e7f3af761e38773303ce870fe9366ec8a04b85de33ab9011c9240fbafa2b1951[.]zip[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

e7f3af761e38773303ce870fe9366ec8a04b85de33ab9011c9240fbafa2b1951.zip.zip
Size

78.5MB
MD5

cfd917017791497550228af851c78aff
SHA1

6b86adc3df44597c77b4f4184b10056f0b1b61b4
SHA256

80c8b30066d6af905e4efc64a309d25d31f7d1ef3d1d15d280781a6473630572
SHA512

25f41533d4d8aedebc641164dbc77188313d75cca2992103e7212aa6e676f678dabd4f71559a7fc860ae0f72aed8b4ddbc312ec6df8c125f1eeb3ccdf2e67776
SSDEEP

1572864:4JBW4xgOwfBYzDPZ+DRLjpO20lgVot1BeeRyK94vSmSn98Bfi3CDVg3Oyj6EAwom:f4GOawAD1jpO2teta6yK94vS7noaOyj7

Score

1^/10

Malware Config

Signatures

Files

e7f3af761e38773303ce870fe9366ec8a04b85de33ab9011c9240fbafa2b1951.zip.zip
.zip

Password: infected
e7f3af761e38773303ce870fe9366ec8a04b85de33ab9011c9240fbafa2b1951.zip
.zip
ChangeLog.md
IMDisplay.exe
.exe windows:6 windows x86

c534fcf69922b04b6a0568f9feae5d34

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3d
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

27/10/2022, 00:00

Not After

27/10/2023, 23:59

Subject

CN=ImageMagick Studio LLC,O=ImageMagick Studio LLC,ST=Pennsylvania,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

63:4e:57:81:27:46:e8:e6:6e:c3:0c:11:91:61:41:a7:1e:bd:b3:10:5c:18:d1:31:9e:ec:2d:b9:37:8e:b4:cd
Signer

Actual PE Digest

63:4e:57:81:27:46:e8:e6:6e:c3:0c:11:91:61:41:a7:1e:bd:b3:10:5c:18:d1:31:9e:ec:2d:b9:37:8e:b4:cd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
LoadLibraryW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
GetCurrentProcessId
GlobalGetAtomNameW
SetEvent
CreateEventW
SetThreadPriority
ResumeThread
GetCurrentThread
GetVersionExW
lstrcmpA
CompareStringA
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetTickCount64
GetDiskFreeSpaceW
GetFileAttributesW
GetFileTime
GetFullPathNameW
GetTempFileNameW
SetFileTime
ReplaceFileW
GetUserDefaultLCID
EnterCriticalSection
LeaveCriticalSection
GetProfileIntW
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GlobalFlags
GetLocaleInfoW
CreateThread
GetUserDefaultUILanguage
VirtualProtect
FileTimeToSystemTime
GetThreadLocale
GetCurrentDirectoryW
DeleteFileW
CreateFileW
FlushFileBuffers
GetFileSize
GetVolumeInformationW
LockFile
UnlockFile
WriteFile
DuplicateHandle
lstrcmpiW
MoveFileW
GetStringTypeExW
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
LocalFileTimeToFileTime
SetFileAttributesW
SystemTimeToTzSpecificLocalTime
lstrcpyW
FindResourceExW
GetWindowsDirectoryW
VerSetConditionMask
VerifyVersionInfoW
GetTempPathW
SearchPathW
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
RaiseException
RtlUnwind
ExitProcess
GetModuleHandleExW
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
GetDriveTypeW
GetFileInformationByHandle
GetFileType
ReadConsoleW
SetStdHandle
GetTimeZoneInformation
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
GetCommandLineW
HeapQueryInformation
VirtualAlloc
VirtualQuery
GetStdHandle
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetCPInfo
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
CreateDirectoryW
GetSystemDirectoryW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
WakeConditionVariable
InitializeConditionVariable
TryEnterCriticalSection
TryAcquireSRWLockExclusive
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
InitializeSRWLock
CreateMutexA
ReleaseMutex
LoadLibraryA
GetLogicalDrives
SetConsoleCtrlHandler
SystemTimeToFileTime
FindResourceA
GetStartupInfoA
CreateFileMappingA
FormatMessageA
LoadLibraryExW
GetProcAddress
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
FreeResource
FreeLibrary
UnmapViewOfFile
MapViewOfFile
GetVersionExA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GlobalMemoryStatusEx
CreateProcessA
GetExitCodeProcess
GetCurrentProcess
GetProcessTimes
WaitForSingleObject
QueryPerformanceFrequency
QueryPerformanceCounter
PeekNamedPipe
CreatePipe
SetErrorMode
SetHandleInformation
CloseHandle
SetFilePointer
SetEndOfFile
ReadFile
FindNextFileW
FindFirstFileW
FindClose
Sleep
OutputDebugStringA
GetShortPathNameW
GetCurrentThreadId
WakeAllConditionVariable
SleepConditionVariableSRW
EncodePointer
CopyFileW
MulDiv
CreateSemaphoreA
GetThreadPriority
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetFileInformationByHandleEx
SetConsoleMode
DebugBreak
CreateEventA
GetVersion
GetLocaleInfoA
IsDBCSLeadByteEx
ReadConsoleInputA
PeekConsoleInputA
DeviceIoControl
MoveFileExW
WaitForMultipleObjectsEx
WaitForMultipleObjects
GetExitCodeThread
SwitchToThread
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
InitializeCriticalSectionEx
GetLocaleInfoEx
LCMapStringEx
SleepConditionVariableCS
CompareStringEx
RemoveDirectoryW
GetNumberOfConsoleInputEvents
ReleaseSemaphore
SetEnvironmentVariableA
GlobalFree
FindFirstFileExW
GetDiskFreeSpaceExW
GetVolumePathNameW
GetSystemDirectoryA
GetLongPathNameW
ReadDirectoryChangesW
GlobalSize
GetDriveTypeA
SignalObjectAndWait
GetTempPathA
GetTempFileNameA
GetPhysicallyInstalledSystemMemory
FormatMessageW
LocalFree
GlobalLock
GlobalUnlock
GlobalAlloc
SetLastError
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
SizeofResource
LockResource
LoadResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetLastError
GetSystemDefaultUILanguage
DecodePointer

user32

DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
FrameRect
CopyIcon
SetCursorPos
DrawFrameControl
DrawEdge
SetClassLongW
DrawStateW
EnumDisplayMonitors
SetLayeredWindowAttributes
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
DrawIconEx
DrawFocusRect
WaitMessage
GetMenuDefaultItem
TrackMouseEvent
LockWindowUpdate
CreateMenu
GetTabbedTextExtentW
WindowFromPoint
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
PostThreadMessageW
CharUpperW
UnionRect
MapVirtualKeyW
GetKeyNameTextW
GetAsyncKeyState
CopyImage
GetMenuItemInfoW
RealChildWindowFromPoint
GetSysColorBrush
IsZoomed
SetParent
DeleteMenu
GetSystemMenu
InflateRect
GetDCEx
SystemParametersInfoW
IsRectEmpty
SetWindowRgn
DrawIcon
GetSystemMetrics
KillTimer
SetTimer
SetCapture
DestroyCursor
LoadCursorW
SetRect
FillRect
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
ReleaseDC
GetDC
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatW
ShowOwnedPopups
PostQuitMessage
GetCursorPos
TranslateMessage
GetMessageW
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
SetMenuDefaultItem
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
ReuseDDElParam
UnpackDDElParam
LoadImageW
DestroyIcon
GetWindowThreadProcessId
GetDesktopWindow
OffsetRect
SetRectEmpty
SetCursor
InsertMenuItemW
DestroyMenu
CreatePopupMenu
LoadMenuW
TranslateAcceleratorW
LoadAcceleratorsW
ReleaseCapture
GetActiveWindow
BringWindowToTop
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
UnregisterClassW
EnableWindow
UpdateWindow
OpenClipboard
CloseClipboard
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetClipboardData
EmptyClipboard
InvalidateRect
IntersectRect
GetDoubleClickTime
ModifyMenuW
CharUpperBuffW
GetUpdateRect
GetWindowRgn
TranslateMDISysAccel
SubtractRect
SystemParametersInfoA
MsgWaitForMultipleObjectsEx
PostMessageA
PeekMessageA
MessageBoxA
GetClipboardData
IsClipboardFormatAvailable
EnumDisplayDevicesA
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
SendMessageW
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
GetParent
LoadBitmapW
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
SendDlgItemMessageA
GetMessagePos
GetMessageTime
PostMessageW
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsWindow
IsMenu
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
IsIconic
GetDlgItem
GetDlgCtrlID
SetFocus
GetKeyState
GetCapture
GetMenu
SetMenu
TrackPopupMenu
SetActiveWindow

gdi32

DeleteObject
SelectObject
CreateDIBSection
GetMapMode
GetDeviceCaps
SetRectRgn
CopyMetaFileW
CreateDCW
CreateBitmapIndirect
GetBkColor
GetTextColor
GetRgnBox
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
CreateCompatibleDC
CreateBitmap
BitBlt
SetBkColor
CreateRectRgnIndirect
CombineRgn
StretchDIBits
GetGlyphOutlineA
GdiFlush
GetWorldTransform
GetCharWidthW
ExtCreateRegion
GetTextMetricsA
GetGlyphIndicesW
GetFontUnicodeRanges
GetOutlineTextMetricsA
GetGlyphOutlineW
GetFontData
GetCharWidth32A
GetWindowOrgEx
GetTextFaceW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
CreateFontW
DeleteDC
GetTextMetricsW
GetTextExtentPoint32W
UnrealizeObject
LPtoDP
Ellipse
CreateEllipticRgn
Rectangle
PatBlt
GetViewportOrgEx
DPtoLP
SetAbortProc
AbortDoc
EndPage
StartPage
EndDoc
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
GetGraphicsMode
CreateDCA
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetTextColor
GetObjectW
CreateCompatibleBitmap
CreateFontIndirectW
StartDocW
ModifyWorldTransform
SetWorldTransform
SetTextAlign
SetStretchBltMode
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetGraphicsMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipRgn
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
SetViewportOrgEx

shell32

SHAppBarMessage
SHBrowseForFolderW
SHFileOperationW
ShellExecuteW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
ExtractIconW
SHAddToRecentDocs
DragAcceptFiles
DragFinish
DragQueryFileW

msimg32

TransparentBlt
AlphaBlend

shlwapi

PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
StrFormatKBSizeW

uxtheme

DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
DrawThemeParentBackground
DrawThemeText
GetWindowTheme
GetCurrentThemeName
GetThemeColor
IsAppThemed
GetThemePartSize
CloseThemeData
OpenThemeData

oledlg

OleUIBusyW

urlmon

URLDownloadToFileA

vcomp140

_vcomp_atomic_add_i8
_vcomp_enter_critsect
_vcomp_barrier
_vcomp_single_begin
_vcomp_single_end
_vcomp_for_dynamic_init
_vcomp_for_dynamic_next
_vcomp_leave_critsect
_vcomp_set_num_threads
_vcomp_fork
_vcomp_for_static_simple_init
_vcomp_for_static_end
omp_init_lock
omp_set_lock
omp_unset_lock
omp_destroy_lock
omp_get_max_threads
omp_get_thread_num

ws2_32

inet_ntoa
gethostbyaddr
gethostbyname
getservbyport
WSASetLastError
ioctlsocket
WSAGetLastError
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
inet_ntop
inet_pton
ntohs
htons
htonl
ntohl
getservbyname
WSAStartup
WSACleanup
closesocket
connect
recv
send
socket
inet_addr
WSASetEvent
getaddrinfo
freeaddrinfo

gdiplus

GdipDrawImageI
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipDrawImageRectI
GdipGraphicsClear
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImageVerticalResolution
GdipGetImageHorizontalResolution
GdipGetImageHeight
GdipCreateFromHDC
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromFile
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipGetImageWidth

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

winspool.drv

GetJobW
ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegEnumKeyExW
RegEnumValueW
SetFileSecurityW
GetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueW
RegEnumValueA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
ReportEventA
RegisterEventSourceA
RegNotifyChangeKeyValue
LookupAccountSidW
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
DeregisterEventSource
RegLoadMUIStringW
GetUserNameW
RegGetValueW

ole32

OleInitialize
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoDisconnectObject
CoGetClassObject
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
OleGetClipboard
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
CoCreateGuid
CoLockObjectExternal
CoGetApartmentType
CoGetObjectContext
OleLockRunning
DoDragDrop
RevokeDragDrop
RegisterDragDrop
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
IsAccelerator

oleaut32

OleCreateFontIndirect
VarBstrFromDate
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SysFreeString
SysAllocString
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy

dnsapi

DnsFree
DnsQuery_A

iphlpapi

GetIpForwardTable2
NotifyRouteChange2
CancelMibChangeNotify2

Sections

.text
Size: 10.8MB - Virtual size: 10.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 371KB - Virtual size: 750KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 471KB - Virtual size: 471KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ImageMagick.rdf
.xml
LICENSE.txt
NOTICE.txt
README.txt
colors.xml
.xml
compare.exe
.exe windows:6 windows x86

4d8c6888f161a8a1fd6794673582f5c0

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3d
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

27/10/2022, 00:00

Not After

27/10/2023, 23:59

Subject

CN=ImageMagick Studio LLC,O=ImageMagick Studio LLC,ST=Pennsylvania,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2b:3d:a3:a0:3c:fa:07:c1:69:0a:ed:5a:bc:30:bd:de:77:e1:35:98:a2:9e:1e:37:00:e9:ec:35:a0:ad:2c:eb
Signer

Actual PE Digest

2b:3d:a3:a0:3c:fa:07:c1:69:0a:ed:5a:bc:30:bd:de:77:e1:35:98:a2:9e:1e:37:00:e9:ec:35:a0:ad:2c:eb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetVersionExA
MapViewOfFile
UnmapViewOfFile
FreeLibrary
FreeResource
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryExW
LoadResource
LockResource
SizeofResource
LocalFree
FormatMessageA
CreateFileMappingA
GetStartupInfoA
FindResourceA
SystemTimeToFileTime
WideCharToMultiByte
SetConsoleCtrlHandler
GetCurrentThreadId
OutputDebugStringA
Sleep
GetLogicalDrives
LoadLibraryA
CreateThread
GlobalAlloc
GlobalSize
GlobalUnlock
QueryPerformanceCounter
GlobalFree
SetEnvironmentVariableA
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
ExitProcess
GetModuleHandleExW
CreateFileW
GetFileType
GetConsoleMode
GetExitCodeProcess
SetFilePointerEx
WriteFile
GetConsoleOutputCP
DeleteFileW
GetFileAttributesExW
SetStdHandle
GetTimeZoneInformation
GetDriveTypeW
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
FlushFileBuffers
MoveFileExW
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentThread
GetFileSizeEx
DecodePointer
HeapReAlloc
HeapSize
GetCPInfo
GetCurrentDirectoryW
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
CreateDirectoryW
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
WriteConsoleW
PeekNamedPipe
CreatePipe
SetErrorMode
GetLastError
SetHandleInformation
CloseHandle
SetEndOfFile
ReadFile
FindNextFileW
FindFirstFileW
FindClose
MultiByteToWideChar
GetShortPathNameW
GetCurrentProcess
GetProcessTimes
WaitForSingleObject
ReadConsoleW
QueryPerformanceFrequency
GetDiskFreeSpaceExW
GetVolumeInformationW
SetUnhandledExceptionFilter
GetVolumePathNameW
GetSystemDirectoryA
GetLongPathNameW
ReadDirectoryChangesW
GetDriveTypeA
SignalObjectAndWait
GetTempPathA
GetTempFileNameA
GetPhysicallyInstalledSystemMemory
SetConsoleOutputCP
GlobalLock
CompareStringEx
InitializeCriticalSection
ReleaseMutex
CreateMutexA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TryAcquireSRWLockExclusive
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
SetThreadPriority
GetThreadPriority
ResumeThread
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetFileInformationByHandleEx
SetConsoleMode
DebugBreak
GetSystemDirectoryW
GetWindowsDirectoryW
CreateEventA
GetVersion
LoadLibraryW
FormatMessageW
GetLocaleInfoA
GetThreadLocale
IsDBCSLeadByteEx
GetFileAttributesW
SetEvent
ResetEvent
ReadConsoleInputA
PeekConsoleInputA
DuplicateHandle
DeviceIoControl
WaitForSingleObjectEx
WaitForMultipleObjectsEx
CreateEventW
WaitForMultipleObjects
GetExitCodeThread
ReleaseSemaphore
CreateSemaphoreA
ExitThread
FreeLibraryAndExitThread
RemoveDirectoryW
SetFileAttributesW
GetNumberOfConsoleInputEvents
SwitchToThread
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
InitializeCriticalSectionEx
GetLocaleInfoEx
LCMapStringEx
SleepConditionVariableCS

vcomp140

_vcomp_single_end
_vcomp_for_dynamic_init
_vcomp_for_dynamic_next
_vcomp_for_static_init
omp_set_nested
_vcomp_single_begin
_vcomp_barrier
_vcomp_flush
_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_atomic_add_i8
_vcomp_set_num_threads
omp_init_lock
omp_set_lock
omp_unset_lock
omp_get_max_threads
_vcomp_fork
omp_destroy_lock
omp_get_thread_num
_vcomp_enter_critsect
_vcomp_leave_critsect

ws2_32

ioctlsocket
WSAGetLastError
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSASetEvent
WSAStartup
ntohl
freeaddrinfo
getaddrinfo
socket
setsockopt
ntohs
htons
htonl
WSAEnumNetworkEvents
WSACleanup
accept
bind
closesocket
getservbyname
inet_pton
inet_ntop
inet_addr
inet_ntoa
gethostbyaddr
gethostbyname
getservbyport
WSASetLastError
send
recv
listen
connect

gdiplus

GdipDrawImageRectI
GdipGraphicsClear
GdipSetInterpolationMode
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromFile
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipSetSmoothingMode
GdipSetTextRenderingHint

urlmon

URLDownloadToFileA

user32

EmptyClipboard
PeekMessageA
PostMessageA
MsgWaitForMultipleObjectsEx
SystemParametersInfoA
GetDC
ReleaseDC
FillRect
MessageBoxA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EnumDisplayDevicesA
IsClipboardFormatAvailable

gdi32

GetDeviceCaps
CreateDIBSection
GetOutlineTextMetricsA
GetGlyphOutlineW
GetFontData
GetCharWidth32A
SelectObject
GetGlyphOutlineA
EnumFontFamiliesExW
StretchDIBits
CreateSolidBrush
GdiFlush
GetWorldTransform
ExtSelectClipRgn
SelectClipRgn
IntersectClipRect
GetGraphicsMode
GetClipRgn
GetClipBox
ExtCreateRegion
CreateRectRgn
CreateCompatibleBitmap
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetTextMetricsA
DeleteObject
DeleteDC
CreateDCA
CreateCompatibleDC
BitBlt
GetFontUnicodeRanges
GetGlyphIndicesW
RestoreDC
SaveDC
SetBkMode
SetGraphicsMode
SetMapMode
SetTextColor
SetTextAlign
CreateFontIndirectW

advapi32

RegEnumKeyA
RegOpenKeyExW
RegSetValueExW
RegNotifyChangeKeyValue
RegDeleteValueW
RegCreateKeyExW
LookupAccountSidW
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetFileSecurityW
RegEnumKeyExW
RegLoadMUIStringW
RegEnumValueW
RegGetValueW
DeregisterEventSource
RegEnumValueA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ReportEventA
RegisterEventSourceA
GetUserNameW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
SHGetFileInfoW

ole32

CoGetObjectContext
CoGetApartmentType
CoTaskMemFree

dnsapi

DnsQuery_A
DnsFree

iphlpapi

NotifyRouteChange2
GetIpForwardTable2
CancelMibChangeNotify2

Sections

.text
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 348KB - Virtual size: 713KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
composite.exe
.exe windows:6 windows x86

f31ede67240dfbe720faedde14cb403c

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3d
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

27/10/2022, 00:00

Not After

27/10/2023, 23:59

Subject

CN=ImageMagick Studio LLC,O=ImageMagick Studio LLC,ST=Pennsylvania,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d7:fa:4c:f3:57:4a:04:07:af:09:9c:16:f2:75:c8:9c:25:73:b2:b2:cd:85:2d:1f:11:36:df:e2:c2:ab:d5:06
Signer

Actual PE Digest

d7:fa:4c:f3:57:4a:04:07:af:09:9c:16:f2:75:c8:9c:25:73:b2:b2:cd:85:2d:1f:11:36:df:e2:c2:ab:d5:06

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetVersionExA
MapViewOfFile
UnmapViewOfFile
FreeLibrary
FreeResource
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryExW
LoadResource
LockResource
SizeofResource
LocalFree
FormatMessageA
CreateFileMappingA
GetStartupInfoA
FindResourceA
SystemTimeToFileTime
WideCharToMultiByte
SetConsoleCtrlHandler
GetCurrentThreadId
OutputDebugStringA
Sleep
GetLogicalDrives
LoadLibraryA
CreateThread
GlobalAlloc
GlobalSize
GlobalUnlock
QueryPerformanceCounter
GlobalFree
SetEnvironmentVariableA
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
ExitProcess
GetModuleHandleExW
CreateFileW
GetFileType
GetConsoleMode
GetExitCodeProcess
SetFilePointerEx
WriteFile
GetConsoleOutputCP
DeleteFileW
GetFileAttributesExW
SetStdHandle
GetTimeZoneInformation
GetDriveTypeW
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
FlushFileBuffers
MoveFileExW
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentThread
GetFileSizeEx
DecodePointer
HeapReAlloc
HeapSize
GetCPInfo
GetCurrentDirectoryW
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
CreateDirectoryW
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
WriteConsoleW
PeekNamedPipe
CreatePipe
SetErrorMode
GetLastError
SetHandleInformation
CloseHandle
SetEndOfFile
ReadFile
FindNextFileW
FindFirstFileW
FindClose
MultiByteToWideChar
GetShortPathNameW
GetCurrentProcess
GetProcessTimes
WaitForSingleObject
ReadConsoleW
QueryPerformanceFrequency
GetDiskFreeSpaceExW
GetVolumeInformationW
SetUnhandledExceptionFilter
GetVolumePathNameW
GetSystemDirectoryA
GetLongPathNameW
ReadDirectoryChangesW
GetDriveTypeA
SignalObjectAndWait
GetTempPathA
GetTempFileNameA
GetPhysicallyInstalledSystemMemory
SetConsoleOutputCP
GlobalLock
CompareStringEx
InitializeCriticalSection
ReleaseMutex
CreateMutexA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TryAcquireSRWLockExclusive
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
SetThreadPriority
GetThreadPriority
ResumeThread
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetFileInformationByHandleEx
SetConsoleMode
DebugBreak
GetSystemDirectoryW
GetWindowsDirectoryW
CreateEventA
GetVersion
LoadLibraryW
FormatMessageW
GetLocaleInfoA
GetThreadLocale
IsDBCSLeadByteEx
GetFileAttributesW
SetEvent
ResetEvent
ReadConsoleInputA
PeekConsoleInputA
DuplicateHandle
DeviceIoControl
WaitForSingleObjectEx
WaitForMultipleObjectsEx
CreateEventW
WaitForMultipleObjects
GetExitCodeThread
ReleaseSemaphore
CreateSemaphoreA
ExitThread
FreeLibraryAndExitThread
RemoveDirectoryW
SetFileAttributesW
GetNumberOfConsoleInputEvents
SwitchToThread
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
InitializeCriticalSectionEx
GetLocaleInfoEx
LCMapStringEx
SleepConditionVariableCS

vcomp140

_vcomp_single_end
_vcomp_for_dynamic_init
_vcomp_for_dynamic_next
_vcomp_for_static_init
omp_set_nested
_vcomp_single_begin
_vcomp_barrier
_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_atomic_add_i8
_vcomp_set_num_threads
omp_init_lock
omp_set_lock
omp_unset_lock
omp_get_max_threads
_vcomp_fork
omp_destroy_lock
omp_get_thread_num
_vcomp_enter_critsect
_vcomp_leave_critsect

ws2_32

ioctlsocket
WSAGetLastError
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSASetEvent
WSAStartup
ntohl
freeaddrinfo
getaddrinfo
socket
setsockopt
ntohs
htons
htonl
WSAEnumNetworkEvents
WSACleanup
accept
bind
closesocket
getservbyname
inet_pton
inet_ntop
inet_addr
inet_ntoa
gethostbyaddr
gethostbyname
getservbyport
WSASetLastError
send
recv
listen
connect

gdiplus

GdipDrawImageRectI
GdipGraphicsClear
GdipSetInterpolationMode
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromFile
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipSetSmoothingMode
GdipSetTextRenderingHint

urlmon

URLDownloadToFileA

user32

EmptyClipboard
PeekMessageA
PostMessageA
MsgWaitForMultipleObjectsEx
SystemParametersInfoA
GetDC
ReleaseDC
FillRect
MessageBoxA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EnumDisplayDevicesA
IsClipboardFormatAvailable

gdi32

GetDeviceCaps
CreateDIBSection
GetOutlineTextMetricsA
GetGlyphOutlineW
GetFontData
GetCharWidth32A
SelectObject
GetGlyphOutlineA
EnumFontFamiliesExW
StretchDIBits
CreateSolidBrush
GdiFlush
GetWorldTransform
ExtSelectClipRgn
SelectClipRgn
IntersectClipRect
GetGraphicsMode
GetClipRgn
GetClipBox
ExtCreateRegion
CreateRectRgn
CreateCompatibleBitmap
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetTextMetricsA
DeleteObject
DeleteDC
CreateDCA
CreateCompatibleDC
BitBlt
GetFontUnicodeRanges
GetGlyphIndicesW
RestoreDC
SaveDC
SetBkMode
SetGraphicsMode
SetMapMode
SetTextColor
SetTextAlign
CreateFontIndirectW

advapi32

RegEnumKeyA
RegOpenKeyExW
RegSetValueExW
RegNotifyChangeKeyValue
RegDeleteValueW
RegCreateKeyExW
LookupAccountSidW
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetFileSecurityW
RegEnumKeyExW
RegLoadMUIStringW
RegEnumValueW
RegGetValueW
DeregisterEventSource
RegEnumValueA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ReportEventA
RegisterEventSourceA
GetUserNameW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
SHGetFileInfoW

ole32

CoGetObjectContext
CoGetApartmentType
CoTaskMemFree

dnsapi

DnsQuery_A
DnsFree

iphlpapi

NotifyRouteChange2
GetIpForwardTable2
CancelMibChangeNotify2

Sections

.text
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 348KB - Virtual size: 713KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
configure.xml
.xml
conjure.exe
.exe windows:6 windows x86

7dd06c97be2d21ff170c4351858662bb

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3d
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

27/10/2022, 00:00

Not After

27/10/2023, 23:59

Subject

CN=ImageMagick Studio LLC,O=ImageMagick Studio LLC,ST=Pennsylvania,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a5:b0:5f:96:90:8c:93:e2:ab:2f:74:e8:3b:67:69:00:31:d5:f1:a5:cf:a1:80:84:87:51:8d:d9:36:58:97:0f
Signer

Actual PE Digest

a5:b0:5f:96:90:8c:93:e2:ab:2f:74:e8:3b:67:69:00:31:d5:f1:a5:cf:a1:80:84:87:51:8d:d9:36:58:97:0f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetVersionExA
MapViewOfFile
UnmapViewOfFile
FreeLibrary
FreeResource
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryExW
LoadResource
LockResource
SizeofResource
LocalFree
FormatMessageA
CreateFileMappingA
GetStartupInfoA
FindResourceA
SystemTimeToFileTime
WideCharToMultiByte
SetConsoleCtrlHandler
GetCurrentThreadId
OutputDebugStringA
Sleep
GetLogicalDrives
LoadLibraryA
CreateThread
GlobalAlloc
GlobalSize
GlobalUnlock
QueryPerformanceCounter
GlobalFree
SetEnvironmentVariableA
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
ExitProcess
GetModuleHandleExW
CreateFileW
GetFileType
GetConsoleMode
GetExitCodeProcess
SetFilePointerEx
WriteFile
GetConsoleOutputCP
DeleteFileW
GetFileAttributesExW
SetStdHandle
GetTimeZoneInformation
GetDriveTypeW
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
FlushFileBuffers
MoveFileExW
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentThread
GetFileSizeEx
DecodePointer
HeapReAlloc
HeapSize
GetCPInfo
GetCurrentDirectoryW
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
CreateDirectoryW
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
WriteConsoleW
PeekNamedPipe
CreatePipe
SetErrorMode
GetLastError
SetHandleInformation
CloseHandle
SetEndOfFile
ReadFile
FindNextFileW
FindFirstFileW
FindClose
MultiByteToWideChar
GetShortPathNameW
GetCurrentProcess
GetProcessTimes
WaitForSingleObject
ReadConsoleW
QueryPerformanceFrequency
GetDiskFreeSpaceExW
GetVolumeInformationW
SetUnhandledExceptionFilter
GetVolumePathNameW
GetSystemDirectoryA
GetLongPathNameW
ReadDirectoryChangesW
GetDriveTypeA
SignalObjectAndWait
GetTempPathA
GetTempFileNameA
GetPhysicallyInstalledSystemMemory
SetConsoleOutputCP
GlobalLock
CompareStringEx
InitializeCriticalSection
ReleaseMutex
CreateMutexA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TryAcquireSRWLockExclusive
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
SetThreadPriority
GetThreadPriority
ResumeThread
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetFileInformationByHandleEx
SetConsoleMode
DebugBreak
GetSystemDirectoryW
GetWindowsDirectoryW
CreateEventA
GetVersion
LoadLibraryW
FormatMessageW
GetLocaleInfoA
GetThreadLocale
IsDBCSLeadByteEx
GetFileAttributesW
SetEvent
ResetEvent
ReadConsoleInputA
PeekConsoleInputA
DuplicateHandle
DeviceIoControl
WaitForSingleObjectEx
WaitForMultipleObjectsEx
CreateEventW
WaitForMultipleObjects
GetExitCodeThread
ReleaseSemaphore
CreateSemaphoreA
ExitThread
FreeLibraryAndExitThread
RemoveDirectoryW
SetFileAttributesW
GetNumberOfConsoleInputEvents
SwitchToThread
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
InitializeCriticalSectionEx
GetLocaleInfoEx
LCMapStringEx
SleepConditionVariableCS

vcomp140

_vcomp_single_end
_vcomp_for_dynamic_init
_vcomp_for_dynamic_next
omp_set_nested
_vcomp_single_begin
_vcomp_barrier
_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_atomic_add_i8
_vcomp_set_num_threads
omp_init_lock
omp_set_lock
omp_unset_lock
omp_get_max_threads
_vcomp_fork
omp_destroy_lock
omp_get_thread_num
_vcomp_enter_critsect
_vcomp_leave_critsect

ws2_32

ioctlsocket
WSAGetLastError
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSASetEvent
WSAStartup
ntohl
freeaddrinfo
getaddrinfo
socket
setsockopt
ntohs
htons
htonl
WSAEnumNetworkEvents
WSACleanup
accept
bind
closesocket
getservbyname
inet_pton
inet_ntop
inet_addr
inet_ntoa
gethostbyaddr
gethostbyname
getservbyport
WSASetLastError
send
recv
listen
connect

gdiplus

GdipDrawImageRectI
GdipGraphicsClear
GdipSetInterpolationMode
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromFile
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipSetSmoothingMode
GdipSetTextRenderingHint

urlmon

URLDownloadToFileA

user32

EmptyClipboard
PeekMessageA
PostMessageA
MsgWaitForMultipleObjectsEx
SystemParametersInfoA
GetDC
ReleaseDC
FillRect
MessageBoxA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EnumDisplayDevicesA
IsClipboardFormatAvailable

gdi32

GetDeviceCaps
CreateDIBSection
GetOutlineTextMetricsA
GetGlyphOutlineW
GetFontData
GetCharWidth32A
SelectObject
GetGlyphOutlineA
EnumFontFamiliesExW
StretchDIBits
CreateSolidBrush
GdiFlush
GetWorldTransform
ExtSelectClipRgn
SelectClipRgn
IntersectClipRect
GetGraphicsMode
GetClipRgn
GetClipBox
ExtCreateRegion
CreateRectRgn
CreateCompatibleBitmap
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetTextMetricsA
DeleteObject
DeleteDC
CreateDCA
CreateCompatibleDC
BitBlt
GetFontUnicodeRanges
GetGlyphIndicesW
RestoreDC
SaveDC
SetBkMode
SetGraphicsMode
SetMapMode
SetTextColor
SetTextAlign
CreateFontIndirectW

advapi32

RegEnumKeyA
RegOpenKeyExW
RegSetValueExW
RegNotifyChangeKeyValue
RegDeleteValueW
RegCreateKeyExW
LookupAccountSidW
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetFileSecurityW
RegEnumKeyExW
RegLoadMUIStringW
RegEnumValueW
RegGetValueW
DeregisterEventSource
RegEnumValueA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ReportEventA
RegisterEventSourceA
GetUserNameW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
SHGetFileInfoW

ole32

CoGetObjectContext
CoGetApartmentType
CoTaskMemFree

dnsapi

DnsQuery_A
DnsFree

iphlpapi

NotifyRouteChange2
GetIpForwardTable2
CancelMibChangeNotify2

Sections

.text
Size: 9.4MB - Virtual size: 9.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 348KB - Virtual size: 713KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 329KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
convert.exe
.exe windows:6 windows x86

f31ede67240dfbe720faedde14cb403c

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3d
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

27/10/2022, 00:00

Not After

27/10/2023, 23:59

Subject

CN=ImageMagick Studio LLC,O=ImageMagick Studio LLC,ST=Pennsylvania,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:d0:9e:ad:7d:4b:16:50:61:6a:e7:ac:f5:1e:fd:aa:50:a9:24:24:e2:33:b0:44:f4:ef:8f:06:98:94:ff:5c
Signer

Actual PE Digest

4e:d0:9e:ad:7d:4b:16:50:61:6a:e7:ac:f5:1e:fd:aa:50:a9:24:24:e2:33:b0:44:f4:ef:8f:06:98:94:ff:5c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetVersionExA
MapViewOfFile
UnmapViewOfFile
FreeLibrary
FreeResource
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryExW
LoadResource
LockResource
SizeofResource
LocalFree
FormatMessageA
CreateFileMappingA
GetStartupInfoA
FindResourceA
SystemTimeToFileTime
WideCharToMultiByte
SetConsoleCtrlHandler
GetCurrentThreadId
OutputDebugStringA
Sleep
GetLogicalDrives
LoadLibraryA
CreateThread
GlobalAlloc
GlobalSize
GlobalUnlock
QueryPerformanceCounter
GlobalFree
SetEnvironmentVariableA
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
ExitProcess
GetModuleHandleExW
CreateFileW
GetFileType
GetConsoleMode
GetExitCodeProcess
SetFilePointerEx
WriteFile
GetConsoleOutputCP
DeleteFileW
GetFileAttributesExW
SetStdHandle
GetTimeZoneInformation
GetDriveTypeW
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
FlushFileBuffers
MoveFileExW
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentThread
GetFileSizeEx
DecodePointer
HeapReAlloc
HeapSize
GetCPInfo
GetCurrentDirectoryW
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
CreateDirectoryW
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
WriteConsoleW
PeekNamedPipe
CreatePipe
SetErrorMode
GetLastError
SetHandleInformation
CloseHandle
SetEndOfFile
ReadFile
FindNextFileW
FindFirstFileW
FindClose
MultiByteToWideChar
GetShortPathNameW
GetCurrentProcess
GetProcessTimes
WaitForSingleObject
ReadConsoleW
QueryPerformanceFrequency
GetDiskFreeSpaceExW
GetVolumeInformationW
SetUnhandledExceptionFilter
GetVolumePathNameW
GetSystemDirectoryA
GetLongPathNameW
ReadDirectoryChangesW
GetDriveTypeA
SignalObjectAndWait
GetTempPathA
GetTempFileNameA
GetPhysicallyInstalledSystemMemory
SetConsoleOutputCP
GlobalLock
CompareStringEx
InitializeCriticalSection
ReleaseMutex
CreateMutexA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TryAcquireSRWLockExclusive
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
SetThreadPriority
GetThreadPriority
ResumeThread
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetFileInformationByHandleEx
SetConsoleMode
DebugBreak
GetSystemDirectoryW
GetWindowsDirectoryW
CreateEventA
GetVersion
LoadLibraryW
FormatMessageW
GetLocaleInfoA
GetThreadLocale
IsDBCSLeadByteEx
GetFileAttributesW
SetEvent
ResetEvent
ReadConsoleInputA
PeekConsoleInputA
DuplicateHandle
DeviceIoControl
WaitForSingleObjectEx
WaitForMultipleObjectsEx
CreateEventW
WaitForMultipleObjects
GetExitCodeThread
ReleaseSemaphore
CreateSemaphoreA
ExitThread
FreeLibraryAndExitThread
RemoveDirectoryW
SetFileAttributesW
GetNumberOfConsoleInputEvents
SwitchToThread
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
InitializeCriticalSectionEx
GetLocaleInfoEx
LCMapStringEx
SleepConditionVariableCS

vcomp140

_vcomp_single_end
_vcomp_for_dynamic_init
_vcomp_for_dynamic_next
_vcomp_for_static_init
omp_set_nested
_vcomp_single_begin
_vcomp_barrier
_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_atomic_add_i8
_vcomp_set_num_threads
omp_init_lock
omp_set_lock
omp_unset_lock
omp_get_max_threads
_vcomp_fork
omp_destroy_lock
omp_get_thread_num
_vcomp_enter_critsect
_vcomp_leave_critsect

ws2_32

ioctlsocket
WSAGetLastError
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSASetEvent
WSAStartup
ntohl
freeaddrinfo
getaddrinfo
socket
setsockopt
ntohs
htons
htonl
WSAEnumNetworkEvents
WSACleanup
accept
bind
closesocket
getservbyname
inet_pton
inet_ntop
inet_addr
inet_ntoa
gethostbyaddr
gethostbyname
getservbyport
WSASetLastError
send
recv
listen
connect

gdiplus

GdipDrawImageRectI
GdipGraphicsClear
GdipSetInterpolationMode
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromFile
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipSetSmoothingMode
GdipSetTextRenderingHint

urlmon

URLDownloadToFileA

user32

EmptyClipboard
PeekMessageA
PostMessageA
MsgWaitForMultipleObjectsEx
SystemParametersInfoA
GetDC
ReleaseDC
FillRect
MessageBoxA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EnumDisplayDevicesA
IsClipboardFormatAvailable

gdi32

GetDeviceCaps
CreateDIBSection
GetOutlineTextMetricsA
GetGlyphOutlineW
GetFontData
GetCharWidth32A
SelectObject
GetGlyphOutlineA
EnumFontFamiliesExW
StretchDIBits
CreateSolidBrush
GdiFlush
GetWorldTransform
ExtSelectClipRgn
SelectClipRgn
IntersectClipRect
GetGraphicsMode
GetClipRgn
GetClipBox
ExtCreateRegion
CreateRectRgn
CreateCompatibleBitmap
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetTextMetricsA
DeleteObject
DeleteDC
CreateDCA
CreateCompatibleDC
BitBlt
GetFontUnicodeRanges
GetGlyphIndicesW
RestoreDC
SaveDC
SetBkMode
SetGraphicsMode
SetMapMode
SetTextColor
SetTextAlign
CreateFontIndirectW

advapi32

RegEnumKeyA
RegOpenKeyExW
RegSetValueExW
RegNotifyChangeKeyValue
RegDeleteValueW
RegCreateKeyExW
LookupAccountSidW
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetFileSecurityW
RegEnumKeyExW
RegLoadMUIStringW
RegEnumValueW
RegGetValueW
DeregisterEventSource
RegEnumValueA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ReportEventA
RegisterEventSourceA
GetUserNameW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
SHGetFileInfoW

ole32

CoGetObjectContext
CoGetApartmentType
CoTaskMemFree

dnsapi

DnsQuery_A
DnsFree

iphlpapi

NotifyRouteChange2
GetIpForwardTable2
CancelMibChangeNotify2

Sections

.text
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 348KB - Virtual size: 713KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 342KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dcraw.exe
.exe windows:6 windows x86

29ef228cc2a9d4a5f321157e0026702b

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3d
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

27/10/2022, 00:00

Not After

27/10/2023, 23:59

Subject

CN=ImageMagick Studio LLC,O=ImageMagick Studio LLC,ST=Pennsylvania,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:e6:d0:20:7a:8b:bf:2f:f9:c0:6c:84:f4:42:ac:a2:f3:9f:16:a9:50:e7:98:e2:b3:0a:e1:6a:da:db:68:56
Signer

Actual PE Digest

e4:e6:d0:20:7a:8b:bf:2f:f9:c0:6c:84:f4:42:ac:a2:f3:9f:16:a9:50:e7:98:e2:b3:0a:e1:6a:da:db:68:56

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
HeapSize
FlushFileBuffers
SetEndOfFile
DeleteFileW
GetCurrentDirectoryW
GetStringTypeW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetTempPathA
GetTempFileNameA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetPhysicallyInstalledSystemMemory
SwitchToThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
EncodePointer
RaiseException
ReadFile
SetFileTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetDriveTypeW
GetFullPathNameW
CloseHandle
SetFilePointerEx
CreateFileW
GetFileType
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
HeapAlloc
HeapFree
GetTempPathW
CompareStringW
LCMapStringW
GetFileSizeEx
SetStdHandle
GetTimeZoneInformation
DecodePointer
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
WriteConsoleW

vcomp140

_vcomp_fork
_vcomp_sections_init
_vcomp_sections_next
_vcomp_set_num_threads

ws2_32

htons
ntohl
ntohs
htonl

Sections

.text
Size: 679KB - Virtual size: 679KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 589KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
delegates.xml
.xml
english.xml
.xml
ffmpeg.exe
.exe windows:4 windows x86

52bcb305f26dd109217285c3454b88d1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3d
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

27/10/2022, 00:00

Not After

27/10/2023, 23:59

Subject

CN=ImageMagick Studio LLC,O=ImageMagick Studio LLC,ST=Pennsylvania,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e2:05:84:41:9d:f3:d8:82:3f:93:83:69:3e:32:42:b1:ce:3f:19:6f:7f:0e:0a:8c:ce:95:82:7c:95:80:6c:05
Signer

Actual PE Digest

e2:05:84:41:9d:f3:d8:82:3f:93:83:69:3e:32:42:b1:ce:3f:19:6f:7f:0e:0a:8c:ce:95:82:7c:95:80:6c:05

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptCreateHash
CryptDecrypt
CryptDestroyHash
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptSetHashParam
CryptSignHashA
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW

bcrypt

BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider

crypt32

CertCloseStore
CertDeleteCertificateFromStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore
PFXImportCertStore

gdi32

BitBlt
ChoosePixelFormat
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreateFontW
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
DescribePixelFormat
ExtTextOutW
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetObjectA
GetPixelFormat
GetStockObject
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextMetricsW
Rectangle
SelectObject
SetBkMode
SetDeviceGammaRamp
SetPixelFormat
SetTextColor
SwapBuffers

imm32

ImmAssociateContext
ImmGetCandidateListW
ImmGetCompositionStringW
ImmGetContext
ImmGetIMEFileNameA
ImmNotifyIME
ImmReleaseContext
ImmSetCompositionStringW
ImmSetCompositionWindow

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringA
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileMappingA
CreateFileW
CreateMutexA
CreateSemaphoreA
CreateSemaphoreW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileW
FindNextFileW
FormatMessageW
FreeLibrary
GetACP
GetCommandLineW
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableA
GetFileAttributesA
GetFileAttributesExA
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLongPathNameA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNumaHighestNodeNumber
GetNumaNodeProcessorMaskEx
GetProcAddress
GetProcessAffinityMask
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTimeAsFileTime
GetTempPathA
GetThreadPriority
GetTickCount
GetTimeZoneInformation
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAlloc
GlobalLock
GlobalMemoryStatusEx
GlobalUnlock
InitOnceBeginInitialize
InitOnceComplete
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSRWLock
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidCodePage
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
MapViewOfFile
MoveFileExA
MoveFileExW
MulDiv
MultiByteToWideChar
OutputDebugStringW
PeekNamedPipe
Process32First
Process32Next
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSemaphore
ResetEvent
SetConsoleCtrlHandler
SetConsoleTextAttribute
SetDllDirectoryA
SetDllDirectoryW
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetFilePointerEx
SetLastError
SetThreadAffinityMask
SetThreadExecutionState
SetThreadGroupAffinity
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrcatW
lstrcmpiW
lstrlenW

msvcrt

__doserrno
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__p__acmdln
__p__fmode
__set_app_type
__setusermatherr
_access
_access
_aligned_free
_aligned_malloc
_aligned_realloc
_amsg_exit
_assert
_beginthread
_beginthreadex
_cexit
_chmod
_close
_endthread
_errno
_exit
_fdopen
_filelengthi64
_fileno
_fileno
_findclose
_findnext
_findfirst
_fstat64
_fstati64
_fullpath
_ftime
_get_osfhandle
_getcwd
_getch
_hypot
_i64toa
_initterm
_iob
_isatty
_itoa
_kbhit
_lock
_locking
_lseeki64
_ltoa
_mbsrchr
_mkdir
_onexit
_open
_nextafter
_read
_rmdir
_rmdir
_setjmp3
_setmode
_sopen
_stat
_stati64
_strdup
_strdup
_stricmp
_strlwr
_strnicmp
_strrev
_strupr
_ui64toa
_ultoa
_unlink
_unlink
_unlock
_vsnprintf
_waccess
_wcsdup
_wfindfirst
_wfindnext
_wfopen
_wfopen_s
_wfullpath
_wmkdir
_wremove
_write
_wrename
_wrmdir
_wsopen
_wstat
_wunlink
abort
acos
asin
atan
atof
atoi
bsearch
calloc
clock
cosh
div
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fgetws
fopen
fprintf
fputc
fputs
fread
free
frexp
fscanf
fseek
fsetpos
ftell
fwrite
getc
getchar
getenv
getwc
gmtime
isalpha
islower
isprint
isspace
isupper
iswctype
isxdigit
localtime
localeconv
log10
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
mktime
perror
printf
putc
putchar
puts
putwc
qsort
raise
rand
realloc
rename
rewind
setlocale
setvbuf
signal
sinh
sprintf
srand
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtok
strtok_s
strtol
strtoul
strxfrm
swscanf_s
tan
tanh
time
tolower
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
vsprintf
wcscat
wcschr
wcscmp
wcscoll
wcscpy
wcscspn
wcsftime
wcslen
wcsncmp
wcsrchr
wcsstr
wcstombs
wcsxfrm

ole32

CoCreateInstance
CoGetMalloc
CoInitialize
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateBindCtx
OleLoadFromStream
OleSaveToStream
PropVariantClear

oleaut32

OleCreatePropertyFrame
SysFreeString

psapi

GetProcessMemoryInfo

shell32

CommandLineToArgvW
DragAcceptFiles
DragFinish
DragQueryFileW
ExtractIconExW
SHGetFolderPathW

shlwapi

SHCreateStreamOnFileA

user32

AdjustWindowRectEx
BeginPaint
CallWindowProcW
ChangeDisplaySettingsExW
ClientToScreen
ClipCursor
CloseClipboard
CopyIcon
CreateIconFromResource
CreateIconIndirect
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyCursor
DestroyIcon
DestroyWindow
DialogBoxIndirectParamW
DispatchMessageA
DispatchMessageW
DrawIcon
DrawTextW
EmptyClipboard
EndDialog
EndPaint
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsW
FindWindowA
FrameRect
GetAsyncKeyState
GetClassInfoExW
GetClientRect
GetClipCursor
GetClipboardData
GetClipboardSequenceNumber
GetCursorInfo
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetDoubleClickTime
GetFocus
GetIconInfo
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetMenu
GetMessageExtraInfo
GetMessageW
GetMonitorInfoW
GetParent
GetPropW
GetRawInputData
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetSystemMetrics
GetUpdateRect
GetWindowLongA
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InvalidateRect
IsClipboardFormatAvailable
IsIconic
IsRectEmpty
IsWindowVisible
KillTimer
LoadCursorA
LoadCursorW
LoadIconW
MapVirtualKeyW
MessageBoxA
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageW
PostThreadMessageW
RegisterClassExW
RegisterClassW
RegisterDeviceNotificationW
RegisterRawInputDevices
ReleaseDC
RemovePropW
ScreenToClient
SendMessageA
SendMessageW
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetPropW
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
ToUnicode
TrackMouseEvent
TranslateMessage
UnregisterClassW
UnregisterDeviceNotification
ValidateRect
WindowFromPoint

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime
waveInAddBuffer
waveInClose
waveInGetDevCapsW
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsW
waveOutGetErrorTextW
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite

ws2_32

WSACleanup
WSAGetLastError
WSASetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyaddr
gethostbyname
gethostname
getnameinfo
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

Exports

Exports

@send_word@12
@wp_log2@4
ABR_iteration_loop
ACELP_2t64_fx
ACELP_4t64_fx
ALL_POWERSCHEMES_GUID
AMFFormatGUID
AMFStructuredBufferFormatGUID
AMPROPSETID_Pin
AMRDecode
AMREncode
AMREncodeExit
AMREncodeInit
AMREncodeReset
AMR_Enc_Encode
AM_INTERFACESETID_Standard
AM_KSCATEGORY_AUDIO
AM_KSCATEGORY_CAPTURE
AM_KSCATEGORY_CROSSBAR
AM_KSCATEGORY_DATACOMPRESSOR
AM_KSCATEGORY_RENDER
AM_KSCATEGORY_SPLITTER
AM_KSCATEGORY_TVAUDIO
AM_KSCATEGORY_TVTUNER
AM_KSCATEGORY_VBICODEC
AM_KSCATEGORY_VIDEO
AM_KSPROPSETID_AC3
AM_KSPROPSETID_CopyProt
AM_KSPROPSETID_DVD_RateChange
AM_KSPROPSETID_DvdKaraoke
AM_KSPROPSETID_DvdSubPic
AM_KSPROPSETID_FrameStep
AM_KSPROPSETID_MPEG4_MediaType_Attributes
AM_KSPROPSETID_TSRateChange
APIAudioFunc
APIFunc
ATHformula
AV1_VAR_OFFS
A_Refl
AddVbrFrame
AmrWbInterpol
AmrWbUp_samp
AnalyzeSamples
Autocorr
Az_isp
Az_lsp
Bgn_scd
Bgn_scd_reset
BitrateIndex
Bits2prm
BitstreamReadHeaders
BitstreamWriteEndOfSequence
BitstreamWriteGroupOfVopHeader
BitstreamWriteUserData
BitstreamWriteVolHeader
BitstreamWriteVopHeader
CBR_iteration_loop
CELT_INNER_PROD_IMPL
CLSID_ACMWrapper
CLSID_AMAudioData
CLSID_AMAudioStream
CLSID_AMDirectDrawStream
CLSID_AMMediaTypeStream
CLSID_AMMultiMediaStream
CLSID_AMTimeline
CLSID_AMTimelineComp
CLSID_AMTimelineEffect
CLSID_AMTimelineGroup
CLSID_AMTimelineObj
CLSID_AMTimelineSrc
CLSID_AMTimelineTrack
CLSID_AMTimelineTrans
CLSID_AMovie
CLSID_ATSCChannelTuneRequest
CLSID_ATSCComponentType
CLSID_ATSCLocator
CLSID_ATSCNetworkPropertyPage
CLSID_ATSCNetworkProvider
CLSID_ATSCTuningSpace
CLSID_AVICo
CLSID_AVIDec
CLSID_AVIDoc
CLSID_AVIDraw
CLSID_AVIMIDIRender
CLSID_AccessibilityDockingService
CLSID_ActiveMovieCategories
CLSID_AllocPresenter
CLSID_AllocPresenterDDXclMode
CLSID_AlphabeticalCategorizer
CLSID_AnalogRadioTuningSpace
CLSID_AnalogTVTuningSpace
CLSID_AnalogVideoDecoderPropertyPage
CLSID_AppShellVerbHandler
CLSID_AppStartupLink
CLSID_AppVisibility
CLSID_ApplicationActivationManager
CLSID_ApplicationAssociationRegistration
CLSID_ApplicationAssociationRegistrationUI
CLSID_ApplicationDesignModeSettings
CLSID_ApplicationDestinations
CLSID_ApplicationDocumentLists
CLSID_AsyncReader
CLSID_AttachmentServices
CLSID_AudMixer
CLSID_AudioCompressorCategory
CLSID_AudioInputDeviceCategory
CLSID_AudioInputMixerProperties
CLSID_AudioProperties
CLSID_AudioRecord
CLSID_AudioRender
CLSID_AudioRendererAdvancedProperties
CLSID_AudioRendererCategory
CLSID_AuxInTuningSpace
CLSID_AviDest
CLSID_AviMuxProptyPage
CLSID_AviMuxProptyPage1
CLSID_AviReader
CLSID_AviSplitter
CLSID_BroadcastEventService
CLSID_CADefaultDlg
CLSID_CADenials
CLSID_CAManager
CLSID_CAManagerProxy
CLSID_CAOffer
CLSID_CAResDenialTree
CLSID_CAcmCoClassManager
CLSID_CDBurn
CLSID_CDeviceMoniker
CLSID_CIcmCoClassManager
CLSID_CMidiOutClassManager
CLSID_CMpegAudioCodec
CLSID_CMpegVideoCodec
CLSID_CQzFilterClassManager
CLSID_CVidCapClassManager
CLSID_CWaveOutClassManager
CLSID_CWaveinClassManager
CLSID_CameraControlPropertyPage
CLSID_CaptureGraphBuilder
CLSID_CaptureGraphBuilder2
CLSID_CaptureProperties
CLSID_ChannelTuneRequest
CLSID_ColorSource
CLSID_Colour
CLSID_Component
CLSID_ComponentType
CLSID_ComponentTypes
CLSID_Components
CLSID_CreatePropBagOnRegKey
CLSID_CrossbarFilterPropertyPage
CLSID_DShowTVEFilter
CLSID_DSoundRender
CLSID_DTFilter
CLSID_DVBCLocator
CLSID_DVBCNetworkProvider
CLSID_DVBSLocator
CLSID_DVBSNetworkProvider
CLSID_DVBSTuningSpace
CLSID_DVBTLocator
CLSID_DVBTNetworkProvider
CLSID_DVBTuneRequest
CLSID_DVBTuningSpace
CLSID_DVDHWDecodersCategory
CLSID_DVDNavigator
CLSID_DVDState
CLSID_DVDecPropertiesPage
CLSID_DVEncPropertiesPage
CLSID_DVMux
CLSID_DVMuxPropertyPage
CLSID_DVSplitter
CLSID_DVVideoCodec
CLSID_DVVideoEnc
CLSID_DefFolderMenu
CLSID_DesktopGadget
CLSID_DesktopWallpaper
CLSID_DestinationList
CLSID_DeviceControlCategory
CLSID_DirectDraw
CLSID_DirectDraw7
CLSID_DirectDrawClipper
CLSID_DirectDrawProperties
CLSID_DirectInput
CLSID_DirectInput8
CLSID_DirectInputDevice
CLSID_DirectInputDevice8
CLSID_DirectSound
CLSID_DirectSound8
CLSID_DirectSoundCapture
CLSID_DirectSoundCapture8
CLSID_DirectSoundFullDuplex
CLSID_Dither
CLSID_DocPropShellExtension
CLSID_DriveSizeCategorizer
CLSID_DriveTypeCategorizer
CLSID_DvdGraphBuilder
CLSID_DxtAlphaSetter
CLSID_DxtCompositor
CLSID_DxtJpeg
CLSID_DxtKey
CLSID_ETFilter
CLSID_EnumerableObjectCollection
CLSID_EvalRat
CLSID_ExecuteFolder
CLSID_ExecuteUnknown
CLSID_ExplorerBrowser
CLSID_FGControl
CLSID_FSCopyHandler
CLSID_FileOpenDialog
CLSID_FileOperation
CLSID_FileSaveDialog
CLSID_FileSource
CLSID_FileWriter
CLSID_FilgraphManager
CLSID_FilterGraph
CLSID_FilterGraphNoThread
CLSID_FilterMapper
CLSID_FilterMapper2
CLSID_FolderViewHost
CLSID_FrameworkInputPane
CLSID_FreeSpaceCategorizer
CLSID_HomeGroup
CLSID_ICodecAPIProxy
CLSID_IENamespaceTreeControl
CLSID_IVideoEncoderCodecAPIProxy
CLSID_IVideoEncoderProxy
CLSID_ImageProperties
CLSID_ImageRecompress
CLSID_InMemoryPropertyStore
CLSID_InfTee
CLSID_InternetPrintOrdering
CLSID_KnownFolderManager
CLSID_LanguageComponentType
CLSID_LegacyAmFilterCategory
CLSID_Line21Decoder
CLSID_Line21Decoder2
CLSID_Locator
CLSID_MJPGEnc
CLSID_MMSPLITTER
CLSID_MOVReader
CLSID_MPEG1Doc
CLSID_MPEG1PacketPlayer
CLSID_MPEG1Splitter
CLSID_MPEG2Component
CLSID_MPEG2ComponentType
CLSID_MPEG2Demultiplexer
CLSID_MPEG2TuneRequest
CLSID_MPEG2TuneRequestFactory
CLSID_MSEventBinder
CLSID_MSVidAnalogCaptureToDataServices
CLSID_MSVidAnalogCaptureToOverlayMixer
CLSID_MSVidAnalogCaptureToStreamBufferSink
CLSID_MSVidAnalogCaptureToXDS
CLSID_MSVidAnalogTVToEncoder
CLSID_MSVidAnalogTunerDevice
CLSID_MSVidAudioRenderer
CLSID_MSVidAudioRendererDevices
CLSID_MSVidBDATunerDevice
CLSID_MSVidCAGSeg
CLSID_MSVidClosedCaptioning
CLSID_MSVidCtl
CLSID_MSVidDataServices
CLSID_MSVidDataServicesToStreamBufferSink
CLSID_MSVidDataServicesToXDS
CLSID_MSVidDevice
CLSID_MSVidDigitalCaptureToStreamBufferSink
CLSID_MSVidEncoder
CLSID_MSVidEncoderToStreamBufferSink
CLSID_MSVidFeature
CLSID_MSVidFeatures
CLSID_MSVidFilePlaybackDevice
CLSID_MSVidFilePlaybackToAudioRenderer
CLSID_MSVidFilePlaybackToVideoRenderer
CLSID_MSVidGenericComposite
CLSID_MSVidInputDevice
CLSID_MSVidInputDevices
CLSID_MSVidMPEG2DecoderToClosedCaptioning
CLSID_MSVidOutput
CLSID_MSVidOutputDevices
CLSID_MSVidRect
CLSID_MSVidRenderFactory
CLSID_MSVidSBESourceToCC
CLSID_MSVidStreamBufferRecordingControl
CLSID_MSVidStreamBufferSink
CLSID_MSVidStreamBufferSource
CLSID_MSVidStreamBufferSourceToVideoRenderer
CLSID_MSVidTVEGSeg
CLSID_MSVidVideoInputDevice
CLSID_MSVidVideoPlaybackDevice
CLSID_MSVidVideoRenderer
CLSID_MSVidVideoRendererDevices
CLSID_MSVidWebDVD
CLSID_MSVidWebDVDAdm
CLSID_MSVidWebDVDToAudioRenderer
CLSID_MSVidWebDVDToVideoRenderer
CLSID_MSVidXDS
CLSID_MailRecipient
CLSID_MediaDet
CLSID_MediaEncoderCategory
CLSID_MediaLocator
CLSID_MediaMultiplexerCategory
CLSID_MediaPropertyBag
CLSID_MemoryAllocator
CLSID_MergedCategorizer
CLSID_MidiRendererCategory
CLSID_MjpegDec
CLSID_ModexProperties
CLSID_ModexRenderer
CLSID_Mpeg2VideoStreamAnalyzer
CLSID_NamespaceTreeControl
CLSID_NamespaceWalker
CLSID_NetworkConnections
CLSID_NetworkExplorerFolder
CLSID_NetworkPlaces
CLSID_NullRenderer
CLSID_OpenControlPanel
CLSID_OverlayMixer
CLSID_PackageDebugSettings
CLSID_PerformanceProperties
CLSID_PersistMonikerPID
CLSID_PlaybackManager
CLSID_PreviousVersions
CLSID_PropertiesUI
CLSID_PropertySetter
CLSID_PropertySystem
CLSID_ProtoFilterGraph
CLSID_PublishDropTarget
CLSID_PublishingWizard
CLSID_QTDec
CLSID_QualityProperties
CLSID_QueryCancelAutoPlay
CLSID_QuickTimeParser
CLSID_RenderEngine
CLSID_SampleGrabber
CLSID_ScheduledTasks
CLSID_SearchFolderItemFactory
CLSID_SeekingPassThru
CLSID_SharingConfigurationManager
CLSID_ShellDesktop
CLSID_ShellFSFolder
CLSID_ShellItem
CLSID_ShellLibrary
CLSID_ShellLink
CLSID_SizeCategorizer
CLSID_SmartRenderEngine
CLSID_SmartTee
CLSID_StartMenuPin
CLSID_StreamBufferComposeRecording
CLSID_StreamBufferConfig
CLSID_StreamBufferRecordingAttributes
CLSID_StreamBufferSink
CLSID_StreamBufferSource
CLSID_SystemClock
CLSID_SystemDeviceEnum
CLSID_SystemTuningSpaces
CLSID_TIFLoad
CLSID_TVAudioFilterPropertyPage
CLSID_TVEAttrMap
CLSID_TVEAttrTimeQ
CLSID_TVECBAnnc
CLSID_TVECBDummy
CLSID_TVECBFile
CLSID_TVECBTrig
CLSID_TVEEnhancement
CLSID_TVEEnhancements
CLSID_TVEFeature
CLSID_TVEFile
CLSID_TVEFilter
CLSID_TVEFilterCCProperties
CLSID_TVEFilterStatsProperties
CLSID_TVEFilterTuneProperties
CLSID_TVEMCast
CLSID_TVEMCastCallback
CLSID_TVEMCastManager
CLSID_TVEMCasts
CLSID_TVENavAid
CLSID_TVEService
CLSID_TVEServices
CLSID_TVESupervisor
CLSID_TVETrack
CLSID_TVETrigger
CLSID_TVETriggerCtrl
CLSID_TVEVariation
CLSID_TVTunerFilterPropertyPage
CLSID_TaskbarList
CLSID_TextRender
CLSID_TimeCategorizer
CLSID_TransmitCategory
CLSID_TrayBandSiteService
CLSID_TrayDeskBand
CLSID_TuneRequest
CLSID_TuningSpace
CLSID_URLReader
CLSID_UserNotification
CLSID_VBISurfaces
CLSID_VPObject
CLSID_VPVBIObject
CLSID_VfwCapture
CLSID_VideoCompressorCategory
CLSID_VideoInputDeviceCategory
CLSID_VideoMixingRenderer
CLSID_VideoMixingRenderer9
CLSID_VideoPortManager
CLSID_VideoProcAmpPropertyPage
CLSID_VideoRenderer
CLSID_VideoRendererDefault
CLSID_VideoStreamConfigPropertyPage
CLSID_WMAsfReader
CLSID_WMAsfWriter
CLSID_WSTDecoder
CLSID_WebWizardHost
CLSID_WstDecoderPropertyPage
CLSID_XDSCodec
CLSID_XDSToRat
CLSID_Xml2Dex
CN_dithering
CODECAPI_ALLSETTINGS
CODECAPI_AUDIO_ENCODER
CODECAPI_CHANGELISTS
CODECAPI_CURRENTCHANGELIST
CODECAPI_SETALLDEFAULTS
CODECAPI_SUPPORTSEVENTS
CODECAPI_VIDEO_ENCODER
COMB_FILTER_CONST_IMPL
CRC_writeheader
Cb_gain_average
Cb_gain_average_reset
Chebps_Wrapper
CheckCandidate16no4v
ChunkAppend
ChunkAssignData
ChunkDelete
ChunkGetIdFromTag
ChunkGetIndexFromFourCC
ChunkGetIndexFromTag
ChunkGetTagFromFourCC
ChunkInit
ChunkListDelete
ChunkListDiskSize
ChunkListEmit
ChunkRelease
ChunkSearchList
ChunkSetHead
CodeCoeffInter_CalcBits
CodeCoeffIntra_CalcBits
Convolve
CreateRumbleEffectData
D3D11_CreatePixelShader
D3D11_CreateRenderer
D3D11_CreateVertexShader
D3D11_DXGIFormatToSDLPixelFormat
D3D11_HandleDeviceLost
D3D11_RenderDriver
D3D11_Trim
D3D9_CreatePixelShader
D3D_CreateRenderer
D3D_LoadDLL
D3D_RenderDriver
DIID_IDTFilterEvents
DIID_IETFilterEvents
DIID_IXDSCodecEvents
DIID__ICAComponentsEvents
DIID__ICADefaultDlgEvents
DIID__ICADenialsEvents
DIID__ICAManagerEvents
DIID__ICAOffersEvents
DIID__ICAPoliciesEvents
DIID__ICARequestEvents
DIID__ICAResDenialTreeEvents
DIID__ICATollsEvents
DIID__IMSVidCtlEvents
DIID__ITVEEvents
DIID__ITVETriggerCtrlEvents
DISKAUDIO_bootstrap
DROPOUT_AFTER_BASE_MAX
DROPOUT_AFTER_BASE_MIN
DROPOUT_BEFORE_BASE_MAX
DROPOUT_BEFORE_BASE_MIN
DROPOUT_COEFF_MAX
DROPOUT_CONTINUITY_MAX
DROPOUT_MULTIPLIER_MAX
DROPOUT_MULTIPLIER_MIN
DROPOUT_MULTIPLIER_Q_BASE
DROPOUT_Q_MAX
DROPOUT_Q_MIN
DSDEVID_DefaultCapture
DSDEVID_DefaultPlayback
DSDEVID_DefaultVoiceCapture
DSDEVID_DefaultVoicePlayback
DSOUND_bootstrap
DUAL_INNER_PROD_IMPL
DUMMYAUDIO_bootstrap
DUMMY_PumpEvents
DUMMY_bootstrap
DXVA2_ModeH264_A
DXVA2_ModeH264_B
DXVA2_ModeH264_C
DXVA2_ModeH264_D
DXVA2_ModeH264_E
DXVA2_ModeH264_F
DXVA2_ModeMPEG2_IDCT
DXVA2_ModeMPEG2_MoComp

Sections

.text
Size: 36.9MB - Virtual size: 36.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rotext
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 306KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8.2MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 10.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 801KB - Virtual size: 801KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
identify.exe
.exe windows:6 windows x86

f31ede67240dfbe720faedde14cb403c

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3d
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

27/10/2022, 00:00

Not After

27/10/2023, 23:59

Subject

CN=ImageMagick Studio LLC,O=ImageMagick Studio LLC,ST=Pennsylvania,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

58:80:e5:f6:18:84:91:f2:f1:3d:4b:b1:c1:51:eb:85:81:fd:df:a2:37:85:9f:c0:b6:07:63:38:d8:ce:53:65
Signer

Actual PE Digest

58:80:e5:f6:18:84:91:f2:f1:3d:4b:b1:c1:51:eb:85:81:fd:df:a2:37:85:9f:c0:b6:07:63:38:d8:ce:53:65

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetVersionExA
MapViewOfFile
UnmapViewOfFile
FreeLibrary
FreeResource
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryExW
LoadResource
LockResource
SizeofResource
LocalFree
FormatMessageA
CreateFileMappingA
GetStartupInfoA
FindResourceA
SystemTimeToFileTime
WideCharToMultiByte
SetConsoleCtrlHandler
GetCurrentThreadId
OutputDebugStringA
Sleep
GetLogicalDrives
LoadLibraryA
CreateThread
GlobalAlloc
GlobalSize
GlobalUnlock
QueryPerformanceCounter
GlobalFree
SetEnvironmentVariableA
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
ExitProcess
GetModuleHandleExW
CreateFileW
GetFileType
GetConsoleMode
GetExitCodeProcess
SetFilePointerEx
WriteFile
GetConsoleOutputCP
DeleteFileW
GetFileAttributesExW
SetStdHandle
GetTimeZoneInformation
GetDriveTypeW
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
FlushFileBuffers
MoveFileExW
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentThread
GetFileSizeEx
DecodePointer
HeapReAlloc
HeapSize
GetCPInfo
GetCurrentDirectoryW
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
CreateDirectoryW
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
WriteConsoleW
PeekNamedPipe
CreatePipe
SetErrorMode
GetLastError
SetHandleInformation
CloseHandle
SetEndOfFile
ReadFile
FindNextFileW
FindFirstFileW
FindClose
MultiByteToWideChar
GetShortPathNameW
GetCurrentProcess
GetProcessTimes
WaitForSingleObject
ReadConsoleW
QueryPerformanceFrequency
GetDiskFreeSpaceExW
GetVolumeInformationW
SetUnhandledExceptionFilter
GetVolumePathNameW
GetSystemDirectoryA
GetLongPathNameW
ReadDirectoryChangesW
GetDriveTypeA
SignalObjectAndWait
GetTempPathA
GetTempFileNameA
GetPhysicallyInstalledSystemMemory
SetConsoleOutputCP
GlobalLock
CompareStringEx
InitializeCriticalSection
ReleaseMutex
CreateMutexA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TryAcquireSRWLockExclusive
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
SetThreadPriority
GetThreadPriority
ResumeThread
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetFileInformationByHandleEx
SetConsoleMode
DebugBreak
GetSystemDirectoryW
GetWindowsDirectoryW
CreateEventA
GetVersion
LoadLibraryW
FormatMessageW
GetLocaleInfoA
GetThreadLocale
IsDBCSLeadByteEx
GetFileAttributesW
SetEvent
ResetEvent
ReadConsoleInputA
PeekConsoleInputA
DuplicateHandle
DeviceIoControl
WaitForSingleObjectEx
WaitForMultipleObjectsEx
CreateEventW
WaitForMultipleObjects
GetExitCodeThread
ReleaseSemaphore
CreateSemaphoreA
ExitThread
FreeLibraryAndExitThread
RemoveDirectoryW
SetFileAttributesW
GetNumberOfConsoleInputEvents
SwitchToThread
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
InitializeCriticalSectionEx
GetLocaleInfoEx
LCMapStringEx
SleepConditionVariableCS

vcomp140

_vcomp_single_end
_vcomp_for_dynamic_init
_vcomp_for_dynamic_next
_vcomp_for_static_init
omp_set_nested
_vcomp_single_begin
_vcomp_barrier
_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_atomic_add_i8
_vcomp_set_num_threads
omp_init_lock
omp_set_lock
omp_unset_lock
omp_get_max_threads
_vcomp_fork
omp_destroy_lock
omp_get_thread_num
_vcomp_enter_critsect
_vcomp_leave_critsect

ws2_32

ioctlsocket
WSAGetLastError
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSASetEvent
WSAStartup
ntohl
freeaddrinfo
getaddrinfo
socket
setsockopt
ntohs
htons
htonl
WSAEnumNetworkEvents
WSACleanup
accept
bind
closesocket
getservbyname
inet_pton
inet_ntop
inet_addr
inet_ntoa
gethostbyaddr
gethostbyname
getservbyport
WSASetLastError
send
recv
listen
connect

gdiplus

GdipDrawImageRectI
GdipGraphicsClear
GdipSetInterpolationMode
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromFile
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipSetSmoothingMode
GdipSetTextRenderingHint

urlmon

URLDownloadToFileA

user32

EmptyClipboard
PeekMessageA
PostMessageA
MsgWaitForMultipleObjectsEx
SystemParametersInfoA
GetDC
ReleaseDC
FillRect
MessageBoxA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EnumDisplayDevicesA
IsClipboardFormatAvailable

gdi32

GetDeviceCaps
CreateDIBSection
GetOutlineTextMetricsA
GetGlyphOutlineW
GetFontData
GetCharWidth32A
SelectObject
GetGlyphOutlineA
EnumFontFamiliesExW
StretchDIBits
CreateSolidBrush
GdiFlush
GetWorldTransform
ExtSelectClipRgn
SelectClipRgn
IntersectClipRect
GetGraphicsMode
GetClipRgn
GetClipBox
ExtCreateRegion
CreateRectRgn
CreateCompatibleBitmap
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetTextMetricsA
DeleteObject
DeleteDC
CreateDCA
CreateCompatibleDC
BitBlt
GetFontUnicodeRanges
GetGlyphIndicesW
RestoreDC
SaveDC
SetBkMode
SetGraphicsMode
SetMapMode
SetTextColor
SetTextAlign
CreateFontIndirectW

advapi32

RegEnumKeyA
RegOpenKeyExW
RegSetValueExW
RegNotifyChangeKeyValue
RegDeleteValueW
RegCreateKeyExW
LookupAccountSidW
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetFileSecurityW
RegEnumKeyExW
RegLoadMUIStringW
RegEnumValueW
RegGetValueW
DeregisterEventSource
RegEnumValueA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ReportEventA
RegisterEventSourceA
GetUserNameW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
SHGetFileInfoW

ole32

CoGetObjectContext
CoGetApartmentType
CoTaskMemFree

dnsapi

DnsQuery_A
DnsFree

iphlpapi

NotifyRouteChange2
GetIpForwardTable2
CancelMibChangeNotify2

Sections

.text
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 348KB - Virtual size: 713KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 339KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
locale.xml
.xml
log.xml
.xml
mime.xml
.xml .pdf
mogrify.exe
.exe windows:6 windows x86

6a76eeff10dbd88c787098fbd058ca07

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3d
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

27/10/2022, 00:00

Not After

27/10/2023, 23:59

Subject

CN=ImageMagick Studio LLC,O=ImageMagick Studio LLC,ST=Pennsylvania,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2a:46:83:39:94:76:68:eb:e6:5a:ba:e9:1e:8b:ca:58:04:92:ef:fa:dd:2e:a9:73:99:0d:2f:2a:82:db:6e:58
Signer

Actual PE Digest

2a:46:83:39:94:76:68:eb:e6:5a:ba:e9:1e:8b:ca:58:04:92:ef:fa:dd:2e:a9:73:99:0d:2f:2a:82:db:6e:58

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetVersionExA
MapViewOfFile
UnmapViewOfFile
FreeLibrary
FreeResource
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryExW
LoadResource
LockResource
SizeofResource
LocalFree
FormatMessageA
CreateFileMappingA
GetStartupInfoA
FindResourceA
SystemTimeToFileTime
WideCharToMultiByte
SetConsoleCtrlHandler
GetCurrentThreadId
OutputDebugStringA
Sleep
GetLogicalDrives
LoadLibraryA
CreateThread
GlobalAlloc
GlobalSize
GlobalUnlock
QueryPerformanceCounter
GlobalFree
SetEnvironmentVariableA
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
ExitProcess
GetModuleHandleExW
CreateFileW
GetFileType
GetConsoleMode
GetExitCodeProcess
SetFilePointerEx
WriteFile
GetConsoleOutputCP
DeleteFileW
GetFileAttributesExW
SetStdHandle
GetTimeZoneInformation
GetDriveTypeW
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
FlushFileBuffers
MoveFileExW
SetFileTime
TzSpecificLocalTimeToSystemTime
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentThread
GetFileSizeEx
DecodePointer
HeapReAlloc
HeapSize
GetCPInfo
GetCurrentDirectoryW
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
CreateDirectoryW
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
WriteConsoleW
PeekNamedPipe
CreatePipe
SetErrorMode
GetLastError
SetHandleInformation
CloseHandle
SetEndOfFile
ReadFile
FindNextFileW
FindFirstFileW
FindClose
MultiByteToWideChar
GetShortPathNameW
GetCurrentProcess
GetProcessTimes
WaitForSingleObject
ReadConsoleW
QueryPerformanceFrequency
GetDiskFreeSpaceExW
GetVolumeInformationW
SetUnhandledExceptionFilter
GetVolumePathNameW
GetSystemDirectoryA
GetLongPathNameW
ReadDirectoryChangesW
GetDriveTypeA
SignalObjectAndWait
GetTempPathA
GetTempFileNameA
GetPhysicallyInstalledSystemMemory
SetConsoleOutputCP
GlobalLock
CompareStringEx
InitializeCriticalSection
ReleaseMutex
CreateMutexA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TryAcquireSRWLockExclusive
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
SetThreadPriority
GetThreadPriority
ResumeThread
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetFileInformationByHandleEx
SetConsoleMode
DebugBreak
GetSystemDirectoryW
GetWindowsDirectoryW
CreateEventA
GetVersion
LoadLibraryW
FormatMessageW
GetLocaleInfoA
GetThreadLocale
IsDBCSLeadByteEx
GetFileAttributesW
SetEvent
ResetEvent
ReadConsoleInputA
PeekConsoleInputA
DuplicateHandle
DeviceIoControl
WaitForSingleObjectEx
WaitForMultipleObjectsEx
CreateEventW
WaitForMultipleObjects
GetExitCodeThread
ReleaseSemaphore
CreateSemaphoreA
ExitThread
FreeLibraryAndExitThread
RemoveDirectoryW
SetFileAttributesW
GetNumberOfConsoleInputEvents
SwitchToThread
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
InitializeCriticalSectionEx
GetLocaleInfoEx
LCMapStringEx
SleepConditionVariableCS

vcomp140

_vcomp_single_end
_vcomp_for_dynamic_init
_vcomp_for_dynamic_next
_vcomp_for_static_init
omp_set_nested
_vcomp_single_begin
_vcomp_barrier
_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_atomic_add_i8
_vcomp_set_num_threads
omp_init_lock
omp_set_lock
omp_unset_lock
omp_get_max_threads
_vcomp_fork
omp_destroy_lock
omp_get_thread_num
_vcomp_enter_critsect
_vcomp_leave_critsect

ws2_32

ioctlsocket
WSAGetLastError
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSASetEvent
WSAStartup
ntohl
freeaddrinfo
getaddrinfo
socket
setsockopt
ntohs
htons
htonl
WSAEnumNetworkEvents
WSACleanup
accept
bind
closesocket
getservbyname
inet_pton
inet_ntop
inet_addr
inet_ntoa
gethostbyaddr
gethostbyname
getservbyport
WSASetLastError
send
recv
listen
connect

gdiplus

GdipDrawImageRectI
GdipGraphicsClear
GdipSetInterpolationMode
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromFile
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipSetSmoothingMode
GdipSetTextRenderingHint

urlmon

URLDownloadToFileA

user32

EmptyClipboard
PeekMessageA
PostMessageA
MsgWaitForMultipleObjectsEx
SystemParametersInfoA
GetDC
ReleaseDC
FillRect
MessageBoxA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EnumDisplayDevicesA
IsClipboardFormatAvailable

gdi32

GetDeviceCaps
CreateDIBSection
GetOutlineTextMetricsA
GetGlyphOutlineW
GetFontData
GetCharWidth32A
SelectObject
GetGlyphOutlineA
EnumFontFamiliesExW
StretchDIBits
CreateSolidBrush
GdiFlush
GetWorldTransform
ExtSelectClipRgn
SelectClipRgn
IntersectClipRect
GetGraphicsMode
GetClipRgn
GetClipBox
ExtCreateRegion
CreateRectRgn
CreateCompatibleBitmap
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetTextMetricsA
DeleteObject
DeleteDC
CreateDCA
CreateCompatibleDC
BitBlt
GetFontUnicodeRanges
GetGlyphIndicesW
RestoreDC
SaveDC
SetBkMode
SetGraphicsMode
SetMapMode
SetTextColor
SetTextAlign
CreateFontIndirectW

advapi32

RegEnumKeyA
RegOpenKeyExW
RegSetValueExW
RegNotifyChangeKeyValue
RegDeleteValueW
RegCreateKeyExW
LookupAccountSidW
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetFileSecurityW
RegEnumKeyExW
RegLoadMUIStringW
RegEnumValueW
RegGetValueW
DeregisterEventSource
RegEnumValueA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ReportEventA
RegisterEventSourceA
GetUserNameW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
SHGetFileInfoW

ole32

CoGetObjectContext
CoGetApartmentType
CoTaskMemFree

dnsapi

DnsQuery_A
DnsFree

iphlpapi

NotifyRouteChange2
GetIpForwardTable2
CancelMibChangeNotify2

Sections

.text
Size: 9.8MB - Virtual size: 9.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 348KB - Virtual size: 713KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 342KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
montage.exe
.exe windows:6 windows x86

f31ede67240dfbe720faedde14cb403c

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3d
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

27/10/2022, 00:00

Not After

27/10/2023, 23:59

Subject

CN=ImageMagick Studio LLC,O=ImageMagick Studio LLC,ST=Pennsylvania,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ff:5a:2a:93:91:73:a0:05:49:c8:7e:0b:03:88:3b:66:c2:9a:6a:4a:7d:a2:72:ac:87:7f:af:9d:64:45:53:3c
Signer

Actual PE Digest

ff:5a:2a:93:91:73:a0:05:49:c8:7e:0b:03:88:3b:66:c2:9a:6a:4a:7d:a2:72:ac:87:7f:af:9d:64:45:53:3c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetVersionExA
MapViewOfFile
UnmapViewOfFile
FreeLibrary
FreeResource
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryExW
LoadResource
LockResource
SizeofResource
LocalFree
FormatMessageA
CreateFileMappingA
GetStartupInfoA
FindResourceA
SystemTimeToFileTime
WideCharToMultiByte
SetConsoleCtrlHandler
GetCurrentThreadId
OutputDebugStringA
Sleep
GetLogicalDrives
LoadLibraryA
CreateThread
GlobalAlloc
GlobalSize
GlobalUnlock
QueryPerformanceCounter
GlobalFree
SetEnvironmentVariableA
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
ExitProcess
GetModuleHandleExW
CreateFileW
GetFileType
GetConsoleMode
GetExitCodeProcess
SetFilePointerEx
WriteFile
GetConsoleOutputCP
DeleteFileW
GetFileAttributesExW
SetStdHandle
GetTimeZoneInformation
GetDriveTypeW
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
FlushFileBuffers
MoveFileExW
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentThread
GetFileSizeEx
DecodePointer
HeapReAlloc
HeapSize
GetCPInfo
GetCurrentDirectoryW
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
CreateDirectoryW
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
WriteConsoleW
PeekNamedPipe
CreatePipe
SetErrorMode
GetLastError
SetHandleInformation
CloseHandle
SetEndOfFile
ReadFile
FindNextFileW
FindFirstFileW
FindClose
MultiByteToWideChar
GetShortPathNameW
GetCurrentProcess
GetProcessTimes
WaitForSingleObject
ReadConsoleW
QueryPerformanceFrequency
GetDiskFreeSpaceExW
GetVolumeInformationW
SetUnhandledExceptionFilter
GetVolumePathNameW
GetSystemDirectoryA
GetLongPathNameW
ReadDirectoryChangesW
GetDriveTypeA
SignalObjectAndWait
GetTempPathA
GetTempFileNameA
GetPhysicallyInstalledSystemMemory
SetConsoleOutputCP
GlobalLock
CompareStringEx
InitializeCriticalSection
ReleaseMutex
CreateMutexA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TryAcquireSRWLockExclusive
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
SetThreadPriority
GetThreadPriority
ResumeThread
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetFileInformationByHandleEx
SetConsoleMode
DebugBreak
GetSystemDirectoryW
GetWindowsDirectoryW
CreateEventA
GetVersion
LoadLibraryW
FormatMessageW
GetLocaleInfoA
GetThreadLocale
IsDBCSLeadByteEx
GetFileAttributesW
SetEvent
ResetEvent
ReadConsoleInputA
PeekConsoleInputA
DuplicateHandle
DeviceIoControl
WaitForSingleObjectEx
WaitForMultipleObjectsEx
CreateEventW
WaitForMultipleObjects
GetExitCodeThread
ReleaseSemaphore
CreateSemaphoreA
ExitThread
FreeLibraryAndExitThread
RemoveDirectoryW
SetFileAttributesW
GetNumberOfConsoleInputEvents
SwitchToThread
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
InitializeCriticalSectionEx
GetLocaleInfoEx
LCMapStringEx
SleepConditionVariableCS

vcomp140

_vcomp_single_end
_vcomp_for_dynamic_init
_vcomp_for_dynamic_next
_vcomp_for_static_init
omp_set_nested
_vcomp_single_begin
_vcomp_barrier
_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_atomic_add_i8
_vcomp_set_num_threads
omp_init_lock
omp_set_lock
omp_unset_lock
omp_get_max_threads
_vcomp_fork
omp_destroy_lock
omp_get_thread_num
_vcomp_enter_critsect
_vcomp_leave_critsect

ws2_32

ioctlsocket
WSAGetLastError
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSASetEvent
WSAStartup
ntohl
freeaddrinfo
getaddrinfo
socket
setsockopt
ntohs
htons
htonl
WSAEnumNetworkEvents
WSACleanup
accept
bind
closesocket
getservbyname
inet_pton
inet_ntop
inet_addr
inet_ntoa
gethostbyaddr
gethostbyname
getservbyport
WSASetLastError
send
recv
listen
connect

gdiplus

GdipDrawImageRectI
GdipGraphicsClear
GdipSetInterpolationMode
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromFile
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipSetSmoothingMode
GdipSetTextRenderingHint

urlmon

URLDownloadToFileA

user32

EmptyClipboard
PeekMessageA
PostMessageA
MsgWaitForMultipleObjectsEx
SystemParametersInfoA
GetDC
ReleaseDC
FillRect
MessageBoxA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EnumDisplayDevicesA
IsClipboardFormatAvailable

gdi32

GetDeviceCaps
CreateDIBSection
GetOutlineTextMetricsA
GetGlyphOutlineW
GetFontData
GetCharWidth32A
SelectObject
GetGlyphOutlineA
EnumFontFamiliesExW
StretchDIBits
CreateSolidBrush
GdiFlush
GetWorldTransform
ExtSelectClipRgn
SelectClipRgn
IntersectClipRect
GetGraphicsMode
GetClipRgn
GetClipBox
ExtCreateRegion
CreateRectRgn
CreateCompatibleBitmap
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetTextMetricsA
DeleteObject
DeleteDC
CreateDCA
CreateCompatibleDC
BitBlt
GetFontUnicodeRanges
GetGlyphIndicesW
RestoreDC
SaveDC
SetBkMode
SetGraphicsMode
SetMapMode
SetTextColor
SetTextAlign
CreateFontIndirectW

advapi32

RegEnumKeyA
RegOpenKeyExW
RegSetValueExW
RegNotifyChangeKeyValue
RegDeleteValueW
RegCreateKeyExW
LookupAccountSidW
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetFileSecurityW
RegEnumKeyExW
RegLoadMUIStringW
RegEnumValueW
RegGetValueW
DeregisterEventSource
RegEnumValueA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ReportEventA
RegisterEventSourceA
GetUserNameW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
SHGetFileInfoW

ole32

CoGetObjectContext
CoGetApartmentType
CoTaskMemFree

dnsapi

DnsQuery_A
DnsFree

iphlpapi

NotifyRouteChange2
GetIpForwardTable2
CancelMibChangeNotify2

Sections

.text
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 348KB - Virtual size: 713KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
policy.xml
.xml
quantization-table.xml
.xml
sRGB.icc
stream.exe
.exe windows:6 windows x86

f31ede67240dfbe720faedde14cb403c

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3d
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

27/10/2022, 00:00

Not After

27/10/2023, 23:59

Subject

CN=ImageMagick Studio LLC,O=ImageMagick Studio LLC,ST=Pennsylvania,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:a2:ae:2a:82:df:f3:30:1e:85:0c:c6:ba:5e:fe:33:23:24:87:48:c4:d0:ee:db:52:3b:c1:8d:94:6f:51:a2
Signer

Actual PE Digest

fb:a2:ae:2a:82:df:f3:30:1e:85:0c:c6:ba:5e:fe:33:23:24:87:48:c4:d0:ee:db:52:3b:c1:8d:94:6f:51:a2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetVersionExA
MapViewOfFile
UnmapViewOfFile
FreeLibrary
FreeResource
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryExW
LoadResource
LockResource
SizeofResource
LocalFree
FormatMessageA
CreateFileMappingA
GetStartupInfoA
FindResourceA
SystemTimeToFileTime
WideCharToMultiByte
SetConsoleCtrlHandler
GetCurrentThreadId
OutputDebugStringA
Sleep
GetLogicalDrives
LoadLibraryA
CreateThread
GlobalAlloc
GlobalSize
GlobalUnlock
QueryPerformanceCounter
GlobalFree
SetEnvironmentVariableA
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
ExitProcess
GetModuleHandleExW
CreateFileW
GetFileType
GetConsoleMode
GetExitCodeProcess
SetFilePointerEx
WriteFile
GetConsoleOutputCP
DeleteFileW
GetFileAttributesExW
SetStdHandle
GetTimeZoneInformation
GetDriveTypeW
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
FlushFileBuffers
MoveFileExW
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentThread
GetFileSizeEx
DecodePointer
HeapReAlloc
HeapSize
GetCPInfo
GetCurrentDirectoryW
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
CreateDirectoryW
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
WriteConsoleW
PeekNamedPipe
CreatePipe
SetErrorMode
GetLastError
SetHandleInformation
CloseHandle
SetEndOfFile
ReadFile
FindNextFileW
FindFirstFileW
FindClose
MultiByteToWideChar
GetShortPathNameW
GetCurrentProcess
GetProcessTimes
WaitForSingleObject
ReadConsoleW
QueryPerformanceFrequency
GetDiskFreeSpaceExW
GetVolumeInformationW
SetUnhandledExceptionFilter
GetVolumePathNameW
GetSystemDirectoryA
GetLongPathNameW
ReadDirectoryChangesW
GetDriveTypeA
SignalObjectAndWait
GetTempPathA
GetTempFileNameA
GetPhysicallyInstalledSystemMemory
SetConsoleOutputCP
GlobalLock
CompareStringEx
InitializeCriticalSection
ReleaseMutex
CreateMutexA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TryAcquireSRWLockExclusive
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
SetThreadPriority
GetThreadPriority
ResumeThread
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetFileInformationByHandleEx
SetConsoleMode
DebugBreak
GetSystemDirectoryW
GetWindowsDirectoryW
CreateEventA
GetVersion
LoadLibraryW
FormatMessageW
GetLocaleInfoA
GetThreadLocale
IsDBCSLeadByteEx
GetFileAttributesW
SetEvent
ResetEvent
ReadConsoleInputA
PeekConsoleInputA
DuplicateHandle
DeviceIoControl
WaitForSingleObjectEx
WaitForMultipleObjectsEx
CreateEventW
WaitForMultipleObjects
GetExitCodeThread
ReleaseSemaphore
CreateSemaphoreA
ExitThread
FreeLibraryAndExitThread
RemoveDirectoryW
SetFileAttributesW
GetNumberOfConsoleInputEvents
SwitchToThread
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
InitializeCriticalSectionEx
GetLocaleInfoEx
LCMapStringEx
SleepConditionVariableCS

vcomp140

_vcomp_single_end
_vcomp_for_dynamic_init
_vcomp_for_dynamic_next
_vcomp_for_static_init
omp_set_nested
_vcomp_single_begin
_vcomp_barrier
_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_atomic_add_i8
_vcomp_set_num_threads
omp_init_lock
omp_set_lock
omp_unset_lock
omp_get_max_threads
_vcomp_fork
omp_destroy_lock
omp_get_thread_num
_vcomp_enter_critsect
_vcomp_leave_critsect

ws2_32

ioctlsocket
WSAGetLastError
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSASetEvent
WSAStartup
ntohl
freeaddrinfo
getaddrinfo
socket
setsockopt
ntohs
htons
htonl
WSAEnumNetworkEvents
WSACleanup
accept
bind
closesocket
getservbyname
inet_pton
inet_ntop
inet_addr
inet_ntoa
gethostbyaddr
gethostbyname
getservbyport
WSASetLastError
send
recv
listen
connect

gdiplus

GdipDrawImageRectI
GdipGraphicsClear
GdipSetInterpolationMode
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromFile
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipSetSmoothingMode
GdipSetTextRenderingHint

urlmon

URLDownloadToFileA

user32

EmptyClipboard
PeekMessageA
PostMessageA
MsgWaitForMultipleObjectsEx
SystemParametersInfoA
GetDC
ReleaseDC
FillRect
MessageBoxA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EnumDisplayDevicesA
IsClipboardFormatAvailable

gdi32

GetDeviceCaps
CreateDIBSection
GetOutlineTextMetricsA
GetGlyphOutlineW
GetFontData
GetCharWidth32A
SelectObject
GetGlyphOutlineA
EnumFontFamiliesExW
StretchDIBits
CreateSolidBrush
GdiFlush
GetWorldTransform
ExtSelectClipRgn
SelectClipRgn
IntersectClipRect
GetGraphicsMode
GetClipRgn
GetClipBox
ExtCreateRegion
CreateRectRgn
CreateCompatibleBitmap
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetTextMetricsA
DeleteObject
DeleteDC
CreateDCA
CreateCompatibleDC
BitBlt
GetFontUnicodeRanges
GetGlyphIndicesW
RestoreDC
SaveDC
SetBkMode
SetGraphicsMode
SetMapMode
SetTextColor
SetTextAlign
CreateFontIndirectW

advapi32

RegEnumKeyA
RegOpenKeyExW
RegSetValueExW
RegNotifyChangeKeyValue
RegDeleteValueW
RegCreateKeyExW
LookupAccountSidW
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetFileSecurityW
RegEnumKeyExW
RegLoadMUIStringW
RegEnumValueW
RegGetValueW
DeregisterEventSource
RegEnumValueA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ReportEventA
RegisterEventSourceA
GetUserNameW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
SHGetFileInfoW

ole32

CoGetObjectContext
CoGetApartmentType
CoTaskMemFree

dnsapi

DnsQuery_A
DnsFree

iphlpapi

NotifyRouteChange2
GetIpForwardTable2
CancelMibChangeNotify2

Sections

.text
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 348KB - Virtual size: 713KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
thresholds.xml
.xml
type-ghostscript.xml
.xml
type.xml
.xml

Sharing

General

Malware Config

Signatures

Files

Password: infected

c534fcf69922b04b6a0568f9feae5d34

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3dCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

63:4e:57:81:27:46:e8:e6:6e:c3:0c:11:91:61:41:a7:1e:bd:b3:10:5c:18:d1:31:9e:ec:2d:b9:37:8e:b4:cdSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

msimg32

shlwapi

uxtheme

oledlg

urlmon

vcomp140

ws2_32

gdiplus

oleacc

imm32

winmm

winspool.drv

advapi32

ole32

oleaut32

dnsapi

iphlpapi

Sections

.text Size: 10.8MB - Virtual size: 10.8MB

.rdata Size: 5.9MB - Virtual size: 5.9MB

.data Size: 371KB - Virtual size: 750KB

.rsrc Size: 91KB - Virtual size: 90KB

.reloc Size: 471KB - Virtual size: 471KB

4d8c6888f161a8a1fd6794673582f5c0

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3dCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

2b:3d:a3:a0:3c:fa:07:c1:69:0a:ed:5a:bc:30:bd:de:77:e1:35:98:a2:9e:1e:37:00:e9:ec:35:a0:ad:2c:ebSigner

Headers

DLL Characteristics

File Characteristics

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3d
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

63:4e:57:81:27:46:e8:e6:6e:c3:0c:11:91:61:41:a7:1e:bd:b3:10:5c:18:d1:31:9e:ec:2d:b9:37:8e:b4:cd
Signer

.text
Size: 10.8MB - Virtual size: 10.8MB

.rdata
Size: 5.9MB - Virtual size: 5.9MB

.data
Size: 371KB - Virtual size: 750KB

.rsrc
Size: 91KB - Virtual size: 90KB

.reloc
Size: 471KB - Virtual size: 471KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3d
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

2b:3d:a3:a0:3c:fa:07:c1:69:0a:ed:5a:bc:30:bd:de:77:e1:35:98:a2:9e:1e:37:00:e9:ec:35:a0:ad:2c:eb
Signer

.text
Size: 9.7MB - Virtual size: 9.7MB

.rdata
Size: 5.6MB - Virtual size: 5.6MB

.data
Size: 348KB - Virtual size: 713KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 339KB - Virtual size: 339KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3d
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

d7:fa:4c:f3:57:4a:04:07:af:09:9c:16:f2:75:c8:9c:25:73:b2:b2:cd:85:2d:1f:11:36:df:e2:c2:ab:d5:06
Signer

.text
Size: 9.7MB - Virtual size: 9.7MB

.rdata
Size: 5.6MB - Virtual size: 5.6MB

.data
Size: 348KB - Virtual size: 713KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 339KB - Virtual size: 339KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3d
Certificate