CryptQueryObject
CryptStringToBinaryA

shlwapi

PathCanonicalizeW
PathFileExistsW

Exports

Exports

OpenAdapter_Gen12LP

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd12um64icl.dll
.dll windows x64

a3b2fdc85367da01be65c55670e7d01b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CreateDirectoryW
GetFileAttributesW
GetCurrentApplicationUserModelId
OpenProcess
GetCurrentProcessId
K32EnumProcessModules
K32GetModuleFileNameExA
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetOEMCP
MultiByteToWideChar
GetProcessHeap
VirtualAlloc
VirtualFree
GetModuleHandleA
WideCharToMultiByte
GetModuleFileNameW
CreateDirectoryA
CreateToolhelp32Snapshot
Module32First
Module32Next
GetCommandLineA
FindResourceA
LoadResource
LockResource
GetUserDefaultLangID
FreeResource
GetLastError
SetLastError
InitializeCriticalSection
InitializeSRWLock
ReleaseSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockShared
AcquireSRWLockExclusive
GetACP
IsValidCodePage
CloseHandle
GetTimeZoneInformation
CreateFile2
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetCurrentProcess
LoadLibraryA
GetModuleFileNameA
LoadLibraryExA
FreeLibrary
WriteFile
SetStdHandle
ReadConsoleW
CompareFileTime
CreateFileW
DeleteFileA
FindClose
FindFirstFileW
FindNextFileW
GetFileSize
GetFileTime
LocalFree
__C_specific_handler
FindFirstChangeNotificationW
GetFileSizeEx
ReadFile
SetEndOfFile
GetOverlappedResult
SetEvent
WaitForSingleObject
CreateEventA
LockFileEx
UnlockFile
WaitForSingleObjectEx
FormatMessageA
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
GetCurrentThreadId
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
RtlPcToFileHeader
RaiseException
GetStringTypeW
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimePreciseAsFileTime
Sleep
GetExitCodeThread
GetCurrentDirectoryW
FindFirstFileExW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
SetFilePointerEx
GetFileInformationByHandleEx
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
IsProcessorFeaturePresent
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetLocaleInfoEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetStdHandle
GetFileType
WriteConsoleW
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
OutputDebugStringW
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
FlushFileBuffers
RtlUnwind

user32

GetAsyncKeyState

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
FreeSid
EqualSid
AllocateAndInitializeSid
OpenProcessToken
RegSetValueExA
EventWrite
EventUnregister
EventRegister
GetTokenInformation
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

bcrypt

BCryptGetProperty
BCryptDecrypt
BCryptGenerateSymmetricKey
BCryptOpenAlgorithmProvider
BCryptSetProperty

crypt32

CryptQueryObject
CertNameToStrA
CertFindCertificateInStore
CryptMsgGetParam
CryptStringToBinaryA

shlwapi

PathFileExistsW
PathCanonicalizeW

Exports

Exports

OpenAdapter_Gen11LP

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd12um64ldr.dll
.dll windows x64

c55fc8d895ca21735d15e571d405e071

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
LoadLibraryExA
GetModuleFileNameA
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW

Exports

Exports

OpenAdapter12

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd12um64xel.dll
.dll windows x64

233d88378cd2a81171384f68076336e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CreateDirectoryW
GetFileAttributesW
GetCurrentApplicationUserModelId
OpenProcess
GetCurrentProcessId
K32EnumProcessModules
K32GetModuleFileNameExA
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetOEMCP
MultiByteToWideChar
GetProcessHeap
VirtualAlloc
VirtualFree
GetModuleHandleA
WideCharToMultiByte
GetModuleFileNameW
CreateDirectoryA
CreateToolhelp32Snapshot
Module32First
Module32Next
GetCommandLineA
FindResourceA
LoadResource
LockResource
GetUserDefaultLangID
FreeResource
GetLastError
SetLastError
InitializeCriticalSection
InitializeSRWLock
ReleaseSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockShared
AcquireSRWLockExclusive
GetACP
IsValidCodePage
CloseHandle
GetTimeZoneInformation
CreateFile2
LoadLibraryW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetCurrentProcess
LoadLibraryA
GetModuleFileNameA
LoadLibraryExA
FreeLibrary
WriteFile
SetStdHandle
ReadConsoleW
CompareFileTime
CreateFileW
DeleteFileA
FindClose
FindFirstFileW
FindNextFileW
GetFileSize
GetFileTime
LocalFree
__C_specific_handler
FindFirstChangeNotificationW
GetFileSizeEx
ReadFile
SetEndOfFile
GetOverlappedResult
SetEvent
WaitForSingleObject
CreateEventA
LockFileEx
UnlockFile
WaitForSingleObjectEx
FormatMessageA
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
GetCurrentThreadId
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimePreciseAsFileTime
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
RtlPcToFileHeader
RaiseException
GetStringTypeW
Sleep
GetExitCodeThread
GetCurrentDirectoryW
FindFirstFileExW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
SetFilePointerEx
GetFileInformationByHandleEx
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
IsProcessorFeaturePresent
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetLocaleInfoEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetStdHandle
GetFileType
WriteConsoleW
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
OutputDebugStringW
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
FlushFileBuffers
RtlUnwind

user32

GetAsyncKeyState

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
FreeSid
EqualSid
AllocateAndInitializeSid
OpenProcessToken
RegSetValueExA
EventWrite
EventUnregister
EventRegister
GetTokenInformation
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

bcrypt

BCryptGetProperty
BCryptDecrypt
BCryptGenerateSymmetricKey
BCryptOpenAlgorithmProvider
BCryptSetProperty

crypt32

CryptQueryObject
CertNameToStrA
CertFindCertificateInStore
CryptMsgGetParam
CryptStringToBinaryA

shlwapi

PathFileExistsW
PathCanonicalizeW

Exports

Exports

OpenAdapter_Gen12LP

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd12umd32.dll
.dll windows x86

ef2776fb021c66a9688122fcd4d1afa3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

crypt32

CertFindCertificateInStore
CryptMsgGetParam
CryptQueryObject
CertNameToStrA
CryptStringToBinaryA

bcrypt

BCryptGetProperty
BCryptGenerateSymmetricKey
BCryptSetProperty
BCryptDecrypt
BCryptOpenAlgorithmProvider

kernel32

CreateFile2
WriteFile
CloseHandle
CreateDirectoryA
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
GetFileAttributesW
GetOEMCP
VirtualAlloc
GetCurrentApplicationUserModelId
OpenProcess
GetCurrentProcessId
K32EnumProcessModules
K32GetModuleFileNameExA
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryA
Module32First
Module32Next
GetCommandLineA
FindResourceA
LoadResource
LockResource
GetUserDefaultLangID
FreeResource
GetLastError
SetLastError
InitializeSRWLock
ReleaseSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockShared
AcquireSRWLockExclusive
GetModuleFileNameA
LoadLibraryExA
FreeLibrary
GetSystemWow64DirectoryA
GetCommandLineW
GetCurrentProcess
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
CreateDirectoryW
GetACP
IsValidCodePage
CompareFileTime
CreateFileW
DeleteFileA
FindClose
FindFirstFileW
FindNextFileW
GetFileSize
GetFileTime
LocalFree
CreateToolhelp32Snapshot
FindFirstChangeNotificationW
GetFileSizeEx
ReadFile
SetEndOfFile
GetOverlappedResult
SetEvent
WaitForSingleObject
CreateEventA
LockFileEx
UnlockFile
WaitForSingleObjectEx
FormatMessageA
TryAcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
RaiseException
GetStringTypeW
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimePreciseAsFileTime
Sleep
GetExitCodeThread
GetCurrentDirectoryW
FindFirstFileExW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
SetFilePointerEx
GetFileInformationByHandleEx
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
IsProcessorFeaturePresent
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetLocaleInfoEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetStdHandle
GetFileType
WriteConsoleW
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
OutputDebugStringW
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
FlushFileBuffers
ReadConsoleW
SetStdHandle
GetTimeZoneInformation

user32

GetAsyncKeyState

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegQueryInfoKeyA
GetTokenInformation
RegEnumKeyExA
FreeSid
EqualSid
AllocateAndInitializeSid
OpenProcessToken
RegSetValueExA
EventWrite
EventUnregister
EventRegister
RegCloseKey

shlwapi

PathCanonicalizeW
PathFileExistsW

Exports

Exports

OpenAdapter12
OpenAdapter_Gen9

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd12umd64.dll
.dll windows x64

31f76155fbea7122b0bf665913ef5c04

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

crypt32

CertFindCertificateInStore
CryptMsgGetParam
CryptQueryObject
CertNameToStrA
CryptStringToBinaryA

bcrypt

BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptSetProperty
BCryptDecrypt
BCryptGenerateSymmetricKey

kernel32

CreateFile2
WriteFile
CloseHandle
CreateDirectoryA
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
GetFileAttributesW
GetOEMCP
VirtualAlloc
GetCurrentApplicationUserModelId
OpenProcess
GetCurrentProcessId
K32EnumProcessModules
K32GetModuleFileNameExA
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryA
Module32First
Module32Next
GetCommandLineA
FindResourceA
LoadResource
LockResource
GetUserDefaultLangID
FreeResource
GetLastError
SetLastError
InitializeSRWLock
ReleaseSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockShared
AcquireSRWLockExclusive
GetModuleFileNameA
LoadLibraryExA
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
CreateDirectoryW
GetACP
IsValidCodePage
CompareFileTime
CreateFileW
DeleteFileA
FindClose
FindFirstFileW
FindNextFileW
GetFileSize
GetFileTime
LocalFree
CreateToolhelp32Snapshot
FindFirstChangeNotificationW
GetFileSizeEx
ReadFile
SetEndOfFile
GetOverlappedResult
SetEvent
WaitForSingleObject
CreateEventA
LockFileEx
UnlockFile
WaitForSingleObjectEx
FormatMessageA
TryAcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
RtlPcToFileHeader
RaiseException
GetStringTypeW
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimePreciseAsFileTime
Sleep
GetExitCodeThread
GetCurrentDirectoryW
FindFirstFileExW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
SetFilePointerEx
GetFileInformationByHandleEx
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
IsProcessorFeaturePresent
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetLocaleInfoEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetStdHandle
GetFileType
WriteConsoleW
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
OutputDebugStringW
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
FlushFileBuffers
ReadConsoleW
SetStdHandle
GetTimeZoneInformation
RtlUnwind

user32

GetAsyncKeyState

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegQueryInfoKeyA
GetTokenInformation
RegEnumKeyExA
FreeSid
EqualSid
AllocateAndInitializeSid
OpenProcessToken
RegSetValueExA
EventWrite
EventUnregister
EventRegister
RegCloseKey

shlwapi

PathCanonicalizeW
PathFileExistsW

Exports

Exports

OpenAdapter12
OpenAdapter_Gen9

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd9dxva32.dll
.dll windows x86

70ed03a4380344c0d3643c80d783fb5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForMultipleObjectsEx
CreateEventExA
CreateSemaphoreExW
Sleep
GetCurrentThreadId
GetThreadId
GetSystemInfo
CreateThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
FreeLibrary
GetModuleFileNameA
WaitForSingleObjectEx
LoadLibraryExA
ReleaseSemaphore
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
CloseHandle
InitializeCriticalSectionAndSpinCount
ResetEvent
GetCurrentProcess
GetCurrentProcessId
VerSetConditionMask
VerifyVersionInfoW
GetSystemWow64DirectoryA
GetProcessId
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetModuleHandleA
OpenEventA
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileA
GetProcAddress
SetErrorMode
GetSystemTimePreciseAsFileTime
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
FormatMessageA
WideCharToMultiByte
LocalFree
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
WakeAllConditionVariable
SleepConditionVariableSRW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
GetFileType
GetModuleFileNameW
WriteConsoleW
ExitProcess
GetCurrentThread
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
HeapSize
HeapQueryInformation
OutputDebugStringW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
CreateFileW
SetStdHandle
SetEndOfFile
DeviceIoControl
CreateDirectoryA

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
EventWrite
EventUnregister
EventRegister
RegGetValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegNotifyChangeKeyValue
RegCreateKeyExA
RegCloseKey

ole32

CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
StringFromGUID2
CoInitializeEx
CoUninitialize

oleaut32

VariantInit
VariantClear
SafeArrayGetVartype
SafeArrayCopy
SafeArrayCreate
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock

setupapi

CM_Get_Device_ID_ListW
CM_Open_DevNode_Key
CM_Locate_DevNodeW
CM_Get_Device_ID_List_SizeW
CM_Get_DevNode_Registry_PropertyW

api-ms-win-devices-config-l1-1-1

CM_MapCrToWin32Err

Exports

Exports

?MosGetMemNinjaCounter@MosUtilities@@SGHXZ
?MosGetMemNinjaCounterGfx@MosUtilities@@SGHXZ
?MosSetUltFlag@MosUtilities@@SGXE@Z
@GTPin_Init@12
DumpRegistryKeyDefinitions
DumpRegistryKeyDefinitions3
_MOS_GetMemNinjaCounter@0
_MOS_GetMemNinjaCounterGfx@0
_MOS_SetUltFlag@4
_OpenDxva@4

Sections

.text
Size: 8.3MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42.6MB - Virtual size: 42.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7.3MB - Virtual size: 7.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 372KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igd9dxva64.dll
.dll windows x64

9a8c9b6a6915088dbcdb6017651f3f03

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForMultipleObjectsEx
CreateEventExA
CreateSemaphoreExW
Sleep
GetCurrentThreadId
GetThreadId
GetSystemInfo
CreateThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
FreeLibrary
GetModuleFileNameA
WaitForSingleObjectEx
LoadLibraryExA
ReleaseSemaphore
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
CloseHandle
InitializeCriticalSectionAndSpinCount
ResetEvent
GetCurrentProcess
GetCurrentProcessId
VerSetConditionMask
VerifyVersionInfoW
GetProcessId
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetModuleHandleA
OpenEventA
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileA
GetProcAddress
SetErrorMode
GetSystemTimePreciseAsFileTime
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
FormatMessageA
WideCharToMultiByte
LocalFree
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
GetFileType
GetModuleFileNameW
WriteConsoleW
ExitProcess
GetCurrentThread
HeapAlloc
HeapFree
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
HeapSize
HeapQueryInformation
OutputDebugStringW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
CreateFileW
SetStdHandle
SetEndOfFile
RtlUnwind
CreateDirectoryA
DeviceIoControl

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
EventWrite
EventUnregister
EventRegister
RegGetValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegNotifyChangeKeyValue
RegCreateKeyExA
RegCloseKey

ole32

CoUninitialize
CoCreateInstance
CoSetProxyBlanket
StringFromGUID2
CoInitializeSecurity
CoInitializeEx

oleaut32

VariantClear
VariantInit
SafeArrayGetVartype
SafeArrayCreate
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayCopy

setupapi

CM_Get_Device_ID_ListW
CM_Open_DevNode_Key
CM_Locate_DevNodeW
CM_Get_Device_ID_List_SizeW
CM_Get_DevNode_Registry_PropertyW

api-ms-win-devices-config-l1-1-1

CM_MapCrToWin32Err

Exports

Exports

?MosGetMemNinjaCounter@MosUtilities@@SAHXZ
?MosGetMemNinjaCounterGfx@MosUtilities@@SAHXZ
?MosSetUltFlag@MosUtilities@@SAXE@Z
DumpRegistryKeyDefinitions
DumpRegistryKeyDefinitions3
GTPin_Init
MOS_GetMemNinjaCounter
MOS_GetMemNinjaCounterGfx
MOS_SetUltFlag
OpenDxva

Sections

.text
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43.2MB - Virtual size: 43.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdail32.dll
.dll windows x86

9102d159b6cb4620534febd350e34ba4

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a2:6d:ea:54:a5:56:7b:dd:8c:1b:f2:1b:70:e2:88:fe:1f:f0:da:8c:65:ae:10:37:57:c9:6f:e7:26:73:f2:d0
Signer

Actual PE Digest

a2:6d:ea:54:a5:56:7b:dd:8c:1b:f2:1b:70:e2:88:fe:1f:f0:da:8c:65:ae:10:37:57:c9:6f:e7:26:73:f2:d0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
WriteConsoleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
DecodePointer

Exports

Exports

OpenAIL9

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdail64.dll
.dll windows x64

bba779eece43a6c4c3ebba0377ec4cef

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2a:d2:4a:f8:91:ab:dd:7d:71:c0:19:8a:a0:3d:9d:f9:3c:1e:0f:87:e7:22:50:7b:ef:15:82:c2:3b:39:7c:f6
Signer

Actual PE Digest

2a:d2:4a:f8:91:ab:dd:7d:71:c0:19:8a:a0:3d:9d:f9:3c:1e:0f:87:e7:22:50:7b:ef:15:82:c2:3b:39:7c:f6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
WriteConsoleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle

Exports

Exports

OpenAIL9

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdde32.dll
.dll windows x86

e647f1418d9e9bc1810ad45c5c59ec08

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
GetExitCodeThread
DecodePointer
GetLastError
DeleteCriticalSection
ReleaseMutex
CreateMutexW
FreeLibrary
GetVersion
CreateFileW
LoadLibraryA
HeapAlloc
HeapFree
GetProcessHeap
Sleep
DisableThreadLibraryCalls
CreateThread
CreateSemaphoreExW
CreateEventW
WaitForSingleObject
ReleaseSemaphore
SetEvent
HeapSize
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
SetFilePointerEx
GetFileSizeEx
FreeEnvironmentStringsW
InitializeCriticalSectionEx
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleA
CloseHandle
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
EnumSystemLocalesW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
EncodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RaiseException
RtlUnwind
InterlockedFlushSList
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
ExitProcess
WriteFile
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID

advapi32

CryptReleaseContext
CryptAcquireContextA
EventWrite
EventUnregister
CryptDestroyHash
CryptEncrypt
CryptExportKey
CryptGenRandom
CryptDestroyKey
CryptGenKey
RegSetValueExA
RegCloseKey
RegCreateKeyExA
EventRegister

setupapi

CM_Get_Device_Interface_List_SizeW
CM_Get_Device_Interface_ListW

ole32

CoCreateInstance
CoInitializeSecurity
CoUninitialize
CoInitializeEx
CoTaskMemFree
OleRun

bcrypt

BCryptEncrypt
BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptCreateHash
BCryptHashData
BCryptFinishHash
BCryptDestroyKey
BCryptDestroyHash
BCryptOpenAlgorithmProvider

crypt32

CertFindCertificateInStore
CertFreeCertificateContext
CryptImportPublicKeyInfoEx2
CryptGetMessageCertificates
CertCloseStore

user32

EnumChildWindows
MessageBoxW
GetWindowRect
IsChild
PostThreadMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetDisplayConfigBufferSizes
EnumDisplayDevicesW
QueryDisplayConfig

ntdll

RtlInitAnsiString
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString

dxgi

CreateDXGIFactory

d3d11

D3D11CreateDevice

Exports

Exports

QueryHDCPDriverInterface

Sections

.text
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdde64.dll
.dll windows x64

ea0ba124c24891f1173d9d6933bfff30

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
GetProcAddress
GetExitCodeThread
DecodePointer
GetLastError
DeleteCriticalSection
ReleaseMutex
CreateMutexW
FreeLibrary
GetVersion
CreateFileW
LoadLibraryA
HeapAlloc
HeapFree
GetProcessHeap
Sleep
DisableThreadLibraryCalls
CreateThread
CreateSemaphoreExW
CreateEventW
WaitForSingleObject
ReleaseSemaphore
SetEvent
HeapSize
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
SetFilePointerEx
GetFileSizeEx
FreeEnvironmentStringsW
InitializeCriticalSectionEx
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleA
CloseHandle
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
EnumSystemLocalesW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
EncodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
ExitProcess
WriteFile
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID

advapi32

CryptReleaseContext
CryptAcquireContextA
EventWrite
EventUnregister
CryptDestroyHash
CryptEncrypt
CryptExportKey
CryptGenRandom
CryptDestroyKey
CryptGenKey
RegSetValueExA
RegCloseKey
RegCreateKeyExA
EventRegister

setupapi

CM_Get_Device_Interface_List_SizeW
CM_Get_Device_Interface_ListW

ole32

CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoUninitialize
OleRun

bcrypt

BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptEncrypt
BCryptDestroyKey
BCryptHashData
BCryptDestroyHash
BCryptCreateHash
BCryptFinishHash

crypt32

CertFindCertificateInStore
CertFreeCertificateContext
CryptImportPublicKeyInfoEx2
CryptGetMessageCertificates
CertCloseStore

user32

MessageBoxW
GetWindowRect
IsChild
EnumDisplayDevicesW
DispatchMessageW
TranslateMessage
GetMessageW
EnumChildWindows
QueryDisplayConfig
PostThreadMessageW
GetDisplayConfigBufferSizes

ntdll

RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString

dxgi

CreateDXGIFactory

d3d11

D3D11CreateDevice

Exports

Exports

QueryHDCPDriverInterface

Sections

.text
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdext32.dll
.dll windows x86

7939c3a3b8b26de5a3ea413af6d66002

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringW
InitOnceBeginInitialize
InitOnceComplete
CreateFileW
DecodePointer
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
LCMapStringW
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
CloseHandle
WriteConsoleW

dxgi

CreateDXGIFactory2

Exports

Exports

D3D11CreateDeviceExtensionContext
D3D11CreateDeviceExtensionContext1
D3D11CreateDeviceExtensionContext2
D3D11CreateDeviceExtensionContextInternal
D3D11D3D12CreateDeviceExtensionContext2
D3D11D3D12CreateDeviceExtensionContextInternal
D3D11D3D12DestroyDeviceExtensionContext2
D3D11DestroyDeviceExtensionContext
D3D11EnumInternalExtensions
D3D11GetSupportedVersions
D3D11GetSupportedVersions2
D3D12CreateDeviceExtensionContext
D3D12CreateDeviceExtensionContext2
D3D12CreateDeviceExtensionContextInternal
D3D12DestroyDeviceExtensionContext
D3D12EnumInternalExtensions
D3D12GetSupportedVersions
D3D12GetSupportedVersions2
_INTC_CreateDeviceExtensionContext
_INTC_D3D11_BeginUAVOverlap
_INTC_D3D11_CreateDeviceExtensionContext
_INTC_D3D11_CreateTexture2D
_INTC_D3D11_EndUAVOverlap
_INTC_D3D11_INT_CreateDeviceExtensionContext
_INTC_D3D11_MultiDrawIndexedInstancedIndirect
_INTC_D3D11_MultiDrawIndexedInstancedIndirectCountIndirect
_INTC_D3D11_MultiDrawInstancedIndirect
_INTC_D3D11_MultiDrawInstancedIndirectCountIndirect
_INTC_D3D11_SetDepthBounds
_INTC_D3D12_BuildRaytracingAccelerationStructure_Host
_INTC_D3D12_CopyRaytracingAccelerationStructure_Host
_INTC_D3D12_CreateCommandQueue
_INTC_D3D12_CreateCommittedResource
_INTC_D3D12_CreateComputePipelineState
_INTC_D3D12_CreateDeviceExtensionContext
_INTC_D3D12_CreateHostRTASResource
_INTC_D3D12_CreatePlacedResource
_INTC_D3D12_CreateReservedResource
_INTC_D3D12_EmitRaytracingAccelerationStructurePostbuildInfo_Host
_INTC_D3D12_GetRaytracingAccelerationStructurePrebuildInfo_Host
_INTC_D3D12_INT_ClearProceduralTextureView
_INTC_D3D12_INT_ClearTexelMaskView
_INTC_D3D12_INT_CopyProceduralTextureStatus
_INTC_D3D12_INT_CopyTextureRegion
_INTC_D3D12_INT_CreateCommittedResource
_INTC_D3D12_INT_CreateCommittedResource1
_INTC_D3D12_INT_CreateComputePipelineState
_INTC_D3D12_INT_CreateDeviceExtensionContext
_INTC_D3D12_INT_CreateGraphicsPipelineState
_INTC_D3D12_INT_CreateGraphicsPipelineState1
_INTC_D3D12_INT_CreateGraphicsPipelineState2
_INTC_D3D12_INT_CreatePlacedResource
_INTC_D3D12_INT_CreatePlacedResource1
_INTC_D3D12_INT_CreateProceduralTextureResourceView
_INTC_D3D12_INT_CreateRenderTargetView
_INTC_D3D12_INT_CreateReservedResource
_INTC_D3D12_INT_CreateReservedResource1
_INTC_D3D12_INT_CreateSampler
_INTC_D3D12_INT_CreateShaderResourceView
_INTC_D3D12_INT_CreateTexelMaskView
_INTC_D3D12_INT_CreateUnorderedAccessView
_INTC_D3D12_INT_GetDefaultTexelMaskGranularity
_INTC_D3D12_INT_RSSetViewports
_INTC_D3D12_INT_ResolveTexelMask
_INTC_D3D12_INT_ResourceBarrier
_INTC_D3D12_INT_SetCoarsePixelSizeState
_INTC_D3D12_INT_SetProceduralTextures
_INTC_D3D12_INT_SetRootTMVs
_INTC_D3D12_SetDriverEventMetadata
_INTC_D3D12_TransferHostRTAS
_INTC_INT_CreateDeviceExtensionContext

Sections

.text
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 46B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdext64.dll
.dll windows x64

07b0f93e9e67d2d65765a963431096f9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringW
InitOnceBeginInitialize
InitOnceComplete
WriteConsoleW
CreateFileW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
QueryPerformanceCounter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
LCMapStringW
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
CloseHandle

dxgi

CreateDXGIFactory2

Exports

Exports

D3D11CreateDeviceExtensionContext
D3D11CreateDeviceExtensionContext1
D3D11CreateDeviceExtensionContext2
D3D11CreateDeviceExtensionContextInternal
D3D11D3D12CreateDeviceExtensionContext2
D3D11D3D12CreateDeviceExtensionContextInternal
D3D11D3D12DestroyDeviceExtensionContext2
D3D11DestroyDeviceExtensionContext
D3D11EnumInternalExtensions
D3D11GetSupportedVersions
D3D11GetSupportedVersions2
D3D12CreateDeviceExtensionContext
D3D12CreateDeviceExtensionContext2
D3D12CreateDeviceExtensionContextInternal
D3D12DestroyDeviceExtensionContext
D3D12EnumInternalExtensions
D3D12GetSupportedVersions
D3D12GetSupportedVersions2
_INTC_CreateDeviceExtensionContext
_INTC_D3D11_BeginUAVOverlap
_INTC_D3D11_CreateDeviceExtensionContext
_INTC_D3D11_CreateTexture2D
_INTC_D3D11_EndUAVOverlap
_INTC_D3D11_INT_CreateDeviceExtensionContext
_INTC_D3D11_MultiDrawIndexedInstancedIndirect
_INTC_D3D11_MultiDrawIndexedInstancedIndirectCountIndirect
_INTC_D3D11_MultiDrawInstancedIndirect
_INTC_D3D11_MultiDrawInstancedIndirectCountIndirect
_INTC_D3D11_SetDepthBounds
_INTC_D3D12_BuildRaytracingAccelerationStructure_Host
_INTC_D3D12_CopyRaytracingAccelerationStructure_Host
_INTC_D3D12_CreateCommandQueue
_INTC_D3D12_CreateCommittedResource
_INTC_D3D12_CreateComputePipelineState
_INTC_D3D12_CreateDeviceExtensionContext
_INTC_D3D12_CreateHostRTASResource
_INTC_D3D12_CreatePlacedResource
_INTC_D3D12_CreateReservedResource
_INTC_D3D12_EmitRaytracingAccelerationStructurePostbuildInfo_Host
_INTC_D3D12_GetRaytracingAccelerationStructurePrebuildInfo_Host
_INTC_D3D12_INT_ClearProceduralTextureView
_INTC_D3D12_INT_ClearTexelMaskView
_INTC_D3D12_INT_CopyProceduralTextureStatus
_INTC_D3D12_INT_CopyTextureRegion
_INTC_D3D12_INT_CreateCommittedResource
_INTC_D3D12_INT_CreateCommittedResource1
_INTC_D3D12_INT_CreateComputePipelineState
_INTC_D3D12_INT_CreateDeviceExtensionContext
_INTC_D3D12_INT_CreateGraphicsPipelineState
_INTC_D3D12_INT_CreateGraphicsPipelineState1
_INTC_D3D12_INT_CreateGraphicsPipelineState2
_INTC_D3D12_INT_CreatePlacedResource
_INTC_D3D12_INT_CreatePlacedResource1
_INTC_D3D12_INT_CreateProceduralTextureResourceView
_INTC_D3D12_INT_CreateRenderTargetView
_INTC_D3D12_INT_CreateReservedResource
_INTC_D3D12_INT_CreateReservedResource1
_INTC_D3D12_INT_CreateSampler
_INTC_D3D12_INT_CreateShaderResourceView
_INTC_D3D12_INT_CreateTexelMaskView
_INTC_D3D12_INT_CreateUnorderedAccessView
_INTC_D3D12_INT_GetDefaultTexelMaskGranularity
_INTC_D3D12_INT_RSSetViewports
_INTC_D3D12_INT_ResolveTexelMask
_INTC_D3D12_INT_ResourceBarrier
_INTC_D3D12_INT_SetCoarsePixelSizeState
_INTC_D3D12_INT_SetProceduralTextures
_INTC_D3D12_INT_SetRootTMVs
_INTC_D3D12_SetDriverEventMetadata
_INTC_D3D12_TransferHostRTAS
_INTC_INT_CreateDeviceExtensionContext

