Resubmissions
07-06-2024 17:30
240607-v26ssabe3s 7Static task
static1
General
-
Target
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy.zip
-
Size
50.1MB
-
MD5
4dbfda909c3446b7a642e02f0848da24
-
SHA1
0a87828125b5f48da560d17bd97fe0bfea081dc9
-
SHA256
8697aca759fabb9357f095c86db5336ee3ec9474fd9b18c1bd3b94bdc454f5a0
-
SHA512
9eee4ca57cf2dc2b85270b377f7fdc1b37455f134fb5d875650a5b4bc28ce2c8dfa3a6b44cd7e2e29a157aeaa8e456512ceed4b7af4cfb8b87d376410f7eeb0e
-
SSDEEP
786432:A3AM08kJ2UksPXzSg6oJD+X6T+XjJvuFXEEltSok6uLRtGMcsXuz4OBoSjrgytQu:ArhBsP6oMljJmFj4oknfnWNg6Qr+ZT
Malware Config
Signatures
-
Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource unpack001/Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam v4.5.6.1647 Portable by CheshireCat.exe unpack001/Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam v4.5.6.1647 Portable by CheshireCat/Bandicam_Portable.exe unpack001/Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam v4.5.6.1647 Portable by CheshireCat/Bandicam_Portable_NonAdmin.exe unpack001/Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/msimg32.dll unpack001/Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/uninstall.exe unpack003/$PLUGINSDIR/Dialer.dll unpack003/$PLUGINSDIR/LangDLL.dll unpack003/$PLUGINSDIR/nsProcess.dll
Files
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy.zip.zip
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam v4.5.6.1647 Portable by CheshireCat.exe.exe windows:4 windows x86 arch:x86
da401ef5e9d5c4599673c26d95fa6029
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysFreeString
SysAllocStringLen
SysAllocString
VariantClear
SysStringLen
ole32
CoCreateInstance
CoInitialize
CoUninitialize
OleInitialize
user32
CheckDlgButton
IsDlgButtonChecked
EndDialog
SetDlgItemTextW
GetFocus
SetFocus
GetKeyState
InvalidateRect
SetWindowTextW
EnableWindow
PostMessageW
MessageBoxW
SetTimer
DialogBoxParamW
SetWindowLongW
GetWindowLongW
ShowWindow
MoveWindow
ScreenToClient
GetDlgItem
GetWindowRect
MapDialogRect
SystemParametersInfoW
GetWindowTextLengthW
GetWindowTextW
SendMessageW
LoadStringW
CharUpperW
LoadIconW
GetParent
SetCursor
LoadCursorW
KillTimer
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHGetMalloc
msvcrt
wcsstr
wcscmp
_beginthreadex
_except_handler3
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_CxxThrowException
malloc
memcpy
memmove
memset
_purecall
memcmp
__CxxFrameHandler
free
kernel32
GetStartupInfoA
InitializeCriticalSection
ResetEvent
SetEvent
CreateEventW
WaitForSingleObject
lstrlenW
lstrcatW
VirtualFree
VirtualAlloc
SetPriorityClass
DeleteCriticalSection
Sleep
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
GetFileInformationByHandle
GetStdHandle
GlobalMemoryStatus
GetSystemInfo
GetCurrentProcess
GetProcessAffinityMask
FileTimeToLocalFileTime
FileTimeToSystemTime
CompareFileTime
SetEndOfFile
WriteFile
ReadFile
SetFilePointer
GetFileSize
GetLogicalDriveStringsW
GetFileAttributesW
GetModuleHandleA
FindNextFileW
FindFirstFileW
FindClose
GetTickCount
GetCurrentDirectoryW
SetLastError
DeleteFileW
CreateDirectoryW
GetModuleHandleW
MoveFileW
RemoveDirectoryW
SetFileAttributesW
CreateFileW
SetFileTime
CloseHandle
GetSystemDirectoryW
FormatMessageW
LocalFree
GetModuleFileNameW
MultiByteToWideChar
GetLastError
GetVersionExW
LoadLibraryW
GetProcAddress
FreeLibrary
GetCommandLineW
LoadLibraryExW
Sections
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam v4.5.6.1647 Portable by CheshireCat.exe.md5
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam v4.5.6.1647 Portable by CheshireCat/App/Bandicam/bdcam64.bin.exe windows:5 windows x64 arch:x64
db5360fa06146a4a342d4f5803ece429
Code Sign
36:12:22:96:c5:e3:38:a5:20:a1:d2:5f:4c:d7:09:54Certificate
IssuerCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6dNot Before01-08-1996 00:00Not After01-01-2021 23:59SubjectCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:edCertificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before01-05-2012 00:00Not After31-12-2012 23:59SubjectCN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
23:3b:ba:fc:e9:94:ec:7f:e8:d2:ca:56:8f:2a:b6:4bCertificate
IssuerCN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=USNot Before23-11-2011 00:00Not After21-02-2014 23:59SubjectCN=Bandisoft,OU=Dev Team,O=Bandisoft,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
33:65:50:08:79:ad:73:e2:30:b9:e0:1d:0d:7f:ac:91Certificate
IssuerCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6dNot Before17-11-2006 00:00Not After30-12-2020 23:59SubjectCN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=USKey Usages
KeyUsageCertSign
KeyUsageCRLSign
47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5eCertificate
IssuerCN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=USNot Before08-02-2010 00:00Not After07-02-2020 23:59SubjectCN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
e:\w\devel\CAP\bandicam\bin\bdcam64.pdb
Imports
bdcam64
Bdcam_SharedData
Bdcam_Uninitialize
Bdcam_Initialize
kernel32
WriteFile
FlushFileBuffers
SetErrorMode
GetStartupInfoW
HeapAlloc
HeapFree
ExitProcess
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
HeapReAlloc
HeapQueryInformation
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GlobalFlags
lstrlenA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFindAtomW
LoadLibraryA
GetVersionExA
GlobalAddAtomW
WritePrivateProfileStringW
GlobalDeleteAtom
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
GetModuleHandleW
GlobalLock
GlobalUnlock
FormatMessageW
Sleep
GetUserDefaultLangID
GetTickCount
lstrcmpW
TerminateProcess
OpenProcess
GetCurrentProcessId
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
LocalFree
GetFileAttributesW
GetModuleFileNameW
GlobalFree
GlobalAlloc
GetCurrentProcess
GetCurrentThread
FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExW
GetVolumeInformationW
SetLastError
GetSystemTimeAsFileTime
FindResourceW
LoadResource
LockResource
SizeofResource
ReadFile
SetFilePointer
CreateFileW
lstrlenW
CloseHandle
GetLastError
GetStartupInfoA
user32
UnregisterClassW
DestroyMenu
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetDC
ReleaseDC
GetSysColorBrush
WinHelpW
GetCapture
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
GetWindowTextW
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
SetMenu
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
GetSysColor
AdjustWindowRectEx
CallWindowProcW
PtInRect
SystemParametersInfoA
IsIconic
GetWindow
GetLastActivePopup
IsWindowEnabled
MessageBoxW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
EnableWindow
PostMessageW
RegisterClassW
LoadCursorW
LoadIconW
DefWindowProcW
ShowWindow
GetSubMenu
ModifyMenuW
GetMenuItemID
GetMenuItemCount
GetClassNameW
MapWindowPoints
SetWindowTextW
GetDlgCtrlID
wsprintfW
RegisterWindowMessageW
SetForegroundWindow
GetWindowThreadProcessId
GetForegroundWindow
GetWindowPlacement
GetParent
IsWindow
DispatchMessageW
TranslateMessage
PeekMessageW
ClientToScreen
SetWindowPos
GetWindowLongW
CopyRect
GetWindowRect
GetSystemMetrics
SendMessageW
FindWindowW
GetMenu
gdi32
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
GetStockObject
DeleteObject
SetMapMode
RestoreDC
SaveDC
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
ExtTextOutW
SetBkColor
PtVisible
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
SetNamedSecurityInfoW
SetEntriesInAclW
FreeSid
AllocateAndInitializeSid
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameW
PathFindExtensionW
PathIsDirectoryW
ole32
CoUninitialize
oleaut32
VariantClear
VariantChangeType
VariantInit
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
psapi
GetModuleBaseNameW
EnumProcessModules
Sections
.text Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.BANDISH Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam v4.5.6.1647 Portable by CheshireCat/App/Bandicam/bdcam64.dll.dll windows:5 windows x64 arch:x64
f6753e756b7b6620ea9c21fdc613503a
Code Sign
36:12:22:96:c5:e3:38:a5:20:a1:d2:5f:4c:d7:09:54Certificate
IssuerCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6dNot Before01-08-1996 00:00Not After01-01-2021 23:59SubjectCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:edCertificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before01-05-2012 00:00Not After31-12-2012 23:59SubjectCN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
23:3b:ba:fc:e9:94:ec:7f:e8:d2:ca:56:8f:2a:b6:4bCertificate
IssuerCN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=USNot Before23-11-2011 00:00Not After21-02-2014 23:59SubjectCN=Bandisoft,OU=Dev Team,O=Bandisoft,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
33:65:50:08:79:ad:73:e2:30:b9:e0:1d:0d:7f:ac:91Certificate
IssuerCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6dNot Before17-11-2006 00:00Not After30-12-2020 23:59SubjectCN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=USKey Usages
KeyUsageCertSign
KeyUsageCRLSign
47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5eCertificate
IssuerCN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=USNot Before08-02-2010 00:00Not After07-02-2020 23:59SubjectCN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
e:\w\devel\CAP\bandicam\bin\bdcam64.dll.pdb
Imports
kernel32
SetFilePointer
ReadFile
GetSystemTimeAsFileTime
SetLastError
GetCurrentProcess
GetFileAttributesW
LocalFree
CreateDirectoryW
TerminateProcess
QueryPerformanceCounter
QueryPerformanceFrequency
WriteProcessMemory
DisableThreadLibraryCalls
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoA
LCMapStringA
GetConsoleMode
GetConsoleCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
ExitProcess
GetModuleFileNameA
GetStdHandle
WriteFile
GetStringTypeW
GetStringTypeA
LCMapStringW
FlsAlloc
FlsFree
FlsGetValue
CloseHandle
GetLastError
GetCurrentProcessId
FindResourceExW
WideCharToMultiByte
MultiByteToWideChar
Sleep
GetLocalTime
GetVersionExW
GetTickCount
OutputDebugStringA
SizeofResource
LockResource
LoadResource
FindResourceW
GetModuleHandleW
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
GetProcAddress
VirtualProtect
LoadLibraryW
DecodePointer
EncodePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapCreate
HeapSetInformation
RtlPcToFileHeader
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwindEx
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
GetCurrentThreadId
FlsSetValue
GetCommandLineA
user32
GetClientRect
IsWindow
WindowFromDC
FillRect
PostMessageW
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
wsprintfW
RegisterWindowMessageW
SetForegroundWindow
GetDesktopWindow
GetParent
GetWindowLongW
gdi32
CreateSolidBrush
DeleteObject
advapi32
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
SetNamedSecurityInfoW
SetEntriesInAclW
FreeSid
AllocateAndInitializeSid
shlwapi
PathIsDirectoryW
winmm
PlaySoundW
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Exports
Exports
Bdcam_Initialize
Bdcam_SharedData
Bdcam_Uninitialize
Sections
.text Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hkshare Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BANDI0 Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam v4.5.6.1647 Portable by CheshireCat/Bandicam_Portable.exe.exe windows:4 windows x86 arch:x86
b34f154ec913d2d2c435cbd644e91687
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
SetCurrentDirectoryW
GetFileAttributesW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
ExitProcess
GetShortPathNameW
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
CreateFileW
GetTempFileNameW
WriteFile
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
lstrcmpiW
MoveFileW
GetFullPathNameW
SetFileTime
SearchPathW
CompareFileTime
lstrcmpW
CloseHandle
ExpandEnvironmentStringsW
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
lstrlenA
MulDiv
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
user32
GetSystemMenu
SetClassLongW
EnableMenuItem
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ScreenToClient
GetWindowRect
GetDlgItem
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
GetDC
SetTimer
SetWindowTextW
LoadImageW
SetForegroundWindow
ShowWindow
IsWindow
SetWindowLongW
FindWindowExW
TrackPopupMenu
AppendMenuW
CreatePopupMenu
EndPaint
CreateDialogParamW
SendMessageTimeoutW
wsprintfW
PostQuitMessage
gdi32
SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
advapi32
AdjustTokenPrivileges
RegCreateKeyExW
RegOpenKeyExW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegEnumKeyW
comctl32
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam v4.5.6.1647 Portable by CheshireCat/Bandicam_Portable_NonAdmin.exe.exe windows:4 windows x86 arch:x86
b34f154ec913d2d2c435cbd644e91687
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
SetCurrentDirectoryW
GetFileAttributesW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
ExitProcess
GetShortPathNameW
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
CreateFileW
GetTempFileNameW
WriteFile
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
lstrcmpiW
MoveFileW
GetFullPathNameW
SetFileTime
SearchPathW
CompareFileTime
lstrcmpW
CloseHandle
ExpandEnvironmentStringsW
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
lstrlenA
MulDiv
MultiByteToWideChar
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
user32
GetSystemMenu
SetClassLongW
EnableMenuItem
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ScreenToClient
GetWindowRect
GetDlgItem
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
GetDC
SetTimer
SetWindowTextW
LoadImageW
SetForegroundWindow
ShowWindow
IsWindow
SetWindowLongW
FindWindowExW
TrackPopupMenu
AppendMenuW
CreatePopupMenu
EndPaint
CreateDialogParamW
SendMessageTimeoutW
wsprintfW
PostQuitMessage
gdi32
SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
advapi32
AdjustTokenPrivileges
RegCreateKeyExW
RegOpenKeyExW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegEnumKeyW
comctl32
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam v4.5.6.1647 Portable by CheshireCat/Data/Bandicam/Bandicam.reg
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam v4.5.6.1647 Portable by CheshireCat/Data/Bandicam/Config.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/RegVulkanLayer.bat
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/UnregVulkanLayer.bat
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bandicam.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdcam.exe.exe windows:6 windows x64 arch:x64
e99229ea9c2730c1cb113a78bae47f9c
Code Sign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
8b:9f:2b:72:98:7e:e6:be:f0:c1:5d:99:bd:60:9d:1a:37:ac:24:37:16:59:27:1c:9e:9e:8a:96:7a:42:ee:a6Signer
Actual PE Digest8b:9f:2b:72:98:7e:e6:be:f0:c1:5d:99:bd:60:9d:1a:37:ac:24:37:16:59:27:1c:9e:9e:8a:96:7a:42:ee:a6Digest Algorithmsha256PE Digest Matchestrueb0:71:b7:dc:e4:66:ca:9b:71:d2:30:de:4f:fa:3b:ec:83:85:96:d7Signer
Actual PE Digestb0:71:b7:dc:e4:66:ca:9b:71:d2:30:de:4f:fa:3b:ec:83:85:96:d7Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetDriveTypeW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
FlsFree
FlsSetValue
FlsGetValue
IsDebuggerPresent
SearchPathW
GetFileType
SetStdHandle
VirtualQuery
HeapQueryInformation
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
RtlUnwind
RtlPcToFileHeader
RtlUnwindEx
LCMapStringEx
GetCPInfo
CompareStringEx
GetLocaleInfoEx
GetStringTypeW
LoadLibraryExA
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
GetStartupInfoW
InitializeSListHead
WaitForSingleObjectEx
UnhandledExceptionFilter
IsProcessorFeaturePresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
FlsAlloc
VerifyVersionInfoW
VerSetConditionMask
GetFileAttributesExW
VirtualProtect
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalGetAtomNameW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
ResumeThread
UnlockFile
SetEndOfFile
LockFile
GetThreadLocale
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
EncodePointer
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetProfileIntW
CopyFileW
DuplicateHandle
lstrcmpiW
GetThreadPriority
WaitForMultipleObjects
SwitchToThread
LoadLibraryExW
GetModuleHandleExW
SetErrorMode
SetUnhandledExceptionFilter
DecodePointer
MoveFileW
FormatMessageW
GetDateFormatW
CreateThread
ReadDirectoryChangesW
SleepEx
GetLocalTime
GetUserDefaultLCID
LCIDToLocaleName
GetTickCount
GetUserDefaultLangID
CompareStringW
K32EnumProcessModules
QueryFullProcessImageNameW
GetSystemWow64DirectoryW
RaiseException
GetCurrentThreadId
InitializeCriticalSectionEx
CreateFileMappingW
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
CreateMutexW
VirtualFree
VirtualAlloc
CreateEventW
GlobalSize
GlobalUnlock
GlobalLock
FlushFileBuffers
ExitProcess
FileTimeToLocalFileTime
lstrcmpA
LocalAlloc
K32GetModuleFileNameExW
ResetEvent
SetEvent
CreateEventA
GetWindowsDirectoryW
lstrlenA
QueryPerformanceFrequency
GetTickCount64
QueryPerformanceCounter
FindResourceExW
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
MulDiv
lstrcmpW
WriteFile
SetThreadPriority
Sleep
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVersionExW
GlobalMemoryStatusEx
GetSystemInfo
TerminateProcess
OpenProcess
Process32NextW
GetCurrentProcessId
GetLastError
Process32FirstW
CreateToolhelp32Snapshot
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
IsDBCSLeadByteEx
MultiByteToWideChar
WideCharToMultiByte
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
LocalFree
GetFileSizeEx
GetFileSize
GetFileAttributesW
DeleteFileW
GetTempFileNameW
GetTempPathW
GetCurrentDirectoryW
GetSystemDirectoryW
GetModuleFileNameW
GetDiskFreeSpaceW
GlobalFree
GlobalAlloc
GetCurrentThread
GetCurrentProcess
FreeLibrary
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetVolumeInformationW
SetLastError
FindClose
FindNextFileW
lstrcpyW
FindFirstFileW
lstrcpynW
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetFileTime
FindResourceW
LoadResource
LockResource
SizeofResource
ReadFile
SetFilePointer
CreateFileW
OutputDebugStringA
OutputDebugStringW
lstrlenW
CloseHandle
GetStdHandle
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
LoadLibraryA
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
WriteConsoleW
SetStdHandle
HeapReAlloc
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
DecodePointer
HeapAlloc
RtlUnwindEx
LCMapStringW
GetStringTypeW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
IsChild
IsMenu
GetMessageTime
GetMessagePos
InsertMenuW
GetMenuState
MsgWaitForMultipleObjects
GetQueueStatus
PostThreadMessageW
GetActiveWindow
GetMessageW
SetMenuDefaultItem
GetScrollInfo
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
EnumWindows
GetShellWindow
ClipCursor
GetCursor
GetCursorInfo
ShowCursor
FillRect
GetAncestor
WindowFromPoint
AllowSetForegroundWindow
GetWindow
UnhookWinEvent
SetWinEventHook
SetCursorPos
UpdateLayeredWindowIndirect
GetCapture
EnableMenuItem
RemoveMenu
UpdateLayeredWindow
SetParent
DeleteMenu
CheckMenuRadioItem
DrawIconEx
LoadImageW
SetClassLongW
CheckMenuItem
AppendMenuW
CreatePopupMenu
GetDoubleClickTime
TranslateAcceleratorW
DrawIcon
LoadAcceleratorsW
GetClassInfoW
MessageBoxW
EnumDisplayDevicesW
EnumDisplayMonitors
GetWindowTextLengthW
GetFocus
IsWindowEnabled
TrackPopupMenuEx
DestroyMenu
LoadMenuW
TrackMouseEvent
SetWindowRgn
GetClassInfoExW
RegisterClassExW
UnregisterClassW
EndDeferWindowPos
InflateRect
GetCursorPos
GetWindowDC
SetScrollInfo
PostQuitMessage
IsZoomed
SetScrollRange
SetScrollPos
MessageBeep
SetWindowContextHelpId
SendMessageW
GetSystemMetrics
CreateWindowExW
EndPaint
BeginPaint
MapDialogRect
GetWindowLongPtrW
GetKeyState
DestroyWindow
UnionRect
IsClipboardFormatAvailable
CloseClipboard
GetTopWindow
EmptyClipboard
OpenClipboard
KillTimer
SetTimer
ShowWindow
GetAsyncKeyState
CallWindowProcW
RemovePropW
GetPropW
SetPropW
SetWindowLongPtrW
SetLayeredWindowAttributes
SetActiveWindow
IntersectRect
RegisterClassW
LoadIconW
DefWindowProcW
GetLastActivePopup
WinHelpW
MonitorFromWindow
CharUpperW
CheckDlgButton
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
DrawTextExW
GrayStringW
TabbedTextOutW
CreateDialogIndirectParamW
GetDlgItem
GetSysColorBrush
InvalidateRect
GetMenu
SetMenu
TrackPopupMenu
UpdateWindow
ValidateRect
ScrollWindow
GetScrollPos
GetScrollRange
ShowScrollBar
AdjustWindowRectEx
SetFocus
GetClassLongPtrW
SystemParametersInfoW
GetWindowRect
MonitorFromRect
GetMonitorInfoW
CopyRect
MonitorFromPoint
OffsetRect
EqualRect
MoveWindow
GetWindowLongW
SetWindowPos
ScreenToClient
ClientToScreen
GetWindowDisplayAffinity
SetWindowDisplayAffinity
PeekMessageW
TranslateMessage
DispatchMessageW
IsWindow
GetParent
GetDesktopWindow
FindWindowExW
GetWindowThreadProcessId
IsWindowVisible
IsIconic
GetWindowTextW
GetWindowPlacement
GetForegroundWindow
AttachThreadInput
SetForegroundWindow
BringWindowToTop
GetDC
ReleaseDC
RegisterWindowMessageW
DestroyIcon
DrawTextW
ExitWindowsEx
PostMessageW
IsRectEmpty
GetClassNameW
GetClassLongW
SetRectEmpty
SetRect
GetDlgCtrlID
SetWindowTextW
MapWindowPoints
ShowOwnedPopups
SendDlgItemMessageA
DrawStateW
GetKeyNameTextW
MapVirtualKeyW
CopyImage
RealChildWindowFromPoint
InsertMenuItemW
UnpackDDElParam
EndDialog
GetNextDlgTabItem
CopyIcon
SetWindowLongW
EnumChildWindows
GetMenuItemCount
GetMenuStringW
GetMenuItemID
ModifyMenuW
GetMenuItemInfoW
GetSubMenu
wsprintfW
EnableWindow
GetClientRect
PtInRect
ReleaseCapture
RedrawWindow
SetCapture
LoadCursorW
SetCursor
SetClipboardData
ReuseDDElParam
GetSystemMenu
NotifyWinEvent
WaitMessage
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
RegisterClipboardFormatW
LockWindowUpdate
SetClassLongPtrW
CharNextW
InvalidateRgn
GetNextDlgGroupItem
GetMenuDefaultItem
EnableScrollBar
DrawEdge
DrawFrameControl
DrawFocusRect
CharUpperBuffW
GetWindowRgn
GetComboBoxInfo
DestroyCursor
CreateMenu
InvertRect
HideCaret
GetIconInfo
GetUpdateRect
SubtractRect
MapVirtualKeyExW
IsCharLowerW
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
FrameRect
GetSysColor
CharUpperBuffW
gdi32
FillRgn
CopyMetaFileW
CreateBitmap
CreateHatchBrush
CreatePatternBrush
Escape
GetClipBox
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
CreateRectRgnIndirect
PatBlt
GetMapMode
SetRectRgn
DPtoLP
CreateDIBitmap
GetTextCharsetInfo
GetDIBits
RealizePalette
SetPixel
SetDIBColorTable
CreateRoundRectRgn
GetRgnBox
GetTextColor
GetBkColor
EnumFontFamiliesExW
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
RoundRect
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
GetWindowOrgEx
FrameRgn
GetBoundsRect
PtInRegion
GetTextFaceW
SetPixelV
GetPixel
Rectangle
CreatePen
CreateDCW
CreateSolidBrush
ExtCreateRegion
LineTo
MoveToEx
CombineRgn
OffsetRgn
CreateRectRgn
ExcludeClipRect
SetWindowOrgEx
CreateCompatibleBitmap
TextOutW
SetTextCharacterExtra
AbortPath
GetPath
EndPath
CloseFigure
BeginPath
StretchBlt
BitBlt
CreateDIBSection
CreateFontIndirectW
GetDeviceCaps
SelectObject
SetTextColor
SetBkMode
CreateCompatibleDC
DeleteDC
CreateFontW
DeleteObject
ExtTextOutW
SetBkColor
EnumFontFamiliesW
GetObjectW
GetStockObject
GetTextMetricsW
ScaleWindowExtEx
GetTextExtentPoint32W
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetOpenFileNameW
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
advapi32
InitializeSecurityDescriptor
OpenProcessToken
AllocateAndInitializeSid
FreeSid
SetEntriesInAclW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegQueryValueW
RegEnumKeyW
RegEnumValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
SetSecurityDescriptorDacl
RegQueryInfoKeyW
CheckTokenMembership
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
SetNamedSecurityInfoW
shell32
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHAppBarMessage
DragFinish
DragQueryFileW
SHGetFileInfoW
SHQueryUserNotificationState
ExtractIconExW
CommandLineToArgvW
SHChangeNotify
ShellExecuteExW
Shell_NotifyIconW
ShellExecuteW
ord155
ord190
SHBrowseForFolderW
SHGetPathFromIDListW
SHOpenFolderAndSelectItems
comctl32
InitCommonControlsEx
shlwapi
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW
StrStrW
PathCanonicalizeW
PathIsDirectoryW
StrFormatKBSizeW
uxtheme
OpenThemeData
CloseThemeData
GetThemePartSize
GetThemeColor
GetCurrentThemeName
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
DrawThemeParentBackground
DrawThemeText
IsAppThemed
ole32
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleUninitialize
OleInitialize
CoRevokeClassObject
OleLockRunning
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
CoDisconnectObject
CLSIDFromProgID
CoCreateGuid
CLSIDFromString
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CoFreeUnusedLibraries
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
PropVariantClear
CoCreateInstance
OleSetContainedObject
OleCreate
CoUninitialize
CoRegisterMessageFilter
oleaut32
SysAllocStringLen
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VariantChangeType
OleCreatePropertyFrame
SafeArrayDestroy
SysAllocString
VariantClear
VariantInit
SystemTimeToVariantTime
VariantCopy
VarBstrFromDate
LoadTypeLi
OleCreateFontIndirect
VariantTimeToSystemTime
SysFreeString
oledlg
OleUIBusyW
urlmon
CoInternetCombineUrl
gdiplus
GdipCreatePen1
GdipDeletePen
GdipSetPenMode
GdipSetPenStartCap
GdipSetPenEndCap
GdipDrawLineI
GdipCreateAdjustableArrowCap
GdipDeleteCustomLineCap
GdipSetPenCustomEndCap
GdipDrawRectangleI
GdipFillEllipse
GdipGetDC
GdipCreateFontFromDC
GdipCreateFontFromLogfontW
GdipReleaseDC
GdipCloneStringFormat
GdipStringFormatGetGenericTypographic
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipDrawImageRectRectI
GdipDrawImagePointRectI
GdiplusShutdown
GdipCreateFromHDC
GdipDrawEllipseI
GdipGetDpiX
GdipAddPathEllipseI
GdipSetClipPath
GdipDrawImageI
GdipFillEllipseI
GdipCreateRegion
GdipAddPathRectangleI
GdipCreateRegionRectI
GdipCombineRegionRectI
GdipFillRegion
GdipSetPenWidth
GdipSetPenDashArray
GdipSetEmpty
GdipCombineRegionRegion
GdipSetCompositingMode
GdipDrawImageRectI
GdipImageRotateFlip
GdipSetSmoothingMode
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdiplusStartup
GdipCreateRegionPath
GdipClosePathFigure
GdipAddPathArcI
GdipAddPathLineI
GdipFree
GdipDisposeImage
GdipAlloc
GdipCloneImage
GdipDeletePath
GdipSetClipRegion
GdipCreateBitmapFromScan0
GdipCreatePath
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipGetImageWidth
GdipBitmapLockBits
GdipFlush
GdipGetImageHeight
GdipFillRectangleI
GdipResetClip
GdipSetClipRectI
GdipDrawString
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetTextRenderingHint
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteFont
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipGraphicsClear
GdipGetImagePixelFormat
GdipDeleteRegion
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
pdh
PdhOpenQueryW
PdhRemoveCounter
PdhAddCounterW
PdhCollectQueryData
PdhGetFormattedCounterValue
wininet
InternetQueryOptionW
InternetCanonicalizeUrlW
InternetOpenW
InternetSetOptionW
InternetOpenUrlW
HttpQueryInfoW
InternetQueryDataAvailable
InternetCreateUrlW
InternetSetCookieW
HttpOpenRequestA
HttpEndRequestW
InternetWriteFile
HttpSendRequestExW
HttpAddRequestHeadersW
InternetConnectA
InternetReadFile
HttpSendRequestW
InternetCrackUrlA
HttpOpenRequestW
InternetConnectW
InternetCrackUrlW
InternetCloseHandle
dwmapi
DwmGetWindowAttribute
crypt32
CertFindCertificateInStore
CertFreeCertificateContext
CertCloseStore
CryptMsgClose
CertGetNameStringW
CryptMsgGetParam
CryptQueryObject
CryptDecodeObject
httpapi
HttpCreateHttpHandle
HttpAddUrl
HttpRemoveUrl
HttpTerminate
HttpReceiveHttpRequest
HttpSendHttpResponse
HttpInitialize
propsys
PropVariantToString
winmm
timeKillEvent
PlaySoundW
waveOutSetVolume
timeSetEvent
timeEndPeriod
timeBeginPeriod
msvfw32
ICInfo
ICOpen
ICClose
ICGetInfo
ICSendMessage
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
Exports
Exports
;r��WS�������yp��v~�w!�<o��ZѹJ{R�z�����֭;Oʩ]���uH�������2���Y�g�"�bmZ�I.�XLQ�Ѿ�ZWM�-�A@��� a�UDPI>�#*x٬1Y5�Hu۵D?�R��4�6֒���e6r���tg�;G%K.��3��� ��pv:�L���%��"??g=|CP�-�����n(�>o�m���7�.]�L�)�����6��˹���\�lj�lHڄ1pԂ�� ���X��,�K����/1E�`����|����z+�Q�#m���z���{�q�����T��,��l���a����\���6�fd������ۯ�p`�Ѡ����Y� �o�_lÚ=wT��@A�� z��w�x/`l͛~ �)s�QнE���C$��h��4=����.� +V�b�}���a�m8H`�qG1��G�~1��~����H�}��eE�.���jV�{=J��~��1���/�� a���χ��Zfp�� ��{�G���t�ҟ�%�8*��^�Ј><�� �~6��,H�FMN�3��\���ґ塸���p�?p�sp�F���H�)Li`����2������'�sê{��I.F���[�}Y���1���l�'��ѥ�,��Y�_i�<��F��0�iaص6Ƅ�l�л��!�ehPi�{m�*!\��a)��:���ig�>���>�k(s�ck �s�:d:7�Vc�5h=:>���W�իBl�h��\�@�����R��7�F��zP��q)S t���h¥hͅѿ�iP���t8�%X¶��q��^��S��{�x�}GU�5 *�Y܁��3�U��ay��G�����x"#��+�� ����Q���d�$9�@��X��1�9E�$�9Cp^����Y˴ɞ���9aL�r W b��>[��Q<8j�(Yn��/�LF��W,�rc���"�5�yE���梋e�?��{���}_���������3Ѻo��O�.u��Q���S�u��j��Q��uІF����J 4�S���0����R�iG��[i����V�?���+s��o�����{Ejc2Ԁ)�4 ��^�W�21�ԅCY3��2a�� �z�.3�t��9/�D��\G%F��mo\���4��ds��s�%mO��I�L���9 `�l��Bc����2�� �V�A!:VI�{0�C���/�]��WK�}�������a�g����S�+)-�s6=�Nzor��4@)B@뽯2<Rq8aj�o�Q{kH���E.�P $�0E�� �<�i'�Uv���8fR�̗�pK{����5wi`�9��A����S뀴����eYw��T��|����K��V���� ߣ�^+��+��/G>��R����ԫi�1[�6/9��(+�?���� C�x��H5���ߣI�\,��^����e�ѹm���L/�ӧ����A:���:���to7�����me.va����@��5pgi��I��Z�{�U�e��E�����g����y����ox�?�˨���>��A]:��~� 6�X�1 �[�_�v����Mp�@ݥ���>�ڲc��ie��h�AU�o�9�ds gN*�Z�(��Aa+��%���!�� X?�1r�SA�p��9�&)����hSRR�C��JJ��x��ދz��Y���Wչ3KW^ ����߽;P�gr����}q�N����O- t����i�j��/Wߪ99��7G����1����+Kp���f("��� �w��S�Сa��C���JGx��ɍ_%�I$� ~ߡ�Mt5(�1�E!������rVnD��X�ǟ�SC��EA���F6��|�6s��I��c���~>G],�@�F�@���ӭ+_�MlV�țo���-|�O���{ �����������4��x*z�7��i���d ��-��-���MdJ�����Uٖ;�V܂7�{`V��S�$���NG�5i�mUw�n>H8�J���S��� �G}̌r;r�����Ya˨�;p�V�ɡ��t�з���z�W;�W�y&8��:�n�ۏ�n� Ӝ=�ڄ��ː�&\�VBT+-A�������ֶ1���������1-Yjeز6�XY��h�����SR�*A i7�N��܂���n�&v�E�Q��\�@;&d�z������''ȅ{���b��� �{`�ؔ!1���|���^<> ��f���h�T?��������k!�U���R�� �,3.N/+����w���z��u��_}�v���&�Ym�ن�M"�E�F�<اh�#זrx������ۏ����<��t\:W�EGX�����:܉A�Y�)Lp���9F}`v�������}�N�����������ۙ�iG�B��ɋ ���N��U����gG\����o�+�R���&�C�����$A����.���)�f���~��M��?oz��\�S����[����X�W�^���GF�����!�� �3H%�M�K(�Iӳ��b=ݟg���%����'h����đ'>P�ɴl����9[Sk����qIH59���5�(GX]]O��]������Mo�&�\ߕ���F��Èe�:��Il�+�S�,"�u��49?P�ꤝbӐ퇠�����` �"^���WF#7��% LGF��!����PmxԔ�A�G�f��0��'����v���d Aq+��&Q�����A3\�&x���Z4���{��wB Ј�J�A�aϸ *v&|��E!]I��N#m�[r���=퉹3'k9ðM�&� �q����}��d���L���8Z�(����S���Ќ4k���@G�ͤu�H��ǀ�uO���a����zO�{��aT0#�㶵���<d�t�G붾n:����A�m|�o�Usa�����=�X�q��v�8=�cY�ta2�0���N�z��XE���� �t����p41s� (좏�y�����%D�sh�]w�AƝ��ߓ�)��Rn{A��u�nrG���3D�5��+���9TƦ��o�U��@-��`1YΣ7�"�:�ZZ}I�$k��c���W����d �߱�^�t�5ؖO��x
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 374KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.BANDISH Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BANDI0 Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BANDI1 Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BANDI2 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 759KB - Virtual size: 758KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdcam32.bin.exe windows:6 windows x86 arch:x86
d638afd77aa9b1f80284168bd8833c40
Code Sign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
8e:f5:de:90:f1:e6:a9:f8:c4:b6:9e:c8:ae:8a:14:68:48:56:56:db:f0:17:1a:51:ec:23:d7:64:cd:db:c0:5bSigner
Actual PE Digest8e:f5:de:90:f1:e6:a9:f8:c4:b6:9e:c8:ae:8a:14:68:48:56:56:db:f0:17:1a:51:ec:23:d7:64:cd:db:c0:5bDigest Algorithmsha256PE Digest Matchestrue5f:84:04:9a:c4:f7:a5:20:dd:7c:ea:0b:37:d9:e1:fe:4b:52:cf:13Signer
Actual PE Digest5f:84:04:9a:c4:f7:a5:20:dd:7c:ea:0b:37:d9:e1:fe:4b:52:cf:13Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
E:\w\devel\CAP6\bandicam\bin\bdcam32.pdb
Imports
bdcam32
Bdcam_Uninitialize
Bdcam_Initialize
Bdcam_SharedData
kernel32
LCMapStringW
ExitProcess
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
HeapQueryInformation
GetCommandLineW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
GetStringTypeW
GetCPInfo
SetFilePointerEx
GetCommandLineA
GetConsoleOutputCP
WriteConsoleW
GetLastError
CloseHandle
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
OutputDebugStringW
OutputDebugStringA
CreateFileW
SetFilePointer
ReadFile
SizeofResource
LockResource
LoadResource
FindResourceW
GetFileTime
GetSystemTimeAsFileTime
FileTimeToSystemTime
GetTimeZoneInformation
GetConsoleMode
FindFirstFileW
lstrcpyW
FindNextFileW
FindClose
SetLastError
GetVolumeInformationW
GetModuleHandleW
GetProcAddress
LoadLibraryW
FreeLibrary
GetCurrentProcess
GetCurrentThread
GlobalAlloc
GlobalFree
GetModuleFileNameW
GetSystemDirectoryW
GetCurrentDirectoryW
GetTempPathW
GetTempFileNameW
DeleteFileW
GetFileAttributesW
GetFileSize
GetFileSizeEx
LocalFree
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
WaitForSingleObjectEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SearchPathW
GetProfileIntW
GetTickCount
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
FindResourceExW
GetFileAttributesExW
SetErrorMode
VirtualProtect
lstrcmpiW
DuplicateHandle
WriteFile
CreateDirectoryW
GetFullPathNameW
SystemTimeToTzSpecificLocalTime
UnlockFile
SetEndOfFile
LockFile
FlushFileBuffers
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalGetAtomNameW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GlobalFindAtomW
EncodePointer
GlobalAddAtomW
ResumeThread
SetThreadPriority
CreateEventW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GlobalDeleteAtom
LoadLibraryExW
GetCurrentThreadId
LoadLibraryA
GetModuleHandleA
CopyFileW
FormatMessageW
GlobalLock
GlobalUnlock
GlobalSize
GetProcessHeap
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
HeapFree
GetUserDefaultLangID
CompareStringW
QueryFullProcessImageNameW
Sleep
FileTimeToLocalFileTime
lstrcmpA
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ResetEvent
SetEvent
CreateEventA
MulDiv
lstrcmpW
GetVersionExW
GetSystemInfo
TerminateProcess
OpenProcess
Process32NextW
GetCurrentProcessId
Process32FirstW
CreateToolhelp32Snapshot
WaitForSingleObject
MultiByteToWideChar
WideCharToMultiByte
ReadConsoleW
user32
CopyIcon
SetCursorPos
IsZoomed
DrawFrameControl
DrawEdge
SetWindowRgn
SetClassLongW
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetLayeredWindowAttributes
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
DrawFocusRect
GetNextDlgGroupItem
SetParent
GetSystemMenu
UnionRect
MapVirtualKeyW
GetKeyNameTextW
GetMenuDefaultItem
TrackMouseEvent
ReuseDDElParam
UnpackDDElParam
LoadImageW
IntersectRect
InsertMenuItemW
CreatePopupMenu
LoadMenuW
TranslateAcceleratorW
LoadAcceleratorsW
MapDialogRect
GetAsyncKeyState
SetRectEmpty
SendDlgItemMessageA
InflateRect
DestroyMenu
CharUpperW
FillRect
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
InvalidateRect
KillTimer
RealChildWindowFromPoint
DeleteMenu
CopyImage
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
GetSysColorBrush
IsDialogMessageW
FrameRect
CheckDlgButton
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetWindow
GetTopWindow
GetClassLongW
RemoveMenu
SetFocus
GetFocus
IsWindowEnabled
UnhookWindowsHookEx
PtInRect
GetSysColor
AdjustWindowRectEx
GetClientRect
GetWindowTextLengthW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
CreateAcceleratorTableW
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
EndPaint
BeginPaint
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetDlgItem
EndDeferWindowPos
DeferWindowPos
DestroyAcceleratorTable
CopyAcceleratorTableW
SetMenuDefaultItem
GetDoubleClickTime
AppendMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
DrawIcon
BeginDeferWindowPos
SetWindowPlacement
SetRect
LockWindowUpdate
UpdateLayeredWindow
GetComboBoxInfo
PostThreadMessageW
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
PostQuitMessage
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
GetMessageW
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
ShowOwnedPopups
SendMessageW
GetSystemMetrics
SystemParametersInfoW
GetWindowRect
GetMonitorInfoW
CopyRect
MonitorFromPoint
OffsetRect
EqualRect
MoveWindow
SetCursor
GetWindowLongW
SetWindowPos
ScreenToClient
ClientToScreen
PeekMessageW
TranslateMessage
DispatchMessageW
IsWindow
GetParent
GetDesktopWindow
FindWindowExW
GetWindowThreadProcessId
IsWindowVisible
IsIconic
GetWindowTextW
GetWindowPlacement
GetForegroundWindow
SetForegroundWindow
BringWindowToTop
GetDC
ReleaseDC
RegisterWindowMessageW
DestroyIcon
DrawTextW
GetDlgCtrlID
SetWindowTextW
MessageBoxW
GetLastActivePopup
MapWindowPoints
GetClassNameW
SetWindowLongW
EnumChildWindows
GetMenuItemCount
GetMenuStringW
GetMenuItemID
ModifyMenuW
GetWindowRgn
DestroyCursor
GetMenuItemInfoW
GetSubMenu
EnumDisplayMonitors
EnumDisplayDevicesW
PostMessageW
IsRectEmpty
ShowWindow
DefWindowProcW
GetMessagePos
GetMessageTime
CallWindowProcW
GetClassInfoW
SetScrollRange
LoadIconW
LoadCursorW
RegisterClassW
SetTimer
EnableWindow
UnregisterClassW
GetMenuState
InsertMenuW
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
gdi32
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
CreateCompatibleBitmap
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
EnumFontFamiliesExW
RectVisible
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateDIBitmap
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetTextExtentPoint32W
GetTextMetricsW
GetStockObject
GetObjectW
EnumFontFamiliesW
SetBkColor
ExtTextOutW
DeleteObject
GetDeviceCaps
DeleteDC
CopyMetaFileW
CreateDCW
CreateBitmap
SetTextColor
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
Escape
BitBlt
ExcludeClipRect
GetClipBox
msimg32
TransparentBlt
AlphaBlend
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
LookupPrivilegeValueW
OpenProcessToken
AllocateAndInitializeSid
FreeSid
SetEntriesInAclW
SetNamedSecurityInfoW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumValueW
RegQueryValueW
RegEnumKeyW
AdjustTokenPrivileges
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
shell32
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
DragFinish
DragQueryFileW
SHGetFileInfoW
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
comctl32
InitCommonControlsEx
shlwapi
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW
PathIsDirectoryW
StrFormatKBSizeW
uxtheme
DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeColor
GetCurrentThemeName
GetThemePartSize
GetThemeSysColor
GetWindowTheme
IsAppThemed
ole32
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoDisconnectObject
CoInitialize
CoCreateGuid
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
oleaut32
SysAllocStringLen
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
VarBstrFromDate
VariantChangeType
SysFreeString
SysAllocString
VariantClear
VariantInit
gdiplus
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
psapi
EnumProcessModules
GetModuleFileNameExW
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
winmm
PlaySoundW
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 372KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BANDISH Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdcam32.dll.dll windows:6 windows x86 arch:x86
3e0fe8dd8971510d272c354bfce1ac6f
Code Sign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
03:8e:8f:60:19:67:8a:62:c3:14:99:55:c9:08:27:ff:83:0f:65:76:2b:ed:2c:0b:e3:00:6e:94:58:34:4e:d7Signer
Actual PE Digest03:8e:8f:60:19:67:8a:62:c3:14:99:55:c9:08:27:ff:83:0f:65:76:2b:ed:2c:0b:e3:00:6e:94:58:34:4e:d7Digest Algorithmsha256PE Digest Matchestruef2:3a:4e:c2:3e:9b:dc:53:91:67:59:b5:ca:61:3f:d7:3f:88:1f:17Signer
Actual PE Digestf2:3a:4e:c2:3e:9b:dc:53:91:67:59:b5:ca:61:3f:d7:3f:88:1f:17Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetFileAttributesW
GetFileSize
LocalFree
CreateDirectoryW
GetFullPathNameW
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObject
CreateToolhelp32Snapshot
GetCurrentProcessId
TerminateProcess
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LockResource
LoadResource
FindResourceExW
FindResourceW
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
GetTickCount64
QueryPerformanceFrequency
VirtualProtect
WriteFile
InitializeCriticalSection
DeleteCriticalSection
CreateEventW
SetEvent
VirtualAlloc
VirtualFree
CreateMutexW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
ReleaseMutex
CreateFileMappingW
VirtualQuery
HeapCreate
Thread32Next
Thread32First
GetSystemDirectoryW
SuspendThread
ResumeThread
Sleep
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
GetLocalTime
CreateEventA
FreeLibraryAndExitThread
CreateThread
DisableThreadLibraryCalls
GetTickCount
InitializeCriticalSectionEx
RaiseException
DecodePointer
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
SetFilePointerEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetStringTypeW
GetFileType
GetStdHandle
LCMapStringW
ExitProcess
GetModuleHandleExW
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
WriteConsoleW
RtlUnwind
GetModuleFileNameW
GetCurrentProcess
FreeLibrary
LoadLibraryW
GetProcAddress
GetModuleHandleW
SetLastError
FindClose
FindNextFileW
GetSystemTimeAsFileTime
ReadFile
SetFilePointer
CreateFileW
OutputDebugStringA
OutputDebugStringW
CloseHandle
GetCurrentThreadId
GetLastError
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
user32
FindWindowW
GetWindowLongW
WindowFromDC
GetClientRect
GetClassNameW
FillRect
PostMessageW
wsprintfW
RegisterWindowMessageW
SetForegroundWindow
GetForegroundWindow
GetDesktopWindow
GetParent
IsWindow
gdi32
CreateSolidBrush
DeleteObject
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
SetNamedSecurityInfoW
SetEntriesInAclW
FreeSid
AllocateAndInitializeSid
shlwapi
PathIsDirectoryW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
winmm
PlaySoundW
Exports
Exports
Bdcam_Initialize
Bdcam_SharedData
Bdcam_Uninitialize
Sections
.text Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17.3MB - Virtual size: 17.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hkshare Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BANDI0 Size: 807KB - Virtual size: 806KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 508KB - Virtual size: 507KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdcam64.bin.exe windows:5 windows x64 arch:x64
2de66971129fbf12f77d00a30820b413
Code Sign
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before21-12-2012 00:00Not After30-12-2020 23:59SubjectCN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate
IssuerCN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=USNot Before18-10-2012 00:00Not After29-12-2020 23:59SubjectCN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4aCertificate
IssuerCN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USNot Before08-11-2006 00:00Not After16-07-2036 23:59SubjectCN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USKey Usages
KeyUsageCertSign
KeyUsageCRLSign
1a:08:e4:25:dd:db:b3:4e:1e:26:d6:e7:85:6e:9f:b8Certificate
IssuerCN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=USNot Before27-09-2013 00:00Not After26-12-2016 23:59SubjectCN=Bandisoft,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Bandisoft,L=Yeongdeungpogu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate
IssuerCN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=USNot Before08-02-2010 00:00Not After07-02-2020 23:59SubjectCN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
bdcam64
Bdcam_Uninitialize
Bdcam_Initialize
Bdcam_SharedData
kernel32
lstrlenA
GlobalFlags
WriteFile
FlushFileBuffers
SetEndOfFile
SetErrorMode
GetStartupInfoW
HeapAlloc
HeapFree
ExitProcess
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
HeapReAlloc
HeapQueryInformation
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
LCMapStringW
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CreateFileA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFindAtomW
LoadLibraryA
GetVersionExA
GlobalAddAtomW
WritePrivateProfileStringW
GlobalDeleteAtom
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
GlobalLock
GlobalUnlock
FormatMessageW
Sleep
GetUserDefaultLangID
GetTickCount
GetModuleHandleW
lstrcmpW
GetSystemInfo
TerminateProcess
GetCurrentProcessId
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
LocalFree
GetFileAttributesW
GetSystemDirectoryW
GetModuleFileNameW
GlobalFree
GlobalAlloc
GetCurrentProcess
GetCurrentThread
FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExW
GetVolumeInformationW
SetLastError
GetSystemTimeAsFileTime
FindResourceW
LoadResource
LockResource
SizeofResource
ReadFile
SetFilePointer
CreateFileW
lstrlenW
CloseHandle
GetLastError
GetCommandLineW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
DestroyMenu
GrayStringW
DrawTextExW
TabbedTextOutW
UnregisterClassW
GetSysColorBrush
WinHelpW
GetCapture
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
GetWindowTextW
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetMessageTime
GetMessagePos
SetMenu
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
GetSysColor
AdjustWindowRectEx
CallWindowProcW
PtInRect
GetMenu
SystemParametersInfoA
IsIconic
GetWindow
IsWindowEnabled
MessageBoxW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
EnableMenuItem
CheckMenuItem
PostQuitMessage
UnhookWindowsHookEx
GetMenuState
EnableWindow
PostMessageW
RegisterClassW
LoadCursorW
LoadIconW
DefWindowProcW
ShowWindow
ReleaseDC
GetDC
GetSubMenu
ModifyMenuW
GetMenuItemID
GetMenuItemCount
FindWindowExW
GetClassNameW
MapWindowPoints
SetWindowTextW
GetDlgCtrlID
wsprintfW
DrawTextW
RegisterWindowMessageW
SetForegroundWindow
GetWindowThreadProcessId
GetForegroundWindow
GetWindowPlacement
GetParent
IsWindow
DispatchMessageW
TranslateMessage
PeekMessageW
ClientToScreen
SetWindowPos
GetWindowLongW
CopyRect
GetWindowRect
GetSystemMetrics
SendMessageW
GetLastActivePopup
gdi32
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
GetStockObject
SetMapMode
RestoreDC
SaveDC
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
DeleteObject
ExtTextOutW
SetBkColor
PtVisible
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
SetNamedSecurityInfoW
SetEntriesInAclW
FreeSid
AllocateAndInitializeSid
comctl32
InitCommonControlsEx
shlwapi
PathIsDirectoryW
PathFindFileNameW
PathFindExtensionW
ole32
CoUninitialize
oleaut32
VariantInit
VariantClear
VariantChangeType
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
Exports
Exports
������-���O����?{�"6.x��+c!�{Q��豽�����5/�i�.�ڞ��s#�c���:�yI7����փ�]�L��(�Έ>��[�u]�J�Fa7����� -��v�͋����e(�^"��_2f�D�z^S4qԣ���i� l�k��)����[(i2�8��f`"g6��3��Ӄ�����~wƦtx��qà��ܿv���E�D`S���'��t�U��5����$dWy��ME�A���(�uHM��9�Mq�����q(7ӿfG�������"U��e�7<���D���\���].���Խ�*&V��D�i#���fk��{|��Zàc��.���`;؝��#�˸���������T�]C��b�t�f��S�E8��~(/�`��&�P�]P�V��ܷ��n����w�Ã����)f���qp�m����ZvGc�`�(~|?�u]V�| ��r ?Ss�_]�!7��ǭ�����͡.;�#�Ej���8� *[�5����ǻ�!��Ԯn�Z���6�e���E�ֳZ����:�g���R�G�k��冬3kT���9@,} �r�T��w��6yXD��'��G�B2$�+rEQH ���#?�w�����yvō��W�Io{O��D6��|��f-��ĹRmKO�eͮ+�=�hm�����x �ՕvA�ܽ���t�>�����ъ4�zj�n7���f#����㛘PէmL}ͥ)0�7�6ح�*�̨���s6T�K���?�s�1I[�H��O# MH�n�H�^M�5��<]�Q�5����䖷f|<���7v��r�r�/�˄����1�Z����M��Q�TX����=F���w��¥PKg�DYv�Dm��6)���4��w�����ȫ���đ2JY���>��0�ic;�z��v����k�4t�=�M�:0{3|��\ګ���]2V�7A�+s3�fI��4�����;�[e�e�Ը��:?�&��c�o����^�X��6S�9(�'�!��h@�-���G���b6�W_�Y��֕ƺ�3�� �l�z�߫�%@�2��u�Dn\Qi��=�V��3�<��E�.|2�bt�Ⱐ��h�!�s����ďl�E�@�;��+DFi>����6b�a���0�ʌ>��0�1��aRt�l~�Q'�W6�8���d���ʼn?���mSU�۩����3="��� �6c-�b{�����0ꀗ[��'���ފZ��0�ަm+5��f�נI��<@������������u�Ŧ+� �8}��1$�}B�u1��J� `�d��{~�Q��@�,"j��Φ|��@8:���j(�0��M����q+�mM�ӻ ��V_�1��}���7i ���E�+���o��`d��Hd�N��ܧ���s�/��&LzvĘ��_���M0� P,���gHB�~FfL�Y'6��J�7������A�m�[w�)ITG|Ϲ���u��&ы�֓0y ��M��*�u��|T��+��|���!����=B��\�h�v���Sd�;�%��aB���n����ⰄK�n6��V�}-�o��Jp���mX��cg�$Kg�+Ϙ�*�my�0�����~�b�T�T� �"���My���x�n�~�r�q�~eM��!d̂��CI ����ɤN���D�[y� ����fe^��:a�~�ᾉ��c��-���6����s��j��pg.� ��p��O�B��(���>_2*}�)�(���>Dd���N-6�U��r�l>��S�Ɍ����Vn��FM��цI�:��3�@�]�#\�����K��(�*������c�����vx��I:�ޞ�A�3n��<��9W�5aFC��7��_ c�@���G^�l$~�p �g����Nf���֎�}�{��pq~%���L��5�z�P���6�ڤ�������]�?C`��4"����y+? #�h�����#/H��$��/�כ��}�P/ �`ŧ)��G����/Lb��yD?��U+��gL��v���b�a�dB;I ��,z��������.F�ݎ�OyxY~�����E%�Vٺ�R��"�X�s����`K$ ��(e�����:Df�{�M��8��2Ţr~~08��0If������i�`�o�K.Nr�\⤁����'�9miR������4�b�cr���GY�a͓��Nil7/~l�&��$)��(��#�PE~�l��� �6�khV|��|eGkT)^����L�#"�R�wv�}��xcw��8�����Z3ɒJ �x��!��P�=&V�$]b0��f�D��� G:������.�g,�$��Dp��΄@�n�|�7N�s��V{���IU#djK�$�:��SY��TL���X@F�+.#�2�Iˣ)��v�ͮ0��4#�w������� Q���CDt�� _�ɦ��m������`��w�v�Z�{���ʟ]�:}��}`��h�|��P�� v*�b6+tQ��W����g/i�Ċ��Hyz��6�Նj�?�K�Z%翶_S�'��0o]Jw���q���2�[�l�J���/7Y �{c'��)����7� � ���[v���jL�@#C��&�uI�S� ��π�x0���eJ��.��:����7.����զ� �-k��>� U[�� r%�*������4�b����ͣ�!�*~�����Ho�wI2�n��r���(̦�{As�ͶЮK�ٹV^� �C,��$��V���'y�����:Vt��5sdA��O;��N���O<� 2"�|<���Y�W���_�#H�Vc "3I�;�2۫@��l7�/����0<����q�����z~<����c�\$=���������#�/�3^ht��aF��vkUg!�+����x��Q>S\���̞�"��Y��◖���������4�ܨ�Y����t���RZYm��v7�\��R��]R#��"7�O�1*����4�����^m�vn�J�<4���2�+���c.��b��y"��?��p�����4���|�����EǦ�� ��?��)͂!��c1�88B��X[����s�_��Vj
Sections
.text Size: - Virtual size: 213KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.BANDISH Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BANDI0 Size: - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BANDI1 Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdcam64.dll.dll windows:6 windows x64 arch:x64
d00a47711b777b01d9243d5a72affed1
Code Sign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
91:da:ee:31:94:48:18:cc:a2:3f:ab:a6:66:bc:26:6d:32:f5:bc:35:b8:f3:65:50:1e:ac:91:7b:2d:8b:23:01Signer
Actual PE Digest91:da:ee:31:94:48:18:cc:a2:3f:ab:a6:66:bc:26:6d:32:f5:bc:35:b8:f3:65:50:1e:ac:91:7b:2d:8b:23:01Digest Algorithmsha256PE Digest Matchestruef8:35:ff:d9:94:fe:14:4f:5b:24:23:5b:ee:02:da:38:ba:c8:38:8dSigner
Actual PE Digestf8:35:ff:d9:94:fe:14:4f:5b:24:23:5b:ee:02:da:38:ba:c8:38:8dDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
GetFileAttributesW
GetFileSize
LocalFree
CreateDirectoryW
GetFullPathNameW
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObject
CreateToolhelp32Snapshot
GetCurrentProcessId
TerminateProcess
GetSystemInfo
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LockResource
LoadResource
FindResourceExW
FindResourceW
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
GetTickCount64
QueryPerformanceFrequency
VirtualProtect
WriteProcessMemory
WriteFile
InitializeCriticalSection
DeleteCriticalSection
CreateEventW
SetEvent
VirtualAlloc
VirtualFree
CreateMutexW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
ReleaseMutex
CreateFileMappingW
VirtualQuery
HeapCreate
Thread32Next
GetSystemDirectoryW
GetCurrentThreadId
SuspendThread
ResumeThread
Sleep
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
GetLocalTime
CreateEventA
FreeLibraryAndExitThread
CreateThread
DisableThreadLibraryCalls
GetTickCount
InitializeCriticalSectionEx
RaiseException
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
SetFilePointerEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetStringTypeW
GetFileType
GetStdHandle
LCMapStringW
ExitProcess
GetModuleHandleExW
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
GetModuleFileNameW
GetCurrentProcess
FreeLibrary
LoadLibraryW
GetProcAddress
GetModuleHandleW
SetLastError
FindClose
FindNextFileW
GetSystemTimeAsFileTime
ReadFile
SetFilePointer
CreateFileW
OutputDebugStringA
OutputDebugStringW
CloseHandle
Thread32First
GetLastError
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
IsDebuggerPresent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
GetStartupInfoW
InitializeSListHead
user32
FindWindowW
GetWindowLongW
WindowFromDC
GetClientRect
GetClassNameW
PostMessageW
wsprintfW
FillRect
RegisterWindowMessageW
SetForegroundWindow
GetForegroundWindow
GetDesktopWindow
GetParent
IsWindow
gdi32
CreateSolidBrush
DeleteObject
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
SetNamedSecurityInfoW
SetEntriesInAclW
FreeSid
AllocateAndInitializeSid
shlwapi
PathIsDirectoryW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
winmm
PlaySoundW
Exports
Exports
Bdcam_Initialize
Bdcam_SharedData
Bdcam_Uninitialize
Sections
.text Size: 470KB - Virtual size: 470KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18.6MB - Virtual size: 18.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hkshare Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BANDI0 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 488KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdcam_admin.lnk.lnk
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdcam_nonadmin.lnk.lnk
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdcam_safemode.lnk.lnk
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdcamih.dll.dll windows:6 windows x64 arch:x64
69c4f4f137d00b84d0d5904e859b2d0f
Code Sign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
84:05:a6:f0:d8:86:7c:3d:4a:72:0a:15:86:30:9e:3d:c6:30:b7:dd:a6:e8:62:8f:da:fc:bb:db:79:58:75:17Signer
Actual PE Digest84:05:a6:f0:d8:86:7c:3d:4a:72:0a:15:86:30:9e:3d:c6:30:b7:dd:a6:e8:62:8f:da:fc:bb:db:79:58:75:17Digest Algorithmsha256PE Digest Matchestrue48:29:17:66:b5:ce:1b:28:1d:6b:c9:03:e0:8b:1b:9e:06:6a:97:0fSigner
Actual PE Digest48:29:17:66:b5:ce:1b:28:1d:6b:c9:03:e0:8b:1b:9e:06:6a:97:0fDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
E:\w\devel\CAP6\bandicam\bin\bdcamih.pdb
Imports
kernel32
DisableThreadLibraryCalls
LoadLibraryW
GetProcAddress
FreeLibrary
HeapFree
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
RaiseException
HeapAlloc
DeleteCriticalSection
GetProcessHeap
WriteConsoleW
CreateFileW
SetFilePointerEx
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
CloseHandle
InitializeCriticalSectionAndSpinCount
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
user32
CallNextHookEx
PostMessageW
UnhookWindowsHookEx
Exports
Exports
Bdcamih_Initialize
Bdcamih_Uninitialize
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ihkshar Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdcamvk32.dll.dll windows:6 windows x86 arch:x86
74a469a209f3b0c49eefaeaff0412414
Code Sign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
d7:7a:4e:2e:82:e8:ba:04:05:60:19:c9:92:7e:09:d9:49:9c:88:4f:ce:8f:23:d3:0f:9b:9d:2c:da:ce:2a:50Signer
Actual PE Digestd7:7a:4e:2e:82:e8:ba:04:05:60:19:c9:92:7e:09:d9:49:9c:88:4f:ce:8f:23:d3:0f:9b:9d:2c:da:ce:2a:50Digest Algorithmsha256PE Digest Matchestrue83:4b:25:53:ed:0d:3f:fe:b6:78:f3:65:8e:e4:a5:bc:11:f8:6c:46Signer
Actual PE Digest83:4b:25:53:ed:0d:3f:fe:b6:78:f3:65:8e:e4:a5:bc:11:f8:6c:46Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
E:\w\devel\CAP6\bandicam\bin\bdcamvk32.pdb
Imports
kernel32
FindResourceW
WideCharToMultiByte
InitializeCriticalSection
GetModuleFileNameA
FindResourceExW
GetLastError
RaiseException
DecodePointer
DeleteCriticalSection
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
InitializeCriticalSectionEx
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlUnwind
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
CreateFileW
GetFileType
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetFileSizeEx
SetFilePointerEx
GetStdHandle
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetStdHandle
ReadFile
ReadConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
advapi32
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
Exports
Exports
GetLayerVersion
RegDll
SetLayerCallback
UnregDll
vkGetDeviceProcAddr
vkGetInstanceProcAddr
Sections
.text Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdcamvk32.json
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdcamvk64.dll.dll windows:6 windows x64 arch:x64
e590dcab07653ffb4a9bf78b482964df
Code Sign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
d7:67:da:b7:e5:a4:1d:98:de:a5:7a:3d:03:84:3d:d2:f7:13:90:c1:3e:88:55:33:d0:4e:c9:c5:ec:af:41:11Signer
Actual PE Digestd7:67:da:b7:e5:a4:1d:98:de:a5:7a:3d:03:84:3d:d2:f7:13:90:c1:3e:88:55:33:d0:4e:c9:c5:ec:af:41:11Digest Algorithmsha256PE Digest Matchestrue55:c0:7b:d3:60:4c:1b:67:50:83:e6:7a:fd:74:f5:3f:01:79:16:f4Signer
Actual PE Digest55:c0:7b:d3:60:4c:1b:67:50:83:e6:7a:fd:74:f5:3f:01:79:16:f4Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
E:\w\devel\CAP6\bandicam\bin\bdcamvk64.pdb
Imports
kernel32
FindResourceW
WideCharToMultiByte
InitializeCriticalSection
GetModuleFileNameA
FindResourceExW
GetLastError
RaiseException
DecodePointer
DeleteCriticalSection
WriteConsoleW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
InitializeCriticalSectionEx
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
CreateFileW
GetFileType
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetFileSizeEx
SetFilePointerEx
GetStdHandle
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetStdHandle
ReadFile
ReadConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlUnwind
advapi32
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
Exports
Exports
GetLayerVersion
RegDll
SetLayerCallback
UnregDll
vkGetDeviceProcAddr
vkGetInstanceProcAddr
Sections
.text Size: 214KB - Virtual size: 213KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 150KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdcamvk64.json
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdcap32.dll.dll windows:6 windows x86 arch:x86
4db779cf0e4f1c29e15fc67bf6d7d8f3
Code Sign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
b8:a8:25:a0:79:a4:85:45:11:57:d0:23:b6:e2:dd:ba:9f:17:6d:c5:77:d9:9d:5f:72:25:b7:81:82:17:ca:3bSigner
Actual PE Digestb8:a8:25:a0:79:a4:85:45:11:57:d0:23:b6:e2:dd:ba:9f:17:6d:c5:77:d9:9d:5f:72:25:b7:81:82:17:ca:3bDigest Algorithmsha256PE Digest Matchestrue70:9f:af:e7:fa:d5:d1:cb:93:a8:40:a6:a7:c7:be:4f:39:3b:89:c7Signer
Actual PE Digest70:9f:af:e7:fa:d5:d1:cb:93:a8:40:a6:a7:c7:be:4f:39:3b:89:c7Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
dsound
ord7
ord6
kernel32
WaitForSingleObject
GetCurrentProcessId
TerminateProcess
GetSystemInfo
GlobalMemoryStatusEx
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LockResource
LoadResource
FindResourceExW
FindResourceW
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
GetTickCount64
QueryPerformanceFrequency
CreateEventA
SetEvent
ResetEvent
InitializeCriticalSection
DeleteCriticalSection
CreateFileW
WriteFile
CreateMutexA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
ReleaseMutex
InitializeCriticalSectionEx
RaiseException
DecodePointer
Sleep
ReleaseSemaphore
CreateSemaphoreA
SetThreadPriority
WaitForMultipleObjects
MulDiv
DisableThreadLibraryCalls
GetSystemTime
GetDiskFreeSpaceExA
DeleteFileW
GetThreadPriority
VirtualProtect
WaitForSingleObjectEx
CreateThread
WaitForMultipleObjectsEx
GlobalLock
GlobalUnlock
FlushFileBuffers
GetFileAttributesExA
TryEnterCriticalSection
SwitchToThread
CreateEventW
LoadLibraryExW
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetModuleFileNameW
SetErrorMode
GetModuleHandleExW
SetEndOfFile
WriteConsoleW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
HeapQueryInformation
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
ExitProcess
FindFirstFileExW
FreeLibraryAndExitThread
ExitThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringEx
EncodePointer
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
InitializeSListHead
GetCurrentThreadId
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
WideCharToMultiByte
GetFileSizeEx
GetFileSize
GetFileAttributesA
DeleteFileA
GetSystemDirectoryA
GetModuleFileNameA
GlobalFree
GlobalAlloc
GetCurrentProcess
GetModuleHandleA
FreeLibrary
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetVolumeInformationA
SetLastError
FindClose
GetTimeZoneInformation
GetSystemTimeAsFileTime
ReadFile
SetFilePointer
CreateFileA
lstrlenA
CloseHandle
GetLastError
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
OutputDebugStringW
IsDebuggerPresent
LoadLibraryExA
VirtualQuery
user32
ScreenToClient
ClientToScreen
PeekMessageA
TranslateMessage
DispatchMessageA
IsWindow
GetDesktopWindow
GetForegroundWindow
GetDC
ReleaseDC
CopyRect
GetCursorInfo
GetIconInfo
DrawIconEx
IntersectRect
SetRect
SetRectEmpty
UnionRect
GetClientRect
IsRectEmpty
EqualRect
OffsetRect
GetWindowRect
GetSystemMetrics
RegisterWindowMessageA
EnumDisplayDevicesA
WindowFromDC
FillRect
DispatchMessageW
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
CloseDesktop
SetThreadDesktop
OpenInputDesktop
PtInRect
GetCursorPos
GetAsyncKeyState
MsgWaitForMultipleObjects
gdi32
CreateSolidBrush
GetDIBits
CreateCompatibleBitmap
CreateDCA
SetBkMode
TextOutW
GetTextExtentPoint32W
SetTextCharacterExtra
CreateFontW
AbortPath
GetPath
EndPath
CloseFigure
BeginPath
StretchBlt
SetStretchBltMode
DeleteDC
SelectObject
CreateCompatibleDC
CreateDIBSection
DeleteObject
SetBkColor
GetObjectA
advapi32
RegCloseKey
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
shell32
SHGetFolderPathW
ole32
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
pdh
PdhGetFormattedCounterValue
PdhCollectQueryData
PdhAddCounterA
PdhRemoveCounter
PdhOpenQueryA
vcomp140
_vcomp_set_num_threads
_vcomp_reduction_i4
_vcomp_master_end
_vcomp_master_begin
_vcomp_fork
_vcomp_for_static_simple_init
omp_get_thread_num
omp_unset_lock
omp_set_lock
_vcomp_for_static_end
omp_get_max_threads
omp_destroy_lock
omp_get_num_threads
omp_set_dynamic
omp_init_lock
winmm
waveInStop
waveInClose
waveInUnprepareHeader
waveInStart
waveInPrepareHeader
waveInReset
waveInGetDevCapsA
waveInGetNumDevs
waveInAddBuffer
mmioWrite
mmioCreateChunk
mmioClose
mmioSeek
mmioAscend
mmioOpenW
waveInGetErrorTextA
waveInMessage
mixerGetID
mixerOpen
mixerGetDevCapsA
mixerGetLineInfoA
mixerGetLineControlsA
mixerClose
mixerSetControlDetails
mixerGetControlDetailsA
timeBeginPeriod
PlaySoundW
waveInOpen
d3d9
Direct3DCreate9Ex
dxva2
DXVA2CreateDirect3DDeviceManager9
Exports
Exports
CreateBandiCapture
CreateCoreInterface
CreateDrawEffect
Sections
.text Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IPPCODE Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rodata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 423KB - Virtual size: 530KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IPPDATA Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.BANDI0 Size: 832KB - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdcap64.dll.dll windows:6 windows x64 arch:x64
ed1438965cf0bae303c64388d6f9f09c
Code Sign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
f7:d1:68:ac:e5:34:68:c1:d4:23:c4:3f:c2:a4:6d:7a:0f:c3:fc:5b:f4:ca:66:3f:b6:a2:f6:7d:44:2e:21:2fSigner
Actual PE Digestf7:d1:68:ac:e5:34:68:c1:d4:23:c4:3f:c2:a4:6d:7a:0f:c3:fc:5b:f4:ca:66:3f:b6:a2:f6:7d:44:2e:21:2fDigest Algorithmsha256PE Digest Matchestrue69:4e:60:1c:09:52:af:8e:fd:bd:15:5f:5c:e4:2e:a5:ca:e8:cf:75Signer
Actual PE Digest69:4e:60:1c:09:52:af:8e:fd:bd:15:5f:5c:e4:2e:a5:ca:e8:cf:75Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
dsound
ord7
ord6
kernel32
WaitForSingleObject
GetCurrentProcessId
TerminateProcess
GetSystemInfo
GlobalMemoryStatusEx
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LockResource
LoadResource
FindResourceExW
FindResourceW
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
GetTickCount64
QueryPerformanceFrequency
CreateEventA
SetEvent
ResetEvent
InitializeCriticalSection
DeleteCriticalSection
CreateFileW
WriteFile
CreateMutexA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
ReleaseMutex
InitializeCriticalSectionEx
RaiseException
DecodePointer
Sleep
ReleaseSemaphore
CreateSemaphoreA
SetThreadPriority
WaitForMultipleObjects
MulDiv
DisableThreadLibraryCalls
GetSystemTime
GetDiskFreeSpaceExA
DeleteFileW
GetThreadPriority
VirtualProtect
WaitForSingleObjectEx
CreateThread
WaitForMultipleObjectsEx
GlobalLock
GlobalUnlock
FlushFileBuffers
GetFileAttributesExA
TryEnterCriticalSection
SwitchToThread
CreateEventW
LoadLibraryExW
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetModuleFileNameW
SetErrorMode
GetModuleHandleExW
SetEndOfFile
WriteConsoleW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
HeapQueryInformation
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
ExitProcess
FindFirstFileExW
FreeLibraryAndExitThread
ExitThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
GetCPInfo
GetStringTypeW
LCMapStringEx
EncodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
InitializeSListHead
GetCurrentThreadId
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
WideCharToMultiByte
GetFileSizeEx
GetFileSize
GetFileAttributesA
DeleteFileA
GetSystemDirectoryA
GetModuleFileNameA
GlobalFree
GlobalAlloc
GetCurrentProcess
GetModuleHandleA
FreeLibrary
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetVolumeInformationA
SetLastError
FindClose
GetTimeZoneInformation
GetSystemTimeAsFileTime
ReadFile
SetFilePointer
CreateFileA
lstrlenA
CloseHandle
GetLastError
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
OutputDebugStringW
IsDebuggerPresent
LoadLibraryExA
VirtualQuery
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
LoadLibraryA
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
WriteConsoleW
SetStdHandle
HeapReAlloc
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
DecodePointer
HeapAlloc
RtlUnwindEx
LCMapStringW
GetStringTypeW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
EqualRect
ScreenToClient
ClientToScreen
PeekMessageA
TranslateMessage
DispatchMessageA
IsWindow
GetDesktopWindow
GetForegroundWindow
GetDC
ReleaseDC
RegisterWindowMessageA
GetIconInfo
DrawIconEx
IntersectRect
SetRect
SetRectEmpty
UnionRect
GetSystemMetrics
GetClientRect
OffsetRect
CopyRect
GetWindowRect
IsRectEmpty
GetCursorInfo
MsgWaitForMultipleObjects
WindowFromDC
FillRect
DispatchMessageW
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
CloseDesktop
SetThreadDesktop
OpenInputDesktop
PtInRect
GetCursorPos
GetAsyncKeyState
EnumDisplayDevicesA
CharUpperBuffW
gdi32
CreateSolidBrush
GetDIBits
CreateCompatibleBitmap
CreateDCA
SetBkMode
TextOutW
GetTextExtentPoint32W
SetTextCharacterExtra
CreateFontW
AbortPath
GetPath
EndPath
CloseFigure
BeginPath
StretchBlt
SetStretchBltMode
DeleteDC
SelectObject
CreateCompatibleDC
CreateDIBSection
DeleteObject
SetBkColor
GetObjectA
advapi32
RegCloseKey
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
shell32
SHGetFolderPathW
ole32
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemFree
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
pdh
PdhGetFormattedCounterValue
PdhCollectQueryData
PdhAddCounterA
PdhOpenQueryA
PdhRemoveCounter
vcomp140
omp_get_thread_num
omp_unset_lock
omp_set_lock
omp_init_lock
omp_set_dynamic
omp_get_num_threads
omp_destroy_lock
omp_get_max_threads
_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_fork
_vcomp_master_begin
_vcomp_master_end
_vcomp_reduction_i4
_vcomp_set_num_threads
winmm
PlaySoundW
timeBeginPeriod
mixerGetControlDetailsA
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetDevCapsA
mixerSetControlDetails
mixerGetID
waveInMessage
waveInGetErrorTextA
waveInReset
waveInStop
waveInClose
waveInUnprepareHeader
waveInStart
waveInPrepareHeader
waveInOpen
waveInGetDevCapsA
waveInGetNumDevs
waveInAddBuffer
mixerOpen
mmioCreateChunk
mmioClose
mmioSeek
mmioAscend
mmioOpenW
mmioWrite
d3d9
Direct3DCreate9Ex
dxva2
DXVA2CreateDirect3DDeviceManager9
Exports
Exports
CreateBandiCapture
CreateCoreInterface
CreateDrawEffect
Sections
.text Size: 10.2MB - Virtual size: 10.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IPPCODE Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rodata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 468KB - Virtual size: 578KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 259KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IPPDATA Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.BANDI0 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BANDI1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BANDI2 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/bdfix.exe.exe windows:6 windows x64 arch:x64
62c4f5eab269919a48f8f2eb717e8739
Code Sign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
a8:29:5c:1d:19:57:7f:c4:30:35:06:c6:63:3d:19:32:61:9e:d6:95:f3:5c:80:f7:84:d5:2c:4e:39:4c:3e:caSigner
Actual PE Digesta8:29:5c:1d:19:57:7f:c4:30:35:06:c6:63:3d:19:32:61:9e:d6:95:f3:5c:80:f7:84:d5:2c:4e:39:4c:3e:caDigest Algorithmsha256PE Digest Matchestrued2:17:0a:31:19:37:ef:78:d2:c7:86:5a:8a:f7:02:9b:ba:eb:a3:93Signer
Actual PE Digestd2:17:0a:31:19:37:ef:78:d2:c7:86:5a:8a:f7:02:9b:ba:eb:a3:93Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
E:\w\devel\CAP6\bandicam\bin\bdfix.pdb
Imports
kernel32
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
SetEnvironmentVariableW
GetStartupInfoW
GetFileType
SetStdHandle
QueryPerformanceFrequency
VirtualQuery
HeapQueryInformation
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
RtlPcToFileHeader
RtlUnwindEx
LoadLibraryExA
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
FreeEnvironmentStringsW
GetStringTypeW
FlsAlloc
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
WaitForSingleObjectEx
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SearchPathW
GetProfileIntW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
GetTickCount
GetFileAttributesExW
FileTimeToLocalFileTime
SetErrorMode
VirtualProtect
lstrcmpiW
DuplicateHandle
WriteConsoleW
UnlockFile
SetEndOfFile
LockFile
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetThreadLocale
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
CompareStringW
GlobalFindAtomW
EncodePointer
GlobalAddAtomW
ResumeThread
SetThreadPriority
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetModuleHandleExW
CopyFileW
FormatMessageW
DecodePointer
CreateFileA
GetCurrentThreadId
Sleep
InitializeCriticalSectionEx
RaiseException
VirtualFree
VirtualAlloc
CreateEventW
GlobalSize
GlobalUnlock
GlobalLock
FlushFileBuffers
ExitProcess
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ResetEvent
SetEvent
CreateEventA
WriteFile
FindResourceExW
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
MulDiv
lstrcmpW
GetVersionExW
GetSystemInfo
TerminateProcess
GetCurrentProcessId
WaitForSingleObject
MultiByteToWideChar
WideCharToMultiByte
GetFullPathNameW
LocalFree
GetFileSizeEx
GetFileSize
GetFileAttributesW
DeleteFileW
GetTempFileNameW
GetTempPathW
GetCurrentDirectoryW
GetSystemDirectoryW
GetModuleFileNameW
GetDiskFreeSpaceW
GlobalFree
GlobalAlloc
GetCurrentThread
GetCurrentProcess
FreeLibrary
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetVolumeInformationW
SetLastError
FindClose
FindNextFileW
lstrcpyW
FindFirstFileW
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetFileTime
FindResourceW
LoadResource
LockResource
SizeofResource
GetLastError
ReadFile
SetFilePointer
CreateFileW
OutputDebugStringA
OutputDebugStringW
lstrlenW
CloseHandle
GetStdHandle
user32
MonitorFromWindow
WinHelpW
GetScrollInfo
GetTopWindow
GetClassLongPtrW
AdjustWindowRectEx
ShowScrollBar
GetScrollRange
GetScrollPos
ScrollWindow
RedrawWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
IsChild
IsMenu
GetClassInfoW
GetMessageTime
GetMessagePos
UnhookWindowsHookEx
GetLastActivePopup
MessageBoxW
ShowOwnedPopups
CallNextHookEx
SetWindowsHookExW
ValidateRect
GetMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
SetActiveWindow
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
MapDialogRect
GetWindow
SetWindowContextHelpId
PostQuitMessage
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
DrawIcon
SetClassLongW
LoadIconW
GetFocus
IsWindowEnabled
GetWindowTextLengthW
RemovePropW
GetPropW
RegisterClassW
DestroyMenu
LoadMenuW
TrackMouseEvent
UnionRect
SetPropW
ReleaseCapture
SetWindowRgn
SetCapture
KillTimer
SetTimer
CallWindowProcW
InflateRect
GetCursorPos
RegisterClassExW
GetClassInfoExW
DefWindowProcW
GetSysColor
SetScrollInfo
SetScrollRange
SetScrollPos
SetFocus
EnableWindow
ShowWindow
InvalidateRect
GetWindowDC
EndPaint
BeginPaint
InsertMenuItemW
UnpackDDElParam
SendMessageW
PostMessageW
SetWindowLongPtrW
GetWindowLongPtrW
CreateWindowExW
GetKeyState
LoadCursorW
DestroyWindow
PtInRect
SetCursor
UnregisterClassW
GetClientRect
IsClipboardFormatAvailable
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
IntersectRect
GetSubMenu
GetMenuItemInfoW
ModifyMenuW
GetMenuItemID
GetMenuStringW
GetMenuItemCount
IsDialogMessageW
DrawTextExW
GrayStringW
TabbedTextOutW
FillRect
GetSysColorBrush
CopyImage
DeleteMenu
RealChildWindowFromPoint
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
SendDlgItemMessageA
CharUpperW
GetAsyncKeyState
EnumChildWindows
SetWindowLongW
RegisterClipboardFormatW
CreatePopupMenu
GetMenuDefaultItem
LoadImageW
PostThreadMessageW
WindowFromPoint
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
CheckDlgButton
GetSystemMetrics
SystemParametersInfoW
GetWindowRect
MonitorFromRect
GetMonitorInfoW
CopyRect
MonitorFromPoint
OffsetRect
EqualRect
MoveWindow
GetWindowLongW
SetWindowPos
ScreenToClient
ClientToScreen
PeekMessageW
TranslateMessage
DispatchMessageW
IsWindow
GetParent
GetDesktopWindow
FindWindowExW
GetWindowThreadProcessId
IsWindowVisible
IsIconic
GetWindowTextW
GetWindowPlacement
GetForegroundWindow
SetForegroundWindow
BringWindowToTop
GetDC
ReleaseDC
RegisterWindowMessageW
DestroyIcon
TranslateAcceleratorW
DrawTextW
IsRectEmpty
GetClassNameW
GetClassLongW
SetRectEmpty
SetRect
GetDlgCtrlID
SetWindowTextW
MapWindowPoints
ReuseDDElParam
GetComboBoxInfo
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
CharUpperBuffW
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
LoadAcceleratorsW
UpdateLayeredWindow
FrameRect
CopyIcon
SetCursorPos
GetSystemMenu
IsZoomed
DrawFrameControl
DrawEdge
SetParent
SetClassLongPtrW
DrawStateW
EnumDisplayMonitors
SetLayeredWindowAttributes
GetKeyNameTextW
MapVirtualKeyW
NotifyWinEvent
InvertRect
gdi32
CopyMetaFileW
CreateDCW
CreateBitmap
CreateHatchBrush
CreatePen
CreatePatternBrush
Escape
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
OffsetWindowOrgEx
CreateSolidBrush
ScaleWindowExtEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
PatBlt
SetRectRgn
DPtoLP
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
GetTextCharsetInfo
SetPixel
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
ExtCreateRegion
MoveToEx
LineTo
CombineRgn
OffsetRgn
CreateRectRgn
ExcludeClipRect
SetWindowOrgEx
CreateCompatibleBitmap
CreateFontIndirectW
StretchBlt
BitBlt
CreateDIBSection
GetDeviceCaps
SelectObject
SetTextColor
SetBkMode
CreateCompatibleDC
DeleteDC
CreateFontW
ExtTextOutW
SetBkColor
EnumFontFamiliesW
GetObjectW
GetStockObject
GetTextMetricsW
ScaleViewportExtEx
DeleteObject
GetTextExtentPoint32W
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetSaveFileNameW
GetOpenFileNameW
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
advapi32
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
ord190
SHOpenFolderAndSelectItems
ord155
ShellExecuteW
DragQueryFileW
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetFileInfoW
DragFinish
comctl32
InitCommonControlsEx
shlwapi
PathIsDirectoryW
PathCanonicalizeW
StrStrW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
StrFormatKBSizeW
PathIsUNCW
PathStripToRootW
uxtheme
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetThemePartSize
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
ole32
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
DoDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoDisconnectObject
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoCreateInstance
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
oleaut32
OleCreateFontIndirect
VarBstrFromDate
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocString
SysStringLen
SysFreeString
oledlg
OleUIBusyW
gdiplus
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipCreateFromHDC
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipSetInterpolationMode
winmm
PlaySoundW
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 696KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/camera.wav
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/effects.dat
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/effects/effects10.dat
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/effects/effects15.dat
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/effects/effects20.dat
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/effects/effects30.dat
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/effects/highlight10.dat
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/effects/highlight15.dat
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/effects/highlight20.dat
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/effects/highlight30.dat
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/language.dat
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/language_bdfix.dat
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/lclick.wav
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/rclick.wav
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/sample.png.png
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/skin.dat.zip
-
admin_icon.png.png
-
audio_b.png.png
-
bandifix/bandifix.xml.xml
-
bandifix/bandifix_logo.png.png
-
bandifix/btn_click.png.png
-
bandifix/btn_click2.png.png
-
bandifix/btn_close.png.png
-
bandifix/btn_help.png.png
-
bandifix/line.png.png
-
bandifix/prog_process_1.png.png
-
bandifix/prog_process_2.png.png
-
bandifix/prog_process_over.png.png
-
bdcam_info.png.png
-
beta_icon.png.png
-
body_bg.png.png
-
btn_audio_only.png.png
-
btn_audio_only_2.png.png
-
btn_audio_s.png.png
-
btn_back_s.png.png
-
btn_bandicut.png.png
-
btn_capture.png.png
-
btn_capture_2.png.png
-
btn_check.png.png
-
btn_click.png.png
-
btn_click2.png.png
-
btn_clock.png.png
-
btn_close.png.png
-
btn_device.png.png
-
btn_device_2.png.png
-
btn_device_s.png.png
-
btn_directx.png.png
-
btn_directx_2.png.png
-
btn_folder.png.png
-
btn_fps_check.png.png
-
btn_fps_uncheck.png.png
-
btn_full_s.png.png
-
btn_game_s.png.png
-
btn_help.png.png
-
btn_home_select.png.png
-
btn_image_tab.png.png
-
btn_key.png.png
-
btn_lock_s.png.png
-
btn_microphone_mute_off.png.png
-
btn_microphone_mute_on.png.png
-
btn_microphone_settings_off.png.png
-
btn_microphone_settings_on.png.png
-
btn_minimize.png.png
-
btn_mouse_s.png.png
-
btn_mouse_settings_all.png.png
-
btn_mouse_settings_cursor.png.png
-
btn_mouse_settings_effect.png.png
-
btn_mouse_settings_off.png.png
-
btn_output_audio_tab.png.png
-
btn_output_audio_tab2.png.png
-
btn_output_image_tab.png.png
-
btn_output_image_tab2.png.png
-
btn_output_video_tab.png.png
-
btn_output_video_tab2.png.png
-
btn_page_audio_setting.png.png
-
btn_page_audio_setting2.png.png
-
btn_page_frame_setting.png.png
-
btn_page_frame_setting2.png.png
-
btn_page_general_setting.png.png
-
btn_page_general_setting2.png.png
-
btn_page_home.png.png
-
btn_page_home2.png.png
-
btn_page_image_setting.png.png
-
btn_page_image_setting2.png.png
-
btn_page_info.png.png
-
btn_page_info2.png.png
-
btn_page_video_setting.png.png
-
btn_page_video_setting2.png.png
-
btn_pause.png.png
-
btn_pause_2.png.png
-
btn_radio_check.png.png
-
btn_radio_uncheck.png.png
-
btn_record.png.png
-
btn_record_2.png.png
-
btn_record_2_small.png.png
-
btn_record_small.png.png
-
btn_rect_s.png.png
-
btn_refresh.png.png
-
btn_schedule.png.png
-
btn_screen_exp.png.png
-
btn_screen_exp_2.png.png
-
btn_screen_finder.png.png
-
btn_screen_full.png.png
-
btn_screen_full_2.png.png
-
btn_screen_lockwindow.png.png
-
btn_screen_lockwindow_2.png.png
-
btn_screen_mouse.png.png
-
btn_screen_mouse_2.png.png
-
btn_screen_rectangle.png.png
-
btn_screen_rectangle_2.png.png
-
btn_setting.png.png
-
btn_setting_2.png.png
-
btn_sort.png.png
-
btn_speaker_mute_off.png.png
-
btn_speaker_mute_on.png.png
-
btn_speaker_settings_off.png.png
-
btn_speaker_settings_on.png.png
-
btn_start_tab.png.png
-
btn_text_settings_off.png.png
-
btn_text_settings_on.png.png
-
btn_tips.png.png
-
btn_tray.png.png
-
btn_uncheck.png.png
-
btn_unregclose.png.png
-
btn_unregtips.png.png
-
btn_video_tab.png.png
-
btn_webcam_screen_off.png.png
-
btn_webcam_screen_on.png.png
-
business_icon.png.png
-
device.png.png
-
device/btn_close.png.png
-
device/btn_fullscreen.png.png
-
device/btn_img_start.png.png
-
device/btn_img_stop.png.png
-
device/btn_menu.png.png
-
device/btn_rec_pause.png.png
-
device/btn_rec_paused.png.png
-
device/btn_rec_start.png.png
-
device/btn_rec_stop.png.png
-
device/btn_restore.png.png
-
device/btn_settings.png.png
-
device/btn_volume_0.png.png
-
device/btn_volume_1.png.png
-
device/btn_volume_2.png.png
-
device/btn_volume_3.png.png
-
device/client.png.png
-
device/client2.png.png
-
device/client_big.png.png
-
device/device.xml
-
device/device_bg.png.png
-
device/device_btn.png.png
-
device/device_connect2.png.png
-
device/device_full.xml
-
device/device_intro_2.png.png
-
device/prog_volume_bg.png.png
-
device/prog_volume_micriophone.png.png
-
device/prog_volume_micriophone_bg.png.png
-
device/prog_volume_speaker.png.png
-
device/prog_volume_speaker_bg.png.png
-
device/side_l.png.png
-
device/side_l_bg.png.png
-
device/side_r.png.png
-
device/side_r_bg.png.png
-
device/video.xml
-
device/volume_knob.png.png
-
device/volume_slider_off.png.png
-
device/volume_slider_on.png.png
-
device_b.png.png
-
dialog/bandicut.jpg.jpg
-
dialog/btn_click.png.png
-
dialog/btn_click_w.png.png
-
dialog/btn_close.png.png
-
dialog/btn_close_w.png.png
-
dialog/logo.png.png
-
dialog/logo_w.png.png
-
dialog/prog_download_1.png.png
-
dialog/prog_download_2.png.png
-
dialog/reg_limited.xml
-
dialog/renew_license.xml
-
dialog/update2_progress.xml
-
dialog/update_progress.xml
-
expired_icon.png.png
-
folder.png.png
-
fps_bg.png.png
-
full.png.png
-
full_b.png.png
-
game.png.png
-
game_b.png.png
-
help_b.png.png
-
hotkey_icon.png.png
-
line.png.png
-
line2.png.png
-
lock.png.png
-
lock_b.png.png
-
logo.png.png
-
logo_cn.png.png
-
mode_audio.png.png
-
mode_device.png.png
-
mode_directx.png.png
-
mode_fullscreen.png.png
-
mode_lockwindow.png.png
-
mode_mouse.png.png
-
mode_rectangle.png.png
-
mouse.png.png
-
mouse_b.png.png
-
new_icon_b.png.png
-
num_0.png.png
-
num_1.png.png
-
num_2.png.png
-
num_3.png.png
-
num_4.png.png
-
num_5.png.png
-
num_6.png.png
-
num_7.png.png
-
num_8.png.png
-
num_9.png.png
-
num_colon.png.png
-
num_dot.png.png
-
page_about.xml
-
page_audio.xml
-
page_fps.xml
-
page_general.xml
-
page_image.xml
-
page_outputs.xml
-
page_video.xml
-
popup/audio.png.png
-
popup/btn_check_off_popup.png.png
-
popup/btn_check_off_popup_sel.png.png
-
popup/btn_check_on.png.png
-
popup/btn_check_on_popup.png.png
-
popup/btn_check_on_popup_sel.png.png
-
popup/btn_menu.png.png
-
popup/btn_mode_check_off.png.png
-
popup/btn_mode_check_off_sel.png.png
-
popup/btn_mode_check_on.png.png
-
popup/btn_mode_check_on_sel.png.png
-
popup/btn_radio.png.png
-
popup/btn_radio_off.png.png
-
popup/btn_radio_on.png.png
-
popup/btn_select_area_menu.png.png
-
popup/full.png.png
-
popup/lock.png.png
-
popup/mic_slider_fill.png.png
-
popup/mouse.png.png
-
popup/new_icon_s.png.png
-
popup/rect.png.png
-
popup/screen_mode.xml
-
popup/screen_mode_fullscreen.xml
-
popup/screen_mode_mouse.xml
-
popup/screen_mode_rectangle.xml
-
popup/screen_mode_window_screen.xml
-
popup/select.png.png
-
popup/select_microphone.xml
-
popup/select_speaker.xml
-
popup/slider_empty.png.png
-
popup/slider_fill.png.png
-
popup/slider_knob.png.png
-
popup/slider_microphone_icon.png.png
-
popup/slider_speaker_icon.png.png
-
prog_volume.png.png
-
prog_volume_bg.png.png
-
prog_volume_micriophone.png.png
-
prog_volume_micriophone_a.png.png
-
prog_volume_micriophone_bg.png.png
-
prog_volume_micriophone_bg_a.png.png
-
prog_volume_speaker.png.png
-
prog_volume_speaker_a.png.png
-
prog_volume_speaker_bg.png.png
-
prog_volume_speaker_bg_a.png.png
-
rec_bg.png.png
-
rect.png.png
-
rect_b.png.png
-
safemode.png.png
-
skin.xml
-
slider_bkgnd_tile.png.png
-
slider_var_knob.png.png
-
target/btn_close.png.png
-
target/btn_findwindow.png.png
-
target/btn_fullscreen.png.png
-
target/btn_img_start.png.png
-
target/btn_img_stop.png.png
-
target/btn_menu.png.png
-
target/btn_pen_start.png.png
-
target/btn_pen_stop.png.png
-
target/btn_pin_off.png.png
-
target/btn_pin_on.png.png
-
target/btn_pip_fullscreen.png.png
-
target/btn_pip_fullscreen2.png.png
-
target/btn_pip_move.png.png
-
target/btn_pip_move2.png.png
-
target/btn_rec_pause.png.png
-
target/btn_rec_paused.png.png
-
target/btn_rec_start.png.png
-
target/btn_rec_stop.png.png
-
target/btn_restore.png.png
-
target/btn_sel_color.png.png
-
target/btn_sel_line.png.png
-
target/btn_targetsize.png.png
-
target/btn_toggle_bottom.png.png
-
target/btn_toggle_top.png.png
-
target/btn_tools_arrow.png.png
-
target/btn_tools_box.png.png
-
target/btn_tools_eraser.png.png
-
target/btn_tools_eraser_2.png.png
-
target/btn_tools_exit.png.png
-
target/btn_tools_line.png.png
-
target/btn_tools_none.png.png
-
target/btn_tools_number.png.png
-
target/btn_tools_pen.png.png
-
target/btn_tools_pen_hl.png.png
-
target/btn_tools_redo.png.png
-
target/btn_tools_text.png.png
-
target/btn_tools_undo.png.png
-
target/client.png.png
-
target/client2.png.png
-
target/client_big.png.png
-
target/drawing_tools.xml
-
target/fullscreen.xml
-
target/pip_tools.xml
-
target/prog_volume_bg.png.png
-
target/prog_volume_micriophone.png.png
-
target/prog_volume_micriophone_bg.png.png
-
target/prog_volume_speaker.png.png
-
target/prog_volume_speaker_bg.png.png
-
target/rect.xml
-
target/side_l.png.png
-
target/side_l_bg.png.png
-
target/side_r.png.png
-
target/side_r_bg.png.png
-
target/space.png.png
-
target/tool_bg.png.png
-
target/tool_bg2.png.png
-
target_glass.png.png
-
target_rect.png.png
-
target_webcam.png.png
-
unregistered_icon.png.png
-
vip_icon.png.png
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/start.wav
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/data/stop.wav
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/encap64.dll.dll windows:6 windows x64 arch:x64
4ddfeda0e3f67f8d6b297b90f1191d0a
Code Sign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29-04-2021 00:00Not After28-04-2036 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:ee:6b:b1:7d:06:13:6b:a5:92:d6:aa:c7:fc:a6:20Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before19-12-2023 00:00Not After07-03-2027 23:59SubjectCN=Bandicam Company Corp.,O=Bandicam Company Corp.,L=Yeongdeungpo-gu,ST=Seoul,C=KRExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
51:ba:a5:f7:9c:43:d8:7c:39:5d:58:99:37:d3:a6:c3:30:04:1b:02:32:b9:e8:97:54:62:e0:42:d5:cb:81:bfSigner
Actual PE Digest51:ba:a5:f7:9c:43:d8:7c:39:5d:58:99:37:d3:a6:c3:30:04:1b:02:32:b9:e8:97:54:62:e0:42:d5:cb:81:bfDigest Algorithmsha256PE Digest Matchestrueec:13:8d:30:5c:54:83:21:6e:fa:1d:72:90:bb:4d:4a:7a:f1:fd:1bSigner
Actual PE Digestec:13:8d:30:5c:54:83:21:6e:fa:1d:72:90:bb:4d:4a:7a:f1:fd:1bDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
E:\w\devel\CAP6\bandicam\bin\encap64.pdb
Imports
kernel32
GetModuleHandleExW
InitializeCriticalSectionEx
GetCurrentThreadId
FormatMessageW
GetLastError
RaiseException
HeapAlloc
GetProcAddress
DeleteCriticalSection
GetProcessHeap
GetModuleHandleW
DebugBreak
HeapFree
SetEvent
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringW
IsDebuggerPresent
WaitForSingleObject
CreateEventW
WriteConsoleW
CreateFileW
CloseHandle
GetModuleFileNameA
RtlPcToFileHeader
QueryPerformanceCounter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleFileNameW
GetStdHandle
GetFileType
LCMapStringW
SetFilePointerEx
HeapSize
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
user32
EnumDisplayMonitors
GetMonitorInfoW
d3d11
CreateDirect3D11DeviceFromDXGIDevice
D3D11CreateDevice
coremessaging
CreateDispatcherQueueController
ole32
CoCreateFreeThreadedMarshaler
CoUninitialize
CoInitializeEx
oleaut32
GetErrorInfo
SetErrorInfo
SysAllocString
SysStringLen
SysFreeString
Exports
Exports
Encap_CreateCapture
Encap_CreateDispatch
Encap_Initialize
Encap_Uninitialize
Sections
.text Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Arabic.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Armenian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Azerbaijani.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Belarusian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Bosnian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Bulgarian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Burmese.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Croatian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Czech.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Danish.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Dutch.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/English.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Farsi.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Finnish.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/French.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Georgian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/German.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Greek.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Hebrew.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Hungarian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Indonesian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Italian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Japanese.ini.ps1
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Kazakh.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Kurdish.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Latvian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Lithuanian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Luxembourgish.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Malay.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Norwegian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Polish.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Portuguese(BR).ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Portuguese.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Romanian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Russian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Serbian(Cyrillic).ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Serbian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Simplified_Chinese.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Sinhala.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Slovak.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Slovenian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Spanish.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Swedish.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Thai.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Traditional_Chinese.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Turkish.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Ukrainian.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Urdu.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Uzbek.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/Vietnamese.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/lang/khmer.ini
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/msimg32.dll.dll windows:4 windows x64 arch:x64
27e0cdc80f53858227a5685b198b3d46
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
msvcrt
memset
wcscmp
memmove
memcpy
strlen
strcpy
wcslen
malloc
free
kernel32
HeapCreate
HeapDestroy
DisableThreadLibraryCalls
WriteProcessMemory
GetSystemDirectoryW
GetModuleHandleW
UnregisterWait
CloseHandle
EnterCriticalSection
LeaveCriticalSection
HeapFree
TlsFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
TlsGetValue
HeapAlloc
GetCurrentProcess
GetCurrentThread
DuplicateHandle
RegisterWaitForSingleObject
TlsSetValue
GetModuleFileNameW
FreeLibrary
LoadLibraryW
WideCharToMultiByte
GetProcAddress
HeapReAlloc
MultiByteToWideChar
Exports
Exports
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Sections
.code Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 681B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/translators.txt
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Bandicam/uninstall.exe.exe windows:4 windows x86 arch:x86
e2a592076b17ef8bfb48b7e03965a3fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryW
GetFileAttributesW
GetFullPathNameW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
MoveFileW
SetFileAttributesW
GetCurrentProcess
ExitProcess
SetEnvironmentVariableW
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
GetVersion
SetErrorMode
lstrlenW
WaitForSingleObject
CopyFileW
CompareFileTime
GlobalLock
CreateThread
GetLastError
CreateDirectoryW
CreateProcessW
RemoveDirectoryW
lstrcmpiA
CreateFileW
GetTempFileNameW
WriteFile
lstrcpyA
lstrcpyW
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GlobalFree
GlobalAlloc
GetShortPathNameW
SearchPathW
lstrcmpiW
SetFileTime
CloseHandle
ExpandEnvironmentStringsW
lstrcmpW
GlobalUnlock
lstrcpynW
GetDiskFreeSpaceW
GetExitCodeProcess
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
MulDiv
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
user32
GetSystemMenu
SetClassLongW
IsWindowEnabled
EnableMenuItem
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
wsprintfW
ScreenToClient
GetWindowRect
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
LoadImageW
SetTimer
SetWindowTextW
PostQuitMessage
ShowWindow
GetDlgItem
IsWindow
SetWindowLongW
FindWindowExW
TrackPopupMenu
AppendMenuW
CreatePopupMenu
DrawTextW
EndPaint
CreateDialogParamW
SendMessageTimeoutW
SetForegroundWindow
gdi32
SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
advapi32
RegDeleteKeyW
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumKeyW
comctl32
ImageList_AddMasked
ord17
ImageList_Destroy
ImageList_Create
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/Dialer.dll.dll windows:4 windows x86 arch:x86
77d42551d0d092e7c42961ca47bb7a69
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
GetSystemDirectoryW
GetProcAddress
lstrcpynW
LoadLibraryW
user32
wsprintfW
Exports
Exports
AttemptConnect
AutodialHangup
AutodialOnline
AutodialUnattended
GetConnectedState
Sections
.text Size: 1024B - Virtual size: 628B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 439B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 210B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/LangDLL.dll.dll windows:4 windows x86 arch:x86
3e8d18bb71c7ebbda2ddc2a4bb03547b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenW
GlobalFree
lstrcpynW
lstrcmpW
GlobalAlloc
MulDiv
GetModuleHandleW
lstrcpyW
user32
DialogBoxParamW
SetDlgItemTextW
SendDlgItemMessageW
EndDialog
SetWindowTextW
LoadIconW
ShowWindow
SendMessageW
GetDC
gdi32
GetDeviceCaps
CreateFontIndirectW
DeleteObject
Exports
Exports
LangDialog
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 681B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/modern-header.bmp
-
$PLUGINSDIR/nsProcess.dll.dll windows:5 windows x86 arch:x86
439074d1c01f7b16781bdf060930814a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
OpenProcess
MultiByteToWideChar
lstrlenA
lstrlenW
LoadLibraryA
lstrcmpiW
lstrcpynW
FreeLibrary
LocalFree
LocalAlloc
GetProcAddress
LoadLibraryW
GetVersionExW
GlobalFree
GlobalAlloc
user32
GetWindowThreadProcessId
EnumWindows
wsprintfW
PostMessageW
Exports
Exports
_CloseProcess
_FindProcess
_KillProcess
_Unload
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 927B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 254B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Bandicam v4.5.6.1647 Portable by CheshireCat Ml_Rus - Copy/Особенности Portable by CheshireCat.txt