f8c9bf1586e38864c5c4919d8b536d0e

Sharing

Copy URL Twitter E-mail

General

Target

f8c9bf1586e38864c5c4919d8b536d0e
Size

18.0MB
MD5

f8c9bf1586e38864c5c4919d8b536d0e
SHA1

7d3e2069745bce820c0baac29e6c28d41149a975
SHA256

ea4c46d2c3bf49c96f94f2063f5d577ef9555bbd24b1fc96bd65c5779d361727
SHA512

5d696710c04365b3009b9aec85ac60e06e5d66755b9a7e95adbe5bc67d7c336521e96d7e8912700ac29b9466e800304d175d20684a6f74025ba047968a99146f
SSDEEP

393216:iuShkcgQbySQCnGWYYtPEG4HBAw47k/HRrAC7OzxAvd3HLTAPl1JgSx:iZhdgifdGWYNv6w4Y/HRr82vlrTAt1r

Score

3^/10

Malware Config

Signatures

Unsigned PE 9 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Quick NFT Claiming Tool/Quick NFT Claiming Tool.exe
unpack001/Quick NFT Claiming Tool/decryptor.exe
unpack001/Quick NFT Claiming Tool/encoder/lame.ax
unpack001/Quick NFT Claiming Tool/encoder/lc.dll
unpack001/Quick NFT Claiming Tool/encoder/matroskamuxer.dll
unpack001/Quick NFT Claiming Tool/encoder/mmx264.ax
unpack001/Quick NFT Claiming Tool/encoder/mp4mux.dll
unpack001/Quick NFT Claiming Tool/encoder/pthreadvc2.dll
unpack001/Quick NFT Claiming Tool/encoder/wavdest.dll

Files

f8c9bf1586e38864c5c4919d8b536d0e
.zip
Quick NFT Claiming Tool/FreeImage.dll
.dll windows:6 windows x86 arch:x86

fa31fe17df958f5866218f637a88f547

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:ea:0d:de:d5:5e:c1:e1:a2:9f:c5:fb:5d:ab:4f:b2
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19/05/2020, 00:00

Not After

18/05/2023, 12:00

Subject

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

05:aa:43:30:0d:17:67:ac:12:49:43:54:21:65:bb:9e
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19/05/2020, 00:00

Not After

18/05/2023, 12:00

Subject

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6d:b5:40:df:19:f8:46:88:b6:17:7d:2a:cd:da:0b:38:7b:01:f7:32:1d:d1:6a:18:52:01:e4:ce:ea:77:35:28
Signer

Actual PE Digest

6d:b5:40:df:19:f8:46:88:b6:17:7d:2a:cd:da:0b:38:7b:01:f7:32:1d:d1:6a:18:52:01:e4:ce:ea:77:35:28

Digest Algorithm

sha256

PE Digest Matches

true

ab:7e:1e:aa:fe:30:c0:d9:77:f5:96:43:43:0d:7f:32:c8:15:01:99
Signer

Actual PE Digest

ab:7e:1e:aa:fe:30:c0:d9:77:f5:96:43:43:0d:7f:32:c8:15:01:99

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\zhanlue\rcimage\bin\Win32\Release\pdb\FreeImage.pdb

Imports

kernel32

SizeofResource
FreeResource
LoadResource
FindResourceW
GetTickCount
GetModuleFileNameW
LoadLibraryA
GetCurrentDirectoryW
SetCurrentDirectoryW
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetTempPathW
DeleteFileA
GetTempFileNameW
CreateThread
ReleaseMutex
WaitForSingleObject
CloseHandle
CreateMutexW
ReleaseSemaphore
SignalObjectAndWait
CreateEventW
CreateSemaphoreW
ExitProcess
LoadLibraryW
CreateTimerQueue
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
InterlockedExchange
TlsSetValue
SetLastError
GetCurrentProcess
InterlockedCompareExchange
GetProcessAffinityMask
SetThreadPriority
GetCurrentThreadId
DuplicateHandle
Sleep
GetLastError
SetEvent
GetCurrentThread
TlsAlloc
GetThreadPriority
InterlockedExchangeAdd
GetThreadContext
GetCurrentProcessId
TlsGetValue
TlsFree
SetThreadContext
CreateFileW
DebugBreak
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
WideCharToMultiByte
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
SwitchToThread
EncodePointer
DecodePointer
MultiByteToWideChar
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
RaiseException
LoadLibraryExW
ReadFile
FindClose
FindFirstFileExW
FindNextFileW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleHandleExW
WriteFile
GetConsoleCP
GetConsoleMode
ExitThread
FreeLibraryAndExitThread
GetTimeZoneInformation
GetFileType
GetModuleFileNameA
HeapFree
ReadConsoleW
HeapAlloc
HeapReAlloc
HeapSize
GetACP
GetStdHandle
SetFilePointerEx
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
DeleteFileW
MoveFileExW
FlushFileBuffers
SetStdHandle
WriteConsoleW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
SetEndOfFile
WaitForSingleObjectEx
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree

ws2_32

ntohs
htons
htonl
ntohl

Exports

Exports

?APNG_Clone@@YGPAUAPNGDATA@@PBU1@@Z
?APNG_Destroy@@YGXPAUAPNGDATA@@@Z
?APNG_IdentifyApng@@YG_NPB_WPAH@Z
?LoadAPNG_from_file@@YGPAUAPNGDATA@@PB_W_NPAH@Z
?LoadAPNG_from_memory@@YGPAUAPNGDATA@@PBDI_NPAH@Z
FreeImage_OutputMessageProc
_FreeImage_AcquireMemory@12
_FreeImage_AdjustBrightness@12
_FreeImage_AdjustColors@32
_FreeImage_AdjustContrast@12
_FreeImage_AdjustCurve@12
_FreeImage_AdjustGamma@12
_FreeImage_Allocate@24
_FreeImage_AllocateEx@36
_FreeImage_AllocateExT@40
_FreeImage_AllocateHeader@28
_FreeImage_AllocateHeaderForBits@36
_FreeImage_AllocateHeaderT@32
_FreeImage_AllocateT@28
_FreeImage_AppendPage@8
_FreeImage_ApplyColorMapping@24
_FreeImage_ApplyPaletteIndexMapping@20
_FreeImage_Clone@4
_FreeImage_CloneMetadata@8
_FreeImage_CloneTag@4
_FreeImage_CloseMemory@4
_FreeImage_CloseMultiBitmap@8
_FreeImage_ColorQuantize@8
_FreeImage_ColorQuantizeEx@20
_FreeImage_Composite@16
_FreeImage_ConvertFromRawBits@36
_FreeImage_ConvertFromRawBitsEx@44
_FreeImage_ConvertLine16To24_555@12
_FreeImage_ConvertLine16To24_565@12
_FreeImage_ConvertLine16To32_555@12
_FreeImage_ConvertLine16To32_565@12
_FreeImage_ConvertLine16To4_555@12
_FreeImage_ConvertLine16To4_565@12
_FreeImage_ConvertLine16To8_555@12
_FreeImage_ConvertLine16To8_565@12
_FreeImage_ConvertLine16_555_To16_565@12
_FreeImage_ConvertLine16_565_To16_555@12
_FreeImage_ConvertLine1To16_555@16
_FreeImage_ConvertLine1To16_565@16
_FreeImage_ConvertLine1To24@16
_FreeImage_ConvertLine1To32@16
_FreeImage_ConvertLine1To32MapTransparency@24
_FreeImage_ConvertLine1To4@12
_FreeImage_ConvertLine1To8@12
_FreeImage_ConvertLine24To16_555@12
_FreeImage_ConvertLine24To16_565@12
_FreeImage_ConvertLine24To32@12
_FreeImage_ConvertLine24To4@12
_FreeImage_ConvertLine24To8@12
_FreeImage_ConvertLine32To16_555@12
_FreeImage_ConvertLine32To16_565@12
_FreeImage_ConvertLine32To24@12
_FreeImage_ConvertLine32To4@12
_FreeImage_ConvertLine32To8@12
_FreeImage_ConvertLine4To16_555@16
_FreeImage_ConvertLine4To16_565@16
_FreeImage_ConvertLine4To24@16
_FreeImage_ConvertLine4To32@16
_FreeImage_ConvertLine4To32MapTransparency@24
_FreeImage_ConvertLine4To8@12
_FreeImage_ConvertLine8To16_555@16
_FreeImage_ConvertLine8To16_565@16
_FreeImage_ConvertLine8To24@16
_FreeImage_ConvertLine8To32@16
_FreeImage_ConvertLine8To32MapTransparency@24
_FreeImage_ConvertLine8To4@16
_FreeImage_ConvertTo16Bits555@4
_FreeImage_ConvertTo16Bits565@4
_FreeImage_ConvertTo24Bits@4
_FreeImage_ConvertTo32Bits@4
_FreeImage_ConvertTo4Bits@4
_FreeImage_ConvertTo8Bits@4
_FreeImage_ConvertToFloat@4
_FreeImage_ConvertToGreyscale@4
_FreeImage_ConvertToRGB16@4
_FreeImage_ConvertToRGBA16@4
_FreeImage_ConvertToRGBAF@4
_FreeImage_ConvertToRGBF@4
_FreeImage_ConvertToRawBits@32
_FreeImage_ConvertToStandardType@8
_FreeImage_ConvertToType@12
_FreeImage_ConvertToUINT16@4
_FreeImage_Copy@20
_FreeImage_CopyICCProfile@8
_FreeImage_CreateICCProfile@12
_FreeImage_CreateICCProfileHeaderData@12
_FreeImage_CreateTag@0
_FreeImage_CreateView@20
_FreeImage_DeInitialise@0
_FreeImage_DeletePage@8
_FreeImage_DeleteTag@4
_FreeImage_DestroyICCProfile@4
_FreeImage_DestroyICCProfileHeaderData@4
_FreeImage_Dither@8
_FreeImage_EnlargeCanvas@28
_FreeImage_FIFSupportsExportBPP@8
_FreeImage_FIFSupportsExportType@8
_FreeImage_FIFSupportsICCProfiles@4
_FreeImage_FIFSupportsNoPixels@4
_FreeImage_FIFSupportsReading@4
_FreeImage_FIFSupportsWriting@4
_FreeImage_FakeSaveToMemory@16
_FreeImage_FillBackground@12
_FreeImage_FindCloseMetadata@4
_FreeImage_FindFirstMetadata@12
_FreeImage_FindNextMetadata@8
_FreeImage_FlipHorizontal@4
_FreeImage_FlipVertical@4
_FreeImage_GetAdjustColorsLookupTable@32
_FreeImage_GetBPP@4
_FreeImage_GetBackgroundColor@8
_FreeImage_GetBits@4
_FreeImage_GetBlueMask@4
_FreeImage_GetChannel@8
_FreeImage_GetColorType@4
_FreeImage_GetColorsUsed@4
_FreeImage_GetComplexChannel@8
_FreeImage_GetCopyrightMessage@0
_FreeImage_GetDIBSize@4
_FreeImage_GetDotsPerMeterX@4
_FreeImage_GetDotsPerMeterY@4
_FreeImage_GetFIFCount@0
_FreeImage_GetFIFDescription@4
_FreeImage_GetFIFExtensionList@4
_FreeImage_GetFIFFromFilename@4
_FreeImage_GetFIFFromFilenameU@4
_FreeImage_GetFIFFromFormat@4
_FreeImage_GetFIFFromMime@4
_FreeImage_GetFIFMimeType@4
_FreeImage_GetFIFRegExpr@4
_FreeImage_GetFileType@8
_FreeImage_GetFileTypeFromHandle@12
_FreeImage_GetFileTypeFromMemory@8
_FreeImage_GetFileTypeU@8
_FreeImage_GetFormatFromFIF@4
_FreeImage_GetGreenMask@4
_FreeImage_GetHeight@4
_FreeImage_GetHistogram@12
_FreeImage_GetICCProfile@4
_FreeImage_GetImageType@4
_FreeImage_GetInfo@4
_FreeImage_GetInfoHeader@4
_FreeImage_GetLine@4
_FreeImage_GetLockedPageNumbers@12
_FreeImage_GetMemorySize@4
_FreeImage_GetMetadata@16
_FreeImage_GetMetadataCount@8
_FreeImage_GetPageCount@4
_FreeImage_GetPalette@4
_FreeImage_GetPitch@4
_FreeImage_GetPixelColor@16
_FreeImage_GetPixelIndex@16
_FreeImage_GetRedMask@4
_FreeImage_GetScanLine@8
_FreeImage_GetTagCount@4
_FreeImage_GetTagDescription@4
_FreeImage_GetTagID@4
_FreeImage_GetTagKey@4
_FreeImage_GetTagLength@4
_FreeImage_GetTagType@4
_FreeImage_GetTagValue@4
_FreeImage_GetThumbnail@4
_FreeImage_GetTransparencyCount@4
_FreeImage_GetTransparencyTable@4
_FreeImage_GetTransparentIndex@4
_FreeImage_GetVersion@0
_FreeImage_GetWidth@4
_FreeImage_HasBackgroundColor@4
_FreeImage_HasPixels@4
_FreeImage_HasRGBMasks@4
_FreeImage_Initialise@4
_FreeImage_InsertPage@12
_FreeImage_Invert@4
_FreeImage_IsLittleEndian@0
_FreeImage_IsPluginEnabled@4
_FreeImage_IsTransparent@4
_FreeImage_JPEGCrop@24
_FreeImage_JPEGCropU@24
_FreeImage_JPEGTransform@16
_FreeImage_JPEGTransformCombined@32
_FreeImage_JPEGTransformCombinedFromMemory@32
_FreeImage_JPEGTransformCombinedU@32
_FreeImage_JPEGTransformFromHandle@40
_FreeImage_JPEGTransformU@16
_FreeImage_Load@16
_FreeImage_LoadFromHandle@20
_FreeImage_LoadFromMemory@16
_FreeImage_LoadMultiBitmapFromMemory@12
_FreeImage_LoadU@16
_FreeImage_LockPage@8
_FreeImage_LookupSVGColor@16
_FreeImage_LookupX11Color@16
_FreeImage_MakeThumbnail@12
_FreeImage_MovePage@12
_FreeImage_MultigridPoissonSolver@8
_FreeImage_OpenMemory@8
_FreeImage_OpenMultiBitmap@24
_FreeImage_OpenMultiBitmapFromHandle@16
_FreeImage_OpenMultiBitmapU@24
_FreeImage_Paste@24
_FreeImage_PreMultiplyWithAlpha@4
_FreeImage_ReadMemory@16
_FreeImage_RegisterExternalPlugin@20
_FreeImage_RegisterLocalPlugin@20
_FreeImage_Rescale@16
_FreeImage_RescaleRect@36
_FreeImage_Rotate@16
_FreeImage_RotateEx@48
_FreeImage_Save@16
_FreeImage_SaveMultiBitmapToHandle@20
_FreeImage_SaveMultiBitmapToMemory@16
_FreeImage_SaveToHandle@20
_FreeImage_SaveToMemory@16
_FreeImage_SaveU@16
_FreeImage_SeekMemory@12
_FreeImage_SetBackgroundColor@8
_FreeImage_SetChannel@12
_FreeImage_SetComplexChannel@12
_FreeImage_SetDotsPerMeterX@8
_FreeImage_SetDotsPerMeterY@8
_FreeImage_SetMetadata@16
_FreeImage_SetMetadataKeyValue@16
_FreeImage_SetOutputMessage@4
_FreeImage_SetOutputMessageStdCall@4
_FreeImage_SetPixelColor@16
_FreeImage_SetPixelIndex@16
_FreeImage_SetPluginEnabled@8
_FreeImage_SetTagCount@8
_FreeImage_SetTagDescription@8
_FreeImage_SetTagID@8
_FreeImage_SetTagKey@8
_FreeImage_SetTagLength@8
_FreeImage_SetTagType@8
_FreeImage_SetTagValue@8
_FreeImage_SetThumbnail@8
_FreeImage_SetTransparencyTable@12
_FreeImage_SetTransparent@8
_FreeImage_SetTransparentIndex@8
_FreeImage_SwapColors@16
_FreeImage_SwapPaletteIndices@12
_FreeImage_TagToString@12
_FreeImage_TellMemory@4
_FreeImage_Threshold@8
_FreeImage_TmoDrago03@20
_FreeImage_TmoFattal02@20
_FreeImage_TmoReinhard05@20
_FreeImage_TmoReinhard05Ex@36
_FreeImage_ToneMapping@24
_FreeImage_Unload@4
_FreeImage_UnlockPage@12
_FreeImage_Validate@8
_FreeImage_ValidateFromHandle@12
_FreeImage_ValidateFromMemory@8
_FreeImage_ValidateU@8
_FreeImage_WriteMemory@16
_FreeImage_ZLibCRC32@12
_FreeImage_ZLibCompress@16
_FreeImage_ZLibGUnzip@16
_FreeImage_ZLibGZip@16
_FreeImage_ZLibUncompress@16

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 546KB - Virtual size: 546KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Quick NFT Claiming Tool/Installation Instructions.txt
Quick NFT Claiming Tool/Quick NFT Claiming Tool.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Yours.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Quick NFT Claiming Tool/decryptor.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Yours.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Quick NFT Claiming Tool/encoder/eaace.ax
.dll regsvr32 windows:4 windows x86 arch:x86

c8d9498f53878d87b985b8cc7b8f010c

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:d5:0d:68:b5:ee:db:06:98:e1:6b:8a:88:47:62:e0
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

29/12/2008, 00:00

Not After

29/12/2009, 23:59

Subject

CN=Elecard Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Finalizing,O=Elecard Ltd,L=Tomsk,ST=Tomsk region,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:e6:c8:fd:65:2a:7a:09:0b:44:7d:c8:3f:64:89:23:ad:93:e9:43
Signer

Actual PE Digest

0c:e6:c8:fd:65:2a:7a:09:0b:44:7d:c8:3f:64:89:23:ad:93:e9:43

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime
timeSetEvent

msimg32

AlphaBlend

kernel32

SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
FlushInstructionCache
GetCurrentProcess
HeapAlloc
GetProcessHeap
GetTickCount
GetCurrentThreadId
HeapFree
lstrcpynW
lstrcpyW
GlobalUnlock
GlobalLock
GlobalSize
InterlockedExchangeAdd
GetSystemTimeAsFileTime
WideCharToMultiByte
InterlockedIncrement
FreeLibrary
InterlockedDecrement
LoadLibraryW
lstrlenA
GetLastError
GetModuleFileNameA
DisableThreadLibraryCalls
lstrcmpW
CloseHandle
CreateEventW
SetEvent
ResetEvent
WaitForMultipleObjects
WaitForSingleObject
ReleaseSemaphore
GetSystemInfo
VirtualFree
DuplicateHandle
CreateSemaphoreW
VirtualAlloc
GetProcAddress
GetModuleHandleW
lstrcmpiW
SetThreadPriority
GetThreadPriority
GetModuleFileNameW
CreateThread
SetErrorMode
lstrcmpiA
GetStringTypeA
GetCPInfo
GetOEMCP
IsBadCodePtr
IsBadReadPtr
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TerminateProcess
SetUnhandledExceptionFilter
GetModuleHandleA
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
IsBadWritePtr
FatalAppExitA
HeapCreate
VirtualQuery
ExitProcess
GetDateFormatA
GetCommandLineA
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
LoadLibraryA
SetFilePointer
MultiByteToWideChar
lstrlenW
GetVersionExW
GetThreadLocale
GetACP
GetLocaleInfoA
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetStringTypeW
GetTimeFormatA
SetEnvironmentVariableA
TryEnterCriticalSection
GetCurrentThread
GetUserDefaultLCID
CompareStringW
CompareStringA
FlushFileBuffers
GetLocaleInfoW
SetStdHandle
GetTimeZoneInformation
VirtualProtect
SetConsoleCtrlHandler
LCMapStringW
LCMapStringA

user32

LoadStringA
UnregisterClassA
LoadStringW
DispatchMessageW
GetQueueStatus
PostThreadMessageW
MsgWaitForMultipleObjects
PeekMessageW
ShowWindow
CreateDialogParamW
GetWindowTextLengthW
GetDesktopWindow
EnableWindow
InvalidateRect
DestroyWindow
GetSystemMetrics
OffsetRect
CreateWindowExW
RegisterClassExW
LoadCursorW
wsprintfW
GetClassInfoExW
SetWindowPos
GetParent
SetFocus
CallWindowProcW
GetDlgItem
DefWindowProcW
IsWindow
GetWindowLongW
SetWindowLongW
SendMessageW
RegisterWindowMessageW
SetDlgItemTextW
GetDC
ReleaseDC
LoadImageW
GetClientRect
UnregisterClassW
GetWindowTextW
MoveWindow
GetWindowRect

gdi32

CreateCompatibleDC
SelectObject
GetObjectW
DeleteDC
DeleteObject

advapi32

RegSetValueW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegCreateKeyW

ole32

CoUninitialize
StringFromGUID2
CoCreateInstance
StringFromCLSID
StgCreateDocfile
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
GetHGlobalFromStream
CoTaskMemFree
CreateStreamOnHGlobal
CoTaskMemAlloc
CoInitialize
StgOpenStorage

oleaut32

SysStringByteLen
VariantChangeType
VariantInit
VariantClear
SysAllocString
SysFreeString
SysStringLen
SysAllocStringByteLen
VarCmp
SysAllocStringLen
SysReAllocStringLen
SysReAllocString

shlwapi

PathFindFileNameW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 384KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Quick NFT Claiming Tool/encoder/eavcenc_hd.ax
.dll regsvr32 windows:4 windows x86 arch:x86

87a1dae9a95865c2d6ec46c54cc1c3cc

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:d5:0d:68:b5:ee:db:06:98:e1:6b:8a:88:47:62:e0
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

29/12/2008, 00:00

Not After

29/12/2009, 23:59

Subject

CN=Elecard Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Finalizing,O=Elecard Ltd,L=Tomsk,ST=Tomsk region,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3a:47:24:c3:c9:be:44:de:f0:c0:ae:75:2d:d8:3f:9b:cf:8b:ec:bf
Signer

Actual PE Digest

3a:47:24:c3:c9:be:44:de:f0:c0:ae:75:2d:d8:3f:9b:cf:8b:ec:bf

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\sources\avc encoder\leak\_release_hd\filter\eavcenc_hd.pdb

Imports

winmm

timeSetEvent
timeGetTime

msimg32

AlphaBlend

kernel32

CreateThread
GetSystemTimeAsFileTime
lstrlenW
InitializeCriticalSection
DeleteCriticalSection
InterlockedExchange
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
InterlockedExchangeAdd
lstrcmpiA
lstrlenA
GetModuleFileNameA
CloseHandle
ReleaseMutex
InterlockedIncrement
FreeLibrary
InterlockedDecrement
LoadLibraryA
GetVersionExA
DisableThreadLibraryCalls
ResetEvent
ReleaseSemaphore
GetSystemInfo
VirtualFree
DuplicateHandle
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreA
VirtualAlloc
GetProcAddress
GetModuleHandleA
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetTickCount
SetErrorMode
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
HeapAlloc
HeapFree
ExitProcess
HeapReAlloc
GetLastError
GetCommandLineA
GetProcessHeap
GetCPInfo
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
WriteFile
GetStdHandle
HeapDestroy
HeapCreate
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetThreadLocale
QueryPerformanceFrequency
WaitForMultipleObjects
WaitForSingleObject
TerminateThread
SetEvent
CreateEventA
GlobalSize
GlobalLock
GlobalUnlock
WideCharToMultiByte
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
ExitThread
ReadFile
VirtualQuery
SetStdHandle

user32

CreateWindowExA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetWindowLongA
DestroyWindow
CallWindowProcA
GetSystemMetrics
wsprintfA
SendMessageA
LoadStringW
CheckDlgButton
MessageBoxA
SetTimer
EnableWindow
GetDlgItem
SetWindowLongA
LoadStringA
DispatchMessageA
GetQueueStatus
RegisterWindowMessageA
PostThreadMessageA
ReleaseDC
GetDC
LoadImageA
DefWindowProcA
SetDlgItemTextA
KillTimer
UnregisterClassA
GetDesktopWindow
GetClientRect
GetWindowRect
MsgWaitForMultipleObjects
PeekMessageA
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamA
IsDlgButtonChecked

gdi32

DeleteObject
CreateCompatibleDC
GetObjectA
DeleteDC
SelectObject

advapi32

RegQueryValueExA
RegSetValueA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegDeleteValueA
RegEnumValueA
RegOpenKeyExA

shell32

SHGetSpecialFolderPathA

ole32

CoInitialize
CoFreeUnusedLibraries
CoUninitialize
CoFileTimeNow
StringFromGUID2
CoCreateInstance
StringFromCLSID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoTaskMemFree
CreateStreamOnHGlobal
CoTaskMemAlloc
GetHGlobalFromStream

oleaut32

VariantInit
VariantClear
SysAllocString
SysReAllocString
SysFreeString
SysAllocStringByteLen
VariantChangeType
SysStringLen
SysReAllocStringLen
VariantCopy
VarBstrCat
SysAllocStringLen
SysStringByteLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 756KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Quick NFT Claiming Tool/encoder/em4venc_hd.ax
.dll regsvr32 windows:4 windows x86 arch:x86

745b5b08349449b5bf8adc8c7898e641

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

46:af:26:6d:a0:3f:63:b3:31:7d:db:52:2b:50:00:86
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

10/12/2007, 00:00

Not After

14/12/2008, 23:59

Subject

CN=Elecard Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Finalizing,O=Elecard Ltd,L=Tomsk,ST=Tomsk region,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:fd:2b:91:dc:ca:96:19:08:9c:6e:ee:aa:6b:e7:45:91:1b:b1:2f
Signer

Actual PE Digest

62:fd:2b:91:dc:ca:96:19:08:9c:6e:ee:aa:6b:e7:45:91:1b:b1:2f

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

InitCommonControlsEx

gdi32

SetBkColor
BitBlt
DPtoLP
DeleteObject
CreateBitmap
GetMapMode
CreateCompatibleDC
DeleteDC
CreateCompatibleBitmap
SetMapMode
SelectObject
GetObjectW

kernel32

LeaveCriticalSection
VirtualProtect
GetModuleFileNameW
VirtualQuery
EnterCriticalSection
lstrcpyW
GlobalUnlock
GlobalSize
GlobalLock
GetSystemTimeAsFileTime
WideCharToMultiByte
GetLastError
LockResource
FindResourceW
InterlockedDecrement
LoadResource
CreateThread
CreateEventW
WaitForSingleObject
TerminateThread
SetEvent
CloseHandle
WaitForMultipleObjects
InterlockedIncrement
FreeLibrary
lstrcpynW
ResetEvent
VirtualFree
GetCurrentProcess
GetCurrentThreadId
GetModuleFileNameA
DisableThreadLibraryCalls
GetProcAddress
GetTickCount
SetThreadAffinityMask
GetProcessAffinityMask
GetSystemInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
VirtualAlloc
GetVersionExA
GetProcessHeap
RtlUnwind
ExitThread
RaiseException
WriteFile
GetStdHandle
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
HeapReAlloc
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
HeapSize
GetVersionExW
LoadLibraryA
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
QueryPerformanceFrequency
lstrlenW
lstrlenA
MultiByteToWideChar
lstrcmpW
DeleteCriticalSection
InitializeCriticalSection
GetCommandLineA
TerminateProcess

user32

DefWindowProcW
SetWindowTextA
EnumChildWindows
KillTimer
SetTimer
CheckDlgButton
CreateDialogParamW
MoveWindow
InvalidateRect
ShowWindow
LoadStringW
GetWindowRect
GetDesktopWindow
GetClassNameW
ReleaseDC
GetDlgItemTextW
LoadImageW
GetDC
SetDlgItemTextW
GetClientRect
GetDlgItem
EnableWindow
IsDlgButtonChecked
SetWindowTextW
SetWindowPos
wsprintfW
SetWindowLongW
CreateWindowExW
SendMessageW
GetWindowTextLengthW
GetWindowTextW
DestroyWindow
GetWindowLongW
CallWindowProcW
GetSystemMetrics
SetFocus
GetDlgItemInt

advapi32

RegCloseKey
RegCreateKeyW
RegDeleteKeyW
RegSetValueW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegEnumValueW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW

ole32

CoUninitialize
StringFromCLSID
CreateILockBytesOnHGlobal
CoTaskMemFree
CreateStreamOnHGlobal
GetHGlobalFromStream
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoInitialize
StgCreateDocfileOnILockBytes
CoFreeUnusedLibraries

oleaut32

SysFreeString
SysAllocString
VariantClear
SysAllocStringLen
VariantChangeType
VariantInit
SysReAllocString
SysAllocStringByteLen
SysReAllocStringLen
SysStringByteLen
SysStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 800KB - Virtual size: 799KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Quick NFT Claiming Tool/encoder/emp4mux.ax
.dll regsvr32 windows:4 windows x86 arch:x86

607f628c5d74e29a2cb792b399a9f35e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:d5:0d:68:b5:ee:db:06:98:e1:6b:8a:88:47:62:e0
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

29/12/2008, 00:00

Not After

29/12/2009, 23:59

Subject

CN=Elecard Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Finalizing,O=Elecard Ltd,L=Tomsk,ST=Tomsk region,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e9:ce:40:97:aa:ff:30:6b:c3:3b:e4:01:4d:7c:d7:f9:d3:3d:00:e9
Signer

Actual PE Digest

e9:ce:40:97:aa:ff:30:6b:c3:3b:e4:01:4d:7c:d7:f9:d3:3d:00:e9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

InitCommonControlsEx

gdi32

BitBlt
DeleteObject
GetObjectW
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
CreateBitmap
DPtoLP
SetBkColor
SelectObject
SetMapMode
GetMapMode

kernel32

VirtualProtect
VirtualAlloc
lstrcmpW
MultiByteToWideChar
lstrlenW
VirtualQuery
GetSystemInfo
GetModuleFileNameW
LockResource
FindResourceW
LoadResource
DeleteFileA
CreateEventW
CloseHandle
WideCharToMultiByte
WaitForSingleObject
GetCurrentDirectoryA
SetEvent
lstrcpyW
GlobalSize
GlobalUnlock
GlobalLock
GetSystemTimeAsFileTime
HeapFree
GetProcessHeap
GetLastError
lstrcpynW
InterlockedIncrement
VirtualFree
GetCurrentProcess
GetCurrentThreadId
FreeLibrary
DisableThreadLibraryCalls
GetModuleFileNameA
GetProcAddress
GetTickCount
GetVersionExW
UnmapViewOfFile
lstrlenA
Sleep
GetStdHandle
LoadLibraryA
GetModuleHandleA
QueryPerformanceCounter
GetCurrentProcessId
GetConsoleMode
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
LCMapStringW
LCMapStringA
SetStdHandle
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
FlushFileBuffers
SetFilePointer
GetConsoleCP
ReadFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapCreate
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA
HeapDestroy
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
WriteFile
ExitProcess
GetTimeZoneInformation
RtlUnwind
RaiseException
GetVersionExA
GetCommandLineA
HeapReAlloc
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess

user32

ReleaseDC
EnumChildWindows
GetClassNameW
GetWindowLongW
CheckDlgButton
EnableWindow
DefWindowProcW
IsDlgButtonChecked
SetTimer
SendMessageW
GetDC
SetDlgItemTextW
GetDlgItemTextW
GetDlgItem
SetWindowTextA
GetDesktopWindow
GetWindowRect
LoadStringW
DestroyWindow
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamW
SetWindowLongW
wsprintfW
KillTimer
GetClientRect
LoadImageW
SetWindowTextW

advapi32

RegQueryValueExW
RegCreateKeyW
RegSetValueW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegCloseKey

ole32

CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes
StringFromCLSID
CoTaskMemFree
CoFreeUnusedLibraries
CoInitialize
StringFromGUID2
GetHGlobalFromStream
CreateILockBytesOnHGlobal
CoTaskMemAlloc
CoUninitialize
CoCreateInstance

oleaut32

VariantClear
SysReAllocString
SysAllocStringLen
VariantInit
SysAllocStringByteLen
SysReAllocStringLen
SysStringByteLen
SysStringLen
SysFreeString
SysAllocString
VariantChangeType

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 472KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Quick NFT Claiming Tool/encoder/lame.ax
.dll regsvr32 windows:4 windows x86 arch:x86

ab4ebe3a60efdebe1a2684e0c778c352

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

fprintf
exit
_purecall
_ftol
memmove
calloc
free
sprintf
__CxxFrameHandler
??3@YAXPAX@Z
ceil
_snprintf
vfprintf
fflush
_adj_fpatan
malloc
floor
_adj_fdivr_m64
fscanf
abort
_adj_fdiv_m32
fclose
_CIpow
_adj_fdiv_r
_adj_fdiv_m32i
_adj_fdivr_m32
??2@YAPAXI@Z
qsort
_iob

kernel32

EnterCriticalSection
MulDiv
lstrcpyA
lstrlenA
GetVersionExW
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
FreeLibrary
lstrcmpW
lstrcpynW
lstrlenW
MultiByteToWideChar
GetLastError
GetModuleFileNameA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection

advapi32

RegCreateKeyA
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey

user32

SendDlgItemMessageA
wsprintfA
IsDlgButtonChecked
SendMessageA
CheckDlgButton
CheckRadioButton
GetDlgItem
SetDlgItemTextA
GetDesktopWindow
GetWindowRect
LoadStringW
wsprintfW
DestroyWindow
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamW
SetWindowLongW
GetWindowLongW
EnableWindow

comctl32

ord17

ole32

CoFreeUnusedLibraries
StringFromGUID2
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Quick NFT Claiming Tool/encoder/lc.dll
.dll regsvr32 windows:4 windows x86 arch:x86

9564795aba2781e92bba84dfd1fae142

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

lstrcpyA
GetSystemTime
CompareFileTime
GetSystemTimeAsFileTime
FileTimeToSystemTime
SystemTimeToFileTime
GetACP
GetLastError
WideCharToMultiByte
MultiByteToWideChar
DisableThreadLibraryCalls
InterlockedIncrement
FreeLibrary
InterlockedDecrement
lstrlenA
GetModuleFileNameA
GetVersionExA

user32

wsprintfA
MessageBoxA

advapi32

RegEnumKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegSetValueA
RegSetValueExA

ole32

IIDFromString
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
StringFromGUID2
StringFromIID

oleaut32

SysAllocStringLen
VariantClear
SysFreeString
SysAllocString

msvcrt

_strnicmp
_stricmp
__dllonexit
_onexit
_itoa
_strupr
_strdup
free
strrchr
wcscpy
__CxxFrameHandler
wcslen
rand
strchr
atoi
sscanf
??2@YAPAXI@Z
sprintf
strncpy
strncat
toupper
??3@YAXPAX@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Quick NFT Claiming Tool/encoder/matroskamuxer.dll
.dll regsvr32 windows:5 windows x86 arch:x86

946b79283fb482e338de13b586ba785c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\Git\aplayer\trunk\APlayerIII\ThirdParty\mpc-hc\bin10\Filters_x86\MatroskaMuxer.pdb