Sections

.text
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdfcl32.dll
.dll windows x86

6213754fedf024c8477b791fdd7882fd

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2a:28:99:c0:d2:d7:cf:27:b1:1d:4d:7b:c4:c2:31:44:1c:e7:3b:b4:8f:de:e0:58:68:c3:fe:6f:b8:51:63:92
Signer

Actual PE Digest

2a:28:99:c0:d2:d7:cf:27:b1:1d:4d:7b:c4:c2:31:44:1c:e7:3b:b4:8f:de:e0:58:68:c3:fe:6f:b8:51:63:92

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadResource
LockResource
SizeofResource
FindResourceA
GetStdHandle
GetEnvironmentVariableW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetFileAttributesW
GetFileInformationByHandle
GetFileType
ReadFile
SetFileInformationByHandle
SetFileTime
CloseHandle
GetLastError
SetLastError
GetCurrentProcess
GetSystemTime
GetModuleFileNameW
GetModuleHandleExA
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineW
GetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
LoadLibraryA
LoadLibraryExA
GetProcAddress
LoadLibraryW
K32EnumProcessModules
WriteConsoleW
TerminateProcess
LocalFree
FormatMessageA
RaiseException
GetCurrentThreadId
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetUnhandledExceptionFilter
GetCurrentProcessId
GetModuleHandleW
GetModuleFileNameA
SystemTimeToFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
FreeLibrary
QueryPerformanceCounter
GetSystemTimePreciseAsFileTime
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
DecodePointer
LCMapStringEx
WakeAllConditionVariable
SleepConditionVariableSRW
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ExitProcess
GetModuleHandleExW
SetEndOfFile
SetStdHandle
SetFilePointerEx
ReadConsoleW
WriteFile
GetConsoleOutputCP
HeapFree
GetFileSizeEx
HeapAlloc
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
GetProcessHeap
IsValidCodePage
GetACP
GetOEMCP
HeapSize

ole32

CoTaskMemFree

shell32

SHGetKnownFolderPath

advapi32

CryptGenRandom
CryptReleaseContext
CryptAcquireContextW

Exports

Exports

CIFCreateMain
Create
Delete
Register

Sections

.text
Size: 330KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 477KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdfcl64.dll
.dll windows x64

01140f4ea06d0c9e0155fb8ee2f20799

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

LoadResource
LockResource
SizeofResource
FindResourceA
GetStdHandle
GetEnvironmentVariableW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetFileAttributesW
GetFileInformationByHandle
GetFileType
ReadFile
SetFileInformationByHandle
SetFileTime
CloseHandle
GetLastError
SetLastError
GetCurrentProcess
GetSystemTime
GetModuleFileNameW
SystemTimeToFileTime
GetModuleHandleExA
WideCharToMultiByte
HeapSize
GetCommandLineW
GetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
LoadLibraryA
LoadLibraryExA
GetProcAddress
LoadLibraryW
K32EnumProcessModulesEx
WriteConsoleW
TerminateProcess
LocalFree
FormatMessageA
RaiseException
GetCurrentThreadId
__C_specific_handler
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
RtlCaptureContext
SetUnhandledExceptionFilter
GetCurrentProcessId
GetModuleHandleW
GetModuleFileNameA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
FreeLibrary
QueryPerformanceCounter
GetSystemTimePreciseAsFileTime
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
DecodePointer
LCMapStringEx
WakeAllConditionVariable
SleepConditionVariableSRW
GetStringTypeW
GetCPInfo
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlPcToFileHeader
RtlUnwindEx
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ExitProcess
GetModuleHandleExW
SetEndOfFile
SetStdHandle
SetFilePointerEx
ReadConsoleW
WriteFile
GetConsoleOutputCP
HeapFree
GetFileSizeEx
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
GetProcessHeap
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
RtlUnwind

ole32

CoTaskMemFree

shell32

SHGetKnownFolderPath

advapi32

CryptGenRandom
CryptReleaseContext
CryptAcquireContextW

Exports

Exports

CIFCreateMain
Create
Delete
Register

Sections

.text
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 477KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdgmm32.dll
.dll windows x86

e3d5715c9497805609ea16336b3150a0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
EnterCriticalSection
TryEnterCriticalSection
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetModuleFileNameA
InitializeCriticalSection
VirtualFree
InitializeCriticalSectionAndSpinCount
GetCurrentProcessorNumber
SetEvent
CreateEventA
WaitForMultipleObjects
CreateThread
GetSystemInfo
VirtualQuery
WriteConsoleW
VirtualAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
InitializeCriticalSectionEx
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
GetModuleFileNameW
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
DecodePointer

advapi32

EventUnregister
EventRegister
EventWriteTransfer

Exports

Exports

??0GmmClientContext@GmmLib@@QAE@ABV01@@Z
??0GmmClientContext@GmmLib@@QAE@W4GMM_CLIENT_ENUM@@@Z
??0GmmClientContext@GmmLib@@QAE@W4GMM_CLIENT_ENUM@@PAVContext@1@@Z
??0GmmPageTableMgr@GmmLib@@QAE@ABV01@@Z
??0GmmPageTableMgr@GmmLib@@QAE@PAU_GMM_DEVICE_CALLBACKS_INT@@IPAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@PAVGmmClientContext@1@@Z
??0GmmPageTableMgr@GmmLib@@QAE@PAU_GMM_DEVICE_CALLBACKS_INT@@IPAVGmmClientContext@1@@Z
??0GmmPageTableMgr@GmmLib@@QAE@XZ
??1GmmClientContext@GmmLib@@UAE@XZ
??1GmmPageTableMgr@GmmLib@@UAE@XZ
??4GmmClientContext@GmmLib@@QAEAAV01@ABV01@@Z
??4GmmPageTableMgr@GmmLib@@QAEAAV01@ABV01@@Z
??_7GmmClientContext@GmmLib@@6B@
??_7GmmPageTableMgr@GmmLib@@6B@
?AllocMemory@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@PAX_KI1PBXAAPAXAAUGMM_ALLOC_INFO@@@Z
?AllocateHeapVA@GmmClientContext@GmmLib@@QAG_KPAUGMM_HEAP_REC@@_KI@Z
?AllocateHeapVA@GmmClientContext@GmmLib@@UAG_KPAUGMM_HEAP_REC@@_K@Z
?AuxTilePoolSize@GmmClientContext@GmmLib@@UAG_KPAVGmmResourceInfoWin@2@I@Z
?CachePolicyGetMaxL1HdcMocsIndex@GmmClientContext@GmmLib@@UAGIXZ
?CachePolicyGetMaxMocsIndex@GmmClientContext@GmmLib@@UAGIXZ
?CachePolicyGetMaxSpecialMocsIndex@GmmClientContext@GmmLib@@UAGIXZ
?CachePolicyGetMemoryObject@GmmClientContext@GmmLib@@UAG?ATMEMORY_OBJECT_CONTROL_STATE_REC@@PAVGmmResourceInfoWin@2@W4GMM_RESOURCE_USAGE_TYPE_ENUM@@@Z
?CachePolicyGetOriginalMemoryObject@GmmClientContext@GmmLib@@UAG?ATMEMORY_OBJECT_CONTROL_STATE_REC@@PAVGmmResourceInfoWin@2@@Z
?CachePolicyGetPATIndex@GmmClientContext@GmmLib@@UAGIPAVGmmResourceInfoWin@2@W4GMM_RESOURCE_USAGE_TYPE_ENUM@@@Z
?CachePolicyGetPteType@GmmClientContext@GmmLib@@UAG?ATGMM_PTE_CACHE_CONTROL_BITS_REC@@W4GMM_RESOURCE_USAGE_TYPE_ENUM@@@Z
?CachePolicyIsUsagePTECached@GmmClientContext@GmmLib@@UAGEW4GMM_RESOURCE_USAGE_TYPE_ENUM@@@Z
?ConfigureDeviceAddressSpace@GmmClientContext@GmmLib@@UAGETGMM_ESCAPE_HANDLE_REC@@0TGMM_ESCAPE_FUNC_TYPE_REC@@_KEEE22@Z
?CopyResInfoObject@GmmClientContext@GmmLib@@UAGPAVGmmResourceInfoWin@2@PAV32@@Z
?CopyTileMappings@GmmClientContext@GmmLib@@UAG?AW4GMM_STATUS_ENUM@@TGMM_ESCAPE_HANDLE_REC@@0UGMM_COPY_TILE_MAPPINGS_REC_INT@@EPAUGMM_UMD_SYNCCONTEXT_REC@@PAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@TGMM_ESCAPE_FUNC_TYPE_REC@@PAU_GMM_DEVICE_CALLBACKS_INT@@IE@Z
?CreateAllocation@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@PAXABU_GMM_CREATE_RESOURCE_DESC@@PBTGMM_INITIAL_DATA@@AAPAXPAPAX@Z
?CreateCustomResInfoObject@GmmClientContext@GmmLib@@UAGPAVGmmResourceInfoWin@2@PAUGMM_RESCREATE_CUSTOM_PARAMS__REC@@@Z
?CreatePageTblMgrObject@GmmClientContext@GmmLib@@UAGPAVGmmPageTableMgr@2@PAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@I@Z
?CreatePageTblMgrObject@GmmClientContext@GmmLib@@UAGPAVGmmPageTableMgr@2@PAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@IPAU_GmmClientAllocationCallbacks_@@@Z
?CreatePageTblMgrObject@GmmClientContext@GmmLib@@UAGPAVGmmPageTableMgr@2@PAU_GMM_DEVICE_CALLBACKS_INT@@PAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@I@Z
?CreatePageTblMgrObject@GmmClientContext@GmmLib@@UAGPAVGmmPageTableMgr@2@PAU_GMM_DEVICE_CALLBACKS_INT@@PAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@IPAU_GmmClientAllocationCallbacks_@@@Z
?CreatePool@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@ABU_GMM_CREATE_POOL_DESC_@@IAAPAX@Z
?CreateResInfoObject@GmmClientContext@GmmLib@@UAGPAVGmmResourceInfoWin@2@PAUGMM_RESCREATE_PARAMS_REC@@@Z
?CreateResInfoObject@GmmClientContext@GmmLib@@UAGPAVGmmResourceInfoWin@2@PAUGMM_RESCREATE_PARAMS_REC@@PAU_GmmClientAllocationCallbacks_@@@Z
?CreateResource@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@PAXABU_GMM_CREATE_RESOURCE_DESC@@_KAAPAX@Z
?CreateTiledResource@GmmClientContext@GmmLib@@UAGETGMM_ESCAPE_HANDLE_REC@@0PAUGMM_UMD_SYNCCONTEXT_REC@@PAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@PAVGmmResourceInfoWin@2@TGMM_ESCAPE_FUNC_TYPE_REC@@I@Z
?DestroyPageTblMgrObject@GmmClientContext@GmmLib@@UAGXPAVGmmPageTableMgr@2@@Z
?DestroyPageTblMgrObject@GmmClientContext@GmmLib@@UAGXPAVGmmPageTableMgr@2@PAU_GmmClientAllocationCallbacks_@@@Z
?DestroyPool@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@PAX@Z
?DestroyResInfoObject@GmmClientContext@GmmLib@@UAGXPAVGmmResourceInfoWin@2@@Z
?DestroyResInfoObject@GmmClientContext@GmmLib@@UAGXPAVGmmResourceInfoWin@2@PAU_GmmClientAllocationCallbacks_@@@Z
?DestroyResource@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@PAXIPA_K_K@Z
?DestroyTiledResource@GmmClientContext@GmmLib@@UAGETGMM_ESCAPE_HANDLE_REC@@0PAUGMM_UMD_SYNCCONTEXT_REC@@PAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@PAVGmmResourceInfoWin@2@TGMM_ESCAPE_FUNC_TYPE_REC@@I@Z
?EnhancedBufferMap@GmmClientContext@GmmLib@@UAGETGMM_ESCAPE_HANDLE_REC@@0TGMM_ESCAPE_FUNC_TYPE_REC@@IQAPAUGMM_ENHANCED_BUFFER_INFO_REC@@@Z
?Evict@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@IPBQAXIAA_K@Z
?EvictPageTablePool@GmmPageTableMgr@GmmLib@@UAEXPAIH@Z
?FreeGSCBuffer@GmmClientContext@GmmLib@@UAG?AW4GMM_STATUS_ENUM@@TGMM_ESCAPE_HANDLE_REC@@0PAXTGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?FreeGpuVirtualAddress@GmmClientContext@GmmLib@@UAEJPBU_GMM_FREEGPUVIRTUALADDRESS@@@Z
?FreeHeapVA@GmmClientContext@GmmLib@@UAG?AW4GMM_STATUS_ENUM@@PAUGMM_HEAP_REC@@_K1@Z
?FreeMemory@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@IPBQAXIPA_K_K@Z
?FreeTRGpuVirtualAddress@GmmPageTableMgr@GmmLib@@UAEJPAUGMM_UMD_SYNCCONTEXT_REC@@PBTGMM_DDI_FREEGPUVIRTUALADDRSS_INT@@E@Z
?GetAuxL3TableAddr@GmmPageTableMgr@GmmLib@@UAE_KXZ
?GetCachePolicyElement@GmmClientContext@GmmLib@@UAG?AUGMM_CACHE_POLICY_ELEMENT_REC@@W4GMM_RESOURCE_USAGE_TYPE_ENUM@@@Z
?GetCachePolicyTlbElement@GmmClientContext@GmmLib@@UAG?AUGMM_CACHE_POLICY_TBL_ELEMENT_REC@@I@Z
?GetCachePolicyUsage@GmmClientContext@GmmLib@@UAGPAUGMM_CACHE_POLICY_ELEMENT_REC@@XZ
?GetCacheSizes@GmmClientContext@GmmLib@@UAGXPAUGMM_CACHE_SIZES_REC@@@Z
?GetClientContext@GmmPageTableMgr@GmmLib@@UAEPAVGmmClientContext@2@XZ
?GetClientType@GmmClientContext@GmmLib@@UAG?AW4GMM_CLIENT_ENUM@@XZ
?GetD3dSwizzlePattern@GmmClientContext@GmmLib@@UAGXPBU_SWIZZLE_DESCRIPTOR@@EPAUD3D12DDI_SWIZZLE_PATTERN_DESC_0004@@@Z
?GetD3dSwizzlePattern@GmmClientContext@GmmLib@@UAGXPBU_SWIZZLE_DESCRIPTOR@@EPAUD3D12DDI_SWIZZLE_PATTERN_DESC_0022@@@Z
?GetD3dSwizzlePattern@GmmClientContext@GmmLib@@UAGXPBU_SWIZZLE_DESCRIPTOR@@EPAUD3DWDDM2_0DDI_SWIZZLE_PATTERN_DESC@@@Z
?GetD3dSwizzlePattern@GmmClientContext@GmmLib@@UAGXPBU_SWIZZLE_DESCRIPTOR@@EPAUD3DWDDM2_2DDI_SWIZZLE_PATTERN_DESC@@@Z
?GetDebugAllocationInfo@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@PAXPAIPATGMM_GPU_VA_INFO@@1PATGMM_KMT_ALLOCATION_INFO@@@Z
?GetDeviceCallback@GmmClientContext@GmmLib@@QAEPAU_GMM_DEVICE_CALLBACKS_INT@@XZ
?GetExtendedTextureAlign@GmmClientContext@GmmLib@@UAGXIAAU__TEX_ALIGNMENT@@@Z
?GetGSCBuffer@GmmClientContext@GmmLib@@UAG?AW4GMM_STATUS_ENUM@@TGMM_ESCAPE_HANDLE_REC@@0PAPAXPAITGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?GetGpuVA@GmmClientContext@GmmLib@@UAG_KPAX@Z
?GetHeap32Base@GmmClientContext@GmmLib@@UAG_KTGMM_ESCAPE_HANDLE_REC@@0PAITGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?GetInternalGpuVaRangeLimit@GmmClientContext@GmmLib@@UAG_KXZ
?GetLibContext@GmmClientContext@GmmLib@@UAEPAVContext@2@XZ
?GetLibContext@GmmPageTableMgr@GmmLib@@AAEPAVContext@2@XZ
?GetLogicalTileShape@GmmClientContext@GmmLib@@UAG?AW4GMM_STATUS_ENUM@@IPAI00@Z
?GetLosslessCompressionType@GmmClientContext@GmmLib@@UAG?AW4GMM_E2ECOMP_FORMAT_ENUM@@W4GMM_RESOURCE_FORMAT_ENUM@@@Z
?GetMaxGpuVirtualAddressBits@GmmClientContext@GmmLib@@UAGIPAVGmmResourceInfoWin@2@@Z
?GetMediaSurfaceStateCompressionFormat@GmmClientContext@GmmLib@@UAGEW4GMM_RESOURCE_FORMAT_ENUM@@@Z
?GetOverrideGfxPartition@GmmClientContext@GmmLib@@AAE?AU__GMM_GFX_PARTITIONING@@PAU3@TGMM_ESCAPE_HANDLE_REC@@1TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?GetPlatformInfo@GmmClientContext@GmmLib@@UAGAAU__GMM_PLATFORM_RESOURCE_REC@@XZ
?GetSLMaddressRange@GmmClientContext@GmmLib@@UAG_KTGMM_ESCAPE_HANDLE_REC@@0_KTGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?GetSetGfxPartitionProcessSingleton@GmmClientContext@GmmLib@@AAEXTGMM_ESCAPE_HANDLE_REC@@0PAU__GMM_GFX_PARTITIONING@@ETGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?GetSetProcessGfxPartition@GmmClientContext@GmmLib@@AAEITGMM_ESCAPE_HANDLE_REC@@0PAU__GMM_GFX_PARTITIONING@@ETGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?GetSkuTable@GmmClientContext@GmmLib@@UAGABU_SKU_FEATURE_TABLE@@XZ
?GetSurfaceStateCompressionFormat@GmmClientContext@GmmLib@@UAGEW4GMM_RESOURCE_FORMAT_ENUM@@@Z
?GetSurfaceStateFormat@GmmClientContext@GmmLib@@UAG?AW4GMM_SURFACESTATE_FORMAT_ENUM@@W4GMM_RESOURCE_FORMAT_ENUM@@@Z
?GetSurfaceStateL1CachePolicy@GmmClientContext@GmmLib@@UAGEW4GMM_RESOURCE_USAGE_TYPE_ENUM@@@Z
?GetSurfaceStateL2CachePolicy@GmmClientContext@GmmLib@@UAGEW4GMM_RESOURCE_USAGE_TYPE_ENUM@@@Z
?GetSwizzleDesc@GmmClientContext@GmmLib@@UAGPBU_SWIZZLE_DESCRIPTOR@@W4_EXTERNAL_SWIZZLE_NAME@@W4_EXTERNAL_RES_TYPE@@E_N@Z
?GetTRL3TableAddr@GmmPageTableMgr@GmmLib@@UAE_KXZ
?GetTileGfxAddress@GmmClientContext@GmmLib@@UAG_KPAVGmmResourceInfoWin@2@IIII@Z
?GetTileShape@GmmClientContext@GmmLib@@UAG?AW4GMM_STATUS_ENUM@@PAVGmmResourceInfoWin@2@PAI11@Z
?GetTrashPageGfxAddress@GmmClientContext@GmmLib@@UAG_KTGMM_ESCAPE_HANDLE_REC@@0TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?GetUseGlobalGtt@GmmClientContext@GmmLib@@UAGEW4GMM_HW_COMMAND_STREAMER_ENUM@@W4GMM_HW_COMMAND_ENUM@@PAT__D3DDDI_PATCHLOCATIONLIST_DRIVERID@@@Z
?GmmLogUmdEvent@GmmClientContext@GmmLib@@UAGXPAU_GMM_ARG_LOG_UMD_EVENT@@@Z
?GmmReverseEscapeListener@GmmClientContext@GmmLib@@UAEJXZ
?GmmSetCsrHandle@GmmPageTableMgr@GmmLib@@UAEXPAX@Z
?GmmSetDeviceInfo@GmmClientContext@GmmLib@@UAG?AW4GMM_STATUS_ENUM@@PAU_GMM_DEVICE_INFO_REC@@@Z
?InitContextAuxTableRegister@GmmPageTableMgr@GmmLib@@UAE?AW4GMM_STATUS_ENUM@@PAXW4_GMM_ENGINE_TYPE@@@Z
?InitContextTRTableRegister@GmmPageTableMgr@GmmLib@@UAE?AW4GMM_STATUS_ENUM@@PAXW4_GMM_ENGINE_TYPE@@@Z
?InitGpuBBQueueCallbacks@GmmPageTableMgr@GmmLib@@UAEXPAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@@Z
?IsCompressed@GmmClientContext@GmmLib@@UAGEW4GMM_RESOURCE_FORMAT_ENUM@@@Z
?IsNonTrivialResourcePoolingEnabled@GmmClientContext@GmmLib@@UAG_NXZ
?IsP0xx@GmmClientContext@GmmLib@@UAGEW4GMM_RESOURCE_FORMAT_ENUM@@@Z
?IsPlanar@GmmClientContext@GmmLib@@UAGEW4GMM_RESOURCE_FORMAT_ENUM@@@Z
?IsUVPacked@GmmClientContext@GmmLib@@UAGEW4GMM_RESOURCE_FORMAT_ENUM@@@Z
?IsYUVPacked@GmmClientContext@GmmLib@@UAGEW4GMM_RESOURCE_FORMAT_ENUM@@@Z
?MakeResident@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@IIPBQAXIAA_K1@Z
?MapCpuVA@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@PAXPAPAX@Z
?MapGpuVirtualAddress@GmmClientContext@GmmLib@@UAEJPAU_GMM_MAP_GPUVIRTUALADDRESS@@@Z
?MapTRGpuVirtualAddress@GmmPageTableMgr@GmmLib@@UAEJPAU_GMM_MAP_TR_GPUVIRTUALADDRESS@@E@Z
?MapTileInstancedGpuVirtualAddress@GmmClientContext@GmmLib@@UAEJPAU_GMM_MAP_GPUVA_TILE_INSTANCED_RESOURCE@@@Z
?Offer@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@IPBQAXW4GMM_OFFER_PRIORITY@@I@Z
?OverrideGfxPartition@GmmClientContext@GmmLib@@UAG?AU__GMM_GFX_PARTITIONING@@PAU3@TGMM_ESCAPE_HANDLE_REC@@1TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?OverrideGfxPartition@GmmClientContext@GmmLib@@UAG?AU__GMM_GFX_PARTITIONING@@XZ
?PigmsFreeGpuVa@GmmClientContext@GmmLib@@UAGETGMM_ESCAPE_HANDLE_REC@@0_K1TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?PigmsMapGpuVA@GmmClientContext@GmmLib@@UAGETGMM_ESCAPE_HANDLE_REC@@0_KIPAVGmmResourceInfoWin@2@TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?PigmsReserveGpuVA@GmmClientContext@GmmLib@@UAG_KTGMM_ESCAPE_HANDLE_REC@@0_KTGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?PoolTrim@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@PAXIAA_K@Z
?Reclaim@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@IIPBQAXPAW4GMM_RECLAIM_RESULT@@PAH_K@Z
?ResDestroySvmAllocation@GmmClientContext@GmmLib@@UAGETGMM_ESCAPE_HANDLE_REC@@0ITGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?ResMapGpuVA@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@AAUGMM_RES_MAP_GPUVA_ARG@@@Z
?ResMemcpy@GmmClientContext@GmmLib@@UAGXPAX0@Z
?ResUpdateAfterSharedOpen@GmmClientContext@GmmLib@@UAG?AW4GMM_STATUS_ENUM@@PAX0IPAVGmmResourceInfoWin@2@TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?ReserveGpuVirtualAddress@GmmClientContext@GmmLib@@UAEJPAUD3DDDI_RESERVEGPUVIRTUALADDRESS@@@Z
?ReserveSVMGPUVA@GmmClientContext@GmmLib@@AAE?AW4GMM_STATUS_ENUM@@PAU_GMM_DEVICE_CALLBACKS_INT@@PAU__GMM_GFX_PARTITIONING@@@Z
?ReserveTRGpuVirtualAddress@GmmPageTableMgr@GmmLib@@UAEJPAUGMM_UMD_SYNCCONTEXT_REC@@PAUD3DDDI_RESERVEGPUVIRTUALADDRESS@@E@Z
?ResetStream@GmmClientContext@GmmLib@@UAG?AW4_GMM_RESULT@@PAXPA_K_K@Z
?SpeedFrameAlloc@GmmClientContext@GmmLib@@UAE?AW4GMM_STATUS_ENUM@@IPAUGMM_RESCREATE_PARAMS_SPEEDFRAME_REC@@@Z
?SpeedFrameDeAlloc@GmmClientContext@GmmLib@@UAE?AW4GMM_STATUS_ENUM@@IPAI@Z
?SpeedFrameDeInit@GmmClientContext@GmmLib@@UAEJXZ
?SpeedFrameInit@GmmClientContext@GmmLib@@UAEJXZ
?UmDestroypHeap@GmmClientContext@GmmLib@@UAG?AW4GMM_STATUS_ENUM@@TGMM_ESCAPE_HANDLE_REC@@0PAPAUGMM_HEAP_REC@@TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?UmSetupHeap@GmmClientContext@GmmLib@@UAGPAUGMM_HEAP_REC@@TGMM_ESCAPE_HANDLE_REC@@0_K1ITGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?UpdateAuxTable@GmmPageTableMgr@GmmLib@@UAE?AW4GMM_STATUS_ENUM@@PBU__GMM_DDI_UPDATEAUXTABLE@@@Z
?UpdateSparseResourceOpaqueMapping@GmmClientContext@GmmLib@@UAG?AW4GMM_STATUS_ENUM@@TGMM_ESCAPE_HANDLE_REC@@0PAUGMM_UMD_SYNCCONTEXT_REC@@PAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@TGMM_ESCAPE_FUNC_TYPE_REC@@EIPAUGMM_UPDATE_SPARSE_RESOURCE_OPAQUE_MAPPINGS_REC@@@Z
?UpdateTRGpuVirtualAddress@GmmPageTableMgr@GmmLib@@UAEJPAPAUGMM_UMD_SYNCCONTEXT_REC@@PBU_GMM_UPADTE_TR_GPUVIRTUALADDRESS_INT@@E@Z
?UpdateTiledResourceMapping@GmmClientContext@GmmLib@@UAG?AW4GMM_STATUS_ENUM@@TGMM_ESCAPE_HANDLE_REC@@0UGMM_UPDATE_TILE_MAPPINGS_REC_INT@@EPAUGMM_UMD_SYNCCONTEXT_REC@@PAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@TGMM_ESCAPE_FUNC_TYPE_REC@@PAU_GMM_DEVICE_CALLBACKS_INT@@IE@Z
?__AllocateNodePool@GmmPageTableMgr@GmmLib@@AAEPAVGmmPageTablePool@2@IW4POOL_TYPE_REC@2@@Z
?__GetFreePoolNode@GmmPageTableMgr@GmmLib@@UAEPAVGmmPageTablePool@2@PAIW4POOL_TYPE_REC@2@@Z
?__GetSetSharedHeapObjectProcessSingleton@GmmClientContext@GmmLib@@AAEPAXTGMM_ESCAPE_HANDLE_REC@@0TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?__GetSharedHeapObject@GmmClientContext@GmmLib@@AAEPAXTGMM_ESCAPE_HANDLE_REC@@0TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?__NotifyAuxTChange@GmmPageTableMgr@GmmLib@@AAEX_KAA_K1AAE@Z
?__ReleaseUnusedPool@GmmPageTableMgr@GmmLib@@UAEXPAUGMM_UMD_SYNCCONTEXT_REC@@@Z
?__SetSharedHeapObject@GmmClientContext@GmmLib@@AAEITGMM_ESCAPE_HANDLE_REC@@0PAPAXTGMM_ESCAPE_FUNC_TYPE_REC@@@Z
_GmmAdapterDestroy@4
_GmmDestroy@4
_GmmInit@64
_InitializeGmm@8
_OpenGmm@4

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 571KB - Virtual size: 571KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdgmm64.dll
.dll windows x64

42f4dc3f9f9b26ae78ca0ba4230d47c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
ReleaseMutex
WaitForSingleObject
CreateMutexA
VirtualAlloc
VirtualFree
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GetCurrentProcessorNumber
SetEvent
CreateEventA
WaitForMultipleObjects
CreateThread
VirtualQuery
WriteConsoleW
InitializeCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
InitializeCriticalSectionEx
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
GetModuleFileNameW
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW

advapi32

EventUnregister
EventRegister
EventWriteTransfer

Exports

Exports

??0GmmClientContext@GmmLib@@QEAA@AEBV01@@Z
??0GmmClientContext@GmmLib@@QEAA@W4GMM_CLIENT_ENUM@@@Z
??0GmmClientContext@GmmLib@@QEAA@W4GMM_CLIENT_ENUM@@PEAVContext@1@@Z
??0GmmPageTableMgr@GmmLib@@QEAA@AEBV01@@Z
??0GmmPageTableMgr@GmmLib@@QEAA@PEAU_GMM_DEVICE_CALLBACKS_INT@@IPEAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@PEAVGmmClientContext@1@@Z
??0GmmPageTableMgr@GmmLib@@QEAA@PEAU_GMM_DEVICE_CALLBACKS_INT@@IPEAVGmmClientContext@1@@Z
??0GmmPageTableMgr@GmmLib@@QEAA@XZ
??1GmmClientContext@GmmLib@@UEAA@XZ
??1GmmPageTableMgr@GmmLib@@UEAA@XZ
??4GmmClientContext@GmmLib@@QEAAAEAV01@AEBV01@@Z
??4GmmPageTableMgr@GmmLib@@QEAAAEAV01@AEBV01@@Z
??_7GmmClientContext@GmmLib@@6B@
??_7GmmPageTableMgr@GmmLib@@6B@
?AllocMemory@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@PEAX_KI1PEBXAEAPEAXAEAUGMM_ALLOC_INFO@@@Z
?AllocateHeapVA@GmmClientContext@GmmLib@@QEAA_KPEAUGMM_HEAP_REC@@_KI@Z
?AllocateHeapVA@GmmClientContext@GmmLib@@UEAA_KPEAUGMM_HEAP_REC@@_K@Z
?AuxTilePoolSize@GmmClientContext@GmmLib@@UEAA_KPEAVGmmResourceInfoWin@2@I@Z
?CachePolicyGetMaxL1HdcMocsIndex@GmmClientContext@GmmLib@@UEAAIXZ
?CachePolicyGetMaxMocsIndex@GmmClientContext@GmmLib@@UEAAIXZ
?CachePolicyGetMaxSpecialMocsIndex@GmmClientContext@GmmLib@@UEAAIXZ
?CachePolicyGetMemoryObject@GmmClientContext@GmmLib@@UEAA?ATMEMORY_OBJECT_CONTROL_STATE_REC@@PEAVGmmResourceInfoWin@2@W4GMM_RESOURCE_USAGE_TYPE_ENUM@@@Z
?CachePolicyGetOriginalMemoryObject@GmmClientContext@GmmLib@@UEAA?ATMEMORY_OBJECT_CONTROL_STATE_REC@@PEAVGmmResourceInfoWin@2@@Z
?CachePolicyGetPATIndex@GmmClientContext@GmmLib@@UEAAIPEAVGmmResourceInfoWin@2@W4GMM_RESOURCE_USAGE_TYPE_ENUM@@@Z
?CachePolicyGetPteType@GmmClientContext@GmmLib@@UEAA?ATGMM_PTE_CACHE_CONTROL_BITS_REC@@W4GMM_RESOURCE_USAGE_TYPE_ENUM@@@Z
?CachePolicyIsUsagePTECached@GmmClientContext@GmmLib@@UEAAEW4GMM_RESOURCE_USAGE_TYPE_ENUM@@@Z
?ConfigureDeviceAddressSpace@GmmClientContext@GmmLib@@UEAAETGMM_ESCAPE_HANDLE_REC@@0TGMM_ESCAPE_FUNC_TYPE_REC@@_KEEE22@Z
?CopyResInfoObject@GmmClientContext@GmmLib@@UEAAPEAVGmmResourceInfoWin@2@PEAV32@@Z
?CopyTileMappings@GmmClientContext@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@TGMM_ESCAPE_HANDLE_REC@@0UGMM_COPY_TILE_MAPPINGS_REC_INT@@EPEAUGMM_UMD_SYNCCONTEXT_REC@@PEAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@TGMM_ESCAPE_FUNC_TYPE_REC@@PEAU_GMM_DEVICE_CALLBACKS_INT@@IE@Z
?CreateAllocation@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@PEAXAEBU_GMM_CREATE_RESOURCE_DESC@@PEBTGMM_INITIAL_DATA@@AEAPEAXPEAPEAX@Z
?CreateCustomResInfoObject@GmmClientContext@GmmLib@@UEAAPEAVGmmResourceInfoWin@2@PEAUGMM_RESCREATE_CUSTOM_PARAMS__REC@@@Z
?CreatePageTblMgrObject@GmmClientContext@GmmLib@@UEAAPEAVGmmPageTableMgr@2@PEAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@I@Z
?CreatePageTblMgrObject@GmmClientContext@GmmLib@@UEAAPEAVGmmPageTableMgr@2@PEAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@IPEAU_GmmClientAllocationCallbacks_@@@Z
?CreatePageTblMgrObject@GmmClientContext@GmmLib@@UEAAPEAVGmmPageTableMgr@2@PEAU_GMM_DEVICE_CALLBACKS_INT@@PEAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@I@Z
?CreatePageTblMgrObject@GmmClientContext@GmmLib@@UEAAPEAVGmmPageTableMgr@2@PEAU_GMM_DEVICE_CALLBACKS_INT@@PEAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@IPEAU_GmmClientAllocationCallbacks_@@@Z
?CreatePool@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@AEBU_GMM_CREATE_POOL_DESC_@@IAEAPEAX@Z
?CreateResInfoObject@GmmClientContext@GmmLib@@UEAAPEAVGmmResourceInfoWin@2@PEAUGMM_RESCREATE_PARAMS_REC@@@Z
?CreateResInfoObject@GmmClientContext@GmmLib@@UEAAPEAVGmmResourceInfoWin@2@PEAUGMM_RESCREATE_PARAMS_REC@@PEAU_GmmClientAllocationCallbacks_@@@Z
?CreateResource@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@PEAXAEBU_GMM_CREATE_RESOURCE_DESC@@_KAEAPEAX@Z
?CreateTiledResource@GmmClientContext@GmmLib@@UEAAETGMM_ESCAPE_HANDLE_REC@@0PEAUGMM_UMD_SYNCCONTEXT_REC@@PEAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@PEAVGmmResourceInfoWin@2@TGMM_ESCAPE_FUNC_TYPE_REC@@I@Z
?DestroyPageTblMgrObject@GmmClientContext@GmmLib@@UEAAXPEAVGmmPageTableMgr@2@@Z
?DestroyPageTblMgrObject@GmmClientContext@GmmLib@@UEAAXPEAVGmmPageTableMgr@2@PEAU_GmmClientAllocationCallbacks_@@@Z
?DestroyPool@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@PEAX@Z
?DestroyResInfoObject@GmmClientContext@GmmLib@@UEAAXPEAVGmmResourceInfoWin@2@@Z
?DestroyResInfoObject@GmmClientContext@GmmLib@@UEAAXPEAVGmmResourceInfoWin@2@PEAU_GmmClientAllocationCallbacks_@@@Z
?DestroyResource@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@PEAXIPEA_K_K@Z
?DestroyTiledResource@GmmClientContext@GmmLib@@UEAAETGMM_ESCAPE_HANDLE_REC@@0PEAUGMM_UMD_SYNCCONTEXT_REC@@PEAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@PEAVGmmResourceInfoWin@2@TGMM_ESCAPE_FUNC_TYPE_REC@@I@Z
?EnhancedBufferMap@GmmClientContext@GmmLib@@UEAAETGMM_ESCAPE_HANDLE_REC@@0TGMM_ESCAPE_FUNC_TYPE_REC@@IQEAPEAUGMM_ENHANCED_BUFFER_INFO_REC@@@Z
?Evict@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@IPEBQEAXIAEA_K@Z
?EvictPageTablePool@GmmPageTableMgr@GmmLib@@UEAAXPEAIH@Z
?FreeGSCBuffer@GmmClientContext@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@TGMM_ESCAPE_HANDLE_REC@@0PEAXTGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?FreeGpuVirtualAddress@GmmClientContext@GmmLib@@UEAAJPEBU_GMM_FREEGPUVIRTUALADDRESS@@@Z
?FreeHeapVA@GmmClientContext@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@PEAUGMM_HEAP_REC@@_K1@Z
?FreeMemory@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@IPEBQEAXIPEA_K_K@Z
?FreeTRGpuVirtualAddress@GmmPageTableMgr@GmmLib@@UEAAJPEAUGMM_UMD_SYNCCONTEXT_REC@@PEBTGMM_DDI_FREEGPUVIRTUALADDRSS_INT@@E@Z
?GetAuxL3TableAddr@GmmPageTableMgr@GmmLib@@UEAA_KXZ
?GetCachePolicyElement@GmmClientContext@GmmLib@@UEAA?AUGMM_CACHE_POLICY_ELEMENT_REC@@W4GMM_RESOURCE_USAGE_TYPE_ENUM@@@Z
?GetCachePolicyTlbElement@GmmClientContext@GmmLib@@UEAA?AUGMM_CACHE_POLICY_TBL_ELEMENT_REC@@I@Z
?GetCachePolicyUsage@GmmClientContext@GmmLib@@UEAAPEAUGMM_CACHE_POLICY_ELEMENT_REC@@XZ
?GetCacheSizes@GmmClientContext@GmmLib@@UEAAXPEAUGMM_CACHE_SIZES_REC@@@Z
?GetClientContext@GmmPageTableMgr@GmmLib@@UEAAPEAVGmmClientContext@2@XZ
?GetClientType@GmmClientContext@GmmLib@@UEAA?AW4GMM_CLIENT_ENUM@@XZ
?GetD3dSwizzlePattern@GmmClientContext@GmmLib@@UEAAXPEBU_SWIZZLE_DESCRIPTOR@@EPEAUD3D12DDI_SWIZZLE_PATTERN_DESC_0004@@@Z
?GetD3dSwizzlePattern@GmmClientContext@GmmLib@@UEAAXPEBU_SWIZZLE_DESCRIPTOR@@EPEAUD3D12DDI_SWIZZLE_PATTERN_DESC_0022@@@Z
?GetD3dSwizzlePattern@GmmClientContext@GmmLib@@UEAAXPEBU_SWIZZLE_DESCRIPTOR@@EPEAUD3DWDDM2_0DDI_SWIZZLE_PATTERN_DESC@@@Z
?GetD3dSwizzlePattern@GmmClientContext@GmmLib@@UEAAXPEBU_SWIZZLE_DESCRIPTOR@@EPEAUD3DWDDM2_2DDI_SWIZZLE_PATTERN_DESC@@@Z
?GetDebugAllocationInfo@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@PEAXPEAIPEATGMM_GPU_VA_INFO@@1PEATGMM_KMT_ALLOCATION_INFO@@@Z
?GetDeviceCallback@GmmClientContext@GmmLib@@QEAAPEAU_GMM_DEVICE_CALLBACKS_INT@@XZ
?GetExtendedTextureAlign@GmmClientContext@GmmLib@@UEAAXIAEAU__TEX_ALIGNMENT@@@Z
?GetGSCBuffer@GmmClientContext@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@TGMM_ESCAPE_HANDLE_REC@@0PEAPEAXPEAITGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?GetGpuVA@GmmClientContext@GmmLib@@UEAA_KPEAX@Z
?GetHeap32Base@GmmClientContext@GmmLib@@UEAA_KTGMM_ESCAPE_HANDLE_REC@@0PEAITGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?GetInternalGpuVaRangeLimit@GmmClientContext@GmmLib@@UEAA_KXZ
?GetLibContext@GmmClientContext@GmmLib@@UEAAPEAVContext@2@XZ
?GetLibContext@GmmPageTableMgr@GmmLib@@AEAAPEAVContext@2@XZ
?GetLogicalTileShape@GmmClientContext@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@IPEAI00@Z
?GetLosslessCompressionType@GmmClientContext@GmmLib@@UEAA?AW4GMM_E2ECOMP_FORMAT_ENUM@@W4GMM_RESOURCE_FORMAT_ENUM@@@Z
?GetMaxGpuVirtualAddressBits@GmmClientContext@GmmLib@@UEAAIPEAVGmmResourceInfoWin@2@@Z
?GetMediaSurfaceStateCompressionFormat@GmmClientContext@GmmLib@@UEAAEW4GMM_RESOURCE_FORMAT_ENUM@@@Z
?GetOverrideGfxPartition@GmmClientContext@GmmLib@@AEAA?AU__GMM_GFX_PARTITIONING@@PEAU3@TGMM_ESCAPE_HANDLE_REC@@1TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?GetPlatformInfo@GmmClientContext@GmmLib@@UEAAAEAU__GMM_PLATFORM_RESOURCE_REC@@XZ
?GetSLMaddressRange@GmmClientContext@GmmLib@@UEAA_KTGMM_ESCAPE_HANDLE_REC@@0_KTGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?GetSetGfxPartitionProcessSingleton@GmmClientContext@GmmLib@@AEAAXTGMM_ESCAPE_HANDLE_REC@@0PEAU__GMM_GFX_PARTITIONING@@ETGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?GetSetProcessGfxPartition@GmmClientContext@GmmLib@@AEAAITGMM_ESCAPE_HANDLE_REC@@0PEAU__GMM_GFX_PARTITIONING@@ETGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?GetSkuTable@GmmClientContext@GmmLib@@UEAAAEBU_SKU_FEATURE_TABLE@@XZ
?GetSurfaceStateCompressionFormat@GmmClientContext@GmmLib@@UEAAEW4GMM_RESOURCE_FORMAT_ENUM@@@Z
?GetSurfaceStateFormat@GmmClientContext@GmmLib@@UEAA?AW4GMM_SURFACESTATE_FORMAT_ENUM@@W4GMM_RESOURCE_FORMAT_ENUM@@@Z
?GetSurfaceStateL1CachePolicy@GmmClientContext@GmmLib@@UEAAEW4GMM_RESOURCE_USAGE_TYPE_ENUM@@@Z
?GetSurfaceStateL2CachePolicy@GmmClientContext@GmmLib@@UEAAEW4GMM_RESOURCE_USAGE_TYPE_ENUM@@@Z
?GetSwizzleDesc@GmmClientContext@GmmLib@@UEAAPEBU_SWIZZLE_DESCRIPTOR@@W4_EXTERNAL_SWIZZLE_NAME@@W4_EXTERNAL_RES_TYPE@@E_N@Z
?GetTRL3TableAddr@GmmPageTableMgr@GmmLib@@UEAA_KXZ
?GetTileGfxAddress@GmmClientContext@GmmLib@@UEAA_KPEAVGmmResourceInfoWin@2@IIII@Z
?GetTileShape@GmmClientContext@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@PEAVGmmResourceInfoWin@2@PEAI11@Z
?GetTrashPageGfxAddress@GmmClientContext@GmmLib@@UEAA_KTGMM_ESCAPE_HANDLE_REC@@0TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?GetUseGlobalGtt@GmmClientContext@GmmLib@@UEAAEW4GMM_HW_COMMAND_STREAMER_ENUM@@W4GMM_HW_COMMAND_ENUM@@PEAT__D3DDDI_PATCHLOCATIONLIST_DRIVERID@@@Z
?GmmLogUmdEvent@GmmClientContext@GmmLib@@UEAAXPEAU_GMM_ARG_LOG_UMD_EVENT@@@Z
?GmmReverseEscapeListener@GmmClientContext@GmmLib@@UEAAJXZ
?GmmSetCsrHandle@GmmPageTableMgr@GmmLib@@UEAAXPEAX@Z
?GmmSetDeviceInfo@GmmClientContext@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@PEAU_GMM_DEVICE_INFO_REC@@@Z
?InitContextAuxTableRegister@GmmPageTableMgr@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@PEAXW4_GMM_ENGINE_TYPE@@@Z
?InitContextTRTableRegister@GmmPageTableMgr@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@PEAXW4_GMM_ENGINE_TYPE@@@Z
?InitGpuBBQueueCallbacks@GmmPageTableMgr@GmmLib@@UEAAXPEAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@@Z
?IsCompressed@GmmClientContext@GmmLib@@UEAAEW4GMM_RESOURCE_FORMAT_ENUM@@@Z
?IsNonTrivialResourcePoolingEnabled@GmmClientContext@GmmLib@@UEAA_NXZ
?IsP0xx@GmmClientContext@GmmLib@@UEAAEW4GMM_RESOURCE_FORMAT_ENUM@@@Z
?IsPlanar@GmmClientContext@GmmLib@@UEAAEW4GMM_RESOURCE_FORMAT_ENUM@@@Z
?IsUVPacked@GmmClientContext@GmmLib@@UEAAEW4GMM_RESOURCE_FORMAT_ENUM@@@Z
?IsYUVPacked@GmmClientContext@GmmLib@@UEAAEW4GMM_RESOURCE_FORMAT_ENUM@@@Z
?MakeResident@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@IIPEBQEAXIAEA_K1@Z
?MapCpuVA@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@PEAXPEAPEAX@Z
?MapGpuVirtualAddress@GmmClientContext@GmmLib@@UEAAJPEAU_GMM_MAP_GPUVIRTUALADDRESS@@@Z
?MapTRGpuVirtualAddress@GmmPageTableMgr@GmmLib@@UEAAJPEAU_GMM_MAP_TR_GPUVIRTUALADDRESS@@E@Z
?MapTileInstancedGpuVirtualAddress@GmmClientContext@GmmLib@@UEAAJPEAU_GMM_MAP_GPUVA_TILE_INSTANCED_RESOURCE@@@Z
?Offer@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@IPEBQEAXW4GMM_OFFER_PRIORITY@@I@Z
?OverrideGfxPartition@GmmClientContext@GmmLib@@UEAA?AU__GMM_GFX_PARTITIONING@@PEAU3@TGMM_ESCAPE_HANDLE_REC@@1TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?OverrideGfxPartition@GmmClientContext@GmmLib@@UEAA?AU__GMM_GFX_PARTITIONING@@XZ
?PigmsFreeGpuVa@GmmClientContext@GmmLib@@UEAAETGMM_ESCAPE_HANDLE_REC@@0_K1TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?PigmsMapGpuVA@GmmClientContext@GmmLib@@UEAAETGMM_ESCAPE_HANDLE_REC@@0_KIPEAVGmmResourceInfoWin@2@TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?PigmsReserveGpuVA@GmmClientContext@GmmLib@@UEAA_KTGMM_ESCAPE_HANDLE_REC@@0_KTGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?PoolTrim@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@PEAXIAEA_K@Z
?Reclaim@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@IIPEBQEAXPEAW4GMM_RECLAIM_RESULT@@PEAH_K@Z
?ResDestroySvmAllocation@GmmClientContext@GmmLib@@UEAAETGMM_ESCAPE_HANDLE_REC@@0ITGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?ResMapGpuVA@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@AEAUGMM_RES_MAP_GPUVA_ARG@@@Z
?ResMemcpy@GmmClientContext@GmmLib@@UEAAXPEAX0@Z
?ResUpdateAfterSharedOpen@GmmClientContext@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@PEAX0IPEAVGmmResourceInfoWin@2@TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?ReserveGpuVirtualAddress@GmmClientContext@GmmLib@@UEAAJPEAUD3DDDI_RESERVEGPUVIRTUALADDRESS@@@Z
?ReserveSVMGPUVA@GmmClientContext@GmmLib@@AEAA?AW4GMM_STATUS_ENUM@@PEAU_GMM_DEVICE_CALLBACKS_INT@@PEAU__GMM_GFX_PARTITIONING@@@Z
?ReserveTRGpuVirtualAddress@GmmPageTableMgr@GmmLib@@UEAAJPEAUGMM_UMD_SYNCCONTEXT_REC@@PEAUD3DDDI_RESERVEGPUVIRTUALADDRESS@@E@Z
?ResetStream@GmmClientContext@GmmLib@@UEAA?AW4_GMM_RESULT@@PEAXPEA_K_K@Z
?SpeedFrameAlloc@GmmClientContext@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@IPEAUGMM_RESCREATE_PARAMS_SPEEDFRAME_REC@@@Z
?SpeedFrameDeAlloc@GmmClientContext@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@IPEAI@Z
?SpeedFrameDeInit@GmmClientContext@GmmLib@@UEAAJXZ
?SpeedFrameInit@GmmClientContext@GmmLib@@UEAAJXZ
?UmDestroypHeap@GmmClientContext@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@TGMM_ESCAPE_HANDLE_REC@@0PEAPEAUGMM_HEAP_REC@@TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?UmSetupHeap@GmmClientContext@GmmLib@@UEAAPEAUGMM_HEAP_REC@@TGMM_ESCAPE_HANDLE_REC@@0_K1ITGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?UpdateAuxTable@GmmPageTableMgr@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@PEBU__GMM_DDI_UPDATEAUXTABLE@@@Z
?UpdateSparseResourceOpaqueMapping@GmmClientContext@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@TGMM_ESCAPE_HANDLE_REC@@0PEAUGMM_UMD_SYNCCONTEXT_REC@@PEAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@TGMM_ESCAPE_FUNC_TYPE_REC@@EIPEAUGMM_UPDATE_SPARSE_RESOURCE_OPAQUE_MAPPINGS_REC@@@Z
?UpdateTRGpuVirtualAddress@GmmPageTableMgr@GmmLib@@UEAAJPEAPEAUGMM_UMD_SYNCCONTEXT_REC@@PEBU_GMM_UPADTE_TR_GPUVIRTUALADDRESS_INT@@E@Z
?UpdateTiledResourceMapping@GmmClientContext@GmmLib@@UEAA?AW4GMM_STATUS_ENUM@@TGMM_ESCAPE_HANDLE_REC@@0UGMM_UPDATE_TILE_MAPPINGS_REC_INT@@EPEAUGMM_UMD_SYNCCONTEXT_REC@@PEAUGMM_TRANSLATIONTABLE_CALLBACKS_REC@@TGMM_ESCAPE_FUNC_TYPE_REC@@PEAU_GMM_DEVICE_CALLBACKS_INT@@IE@Z
?__AllocateNodePool@GmmPageTableMgr@GmmLib@@AEAAPEAVGmmPageTablePool@2@IW4POOL_TYPE_REC@2@@Z
?__GetFreePoolNode@GmmPageTableMgr@GmmLib@@UEAAPEAVGmmPageTablePool@2@PEAIW4POOL_TYPE_REC@2@@Z
?__GetSetSharedHeapObjectProcessSingleton@GmmClientContext@GmmLib@@AEAAPEAXTGMM_ESCAPE_HANDLE_REC@@0TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?__GetSharedHeapObject@GmmClientContext@GmmLib@@AEAAPEAXTGMM_ESCAPE_HANDLE_REC@@0TGMM_ESCAPE_FUNC_TYPE_REC@@@Z
?__NotifyAuxTChange@GmmPageTableMgr@GmmLib@@AEAAX_KAEA_K1AEAE@Z
?__ReleaseUnusedPool@GmmPageTableMgr@GmmLib@@UEAAXPEAUGMM_UMD_SYNCCONTEXT_REC@@@Z
?__SetSharedHeapObject@GmmClientContext@GmmLib@@AEAAITGMM_ESCAPE_HANDLE_REC@@0PEAPEAXTGMM_ESCAPE_FUNC_TYPE_REC@@@Z
GmmAdapterDestroy
GmmDestroy
GmmInit
InitializeGmm
OpenGmm

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 605KB - Virtual size: 605KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdinfo32.dll
.dll windows x86

4e5d1a6f8d8039ef999d4991e6be3f55

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
DisableThreadLibraryCalls
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
RaiseException
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
LCMapStringW
GetProcessHeap
SetFilePointerEx
GetStringTypeW
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
DecodePointer
CloseHandle
WriteConsoleW

advapi32

EventRegister
EventUnregister
EventWriteTransfer

Exports

Exports

GfxInfo_Params
GfxInfo_RTErr
_GfxInfo_RTErr_Varargs@24
_GfxInfo_Varargs@20

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdinfo64.dll
.dll windows x64

32357168f07f7a8bc3fe119a8bd37d4a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WriteConsoleW
DisableThreadLibraryCalls
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LCMapStringW
GetProcessHeap
SetFilePointerEx
GetStringTypeW
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
CloseHandle
CreateFileW

advapi32

EventRegister
EventUnregister
EventWriteTransfer

Exports

Exports

GfxInfo_Params
GfxInfo_RTErr
GfxInfo_RTErr_Varargs
GfxInfo_Varargs

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdkmd64.sys
.exe windows x64

1eeaa85b71cf63efb500c5d83f2290e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoWMIRegistrationControl
EtwRegister
EtwUnregister
EtwWriteTransfer
ZwClose
ZwOpenKey
ZwQueryValueKey
toupper
strncpy_s
strstr
KeInitializeDpc
KeInitializeEvent
KeClearEvent
KeSetEvent
KeDelayExecutionThread
KeInitializeTimer
KeCancelTimer
KeDeregisterBugCheckReasonCallback
KeRegisterBugCheckReasonCallback
IoFreeMdl
IoRegisterPlugPlayNotification
IoUnregisterPlugPlayNotificationEx
ObfDereferenceObject
MmGetPhysicalMemoryRanges
swprintf_s
RtlFreeUnicodeString
KeLowerIrql
KfRaiseIrql
KeInsertQueueDpc
KeSetTimer
KeInitializeSpinLock
KeAcquireSpinLockAtDpcLevel
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
KeReleaseSpinLockFromDpcLevel
MmBuildMdlForNonPagedPool
IoAllocateMdl
IoAllocateWorkItem
IoQueueWorkItem
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
ZwCreateFile
ZwReadFile
ZwWriteFile
ExUuidCreate
PsGetCurrentThreadId
sprintf_s
_vsnprintf
RtlDeleteRegistryValue
DbgPrint
MmProbeAndLockPages
MmUnlockPages
MmMapLockedPagesSpecifyCache
_vsnwprintf
RtlUnicodeStringToInteger
RtlMultiByteToUnicodeN
IoGetDeviceProperty
KeWaitForSingleObject
KeQueryTimeIncrement
ZwPowerInformation
RtlInitString
RtlCheckRegistryKey
RtlAnsiStringToUnicodeString
ExSystemTimeToLocalTime
ExCreateCallback
ExRegisterCallback
ExUnregisterCallback
ExNotifyCallback
IoOpenDeviceInterfaceRegistryKey
IoGetDeviceInterfaces
IoUnregisterPlugPlayNotification
wcsncpy_s
wcsstr
KeResetEvent
ObReferenceObjectByHandle
PsGetCurrentProcessId
ExEventObjectType
RtlInitializeSid
ZwOpenProcessTokenEx
ZwQueryInformationToken
RtlEqualUnicodeString
RtlQueryRegistryValues
MmAllocateContiguousMemory
MmFreeContiguousMemory
MmGetPhysicalAddress
RtlUnicodeStringToAnsiString
_snprintf_s
KeReleaseSemaphore
__C_specific_handler
ExSemaphoreObjectType
ZwOpenProcess
ZwDuplicateObject
RtlAppendUnicodeToString
ProbeForRead
RtlIntegerToUnicodeString
RtlAppendUnicodeStringToString
strnlen
_vsnprintf_s
RtlWriteRegistryValue
RtlCreateRegistryKey
KeRemoveQueueDpc
IofCallDriver
ExAllocatePoolWithTag
IoGetDeviceObjectPointer
IoBuildDeviceIoControlRequest
ZwLoadDriver
ZwUnloadDriver
wcsrchr
ZwQueryInformationFile
_purecall
RtlRaiseException
KeGetCurrentIrql
RtlGetVersion
MmGetSystemRoutineAddress
RtlInitUnicodeString
RtlFreeAnsiString
RtlCharToInteger
ProbeForWrite
IoCreateNotificationEvent
KeReleaseMutex
KeInitializeMutex
PsLookupProcessByProcessId
RtlInitAnsiString
DbgPrintEx
RtlCompareString
KeAcquireInStackQueuedSpinLockAtDpcLevel
KeReleaseInStackQueuedSpinLockFromDpcLevel
KeAcquireInStackQueuedSpinLock
KeReleaseInStackQueuedSpinLock
PoRegisterPowerSettingCallback
PoUnregisterPowerSettingCallback
ExQueryDepthSList
ExpInterlockedPopEntrySList
ExpInterlockedPushEntrySList
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
PsCreateSystemThread
KeInitializeQueue
KeInsertQueue
KeInsertHeadQueue
KeRemoveQueue
KeRundownQueue
PsThreadType
IoGetCurrentProcess
RtlValidSid
RtlEqualSid
SeTokenIsAdmin
SeQueryInformationToken
PsReferencePrimaryToken
IoBuildSynchronousFsdRequest
__chkstk
ExInitializePagedLookasideList
ExDeletePagedLookasideList
MmUnmapLockedPages
MmAllocatePagesForMdlEx
MmFreePagesFromMdl
MmMapIoSpace
MmUnmapIoSpace
MmAllocateContiguousMemorySpecifyCache
KeInvalidateAllCaches
wcscpy_s
KeInitializeSemaphore
ExAcquireFastMutex
ExReleaseFastMutex
InitializeSListHead
KeFlushQueuedDpcs
KeReadStateEvent
IoBuildPartialMdl
ExpInterlockedFlushSList
IoOpenDeviceRegistryKey
ZwCreateKey
ZwSetValueKey
strcpy_s
IoSetDevicePropertyData
IoFreeWorkItem
ZwDeviceIoControlFile
RtlCreateSecurityDescriptor
RtlSetDaclSecurityDescriptor
ZwOpenEvent
RtlCreateAcl
RtlAddAccessAllowedAce
ZwCreateEvent
SeExports
KeInitializeGuardedMutex
KeAcquireGuardedMutex
KeReleaseGuardedMutex
IoQueryFullDriverPath
KeInitializeTimerEx
KeSetTimerEx
KeSetCoalescableTimer
ExAllocateTimer
ExSetTimer
ExCancelTimer
ExDeleteTimer
IoStartTimer
IoStopTimer
KePulseEvent
FirstEntrySList
ObOpenObjectByPointer
KeSetPriorityThread
KeWaitForMultipleObjects
PsTerminateSystemThread
vsprintf_s
ExGetPreviousMode
ZwWaitForSingleObject
ZwResetEvent
strcat_s
KeStackAttachProcess
KeUnstackDetachProcess
KeInitializeThreadedDpc
MmMapIoSpaceEx
sqrt
ExRaiseStatus
ZwFreeVirtualMemory
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation
ExFreePoolWithTag
strcmp

hal

KeStallExecutionProcessor
HalSetBusDataByOffset
KeQueryPerformanceCounter
HalGetBusDataByOffset

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.trs_age
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19.7MB - Virtual size: 19.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 145KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdkmdn64.sys
.exe windows x64

6a9296e2c1c62da909a490549b16e8f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ksecdd.sys

BCryptVerifySignature
BCryptCreateHash
BCryptImportKeyPair
BCryptFinishHash
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptDestroyKey
BCryptGetProperty
BCryptHashData

ntoskrnl.exe

RtlGetVersion
KeGetCurrentIrql
KeInitializeEvent
KeSetEvent
KeDelayExecutionThread
KeCancelTimer
KeWaitForSingleObject
KeInitializeSpinLock
KeAcquireSpinLockAtDpcLevel
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
KeReleaseSpinLockFromDpcLevel
KeDeregisterBugCheckReasonCallback
ExFreePoolWithTag
IoBuildSynchronousFsdRequest
IofCallDriver
IoCancelIrp
IofCompleteRequest
IoGetAttachedDeviceReference
IoAllocateWorkItem
IoQueueWorkItem
IoWMIRegistrationControl
EtwRegister
EtwUnregister
EtwProviderEnabled
EtwWriteTransfer
IoGetDeviceProperty
ObfDereferenceObject
ZwClose
ZwOpenKey
ZwQueryValueKey
ExUuidCreate
MmGetPhysicalMemoryRanges
PsGetCurrentThreadId
ZwPowerInformation
swprintf_s
_vsnwprintf
RtlInitString
RtlCheckRegistryKey
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
ExSystemTimeToLocalTime
ZwCreateFile
ZwWriteFile
sprintf_s
_vsnprintf
KeClearEvent
KeReleaseSemaphore
ObReferenceObjectByHandle
__C_specific_handler
ExEventObjectType
ExSemaphoreObjectType
RtlMultiByteToUnicodeN
ExCreateCallback
ExNotifyCallback
IoOpenDeviceInterfaceRegistryKey
IoGetDeviceInterfaces
IoRegisterPlugPlayNotification
IoUnregisterPlugPlayNotification
KeInitializeDpc
KeInitializeTimer
KeRegisterBugCheckReasonCallback
PoRegisterPowerSettingCallback
PoUnregisterPowerSettingCallback
wcsncpy_s
wcsstr
RtlUnicodeStringToInteger
KeResetEvent
PsGetCurrentProcessId
RtlEqualUnicodeString
ExRegisterCallback
ExUnregisterCallback
ZwOpenProcess
ZwDuplicateObject
ProbeForRead
EtwWrite
MmProbeAndLockPages
MmUnlockPages
MmMapLockedPagesSpecifyCache
MmAllocatePagesForMdlEx
MmFreePagesFromMdl
IoAllocateMdl
IoFreeMdl
RtlQueryRegistryValues
ProbeForWrite
ZwOpenFile
ZwQueryInformationFile
ZwReadFile
sqrt
_snwprintf_s
ExAllocatePoolWithTag
IoGetDeviceObjectPointer
IoBuildDeviceIoControlRequest
ZwLoadDriver
ZwUnloadDriver
wcsrchr
RtlWriteRegistryValue
_purecall
RtlRaiseException
RtlInitUnicodeString
strstr
strncpy_s
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
RtlCharToInteger
toupper
IoCreateNotificationEvent
KeReleaseMutex
KeInitializeMutex
PsLookupProcessByProcessId
RtlInitAnsiString
DbgPrintEx
RtlCompareString
KeAcquireInStackQueuedSpinLockAtDpcLevel
KeReleaseInStackQueuedSpinLockFromDpcLevel
KeQueryTimeIncrement
KeAcquireInStackQueuedSpinLock
KeReleaseInStackQueuedSpinLock
IoGetCurrentProcess
RtlValidSid
RtlEqualSid
SeTokenIsAdmin
SeQueryInformationToken
PsReferencePrimaryToken
KeInsertQueueDpc
KeRemoveQueueDpc
ExQueryDepthSList
ExpInterlockedPopEntrySList
ExpInterlockedPushEntrySList
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
PsCreateSystemThread
KeInitializeQueue
KeInsertQueue
KeInsertHeadQueue
KeRemoveQueue
KeRundownQueue
PsThreadType
__chkstk
MmAllocateContiguousMemorySpecifyCache
MmFreeContiguousMemory
MmGetPhysicalAddress
ExInitializePagedLookasideList
ExDeletePagedLookasideList
MmUnmapLockedPages
MmMapIoSpace
MmUnmapIoSpace
KeInvalidateAllCaches
wcscpy_s
KeLowerIrql
KfRaiseIrql
KeInitializeSemaphore
ExAcquireFastMutex
ExReleaseFastMutex
InitializeSListHead
KeFlushQueuedDpcs
KeReadStateEvent
IoBuildPartialMdl
KeSetPriorityThread
KeWaitForMultipleObjects
PsTerminateSystemThread
vsprintf_s
IoSetDevicePropertyData
IoFreeWorkItem
ZwDeviceIoControlFile
IoOpenDeviceRegistryKey
ZwCreateKey
ZwSetValueKey
KeInitializeTimerEx
KeSetTimerEx
KeSetCoalescableTimer
ExAllocateTimer
ExSetTimer
ExCancelTimer
ExDeleteTimer
IoStartTimer
IoStopTimer
ExpInterlockedFlushSList
MmBuildMdlForNonPagedPool
RtlCreateSecurityDescriptor
RtlSetDaclSecurityDescriptor
ZwOpenEvent
RtlCreateAcl
RtlAddAccessAllowedAce
ZwCreateEvent
SeExports
KeSetTimer
KeInitializeGuardedMutex
KeAcquireGuardedMutex
KeReleaseGuardedMutex
IoQueryFullDriverPath
ZwAllocateLocallyUniqueId
ExGetPreviousMode
ZwWaitForSingleObject
ZwResetEvent
strcpy_s
FirstEntrySList
ObOpenObjectByPointer
_vsnprintf_s
strcat_s
KeStackAttachProcess
KeUnstackDetachProcess
KeInitializeThreadedDpc
KePulseEvent
MmMapIoSpaceEx
ExRaiseStatus
ZwFreeVirtualMemory
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation
MmGetSystemRoutineAddress
RtlAppendUnicodeToString
strcmp

hal

HalSetBusDataByOffset
HalGetBusDataByOffset
KeStallExecutionProcessor
KeQueryPerformanceCounter

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.trs_age
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19.7MB - Virtual size: 19.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 616KB - Virtual size: 618KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdkmdnd64.sys
.exe windows x64

6a9296e2c1c62da909a490549b16e8f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ksecdd.sys

BCryptVerifySignature
BCryptCreateHash
BCryptImportKeyPair
BCryptFinishHash
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptDestroyKey
BCryptGetProperty
BCryptHashData

ntoskrnl.exe

RtlGetVersion
KeGetCurrentIrql
KeInitializeEvent
KeSetEvent
KeDelayExecutionThread
KeCancelTimer
KeWaitForSingleObject
KeInitializeSpinLock
KeAcquireSpinLockAtDpcLevel
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
KeReleaseSpinLockFromDpcLevel
KeDeregisterBugCheckReasonCallback
ExFreePoolWithTag
IoBuildSynchronousFsdRequest
IofCallDriver
IoCancelIrp
IofCompleteRequest
IoGetAttachedDeviceReference
IoAllocateWorkItem
IoQueueWorkItem
IoWMIRegistrationControl
EtwRegister
EtwUnregister
EtwProviderEnabled
EtwWriteTransfer
IoGetDeviceProperty
ObfDereferenceObject
ZwClose
ZwOpenKey
ZwQueryValueKey
ExUuidCreate
MmGetPhysicalMemoryRanges
PsGetCurrentThreadId
ZwPowerInformation
swprintf_s
_vsnwprintf
RtlInitString
RtlCheckRegistryKey
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
ExSystemTimeToLocalTime
ZwCreateFile
ZwWriteFile
sprintf_s
_vsnprintf
KeClearEvent
KeReleaseSemaphore
ObReferenceObjectByHandle
__C_specific_handler
ExEventObjectType
ExSemaphoreObjectType
RtlMultiByteToUnicodeN
ExCreateCallback
ExNotifyCallback
IoOpenDeviceInterfaceRegistryKey
IoGetDeviceInterfaces
IoRegisterPlugPlayNotification
IoUnregisterPlugPlayNotification
KeInitializeDpc
KeInitializeTimer
KeRegisterBugCheckReasonCallback
PoRegisterPowerSettingCallback
PoUnregisterPowerSettingCallback
wcsncpy_s
wcsstr
RtlUnicodeStringToInteger
KeResetEvent
PsGetCurrentProcessId
RtlEqualUnicodeString
ExRegisterCallback
ExUnregisterCallback
ZwOpenProcess
ZwDuplicateObject
ProbeForRead
EtwWrite
MmProbeAndLockPages
MmUnlockPages
MmMapLockedPagesSpecifyCache
MmAllocatePagesForMdlEx
MmFreePagesFromMdl
IoAllocateMdl
IoFreeMdl
RtlQueryRegistryValues
ProbeForWrite
ZwOpenFile
ZwQueryInformationFile
ZwReadFile
sqrt
_snwprintf_s
ExAllocatePoolWithTag
IoGetDeviceObjectPointer
IoBuildDeviceIoControlRequest
ZwLoadDriver
ZwUnloadDriver
wcsrchr
RtlWriteRegistryValue
_purecall
RtlRaiseException
RtlInitUnicodeString
strstr
strncpy_s
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
RtlCharToInteger
toupper
IoCreateNotificationEvent
KeReleaseMutex
KeInitializeMutex
PsLookupProcessByProcessId
RtlInitAnsiString
DbgPrintEx
RtlCompareString
KeAcquireInStackQueuedSpinLockAtDpcLevel
KeReleaseInStackQueuedSpinLockFromDpcLevel
KeQueryTimeIncrement
KeAcquireInStackQueuedSpinLock
KeReleaseInStackQueuedSpinLock
IoGetCurrentProcess
RtlValidSid
RtlEqualSid
SeTokenIsAdmin
SeQueryInformationToken
PsReferencePrimaryToken
KeInsertQueueDpc
KeRemoveQueueDpc
ExQueryDepthSList
ExpInterlockedPopEntrySList
ExpInterlockedPushEntrySList
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
PsCreateSystemThread
KeInitializeQueue
KeInsertQueue
KeInsertHeadQueue
KeRemoveQueue
KeRundownQueue
PsThreadType
__chkstk
MmAllocateContiguousMemorySpecifyCache
MmFreeContiguousMemory
MmGetPhysicalAddress
ExInitializePagedLookasideList
ExDeletePagedLookasideList
MmUnmapLockedPages
MmMapIoSpace
MmUnmapIoSpace
KeInvalidateAllCaches
wcscpy_s
KeLowerIrql
KfRaiseIrql
KeInitializeSemaphore
ExAcquireFastMutex
ExReleaseFastMutex
InitializeSListHead
KeFlushQueuedDpcs
KeReadStateEvent
IoBuildPartialMdl
KeSetPriorityThread
KeWaitForMultipleObjects
PsTerminateSystemThread
vsprintf_s
IoSetDevicePropertyData
IoFreeWorkItem
ZwDeviceIoControlFile
IoOpenDeviceRegistryKey
ZwCreateKey
ZwSetValueKey
KeInitializeTimerEx
KeSetTimerEx
KeSetCoalescableTimer
ExAllocateTimer
ExSetTimer
ExCancelTimer
ExDeleteTimer
IoStartTimer
IoStopTimer
ExpInterlockedFlushSList
MmBuildMdlForNonPagedPool
RtlCreateSecurityDescriptor
RtlSetDaclSecurityDescriptor
ZwOpenEvent
RtlCreateAcl
RtlAddAccessAllowedAce
ZwCreateEvent
SeExports
KeSetTimer
KeInitializeGuardedMutex
KeAcquireGuardedMutex
KeReleaseGuardedMutex
IoQueryFullDriverPath
ZwAllocateLocallyUniqueId
ExGetPreviousMode
ZwWaitForSingleObject
ZwResetEvent
strcpy_s
FirstEntrySList
ObOpenObjectByPointer
_vsnprintf_s
strcat_s
KeStackAttachProcess
KeUnstackDetachProcess
KeInitializeThreadedDpc
KePulseEvent
MmMapIoSpaceEx
ExRaiseStatus
ZwFreeVirtualMemory
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation
MmGetSystemRoutineAddress
RtlAppendUnicodeToString
strcmp

hal

HalSetBusDataByOffset
HalGetBusDataByOffset
KeStallExecutionProcessor
KeQueryPerformanceCounter

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.trs_age
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19.7MB - Virtual size: 19.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 616KB - Virtual size: 618KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdlh.cat
Graphics/igdmd32.dll
.dll windows x86

9cdbbf7300b99f20947db70a645e6361

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dxgi

CreateDXGIFactory

gdi32

D3DKMTEscape
D3DKMTEnumAdapters2
D3DKMTQueryAdapterInfo
D3DKMTCloseAdapter

kernel32

ReleaseSemaphore
WaitForSingleObjectEx
CreateEventW
CreateSemaphoreExW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
CloseHandle
ResetEvent
TlsGetValue
TlsSetValue
TlsFree
GetModuleFileNameA
LoadLibraryExA
LoadLibraryA
FreeLibrary
GetProcAddress
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
TlsAlloc
SetEndOfFile
DeleteCriticalSection
WriteConsoleW
FlsSetValue
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
OutputDebugStringW
FlsFree
EncodePointer
InitializeCriticalSectionEx
ReadFile
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
GetCurrentThread
SetFilePointerEx
GetStdHandle
GetFileType
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
DecodePointer
MultiByteToWideChar
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
WideCharToMultiByte
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
SetStdHandle
FlushFileBuffers
GetStringTypeW
CreateFileW
HeapSize
HeapReAlloc

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

Exports

Exports

CloseMetricsDevice
ClosePerformanceInterface
OpenAdapterGroup
OpenMetricsDevice
OpenMetricsDeviceFromFile
OpenPerformanceInterface

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 354KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdmd64.dll
.dll windows x64

cb6a285e96476567e784520cafaf2ff2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

dxgi

CreateDXGIFactory

gdi32

D3DKMTEscape
D3DKMTEnumAdapters2
D3DKMTQueryAdapterInfo
D3DKMTCloseAdapter

kernel32

ReleaseSemaphore
WaitForSingleObjectEx
CreateEventW
CreateSemaphoreExW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
CloseHandle
ResetEvent
TlsGetValue
TlsSetValue
TlsFree
GetModuleFileNameA
LoadLibraryExA
LoadLibraryA
FreeLibrary
GetProcAddress
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
TlsAlloc
OutputDebugStringW
DeleteCriticalSection
SetEndOfFile
FlsAlloc
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
RtlUnwind
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
InitializeCriticalSectionEx
ReadFile
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
GetCurrentThread
SetFilePointerEx
GetStdHandle
GetFileType
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
MultiByteToWideChar
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
WideCharToMultiByte
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
SetStdHandle
FlushFileBuffers
GetStringTypeW
CreateFileW
HeapSize
HeapReAlloc
WriteConsoleW

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

Exports

Exports

CloseMetricsDevice
ClosePerformanceInterface
OpenAdapterGroup
OpenMetricsDevice
OpenMetricsDeviceFromFile
OpenPerformanceInterface

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 381KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdml32.dll
.dll windows x86

67402274307ea1b633596b1b336753bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceFrequency
GetCurrentProcessId
GetModuleHandleA
QueryPerformanceCounter
OutputDebugStringA
SetEndOfFile
GetModuleFileNameA
FormatMessageA
WideCharToMultiByte
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
EncodePointer
DecodePointer
LocalFree
MultiByteToWideChar
LCMapStringEx
GetSystemTimePreciseAsFileTime
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
GetModuleFileNameW
HeapAlloc
HeapFree
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetCurrentThread
ReadFile
ReadConsoleW
SetConsoleCtrlHandler
GetFileSizeEx
SetFilePointerEx
HeapReAlloc
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
CloseHandle
HeapSize
WriteConsoleW
OutputDebugStringW

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

Exports

Exports

ContextCreate_1_0
ContextDelete_1_0

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdml64.dll
.dll windows x64

ed326098fd172875f3690ce95ce6baaa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceFrequency
GetCurrentProcessId
GetModuleHandleA
QueryPerformanceCounter
OutputDebugStringA
OutputDebugStringW
GetModuleFileNameA
FormatMessageA
WideCharToMultiByte
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
EncodePointer
DecodePointer
LocalFree
MultiByteToWideChar
LCMapStringEx
GetSystemTimePreciseAsFileTime
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ExitProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
GetModuleFileNameW
HeapAlloc
HeapFree
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetCurrentThread
ReadFile
ReadConsoleW
SetConsoleCtrlHandler
GetFileSizeEx
SetFilePointerEx
HeapReAlloc
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
CloseHandle
HeapSize
WriteConsoleW
SetEndOfFile
RtlUnwind

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

Exports

Exports

ContextCreate_1_0
ContextDelete_1_0

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdrcl32.dll
.dll windows x86

027f6642d0b02ca1263a56ec9fbc5d85

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

73:95:47:0d:bd:cd:54:a8:52:3a:c3:85:58:a9:f1:a5:16:b4:18:c4:4d:7d:e7:fb:f9:6c:d8:5f:12:1b:2b:a1
Signer

Actual PE Digest

73:95:47:0d:bd:cd:54:a8:52:3a:c3:85:58:a9:f1:a5:16:b4:18:c4:4d:7d:e7:fb:f9:6c:d8:5f:12:1b:2b:a1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

freeaddrinfo
getaddrinfo
connect
htons
inet_addr
WSAGetLastError
WSACleanup
WSAStartup
gethostbyname
socket
shutdown
send
recv
closesocket

dxgi

CreateDXGIFactory1

kernel32

GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
VirtualAlloc
VirtualFree
CloseHandle
HeapSize
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetProcAddress
GetSystemPowerStatus
CreateFileW
GetSystemInfo
GetLastError
GetSystemDirectoryA
FreeLibrary
GetModuleFileNameA
LoadLibraryExA
LoadLibraryA
LocalFree
FormatMessageA
CreateEventA
GetStdHandle
DuplicateHandle
GetCurrentProcess
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
VirtualProtect
QueryPerformanceCounter
QueryPerformanceFrequency
FindClose
HeapReAlloc
WaitForSingleObjectEx
Sleep
SwitchToThread
GetCurrentThreadId
GetExitCodeThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WideCharToMultiByte
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
SetEndOfFile
GetModuleHandleW
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetFileType
WriteConsoleW
ReadFile
CreateThread
ExitThread
FreeLibraryAndExitThread
SetStdHandle
ExitProcess
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
OutputDebugStringW
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
DeleteFileW

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

GTPin_Init
clEnqueueMarkerWithSyncObjectINTEL
clGetCLEventInfoINTEL
clGetCLObjectInfoINTEL
clGetExtensionFunctionAddress
clGetPlatformInfo
clReleaseGlSharedEventINTEL

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdrcl64.dll
.dll windows x64

f38de1b03b4eae2dca4049855080931d

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:55:b0:ab:de:ba:55:1a:73:29:7e:2c:47:10:37:33:09:28:56:4e:be:88:7d:f0:9a:12:2c:22:e0:08:bb:f0
Signer

Actual PE Digest

45:55:b0:ab:de:ba:55:1a:73:29:7e:2c:47:10:37:33:09:28:56:4e:be:88:7d:f0:9a:12:2c:22:e0:08:bb:f0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

ws2_32

freeaddrinfo
getaddrinfo
connect
htons
inet_addr
WSAGetLastError
WSACleanup
WSAStartup
gethostbyname
socket
shutdown
send
recv
closesocket

dxgi

CreateDXGIFactory1

kernel32

HeapSize
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
VirtualAlloc
VirtualFree
CloseHandle
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetProcAddress
GetSystemPowerStatus
CreateFileW
SetEndOfFile
GetSystemInfo
GetLastError
GetSystemDirectoryA
FreeLibrary
GetModuleFileNameA
LoadLibraryExA
LoadLibraryA
LocalFree
FormatMessageA
CreateEventA
GetStdHandle
DuplicateHandle
GetCurrentProcess
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
VirtualProtect
QueryPerformanceCounter
QueryPerformanceFrequency
FindFirstFileExW
FindClose
WaitForSingleObjectEx
Sleep
SwitchToThread
GetCurrentThreadId
GetExitCodeThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WideCharToMultiByte
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
DecodePointer
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
RtlUnwind
GetModuleHandleW
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetFileType
WriteConsoleW
ReadFile
CreateThread
ExitThread
FreeLibraryAndExitThread
SetStdHandle
ExitProcess
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
OutputDebugStringW
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
DeleteFileW
HeapReAlloc

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

GTPin_Init
clEnqueueMarkerWithSyncObjectINTEL
clGetCLEventInfoINTEL
clGetCLObjectInfoINTEL
clGetExtensionFunctionAddress
clGetPlatformInfo
clReleaseGlSharedEventINTEL

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 663KB - Virtual size: 663KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdumdim32.dll
.dll windows x86

03c12b43eb5572b2994be51baa7cf207

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeSRWLock
DeleteCriticalSection
CloseHandle
LoadLibraryExA
GetProcAddress
TryAcquireSRWLockExclusive
InitOnceExecuteOnce
GetModuleHandleA
GetModuleFileNameA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
GetCurrentProcessId
GetSystemInfo
CreateThreadpool
SetThreadpoolThreadMaximum
CloseThreadpool
CreateThreadpoolCleanupGroup
CloseThreadpoolCleanupGroupMembers
CloseThreadpoolCleanupGroup
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
QueryPerformanceCounter
ReleaseSemaphore
WaitForSingleObjectEx
CreateSemaphoreExW
GetVersion
FreeLibrary
WakeAllConditionVariable
SleepConditionVariableSRW
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
InitializeCriticalSectionEx
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
DecodePointer
HeapReAlloc
HeapSize
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
LCMapStringW
GetProcessHeap
GetStringTypeW
SetFilePointerEx
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
CreateFileW
WriteConsoleW

advapi32

EventUnregister
EventRegister
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
EventWrite

user32

TranslateMessage
DispatchMessageW
PostThreadMessageW
IsChild
GetWindowRect
MessageBoxW
EnumChildWindows
EnumDisplayDevicesW
GetDisplayConfigBufferSizes
QueryDisplayConfig
GetMessageW

ole32

OleRun

ntdll

RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString

Exports

Exports

OpenAdapter

Sections

.text
Size: 879KB - Virtual size: 879KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 195KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igdumdim64.dll
.dll windows x64

3a18ebd0d29e3dfcd376d917ecf34442

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeSRWLock
DeleteCriticalSection
CloseHandle
LoadLibraryExA
GetProcAddress
TryAcquireSRWLockExclusive
InitOnceExecuteOnce
GetModuleHandleA
GetModuleFileNameA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
GetCurrentProcessId
GetSystemInfo
CreateThreadpool
SetThreadpoolThreadMaximum
CloseThreadpool
CreateThreadpoolCleanupGroup
CloseThreadpoolCleanupGroupMembers
CloseThreadpoolCleanupGroup
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
QueryPerformanceCounter
ReleaseSemaphore
WaitForSingleObjectEx
CreateSemaphoreExW
GetVersion
FreeLibrary
WakeAllConditionVariable
SleepConditionVariableSRW
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
InitializeCriticalSectionEx
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
LCMapStringW
GetProcessHeap
GetStringTypeW
SetFilePointerEx
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
CreateFileW
WriteConsoleW

advapi32

EventUnregister
EventRegister
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
EventWrite

user32

DispatchMessageW
PostThreadMessageW
IsChild
GetWindowRect
TranslateMessage
EnumChildWindows
EnumDisplayDevicesW
GetDisplayConfigBufferSizes
QueryDisplayConfig
MessageBoxW
GetMessageW

ole32

OleRun

ntdll

RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
RtlInitAnsiString

Exports

Exports

OpenAdapter

Sections

.text
Size: 966KB - Virtual size: 966KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfx11cmrt32.dll
.dll windows x86

97226906879ed50a8bfe4115bd0a8a28

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory

kernel32

HeapFree
CreateFileW
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetErrorMode
FreeLibrary
GetModuleFileNameA
GetProcAddress
LoadLibraryExA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
WriteConsoleW
HeapAlloc
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
GetFileSizeEx
SetFilePointerEx
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
CloseHandle

Exports

Exports

??0CM_AVS_STATE_MSG_EX@@QAE@XZ
??0CM_FLAG@@QAE@XZ
?CloneKernel@CmDevice_RT@@UAEHAAPAVCmKernel@@PAV2@@Z
?CreateBuffer@CmDevice_RT@@UAEHIAAPAVCmBuffer@@@Z
?CreateBufferAlias@CmDevice_RT@@UAEHPAVCmBuffer@@AAPAVSurfaceIndex@@@Z
?CreateBufferSVM@CmDevice_RT@@UAEHIAAPAXIAAPAVCmBufferSVM@@@Z
?CreateBufferStateless@CmDevice_RT@@UAEHIIPAXAAPAVCmBufferStateless@@@Z
?CreateBufferUP@CmDevice_RT@@UAEHIPAXAAPAVCmBufferUP@@@Z
?CreateHevcVmeSurfaceG10@CmDevice_RT@@UAEHPAVCmSurface2D@@PAPAV2@1IIAAPAVSurfaceIndex@@@Z
?CreateKernel@CmDevice_RT@@UAEHPAVCmProgram@@PBDAAPAVCmKernel@@1@Z
?CreateKernel@CmDevice_RT@@UAEHPAVCmProgram@@PBDPBXAAPAVCmKernel@@1@Z
?CreateQueue@CmDevice_RT@@UAEHAAPAVCmQueue@@@Z
?CreateQueueEx@CmDevice_RT@@UAEHAAPAVCmQueue@@UCM_QUEUE_CREATE_OPTION@@@Z
?CreateSampler8x8@CmDevice_RT@@UAEHABUCM_SAMPLER_8X8_DESCR@@AAPAVCmSampler8x8@@@Z
?CreateSampler8x8Surface@CmDevice_RT@@UAEHPAVCmSurface2D@@AAPAVSurfaceIndex@@W4_CM_SAMPLER8x8_SURFACE_@@W4_CM_SURFACE_ADDRESS_CONTROL_MODE_@@@Z
?CreateSampler8x8SurfaceEx@CmDevice_RT@@UAEHPAVCmSurface2D@@AAPAVSurfaceIndex@@W4_CM_SAMPLER8x8_SURFACE_@@W4_CM_SURFACE_ADDRESS_CONTROL_MODE_@@PAUCM_FLAG@@@Z
?CreateSampler@CmDevice_RT@@UAEHABU_CM_SAMPLER_STATE@@AAPAVCmSampler@@@Z
?CreateSamplerEx@CmDevice_RT@@UAEHABU_CM_SAMPLER_STATE_EX@@AAPAVCmSampler@@@Z
?CreateSamplerSurface2D@CmDevice_RT@@UAEHPAVCmSurface2D@@AAPAVSurfaceIndex@@@Z
?CreateSamplerSurface2DEx@CmDevice_RT@@UAEHPAVCmSurface2D@@AAPAVSurfaceIndex@@PAUCM_FLAG@@@Z
?CreateSamplerSurface2DUP@CmDevice_RT@@UAEHPAVCmSurface2DUP@@AAPAVSurfaceIndex@@@Z
?CreateSamplerSurface3D@CmDevice_RT@@UAEHPAVCmSurface3D@@AAPAVSurfaceIndex@@@Z
?CreateSurface2D@CmDevice_RT@@UAEHIIW4DXGI_FORMAT@@AAPAVCmSurface2D@@@Z
?CreateSurface2D@CmDevice_RT@@UAEHPAPAUID3D11Texture2D@@IPAPAVCmSurface2D@@@Z
?CreateSurface2D@CmDevice_RT@@UAEHPAUID3D11Texture2D@@AAPAVCmSurface2D@@@Z
?CreateSurface2DAlias@CmDevice_RT@@UAEHPAVCmSurface2D@@AAPAVSurfaceIndex@@@Z
?CreateSurface2DStateless@CmDevice_RT@@UAEHIIAAIAAPAVCmSurface2DStateless@@@Z
?CreateSurface2DSubresource@CmDevice_RT@@UAEHPAUID3D11Texture2D@@IPAPAVCmSurface2D@@AAII@Z
?CreateSurface2DUP@CmDevice_RT@@UAEHIIW4DXGI_FORMAT@@PAXAAPAVCmSurface2DUP@@@Z
?CreateSurface2DbySubresourceIndex@CmDevice_RT@@UAEHPAUID3D11Texture2D@@IIAAPAVCmSurface2D@@@Z
?CreateSurface3D@CmDevice_RT@@UAEHIIIW4DXGI_FORMAT@@AAPAVCmSurface3D@@@Z
?CreateTask@CmDevice_RT@@UAEHAAPAVCmTask@@@Z
?CreateThreadGroupSpace@CmDevice_RT@@UAEHIIIIAAPAVCmThreadGroupSpace@@@Z
?CreateThreadGroupSpaceEx@CmDevice_RT@@UAEHIIIIIIAAPAVCmThreadGroupSpace@@@Z
?CreateThreadSpace@CmDevice_RT@@UAEHIIAAPAVCmThreadSpace@@@Z
?CreateVebox@CmDevice_RT@@UAEHAAPAVCmVebox@@@Z
?CreateVmeSurfaceG7_5@CmDevice_RT@@UAEHPAVCmSurface2D@@PAPAV2@1IIAAPAVSurfaceIndex@@@Z
?DestroyBufferSVM@CmDevice_RT@@UAEHAAPAVCmBufferSVM@@@Z
?DestroyBufferStateless@CmDevice_RT@@UAEHAAPAVCmBufferStateless@@@Z
?DestroyBufferUP@CmDevice_RT@@UAEHAAPAVCmBufferUP@@@Z
?DestroyEvent@CmQueue_RT@@UAEHAAPAVCmEvent@@@Z
?DestroyEventFast@CmQueue_RT@@UAEHAAPAVCmEvent@@@Z
?DestroyHevcVmeSurfaceG10@CmDevice_RT@@UAEHAAPAVSurfaceIndex@@@Z
?DestroyKernel@CmDevice_RT@@UAEHAAPAVCmKernel@@@Z
?DestroyProgram@CmDevice_RT@@UAEHAAPAVCmProgram@@@Z
?DestroySampler8x8@CmDevice_RT@@UAEHAAPAVCmSampler8x8@@@Z
?DestroySampler8x8Surface@CmDevice_RT@@UAEHAAPAVSurfaceIndex@@@Z
?DestroySampler@CmDevice_RT@@UAEHAAPAVCmSampler@@@Z
?DestroySamplerSurface@CmDevice_RT@@UAEHAAPAVSurfaceIndex@@@Z
?DestroySurface2DStateless@CmDevice_RT@@UAEHAAPAVCmSurface2DStateless@@@Z
?DestroySurface2DUP@CmDevice_RT@@UAEHAAPAVCmSurface2DUP@@@Z
?DestroySurface@CmDevice_RT@@UAEHAAPAVCmBuffer@@@Z
?DestroySurface@CmDevice_RT@@UAEHAAPAVCmSurface2D@@@Z
?DestroySurface@CmDevice_RT@@UAEHAAPAVCmSurface3D@@@Z
?DestroyTask@CmDevice_RT@@UAEHAAPAVCmTask@@@Z
?DestroyThreadGroupSpace@CmDevice_RT@@UAEHAAPAVCmThreadGroupSpace@@@Z
?DestroyThreadSpace@CmDevice_RT@@UAEHAAPAVCmThreadSpace@@@Z
?DestroyVebox@CmDevice_RT@@UAEHAAPAVCmVebox@@@Z
?DestroyVmeSurfaceG7_5@CmDevice_RT@@UAEHAAPAVSurfaceIndex@@@Z
?DispatchTask@CmDevice_RT@@UAEHXZ
?Enqueue@CmQueue_RT@@UAEHPAVCmTask@@AAPAVCmEvent@@PBVCmThreadSpace@@@Z
?EnqueueCopyCPUToCPU@CmQueue_RT@@UAEHPAE0IIAAPAVCmEvent@@@Z
?EnqueueCopyCPUToGPU@CmQueue_RT@@UAEHPAVCmSurface2D@@PBEAAPAVCmEvent@@@Z
?EnqueueCopyCPUToGPUFullStride@CmQueue_RT@@UAEHPAVCmSurface2D@@PBEIIIAAPAVCmEvent@@@Z
?EnqueueCopyCPUToGPUFullStrideDup@CmQueue_RT@@UAEHPAVCmSurface2D@@PBEIIIAAPAVCmEvent@@@Z
?EnqueueCopyGPUToCPU@CmQueue_RT@@UAEHPAVCmSurface2D@@PAEAAPAVCmEvent@@@Z
?EnqueueCopyGPUToCPUFullStride@CmQueue_RT@@UAEHPAVCmSurface2D@@PAEIIIAAPAVCmEvent@@@Z
?EnqueueCopyGPUToCPUFullStrideDup@CmQueue_RT@@UAEHPAVCmSurface2D@@PAEIIIAAPAVCmEvent@@@Z
?EnqueueCopyGPUToGPU@CmQueue_RT@@UAEHPAVCmSurface2D@@0IAAPAVCmEvent@@@Z
?EnqueueFast@CmQueue_RT@@UAEHPAVCmTask@@AAPAVCmEvent@@PBVCmThreadSpace@@@Z
?EnqueueInitSurface2D@CmQueue_RT@@UAEHPAVCmSurface2D@@IAAPAVCmEvent@@@Z
?EnqueueReadBuffer@CmQueue_RT@@UAEHPAVCmBuffer@@IPBE_KPAVCmEvent@@AAPAV3@I@Z
?EnqueueVebox@CmQueue_RT@@UAEHPAVCmVebox@@AAPAVCmEvent@@@Z
?EnqueueWithGroup@CmQueue_RT@@UAEHPAVCmTask@@AAPAVCmEvent@@PBVCmThreadGroupSpace@@@Z
?EnqueueWithGroupFast@CmQueue_RT@@UAEHPAVCmTask@@AAPAVCmEvent@@PBVCmThreadGroupSpace@@@Z
?EnqueueWithHints@CmQueue_RT@@UAEHPAVCmTask@@AAPAVCmEvent@@I@Z
?EnqueueWriteBuffer@CmQueue_RT@@UAEHPAVCmBuffer@@IPBE_KPAVCmEvent@@AAPAV3@I@Z
?FlushPrintBuffer@CmDevice_RT@@UAEHXZ
?FlushPrintBufferIntoFile@CmDevice_RT@@UAEHPBD@Z
?GetCaps@CmDevice_RT@@UAEHW4_CM_DEVICE_CAP_NAME@@AAIPAX@Z
?GetD3D11Device@CmDevice_RT@@UAEHAAPAUID3D11Device@@@Z
?GetSurface2DInfo@CmDevice_RT@@UAEHIIW4DXGI_FORMAT@@AAI1@Z
?GetVISAVersion@CmDevice_RT@@UAEHAAI0@Z
?InitPrintBuffer@CmDevice_RT@@UAEHI@Z
?LoadProgram@CmDevice_RT@@UAEHPAXIAAPAVCmProgram@@PBD@Z
?SetCaps@CmDevice_RT@@UAEHW4_CM_DEVICE_CAP_NAME@@IPAX@Z
?SetL3Config@CmDevice_RT@@UAEHPBUL3ConfigRegisterValues@@@Z
?SetResidentGroupAndParallelThreadNum@CmQueue_RT@@UAEHII@Z
?SetSuggestedL3Config@CmDevice_RT@@UAEHW4_L3_SUGGEST_CONFIG@@@Z
?SetVmeSurfaceStateParam@CmDevice_RT@@UAEHPAVSurfaceIndex@@PAUCM_VME_SURFACE_STATE_PARAM@@@Z
CMRT_CreateBuffer
CMRT_CreateKernel
CMRT_CreateQueue
CMRT_CreateSurface2D
CMRT_CreateSurface3D
CMRT_CreateTask
CMRT_CreateThreadSpace
CMRT_DestroyBuffer
CMRT_DestroyEvent
CMRT_DestroyProgram
CMRT_DestroySurface2D
CMRT_DestroySurface3D
CMRT_DestroyTask
CMRT_DestroyThreadSpace
CMRT_EnableGTPinMarkers
CMRT_Enqueue
CMRT_GetCompleteTime
CMRT_GetEnqueueTime
CMRT_GetHWEndTime
CMRT_GetHWStartTime
CMRT_GetKernelCount
CMRT_GetKernelName
CMRT_GetKernelThreadSpace
CMRT_GetSubmitTime
CMRT_GetSurfaceDetails
CMRT_LoadProgram
CMRT_PrepareGTPinBuffers
CMRT_SetEventCallback
CMRT_SetGTPinArguments
CMRT_SetGTPinCompileMode
CmrtCodeMarkerForGTPin_AddKernel
CmrtCodeMarkerForGTPin_CreateQueue
CmrtCodeMarkerForGTPin_CreateTask
CmrtCodeMarkerForGTPin_DestroyTask
CmrtCodeMarkerForGTPin_Enqueue
CmrtCodeMarkerForGTPin_EnqueueWithGroup
CmrtCodeMarkerForGTPin_SetThreadCount
CreateCmDevice
CreateCmDeviceEx
CreateCmDeviceFromAdapter
DestroyCmDevice
GetCmErrorString
GetCmSupportedAdapters
QueryCmAdapterInfo

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfx11cmrt64.dll
.dll windows x64

f760ef3e85db8290b43a44887a1649c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory

kernel32

HeapFree
WriteConsoleW
CreateFileW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetErrorMode
FreeLibrary
GetModuleFileNameA
GetProcAddress
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
GetStdHandle
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
GetFileSizeEx
SetFilePointerEx
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
CloseHandle

Exports

Exports

??0CM_AVS_STATE_MSG_EX@@QEAA@XZ
??0CM_FLAG@@QEAA@XZ
?CloneKernel@CmDevice_RT@@UEAAHAEAPEAVCmKernel@@PEAV2@@Z
?CreateBuffer@CmDevice_RT@@UEAAHIAEAPEAVCmBuffer@@@Z
?CreateBufferAlias@CmDevice_RT@@UEAAHPEAVCmBuffer@@AEAPEAVSurfaceIndex@@@Z
?CreateBufferSVM@CmDevice_RT@@UEAAHIAEAPEAXIAEAPEAVCmBufferSVM@@@Z
?CreateBufferStateless@CmDevice_RT@@UEAAH_KIPEAXAEAPEAVCmBufferStateless@@@Z
?CreateBufferUP@CmDevice_RT@@UEAAHIPEAXAEAPEAVCmBufferUP@@@Z
?CreateHevcVmeSurfaceG10@CmDevice_RT@@UEAAHPEAVCmSurface2D@@PEAPEAV2@1IIAEAPEAVSurfaceIndex@@@Z
?CreateKernel@CmDevice_RT@@UEAAHPEAVCmProgram@@PEBDAEAPEAVCmKernel@@1@Z
?CreateKernel@CmDevice_RT@@UEAAHPEAVCmProgram@@PEBDPEBXAEAPEAVCmKernel@@1@Z
?CreateQueue@CmDevice_RT@@UEAAHAEAPEAVCmQueue@@@Z
?CreateQueueEx@CmDevice_RT@@UEAAHAEAPEAVCmQueue@@UCM_QUEUE_CREATE_OPTION@@@Z
?CreateSampler8x8@CmDevice_RT@@UEAAHAEBUCM_SAMPLER_8X8_DESCR@@AEAPEAVCmSampler8x8@@@Z
?CreateSampler8x8Surface@CmDevice_RT@@UEAAHPEAVCmSurface2D@@AEAPEAVSurfaceIndex@@W4_CM_SAMPLER8x8_SURFACE_@@W4_CM_SURFACE_ADDRESS_CONTROL_MODE_@@@Z
?CreateSampler8x8SurfaceEx@CmDevice_RT@@UEAAHPEAVCmSurface2D@@AEAPEAVSurfaceIndex@@W4_CM_SAMPLER8x8_SURFACE_@@W4_CM_SURFACE_ADDRESS_CONTROL_MODE_@@PEAUCM_FLAG@@@Z
?CreateSampler@CmDevice_RT@@UEAAHAEBU_CM_SAMPLER_STATE@@AEAPEAVCmSampler@@@Z
?CreateSamplerEx@CmDevice_RT@@UEAAHAEBU_CM_SAMPLER_STATE_EX@@AEAPEAVCmSampler@@@Z
?CreateSamplerSurface2D@CmDevice_RT@@UEAAHPEAVCmSurface2D@@AEAPEAVSurfaceIndex@@@Z
?CreateSamplerSurface2DEx@CmDevice_RT@@UEAAHPEAVCmSurface2D@@AEAPEAVSurfaceIndex@@PEAUCM_FLAG@@@Z
?CreateSamplerSurface2DUP@CmDevice_RT@@UEAAHPEAVCmSurface2DUP@@AEAPEAVSurfaceIndex@@@Z
?CreateSamplerSurface3D@CmDevice_RT@@UEAAHPEAVCmSurface3D@@AEAPEAVSurfaceIndex@@@Z
?CreateSurface2D@CmDevice_RT@@UEAAHIIW4DXGI_FORMAT@@AEAPEAVCmSurface2D@@@Z
?CreateSurface2D@CmDevice_RT@@UEAAHPEAPEAUID3D11Texture2D@@IPEAPEAVCmSurface2D@@@Z
?CreateSurface2D@CmDevice_RT@@UEAAHPEAUID3D11Texture2D@@AEAPEAVCmSurface2D@@@Z
?CreateSurface2DAlias@CmDevice_RT@@UEAAHPEAVCmSurface2D@@AEAPEAVSurfaceIndex@@@Z
?CreateSurface2DStateless@CmDevice_RT@@UEAAHIIAEAIAEAPEAVCmSurface2DStateless@@@Z
?CreateSurface2DSubresource@CmDevice_RT@@UEAAHPEAUID3D11Texture2D@@IPEAPEAVCmSurface2D@@AEAII@Z
?CreateSurface2DUP@CmDevice_RT@@UEAAHIIW4DXGI_FORMAT@@PEAXAEAPEAVCmSurface2DUP@@@Z
?CreateSurface2DbySubresourceIndex@CmDevice_RT@@UEAAHPEAUID3D11Texture2D@@IIAEAPEAVCmSurface2D@@@Z
?CreateSurface3D@CmDevice_RT@@UEAAHIIIW4DXGI_FORMAT@@AEAPEAVCmSurface3D@@@Z
?CreateTask@CmDevice_RT@@UEAAHAEAPEAVCmTask@@@Z
?CreateThreadGroupSpace@CmDevice_RT@@UEAAHIIIIAEAPEAVCmThreadGroupSpace@@@Z
?CreateThreadGroupSpaceEx@CmDevice_RT@@UEAAHIIIIIIAEAPEAVCmThreadGroupSpace@@@Z
?CreateThreadSpace@CmDevice_RT@@UEAAHIIAEAPEAVCmThreadSpace@@@Z
?CreateVebox@CmDevice_RT@@UEAAHAEAPEAVCmVebox@@@Z
?CreateVmeSurfaceG7_5@CmDevice_RT@@UEAAHPEAVCmSurface2D@@PEAPEAV2@1IIAEAPEAVSurfaceIndex@@@Z
?DestroyBufferSVM@CmDevice_RT@@UEAAHAEAPEAVCmBufferSVM@@@Z
?DestroyBufferStateless@CmDevice_RT@@UEAAHAEAPEAVCmBufferStateless@@@Z
?DestroyBufferUP@CmDevice_RT@@UEAAHAEAPEAVCmBufferUP@@@Z
?DestroyEvent@CmQueue_RT@@UEAAHAEAPEAVCmEvent@@@Z
?DestroyEventFast@CmQueue_RT@@UEAAHAEAPEAVCmEvent@@@Z
?DestroyHevcVmeSurfaceG10@CmDevice_RT@@UEAAHAEAPEAVSurfaceIndex@@@Z
?DestroyKernel@CmDevice_RT@@UEAAHAEAPEAVCmKernel@@@Z
?DestroyProgram@CmDevice_RT@@UEAAHAEAPEAVCmProgram@@@Z
?DestroySampler8x8@CmDevice_RT@@UEAAHAEAPEAVCmSampler8x8@@@Z
?DestroySampler8x8Surface@CmDevice_RT@@UEAAHAEAPEAVSurfaceIndex@@@Z
?DestroySampler@CmDevice_RT@@UEAAHAEAPEAVCmSampler@@@Z
?DestroySamplerSurface@CmDevice_RT@@UEAAHAEAPEAVSurfaceIndex@@@Z
?DestroySurface2DStateless@CmDevice_RT@@UEAAHAEAPEAVCmSurface2DStateless@@@Z
?DestroySurface2DUP@CmDevice_RT@@UEAAHAEAPEAVCmSurface2DUP@@@Z
?DestroySurface@CmDevice_RT@@UEAAHAEAPEAVCmBuffer@@@Z
?DestroySurface@CmDevice_RT@@UEAAHAEAPEAVCmSurface2D@@@Z
?DestroySurface@CmDevice_RT@@UEAAHAEAPEAVCmSurface3D@@@Z
?DestroyTask@CmDevice_RT@@UEAAHAEAPEAVCmTask@@@Z
?DestroyThreadGroupSpace@CmDevice_RT@@UEAAHAEAPEAVCmThreadGroupSpace@@@Z
?DestroyThreadSpace@CmDevice_RT@@UEAAHAEAPEAVCmThreadSpace@@@Z
?DestroyVebox@CmDevice_RT@@UEAAHAEAPEAVCmVebox@@@Z
?DestroyVmeSurfaceG7_5@CmDevice_RT@@UEAAHAEAPEAVSurfaceIndex@@@Z
?DispatchTask@CmDevice_RT@@UEAAHXZ
?Enqueue@CmQueue_RT@@UEAAHPEAVCmTask@@AEAPEAVCmEvent@@PEBVCmThreadSpace@@@Z
?EnqueueCopyCPUToCPU@CmQueue_RT@@UEAAHPEAE0IIAEAPEAVCmEvent@@@Z
?EnqueueCopyCPUToGPU@CmQueue_RT@@UEAAHPEAVCmSurface2D@@PEBEAEAPEAVCmEvent@@@Z
?EnqueueCopyCPUToGPUFullStride@CmQueue_RT@@UEAAHPEAVCmSurface2D@@PEBEIIIAEAPEAVCmEvent@@@Z
?EnqueueCopyCPUToGPUFullStrideDup@CmQueue_RT@@UEAAHPEAVCmSurface2D@@PEBEIIIAEAPEAVCmEvent@@@Z
?EnqueueCopyGPUToCPU@CmQueue_RT@@UEAAHPEAVCmSurface2D@@PEAEAEAPEAVCmEvent@@@Z
?EnqueueCopyGPUToCPUFullStride@CmQueue_RT@@UEAAHPEAVCmSurface2D@@PEAEIIIAEAPEAVCmEvent@@@Z
?EnqueueCopyGPUToCPUFullStrideDup@CmQueue_RT@@UEAAHPEAVCmSurface2D@@PEAEIIIAEAPEAVCmEvent@@@Z
?EnqueueCopyGPUToGPU@CmQueue_RT@@UEAAHPEAVCmSurface2D@@0IAEAPEAVCmEvent@@@Z
?EnqueueFast@CmQueue_RT@@UEAAHPEAVCmTask@@AEAPEAVCmEvent@@PEBVCmThreadSpace@@@Z
?EnqueueInitSurface2D@CmQueue_RT@@UEAAHPEAVCmSurface2D@@IAEAPEAVCmEvent@@@Z
?EnqueueReadBuffer@CmQueue_RT@@UEAAHPEAVCmBuffer@@_KPEBE1PEAVCmEvent@@AEAPEAV3@I@Z
?EnqueueVebox@CmQueue_RT@@UEAAHPEAVCmVebox@@AEAPEAVCmEvent@@@Z
?EnqueueWithGroup@CmQueue_RT@@UEAAHPEAVCmTask@@AEAPEAVCmEvent@@PEBVCmThreadGroupSpace@@@Z
?EnqueueWithGroupFast@CmQueue_RT@@UEAAHPEAVCmTask@@AEAPEAVCmEvent@@PEBVCmThreadGroupSpace@@@Z
?EnqueueWithHints@CmQueue_RT@@UEAAHPEAVCmTask@@AEAPEAVCmEvent@@I@Z
?EnqueueWriteBuffer@CmQueue_RT@@UEAAHPEAVCmBuffer@@_KPEBE1PEAVCmEvent@@AEAPEAV3@I@Z
?FlushPrintBuffer@CmDevice_RT@@UEAAHXZ
?FlushPrintBufferIntoFile@CmDevice_RT@@UEAAHPEBD@Z
?GetCaps@CmDevice_RT@@UEAAHW4_CM_DEVICE_CAP_NAME@@AEA_KPEAX@Z
?GetD3D11Device@CmDevice_RT@@UEAAHAEAPEAUID3D11Device@@@Z
?GetSurface2DInfo@CmDevice_RT@@UEAAHIIW4DXGI_FORMAT@@AEAI1@Z
?GetVISAVersion@CmDevice_RT@@UEAAHAEAI0@Z
?InitPrintBuffer@CmDevice_RT@@UEAAH_K@Z
?LoadProgram@CmDevice_RT@@UEAAHPEAXIAEAPEAVCmProgram@@PEBD@Z
?SetCaps@CmDevice_RT@@UEAAHW4_CM_DEVICE_CAP_NAME@@_KPEAX@Z
?SetL3Config@CmDevice_RT@@UEAAHPEBUL3ConfigRegisterValues@@@Z
?SetResidentGroupAndParallelThreadNum@CmQueue_RT@@UEAAHII@Z
?SetSuggestedL3Config@CmDevice_RT@@UEAAHW4_L3_SUGGEST_CONFIG@@@Z
?SetVmeSurfaceStateParam@CmDevice_RT@@UEAAHPEAVSurfaceIndex@@PEAUCM_VME_SURFACE_STATE_PARAM@@@Z
CMRT_CreateBuffer
CMRT_CreateKernel
CMRT_CreateQueue
CMRT_CreateSurface2D
CMRT_CreateSurface3D
CMRT_CreateTask
CMRT_CreateThreadSpace
CMRT_DestroyBuffer
CMRT_DestroyEvent
CMRT_DestroyProgram
CMRT_DestroySurface2D
CMRT_DestroySurface3D
CMRT_DestroyTask
CMRT_DestroyThreadSpace
CMRT_EnableGTPinMarkers
CMRT_Enqueue
CMRT_GetCompleteTime
CMRT_GetEnqueueTime
CMRT_GetHWEndTime
CMRT_GetHWStartTime
CMRT_GetKernelCount
CMRT_GetKernelName
CMRT_GetKernelThreadSpace
CMRT_GetSubmitTime
CMRT_GetSurfaceDetails
CMRT_LoadProgram
CMRT_PrepareGTPinBuffers
CMRT_SetEventCallback
CMRT_SetGTPinArguments
CMRT_SetGTPinCompileMode
CmrtCodeMarkerForGTPin_AddKernel
CmrtCodeMarkerForGTPin_CreateQueue
CmrtCodeMarkerForGTPin_CreateTask
CmrtCodeMarkerForGTPin_DestroyTask
CmrtCodeMarkerForGTPin_Enqueue
CmrtCodeMarkerForGTPin_EnqueueWithGroup
CmrtCodeMarkerForGTPin_SetThreadCount
CreateCmDevice
CreateCmDeviceEx
CreateCmDeviceFromAdapter
DestroyCmDevice
GetCmErrorString
GetCmSupportedAdapters
QueryCmAdapterInfo

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxCUIService.exe
.exe windows x64

8478f66c0ea86b5173d1bd7c954fe419

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetSystemDirectoryW
lstrlenW
SetEndOfFile
WriteConsoleW
CreateFileW
ReadConsoleW
CreateProcessW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
SetFileAttributesW
RemoveDirectoryW
FindNextFileW
GetFileAttributesW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
MultiByteToWideChar
WTSGetActiveConsoleSessionId
GetSystemPowerStatus
lstrcmpiW
FindResourceW
SizeofResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
GetTickCount
GetCurrentThreadId
GetCurrentThread
CreateThread
GetCurrentProcess
Sleep
CreateEventW
WaitForSingleObject
SetEvent
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
CloseHandle
ReadFile
CreateFileA
GetCommandLineW
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
SetLastError
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
DecodePointer
IsValidCodePage
FindFirstFileExW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetFileType
WriteFile
GetStdHandle
GetFileAttributesExW
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlPcToFileHeader
RtlUnwindEx
GetCPInfo
LCMapStringEx
EncodePointer
GetStringTypeW
WideCharToMultiByte
GetStartupInfoW
InitializeSListHead
GetSystemTimeAsFileTime
IsDebuggerPresent
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
RtlUnwind

user32

MessageBoxW
CharNextW
CharUpperW
PostThreadMessageW
UnregisterDeviceNotification
GetMessageW
RegisterDeviceNotificationW
DispatchMessageW
LoadStringW
TranslateMessage

gdi32

D3DKMTCloseAdapter
D3DKMTOpenAdapterFromDeviceName
D3DKMTEscape

advapi32

SetSecurityDescriptorDacl
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW
ConvertSecurityDescriptorToStringSecurityDescriptorW
ConvertStringSecurityDescriptorToSecurityDescriptorW
StartServiceW
RevertToSelf
ImpersonateLoggedOnUser
DuplicateTokenEx
AllocateAndInitializeSid
CreateProcessAsUserW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerExW
QueryServiceStatusEx
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
ChangeServiceConfig2W
ChangeServiceConfigW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
LookupPrivilegeValueW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
IsValidSid
InitializeSecurityDescriptor
GetTokenInformation
GetLengthSid
CopySid
AdjustTokenPrivileges
OpenThreadToken
OpenProcessToken

ole32

CoUninitialize
CoInitializeEx
CoRegisterClassObject
CoRevokeClassObject
CoResumeClassObjects
CoAddRefServerProcess
CoReleaseServerProcess
CoInitializeSecurity
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
PropVariantClear
StringFromGUID2

oleaut32

SysFreeString
SysAllocString
SysStringLen
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
SysAllocStringLen
VarBstrCat

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey

shlwapi

PathFileExistsW

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

version

VerQueryValueW
GetFileVersionInfoExW
GetFileVersionInfoSizeExW

wtsapi32

WTSQueryUserToken

Sections

.text
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxCUIServiceN.exe
.exe windows x64

0c21c70473176074beb3f66e43b5fa41

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateProcessW
GetSystemDirectoryW
lstrlenW
SetEndOfFile
WriteConsoleW
CreateFileW
ReadConsoleW
SetFileAttributesW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
RemoveDirectoryW
GetFileAttributesW
FindFirstFileW
FindNextFileW
FindClose
DeleteFileW
CreateDirectoryW
MultiByteToWideChar
WTSGetActiveConsoleSessionId
GetSystemPowerStatus
lstrcmpiW
FindResourceW
SizeofResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
GetTickCount
GetCurrentThreadId
GetCurrentThread
CreateThread
GetCurrentProcess
Sleep
CreateEventW
WaitForSingleObject
SetEvent
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
CloseHandle
ReadFile
CreateFileA
GetCommandLineW
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
SetLastError
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
DecodePointer
FindFirstFileExW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetFileType
WriteFile
GetStdHandle
GetFileAttributesExW
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlPcToFileHeader
RtlUnwindEx
GetCPInfo
LCMapStringEx
EncodePointer
GetStringTypeW
WideCharToMultiByte
GetStartupInfoW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
RtlUnwind

user32

MessageBoxW
CharNextW
CharUpperW
PostThreadMessageW
RegisterPowerSettingNotification
GetMessageW
UnregisterDeviceNotification
RegisterDeviceNotificationW
DispatchMessageW
LoadStringW
TranslateMessage

gdi32

D3DKMTCloseAdapter
D3DKMTOpenAdapterFromDeviceName
D3DKMTEscape

advapi32

SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW
ConvertSecurityDescriptorToStringSecurityDescriptorW
ConvertStringSecurityDescriptorToSecurityDescriptorW
StartServiceW
RevertToSelf
ImpersonateLoggedOnUser
DuplicateTokenEx
AllocateAndInitializeSid
CreateProcessAsUserW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerExW
QueryServiceStatusEx
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
ChangeServiceConfig2W
ChangeServiceConfigW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
LookupPrivilegeValueW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
IsValidSid
InitializeSecurityDescriptor
GetTokenInformation
GetLengthSid
CopySid
AdjustTokenPrivileges
OpenThreadToken
OpenProcessToken

ole32

CoUninitialize
CoInitializeEx
CoRegisterClassObject
CoRevokeClassObject
CoResumeClassObjects
CoAddRefServerProcess
CoReleaseServerProcess
CoInitializeSecurity
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
PropVariantClear

oleaut32

SysFreeString
SysAllocString
SysStringLen
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
SysAllocStringLen
VarBstrCat

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey

shlwapi

PathFileExistsW

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

version

VerQueryValueW
GetFileVersionInfoExW
GetFileVersionInfoSizeExW

wtsapi32

WTSQueryUserToken

Sections

.text
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxCUIServicePS.dll
.dll regsvr32 windows x64

5acd2b478195e371355055638d4af1aa

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

40:1f:c2:c6:0c:b4:e8:2d:60:d0:fa:e3:f4:ad:80:f1:c9:d0:dd:69:ca:1d:92:28:e1:e5:13:5d:d3:d7:ca:5e
Signer

Actual PE Digest

40:1f:c2:c6:0c:b4:e8:2d:60:d0:fa:e3:f4:ad:80:f1:c9:d0:dd:69:ca:1d:92:28:e1:e5:13:5d:d3:d7:ca:5e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
CloseHandle
CreateFileW
OutputDebugStringW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
SetConsoleCtrlHandler
GetFileType
GetStdHandle
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetCurrentThread
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetDateFormatW
WriteConsoleW

rpcrt4

NdrOleFree
NdrOleAllocate
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
NdrStubCall2
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
NdrStubForwardingFunction
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrCStdStubBuffer2_Release
NdrCStdStubBuffer_Release
CStdStubBuffer_Disconnect

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxCUIServicePSN.dll
.dll regsvr32 windows x64

5acd2b478195e371355055638d4af1aa

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3c:bb:7d:9e:1c:03:c0:d4:82:b7:82:65:c7:43:16:6a:d5:41:cb:a4:ee:b2:b5:10:96:9e:f7:56:57:23:09:42
Signer

Actual PE Digest

3c:bb:7d:9e:1c:03:c0:d4:82:b7:82:65:c7:43:16:6a:d5:41:cb:a4:ee:b2:b5:10:96:9e:f7:56:57:23:09:42

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
CloseHandle
CreateFileW
OutputDebugStringW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
SetConsoleCtrlHandler
GetFileType
GetStdHandle
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetCurrentThread
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetDateFormatW
WriteConsoleW

rpcrt4

NdrOleFree
NdrOleAllocate
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
NdrStubCall2
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
NdrStubForwardingFunction
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrCStdStubBuffer2_Release
NdrCStdStubBuffer_Release
CStdStubBuffer_Disconnect

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxDH.dll
.dll regsvr32 windows x64

65fda392e8b843bb3f10522b914afd13

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

65:5b:7a:5f:fc:eb:c3:96:e5:56:b1:03:b9:18:e3:8c:b5:86:71:db:83:9e:cf:d7:c1:b7:6a:b2:d3:40:71:f3
Signer

Actual PE Digest

65:5b:7a:5f:fc:eb:c3:96:e5:56:b1:03:b9:18:e3:8c:b5:86:71:db:83:9e:cf:d7:c1:b7:6a:b2:d3:40:71:f3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FindClose
FindFirstFileW
FindNextFileW
GetFullPathNameW
CloseHandle
CreateThread
CreateFileW
DeviceIoControl
GlobalMemoryStatusEx
GetSystemDirectoryW
CreateDirectoryA
CreateFileA
DeleteFileA
WriteFile
Sleep
MoveFileA
ReplaceFileA
ReadFile
SetLastError
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
HeapDestroy
HeapReAlloc
HeapSize
CreateProcessW
FindResourceExW
LockResource
GetProductInfo
ReleaseMutex
GetProcessHeap
CreateMutexW
GetCurrentProcess
LoadLibraryW
GetSystemPowerStatus
VerSetConditionMask
VerifyVersionInfoW
OpenProcess
K32EnumProcesses
K32GetProcessImageFileNameW
CreateDirectoryW
DeleteFileW
MoveFileW
lstrlenW
GetFileAttributesW
GetFileSize
SetFileAttributesW
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
SetStdHandle
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
HeapFree
HeapAlloc
SetThreadLocale
MultiByteToWideChar
GetThreadLocale
lstrcmpiW
FindResourceW
SizeofResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
WaitForSingleObject
DecodePointer
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
LCMapStringW
CompareStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetTimeZoneInformation
GetFileType
GetStdHandle
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
LocalFree
WideCharToMultiByte
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
OutputDebugStringW
IsDebuggerPresent

user32

GetDisplayConfigBufferSizes
QueryDisplayConfig
EnumDisplaySettingsW
SendMessageW
RedrawWindow
EnumDisplayDevicesW
DisplayConfigGetDeviceInfo
EnumDisplaySettingsExW
GetCursorPos
FindWindowW
PostMessageW
CharNextW

gdi32

D3DKMTOpenAdapterFromDeviceName
D3DKMTEscape
D3DKMTCloseAdapter

advapi32

RegEnumValueW
GetUserNameW
LookupPrivilegeValueW
GetTokenInformation
OpenProcessToken
RegOpenKeyW
RegEnumKeyW
IsTextUnicode
RegQueryValueExW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

ole32

CoTaskMemAlloc
OleRun
CreateStreamOnHGlobal
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance

oleaut32

VariantClear
GetErrorInfo
SafeArrayRedim
SysFreeString
SysAllocString
SysStringLen
VarUI4FromStr
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi
LoadRegTypeLi
SysAllocStringLen
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SysAllocStringByteLen
SafeArrayGetElement

setupapi

SetupDiOpenDevRegKey
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiOpenDeviceInfoW
SetupDiCreateDeviceInfoList
SetupDiGetDevicePropertyW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyW

shlwapi

ord214
PathIsDirectoryW

bcrypt

BCryptHashData
BCryptFinishHash
BCryptCreateHash
BCryptDestroyKey
BCryptDecrypt
BCryptEncrypt
BCryptGenerateSymmetricKey
BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptDestroyHash

version

GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoExW

xmllite

CreateXmlWriter
CreateXmlReader

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 578KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxDHN.dll
.dll regsvr32 windows x64

f57a1cc750e00ae033f3f2e9eb3a0888

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

16:91:4d:ad:69:64:1b:02:9e:4a:2a:fc:3d:2e:57:70:00:bf:47:69:ae:3e:55:c5:fc:f7:66:0a:77:87:34:79
Signer

Actual PE Digest

16:91:4d:ad:69:64:1b:02:9e:4a:2a:fc:3d:2e:57:70:00:bf:47:69:ae:3e:55:c5:fc:f7:66:0a:77:87:34:79

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FindClose
FindFirstFileW
FindNextFileW
GetFullPathNameW
CloseHandle
CreateThread
CreateFileW
DeviceIoControl
GlobalMemoryStatusEx
GetSystemDirectoryW
CreateDirectoryA
CreateFileA
DeleteFileA
WriteFile
Sleep
MoveFileA
ReplaceFileA
ReadFile
SetLastError
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
HeapDestroy
HeapReAlloc
HeapSize
CreateProcessW
FindResourceExW
LockResource
GetProductInfo
ReleaseMutex
GetProcessHeap
CreateMutexW
GetCurrentProcess
LoadLibraryW
GetSystemPowerStatus
VerSetConditionMask
VerifyVersionInfoW
OpenProcess
K32EnumProcesses
K32GetProcessImageFileNameW
CreateDirectoryW
DeleteFileW
MoveFileW
lstrlenW
GetFileAttributesW
GetFileSize
SetFileAttributesW
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
SetStdHandle
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
HeapFree
HeapAlloc
SetThreadLocale
MultiByteToWideChar
GetThreadLocale
lstrcmpiW
FindResourceW
SizeofResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
WaitForSingleObject
DecodePointer
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
LCMapStringW
CompareStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetTimeZoneInformation
GetFileType
GetStdHandle
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
LocalFree
WideCharToMultiByte
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
OutputDebugStringW
IsDebuggerPresent

user32

EnumDisplaySettingsW
SendMessageW
RedrawWindow
EnumDisplayDevicesW
DisplayConfigGetDeviceInfo
EnumDisplaySettingsExW
GetCursorPos
FindWindowW
PostMessageW
CharNextW

gdi32

D3DKMTOpenAdapterFromDeviceName
D3DKMTEscape
D3DKMTCloseAdapter

advapi32

RegEnumValueW
GetUserNameW
LookupPrivilegeValueW
GetTokenInformation
OpenProcessToken
RegOpenKeyW
RegEnumKeyW
IsTextUnicode
RegQueryValueExW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

ole32

CoTaskMemAlloc
OleRun
CreateStreamOnHGlobal
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance

oleaut32

VariantClear
GetErrorInfo
SysStringByteLen
SysFreeString
SysAllocString
SysStringLen
VarUI4FromStr
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi
LoadRegTypeLi
SysAllocStringLen
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayCreate
SysAllocStringByteLen
SafeArrayRedim
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement

setupapi

SetupDiOpenDevRegKey
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiOpenDeviceInfoW
SetupDiCreateDeviceInfoList
SetupDiGetDevicePropertyW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyW

shlwapi

ord214
PathIsDirectoryW

bcrypt

BCryptHashData
BCryptFinishHash
BCryptCreateHash
BCryptDestroyKey
BCryptDecrypt
BCryptEncrypt
BCryptGenerateSymmetricKey
BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptDestroyHash

version

GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoExW

xmllite

CreateXmlWriter
CreateXmlReader

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 571KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxDI.dll
.dll regsvr32 windows x64

bbdf3e27e0354aeca4f2b4a631e1d5a7

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e8:c4:66:dc:00:88:26:5a:85:b9:87:2e:04:3a:97:54:d2:40:f7:32:ea:d9:51:43:c7:56:9c:1f:5a:53:20:17
Signer

Actual PE Digest

e8:c4:66:dc:00:88:26:5a:85:b9:87:2e:04:3a:97:54:d2:40:f7:32:ea:d9:51:43:c7:56:9c:1f:5a:53:20:17

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemPowerStatus
GetSystemDirectoryW
LoadLibraryW
Sleep
SetLastError
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
VerSetConditionMask
VerifyVersionInfoW
WriteConsoleW
CreateFileW
GetModuleHandleA
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
SetFilePointerEx
GetStringTypeW
GetProcessHeap
SetThreadLocale
GetThreadLocale
MultiByteToWideChar
lstrcmpiW
FindResourceW
SizeofResource
LoadResource
LoadLibraryExW
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
CloseHandle
DecodePointer
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
GetStdHandle
HeapReAlloc
HeapSize
HeapAlloc
HeapFree
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
LocalFree
WideCharToMultiByte
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
OutputDebugStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW

user32

CharNextW
EnumDisplayDevicesW
SetDisplayConfig
PostMessageW
GetDC
ReleaseDC
FindWindowW
GetDisplayConfigBufferSizes
QueryDisplayConfig
RegisterWindowMessageW
DisplayConfigSetDeviceInfo
DisplayConfigGetDeviceInfo
FindWindowExW
EnumDisplaySettingsExW

gdi32

D3DKMTEscape
D3DKMTOpenAdapterFromDeviceName
D3DKMTOpenAdapterFromHdc
SetPixelFormat
ChoosePixelFormat
D3DKMTCloseAdapter
SetDeviceGammaRamp
DeleteDC
CreateDCW

advapi32

RegOpenKeyW
RegQueryValueExW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

ole32

CoTaskMemRealloc
StringFromGUID2
CoTaskMemAlloc
OleRun
CoCreateInstance
CoTaskMemFree

oleaut32

RegisterTypeLi
UnRegisterTypeLi
LoadRegTypeLi
SafeArrayCreateEx
SafeArrayDestroy
VariantClear
LoadTypeLi
SysFreeString
SysAllocString
SysStringLen
SafeArrayAccessData
SafeArrayUnaccessData
VarUI4FromStr
SafeArrayCopy
GetRecordInfoFromGuids

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceRegistryPropertyW
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInfoW
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDevicePropertyW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

dxgi

CreateDXGIFactory

opengl32

wglDeleteContext
wglCreateContext
wglMakeCurrent
glGetString

d3d11

D3D11CreateDevice

d3d10_1

D3D10CreateDevice1

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxDIN.dll
.dll regsvr32 windows x64

03f793b91a290655923b1bba692dc86c

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

99:4d:c7:30:c0:16:d5:f3:48:6c:85:4f:10:89:92:79:ef:c6:15:bd:68:f2:43:f4:21:a8:92:fa:33:1f:d6:6c
Signer

Actual PE Digest

99:4d:c7:30:c0:16:d5:f3:48:6c:85:4f:10:89:92:79:ef:c6:15:bd:68:f2:43:f4:21:a8:92:fa:33:1f:d6:6c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemDirectoryW
LoadLibraryW
Sleep
SetLastError
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
VerSetConditionMask
VerifyVersionInfoW
GetModuleHandleA
WriteConsoleW
CreateFileW
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
SetFilePointerEx
GetStringTypeW
GetProcessHeap
SetThreadLocale
GetThreadLocale
MultiByteToWideChar
lstrcmpiW
FindResourceW
SizeofResource
LoadResource
LoadLibraryExW
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
CloseHandle
DecodePointer
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
GetStdHandle
HeapReAlloc
HeapSize
HeapAlloc
HeapFree
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
LocalFree
WideCharToMultiByte
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
OutputDebugStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW

user32

CharNextW
EnumDisplayDevicesW
SetDisplayConfig
PostMessageW
GetDC
ReleaseDC
FindWindowW
GetDisplayConfigBufferSizes
QueryDisplayConfig
RegisterWindowMessageW
DisplayConfigSetDeviceInfo
DisplayConfigGetDeviceInfo
FindWindowExW
EnumDisplaySettingsExW

gdi32

D3DKMTEscape
D3DKMTOpenAdapterFromDeviceName
D3DKMTOpenAdapterFromHdc
D3DKMTCloseAdapter
SetPixelFormat
ChoosePixelFormat
DeleteDC
CreateDCW

advapi32

RegOpenKeyW
RegQueryValueExW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

ole32

CoTaskMemRealloc
StringFromGUID2
CoTaskMemAlloc
OleRun
CoCreateInstance
CoTaskMemFree

oleaut32

RegisterTypeLi
UnRegisterTypeLi
LoadRegTypeLi
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
LoadTypeLi
SysFreeString
SysAllocString
SysStringLen
SafeArrayCreateEx
SafeArrayDestroy
VarUI4FromStr
SafeArrayCopy
GetRecordInfoFromGuids

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

dxgi

CreateDXGIFactory

opengl32

wglDeleteContext
wglCreateContext
wglMakeCurrent
glGetString

d3d11

D3D11CreateDevice

d3d10_1

D3D10CreateDevice1

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxEM.exe
.exe windows x64

8cb570dc22659b56093d73e519faeef4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
LockResource
SizeofResource
FindResourceW
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
MulDiv
lstrcmpW
lstrcmpiW
MultiByteToWideChar
WideCharToMultiByte
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetExitCodeThread
GetTickCount
ExpandEnvironmentStringsW
SetFileAttributesW
GetSystemDirectoryW
CreateDirectoryW
OpenEventW
GetCurrentProcessId
ProcessIdToSessionId
GetFileAttributesW
CreateProcessW
LoadLibraryW
WTSGetActiveConsoleSessionId
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetSystemDefaultLangID
WriteConsoleW
SetEndOfFile
CreateFileW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
FindFirstFileExW
FlushFileBuffers
GetOEMCP
GetACP
IsValidCodePage
GetFileSizeEx
FindResourceExW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetTimeZoneInformation
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetModuleHandleExW
ExitProcess
WriteFile
GetStdHandle
ReadFile
VirtualQuery
VirtualProtect
GetSystemInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlPcToFileHeader
RtlUnwindEx
GetCPInfo
LCMapStringEx
GetStringTypeW
LocalFree
GetStartupInfoW
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
IsDebuggerPresent
GetCurrentThreadId
CreateThread
Sleep
CreateEventW
CreateMutexW
WaitForSingleObject
SetEvent
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
FreeLibrary
HeapDestroy
SetLastError
DecodePointer
CloseHandle
GetCommandLineW
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
GetConsoleOutputCP
RtlUnwind

user32

IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
DefWindowProcW
PostThreadMessageW
SendMessageW
DispatchMessageW
TranslateMessage
GetMessageW
RegisterWindowMessageW
UnregisterClassW
KillTimer
GetSystemMetrics
GetSubMenu
IsChild
TrackPopupMenuEx
SetMenuDefaultItem
SetForegroundWindow
GetWindowRect
SetWindowContextHelpId
MessageBoxW
CreateDialogIndirectParamW
GetDlgItem
CharUpperW
GetCursorPos
LoadIconW
LoadImageW
MapDialogRect
GetDisplayConfigBufferSizes
SetDisplayConfig
QueryDisplayConfig
SetWindowPos
MoveWindow
InsertMenuW
DestroyWindow
CharNextW
SetFocus
GetFocus
SetCapture
ReleaseCapture
CreateAcceleratorTableW
DestroyAcceleratorTable
GetDC
ReleaseDC
BeginPaint
EndPaint
InvalidateRect
ClientToScreen
InvalidateRgn
RedrawWindow
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
SetTimer
MapVirtualKeyExW
GetKeyNameTextW
SendDlgItemMessageW
EndDialog
CreateDialogParamW
IsWindowVisible
ShowWindow
PostQuitMessage
UnregisterDeviceNotification
RegisterDeviceNotificationW
UnregisterHotKey
RegisterHotKey
GetKeyboardLayout
GetKeyboardLayoutList
ActivateKeyboardLayout
LoadKeyboardLayoutW
MsgWaitForMultipleObjects
PeekMessageW
FindWindowW
DestroyMenu
CreatePopupMenu
PostMessageW
LoadCursorW
GetWindow
GetClassNameW
GetParent
GetDesktopWindow
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
FillRect
GetSysColor
ScreenToClient
GetClientRect

gdi32

GetObjectW
SelectObject
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
DeleteDC
DeleteObject
GetStockObject
GetDeviceCaps

advapi32

RegDeleteKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW

ole32

CLSIDFromString
OleLockRunning
OleRun
OleUninitialize
OleInitialize
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CLSIDFromProgID
CoInitializeEx
CoCreateInstance
CoReleaseServerProcess
CoAddRefServerProcess
CoResumeClassObjects
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
CoUninitialize
CreateStreamOnHGlobal

oleaut32

SysAllocStringLen
SysStringLen
VariantInit
VariantClear
VarUI4FromStr
SysAllocString
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
OleCreateFontIndirect
SysStringByteLen
SysAllocStringByteLen
LoadTypeLi
GetErrorInfo
SysFreeString

setupapi

SetupDiCreateDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDevicePropertyW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey

wtsapi32

WTSUnRegisterSessionNotification
WTSRegisterSessionNotification

shell32

Shell_NotifyIconW
SHCreateItemFromParsingName

shlwapi

StrStrW

bcrypt

BCryptHashData
BCryptCreateHash
BCryptFinishHash
BCryptDestroyHash
BCryptDecrypt
BCryptEncrypt
BCryptGenerateSymmetricKey
BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptDestroyKey

version

GetFileVersionInfoExW
VerQueryValueW
GetFileVersionInfoSizeExW

Sections

.text
Size: 391KB - Virtual size: 390KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxEMN.exe
.exe windows x64

ea7fba8ad852e2fac827e51de24ff255

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
LockResource
SizeofResource
FindResourceW
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
MulDiv
lstrcmpW
lstrcmpiW
MultiByteToWideChar
WideCharToMultiByte
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetExitCodeThread
GetTickCount
ExpandEnvironmentStringsW
SetFileAttributesW
GetSystemDirectoryW
CreateDirectoryW
OpenEventW
GetCurrentProcessId
ProcessIdToSessionId
GetFileAttributesW
CreateProcessW
LoadLibraryW
WTSGetActiveConsoleSessionId
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetSystemDefaultLangID
WriteConsoleW
SetEndOfFile
CreateFileW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
FindFirstFileExW
FlushFileBuffers
GetOEMCP
GetACP
IsValidCodePage
FindResourceExW
GetConsoleOutputCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetTimeZoneInformation
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetModuleHandleExW
ExitProcess
WriteFile
GetStdHandle
ReadFile
VirtualQuery
VirtualProtect
GetSystemInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlPcToFileHeader
RtlUnwindEx
GetCPInfo
LCMapStringEx
GetStringTypeW
LocalFree
GetStartupInfoW
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
IsDebuggerPresent
GetCurrentThreadId
CreateThread
Sleep
CreateEventW
CreateMutexW
WaitForSingleObject
SetEvent
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
FreeLibrary
HeapDestroy
SetLastError
CloseHandle
GetCommandLineW
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
GetFileSizeEx
DecodePointer
RtlUnwind

user32

IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
DefWindowProcW
PostThreadMessageW
SendMessageW
DispatchMessageW
TranslateMessage
GetMessageW
RegisterWindowMessageW
UnregisterClassW
KillTimer
IsChild
GetSubMenu
InsertMenuW
TrackPopupMenuEx
SetMenuDefaultItem
SetForegroundWindow
CreateDialogIndirectParamW
GetDlgItem
CharUpperW
GetWindowRect
SetWindowContextHelpId
MessageBoxW
GetCursorPos
LoadIconW
LoadImageW
MapDialogRect
DestroyWindow
MoveWindow
GetSystemMetrics
SetWindowPos
CharNextW
SetFocus
GetFocus
SetCapture
ReleaseCapture
CreateAcceleratorTableW
DestroyAcceleratorTable
GetDC
ReleaseDC
BeginPaint
EndPaint
InvalidateRect
InvalidateRgn
RedrawWindow
ClientToScreen
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
SetTimer
MapVirtualKeyExW
GetKeyNameTextW
SendDlgItemMessageW
EndDialog
CreateDialogParamW
IsWindowVisible
ShowWindow
PostQuitMessage
UnregisterDeviceNotification
RegisterDeviceNotificationW
UnregisterHotKey
RegisterHotKey
GetKeyboardLayout
GetKeyboardLayoutList
ActivateKeyboardLayout
LoadKeyboardLayoutW
PeekMessageW
FindWindowW
DestroyMenu
CreatePopupMenu
PostMessageW
LoadCursorW
GetWindow
GetClassNameW
GetParent
GetDesktopWindow
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
FillRect
GetSysColor
ScreenToClient
GetClientRect

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
GetObjectW
SelectObject

advapi32

RegDeleteKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW

ole32

CLSIDFromString
OleLockRunning
OleRun
OleUninitialize
OleInitialize
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CLSIDFromProgID
CoInitializeEx
CoCreateInstance
CoReleaseServerProcess
CoAddRefServerProcess
CoResumeClassObjects
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
CoUninitialize
CreateStreamOnHGlobal

oleaut32

SysAllocStringLen
SysStringLen
VariantInit
VariantClear
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysAllocString
OleCreateFontIndirect
SysStringByteLen
SysAllocStringByteLen
GetErrorInfo
UnRegisterTypeLi
SysFreeString

setupapi

SetupDiGetClassDevsW
SetupDiOpenDeviceInfoW
SetupDiGetDevicePropertyW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList
SetupDiOpenDevRegKey

wtsapi32

WTSUnRegisterSessionNotification
WTSRegisterSessionNotification

shell32

Shell_NotifyIconW
SHCreateItemFromParsingName

shlwapi

StrStrW

bcrypt

BCryptHashData
BCryptCreateHash
BCryptFinishHash
BCryptDestroyHash
BCryptDecrypt
BCryptEncrypt
BCryptGenerateSymmetricKey
BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptDestroyKey

version

GetFileVersionInfoSizeExW
GetFileVersionInfoExW
VerQueryValueW

Sections

.text
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxLHM.dll
.dll regsvr32 windows x64

8781631093cb6500a91a6c97248f8393

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9b:03:f6:0c:e4:de:f8:92:ea:a7:52:4f:71:64:9d:cc:78:57:44:b7:b3:3b:d4:f6:33:f2:fd:c3:a2:08:b4:85
Signer

Actual PE Digest

9b:03:f6:0c:e4:de:f8:92:ea:a7:52:4f:71:64:9d:cc:78:57:44:b7:b3:3b:d4:f6:33:f2:fd:c3:a2:08:b4:85

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
lstrcmpiW
MultiByteToWideChar
GetThreadLocale
GetModuleFileNameW
CloseHandle
CreateProcessW
FreeResource
LockResource
GetUserDefaultUILanguage
GetSystemDefaultLCID
WriteConsoleW
CreateFileW
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
SetThreadLocale
DecodePointer
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
GetFileType
GetStdHandle
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
FreeEnvironmentStringsW
IsDebuggerPresent
OutputDebugStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
GetStringTypeW
LCMapStringEx
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW

user32

CharNextW

advapi32

RegQueryValueExW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

ole32

CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

SysFreeString
SysAllocString
SysStringLen
VarUI4FromStr
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi
LoadRegTypeLi
SysAllocStringByteLen
SysStringByteLen

setupapi

SetupDiOpenDeviceInfoW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiOpenDevRegKey
SetupDiGetDevicePropertyW
SetupDiCreateDeviceInfoList

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxSDK.exe
.exe windows x64

83b9fa51257c4a0f5ec9c4f5cc93e8ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

LockResource
SizeofResource
FindResourceW
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
MulDiv
lstrcmpW
lstrcmpiW
MultiByteToWideChar
HeapAlloc
HeapFree
GetProcessHeap
GetSystemPowerStatus
WriteConsoleW
CreateFileW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
LoadResource
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
HeapReAlloc
HeapSize
GetModuleHandleExW
ExitProcess
WriteFile
GetStdHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RtlPcToFileHeader
RtlUnwindEx
LocalFree
GetStartupInfoW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
GetCurrentThreadId
CreateThread
Sleep
CreateEventW
SetEvent
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
SetLastError
CloseHandle
GetCommandLineW
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
GetStringTypeW
DecodePointer
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
IsDebuggerPresent

user32

GetClassNameW
RegisterWindowMessageW
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageW
PostThreadMessageW
DefWindowProcW
CallWindowProcW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
IsWindow
IsChild
DestroyWindow
MoveWindow
SetWindowPos
CreateDialogIndirectParamW
GetDlgItem
CharUpperW
CharNextW
SetFocus
GetFocus
SetCapture
ReleaseCapture
CreateAcceleratorTableW
DestroyAcceleratorTable
GetDC
ReleaseDC
BeginPaint
EndPaint
MapDialogRect
SetWindowContextHelpId
SendDlgItemMessageW
EndDialog
ShowWindow
PostQuitMessage
UnregisterDeviceNotification
RegisterDeviceNotificationW
MessageBoxW
LoadCursorW
GetWindow
InvalidateRect
GetParent
GetDesktopWindow
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
FillRect
GetSysColor
ScreenToClient
ClientToScreen
GetClientRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
RedrawWindow
InvalidateRgn
UnregisterClassW

gdi32

GetObjectW
SelectObject
GetStockObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt

advapi32

RegQueryValueExW
RegOpenKeyW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

ole32

CoTaskMemAlloc
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoReleaseServerProcess
CoAddRefServerProcess
CoTaskMemRealloc
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
CoUninitialize
CreateStreamOnHGlobal
OleLockRunning
OleRun
OleInitialize
CoInitialize
CoResumeClassObjects
CoTaskMemFree
OleUninitialize

oleaut32

GetErrorInfo
SafeArrayDestroyData
GetRecordInfoFromGuids
SysFreeString
SysAllocString
SysAllocStringLen
SysStringLen
VariantInit
VariantClear
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
OleCreateFontIndirect
SafeArrayDestroy
SafeArrayCopy
SysStringByteLen
SysAllocStringByteLen
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCreate
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayGetElement
SafeArrayPutElement
SafeArrayRedim
SafeArrayGetDim
SafeArrayCreateEx
SafeArrayGetVartype

setupapi

SetupDiGetDevicePropertyW
SetupDiEnumDeviceInfo
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInfoW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiOpenDevRegKey

wtsapi32

WTSUnRegisterSessionNotification
WTSRegisterSessionNotification

Sections

.text
Size: 465KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxSDKLib.dll
.dll windows x64

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

56:43:5b:f2:24:fa:0e:fa:2e:54:d2:ff:0a:ea:03:e1:9d:1b:21:8e:49:36:c2:2c:62:e9:4a:c5:31:05:e8:c6
Signer

Actual PE Digest

56:43:5b:f2:24:fa:0e:fa:2e:54:d2:ff:0a:ea:03:e1:9d:1b:21:8e:49:36:c2:2c:62:e9:4a:c5:31:05:e8:c6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxcmrt32.dll
.dll windows x86

66b8baea65d4615ce01f4d12d0fb7864

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetErrorMode
GetProcAddress
LoadLibraryExW
CreateFileW
FreeLibrary
GetModuleFileNameA
LoadLibraryExA
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
GetFileSizeEx
SetFilePointerEx
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
CloseHandle
WriteConsoleW

ole32

CoTaskMemFree

Exports

Exports

??0CM_AVS_STATE_MSG_EX@@QAE@XZ
??0CM_FLAG@@QAE@XZ
?CloneKernel@CmDevice_RT@@UAEHAAPAVCmKernel@@PAV2@@Z
?CreateBuffer@CmDevice_RT@@UAEHIAAPAVCmBuffer@@@Z
?CreateBufferAlias@CmDevice_RT@@UAEHPAVCmBuffer@@AAPAVSurfaceIndex@@@Z
?CreateBufferSVM@CmDevice_RT@@UAEHIAAPAXIAAPAVCmBufferSVM@@@Z
?CreateBufferStateless@CmDevice_RT@@UAEHIIPAXAAPAVCmBufferStateless@@@Z
?CreateBufferUP@CmDevice_RT@@UAEHIPAXAAPAVCmBufferUP@@@Z
?CreateHevcVmeSurfaceG10@CmDevice_RT@@UAEHPAVCmSurface2D@@PAPAV2@1IIAAPAVSurfaceIndex@@@Z
?CreateKernel@CmDevice_RT@@UAEHPAVCmProgram@@PBDAAPAVCmKernel@@1@Z
?CreateKernel@CmDevice_RT@@UAEHPAVCmProgram@@PBDPBXAAPAVCmKernel@@1@Z
?CreateQueue@CmDevice_RT@@UAEHAAPAVCmQueue@@@Z
?CreateQueueEx@CmDevice_RT@@UAEHAAPAVCmQueue@@UCM_QUEUE_CREATE_OPTION@@@Z
?CreateSampler8x8@CmDevice_RT@@UAEHABUCM_SAMPLER_8X8_DESCR@@AAPAVCmSampler8x8@@@Z
?CreateSampler8x8Surface@CmDevice_RT@@UAEHPAVCmSurface2D@@AAPAVSurfaceIndex@@W4_CM_SAMPLER8x8_SURFACE_@@W4_CM_SURFACE_ADDRESS_CONTROL_MODE_@@@Z
?CreateSampler8x8SurfaceEx@CmDevice_RT@@UAEHPAVCmSurface2D@@AAPAVSurfaceIndex@@W4_CM_SAMPLER8x8_SURFACE_@@W4_CM_SURFACE_ADDRESS_CONTROL_MODE_@@PAUCM_FLAG@@@Z
?CreateSampler@CmDevice_RT@@UAEHABU_CM_SAMPLER_STATE@@AAPAVCmSampler@@@Z
?CreateSamplerEx@CmDevice_RT@@UAEHABU_CM_SAMPLER_STATE_EX@@AAPAVCmSampler@@@Z
?CreateSamplerSurface2D@CmDevice_RT@@UAEHPAVCmSurface2D@@AAPAVSurfaceIndex@@@Z
?CreateSamplerSurface2DEx@CmDevice_RT@@UAEHPAVCmSurface2D@@AAPAVSurfaceIndex@@PAUCM_FLAG@@@Z
?CreateSamplerSurface2DUP@CmDevice_RT@@UAEHPAVCmSurface2DUP@@AAPAVSurfaceIndex@@@Z
?CreateSamplerSurface3D@CmDevice_RT@@UAEHPAVCmSurface3D@@AAPAVSurfaceIndex@@@Z
?CreateSurface2D@CmDevice_RT@@UAEHIIW4_D3DFORMAT@@AAPAVCmSurface2D@@@Z
?CreateSurface2D@CmDevice_RT@@UAEHPAPAUIDirect3DSurface9@@IPAPAVCmSurface2D@@@Z
?CreateSurface2D@CmDevice_RT@@UAEHPAUIDirect3DSurface9@@AAPAVCmSurface2D@@@Z
?CreateSurface2DAlias@CmDevice_RT@@UAEHPAVCmSurface2D@@AAPAVSurfaceIndex@@@Z
?CreateSurface2DStateless@CmDevice_RT@@UAEHIIAAIAAPAVCmSurface2DStateless@@@Z
?CreateSurface2DUP@CmDevice_RT@@UAEHIIW4_D3DFORMAT@@PAXAAPAVCmSurface2DUP@@@Z
?CreateSurface3D@CmDevice_RT@@UAEHIIIW4_D3DFORMAT@@AAPAVCmSurface3D@@@Z
?CreateTask@CmDevice_RT@@UAEHAAPAVCmTask@@@Z
?CreateThreadGroupSpace@CmDevice_RT@@UAEHIIIIAAPAVCmThreadGroupSpace@@@Z
?CreateThreadGroupSpaceEx@CmDevice_RT@@UAEHIIIIIIAAPAVCmThreadGroupSpace@@@Z
?CreateThreadSpace@CmDevice_RT@@UAEHIIAAPAVCmThreadSpace@@@Z
?CreateVebox@CmDevice_RT@@UAEHAAPAVCmVebox@@@Z
?CreateVmeSurfaceG7_5@CmDevice_RT@@UAEHPAVCmSurface2D@@PAPAV2@1IIAAPAVSurfaceIndex@@@Z
?DestroyBufferSVM@CmDevice_RT@@UAEHAAPAVCmBufferSVM@@@Z
?DestroyBufferStateless@CmDevice_RT@@UAEHAAPAVCmBufferStateless@@@Z
?DestroyBufferUP@CmDevice_RT@@UAEHAAPAVCmBufferUP@@@Z
?DestroyEvent@CmQueue_RT@@UAEHAAPAVCmEvent@@@Z
?DestroyEventFast@CmQueue_RT@@UAEHAAPAVCmEvent@@@Z
?DestroyHevcVmeSurfaceG10@CmDevice_RT@@UAEHAAPAVSurfaceIndex@@@Z
?DestroyKernel@CmDevice_RT@@UAEHAAPAVCmKernel@@@Z
?DestroyProgram@CmDevice_RT@@UAEHAAPAVCmProgram@@@Z
?DestroySampler8x8@CmDevice_RT@@UAEHAAPAVCmSampler8x8@@@Z
?DestroySampler8x8Surface@CmDevice_RT@@UAEHAAPAVSurfaceIndex@@@Z
?DestroySampler@CmDevice_RT@@UAEHAAPAVCmSampler@@@Z
?DestroySamplerSurface@CmDevice_RT@@UAEHAAPAVSurfaceIndex@@@Z
?DestroySurface2DStateless@CmDevice_RT@@UAEHAAPAVCmSurface2DStateless@@@Z
?DestroySurface2DUP@CmDevice_RT@@UAEHAAPAVCmSurface2DUP@@@Z
?DestroySurface@CmDevice_RT@@UAEHAAPAVCmBuffer@@@Z
?DestroySurface@CmDevice_RT@@UAEHAAPAVCmSurface2D@@@Z
?DestroySurface@CmDevice_RT@@UAEHAAPAVCmSurface3D@@@Z
?DestroyTask@CmDevice_RT@@UAEHAAPAVCmTask@@@Z
?DestroyThreadGroupSpace@CmDevice_RT@@UAEHAAPAVCmThreadGroupSpace@@@Z
?DestroyThreadSpace@CmDevice_RT@@UAEHAAPAVCmThreadSpace@@@Z
?DestroyVebox@CmDevice_RT@@UAEHAAPAVCmVebox@@@Z
?DestroyVmeSurfaceG7_5@CmDevice_RT@@UAEHAAPAVSurfaceIndex@@@Z
?DispatchTask@CmDevice_RT@@UAEHXZ
?Enqueue@CmQueue_RT@@UAEHPAVCmTask@@AAPAVCmEvent@@PBVCmThreadSpace@@@Z
?EnqueueCopyCPUToCPU@CmQueue_RT@@UAEHPAE0IIAAPAVCmEvent@@@Z
?EnqueueCopyCPUToGPU@CmQueue_RT@@UAEHPAVCmSurface2D@@PBEAAPAVCmEvent@@@Z
?EnqueueCopyCPUToGPUFullStride@CmQueue_RT@@UAEHPAVCmSurface2D@@PBEIIIAAPAVCmEvent@@@Z
?EnqueueCopyCPUToGPUFullStrideDup@CmQueue_RT@@UAEHPAVCmSurface2D@@PBEIIIAAPAVCmEvent@@@Z
?EnqueueCopyGPUToCPU@CmQueue_RT@@UAEHPAVCmSurface2D@@PAEAAPAVCmEvent@@@Z
?EnqueueCopyGPUToCPUFullStride@CmQueue_RT@@UAEHPAVCmSurface2D@@PAEIIIAAPAVCmEvent@@@Z
?EnqueueCopyGPUToCPUFullStrideDup@CmQueue_RT@@UAEHPAVCmSurface2D@@PAEIIIAAPAVCmEvent@@@Z
?EnqueueCopyGPUToGPU@CmQueue_RT@@UAEHPAVCmSurface2D@@0IAAPAVCmEvent@@@Z
?EnqueueFast@CmQueue_RT@@UAEHPAVCmTask@@AAPAVCmEvent@@PBVCmThreadSpace@@@Z
?EnqueueInitSurface2D@CmQueue_RT@@UAEHPAVCmSurface2D@@IAAPAVCmEvent@@@Z
?EnqueueReadBuffer@CmQueue_RT@@UAEHPAVCmBuffer@@IPBE_KPAVCmEvent@@AAPAV3@I@Z
?EnqueueVebox@CmQueue_RT@@UAEHPAVCmVebox@@AAPAVCmEvent@@@Z
?EnqueueWithGroup@CmQueue_RT@@UAEHPAVCmTask@@AAPAVCmEvent@@PBVCmThreadGroupSpace@@@Z
?EnqueueWithGroupFast@CmQueue_RT@@UAEHPAVCmTask@@AAPAVCmEvent@@PBVCmThreadGroupSpace@@@Z
?EnqueueWithHints@CmQueue_RT@@UAEHPAVCmTask@@AAPAVCmEvent@@I@Z
?EnqueueWriteBuffer@CmQueue_RT@@UAEHPAVCmBuffer@@IPBE_KPAVCmEvent@@AAPAV3@I@Z
?FlushPrintBuffer@CmDevice_RT@@UAEHXZ
?FlushPrintBufferIntoFile@CmDevice_RT@@UAEHPBD@Z
?GetCaps@CmDevice_RT@@UAEHW4_CM_DEVICE_CAP_NAME@@AAIPAX@Z
?GetD3DDeviceManager@CmDevice_RT@@UAEHAAPAUIDirect3DDeviceManager9@@@Z
?GetSurface2DInfo@CmDevice_RT@@UAEHIIW4_D3DFORMAT@@AAI1@Z
?GetVISAVersion@CmDevice_RT@@UAEHAAI0@Z
?InitPrintBuffer@CmDevice_RT@@UAEHI@Z
?LoadProgram@CmDevice_RT@@UAEHPAXIAAPAVCmProgram@@PBD@Z
?SetCaps@CmDevice_RT@@UAEHW4_CM_DEVICE_CAP_NAME@@IPAX@Z
?SetL3Config@CmDevice_RT@@UAEHPBUL3ConfigRegisterValues@@@Z
?SetResidentGroupAndParallelThreadNum@CmQueue_RT@@UAEHII@Z
?SetSuggestedL3Config@CmDevice_RT@@UAEHW4_L3_SUGGEST_CONFIG@@@Z
?SetVmeSurfaceStateParam@CmDevice_RT@@UAEHPAVSurfaceIndex@@PAUCM_VME_SURFACE_STATE_PARAM@@@Z
CMRT_CreateBuffer
CMRT_CreateKernel
CMRT_CreateQueue
CMRT_CreateSurface2D
CMRT_CreateSurface3D
CMRT_CreateTask
CMRT_CreateThreadSpace
CMRT_DestroyBuffer
CMRT_DestroyEvent
CMRT_DestroyProgram
CMRT_DestroySurface2D
CMRT_DestroySurface3D
CMRT_DestroyTask
CMRT_DestroyThreadSpace
CMRT_EnableGTPinMarkers
CMRT_Enqueue
CMRT_GetCompleteTime
CMRT_GetEnqueueTime
CMRT_GetHWEndTime
CMRT_GetHWStartTime
CMRT_GetKernelCount
CMRT_GetKernelName
CMRT_GetKernelThreadSpace
CMRT_GetSubmitTime
CMRT_GetSurfaceDetails
CMRT_LoadProgram
CMRT_PrepareGTPinBuffers
CMRT_SetEventCallback
CMRT_SetGTPinArguments
CMRT_SetGTPinCompileMode
CmrtCodeMarkerForGTPin_AddKernel
CmrtCodeMarkerForGTPin_CreateQueue
CmrtCodeMarkerForGTPin_CreateTask
CmrtCodeMarkerForGTPin_DestroyTask
CmrtCodeMarkerForGTPin_Enqueue
CmrtCodeMarkerForGTPin_EnqueueWithGroup
CmrtCodeMarkerForGTPin_SetThreadCount
CreateCmDevice
CreateCmDeviceEx
DestroyCmDevice
GetCmErrorString

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxcmrt64.dll
.dll windows x64

e359049c7ec41dd0d11854c987a1bc02

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetErrorMode
GetProcAddress
LoadLibraryExW
WriteConsoleW
FreeLibrary
GetModuleFileNameA
LoadLibraryExA
CreateFileW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
GetFileSizeEx
SetFilePointerEx
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
CloseHandle

ole32

CoTaskMemFree

Exports

Exports

??0CM_AVS_STATE_MSG_EX@@QEAA@XZ
??0CM_FLAG@@QEAA@XZ
?CloneKernel@CmDevice_RT@@UEAAHAEAPEAVCmKernel@@PEAV2@@Z
?CreateBuffer@CmDevice_RT@@UEAAHIAEAPEAVCmBuffer@@@Z
?CreateBufferAlias@CmDevice_RT@@UEAAHPEAVCmBuffer@@AEAPEAVSurfaceIndex@@@Z
?CreateBufferSVM@CmDevice_RT@@UEAAHIAEAPEAXIAEAPEAVCmBufferSVM@@@Z
?CreateBufferStateless@CmDevice_RT@@UEAAH_KIPEAXAEAPEAVCmBufferStateless@@@Z
?CreateBufferUP@CmDevice_RT@@UEAAHIPEAXAEAPEAVCmBufferUP@@@Z
?CreateHevcVmeSurfaceG10@CmDevice_RT@@UEAAHPEAVCmSurface2D@@PEAPEAV2@1IIAEAPEAVSurfaceIndex@@@Z
?CreateKernel@CmDevice_RT@@UEAAHPEAVCmProgram@@PEBDAEAPEAVCmKernel@@1@Z
?CreateKernel@CmDevice_RT@@UEAAHPEAVCmProgram@@PEBDPEBXAEAPEAVCmKernel@@1@Z
?CreateQueue@CmDevice_RT@@UEAAHAEAPEAVCmQueue@@@Z
?CreateQueueEx@CmDevice_RT@@UEAAHAEAPEAVCmQueue@@UCM_QUEUE_CREATE_OPTION@@@Z
?CreateSampler8x8@CmDevice_RT@@UEAAHAEBUCM_SAMPLER_8X8_DESCR@@AEAPEAVCmSampler8x8@@@Z
?CreateSampler8x8Surface@CmDevice_RT@@UEAAHPEAVCmSurface2D@@AEAPEAVSurfaceIndex@@W4_CM_SAMPLER8x8_SURFACE_@@W4_CM_SURFACE_ADDRESS_CONTROL_MODE_@@@Z
?CreateSampler8x8SurfaceEx@CmDevice_RT@@UEAAHPEAVCmSurface2D@@AEAPEAVSurfaceIndex@@W4_CM_SAMPLER8x8_SURFACE_@@W4_CM_SURFACE_ADDRESS_CONTROL_MODE_@@PEAUCM_FLAG@@@Z
?CreateSampler@CmDevice_RT@@UEAAHAEBU_CM_SAMPLER_STATE@@AEAPEAVCmSampler@@@Z
?CreateSamplerEx@CmDevice_RT@@UEAAHAEBU_CM_SAMPLER_STATE_EX@@AEAPEAVCmSampler@@@Z
?CreateSamplerSurface2D@CmDevice_RT@@UEAAHPEAVCmSurface2D@@AEAPEAVSurfaceIndex@@@Z
?CreateSamplerSurface2DEx@CmDevice_RT@@UEAAHPEAVCmSurface2D@@AEAPEAVSurfaceIndex@@PEAUCM_FLAG@@@Z
?CreateSamplerSurface2DUP@CmDevice_RT@@UEAAHPEAVCmSurface2DUP@@AEAPEAVSurfaceIndex@@@Z
?CreateSamplerSurface3D@CmDevice_RT@@UEAAHPEAVCmSurface3D@@AEAPEAVSurfaceIndex@@@Z
?CreateSurface2D@CmDevice_RT@@UEAAHIIW4_D3DFORMAT@@AEAPEAVCmSurface2D@@@Z
?CreateSurface2D@CmDevice_RT@@UEAAHPEAPEAUIDirect3DSurface9@@IPEAPEAVCmSurface2D@@@Z
?CreateSurface2D@CmDevice_RT@@UEAAHPEAUIDirect3DSurface9@@AEAPEAVCmSurface2D@@@Z
?CreateSurface2DAlias@CmDevice_RT@@UEAAHPEAVCmSurface2D@@AEAPEAVSurfaceIndex@@@Z
?CreateSurface2DStateless@CmDevice_RT@@UEAAHIIAEAIAEAPEAVCmSurface2DStateless@@@Z
?CreateSurface2DUP@CmDevice_RT@@UEAAHIIW4_D3DFORMAT@@PEAXAEAPEAVCmSurface2DUP@@@Z
?CreateSurface3D@CmDevice_RT@@UEAAHIIIW4_D3DFORMAT@@AEAPEAVCmSurface3D@@@Z
?CreateTask@CmDevice_RT@@UEAAHAEAPEAVCmTask@@@Z
?CreateThreadGroupSpace@CmDevice_RT@@UEAAHIIIIAEAPEAVCmThreadGroupSpace@@@Z
?CreateThreadGroupSpaceEx@CmDevice_RT@@UEAAHIIIIIIAEAPEAVCmThreadGroupSpace@@@Z
?CreateThreadSpace@CmDevice_RT@@UEAAHIIAEAPEAVCmThreadSpace@@@Z
?CreateVebox@CmDevice_RT@@UEAAHAEAPEAVCmVebox@@@Z
?CreateVmeSurfaceG7_5@CmDevice_RT@@UEAAHPEAVCmSurface2D@@PEAPEAV2@1IIAEAPEAVSurfaceIndex@@@Z
?DestroyBufferSVM@CmDevice_RT@@UEAAHAEAPEAVCmBufferSVM@@@Z
?DestroyBufferStateless@CmDevice_RT@@UEAAHAEAPEAVCmBufferStateless@@@Z
?DestroyBufferUP@CmDevice_RT@@UEAAHAEAPEAVCmBufferUP@@@Z
?DestroyEvent@CmQueue_RT@@UEAAHAEAPEAVCmEvent@@@Z
?DestroyEventFast@CmQueue_RT@@UEAAHAEAPEAVCmEvent@@@Z
?DestroyHevcVmeSurfaceG10@CmDevice_RT@@UEAAHAEAPEAVSurfaceIndex@@@Z
?DestroyKernel@CmDevice_RT@@UEAAHAEAPEAVCmKernel@@@Z
?DestroyProgram@CmDevice_RT@@UEAAHAEAPEAVCmProgram@@@Z
?DestroySampler8x8@CmDevice_RT@@UEAAHAEAPEAVCmSampler8x8@@@Z
?DestroySampler8x8Surface@CmDevice_RT@@UEAAHAEAPEAVSurfaceIndex@@@Z
?DestroySampler@CmDevice_RT@@UEAAHAEAPEAVCmSampler@@@Z
?DestroySamplerSurface@CmDevice_RT@@UEAAHAEAPEAVSurfaceIndex@@@Z
?DestroySurface2DStateless@CmDevice_RT@@UEAAHAEAPEAVCmSurface2DStateless@@@Z
?DestroySurface2DUP@CmDevice_RT@@UEAAHAEAPEAVCmSurface2DUP@@@Z
?DestroySurface@CmDevice_RT@@UEAAHAEAPEAVCmBuffer@@@Z
?DestroySurface@CmDevice_RT@@UEAAHAEAPEAVCmSurface2D@@@Z
?DestroySurface@CmDevice_RT@@UEAAHAEAPEAVCmSurface3D@@@Z
?DestroyTask@CmDevice_RT@@UEAAHAEAPEAVCmTask@@@Z
?DestroyThreadGroupSpace@CmDevice_RT@@UEAAHAEAPEAVCmThreadGroupSpace@@@Z
?DestroyThreadSpace@CmDevice_RT@@UEAAHAEAPEAVCmThreadSpace@@@Z
?DestroyVebox@CmDevice_RT@@UEAAHAEAPEAVCmVebox@@@Z
?DestroyVmeSurfaceG7_5@CmDevice_RT@@UEAAHAEAPEAVSurfaceIndex@@@Z
?DispatchTask@CmDevice_RT@@UEAAHXZ
?Enqueue@CmQueue_RT@@UEAAHPEAVCmTask@@AEAPEAVCmEvent@@PEBVCmThreadSpace@@@Z
?EnqueueCopyCPUToCPU@CmQueue_RT@@UEAAHPEAE0IIAEAPEAVCmEvent@@@Z
?EnqueueCopyCPUToGPU@CmQueue_RT@@UEAAHPEAVCmSurface2D@@PEBEAEAPEAVCmEvent@@@Z
?EnqueueCopyCPUToGPUFullStride@CmQueue_RT@@UEAAHPEAVCmSurface2D@@PEBEIIIAEAPEAVCmEvent@@@Z
?EnqueueCopyCPUToGPUFullStrideDup@CmQueue_RT@@UEAAHPEAVCmSurface2D@@PEBEIIIAEAPEAVCmEvent@@@Z
?EnqueueCopyGPUToCPU@CmQueue_RT@@UEAAHPEAVCmSurface2D@@PEAEAEAPEAVCmEvent@@@Z
?EnqueueCopyGPUToCPUFullStride@CmQueue_RT@@UEAAHPEAVCmSurface2D@@PEAEIIIAEAPEAVCmEvent@@@Z
?EnqueueCopyGPUToCPUFullStrideDup@CmQueue_RT@@UEAAHPEAVCmSurface2D@@PEAEIIIAEAPEAVCmEvent@@@Z
?EnqueueCopyGPUToGPU@CmQueue_RT@@UEAAHPEAVCmSurface2D@@0IAEAPEAVCmEvent@@@Z
?EnqueueFast@CmQueue_RT@@UEAAHPEAVCmTask@@AEAPEAVCmEvent@@PEBVCmThreadSpace@@@Z
?EnqueueInitSurface2D@CmQueue_RT@@UEAAHPEAVCmSurface2D@@IAEAPEAVCmEvent@@@Z
?EnqueueReadBuffer@CmQueue_RT@@UEAAHPEAVCmBuffer@@_KPEBE1PEAVCmEvent@@AEAPEAV3@I@Z
?EnqueueVebox@CmQueue_RT@@UEAAHPEAVCmVebox@@AEAPEAVCmEvent@@@Z
?EnqueueWithGroup@CmQueue_RT@@UEAAHPEAVCmTask@@AEAPEAVCmEvent@@PEBVCmThreadGroupSpace@@@Z
?EnqueueWithGroupFast@CmQueue_RT@@UEAAHPEAVCmTask@@AEAPEAVCmEvent@@PEBVCmThreadGroupSpace@@@Z
?EnqueueWithHints@CmQueue_RT@@UEAAHPEAVCmTask@@AEAPEAVCmEvent@@I@Z
?EnqueueWriteBuffer@CmQueue_RT@@UEAAHPEAVCmBuffer@@_KPEBE1PEAVCmEvent@@AEAPEAV3@I@Z
?FlushPrintBuffer@CmDevice_RT@@UEAAHXZ
?FlushPrintBufferIntoFile@CmDevice_RT@@UEAAHPEBD@Z
?GetCaps@CmDevice_RT@@UEAAHW4_CM_DEVICE_CAP_NAME@@AEA_KPEAX@Z
?GetD3DDeviceManager@CmDevice_RT@@UEAAHAEAPEAUIDirect3DDeviceManager9@@@Z
?GetSurface2DInfo@CmDevice_RT@@UEAAHIIW4_D3DFORMAT@@AEAI1@Z
?GetVISAVersion@CmDevice_RT@@UEAAHAEAI0@Z
?InitPrintBuffer@CmDevice_RT@@UEAAH_K@Z
?LoadProgram@CmDevice_RT@@UEAAHPEAXIAEAPEAVCmProgram@@PEBD@Z
?SetCaps@CmDevice_RT@@UEAAHW4_CM_DEVICE_CAP_NAME@@_KPEAX@Z
?SetL3Config@CmDevice_RT@@UEAAHPEBUL3ConfigRegisterValues@@@Z
?SetResidentGroupAndParallelThreadNum@CmQueue_RT@@UEAAHII@Z
?SetSuggestedL3Config@CmDevice_RT@@UEAAHW4_L3_SUGGEST_CONFIG@@@Z
?SetVmeSurfaceStateParam@CmDevice_RT@@UEAAHPEAVSurfaceIndex@@PEAUCM_VME_SURFACE_STATE_PARAM@@@Z
CMRT_CreateBuffer
CMRT_CreateKernel
CMRT_CreateQueue
CMRT_CreateSurface2D
CMRT_CreateSurface3D
CMRT_CreateTask
CMRT_CreateThreadSpace
CMRT_DestroyBuffer
CMRT_DestroyEvent
CMRT_DestroyProgram
CMRT_DestroySurface2D
CMRT_DestroySurface3D
CMRT_DestroyTask
CMRT_DestroyThreadSpace
CMRT_EnableGTPinMarkers
CMRT_Enqueue
CMRT_GetCompleteTime
CMRT_GetEnqueueTime
CMRT_GetHWEndTime
CMRT_GetHWStartTime
CMRT_GetKernelCount
CMRT_GetKernelName
CMRT_GetKernelThreadSpace
CMRT_GetSubmitTime
CMRT_GetSurfaceDetails
CMRT_LoadProgram
CMRT_PrepareGTPinBuffers
CMRT_SetEventCallback
CMRT_SetGTPinArguments
CMRT_SetGTPinCompileMode
CmrtCodeMarkerForGTPin_AddKernel
CmrtCodeMarkerForGTPin_CreateQueue
CmrtCodeMarkerForGTPin_CreateTask
CmrtCodeMarkerForGTPin_DestroyTask
CmrtCodeMarkerForGTPin_Enqueue
CmrtCodeMarkerForGTPin_EnqueueWithGroup
CmrtCodeMarkerForGTPin_SetThreadCount
CreateCmDevice
CreateCmDeviceEx
DestroyCmDevice
GetCmErrorString

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxexps.dll
.dll regsvr32 windows x64

bc622a1c7418bf907bfebef189ea0748

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls

rpcrt4

CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_AddRef
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
CStdStubBuffer_QueryInterface
NdrStubForwardingFunction
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrCStdStubBuffer2_Release
NdrCStdStubBuffer_Release
CStdStubBuffer_DebugServerQueryInterface

oleaut32

LPSAFEARRAY_UserFree
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserSize
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1024B - Virtual size: 791B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxexps32.dll
.dll regsvr32 windows x86

5e1ae1fbaa54333ffcfca9f342c592eb

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

74:f5:42:a7:35:b8:13:13:62:73:77:ec:a0:0a:0c:0d:e7:98:15:b2:2f:2a:5e:42:50:ce:f4:cd:b9:87:f8:cc
Signer

Actual PE Digest

74:f5:42:a7:35:b8:13:13:62:73:77:ec:a0:0a:0c:0d:e7:98:15:b2:2f:2a:5e:42:50:ce:f4:cd:b9:87:f8:cc

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls

rpcrt4

NdrStubForwardingFunction
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
IUnknown_Release_Proxy
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
NdrOleFree
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrCStdStubBuffer2_Release
NdrCStdStubBuffer_Release
CStdStubBuffer_Invoke

oleaut32

LPSAFEARRAY_UserFree
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserSize
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 355B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxext.exe
.exe windows x64

7b77d28ac74d49db492fa5af06dd5ba2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateEventW
Sleep
CreateThread
GetCurrentThreadId
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
SizeofResource
WaitForSingleObject
lstrcmpiW
MultiByteToWideChar
SetEndOfFile
WriteConsoleW
CreateFileW
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
SetEvent
CloseHandle
GetCommandLineW
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
FindResourceW
DecodePointer
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
LocalFree
EncodePointer
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
RtlUnwind

user32

TranslateMessage
GetMessageW
DispatchMessageW
PostThreadMessageW
CharUpperW
CharNextW

advapi32

RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW

ole32

CoRevokeClassObject
CoResumeClassObjects
CoCreateInstance
CoAddRefServerProcess
CoRegisterClassObject
CoUninitialize
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
OleRun
CoReleaseServerProcess

oleaut32

GetRecordInfoFromGuids
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayDestroy
SafeArrayCreateEx
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
SafeArrayCopy
SysStringLen
SysAllocString
SysFreeString
GetErrorInfo
VarUI4FromStr

Sections

.text
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igfxextN.exe
.exe windows x64

7b77d28ac74d49db492fa5af06dd5ba2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateEventW
Sleep
CreateThread
GetCurrentThreadId
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
SizeofResource
WaitForSingleObject
lstrcmpiW
MultiByteToWideChar
SetEndOfFile
WriteConsoleW
CreateFileW
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
SetEvent
CloseHandle
GetCommandLineW
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
FindResourceW
DecodePointer
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
LocalFree
EncodePointer
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
RtlUnwind

user32

TranslateMessage
GetMessageW
DispatchMessageW
PostThreadMessageW
CharUpperW
CharNextW

advapi32

RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW

ole32

CoRevokeClassObject
CoResumeClassObjects
CoCreateInstance
CoAddRefServerProcess
CoRegisterClassObject
CoUninitialize
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
OleRun
CoReleaseServerProcess

oleaut32

GetRecordInfoFromGuids
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayDestroy
SafeArrayCreateEx
UnRegisterTypeLi
RegisterTypeLi
LoadTypeLi
SafeArrayCopy
SysStringLen
SysAllocString
SysFreeString
GetErrorInfo
VarUI4FromStr

Sections

.text
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/iglhxa64.cpa
Graphics/iglhxa64.vp
Graphics/iglhxc64.vp
Graphics/iglhxc64_dev.vp
Graphics/iglhxg64.vp
Graphics/iglhxg64_dev.vp
Graphics/iglhxo64.vp
Graphics/iglhxo64_dev.vp
Graphics/iglhxs64.vp
Graphics/iglhxsn64.vp
Graphics/iglhxsnd64.vp
Graphics/igsc.dll
.dll windows x64

cd62387eb873b80b99dc89ce0cd66d86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

cfgmgr32

CM_Get_DevNode_PropertyW
CM_Get_Device_Interface_ListW
CM_Get_Device_Interface_List_SizeW
CM_Get_Device_Interface_PropertyW
CM_Get_Parent
CM_Locate_DevNodeW
CM_Get_Device_Interface_ListA
CM_Get_Device_Interface_List_SizeA

kernel32

OutputDebugStringA
Sleep
CreateFileA
CloseHandle
GetLastError
CancelIo
WaitForSingleObject
ReadFile
WriteFile
HeapAlloc
HeapFree
GetProcessHeap
DeviceIoControl
GetOverlappedResult
CreateEventW
WriteConsoleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetFileType
MultiByteToWideChar
WideCharToMultiByte
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetFilePointerEx
GetStringTypeW
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
CreateFileW

Exports

Exports

GetDriverVersion
TeeConnect
TeeDisconnect
TeeFWStatus
TeeGetDeviceHandle
TeeInit
TeeInitGUID
TeeInitHandle
TeeRead
TeeWrite
igsc_device_close
igsc_device_fw_update
igsc_device_fw_version
igsc_device_get_device_info
igsc_device_init_by_device
igsc_device_init_by_device_info
igsc_device_iterator_create
igsc_device_iterator_destroy
igsc_device_iterator_next
igsc_device_oprom_update
igsc_device_oprom_version
igsc_fw_version_compare
igsc_image_fw_version
igsc_image_oprom_count_devices
igsc_image_oprom_init
igsc_image_oprom_iterator_next
igsc_image_oprom_iterator_reset
igsc_image_oprom_match_device
igsc_image_oprom_release
igsc_image_oprom_supported_devices
igsc_image_oprom_type
igsc_image_oprom_version
igsc_oprom_version_compare

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igvk32.dll
.dll windows x86

1db4ff92358cc0b97e61230e915f81cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForMultipleObjects
WaitForSingleObject
GetLastError
Sleep
GetExitCodeThread
SetEvent
FreeLibrary
LoadLibraryExA
GetSystemDirectoryA
GetProcAddress
GetModuleFileNameA
GetCurrentProcess
K32EnumProcessModulesEx
LoadLibraryA
GetModuleHandleExA
QueryPerformanceCounter
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
CloseHandle
VirtualFree
AcquireSRWLockShared
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetSystemInfo
VirtualAlloc
GetModuleFileNameW
InitializeSRWLock
CreateDirectoryA
GetFileAttributesA
LoadLibraryW
SetLastError
DebugBreak
IsDebuggerPresent
QueryPerformanceFrequency
GetCurrentProcessId
TryEnterCriticalSection
FormatMessageW
FreeLibraryAndExitThread
GetEnvironmentVariableA
SetEnvironmentVariableA
CreateThread
LocalFree
GetCurrentThreadId
CreateEventA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
UnmapViewOfFile
EnterCriticalSection
SetStdHandle
CompareFileTime
CreateDirectoryW
CreateFileW
DeleteFileA
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetFileSize
GetFileTime
FindFirstChangeNotificationW
GetFileSizeEx
ReadFile
SetEndOfFile
WriteFile
GetOverlappedResult
LockFileEx
UnlockFile
WaitForSingleObjectEx
FormatMessageA
WideCharToMultiByte
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
GetSystemTimePreciseAsFileTime
SwitchToThread
GetNativeSystemInfo
RaiseException
MultiByteToWideChar
GetStringTypeW
FindFirstFileExW
GetFileAttributesExW
SetFilePointerEx
GetFileInformationByHandleEx
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
IsProcessorFeaturePresent
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetLocaleInfoEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
RtlUnwind
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ExitThread
GetStdHandle
GetFileType
WriteConsoleW
ExitProcess
HeapFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
FlushFileBuffers
ReadConsoleW
HeapReAlloc
HeapSize
OutputDebugStringW
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap

advapi32

GetTokenInformation
EqualSid
AllocateAndInitializeSid
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSecurityDescriptorToStringSecurityDescriptorW
FreeSid
RegOpenKeyExA
RegEnumValueA
RegQueryValueExA
RegCloseKey

user32

IntersectRect

shlwapi

PathFileExistsW
PathCanonicalizeW

oleaut32

GetErrorInfo
SysAllocString
SetErrorInfo
SysFreeString
SysStringLen

ole32

CoTaskMemAlloc
CoCreateFreeThreadedMarshaler

Exports

Exports

DumpRegistryKeyDefinitions
SetDriverStoreDir
vkCreateInstance
vkEnumerateInstanceExtensionProperties
vkEnumerateInstanceLayerProperties
vkEnumerateInstanceVersion
vkGetDeviceProcAddr
vkGetInstanceProcAddr
vk_icdEnumerateAdapterPhysicalDevices
vk_icdGetInstanceProcAddr
vk_icdGetPhysicalDeviceProcAddr
vk_icdNegotiateLoaderICDInterfaceVersion

Sections

.text
Size: 11.6MB - Virtual size: 11.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 990KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 780KB - Virtual size: 780KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igvk32.json
Graphics/igvk64.dll
.dll windows x64

415f3bb13dfd7538d56b4e1a4b97c257

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WaitForMultipleObjects
WaitForSingleObject
GetLastError
Sleep
GetExitCodeThread
SetEvent
FreeLibrary
LoadLibraryExA
GetSystemDirectoryA
GetProcAddress
GetModuleFileNameA
GetCurrentProcess
K32EnumProcessModulesEx
LoadLibraryA
GetModuleHandleExA
QueryPerformanceCounter
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
CloseHandle
VirtualFree
AcquireSRWLockShared
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetSystemInfo
VirtualAlloc
GetModuleFileNameW
InitializeSRWLock
CreateDirectoryA
GetFileAttributesA
LoadLibraryW
SetLastError
DebugBreak
IsDebuggerPresent
QueryPerformanceFrequency
GetCurrentProcessId
TryEnterCriticalSection
FormatMessageW
FreeLibraryAndExitThread
GetEnvironmentVariableA
SetEnvironmentVariableA
CreateThread
LocalFree
GetCurrentThreadId
CreateEventA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
UnmapViewOfFile
EnterCriticalSection
RtlUnwind
CompareFileTime
CreateDirectoryW
CreateFileW
DeleteFileA
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetFileSize
GetFileTime
FindFirstChangeNotificationW
GetFileSizeEx
ReadFile
SetEndOfFile
WriteFile
GetOverlappedResult
LockFileEx
UnlockFile
WaitForSingleObjectEx
FormatMessageA
WideCharToMultiByte
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
GetSystemTimePreciseAsFileTime
SwitchToThread
GetNativeSystemInfo
RtlPcToFileHeader
RaiseException
MultiByteToWideChar
GetStringTypeW
FindFirstFileExW
GetFileAttributesExW
SetFilePointerEx
GetFileInformationByHandleEx
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
IsProcessorFeaturePresent
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetLocaleInfoEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ExitThread
GetStdHandle
GetFileType
WriteConsoleW
ExitProcess
HeapFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
FlushFileBuffers
ReadConsoleW
HeapReAlloc
HeapSize
OutputDebugStringW
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle

advapi32

GetTokenInformation
EqualSid
AllocateAndInitializeSid
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSecurityDescriptorToStringSecurityDescriptorW
FreeSid
RegOpenKeyExA
RegEnumValueA
RegQueryValueExA
RegCloseKey

user32

IntersectRect

shlwapi

PathFileExistsW
PathCanonicalizeW

oleaut32

GetErrorInfo
SysAllocString
SetErrorInfo
SysFreeString
SysStringLen

ole32

CoTaskMemAlloc
CoCreateFreeThreadedMarshaler

Exports

Exports

DumpRegistryKeyDefinitions
SetDriverStoreDir
vkCreateInstance
vkEnumerateInstanceExtensionProperties
vkEnumerateInstanceLayerProperties
vkEnumerateInstanceVersion
vkGetDeviceProcAddr
vkGetInstanceProcAddr
vk_icdEnumerateAdapterPhysicalDevices
vk_icdGetInstanceProcAddr
vk_icdGetPhysicalDeviceProcAddr
vk_icdNegotiateLoaderICDInterfaceVersion

Sections

.text
Size: 13.0MB - Virtual size: 13.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.8MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igvk64.json
Graphics/igxelpicd32.dll
.dll windows x86

cb29fcbaf6a606732c56819489e0fbf0

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c9:a5:43:06:7d:3d:56:e7:dc:19:07:c6:32:37:06:44:14:b9:90:5d:a5:52:1b:40:e7:81:c3:52:d0:32:8d:d2
Signer

Actual PE Digest

c9:a5:43:06:7d:3d:56:e7:dc:19:07:c6:32:37:06:44:14:b9:90:5d:a5:52:1b:40:e7:81:c3:52:d0:32:8d:d2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsA
FindResourceW
LoadResource
LockResource
CreateFileA
WriteFile
GetUserDefaultLangID
GetEnvironmentStrings
VerSetConditionMask
VerifyVersionInfoW
WaitForMultipleObjects
GetLastError
QueryPerformanceCounter
GetModuleFileNameA
SetLastError
EnterCriticalSection
LeaveCriticalSection
CloseHandle
GetCurrentProcess
GetModuleHandleW
ReleaseMutex
CreateThread
FreeLibrary
LoadLibraryExA
GetSystemDirectoryA
QueryPerformanceFrequency
GetSystemInfo
GetCurrentProcessId
Sleep
SwitchToThread
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetEnvironmentVariableA
SetEnvironmentVariableA
CreateEventW
GetExitCodeThread
ResetEvent
CreateDirectoryA
GetFileAttributesA
WaitForSingleObject
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
TerminateThread
GetEnvironmentVariableW
OpenEventA
OpenFileMappingW
OutputDebugStringA
CreateMutexW
GetCurrentThreadId
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
WriteConsoleW
TryEnterCriticalSection
GetStdHandle
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetFileAttributesW
GetFileInformationByHandle
GetFinalPathNameByHandleW
ReadFile
SetFileInformationByHandle
SetFileTime
DuplicateHandle
GetSystemTime
VirtualQuery
CreateFileMappingW
GetModuleFileNameW
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
FreeResource
SetUnhandledExceptionFilter
LoadLibraryW
GlobalAlloc
GlobalFree
GetModuleHandleExA
SetEvent
RaiseException
GetCommandLineW
GetNativeSystemInfo
GetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
TerminateProcess
LocalFree
FormatMessageA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WaitForSingleObjectEx
GetSystemTimePreciseAsFileTime
ReleaseSRWLockShared
AcquireSRWLockShared
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
SetStdHandle
SetFilePointerEx
SetEndOfFile
GetConsoleOutputCP
ReadConsoleW
HeapFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
HeapSize
GetFileSizeEx
IsValidCodePage
GetACP
GetOEMCP
GetProcessHeap

gdi32

GetClipBox
CreateCompatibleDC
GetObjectType
GetCurrentObject
SetPixelFormat
BitBlt
DeleteObject
SelectObject
DeleteDC
CreateDIBSection
GetDeviceCaps

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegGetValueA
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

ole32

CoTaskMemAlloc

user32

IntersectRect

shell32

SHGetFolderPathA

Exports

Exports

DrvCopyContext
DrvCreateContext
DrvCreateLayerContext
DrvDeleteContext
DrvDescribeLayerPlane
DrvDescribePixelFormat
DrvGetLayerPaletteEntries
DrvGetProcAddress
DrvPresentBuffers
DrvRealizeLayerPalette
DrvReleaseContext
DrvSetCallbackProcs
DrvSetContext
DrvSetLayerPaletteEntries
DrvSetPixelFormat
DrvShareLists
DrvSwapBuffers
DrvSwapLayerBuffers
DrvValidateVersion
DumpRegistryKeyDefinitions
RegisterProcTableCallback

Sections

.text
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 595KB - Virtual size: 679KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igxelpicd64.dll
.dll windows x64

759372ae4aa718213a742f96d9f688fb

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4a:62:c3:2d:75:6f:31:5c:ae:0e:7b:cc:86:4f:c4:6f:35:34:25:e6:81:c1:b4:0e:1f:62:7a:ef:ec:b9:0a:95
Signer

Actual PE Digest

4a:62:c3:2d:75:6f:31:5c:ae:0e:7b:cc:86:4f:c4:6f:35:34:25:e6:81:c1:b4:0e:1f:62:7a:ef:ec:b9:0a:95

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsA
FindResourceW
LoadResource
LockResource
CreateFileA
WriteFile
GetUserDefaultLangID
GetEnvironmentStrings
VerSetConditionMask
VerifyVersionInfoW
WaitForMultipleObjects
GetLastError
QueryPerformanceCounter
GetModuleFileNameA
SetLastError
EnterCriticalSection
LeaveCriticalSection
CloseHandle
CreateMutexW
ReleaseMutex
GetModuleHandleW
FreeLibrary
LoadLibraryExA
GetSystemDirectoryA
QueryPerformanceFrequency
GetCurrentProcessId
Sleep
SwitchToThread
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetEnvironmentVariableA
SetEnvironmentVariableA
CreateEventW
GetExitCodeThread
__C_specific_handler
GetModuleHandleExA
VirtualAlloc
VirtualFree
ResetEvent
GetFileAttributesA
RtlUnwind
GetSystemInfo
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
TerminateThread
GetEnvironmentVariableW
OpenEventA
OpenFileMappingW
OutputDebugStringA
WaitForSingleObject
CreateThread
GetCurrentThreadId
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetFileType
WriteConsoleW
TryEnterCriticalSection
GetStdHandle
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetFileAttributesW
GetFileInformationByHandle
GetFinalPathNameByHandleW
ReadFile
SetFileInformationByHandle
SetFileTime
DuplicateHandle
GetCurrentProcess
GetSystemTime
VirtualQuery
CreateFileMappingW
GetModuleFileNameW
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
FreeResource
GetEnvironmentStringsW
RtlCaptureContext
SetUnhandledExceptionFilter
LoadLibraryW
GlobalAlloc
GlobalFree
CreateDirectoryA
SetEvent
RaiseException
GetCommandLineW
GetNativeSystemInfo
GetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
TerminateProcess
LocalFree
FormatMessageA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WaitForSingleObjectEx
GetSystemTimePreciseAsFileTime
ReleaseSRWLockShared
AcquireSRWLockShared
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
SetStdHandle
SetFilePointerEx
SetEndOfFile
GetConsoleOutputCP
ReadConsoleW
HeapFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
HeapSize
GetFileSizeEx
IsValidCodePage
GetACP
GetOEMCP
GetProcessHeap
GetCommandLineA

gdi32

GetClipBox
CreateCompatibleDC
GetObjectType
GetCurrentObject
SetPixelFormat
BitBlt
DeleteObject
SelectObject
DeleteDC
CreateDIBSection
GetDeviceCaps

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegGetValueA
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

ole32

CoTaskMemAlloc

user32

IntersectRect

shell32

SHGetFolderPathA

Exports

Exports

DrvCopyContext
DrvCreateContext
DrvCreateLayerContext
DrvDeleteContext
DrvDescribeLayerPlane
DrvDescribePixelFormat
DrvGetLayerPaletteEntries
DrvGetProcAddress
DrvPresentBuffers
DrvRealizeLayerPalette
DrvReleaseContext
DrvSetCallbackProcs
DrvSetContext
DrvSetLayerPaletteEntries
DrvSetPixelFormat
DrvShareLists
DrvSwapBuffers
DrvSwapLayerBuffers
DrvValidateVersion
DumpRegistryKeyDefinitions
RegisterProcTableCallback

Sections

.text
Size: 10.8MB - Virtual size: 10.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 331KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igxelpplusicd32.dll
.dll windows x86

cb29fcbaf6a606732c56819489e0fbf0

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c9:a5:43:06:7d:3d:56:e7:dc:19:07:c6:32:37:06:44:14:b9:90:5d:a5:52:1b:40:e7:81:c3:52:d0:32:8d:d2
Signer

Actual PE Digest

c9:a5:43:06:7d:3d:56:e7:dc:19:07:c6:32:37:06:44:14:b9:90:5d:a5:52:1b:40:e7:81:c3:52:d0:32:8d:d2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsA
FindResourceW
LoadResource
LockResource
CreateFileA
WriteFile
GetUserDefaultLangID
GetEnvironmentStrings
VerSetConditionMask
VerifyVersionInfoW
WaitForMultipleObjects
GetLastError
QueryPerformanceCounter
GetModuleFileNameA
SetLastError
EnterCriticalSection
LeaveCriticalSection
CloseHandle
GetCurrentProcess
GetModuleHandleW
ReleaseMutex
CreateThread
FreeLibrary
LoadLibraryExA
GetSystemDirectoryA
QueryPerformanceFrequency
GetSystemInfo
GetCurrentProcessId
Sleep
SwitchToThread
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetEnvironmentVariableA
SetEnvironmentVariableA
CreateEventW
GetExitCodeThread
ResetEvent
CreateDirectoryA
GetFileAttributesA
WaitForSingleObject
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
TerminateThread
GetEnvironmentVariableW
OpenEventA
OpenFileMappingW
OutputDebugStringA
CreateMutexW
GetCurrentThreadId
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
WriteConsoleW
TryEnterCriticalSection
GetStdHandle
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetFileAttributesW
GetFileInformationByHandle
GetFinalPathNameByHandleW
ReadFile
SetFileInformationByHandle
SetFileTime
DuplicateHandle
GetSystemTime
VirtualQuery
CreateFileMappingW
GetModuleFileNameW
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
FreeResource
SetUnhandledExceptionFilter
LoadLibraryW
GlobalAlloc
GlobalFree
GetModuleHandleExA
SetEvent
RaiseException
GetCommandLineW
GetNativeSystemInfo
GetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
TerminateProcess
LocalFree
FormatMessageA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WaitForSingleObjectEx
GetSystemTimePreciseAsFileTime
ReleaseSRWLockShared
AcquireSRWLockShared
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
SetStdHandle
SetFilePointerEx
SetEndOfFile
GetConsoleOutputCP
ReadConsoleW
HeapFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
HeapSize
GetFileSizeEx
IsValidCodePage
GetACP
GetOEMCP
GetProcessHeap

gdi32

GetClipBox
CreateCompatibleDC
GetObjectType
GetCurrentObject
SetPixelFormat
BitBlt
DeleteObject
SelectObject
DeleteDC
CreateDIBSection
GetDeviceCaps

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegGetValueA
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

ole32

CoTaskMemAlloc

user32

IntersectRect

shell32

SHGetFolderPathA

Exports

Exports

DrvCopyContext
DrvCreateContext
DrvCreateLayerContext
DrvDeleteContext
DrvDescribeLayerPlane
DrvDescribePixelFormat
DrvGetLayerPaletteEntries
DrvGetProcAddress
DrvPresentBuffers
DrvRealizeLayerPalette
DrvReleaseContext
DrvSetCallbackProcs
DrvSetContext
DrvSetLayerPaletteEntries
DrvSetPixelFormat
DrvShareLists
DrvSwapBuffers
DrvSwapLayerBuffers
DrvValidateVersion
DumpRegistryKeyDefinitions
RegisterProcTableCallback

Sections

.text
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 595KB - Virtual size: 679KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/igxelpplusicd64.dll
.dll windows x64

759372ae4aa718213a742f96d9f688fb

Code Sign

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17/06/2021, 17:55

Not After

16/06/2022, 17:55

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4a:62:c3:2d:75:6f:31:5c:ae:0e:7b:cc:86:4f:c4:6f:35:34:25:e6:81:c1:b4:0e:1f:62:7a:ef:ec:b9:0a:95
Signer

Actual PE Digest

4a:62:c3:2d:75:6f:31:5c:ae:0e:7b:cc:86:4f:c4:6f:35:34:25:e6:81:c1:b4:0e:1f:62:7a:ef:ec:b9:0a:95

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsA
FindResourceW
LoadResource
LockResource
CreateFileA
WriteFile
GetUserDefaultLangID
GetEnvironmentStrings
VerSetConditionMask
VerifyVersionInfoW
WaitForMultipleObjects
GetLastError
QueryPerformanceCounter
GetModuleFileNameA
SetLastError
EnterCriticalSection
LeaveCriticalSection
CloseHandle
CreateMutexW
ReleaseMutex
GetModuleHandleW
FreeLibrary
LoadLibraryExA
GetSystemDirectoryA
QueryPerformanceFrequency
GetCurrentProcessId
Sleep
SwitchToThread
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetProcAddress
GetEnvironmentVariableA
SetEnvironmentVariableA
CreateEventW
GetExitCodeThread
__C_specific_handler
GetModuleHandleExA
VirtualAlloc
VirtualFree
ResetEvent
GetFileAttributesA
RtlUnwind
GetSystemInfo
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
TerminateThread
GetEnvironmentVariableW
OpenEventA
OpenFileMappingW
OutputDebugStringA
WaitForSingleObject
CreateThread
GetCurrentThreadId
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetFileType
WriteConsoleW
TryEnterCriticalSection
GetStdHandle
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetFileAttributesW
GetFileInformationByHandle
GetFinalPathNameByHandleW
ReadFile
SetFileInformationByHandle
SetFileTime
DuplicateHandle
GetCurrentProcess
GetSystemTime
VirtualQuery
CreateFileMappingW
GetModuleFileNameW
SystemTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
FreeResource
GetEnvironmentStringsW
RtlCaptureContext
SetUnhandledExceptionFilter
LoadLibraryW
GlobalAlloc
GlobalFree
CreateDirectoryA
SetEvent
RaiseException
GetCommandLineW
GetNativeSystemInfo
GetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
TerminateProcess
LocalFree
FormatMessageA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WaitForSingleObjectEx
GetSystemTimePreciseAsFileTime
ReleaseSRWLockShared
AcquireSRWLockShared
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
SetStdHandle
SetFilePointerEx
SetEndOfFile
GetConsoleOutputCP
ReadConsoleW
HeapFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
HeapSize
GetFileSizeEx
IsValidCodePage
GetACP
GetOEMCP
GetProcessHeap
GetCommandLineA

gdi32

GetClipBox
CreateCompatibleDC
GetObjectType
GetCurrentObject
SetPixelFormat
BitBlt
DeleteObject
SelectObject
DeleteDC
CreateDIBSection
GetDeviceCaps

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegGetValueA
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

ole32

CoTaskMemAlloc

user32

IntersectRect

shell32

SHGetFolderPathA

Exports

Exports

DrvCopyContext
DrvCreateContext
DrvCreateLayerContext
DrvDeleteContext
DrvDescribeLayerPlane
DrvDescribePixelFormat
DrvGetLayerPaletteEntries
DrvGetProcAddress
DrvPresentBuffers
DrvRealizeLayerPalette
DrvReleaseContext
DrvSetCallbackProcs
DrvSetContext
DrvSetLayerPaletteEntries
DrvSetPixelFormat
DrvShareLists
DrvSwapBuffers
DrvSwapLayerBuffers
DrvValidateVersion
DumpRegistryKeyDefinitions
RegisterProcTableCallback

Sections

.text
Size: 10.8MB - Virtual size: 10.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 331KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/iigd_dch.inf
Graphics/iigd_dch_d.inf
Graphics/intel_gfx_api-x64.dll
.dll windows x64

602536a1190a2ac986069102eff8e2c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FindFirstFileW
FindNextFileW
FindClose
GetModuleHandleW
GetLastError
OutputDebugStringA
WriteConsoleW
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryExW
FreeLibrary
GetProcAddress
SwitchToThread
GetFileAttributesW
MultiByteToWideChar
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
HeapFree
HeapAlloc
GetCurrentThread
GetStdHandle
GetFileType
CloseHandle
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
SetConsoleCtrlHandler
GetFileSizeEx
SetFilePointerEx
GetStringTypeW
SetStdHandle
CreateFileW
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
SetEndOfFile
ReadFile
ReadConsoleW
OutputDebugStringW
RtlUnwind

advapi32

RegEnumKeyExW
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegGetValueW
RegQueryInfoKeyW

Exports

Exports

DisposeMediaSession
InitialiseMediaSession

Sections

.text
Size: 426KB - Virtual size: 425KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/intel_gfx_api-x86.dll
.dll windows x86

2f85b9dde6e3e9b69a05e0c8e0ee58ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindFirstFileW
FindNextFileW
FindClose
GetModuleHandleW
GetLastError
OutputDebugStringA
OutputDebugStringW
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryExW
FreeLibrary
GetProcAddress
SwitchToThread
GetFileAttributesW
MultiByteToWideChar
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
HeapFree
HeapAlloc
GetCurrentThread
GetStdHandle
GetFileType
CloseHandle
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
SetConsoleCtrlHandler
GetFileSizeEx
SetFilePointerEx
GetStringTypeW
SetStdHandle
CreateFileW
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
SetEndOfFile
ReadFile
ReadConsoleW
DecodePointer
WriteConsoleW

advapi32

RegEnumKeyExW
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegGetValueW
RegQueryInfoKeyW

Exports

Exports

DisposeMediaSession
InitialiseMediaSession

Sections

.text
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Graphics/libigc.so
.elf linux x64

Sharing

General

Malware Config

Signatures

Files

Password: infected

dae02f32a21e03ce65412f6e56942daa

Code Sign

75:88:9c:92:04:d0:5f:66:02:e0:b5:36:d2:e9:ab:03Certificate

Extended Key Usages

Key Usages

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:dbCertificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4Certificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

f4:41:37:2d:69:63:9a:cf:ca:ba:33:20:60:a0:13:51:61:2b:f7:fd:32:4e:fd:8a:79:07:e7:48:8e:d3:19:f9Signer

f4:41:37:2d:69:63:9a:cf:ca:ba:33:20:60:a0:13:51:61:2b:f7:fd:32:4e:fd:8a:79:07:e7:48:8e:d3:19:f9Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 32KB - Virtual size: 32KB

.rsrc Size: 1024B - Virtual size: 824B

.reloc Size: 512B - Virtual size: 12B

Password: infected

Password: infected

dae02f32a21e03ce65412f6e56942daa

Code Sign

75:88:9c:92:04:d0:5f:66:02:e0:b5:36:d2:e9:ab:03Certificate

Extended Key Usages

Key Usages

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:dbCertificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

7a:32:e2:93:0d:c8:3c:72:87:94:7c:91:0c:6c:78:d4:50:da:28:46:6f:8b:e9:60:57:db:c3:c9:dc:c4:3f:8bSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 52KB - Virtual size: 52KB

.rsrc Size: 1024B - Virtual size: 816B

.reloc Size: 512B - Virtual size: 12B

Password: infected

dae02f32a21e03ce65412f6e56942daa

Code Sign

75:88:9c:92:04:d0:5f:66:02:e0:b5:36:d2:e9:ab:03Certificate

Extended Key Usages

Key Usages

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:dbCertificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

18:d6:36:81:d0:4e:6d:bc:21:e3:34:48:01:55:47:8f:59:c9:95:14:3a:38:df:d7:27:f8:80:4b:54:cd:4e:1aSigner

Headers

DLL Characteristics

File Characteristics

75:88:9c:92:04:d0:5f:66:02:e0:b5:36:d2:e9:ab:03
Certificate

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:db
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

33:00:00:00:c4:50:21:ba:6e:d8:5a:72:ad:00:00:00:00:00:c4
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

f4:41:37:2d:69:63:9a:cf:ca:ba:33:20:60:a0:13:51:61:2b:f7:fd:32:4e:fd:8a:79:07:e7:48:8e:d3:19:f9
Signer

f4:41:37:2d:69:63:9a:cf:ca:ba:33:20:60:a0:13:51:61:2b:f7:fd:32:4e:fd:8a:79:07:e7:48:8e:d3:19:f9
Signer

.text
Size: 32KB - Virtual size: 32KB

.rsrc
Size: 1024B - Virtual size: 824B

.reloc
Size: 512B - Virtual size: 12B

75:88:9c:92:04:d0:5f:66:02:e0:b5:36:d2:e9:ab:03
Certificate

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:db
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

7a:32:e2:93:0d:c8:3c:72:87:94:7c:91:0c:6c:78:d4:50:da:28:46:6f:8b:e9:60:57:db:c3:c9:dc:c4:3f:8b
Signer

.text
Size: 52KB - Virtual size: 52KB

.rsrc
Size: 1024B - Virtual size: 816B

.reloc
Size: 512B - Virtual size: 12B

75:88:9c:92:04:d0:5f:66:02:e0:b5:36:d2:e9:ab:03
Certificate

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:db
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

18:d6:36:81:d0:4e:6d:bc:21:e3:34:48:01:55:47:8f:59:c9:95:14:3a:38:df:d7:27:f8:80:4b:54:cd:4e:1a
Signer

.text
Size: 144KB - Virtual size: 143KB

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 512B - Virtual size: 12B

75:88:9c:92:04:d0:5f:66:02:e0:b5:36:d2:e9:ab:03
Certificate

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:db
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

03:22:bf:89:95:ac:59:18:8e:98:bc:45:97:e3:33:ac:22:6b:15:e2:9b:32:55:11:ad:5d:b7:6d:01:ad:62:25
Signer

.text
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

75:88:9c:92:04:d0:5f:66:02:e0:b5:36:d2:e9:ab:03
Certificate

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:db
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

25:ab:75:8d:9b:43:33:47:57:f0:df:54:37:b6:6e:ce:b0:fa:44:6f:99:03:5e:1a:6a:22:bc:9d:09:8e:c7:ff
Signer

.text
Size: 345KB - Virtual size: 344KB

.rsrc
Size: 1024B - Virtual size: 976B

.reloc
Size: 512B - Virtual size: 12B

75:88:9c:92:04:d0:5f:66:02:e0:b5:36:d2:e9:ab:03
Certificate

9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:db
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate