AlphaWolf Latest -organized[.]7z

Sharing

Copy URL

Twitter E-mail

General

Target

AlphaWolf Latest -organized.7z
Size

463.2MB
MD5

58bf89a3b4e59a08ebc9eb2cff2a8c25
SHA1

7e44785ac768d9224baaff7723c87ab668b24c32
SHA256

4c5012ea391013c0e3ba88aef642024da497954f346a3b63c243892e33a02df0
SHA512

b1c809f31bd416bcad4b5b877b7f00e483a7457c3f637d1ed321ef8439284ed92f196c8e9e2b35a423922f3cae1f2193556cc3bdbbcc6480dc8f19927e6263c7
SSDEEP

12582912:MA6yN/cCezHz2YKsk0IbUCinp2qVR+SjXLN0Qy33vXTnr+L1:L6yRcCezHzjknYbnpBRpjXh0V3vDnr+J

Score

10^/10

Malware Config

Signatures

Nirsoft 1 IoCs

resource	yara_rule
static1/unpack001/AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DevManView.exe	Nirsoft

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Rw.exe

Files

AlphaWolf Latest -organized.7z
.7z
AlphaWolf Latest -organized/0 Delay/ACPILatency.bat
AlphaWolf Latest -organized/0 Delay/AudioEnhancements.bat
AlphaWolf Latest -organized/0 Delay/DecreaseDelay.bat
AlphaWolf Latest -organized/0 Delay/Direct3DDebug.bat
AlphaWolf Latest -organized/0 Delay/EmulateStateBlocks.bat
AlphaWolf Latest -organized/0 Delay/IOSmoothing.bat
AlphaWolf Latest -organized/0 Delay/IoLatency.bat
AlphaWolf Latest -organized/0 Delay/LatencyDPC.bat
AlphaWolf Latest -organized/0 Delay/NomoreDelayandTimeouts.reg
AlphaWolf Latest -organized/0 Delay/NvidiaSilkSmoothness.bat
AlphaWolf Latest -organized/0 Delay/interrupt_affinity_auto.ps1
.ps1
AlphaWolf Latest -organized/AdvancedCleanUP/AdvCleanup.bat
.bat .vbs
AlphaWolf Latest -organized/Audio/AudioLatency.bat
AlphaWolf Latest -organized/FortnitePerf/FortnitePagePriority.bat
AlphaWolf Latest -organized/FortnitePerf/FortniteTCPIP.bat
.bat .ps1
AlphaWolf Latest -organized/FortnitePerf/FortniteTCPIP.reg
AlphaWolf Latest -organized/FortnitePerf/FortniteTCPIPFlow.bat
.bat .ps1
AlphaWolf Latest -organized/FortnitePerf/FortniteTCPIPFlow.reg
AlphaWolf Latest -organized/FortnitePerf/FortniteThreads.bat
AlphaWolf Latest -organized/FortnitePerf/fortniteDSCP.bat
AlphaWolf Latest -organized/FortnitePerf/fortniteGpuHigh.bat
AlphaWolf Latest -organized/FortnitePerf/fortniteGpuNormal.bat
AlphaWolf Latest -organized/FortnitePerf/fortniteIO.bat
AlphaWolf Latest -organized/FortnitePerf/fortniteLargerPages.bat
AlphaWolf Latest -organized/FortnitePerf/fortniteMAXCONNECTIONSPERSERVER.bat
AlphaWolf Latest -organized/FortnitePerf/fortnitePriorityAboveNormal.bat
AlphaWolf Latest -organized/FortnitePerf/fortnitePriorityHigh.bat
AlphaWolf Latest -organized/FortnitePerf/fortnitePriorityLow.bat
AlphaWolf Latest -organized/FortnitePerf/fortnitePriorityNormal.bat
AlphaWolf Latest -organized/FortnitePerf/fortnitefso.bat
AlphaWolf Latest -organized/Graphics Card/AMD/AMDDX9.bat
AlphaWolf Latest -organized/Graphics Card/AMD/AMDPowerGating.bat
AlphaWolf Latest -organized/Graphics Card/AMD/AMDTessellation.reg
AlphaWolf Latest -organized/Graphics Card/AMD/AmdClockGating.bat
AlphaWolf Latest -organized/Graphics Card/AMD/AmdLatency.bat
AlphaWolf Latest -organized/Graphics Card/AMD/AmdThermalThrottling.bat
AlphaWolf Latest -organized/Graphics Card/AMD/AntiAliasing.bat
AlphaWolf Latest -organized/Graphics Card/AMD/DisableULPS.bat
AlphaWolf Latest -organized/Graphics Card/AMD/EnableDeLag.bat
AlphaWolf Latest -organized/Graphics Card/Nvidia/DisableNVIDIAHDCP.ps1
.ps1
AlphaWolf Latest -organized/Graphics Card/Nvidia/NvidiaPerformance.bat
AlphaWolf Latest -organized/Graphics Card/Nvidia/NvidiaPowerGating.reg
AlphaWolf Latest -organized/Graphics Card/Nvidia/NvidiaTelementry.bat
AlphaWolf Latest -organized/Graphics Card/Nvidia/NvidiaVideoMemory.bat
AlphaWolf Latest -organized/Graphics Card/Nvidia/OptimizeNvidiaControlPanelSettings.ps1
.ps1
AlphaWolf Latest -organized/Graphics Card/Nvidia/Preemption.bat
AlphaWolf Latest -organized/Memory aka ram/DmaRemappingCompatible.bat
AlphaWolf Latest -organized/Memory aka ram/KernelDebugPollInterval.bat
AlphaWolf Latest -organized/Memory aka ram/LargePageDrivers.bat
.bat .vbs
AlphaWolf Latest -organized/Memory aka ram/MemoryCompression.bat
AlphaWolf Latest -organized/Memory aka ram/MemoryManagement.bat
AlphaWolf Latest -organized/Memory aka ram/MemoryPressureProtection.bat
AlphaWolf Latest -organized/Memory aka ram/Mitigations.bat
AlphaWolf Latest -organized/Memory aka ram/OptimizeIOoperations.ps1
.ps1
AlphaWolf Latest -organized/Memory aka ram/PageCombining.bat
AlphaWolf Latest -organized/Memory aka ram/PoolUsageMaximum.bat
AlphaWolf Latest -organized/Memory aka ram/ReserveManager.bat
AlphaWolf Latest -organized/Memory aka ram/Tickduration.bat
AlphaWolf Latest -organized/Network/APB_Log.txt
AlphaWolf Latest -organized/Network/AutotuningNormal.bat
AlphaWolf Latest -organized/Network/BranchCache.bat
AlphaWolf Latest -organized/Network/Checksums.ps1
AlphaWolf Latest -organized/Network/Chimney.ps1
AlphaWolf Latest -organized/Network/Congestion!!/FOR ALREADY STABLE CONNECTION WITH NO PACKET LOSS CAN CAUSE BUFFERBLOAT .bat
AlphaWolf Latest -organized/Network/Congestion!!/FOR GAMING!.bat
AlphaWolf Latest -organized/Network/DnsCache.bat
AlphaWolf Latest -organized/Network/DnsClient.bat
AlphaWolf Latest -organized/Network/Ethernet.ps1
.ps1
AlphaWolf Latest -organized/Network/ExtremeTCIPtweaks.reg
AlphaWolf Latest -organized/Network/FlowPower.bat
AlphaWolf Latest -organized/Network/HostResPriority.bat
AlphaWolf Latest -organized/Network/ICPM.bat
AlphaWolf Latest -organized/Network/IPv6teredo.bat
AlphaWolf Latest -organized/Network/InternetSettings.bat
AlphaWolf Latest -organized/Network/InternetSettings.reg
AlphaWolf Latest -organized/Network/LanmanServer.bat
AlphaWolf Latest -organized/Network/LargeSendOffload.ps1
AlphaWolf Latest -organized/Network/NaglesAlgorithm.bat
AlphaWolf Latest -organized/Network/NetBios.bat
AlphaWolf Latest -organized/Network/NetCache.bat
AlphaWolf Latest -organized/Network/Netsh.ps1
AlphaWolf Latest -organized/Network/PacketCoalescingFilterDisabled.bat
AlphaWolf Latest -organized/Network/Pshed.bat
AlphaWolf Latest -organized/Network/QosSettings.bat
AlphaWolf Latest -organized/Network/RSC.bat
AlphaWolf Latest -organized/Network/TCP1323.bat
AlphaWolf Latest -organized/Network/heuristics.bat
AlphaWolf Latest -organized/Network/uselessnetwork.bat
AlphaWolf Latest -organized/Perf/Performance 1/ASLR.bat
AlphaWolf Latest -organized/Perf/Performance 1/AlphaWolfGameMode.bat
.bat .vbs
AlphaWolf Latest -organized/Perf/Performance 1/BackgroundMemory.bat
AlphaWolf Latest -organized/Perf/Performance 1/Browsermem.bat
.bat .vbs
AlphaWolf Latest -organized/Perf/Performance 1/DesktopResponsiveness.bat
AlphaWolf Latest -organized/Perf/Performance 1/DisableIPv6.bat
.bat .vbs
AlphaWolf Latest -organized/Perf/Performance 1/FSO.bat
AlphaWolf Latest -organized/Perf/Performance 1/Flow.bat
AlphaWolf Latest -organized/Perf/Performance 1/ForegroundTweaks.bat
AlphaWolf Latest -organized/Perf/Performance 1/GameBar.bat
AlphaWolf Latest -organized/Perf/Performance 1/GameMode.bat
AlphaWolf Latest -organized/Perf/Performance 1/HPET.bat
AlphaWolf Latest -organized/Perf/Performance 1/IORequestPacket.bat
AlphaWolf Latest -organized/Perf/Performance 1/IRQ's.bat
AlphaWolf Latest -organized/Perf/Performance 1/InputTelementry.bat
AlphaWolf Latest -organized/Perf/Performance 1/MMCSSEnabled.bat
AlphaWolf Latest -organized/Perf/Performance 1/MaxDiskReadspeed.bat
AlphaWolf Latest -organized/Perf/Performance 1/MaxLoaderThreads.bat
AlphaWolf Latest -organized/Perf/Performance 1/MaxPerf.bat
AlphaWolf Latest -organized/Perf/Performance 1/Notifications.bat
AlphaWolf Latest -organized/Perf/Performance 1/PowerThrottling.bat
AlphaWolf Latest -organized/Perf/Performance 1/Prefetch.bat
AlphaWolf Latest -organized/Perf/Performance 1/Randomizers.bat
AlphaWolf Latest -organized/Perf/Performance 1/Superfetch.bat
AlphaWolf Latest -organized/Perf/Performance 1/System Efficiency.bat
AlphaWolf Latest -organized/Perf/Performance 1/SystemReliability.bat
AlphaWolf Latest -organized/Perf/Performance 1/TTL.bat
AlphaWolf Latest -organized/Perf/Performance 1/TaskOffload.bat
AlphaWolf Latest -organized/Perf/Performance 1/VXDBIOS.bat
AlphaWolf Latest -organized/Perf/Performance 1/VisualEffects.bat
AlphaWolf Latest -organized/Perf/Performance 1/WindowsUpdates.bat
AlphaWolf Latest -organized/Perf/Performance 1/hiberboot.bat
AlphaWolf Latest -organized/Perf/Performance 2/BSOD.bat
AlphaWolf Latest -organized/Perf/Performance 2/BackgroundAudioPolicy.bat
AlphaWolf Latest -organized/Perf/Performance 2/BackgroundThreads.bat
AlphaWolf Latest -organized/Perf/Performance 2/Cortana.bat
AlphaWolf Latest -organized/Perf/Performance 2/DeviceHighPriority.bat
AlphaWolf Latest -organized/Perf/Performance 2/DisableBoottrace.bat
AlphaWolf Latest -organized/Perf/Performance 2/DisableWMI.bat
AlphaWolf Latest -organized/Perf/Performance 2/DiskWriteCache.bat
AlphaWolf Latest -organized/Perf/Performance 2/DriveIdleStates.bat
.bat .ps1
AlphaWolf Latest -organized/Perf/Performance 2/DriverSearching.bat
AlphaWolf Latest -organized/Perf/Performance 2/HID-CompliantDevices.bat
AlphaWolf Latest -organized/Perf/Performance 2/IOBoost.bat
AlphaWolf Latest -organized/Perf/Performance 2/InterruptSteering.bat
AlphaWolf Latest -organized/Perf/Performance 2/LargePageDrivers.bat
.bat .vbs
AlphaWolf Latest -organized/Perf/Performance 2/MSI.bat
AlphaWolf Latest -organized/Perf/Performance 2/MinimumFileCacheSize.bat
AlphaWolf Latest -organized/Perf/Performance 2/MinimumWorkingSet.bat
AlphaWolf Latest -organized/Perf/Performance 2/OverlayTestMode.bat
AlphaWolf Latest -organized/Perf/Performance 2/PolicyEnhanced.bat
AlphaWolf Latest -organized/Perf/Performance 2/ReadyBoost.bat
AlphaWolf Latest -organized/Perf/Performance 2/Runtime.bat
AlphaWolf Latest -organized/Perf/Performance 2/StorPortIdle.bat
AlphaWolf Latest -organized/Perf/Performance 2/TaskCache.bat
AlphaWolf Latest -organized/Perf/Performance 2/ThreadSchedulingOptions.bat
AlphaWolf Latest -organized/Perf/Performance 2/increaseuserva.reg
AlphaWolf Latest -organized/Peripherals/FilterKeys.bat
AlphaWolf Latest -organized/Peripherals/MaximumTransferLength.reg
AlphaWolf Latest -organized/Peripherals/MouseAccel.bat
AlphaWolf Latest -organized/Peripherals/MouseIo.bat
AlphaWolf Latest -organized/Peripherals/MousePriorityClass.bat
AlphaWolf Latest -organized/Peripherals/NoExtraBuffer.reg
AlphaWolf Latest -organized/Peripherals/StickyKeys.bat
AlphaWolf Latest -organized/Peripherals/ThreadPriority.bat
AlphaWolf Latest -organized/Peripherals/ToggleKeys.bat
AlphaWolf Latest -organized/Peripherals/USBLatency.bat
AlphaWolf Latest -organized/Peripherals/USBMsi.bat
AlphaWolf Latest -organized/Peripherals/USBPoolRate.bat
AlphaWolf Latest -organized/Peripherals/USBPowerSavings.bat
AlphaWolf Latest -organized/Processor/General/AC.bat
AlphaWolf Latest -organized/Processor/General/ACPISleep.reg
AlphaWolf Latest -organized/Processor/General/ASPM.bat
AlphaWolf Latest -organized/Processor/General/AllCores.reg
AlphaWolf Latest -organized/Processor/General/C-states.bat
AlphaWolf Latest -organized/Processor/General/CPPC.bat
AlphaWolf Latest -organized/Processor/General/CPUThrottling.reg
AlphaWolf Latest -organized/Processor/General/CoalescingTimerInterval.bat
AlphaWolf Latest -organized/Processor/General/CorePacking.bat
AlphaWolf Latest -organized/Processor/General/CpuPriority.bat
AlphaWolf Latest -organized/Processor/General/CpuQuota.bat
AlphaWolf Latest -organized/Processor/General/DisablePNP.bat
AlphaWolf Latest -organized/Processor/General/DistributeTimers.bat
AlphaWolf Latest -organized/Processor/General/DynamicProcessor.bat
AlphaWolf Latest -organized/Processor/General/ExtremePowerTweaks.reg
AlphaWolf Latest -organized/Processor/General/IdleStates.bat
AlphaWolf Latest -organized/Processor/General/KernelPerf.bat
AlphaWolf Latest -organized/Processor/General/NVMEThrottling.bat
AlphaWolf Latest -organized/Processor/General/PNPPower.bat
.bat .ps1
AlphaWolf Latest -organized/Processor/General/PerfBurst.bat
AlphaWolf Latest -organized/Processor/General/PowerFlow.bat
AlphaWolf Latest -organized/Processor/General/PowerSetting.bat
AlphaWolf Latest -organized/Processor/General/Powersavings.bat
AlphaWolf Latest -organized/Processor/General/ProcessorConfig.bat
AlphaWolf Latest -organized/Processor/General/ProcessorFrequency.bat
AlphaWolf Latest -organized/Processor/General/ProcessorHigh.REG
AlphaWolf Latest -organized/Processor/General/ProcessorHigh.bat
AlphaWolf Latest -organized/Processor/General/ProcessorIdle.bat
AlphaWolf Latest -organized/Processor/General/ThreadDCP.bat
AlphaWolf Latest -organized/Processor/General/ThreadScheduling.bat
.bat .ps1
AlphaWolf Latest -organized/Processor/General/ThrottleFrequency.bat
AlphaWolf Latest -organized/Processor/General/TurboBoost.bat
AlphaWolf Latest -organized/Processor/General/UnlimitDPCQueue.bat
AlphaWolf Latest -organized/Processor/General/fairshare.bat
AlphaWolf Latest -organized/Processor/Intel/DistributeTimers.bat
AlphaWolf Latest -organized/Processor/Intel/EnableTsx.bat
AlphaWolf Latest -organized/Processor/Intel/IntelBios.bat
AlphaWolf Latest -organized/Processor/Intel/IntelIdleStates.bat
AlphaWolf Latest -organized/Processor/Intel/IntelLowLatency.bat
AlphaWolf Latest -organized/Processor/Intel/IntelMicrocode.bat
AlphaWolf Latest -organized/Processor/Intel/IntelPowerManagement.bat
AlphaWolf Latest -organized/Processor/Intel/IntelTurboFrequency.bat
AlphaWolf Latest -organized/Processor/Intel/IntelppmParameters.bat
AlphaWolf Latest -organized/Processor/Intel/IsolatedContent.bat
AlphaWolf Latest -organized/Processor/Intel/PowerEnergy.bat
AlphaWolf Latest -organized/Processor/Intel/UnrestrictMemory.bat
AlphaWolf Latest -organized/Processor/amd/AmdBios.bat
AlphaWolf Latest -organized/Processor/amd/AmdEfficiency.bat
AlphaWolf Latest -organized/Processor/amd/AmdLowLatency.bat
AlphaWolf Latest -organized/Processor/amd/AmdMicrocode.bat
AlphaWolf Latest -organized/Processor/amd/AmdTurbo.bat
AlphaWolf Latest -organized/Processor/amd/DisableTsx.bat
AlphaWolf Latest -organized/Processor/amd/DistributeTimers.bat
AlphaWolf Latest -organized/Processor/amd/ProcessorPower.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/HEAD
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/config
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/description
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/hooks/applypatch-msg.sample
.sh linux
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/hooks/commit-msg.sample
.sh linux
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/hooks/fsmonitor-watchman.sample
.sh linux
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/hooks/post-update.sample
.sh linux
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/hooks/pre-applypatch.sample
.sh linux
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/hooks/pre-commit.sample
.sh linux
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/hooks/pre-merge-commit.sample
.sh linux
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/hooks/pre-push.sample
.sh linux
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/hooks/pre-rebase.sample
.sh linux
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/hooks/pre-receive.sample
.sh linux
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/hooks/prepare-commit-msg.sample
.sh linux
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/hooks/push-to-checkout.sample
.sh linux
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/hooks/sendemail-validate.sample
.sh linux
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/hooks/update.sample
.sh linux
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/index
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/info/exclude
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/logs/HEAD
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/logs/refs/heads/main
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/logs/refs/remotes/origin/HEAD
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/objects/pack/pack-3f5d9378e40352876cff86c2875ab0ecb497a14f.idx
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/objects/pack/pack-3f5d9378e40352876cff86c2875ab0ecb497a14f.pack
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/objects/pack/pack-3f5d9378e40352876cff86c2875ab0ecb497a14f.rev
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/packed-refs
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/refs/heads/main
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/.git/refs/remotes/origin/HEAD
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/0 pre rendered frames.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/0prerenderedframes.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/1 pre rendered frames .reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/16 bit, 44100 Hz(CD Quality).bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/1prerenderedframes.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/2 pre rendered frames.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/24 bit, 48000 hz.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/25308086.IRW
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/2prerenderedframes.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AC.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ACPILatency.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ACPISleep.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ACPISleep.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ACRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AMDDX9.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AMDPowerGating.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AMDPowerGatingRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AMDTessellation.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AMDTessellation.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/APR2007_XACT_x64.cab
.cab .ps1 polyglot
apr2007_xact_x64.inf
infinst.exe
.exe windows:5 windows x64 arch:x64

6668c9525ad04c4190169dc04fde550d

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:55

Not After

16-09-2011 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

44:c2:26:68:e3:a7:0e:0f:e1:0d:6e:d0:a5:42:df:15:4c:e1:0a:0f
Signer

Actual PE Digest

44:c2:26:68:e3:a7:0e:0f:e1:0d:6e:d0:a5:42:df:15:4c:e1:0a:0f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

infinst.pdb

Imports

kernel32

OutputDebugStringA
GetWindowsDirectoryA
GetLastError
LocalFree
FormatMessageA
CompareStringA
CloseHandle
CreateFileA
lstrlenA
GetPrivateProfileStringA
FindClose
FindFirstFileA
MoveFileExA
CopyFileA
GetCurrentDirectoryA
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLocalTime
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
RtlUnwindEx
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSetInformation
HeapCreate
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
Sleep
SetFilePointer
SetStdHandle
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
ReadFile
GetLocaleInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery

user32

CharNextA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupOpenInfFileA
SetupOpenFileQueue
SetupInstallFromInfSectionA
SetupCloseFileQueue
SetupCloseInfFile
SetupCopyOEMInfA
SetupDiDestroyDeviceInfoList
SetupDiSetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDefaultQueueCallbackA

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
x3daudio1_1.dll
.dll windows:5 windows x64 arch:x64

01dbb721ad8b0aa287d0e6cb37b97382

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04-12-2003 00:00

Not After

03-12-2008 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6e:2b:fc:2c:be:00:d2:f9:f0:2d:7a:31:b3:c6:e8:cc:c4:87:22:77
Signer

Actual PE Digest

6e:2b:fc:2c:be:00:d2:f9:f0:2d:7a:31:b3:c6:e8:cc:c4:87:22:77

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

X3DAudio1_1.pdb

Imports

msvcrt

tan
sinf
sin
sqrt
_initterm
cosf
malloc
acosf
free
atan2f

kernel32

Sleep
DisableThreadLibraryCalls

Exports

Exports

X3DAudioCalculate
X3DAudioInitialize

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xact2_7_x64.cat
xact2_7_x64.inf
xact2_7_x64_xp.inf
xactengine2_7.dll
.dll regsvr32 windows:5 windows x64 arch:x64

db64690fd3880f9d7a43b3137465b79c

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

a8:0a:f8:7d:a4:03:9b:2c:84:8b:b3:7d:71:bf:21:21:a5:17:49:1b
Signer

Actual PE Digest

a8:0a:f8:7d:a4:03:9b:2c:84:8b:b3:7d:71:bf:21:21:a5:17:49:1b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

XactEngine2_7.pdb

Imports

msvcrt

_initterm
sinf
cosf
strncpy
sqrtf
free
malloc
cos
floorf
??2@YAPEAX_K@Z
_vsnwprintf
sin
powf
pow
log10
memcmp
_purecall
memcpy
acosf
atan2f
memset
sqrt
_isnan
??3@YAXPEAX@Z
_controlfp
_vsnprintf
_aligned_malloc
_aligned_free
tan

kernel32

GetSystemInfo
LoadLibraryW
GetProcAddress
FreeLibrary
GetVersionExW
lstrcmpW
__C_specific_handler
HeapSize
GetFileSize
SetEndOfFile
SetFilePointer
DisableThreadLibraryCalls
GetLastError
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
GetTickCount
QueryPerformanceCounter
HeapFree
CreateSemaphoreW
GetCurrentThreadId
HeapAlloc
InitializeCriticalSection
DeleteCriticalSection
TryEnterCriticalSection
CloseHandle
CreateFileA
QueryPerformanceFrequency
GetOverlappedResult
ReadFile
WaitForMultipleObjects
WaitForSingleObject
SetEvent
CreateThread
CreateEventA
Sleep
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
WriteFile
ReleaseSemaphore
CreateEventW
SetThreadPriority
GetProcessHeap
RtlCaptureContext
SwitchToThread

rpcrt4

RpcStringFreeA
UuidToStringA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
PropVariantClear
CLSIDFromString

advapi32

RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA

user32

GetDesktopWindow

winmm

timeEndPeriod
timeBeginPeriod

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 354KB - Virtual size: 354KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 512B - Virtual size: 99B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/APR2007_XACT_x86.cab
.cab
apr2007_xact_x86.inf
x3daudio1_1.dll
.dll windows:5 windows x86 arch:x86

9c6625d43656449d2c5b879dc74321e3

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04-12-2003 00:00

Not After

03-12-2008 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b2:2b:d9:a2:23:a6:40:1b:ee:29:09:ad:5c:d8:97:f3:2d:d5:58:04
Signer

Actual PE Digest

b2:2b:d9:a2:23:a6:40:1b:ee:29:09:ad:5c:d8:97:f3:2d:d5:58:04

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

X3DAudio1_1.pdb

Imports

msvcrt

_adjust_fdiv
_initterm
free
malloc
_CIacos

kernel32

Sleep
DisableThreadLibraryCalls

Exports

Exports

_X3DAudioCalculate@20
_X3DAudioInitialize@12

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xact2_7_x86.cat
xact2_7_x86.inf
xact2_7_x86_xp.inf
xactengine2_7.dll
.dll regsvr32 windows:5 windows x86 arch:x86

605b10ce895c22187302eed420c60859

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:55

Not After

16-09-2011 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

0b:60:68:0b:75:80:f9:29:96:8c:bd:ee:d1:5b:7d:54:87:24:38:51
Signer

Actual PE Digest

0b:60:68:0b:75:80:f9:29:96:8c:bd:ee:d1:5b:7d:54:87:24:38:51

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

XactEngine2_7.pdb

Imports

msvcrt

_except_handler3
??2@YAPAXI@Z
_adjust_fdiv
_initterm
strncpy
free
malloc
floor
_controlfp
_isnan
_CIpow
_vsnwprintf
_aligned_free
_purecall
??3@YAXPAX@Z
wcslen
_vsnprintf
_aligned_malloc
_CIacos

kernel32

HeapSize
GetSystemInfo
LoadLibraryW
GetProcAddress
FreeLibrary
GetVersionExW
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
GetLastError
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
GetTickCount
QueryPerformanceCounter
HeapFree
GetProcessHeap
InterlockedCompareExchange
GetCurrentThreadId
HeapAlloc
InitializeCriticalSection
DeleteCriticalSection
CreateSemaphoreW
CloseHandle
CreateFileA
QueryPerformanceFrequency
GetOverlappedResult
ReadFile
InterlockedExchange
WaitForMultipleObjects
WaitForSingleObject
SetEvent
CreateThread
CreateEventA
Sleep
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
lstrcmpW
ReleaseSemaphore
GetFileSize
CreateEventW
SetThreadPriority
SwitchToThread
TryEnterCriticalSection
UnhandledExceptionFilter
WriteFile
SetFilePointer
SetEndOfFile

rpcrt4

RpcStringFreeA
UuidToStringA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
PropVariantClear
CLSIDFromString

advapi32

RegCreateKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

user32

GetDesktopWindow

winmm

timeEndPeriod
timeBeginPeriod

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/APR2007_d3dx10_33_x64.cab
.cab
apr2007_d3dx10_33_x64.inf
d3dcompiler_33.dll
.dll windows:6 windows x64 arch:x64

9c808cb0a9367e9df00eaf01580b5fb8

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

2a:ee:f1:f2:c0:f0:f7:d0:35:bb:a6:43:ac:59:d3:db:38:9c:2b:03
Signer

Actual PE Digest

2a:ee:f1:f2:c0:f0:f7:d0:35:bb:a6:43:ac:59:d3:db:38:9c:2b:03

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_33.pdb

Imports

msvcrt

__dllonexit
_lock
_onexit
??1type_info@@UEAA@XZ
isspace
_unlock
_CxxThrowException
memset
memcpy
__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
isxdigit
atof
_strdup
setlocale
modf
isalnum
_strnicmp
_fpclass
strncmp
_isnan
isdigit
_clearfp
strchr
isalpha
_controlfp
_finite
tolower
memmove
_purecall
atoi
_stricmp
malloc
free
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
_vsnprintf
strstr
qsort
toupper
__CxxFrameHandler
memcmp
atan2
atan
asin
acos
ceil
cosh
cos
exp
fmod
log
pow
floor
sin
tanh
tan
sqrt
sinh
floorf

gdi32

DeleteObject

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnmapViewOfFile
CloseHandle
GetSystemInfo
VirtualAlloc
VirtualFree
FreeLibrary
DeleteCriticalSection
LoadLibraryA
GetProcAddress
InitializeCriticalSection
OutputDebugStringA
GetFullPathNameA
TlsSetValue
TlsFree
TlsAlloc
TlsGetValue
Sleep
VirtualProtect
DisableThreadLibraryCalls
GetModuleHandleA
lstrcmpiA

Exports

Exports

D3DCompileFromMemory
D3DDisassembleCode
D3DDisassembleEffect
D3DGetCodeDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DPreprocessFromMemory
D3DReflectCode
DebugSetMute

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dx10_33.dll
.dll windows:6 windows x64 arch:x64

e9a81e28c053dcf21507017540b99e1e

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

56:ef:a1:45:10:98:d3:a7:3c:b6:f6:bb:67:23:56:12:c5:67:44:75
Signer

Actual PE Digest

56:ef:a1:45:10:98:d3:a7:3c:b6:f6:bb:67:23:56:12:c5:67:44:75

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d3dx10_33.pdb

Imports

msvcrt

_controlfp
__CxxFrameHandler
_purecall
_finite
iswpunct
iswdigit
iswalpha
iswspace
_vsnprintf
memmove
qsort
_isnan
??2@YAPEAX_K@Z
tolower
_stricmp
_XcptFilter
malloc
_initterm
free
_amsg_exit
??1type_info@@UEAA@XZ
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_CxxThrowException
sqrt
asinf
memset
memcpy
??3@YAXPEAX@Z
__C_specific_handler
sqrtf
floorf
cosf
sinf
atan2f
acosf
atan

gdi32

GetObjectW
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
CreateCompatibleDC
TranslateCharsetInfo
DeleteDC
DeleteObject
SelectObject
ExtTextOutA
MoveToEx
ExtTextOutW
CreateDIBSection
GetGlyphOutlineA
GetObjectA
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsA
GetTextMetricsW
GetFontLanguageInfo

kernel32

SizeofResource
FindResourceW
FindResourceA
LockResource
GetLastError
WriteFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
OutputDebugStringA
GetModuleFileNameA
GetFileSize
CreateFileW
IsProcessorFeaturePresent
MultiByteToWideChar
ReadFile
GetFileSizeEx
CreateFileA
WideCharToMultiByte
GetFullPathNameA
FreeLibrary
GetModuleHandleA
DebugBreak
CloseHandle
ReleaseMutex
ReleaseSemaphore
WaitForSingleObject
CreateMutexA
CreateSemaphoreA
WaitForMultipleObjects
CreateThread
GetCurrentProcess
GetProcessAffinityMask
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LoadLibraryA
LeaveCriticalSection
GetProcAddress
Sleep
VirtualProtect
DisableThreadLibraryCalls
LoadResource

advapi32

RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA

ole32

CreateStreamOnHGlobal

Exports

Exports

D3DX10CheckVersion
D3DX10CompileFromFileA
D3DX10CompileFromFileW
D3DX10CompileFromMemory
D3DX10CompileFromResourceA
D3DX10CompileFromResourceW
D3DX10ComputeNormalMap
D3DX10CreateAsyncCompilerProcessor
D3DX10CreateAsyncEffectCreateProcessor
D3DX10CreateAsyncEffectPoolCreateProcessor
D3DX10CreateAsyncFileLoaderA
D3DX10CreateAsyncFileLoaderW
D3DX10CreateAsyncMemoryLoader
D3DX10CreateAsyncResourceLoaderA
D3DX10CreateAsyncResourceLoaderW
D3DX10CreateAsyncShaderPreprocessProcessor
D3DX10CreateAsyncShaderResourceViewProcessor
D3DX10CreateAsyncTextureInfoProcessor
D3DX10CreateAsyncTextureProcessor
D3DX10CreateEffectFromFileA
D3DX10CreateEffectFromFileW
D3DX10CreateEffectFromMemory
D3DX10CreateEffectFromResourceA
D3DX10CreateEffectFromResourceW
D3DX10CreateEffectPoolFromFileA
D3DX10CreateEffectPoolFromFileW
D3DX10CreateEffectPoolFromMemory
D3DX10CreateEffectPoolFromResourceA
D3DX10CreateEffectPoolFromResourceW
D3DX10CreateFontA
D3DX10CreateFontIndirectA
D3DX10CreateFontIndirectW
D3DX10CreateFontW
D3DX10CreateMesh
D3DX10CreateShaderResourceViewFromFileA
D3DX10CreateShaderResourceViewFromFileW
D3DX10CreateShaderResourceViewFromMemory
D3DX10CreateShaderResourceViewFromResourceA
D3DX10CreateShaderResourceViewFromResourceW
D3DX10CreateSkinInfo
D3DX10CreateSprite
D3DX10CreateTextureFromFileA
D3DX10CreateTextureFromFileW
D3DX10CreateTextureFromMemory
D3DX10CreateTextureFromResourceA
D3DX10CreateTextureFromResourceW
D3DX10CreateThreadPump
D3DX10DisassembleEffect
D3DX10DisassembleShader
D3DX10FilterTexture
D3DX10GetDriverLevel
D3DX10GetImageInfoFromFileA
D3DX10GetImageInfoFromFileW
D3DX10GetImageInfoFromMemory
D3DX10GetImageInfoFromResourceA
D3DX10GetImageInfoFromResourceW
D3DX10LoadTextureFromTexture
D3DX10PreprocessShaderFromFileA
D3DX10PreprocessShaderFromFileW
D3DX10PreprocessShaderFromMemory
D3DX10PreprocessShaderFromResourceA
D3DX10PreprocessShaderFromResourceW
D3DX10ReflectShader
D3DX10SHProjectCubeMap
D3DX10SaveTextureToFileA
D3DX10SaveTextureToFileW
D3DX10SaveTextureToMemory
D3DX10UnsetAllDeviceObjects
D3DXBoxBoundProbe
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXCpuOptimizations
D3DXCreateMatrixStack
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFresnelTerm
D3DXIntersectTri
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHMultiply2
D3DXSHMultiply3
D3DXSHMultiply4
D3DXSHMultiply5
D3DXSHMultiply6
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSphereBoundProbe
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray

Sections

.text
Size: 450KB - Virtual size: 450KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dx10_33_x64.cat
d3dx10_33_x64.inf
d3dx10_33_x64_xp.inf
infinst.exe
.exe windows:5 windows x64 arch:x64

6668c9525ad04c4190169dc04fde550d

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:55

Not After

16-09-2011 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

44:c2:26:68:e3:a7:0e:0f:e1:0d:6e:d0:a5:42:df:15:4c:e1:0a:0f
Signer

Actual PE Digest

44:c2:26:68:e3:a7:0e:0f:e1:0d:6e:d0:a5:42:df:15:4c:e1:0a:0f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

infinst.pdb

Imports

kernel32

OutputDebugStringA
GetWindowsDirectoryA
GetLastError
LocalFree
FormatMessageA
CompareStringA
CloseHandle
CreateFileA
lstrlenA
GetPrivateProfileStringA
FindClose
FindFirstFileA
MoveFileExA
CopyFileA
GetCurrentDirectoryA
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLocalTime
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
RtlUnwindEx
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSetInformation
HeapCreate
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
Sleep
SetFilePointer
SetStdHandle
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
ReadFile
GetLocaleInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery

user32

CharNextA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupOpenInfFileA
SetupOpenFileQueue
SetupInstallFromInfSectionA
SetupCloseFileQueue
SetupCloseInfFile
SetupCopyOEMInfA
SetupDiDestroyDeviceInfoList
SetupDiSetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDefaultQueueCallbackA

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/APR2007_d3dx10_33_x86.cab
.cab
apr2007_d3dx10_33_x86.inf
d3dcompiler_33.dll
.dll windows:6 windows x86 arch:x86

5fd50ee8ab23e520caeada9b9e05fdcc

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

48:3a:5a:11:cd:a5:a6:11:12:11:7c:29:25:61:4f:b5:9a:dc:74:d7
Signer

Actual PE Digest

48:3a:5a:11:cd:a5:a6:11:12:11:7c:29:25:61:4f:b5:9a:dc:74:d7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D3DCompiler_33.pdb

Imports

msvcrt

setlocale
atof
isxdigit
_CxxThrowException
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
isspace
_unlock
__dllonexit
_lock
_onexit
??1type_info@@UAE@XZ
_strdup
modf
isalnum
_strnicmp
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIsqrt
_CIexp
_CIpow
_CIfmod
_CIsin
_CIsinh
_CItan
_CItanh
ceil
_isnan
_fpclass
strncmp
_controlfp
_clearfp
floor
_CIlog
_finite
tolower
isalpha
isdigit
atoi
memmove
_purecall
_stricmp
free
memset
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy
strchr
_vsnprintf
strstr
toupper
qsort
__CxxFrameHandler

gdi32

DeleteObject

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
UnmapViewOfFile
CloseHandle
FindResourceW
FindResourceA
SizeofResource
LoadResource
LockResource
GetLastError
LoadLibraryA
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
VirtualFree
OutputDebugStringA
WideCharToMultiByte
GetFullPathNameA
InterlockedCompareExchange
Sleep
TlsAlloc
TlsSetValue
InterlockedExchange
TlsFree
TlsGetValue
GetVersion
GetSystemInfo
GetProcAddress
VirtualAlloc
DisableThreadLibraryCalls
GetModuleHandleA
lstrcmpiA

Exports

Exports

D3DCompileFromMemory
D3DDisassembleCode
D3DDisassembleEffect
D3DGetCodeDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DPreprocessFromMemory
D3DReflectCode
DebugSetMute

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dx10_33.dll
.dll windows:6 windows x86 arch:x86

0008d86c47dcdd56b224627bb2f25287

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

0d:9a:2f:a5:9e:b5:9e:68:34:64:ce:c7:fb:4b:5a:48:37:72:b1:01
Signer

Actual PE Digest

0d:9a:2f:a5:9e:b5:9e:68:34:64:ce:c7:fb:4b:5a:48:37:72:b1:01

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d3dx10_33.pdb

Imports

msvcrt

??1type_info@@UAE@XZ
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter
tolower
_stricmp
_CxxThrowException
_isnan
floor
_controlfp
_purecall
_CIatan
_CIcos
_CIasin
_finite
_CIsin
_CIatan2
_CIacos
_CIsqrt
iswspace
iswalpha
iswdigit
iswpunct
memmove
qsort
memset
??2@YAPAXI@Z
memcpy
??3@YAXPAX@Z
_vsnprintf
__CxxFrameHandler

gdi32

GetGlyphOutlineA
SelectObject
GetCharacterPlacementA
GetCharacterPlacementW
CreateDIBSection
DeleteDC
DeleteObject
GetTextMetricsA
GetObjectW
GetObjectA
SetBkColor
SetBkMode
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
CreateCompatibleDC
ExtTextOutA
MoveToEx
ExtTextOutW
TranslateCharsetInfo
SetTextColor

kernel32

CreateFileA
GetFileSizeEx
ReadFile
WideCharToMultiByte
GetFullPathNameA
GetModuleHandleA
FreeLibrary
GetCurrentProcess
GetProcessAffinityMask
CreateThread
InterlockedIncrement
Sleep
WaitForSingleObject
InterlockedDecrement
DebugBreak
WaitForMultipleObjects
ReleaseSemaphore
MultiByteToWideChar
CloseHandle
CreateSemaphoreA
CreateMutexA
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LoadLibraryA
LeaveCriticalSection
GetVersion
GetProcAddress
DisableThreadLibraryCalls
IsProcessorFeaturePresent
CreateFileW
GetFileSize
GetModuleFileNameA
InterlockedExchange
InterlockedCompareExchange
OutputDebugStringA
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
GetLastError
LockResource
FindResourceW
LoadResource
SizeofResource
FindResourceA
ReleaseMutex

advapi32

RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA

ole32

CreateStreamOnHGlobal

Exports

Exports

D3DX10CheckVersion
D3DX10CompileFromFileA
D3DX10CompileFromFileW
D3DX10CompileFromMemory
D3DX10CompileFromResourceA
D3DX10CompileFromResourceW
D3DX10ComputeNormalMap
D3DX10CreateAsyncCompilerProcessor
D3DX10CreateAsyncEffectCreateProcessor
D3DX10CreateAsyncEffectPoolCreateProcessor
D3DX10CreateAsyncFileLoaderA
D3DX10CreateAsyncFileLoaderW
D3DX10CreateAsyncMemoryLoader
D3DX10CreateAsyncResourceLoaderA
D3DX10CreateAsyncResourceLoaderW
D3DX10CreateAsyncShaderPreprocessProcessor
D3DX10CreateAsyncShaderResourceViewProcessor
D3DX10CreateAsyncTextureInfoProcessor
D3DX10CreateAsyncTextureProcessor
D3DX10CreateEffectFromFileA
D3DX10CreateEffectFromFileW
D3DX10CreateEffectFromMemory
D3DX10CreateEffectFromResourceA
D3DX10CreateEffectFromResourceW
D3DX10CreateEffectPoolFromFileA
D3DX10CreateEffectPoolFromFileW
D3DX10CreateEffectPoolFromMemory
D3DX10CreateEffectPoolFromResourceA
D3DX10CreateEffectPoolFromResourceW
D3DX10CreateFontA
D3DX10CreateFontIndirectA
D3DX10CreateFontIndirectW
D3DX10CreateFontW
D3DX10CreateMesh
D3DX10CreateShaderResourceViewFromFileA
D3DX10CreateShaderResourceViewFromFileW
D3DX10CreateShaderResourceViewFromMemory
D3DX10CreateShaderResourceViewFromResourceA
D3DX10CreateShaderResourceViewFromResourceW
D3DX10CreateSkinInfo
D3DX10CreateSprite
D3DX10CreateTextureFromFileA
D3DX10CreateTextureFromFileW
D3DX10CreateTextureFromMemory
D3DX10CreateTextureFromResourceA
D3DX10CreateTextureFromResourceW
D3DX10CreateThreadPump
D3DX10DisassembleEffect
D3DX10DisassembleShader
D3DX10FilterTexture
D3DX10GetDriverLevel
D3DX10GetImageInfoFromFileA
D3DX10GetImageInfoFromFileW
D3DX10GetImageInfoFromMemory
D3DX10GetImageInfoFromResourceA
D3DX10GetImageInfoFromResourceW
D3DX10LoadTextureFromTexture
D3DX10PreprocessShaderFromFileA
D3DX10PreprocessShaderFromFileW
D3DX10PreprocessShaderFromMemory
D3DX10PreprocessShaderFromResourceA
D3DX10PreprocessShaderFromResourceW
D3DX10ReflectShader
D3DX10SHProjectCubeMap
D3DX10SaveTextureToFileA
D3DX10SaveTextureToFileW
D3DX10SaveTextureToMemory
D3DX10UnsetAllDeviceObjects
D3DXBoxBoundProbe
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXCpuOptimizations
D3DXCreateMatrixStack
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFresnelTerm
D3DXIntersectTri
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHMultiply2
D3DXSHMultiply3
D3DXSHMultiply4
D3DXSHMultiply5
D3DXSHMultiply6
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSphereBoundProbe
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray

Sections

.text
Size: 386KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dx10_33_x86.cat
d3dx10_33_x86.inf
d3dx10_33_x86_xp.inf
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/APR2007_d3dx9_33_x64.cab
.cab
apr2007_d3dx9_33_x64.inf
d3dx9_33.dll
.dll windows:6 windows x64 arch:x64

38ca0f881e3cf479df5399a57037206a

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:55

Not After

16-09-2011 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

1b:1a:65:77:6a:1e:87:db:97:56:95:97:dc:11:6d:6b:47:8d:52:9c
Signer

Actual PE Digest

1b:1a:65:77:6a:1e:87:db:97:56:95:97:dc:11:6d:6b:47:8d:52:9c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

d3dx9_33.pdb

Imports

msvcrt

_clearfp
_vsnprintf
_finite
memmove
_purecall
qsort
_stricmp
iswpunct
iswdigit
iswalpha
iswspace
modff
??3@YAXPEAX@Z
malloc
??2@YAPEAX_K@Z
_strdup
setlocale
free
calloc
realloc
longjmp
isspace
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
_CxxThrowException
memset
memcpy
__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
srand
strtod
fread
fflush
fwrite
strncpy
sprintf
abort
_tempnam
_ultoa
atol
wcstombs
rand
isxdigit
atof
_fpclass
_isnan
strchr
toupper
isalpha
isalnum
atoi
tolower
ldexp
frexp
strncmp
_controlfp
_strnicmp
modf
_strdate
_strtime
sscanf
__CxxFrameHandler
isdigit
memcmp
atan2
atan
asin
acos
ceil
cosh
cos
exp
fmod
log
pow
floor
sin
tanh
tan
sqrt
sinh
powf
sqrtf
fmodf
sinf
cosf
floorf
ceilf
atan2f
logf
acosf
asinf
_setjmp

gdi32

GetFontLanguageInfo
GetGlyphOutlineW
GetCurrentObject
GetOutlineTextMetricsA
GetTextMetricsA
GetTextMetricsW
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
TranslateCharsetInfo
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject
ExtTextOutA
MoveToEx
ExtTextOutW
CreateDIBSection
GetGlyphOutlineA
GetObjectW
GetObjectA
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode

kernel32

FindResourceW
TlsAlloc
TlsSetValue
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetProcessHeap
HeapFree
HeapAlloc
CreateMutexA
ReleaseMutex
WaitForSingleObject
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
ExpandEnvironmentStringsA
GlobalMemoryStatus
GetSystemInfo
SetEndOfFile
MoveFileA
MoveFileW
GetTempFileNameW
SetFilePointer
DeleteFileW
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
UnmapViewOfFile
GetFileSize
CreateFileMappingA
CompareStringA
MapViewOfFile
LocalFree
GetLastError
FormatMessageA
CreateFileW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
lstrcmpiA
GetFileSizeEx
GetFullPathNameA
IsDBCSLeadByte
CloseHandle
ReadFile
CreateFileA
GetTempFileNameA
GetTempPathA
WriteFile
DeleteFileA
IsProcessorFeaturePresent
WideCharToMultiByte
GetACP
MultiByteToWideChar
VirtualFree
VirtualAlloc
OutputDebugStringA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
Sleep
VirtualProtect
DisableThreadLibraryCalls
TlsGetValue

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA

Exports

Exports

D3DXAssembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShaderFromFileW
D3DXAssembleShaderFromResourceA
D3DXAssembleShaderFromResourceW
D3DXBoxBoundProbe
D3DXCheckCubeTextureRequirements
D3DXCheckTextureRequirements
D3DXCheckVersion
D3DXCheckVolumeTextureRequirements
D3DXCleanMesh
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXCompileShaderFromFileW
D3DXCompileShaderFromResourceA
D3DXCompileShaderFromResourceW
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXComputeIMTFromPerTexelSignal
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeNormalMap
D3DXComputeNormals
D3DXComputeTangent
D3DXComputeTangentFrame
D3DXComputeTangentFrameEx
D3DXConcatenateMeshes
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXCreateAnimationController
D3DXCreateBox
D3DXCreateBuffer
D3DXCreateCompressedAnimationSet
D3DXCreateCubeTexture
D3DXCreateCubeTextureFromFileA
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileW
D3DXCreateCubeTextureFromResourceA
D3DXCreateCubeTextureFromResourceExA
D3DXCreateCubeTextureFromResourceExW
D3DXCreateCubeTextureFromResourceW
D3DXCreateCylinder
D3DXCreateEffect
D3DXCreateEffectCompiler
D3DXCreateEffectCompilerFromFileA
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompilerFromResourceA
D3DXCreateEffectCompilerFromResourceW
D3DXCreateEffectEx
D3DXCreateEffectFromFileA
D3DXCreateEffectFromFileExA
D3DXCreateEffectFromFileExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceA
D3DXCreateEffectFromResourceExA
D3DXCreateEffectFromResourceExW
D3DXCreateEffectFromResourceW
D3DXCreateEffectPool
D3DXCreateFontA
D3DXCreateFontIndirectA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXCreateFragmentLinker
D3DXCreateKeyframedAnimationSet
D3DXCreateLine
D3DXCreateMatrixStack
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXCreateNPatchMesh
D3DXCreatePMeshFromStream
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXCreatePRTCompBuffer
D3DXCreatePRTEngine
D3DXCreatePatchMesh
D3DXCreatePolygon
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateSPMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSphere
D3DXCreateSprite
D3DXCreateTeapot
D3DXCreateTextA
D3DXCreateTextW
D3DXCreateTexture
D3DXCreateTextureFromFileA
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXCreateTextureFromResourceA
D3DXCreateTextureFromResourceExA
D3DXCreateTextureFromResourceExW
D3DXCreateTextureFromResourceW
D3DXCreateTextureGutterHelper
D3DXCreateTextureShader
D3DXCreateTorus
D3DXCreateVolumeTexture
D3DXCreateVolumeTextureFromFileA
D3DXCreateVolumeTextureFromFileExA
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileW
D3DXCreateVolumeTextureFromResourceA
D3DXCreateVolumeTextureFromResourceExA
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateVolumeTextureFromResourceW
D3DXDebugMute
D3DXDeclaratorFromFVF
D3DXDisassembleEffect
D3DXDisassembleShader
D3DXFVFFromDeclarator
D3DXFileCreate
D3DXFillCubeTexture
D3DXFillCubeTextureTX
D3DXFillTexture
D3DXFillTextureTX
D3DXFillVolumeTexture
D3DXFillVolumeTextureTX
D3DXFilterTexture
D3DXFindShaderComment
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFrameAppendChild
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXFrameFind
D3DXFrameNumNamedMatrices
D3DXFrameRegisterNamedMatrices
D3DXFresnelTerm
D3DXGatherFragments
D3DXGatherFragmentsFromFileA
D3DXGatherFragmentsFromFileW
D3DXGatherFragmentsFromResourceA
D3DXGatherFragmentsFromResourceW
D3DXGenerateOutputDecl
D3DXGeneratePMesh
D3DXGetDeclLength
D3DXGetDeclVertexSize
D3DXGetDriverLevel
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileA
D3DXGetImageInfoFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromResourceA
D3DXGetImageInfoFromResourceW
D3DXGetPixelShaderProfile
D3DXGetShaderConstantTable
D3DXGetShaderInputSemantics
D3DXGetShaderOutputSemantics
D3DXGetShaderSamplers
D3DXGetShaderSize
D3DXGetShaderVersion
D3DXGetVertexShaderProfile
D3DXIntersect
D3DXIntersectSubset
D3DXIntersectTri
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXResource
D3DXLoadMeshFromXW
D3DXLoadMeshFromXof
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXLoadMeshHierarchyFromXW
D3DXLoadPRTBufferFromFileA
D3DXLoadPRTBufferFromFileW
D3DXLoadPRTCompBufferFromFileA
D3DXLoadPRTCompBufferFromFileW
D3DXLoadPatchMeshFromXof
D3DXLoadSkinMeshFromXof
D3DXLoadSurfaceFromFileA
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromMemory
D3DXLoadSurfaceFromResourceA
D3DXLoadSurfaceFromResourceW
D3DXLoadSurfaceFromSurface
D3DXLoadVolumeFromFileA
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromMemory
D3DXLoadVolumeFromResourceA
D3DXLoadVolumeFromResourceW
D3DXLoadVolumeFromVolume
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXPreprocessShader
D3DXPreprocessShaderFromFileA
D3DXPreprocessShaderFromFileW
D3DXPreprocessShaderFromResourceA
D3DXPreprocessShaderFromResourceW
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXRectPatchSize
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHMultiply2
D3DXSHMultiply3
D3DXSHMultiply4
D3DXSHMultiply5
D3DXSHMultiply6
D3DXSHPRTCompSplitMeshSC
D3DXSHPRTCompSuperCluster
D3DXSHProjectCubeMap
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSaveMeshHierarchyToFileA
D3DXSaveMeshHierarchyToFileW
D3DXSaveMeshToXA
D3DXSaveMeshToXW
D3DXSavePRTBufferToFileA
D3DXSavePRTBufferToFileW
D3DXSavePRTCompBufferToFileA
D3DXSavePRTCompBufferToFileW
D3DXSaveSurfaceToFileA
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileW
D3DXSaveTextureToFileA
D3DXSaveTextureToFileInMemory
D3DXSaveTextureToFileW
D3DXSaveVolumeToFileA
D3DXSaveVolumeToFileInMemory
D3DXSaveVolumeToFileW
D3DXSimplifyMesh
D3DXSphereBoundProbe
D3DXSplitMesh
D3DXTessellateNPatches
D3DXTessellateRectPatch
D3DXTessellateTriPatch
D3DXTriPatchSize
D3DXUVAtlasCreate
D3DXUVAtlasPack
D3DXUVAtlasPartition
D3DXValidMesh
D3DXValidPatchMesh
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray
D3DXWeldVertices

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dx9_33_x64.cat
d3dx9_33_x64.inf
d3dx9_33_x64_xp.inf
infinst.exe
.exe windows:5 windows x64 arch:x64

6668c9525ad04c4190169dc04fde550d

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:55

Not After

16-09-2011 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

44:c2:26:68:e3:a7:0e:0f:e1:0d:6e:d0:a5:42:df:15:4c:e1:0a:0f
Signer

Actual PE Digest

44:c2:26:68:e3:a7:0e:0f:e1:0d:6e:d0:a5:42:df:15:4c:e1:0a:0f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

infinst.pdb

Imports

kernel32

OutputDebugStringA
GetWindowsDirectoryA
GetLastError
LocalFree
FormatMessageA
CompareStringA
CloseHandle
CreateFileA
lstrlenA
GetPrivateProfileStringA
FindClose
FindFirstFileA
MoveFileExA
CopyFileA
GetCurrentDirectoryA
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLocalTime
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
RtlUnwindEx
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSetInformation
HeapCreate
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
Sleep
SetFilePointer
SetStdHandle
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
ReadFile
GetLocaleInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery

user32

CharNextA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupOpenInfFileA
SetupOpenFileQueue
SetupInstallFromInfSectionA
SetupCloseFileQueue
SetupCloseInfFile
SetupCopyOEMInfA
SetupDiDestroyDeviceInfoList
SetupDiSetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDefaultQueueCallbackA

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/APR2007_d3dx9_33_x86.cab
.cab
apr2007_d3dx9_33_x86.inf
d3dx9_33.dll
.dll windows:6 windows x86 arch:x86

13efb81e3a3942754838507e1d192411

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:55

Not After

16-09-2011 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

98:f5:ca:86:77:6d:be:be:82:48:34:90:66:e9:f2:0b:2f:7e:c7:17
Signer

Actual PE Digest

98:f5:ca:86:77:6d:be:be:82:48:34:90:66:e9:f2:0b:2f:7e:c7:17

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d3dx9_33.pdb

Imports

msvcrt

?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
srand
strtod
fread
fflush
fwrite
abort
sprintf
strncpy
_tempnam
exit
atol
_ultoa
wcstombs
rand
isxdigit
atof
_CIcosh
_CIexp
_CIsinh
_CItan
_CItanh
_fpclass
_isnan
isalnum
isalpha
toupper
tolower
atoi
floor
_strtime
_strdate
sscanf
isspace
isdigit
_setjmp3
longjmp
ldexp
frexp
calloc
realloc
_CIlog
setlocale
_strdup
free
_clearfp
ceil
_controlfp
malloc
_CIatan
_CIcos
_CIasin
_finite
_CIsin
_CIatan2
_CIacos
memmove
qsort
_CIfmod
_purecall
_stricmp
modf
iswspace
iswalpha
iswdigit
iswpunct
_CIsqrt
memcpy
memset
_CIpow
??2@YAPAXI@Z
??3@YAXPAX@Z
strchr
_vsnprintf
strncmp
_strnicmp
_CxxThrowException
??1type_info@@UAE@XZ
__CxxFrameHandler

gdi32

DeleteDC
CreateDIBSection
GetGlyphOutlineA
GetTextMetricsA
GetObjectW
DeleteObject
SelectObject
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
CreateCompatibleDC
ExtTextOutA
MoveToEx
ExtTextOutW
TranslateCharsetInfo
GetCurrentObject
GetOutlineTextMetricsA
GetGlyphOutlineW
GetObjectA

kernel32

DeleteFileW
SetFilePointer
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
CompareStringA
CreateFileW
GetLastError
FormatMessageA
LocalFree
LeaveCriticalSection
DeleteCriticalSection
InterlockedCompareExchange
Sleep
InitializeCriticalSection
InterlockedExchange
EnterCriticalSection
lstrcmpiA
GetFileSizeEx
GetFullPathNameA
IsDBCSLeadByte
WriteFile
MoveFileA
GetTempFileNameA
CreateFileA
ReadFile
CloseHandle
DeleteFileA
InterlockedDecrement
InterlockedIncrement
IsProcessorFeaturePresent
VirtualFree
GetACP
WideCharToMultiByte
MultiByteToWideChar
OutputDebugStringA
GetModuleHandleA
FreeLibrary
LoadLibraryA
GetVersionExA
GetVersion
GetSystemInfo
GetProcAddress
VirtualAlloc
GetProcessHeap
HeapFree
HeapAlloc
DisableThreadLibraryCalls
MoveFileW
GetTempFileNameW
GlobalMemoryStatus
SetEndOfFile
ExpandEnvironmentStringsA
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
WaitForSingleObject
ReleaseMutex
CreateMutexA
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsAlloc
FindResourceW
GetTempPathA

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey

Exports

Exports

D3DXAssembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShaderFromFileW
D3DXAssembleShaderFromResourceA
D3DXAssembleShaderFromResourceW
D3DXBoxBoundProbe
D3DXCheckCubeTextureRequirements
D3DXCheckTextureRequirements
D3DXCheckVersion
D3DXCheckVolumeTextureRequirements
D3DXCleanMesh
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXCompileShaderFromFileW
D3DXCompileShaderFromResourceA
D3DXCompileShaderFromResourceW
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXComputeIMTFromPerTexelSignal
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeNormalMap
D3DXComputeNormals
D3DXComputeTangent
D3DXComputeTangentFrame
D3DXComputeTangentFrameEx
D3DXConcatenateMeshes
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXCreateAnimationController
D3DXCreateBox
D3DXCreateBuffer
D3DXCreateCompressedAnimationSet
D3DXCreateCubeTexture
D3DXCreateCubeTextureFromFileA
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileW
D3DXCreateCubeTextureFromResourceA
D3DXCreateCubeTextureFromResourceExA
D3DXCreateCubeTextureFromResourceExW
D3DXCreateCubeTextureFromResourceW
D3DXCreateCylinder
D3DXCreateEffect
D3DXCreateEffectCompiler
D3DXCreateEffectCompilerFromFileA
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompilerFromResourceA
D3DXCreateEffectCompilerFromResourceW
D3DXCreateEffectEx
D3DXCreateEffectFromFileA
D3DXCreateEffectFromFileExA
D3DXCreateEffectFromFileExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceA
D3DXCreateEffectFromResourceExA
D3DXCreateEffectFromResourceExW
D3DXCreateEffectFromResourceW
D3DXCreateEffectPool
D3DXCreateFontA
D3DXCreateFontIndirectA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXCreateFragmentLinker
D3DXCreateKeyframedAnimationSet
D3DXCreateLine
D3DXCreateMatrixStack
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXCreateNPatchMesh
D3DXCreatePMeshFromStream
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXCreatePRTCompBuffer
D3DXCreatePRTEngine
D3DXCreatePatchMesh
D3DXCreatePolygon
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateSPMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSphere
D3DXCreateSprite
D3DXCreateTeapot
D3DXCreateTextA
D3DXCreateTextW
D3DXCreateTexture
D3DXCreateTextureFromFileA
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXCreateTextureFromResourceA
D3DXCreateTextureFromResourceExA
D3DXCreateTextureFromResourceExW
D3DXCreateTextureFromResourceW
D3DXCreateTextureGutterHelper
D3DXCreateTextureShader
D3DXCreateTorus
D3DXCreateVolumeTexture
D3DXCreateVolumeTextureFromFileA
D3DXCreateVolumeTextureFromFileExA
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileW
D3DXCreateVolumeTextureFromResourceA
D3DXCreateVolumeTextureFromResourceExA
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateVolumeTextureFromResourceW
D3DXDebugMute
D3DXDeclaratorFromFVF
D3DXDisassembleEffect
D3DXDisassembleShader
D3DXFVFFromDeclarator
D3DXFileCreate
D3DXFillCubeTexture
D3DXFillCubeTextureTX
D3DXFillTexture
D3DXFillTextureTX
D3DXFillVolumeTexture
D3DXFillVolumeTextureTX
D3DXFilterTexture
D3DXFindShaderComment
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFrameAppendChild
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXFrameFind
D3DXFrameNumNamedMatrices
D3DXFrameRegisterNamedMatrices
D3DXFresnelTerm
D3DXGatherFragments
D3DXGatherFragmentsFromFileA
D3DXGatherFragmentsFromFileW
D3DXGatherFragmentsFromResourceA
D3DXGatherFragmentsFromResourceW
D3DXGenerateOutputDecl
D3DXGeneratePMesh
D3DXGetDeclLength
D3DXGetDeclVertexSize
D3DXGetDriverLevel
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileA
D3DXGetImageInfoFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromResourceA
D3DXGetImageInfoFromResourceW
D3DXGetPixelShaderProfile
D3DXGetShaderConstantTable
D3DXGetShaderInputSemantics
D3DXGetShaderOutputSemantics
D3DXGetShaderSamplers
D3DXGetShaderSize
D3DXGetShaderVersion
D3DXGetVertexShaderProfile
D3DXIntersect
D3DXIntersectSubset
D3DXIntersectTri
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXResource
D3DXLoadMeshFromXW
D3DXLoadMeshFromXof
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXLoadMeshHierarchyFromXW
D3DXLoadPRTBufferFromFileA
D3DXLoadPRTBufferFromFileW
D3DXLoadPRTCompBufferFromFileA
D3DXLoadPRTCompBufferFromFileW
D3DXLoadPatchMeshFromXof
D3DXLoadSkinMeshFromXof
D3DXLoadSurfaceFromFileA
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromMemory
D3DXLoadSurfaceFromResourceA
D3DXLoadSurfaceFromResourceW
D3DXLoadSurfaceFromSurface
D3DXLoadVolumeFromFileA
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromMemory
D3DXLoadVolumeFromResourceA
D3DXLoadVolumeFromResourceW
D3DXLoadVolumeFromVolume
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXPreprocessShader
D3DXPreprocessShaderFromFileA
D3DXPreprocessShaderFromFileW
D3DXPreprocessShaderFromResourceA
D3DXPreprocessShaderFromResourceW
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXRectPatchSize
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHMultiply2
D3DXSHMultiply3
D3DXSHMultiply4
D3DXSHMultiply5
D3DXSHMultiply6
D3DXSHPRTCompSplitMeshSC
D3DXSHPRTCompSuperCluster
D3DXSHProjectCubeMap
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSaveMeshHierarchyToFileA
D3DXSaveMeshHierarchyToFileW
D3DXSaveMeshToXA
D3DXSaveMeshToXW
D3DXSavePRTBufferToFileA
D3DXSavePRTBufferToFileW
D3DXSavePRTCompBufferToFileA
D3DXSavePRTCompBufferToFileW
D3DXSaveSurfaceToFileA
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileW
D3DXSaveTextureToFileA
D3DXSaveTextureToFileInMemory
D3DXSaveTextureToFileW
D3DXSaveVolumeToFileA
D3DXSaveVolumeToFileInMemory
D3DXSaveVolumeToFileW
D3DXSimplifyMesh
D3DXSphereBoundProbe
D3DXSplitMesh
D3DXTessellateNPatches
D3DXTessellateRectPatch
D3DXTessellateTriPatch
D3DXTriPatchSize
D3DXUVAtlasCreate
D3DXUVAtlasPack
D3DXUVAtlasPartition
D3DXValidMesh
D3DXValidPatchMesh
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray
D3DXWeldVertices

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
d3dx9_33_x86.cat
d3dx9_33_x86.inf
d3dx9_33_x86_xp.inf
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/APR2007_xinput_x64.cab
.cab
apr2007_xinput_x64.inf
infinst.exe
.exe windows:5 windows x64 arch:x64

6668c9525ad04c4190169dc04fde550d

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:55

Not After

16-09-2011 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

44:c2:26:68:e3:a7:0e:0f:e1:0d:6e:d0:a5:42:df:15:4c:e1:0a:0f
Signer

Actual PE Digest

44:c2:26:68:e3:a7:0e:0f:e1:0d:6e:d0:a5:42:df:15:4c:e1:0a:0f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

infinst.pdb

Imports

kernel32

OutputDebugStringA
GetWindowsDirectoryA
GetLastError
LocalFree
FormatMessageA
CompareStringA
CloseHandle
CreateFileA
lstrlenA
GetPrivateProfileStringA
FindClose
FindFirstFileA
MoveFileExA
CopyFileA
GetCurrentDirectoryA
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLocalTime
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
RtlUnwindEx
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSetInformation
HeapCreate
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
Sleep
SetFilePointer
SetStdHandle
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
ReadFile
GetLocaleInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery

user32

CharNextA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupOpenInfFileA
SetupOpenFileQueue
SetupInstallFromInfSectionA
SetupCloseFileQueue
SetupCloseInfFile
SetupCopyOEMInfA
SetupDiDestroyDeviceInfoList
SetupDiSetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDefaultQueueCallbackA

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
xinput1_3.dll
.dll windows:5 windows x64 arch:x64

cfb6d24996ee7fd94a9861f495966a8f

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:55

Not After

16-09-2011 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b1:13:a0:12:c8:ac:fe:2a:cf:9b:de:3a:9a:57:d2:44:15:68:d9:0f
Signer

Actual PE Digest

b1:13:a0:12:c8:ac:fe:2a:cf:9b:de:3a:9a:57:d2:44:15:68:d9:0f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

XInput1_3.pdb

Imports

ntdll

RtlPcToFileHeader
RtlUnwindEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

kernel32

LeaveCriticalSection
LocalFree
DuplicateHandle
GetCurrentProcess
LocalAlloc
SetEvent
GetLastError
CreateThread
CreateFileW
LoadLibraryW
FreeLibrary
GetProcAddress
DeviceIoControl
GetOverlappedResult
CreateEventW
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
ExitProcess
GetModuleHandleA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
Sleep
HeapSetInformation
HeapCreate
HeapDestroy
EnterCriticalSection
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
DeleteCriticalSection
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
WriteFile
RaiseException
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetFilePointer
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
FlushFileBuffers
InitializeCriticalSection
CloseHandle
SetHandleCount
GetEnvironmentStrings

advapi32

TraceMessage

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW

Exports

Exports

DllMain
XInputEnable
XInputGetBatteryInformation
XInputGetCapabilities
XInputGetDSoundAudioDeviceGuids
XInputGetKeystroke
XInputGetState
XInputSetState

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xinput1_3_x64.cat
xinput1_3_x64.inf
xinput1_3_x64_xp.inf
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/APR2007_xinput_x86.cab
.cab
apr2007_xinput_x86.inf
xinput1_3.dll
.dll windows:5 windows x86 arch:x86

50f64a1d9783342119da2ac75a894235

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:55

Not After

16-09-2011 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

f7:70:e2:42:9a:d8:ac:d3:80:f7:72:5c:76:ce:b2:e1:96:69:e6:f7
Signer

Actual PE Digest

f7:70:e2:42:9a:d8:ac:d3:80:f7:72:5c:76:ce:b2:e1:96:69:e6:f7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

XInput1_3.pdb

Imports

ntdll

RtlUnwind

kernel32

LocalAlloc
SetEvent
GetLastError
CreateThread
CreateFileW
LoadLibraryW
FreeLibrary
GetProcAddress
DeviceIoControl
GetOverlappedResult
CreateEventW
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
ExitProcess
GetModuleHandleA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCurrentProcess
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
DuplicateHandle
VirtualFree
WriteFile
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
RaiseException
IsBadReadPtr
IsBadCodePtr
SetFilePointer
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
VirtualProtect
GetSystemInfo
FlushFileBuffers
LocalFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CloseHandle
FreeEnvironmentStringsW
HeapCreate

advapi32

TraceMessage

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW

Exports

Exports

DllMain
XInputEnable
XInputGetBatteryInformation
XInputGetCapabilities
XInputGetDSoundAudioDeviceGuids
XInputGetKeystroke
XInputGetState
XInputSetState

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xinput1_3_x86.cat
xinput1_3_x86.inf
xinput1_3_x86_xp.inf
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ASLR.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ASLRRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ASPM.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ASPMRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ATA.IRW
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ATAPI.IRW
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AUG2006_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AUG2006_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AUG2006_xinput_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AUG2006_xinput_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AUG2007_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AUG2007_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AUG2007_d3dx10_35_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AUG2007_d3dx10_35_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AUG2007_d3dx9_35_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AUG2007_d3dx9_35_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AdvCleanup.bat
.bat .vbs
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Affinity.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AffinityRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AllCores.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AllCores.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AllCores2.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AllowInteractiveConnect.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AlphaMode Ultimate PC Gamemode.pow
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AlphaModeOff.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AlphaModeOn.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AlphaWolfPremium[0-Delay].nip
.xml
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AmdBios.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AmdClockGating.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AmdEfficiency.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AmdLatency.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AmdLowLatency.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AmdMicrocode.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AmdMicrocodePowerRun.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AmdPPM.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AmdThermalThrottling.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AmdTurbo.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AntiAliasing.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Antivirus_d.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Apr2005_d3dx9_25_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Apr2005_d3dx9_25_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Apr2006_MDX1_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Apr2006_MDX1_x86_Archive.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Apr2006_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Apr2006_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Apr2006_d3dx9_30_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Apr2006_d3dx9_30_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Apr2006_xinput_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Apr2006_xinput_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AudioEnhancements.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AudioLatency.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AudioLatencyRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2005_d3dx9_27_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2005_d3dx9_27_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2008_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2008_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2008_XAudio_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2008_XAudio_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2008_d3dx10_39_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2008_d3dx10_39_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2008_d3dx9_39_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2008_d3dx9_39_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2009_D3DCompiler_42_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2009_D3DCompiler_42_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2009_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2009_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2009_XAudio_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2009_XAudio_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2009_d3dcsx_42_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2009_d3dcsx_42_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2009_d3dx10_42_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2009_d3dx10_42_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2009_d3dx11_42_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2009_d3dx11_42_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2009_d3dx9_42_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Aug2009_d3dx9_42_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AutoDns.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Autologger.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AutologgerRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AutotuningExperimental.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AutotuningHighlyrestricted.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AutotuningNormal.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AutotuningOff.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/AutotuningRestricted.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/BSOD.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/BSODRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/BTHPORTPowerManagement.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/BTHPORTPowerManagementRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/BackgroundAudioPolicy.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/BackgroundAudioPolicyRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/BackgroundMemory.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/BackgroundThreads.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/BackgroundThreadsRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Bcdedit.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/BranchCache.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Browsermem.bat
.bat .vbs
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/BrowsermemRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/C-states.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CPPC.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CPUThrottling.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CPUThrottling.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Checksums.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ChecksumsDsiabled.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Chimney.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CoalescingTimerInterval.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CoalescingTimerIntervalRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CongestionCtcp.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CongestionCubic.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CongestionDctcp.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CongestionDefault.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CongestionNewreno.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CongestionNone.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ControllerFiltersOff.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Cooling.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CorePacking.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CorePackingRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Cortana.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CortanaRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CpuPriority.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CpuPriorityRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CpuQuota.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/CpuQuotaRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DDR2SPD.IRW
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DDR3SPD.IRW
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DDRSPD.IRW
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DEC2006_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DEC2006_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DEC2006_d3dx10_00_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DEC2006_d3dx10_00_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DEC2006_d3dx9_32_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DEC2006_d3dx9_32_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DISABLEPNP.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DSETUP.dll
.dll windows:6 windows x86 arch:x86

fcc13f8625d566aaaa2bb3f0da90254b

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

38:29:f8:13:65:88:5c:bf:c5:fa:66:63:11:cb:3f:22:25:39:e2:6c
Signer

Actual PE Digest

38:29:f8:13:65:88:5c:bf:c5:fa:66:63:11:cb:3f:22:25:39:e2:6c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

DSETUP.pdb

Imports

kernel32

GetCurrentDirectoryW
LocalFree
LocalAlloc
lstrcmpA
WideCharToMultiByte
GetSystemDefaultLCID
LoadLibraryW
GetModuleFileNameW
MultiByteToWideChar
CompareStringA
CreateDirectoryA
GetWindowsDirectoryA
FormatMessageA
GetCommandLineA
HeapFree
HeapReAlloc
HeapAlloc
GetLocalTime
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemDirectoryA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
RtlUnwind
WriteFile
InitializeCriticalSection
GetModuleHandleW
GetCPInfo
GetACP
GetOEMCP
Sleep
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
CreateFileA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
ReadFile
VirtualProtect
GetSystemInfo
VirtualQuery
SetCurrentDirectoryA
GetVersionExA
LoadLibraryA
GetProcAddress
SetCurrentDirectoryW
OutputDebugStringA
CreateMutexA
GetLastError
CloseHandle
GetSystemTimeAsFileTime
FreeLibrary

user32

GetKeyboardType
DestroyWindow
SetFocus
CreateDialogParamA
SetDlgItemTextA
MessageBoxA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA

advapi32

RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegSetValueExW
RegCreateKeyExW
RegQueryValueExA

winmm

mmioRead
mmioDescend
mmioClose
mmioOpenA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ole32

StringFromGUID2

Exports

Exports

DirectXDeviceDriverSetupA
DirectXDeviceDriverSetupW
DirectXLoadString
DirectXRegisterApplicationA
DirectXRegisterApplicationW
DirectXSetupA
DirectXSetupCallback
DirectXSetupGetEULAA
DirectXSetupGetEULAW
DirectXSetupGetFileVersion
DirectXSetupGetVersion
DirectXSetupIsEng
DirectXSetupIsJapan
DirectXSetupIsJapanNec
DirectXSetupSetCallback
DirectXSetupShowEULA
DirectXSetupW
DirectXUnRegisterApplication

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DWMFlushQueue.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DXGKrnl.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DXSETUP.exe
.exe windows:6 windows x86 arch:x86

c3f46af231fa1b9042c9d1b85247a291

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7c:43:ce:81:54:6c:17:23:08:58:c5:e8:17:dc:76:a3:4b:3b:a7:d9
Signer

Actual PE Digest

7c:43:ce:81:54:6c:17:23:08:58:c5:e8:17:dc:76:a3:4b:3b:a7:d9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DXSETUP.pdb

Imports

advapi32

RegCloseKey
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

kernel32

FindClose
FindFirstFileA
lstrlenA
ReadFile
GetFileSize
CreateFileA
GetCurrentDirectoryA
GetCurrentProcess
GetModuleFileNameA
SetErrorMode
CreateMutexA
GetModuleHandleA
CreateThread
GetSystemDirectoryA
CloseHandle
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
CompareStringA
GetWindowsDirectoryA
FormatMessageA
lstrcmpiA
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
VirtualAlloc
Sleep
GetModuleHandleW
InitializeCriticalSection
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetOEMCP
OutputDebugStringA
CreateDirectoryA
GetLastError
LocalFree
GetCommandLineA
GetStartupInfoA
GetLocalTime
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
HeapDestroy
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
HeapAlloc
GetCPInfo
GetACP

gdi32

StretchBlt
GetObjectA
DeleteDC
CreateCompatibleDC
SelectObject
CreateFontIndirectA
DeleteObject
GetDeviceCaps

user32

ReleaseDC
GetDC
LoadImageA
SystemParametersInfoA
SendDlgItemMessageA
SetDlgItemTextW
SetWindowTextW
GetWindowLongA
SetWindowLongA
PostMessageA
GetParent
SetDlgItemTextA
GetDlgItem
SendMessageA
ShowWindow
SetFocus
GetAsyncKeyState
ExitWindowsEx
EnumWindows
CharLowerA
LoadStringW
MessageBoxW
LoadStringA
MessageBoxA
GetWindowTextA
GetClassNameA
SetForegroundWindow

version

GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoA
VerQueryValueA

comctl32

CreatePropertySheetPageA
PropertySheetA
ord17

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 399KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Dc.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Dec2005_d3dx9_28_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Dec2005_d3dx9_28_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DecreaseDelay.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Default.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Defaultprerenderedframes.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DelaysTimout.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DesktopHeapLogging.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DesktopHeapLoggingRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DesktopResponsiveness.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DesktopResponsivenessRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DevManView.exe
.exe windows:4 windows x64 arch:x64

61a3748aff34d5baf30cf571c2d310e9

Code Sign

f7:a0:a7:30:c8:7d:94:cd:83:02:e3:ea:7f:66:1b:b7
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-09-2019 00:00

Not After

09-09-2023 23:59

Subject

CN=Nir Sofer,O=Nir Sofer,POSTALCODE=7135117,STREET=Dakar 21\, Unit 82,L=Lod,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:89:ae:bc:d6:cb:c5:4b:04:31:4f:50:af:8a:42:36:51:51:79:6f:48:61:9e:52:b9:d5:ba:36:e2:8d:e7:b6
Signer

Actual PE Digest

36:89:ae:bc:d6:cb:c5:4b:04:31:4f:50:af:8a:42:36:51:51:79:6f:48:61:9e:52:b9:d5:ba:36:e2:8d:e7:b6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

f:\Projects\VS2005\DevManView\x64\Release\DevManView.pdb

Imports

msvcrt

_initterm
__wgetmainargs
__setusermatherr
exit
_cexit
_exit
_c_exit
_XcptFilter
__C_specific_handler
_commode
_fmode
__set_app_type
_wcmdln
_onexit
__dllonexit
_wcslwr
strlen
qsort
memmove
_memicmp
free
modf
memcmp
wcstoul
towupper
wcscmp
_ultow
malloc
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
_itow
wcschr
wcsrchr
_wcsnicmp
_purecall
_wtoi
wcslen
_wcsicmp
memcpy
wcscpy
memset
wcscat
_snwprintf
wcsncat

comctl32

CreateStatusWindowW
CreateToolbarEx
ImageList_SetImageCount
ImageList_AddMasked
ImageList_Create
ord17
ImageList_SetOverlayImage
ImageList_ReplaceIcon
ImageList_Add

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

GetStartupInfoW
EnumResourceTypesW
SetEnvironmentVariableW
GetProcAddress
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
CompareFileTime
GetLastError
GetModuleHandleW
LoadLibraryW
FileTimeToSystemTime
SystemTimeToFileTime
OpenProcess
ExpandEnvironmentStringsW
CloseHandle
GetDriveTypeW
GetLogicalDrives
GetTickCount
CreateFileW
QueryDosDeviceW
DeviceIoControl
GetFileSize
FormatMessageW
GetVersionExW
GetTimeFormatW
GetFileAttributesW
WriteFile
ReadFile
GetWindowsDirectoryW
FindResourceW
FileTimeToLocalFileTime
LoadResource
SystemTimeToTzSpecificLocalTime
GlobalAlloc
LocalFree
GetSystemDirectoryW
lstrlenW
LockResource
lstrcpyW
WideCharToMultiByte
GlobalUnlock
GetTempPathW
GetDateFormatW
GetTempFileNameW
GlobalLock
SizeofResource
WritePrivateProfileStringW
GetPrivateProfileIntW
EnumResourceNamesW
GetPrivateProfileStringW
GetStdHandle
SetErrorMode
CreateProcessW
DeleteFileW
Sleep
ExitProcess
GetCurrentProcessId
GetCurrentProcess
ReadProcessMemory
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
GetCurrentThreadId

user32

ChildWindowFromPoint
GetWindow
EndPaint
DrawFrameControl
SetWindowTextW
GetWindowPlacement
UpdateWindow
SetDlgItemInt
ShowWindow
GetDlgItemTextW
BeginPaint
GetSystemMetrics
GetClientRect
DeferWindowPos
CreateWindowExW
SetWindowPos
SendDlgItemMessageW
EndDialog
GetWindowRect
GetDlgItem
GetDlgItemInt
InvalidateRect
SetWindowPlacement
SetMenu
LoadAcceleratorsW
DefWindowProcW
PostMessageW
SendMessageW
RegisterClassW
MessageBoxW
TranslateAcceleratorW
LoadImageW
DestroyIcon
LoadIconW
GetSysColor
SetWindowLongW
GetWindowLongW
SetFocus
GetParent
KillTimer
SetTimer
EndDeferWindowPos
BeginDeferWindowPos
GetMenuItemCount
CheckMenuItem
GetMenuStringW
GetSysColorBrush
SetClipboardData
EnableWindow
MapWindowPoints
CloseClipboard
GetMenu
EmptyClipboard
EnableMenuItem
GetSubMenu
GetClassNameW
OpenClipboard
MoveWindow
InsertMenuItemW
ModifyMenuW
GetMenuItemInfoW
GetDlgCtrlID
DestroyMenu
DialogBoxParamW
CreateDialogParamW
EnumChildWindows
LoadStringW
GetDesktopWindow
DestroyWindow
GetWindowTextW
LoadMenuW
GetKeyState
CreatePopupMenu
SetMenuItemInfoW
RegisterWindowMessageW
TrackPopupMenu
PostQuitMessage
IsDialogMessageW
GetMessageW
TranslateMessage
InsertMenuW
DrawTextExW
RemoveMenu
DeleteMenu
DispatchMessageW
MonitorFromWindow
GetMonitorInfoW
AttachThreadInput
SetForegroundWindow
GetWindowThreadProcessId
EnumWindows
LoadCursorW
SetCursor
ReleaseDC
GetDC
GetCursorPos
SetDlgItemTextW

gdi32

GetTextExtentPoint32W
CreateFontIndirectW
SetBkColor
CreateCompatibleBitmap
StretchBlt
SetStretchBltMode
GetPixel
GetDeviceCaps
SetBkMode
SetTextColor
DeleteObject
GetObjectW
SelectObject
SetPixel
DeleteDC
GetStockObject
CreateCompatibleDC

comdlg32

FindTextW
GetSaveFileNameW
GetOpenFileNameW

advapi32

StartServiceW
ControlService
CloseServiceHandle
OpenSCManagerW
QueryServiceStatus
OpenServiceW
ChangeServiceConfigW
RegLoadKeyW
RegCloseKey
RegUnLoadKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
GetTokenInformation
OpenProcessToken
RegSetKeySecurity
RegConnectRegistryW
RegGetKeySecurity

shell32

ExtractIconExW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
SHGetFileInfoW

ole32

CoUninitialize
CoInitialize
CoCreateInstance

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DevState32.exe
.exe windows:4 windows x86 arch:x86

73633ac68457fd12d5380694c65777b4

Code Sign

3e:ea:bd:93:c8:a2:b0:9b:4d:e3:c9:0e:3d:28:d8:2e
Certificate

Issuer

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Not Before

05-06-1973 21:00

Not After

30-12-2999 21:00

Subject

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Extended Key Usages

ExtKeyUsageCodeSigning

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

7b:77:32:51:68:8c:f8:c8:64:75:e0:04:ae:61:26:f2:1f:2d:29:e1
Signer

Actual PE Digest

7b:77:32:51:68:8c:f8:c8:64:75:e0:04:ae:61:26:f2:1f:2d:29:e1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLastError
SetLastError
ExitProcess
GetStartupInfoA
GetStdHandle
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
ReadProcessMemory
GetModuleFileNameA
GetModuleHandleA
WriteFile
ReadFile
CloseHandle
SetFilePointer
FreeLibrary
LoadLibraryA
GetProcAddress
CreateFileW
GetConsoleMode
GetConsoleOutputCP
GetOEMCP
GetProcessHeap
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
TlsSetValue
CreateThread
ExitThread
LocalAlloc
LocalFree
Sleep
SuspendThread
ResumeThread
TerminateThread
WaitForSingleObject
SetThreadPriority
GetThreadPriority
CreateEventA
ResetEvent
SetEvent
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetConsoleCP
SetUnhandledExceptionFilter
EnumResourceTypesA
EnumResourceNamesA
EnumResourceLanguagesA
FindResourceA
FindResourceExA
LoadResource
SizeofResource
LockResource
FreeResource
FormatMessageA
GetWindowsDirectoryA
GetVersionExA
CompareStringA
GetLocaleInfoA
GetDateFormatA
EnumCalendarInfoA
CompareStringW
GetLocalTime
GetThreadLocale
SetThreadLocale
GetUserDefaultLCID

oleaut32

SysAllocStringLen
SysFreeString
SysReAllocStringLen
SafeArrayCreate
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayPtrOfIndex
VariantChangeTypeEx
VariantClear
VariantCopy
VariantInit

user32

MessageBoxA
CharUpperBuffW
CharLowerBuffW
CharUpperA
CharUpperBuffA
CharLowerA
CharLowerBuffA
GetSystemMetrics
MessageBeep

setupapi

SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInfoA
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller
SetupDiGetDeviceRegistryPropertyA
SetupDiSetClassInstallParamsA

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DevState64.exe
.exe windows:4 windows x64 arch:x64

a1c90cb2a94c50dc3a2fec4d9c4d411e

Code Sign

3e:ea:bd:93:c8:a2:b0:9b:4d:e3:c9:0e:3d:28:d8:2e
Certificate

Issuer

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Not Before

05-06-1973 21:00

Not After

30-12-2999 21:00

Subject

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Extended Key Usages

ExtKeyUsageCodeSigning

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

c8:dd:58:ef:80:39:60:16:08:22:1a:8d:56:8d:90:f4:d6:e4:57:fa
Signer

Actual PE Digest

c8:dd:58:ef:80:39:60:16:08:22:1a:8d:56:8d:90:f4:d6:e4:57:fa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLastError
SetLastError
ExitProcess
GetStartupInfoA
GetStdHandle
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
ReadProcessMemory
GetModuleFileNameA
GetModuleHandleA
WriteFile
ReadFile
CloseHandle
SetFilePointer
FreeLibrary
LoadLibraryA
GetProcAddress
CreateFileW
GetConsoleMode
GetConsoleOutputCP
GetOEMCP
GetProcessHeap
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
TlsSetValue
CreateThread
ExitThread
LocalAlloc
LocalFree
Sleep
SuspendThread
ResumeThread
TerminateThread
WaitForSingleObject
SetThreadPriority
GetThreadPriority
CreateEventA
ResetEvent
SetEvent
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
RaiseException
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetConsoleCP
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlUnwindEx
EnumResourceTypesA
EnumResourceNamesA
EnumResourceLanguagesA
FindResourceA
FindResourceExA
LoadResource
SizeofResource
LockResource
FreeResource
FormatMessageA
GetWindowsDirectoryA
GetVersionExA
CompareStringA
GetLocaleInfoA
GetDateFormatA
EnumCalendarInfoA
CompareStringW
GetLocalTime
GetThreadLocale
SetThreadLocale
GetUserDefaultLCID

oleaut32

SysAllocStringLen
SysFreeString
SysReAllocStringLen
SafeArrayCreate
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayPtrOfIndex
VariantChangeTypeEx
VariantClear
VariantCopy
VariantInit

user32

MessageBoxA
CharUpperBuffW
CharLowerBuffW
CharUpperA
CharUpperBuffA
CharLowerA
CharLowerBuffA
GetSystemMetrics
MessageBeep

setupapi

SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInfoA
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller
SetupDiGetDeviceRegistryPropertyA
SetupDiSetClassInstallParamsA

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DeviceCleanupCmd.exe
.exe windows:5 windows x64 arch:x64

c08d3d26064239a79f795d1f80fb52a5

Code Sign

5b:16:02:a6:5c:10:8c:b5:47:a1:5f:08:9a:33:5c:5b
Certificate

Issuer

CN=Uwe Sieber,O=www.uwe-sieber.de,1.2.840.113549.1.9.1=#0c126d61696c407577652d7369656265722e6465

Not Before

08-09-2011 13:43

Not After

30-12-2099 22:00

Subject

CN=Uwe Sieber,O=www.uwe-sieber.de,1.2.840.113549.1.9.1=#0c126d61696c407577652d7369656265722e6465

Extended Key Usages

ExtKeyUsageCodeSigning

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

87:31:e9:97:23:1c:67:39:45:3c:68:b3:84:49:f1:24:3f:48:05:e5
Signer

Actual PE Digest

87:31:e9:97:23:1c:67:39:45:3c:68:b3:84:49:f1:24:3f:48:05:e5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

u:\1Source\VC\DeviceCleanupCmd070\Release_x64\DeviceCleanupCmd.pdb

Imports

setupapi

SetupDiSetClassInstallParamsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_DevNode_Status
CM_Get_Parent
CM_Get_DevNode_Registry_PropertyA
CM_Get_Device_IDA
SetupDiGetClassDevsA
CM_Locate_DevNode_ExA
CM_Reenumerate_DevNode_Ex
SetupDiRemoveDevice

shlwapi

StrToIntA
StrStrIA
StrRChrA
StrChrA

kernel32

GetSystemTime
SystemTimeToFileTime
CloseHandle
GetLastError
OpenProcess
GetWindowsDirectoryA
GetCurrentProcess
ReadConsoleInputA
FlushConsoleInputBuffer
Sleep
GetCurrentProcessId
GetConsoleWindow
GetNumberOfConsoleInputEvents
GetTickCount
SetConsoleTextAttribute
GetStdHandle
PeekConsoleInputA
lstrcpyA
GetConsoleScreenBufferInfo
SetConsoleMode
SetConsoleCtrlHandler
GetModuleFileNameA
HeapAlloc
HeapFree
lstrlenA
GetCommandLineA
GetSystemDirectoryA
SetFileAttributesA
GetFileAttributesA
GetProcAddress
ExitProcess
GetModuleHandleA
GetProcessHeap
WriteFile
lstrcatA
SetConsoleWindowInfo
SetConsoleScreenBufferSize
LoadLibraryA
GetVersionExA
SetLastError
FreeLibrary

user32

GetDesktopWindow
GetWindowPlacement
IsWindowVisible
CharUpperA
GetWindowThreadProcessId
wsprintfA
wvsprintfA
MessageBoxA

advapi32

CheckTokenMembership
FreeSid
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryInfoKeyA
RegCloseKey
OpenProcessToken
AllocateAndInitializeSid

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DeviceHighPriority.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Direct3D.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Direct3DDebug.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Direct3DDebugRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DirectX -SharedVideoMemoryHeap (2.5gb) (8GB-SystemDram).REG
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DirectX -SharedVideoMemoryHeap (4.5gb) (16GB-SystemDram).REG
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DirectX -SharedVideoMemoryHeap (6.5gb) (32GB-SystemDram).REG
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableAntivirusProtection.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableBoottrace.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableBoottraceRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableDefenderPolicies.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableDefenderandSecurityCenterNotifications.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableDevDriveProtection.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableDistributeTimers.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableDualsenseGyro.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableIPv6.bat
.bat .vbs
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableIPv6Revert.bat
.bat .vbs
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableLSAProtection.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableMaintenanceTaskreportinginSecurityHealthUI.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableMicrosoftVulnerabileDriverBlocklist.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableNVIDIAHDCP.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisablePNP.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisablePNPRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisablePowerSaving.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableRuntimeBroker.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableRuntimeBrokerRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableSmartScreen.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableSpyNetTelemetry.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableStandby.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableStandbyRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableSvchostMitigationPolicy.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableSvchostMitigationPolicyRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableSystemMitigations.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableTamperProtection.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableTsx.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableUAC.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableULPS.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableVBS.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableWMI.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DisableWMIRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Discord.png
.png
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DiskMemory.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DiskWriteCache.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DistributeTimers.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DistributeTimersRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DmaRemappingCompatible.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DmaRemappingCompatibleRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DnsCache.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DnsCacheRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DnsClient.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DriveIdleStates.bat
.bat .ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DriverSearching.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DriverSearchingRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DynamicProcessor.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DynamicProcessorRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/DynamicPstates.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/EfficiencyModeRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/EmulateStateBlocks.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/EnableDeLag.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/EnableDistributeTimers.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/EnableHAGS.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/EnableHAGSRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/EnableTsx.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Ethernet.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ExploitGuard_d.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ExtremePowerTweaks.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ExtremeTCIPtweaks.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ExtremeTCIPtweaks.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FEB2007_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FEB2007_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FSE.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FSERevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FSO.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FSORevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Feb2005_d3dx9_24_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Feb2005_d3dx9_24_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Feb2006_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Feb2006_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Feb2006_d3dx9_29_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Feb2006_d3dx9_29_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Feb2010_X3DAudio_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Feb2010_X3DAudio_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Feb2010_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Feb2010_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Feb2010_XAudio_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Feb2010_XAudio_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FilterKeys.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Flow.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FlowPower.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FlowRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ForceHal.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ForegroundTweaks.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ForegroundTweaksRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Fortnite.png
.png
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FortnitePagePriority.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FortnitePagePriorityRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FortniteTCPIP.bat
.bat .ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FortniteTCPIP.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FortniteTCPIPFlow.bat
.bat .ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FortniteTCPIPFlow.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FortniteThreads.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FsutilHDD.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/FsutilSSD.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/GameBar.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/GameBarRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/GameMode.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/GameModeRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/GameTweaks.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/GitContextMenu.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Glass.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/GlassRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/GoogleDns.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/GpuMsi.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/GpuMsiRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/GpuUsage.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/GpuUsageRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/HID-CompliantDevices.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/HIDPowerManagement.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/HIDPowerManagementRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/HPET.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/HPETRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/HidControllerConfig.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/HidControllerDelay.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/HighDutyCycleScanInterval.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/HighDutyCycleScanWindow.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/HostResPriority.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ICPM.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IOBoost.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IORequestPacket.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IORequestPacketRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IOSmoothing.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IPv6teredo.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IRQ's.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IRQ'sRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IdleStates.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/InputTelementry.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/InputTelementryRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/InquiryDuration.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IntelBios.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IntelIdleStates.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IntelLowLatency.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IntelMicrocode.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IntelMicrocodePowerRun.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IntelPowerManagement.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IntelTurboFrequency.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IntelppmParameters.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/InternetSettings.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/InternetSettings.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/InterruptSteering.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/InterruptSteeringRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IoLatency.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IoLatencyExit.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/IsolatedContent.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2006_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2006_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2007_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2007_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2007_d3dx10_34_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2007_d3dx10_34_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2007_d3dx9_34_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2007_d3dx9_34_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2008_X3DAudio_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2008_X3DAudio_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2008_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2008_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2008_XAudio_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2008_XAudio_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2008_d3dx10_38_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2008_d3dx10_38_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2008_d3dx9_38_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JUN2008_d3dx9_38_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/JoysitckSmoothing.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2005_d3dx9_26_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2005_d3dx9_26_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2010_D3DCompiler_43_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2010_D3DCompiler_43_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2010_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2010_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2010_XAudio_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2010_XAudio_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2010_d3dcsx_43_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2010_d3dcsx_43_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2010_d3dx10_43_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2010_d3dx10_43_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2010_d3dx11_43_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2010_d3dx11_43_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2010_d3dx9_43_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Jun2010_d3dx9_43_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Kboost.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/KboostRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/KernelDebugPollInterval.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/KernelDebugPollIntervalRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/KernelPerf.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/KernelPerfRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/KeybdRepeatDelay.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/KeybdRepeatRate.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/LCacheSize.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/LCacheSizeRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/LED.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/LEDRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/LanmanServer.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/LargePageDrivers.bat
.bat .vbs
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/LargeSendOffload.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/LatencyDPC.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/LatencyDPCRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/LinkSupervisionTimeout.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Log.txt
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MMCSS.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MMCSSDisabled.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MMCSSEnabled.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MMCSSRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MSI.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MSIRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2008_X3DAudio_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2008_X3DAudio_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2008_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2008_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2008_XAudio_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2008_XAudio_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2008_d3dx10_37_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2008_d3dx10_37_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2008_d3dx9_37_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2008_d3dx9_37_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2009_X3DAudio_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2009_X3DAudio_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2009_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2009_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2009_XAudio_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2009_XAudio_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2009_d3dx10_41_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2009_d3dx10_41_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2009_d3dx9_41_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mar2009_d3dx9_41_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MaxDiskReadspeed.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MaxDiskReadspeedRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MaxLoaderThreads.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MaxLoaderThreadsRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MaxNumRssCPUs 10.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MaxNumRssCPUs 12.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MaxNumRssCPUs 16.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MaxNumRssCPUs 20.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MaxNumRssCPUs 4.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MaxNumRssCPUs 6.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MaxNumRssCPUs 8.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MaxPerf.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MaxPerfRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MaximumTransferLength.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MaximumTransferLength.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MemoryCompression.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MemoryManagement.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MemoryPressureProtection.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MinimumFileCacheSize.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MinimumFileCacheSize.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MinimumFileCacheSizeRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MinimumWorkingSet.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MinimumWorkingSet.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MinimumWorkingSetRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MitigationofFaultTorelantHeap.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mitigations.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Mouse1000.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MouseAccel.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MouseAccelRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MouseIo.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MouseIoRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MouseMovements.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MousePriorityClass.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MousePriorityClassRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MouseThreadPriority.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/MouseThreadPriorityRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NOV2007_X3DAudio_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NOV2007_X3DAudio_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NOV2007_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NOV2007_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NVMEThrottling.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NVMEThrottlingRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NaglesAlgorithm.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NetBios.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NetCache.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NetCacheRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Netsh.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NoExtraBuffer.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NoExtraBuffer.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NomoreDelayandTimeouts.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NordVPN.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Notifications.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NotificationsRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Nov2007_d3dx10_36_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Nov2007_d3dx10_36_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Nov2007_d3dx9_36_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Nov2007_d3dx9_36_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Nov2008_X3DAudio_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Nov2008_X3DAudio_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Nov2008_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Nov2008_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Nov2008_XAudio_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Nov2008_XAudio_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Nov2008_d3dx10_40_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Nov2008_d3dx10_40_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Nov2008_d3dx9_40_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Nov2008_d3dx9_40_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NvidiaDPC.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NvidiaDisablePowerSaving.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NvidiaLatency.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NvidiaLatencyTollerance.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NvidiaLatencyTolleranceRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NvidiaPerformance.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NvidiaPowerGating.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NvidiaPowerGating.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NvidiaPowerGatingRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NvidiaSilkSmoothness.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NvidiaSilkSmoothnessRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NvidiaTelementry.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NvidiaVideoMemory.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/NvidiaVideoMemoryRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/OCT2006_XACT_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/OCT2006_XACT_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/OCT2006_d3dx9_31_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/OCT2006_d3dx9_31_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Oct2005_xinput_x64.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Oct2005_xinput_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/OpenDNS.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/OptimizeIOoperations.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/OptimizeNetworkTCPSettings.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/OptimizeNvidiaControlPanelSettings.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/OverlayTestMode.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/OverlayTestModeRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PCIBRI.IRW
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PCISTD.IRW
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PNPPower.bat
.bat .ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PacketCoalescingFilterDisabled.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PacketCoalescingFilterEnabled.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PageCombining.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PageTimeout.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PerfBurst.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PolicyEnhanced.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PolicyLegacy.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PoolUsageMaximum.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PoolUsageMaximumRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PowerEnergy.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PowerFlow.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PowerRun.exe
.exe windows:5 windows x86 arch:x86

870b8e75c7190e202e9c6c81dff1040c

Code Sign

79:9e:5f:0f:69:be:cb:93:49:4a:b3:10:ef:62:cc:c3
Certificate

Issuer

CN=Sordum Software

Not Before

15-08-2021 21:00

Not After

31-07-2032 21:00

Subject

CN=Sordum Software

Extended Key Usages

ExtKeyUsageCodeSigning

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19-05-2021 05:42

Not After

18-05-2032 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d7:71:aa:ce:fb:c5:63:43:78:29:d1:32:10:6c:cc:3a:11:7f:31:6f
Signer

Actual PE Digest

d7:71:aa:ce:fb:c5:63:43:78:29:d1:32:10:6c:cc:3a:11:7f:31:6f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

__WSAFDIsSet
setsockopt
ntohs
recvfrom
sendto
htons
select
listen
WSAStartup
bind
closesocket
connect
socket
send
WSACleanup
ioctlsocket
accept
WSAGetLastError
inet_addr
gethostbyname
gethostname
recv

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

winmm

timeGetTime
waveOutSetVolume
mciSendStringW

comctl32

ImageList_Remove
ImageList_SetDragCursorImage
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_EndDrag
ImageList_DragMove
ImageList_ReplaceIcon
ImageList_Create
InitCommonControlsEx
ImageList_Destroy

mpr

WNetCancelConnection2W
WNetGetConnectionW
WNetAddConnection2W
WNetUseConnectionW

wininet

InternetReadFile
InternetCloseHandle
InternetOpenW
InternetSetOptionW
InternetCrackUrlW
HttpQueryInfoW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
FtpOpenFileW
FtpGetFileSize
InternetOpenUrlW
InternetQueryOptionW
InternetQueryDataAvailable

psapi

EnumProcesses
GetModuleBaseNameW
GetProcessMemoryInfo
EnumProcessModules

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock
UnloadUserProfile
LoadUserProfileW

kernel32

HeapAlloc
Sleep
GetCurrentThreadId
RaiseException
MulDiv
GetVersionExW
GetSystemInfo
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleW
QueryPerformanceCounter
VirtualFreeEx
OpenProcess
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
CreateFileW
SetFilePointerEx
ReadFile
WriteFile
FlushFileBuffers
TerminateProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
SetFileTime
GetFileAttributesW
FindFirstFileW
FindClose
DeleteFileW
FindNextFileW
lstrcmpiW
MoveFileW
CopyFileW
CreateDirectoryW
RemoveDirectoryW
SetSystemPowerState
QueryPerformanceFrequency
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
OutputDebugStringW
GetLocalTime
CompareStringW
CompareStringA
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetStdHandle
CreatePipe
InterlockedExchange
TerminateThread
GetTempPathW
GetTempFileNameW
VirtualFree
FormatMessageW
GetExitCodeProcess
SetErrorMode
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileSectionW
WritePrivateProfileSectionW
GetPrivateProfileSectionNamesW
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetDriveTypeW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetVolumeInformationW
SetVolumeLabelW
CreateHardLinkW
DeviceIoControl
SetFileAttributesW
GetShortPathNameW
CreateEventW
SetEvent
GetEnvironmentVariableW
SetEnvironmentVariableW
GlobalLock
GlobalUnlock
GlobalAlloc
GetFileSize
GlobalFree
GlobalMemoryStatusEx
Beep
GetComputerNameW
GetWindowsDirectoryW
GetSystemDirectoryW
GetCurrentProcessId
GetCurrentThread
GetProcessIoCounters
CreateProcessW
SetPriorityClass
LoadLibraryW
VirtualAlloc
LoadLibraryExW
HeapFree
WaitForSingleObject
CreateThread
DuplicateHandle
GetLastError
CloseHandle
GetCurrentProcess
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleFileNameW
GetFullPathNameW
ExitProcess
ExitThread
GetSystemTimeAsFileTime
SetCurrentDirectoryW
IsDebuggerPresent
GetCurrentDirectoryW
ResumeThread
GetStartupInfoW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameA
HeapReAlloc
HeapCreate
SetHandleCount
GetFileType
GetStartupInfoA
SetStdHandle
GetConsoleCP
GetConsoleMode
LCMapStringW
LCMapStringA
RtlUnwind
SetFilePointer
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetTickCount
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetModuleHandleA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEndOfFile
EnumResourceNamesW
SetEnvironmentVariableA

user32

SetWindowPos
GetCursorInfo
RegisterHotKey
ClientToScreen
GetKeyboardLayoutNameW
IsCharAlphaW
IsCharAlphaNumericW
IsCharLowerW
IsCharUpperW
GetMenuStringW
GetSubMenu
GetCaretPos
IsZoomed
MonitorFromPoint
GetMonitorInfoW
SetWindowLongW
SetLayeredWindowAttributes
FlashWindow
GetClassLongW
TranslateAcceleratorW
IsDialogMessageW
GetSysColor
InflateRect
DrawFocusRect
DrawTextW
FrameRect
DrawFrameControl
FillRect
PtInRect
DestroyAcceleratorTable
CreateAcceleratorTableW
SetCursor
GetWindowDC
GetSystemMetrics
GetActiveWindow
CharNextW
wsprintfW
RedrawWindow
DrawMenuBar
DestroyMenu
SetMenu
GetWindowTextLengthW
CreateMenu
IsDlgButtonChecked
DefDlgProcW
ReleaseCapture
SetCapture
WindowFromPoint
CreateIconFromResourceEx
mouse_event
ExitWindowsEx
SetActiveWindow
FindWindowExW
EnumThreadWindows
SetMenuDefaultItem
InsertMenuItemW
IsMenu
TrackPopupMenuEx
GetCursorPos
DeleteMenu
CheckMenuRadioItem
CopyImage
GetMenuItemCount
SetMenuItemInfoW
GetMenuItemInfoW
SetForegroundWindow
IsIconic
FindWindowW
SystemParametersInfoW
PeekMessageW
SendInput
GetAsyncKeyState
SetKeyboardState
GetKeyboardState
GetKeyState
VkKeyScanW
LoadStringW
DialogBoxParamW
MessageBeep
EndDialog
SendDlgItemMessageW
GetDlgItem
SetWindowTextW
CopyRect
ReleaseDC
GetDC
EndPaint
BeginPaint
GetClientRect
GetMenu
DestroyWindow
EnumWindows
GetDesktopWindow
IsWindow
IsWindowEnabled
IsWindowVisible
EnableWindow
InvalidateRect
GetWindowThreadProcessId
AttachThreadInput
GetFocus
GetWindowTextW
ScreenToClient
SendMessageTimeoutW
EnumChildWindows
CharUpperBuffW
GetClassNameW
GetParent
GetDlgCtrlID
SendMessageW
MapVirtualKeyW
PostMessageW
GetWindowRect
SetUserObjectSecurity
GetUserObjectSecurity
CloseDesktop
CloseWindowStation
OpenDesktopW
SetProcessWindowStation
GetProcessWindowStation
OpenWindowStationW
MessageBoxW
DefWindowProcW
MoveWindow
AdjustWindowRectEx
SetRect
SetClipboardData
EmptyClipboard
CountClipboardFormats
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
OpenClipboard
BlockInput
GetMessageW
LockWindowUpdate
DispatchMessageW
GetMenuItemID
TranslateMessage
SetFocus
PostQuitMessage
KillTimer
CreatePopupMenu
RegisterWindowMessageW
SetTimer
ShowWindow
CreateWindowExW
RegisterClassExW
LoadIconW
LoadCursorW
GetSysColorBrush
GetForegroundWindow
MessageBoxA
DestroyIcon
UnregisterHotKey
CharLowerBuffW
MonitorFromRect
keybd_event
LoadImageW
GetWindowLongW

gdi32

DeleteObject
GetObjectW
GetTextExtentPoint32W
ExtCreatePen
StrokeAndFillPath
StrokePath
EndPath
SetPixel
CloseFigure
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
StretchBlt
GetDIBits
LineTo
AngleArc
MoveToEx
Ellipse
PolyDraw
BeginPath
Rectangle
GetDeviceCaps
SetBkMode
RoundRect
SetBkColor
CreatePen
CreateSolidBrush
SetTextColor
CreateFontW
GetTextFaceW
GetStockObject
CreateDCW
GetPixel
DeleteDC
SetViewportOrgEx

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
GetUserNameW
RegConnectRegistryW
RegEnumKeyExW
CloseServiceHandle
UnlockServiceDatabase
LockServiceDatabase
OpenSCManagerW
InitiateSystemShutdownExW
AdjustTokenPrivileges
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
DuplicateTokenEx
CreateProcessAsUserW
CreateProcessWithLogonW
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
SetSecurityDescriptorDacl
CopySid
LogonUserW
GetTokenInformation
GetAclInformation
GetAce
AddAce
GetSecurityDescriptorDacl

shell32

DragQueryPoint
ShellExecuteExW
SHGetFolderPathW
DragQueryFileW
SHEmptyRecycleBinW
SHBrowseForFolderW
SHFileOperationW
SHGetPathFromIDListW
SHGetDesktopFolder
SHGetMalloc
ExtractIconExW
Shell_NotifyIconW
ShellExecuteW
DragFinish

ole32

OleSetMenuDescriptor
MkParseDisplayName
OleSetContainedObject
CoInitialize
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
StringFromCLSID
IIDFromString
StringFromIID
OleInitialize
CreateBindCtx
CLSIDFromProgID
CoInitializeSecurity
CoCreateInstanceEx
CoSetProxyBlanket
OleUninitialize

oleaut32

SafeArrayAllocData
SafeArrayAllocDescriptorEx
SysAllocString
OleLoadPicture
SafeArrayGetVartype
SafeArrayDestroyData
SafeArrayAccessData
VarR8FromDec
VariantTimeToSystemTime
VariantClear
VariantCopy
VariantInit
SafeArrayDestroyDescriptor
LoadRegTypeLi
GetActiveObject
SafeArrayUnaccessData

Sections

.text
Size: 512KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PowerSetting.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PowerThrottling.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PowerThrottlingRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Powersavings.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Preemption.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PreemptionRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Prefetch.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PrefetchRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PriorityBoost.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PriorityBoostRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ProcessorConfig.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ProcessorExtreme.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ProcessorFrequency.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ProcessorHigh.REG
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ProcessorHigh.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ProcessorIdle.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ProcessorLatency.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ProcessorLatencyRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ProcessorPower.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Pshed.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Pstates.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/PstatesRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Purple.json
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/QosSettings.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Quad9.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/QualityCompact.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/QualityCompact.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/QualityCompactRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RSC.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Randomizers.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RandomizersRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ReadyBoost.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ReadyBoostRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RemovalofAnti-PhishingServices.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RemovalofWindowsDefenderAntivirus.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Remove and Disable Microsoft Pluton.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Remove.Edge.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Remove.OneDrive.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RemoveDefenderTasks.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RemoveSecHealthApp.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RemoveSecurityandMaintenance.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RemoveServices.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RemoveShellAssociation.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RemoveSignatureUpdates.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RemoveStartupEntries.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RemoveWindowsDefenderFirewallRules.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RemoveWindowsWebThreat.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RemoverofDefenderContextMenu.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ReserveManager.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ReserveManagerRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RestorePoint.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Runtime.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RuntimeRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Rw.exe
.exe windows:5 windows x64 arch:x64

dd6ffe4e95f1662fb3dd967fd840ccad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

setupapi

CM_Connect_MachineW
CM_Disconnect_Machine
CM_Free_Log_Conf_Handle
CM_Free_Res_Des_Handle
CM_Get_Child
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Status_Ex
CM_Get_Device_ID_ExW
CM_Get_First_Log_Conf_Ex
CM_Get_Next_Res_Des_Ex
CM_Get_Res_Des_Data_Ex
CM_Get_Res_Des_Data_Size_Ex
CM_Locate_DevNode_ExW
CM_Reenumerate_DevNode_Ex
SetupCloseInfFile
SetupCopyOEMInfW
SetupDiBuildClassInfoListExW
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupDiClassGuidsFromNameExW
SetupDiClassNameFromGuidExW
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoListExW
SetupDiCreateDeviceInfoW
SetupDiDestroyDeviceInfoList
SetupDiDestroyDriverInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiEnumDriverInfoW
SetupDiGetClassDescriptionExW
SetupDiGetClassDevsExW
SetupDiGetClassDevsW
SetupDiGetDeviceInfoListDetailW
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDriverInfoDetailW
SetupDiGetDriverInstallParamsW
SetupDiGetINFClassW
SetupDiOpenClassRegKeyExW
SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoW
SetupDiSetClassInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupFindFirstLineW
SetupGetStringFieldW
SetupOpenInfFileW

advapi32

AdjustTokenPrivileges
CloseServiceHandle
ControlService
CreateServiceW
DeleteService
InitiateSystemShutdownExW
LookupPrivilegeValueW
OpenProcessToken
OpenSCManagerW
OpenServiceW
RegCloseKey
RegConnectRegistryW
RegCreateKeyExW
RegDeleteKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegFlushKey
RegLoadKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegReplaceKeyW
RegRestoreKeyW
RegSaveKeyW
RegSetValueExW
RegUnLoadKeyW
StartServiceW

kernel32

AddVectoredExceptionHandler
AllocConsole
AttachConsole
CloseHandle
CompareStringA
CompareStringW
ConnectNamedPipe
CreateDirectoryA
CreateEventW
CreateFileA
CreateFileW
CreateMutexW
CreateNamedPipeW
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeviceIoControl
DisconnectNamedPipe
EnterCriticalSection
EnumCalendarInfoW
EnumResourceNamesW
EnumSystemLocalesW
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceA
FindResourceW
FormatMessageW
FreeConsole
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCPInfoExW
GetCommState
GetCommTimeouts
GetCommandLineW
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetDiskFreeSpaceW
GetEnvironmentStrings
GetEnvironmentStringsW
GetExitCodeThread
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDrives
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetSystemDirectoryW
GetSystemInfo
GetTempPathW
GetThreadLocale
GetThreadPriority
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultUILanguage
GetVersion
GetVersionExA
GetVersionExW
GetWindowsDirectoryW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFree
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapSize
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LockResource
MoveFileW
MulDiv
MultiByteToWideChar
OpenMutexW
OpenProcess
PurgeComm
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseSemaphore
RemoveDirectoryA
RemoveDirectoryW
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlCaptureContext
RtlUnwind
SetCommState
SetCommTimeouts
SetConsoleCtrlHandler
SetConsoleTextAttribute
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetProcessAffinityMask
SetThreadLocale
SetThreadPriority
SizeofResource
Sleep
SuspendThread
SwitchToThread
SystemTimeToFileTime
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
VirtualQueryEx
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
lstrcmpW
lstrlenW
RtlRestoreContext
RtlUnwindEx

netapi32

NetWkstaGetInfo

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winspool.drv

ClosePrinter
DocumentPropertiesW
EnumPrintersW
GetDefaultPrinterW
OpenPrinterW

comctl32

FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
ImageList_Add
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_LoadImageW
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_SetOverlayImage
ImageList_Write
InitCommonControls
InitializeFlatSB
_TrackMouseEvent

comdlg32

FindTextW
GetOpenFileNameW
GetSaveFileNameW

gdi32

AbortDoc
AngleArc
Arc
ArcTo
BeginPath
BitBlt
Chord
CombineRgn
CopyEnhMetaFileW
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateDIBitmap
CreateFontIndirectW
CreateHalftonePalette
CreateICW
CreatePalette
CreatePenIndirect
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
Ellipse
EndDoc
EndPage
EndPath
EnumFontFamiliesExW
EnumFontsW
ExcludeClipRect
ExtCreatePen
ExtFloodFill
ExtTextOutW
FrameRgn
GdiFlush
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetEnhMetaFileBits
GetEnhMetaFileDescriptionW
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetObjectW
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetStretchBltMode
GetSystemPaletteEntries
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
GetWinMetaFileBits
GetWindowOrgEx
IntersectClipRect
LineTo
MaskBlt
MoveToEx
PatBlt
Pie
PlayEnhMetaFile
PolyBezier
PolyBezierTo
PolyPolyline
Polygon
Polyline
RealizePalette
RectVisible
Rectangle
RestoreDC
RoundRect
SaveDC
SelectClipPath
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetDIBits
SetEnhMetaFileBits
SetMapMode
SetPixel
SetROP2
SetRectRgn
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWinMetaFileBits
SetWindowExtEx
SetWindowOrgEx
StartDocW
StartPage
StretchBlt
StretchDIBits
UnrealizeObject

shell32

CommandLineToArgvW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW

user32

ActivateKeyboardLayout
AdjustWindowRectEx
BeginDeferWindowPos
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcW
CharLowerBuffA
CharLowerBuffW
CharLowerW
CharNextW
CharUpperBuffA
CharUpperBuffW
CharUpperW
CheckMenuItem
ChildWindowFromPoint
ClientToScreen
CloseClipboard
CopyIcon
CopyImage
CountClipboardFormats
CreateAcceleratorTableW
CreateCaret
CreateIcon
CreateMenu
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DefMDIChildProcW
DefWindowProcW
DeferWindowPos
DeleteMenu
DestroyCaret
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DispatchMessageW
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawTextExW
DrawTextW
EmptyClipboard
EnableMenuItem
EnableScrollBar
EnableWindow
EndDeferWindowPos
EndMenu
EndPaint
EnumChildWindows
EnumClipboardFormats
EnumDisplayMonitors
EnumThreadWindows
EnumWindows
FillRect
FindWindowExW
FindWindowW
FrameRect
GetActiveWindow
GetCapture
GetCaretPos
GetClassInfoExW
GetClassInfoW
GetClassNameW
GetClientRect
GetClipboardData
GetCursor
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyNameTextW
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameW
GetKeyboardState
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuState
GetMenuStringW
GetMessageExtraInfo
GetMessagePos
GetMessageTime
GetMonitorInfoW
GetParent
GetPropW
GetScrollBarInfo
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetUpdateRect
GetWindow
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextW
GetWindowThreadProcessId
HideCaret
InsertMenuItemW
InsertMenuW
InvalidateRect
IsCharAlphaNumericW
IsCharAlphaW
IsChild
IsClipboardFormatAvailable
IsDialogMessageA
IsDialogMessageW
IsIconic
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapW
LoadCursorW
LoadIconW
LoadKeyboardLayoutW
LoadStringW
LockWindowUpdate
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MoveWindow
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageW
PostQuitMessage
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterDeviceNotificationW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
ScrollWindow
ScrollWindowEx
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetCaretPos
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetKeyboardState
SetMenu
SetMenuItemInfoW
SetParent
SetPropW
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UnregisterDeviceNotification
UpdateWindow
ValidateRect
WaitMessage
WindowFromPoint
GetClassLongPtrW
GetWindowLongPtrW
SetClassLongPtrW
SetWindowLongPtrW
wsprintfA

ole32

CLSIDFromString
CoCreateInstance
CoInitialize
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
IsEqualGUID
OleInitialize
OleUninitialize

oleaut32

GetErrorInfo
SafeArrayCreate
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VariantChangeType
VariantClear
VariantCopy
VariantInit

Exports

Exports

_ZTR10TComThread
_ZTR10TEcRamForm
_ZTR11TCpuMsrForm
_ZTR11TMemoryForm
_ZTR11TRwEditForm
_ZTR11TSmbDevForm
_ZTR11TSmbiosForm
_ZTR12TCommandForm
_ZTR12TDimmSpdForm
_ZTR12TDiskDlgForm
_ZTR12TIoSpaceForm
_ZTR12TMmioDlgForm
_ZTR12TPciTreeForm
_ZTR12TRwGridStyle
_ZTR12TStartUpForm
_ZTR12TSuperIoForm
_ZTR12TUsbInfoForm
_ZTR13LogPipeThread
_ZTR13TAcpiDumpForm
_ZTR13TAtaAtapiForm
_ZTR13TBitGridStyle
_ZTR13TClockGenForm
_ZTR14TAm2PciAddForm
_ZTR14TByteGridStyle
_ZTR14TCpuMsrDlgForm
_ZTR14TMemoryDlgForm
_ZTR14TOptionRomForm
_ZTR15TIoSpaceDlgForm
_ZTR15TMsrSummaryForm
_ZTR16TIoIndexDataForm
_ZTR16TMmioInplaceEdit
_ZTR16TRwDwordEditForm
_ZTR16TUserDefinedForm
_ZTR17TPciIndexDataForm
_ZTR17TTimerSettingForm
_ZTR18TPciResSummaryForm
_ZTR18TRemoteMonitorForm
_ZTR18TRwGridInplaceEdit
_ZTR19TEnterConfigDlgForm
_ZTR19TIoIndexDataDlgForm
_ZTR20TByteGridInplaceEdit
_ZTR20TMemoryIndexDataForm
_ZTR20TPciIndexDataDlgForm
_ZTR20TRemoteOptionDlgForm
_ZTR23TMemoryIndexDataDlgForm
_ZTR6TiFile
_ZTR6TrFile
_ZTR7TRwForm
_ZTR7TRwMain
_ZTR7TmiFile
_ZTR8TBckForm
_ZTR8TMpsForm
_ZTR8TPciForm
_ZTR9TAboutBox
_ZTR9TDiskForm
_ZTR9TE820Form
_ZTR9TEdidForm
_ZTR9TFindForm
_ZTR9TInitFile
_ZTR9TListForm
_ZTR9TMmioForm
_ZTRN6System3SetINS_7Classes17System_Classes__1ELS2_0ELS2_10EEE
_ZTRPc
_ZTRRt
_ZTRU9__closurePFvPN6System7TObjectEE
_ZTRU9__closurePFvPN6System7TObjectERtNS_3SetINS_7Classes17System_Classes__1ELS5_0ELS5_10EEEE
_ZTRU9__closurePFvPN6System7TObjectEiE
_ZTRU9__closurePFvPN6System7TObjectEihE
_ZTRU9__closurePFvPN6System7TObjectEiiE
_ZTRU9__closurePFvPN6System7TObjectEiiNS_13UnicodeStringEE
_ZTRU9__closurePFvPN6System7TObjectEiiPN3Vcl8Graphics7TCanvasEE
_ZTRU9__closurePFvPN6System7TObjectEimE
_ZTRU9__closurePFvPN6System7TObjectEitE
_ZTRU9__closurePFvPcE
_ZTRU9__closurePFvlE
__CPPdebugHook

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.2MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 487KB - Virtual size: 486KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 803KB - Virtual size: 803KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Rw.ini
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/RwDebug.rw
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/SBC.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/SBCRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/SCEWIN_64.exe
.exe windows:5 windows x64 arch:x64

c6ad08a1589dd9cf353748c20ce378ce

Code Sign

b9:96:37:58:ea:d2:36:c6:e1:5c:d4:8b:a5:43:3a:ae
Certificate

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

21-09-2020 00:00

Not After

21-09-2023 23:59

Subject

SERIALNUMBER=7155083,CN=AMI US HOLDINGS INC,O=AMI US HOLDINGS INC,POSTALCODE=30093,STREET=5555 Oakbrook Parkway Suite 200,L=Norcross,ST=Georgia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-12-2014 00:00

Not After

02-12-2029 23:59

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:18:54:86:00:00:00:00:00:24
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-04-2011 22:06

Not After

11-04-2021 22:16

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:4f:56:4e:4f:9b:a7:68:c9:b1:53:d9:6b:ae:32:32:e5:c1:99:ae:20:01:3d:d6:fd:62:2d:be:df:b4:f3:c2
Signer

Actual PE Digest

a0:4f:56:4e:4f:9b:a7:68:c9:b1:53:d9:6b:ae:32:32:e5:c1:99:ae:20:01:3d:d6:fd:62:2d:be:df:b4:f3:c2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

SetHandleCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
EncodePointer
DecodePointer
FlsFree
SetLastError
FlsSetValue
FlsGetValue
GetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
SetConsoleCtrlHandler
FreeLibrary
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
HeapFree
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
Sleep
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
VirtualProtect
VirtualAlloc
SetThreadStackGuarantee
GetSystemInfo
VirtualQuery
RaiseException
RtlPcToFileHeader
HeapSize
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleW
GetProcAddress
SetUnhandledExceptionFilter
GetVersionExW
LoadLibraryExW
GetCommandLineA
GetProcessHeap
SetEndOfFile
GetWindowsDirectoryA
LoadLibraryA
GetSystemDirectoryA
CloseHandle
GetFullPathNameA
GetSystemFirmwareTable
SetThreadExecutionState
CreateMutexA
SetProcessAffinityMask
GetVersionExA
GetCurrentDirectoryA
GetModuleHandleA
DeleteFileA
CreateFileA
DeviceIoControl
CreateNamedPipeA
ReadFile
CreateThread
LocalFree
GetLocalTime
DebugBreak
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetFilePointer
CreateFileW
WriteConsoleW
SetStdHandle

advapi32

DeleteService
ControlService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
OpenSCManagerA

shell32

ShellExecuteA

user32

SystemParametersInfoA
BlockInput
ExitWindowsEx
MessageBoxA
RegisterClassExA
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
wsprintfA

Sections

.text
Size: 523KB - Virtual size: 523KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/SDRSPD.IRW
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/SVCSplitThreshold.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/SVCSplitThresholdRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/SharedVideoMemoryHeap16.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/SharedVideoMemoryHeap32.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/SharedVideoMemoryHeap8.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/SharedVideoMemoryHeapReset.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/SoundCommunication.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/StickyKeys.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/StorPortIdle.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Superfetch.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/SuperfetchRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/System Efficiency.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/SystemReliability.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/SystemReliabilityRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/TCP1323.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/TCP1323Revert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/TTL.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/TTLRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/TaskCache.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/TaskCacheRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/TaskOffload.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/TaskOffloadRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/TaskbarIcons.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ThreadDCP.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ThreadDCPRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ThreadDPC.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ThreadDPCRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ThreadPriority.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ThreadPriorityRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ThreadScheduling.bat
.bat .ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ThreadSchedulingOptions.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ThreadSchedulingOptionsRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ThreadSchedulingRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ThrottleFrequency.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ThrottleFrequencyRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Tickduration.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/TickdurationRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/TimerRes.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/ToggleKeys.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/TurboBoost.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/USBLatency.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/USBMsi.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/USBPoolRate.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/USBPoolRateRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/USBPowerSavings.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/USBThreadPriority.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/USBThreadPriorityRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/UnlimitDPCQueue.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/UnlimitDPCQueueRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/UnrestrictMemory.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/UseLargePages.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/UseLargePagesRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/UserGpuPreferences.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/VXDBIOS.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/VXDBIOSRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/VisualEffects.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/VisualEffectsRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Vortex-5.png
.png
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Vortex.ico
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/W697HF0.IRW
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Wifi.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/Windows.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/WindowsSearch.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/WindowsSearchRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/WindowsSettingsPageVisibility.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/WindowsUpdates.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/WindowsUpdatesRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/WriteCombining.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/WriteCombiningRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/XHCI.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/XHCI.vbs
.vbs
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/XHCIMON.bat
.bat .vbs
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/alphaMode.bat
.bat .vbs
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/alphaMode.vbs
.vbs
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/alphaModeOff.vbs
.vbs
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/alphaModeoff.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/alpharightclick.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/amifldrv64.sys
.sys windows:6 windows x64 arch:x64

4fbdc03e4487f98fb59360ea5b3e640d

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:45

Not After

15-04-2021 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:55:cd:b4:e7:e8:ee:b9:dd:5d:89:fc:1d:75:88:ca
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

30-08-2017 00:00

Not After

24-09-2020 12:00

Subject

SERIALNUMBER=J912954,CN=American Megatrends\, Inc.,O=American Megatrends\, Inc.,L=Norcross,ST=Georgia,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130747656f72676961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18-04-2012 12:00

Not After

18-04-2027 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:97:d7:9f:85:90:6e:a3:18:a4:00:00:00:00:00:97
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-03-2020 17:47

Not After

05-03-2021 17:47

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

70:9a:b9:53:02:bb:44:c7:a7:da:fa:f3:42:ca:93:34:22:ea:03:ed:7b:49:2b:e2:04:a3:19:16:1f:eb:35:0e
Signer

Actual PE Digest

70:9a:b9:53:02:bb:44:c7:a7:da:fa:f3:42:ca:93:34:22:ea:03:ed:7b:49:2b:e2:04:a3:19:16:1f:eb:35:0e

Digest Algorithm

sha256

PE Digest Matches

true

c4:2f:ea:a6:c9:78:8b:71:61:b7:65:f7:25:07:02:04:f7:b5:e3:ec
Signer

Actual PE Digest

c4:2f:ea:a6:c9:78:8b:71:61:b7:65:f7:25:07:02:04:f7:b5:e3:ec

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

d:\amibios\utility\amiflashdriver\flashdriverwin64\Release\amd64\amifldrv64.pdb

Imports

ntoskrnl.exe

ZwMapViewOfSection
RtlInitUnicodeString
ZwUnmapViewOfSection
ZwClose
ObReferenceObjectByHandle
ZwOpenSection
MmUnmapLockedPages
MmFreeContiguousMemory
MmBuildMdlForNonPagedPool
IoFreeMdl
MmMapIoSpace
MmMapLockedPagesSpecifyCache
IoAllocateMdl
MmAllocateContiguousMemory
IoDeleteSymbolicLink
IoDeleteDevice
IofCompleteRequest
IoCreateSymbolicLink
IoCreateDevice
KeBugCheckEx
MmGetPhysicalAddress
MmUnmapIoSpace

hal

HalTranslateBusAddress

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 910B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/atsiv.sys
.dll windows:4 windows x64 arch:x64

01dc31c1efd0d7723a2f4fe0ac2eb4ce

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

77:94:3d:7e:af:8f:90:ed:41:6e:55:77:06:e8:0a:3e
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

23-04-2007 00:00

Not After

22-04-2008 23:59

Subject

CN=DENWP ATSIV\, INC,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=DENWP ATSIV\, INC,L=Las Vegas,ST=Nevada,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23-05-2006 17:01

Not After

23-05-2016 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9f:fa:9e:75:6f:62:9d:de:4e:ec:88:a8:fe:36:cf:be:3e:8e:d0:05
Signer

Actual PE Digest

9f:fa:9e:75:6f:62:9d:de:4e:ec:88:a8:fe:36:cf:be:3e:8e:d0:05

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
ExFreePoolWithTag
ObfDereferenceObject
ObMakeTemporaryObject
ZwClose
ObReferenceObjectByHandle
ObInsertObject
RtlInitUnicodeString
ObCreateObject
IoDriverObjectType
KeSetEvent
ObfReferenceObject
KeWaitForSingleObject
ExQueueWorkItem
KeInitializeEvent
strrchr
RtlCopyUnicodeString
IofCompleteRequest
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
IoDeleteSymbolicLink
ZwQuerySystemInformation
strncpy
_stricmp
__C_specific_handler
KeDelayExecutionThread
ZwCreateKey
ZwCreateFile
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
ZwQueryInformationFile
ZwReadFile

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/cleanup.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/cloudflare.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/dsetup32.dll
.dll windows:6 windows x86 arch:x86

d9d6cc43183af6cd33abf97f1c22911c

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

cd:31:17:dc:2e:92:27:6a:de:ee:56:03:73:8e:ff:ea:72:73:7e:34
Signer

Actual PE Digest

cd:31:17:dc:2e:92:27:6a:de:ee:56:03:73:8e:ff:ea:72:73:7e:34

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dsetup32.pdb

Imports

kernel32

FindClose
FindFirstFileA
GetSystemDirectoryA
CopyFileA
DeleteFileA
WideCharToMultiByte
LoadResource
FindResourceA
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
lstrcmpA
LockResource
SizeofResource
SetLastError
MultiByteToWideChar
GetPrivateProfileStringA
CloseHandle
GetFileSize
CreateFileA
GetPrivateProfileSectionA
FindNextFileA
GetSystemDefaultLCID
GetShortPathNameA
GetModuleFileNameA
GetFileAttributesA
GetPrivateProfileSectionNamesA
GetSystemInfo
GetModuleHandleA
ReadFile
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetTempFileNameA
GetDriveTypeA
GetCurrentDirectoryA
ExpandEnvironmentStringsA
GetTempPathA
MoveFileExA
SetFileTime
GetFileTime
Sleep
CreateMutexA
GetCommandLineA
GetLocalTime
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetVersionExA
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
WriteFile
GetConsoleCP
GetConsoleMode
InitializeCriticalSection
GetModuleHandleW
SetFilePointer
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
VirtualQuery
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
GetProcAddress
LoadLibraryA
GetCurrentProcess
FreeLibrary
CompareStringA
FormatMessageA
LocalFree
GetWindowsDirectoryA
OutputDebugStringA
CreateDirectoryA
InterlockedDecrement
GetLastError

gdi32

GetDeviceCaps

user32

PeekMessageA
ShowWindow
GetDlgItem
SendMessageA
CharLowerA
MessageBoxA
CreateDialogParamA
SetFocus
DestroyWindow
DialogBoxParamA
GetMessageA
CharNextA
EndDialog
SetDlgItemTextA
SendDlgItemMessageA
GetDesktopWindow
GetWindowRect
GetDC
ReleaseDC
SetWindowPos
LoadStringA
DispatchMessageA
TranslateMessage
GetKeyboardType

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
RegQueryValueExA

version

VerQueryValueW
GetFileVersionInfoA
GetFileVersionInfoSizeA

shell32

SHFileOperationA

Exports

Exports

DirectXLoadString
DirectXSetupCallback
DirectXSetupSetCallback
DirectXSetupShowEULA
iDirectXSetup
iDirectXSetupGetEULAA
iDirectXSetupGetEULAW

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/dwmMMCSS.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/dxdllreg_x86.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/dxupdate.cab
.cab
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fairshare.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fiexAudio.bat
.bat .ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fortniteDSCP.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fortniteGpuHigh.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fortniteGpuNormal.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fortniteIO.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fortniteIORevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fortniteLargerPages.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fortniteMAXCONNECTIONSPERSERVER.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fortniteMAXCONNECTIONSPERSERVERRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fortnitePriorityAboveNormal.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fortnitePriorityHigh.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fortnitePriorityLow.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fortnitePriorityNormal.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fortnitefso.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/fortnitefsoRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/heuristics.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/hiberboot.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/hiberbootRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/hidusbf.sys
.sys windows:5 windows x64 arch:x64

263639dc973916ba2087066b81169bcf

Code Sign

3e:ea:bd:93:c8:a2:b0:9b:4d:e3:c9:0e:3d:28:d8:2e
Certificate

Issuer

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Not Before

05-06-1973 21:00

Not After

30-12-2999 21:00

Subject

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Extended Key Usages

ExtKeyUsageCodeSigning

83:99:87:3c:75:73:93:61:0d:bc:ba:79:32:6e:48:ac:eb:74:dc:dd
Signer

Actual PE Digest

83:99:87:3c:75:73:93:61:0d:bc:ba:79:32:6e:48:ac:eb:74:dc:dd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ExAllocatePool
IoDeleteDevice
IoDetachDevice
IofCompleteRequest
__C_specific_handler
ZwClose
IoOpenDeviceRegistryKey
IoAttachDeviceToDeviceStack
IoInitializeRemoveLockEx
IoCreateDevice
IoReleaseRemoveLockEx
ZwQueryValueKey
IoAcquireRemoveLockEx
PoCallDriver
PoStartNextPowerIrp
IoReleaseRemoveLockAndWaitEx
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress
IofCallDriver
ExFreePool

usbd.sys

USBD_ParseDescriptors

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 384B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/hidusbfp.sys
.sys windows:5 windows x64 arch:x64

61405582f99aa8c87c2c9da1aaf721b3

Code Sign

3e:ea:bd:93:c8:a2:b0:9b:4d:e3:c9:0e:3d:28:d8:2e
Certificate

Issuer

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Not Before

05-06-1973 21:00

Not After

30-12-2999 21:00

Subject

CN=SweetLow,1.2.840.113549.1.9.1=#0c0f73776565746c6f77407475742e6279

Extended Key Usages

ExtKeyUsageCodeSigning

49:5f:21:46:74:18:d8:69:a2:61:15:a5:2a:bd:16:bd:ca:df:84:2c
Signer

Actual PE Digest

49:5f:21:46:74:18:d8:69:a2:61:15:a5:2a:bd:16:bd:ca:df:84:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ExAllocatePool
ExFreePool
ZwQuerySystemInformation
_stricmp
RtlImageNtHeader
MmUnmapIoSpace
MmMapIoSpace
MmGetPhysicalAddress

Sections

.text
Size: 128B - Virtual size: 19B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 128B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/increaseuserva.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/increaseuserva.reg
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/increaseuservaRevert.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/install_all.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/interrupt_affinity_auto.ps1
.ps1
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/latest_releases.txt
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/nvidiaProfileInspector.zip
.zip
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/regjump.exe
.exe windows:6 windows x86 arch:x86

e80b2e3b401f381b46c54e6390fd1833

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:31

Not After

02-12-2021 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:63:97:c1:d8:5e:93:61:7a:70:df:a2:d8:eb:35:7e:23:ff:5e:d9:99:74:8b:24:be:c6:d6:a0:13:94:4c:52
Signer

Actual PE Digest

48:63:97:c1:d8:5e:93:61:7a:70:df:a2:d8:eb:35:7e:23:ff:5e:d9:99:74:8b:24:be:c6:d6:a0:13:94:4c:52

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\a\1\s\Win32\Release\regjump.pdb

Imports

kernel32

HeapReAlloc
HeapSize
SetFilePointerEx
GetFileSizeEx
GetConsoleOutputCP
FlushFileBuffers
SetConsoleCtrlHandler
GetProcessHeap
GetStringTypeW
ReadFile
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
MultiByteToWideChar
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
WriteConsoleW
GlobalLock
GlobalUnlock
LoadLibraryA
OpenProcess
GetCurrentProcess
CreateProcessA
GetLastError
Sleep
CloseHandle
ExpandEnvironmentStringsA
LocalFree
LocalAlloc
GetProcAddress
GetModuleHandleA
GetFileType
GetCommandLineW
GetStdHandle
LoadLibraryExA
GetVersionExA
SetStdHandle
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
RaiseException
ExitProcess
GetModuleHandleExW
GetConsoleCP
WriteFile
GetModuleFileNameW
GetCommandLineA
GetCurrentThread
HeapFree
HeapAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
WideCharToMultiByte
CreateFileW
GetConsoleMode
SetConsoleMode
GetNumberOfConsoleInputEvents
ReadConsoleInputW
PeekConsoleInputA
ReadConsoleW
OutputDebugStringW
FindClose
DecodePointer

user32

GetWindowThreadProcessId
FindWindowExA
FindWindowA
SetForegroundWindow
SetFocus
GetClipboardData
CloseClipboard
OpenClipboard
ShowWindow
EnumDisplaySettingsA
LoadCursorA
InflateRect
GetSysColorBrush
SetCursor
SetWindowTextA
GetDlgItem
EndDialog
DialogBoxIndirectParamA
SendMessageA
WaitForInputIdle

gdi32

StartPage
EndDoc
StartDocA
SetMapMode
GetDeviceCaps
EndPage

comdlg32

PrintDlgA

advapi32

GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
OpenProcessToken
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyA
RegCloseKey

Sections

.text
Size: 267KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/regjumpeula.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/rw.chm
.chm
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/uselessnetwork.bat
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/vcredist2005_x64.exe
.exe windows:5 windows x86 arch:x86

0ebb3c09b06b1666d307952e824c8697

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

72:eb:ec:84:ec:eb:2c:99:f6:93:1a:22:55:c2:43:bc:37:c7:56:59
Signer

Actual PE Digest

72:eb:ec:84:ec:eb:2c:99:f6:93:1a:22:55:c2:43:bc:37:c7:56:59

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wextract.pdb

Imports

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
lstrlenA
GetModuleFileNameA
GetSystemDirectoryA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
FreeResource
GetProcAddress
LoadResource
SizeofResource
FindResourceA
lstrcatA
CloseHandle
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ReadFile
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
LockResource

gdi32

GetDeviceCaps

user32

ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/vcredist2005_x86.exe
.exe windows:5 windows x86 arch:x86

0ebb3c09b06b1666d307952e824c8697

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5d:9a:9e:30:e8:b4:79:bd:b9:25:8e:b1:69:72:67:0f:90:ec:0f:7f
Signer

Actual PE Digest

5d:9a:9e:30:e8:b4:79:bd:b9:25:8e:b1:69:72:67:0f:90:ec:0f:7f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wextract.pdb

Imports

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
lstrlenA
GetModuleFileNameA
GetSystemDirectoryA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
FreeResource
GetProcAddress
LoadResource
SizeofResource
FindResourceA
lstrcatA
CloseHandle
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ReadFile
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
LockResource

gdi32

GetDeviceCaps

user32

ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/vcredist2008_x64.exe
.exe windows:5 windows x86 arch:x86

092eb6daba2f17cbda102fd1a32acd00

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8f:01:df:78:ce:80:39:28:c8:49:b3:c7:c4:01:28:81:cc:40:e4:47
Signer

Actual PE Digest

8f:01:df:78:ce:80:39:28:c8:49:b3:c7:c4:01:28:81:cc:40:e4:47

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
SetEvent
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
GetVersionExA
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
CreateFileA
FindNextFileA
FindFirstFileA
CopyFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceA
QueryDosDeviceA
GetCurrentDirectoryA
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetExitCodeProcess
CreateProcessA
ExpandEnvironmentStringsA
GetFileSize
CreateThread
CreateEventA
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CloseHandle
DeviceIoControl
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
SetErrorMode
GetTickCount
CreateDirectoryA
GetLastError
RemoveDirectoryA
MoveFileExA
SetFilePointer
FindClose
ReadFile

msvcrt

strchr
_strnicmp
_stricmp
strrchr
_strlwr
strncpy
strstr
_snprintf
sprintf

advapi32

AllocateAndInitializeSid
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
InitializeSecurityDescriptor
OpenProcessToken

user32

ShowWindow
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
LoadStringA
EndDialog
SetParent
MessageBoxA

ntdll

NtShutdownSystem
NtAdjustPrivilegesToken
NtClose
NtOpenProcessToken

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.9MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/vcredist2008_x86.exe
.exe windows:5 windows x86 arch:x86

092eb6daba2f17cbda102fd1a32acd00

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:01

Not After

25-07-2013 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d0:b8:36:c9:ae:3b:cb:20:6d:59:26:4f:5f:9c:95:6f:4b:15:75:3a
Signer

Actual PE Digest

d0:b8:36:c9:ae:3b:cb:20:6d:59:26:4f:5f:9c:95:6f:4b:15:75:3a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
SetEvent
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
GetVersionExA
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
CreateFileA
FindNextFileA
FindFirstFileA
CopyFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceA
QueryDosDeviceA
GetCurrentDirectoryA
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetExitCodeProcess
CreateProcessA
ExpandEnvironmentStringsA
GetFileSize
CreateThread
CreateEventA
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CloseHandle
DeviceIoControl
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
SetErrorMode
GetTickCount
CreateDirectoryA
GetLastError
RemoveDirectoryA
MoveFileExA
SetFilePointer
FindClose
ReadFile

msvcrt

strchr
_strnicmp
_stricmp
strrchr
_strlwr
strncpy
strstr
_snprintf
sprintf

advapi32

AllocateAndInitializeSid
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
InitializeSecurityDescriptor
OpenProcessToken

user32

ShowWindow
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
LoadStringA
EndDialog
SetParent
MessageBoxA

ntdll

NtShutdownSystem
NtAdjustPrivilegesToken
NtClose
NtOpenProcessToken

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/vcredist2010_x64.exe
.exe windows:5 windows x86 arch:x86

a1f6f100bff4507a3332f3f0cdfc24f5

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

3e:29:68:50:9f:c0:15:85:b2:43:f6:40:df:72:7e:8c:87:c3:b3:4f
Signer

Actual PE Digest

3e:29:68:50:9f:c0:15:85:b2:43:f6:40:df:72:7e:8c:87:c3:b3:4f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

sfxcab.pdb

Imports

msvcrt

__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf

advapi32

InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor

kernel32

CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime

user32

SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow

ntdll

NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9.8MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/vcredist2010_x86.exe
.exe windows:5 windows x86 arch:x86

a1f6f100bff4507a3332f3f0cdfc24f5

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:01

Not After

25-07-2013 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

58:5d:c5:26:99:03:d9:98:d7:bd:f4:32:05:e3:4e:3b:e4:dd:15:47
Signer

Actual PE Digest

58:5d:c5:26:99:03:d9:98:d7:bd:f4:32:05:e3:4e:3b:e4:dd:15:47

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

sfxcab.pdb

Imports

msvcrt

__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf

advapi32

InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor

kernel32

CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime

user32

SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow

ntdll

NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.5MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/vcredist2012_x64.exe
.exe windows:5 windows x86 arch:x86

33c6db41ca15b47cfcec52de6c2ab2b7

Code Sign

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-09-2012 21:12

Not After

04-12-2013 21:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24-01-2013 22:33

Not After

24-04-2014 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24-09-2013 17:41

Not After

24-12-2014 17:41

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f9:21:a8:7f:5a:3b:9a:0a:03:ac:c7:ff:64:14:0d:fb:d7:83:d6:35:6f:b3:45:b4:6a:5d:07:98:a0:f2:ce:30
Signer

Actual PE Digest

f9:21:a8:7f:5a:3b:9a:0a:03:ac:c7:ff:64:14:0d:fb:d7:83:d6:35:6f:b3:45:b4:6a:5d:07:98:a0:f2:ce:30

Digest Algorithm

sha256

PE Digest Matches

true

fa:4d:cd:f6:4c:96:60:0c:ed:96:a4:ab:84:4d:56:72:9b:e5:6f:2f
Signer

Actual PE Digest

fa:4d:cd:f6:4c:96:60:0c:ed:96:a4:ab:84:4d:56:72:9b:e5:6f:2f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

E:\delivery\Dev\wix36_dev11\build\ship\x86\x86\burn.pdb

Imports

kernel32

CopyFileExW
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
ResetEvent
SetEndOfFile
DeleteFileW
GetThreadLocale
UnmapViewOfFile
GetFullPathNameW
GetTempFileNameW
CreateDirectoryW
GetLocalTime
SetFilePointer
GetComputerNameW
CreateFileA
GetProcessHeap
GetModuleHandleA
CopyFileW
MoveFileExW
GlobalFree
GlobalAlloc
GetFileSizeEx
GetCurrentDirectoryW
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FormatMessageW
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CompareStringW
InitializeCriticalSection
CloseHandle
LocalFree
ReleaseMutex
GetVersionExW
GetProcessId
ReadFile
CreateNamedPipeW
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
WaitForSingleObject
OpenProcess
CreateFileW
SetFilePointerEx
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
VerifyVersionInfoW
VerSetConditionMask
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
GetWindowsDirectoryW
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
GetExitCodeProcess
SetThreadExecutionState
FlushFileBuffers

msi

ord171
ord45
ord137
ord125
ord17
ord8
ord141
ord238
ord190
ord88
ord90
ord173
ord111
ord70
ord169
ord118
ord115
ord116
ord205

shell32

SHGetFolderPathW
ShellExecuteExW
CommandLineToArgvW

rpcrt4

UuidCreate

wininet

HttpQueryInfoW
InternetCrackUrlW
InternetSetOptionW
InternetConnectW
InternetCloseHandle
InternetOpenW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW

wintrust

WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

gdi32

DeleteDC
DeleteObject
GetObjectW
CreateCompatibleDC
SelectObject
StretchBlt

cabinet

ord23
ord22
ord20

advapi32

CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
SetNamedSecurityInfoW
AllocateAndInitializeSid
CheckTokenMembership
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
InitializeSecurityDescriptor
SetEntriesInAclA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegOpenKeyExW
GetTokenInformation
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
ChangeServiceConfigW
DecryptFileW
SetEntriesInAclW
InitializeAcl
CreateWellKnownSid
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
QueryServiceConfigW

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

ole32

CLSIDFromProgID
CoInitializeSecurity
CoTaskMemFree
CoCreateInstance
CoInitialize
CoInitializeEx
CoUninitialize
StringFromGUID2

user32

LoadBitmapW
IsWindow
PostMessageW
PeekMessageW
GetMessageW
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
CreateWindowExW
RegisterClassW
MsgWaitForMultipleObjects
LoadCursorW
PostQuitMessage
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
PostThreadMessageW
MessageBoxW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Sections

.text
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/vcredist2012_x86.exe
.exe windows:5 windows x86 arch:x86

33c6db41ca15b47cfcec52de6c2ab2b7

Code Sign

33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-09-2012 21:12

Not After

04-12-2013 21:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24-01-2013 22:33

Not After

24-04-2014 22:33

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

24-09-2013 17:41

Not After

24-12-2014 17:41

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

51:3c:0e:d0:e9:29:66:d4:05:e1:26:24:9d:da:d9:c0:63:79:c5:68:38:c7:69:c5:25:f3:62:ab:0e:b8:a4:f6
Signer

Actual PE Digest

51:3c:0e:d0:e9:29:66:d4:05:e1:26:24:9d:da:d9:c0:63:79:c5:68:38:c7:69:c5:25:f3:62:ab:0e:b8:a4:f6

Digest Algorithm

sha256

PE Digest Matches

true

8c:12:40:11:a9:d9:22:02:f1:9b:18:34:2a:70:2d:89:dc:3c:69:a5
Signer

Actual PE Digest

8c:12:40:11:a9:d9:22:02:f1:9b:18:34:2a:70:2d:89:dc:3c:69:a5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

E:\delivery\Dev\wix36_dev11\build\ship\x86\x86\burn.pdb

Imports

kernel32

CopyFileExW
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
ResetEvent
SetEndOfFile
DeleteFileW
GetThreadLocale
UnmapViewOfFile
GetFullPathNameW
GetTempFileNameW
CreateDirectoryW
GetLocalTime
SetFilePointer
GetComputerNameW
CreateFileA
GetProcessHeap
GetModuleHandleA
CopyFileW
MoveFileExW
GlobalFree
GlobalAlloc
GetFileSizeEx
GetCurrentDirectoryW
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
RaiseException
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FormatMessageW
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CompareStringW
InitializeCriticalSection
CloseHandle
LocalFree
ReleaseMutex
GetVersionExW
GetProcessId
ReadFile
CreateNamedPipeW
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
WaitForSingleObject
OpenProcess
CreateFileW
SetFilePointerEx
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
VerifyVersionInfoW
VerSetConditionMask
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
GetWindowsDirectoryW
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
GetExitCodeProcess
SetThreadExecutionState
FlushFileBuffers

msi

ord171
ord45
ord137
ord125
ord17
ord8
ord141
ord238
ord190
ord88
ord90
ord173
ord111
ord70
ord169
ord118
ord115
ord116
ord205

shell32

SHGetFolderPathW
ShellExecuteExW
CommandLineToArgvW

rpcrt4

UuidCreate

wininet

HttpQueryInfoW
InternetCrackUrlW
InternetSetOptionW
InternetConnectW
InternetCloseHandle
InternetOpenW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW

wintrust

WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

gdi32

DeleteDC
DeleteObject
GetObjectW
CreateCompatibleDC
SelectObject
StretchBlt

cabinet

ord23
ord22
ord20

advapi32

CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
SetNamedSecurityInfoW
AllocateAndInitializeSid
CheckTokenMembership
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
InitializeSecurityDescriptor
SetEntriesInAclA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegOpenKeyExW
GetTokenInformation
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
ChangeServiceConfigW
DecryptFileW
SetEntriesInAclW
InitializeAcl
CreateWellKnownSid
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
QueryServiceConfigW

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

ole32

CLSIDFromProgID
CoInitializeSecurity
CoTaskMemFree
CoCreateInstance
CoInitialize
CoInitializeEx
CoUninitialize
StringFromGUID2

user32

LoadBitmapW
IsWindow
PostMessageW
PeekMessageW
GetMessageW
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
CreateWindowExW
RegisterClassW
MsgWaitForMultipleObjects
LoadCursorW
PostQuitMessage
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
PostThreadMessageW
MessageBoxW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Sections

.text
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/vcredist2013_x64.exe
.exe windows:5 windows x86 arch:x86

8e2588a9cf43886de3449dfff03137b6

Code Sign

33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-08-2016 20:17

Not After

02-11-2017 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17-11-2016 22:09

Not After

17-02-2018 22:09

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d2:15:be:d8:35:8b:b3:7c:e3:4d:4d:50:1d:e6:91:02:c5:a1:a4:0d:b3:8f:12:4d:59:61:61:e5:59:2d:0e:e7
Signer

Actual PE Digest

d2:15:be:d8:35:8b:b3:7c:e3:4d:4d:50:1d:e6:91:02:c5:a1:a4:0d:b3:8f:12:4d:59:61:61:e5:59:2d:0e:e7

Digest Algorithm

sha256

PE Digest Matches

true

44:91:26:71:a4:e4:9a:f9:12:6b:88:da:fb:ae:ae:f6:69:04:19:21
Signer

Actual PE Digest

44:91:26:71:a4:e4:9a:f9:12:6b:88:da:fb:ae:ae:f6:69:04:19:21

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

E:\delivery\Dev\wix37\build\ship\x86\burn.pdb

Imports

gdiplus

GdiplusShutdown
GdiplusStartup
GdipDeleteGraphics
GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromResource
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipAlloc

advapi32

QueryServiceConfigW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
GetUserNameW
InitiateSystemShutdownExW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
DecryptFileW
ChangeServiceConfigW
ControlService
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegQueryInfoKeyW
RegSetValueExW
SetEntriesInAclA
SetSecurityDescriptorGroup
RegOpenKeyExW
GetTokenInformation
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
LookupAccountNameW
SetNamedSecurityInfoW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner

user32

GetMessageW
PeekMessageW
PostMessageW
IsWindow
PostQuitMessage
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
MsgWaitForMultipleObjects
WaitForInputIdle
LoadCursorW
BeginPaint
EndPaint
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
ReleaseDC
MessageBoxW
PostThreadMessageW
RegisterClassW
CreateWindowExW

oleaut32

VariantClear
VariantInit
SysAllocString
SysFreeString

gdi32

GetDeviceCaps
CreateDCW

shell32

ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
StringFromGUID2
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCurrentProcess
InitializeCriticalSection
TlsFree
DeleteCriticalSection
CloseHandle
TlsGetValue
Sleep
GetLastError
ReleaseMutex
TlsSetValue
TlsAlloc
GetCurrentThreadId
GetVersionExW
GetModuleHandleW
ReadFile
SetFilePointerEx
CreateFileW
GetCurrentProcessId
GetProcessId
WriteFile
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
CompareStringW
LocalFree
CreateNamedPipeW
WaitForSingleObject
OpenProcess
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
VerifyVersionInfoW
VerSetConditionMask
GetComputerNameW
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
HeapAlloc
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
InterlockedExchange
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
HeapSetInformation
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetEndOfFile
ResetEvent
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
DeleteFileW
GetThreadLocale
GetTimeZoneInformation
TerminateProcess
UnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GlobalAlloc
IsProcessorFeaturePresent
GetTickCount
QueryPerformanceCounter
HeapCreate
SetLastError
EncodePointer
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
GlobalFree
MoveFileExW
CopyFileW
GetFileSizeEx
GetModuleHandleA
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetLocalTime
UnmapViewOfFile
IsDebuggerPresent
DuplicateHandle
HeapFree
FormatMessageW
GetTempFileNameW
GetWindowsDirectoryW
CompareStringA
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
DecodePointer
ExitProcess
SetUnhandledExceptionFilter
GetStartupInfoW
GetCommandLineW
GetFullPathNameW
CreateDirectoryW
GetProcessHeap

cabinet

ord22
ord20
ord23

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

msi

ord88
ord17
ord125
ord116
ord115
ord118
ord8
ord171
ord205
ord45
ord137
ord141
ord238
ord190
ord169
ord90
ord173
ord111
ord70

rpcrt4

UuidCreate

wininet

InternetCloseHandle
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW
InternetSetOptionW
InternetOpenW
HttpQueryInfoW
InternetCrackUrlW
InternetConnectW

wintrust

WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/vcredist2013_x86.exe
.exe windows:5 windows x86 arch:x86

8e2588a9cf43886de3449dfff03137b6

Code Sign

33:00:00:00:c6:78:80:36:01:75:1a:69:72:00:00:00:00:00:c6
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-08-2016 20:17

Not After

02-11-2017 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

17-11-2016 22:09

Not After

17-02-2018 22:09

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:23:3d:61:a3:c7:a5:8d:8d:8c:82:da:a0:4b:34:8f:7b:f4:1d:29:40:64:85:23:a9:3c:34:b5:c4:85:42:3f
Signer

Actual PE Digest

52:23:3d:61:a3:c7:a5:8d:8d:8c:82:da:a0:4b:34:8f:7b:f4:1d:29:40:64:85:23:a9:3c:34:b5:c4:85:42:3f

Digest Algorithm

sha256

PE Digest Matches

true

55:93:21:ff:30:02:58:ca:25:32:ed:9f:50:2b:ee:cc:82:3b:d9:62
Signer

Actual PE Digest

55:93:21:ff:30:02:58:ca:25:32:ed:9f:50:2b:ee:cc:82:3b:d9:62

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

E:\delivery\Dev\wix37\build\ship\x86\burn.pdb

Imports

gdiplus

GdiplusShutdown
GdiplusStartup
GdipDeleteGraphics
GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromResource
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipAlloc

advapi32

QueryServiceConfigW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
GetUserNameW
InitiateSystemShutdownExW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
DecryptFileW
ChangeServiceConfigW
ControlService
CloseServiceHandle
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegQueryInfoKeyW
RegSetValueExW
SetEntriesInAclA
SetSecurityDescriptorGroup
RegOpenKeyExW
GetTokenInformation
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
LookupAccountNameW
SetNamedSecurityInfoW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner

user32

GetMessageW
PeekMessageW
PostMessageW
IsWindow
PostQuitMessage
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnregisterClassW
DispatchMessageW
TranslateMessage
IsDialogMessageW
MsgWaitForMultipleObjects
WaitForInputIdle
LoadCursorW
BeginPaint
EndPaint
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
ReleaseDC
MessageBoxW
PostThreadMessageW
RegisterClassW
CreateWindowExW

oleaut32

VariantClear
VariantInit
SysAllocString
SysFreeString

gdi32

GetDeviceCaps
CreateDCW

shell32

ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
StringFromGUID2
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCurrentProcess
InitializeCriticalSection
TlsFree
DeleteCriticalSection
CloseHandle
TlsGetValue
Sleep
GetLastError
ReleaseMutex
TlsSetValue
TlsAlloc
GetCurrentThreadId
GetVersionExW
GetModuleHandleW
ReadFile
SetFilePointerEx
CreateFileW
GetCurrentProcessId
GetProcessId
WriteFile
ConnectNamedPipe
SetNamedPipeHandleState
lstrlenW
CompareStringW
LocalFree
CreateNamedPipeW
WaitForSingleObject
OpenProcess
lstrlenA
RemoveDirectoryW
GetFileAttributesW
ExpandEnvironmentStringsW
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
VerifyVersionInfoW
VerSetConditionMask
GetComputerNameW
GetTempPathW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetVolumePathNameW
HeapAlloc
GetSystemDefaultLangID
GetUserDefaultLangID
GetDateFormatW
GetSystemTime
InterlockedExchange
LoadLibraryW
InterlockedCompareExchange
GetExitCodeThread
CreateThread
SetEvent
WaitForMultipleObjects
CreateEventW
ProcessIdToSessionId
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
SetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
HeapSetInformation
MapViewOfFile
CreateFileMappingW
CreateMutexW
SetEndOfFile
ResetEvent
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
GetSystemTimeAsFileTime
VirtualFree
VirtualAlloc
DeleteFileW
GetThreadLocale
GetTimeZoneInformation
TerminateProcess
UnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GlobalAlloc
IsProcessorFeaturePresent
GetTickCount
QueryPerformanceCounter
HeapCreate
SetLastError
EncodePointer
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
GlobalFree
MoveFileExW
CopyFileW
GetFileSizeEx
GetModuleHandleA
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
SetStdHandle
WriteConsoleW
FlushFileBuffers
GetLocalTime
UnmapViewOfFile
IsDebuggerPresent
DuplicateHandle
HeapFree
FormatMessageW
GetTempFileNameW
GetWindowsDirectoryW
CompareStringA
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
DecodePointer
ExitProcess
SetUnhandledExceptionFilter
GetStartupInfoW
GetCommandLineW
GetFullPathNameW
CreateDirectoryW
GetProcessHeap

cabinet

ord22
ord20
ord23

crypt32

CertGetCertificateContextProperty
CryptHashPublicKeyInfo

msi

ord88
ord17
ord125
ord116
ord115
ord118
ord8
ord171
ord205
ord45
ord137
ord141
ord238
ord190
ord169
ord90
ord173
ord111
ord70

rpcrt4

UuidCreate

wininet

InternetCloseHandle
HttpAddRequestHeadersW
HttpOpenRequestW
InternetErrorDlg
InternetReadFile
HttpSendRequestW
InternetSetOptionW
InternetOpenW
HttpQueryInfoW
InternetCrackUrlW
InternetConnectW

wintrust

WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/vcredist2015_2017_2019_2022_x64.exe
.exe windows:5 windows x86 arch:x86

1a5cdbf711fee14b077e599d13fddab2

Code Sign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:33

Not After

01-09-2022 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:f4:8f:4a:74:ca:35:33:73:ff:ac:fd:d9:1d:80:ef:52:2d:36:9a:ca:2c:72:dd:23:f4:e9:47:c5:ef:f1:70
Signer

Actual PE Digest

62:f4:8f:4a:74:ca:35:33:73:ff:ac:fd:d9:1d:80:ef:52:2d:36:9a:ca:2c:72:dd:23:f4:e9:47:c5:ef:f1:70

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

Imports

advapi32

RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW

user32

GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

gdi32

CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW

ole32

CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA

rpcrt4

UuidCreate

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/vcredist2015_2017_2019_2022_x86.exe
.exe windows:5 windows x86 arch:x86

1a5cdbf711fee14b077e599d13fddab2

Code Sign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:33

Not After

01-09-2022 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:61:7f:94:d1:79:d0:e6:e5:5c:43:ba:af:6f:fb:82:a6:64:a2:93:20:a5:8c:00:ba:11:cd:cf:00:70:ef:89
Signer

Actual PE Digest

52:61:7f:94:d1:79:d0:e6:e5:5c:43:ba:af:6f:fb:82:a6:64:a2:93:20:a5:8c:00:ba:11:cd:cf:00:70:ef:89

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

Imports

advapi32

RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW

user32

GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

gdi32

CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW

ole32

CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA

rpcrt4

UuidCreate

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/vortexlogo.png
.png
AlphaWolf Latest -organized/Vortex Util -not latest/ALLSTUFFUNORGANIZED/xinput.bat
AlphaWolf Latest -organized/Vortex Util -not latest/READ.txt
AlphaWolf Latest -organized/Vortex Util -not latest/crakced vortex.7z
.7z

Sharing

General

Malware Config

Signatures

Files

6668c9525ad04c4190169dc04fde550d

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

61:47:52:ba:00:00:00:00:00:04Certificate

Extended Key Usages

Key Usages

61:49:7c:ed:00:00:00:00:00:05Certificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate

Extended Key Usages

Key Usages

61:46:9e:cb:00:04:00:00:00:65Certificate

Extended Key Usages

Key Usages

44:c2:26:68:e3:a7:0e:0f:e1:0d:6e:d0:a5:42:df:15:4c:e1:0a:0fSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

version

setupapi

Sections

.text Size: 52KB - Virtual size: 52KB

.data Size: 2KB - Virtual size: 11KB

.pdata Size: 3KB - Virtual size: 2KB

01dbb721ad8b0aa287d0e6cb37b97382

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate

Extended Key Usages

Key Usages

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate

Extended Key Usages

Key Usages

61:46:9e:cb:00:04:00:00:00:65Certificate

Extended Key Usages

Key Usages

6e:2b:fc:2c:be:00:d2:f9:f0:2d:7a:31:b3:c6:e8:cc:c4:87:22:77Signer

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 296B

.pdata Size: 512B - Virtual size: 168B

.rsrc Size: 1024B - Virtual size: 984B

db64690fd3880f9d7a43b3137465b79c

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

61:47:52:ba:00:00:00:00:00:04Certificate

Extended Key Usages

Key Usages

61:47:52:ba:00:00:00:00:00:04Certificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

61:47:52:ba:00:00:00:00:00:04
Certificate

61:49:7c:ed:00:00:00:00:00:05
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

61:46:9e:cb:00:04:00:00:00:65
Certificate

44:c2:26:68:e3:a7:0e:0f:e1:0d:6e:d0:a5:42:df:15:4c:e1:0a:0f
Signer

.text
Size: 52KB - Virtual size: 52KB

.data
Size: 2KB - Virtual size: 11KB

.pdata
Size: 3KB - Virtual size: 2KB

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

61:46:9e:cb:00:04:00:00:00:65
Certificate

6e:2b:fc:2c:be:00:d2:f9:f0:2d:7a:31:b3:c6:e8:cc:c4:87:22:77
Signer

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 296B

.pdata
Size: 512B - Virtual size: 168B

.rsrc
Size: 1024B - Virtual size: 984B

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

61:47:52:ba:00:00:00:00:00:04
Certificate

61:47:52:ba:00:00:00:00:00:04
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

61:46:9e:cb:00:04:00:00:00:65
Certificate

a8:0a:f8:7d:a4:03:9b:2c:84:8b:b3:7d:71:bf:21:21:a5:17:49:1b
Signer

.text
Size: 354KB - Virtual size: 354KB

RT_CODE
Size: 512B - Virtual size: 99B

.data
Size: 1024B - Virtual size: 11KB

.pdata
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 4KB - Virtual size: 3KB

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

61:46:9e:cb:00:04:00:00:00:65
Certificate

b2:2b:d9:a2:23:a6:40:1b:ee:29:09:ad:5c:d8:97:f3:2d:d5:58:04
Signer

.text
Size: 5KB - Virtual size: 5KB

.data
Size: - Virtual size: 20B

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 512B - Virtual size: 212B

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

61:47:52:ba:00:00:00:00:00:04
Certificate

61:49:7c:ed:00:00:00:00:00:05
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate