ppsspp_win[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

ppsspp_win.zip
Size

26.6MB
MD5

1d358eac07409cada4f841f8a00793a8
SHA1

2df99b087af786e83ee61582dea2cb3f54ce4c91
SHA256

f8e70feba2bb1b3b1bf284c80460abe8cb4d166e9dab8e0d7fa795a1602b1503
SHA512

3d0c3157a74598417b9a3fb8952a616b31e77dbb46c7fafab3838512b051450d9802f795b4d3bf0e24acacb893115fa1c9b9f8e87a65ba642b35e31cedbd525a
SSDEEP

393216:/zKKgBoM1SUH4wr2Ipw0OFit5Qv8VJSpt55iGGANe73WYyroVXEZMURY+fovZ0PY:L8oM1E0O0t5B05GAgyNoyYKoJ

Score

1^/10

Malware Config

Signatures

Files

ppsspp_win.zip
.zip
PPSSPPWindows.exe
.exe windows:6 windows x86 arch:x86

6b5331034c0fd3cfdd13053c96695d81

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9b:9c:9d:8d:51:ab:00:0f:72:44:21:3c:89:81:07:56
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

11/11/2022, 00:00

Not After

10/11/2025, 23:59

Subject

SERIALNUMBER=556906-5153,CN=Millionth Line AB,O=Millionth Line AB,ST=Stockholms län,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4f:89:95:5c:e8:01:24:2e:3b:1d:8e:cc:33:5a:2b:6f:8f:6c:30:99:0c:4d:f9:44:bc:dd:79:ab:ac:ad:36:39
Signer

Actual PE Digest

4f:89:95:5c:e8:01:24:2e:3b:1d:8e:cc:33:5a:2b:6f:8f:6c:30:99:0c:4d:f9:44:bc:dd:79:ab:ac:ad:36:39

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Temp\BuildTemp\1.17.1_Windows_BUILD\ppsspp\PPSSPPWindows.pdb

Imports

uxtheme

DrawThemeBackground
CloseThemeData
DrawThemeText
OpenThemeData

mfplat

MFCreateAttributes
MFStartup
MFShutdown

shlwapi

ord219

winmm

timeEndPeriod
timeBeginPeriod

dsound

ord11

comctl32

ImageList_Create
InitCommonControlsEx
ImageList_ReplaceIcon

d3d9

Direct3DCreate9

opengl32

glDrawArrays
glViewport
glTexParameteri
glTexImage2D
glScissor
glPixelStorei
glGenTextures
glGetError
glGetIntegerv
wglGetCurrentDC
wglGetProcAddress
wglCreateContext
glClearDepth
glClearStencil
glColorMask
glCullFace
glDepthFunc
glDepthMask
glDepthRange
glFrontFace
glGetFloatv
glGetString
glGetTexLevelParameteriv
glLogicOp
glReadBuffer
glReadPixels
glStencilFunc
glStencilMask
glStencilOp
glTexParameterf
glTexSubImage2D
wglDeleteContext
wglMakeCurrent
glBindTexture
glBlendFunc
glClear
glClearColor
glDeleteTextures
glDisable
glDrawElements
glEnable
glGetTexImage

kernel32

CompareStringOrdinal
GetModuleFileNameW
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
SetThreadPriority
OutputDebugStringA
SetEvent
CreateEventW
GetConsoleWindow
GetCommandLineW
GetTempPathW
IsDebuggerPresent
GlobalUnlock
GlobalLock
LocalFree
SetThreadExecutionState
GetLocaleInfoW
GetCurrentDirectoryW
GetExitCodeProcess
CreateProcessW
GlobalAlloc
GlobalFree
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetCurrentProcessId
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCPInfo
GetStringTypeW
GetFileInformationByHandleEx
GetTickCount64
SetFileInformationByHandle
LCMapStringEx
DecodePointer
EncodePointer
GetLocaleInfoEx
InitializeCriticalSectionEx
InitOnceComplete
InitOnceBeginInitialize
AcquireSRWLockShared
ReleaseSRWLockShared
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetExitCodeThread
WaitForSingleObjectEx
FormatMessageA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
WriteFile
SetEndOfFile
SetFilePointerEx
ReadFile
UnmapViewOfFile
GetLastError
CreateFileMappingW
CreateMutexW
ReleaseMutex
IsWow64Process
GetLogicalProcessorInformation
GetCurrentProcess
GetLogicalDriveStringsW
FindNextFileW
FindFirstFileExW
FindClose
GetSystemTimeAsFileTime
QueryPerformanceFrequency
QueryPerformanceCounter
FormatMessageW
SetConsoleTitleW
SetConsoleWindowInfo
SetConsoleScreenBufferSize
GlobalAddAtomW
SetConsoleCP
SetConsoleCtrlHandler
WriteConsoleW
FreeConsole
AllocConsole
VirtualFree
VirtualProtect
VirtualAlloc
GetSystemInfo
DebugBreak
VerifyVersionInfoW
GetNativeSystemInfo
GetVersionExW
VerSetConditionMask
GetCurrentThreadId
GetCurrentThread
RaiseException
CopyFileW
SetErrorMode
RemoveDirectoryW
GetLongPathNameW
GetFullPathNameW
GetFileAttributesExW
DeleteFileW
CreateFileW
CreateDirectoryW
MultiByteToWideChar
OutputDebugStringW
HeapSize
HeapQueryInformation
FlushFileBuffers
ReadConsoleW
SetStdHandle
ExitProcess
Sleep
GetModuleHandleW
WideCharToMultiByte
LoadLibraryW
GetProcAddress
FreeLibrary
InitializeSListHead
TerminateProcess
RtlUnwind
SetLastError
VirtualQuery
InitializeCriticalSectionAndSpinCount
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
MoveFileExW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
GlobalDeleteAtom
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetTimeZoneInformation
HeapFree
IsValidCodePage
HeapReAlloc
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
HeapAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
ResetEvent
DuplicateHandle
ReleaseSemaphore
CreateEventA
GetModuleHandleA
AreFileApisANSI
FindFirstFileW
WaitNamedPipeW
lstrlenW
GetFileTime
LCMapStringW
IsValidLocale
GetFileAttributesW
SetFileAttributesW
GetTempFileNameW
MulDiv
GetDiskFreeSpaceExW
CreateSemaphoreA
MapViewOfFileEx
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
SleepConditionVariableCS
InitializeConditionVariable
LoadLibraryExW
SetConsoleOutputCP
GetTickCount
GetProcessAffinityMask
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
MapViewOfFile

user32

SetParent
IsDialogMessageW
CreateDialogParamW
BringWindowToTop
SystemParametersInfoW
TrackPopupMenuEx
GetSubMenu
ScreenToClient
SetPropW
RegisterRawInputDevices
GetRawInputData
GetMenuBarInfo
PtInRect
MapVirtualKeyW
SetCursor
GetMenuItemInfoW
RemoveMenu
AppendMenuW
GetMenuItemCount
DrawMenuBar
IsDlgButtonChecked
ClientToScreen
SetMenuDefaultItem
ModifyMenuW
ShowOwnedPopups
TrackMouseEvent
PostMessageW
GetCursorPos
SetMenu
GetMenu
LoadMenuW
EmptyClipboard
CloseClipboard
OpenClipboard
SendMessageA
GetWindowTextLengthW
RedrawWindow
SendDlgItemMessageW
CheckMenuItem
wsprintfW
MapWindowPoints
GetFocus
SetDlgItemTextW
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExW
CallWindowProcW
GetWindowRect
SetCapture
EnableMenuItem
ReleaseCapture
IsWindowVisible
GetMessageExtraInfo
DestroyIcon
LoadIconW
LoadCursorW
GetParent
GetSysColorBrush
GetClientRect
SetScrollRange
InvalidateRect
EndPaint
BeginPaint
UpdateWindow
KillTimer
SetTimer
SetFocus
RegisterClassExW
DefWindowProcW
GetWindowTextA
SetWindowTextA
EnableWindow
MessageBoxW
SetWindowLongW
GetWindowLongW
MessageBoxA
GetWindowTextW
SetWindowTextW
GetDlgItem
EndDialog
DialogBoxParamW
SendMessageW
GetWindowPlacement
IsIconic
GetSystemMetrics
SetMenuInfo
GetWindowDC
ReleaseDC
AdjustWindowRect
ShowCursor
ClipCursor
FillRect
OffsetRect
LoadImageW
SetWindowPos
GetKeyboardLayout
GetMessageW
TranslateMessage
DispatchMessageW
GetClipboardData
LoadAcceleratorsW
TranslateAcceleratorW
EnumDisplaySettingsW
SetClipboardData
RegisterClipboardFormatA
GetAsyncKeyState
PostQuitMessage
DrawIconEx
GetDoubleClickTime
DrawTextExW
GetDC
GetSystemMenu

gdi32

GetTextExtentPoint32W
SetMapMode
GetTextFaceW
CreateDIBSection
GetTextMetricsW
GetDeviceCaps
GetStockObject
SwapBuffers
SetPixelFormat
ChoosePixelFormat
CreateBrushIndirect
SetBkColor
GetBkColor
TextOutW
TextOutA
MoveToEx
SetTextAlign
SetTextColor
SetBkMode
SelectObject
Rectangle
LineTo
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateFontW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
AddFontResourceExW

comdlg32

GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError

shell32

DragQueryFileW
SHGetPathFromIDListW
CommandLineToArgvW
SHOpenFolderAndSelectItems
SHParseDisplayName
DragAcceptFiles
SHBrowseForFolderW
ShellExecuteW
SHGetFolderPathW

ole32

CoInitializeEx
CoUninitialize
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoSetProxyBlanket
CoCreateInstance
PropVariantClear

oleaut32

SysAllocString
SysFreeString
VariantInit

ws2_32

__WSAFDIsSet
accept
bind
closesocket
connect
getpeername
getsockname
htons
listen
getnameinfo
inet_addr
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
WSAGetLastError
htonl
ioctlsocket
inet_ntop
freeaddrinfo
getaddrinfo
WSACleanup
WSAStartup
gethostname
getsockopt
WSAIoctl
WSAAddressToStringW
inet_pton

dinput8

DirectInput8Create

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeA

winhttp

WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpOpen
WinHttpSetStatusCallback
WinHttpCrackUrl
WinHttpCloseHandle
WinHttpConnect
WinHttpReadData
WinHttpWriteData
WinHttpQueryDataAvailable
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest

advapi32

RegSetValueExW
RegCloseKey
CryptAcquireContextA
CryptReleaseContext
RegQueryValueExW
CryptGenRandom
RegCreateKeyExW
RegOpenKeyExW
CryptAcquireContextW
GetSecurityInfo

iphlpapi

GetBestInterfaceEx
GetAdaptersAddresses

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

.text
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 186KB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 469KB - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PPSSPPWindows64.exe
.exe windows:6 windows x64 arch:x64

91dc0ecf4e4489fcfc5e926ef0998b80

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9b:9c:9d:8d:51:ab:00:0f:72:44:21:3c:89:81:07:56
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

11/11/2022, 00:00

Not After

10/11/2025, 23:59

Subject

SERIALNUMBER=556906-5153,CN=Millionth Line AB,O=Millionth Line AB,ST=Stockholms län,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

84:ce:4d:0e:b1:8b:fb:7f:9f:87:d9:14:84:ce:cb:5e:de:a5:10:34:f2:f8:dd:9f:f4:98:da:20:c2:6b:02:5a
Signer

Actual PE Digest

84:ce:4d:0e:b1:8b:fb:7f:9f:87:d9:14:84:ce:cb:5e:de:a5:10:34:f2:f8:dd:9f:f4:98:da:20:c2:6b:02:5a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Temp\BuildTemp\1.17.1_Windows_BUILD\ppsspp\PPSSPPWindows64.pdb

Imports

uxtheme

DrawThemeBackground
CloseThemeData
DrawThemeText
OpenThemeData

mfplat

MFShutdown
MFStartup
MFCreateAttributes

shlwapi

ord219

winmm

timeEndPeriod
timeBeginPeriod

dsound

ord11

comctl32

ImageList_Create
InitCommonControlsEx
ImageList_ReplaceIcon

d3d9

Direct3DCreate9

opengl32

glDrawArrays
glViewport
glTexParameteri
glTexImage2D
glScissor
glPixelStorei
glClearDepth
glClearStencil
glColorMask
glCullFace
glDepthFunc
glGetIntegerv
glDepthRange
glFrontFace
glGetFloatv
glGetTexImage
glGetTexLevelParameteriv
glLogicOp
glReadBuffer
glReadPixels
glStencilFunc
glGetError
glStencilOp
glTexParameterf
glTexSubImage2D
glGenTextures
glDepthMask
glGetString
wglGetCurrentDC
wglGetProcAddress
wglCreateContext
wglDeleteContext
wglMakeCurrent
glBindTexture
glBlendFunc
glClear
glClearColor
glDeleteTextures
glDisable
glDrawElements
glEnable
glStencilMask

kernel32

CompareStringOrdinal
GetModuleFileNameW
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
SetThreadPriority
OutputDebugStringA
SetEvent
CreateEventW
GetConsoleWindow
GetCommandLineW
GetTempPathW
IsDebuggerPresent
GlobalUnlock
GlobalLock
LocalFree
SetThreadExecutionState
GetLocaleInfoW
GetCurrentDirectoryW
GetExitCodeProcess
CreateProcessW
GlobalAlloc
GlobalFree
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
RtlUnwindEx
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
InitializeSListHead
GetCurrentProcessId
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetStringTypeW
GetFileInformationByHandleEx
GetTickCount64
SetFileInformationByHandle
LCMapStringEx
DecodePointer
EncodePointer
GetLocaleInfoEx
InitializeCriticalSectionEx
InitOnceComplete
InitOnceBeginInitialize
AcquireSRWLockShared
ReleaseSRWLockShared
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetExitCodeThread
WaitForSingleObjectEx
FormatMessageA
TlsFree
GetLastError
TlsGetValue
TlsAlloc
WriteFile
SetEndOfFile
SetFilePointerEx
ReadFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateMutexW
ReleaseMutex
GetLogicalProcessorInformation
GetLogicalDriveStringsW
FindNextFileW
FindFirstFileExW
FindClose
GetSystemTimeAsFileTime
QueryPerformanceFrequency
QueryPerformanceCounter
FormatMessageW
SetConsoleTitleW
GlobalAddAtomW
SetConsoleWindowInfo
SetConsoleScreenBufferSize
SetConsoleOutputCP
SetConsoleCP
SetConsoleCtrlHandler
WriteConsoleW
FreeConsole
AllocConsole
VirtualQuery
VirtualFree
VirtualProtect
VirtualAlloc
GetSystemInfo
DebugBreak
VerifyVersionInfoW
GetNativeSystemInfo
GetVersionExW
VerSetConditionMask
GetCurrentThreadId
GetCurrentThread
RaiseException
CopyFileW
SetErrorMode
RemoveDirectoryW
GetLongPathNameW
GetFullPathNameW
GetFileAttributesExW
DeleteFileW
CreateFileW
CreateDirectoryW
MultiByteToWideChar
ExitProcess
Sleep
GetModuleHandleW
WideCharToMultiByte
LoadLibraryW
GetProcAddress
FreeLibrary
SetLastError
RtlUnwind
InitializeCriticalSectionAndSpinCount
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
MoveFileExW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetTimeZoneInformation
HeapFree
GlobalDeleteAtom
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
OutputDebugStringW
HeapSize
HeapQueryInformation
FlushFileBuffers
ReadConsoleW
HeapReAlloc
SetStdHandle
IsValidCodePage
GetACP
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
GetOEMCP
DuplicateHandle
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
AreFileApisANSI
FindFirstFileW
WaitNamedPipeW
lstrlenW
GetFileTime
LCMapStringW
IsValidLocale
GetFileAttributesW
SetFileAttributesW
GetTempFileNameW
MulDiv
GetDiskFreeSpaceExW
MapViewOfFileEx
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
SetEnvironmentVariableW
SleepConditionVariableCS
InitializeConditionVariable
LoadLibraryExW
GetTickCount
GetProcessHeap
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
TlsSetValue
ResetEvent
GetProcessAffinityMask
CreateSemaphoreA
GetModuleHandleA
CreateEventA
ReleaseSemaphore

user32

SetParent
IsDialogMessageW
CreateDialogParamW
BringWindowToTop
SystemParametersInfoW
TrackPopupMenuEx
GetSubMenu
ScreenToClient
SetPropW
RegisterRawInputDevices
GetRawInputData
GetMenuBarInfo
PtInRect
MapVirtualKeyW
SetCursor
GetMenuItemInfoW
RemoveMenu
AppendMenuW
GetMenuItemCount
DrawMenuBar
IsDlgButtonChecked
ClientToScreen
SetMenuDefaultItem
ModifyMenuW
GetDC
ShowOwnedPopups
PostMessageW
GetCursorPos
SetMenu
GetMenu
LoadMenuW
EmptyClipboard
CloseClipboard
OpenClipboard
SendMessageA
GetWindowTextLengthW
RedrawWindow
SendDlgItemMessageW
CheckMenuItem
wsprintfW
MapWindowPoints
GetFocus
SetDlgItemTextW
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExW
CallWindowProcW
GetWindowRect
SetCapture
EnableMenuItem
ReleaseCapture
IsWindowVisible
DrawIconEx
GetMessageExtraInfo
LoadIconW
LoadCursorW
GetParent
SetWindowLongW
GetWindowLongW
GetSysColorBrush
GetClientRect
SetScrollRange
InvalidateRect
EndPaint
BeginPaint
UpdateWindow
KillTimer
SetTimer
SetFocus
RegisterClassExW
DefWindowProcW
GetWindowTextA
SetWindowTextA
EnableWindow
MessageBoxW
SetWindowLongPtrW
GetWindowLongPtrW
MessageBoxA
GetWindowTextW
SetWindowTextW
GetDlgItem
EndDialog
DialogBoxParamW
SendMessageW
GetWindowPlacement
IsIconic
GetSystemMetrics
SetMenuInfo
GetWindowDC
ReleaseDC
AdjustWindowRect
ShowCursor
ClipCursor
FillRect
OffsetRect
LoadImageW
SetWindowPos
GetKeyboardLayout
GetMessageW
TranslateMessage
DispatchMessageW
GetClipboardData
LoadAcceleratorsW
TranslateAcceleratorW
EnumDisplaySettingsW
SetClipboardData
RegisterClipboardFormatA
GetAsyncKeyState
PostQuitMessage
DestroyIcon
GetDoubleClickTime
DrawTextExW
TrackMouseEvent
GetSystemMenu

gdi32

GetTextExtentPoint32W
SetMapMode
GetTextFaceW
CreateDIBSection
GetTextMetricsW
GetDeviceCaps
GetStockObject
SwapBuffers
SetPixelFormat
ChoosePixelFormat
CreateBrushIndirect
SetBkColor
GetBkColor
TextOutW
TextOutA
MoveToEx
SetTextAlign
SetTextColor
SetBkMode
SelectObject
Rectangle
LineTo
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateFontW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
AddFontResourceExW

comdlg32

GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
CommandLineToArgvW
SHOpenFolderAndSelectItems
SHParseDisplayName
DragQueryFileW
SHGetFolderPathW
ShellExecuteW
DragAcceptFiles

ole32

CoInitializeEx
CoUninitialize
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoSetProxyBlanket
CoCreateInstance
PropVariantClear

oleaut32

SysAllocString
SysFreeString
VariantInit

ws2_32

__WSAFDIsSet
accept
bind
closesocket
connect
getpeername
getsockname
htons
listen
getnameinfo
inet_addr
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
WSAGetLastError
htonl
ioctlsocket
inet_ntop
freeaddrinfo
getaddrinfo
WSACleanup
WSAStartup
gethostname
getsockopt
WSAIoctl
WSAAddressToStringW
inet_pton

dinput8

DirectInput8Create

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeA

winhttp

WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpReadData
WinHttpSetStatusCallback
WinHttpCrackUrl
WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
WinHttpWriteData
WinHttpQueryDataAvailable
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest

advapi32

RegSetValueExW
RegCloseKey
CryptAcquireContextA
CryptReleaseContext
RegQueryValueExW
CryptGenRandom
RegCreateKeyExW
RegOpenKeyExW
CryptAcquireContextW
GetSecurityInfo

iphlpapi

GetBestInterfaceEx
GetAdaptersAddresses

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

.text
Size: 11.9MB - Virtual size: 11.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 273KB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 398KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
README.md
assets/7z.png
.png
assets/Roboto-Condensed.ttf
assets/asciifont_atlas.meta
assets/asciifont_atlas.zim
assets/compat.ini
assets/compatvr.ini
assets/debugger/asset-manifest.json
assets/debugger/favicon.ico
assets/debugger/index.html
.html
assets/debugger/manifest.json
assets/debugger/static/css/main.3eab8a01.css
assets/debugger/static/css/main.3eab8a01.css.map
assets/debugger/static/js/main.fe87e942.js
.js
assets/debugger/static/js/main.fe87e942.js.LICENSE.txt
assets/debugger/static/js/main.fe87e942.js.map
assets/debugger/static/media/logo.94f885ce93dfb6d29a122402a15cccca.svg
assets/flash0/font/jpn0.pgf
assets/flash0/font/kr0.pgf
assets/flash0/font/ltn0.pgf
assets/flash0/font/ltn1.pgf
assets/flash0/font/ltn10.pgf
assets/flash0/font/ltn11.pgf
assets/flash0/font/ltn12.pgf
assets/flash0/font/ltn13.pgf
assets/flash0/font/ltn14.pgf
assets/flash0/font/ltn15.pgf
assets/flash0/font/ltn2.pgf
assets/flash0/font/ltn3.pgf
assets/flash0/font/ltn4.pgf
assets/flash0/font/ltn5.pgf
assets/flash0/font/ltn6.pgf
assets/flash0/font/ltn7.pgf
assets/flash0/font/ltn8.pgf
assets/flash0/font/ltn9.pgf
assets/font_atlas.meta
assets/font_atlas.zim
assets/gamecontrollerdb.txt
assets/knownfuncs.ini
assets/lang/README.md
assets/lang/ar_AE.ini
assets/lang/az_AZ.ini
assets/lang/bg_BG.ini
assets/lang/ca_ES.ini
assets/lang/cz_CZ.ini
assets/lang/da_DK.ini
assets/lang/de_DE.ini
assets/lang/dr_ID.ini
assets/lang/en_US.ini
assets/lang/es_ES.ini
assets/lang/es_LA.ini
assets/lang/fa_IR.ini
assets/lang/fi_FI.ini
assets/lang/fr_FR.ini
assets/lang/gl_ES.ini
assets/lang/gr_EL.ini
assets/lang/he_IL.ini
assets/lang/he_IL_invert.ini
assets/lang/hr_HR.ini
assets/lang/hu_HU.ini
assets/lang/id_ID.ini
assets/lang/it_IT.ini
assets/lang/ja_JP.ini
assets/lang/jv_ID.ini
assets/lang/ko_KR.ini
assets/lang/lo_LA.ini
assets/lang/lt-LT.ini
assets/lang/ms_MY.ini
assets/lang/nl_NL.ini
assets/lang/no_NO.ini
assets/lang/pl_PL.ini
assets/lang/pt_BR.ini
assets/lang/pt_PT.ini
assets/lang/ro_RO.ini
assets/lang/ru_RU.ini
assets/lang/sv_SE.ini
assets/lang/tg_PH.ini
assets/lang/th_TH.ini
assets/lang/tr_TR.ini
assets/lang/uk_UA.ini
assets/lang/vi_VN.ini
assets/lang/zh_CN.ini
assets/lang/zh_TW.ini
assets/langregion.ini
assets/mime/ppsspp.xml
.xml
assets/ppge_atlas.meta
assets/ppge_atlas.zim
assets/rargray.png
.png
assets/redump.csv
assets/sfx_achievement_unlocked.wav
assets/sfx_back.wav
assets/sfx_confirm.wav
assets/sfx_leaderbord_submitted.wav
assets/sfx_select.wav
assets/sfx_toggle_off.wav
assets/sfx_toggle_on.wav
assets/shaders/4xhqglsl.fsh
assets/shaders/4xhqglsl.vsh
assets/shaders/5xBR-lv2.fsh
assets/shaders/5xBR.fsh
assets/shaders/5xBR.vsh
assets/shaders/GaussianDownscale.fsh
assets/shaders/aacolor.fsh
assets/shaders/aacolor.vsh
assets/shaders/bloom.fsh
assets/shaders/bloomnoblur.fsh
assets/shaders/cartoon.fsh
assets/shaders/cartoon.vsh
assets/shaders/checkers.fsh
assets/shaders/colorcorrection.fsh
assets/shaders/crt.fsh
assets/shaders/defaultshaders.ini
assets/shaders/fakereflections.fsh
assets/shaders/fxaa.fsh
assets/shaders/fxaa.vsh
assets/shaders/natural.fsh
assets/shaders/natural.vsh
assets/shaders/naturalA.fsh
assets/shaders/naturalA.vsh
assets/shaders/persistence.fsh
assets/shaders/psp_color.fsh
assets/shaders/scanlines.fsh
assets/shaders/sharpen.fsh
assets/shaders/stereo_red_blue.fsh
assets/shaders/stereo_sbs.fsh
assets/shaders/tex_2xbrz.csh
assets/shaders/tex_4xbrz.csh
assets/shaders/tex_mmpx.csh
assets/shaders/upscale_bicubic.fsh
assets/shaders/upscale_bicubic.vsh
assets/shaders/upscale_spline36.fsh
assets/shaders/upscale_spline36.vsh
assets/shaders/videoAA.fsh
assets/shaders/vignette.fsh
assets/themes/defaultthemes.ini
assets/ui_atlas.meta
assets/ui_atlas.zim
assets/unknown.png
.png
assets/vfpu/vfpu_asin_lut65536.dat
assets/vfpu/vfpu_asin_lut_deltas.dat
assets/vfpu/vfpu_asin_lut_indices.dat
assets/vfpu/vfpu_exp2_lut.dat
assets/vfpu/vfpu_exp2_lut65536.dat
assets/vfpu/vfpu_log2_lut.dat
assets/vfpu/vfpu_log2_lut65536.dat
assets/vfpu/vfpu_log2_lut65536_quadratic.dat
assets/vfpu/vfpu_rcp_lut.dat
assets/vfpu/vfpu_rsqrt_lut.dat
assets/vfpu/vfpu_sin_lut8192.dat
assets/vfpu/vfpu_sin_lut_delta.dat
assets/vfpu/vfpu_sin_lut_exceptions.dat
assets/vfpu/vfpu_sin_lut_interval_delta.dat
assets/vfpu/vfpu_sqrt_lut.dat
assets/zip.png
.png
d3dcompiler_47.dll
.dll windows:6 windows x64 arch:x64

2ce80dc262aecd9b9f45ee13d6b30c08

Code Sign

33:00:00:00:34:24:31:40:c9:a0:c1:79:8d:00:00:00:00:00:34
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

27/03/2013, 20:08

Not After

27/06/2014, 20:08

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/01/2013, 22:33

Not After

24/04/2014, 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:16:11:04:b4:88:38:8c:be:c3:00:00:00:00:00:16
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30/08/2012, 17:49

Not After

30/11/2013, 17:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ab:03:c2:89:51:77:ec:8e:32:be:09:f8:2b:0a:85:88:db:5f:d4:2a:86:a6:ad:00:10:29:d8:39:4f:b2:07
Signer

Actual PE Digest

08:ab:03:c2:89:51:77:ec:8e:32:be:09:f8:2b:0a:85:88:db:5f:d4:2a:86:a6:ad:00:10:29:d8:39:4f:b2:07

Digest Algorithm

sha256

PE Digest Matches

true

31:17:9e:ab:c5:82:ed:f0:dc:03:42:34:e2:18:08:28:16:db:fd:78
Signer

Actual PE Digest

31:17:9e:ab:c5:82:ed:f0:dc:03:42:34:e2:18:08:28:16:db:fd:78

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_47.pdb

Imports

msvcrt

__dllonexit
_unlock
_lock
?terminate@@YAXXZ
??1type_info@@UEAA@XZ
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
_strtoui64
sscanf
_isnan
strtoul
_vsnprintf
isxdigit
atof
setlocale
_strdup
_mbstrlen
_vsnwprintf
strnlen
modf
strrchr
strncpy_s
memcpy_s
isalnum
_finite
_clearfp
_controlfp
strcpy_s
malloc
_strnicmp
_fpclass
strncmp
isspace
strstr
strchr
free
sprintf_s
_stricmp
_purecall
memmove
qsort
isalpha
toupper
atoi
isdigit
_onexit
??2@YAPEAX_K@Z
getenv
??3@YAXPEAX@Z
wcsncmp
wcsncpy_s
_wcsicmp
memcpy
memset
fclose
strcat_s
bsearch
_CxxThrowException
memcmp
_snwprintf_s
wcschr
iswdigit
__unDName
fread
fseek
_wfsopen
vsprintf_s
wcstol
_wcsnicmp
_wsplitpath_s
towlower
wcscpy_s
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
swprintf_s
wcsncat_s
wcsrchr
_wfullpath
_wmakepath_s
_time64
_chsize
_close
_read
_write
_lseeki64
_get_osfhandle
_open_osfhandle
_wcsdup
wcscat_s
ftell
_mbscmp
_memicmp
_wgetenv
tolower
_wsopen
__CxxFrameHandler3
acos
asin
atan
atan2
ceil
cos
cosh
exp
floor
floorf
fmod
log
pow
sin
sinh
sqrt
strcmp
tan
tanh

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegOpenKeyExW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW

kernel32

LocalFree
LocalAlloc
GetVersion
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetLastError
CreateFileMappingW
UnmapViewOfFile
GetFileSize
CreateFileA
GetSystemInfo
VirtualAlloc
VirtualFree
GetProcAddress
LoadLibraryExW
GetEnvironmentVariableA
GetFullPathNameA
GetFullPathNameW
TlsFree
TlsGetValue
TlsSetValue
TlsAlloc
Sleep
LCMapStringW
GetFileAttributesW
SetFileAttributesW
CopyFileExW
DeleteFileW
GetFileType
DeviceIoControl
ExpandEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
SetFilePointer
FlushViewOfFile
MapViewOfFileEx
GetModuleFileNameA
MapViewOfFile
DisableThreadLibraryCalls
CreateFileW
GetLastError
GetFileSizeEx
ReadFile
CloseHandle
WriteFile
WideCharToMultiByte
FreeLibrary
lstrcmpiA
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
HeapCreate
HeapDestroy
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetProcessHeap
HeapFree

rpcrt4

UuidCreate

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dcompiler_47.x86.dll
.dll windows:6 windows x86 arch:x86

f63cad154afed6da772d0ab361f448f6

Code Sign

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/09/2012, 21:12

Not After

04/12/2013, 21:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24/01/2013, 22:33

Not After

24/04/2014, 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:16:11:04:b4:88:38:8c:be:c3:00:00:00:00:00:16
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30/08/2012, 17:49

Not After

30/11/2013, 17:49

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ab:69:30:eb:d8:d5:6c:83:dd:de:d2:5c:78:4a:69:da:61:fc:c5:96:29:e5:ab:ad:9d:48:a5:e2:d1:66:17:bb
Signer

Actual PE Digest

ab:69:30:eb:d8:d5:6c:83:dd:de:d2:5c:78:4a:69:da:61:fc:c5:96:29:e5:ab:ad:9d:48:a5:e2:d1:66:17:bb

Digest Algorithm

sha256

PE Digest Matches

true

69:26:3d:60:06:7a:72:dd:e2:38:44:52:38:d1:d7:f8:7e:61:16:0d
Signer

Actual PE Digest

69:26:3d:60:06:7a:72:dd:e2:38:44:52:38:d1:d7:f8:7e:61:16:0d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_47.pdb

Imports

msvcrt

_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_amsg_exit
_XcptFilter
_strtoui64
sscanf
_isnan
_vsnprintf
strtoul
isxdigit
atof
setlocale
_strdup
_mbstrlen
_vsnwprintf
strnlen
ceil
modf
strrchr
strncpy_s
memcpy_s
isalnum
_finite
_clearfp
_controlfp
strcpy_s
malloc
_strnicmp
_fpclass
strncmp
isspace
strstr
strchr
free
sprintf_s
_stricmp
_purecall
memmove
qsort
isalpha
toupper
atoi
_except_handler4_common
tolower
??2@YAPAXI@Z
getenv
??3@YAXPAX@Z
wcsncmp
wcsncpy_s
_wcsicmp
memcpy
memset
fclose
strcat_s
bsearch
_CxxThrowException
_snwprintf_s
wcschr
iswdigit
__unDName
fread
fseek
_wfsopen
vsprintf_s
wcstol
_wcsnicmp
_wsplitpath_s
towlower
wcscpy_s
??_U@YAPAXI@Z
??_V@YAXPAX@Z
swprintf_s
wcsncat_s
wcsrchr
_wmakepath_s
time
_wfullpath
_wcsdup
_wgetenv
_chsize
_close
_read
_write
_lseeki64
_get_osfhandle
_open_osfhandle
wcscat_s
ftell
_mbscmp
_memicmp
isdigit
_wsopen
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
__CxxFrameHandler3
_ftol2
_ftol2_sse
floor

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RegOpenKeyExW
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW

kernel32

SetLastError
LocalFree
LocalAlloc
GetVersion
InterlockedDecrement
InterlockedIncrement
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
GetFileSize
GetSystemInfo
VirtualAlloc
VirtualFree
GetProcAddress
LoadLibraryExW
GetEnvironmentVariableA
GetFullPathNameA
GetFullPathNameW
TlsFree
TlsGetValue
TlsSetValue
TlsAlloc
Sleep
HeapFree
GetFileAttributesW
SetFileAttributesW
CopyFileExW
DeleteFileW
GetFileType
DeviceIoControl
ExpandEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
SetFilePointer
FlushViewOfFile
MapViewOfFileEx
GetModuleFileNameA
CreateFileA
DisableThreadLibraryCalls
CreateFileW
GetLastError
GetFileSizeEx
ReadFile
CloseHandle
WriteFile
WideCharToMultiByte
FreeLibrary
lstrcmpiA
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
HeapCreate
HeapDestroy
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetProcessHeap

rpcrt4

UuidCreate

Exports

Exports

D3DAssemble
D3DCompile
D3DCompile2
D3DCompileFromFile
D3DCompressShaders
D3DCreateBlob
D3DCreateFunctionLinkingGraph
D3DCreateLinker
D3DDecompressShaders
D3DDisassemble
D3DDisassemble10Effect
D3DDisassemble11Trace
D3DDisassembleRegion
D3DGetBlobPart
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DGetTraceInstructionOffsets
D3DLoadModule
D3DPreprocess
D3DReadFileToBlob
D3DReflect
D3DReflectLibrary
D3DReturnFailure1
D3DSetBlobPart
D3DStripShader
D3DWriteBlobToFile
DebugSetMute

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b5331034c0fd3cfdd13053c96695d81

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate

Extended Key Usages

Key Usages

9b:9c:9d:8d:51:ab:00:0f:72:44:21:3c:89:81:07:56Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

4f:89:95:5c:e8:01:24:2e:3b:1d:8e:cc:33:5a:2b:6f:8f:6c:30:99:0c:4d:f9:44:bc:dd:79:ab:ac:ad:36:39Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

uxtheme

mfplat

shlwapi

winmm

dsound

comctl32

d3d9

opengl32

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

ws2_32

dinput8

version

winhttp

advapi32

iphlpapi

Exports

Exports

Sections

.text Size: 9.7MB - Virtual size: 9.7MB

.rdata Size: 2.7MB - Virtual size: 2.7MB

.data Size: 186KB - Virtual size: 3.4MB

.rodata Size: 4KB - Virtual size: 3KB

_RDATA Size: 188KB - Virtual size: 188KB

.rsrc Size: 133KB - Virtual size: 133KB

.reloc Size: 469KB - Virtual size: 468KB

91dc0ecf4e4489fcfc5e926ef0998b80

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate

Extended Key Usages

Key Usages

9b:9c:9d:8d:51:ab:00:0f:72:44:21:3c:89:81:07:56Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

84:ce:4d:0e:b1:8b:fb:7f:9f:87:d9:14:84:ce:cb:5e:de:a5:10:34:f2:f8:dd:9f:f4:98:da:20:c2:6b:02:5aSigner

Headers

DLL Characteristics

File Characteristics

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

9b:9c:9d:8d:51:ab:00:0f:72:44:21:3c:89:81:07:56
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

4f:89:95:5c:e8:01:24:2e:3b:1d:8e:cc:33:5a:2b:6f:8f:6c:30:99:0c:4d:f9:44:bc:dd:79:ab:ac:ad:36:39
Signer

.text
Size: 9.7MB - Virtual size: 9.7MB

.rdata
Size: 2.7MB - Virtual size: 2.7MB

.data
Size: 186KB - Virtual size: 3.4MB

.rodata
Size: 4KB - Virtual size: 3KB

_RDATA
Size: 188KB - Virtual size: 188KB

.rsrc
Size: 133KB - Virtual size: 133KB

.reloc
Size: 469KB - Virtual size: 468KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

9b:9c:9d:8d:51:ab:00:0f:72:44:21:3c:89:81:07:56
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

84:ce:4d:0e:b1:8b:fb:7f:9f:87:d9:14:84:ce:cb:5e:de:a5:10:34:f2:f8:dd:9f:f4:98:da:20:c2:6b:02:5a
Signer

.text
Size: 11.9MB - Virtual size: 11.9MB

.rdata
Size: 3.3MB - Virtual size: 3.3MB

.data
Size: 273KB - Virtual size: 3.5MB

.pdata
Size: 398KB - Virtual size: 398KB

.rodata
Size: 3KB - Virtual size: 3KB

_RDATA
Size: 197KB - Virtual size: 197KB

.rsrc
Size: 133KB - Virtual size: 133KB

.reloc
Size: 87KB - Virtual size: 87KB

33:00:00:00:34:24:31:40:c9:a0:c1:79:8d:00:00:00:00:00:34
Certificate

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

33:00:00:00:16:11:04:b4:88:38:8c:be:c3:00:00:00:00:00:16
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

08:ab:03:c2:89:51:77:ec:8e:32:be:09:f8:2b:0a:85:88:db:5f:d4:2a:86:a6:ad:00:10:29:d8:39:4f:b2:07
Signer

31:17:9e:ab:c5:82:ed:f0:dc:03:42:34:e2:18:08:28:16:db:fd:78
Signer

.text
Size: 3.7MB - Virtual size: 3.7MB

.data
Size: 35KB - Virtual size: 69KB

.pdata
Size: 117KB - Virtual size: 116KB

.idata
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 68KB - Virtual size: 68KB