Boris_FX_Sapphire_Plug-ins_for_Adobe_2021[.]51_x64_Downloadly[.]ir[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

Boris_FX_Sapphire_Plug-ins_for_Adobe_2021.51_x64_Downloadly.ir.rar
Size

292.4MB
MD5

505c3bbb03f13c3038deda65d9020dda
SHA1

7b3460e782138867ccaaffd68376889bdfa02d93
SHA256

73817b690477e34cc4a6c4d85ca92ffc565c17194b58f8b0496502dca398c9c9
SHA512

7889f44666be3f05a4a7ea31de85f59c61d2e73b7004b3617635c6e2ceb2288c7f8a6599a1592b3763175090e016ec32858792b574eb01896734e3b4d40d4dc4
SSDEEP

6291456:DU6qqQCLI8K/0uk3Ei7U0kh+B8eoGjV0OQUAxgJ5PhgwWHLelmoiH:DU60GF31zO3eZRPI89yhH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Boris FX Sapphire Plug-ins for Adobe 2021.51 x64/Crack/sapphire_ae.dll

Files

Boris_FX_Sapphire_Plug-ins_for_Adobe_2021.51_x64_Downloadly.ir.rar
.rar
Boris FX Sapphire Plug-ins for Adobe 2021.51 x64/Crack/GenArts/rlm/bsphr20210627ae.lic
Boris FX Sapphire Plug-ins for Adobe 2021.51 x64/Crack/Readme.txt
Boris FX Sapphire Plug-ins for Adobe 2021.51 x64/Crack/sapphire_ae.dll
.dll windows:6 windows x64 arch:x64

83e880929695c2a3be7d426f358a4abd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

cufft64_10

cufftExecC2C
cufftDestroy
cufftPlan2d

cudart64_101

cudaMemcpy2DToArray
cudaCreateTextureObject
cudaGetLastError
cudaLaunchKernel
__cudaPushCallConfiguration
__cudaPopCallConfiguration
__cudaRegisterFatBinary
__cudaRegisterFatBinaryEnd
__cudaUnregisterFatBinary
__cudaRegisterFunction
cudaMemcpyToSymbol
__cudaRegisterVar
cudaFreeArray
cudaMemcpy
cudaMemset
cudaCreateChannelDesc
cudaDestroyTextureObject
cudaDeviceGetAttribute
cudaDeviceSynchronize
cudaPeekAtLastError
cudaGetErrorString
cudaGetErrorName
cudaGetDevice
cudaFuncGetAttributes
cudaFree
cudaMalloc
cudaMemcpyAsync
cudaOccupancyMaxActiveBlocksPerMultiprocessorWithFlags
cudaStreamSynchronize
cudaMallocArray
cudaMemcpyToArray
cudaBindTextureToArray
cudaUnbindTexture
__cudaRegisterTexture
cudaMallocPitch
cudaGetChannelDesc
cudaGetDeviceCount
cudaRuntimeGetVersion
cudaGetDeviceProperties
cudaDriverGetVersion
cudaGraphicsGLRegisterImage
cudaGraphicsMapResources
cudaGraphicsSubResourceGetMappedArray
cudaMemcpyFromArray
cudaGraphicsUnmapResources
cudaGraphicsUnregisterResource
cudaMemcpy2D
cudaMemset2D
cudaMallocHost
cudaFreeHost

kernel32

FileTimeToSystemTime
GetModuleFileNameW
VerifyVersionInfoW
CreateProcessW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
ConvertThreadToFiber
SetFileAttributesW
SystemTimeToFileTime
SetErrorMode
ReleaseMutex
WaitForSingleObject
FindClose
GetLastError
FindNextFileA
FindFirstFileA
TerminateProcess
OpenProcess
GetCurrentThreadId
LocalFree
CloseHandle
GetExitCodeProcess
GetEnvironmentStrings
Sleep
GetCurrentProcess
LoadLibraryA
FreeLibrary
GetProcAddress
lstrcmpA
MultiByteToWideChar
AreFileApisANSI
WideCharToMultiByte
GetSystemDirectoryW
FreeEnvironmentStringsA
ExpandEnvironmentStringsA
QueryPerformanceFrequency
QueryPerformanceCounter
SetEnvironmentVariableA
FormatMessageW
VerSetConditionMask
FormatMessageA
GetEnvironmentVariableA
GetSystemTimeAsFileTime
UnmapViewOfFile
GetSystemInfo
GetModuleHandleA
GetTickCount
SwitchToThread
OpenFileMappingA
CreateFileMappingA
DuplicateHandle
MapViewOfFileEx
OutputDebugStringA
ReleaseSemaphore
SetProcessAffinityMask
GetProcessAffinityMask
DeleteFileA
RemoveDirectoryA
GetVersionExA
GetCommandLineA
GetSystemDefaultLCID
GetModuleFileNameA
LoadLibraryExA
Beep
CreateSemaphoreA
CreateMutexA
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
GetSystemDirectoryA
MapViewOfFile
lstrlenA
GlobalAlloc
OpenEventA
WaitForMultipleObjects
SetLastError
GetFileAttributesW
LocalAlloc
ReadFile
CreateThread
LoadLibraryW
GlobalMemoryStatus
GetVersionExW
GetVersion
GetFileType
CreateProcessA
GetFullPathNameW
GetVolumeInformationA
CreateDirectoryA
GetStdHandle
CreateEventA
GetFileAttributesExA
GetModuleHandleW
TerminateThread
GetExitCodeThread
GetLocalTime
GetTempPathA
FlushViewOfFile
SetFilePointer
GlobalFree
CreateFileW
FindFirstFileW
FindNextFileW
LoadLibraryExW
GetFileSize
GetCurrentProcessId
ExitThread
GetFileSizeEx
CreateFileA
GetThreadLocale
InitializeCriticalSection
LeaveCriticalSection
GetModuleHandleExA
EnterCriticalSection
GetFileAttributesA
GetFileInformationByHandle
DeviceIoControl
VerifyVersionInfoA
GetSystemTime
DefineDosDeviceA
QueryDosDeviceA
HeapFree
TlsSetValue
HeapAlloc
HeapReAlloc
SearchPathA
ResumeThread
GetComputerNameExW
TlsGetValue
GetProcessHeap
WriteFile
GetComputerNameW
SetThreadPriority
GetProcessTimes
GetEnvironmentVariableW
CreateFiberEx
OpenMutexA
ConvertFiberToThread
OpenSemaphoreA
FlushFileBuffers
GetWindowsDirectoryA
TlsAlloc
GetDriveTypeA
SwitchToFiber
GetLogicalDrives
DeleteFiber

user32

GetWindowTextA
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
GetSystemMetrics
UnhookWindowsHookEx
KillTimer
MessageBoxA
SetTimer
SetWindowsHookExA
GetForegroundWindow
AllowSetForegroundWindow
GetDesktopWindow
CallNextHookEx
SetDlgItemTextA
wsprintfA
ShowWindow
GetDlgItem
PostMessageA
DestroyWindow
EnableWindow

advapi32

GetSecurityInfo
SetSecurityInfo
IsValidAcl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclA
SetNamedSecurityInfoA
FreeSid
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
ConvertSidToStringSidA
OpenProcessToken
GetTokenInformation
RegOpenKeyA
GetUserNameW
AddAccessAllowedAceEx
CreateWellKnownSid
InitializeAcl
DeregisterEventSource
RegisterEventSourceW
RegEnumKeyExA
GetUserNameA
ReportEventW

shell32

SHGetSpecialFolderPathA
SHGetFolderPathA
ShellExecuteA

oleaut32

VariantClear
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SysFreeString

wsock32

getpeername
getsockname
accept
send
getservbyname
gethostbyname
getsockopt
connect
socket
ioctlsocket
setsockopt
bind
recv
WSAGetLastError
listen
WSACleanup
WSAStartup
closesocket
__WSAFDIsSet
select

opencolorio

?apply@Processor@v1@OpenColorIO@@QEBAXAEAVImageDesc@23@@Z
??1PlanarImageDesc@v1@OpenColorIO@@UEAA@XZ
?getProcessor@Config@v1@OpenColorIO@@QEBA?AV?$shared_ptr@$$CBVProcessor@v1@OpenColorIO@@@std@@PEBD0@Z
?isNoOp@Processor@v1@OpenColorIO@@QEBA_NXZ
?getNumColorSpaces@Config@v1@OpenColorIO@@QEBAHXZ
?getColorSpaceNameByIndex@Config@v1@OpenColorIO@@QEBAPEBDH@Z
?CreateFromFile@Config@v1@OpenColorIO@@SA?AV?$shared_ptr@$$CBVConfig@v1@OpenColorIO@@@std@@PEBD@Z
??0PlanarImageDesc@v1@OpenColorIO@@QEAA@PEAM000JJ_J@Z

libmmd

lroundf
frexp
ldexp
log2f
exp2f
fmaxf
fminf
fabs
pow
acosf
asinf
atanf
atan2f
cosf
sinf
tanf
expf
logf
log10f
powf
sqrtf
ceilf
log10
exp
acos
cos
asin
floorf
fmodf
floor
ceil
fmax
__libm_sse2_sincosf
modf
__libm_sse2_sincos
tan
atan
sin
fmod
log
__isinff
__finitef
atan2

iphlpapi

GetAdaptersAddresses

winhttp

WinHttpGetProxyForUrl
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetDefaultProxyConfiguration

ws2_32

recvfrom
gethostname
freeaddrinfo
getaddrinfo
ntohl
shutdown
ioctlsocket
sendto
WSAStringToAddressA
htons

openimageio

?c_str@TypeDesc@OpenImageIO_v1_8@@QEBAPEBDXZ
??1ImageSpec@OpenImageIO_v1_8@@QEAA@XZ
?basesize@TypeDesc@OpenImageIO_v1_8@@QEBA_KXZ
??0ImageSpec@OpenImageIO_v1_8@@QEAA@UTypeDesc@1@@Z
?create@ImageInput@OpenImageIO_v1_8@@SAPEAV12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?destroy@ImageInput@OpenImageIO_v1_8@@SAXPEAV12@@Z
?get_float_attribute@ImageSpec@OpenImageIO_v1_8@@QEBAMVstring_view@2@M@Z
?fromstring@TypeDesc@OpenImageIO_v1_8@@QEAA_KVstring_view@2@@Z
?geterror@OpenImageIO_v1_8@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

msvcp140

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?do_narrow@?$ctype@D@std@@MEBADDD@Z
?do_narrow@?$ctype@D@std@@MEBAPEBDPEBD0DPEAD@Z
?do_widen@?$ctype@D@std@@MEBADD@Z
?do_widen@?$ctype@D@std@@MEBAPEBDPEBD0PEAD@Z
?do_toupper@?$ctype@D@std@@MEBADD@Z
?do_toupper@?$ctype@D@std@@MEBAPEBDPEADPEBD@Z
?do_tolower@?$ctype@D@std@@MEBADD@Z
?do_tolower@?$ctype@D@std@@MEBAPEBDPEADPEBD@Z
?do_narrow@?$ctype@_W@std@@MEBAD_WD@Z
?do_narrow@?$ctype@_W@std@@MEBAPEB_WPEB_W0DPEAD@Z
?do_widen@?$ctype@_W@std@@MEBA_WD@Z
?do_widen@?$ctype@_W@std@@MEBAPEBDPEBD0PEA_W@Z
?do_toupper@?$ctype@_W@std@@MEBA_W_W@Z
?do_toupper@?$ctype@_W@std@@MEBAPEB_WPEA_WPEB_W@Z
?do_tolower@?$ctype@_W@std@@MEBA_W_W@Z
?do_tolower@?$ctype@_W@std@@MEBAPEB_WPEA_WPEB_W@Z
?do_scan_not@?$ctype@_W@std@@MEBAPEB_WFPEB_W0@Z
?do_scan_is@?$ctype@_W@std@@MEBAPEB_WFPEB_W0@Z
?do_is@?$ctype@_W@std@@MEBA_NF_W@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?do_is@?$ctype@_W@std@@MEBAPEB_WPEB_W0PEAF@Z
?do_length@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1_K@Z
?do_unshift@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?do_out@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?do_in@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?do_encoding@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHXZ
?do_max_length@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHXZ
?do_always_noconv@?$codecvt@_WDU_Mbstatet@@@std@@MEBA_NXZ
?do_length@?$codecvt@DDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1_K@Z
?do_unshift@?$codecvt@DDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?do_out@?$codecvt@DDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?do_in@?$codecvt@DDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?do_encoding@codecvt_base@std@@MEBAHXZ
?do_max_length@codecvt_base@std@@MEBAHXZ
?do_always_noconv@?$codecvt@DDU_Mbstatet@@@std@@MEBA_NXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??Bid@locale@std@@QEAA_KXZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_message@std@@YAKKPEADK@Z
?_Winerror_map@std@@YAHH@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
_Getctype
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??_7?$codecvt@_WDU_Mbstatet@@@std@@6B@
??_7?$ctype@_W@std@@6B@
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
??_7_Facet_base@std@@6B@
??_7?$ctype@D@std@@6B@
?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z
??_7ios_base@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
?uncaught_exception@std@@YA_NXZ
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
_Getcvt
?_Xbad_alloc@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@6B@
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@N@Z
??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?_Locinfo_dtor@_Locinfo@std@@SAXPEAV12@@Z
?_Locinfo_ctor@_Locinfo@std@@SAXPEAV12@PEBD@Z
??1_Lockit@std@@QEAA@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@

vcruntime140

memcmp
__intrinsic_setjmp
__std_type_info_destroy_list
strrchr
wcsstr
wcsrchr
strchr
memset
__C_specific_handler
wcschr
memchr
longjmp
strstr
memcpy
__std_exception_destroy
__std_exception_copy
memmove
__std_terminate
_CxxThrowException
__CxxFrameHandler3
_purecall

api-ms-win-crt-utility-l1-1-0

abs
rand_s
qsort
rand
srand

api-ms-win-crt-math-l1-1-0

_fdtest
_copysign

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_endthreadex
_initialize_narrow_environment
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
strerror
system
_register_onexit_function
exit
_execute_onexit_table
_crt_atexit
_cexit
_errno
_initterm
_initterm_e
abort
_seh_filter_dll
_beginthreadex
terminate
perror
_getpid
_invalid_parameter_noinfo

api-ms-win-crt-string-l1-1-0

_wcsupr
toupper
strncat
isalnum
strncmp
strcmp
strcat
strcpy
strspn
strtok
isprint
strncat_s
strtok_s
wcstok_s
_strdup
strncpy
towlower
_stricmp
strncpy_s
strcpy_s
_wcsicmp
wcsncpy_s
wcsncat_s
wcscat_s
wcscspn
strcat_s
_wcsnicmp
iswctype
towupper
wcscpy_s
isupper
ispunct
wcslen
islower
isgraph
iscntrl
strlen
isspace
isxdigit
strcoll
isalpha
isdigit
tolower
strpbrk

api-ms-win-crt-stdio-l1-1-0

fputwc
ungetc
__stdio_common_vswprintf_s
_lseek
fread
fwrite
fputc
_read
fgetwc
__stdio_common_vswprintf
fopen
fgetc
putc
rewind
fseek
_fseeki64
ftell
__stdio_common_vsprintf
fopen_s
__stdio_common_vsnwprintf_s
fsetpos
feof
fputs
__stdio_common_vsprintf_s
__stdio_common_vswscanf
__acrt_iob_func
_wopen
ferror
__stdio_common_vsscanf
freopen
__stdio_common_vfprintf
getc
tmpnam
_popen
_pclose
_wfopen
_getcwd
_ftelli64
_mktemp
_chsize
_locking
_open
fflush
setvbuf
_setmode
tmpfile
fgets
ungetwc
clearerr
fgetpos
fclose
_close
_write
_fileno
_get_stream_buffer_pointers

api-ms-win-crt-heap-l1-1-0

_aligned_malloc
_aligned_free
_callnewh
malloc
free
realloc

api-ms-win-crt-time-l1-1-0

_mktime32
_gmtime64
_ctime64_s
_ftime64
asctime
_localtime64
_time64
_ctime64
strftime
_mktime64
_difftime64
clock

api-ms-win-crt-convert-l1-1-0

mbstowcs_s
atoi
wcstombs
mbstowcs
strtod
_ltow_s
wcstombs_s
strtol
atol
mbtowc

api-ms-win-crt-filesystem-l1-1-0

_stat64i32
_wfindnext64
_chdir
_wstat64i32
_unlink
_mkdir
_fstat64i32
_chmod
_findclose
_fullpath
_unlock_file
_splitpath_s
_wrmdir
_wremove
rename
_lock_file
_wrename
_wunlink
_wmkdir
_wstat32
_fstat32
remove
_wfindfirst64

api-ms-win-crt-process-l1-1-0

_spawnle

api-ms-win-crt-environment-l1-1-0

getenv
_wgetenv_s
_dupenv_s
_putenv
_wgetenv

api-ms-win-crt-locale-l1-1-0

setlocale
localeconv

api-ms-win-crt-multibyte-l1-1-0

_mbsupr_s

ole32

CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoSetProxyBlanket
CoCreateInstance

Exports

Exports

??0SapphireAbortException@@QEAA@AEBV0@@Z
??0SapphireAbortException@@QEAA@HPEBDHH@Z
??0SapphireParam@@QEAA@AEBV0@@Z
??0SapphireParam@@QEAA@PEBDW4param_type@@EMMMMMQEAMW4screen_mode@@H@Z
??0SapphireParam@@QEAA@PEBDW4param_type@@EMMMQEAMH@Z
??0SapphireParam@@QEAA@W4param_type@@PEBD@Z
??0SapphireParam@@QEAA@XZ
??0ShmemManager@IPC@Sapphire@@QEAA@AEBV012@@Z
??0ShmemManager@IPC@Sapphire@@QEAA@XZ
??0ShmemTransport@IPC@Sapphire@@QEAA@$$QEAV012@@Z
??0ShmemTransport@IPC@Sapphire@@QEAA@QEAXAEAVCircularQueueIndices@12@AEAVinterprocess_mutex@interprocess@boost@@AEAVinterprocess_condition@56@23012323PEAVShmemHeader@12@@Z
??1SapphireAbortException@@QEAA@XZ
??1SapphireParam@@UEAA@XZ
??1ShmemManager@IPC@Sapphire@@QEAA@XZ
??4MemoryCheck@@QEAAAEAV0@$$QEAV0@@Z
??4MemoryCheck@@QEAAAEAV0@AEBV0@@Z
??4SapphireAbortException@@QEAAAEAV0@AEBV0@@Z
??4SapphireParam@@QEAAAEAV0@AEBV0@@Z
??4ShmemManager@IPC@Sapphire@@QEAAAEAV012@AEBV012@@Z
??_7SapphireParam@@6B@
??_FSapphireAbortException@@QEAAXXZ
??_UMemoryCheck@@CAPEAX_K@Z
??_VMemoryCheck@@CAXPEAX@Z
??_VSapphireParam@@CAXPEAX@Z
?clamp_values@SapphireParam@@QEAAXPEAURenderContext@@@Z
?clear@SapphireParam@@AEAAXXZ
?client_pid_exists@ShmemTransport@IPC@Sapphire@@QEAA_NXZ
?clone@SapphireParam@@QEAAPEAV1@XZ
?clone_host_properties@SapphireParam@@UEAAXPEBV1@@Z
?clone_impl@SapphireParam@@MEAAPEAV1@XZ
?commit@ShmemTransport@IPC@Sapphire@@QEAA_NXZ
?connect@ShmemManager@IPC@Sapphire@@SAPEAVShmemTransport@23@QEBD@Z
?connect_impl@ShmemManager@IPC@Sapphire@@IEAAPEAVShmemTransport@23@QEBD_N_K2@Z
?create_shmem@ShmemManager@IPC@Sapphire@@IEAAPEAVwindows_shared_memory@interprocess@boost@@QEBD_N_K2@Z
?create_transport@ShmemManager@IPC@Sapphire@@IEAAPEAVShmemTransport@23@PEAVmapped_region@interprocess@boost@@_N@Z
?destroy_mapped_region@ShmemManager@IPC@Sapphire@@IEAA_NPEAVmapped_region@interprocess@boost@@_N@Z
?destroy_shmem_obj@ShmemManager@IPC@Sapphire@@IEAAXPEAVwindows_shared_memory@interprocess@boost@@_N11@Z
?format@SapphireParam@@UEAA?AW4const_format_tag@@XZ
?get_abort_type@SapphireAbortException@@QEAAHXZ
?get_canonical_name@SapphireParam@@QEAAPEBDXZ
?get_error_code@SapphireAbortException@@QEAAHXZ
?get_fast@ShmemTransport@IPC@Sapphire@@QEAA_NXZ
?get_last_error@ShmemTransport@IPC@Sapphire@@QEAA?AW4ShmemError@23@XZ
?get_ocio_path@Sapphire@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?get_server_pid@ShmemTransport@IPC@Sapphire@@QEAAHXZ
?get_value@SapphireParam@@QEAAMHPEAURenderContext@@@Z
?get_value_from_buttons@SapphireParam@@MEAA_NPEAURenderContext@@@Z
?get_value_nosync@SapphireParam@@QEAAMH@Z
?get_value_object@SapphireParam@@QEAAPEAXPEAURenderContext@@@Z
?get_value_object_nosync@SapphireParam@@UEAAPEAXXZ
?init@SapphireParam@@AEAAXPEBDW4param_type@@EMMMMMQEAMW4screen_mode@@H@Z
?init@SapphireParam@@AEAAXXZ
?instance@ShmemManager@IPC@Sapphire@@1PEAV123@EA
?is_segment_valid@ShmemTransport@IPC@Sapphire@@QEAA_NXZ
?maybe_set_to_old_default@SapphireParam@@UEAA_NPEAURenderContext@@MI@Z
?needs_old_default@SapphireParam@@QEAA_NM@Z
?notify_reader@ShmemTransport@IPC@Sapphire@@IEAAXXZ
?notify_writer@ShmemTransport@IPC@Sapphire@@IEAAXXZ
?numeric_p@SapphireParam@@UEAA_NXZ
?print_stats@ShmemTransport@IPC@Sapphire@@QEAAXXZ
?ptype_name@SapphireParam@@QEBAPEBDXZ
?read@ShmemTransport@IPC@Sapphire@@QEAA_KPEAPEAXPEAPEAUMessageHeader_t@23@@Z
?read_and_retry@ShmemTransport@IPC@Sapphire@@QEAA_KPEAPEAXMPEAPEAUMessageHeader_t@23@@Z
?release@SapphireParam@@QEAA_NXZ
?remove@ShmemTransport@IPC@Sapphire@@QEAA_NXZ
?reserve@ShmemTransport@IPC@Sapphire@@QEAAPEAX_KQEBD@Z
?reset@ShmemManager@IPC@Sapphire@@SAXQEBD_N@Z
?reset_all@ShmemManager@IPC@Sapphire@@SAX_N@Z
?reset_all_impl@ShmemManager@IPC@Sapphire@@IEAAX_N@Z
?reset_impl@ShmemManager@IPC@Sapphire@@IEAAXQEBD_N@Z
?retain@SapphireParam@@QEAAXXZ
?serve@ShmemManager@IPC@Sapphire@@SAPEAVShmemTransport@23@QEBD_K1@Z
?set_canonical_name@SapphireParam@@QEAAXPEBD@Z
?set_fast@ShmemTransport@IPC@Sapphire@@QEAAX_N@Z
?set_to_default@SapphireParam@@UEAA_NPEAURenderContext@@I@Z
?set_value@SapphireParam@@UEAAHPEAURenderContext@@HMI@Z
?set_value_from_json@SapphireParam@@UEAAHPEAURenderContext@@PEAUcJSON@@I@Z
?set_value_from_string@SapphireParam@@UEAAHPEAURenderContext@@PEBDI@Z
?set_values@SapphireParam@@UEAAHPEAURenderContext@@HHQEAMI@Z
?shmem_error_to_string@IPC@Sapphire@@YAPEBDW4ShmemError@12@@Z
?timed_read@ShmemTransport@IPC@Sapphire@@QEAA_KPEAPEAXMPEAPEAUMessageHeader_t@23@@Z
?timed_reserve@ShmemTransport@IPC@Sapphire@@QEAAPEAX_KMQEBD@Z
?timed_write@ShmemTransport@IPC@Sapphire@@QEAA_NQEBX_KMQEBD@Z
?timed_write_string@ShmemTransport@IPC@Sapphire@@QEAA_NQEBDM0@Z
?to_json@SapphireParam@@UEAAPEAUcJSON@@PEAURenderContext@@_N@Z
?to_string@SapphireParam@@UEAAPEADPEAURenderContext@@_N@Z
?to_string_const@SapphireParam@@QEAAPEBDPEAURenderContext@@_N@Z
?try_read@ShmemTransport@IPC@Sapphire@@QEAA_KPEAPEAXPEAPEAUMessageHeader_t@23@@Z
?try_reserve@ShmemTransport@IPC@Sapphire@@QEAAPEAX_KQEBD@Z
?try_write@ShmemTransport@IPC@Sapphire@@QEAA_NQEBX_KQEBD@Z
?try_write_string@ShmemTransport@IPC@Sapphire@@QEAA_NQEBD0@Z
?update@SapphireParam@@QEAAXPEAURenderContext@@@Z
?update_ui@SapphireParam@@UEAAXPEAURenderContext@@@Z
?valid_with_inputs@SapphireParam@@QEAA_NI_N@Z
?write@ShmemTransport@IPC@Sapphire@@QEAA_NQEBX_KQEBD@Z
?write_string@ShmemTransport@IPC@Sapphire@@QEAA_NQEBD0@Z
S_set_err_handler
Sapphire_version_name
Sapphire_version_num
free_sapphire_custom_genotype_infos
free_sapphire_effect
free_sapphire_ipc_shmemtransport
generate_all_sapphire_effect_params
get_bfx_api_name
get_bfx_lic_version
get_bfx_productline_feature
get_bfx_productline_name
get_n_sapphire_builder_effects
get_n_sapphire_effects
get_sapphire_build_id
get_sapphire_builder_info_i
get_sapphire_config_dir
get_sapphire_custom_genotype_info_n
get_sapphire_plugin_info_i
get_sapphire_version_info
init_sapphire_effect
init_sapphire_effect_from_string
make_sapphire_raster_info
maybe_get_sapphire_custom_genotype_infos
render_sapphire_effect_to_native_image
render_sapphire_lensflare_to_native_image
replace_sapphire_with_productline
sapphire_abort_render
sapphire_any_nodes_get_flag
sapphire_clear_abort
sapphire_comp_bgra_8
sapphire_convert_to_bgra_8
sapphire_effect_is_time_varying
sapphire_find_pinfo_for_effect
sapphire_free_all_flare_textures
sapphire_free_all_stamp_collections
sapphire_free_check_fun
sapphire_get_flare_texture_error
sapphire_get_fromfile_popup_names
sapphire_get_gpu_status
sapphire_get_native_image_dims
sapphire_get_param_bounds2
sapphire_get_param_title
sapphire_get_resized_image_size
sapphire_get_texture_info
sapphire_get_texture_pixels
sapphire_gpu
sapphire_load_flare_texture
sapphire_main
sapphire_malloc_copy_string_func
sapphire_register_flare_texture
sapphire_resize_native_image
sapphire_shutdown_apps
sapphire_version
set_bfx_api_name
set_bfx_lic_version
set_bfx_productline_feature
set_bfx_productline_name
set_sapphire_luts
version_warning_printed

Sections

.text
Size: 22.2MB - Virtual size: 22.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 702KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 457KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nv_fatb
Size: 26.7MB - Virtual size: 26.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nvFatBi
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Boris FX Sapphire Plug-ins for Adobe 2021.51 x64/sapphire-ae-install-2021.51_Downloadly.ir.exe
.exe windows:1 windows x86 arch:x86

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:ac:23:65:af:0f:03:15:0f:9b:52:71:e3:56:6a:2b
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

03/12/2020, 00:00

Not After

11/01/2022, 23:59

Subject

CN=Artel Software Inc,O=Artel Software Inc,L=Boston,ST=Massachusetts,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

55:80:a7:43:21:02:b6:17:e2:ce:6c:dd:19:ef:23:04:ac:3e:68:41:8f:63:06:de:45:d3:53:ea:5b:84:fd:1c
Signer

Actual PE Digest

55:80:a7:43:21:02:b6:17:e2:ce:6c:dd:19:ef:23:04:ac:3e:68:41:8f:63:06:de:45:d3:53:ea:5b:84:fd:1c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83e880929695c2a3be7d426f358a4abd

Headers

DLL Characteristics

File Characteristics

Imports

cufft64_10

cudart64_101

kernel32

user32

advapi32

shell32

oleaut32

wsock32

opencolorio

libmmd

iphlpapi

winhttp

ws2_32

openimageio

msvcp140

vcruntime140

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-process-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

ole32

Exports

Exports

Sections

.text Size: 22.2MB - Virtual size: 22.2MB

.rdata Size: 5.9MB - Virtual size: 5.9MB

.data Size: 702KB - Virtual size: 1.6MB

.pdata Size: 457KB - Virtual size: 457KB

.nv_fatb Size: 26.7MB - Virtual size: 26.7MB

.nvFatBi Size: 1024B - Virtual size: 672B

.data1 Size: 98KB - Virtual size: 97KB

_RDATA Size: 4KB - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 109KB - Virtual size: 108KB

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

06:ac:23:65:af:0f:03:15:0f:9b:52:71:e3:56:6a:2bCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

55:80:a7:43:21:02:b6:17:e2:ce:6c:dd:19:ef:23:04:ac:3e:68:41:8f:63:06:de:45:d3:53:ea:5b:84:fd:1cSigner

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 40KB - Virtual size: 40KB

DATA Size: 1024B - Virtual size: 592B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 15KB - Virtual size: 14KB

.text
Size: 22.2MB - Virtual size: 22.2MB

.rdata
Size: 5.9MB - Virtual size: 5.9MB

.data
Size: 702KB - Virtual size: 1.6MB

.pdata
Size: 457KB - Virtual size: 457KB

.nv_fatb
Size: 26.7MB - Virtual size: 26.7MB

.nvFatBi
Size: 1024B - Virtual size: 672B

.data1
Size: 98KB - Virtual size: 97KB

_RDATA
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 109KB - Virtual size: 108KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

06:ac:23:65:af:0f:03:15:0f:9b:52:71:e3:56:6a:2b
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

55:80:a7:43:21:02:b6:17:e2:ce:6c:dd:19:ef:23:04:ac:3e:68:41:8f:63:06:de:45:d3:53:ea:5b:84:fd:1c
Signer

CODE
Size: 40KB - Virtual size: 40KB

DATA
Size: 1024B - Virtual size: 592B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 15KB - Virtual size: 14KB