Imports

winmm

timeGetTime

kernel32

GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
DeleteFileW
WriteFile
SetFilePointer
FlushFileBuffers
GetFullPathNameW
RtlUnwind
EncodePointer
DecodePointer
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
TlsGetValue
QueryPerformanceCounter
HeapReAlloc
HeapQueryInformation
HeapSize
ExitProcess
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
GetStringTypeW
HeapCreate
HeapDestroy
GetStdHandle
GetTimeZoneInformation
SetHandleCount
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringW
GetConsoleCP
GetConsoleMode
WriteConsoleW
SetEnvironmentVariableA
LocalAlloc
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesExW
lstrcmpA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
ReleaseActCtx
CreateActCtxW
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
CreateFileW
GetVolumeInformationW
FindFirstFileW
FindClose
RaiseException
DisableThreadLibraryCalls
CreateThread
GetTickCount
GetCurrentThread
GetModuleHandleW
InterlockedExchange
GetCurrentThreadId
GetCurrentProcess
lstrcmpW
GetSystemInfo
WaitForSingleObject
ResetEvent
SetEvent
CreateEventW
CloseHandle
InterlockedDecrement
InterlockedIncrement
OutputDebugStringW
GetCurrentProcessId
GetModuleFileNameA
lstrlenA
Sleep
VirtualQuery
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
lstrlenW
GetVersionExW
lstrcpyW
GetProcAddress
FreeLibrary
LoadLibraryW
MultiByteToWideChar
ActivateActCtx
GetLastError
DeactivateActCtx
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
GetCommandLineA

user32

CharUpperW
SetWindowTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
DestroyMenu
SetCursor
ShowWindow
IsWindowEnabled
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
InvalidateRect
LoadIconW
WinHelpW
GetCapture
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
MonitorFromWindow
GetKeyState
SetMenu
EnableWindow
SetForegroundWindow
IsWindowVisible
UpdateWindow
PostMessageW
MessageBoxW
GetClassInfoExW
RegisterClassW
GetWindowRect
ScreenToClient
PtInRect
GetDlgCtrlID
CallWindowProcW
UnhookWindowsHookEx
GetMenuState
ReleaseDC
GetDC
DispatchMessageW
RegisterWindowMessageW
PeekMessageW
KillTimer
SetTimer
UnregisterClassW
PostQuitMessage
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
RealChildWindowFromPoint
EnumWindows
GetWindowThreadProcessId
wvsprintfW
wsprintfW
AdjustWindowRectEx
SetWindowPos
GetClientRect
GetWindowLongW
SetWindowLongW
IsWindow
GetActiveWindow
CreateWindowExW
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetSysColorBrush
GetParent
MapWindowPoints
LoadCursorW
GetSysColor
GetSystemMetrics
EnumDisplayMonitors
SystemParametersInfoW
GetMonitorInfoW
SetRectEmpty
CopyRect
GetClassNameW
DefWindowProcW
SendMessageW
GetClassInfoW
GetWindow
GetMessagePos
SetWindowsHookExW

gdi32

Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtTextOutW
CreateBitmap
RectVisible
TextOutW
PtVisible
GetStockObject
CreateDIBitmap
GetClipBox
SetMapMode
RestoreDC
SaveDC
DeleteDC
SelectObject
SetBkColor
SetTextColor
DeleteObject
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
GetDeviceCaps
GetObjectW
CreateFontIndirectW
CreatePatternBrush
CreateSolidBrush
CreatePen

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyExW
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegEnumValueW

shell32

ShellExecuteW

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoFreeUnusedLibraries
StringFromGUID2
CoInitialize
CoCreateInstance
CoUninitialize
CoCreateGuid

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear
VariantChangeType

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Quick NFT Claiming Tool/encoder/mmx264.ax
.dll regsvr32 windows:5 windows x86 arch:x86

d46d8f41410a46d91c9814a7413e2ede

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

PlaySoundW

pthreadvc2

pthread_mutex_init
pthread_mutex_destroy
pthread_cond_init
pthread_cond_destroy
pthread_cond_wait
pthread_mutex_lock
pthread_num_processors_np
pthread_mutex_unlock
pthread_setschedparam
pthread_cond_broadcast
pthread_self
pthread_create
pthread_join
pthread_getschedparam

kernel32

VirtualQuery
SetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
RaiseException
SetHandleCount
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
GetTimeZoneInformation
LCMapStringW
CreateFileA
GetProcessHeap
SetEnvironmentVariableA
DeleteFileA
RtlUnwind
HeapReAlloc
GetStdHandle
WriteConsoleW
MoveFileA
GetFileType
PeekNamedPipe
GetFileInformationByHandle
GetCommandLineA
GetSystemTimeAsFileTime
QueryPerformanceCounter
EncodePointer
DecodePointer
HeapAlloc
HeapFree
FindResourceExW
VirtualProtect
GetNumberFormatW
GetWindowsDirectoryW
SearchPathW
Sleep
GetProfileIntW
InitializeCriticalSectionAndSpinCount
GetTempPathW
GetTempFileNameW
GetFileTime
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
GetFileAttributesExW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
lstrcmpiW
FreeResource
GlobalFindAtomW
GlobalAddAtomW
HeapQueryInformation
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcpyW
DeleteFileW
GlobalFlags
GetCurrentDirectoryW
CompareStringW
GetCurrentProcessId
FileTimeToSystemTime
GlobalGetAtomNameW
ResumeThread
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
ReleaseActCtx
CreateActCtxW
lstrcmpA
GlobalDeleteAtom
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetModuleFileNameW
GetLocaleInfoW
ActivateActCtx
DeactivateActCtx
GlobalFree
CopyFileW
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
SetLastError
WideCharToMultiByte
GetModuleHandleA
DisableThreadLibraryCalls
SetErrorMode
GetModuleFileNameA
lstrlenW
MultiByteToWideChar
lstrlenA
DuplicateHandle
GetSystemInfo
ReleaseSemaphore
lstrcmpW
VirtualFree
GetCurrentProcess
CreateThread
CloseHandle
GetCurrentThreadId
CreateSemaphoreW
GetLastError
InterlockedExchange
SetThreadPriority
GetVersionExW
GetCurrentThread
GetTickCount
WaitForSingleObject
LoadLibraryW
InterlockedDecrement
InterlockedIncrement
FreeLibrary
VirtualAlloc
LockResource
SizeofResource
LoadResource
FindResourceW
DeleteCriticalSection
EnterCriticalSection
GetProcAddress
LeaveCriticalSection
InitializeCriticalSection
GetModuleHandleW
HeapSize
ExitThread
GetPrivateProfileStringW
ExitProcess
HeapDestroy

user32

InvertRect
HideCaret
GetNextDlgGroupItem
MapDialogRect
DrawIcon
DestroyCursor
GetWindowRgn
IsClipboardFormatAvailable
SetMenuDefaultItem
WaitMessage
CreateMenu
IsMenu
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
UnpackDDElParam
ReuseDDElParam
LoadImageW
InsertMenuItemW
TranslateAcceleratorW
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
CopyAcceleratorTableW
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateW
MessageBeep
ReleaseCapture
SetCapture
GetSystemMenu
LoadMenuW
SetClassLongW
GetAsyncKeyState
NotifyWinEvent
WindowFromPoint
CreatePopupMenu
DestroyAcceleratorTable
SetParent
RedrawWindow
SetWindowRgn
IsZoomed
IsIconic
OffsetRect
IsRectEmpty
IntersectRect
DestroyMenu
GetMenuItemInfoW
InflateRect
CharUpperW
DestroyIcon
IsDialogMessageW
CheckDlgButton
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetForegroundWindow
SubtractRect
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcW
GetMenu
SetWindowPos
GetClassInfoW
MapWindowPoints
GetClientRect
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoW
GetMonitorInfoW
SetRectEmpty
CopyRect
UpdateWindow
RealChildWindowFromPoint
GetWindow
GetDlgCtrlID
GetClassNameW
PtInRect
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
DeleteMenu
ShowOwnedPopups
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetWindowThreadProcessId
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowTextLengthW
UnregisterClassW
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
MapVirtualKeyExW
GetKeyNameTextW
IsCharLowerW
GetIconInfo
GetDoubleClickTime
CharUpperBuffW
CopyIcon
RegisterClipboardFormatW
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
GetMenuDefaultItem
UnhookWindowsHookEx
PostMessageW
PostQuitMessage
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
GetUpdateRect
FrameRect
SetActiveWindow
RemoveMenu
GetWindowRect
GetDesktopWindow
LoadStringW
DestroyWindow
InvalidateRect
GetWindowLongW
SetWindowLongW
ShowWindow
CreateDialogParamW
DefWindowProcW
MoveWindow
RegisterWindowMessageW
PeekMessageW
PostThreadMessageW
DispatchMessageW
SetTimer
KillTimer
GetWindowTextW
GetDlgItem
MessageBoxW
SendMessageW
EnableWindow
SetWindowTextW
GetCapture

gdi32

CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
OffsetViewportOrgEx
CreateHatchBrush
CreateDIBitmap
CreateFontIndirectW
CreateCompatibleBitmap
CreateRectRgnIndirect
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
GetTextExtentPoint32W
SetRectRgn
CombineRgn
PatBlt
DPtoLP
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetBkColor
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
OffsetRgn
GetRgnBox
CreatePatternBrush
DeleteDC
StretchBlt
SetPixel
Rectangle
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
SetViewportOrgEx
SelectObject
Escape
SetDIBColorTable
ExtTextOutW
TextOutW
RectVisible
PtVisible
ExtSelectClipRgn
ScaleWindowExtEx
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
CreateDCW
CopyMetaFileW
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
RealizePalette
GetDeviceCaps
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
GetObjectW
CreateRectRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetViewportExtEx

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegDeleteValueW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegCreateKeyW
RegSetValueW
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyExW
RegCreateKeyExW
RegEnumValueW
RegEnumKeyW
RegQueryValueW

shell32

SHGetSpecialFolderLocation
SHGetFileInfoW
ShellExecuteW
DragFinish
DragQueryFileW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetDesktopFolder
SHAppBarMessage

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathRemoveFileSpecW

ole32

OleCreateMenuDescriptor
RevokeDragDrop
CoCreateGuid
OleDuplicateData
ReleaseStgMedium
StringFromGUID2
CoTaskMemFree
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoInitializeEx
DoDragDrop
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor

oleaut32

SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
VarBstrFromDate
VariantInit
VariantChangeType
SysAllocString
SysFreeString

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipFree

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 361KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Quick NFT Claiming Tool/encoder/mp4mux.dll
.dll regsvr32 windows:5 windows x86 arch:x86

96d8330d2cb916029c9aba03d2cbc68c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime

kernel32

InterlockedDecrement
lstrcpyW
lstrlenW
GetModuleFileNameW
VirtualQuery
lstrlenA
MultiByteToWideChar
GetLastError
GetModuleFileNameA
GetVersionExW
DisableThreadLibraryCalls
lstrcpynW
GetCurrentProcessId
OutputDebugStringW
CloseHandle
WaitForSingleObject
ReleaseSemaphore
GetSystemInfo
VirtualFree
lstrcmpW
InterlockedIncrement
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreW
VirtualAlloc
FreeLibrary
InterlockedExchange
GetTickCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
DecodePointer
EncodePointer
LocalFree
InitializeCriticalSection

user32

EnumWindows
wsprintfW
wvsprintfW
SetRect
IsRectEmpty
GetClassNameW
GetWindowThreadProcessId

advapi32

RegCreateKeyW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegEnumKeyExW

ole32

CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2

oleaut32

SysAllocString
SysFreeString
VariantClear

msvcp100

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_BADOFF@std@@3_JB
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

msvcr100

_malloc_crt
_encoded_null
_initterm
_lock
_onexit
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
_except_handler4_common
__dllonexit
__CppXcptFilter
_amsg_exit
_initterm_e
_purecall
??3@YAXPAX@Z
_CxxThrowException
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
__CxxFrameHandler3
??2@YAPAXI@Z
??_V@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
memset
memcpy
memmove
__CxxFrameHandler
_wcsicmp
free
malloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Quick NFT Claiming Tool/encoder/pthreadvc2.dll
.dll windows:4 windows x86 arch:x86

cdb27fb2f0594d54544e89a6bc6e3a1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

calloc
_onexit
__dllonexit
_adjust_fdiv
_initterm
_beginthreadex
malloc
exit
longjmp
_ftime
_errno
_setjmp3
_endthreadex
free

wsock32

WSAGetLastError
WSASetLastError

kernel32

TlsSetValue
EnterCriticalSection
TlsAlloc
GetCurrentProcessId
OpenProcess
LoadLibraryA
WaitForMultipleObjects
FreeLibrary
GetProcAddress
SetThreadPriority
ReleaseSemaphore
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
TlsFree
CreateSemaphoreA
SetEvent
CloseHandle
WaitForSingleObject
CreateEventA
InterlockedExchangeAdd
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
ResetEvent
GetCurrentProcess
GetCurrentThreadId
Sleep
GetThreadPriority
DuplicateHandle
GetCurrentThread
GetProcessAffinityMask
SetLastError
TlsGetValue
GetLastError
InterlockedDecrement

Exports

Exports

pthreadCancelableTimedWait
pthreadCancelableWait
pthread_attr_destroy
pthread_attr_getdetachstate
pthread_attr_getinheritsched
pthread_attr_getschedparam
pthread_attr_getschedpolicy
pthread_attr_getscope
pthread_attr_getstackaddr
pthread_attr_getstacksize
pthread_attr_init
pthread_attr_setdetachstate
pthread_attr_setinheritsched
pthread_attr_setschedparam
pthread_attr_setschedpolicy
pthread_attr_setscope
pthread_attr_setstackaddr
pthread_attr_setstacksize
pthread_barrier_destroy
pthread_barrier_init
pthread_barrier_wait
pthread_barrierattr_destroy
pthread_barrierattr_getpshared
pthread_barrierattr_init
pthread_barrierattr_setpshared
pthread_cancel
pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_wait
pthread_condattr_destroy
pthread_condattr_getpshared
pthread_condattr_init
pthread_condattr_setpshared
pthread_create
pthread_delay_np
pthread_detach
pthread_equal
pthread_exit
pthread_getconcurrency
pthread_getschedparam
pthread_getspecific
pthread_getw32threadhandle_np
pthread_join
pthread_key_create
pthread_key_delete
pthread_kill
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_timedlock
pthread_mutex_trylock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_getkind_np
pthread_mutexattr_getpshared
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_setkind_np
pthread_mutexattr_setpshared
pthread_mutexattr_settype
pthread_num_processors_np
pthread_once
pthread_rwlock_destroy
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_timedrdlock
pthread_rwlock_timedwrlock
pthread_rwlock_tryrdlock
pthread_rwlock_trywrlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_rwlockattr_destroy
pthread_rwlockattr_getpshared
pthread_rwlockattr_init
pthread_rwlockattr_setpshared
pthread_self
pthread_setcancelstate
pthread_setcanceltype
pthread_setconcurrency
pthread_setschedparam
pthread_setspecific
pthread_spin_destroy
pthread_spin_init
pthread_spin_lock
pthread_spin_trylock
pthread_spin_unlock
pthread_testcancel
pthread_timechange_handler_np
pthread_win32_process_attach_np
pthread_win32_process_detach_np
pthread_win32_test_features_np
pthread_win32_thread_attach_np
pthread_win32_thread_detach_np
ptw32_get_exception_services_code
ptw32_pop_cleanup
ptw32_push_cleanup
sched_get_priority_max
sched_get_priority_min
sched_getscheduler
sched_setscheduler
sched_yield
sem_close
sem_destroy
sem_getvalue
sem_init
sem_open
sem_post
sem_post_multiple
sem_timedwait
sem_trywait
sem_unlink
sem_wait

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Quick NFT Claiming Tool/encoder/wavdest.dll
.dll regsvr32 windows:5 windows x86 arch:x86

7951310005b8aa41049b9d146897981d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\SVN\code_svn\xl_kankan\xl_xmp\aplayer\trunk\APlayerIII\Symbols\Release\WavDest\WavDest.pdb

Imports

winmm

timeGetTime

kernel32

FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
GetFileAttributesExW
FileTimeToLocalFileTime
RtlUnwind
EncodePointer
DecodePointer
GetCommandLineA
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
RaiseException
HeapReAlloc
HeapQueryInformation
HeapSize
ExitProcess
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
GetStringTypeW
Sleep
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
GetTimeZoneInformation
LCMapStringW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
SetEnvironmentVariableA
FlushFileBuffers
SetFilePointer
WriteFile
CreateFileW
DeleteFileW
FileTimeToSystemTime
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
WideCharToMultiByte
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
ReleaseActCtx
CreateActCtxW
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
DisableThreadLibraryCalls
GetTickCount
GetCurrentThread
GetModuleHandleW
InterlockedExchange
GetCurrentThreadId
GetCurrentProcess
CloseHandle
InterlockedDecrement
InterlockedIncrement
OutputDebugStringW
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcmpW
GetModuleFileNameA
lstrlenA
VirtualQuery
GetModuleFileNameW
lstrlenW
GetVersionExW
lstrcpyW
GetProcAddress
FreeLibrary
LoadLibraryW
MultiByteToWideChar
ActivateActCtx
GetLastError
DeactivateActCtx
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
SetUnhandledExceptionFilter

user32

SetTimer
KillTimer
CharUpperW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
DestroyMenu
SetCursor
ShowWindow
IsWindowEnabled
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
InvalidateRect
GetDC
ReleaseDC
LoadIconW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowTextW
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetKeyState
SetMenu
EnableWindow
SetForegroundWindow
IsWindowVisible
UpdateWindow
PostMessageW
MessageBoxW
GetClassInfoExW
RegisterClassW
GetWindowRect
ScreenToClient
PtInRect
GetDlgCtrlID
CallWindowProcW
UnhookWindowsHookEx
GetMenuState
DispatchMessageW
RegisterWindowMessageW
PeekMessageW
EnumWindows
GetWindowThreadProcessId
UnregisterClassW
PostQuitMessage
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
RealChildWindowFromPoint
SetWindowTextW
wvsprintfW
wsprintfW
AdjustWindowRectEx
SetWindowPos
GetClientRect
GetWindowLongW
SetWindowLongW
IsWindow
GetActiveWindow
CreateWindowExW
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetSysColorBrush
GetParent
MapWindowPoints
LoadCursorW
GetSysColor
GetSystemMetrics
EnumDisplayMonitors
SystemParametersInfoW
GetMonitorInfoW
SetRectEmpty
CopyRect
GetClassNameW
DefWindowProcW
SendMessageW
GetClassInfoW
GetWindow
GetLastActivePopup

gdi32

ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
TextOutW
PtVisible
RectVisible
CreatePen
GetStockObject
CreateBitmap
CreateDIBitmap
GetClipBox
SetMapMode
RestoreDC
SaveDC
DeleteDC
SelectObject
SetBkColor
SetTextColor
DeleteObject
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
GetDeviceCaps
GetObjectW
CreateFontIndirectW
CreatePatternBrush
CreateSolidBrush

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegCreateKeyExW
RegQueryValueExW
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegEnumValueW

shell32

ShellExecuteW

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoFreeUnusedLibraries
StringFromGUID2
CoInitialize
CoCreateInstance
CoUninitialize
CoCreateGuid

oleaut32

SysFreeString
SysAllocString
VariantClear
VariantChangeType
VariantInit

oleacc

CreateStdAccessibleObject
LresultFromObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Quick NFT Claiming Tool/illustrate.txt
Quick NFT Claiming Tool/videoplayback.mp4

Sharing

General

Malware Config

Signatures

Files

fa31fe17df958f5866218f637a88f547

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

06:ea:0d:de:d5:5e:c1:e1:a2:9f:c5:fb:5d:ab:4f:b2Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

05:aa:43:30:0d:17:67:ac:12:49:43:54:21:65:bb:9eCertificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

6d:b5:40:df:19:f8:46:88:b6:17:7d:2a:cd:da:0b:38:7b:01:f7:32:1d:d1:6a:18:52:01:e4:ce:ea:77:35:28Signer

ab:7e:1e:aa:fe:30:c0:d9:77:f5:96:43:43:0d:7f:32:c8:15:01:99Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ws2_32

Exports

Exports

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.rdata Size: 2.0MB - Virtual size: 2.0MB

.data Size: 1.3MB - Virtual size: 1.3MB

_RDATA Size: 2KB - Virtual size: 1KB

.rsrc Size: 546KB - Virtual size: 546KB

.reloc Size: 125KB - Virtual size: 125KB

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 294KB - Virtual size: 294KB

.rsrc Size: 3.1MB - Virtual size: 3.1MB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 294KB - Virtual size: 294KB

.rsrc Size: 274KB - Virtual size: 274KB

.reloc Size: 512B - Virtual size: 12B

c8d9498f53878d87b985b8cc7b8f010c

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

06:ea:0d:de:d5:5e:c1:e1:a2:9f:c5:fb:5d:ab:4f:b2
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

05:aa:43:30:0d:17:67:ac:12:49:43:54:21:65:bb:9e
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

6d:b5:40:df:19:f8:46:88:b6:17:7d:2a:cd:da:0b:38:7b:01:f7:32:1d:d1:6a:18:52:01:e4:ce:ea:77:35:28
Signer

ab:7e:1e:aa:fe:30:c0:d9:77:f5:96:43:43:0d:7f:32:c8:15:01:99
Signer

.text
Size: 3.4MB - Virtual size: 3.4MB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 1.3MB - Virtual size: 1.3MB

_RDATA
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 546KB - Virtual size: 546KB

.reloc
Size: 125KB - Virtual size: 125KB

.text
Size: 294KB - Virtual size: 294KB

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 294KB - Virtual size: 294KB

.rsrc
Size: 274KB - Virtual size: 274KB

.reloc
Size: 512B - Virtual size: 12B

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

62:d5:0d:68:b5:ee:db:06:98:e1:6b:8a:88:47:62:e0
Certificate

0c:e6:c8:fd:65:2a:7a:09:0b:44:7d:c8:3f:64:89:23:ad:93:e9:43
Signer

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 96KB - Virtual size: 94KB

.data
Size: 384KB - Virtual size: 389KB

.idata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 24KB - Virtual size: 22KB

.reloc
Size: 36KB - Virtual size: 35KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

62:d5:0d:68:b5:ee:db:06:98:e1:6b:8a:88:47:62:e0
Certificate

3a:47:24:c3:c9:be:44:de:f0:c0:ae:75:2d:d8:3f:9b:cf:8b:ec:bf
Signer

.text
Size: 756KB - Virtual size: 752KB

.rdata
Size: 116KB - Virtual size: 112KB

.data
Size: 132KB - Virtual size: 139KB

.rsrc
Size: 24KB - Virtual size: 21KB

.reloc
Size: 32KB - Virtual size: 30KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate