PCRemoteReceiverSetup_7_5_16[.]exe

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/SDL2.dll
unpack001/SDL2_image.dll
unpack001/avcodec-59.dll
unpack001/avformat-59.dll
unpack001/avutil-57.dll
unpack001/driver/usbmmidd_v2/deviceinstaller64.exe
unpack001/driver/usbmmidd_v2/x64/usbmmIdd.dll
unpack001/emulators/virtuanes/English.vlp
unpack001/emulators/virtuanes/VirtuaNES.exe
unpack001/libjpeg-9.dll
unpack001/libpng16-16.dll
unpack001/libtiff-5.dll
unpack001/libwebp-7.dll
unpack001/swresample-4.dll
unpack001/swscale-6.dll
unpack001/zlib1.dll

PCRemoteReceiverSetup_7_5_16.exe

IMPHASH 6e7f9a29f2c85394521a08b9f31f6275
SHA256 b1707825c0f2fde7bfdbb5f4a4cef4002a935b2c9edfa93f512127f430cfbdd0
MD5 ca3eb78b4bfcd2388bf49a980f1053b7
SHA1 81c60fff0a2f0bf8e8ffc4161b0ed00fd3353a9f
SHA512 5f02bd4cab05cd242f3605ab027c11d28b855bd9180ff52aa14963248e2778cacc36466dcca684c0c17c9bab874f12b3a3e2d3ca655570831101cfc5c1022e51
SSDEEP 1572864:DGr9D2YYvt8/7Z9lRA9lg5yJRotDthtYt/1vv+W5x/t6rRYyjvZXTpoZC86:DO9DoFE3lKYgJ1cW5+ruyjv1Nos86
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

b8:7e:40:fa:1e:e4:71:0a:b1:b4:85:66:2b:a6:11:27:0d:92:2f:c5:bc:44:ef:42:1f:a8:4f:4f:25:97:27:1f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 2, 2024

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

5e:c9:ed:d5:94:78:85:7b:d5:61:c6:28

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 7, 2023 - Sep 6, 2024

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 2, 2023 - Dec 4, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

4

Entry point

13509

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetWindowLongW GetSysColor SetWindowPos PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersion GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW ExitProcess CopyFileW GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/InstallOptions.dll

IMPHASH 4b45b7e00344a87332fbd12653854d1a
SHA256 b34fb342f21d690aac024b6f48a597e78d15791ef480ac55159cd585d0f64af7
MD5 0a9fb96a7579b685ec36b17fc354e6a3
SHA1 355754104dd47d5fcf8918dee0dc2e2ee53390a6
SHA512 67870206fa7f1e7df45c8c1bc2f51fb430f0a048a2bdb55a4a41525388ca3b50203784537f139169705a03db4bb13b591162a79a5d2df81a4d11fd849615c86b
SSDEEP 384:EFC43tPegZ3eBaRwCPOYY7nNYXCg/Yosa:EMTgZ3eBTCmrnNAo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentDirectoryW GlobalUnlock GlobalLock GetModuleHandleW CloseHandle SetEndOfFile SetCurrentDirectoryW GetPrivateProfileStringW GetPrivateProfileIntW MultiByteToWideChar ReadFile GetFileSize CreateFileW lstrcmpiW lstrcatW lstrcpynW WritePrivateProfileStringW lstrlenW lstrcpyW GlobalFree GlobalAlloc WriteFile SetFilePointer

user32

LoadCursorW SetWindowRgn GetDlgCtrlID CloseClipboard DrawFocusRect OpenClipboard DrawTextW SetCursor LoadIconW LoadImageW SetWindowLongW CreateWindowExW MapDialogRect SetWindowPos GetWindowRect CreateDialogParamW GetClientRect ShowWindow GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW CallWindowProcW PostMessageW MessageBoxW GetSysColor CharNextW wsprintfW GetWindowTextW SetWindowTextW SendMessageW GetWindowLongW EnableMenuItem PtInRect MapWindowPoints GetClipboardData

gdi32

SetTextColor DeleteObject CombineRgn CreateRectRgn GetDIBits SelectObject CreateCompatibleDC GetObjectW

shell32

SHGetDesktopFolder SHGetPathFromIDListW ShellExecuteW SHBrowseForFolderW

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/LangDLL.dll

IMPHASH 3e8d18bb71c7ebbda2ddc2a4bb03547b
SHA256 09acfc5ee34a1dfa1af3a9d34f00c3b1327b56641feebd536e13752349c08ac8
MD5 014a3be4a7c1ccb217916dbf4f222bd1
SHA1 9b4c41eb0e84886beb5591d8357155e27f9c68ed
SHA512 0f3d1bf548e29a136150b699665a3f22c6ea2821701737363fa2920b51c391d735f1eae92dea8af655e7d07304bd3d06e4aff3f5a82fa22bcf5d1690013eb922
SSDEEP 48:S46+/iTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mMofjLl:zsuPbOBtWZBV8jAWiAJCdv2CmfL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 7a9ddee34562cd3703f1502b5c70e99cd5bba15de2b6845a3555033d7f6cb2a5
MD5 564bb0373067e1785cba7e4c24aab4bf
SHA1 7c9416a01d821b10b2eef97b80899d24014d6fc1
SHA512 22c61a323cb9293d7ec5c7e7e60674d0e2f7b29d55be25eb3c128ea2cd7440a1400cee17c43896b996278007c0d247f331a9b8964e3a40a0eb1404a9596c4472
SSDEEP 192:nenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBDIwL:n8+Qlt70Fj/lQRY/9VjjfL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10719

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

MonectMediaCenter.exe

IMPHASH 735d8fb488827d770c95525fe7b41ea5
SHA256 ef2b810a55b58c71ef3fb184b3949f4d108027b8f1f3a18f4a646b265547ff5b
MD5 55b6cb3f16a0f837179c7c1c241e1c57
SHA1 41ba6d07f19d4155afb815882d80c9ac74349a7e
SHA512 6531b179b00e8879a7551819d54c6d448ca71fa29764f1b5a40037d1580f8ff8b1b363c09dfa4be8a809b34204fc21ffb269d2c4a6f45b831c2c1e0d637adfa9
SSDEEP 1536:SZ60XWFeE3F4UvmE2T9BmUM16R6FJ+rw1Y1mLE3hYDQuSKiVpmrMz00tXWBgOxw/:GHXWFBFlcBBXHwD+ueMrUtmBgO2/w0
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

4a:2b:7a:4e:aa:fd:ca:56:bf:e8:fa:12:82:0c:78:6b:42:81:2f:40:e2:00:56:7a:9d:30:1b:03:99:3a:16:ce

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 2, 2024

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

5e:c9:ed:d5:94:78:85:7b:d5:61:c6:28

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 7, 2023 - Sep 6, 2024

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 2, 2023 - Dec 4, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

65944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\monec\Documents\workspace\Monect_host\x64\Release\MonectMediaCenter.pdb

sdl2

SDL_SetWindowSize SDL_SetWindowFullscreen SDL_CondBroadcast SDL_WaitThread SDL_Delay SDL_CloseAudio SDL_CreateThread SDL_PauseAudio SDL_OpenAudio SDL_getenv SDL_AddTimer SDL_SetWindowPosition SDL_UnlockMutex SDL_CondSignal SDL_LockMutex SDL_Init SDL_CreateCond SDL_CreateMutex SDL_UpdateYUVTexture SDL_CreateTexture SDL_GetWindowSize SDL_GetWindowMaximumSize SDL_Quit SDL_CondWait SDL_DestroyRenderer SDL_PollEvent SDL_setenv SDL_SetHint SDL_GetWindowWMInfo SDL_CreateRenderer SDL_ShowCursor SDL_CreateWindow SDL_GetDesktopDisplayMode SDL_RenderPresent SDL_RenderClear SDL_PushEvent SDL_DestroyTexture SDL_RenderCopyEx SDL_QueryTexture SDL_RWFromMem SDL_memcpy SDL_PauseAudioDevice SDL_OpenAudioDevice SDL_memset SDL_GetError SDL_Log SDL_QueueAudio SDL_ClearQueuedAudio SDL_GetQueuedAudioSize SDL_CloseAudioDevice SDL_DestroyWindow

sdl2_image

IMG_LoadTexture IMG_LoadTexture_RW IMG_Quit IMG_Init

ws2_32

htonl ntohl closesocket ntohs bind WSAGetLastError getsockopt setsockopt WSAStartup socket listen accept WSARecv WSASend recvfrom sendto htons

shlwapi

StrCmpW PathFileExistsW StrRChrW

avcodec-59

av_packet_alloc av_packet_free av_packet_ref av_packet_unref av_parser_close av_parser_init av_parser_parse2 avcodec_alloc_context3 avcodec_close avcodec_find_decoder avcodec_free_context avcodec_open2 avcodec_parameters_to_context avcodec_receive_frame avcodec_send_packet

avutil-57

av_dict_get av_fast_malloc av_frame_alloc av_frame_free av_frame_unref av_free av_freep av_get_bytes_per_sample av_get_channel_layout_nb_channels av_get_default_channel_layout av_get_sample_fmt_name av_gettime av_image_alloc av_log av_log_set_callback av_malloc av_mallocz av_samples_get_buffer_size

swscale-6

sws_getCachedContext sws_scale

avformat-59

av_dump_format av_read_frame avformat_alloc_context avformat_close_input avformat_find_stream_info avformat_network_deinit avformat_open_input avformat_seek_file

swresample-4

swr_alloc_set_opts swr_convert swr_free swr_init

kernel32

FindClose CopyFileW SetFileAttributesW DeleteFileW RemoveDirectoryW GetModuleFileNameW LoadLibraryW GetComputerNameW CreateEventW ResetEvent SetEvent ReleaseMutex ExitProcess CreateMutexW GetFileSizeEx CreateFileMappingW MapViewOfFile UnmapViewOfFile FindResourceW GetModuleHandleW FindFirstFileW LockResource SizeofResource WideCharToMultiByte GetTickCount64 InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCommandLineW Sleep SetNamedPipeHandleState WaitNamedPipeW CreateFileW DisconnectNamedPipe FlushFileBuffers WaitForSingleObject WriteFile ReadFile HeapFree HeapAlloc GetProcessHeap ConnectNamedPipe GetLastError CreateNamedPipeW OutputDebugStringA GetProcAddress FindNextFileW InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CloseHandle LoadResource CreateThread

user32

ReleaseDC GetDC GetWindowLongPtrW CreateWindowExW RegisterClassW LoadCursorW SetWindowPos LoadIconW DefWindowProcW PostQuitMessage SetWindowLongPtrW ShowWindow UpdateLayeredWindow DispatchMessageW TranslateMessage GetMessageW UpdateWindow

gdi32

SelectObject CreateCompatibleBitmap CreateCompatibleDC DeleteDC DeleteObject GetDeviceCaps

advapi32

RegCreateKeyExW RegOpenKeyExW InitializeSecurityDescriptor SetSecurityDescriptorDacl RegCloseKey RegQueryInfoKeyW RegEnumValueW

shell32

CommandLineToArgvW ord165

ole32

CoInitialize

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

gdiplus

GdipCreateFromHDC GdipDrawLine GdipDeletePen GdipCreatePen1 GdipReleaseDC GdiplusShutdown GdipDeleteGraphics GdipCreateSolidFill GdiplusStartup GdipAlloc GdipFree GdipDeleteBrush GdipGraphicsClear GdipSetCompositingMode GdipFillRectangleI

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_copy __std_exception_destroy __C_specific_handler memcpy _CxxThrowException __current_exception __current_exception_context memset memmove

api-ms-win-crt-heap-l1-1-0

free _set_new_mode malloc _callnewh calloc

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode __stdio_common_vsnprintf_s __stdio_common_vswprintf_s __acrt_iob_func __stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

_beginthreadex terminate _configure_wide_argv _set_app_type _register_thread_local_exe_atexit_callback _c_exit _initialize_wide_environment _exit _initialize_onexit_table _seh_filter_exe _get_wide_winmain_command_line _register_onexit_function _initterm_e _initterm _endthreadex exit _invalid_parameter_noinfo _errno _crt_atexit _invalid_parameter_noinfo_noreturn _cexit

api-ms-win-crt-string-l1-1-0

wcscat_s strcpy_s wcsnlen wcscpy_s

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-math-l1-1-0

__setusermatherr rint

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

MonectRuntimeCheck.exe

IMPHASH a4b941ee4cb98eb0b23eb0012f4e16b8
SHA256 7a3846a11ebe48d769c2983931fad9c71a924b2f0d892a478aeff528e108883e
MD5 855868707c8daba66438545fba07b490
SHA1 cb28feed2dc91fbb47dd3da4527ac7fb00a04f25
SHA512 df3cd7a00eb562412b204cbb8e06cb31917b665f01cb9f521a8ba66ede8440b208f705da17159048e34327ca00d0c1b926bd1a78c0543c272203cb749c55dca3
SSDEEP 768:kLnW4UkQyOM9aV1+qXUpv9Sbh9SbPvNnr2u+vTS+ST6nkM:k7hUFyOyaV1+f9C4vNrxk/me
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

3f:5e:df:80:1d:8b:7e:ee:dc:d6:9c:f1:74:97:ba:7f:44:67:cc:57:0a:ae:8d:89:d6:64:92:bd:f1:df:50:5f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 2, 2024

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

5e:c9:ed:d5:94:78:85:7b:d5:61:c6:28

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 7, 2023 - Sep 6, 2024

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 2, 2023 - Dec 4, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

7224

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\monec\Documents\workspace\Monect_host\x64\Release\MonectRuntimeCheck.pdb

shlwapi

StrCmpW StrRChrW

kernel32

LoadLibraryW GetSystemDirectoryW CreateProcessW Sleep CloseHandle GetModuleFileNameW GetProcAddress FreeLibrary GetCurrentProcess TerminateProcess IsProcessorFeaturePresent RtlCaptureContext SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetModuleHandleW GetStartupInfoW IsDebuggerPresent InitializeSListHead

user32

MessageBoxW

advapi32

RegCreateKeyExW RegOpenKeyExW RegSetValueExW RegEnumValueW RegQueryInfoKeyW RegCloseKey

shell32

CommandLineToArgvW

vcruntime140

memset __current_exception_context memcpy __current_exception __C_specific_handler

api-ms-win-crt-string-l1-1-0

wcscpy_s wcsnlen

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vswprintf_s __p__commode

api-ms-win-crt-runtime-l1-1-0

_get_wide_winmain_command_line _cexit _c_exit _register_thread_local_exe_atexit_callback _exit _initialize_wide_environment _configure_wide_argv exit _initialize_onexit_table _register_onexit_function _crt_atexit terminate _initterm_e _invalid_parameter_noinfo _errno _initterm _set_app_type _seh_filter_exe

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

MonectServer.exe

IMPHASH 21c5c9eb4e30c84d406fffdd4a3f89f4
SHA256 68c45fb8ef63e88d843a902444c7abba285244b88711f75e0e5c5836535cb46f
MD5 67d3e56a71739c8da1b63f67ff0b2d3e
SHA1 00fd96b988ffe43ca6f82509de75ca8cdd7a7d2f
SHA512 68e83c3203b6ed6f839f88820789e18e48ad9984ee5a259c25467eadeea8cadb1cd838a21eb21d2badec9944dfb55b7e12eaab804c0c4a1d85d1b6201b24701c
SSDEEP 1536:glOA1XM6FlHn11JG+oDHFc2xlkC3xM/mi:glOApRH13G+0Hu2xqC3i/B
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

53:84:d2:29:1c:02:17:fb:b8:db:c7:78:e9:ca:78:d5:32:af:8e:16:23:35:cc:b2:08:d4:fb:1b:d4:75:19:9c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 2, 2024

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

5e:c9:ed:d5:94:78:85:7b:d5:61:c6:28

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 7, 2023 - Sep 6, 2024

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 2, 2023 - Dec 4, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

35432

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\monec\Documents\workspace\Monect_host\x64\Release\MonectServer.pdb

shlwapi

ord12 StrCmpW StrRChrW

d3d11

D3D11CreateDevice

ws2_32

ntohl htonl ntohs

gdiplus

GdipBitmapLockBits GdipBitmapUnlockBits GdiplusShutdown GdipGetImagePixelFormat GdipCreateBitmapFromHBITMAP GdipCreateBitmapFromScan0 GdipGetImageHeight GdipGetImageWidth GdipSaveImageToStream GdipCloneImage GdipDisposeImage GdipAlloc GdipFree GdiplusStartup GdipGetImageEncodersSize GdipGetImageEncoders

kernel32

GetSystemTimeAsFileTime GetCurrentProcessId IsProcessorFeaturePresent TerminateProcess InitializeSListHead SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext IsDebuggerPresent GetStartupInfoW WaitForMultipleObjects Sleep GlobalSize QueryPerformanceFrequency QueryPerformanceCounter GetModuleHandleW GetCurrentProcess InitializeCriticalSection DeleteCriticalSection CloseHandle CreateThread CreateNamedPipeW GetLastError ConnectNamedPipe GetProcessHeap HeapAlloc HeapFree ReadFile WriteFile FlushFileBuffers DisconnectNamedPipe EnterCriticalSection CreateFileW LeaveCriticalSection WaitNamedPipeW SetNamedPipeHandleState GetModuleFileNameW LoadLibraryW LocalAlloc CreateEventW LocalFree ResetEvent WaitForSingleObject ExitProcess VerSetConditionMask VerifyVersionInfoW GetProcAddress SetEvent ReleaseMutex FreeLibrary GlobalAlloc GlobalLock GlobalUnlock GetCurrentThreadId CreateMutexW OpenFileMappingW MapViewOfFile UnmapViewOfFile

user32

SetDisplayConfig SetThreadDesktop GetMessageExtraInfo SendInput SetCursorPos OpenClipboard EmptyClipboard SetClipboardData CloseClipboard EnumDisplayMonitors GetMessageW UnhookWinEvent TranslateMessage DispatchMessageW OpenDesktopW ChangeDisplaySettingsW GetSystemMetrics GetCursorInfo GetDC ReleaseDC LoadCursorW CopyIcon GetIconInfo DestroyCursor EnumDisplayDevicesW GetMonitorInfoW EnumDisplaySettingsW PostThreadMessageW GetUserObjectInformationW OpenInputDesktop CloseDesktop SetWinEventHook

gdi32

CreateDIBSection DeleteObject SelectObject BitBlt DeleteDC CreateCompatibleDC

advapi32

InitializeSecurityDescriptor SetSecurityDescriptorDacl

ole32

CreateStreamOnHGlobal GetHGlobalFromStream

oleaut32

OleCreatePictureIndirect

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove memcpy _CxxThrowException __C_specific_handler __std_exception_destroy __std_exception_copy __std_terminate __current_exception_context memset __current_exception

api-ms-win-crt-heap-l1-1-0

_set_new_mode _callnewh malloc calloc free

api-ms-win-crt-runtime-l1-1-0

_errno _invalid_parameter_noinfo_noreturn _invalid_parameter_noinfo terminate _crt_atexit _register_onexit_function _seh_filter_exe _set_app_type _initialize_onexit_table _configure_wide_argv _initialize_wide_environment _get_wide_winmain_command_line _initterm _initterm_e exit _exit _cexit _c_exit _register_thread_local_exe_atexit_callback

api-ms-win-crt-string-l1-1-0

wcscpy_s wcsnlen _wcsicmp

api-ms-win-crt-math-l1-1-0

ceilf __setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

MonectServerService.exe

IMPHASH 0be9d7ed7110ff6cffcfd3e03e356323
SHA256 8ee17b3085f769d34a7da47fb61d29f9c46326c0be1e52f29a87a3cdb0c11f54
MD5 ff7e7658509e639ee022b9a079df1c52
SHA1 052c6f08e11ab143d653f3db27390da0673ac1d2
SHA512 f7d4ffc09c1e53bf5cc985d470ed488578c9935c2d9ba8176217ae76a929ffa0b634d5f2503c57e7b8a10ff4e42e34c5556cab79be825f45580e63a4b85b5cef
SSDEEP 49152:cIVwASOCGtlqS/IU6i7tRywB8kldM65y0oZOusM1TjLOh5PhP3fo1rriPNnmBYZk:5Q+Xl5EhmA1/GnmBY5I
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

5d:28:f0:ea:b5:4b:61:a4:2a:04:ec:d0:7b:3f:21:b9:79:f3:fb:cd:ab:ff:99:c5:df:33:94:a2:20:07:e0:4d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 2, 2024

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

5e:c9:ed:d5:94:78:85:7b:d5:61:c6:28

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 7, 2023 - Sep 6, 2024

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 2, 2023 - Dec 4, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

1904592

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\monec\Documents\workspace\Monect_host\x64\Release\MonectServerService.pdb

shlwapi

PathFindExtensionW StrStrW StrCmpW PathFindFileNameW StrRChrW

wtsapi32

WTSEnumerateSessionsW WTSFreeMemory

hid

HidP_GetCaps HidP_GetButtonCaps HidP_GetValueCaps HidP_GetLinkCollectionNodes HidD_GetHidGuid HidD_GetAttributes HidD_GetPreparsedData HidD_FreePreparsedData

setupapi

SetupDiGetDeviceInterfaceDetailW SetupDiEnumDeviceInterfaces SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupDiGetDeviceInterfaceDetailA

iphlpapi

GetAdaptersAddresses GetIpAddrTable NotifyAddrChange

bthprops.cpl

BluetoothGetRadioInfo BluetoothFindFirstRadio BluetoothFindRadioClose BluetoothEnableIncomingConnections BluetoothIsDiscoverable BluetoothEnableDiscovery

powrprof

SetSuspendState

ws2_32

__WSAFDIsSet ioctlsocket WSACleanup WSAIoctl WSASetLastError getpeername freeaddrinfo send recv inet_ntop getsockopt WSAResetEvent WSAGetOverlappedResult WSAWaitForMultipleEvents WSACreateEvent recvfrom sendto setsockopt getaddrinfo WSARecv WSASend accept listen WSASetServiceW getsockname closesocket bind socket WSAStartup gethostname htons htonl select WSAGetLastError ntohl ntohs connect

wldap32

ord79 ord200 ord33 ord32 ord27 ord301 ord22 ord41 ord50 ord45 ord60 ord211 ord46 ord217 ord143 ord30 ord26 ord35

crypt32

CertGetCertificateChain CertFreeCertificateChainEngine CertCreateCertificateChainEngine CryptQueryObject CertGetNameStringA CertFindExtension CertAddCertificateContextToStore CryptDecodeObjectEx PFXImportCertStore CryptStringToBinaryA CertFreeCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CertOpenStore CertFreeCertificateChain

normaliz

IdnToAscii

bcrypt

BCryptSetProperty BCryptDestroyKey BCryptCloseAlgorithmProvider BCryptDecrypt BCryptGetProperty BCryptEncrypt BCryptGenerateSymmetricKey BCryptCreateHash BCryptHashData BCryptFinishHash BCryptDestroyHash BCryptOpenAlgorithmProvider

kernel32

TerminateProcess DeleteFiber GetSystemTimeAsFileTime GetModuleHandleExW GetConsoleMode TlsSetValue TlsGetValue TlsAlloc GetCurrentThreadId InitializeCriticalSectionAndSpinCount RtlVirtualUnwind GetEnvironmentVariableW WideCharToMultiByte PeekNamedPipe GetFileType GetStdHandle SetConsoleMode ReadConsoleA ReadConsoleW SetUnhandledExceptionFilter IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsDebuggerPresent InitializeSListHead TlsFree RtlCaptureContext ConvertFiberToThread RtlLookupFunctionEntry GetEnvironmentVariableA MultiByteToWideChar WaitForSingleObjectEx MoveFileExA QueryPerformanceCounter VerifyVersionInfoA LoadLibraryA GetModuleHandleA GetSystemDirectoryA QueryPerformanceFrequency SleepEx InitializeCriticalSectionEx FormatMessageA SetLastError GetModuleHandleW CreateFileA InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CloseHandle CreateThread CreateNamedPipeW GetLastError ConnectNamedPipe GetProcessHeap HeapAlloc HeapFree ReadFile WriteFile FlushFileBuffers DisconnectNamedPipe CreateFileW WaitNamedPipeW UnhandledExceptionFilter FindFirstFileW FindNextFileW FindClose CopyFileW GetModuleFileNameW LoadLibraryW lstrlenW CreateProcessW OpenProcess GetTickCount WaitForSingleObject Sleep LocalAlloc CreateEventW LocalFree ResetEvent ExitProcess GetComputerNameW GetProcAddress FreeLibrary GetPrivateProfileIntW SetEvent VerSetConditionMask VerifyVersionInfoW WaitForMultipleObjects lstrcmpA OpenEventW GetTickCount64 GetSystemTime GetFileSizeEx SetFilePointerEx GetLogicalDriveStringsW GetDriveTypeW GetDiskFreeSpaceW GetFileSize DeviceIoControl GetOverlappedResult GetCurrentProcess lstrcmpiW CreateMutexW CreateFileMappingW MapViewOfFile UnmapViewOfFile ReleaseMutex GetCurrentProcessId SetNamedPipeHandleState

user32

GetUserObjectInformationW GetProcessWindowStation RegisterDeviceNotificationW PostQuitMessage EndPaint BeginPaint DispatchMessageW TranslateMessage GetMessageW UpdateWindow ShowWindow CreateWindowExW RegisterClassExW LoadCursorW LoadIconW SendMessageW MessageBoxW UnregisterDeviceNotification wsprintfW GetWindowRect IsZoomed GetForegroundWindow GetKeyState SetWindowPos MapVirtualKeyW ExitWindowsEx DefWindowProcW

advapi32

RegEnumKeyExW DeregisterEventSource ReportEventW RegisterEventSourceW SetServiceStatus RegisterServiceCtrlHandlerExW DeleteService OpenServiceW CloseServiceHandle CreateServiceW OpenSCManagerW StartServiceCtrlDispatcherW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegDeleteKeyW RegCreateKeyExW RegOpenKeyExW RegEnumKeyW RegDeleteValueW RegSetValueExA RegSetValueExW RegEnumValueA RegQueryInfoKeyA RegEnumValueW RegQueryInfoKeyW RegCloseKey SetSecurityDescriptorDacl InitializeSecurityDescriptor SetTokenInformation CreateProcessAsUserW RegCreateKeyW RegDeleteTreeW CryptAcquireContextA CryptReleaseContext CryptGetHashParam CryptGenRandom CryptCreateHash CryptHashData CryptDestroyHash CryptDestroyKey CryptImportKey CryptEncrypt CryptAcquireContextW DuplicateTokenEx

shell32

SHFileOperationW ShellExecuteW SHGetFileInfoW ord165 SHGetKnownFolderPath

ole32

CoTaskMemFree CoSetProxyBlanket CoInitialize CoUninitialize CoInitializeSecurity CoInitializeEx CoCreateInstance CoCreateGuid

oleaut32

VariantInit SysFreeString VariantClear SysAllocString

msvcp140

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?uncaught_exception@std@@YA_NXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ _Cnd_do_broadcast_at_thread_exit _Thrd_detach ?_Throw_Cpp_error@std@@YAXH@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?_Xbad_alloc@std@@YAXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?_Xlength_error@std@@YAXPEBD@Z ??7ios_base@std@@QEBA_NXZ ?good@ios_base@std@@QEBA_NXZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_purecall strrchr __std_terminate __std_exception_copy __std_exception_destroy strchr strstr memcpy memset _CxxThrowException __current_exception_context __current_exception __C_specific_handler wcsstr memchr memcmp memmove

api-ms-win-crt-heap-l1-1-0

realloc _callnewh malloc calloc _set_new_mode free

api-ms-win-crt-runtime-l1-1-0

signal _invalid_parameter_noinfo _initialize_onexit_table _errno _register_onexit_function strerror_s raise _exit _crt_atexit perror terminate _beginthreadex _getpid _register_thread_local_exe_atexit_callback _invalid_parameter_noinfo_noreturn _c_exit __p___wargv __p___argc _cexit exit _seh_filter_exe strerror __sys_nerr _set_app_type _configure_wide_argv _initialize_wide_environment _initterm_e _initterm _get_initial_wide_environment

api-ms-win-crt-string-l1-1-0

strpbrk _strnicmp isspace isupper strspn strcspn strcmp wcsnlen wcscpy_s strcpy_s wcsncpy_s wcscat_s tolower _wcsicmp strnlen strncmp _strdup strncpy _strlwr_s _stricmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf fputs fopen fputc fflush _set_fmode fgets fwrite __stdio_common_vsscanf _lseeki64 fread fseek __p__commode _read _write fclose ferror _fileno _setmode _close _wfopen _open __stdio_common_vsprintf_s ftell __stdio_common_vswprintf_s __stdio_common_vfprintf __stdio_common_vsprintf __acrt_iob_func feof

api-ms-win-crt-math-l1-1-0

modf __setusermatherr

api-ms-win-crt-convert-l1-1-0

strtoul wcstombs strtoll mbstowcs_s _wtoi64 wcstombs_s atoi strtol

api-ms-win-crt-time-l1-1-0

_gmtime64_s _gmtime64 _time64

api-ms-win-crt-utility-l1-1-0

srand rand qsort

api-ms-win-crt-filesystem-l1-1-0

_fstat64 _access _stat64i32 _stat64 _unlink

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

PCRemoteReceiver.exe

IMPHASH a193a729fd118c1420144d53fd633ab6
SHA256 22720868281ba4a699ebe9e34a94865bfb40207b386672d0afa4e4daba94bc0d
MD5 1f131b830b107f7ff0e12be96cac1eb1
SHA1 1abb094ccb683d7e5ab18c1fe3bc37ad777accba
SHA512 c4df0294a1b25f96de69bf228f6b8612a9ab6f048110de441f83ef088296cb7106cc1dd125b32f4784395f99f579a4090c35a6db801d8ee442e57344858142eb
SSDEEP 98304:n+iVLTjmGW8YRlXXe4nazbKBZ1P9BAvzycT6BKig+Z6elPq:nhzmGQRlXX5azWH1qKgig+Aepq
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

fe:b3:5d:09:09:a9:cd:6b:d4:85:80:9c:67:aa:7d:d0:66:5e:ed:e8:55:fa:eb:d4:77:40:eb:c2:3e:46:ba:11

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 2, 2024

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

5e:c9:ed:d5:94:78:85:7b:d5:61:c6:28

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 7, 2023 - Sep 6, 2024

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 2, 2023 - Dec 4, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

4920432

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\monec\Documents\workspace\Monect_host\x64\Release\PCRemoteReceiver.pdb

iphlpapi

GetAdaptersAddresses

avcodec-59

av_packet_alloc av_packet_free av_parser_close av_parser_init av_parser_parse2 avcodec_alloc_context3 avcodec_close avcodec_find_decoder avcodec_free_context avcodec_open2 avcodec_receive_frame avcodec_send_packet

avutil-57

av_buffer_ref av_buffer_unref av_frame_alloc av_frame_free av_freep av_get_default_channel_layout av_hwdevice_ctx_create av_image_alloc av_log_set_callback av_samples_get_buffer_size

swscale-6

sws_freeContext sws_getCachedContext sws_scale

swresample-4

swr_alloc_set_opts swr_convert swr_free swr_init

d3d11

D3D11CreateDevice

xinput1_4

ord2 ord3

sdl2

SDL_CloseAudioDevice SDL_GetQueuedAudioSize SDL_FreeSurface SDL_RWFromMem SDL_PauseAudioDevice SDL_OpenAudioDevice SDL_memset SDL_GetError SDL_Log SDL_QueueAudio SDL_ClearQueuedAudio SDL_Init

sdl2_image

IMG_Load_RW

crypt32

CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty

kernel32

GetVersionExW lstrcmpA lstrcpyW GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW SetThreadPriority ResumeThread GetFileSize GetFullPathNameW GetVolumeInformationW LockFile SetEndOfFile SetFilePointer UnlockFile DuplicateHandle lstrcmpiW GetThreadLocale GlobalFlags GlobalReAlloc GlobalHandle LocalReAlloc GlobalGetAtomNameW FileTimeToSystemTime GetCurrentDirectoryW GetLocaleInfoW GetSystemDefaultUILanguage GetFileAttributesW FileTimeToLocalFileTime GetFileAttributesExW GetFileTime SystemTimeToTzSpecificLocalTime SetErrorMode GetTempPathW GetWindowsDirectoryW SearchPathW GetTickCount64 GetProfileIntW FindResourceExW GetTempFileNameW GetUserDefaultLCID WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InitializeSListHead IsDebuggerPresent GetStartupInfoW WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW FindFirstFileExW GetOEMCP IsValidCodePage GetConsoleOutputCP SetFilePointerEx GetTimeZoneInformation EnumSystemLocalesW IsValidLocale LCMapStringW GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc SetStdHandle VirtualQuery HeapQueryInformation GetCommandLineA PeekNamedPipe GetFileInformationByHandle GetDriveTypeW SetConsoleCtrlHandler FreeLibraryAndExitThread ExitThread RtlUnwindEx GetStringTypeW GetCPInfo CompareStringEx LCMapStringEx RtlPcToFileHeader TryAcquireSRWLockExclusive GetExitCodeThread WaitForSingleObjectEx GetLocaleInfoEx RaiseException OutputDebugStringW GetCurrentThread OutputDebugStringA GetProcAddress FreeLibrary InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CloseHandle CreateThread CreateNamedPipeW GetLastError ConnectNamedPipe GetProcessHeap HeapAlloc HeapFree ReadFile WriteFile FlushFileBuffers DisconnectNamedPipe CreateFileW WaitNamedPipeW SetNamedPipeHandleState FindFirstFileW FindNextFileW FindClose CopyFileW DeleteFileW GetModuleFileNameA GetModuleFileNameW LoadLibraryW LocalAlloc CreateEventW LocalFree ResetEvent WaitForSingleObject ExitProcess GetComputerNameW lstrlenW SizeofResource LockResource LoadResource FindResourceW MultiByteToWideChar GlobalUnlock GlobalFree GlobalAlloc GlobalLock FormatMessageA FormatMessageW WideCharToMultiByte TlsAlloc InitializeCriticalSectionAndSpinCount Sleep GetSystemTimeAsFileTime WaitForMultipleObjects TerminateThread QueueUserAPC SetEvent SleepEx PostQueuedCompletionStatus CreateIoCompletionPort SetWaitableTimer GetQueuedCompletionStatus SetLastError VerSetConditionMask VerifyVersionInfoW CreateWaitableTimerW GetModuleHandleA TlsGetValue TlsSetValue TlsFree OpenEventW GetSystemInfo GetModuleHandleExW QueryPerformanceFrequency QueryPerformanceCounter LoadLibraryA CreateProcessW GetCurrentProcess GetProcessId GetCommandLineW GetUserDefaultUILanguage OpenMutexW CreateMutexW GetFileSizeEx InitializeCriticalSectionEx HeapSize HeapReAlloc DecodePointer GetSystemTime SystemTimeToFileTime InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared GetCurrentThreadId VirtualAlloc VirtualProtect VirtualFree SwitchToFiber DeleteFiber CreateFiberEx GetSystemDirectoryA GetEnvironmentVariableW GetACP GetStdHandle GetFileType GetModuleHandleW ConvertFiberToThread ConvertThreadToFiberEx GetCurrentProcessId RtlVirtualUnwind GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW CreateActCtxW ActivateActCtx DeactivateActCtx FindActCtxSectionStringW QueryActCtxW GlobalSize MulDiv EncodePointer GetSystemDirectoryW LoadLibraryExW GlobalDeleteAtom lstrcmpW GlobalAddAtomW GlobalFindAtomW CompareStringW RtlUnwind

user32

ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow ValidateRect TrackPopupMenu SetMenu GetMenu IsWindowVisible EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement IsChild IsMenu GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW IsDialogMessageW GetWindow SetWindowLongW GetWindowTextLengthW GetWindowTextW SetWindowTextW SetFocus GetDlgCtrlID CheckDlgButton GetDlgItemTextW MoveWindow IntersectRect InflateRect CopyRect OffsetRect SetRectEmpty SendDlgItemMessageA CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetFocus GetSysColor EndPaint BeginPaint GetWindowDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW RemoveMenu AppendMenuW InsertMenuW GetMenuItemCount GetMenuItemID GetMenuState SetPropW GetLastActivePopup GetWindowLongW GetActiveWindow GetNextDlgTabItem EndDialog CreateDialogIndirectParamW DestroyWindow WindowFromPoint IsWindowEnabled LoadBitmapW GetClassNameW FillRect DrawStateW MessageBoxW GetUserObjectInformationW GetProcessWindowStation UnregisterClassW GetParent SetDlgItemTextA SetActiveWindow EnumWindows AllowSetForegroundWindow LockWorkStation GetDesktopWindow GetPropW RemovePropW AdjustWindowRectEx CreateMenu SendMessageW GetCursorPos GetWindowRect SetCursor LoadCursorW MapWindowPoints EqualRect GetClassLongPtrW GetTopWindow SetScrollInfo GetScrollInfo WinHelpW CheckMenuItem SetMenuItemBitmaps GetMenuCheckMarkDimensions GetKeyNameTextW MapVirtualKeyW EnableWindow InvalidateRect RedrawWindow GetClientRect LoadMenuW SetMenuItemInfoW GetSubMenu EnableMenuItem SetWindowPos SystemParametersInfoW LoadIconW ShowWindow GetDlgItem IsIconic GetSystemMetrics DrawIcon SetForegroundWindow PostQuitMessage SetDlgItemTextW TrackMouseEvent GetDC OpenClipboard EmptyClipboard SetClipboardData CloseClipboard GetDlgItemTextA CreateIconIndirect PostMessageW DestroyIcon GetWindowLongPtrW DefWindowProcW DestroyMenu GetMenuItemInfoW GetNextDlgGroupItem SetTimer KillTimer DrawFocusRect IsRectEmpty LoadImageW CopyImage DrawIconEx GetIconInfo SetWindowContextHelpId MapDialogRect GetMessageW ShowOwnedPopups CharUpperW SetLayeredWindowAttributes GetSysColorBrush EnumDisplayMonitors RealChildWindowFromPoint RegisterClassExW AdjustWindowRect CreateWindowExW UpdateWindow IsZoomed GetAsyncKeyState GetSystemMenu DeleteMenu SetWindowRgn MessageBeep NotifyWinEvent CreatePopupMenu DestroyCursor GetWindowRgn GetMenuStringW SetWindowLongPtrW PeekMessageW TranslateMessage DispatchMessageW MonitorFromWindow GetMonitorInfoW GetKeyState GetForegroundWindow ClientToScreen SetCursorPos ScreenToClient GetMessageExtraInfo GetMenuDefaultItem GetCapture SetCapture ReleaseCapture IsWindowUnicode ReleaseDC GetClipboardData UpdateLayeredWindow PtInRect ExitWindowsEx SubtractRect GetUpdateRect IsClipboardFormatAvailable GetWindowThreadProcessId GetComboBoxInfo TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar MapVirtualKeyExW IsCharLowerW GetDoubleClickTime InvertRect HideCaret PostThreadMessageW FrameRect CopyIcon ReuseDDElParam UnpackDDElParam InsertMenuItemW TranslateAcceleratorW ModifyMenuW CharUpperBuffW RegisterClipboardFormatW SetClassLongPtrW LockWindowUpdate BringWindowToTop SetParent DestroyAcceleratorTable CreateAcceleratorTableW LoadAcceleratorsW GetKeyboardState GetKeyboardLayout ToUnicodeEx SetRect InvalidateRgn CopyAcceleratorTableW CharNextW WaitMessage DrawFrameControl DrawEdge MonitorFromPoint UnionRect EnableScrollBar SetMenuDefaultItem IsWindow

gdi32

GetTextFaceW CreateCompatibleDC GetDeviceCaps DeleteObject CreateCompatibleBitmap CreateBitmap SetBkMode CreateSolidBrush CreateRectRgn SetPixelV GetViewportOrgEx GetWindowOrgEx PtInRegion GetBoundsRect FrameRgn FillRgn SetPaletteEntries ExtFloodFill RoundRect EnumFontFamiliesExW LPtoDP GetSystemPaletteEntries GetPaletteEntries GetNearestPaletteIndex CreatePalette OffsetRgn GetRgnBox Rectangle Polyline Polygon CreatePolygonRgn GetTextColor GetBkColor Ellipse CreateEllipticRgn SetDIBColorTable StretchBlt SetPixel RealizePalette CreateDIBSection CreateRoundRectRgn GetTextMetricsW GetTextCharsetInfo EnumFontFamiliesW CreateDIBitmap GetTextExtentPoint32W DPtoLP SetRectRgn PatBlt GetMapMode CreateRectRgnIndirect CombineRgn ScaleWindowExtEx ScaleViewportExtEx OffsetWindowOrgEx OffsetViewportOrgEx SetWindowOrgEx SetWindowExtEx SetViewportOrgEx SetViewportExtEx ExtTextOutW TextOutW MoveToEx SetTextAlign SetTextColor SetROP2 SetPolyFillMode GetLayout SetLayout SetMapMode SetBkColor SelectPalette ExtSelectClipRgn SelectClipRgn SaveDC RestoreDC RectVisible PtVisible LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetPixel GetObjectType GetClipBox ExcludeClipRect Escape CreatePatternBrush CreatePen CreateHatchBrush BitBlt CreateDCW CopyMetaFileW GetStockObject DeleteDC CreateFontIndirectW SelectObject GetObjectW

msimg32

AlphaBlend TransparentBlt

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

CryptEnumProvidersA RegCloseKey RegEnumValueW RegSetValueExW InitializeSecurityDescriptor RegDeleteValueW RegEnumKeyW RegOpenKeyExW RegCreateKeyExW RegQueryValueW RegQueryValueExW CryptEnumProvidersW CryptSignHashW CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptAcquireContextW ReportEventW RegisterEventSourceW DeregisterEventSource RegDeleteKeyW CryptGenRandom CryptReleaseContext CryptAcquireContextA AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegEnumKeyExW SetSecurityDescriptorDacl

shell32

DragFinish DragQueryFileW SHAppBarMessage SHGetDesktopFolder SHGetSpecialFolderLocation SHGetMalloc SHGetPathFromIDListW SHGetKnownFolderPath CommandLineToArgvW ShellExecuteExW SHGetFileInfoW Shell_NotifyIconW ShellExecuteA ShellExecuteW SHBrowseForFolderW

comctl32

_TrackMouseEvent InitCommonControlsEx ImageList_AddMasked

shlwapi

StrCmpW StrRChrA PathAppendW StrStrW StrChrW StrCpyW StrRChrW PathFindFileNameW PathIsUNCW PathStripToRootW PathRemoveFileSpecW StrFormatKBSizeW PathFindExtensionW

uxtheme

GetThemePartSize IsThemeBackgroundPartiallyTransparent GetThemeSysColor GetWindowTheme GetCurrentThemeName GetThemeColor SetWindowTheme IsAppThemed DrawThemeParentBackground DrawThemeText OpenThemeData CloseThemeData DrawThemeBackground

ole32

CoRegisterMessageFilter CoRevokeClassObject RevokeDragDrop RegisterDragDrop CoLockObjectExternal IsAccelerator OleDuplicateData CoTaskMemAlloc CoUninitialize CoInitializeEx CreateStreamOnHGlobal CoCreateInstance CoTaskMemFree OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleLockRunning OleUninitialize OleInitialize CoFreeUnusedLibraries DoDragDrop OleIsCurrentClipboard OleFlushClipboard CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject CoDisconnectObject CoInitialize CLSIDFromProgID CLSIDFromString CoCreateGuid ReleaseStgMedium OleGetClipboard

oleaut32

LoadTypeLi SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy SysStringLen VariantCopy VarBstrFromDate OleCreateFontIndirect SysAllocString VariantChangeType VariantClear SysAllocStringLen VariantInit SysFreeString

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipBitmapUnlockBits GdipDrawImageI GdipCreateFont GdipSetInterpolationMode GdipSetStringFormatLineAlign GdipGetImagePaletteSize GdipDeleteStringFormat GdipCreateStringFormat GdipCloneBrush GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageGraphicsContext GdipFillEllipseI GdipFillPath GdipClosePathFigure GdipAddPathArcI GdipAddPathLineI GdipDeletePath GdipCreatePath GdiplusShutdown GdiplusStartup GdipDrawImageRectI GdipSetSmoothingMode GdipGetImageHeight GdipGetImageWidth GdipSetSolidFillColor GdipAlloc GdipLoadImageFromStream GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromStream GdipFree GdipCloneImage GdipDisposeImage GdipGraphicsClear GdipCreateSolidFill GdipDrawString GdipDeleteFont GdipDeleteBrush GdipCreateFontFamilyFromName GdipDeleteFontFamily GdipSetStringFormatAlign GdipGetGenericFontFamilySansSerif GdipDeleteGraphics GdipCreateFromHDC GdipCreateBitmapFromHBITMAP

ws2_32

shutdown getservbyname getservbyport gethostbyname gethostbyaddr inet_ntoa inet_addr send recv getsockname getpeername connect bind accept recvfrom socket sendto __WSAFDIsSet WSACleanup WSAStartup htons htonl ntohl freeaddrinfo getaddrinfo WSAAddressToStringW WSASocketW WSASend WSARecv listen select ioctlsocket closesocket WSAGetLastError setsockopt getsockopt WSAIoctl WSASetLastError ntohs

bcrypt

BCryptGenRandom

d3dcompiler_47

D3DCompile

imm32

ImmSetCompositionWindow ImmSetCandidateWindow ImmReleaseContext ImmGetOpenStatus ImmGetContext

oleacc

AccessibleObjectFromWindow LresultFromObject CreateStdAccessibleObject

winmm

PlaySoundW

Name

.text

Size

5.1MB

Virtual Size

5.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

84KB

Virtual Size

139KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

241KB

Virtual Size

241KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

151KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

106KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Packages/vc_redist.x64.exe

IMPHASH 1a5cdbf711fee14b077e599d13fddab2
SHA256 b6c82087a2c443db859fdbeaae7f46244d06c3f2a7f71c35e50358066253de52
MD5 f0248d477e74687c5619ae16498b13d4
SHA1 9ed4b091148c9b53f66b3f2c69be7e60e74c486a
SHA512 0c373b06ffe84f3e803831e90f22d7d73304e47a47839db614f63399ff1b7fcf33153bf3d23998877c96d2a75e316291a219fdd12358ca48928526284b802591
SSDEEP 393216:q5lptVYmfr7yBG/4WoI+j6LTinXKSf0fzTDv8:q7pttD7yBG/uljIinXj0fQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

b4:cd:00:d9:81:97:db:3f:fb:fb:3f:54:d1:0a:0d:d4:f4:56:29:a6:03:63:86:3f:a0:b1:71:7e:4c:43:8a:da

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 21, 2024

Digest

77:97:6d:62:92:5a:37:44:2f:5d:c5:b0:8d:43:91:09:56:54:b2:48

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jan 8, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:E041-4BEE-FA7E,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Serial Number

33:00:00:01:34:22:1e:7e:49:2a:ac:da:6a:00:00:00:00:01:34

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 8, 2019 - Jan 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 2, 2019 - May 2, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 2, 2019 - May 2, 2020

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Minor OS version

1

Major OS version

5

Entry point

188525

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

advapi32

RegCloseKey RegOpenKeyExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW InitiateSystemShutdownExW GetUserNameW RegQueryValueExW RegDeleteValueW ConvertStringSecurityDescriptorToSecurityDescriptorW DecryptFileW CreateWellKnownSid InitializeAcl SetEntriesInAclW ChangeServiceConfigW CloseServiceHandle ControlService OpenSCManagerW OpenServiceW QueryServiceStatus SetNamedSecurityInfoW CheckTokenMembership AllocateAndInitializeSid SetEntriesInAclA SetSecurityDescriptorGroup SetSecurityDescriptorOwner SetSecurityDescriptorDacl InitializeSecurityDescriptor RegSetValueExW RegQueryInfoKeyW RegEnumValueW RegEnumKeyExW RegDeleteKeyW RegCreateKeyExW GetTokenInformation CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW QueryServiceConfigW

user32

GetMessageW PostMessageW IsWindow WaitForInputIdle PostQuitMessage PeekMessageW MsgWaitForMultipleObjects PostThreadMessageW GetMonitorInfoW MonitorFromPoint IsDialogMessageW LoadCursorW LoadBitmapW SetWindowLongW GetWindowLongW GetCursorPos MessageBoxW CreateWindowExW UnregisterClassW RegisterClassW DefWindowProcW DispatchMessageW TranslateMessage

oleaut32

SysFreeString SysAllocString VariantInit VariantClear

gdi32

CreateCompatibleDC DeleteObject SelectObject StretchBlt GetObjectW DeleteDC

shell32

SHGetFolderPathW CommandLineToArgvW ShellExecuteExW

ole32

CoUninitialize CoInitializeEx CoInitialize StringFromGUID2 CoCreateInstance CoTaskMemFree CoInitializeSecurity CLSIDFromProgID

kernel32

GetCommandLineA GetCPInfo GetOEMCP CloseHandle CreateFileW GetProcAddress LocalFree HeapSetInformation GetLastError GetModuleHandleW FormatMessageW lstrlenA lstrlenW MultiByteToWideChar WideCharToMultiByte LCMapStringW Sleep GetLocalTime GetModuleFileNameW ExpandEnvironmentStringsW GetTempPathW GetTempFileNameW CreateDirectoryW GetFullPathNameW CompareStringW GetCurrentProcessId WriteFile SetFilePointer LoadLibraryW GetSystemDirectoryW CreateFileA HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap FindClose GetCommandLineW GetCurrentDirectoryW RemoveDirectoryW SetFileAttributesW GetFileAttributesW DeleteFileW FindFirstFileW FindNextFileW MoveFileExW GetCurrentProcess GetCurrentThreadId InitializeCriticalSection DeleteCriticalSection ReleaseMutex GetEnvironmentStringsW TlsGetValue TlsSetValue TlsFree CreateProcessW GetVersionExW VerSetConditionMask FreeLibrary EnterCriticalSection LeaveCriticalSection GetSystemTime GetNativeSystemInfo GetModuleHandleExW GetWindowsDirectoryW GetSystemWow64DirectoryW GetComputerNameW VerifyVersionInfoW GetVolumePathNameW GetDateFormatW GetSystemDefaultLangID GetUserDefaultLangID GetStringTypeW ReadFile SetFilePointerEx DuplicateHandle InterlockedExchange InterlockedCompareExchange CreateEventW ProcessIdToSessionId OpenProcess GetProcessId WaitForSingleObject ConnectNamedPipe SetNamedPipeHandleState CreateNamedPipeW CreateThread GetExitCodeThread SetEvent WaitForMultipleObjects InterlockedIncrement InterlockedDecrement ResetEvent SetEndOfFile SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CompareStringA GetExitCodeProcess SetThreadExecutionState CopyFileExW MapViewOfFile UnmapViewOfFile CreateMutexW CreateFileMappingW GetThreadLocale IsValidCodePage FreeEnvironmentStringsW TlsAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers DecodePointer WriteConsoleW GetModuleHandleA GlobalAlloc GlobalFree GetFileSizeEx CopyFileW VirtualAlloc VirtualFree SystemTimeToTzSpecificLocalTime GetTimeZoneInformation SystemTimeToFileTime GetSystemInfo VirtualProtect VirtualQuery SetCurrentDirectoryW FindFirstFileExW GetFileType GetACP ExitProcess GetStdHandle LoadLibraryExW InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind SetLastError LoadLibraryExA

rpcrt4

UuidCreate

Name

.text

Size

294KB

Virtual Size

293KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

123KB

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wixburn

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

QRCodeEncoder.dll

IMPHASH 2a6152bbdbf0b107637b1f7a2231ea70
SHA256 9c9a8da4bb2b628b77de98c2b48f1c039649700db6bcadc0af97ec465dd28441
MD5 cc39b3af69c02e64f3560b0c078141e7
SHA1 4c2a4644a6908e766180054eb8d792f1c4a17b2e
SHA512 59228ba046bfd12091ee4f3e43f3ed9a021b55e2f6e990bc063e90a1d92a9b62ae4d90b97060d4a3de5d1862bd84211522f4e9c6d433d28d672cadf3dea5c609
SSDEEP 384:aoI6JUHDdlKSXrA5m/UHXrA5m/UFouYDe+gDlpLqQVWrlWa+w6MibZKfg+AObT7n:aoIHrDHFVsHSoaNr2u+vJzS+ST6nkW
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

de:27:9b:c6:6b:d3:c9:ab:e5:f5:60:1c:c4:8c:77:57:57:80:1a:00:b6:45:21:4a:1c:59:4a:f4:ce:82:63:77

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Apr 11, 2024

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

5e:c9:ed:d5:94:78:85:7b:d5:61:c6:28

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 7, 2023 - Sep 6, 2024

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 2, 2023 - Dec 4, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

18940

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\monec\Documents\workspace\Monect_host\x64\Release\QRCodeEncoder.pdb

SDL2.dll

IMPHASH e538e9ba4f1bc8265fd3d7bc6fe3d137
SHA256 81c70b7bfa5690b0ff20c15caa499f615a82cf5b49d278da89265eb836036465
MD5 5a2819c823a5af53420511a1ceb7a9aa
SHA1 3b80b1228631abbb7f2745828a25cbce0d9dce09
SHA512 da85ca5a8666eb5a2a4bc6b0c9e2f7b7811eb22fe1632a8604274f4fdd5b4303e8943b85cdacb4a3378261d1c0c2d754f4db372294a7146c26a9a546ba83b399
SSDEEP 24576:HzJfKNu0feee3s8LjMwUiny7Irssh55Z0lZGO5cO7bSbtnG4+bDYnZVBsi9s8ZF7:H9fd8y5m5cv9F0Qc3OW/a45m5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4725

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

gdi32

BitBlt ChoosePixelFormat CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateFontIndirectW CreateFontW CreatePen CreateRectRgn CreateSolidBrush DeleteDC DeleteObject DescribePixelFormat ExtTextOutW GetDIBits GetDeviceCaps GetDeviceGammaRamp GetICMProfileW GetPixelFormat GetTextExtentPoint32A GetTextExtentPoint32W GetTextMetricsW Rectangle SelectObject SetBkMode SetDeviceGammaRamp SetPixelFormat SetTextColor SwapBuffers

imm32

ImmAssociateContext ImmGetCandidateListW ImmGetCompositionStringW ImmGetContext ImmGetIMEFileNameA ImmNotifyIME ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionStringW ImmSetCompositionWindow

kernel32

AttachConsole CancelIo CloseHandle CompareStringA CreateDirectoryW CreateEventW CreateFileA CreateFileW CreateSemaphoreW CreateThread CreateToolhelp32Snapshot DeleteCriticalSection DeviceIoControl EnterCriticalSection ExitProcess FormatMessageW FreeLibrary GetConsoleMode GetCurrentProcess GetCurrentThread GetCurrentThreadId GetEnvironmentVariableA GetFileSizeEx GetLastError GetLocaleInfoA GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOverlappedResult GetProcAddress GetStdHandle GetSystemInfo GetSystemPowerStatus GetTickCount GlobalAlloc GlobalLock GlobalMemoryStatusEx GlobalUnlock InitializeCriticalSection InitializeCriticalSectionAndSpinCount IsDebuggerPresent LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LocalFree MulDiv OutputDebugStringW Process32First Process32Next QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseSemaphore ResetEvent SetEnvironmentVariableA SetErrorMode SetFilePointer SetFilePointerEx SetThreadExecutionState SetThreadPriority Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile

msvcrt

__iob_func _amsg_exit _initterm _lock _unlock abort calloc fputs free memcpy memset realloc strlen strncmp vfprintf

ole32

CoCreateInstance CoInitializeEx CoTaskMemFree CoUninitialize PropVariantClear

oleaut32

SysFreeString

setupapi

CM_Get_Device_IDA CM_Get_Parent CM_Locate_DevNodeA SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiEnumDeviceInterfaces SetupDiGetClassDevsA SetupDiGetDeviceInterfaceDetailA SetupDiGetDeviceRegistryPropertyA

shell32

DragAcceptFiles DragFinish DragQueryFileW ExtractIconExW SHGetFolderPathW ShellExecuteW

user32

AdjustWindowRectEx AttachThreadInput CallNextHookEx CallWindowProcW ChangeDisplaySettingsExW ClientToScreen ClipCursor CloseClipboard CopyImage CreateIconFromResource CreateIconIndirect CreateWindowExA CreateWindowExW DefWindowProcW DestroyIcon DestroyWindow DialogBoxIndirectParamW DispatchMessageW DrawTextW EmptyClipboard EndDialog EnumDisplayDevicesW EnumDisplayMonitors EnumDisplaySettingsW FlashWindowEx GetAsyncKeyState GetClassInfoExW GetClientRect GetClipCursor GetClipboardData GetClipboardSequenceNumber GetCursorPos GetDC GetDesktopWindow GetDlgItem GetDoubleClickTime GetFocus GetForegroundWindow GetKeyState GetKeyboardLayout GetKeyboardState GetMenu GetMessageExtraInfo GetMessageW GetMonitorInfoW GetParent GetPropW GetRawInputData GetRawInputDeviceInfoA GetRawInputDeviceList GetSystemMetrics GetUpdateRect GetWindowLongPtrW GetWindowLongW GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId IntersectRect InvalidateRect IsClipboardFormatAvailable IsIconic IsRectEmpty KillTimer LoadCursorW LoadIconW MapVirtualKeyW MessageBoxA OpenClipboard PeekMessageW PostMessageW PostThreadMessageW PtInRect RegisterClassExA RegisterClassExW RegisterClassW RegisterDeviceNotificationW RegisterRawInputDevices RegisterWindowMessageA ReleaseCapture ReleaseDC RemovePropW ScreenToClient SendMessageW SetActiveWindow SetCapture SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetLayeredWindowAttributes SetPropW SetTimer SetWindowLongPtrW SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextW SetWindowsHookExW ShowWindow SystemParametersInfoA SystemParametersInfoW ToUnicode TrackMouseEvent TranslateMessage UnhookWindowsHookEx UnregisterClassA UnregisterClassW UnregisterDeviceNotification ValidateRect

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

winmm

timeBeginPeriod timeEndPeriod waveInAddBuffer waveInClose waveInGetDevCapsW waveInGetNumDevs waveInOpen waveInPrepareHeader waveInReset waveInStart waveInUnprepareHeader waveOutClose waveOutGetDevCapsW waveOutGetErrorTextW waveOutGetNumDevs waveOutOpen waveOutPrepareHeader waveOutReset waveOutUnprepareHeader waveOutWrite

SDL_AddEventWatch SDL_AddHintCallback SDL_AddTimer SDL_AllocFormat SDL_AllocPalette SDL_AllocRW SDL_AtomicAdd SDL_AtomicCAS SDL_AtomicCASPtr SDL_AtomicGet SDL_AtomicGetPtr SDL_AtomicLock SDL_AtomicSet SDL_AtomicSetPtr SDL_AtomicTryLock SDL_AtomicUnlock SDL_AudioInit SDL_AudioQuit SDL_AudioStreamAvailable SDL_AudioStreamClear SDL_AudioStreamFlush SDL_AudioStreamGet SDL_AudioStreamPut SDL_BuildAudioCVT SDL_CalculateGammaRamp SDL_CaptureMouse SDL_ClearComposition SDL_ClearError SDL_ClearHints SDL_ClearQueuedAudio SDL_CloseAudio SDL_CloseAudioDevice SDL_ComposeCustomBlendMode SDL_CondBroadcast SDL_CondSignal SDL_CondWait SDL_CondWaitTimeout SDL_ConvertAudio SDL_ConvertPixels SDL_ConvertSurface SDL_ConvertSurfaceFormat SDL_CreateColorCursor SDL_CreateCond SDL_CreateCursor SDL_CreateMutex SDL_CreateRGBSurface SDL_CreateRGBSurfaceFrom SDL_CreateRGBSurfaceWithFormat SDL_CreateRGBSurfaceWithFormatFrom SDL_CreateRenderer SDL_CreateSemaphore SDL_CreateShapedWindow SDL_CreateSoftwareRenderer SDL_CreateSystemCursor SDL_CreateTexture SDL_CreateTextureFromSurface SDL_CreateThread SDL_CreateThreadWithStackSize SDL_CreateWindow SDL_CreateWindowAndRenderer SDL_CreateWindowFrom SDL_DXGIGetOutputInfo SDL_DYNAPI_entry SDL_DelEventWatch SDL_DelHintCallback SDL_Delay SDL_DequeueAudio SDL_DestroyCond SDL_DestroyMutex SDL_DestroyRenderer SDL_DestroySemaphore SDL_DestroyTexture SDL_DestroyWindow SDL_DetachThread SDL_Direct3D9GetAdapterIndex SDL_DisableScreenSaver SDL_DuplicateSurface SDL_EnableScreenSaver SDL_EncloseFPoints SDL_EnclosePoints SDL_Error SDL_EventState SDL_FillRect SDL_FillRects SDL_FilterEvents SDL_FlashWindow SDL_FlushEvent SDL_FlushEvents SDL_FreeAudioStream SDL_FreeCursor SDL_FreeFormat SDL_FreePalette SDL_FreeRW SDL_FreeSurface SDL_FreeWAV SDL_GL_BindTexture SDL_GL_CreateContext SDL_GL_DeleteContext SDL_GL_ExtensionSupported SDL_GL_GetAttribute SDL_GL_GetCurrentContext SDL_GL_GetCurrentWindow SDL_GL_GetDrawableSize SDL_GL_GetProcAddress SDL_GL_GetSwapInterval SDL_GL_LoadLibrary SDL_GL_MakeCurrent SDL_GL_ResetAttributes SDL_GL_SetAttribute SDL_GL_SetSwapInterval SDL_GL_SwapWindow SDL_GL_UnbindTexture SDL_GL_UnloadLibrary SDL_GameControllerAddMapping SDL_GameControllerAddMappingsFromRW SDL_GameControllerClose SDL_GameControllerEventState SDL_GameControllerFromInstanceID SDL_GameControllerFromPlayerIndex SDL_GameControllerGetAppleSFSymbolsNameForAxis SDL_GameControllerGetAppleSFSymbolsNameForButton SDL_GameControllerGetAttached SDL_GameControllerGetAxis SDL_GameControllerGetAxisFromString SDL_GameControllerGetBindForAxis SDL_GameControllerGetBindForButton SDL_GameControllerGetButton SDL_GameControllerGetButtonFromString SDL_GameControllerGetJoystick SDL_GameControllerGetNumTouchpadFingers SDL_GameControllerGetNumTouchpads SDL_GameControllerGetPlayerIndex SDL_GameControllerGetProduct SDL_GameControllerGetProductVersion SDL_GameControllerGetSensorData SDL_GameControllerGetSensorDataRate SDL_GameControllerGetSerial SDL_GameControllerGetStringForAxis SDL_GameControllerGetStringForButton SDL_GameControllerGetTouchpadFinger SDL_GameControllerGetType SDL_GameControllerGetVendor SDL_GameControllerHasAxis SDL_GameControllerHasButton SDL_GameControllerHasLED SDL_GameControllerHasRumble SDL_GameControllerHasRumbleTriggers SDL_GameControllerHasSensor SDL_GameControllerIsSensorEnabled SDL_GameControllerMapping SDL_GameControllerMappingForDeviceIndex SDL_GameControllerMappingForGUID SDL_GameControllerMappingForIndex SDL_GameControllerName SDL_GameControllerNameForIndex SDL_GameControllerNumMappings SDL_GameControllerOpen SDL_GameControllerRumble SDL_GameControllerRumbleTriggers SDL_GameControllerSendEffect SDL_GameControllerSetLED SDL_GameControllerSetPlayerIndex SDL_GameControllerSetSensorEnabled SDL_GameControllerTypeForIndex SDL_GameControllerUpdate SDL_GetAssertionHandler SDL_GetAssertionReport SDL_GetAudioDeviceName SDL_GetAudioDeviceSpec SDL_GetAudioDeviceStatus SDL_GetAudioDriver SDL_GetAudioStatus SDL_GetBasePath SDL_GetCPUCacheLineSize SDL_GetCPUCount SDL_GetClipRect SDL_GetClipboardText SDL_GetClosestDisplayMode SDL_GetColorKey SDL_GetCurrentAudioDriver SDL_GetCurrentDisplayMode SDL_GetCurrentVideoDriver SDL_GetCursor SDL_GetDefaultAssertionHandler SDL_GetDefaultCursor SDL_GetDesktopDisplayMode SDL_GetDisplayBounds SDL_GetDisplayDPI SDL_GetDisplayMode SDL_GetDisplayName SDL_GetDisplayOrientation SDL_GetDisplayUsableBounds SDL_GetError SDL_GetErrorMsg SDL_GetEventFilter SDL_GetGlobalMouseState SDL_GetGrabbedWindow SDL_GetHint SDL_GetHintBoolean SDL_GetKeyFromName SDL_GetKeyFromScancode SDL_GetKeyName SDL_GetKeyboardFocus SDL_GetKeyboardState SDL_GetMemoryFunctions SDL_GetModState SDL_GetMouseFocus SDL_GetMouseState SDL_GetNumAllocations SDL_GetNumAudioDevices SDL_GetNumAudioDrivers SDL_GetNumDisplayModes SDL_GetNumRenderDrivers SDL_GetNumTouchDevices SDL_GetNumTouchFingers SDL_GetNumVideoDisplays SDL_GetNumVideoDrivers SDL_GetPerformanceCounter SDL_GetPerformanceFrequency SDL_GetPixelFormatName SDL_GetPlatform SDL_GetPowerInfo SDL_GetPrefPath SDL_GetPreferredLocales SDL_GetQueuedAudioSize SDL_GetRGB SDL_GetRGBA SDL_GetRelativeMouseMode SDL_GetRelativeMouseState SDL_GetRenderDrawBlendMode SDL_GetRenderDrawColor SDL_GetRenderDriverInfo SDL_GetRenderTarget SDL_GetRenderer SDL_GetRendererInfo SDL_GetRendererOutputSize SDL_GetRevision SDL_GetRevisionNumber SDL_GetScancodeFromKey SDL_GetScancodeFromName SDL_GetScancodeName SDL_GetShapedWindowMode SDL_GetSurfaceAlphaMod SDL_GetSurfaceBlendMode SDL_GetSurfaceColorMod SDL_GetSystemRAM SDL_GetTextureAlphaMod SDL_GetTextureBlendMode SDL_GetTextureColorMod SDL_GetTextureScaleMode SDL_GetTextureUserData SDL_GetThreadID SDL_GetThreadName SDL_GetTicks SDL_GetTicks64 SDL_GetTouchDevice SDL_GetTouchDeviceType SDL_GetTouchFinger SDL_GetTouchName SDL_GetVersion SDL_GetVideoDriver SDL_GetWindowBordersSize SDL_GetWindowBrightness SDL_GetWindowData SDL_GetWindowDisplayIndex SDL_GetWindowDisplayMode SDL_GetWindowFlags SDL_GetWindowFromID SDL_GetWindowGammaRamp SDL_GetWindowGrab SDL_GetWindowICCProfile SDL_GetWindowID SDL_GetWindowKeyboardGrab SDL_GetWindowMaximumSize SDL_GetWindowMinimumSize SDL_GetWindowMouseGrab SDL_GetWindowMouseRect SDL_GetWindowOpacity SDL_GetWindowPixelFormat SDL_GetWindowPosition SDL_GetWindowSize SDL_GetWindowSurface SDL_GetWindowTitle SDL_GetWindowWMInfo SDL_GetYUVConversionMode SDL_GetYUVConversionModeForResolution SDL_HapticClose SDL_HapticDestroyEffect SDL_HapticEffectSupported SDL_HapticGetEffectStatus SDL_HapticIndex SDL_HapticName SDL_HapticNewEffect SDL_HapticNumAxes SDL_HapticNumEffects SDL_HapticNumEffectsPlaying SDL_HapticOpen SDL_HapticOpenFromJoystick SDL_HapticOpenFromMouse SDL_HapticOpened SDL_HapticPause SDL_HapticQuery SDL_HapticRumbleInit SDL_HapticRumblePlay SDL_HapticRumbleStop SDL_HapticRumbleSupported SDL_HapticRunEffect SDL_HapticSetAutocenter SDL_HapticSetGain SDL_HapticStopAll SDL_HapticStopEffect SDL_HapticUnpause SDL_HapticUpdateEffect SDL_Has3DNow SDL_HasARMSIMD SDL_HasAVX SDL_HasAVX2 SDL_HasAVX512F SDL_HasAltiVec SDL_HasClipboardText SDL_HasColorKey SDL_HasEvent SDL_HasEvents SDL_HasIntersection SDL_HasIntersectionF SDL_HasMMX SDL_HasNEON SDL_HasRDTSC SDL_HasSSE SDL_HasSSE2 SDL_HasSSE3 SDL_HasSSE41 SDL_HasSSE42 SDL_HasScreenKeyboardSupport SDL_HasSurfaceRLE SDL_HideWindow SDL_Init SDL_InitSubSystem SDL_IntersectFRect SDL_IntersectFRectAndLine SDL_IntersectRect SDL_IntersectRectAndLine SDL_IsGameController SDL_IsScreenKeyboardShown SDL_IsScreenSaverEnabled SDL_IsShapedWindow SDL_IsTablet SDL_IsTextInputActive SDL_IsTextInputShown SDL_JoystickAttachVirtual SDL_JoystickClose SDL_JoystickCurrentPowerLevel SDL_JoystickDetachVirtual SDL_JoystickEventState SDL_JoystickFromInstanceID SDL_JoystickFromPlayerIndex SDL_JoystickGetAttached SDL_JoystickGetAxis SDL_JoystickGetAxisInitialState SDL_JoystickGetBall SDL_JoystickGetButton SDL_JoystickGetDeviceGUID SDL_JoystickGetDeviceInstanceID SDL_JoystickGetDevicePlayerIndex SDL_JoystickGetDeviceProduct SDL_JoystickGetDeviceProductVersion SDL_JoystickGetDeviceType SDL_JoystickGetDeviceVendor SDL_JoystickGetGUID SDL_JoystickGetGUIDFromString SDL_JoystickGetGUIDString SDL_JoystickGetHat SDL_JoystickGetPlayerIndex SDL_JoystickGetProduct SDL_JoystickGetProductVersion SDL_JoystickGetSerial SDL_JoystickGetType SDL_JoystickGetVendor SDL_JoystickHasLED SDL_JoystickHasRumble SDL_JoystickHasRumbleTriggers SDL_JoystickInstanceID SDL_JoystickIsHaptic SDL_JoystickIsVirtual SDL_JoystickName SDL_JoystickNameForIndex SDL_JoystickNumAxes SDL_JoystickNumBalls SDL_JoystickNumButtons SDL_JoystickNumHats SDL_JoystickOpen SDL_JoystickRumble SDL_JoystickRumbleTriggers SDL_JoystickSendEffect SDL_JoystickSetLED SDL_JoystickSetPlayerIndex SDL_JoystickSetVirtualAxis SDL_JoystickSetVirtualButton SDL_JoystickSetVirtualHat SDL_JoystickUpdate SDL_LoadBMP_RW SDL_LoadDollarTemplates SDL_LoadFile SDL_LoadFile_RW SDL_LoadFunction SDL_LoadObject SDL_LoadWAV_RW SDL_LockAudio SDL_LockAudioDevice SDL_LockJoysticks SDL_LockMutex SDL_LockSensors SDL_LockSurface SDL_LockTexture SDL_LockTextureToSurface SDL_Log SDL_LogCritical SDL_LogDebug SDL_LogError SDL_LogGetOutputFunction SDL_LogGetPriority SDL_LogInfo SDL_LogMessage SDL_LogMessageV SDL_LogResetPriorities SDL_LogSetAllPriority SDL_LogSetOutputFunction SDL_LogSetPriority SDL_LogVerbose SDL_LogWarn SDL_LowerBlit SDL_LowerBlitScaled SDL_MapRGB SDL_MapRGBA SDL_MasksToPixelFormatEnum SDL_MaximizeWindow SDL_MemoryBarrierAcquireFunction SDL_MemoryBarrierReleaseFunction SDL_Metal_CreateView SDL_Metal_DestroyView SDL_Metal_GetDrawableSize SDL_Metal_GetLayer SDL_MinimizeWindow SDL_MixAudio SDL_MixAudioFormat SDL_MouseIsHaptic SDL_NewAudioStream SDL_NumHaptics SDL_NumJoysticks SDL_NumSensors SDL_OnApplicationDidBecomeActive SDL_OnApplicationDidEnterBackground SDL_OnApplicationDidReceiveMemoryWarning SDL_OnApplicationWillEnterForeground SDL_OnApplicationWillResignActive SDL_OnApplicationWillTerminate SDL_OpenAudio SDL_OpenAudioDevice SDL_OpenURL SDL_PauseAudio SDL_PauseAudioDevice SDL_PeepEvents SDL_PixelFormatEnumToMasks SDL_PollEvent SDL_PremultiplyAlpha SDL_PumpEvents SDL_PushEvent SDL_QueryTexture SDL_QueueAudio SDL_Quit SDL_QuitSubSystem SDL_RWFromConstMem SDL_RWFromFP SDL_RWFromFile SDL_RWFromMem SDL_RWclose SDL_RWread SDL_RWseek SDL_RWsize SDL_RWtell SDL_RWwrite SDL_RaiseWindow SDL_ReadBE16 SDL_ReadBE32 SDL_ReadBE64 SDL_ReadLE16 SDL_ReadLE32 SDL_ReadLE64 SDL_ReadU8 SDL_RecordGesture SDL_RegisterApp SDL_RegisterEvents SDL_RemoveTimer SDL_RenderClear SDL_RenderCopy SDL_RenderCopyEx SDL_RenderCopyExF SDL_RenderCopyF SDL_RenderDrawLine SDL_RenderDrawLineF SDL_RenderDrawLines SDL_RenderDrawLinesF SDL_RenderDrawPoint SDL_RenderDrawPointF SDL_RenderDrawPoints SDL_RenderDrawPointsF SDL_RenderDrawRect SDL_RenderDrawRectF SDL_RenderDrawRects SDL_RenderDrawRectsF SDL_RenderFillRect SDL_RenderFillRectF SDL_RenderFillRects SDL_RenderFillRectsF SDL_RenderFlush SDL_RenderGeometry SDL_RenderGeometryRaw SDL_RenderGetClipRect SDL_RenderGetD3D11Device SDL_RenderGetD3D9Device SDL_RenderGetIntegerScale SDL_RenderGetLogicalSize SDL_RenderGetMetalCommandEncoder SDL_RenderGetMetalLayer SDL_RenderGetScale SDL_RenderGetViewport SDL_RenderGetWindow SDL_RenderIsClipEnabled SDL_RenderLogicalToWindow SDL_RenderPresent SDL_RenderReadPixels SDL_RenderSetClipRect SDL_RenderSetIntegerScale SDL_RenderSetLogicalSize SDL_RenderSetScale SDL_RenderSetVSync SDL_RenderSetViewport SDL_RenderTargetSupported SDL_RenderWindowToLogical SDL_ReportAssertion SDL_ResetAssertionReport SDL_RestoreWindow SDL_SIMDAlloc SDL_SIMDFree SDL_SIMDGetAlignment SDL_SIMDRealloc SDL_SaveAllDollarTemplates SDL_SaveBMP_RW SDL_SaveDollarTemplate SDL_SemPost SDL_SemTryWait SDL_SemValue SDL_SemWait SDL_SemWaitTimeout SDL_SensorClose SDL_SensorFromInstanceID SDL_SensorGetData SDL_SensorGetDeviceInstanceID SDL_SensorGetDeviceName SDL_SensorGetDeviceNonPortableType SDL_SensorGetDeviceType SDL_SensorGetInstanceID SDL_SensorGetName SDL_SensorGetNonPortableType SDL_SensorGetType SDL_SensorOpen SDL_SensorUpdate SDL_SetAssertionHandler SDL_SetClipRect SDL_SetClipboardText SDL_SetColorKey SDL_SetCursor SDL_SetError SDL_SetEventFilter SDL_SetHint SDL_SetHintWithPriority SDL_SetMainReady SDL_SetMemoryFunctions SDL_SetModState SDL_SetPaletteColors SDL_SetPixelFormatPalette SDL_SetRelativeMouseMode SDL_SetRenderDrawBlendMode SDL_SetRenderDrawColor SDL_SetRenderTarget SDL_SetSurfaceAlphaMod SDL_SetSurfaceBlendMode SDL_SetSurfaceColorMod SDL_SetSurfacePalette SDL_SetSurfaceRLE SDL_SetTextInputRect SDL_SetTextureAlphaMod SDL_SetTextureBlendMode SDL_SetTextureColorMod SDL_SetTextureScaleMode SDL_SetTextureUserData SDL_SetThreadPriority SDL_SetWindowAlwaysOnTop SDL_SetWindowBordered SDL_SetWindowBrightness SDL_SetWindowData SDL_SetWindowDisplayMode SDL_SetWindowFullscreen SDL_SetWindowGammaRamp SDL_SetWindowGrab SDL_SetWindowHitTest SDL_SetWindowIcon SDL_SetWindowInputFocus SDL_SetWindowKeyboardGrab SDL_SetWindowMaximumSize SDL_SetWindowMinimumSize SDL_SetWindowModalFor SDL_SetWindowMouseGrab SDL_SetWindowMouseRect SDL_SetWindowOpacity SDL_SetWindowPosition SDL_SetWindowResizable SDL_SetWindowShape SDL_SetWindowSize SDL_SetWindowTitle SDL_SetWindowsMessageHook SDL_SetYUVConversionMode SDL_ShowCursor SDL_ShowMessageBox SDL_ShowSimpleMessageBox SDL_ShowWindow SDL_SoftStretch SDL_SoftStretchLinear SDL_StartTextInput SDL_StopTextInput SDL_TLSCleanup SDL_TLSCreate SDL_TLSGet SDL_TLSSet SDL_ThreadID SDL_TryLockMutex SDL_UnionFRect SDL_UnionRect SDL_UnloadObject SDL_UnlockAudio SDL_UnlockAudioDevice SDL_UnlockJoysticks SDL_UnlockMutex SDL_UnlockSensors SDL_UnlockSurface SDL_UnlockTexture SDL_UnregisterApp SDL_UpdateNVTexture SDL_UpdateTexture SDL_UpdateWindowSurface SDL_UpdateWindowSurfaceRects SDL_UpdateYUVTexture SDL_UpperBlit SDL_UpperBlitScaled SDL_VideoInit SDL_VideoQuit SDL_Vulkan_CreateSurface SDL_Vulkan_GetDrawableSize SDL_Vulkan_GetInstanceExtensions SDL_Vulkan_GetVkGetInstanceProcAddr SDL_Vulkan_LoadLibrary SDL_Vulkan_UnloadLibrary SDL_WaitEvent SDL_WaitEventTimeout SDL_WaitThread SDL_WarpMouseGlobal SDL_WarpMouseInWindow SDL_WasInit SDL_WriteBE16 SDL_WriteBE32 SDL_WriteBE64 SDL_WriteLE16 SDL_WriteLE32 SDL_WriteLE64 SDL_WriteU8 SDL_abs SDL_acos SDL_acosf SDL_asin SDL_asinf SDL_asprintf SDL_atan SDL_atan2 SDL_atan2f SDL_atanf SDL_atof SDL_atoi SDL_calloc SDL_ceil SDL_ceilf SDL_copysign SDL_copysignf SDL_cos SDL_cosf SDL_crc32 SDL_exp SDL_expf SDL_fabs SDL_fabsf SDL_floor SDL_floorf SDL_fmod SDL_fmodf SDL_free SDL_getenv SDL_hid_ble_scan SDL_hid_close SDL_hid_device_change_count SDL_hid_enumerate SDL_hid_exit SDL_hid_free_enumeration SDL_hid_get_feature_report SDL_hid_get_indexed_string SDL_hid_get_manufacturer_string SDL_hid_get_product_string SDL_hid_get_serial_number_string SDL_hid_init SDL_hid_open SDL_hid_open_path SDL_hid_read SDL_hid_read_timeout SDL_hid_send_feature_report SDL_hid_set_nonblocking SDL_hid_write SDL_iconv SDL_iconv_close SDL_iconv_open SDL_iconv_string SDL_isalnum SDL_isalpha SDL_isblank SDL_iscntrl SDL_isdigit SDL_isgraph SDL_islower SDL_isprint SDL_ispunct SDL_isspace SDL_isupper SDL_isxdigit SDL_itoa SDL_lltoa SDL_log SDL_log10 SDL_log10f SDL_logf SDL_lround SDL_lroundf SDL_ltoa SDL_malloc SDL_memcmp SDL_memcpy SDL_memmove SDL_memset SDL_pow SDL_powf SDL_qsort SDL_realloc SDL_round SDL_roundf SDL_scalbn SDL_scalbnf SDL_setenv SDL_sin SDL_sinf SDL_snprintf SDL_sqrt SDL_sqrtf SDL_sscanf SDL_strcasecmp SDL_strchr SDL_strcmp SDL_strdup SDL_strlcat SDL_strlcpy SDL_strlen SDL_strlwr SDL_strncasecmp SDL_strncmp SDL_strrchr SDL_strrev SDL_strstr SDL_strtod SDL_strtokr SDL_strtol SDL_strtoll SDL_strtoul SDL_strtoull SDL_strupr SDL_tan SDL_tanf SDL_tolower SDL_toupper SDL_trunc SDL_truncf SDL_uitoa SDL_ulltoa SDL_ultoa SDL_utf8strlcpy SDL_utf8strlen SDL_vasprintf SDL_vsnprintf SDL_vsscanf SDL_wcscasecmp SDL_wcscmp SDL_wcsdup SDL_wcslcat SDL_wcslcpy SDL_wcslen SDL_wcsncasecmp SDL_wcsncmp SDL_wcsstr

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

755KB

Virtual Size

754KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

792B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

SDL2_image.dll

IMPHASH 4dddb0e55addd0918013d39a1ac31b1a
SHA256 1e364af75fee0c83506fbdfd4d5b0e386c4e9c6a33ddbddac61ddb131e360194
MD5 b8d249a5e394b4e6a954c557af1b80e6
SHA1 b03bb9d09447114a018110bfb91d56ef8d5ec3bb
SHA512 2f2e248c3963711f1a9f5d8baea5b8527d1df1748cd7e33bf898a380ae748f7a65629438711ff9a5343e64762ec0b5dc478cdf19fbf7111dac9d11a8427e0007
SSDEEP 3072:6bsejIuO504fzsOM05Nmy7iGpJ7SvFisgf:6bmX0qQOhmyPs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4855

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection QueryPerformanceCounter RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcrt

__dllonexit __iob_func _amsg_exit _initterm _lock _onexit _setjmp _unlock abort calloc fputs free longjmp malloc signal strncmp vfprintf

sdl2

SDL_ClearError SDL_ConvertSurfaceFormat SDL_CreateRGBSurface SDL_CreateTextureFromSurface SDL_Error SDL_FillRect SDL_FreeSurface SDL_GetError SDL_LoadFile_RW SDL_LoadFunction SDL_LoadObject SDL_Log SDL_MapRGB SDL_RWFromFile SDL_ReadBE32 SDL_ReadLE16 SDL_ReadLE32 SDL_SetColorKey SDL_SetError SDL_UnloadObject SDL_UpperBlit SDL_acosf SDL_atan2f SDL_calloc SDL_ceilf SDL_cosf SDL_fabs SDL_fabsf SDL_floorf SDL_fmodf SDL_free SDL_isdigit SDL_isspace SDL_malloc SDL_memcmp SDL_memcpy SDL_memset SDL_pow SDL_qsort SDL_realloc SDL_sinf SDL_snprintf SDL_sqrt SDL_sqrtf SDL_sscanf SDL_strchr SDL_strcmp SDL_strlcpy SDL_strlen SDL_strncasecmp SDL_strncmp SDL_strrchr SDL_strstr SDL_strtol SDL_strtoll SDL_tanf SDL_toupper

Name

.text

Size

97KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

240B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

824B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

TouchInput.dll

IMPHASH 14bf287cca8eea3ac952bdd6cc2a3f7c
SHA256 ebdf396161b4c6ff20cdd54d08a334e3a98aba33663130a43f0f92fe7ee4801e
MD5 5594270400bd6b2c68f706067efcd889
SHA1 c344b768407e0ebbaa67c830f1b8bb96d0762e88
SHA512 f4d64294c255a5c0c579172a1275b925964e5901f61acc06820b89c30a6d1d597c1ee473a6290d2d902aa31f1ae62491aa81cffe1423542d9fef47adcffb8ec2
SSDEEP 384:emeTqSLPB4XT7MQv/uo6ki2Di+vywbS+ShjmM6IGBkS+E:emetLP6Wr2u+v5bS+ST6nk0
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

29:81:c2:7a:e5:37:6c:75:ef:79:6d:f8:99:85:8d:d4:7d:59:20:09:1f:79:73:6d:cd:ba:54:17:85:68:9d:da

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 2, 2024

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

5e:c9:ed:d5:94:78:85:7b:d5:61:c6:28

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 7, 2023 - Sep 6, 2024

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 2, 2023 - Dec 4, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

6012

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\monec\Documents\workspace\Monect_host\x64\Release\TouchInput.pdb

avcodec-59.dll

IMPHASH 270ade4fb1c52d88eca2783c9cbf51cf
SHA256 5023347055e0dc62d02d6e1d557832d61834fda26da11f43ea7eb04f224ed92d
MD5 5398be059d32fc99ae35a469bcd55255
SHA1 dd4a6154a185e1fe24a4ce024179441ec8a44194
SHA512 c0f6b782030c8bd4da9bde690192a826f4eb9bb027918bdb81b1a91195e22d2a1e2475767f250cc4e6cd23e5a21650030765ec769acb8399f330172200251f94
SSDEEP 393216:rh5v+6bVVGcq20EPrEStqiJ0WOf5dd0EhRCe9lBZkvxMXHthsT6ltmPshdPPRX29:r7HK20+RJ8jd0EjCilb+MXc4Ph4dH3
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

avutil-57

av_asprintf av_audio_fifo_alloc av_audio_fifo_drain av_audio_fifo_free av_audio_fifo_read av_audio_fifo_reset av_audio_fifo_size av_audio_fifo_write av_base64_decode av_base64_encode av_bmg_get av_bprint_append_data av_bprint_channel_layout av_bprint_chars av_bprint_clear av_bprint_escape av_bprint_finalize av_bprint_get_buffer av_bprint_init av_bprint_init_for_buffer av_bprintf av_buffer_alloc av_buffer_allocz av_buffer_create av_buffer_default_free av_buffer_get_ref_count av_buffer_is_writable av_buffer_make_writable av_buffer_pool_get av_buffer_pool_init av_buffer_pool_init2 av_buffer_pool_uninit av_buffer_realloc av_buffer_ref av_buffer_replace av_buffer_unref av_calloc av_chroma_location_name av_color_primaries_name av_color_range_name av_color_space_name av_color_transfer_name av_content_light_metadata_create_side_data av_cpu_count av_crc av_crc_get_table av_crc_init av_d2q av_default_item_name av_dict_copy av_dict_free av_dict_get av_dict_set av_display_matrix_flip av_display_rotation_set av_div_q av_dovi_metadata_alloc av_downmix_info_update_side_data av_dynamic_hdr_plus_alloc av_dynarray_add av_dynarray_add_nofree av_expr_eval av_expr_free av_expr_parse av_fast_malloc av_fast_mallocz av_fast_realloc av_fifo_alloc av_fifo_alloc_array av_fifo_drain av_fifo_free av_fifo_freep av_fifo_generic_peek av_fifo_generic_peek_at av_fifo_generic_read av_fifo_generic_write av_fifo_grow av_fifo_realloc2 av_fifo_reset av_fifo_size av_fifo_space av_film_grain_params_create_side_data av_find_best_pix_fmt_of_2 av_fourcc_make_string av_frame_alloc av_frame_apply_cropping av_frame_clone av_frame_copy av_frame_copy_props av_frame_free av_frame_get_buffer av_frame_get_side_data av_frame_is_writable av_frame_make_writable av_frame_move_ref av_frame_new_side_data av_frame_new_side_data_from_buf av_frame_ref av_frame_remove_side_data av_frame_unref av_free av_freep av_gcd av_get_bits_per_pixel av_get_bytes_per_sample av_get_channel_layout_channel_index av_get_channel_layout_nb_channels av_get_channel_layout_string av_get_cpu_flags av_get_default_channel_layout av_get_media_type_string av_get_picture_type_char av_get_pix_fmt_name av_get_planar_sample_fmt av_get_sample_fmt_name av_get_token av_gettime av_hwdevice_ctx_create av_hwdevice_get_type_name av_hwframe_ctx_alloc av_hwframe_ctx_init av_hwframe_get_buffer av_hwframe_map av_hwframe_transfer_data av_image_check_sar av_image_check_size av_image_check_size2 av_image_copy av_image_copy_plane av_image_copy_to_buffer av_image_fill_arrays av_image_fill_black av_image_fill_linesizes av_image_fill_plane_sizes av_image_fill_pointers av_image_get_buffer_size av_image_get_linesize av_lfg_init av_lfg_init_from_data av_log av_log_get_level av_log_once av_lzo1x_decode av_malloc av_malloc_array av_mallocz av_mastering_display_metadata_create_side_data av_match_list av_md5_alloc av_md5_final av_md5_init av_md5_update av_memcpy_backptr av_memdup av_mul_q av_nearer_q av_opt_copy av_opt_free av_opt_get_int av_opt_next av_opt_set av_opt_set_defaults av_opt_set_defaults2 av_opt_set_dict av_opt_set_dict2 av_opt_set_from_string av_opt_set_int av_parse_color av_pix_fmt_count_planes av_pix_fmt_desc_get av_pix_fmt_get_chroma_sub_sample av_realloc av_realloc_array av_realloc_f av_reallocp av_reallocp_array av_reduce av_rescale av_rescale_q av_rescale_q_rnd av_rescale_rnd av_sample_fmt_is_planar av_samples_copy av_samples_fill_arrays av_samples_get_buffer_size av_samples_set_silence av_size_mult av_sscanf av_stereo3d_alloc av_stereo3d_create_side_data av_strcasecmp av_strdup av_strerror av_stristr av_strlcat av_strlcatf av_strlcpy av_strncasecmp av_strtok av_timecode_adjust_ntsc_framenum2 av_timecode_get_smpte av_timecode_init_from_string av_timecode_make_mpeg_tc_string av_timecode_make_smpte_tc_string2 av_tx_init av_tx_uninit av_usleep av_vbprintf av_video_enc_params_create_side_data av_vlog avpriv_alloc_fixed_dsp avpriv_cga_font avpriv_float_dsp_alloc avpriv_get_gamma_from_trc avpriv_get_trc_function_from_trc avpriv_init_lls avpriv_report_missing_feature avpriv_request_sample avpriv_scalarproduct_float_c avpriv_set_systematic_pal2 avpriv_slicethread_create avpriv_slicethread_execute avpriv_slicethread_free avpriv_solve_lls avpriv_tempfile avpriv_vga16_font

swresample-4

swr_alloc swr_close swr_convert swr_free swr_init swr_is_initialized

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext OpenProcessToken RegCloseKey RegEnumKeyExW RegEnumValueW RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW

bcrypt

BCryptGenRandom

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared AddVectoredExceptionHandler CancelIo CloseHandle CompareStringOrdinal CopyFileExW CreateDirectoryW CreateEventA CreateEventW CreateFileMappingA CreateFileW CreateHardLinkW CreateMutexA CreateNamedPipeW CreateProcessW CreateSemaphoreA CreateSemaphoreW CreateSymbolicLinkW CreateThread CreateToolhelp32Snapshot DebugBreak DeleteCriticalSection DeleteFileW DeviceIoControl DuplicateHandle EnterCriticalSection ExitProcess FindClose FindFirstFileW FindNextFileW FlushFileBuffers FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetActiveProcessorGroupCount GetCommandLineW GetConsoleMode GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFinalPathNameByHandleW GetFullPathNameW GetHandleInformation GetLastError GetLogicalProcessorInformation GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNumaHighestNodeNumber GetNumaNodeProcessorMaskEx GetOverlappedResult GetProcAddress GetProcessAffinityMask GetProcessHeap GetProcessId GetStdHandle GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadContext GetThreadGroupAffinity GetThreadPriority GetTickCount64 GetTimeZoneInformation GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSRWLock IsDBCSLeadByteEx IsDebuggerPresent LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW LoadLibraryW MapViewOfFile Module32FirstW Module32NextW MoveFileExW MultiByteToWideChar OpenFileMappingA OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReleaseMutex ReleaseSRWLockExclusive ReleaseSRWLockShared ReleaseSemaphore RemoveDirectoryW RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetCurrentDirectoryW SetEnvironmentVariableW SetEvent SetFileAttributesW SetFileInformationByHandle SetFilePointerEx SetHandleInformation SetLastError SetProcessAffinityMask SetThreadAffinityMask SetThreadContext SetThreadErrorMode SetThreadGroupAffinity SetThreadPriority SetThreadStackGuarantee Sleep SleepConditionVariableCS SleepConditionVariableSRW SuspendThread SwitchToThread TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryAcquireSRWLockExclusive TryEnterCriticalSection UnmapViewOfFile VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile __C_specific_handler

mfplat

MFCreateAlignedMemoryBuffer MFCreateMediaType MFCreateSample MFShutdown MFStartup

msvcrt

___lc_codepage_func ___mb_cur_max_func __iob_func __setusermatherr _aligned_free _aligned_malloc _aligned_realloc _amsg_exit _assert _beginthreadex _close _endthreadex _errno _exit _fdopen _filelengthi64 _fileno _fileno _fstat64 _ftime64 _ftime64_s _gmtime64 _initterm _hypot _localtime64 _lock _lseeki64 _mktime64 _open _read _setjmp _stat64 _stricmp _strdup _strnicmp _time64 _ultoa _unlink _unlock _vscprintf _vsnprintf _wfopen _wfopen_s _wrename _wunlink abort acos atan atof atoi bsearch calloc clearerr exit fclose feof ferror fflush fgetc fgetpos fgets fgetws fopen fprintf fputc fputs fread free fseek fsetpos ftell fwrite getc getenv getwc isalnum islower isspace isupper iswctype isxdigit _write localeconv log10 longjmp malloc memchr memcmp memcpy memmove memset printf putc putwc qsort realloc rand remove setlocale setvbuf signal srand strcat strchr strcmp strcoll strcpy strcspn strerror strftime strlen strncat strncmp strncpy strpbrk strrchr strspn strstr strtok strtol strtoul strxfrm swscanf_s tan tanh tolower toupper towlower towupper ungetc vfprintf ungetwc wcscat wcschr wcscoll wcscpy wcscspn wcsftime wcslen wcsrchr wcsstr wcstoul wcsxfrm

ole32

CoInitializeEx CoTaskMemFree CoUninitialize StringFromGUID2

userenv

GetUserProfileDirectoryW

ws2_32

WSACleanup WSADuplicateSocketW WSAGetLastError WSARecv WSASend WSASocketW WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket listen recv recvfrom select send sendto setsockopt shutdown

av_ac3_parse_header av_adts_header_parse av_bsf_alloc av_bsf_flush av_bsf_free av_bsf_get_by_name av_bsf_get_class av_bsf_get_null_filter av_bsf_init av_bsf_iterate av_bsf_list_alloc av_bsf_list_append av_bsf_list_append2 av_bsf_list_finalize av_bsf_list_free av_bsf_list_parse_str av_bsf_receive_packet av_bsf_send_packet av_codec_ffversion av_codec_is_decoder av_codec_is_encoder av_codec_iterate av_cpb_properties_alloc av_d3d11va_alloc_context av_dct_calc av_dct_end av_dct_init av_dirac_parse_sequence_header av_dv_codec_profile av_dv_codec_profile2 av_dv_frame_profile av_fast_padded_malloc av_fast_padded_mallocz av_fft_calc av_fft_end av_fft_init av_fft_permute av_get_audio_frame_duration av_get_audio_frame_duration2 av_get_bits_per_sample av_get_exact_bits_per_sample av_get_pcm_codec av_get_profile_name av_grow_packet av_imdct_calc av_imdct_half av_init_packet av_jni_get_java_vm av_jni_set_java_vm av_mdct_calc av_mdct_end av_mdct_init av_mediacodec_alloc_context av_mediacodec_default_free av_mediacodec_default_init av_mediacodec_release_buffer av_mediacodec_render_buffer_at_time av_new_packet av_packet_add_side_data av_packet_alloc av_packet_clone av_packet_copy_props av_packet_free av_packet_free_side_data av_packet_from_data av_packet_get_side_data av_packet_make_refcounted av_packet_make_writable av_packet_move_ref av_packet_new_side_data av_packet_pack_dictionary av_packet_ref av_packet_rescale_ts av_packet_shrink_side_data av_packet_side_data_name av_packet_unpack_dictionary av_packet_unref av_parser_close av_parser_init av_parser_iterate av_parser_parse2 av_qsv_alloc_context av_rdft_calc av_rdft_end av_rdft_init av_shrink_packet av_vorbis_parse_frame av_vorbis_parse_frame_flags av_vorbis_parse_free av_vorbis_parse_init av_vorbis_parse_reset av_xiphlacing avcodec_align_dimensions avcodec_align_dimensions2 avcodec_alloc_context3 avcodec_chroma_pos_to_enum avcodec_close avcodec_configuration avcodec_dct_alloc avcodec_dct_get_class avcodec_dct_init avcodec_decode_subtitle2 avcodec_default_execute avcodec_default_execute2 avcodec_default_get_buffer2 avcodec_default_get_encode_buffer avcodec_default_get_format avcodec_descriptor_get avcodec_descriptor_get_by_name avcodec_descriptor_next avcodec_encode_subtitle avcodec_enum_to_chroma_pos avcodec_fill_audio_frame avcodec_find_best_pix_fmt_of_list avcodec_find_decoder avcodec_find_decoder_by_name avcodec_find_encoder avcodec_find_encoder_by_name avcodec_flush_buffers avcodec_free_context avcodec_get_class avcodec_get_frame_class avcodec_get_hw_config avcodec_get_hw_frames_parameters avcodec_get_name avcodec_get_subtitle_rect_class avcodec_get_type avcodec_is_open avcodec_license avcodec_open2 avcodec_parameters_alloc avcodec_parameters_copy avcodec_parameters_free avcodec_parameters_from_context avcodec_parameters_to_context avcodec_pix_fmt_to_codec_tag avcodec_profile_name avcodec_receive_frame avcodec_receive_packet avcodec_send_frame avcodec_send_packet avcodec_string avcodec_version avpriv_ac3_parse_header avpriv_adts_header_parse avpriv_codec_get_cap_skip_frame_fill_param avpriv_dca_convert_bitstream avpriv_dca_parse_core_frame_header avpriv_elbg_do avpriv_elbg_free avpriv_exif_decode_ifd avpriv_find_start_code avpriv_fits_header_init avpriv_fits_header_parse_line avpriv_get_raw_pix_fmt_tags avpriv_h264_has_num_reorder_frames avpriv_mpeg4audio_get_config2 avpriv_mpegaudio_decode_header avpriv_packet_list_free avpriv_packet_list_get avpriv_packet_list_put avpriv_pix_fmt_find avpriv_split_xiph_headers avpriv_tak_parse_streaminfo avsubtitle_free

Name

.text

Size

57.1MB

Virtual Size

57.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rodata

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

209KB

Virtual Size

209KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

8.5MB

Virtual Size

8.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

501KB

Virtual Size

501KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

810KB

Virtual Size

810KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

11.7MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

896B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

137KB

Virtual Size

137KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

avformat-59.dll

IMPHASH 40570676c8f8801717eef760b624b85d
SHA256 2072e00d0c821eff03b22cfafdc164404ec7a15c2cee28520184efe6fd97bee6
MD5 73719d8f1cc65ebce26a5e2959b92bc4
SHA1 3b27af34a204c0feebe1ff217880ea90d6341584
SHA512 2d19463188bd36cc7cfa1b18c3bb4e58642d14cab12cf8653730f93260a9c2e0e8101e768d30ca22ba26887d2abb11ea8f407203df50a4de754dc7f019b6c395
SSDEEP 196608:+EizaE5RwATgZaqd+KPRkbTNV/3Ew/1g3wg7T:+RRlY+GRkbTT3HgXT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

avcodec-59

av_ac3_parse_header av_adts_header_parse av_bsf_alloc av_bsf_flush av_bsf_free av_bsf_get_by_name av_bsf_get_null_filter av_bsf_init av_bsf_list_parse_str av_bsf_receive_packet av_bsf_send_packet av_codec_is_decoder av_codec_iterate av_dirac_parse_sequence_header av_dv_codec_profile2 av_dv_frame_profile av_get_audio_frame_duration av_get_audio_frame_duration2 av_get_bits_per_sample av_get_exact_bits_per_sample av_grow_packet av_init_packet av_new_packet av_packet_add_side_data av_packet_alloc av_packet_clone av_packet_copy_props av_packet_free av_packet_from_data av_packet_get_side_data av_packet_make_refcounted av_packet_move_ref av_packet_new_side_data av_packet_pack_dictionary av_packet_ref av_packet_rescale_ts av_packet_unref av_parser_close av_parser_init av_parser_parse2 av_shrink_packet av_vorbis_parse_frame_flags av_vorbis_parse_free av_vorbis_parse_init av_vorbis_parse_reset av_xiphlacing avcodec_alloc_context3 avcodec_chroma_pos_to_enum avcodec_close avcodec_decode_subtitle2 avcodec_descriptor_get avcodec_descriptor_get_by_name avcodec_enum_to_chroma_pos avcodec_find_decoder avcodec_find_decoder_by_name avcodec_free_context avcodec_get_name avcodec_get_type avcodec_is_open avcodec_open2 avcodec_parameters_alloc avcodec_parameters_copy avcodec_parameters_free avcodec_parameters_from_context avcodec_parameters_to_context avcodec_pix_fmt_to_codec_tag avcodec_receive_frame avcodec_send_packet avcodec_string avpriv_ac3_parse_header avpriv_adts_header_parse avpriv_codec_get_cap_skip_frame_fill_param avpriv_dca_convert_bitstream avpriv_dca_parse_core_frame_header avpriv_exif_decode_ifd avpriv_find_start_code avpriv_fits_header_init avpriv_fits_header_parse_line avpriv_h264_has_num_reorder_frames avpriv_mpeg4audio_get_config2 avpriv_mpegaudio_decode_header avpriv_packet_list_free avpriv_packet_list_get avpriv_packet_list_put avpriv_pix_fmt_find avpriv_split_xiph_headers avpriv_tak_parse_streaminfo avsubtitle_free

avutil-57

av_add_q av_add_stable av_adler32_update av_aes_alloc av_aes_crypt av_aes_ctr_alloc av_aes_ctr_crypt av_aes_ctr_free av_aes_ctr_get_iv av_aes_ctr_increment_iv av_aes_ctr_init av_aes_ctr_set_full_iv av_aes_ctr_set_random_iv av_aes_init av_append_path_component av_asprintf av_base64_decode av_base64_encode av_basename av_blowfish_crypt_ecb av_blowfish_init av_bprint_append_data av_bprint_chars av_bprint_clear av_bprint_finalize av_bprint_init av_bprint_init_for_buffer av_bprintf av_buffer_alloc av_buffer_create av_buffer_default_free av_buffer_pool_get av_buffer_pool_init av_buffer_pool_uninit av_buffer_realloc av_buffer_ref av_buffer_unref av_calloc av_color_primaries_name av_color_space_name av_color_transfer_name av_compare_mod av_compare_ts av_content_light_metadata_alloc av_crc av_crc_get_table av_d2q av_default_item_name av_des_alloc av_des_crypt av_des_init av_des_mac av_dict_copy av_dict_count av_dict_free av_dict_get av_dict_get_string av_dict_parse_string av_dict_set av_dict_set_int av_dirname av_display_rotation_get av_div_q av_dovi_alloc av_dynarray2_add av_dynarray_add av_dynarray_add_nofree av_encryption_info_add_side_data av_encryption_info_alloc av_encryption_info_clone av_encryption_info_free av_encryption_init_info_add_side_data av_encryption_init_info_alloc av_encryption_init_info_free av_encryption_init_info_get_side_data av_escape av_expr_eval av_expr_parse av_fast_malloc av_fast_realloc av_fifo_alloc av_fifo_alloc_array av_fifo_drain av_fifo_freep av_fifo_generic_peek_at av_fifo_generic_read av_fifo_generic_write av_fifo_realloc2 av_fifo_reset av_fifo_size av_fifo_space av_find_info_tag av_fourcc_make_string av_frame_alloc av_frame_free av_free av_freep av_gcd av_get_bits_per_pixel av_get_bytes_per_sample av_get_channel_layout_nb_channels av_get_channel_layout_string av_get_channel_name av_get_media_type_string av_get_picture_type_char av_get_pix_fmt av_get_pix_fmt_name av_get_random_seed av_get_sample_fmt_name av_get_token av_gettime av_gettime_relative av_hash_alloc av_hash_final_hex av_hash_freep av_hash_get_name av_hash_init av_hash_update av_hmac_alloc av_hmac_final av_hmac_free av_hmac_init av_hmac_update av_image_check_sar av_image_check_size av_image_fill_linesizes av_image_get_buffer_size av_lfg_init av_log av_log_get_level av_log_once av_lzo1x_decode av_malloc av_malloc_array av_mallocz av_mastering_display_metadata_alloc av_match_list av_match_name av_md5_alloc av_md5_final av_md5_init av_md5_sum av_md5_update av_memdup av_mul_q av_opt_copy av_opt_flag_is_set av_opt_free av_opt_get av_opt_get_dict_val av_opt_get_int av_opt_get_key_value av_opt_ptr av_opt_set av_opt_set_bin av_opt_set_defaults av_opt_set_dict av_opt_set_dict2 av_opt_set_dict_val av_opt_set_int av_parse_time av_parse_video_rate av_pix_fmt_desc_get av_pix_fmt_get_chroma_sub_sample av_q2intfloat av_rc4_alloc av_rc4_crypt av_rc4_init av_realloc av_realloc_array av_realloc_f av_reallocp av_reallocp_array av_reduce av_rescale av_rescale_q av_rescale_q_rnd av_rescale_rnd av_sample_fmt_is_planar av_set_options_string av_sha_alloc av_sha_final av_sha_init av_sha_update av_small_strptime av_spherical_alloc av_spherical_projection_name av_spherical_tile_bounds av_sscanf av_stereo3d_alloc av_stereo3d_type_name av_strcasecmp av_strdup av_strerror av_strireplace av_stristart av_stristr av_strlcat av_strlcatf av_strlcpy av_strncasecmp av_strndup av_strnstr av_strstart av_strtod av_strtok av_sub_q av_tea_alloc av_tea_crypt av_tea_init av_thread_message_flush av_thread_message_queue_alloc av_thread_message_queue_free av_thread_message_queue_recv av_thread_message_queue_send av_thread_message_queue_set_err_recv av_thread_message_queue_set_err_send av_thread_message_queue_set_free_func av_timecode_get_smpte_from_framenum av_timecode_init av_timecode_init_from_string av_timecode_make_smpte_tc_string2 av_timecode_make_string av_timegm av_tree_destroy av_tree_enumerate av_tree_find av_tree_insert av_tree_node_alloc av_usleep av_vbprintf av_xtea_le_crypt av_xtea_le_init avpriv_dict_set_timestamp avpriv_get_gamma_from_trc avpriv_open avpriv_report_missing_feature avpriv_request_sample avpriv_tempfile

advapi32

CryptAcquireContextA CryptAcquireContextW CryptCreateHash CryptDecrypt CryptDestroyHash CryptGenRandom CryptGetHashParam CryptGetProvParam CryptReleaseContext CryptSetHashParam CryptSetProvParam CryptSignHashA DeregisterEventSource GetUserNameA InitializeSecurityDescriptor RegCloseKey RegOpenKeyExW RegQueryValueExW RegisterEventSourceW ReportEventW SetSecurityDescriptorDacl SystemFunction036

crypt32

CertCloseStore CertDeleteCertificateFromStore CertEnumCRLsInStore CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext CertGetCertificateContextProperty CertOpenStore PFXImportCertStore

iphlpapi

GetAdaptersAddresses if_indextoname if_nametoindex

kernel32

AddVectoredExceptionHandler CancelIoEx CloseHandle ConvertFiberToThread ConvertThreadToFiber CreateDirectoryW CreateEventA CreateFiber CreateFileA CreateSemaphoreA DeleteCriticalSection DeleteFiber DuplicateHandle EnterCriticalSection FindClose FindFirstFileA FindFirstFileW FindNextFileW FormatMessageA FormatMessageW FreeLibrary GetACP GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentVariableW GetFileAttributesW GetFileInformationByHandle GetFileType GetFinalPathNameByHandleA GetFullPathNameW GetHandleInformation GetLastError GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleExA GetModuleHandleExW GetModuleHandleW GetProcAddress GetProcessAffinityMask GetProcessTimes GetStdHandle GetSystemDirectoryA GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetThreadTimes GetTickCount GetTickCount64 GetVersion GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalHandle GlobalLock GlobalUnlock InitializeCriticalSection InitializeCriticalSectionAndSpinCount IsDBCSLeadByteEx IsDebuggerPresent IsValidCodePage LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree MoveFileExA MoveFileExW MultiByteToWideChar OpenProcess OutputDebugStringA PeekNamedPipe QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleA ReadConsoleW ReadFile ReleaseSemaphore RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetConsoleMode SetDllDirectoryW SetEvent SetHandleInformation SetLastError SetProcessAffinityMask SetThreadAffinityMask SetThreadContext SetThreadPriority Sleep SuspendThread SwitchToFiber TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection VirtualAlloc VirtualFree VirtualLock VirtualProtect VirtualQuery VirtualUnlock WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile __C_specific_handler lstrcmpiW lstrcpyA lstrcpynA

msvcrt

___lc_codepage_func ___mb_cur_max_func __argv __iob_func __setusermatherr _access _amsg_exit _assert _beginthread _beginthreadex _close _close _dup _dup2 _endthreadex _errno _exit _fdopen _filelengthi64 _fileno _findclose _fileno _fstat64 _ftime64 _get_osfhandle _getcwd _getmaxstdio _gmtime64 _initterm _hypot _isctype _localtime64 _lock _lseeki64 _mkdir _mktime64 _onexit _open _open_osfhandle _putenv _read _read _rmdir _setjmp _setmaxstdio _setmode _setmode _stat64 _stricmp _strdup _strdup _strnicmp _time64 _ultoa _unlink _unlink _unlock _vscprintf _vsnprintf _vsnwprintf _vsnprintf_s _waccess _wassert _wfindfirst64 _wfindnext64 _wfopen _wfullpath _wmkdir _wopen _wremove _wrmdir _wstat64 _wunlink abort atof atoi bsearch calloc div exit fclose feof ferror fflush fgetc fgetpos fgets fopen fprintf fputc fputs fread free fseek fsetpos ftell fwrite getc getenv getwc isalnum isalpha islower isprint isspace isupper iswctype isxdigit _write localeconv log10 longjmp malloc memchr memcmp memcpy memmove memset printf putc puts putwc qsort raise realloc rand setlocale setvbuf signal sinh sprintf srand strcat strchr strcmp strcoll strcpy strcpy_s strcspn strerror strftime strlen strncat strncmp strncpy strpbrk strrchr strspn strstr strtok strtok_s strtol strtoul strxfrm tan tolower toupper towlower towupper ungetc vfprintf ungetwc wcscat wcscoll wcscpy wcsftime wcslen wcsrchr wcsstr wcstombs wcsxfrm

ncrypt

BCryptCloseAlgorithmProvider BCryptGenRandom BCryptOpenAlgorithmProvider NCryptDecrypt NCryptDeleteKey NCryptFreeObject NCryptGetProperty NCryptOpenKey NCryptOpenStorageProvider NCryptSignHash

shell32

SHGetFolderPathW SHGetSpecialFolderPathA

user32

GetProcessWindowStation GetUserObjectInformationW MessageBoxW wsprintfA

ws2_32

WSACleanup WSACloseEvent WSACreateEvent WSAEventSelect WSAGetLastError WSAIoctl WSARecvFrom WSASendTo WSASetLastError WSASocketA WSAStartup WSAStringToAddressA WSAWaitForMultipleEvents __WSAFDIsSet accept bind closesocket connect freeaddrinfo getaddrinfo gethostbyaddr gethostbyname gethostname getnameinfo getpeername getservbyname getservbyport getsockname getsockopt htonl htons inet_addr inet_ntoa inet_ntop inet_pton ioctlsocket listen ntohl ntohs recv recvfrom select send sendto setsockopt shutdown socket

av_add_index_entry av_append_packet av_codec_get_id av_codec_get_tag av_codec_get_tag2 av_demuxer_iterate av_disposition_from_string av_disposition_to_string av_dump_format av_filename_number_test av_find_best_stream av_find_default_stream_index av_find_input_format av_find_program_from_stream av_fmt_ctx_get_duration_estimation_method av_format_ffversion av_format_inject_global_side_data av_get_frame_filename av_get_frame_filename2 av_get_output_timestamp av_get_packet av_guess_codec av_guess_format av_guess_frame_rate av_guess_sample_aspect_ratio av_hex_dump av_hex_dump_log av_index_search_timestamp av_interleaved_write_frame av_interleaved_write_uncoded_frame av_match_ext av_muxer_iterate av_new_program av_pkt_dump2 av_pkt_dump_log2 av_probe_input_buffer av_probe_input_buffer2 av_probe_input_format av_probe_input_format2 av_probe_input_format3 av_program_add_stream_index av_read_frame av_read_pause av_read_play av_sdp_create av_seek_frame av_stream_add_side_data av_stream_get_class av_stream_get_codec_timebase av_stream_get_end_pts av_stream_get_parser av_stream_get_side_data av_stream_new_side_data av_url_split av_write_frame av_write_trailer av_write_uncoded_frame av_write_uncoded_frame_query avformat_alloc_context avformat_alloc_output_context2 avformat_close_input avformat_configuration avformat_find_stream_info avformat_flush avformat_free_context avformat_get_class avformat_get_mov_audio_tags avformat_get_mov_video_tags avformat_get_riff_audio_tags avformat_get_riff_video_tags avformat_index_get_entries_count avformat_index_get_entry avformat_index_get_entry_from_timestamp avformat_init_output avformat_license avformat_match_stream_specifier avformat_network_deinit avformat_network_init avformat_new_stream avformat_open_input avformat_query_codec avformat_queue_attached_pictures avformat_seek_file avformat_transfer_internal_stream_timing_info avformat_version avformat_write_header avio_accept avio_alloc_context avio_check avio_close avio_close_dir avio_close_dyn_buf avio_closep avio_context_free avio_enum_protocols avio_feof avio_find_protocol_name avio_flush avio_free_directory_entry avio_get_dyn_buf avio_get_str avio_get_str16be avio_get_str16le avio_handshake avio_open avio_open2 avio_open_dir avio_open_dyn_buf avio_pause avio_print_string_array avio_printf avio_protocol_get_class avio_put_str avio_put_str16be avio_put_str16le avio_r8 avio_rb16 avio_rb24 avio_rb32 avio_rb64 avio_read avio_read_dir avio_read_partial avio_read_to_bprint avio_rl16 avio_rl24 avio_rl32 avio_rl64 avio_seek avio_seek_time avio_size avio_skip avio_w8 avio_wb16 avio_wb24 avio_wb32 avio_wb64 avio_wl16 avio_wl24 avio_wl32 avio_wl64 avio_write avio_write_marker avpriv_dv_get_packet avpriv_dv_init_demux avpriv_dv_produce_packet avpriv_mpegts_parse_close avpriv_mpegts_parse_open avpriv_mpegts_parse_packet avpriv_new_chapter avpriv_register_devices avpriv_set_pts_info avpriv_stream_set_need_parsing avpriv_update_cur_dts gme_ay_type gme_clear_playlist gme_delete gme_enable_accuracy gme_equalizer gme_free_info gme_gbs_type gme_gym_type gme_hes_type gme_identify_extension gme_identify_file gme_identify_header gme_ignore_silence gme_kss_type gme_load_custom gme_load_data gme_load_file gme_multi_channel gme_mute_voice gme_mute_voices gme_new_emu gme_new_emu_multi_channel gme_nsf_type gme_nsfe_type gme_open_data gme_open_file gme_play gme_sap_type gme_seek gme_seek_samples gme_set_autoload_playback_limit gme_set_equalizer gme_set_fade gme_set_stereo_depth gme_set_tempo gme_set_user_cleanup gme_set_user_data gme_spc_type gme_start_track gme_tell gme_tell_samples gme_track_count gme_track_ended gme_track_info gme_type gme_type_extension gme_type_list gme_type_multitrack gme_type_system gme_user_data gme_vgm_type gme_vgz_type gme_voice_count gme_voice_name gme_warning gme_wrong_file_type

Name

.text

Size

10.6MB

Virtual Size

10.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

42KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3.4MB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

325KB

Virtual Size

325KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

424KB

Virtual Size

423KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

972KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

920B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

avutil-57.dll

IMPHASH 79a06e95dbe0f701eb98f08d95a82191
SHA256 cb86f74c46b1771d9ce5aba2fd83796b60c0d2a3f1f9ba7ed9cc111f0b25b0a1
MD5 fa3f45bb731c4de12e3f56662d488164
SHA1 d1988df5b0c643ba9b7729b0312fdfb2d2d61077
SHA512 1c209ab2589ef5f3eb43e954cc85349e81b9c28a01f1ae8646520c3aab57a8f9798b421b816235646853954b677a8fbf97e3048ed231a36d48a58faa086468a9
SSDEEP 12288:KznPFPp7redNfXlwVtBQwRHoCwxQO+NF+nWypr1G7tvRommHiSG:gPFP9GNfl6BQwRHMyOnn71G7/m+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext RegCloseKey RegEnumKeyExW RegEnumValueW RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW

bcrypt

BCryptCloseAlgorithmProvider BCryptGenRandom BCryptOpenAlgorithmProvider

kernel32

AddVectoredExceptionHandler CloseHandle CreateEventA CreateFileMappingA CreateMutexA CreateSemaphoreA DeleteCriticalSection DuplicateHandle EnterCriticalSection FileTimeToSystemTime FindClose FindFirstFileW FindNextFileW FreeLibrary GetConsoleMode GetConsoleScreenBufferInfo GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetFileAttributesW GetHandleInformation GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetProcAddress GetProcessAffinityMask GetProcessTimes GetStdHandle GetSystemDirectoryW GetSystemTimeAdjustment GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetThreadTimes GetTickCount64 GetTimeZoneInformation InitializeCriticalSection IsDBCSLeadByteEx IsDebuggerPresent LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW LocalAlloc LocalFree MapViewOfFile MultiByteToWideChar OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReleaseMutex ReleaseSemaphore RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetConsoleTextAttribute SetEvent SetLastError SetProcessAffinityMask SetSystemTime SetThreadContext SetThreadErrorMode SetThreadPriority Sleep SuspendThread SwitchToThread TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection UnmapViewOfFile VerSetConditionMask VerifyVersionInfoW VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW __C_specific_handler

msvcrt

___lc_codepage_func ___mb_cur_max_func __iob_func __setusermatherr _aligned_free _aligned_malloc _aligned_realloc _amsg_exit _assert _beginthreadex _close _endthreadex _errno _exit _fdopen _fstat64 _get_osfhandle _gmtime64 _initterm _hypot _isatty _localtime64 _lock _mktime64 _open _read _setjmp _sopen _strdup _ultoa _unlock _wfopen_s _wsopen abort acos asin atan atoi bsearch calloc clock cosh exit fclose fgetws fprintf fputc fputs free fwrite getc getenv islower isspace isupper isxdigit _write localeconv log10 longjmp malloc memchr memcmp memcpy memmove memset printf qsort realloc rand signal sinh strchr strcmp strcspn strerror strftime strlen strncmp strrchr strspn strstr strtol strtoul swscanf_s tan tanh tolower ungetc vfprintf wcscat wcschr wcscpy wcscspn wcslen wcsrchr wcsstr wcstoul

ole32

StringFromGUID2

user32

GetDesktopWindow

av_add_i av_add_q av_add_stable av_adler32_update av_aes_alloc av_aes_crypt av_aes_ctr_alloc av_aes_ctr_crypt av_aes_ctr_free av_aes_ctr_get_iv av_aes_ctr_increment_iv av_aes_ctr_init av_aes_ctr_set_full_iv av_aes_ctr_set_iv av_aes_ctr_set_random_iv av_aes_init av_aes_size av_append_path_component av_asprintf av_assert0_fpu av_audio_fifo_alloc av_audio_fifo_drain av_audio_fifo_free av_audio_fifo_peek av_audio_fifo_peek_at av_audio_fifo_read av_audio_fifo_realloc av_audio_fifo_reset av_audio_fifo_size av_audio_fifo_space av_audio_fifo_write av_base64_decode av_base64_encode av_basename av_blowfish_alloc av_blowfish_crypt av_blowfish_crypt_ecb av_blowfish_init av_bmg_get av_bprint_append_data av_bprint_channel_layout av_bprint_chars av_bprint_clear av_bprint_escape av_bprint_finalize av_bprint_get_buffer av_bprint_init av_bprint_init_for_buffer av_bprint_strftime av_bprintf av_buffer_alloc av_buffer_allocz av_buffer_create av_buffer_default_free av_buffer_get_opaque av_buffer_get_ref_count av_buffer_is_writable av_buffer_make_writable av_buffer_pool_buffer_get_opaque av_buffer_pool_get av_buffer_pool_init av_buffer_pool_init2 av_buffer_pool_uninit av_buffer_realloc av_buffer_ref av_buffer_replace av_buffer_unref av_calloc av_camellia_alloc av_camellia_crypt av_camellia_init av_camellia_size av_cast5_alloc av_cast5_crypt av_cast5_crypt2 av_cast5_init av_cast5_size av_channel_layout_extract_channel av_chroma_location_from_name av_chroma_location_name av_cmp_i av_color_primaries_from_name av_color_primaries_name av_color_range_from_name av_color_range_name av_color_space_from_name av_color_space_name av_color_transfer_from_name av_color_transfer_name av_compare_mod av_compare_ts av_content_light_metadata_alloc av_content_light_metadata_create_side_data av_cpu_count av_cpu_force_count av_cpu_max_align av_crc av_crc_get_table av_crc_init av_d2q av_d2str av_default_get_category av_default_item_name av_des_alloc av_des_crypt av_des_init av_des_mac av_detection_bbox_alloc av_detection_bbox_create_side_data av_dict_copy av_dict_count av_dict_free av_dict_get av_dict_get_string av_dict_parse_string av_dict_set av_dict_set_int av_dirname av_display_matrix_flip av_display_rotation_get av_display_rotation_set av_div_i av_div_q av_dovi_alloc av_dovi_metadata_alloc av_downmix_info_update_side_data av_dynamic_hdr_plus_alloc av_dynamic_hdr_plus_create_side_data av_dynarray2_add av_dynarray_add av_dynarray_add_nofree av_encryption_info_add_side_data av_encryption_info_alloc av_encryption_info_clone av_encryption_info_free av_encryption_info_get_side_data av_encryption_init_info_add_side_data av_encryption_init_info_alloc av_encryption_init_info_free av_encryption_init_info_get_side_data av_escape av_expr_count_func av_expr_count_vars av_expr_eval av_expr_free av_expr_parse av_expr_parse_and_eval av_fast_malloc av_fast_mallocz av_fast_realloc av_fifo_alloc av_fifo_alloc_array av_fifo_drain av_fifo_free av_fifo_freep av_fifo_generic_peek av_fifo_generic_peek_at av_fifo_generic_read av_fifo_generic_write av_fifo_grow av_fifo_realloc2 av_fifo_reset av_fifo_size av_fifo_space av_file_map av_file_unmap av_film_grain_params_alloc av_film_grain_params_create_side_data av_find_best_pix_fmt_of_2 av_find_info_tag av_find_nearest_q_idx av_fopen_utf8 av_force_cpu_flags av_fourcc_make_string av_frame_alloc av_frame_apply_cropping av_frame_clone av_frame_copy av_frame_copy_props av_frame_free av_frame_get_buffer av_frame_get_plane_buffer av_frame_get_side_data av_frame_is_writable av_frame_make_writable av_frame_move_ref av_frame_new_side_data av_frame_new_side_data_from_buf av_frame_ref av_frame_remove_side_data av_frame_side_data_name av_frame_unref av_free av_freep av_gcd av_gcd_q av_get_alt_sample_fmt av_get_bits_per_pixel av_get_bytes_per_sample av_get_channel_description av_get_channel_layout av_get_channel_layout_channel_index av_get_channel_layout_nb_channels av_get_channel_layout_string av_get_channel_name av_get_colorspace_name av_get_cpu_flags av_get_default_channel_layout av_get_extended_channel_layout av_get_known_color_name av_get_media_type_string av_get_packed_sample_fmt av_get_padded_bits_per_pixel av_get_picture_type_char av_get_pix_fmt av_get_pix_fmt_loss av_get_pix_fmt_name av_get_pix_fmt_string av_get_planar_sample_fmt av_get_random_seed av_get_sample_fmt av_get_sample_fmt_name av_get_sample_fmt_string av_get_standard_channel_layout av_get_time_base_q av_get_token av_gettime av_gettime_relative av_gettime_relative_is_monotonic av_hash_alloc av_hash_final av_hash_final_b64 av_hash_final_bin av_hash_final_hex av_hash_freep av_hash_get_name av_hash_get_size av_hash_init av_hash_names av_hash_update av_hmac_alloc av_hmac_calc av_hmac_final av_hmac_free av_hmac_init av_hmac_update av_hwdevice_ctx_alloc av_hwdevice_ctx_create av_hwdevice_ctx_create_derived av_hwdevice_ctx_create_derived_opts av_hwdevice_ctx_init av_hwdevice_find_type_by_name av_hwdevice_get_hwframe_constraints av_hwdevice_get_type_name av_hwdevice_hwconfig_alloc av_hwdevice_iterate_types av_hwframe_constraints_free av_hwframe_ctx_alloc av_hwframe_ctx_create_derived av_hwframe_ctx_init av_hwframe_get_buffer av_hwframe_map av_hwframe_transfer_data av_hwframe_transfer_get_formats av_i2int av_image_alloc av_image_check_sar av_image_check_size av_image_check_size2 av_image_copy av_image_copy_plane av_image_copy_plane_uc_from av_image_copy_to_buffer av_image_copy_uc_from av_image_fill_arrays av_image_fill_black av_image_fill_linesizes av_image_fill_max_pixsteps av_image_fill_plane_sizes av_image_fill_pointers av_image_get_buffer_size av_image_get_linesize av_int2i av_int_list_length_for_size av_lfg_init av_lfg_init_from_data av_log av_log2 av_log2_16bit av_log2_i av_log_default_callback av_log_format_line av_log_format_line2 av_log_get_flags av_log_get_level av_log_once av_log_set_callback av_log_set_flags av_log_set_level av_lzo1x_decode av_malloc av_malloc_array av_mallocz av_mallocz_array av_mastering_display_metadata_alloc av_mastering_display_metadata_create_side_data av_match_list av_match_name av_max_alloc av_md5_alloc av_md5_final av_md5_init av_md5_size av_md5_sum av_md5_update av_memcpy_backptr av_memdup av_mod_i av_mul_i av_mul_q av_murmur3_alloc av_murmur3_final av_murmur3_init av_murmur3_init_seeded av_murmur3_update av_nearer_q av_opt_child_class_iterate av_opt_child_next av_opt_copy av_opt_eval_double av_opt_eval_flags av_opt_eval_float av_opt_eval_int av_opt_eval_int64 av_opt_eval_q av_opt_find av_opt_find2 av_opt_flag_is_set av_opt_free av_opt_freep_ranges av_opt_get av_opt_get_channel_layout av_opt_get_dict_val av_opt_get_double av_opt_get_image_size av_opt_get_int av_opt_get_key_value av_opt_get_pixel_fmt av_opt_get_q av_opt_get_sample_fmt av_opt_get_video_rate av_opt_is_set_to_default av_opt_is_set_to_default_by_name av_opt_next av_opt_ptr av_opt_query_ranges av_opt_query_ranges_default av_opt_serialize av_opt_set av_opt_set_bin av_opt_set_channel_layout av_opt_set_defaults av_opt_set_defaults2 av_opt_set_dict av_opt_set_dict2 av_opt_set_dict_val av_opt_set_double av_opt_set_from_string av_opt_set_image_size av_opt_set_int av_opt_set_pixel_fmt av_opt_set_q av_opt_set_sample_fmt av_opt_set_video_rate av_opt_show2 av_parse_color av_parse_cpu_caps av_parse_ratio av_parse_time av_parse_video_rate av_parse_video_size av_pix_fmt_count_planes av_pix_fmt_desc_get av_pix_fmt_desc_get_id av_pix_fmt_desc_next av_pix_fmt_get_chroma_sub_sample av_pix_fmt_swap_endianness av_pixelutils_get_sad_fn av_q2intfloat av_rc4_alloc av_rc4_crypt av_rc4_init av_read_image_line av_read_image_line2 av_realloc av_realloc_array av_realloc_f av_reallocp av_reallocp_array av_reduce av_rescale av_rescale_delta av_rescale_q av_rescale_q_rnd av_rescale_rnd av_ripemd_alloc av_ripemd_final av_ripemd_init av_ripemd_size av_ripemd_update av_sample_fmt_is_planar av_samples_alloc av_samples_alloc_array_and_samples av_samples_copy av_samples_fill_arrays av_samples_get_buffer_size av_samples_set_silence av_set_options_string av_sha512_alloc av_sha512_final av_sha512_init av_sha512_size av_sha512_update av_sha_alloc av_sha_final av_sha_init av_sha_size av_sha_update av_shr_i av_size_mult av_small_strptime av_spherical_alloc av_spherical_from_name av_spherical_projection_name av_spherical_tile_bounds av_sscanf av_stereo3d_alloc av_stereo3d_create_side_data av_stereo3d_from_name av_stereo3d_type_name av_strcasecmp av_strdup av_strerror av_strireplace av_stristart av_stristr av_strlcat av_strlcatf av_strlcpy av_strncasecmp av_strndup av_strnstr av_strstart av_strtod av_strtok av_sub_i av_sub_q av_tea_alloc av_tea_crypt av_tea_init av_tea_size av_tempfile av_thread_message_flush av_thread_message_queue_alloc av_thread_message_queue_free av_thread_message_queue_nb_elems av_thread_message_queue_recv av_thread_message_queue_send av_thread_message_queue_set_err_recv av_thread_message_queue_set_err_send av_thread_message_queue_set_free_func av_timecode_adjust_ntsc_framenum2 av_timecode_check_frame_rate av_timecode_get_smpte av_timecode_get_smpte_from_framenum av_timecode_init av_timecode_init_from_components av_timecode_init_from_string av_timecode_make_mpeg_tc_string av_timecode_make_smpte_tc_string av_timecode_make_smpte_tc_string2 av_timecode_make_string av_timegm av_tree_destroy av_tree_enumerate av_tree_find av_tree_insert av_tree_node_alloc av_tree_node_size av_twofish_alloc av_twofish_crypt av_twofish_init av_twofish_size av_tx_init av_tx_uninit av_usleep av_utf8_decode av_util_ffversion av_vbprintf av_version_info av_video_enc_params_alloc av_video_enc_params_create_side_data av_vk_frame_alloc av_vkfmt_from_pixfmt av_vlog av_write_image_line av_write_image_line2 av_xtea_alloc av_xtea_crypt av_xtea_init av_xtea_le_crypt av_xtea_le_init avpriv_alloc_fixed_dsp avpriv_cga_font avpriv_dict_set_timestamp avpriv_float_dsp_alloc avpriv_get_gamma_from_trc avpriv_get_trc_function_from_trc avpriv_init_lls avpriv_open avpriv_report_missing_feature avpriv_request_sample avpriv_scalarproduct_float_c avpriv_set_systematic_pal2 avpriv_slicethread_create avpriv_slicethread_execute avpriv_slicethread_free avpriv_solve_lls avpriv_tempfile avpriv_vga16_font avutil_configuration avutil_license avutil_version

Name

.text

Size

712KB

Virtual Size

711KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

152KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

896B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

channel.dll

IMPHASH dd2f969be4191c76250e9484719f6050
SHA256 ca286604d2e3d576e95c414df2e3d32fb2260da136b50f539fc76e1812cc0966
MD5 a84a04ad46b430f2f784d7da2dc256e9
SHA1 cc817715e7db73e5ba4d1462bc717c4af178b2a5
SHA512 02a495ec649aae1eaa87094d4fdee74df880cedaed97668b514f9b194fc23f763a3ae70329f2985681e8f22a2a3e123c5e17e2d3c2eec680046aea4ef01ba97e
SSDEEP 49152:pxg5rxLDjuuQ6JSStg/aELQnTuciLCXrKklWyHfdAMUf+ErbCRHhywvPW6:bkuG4LmrKpjbCP3h
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

1c:f4:32:cd:2e:9b:19:4a:18:b5:a0:1f:8c:2e:0b:e3:c2:c9:b7:3b:fd:2e:76:7b:68:13:6e:ae:34:d4:d5:67

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 2, 2024

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

5e:c9:ed:d5:94:78:85:7b:d5:61:c6:28

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 7, 2023 - Sep 6, 2024

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 2, 2023 - Dec 4, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

2611308

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\monec\Documents\workspace\Monect_host\x64\Release\channel.pdb

ws2_32

ntohl freeaddrinfo getaddrinfo ntohs htons WSAWaitForMultipleEvents WSASetEvent WSAResetEvent WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent WSAGetLastError socket setsockopt sendto send recvfrom recv listen getsockopt getsockname getpeername ioctlsocket connect closesocket bind accept htonl

winmm

timeEndPeriod timeBeginPeriod timeGetTime

secur32

DeleteSecurityContext CompleteAuthToken InitializeSecurityContextA FreeCredentialsHandle AcquireCredentialsHandleA

kernel32

WriteConsoleW GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc SetStdHandle GetFileSizeEx FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetModuleFileNameW InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection WaitForSingleObject SetEvent CreateEventW HeapSize CloseHandle GetCurrentThreadId GetTickCount64 GetLastError Sleep OpenThread TlsAlloc TlsGetValue TlsSetValue GetStdHandle WriteFile IsDebuggerPresent OutputDebugStringA FormatMessageA DebugBreak RaiseException GetCurrentThread GetModuleHandleA GetProcAddress TryEnterCriticalSection ResetEvent MultiByteToWideChar SetLastError WideCharToMultiByte InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared InitOnceExecuteOnce InitializeConditionVariable WakeAllConditionVariable SleepConditionVariableCS RtlVirtualUnwind GetSystemTimeAsFileTime GlobalAlloc GlobalFree ExitProcess CreateThread InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId InitializeSListHead RtlUnwindEx RtlPcToFileHeader InterlockedFlushSList InitializeCriticalSectionAndSpinCount TlsFree FreeLibrary LoadLibraryExW GetTimeZoneInformation GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW GetFileType QueryPerformanceFrequency GetModuleHandleExW

advapi32

SystemFunction036

iphlpapi

GetAdaptersAddresses

Name

.text

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

614KB

Virtual Size

614KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

69KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

113KB

Virtual Size

112KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

248B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/ViGEm/ViGEmBus.inf

SHA256 63774d6149f036c0d9faf98b062fea6b97debed559a9522099e46b54fe58da40
MD5 c75c1a401eba37e59c4477b22f8ced9b
SHA1 5e845664f66e4d005fa2b041db4c9f6bf0d564a9
SHA512 1a12908961361eeea00b98174434e931f5d575a9cf72858a21536c2900c7c55107b5d34952cc149119572d3ea93e3c7d2fca018dd3535660dfb008c82eff8bb2
MD5 SHA1 SHA512

driver/ViGEm/vigembus.cat

SHA256 5b03a642a52d5ee895931c8fad98b2a67f20331c313aec42aa96d76c9c3ff928
MD5 e67c26e6c46015f05da50046aacf8581
SHA1 32dfcee6d080e1b0c8012f8a6198f1e7d2afa3a0
SHA512 dd197b897c71f11abb9eefbad70691ed0b2b2ad0636616276d08d2c2a002b99e1ff7c5c47a54df94967f9a9f8c977fafba247f6aecfaa917dfb7efdb2d983493
SSDEEP 192:8dfdE4fk16zraBdnqddgyVDGtxURYWEhV0+3Ef5KYpBjSI5xPXyE:QO74nxKTu+3Ef5dpBjR3PXyE
MD5 SHA1 SHA512 SSDEEP

driver/ViGEm/x64/ViGEmBus.sys

IMPHASH 8d1a4e8712010d023cba4c6cbe2df2be
SHA256 1a1e57cb0dd7ca08d96bbb1b6ce667e3273702c13a7ecf86839b7642ef8255e0
MD5 129165f67ccbb25be6be8ae2f0c15dda
SHA1 499865e046dc1d70edbf2a31ef06c03b6c6ea855
SHA512 4666cf73ef77b0e7b86822fdc18743d41496c46686a91535ed7757dbdb8e0354489383aa4a27ab943e26360e8e1c8aed5600724034e0e6c38163faea24344ca2
SSDEEP 1536:z+qh1jHbs7EZAusYDJg47/5tEYyD7B4G91eZ0dicytMaop:KqPjHb7zT7/5tEPnTeZ0dicytw
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

PE Signature issue

Digest

39:d9:75:e9:2d:4b:cb:0f:bb:c9:5b:aa:2a:22:4a:b1:20:6e:16:da:bf:5c:b6:87:3f:12:a6:18:6d:7d:ac:0d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 21, 2024

Minor OS version

0

Major OS version

10

Entry point

4512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\projects\vigembus\bin\x64\ViGEmBus.pdb

Name

.text

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

68B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/ViGEm/x64/WdfCoinstaller01009.dll

IMPHASH 70497fec79daa5f71de3b34faee686a5
SHA256 1a7627c11aecf24e8e0c9a519498e8456f0457bd89f0ffe649bd8fb53a194f89
MD5 f279d3e406114192148dd976de222138
SHA1 0567e9073c46c40e60e2ecd0a509579f029efd8e
SHA512 e72d1011bd3c4208c3733228aac45a6ae00c3979ffb49130d4141293764db1b91551edf9340b5cc5c987b848e3ffc661b8084923c2032b175fcf55321f42dc25
SSDEEP 24576:FU4MsColC6Je/ZgY7OOfcEpiRLH87SyVXGe38uKUj+NFVov1PJLfVKZ8F5mEeZWq:uFCsfZRZA6Xn388avVovfLd+Mo4iEq
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

0b:20:71:26:48:08:48:76:34:3b:cf:73:92:14:96:ef:4e:d0:0a:b9:cd:75:42:5e:e9:be:11:8f:40:5f:0b:25

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 21, 2024

PE Signature issue

Digest

05:63:99:fa:ac:b9:fc:49:f3:cf:78:bf:c3:d9:f2:f4:63:e5:01:2e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 14, 2009

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:47:52:ba:00:00:00:00:00:04

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 16, 2011

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 15, 2019

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 11, 2005 - Apr 26, 2010

Subject

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:02:a4:e9:00:00:00:00:00:09

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 11, 2009 - Apr 26, 2010

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:58:4c:08:4c:80:a1:c8:d5:61:00:00:00:00:00:58

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 1, 2017 - Nov 1, 2018

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0b:aa:c1:00:00:00:00:00:09

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

1

Major OS version

6

Entry point

60084

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WdfCoInstaller01009.pdb

msvcrt

memset memcpy __C_specific_handler _amsg_exit _initterm _XcptFilter _ultow malloc _wcsnicmp free _wtoi _wcsicmp _stricmp _vsnwprintf

setupapi

SetupDiSetDeviceInstallParamsW SetupCloseLog SetupOpenInfFileW SetupCloseInfFile CM_Set_DevNode_Problem_Ex SetupDiGetDeviceInstallParamsW SetupLogErrorW SetupOpenLog SetupDiGetActualSectionToInstallW SetupFindNextMatchLineW SetupDiGetSelectedDriverW SetupGetStringFieldW SetupPromptReboot SetupFindFirstLineW SetupGetLineCountW SetupDiGetDriverInfoDetailW

kernel32

GetModuleFileNameW SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind Sleep LoadLibraryExW ExpandEnvironmentStringsW GetFileInformationByHandle DeleteFileW CloseHandle FindNextFileW RemoveDirectoryW LockResource GetLocalTime FindClose SetLastError CreateFileW FileTimeToSystemTime TerminateProcess GetExitCodeProcess FormatMessageW SizeofResource WriteFile OutputDebugStringW WaitForSingleObject CreateDirectoryW CreateProcessW LoadResource FindResourceW FindFirstFileW LoadLibraryW WideCharToMultiByte FreeLibrary lstrlenA LocalFree GetWindowsDirectoryW LocalAlloc GlobalFree GetProcAddress GetLastError VerifyVersionInfoW GetModuleHandleW VerSetConditionMask

advapi32

DeleteService OpenSCManagerW QueryServiceConfigW ChangeServiceConfigW RegFlushKey RegSetValueExW RegCreateKeyExW RegCloseKey RegOpenKeyExW CloseServiceHandle QueryServiceStatusEx RegQueryValueExW OpenServiceW

crypt32

CertGetCertificateContextProperty

wintrust

WTHelperGetProvCertFromChain WTHelperGetProvSignerFromChain WinVerifyTrust WTHelperProvDataFromStateData

shell32

CommandLineToArgvW

user32

LoadStringW IsCharAlphaNumericW IsCharAlphaW

ole32

CoTaskMemFree

driver/legacy/ViGEm/ViGEmBus.inf

SHA256 63774d6149f036c0d9faf98b062fea6b97debed559a9522099e46b54fe58da40
MD5 c75c1a401eba37e59c4477b22f8ced9b
SHA1 5e845664f66e4d005fa2b041db4c9f6bf0d564a9
SHA512 1a12908961361eeea00b98174434e931f5d575a9cf72858a21536c2900c7c55107b5d34952cc149119572d3ea93e3c7d2fca018dd3535660dfb008c82eff8bb2
MD5 SHA1 SHA512

driver/legacy/ViGEm/vigembus.cat

SHA256 d20bdb3267fda3ef032eb0eb18f66fee1fad76d2117c0c46bfd560da9603f5a6
MD5 6a872036de7254ce91eb727db52462c6
SHA1 a9c3069dc1de64cc13e1c20caf9ddb94a4e93bca
SHA512 b6629793430ed69517c9694b8d107fe02d7d1ed18e75b045514225eef47f7583fbede814a06dedfec88e4921a4d1e73a83648a90ac562ea41a19e66f046ad3cc
SSDEEP 192:Xe47XtPc3n4e32E6xDetxURYWEhV0+3Ef5KYpBjSINxPGfdax:x78p6BVKTu+3Ef5dpBjRTPGfkx
MD5 SHA1 SHA512 SSDEEP

driver/legacy/ViGEm/x64/ViGEmBus.sys

IMPHASH 8d1a4e8712010d023cba4c6cbe2df2be
SHA256 02e5554bbd32f852aa8abd53ee915143af78cdc0ad2bec86df24831b85e287b7
MD5 c852237eab4b5bebec7b3952371617be
SHA1 5336ec8ebba005b6c257826bd10061e01a48ee1c
SHA512 f002f8429dd592080b21e031c0ed753eb9bdc8653c7afa09bbfdc8f832c1a25b654810299f6ecc894bcb7871ce0e82f5abb05e92e1aad02db089547718eefc32
SSDEEP 1536:H+qh1jHbs7EZAusYDJg47/5tEYyD7B4G91eZ0dicy+M+EL:eqPjHb7zT7/5tEPnTeZ0dicy++
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

PE Signature issue

Digest

39:d9:75:e9:2d:4b:cb:0f:bb:c9:5b:aa:2a:22:4a:b1:20:6e:16:da:bf:5c:b6:87:3f:12:a6:18:6d:7d:ac:0d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 21, 2024

Minor OS version

0

Major OS version

10

Entry point

4512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\projects\vigembus\bin\x64\ViGEmBus.pdb

Name

.text

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

68B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/legacy/ViGEm/x64/WdfCoinstaller01009.dll

IMPHASH 70497fec79daa5f71de3b34faee686a5
SHA256 ce8e9b8bebb225a399d8cfa53dc7ae1ed4766063dc34511a75ee4275966de182
MD5 d12337d099c43c6b9bddc7a31528fc12
SHA1 49bf9f5d3af223abb0ccf1c8b4f2c93c91e2c7c2
SHA512 3916bbce39fa7c523152cb74fdb4b3caec0777016df7b8262638cb3f2819455b5d60b24298bc4bd80cb4ce49a12569379a6ec32d46e51783ff874c5b7cdca0ef
SSDEEP 24576:IU4MsColC6Je/ZgY7OOfcEpiRLH87SyVXGe38uKUj+NFVov1PJLfVKZ8F5mEeZW0:hFCsfZRZA6Xn388avVovfLd+Mo4iE0
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

0b:20:71:26:48:08:48:76:34:3b:cf:73:92:14:96:ef:4e:d0:0a:b9:cd:75:42:5e:e9:be:11:8f:40:5f:0b:25

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 21, 2024

PE Signature issue

Digest

05:63:99:fa:ac:b9:fc:49:f3:cf:78:bf:c3:d9:f2:f4:63:e5:01:2e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 14, 2009

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:47:52:ba:00:00:00:00:00:04

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 16, 2011

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 15, 2019

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 11, 2005 - Apr 26, 2010

Subject

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:02:a4:e9:00:00:00:00:00:09

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 11, 2009 - Apr 26, 2010

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:58:4c:08:4c:80:a1:c8:d5:61:00:00:00:00:00:58

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 1, 2017 - Nov 1, 2018

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0b:aa:c1:00:00:00:00:00:09

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

1

Major OS version

6

Entry point

60084

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WdfCoInstaller01009.pdb

msvcrt

memset memcpy __C_specific_handler _amsg_exit _initterm _XcptFilter _ultow malloc _wcsnicmp free _wtoi _wcsicmp _stricmp _vsnwprintf

setupapi

SetupDiSetDeviceInstallParamsW SetupCloseLog SetupOpenInfFileW SetupCloseInfFile CM_Set_DevNode_Problem_Ex SetupDiGetDeviceInstallParamsW SetupLogErrorW SetupOpenLog SetupDiGetActualSectionToInstallW SetupFindNextMatchLineW SetupDiGetSelectedDriverW SetupGetStringFieldW SetupPromptReboot SetupFindFirstLineW SetupGetLineCountW SetupDiGetDriverInfoDetailW

kernel32

GetModuleFileNameW SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind Sleep LoadLibraryExW ExpandEnvironmentStringsW GetFileInformationByHandle DeleteFileW CloseHandle FindNextFileW RemoveDirectoryW LockResource GetLocalTime FindClose SetLastError CreateFileW FileTimeToSystemTime TerminateProcess GetExitCodeProcess FormatMessageW SizeofResource WriteFile OutputDebugStringW WaitForSingleObject CreateDirectoryW CreateProcessW LoadResource FindResourceW FindFirstFileW LoadLibraryW WideCharToMultiByte FreeLibrary lstrlenA LocalFree GetWindowsDirectoryW LocalAlloc GlobalFree GetProcAddress GetLastError VerifyVersionInfoW GetModuleHandleW VerSetConditionMask

advapi32

DeleteService OpenSCManagerW QueryServiceConfigW ChangeServiceConfigW RegFlushKey RegSetValueExW RegCreateKeyExW RegCloseKey RegOpenKeyExW CloseServiceHandle QueryServiceStatusEx RegQueryValueExW OpenServiceW

crypt32

CertGetCertificateContextProperty

wintrust

WTHelperGetProvCertFromChain WTHelperGetProvSignerFromChain WinVerifyTrust WTHelperProvDataFromStateData

shell32

CommandLineToArgvW

user32

LoadStringW IsCharAlphaNumericW IsCharAlphaW

ole32

CoTaskMemFree

driver/legacy/vJoy/WdfCoinstaller01009.dll

IMPHASH 70497fec79daa5f71de3b34faee686a5
SHA256 18487b4ff94edccc98ed59d9fca662d4a1331c5f1e14df8db3093256dd9f1c3e
MD5 4da5da193e0e4f86f6f8fd43ef25329a
SHA1 68a44d37ff535a2c454f2440e1429833a1c6d810
SHA512 b3d73ed5e45d6f2908b2f3086390dd28c1631e298756cee9bdf26b185f0b77d1b8c03ad55e0495dba982c5bed4a03337b130c76f7112f3e19821127d2cf36853
SSDEEP 24576:oU4MsColC6Je/ZgY7OOfcEpiRLH87SyVXGe38uKUj+NFVov1PJLfVKZ8F5mEeZWF:BFCsfZRZA6Xn388avVovfLd+Mo4iEF
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

05:63:99:fa:ac:b9:fc:49:f3:cf:78:bf:c3:d9:f2:f4:63:e5:01:2e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 14, 2009

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:47:52:ba:00:00:00:00:00:04

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 16, 2011

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 15, 2019

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 11, 2005 - Apr 26, 2010

Subject

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:02:a4:e9:00:00:00:00:00:09

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 11, 2009 - Apr 26, 2010

Minor OS version

1

Major OS version

6

Entry point

60084

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WdfCoInstaller01009.pdb

msvcrt

memset memcpy __C_specific_handler _amsg_exit _initterm _XcptFilter _ultow malloc _wcsnicmp free _wtoi _wcsicmp _stricmp _vsnwprintf

setupapi

SetupDiSetDeviceInstallParamsW SetupCloseLog SetupOpenInfFileW SetupCloseInfFile CM_Set_DevNode_Problem_Ex SetupDiGetDeviceInstallParamsW SetupLogErrorW SetupOpenLog SetupDiGetActualSectionToInstallW SetupFindNextMatchLineW SetupDiGetSelectedDriverW SetupGetStringFieldW SetupPromptReboot SetupFindFirstLineW SetupGetLineCountW SetupDiGetDriverInfoDetailW

kernel32

GetModuleFileNameW SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind Sleep LoadLibraryExW ExpandEnvironmentStringsW GetFileInformationByHandle DeleteFileW CloseHandle FindNextFileW RemoveDirectoryW LockResource GetLocalTime FindClose SetLastError CreateFileW FileTimeToSystemTime TerminateProcess GetExitCodeProcess FormatMessageW SizeofResource WriteFile OutputDebugStringW WaitForSingleObject CreateDirectoryW CreateProcessW LoadResource FindResourceW FindFirstFileW LoadLibraryW WideCharToMultiByte FreeLibrary lstrlenA LocalFree GetWindowsDirectoryW LocalAlloc GlobalFree GetProcAddress GetLastError VerifyVersionInfoW GetModuleHandleW VerSetConditionMask

advapi32

DeleteService OpenSCManagerW QueryServiceConfigW ChangeServiceConfigW RegFlushKey RegSetValueExW RegCreateKeyExW RegCloseKey RegOpenKeyExW CloseServiceHandle QueryServiceStatusEx RegQueryValueExW OpenServiceW

crypt32

CertGetCertificateContextProperty

wintrust

WTHelperGetProvCertFromChain WTHelperGetProvSignerFromChain WinVerifyTrust WTHelperProvDataFromStateData

shell32

CommandLineToArgvW

user32

LoadStringW IsCharAlphaNumericW IsCharAlphaW

ole32

CoTaskMemFree

driver/legacy/vJoy/hidkmdf.sys

IMPHASH b7b6f5f7218e6ff6a313485113ccffaf
SHA256 8fe4cac56e0ed66e5fc60f1468e1911196cadac49f0e350cfe7820c7ec7fcd7e
MD5 de50a50fd52a2bacb72f159aea6e3a38
SHA1 2bad3a7e7516e9fc68e2ab4c5d9a7ac60a576154
SHA512 c7542cf3b45d1d0ccbe87b5c220ecac6c4e9a8c1c171d5ce95f5bf76c1a3ffb576226486ed498ee12eedad9b1beed1d17a0f14d922df21287a70f69354c6a924
SSDEEP 96:Wlr8UaIa3tfivD26uThPWkQAVnEUt0t7SZs+zQTzdGusLPHxEKYYrBDU:rdIahi666hPhQAy72q6+GB/eKYChU
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

PE Signature issue

Digest

dc:ee:72:04:97:43:fc:0b:af:15:48:b7:4c:18:b4:45:0f:43:07:62

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=WDKTestCert Shaul\,131238418298116537

Chains

Oct 21, 2024

Minor OS version

0

Major OS version

10

Entry point

4484

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Shaul\Documents\GitHub\vJoy\x64\Release\hidkmdf.pdb

Name

.text

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

512B

Virtual Size

11B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1024B

Virtual Size

706B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/legacy/vJoy/vJoy.sys

IMPHASH c067f33df7bc725d02da26ea021d07e9
SHA256 58e5cafbb5c3cc69c23ad85c3093b247208e3e5c43fe09aa06a6b7ec40fc3d1b
MD5 cb09581d30179ef1d9cac51717afa04f
SHA1 e3f54c575bb3daed87bccff8a207c7e9634ad7f0
SHA512 a961e9ece89adb83d4c81c601aa3d91c39b277b9a27233d9894caf46cd5b92c6cdc55aaa689e55408303607bac3012296b67bd1dbdb8d71c10d1ac9ec3178e25
SSDEEP 768:AdS7aoujYkg67j4Y6dnd+MJe8pYdDzedDNP7giRzTCBzac+k0pZtp1XZHA2c4rln:vujY/uOn4MZi2DP7iYkQH/XZHH1
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

PE Signature issue

Digest

4b:20:43:96:fa:41:df:3e:e4:d8:78:19:b7:30:9f:2d:2a:6f:18:c4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shaul Eizikovich,O=Shaul Eizikovich,L=Hod HaSharon,ST=Tel Aviv,C=IL

Chains

Apr 6, 2017

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shaul Eizikovich,O=Shaul Eizikovich,L=Hod HaSharon,ST=Tel Aviv,C=IL

Serial Number

02:ce:5e:93:97:27:8f:47:e8:6d:94:31:53:63:cc:30

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 9, 2015 - Apr 13, 2017

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

10

Entry point

4484

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Shaul\Documents\GitHub\vJoy\x64\Release\vJoy.pdb

Name

.text

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

864B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/legacy/vJoy/vjoy.cat

SHA256 09f859c2ac093ff4fab365ecead64c47c763230b091918be5abcc040579126ec
MD5 8ade7a899a6d5f2d34b9a0e32e8e881c
SHA1 01e7961bc2ba41bd8794da2b2d2e967172cfd739
SHA512 b1ef251b258bf2fc7cb10d2f8ad64c60d01a7da81df31fb362998b62c5f423a202ee067ba6d4f69b8935292a55a91d1d0199b4a08cd0e7f15a96420f6ea9c6b2
SSDEEP 192:Aedmwwb51SnYe+PjPQK4rtsgZdZubh9ZZ3xN5BdFJmrI6S:pnYPLQK4rTnZsZZvjwrfS
MD5 SHA1 SHA512 SSDEEP

driver/legacy/vJoy/vjoy.inf

SHA256 3a4990e6462dbea0d925a64fc07a0c107e3e04b77755b9f6ff8222e92c617078
MD5 460c34649150136c91c1e4b9d48b12cc
SHA1 4d57ae74eb2422b6b33d6214f25674fa243537fe
SHA512 1a85af0aeac1014acbc97941e1e2a23ecabc005ab38dfbb5667adbbe822c913526a34bee69f39102cc4bd3a39dc3f0d63e0be4d35934979699f06c204f7e832c
SSDEEP 192:zMAm+6WSKnafK1kLc9uRyW5BS7NHBD8oUQa:zbZQnfK1kLc9qyWe7D8oO
MD5 SHA1 SHA512 SSDEEP

driver/usbmmidd_v2/License.txt

SHA256 44c73fc4110979899dbb5054662de581f7d4350939f19bb2d50574f613314ba2
MD5 b2f8c01eb38b20af6c5a7d82d9adae7a
SHA1 8278dee7d49eedcc2aa31d2d93f71a135e6b4dcc
SHA512 02ea312f23178c5784bdca930ab867ad256028ec72ccb725d1a45e94396a0a2224936c31de4765185ecd674a63f5121494066fdbc0e15292b74d7ca1d3237cad
MD5 SHA1 SHA512

driver/usbmmidd_v2/deviceinstaller64.exe

IMPHASH a1299172b42388a072e9cae23c8ffa69
SHA256 e9baa02cdae921acf0aae4d8e8c29a4cdf4057ab61f9c60862b7cc439e2753f7
MD5 41283e1240acfc163f0e697073f07413
SHA1 a10cf33fbb23c4465921e6590c934873f3155317
SHA512 d7361a1656c8a8bf0b2bb8fa332105912285d23933bbc37ebe955b36e3fc158472216757bd87638860542cefadbbc17d36d5ef16cbd910b64fc25a2d7f42cfaf
SSDEEP 3072:MXiK11hTwS8XjJ3T/yub0koXAUthu3MA/KARW:MbillTK60koTQL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

33580

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FindFirstFileW FindNextFileW LocalFree GetCurrentProcess FormatMessageW FileTimeToSystemTime GetFileAttributesW SetFilePointerEx SetStdHandle HeapSize HeapReAlloc GetConsoleMode CreateFileW GetFullPathNameW GetWindowsDirectoryW LoadLibraryW lstrlenW CloseHandle FindClose DeviceIoControl GetLastError GetProcAddress GetDateFormatW FreeLibrary GetConsoleCP FlushFileBuffers OutputDebugStringW LoadLibraryExW LCMapStringW WideCharToMultiByte GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetStringTypeW GetStartupInfoW GetFileType RtlUnwindEx Sleep InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetModuleFileNameW WriteFile GetStdHandle GetModuleHandleExW WriteConsoleW ExitProcess GetProcessHeap MultiByteToWideChar GetCurrentThreadId SetLastError GetCPInfo GetOEMCP GetACP HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection GetCommandLineW EncodePointer DecodePointer RtlPcToFileHeader RaiseException IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage

user32

wsprintfW LoadStringW CharPrevW CharNextW

advapi32

RegQueryValueExW LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken OpenServiceW OpenSCManagerW CloseServiceHandle RegSetValueExW RegDeleteValueW RegCloseKey InitiateSystemShutdownExW

ole32

CLSIDFromString IIDFromString

setupapi

CM_Get_Next_Res_Des_Ex CM_Get_Res_Des_Data_Size_Ex CM_Get_Res_Des_Data_Ex CM_Get_First_Log_Conf_Ex CM_Free_Res_Des_Handle CM_Free_Log_Conf_Handle SetupDiGetDriverInstallParamsW SetupDiSetDeviceInstallParamsW SetupDiDestroyDriverInfoList SetupDiGetDriverInfoDetailW SetupDiSetSelectedDriverW SetupDiEnumDriverInfoW SetupDiBuildDriverInfoList SetupScanFileQueueW SetupCloseFileQueue SetupOpenFileQueue SetupGetStringFieldW SetupFindFirstLineW SetupCloseInfFile SetupOpenInfFileW SetupDiGetDeviceRegistryPropertyW SetupDiOpenDeviceInfoW SetupDiCreateDeviceInfoListExW CM_Reenumerate_DevNode_Ex CM_Locate_DevNode_ExW CM_Get_Device_Interface_List_SizeW CM_Get_Device_Interface_ListW CM_Get_DevNode_Status_Ex CM_Get_Device_ID_ExW CM_Disconnect_Machine CM_Connect_MachineW SetupDiClassGuidsFromNameExW SetupDiClassNameFromGuidExW SetupDiSetClassInstallParamsW SetupDiGetDeviceInstallParamsW SetupDiSetDeviceRegistryPropertyW SetupDiOpenClassRegKeyExW SetupDiCallClassInstaller SetupDiGetClassDescriptionExW SetupDiBuildClassInfoListExW SetupDiGetINFClassW SetupDiGetClassDevsExW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiCreateDeviceInfoW SetupDiGetDeviceInfoListDetailW SetupDiCreateDeviceInfoList SetupCopyOEMInfW SetupDiOpenDevRegKey

driver/usbmmidd_v2/usbmmIdd.inf

SHA256 a8750ca15a86742f3012886c9932bb974158cd2d9779cf891c730d976a47726a
MD5 0a09dab1c9a7f2e685cd7f8b5bd43ec0
SHA1 14b5fae8397fbda873dcc9ffd5cc189f14490c28
SHA512 f6cc96686f06f1871ae95ddbe9e553bbff506765965e4c846ee02328c6566730a9f4df493c36ab2104565d41dbd7ea67d054984163e45bc414a8f1efba293368
SSDEEP 96:t+r+1cQwGREmgX6sdtkQI/F7DniOrxr0Wx:t+hQwkb19N
MD5 SHA1 SHA512 SSDEEP

driver/usbmmidd_v2/usbmmidd.cat

SHA256 470149c4cf9970ba59070aa7c9409c9f63a15727de99bab53e7e51f55310779f
MD5 e5f60b2f3a491983eac00dc7dc7c408b
SHA1 2566bf2ddc9e58f5262a2b11dda0c451d5ec9468
SHA512 55b31a4da61b837891be7977bdf7b96457e5b54c5216e867bb1aca4580a84145f885896b13fcb72e937d3f424fec1105b4f9c0a9706dfabbec95fb53c7a302f5
SSDEEP 192:o7221lHt5iJCwwvngEw9JPgXkhYCISJ+/wmcVTW1KqnajKswd02FRC:YPmrwvuLh3I9/wmEy4lGswd0ARC
MD5 SHA1 SHA512 SSDEEP

driver/usbmmidd_v2/x64/usbmmIdd.dll

IMPHASH 8cce31b273712b965675a6ee6b242015
SHA256 dc135d675127113915a7e5aa9fe57c84edad6be41d0890b265ef124ab26ea9e3
MD5 ee848c427145609d998725a38e7ad9af
SHA1 6b97d9ab1c3978cdc2d6735c227adca8f0aabddb
SHA512 5bd0eca69d16a6fe32856978047967e44f0d49c59cd611b02e9d24ca59c0d862ad5f8a4d50c6bed816fa11e2f4fee6fabbe3d6d735224084f47161693eee8007
SSDEEP 1536:fNgohwVuXUd9g0TOHISWaxVTYwZVtDEWoG:f32eSNOoSWMVVZVFYG
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

18276

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

X:\Projects\usbmm\usbmmIdd\x64\Release\usbmmIdd.pdb

ntdll

RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlPcToFileHeader RtlUnwindEx DbgPrintEx

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-0

SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter RaiseException GetLastError

api-ms-win-core-synch-l1-1-0

SetEvent DeleteCriticalSection WaitForSingleObject CreateEventW InitializeCriticalSectionAndSpinCount

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-processthreads-l1-1-0

TerminateProcess CreateThread GetCurrentThreadId GetCurrentProcessId GetCurrentProcess TlsFree TlsSetValue TlsGetValue TlsAlloc

api-ms-win-core-com-l1-1-0

IIDFromString

dxgi

CreateDXGIFactory2

d3d11

D3D11CreateDevice

avrt

AvSetMmThreadCharacteristicsW AvRevertMmThreadCharacteristics

api-ms-win-crt-runtime-l1-1-0

_initterm _cexit _crt_atexit _initterm_e abort _errno _invalid_parameter_noinfo_noreturn _invalid_parameter_noinfo _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv terminate _execute_onexit_table _seh_filter_dll

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswscanf __stdio_common_vswprintf_s

api-ms-win-crt-string-l1-1-0

wcsncmp memset strcpy_s

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary GetProcAddress LoadLibraryExW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead InterlockedFlushSList

api-ms-win-core-util-l1-1-0

EncodePointer

api-ms-win-crt-heap-l1-1-0

malloc _callnewh calloc free

driver/vJoy/WdfCoinstaller01009.dll

IMPHASH 70497fec79daa5f71de3b34faee686a5
SHA256 44812fe5fe3b848d7d592278382c7c0370eba3115a9bd7f8db22efb89d1ed2b3
MD5 5cb42a31e35004ad81e5e89092adf3bc
SHA1 afdd47f3a2ec58f15abb2626e1233f5e356e8908
SHA512 328b35bb2b4963abc01602e2f0a78bf540c12e055bea3990d346e06edf53b5682c3387b6f86fbcf8552e2714c9d3ae6db28ca2a37a2bceb9db7e97076e932c1e
SSDEEP 24576:aU4MsColC6Je/ZgY7OOfcEpiRLH87SyVXGe38uKUj+NFVov1PJLfVKZ8F5mEeZWq:PFCsfZRZA6Xn388avVovfLd+Mo4iEq
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

0b:20:71:26:48:08:48:76:34:3b:cf:73:92:14:96:ef:4e:d0:0a:b9:cd:75:42:5e:e9:be:11:8f:40:5f:0b:25

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 21, 2024

PE Signature issue

Digest

05:63:99:fa:ac:b9:fc:49:f3:cf:78:bf:c3:d9:f2:f4:63:e5:01:2e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 14, 2009

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:47:52:ba:00:00:00:00:00:04

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 16, 2011

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 15, 2019

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 11, 2005 - Apr 26, 2010

Subject

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:02:a4:e9:00:00:00:00:00:09

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 11, 2009 - Apr 26, 2010

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:25:3a:27:38:69:0a:34:51:c1:00:00:00:00:00:25

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 6, 2018 - Sep 6, 2019

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Oct 15, 2014 - Oct 15, 2029

Minor OS version

1

Major OS version

6

Entry point

60084

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WdfCoInstaller01009.pdb

msvcrt

memset memcpy __C_specific_handler _amsg_exit _initterm _XcptFilter _ultow malloc _wcsnicmp free _wtoi _wcsicmp _stricmp _vsnwprintf

setupapi

SetupDiSetDeviceInstallParamsW SetupCloseLog SetupOpenInfFileW SetupCloseInfFile CM_Set_DevNode_Problem_Ex SetupDiGetDeviceInstallParamsW SetupLogErrorW SetupOpenLog SetupDiGetActualSectionToInstallW SetupFindNextMatchLineW SetupDiGetSelectedDriverW SetupGetStringFieldW SetupPromptReboot SetupFindFirstLineW SetupGetLineCountW SetupDiGetDriverInfoDetailW

kernel32

GetModuleFileNameW SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind Sleep LoadLibraryExW ExpandEnvironmentStringsW GetFileInformationByHandle DeleteFileW CloseHandle FindNextFileW RemoveDirectoryW LockResource GetLocalTime FindClose SetLastError CreateFileW FileTimeToSystemTime TerminateProcess GetExitCodeProcess FormatMessageW SizeofResource WriteFile OutputDebugStringW WaitForSingleObject CreateDirectoryW CreateProcessW LoadResource FindResourceW FindFirstFileW LoadLibraryW WideCharToMultiByte FreeLibrary lstrlenA LocalFree GetWindowsDirectoryW LocalAlloc GlobalFree GetProcAddress GetLastError VerifyVersionInfoW GetModuleHandleW VerSetConditionMask

advapi32

DeleteService OpenSCManagerW QueryServiceConfigW ChangeServiceConfigW RegFlushKey RegSetValueExW RegCreateKeyExW RegCloseKey RegOpenKeyExW CloseServiceHandle QueryServiceStatusEx RegQueryValueExW OpenServiceW

crypt32

CertGetCertificateContextProperty

wintrust

WTHelperGetProvCertFromChain WTHelperGetProvSignerFromChain WinVerifyTrust WTHelperProvDataFromStateData

shell32

CommandLineToArgvW

user32

LoadStringW IsCharAlphaNumericW IsCharAlphaW

ole32

CoTaskMemFree

driver/vJoy/hidkmdf.sys

IMPHASH b7b6f5f7218e6ff6a313485113ccffaf
SHA256 8668f69c256baff9422ac9b3ab77448c21b5043547920591148b152cb3afb0d2
MD5 bffc21f44b02fbdd4a09c445db87ec59
SHA1 f7ca5a2d0b2eb9ecaf75cbfcc73eeb65889490c8
SHA512 87ee090ed4581650a491df30e26da5420ae4d6a83d178ae9e0b0ca419e367a5f31424df407d0fab55a78f2300a712c66c62ef15425e44ae5bd8100f790fbda78
SSDEEP 384:FdIac6QHT3nYPLXZfm7PkZsHLMA9Zh3ZjXlPOmc:3I5HLV1FZ35nc
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

PE Signature issue

Digest

56:2a:7c:3a:d9:36:44:e8:dd:7a:96:71:d0:a5:2e:0d:c4:5a:25:5d:d1:60:dd:54:51:cb:ad:43:7e:1f:1c:fc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 21, 2024

Digest

be:5d:82:7a:e5:12:0a:58:b4:91:b6:2c:cc:87:ec:d6:c9:cb:de:3e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=A214013764,CN=On-site Dental Systems (Justin Shafer),O=On-site Dental Systems (Justin Shafer),L=North Richland Hills,ST=Texas,C=US,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.1=#130e54617272616e7420436f756e7479,1.3.6.1.4.1.311.60.2.1.2=#13055465786173,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Jul 14, 2019

SERIALNUMBER=A214013764,CN=On-site Dental Systems (Justin Shafer),O=On-site Dental Systems (Justin Shafer),L=North Richland Hills,ST=Texas,C=US,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.1=#130e54617272616e7420436f756e7479,1.3.6.1.4.1.311.60.2.1.2=#13055465786173,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=A214013764,CN=On-site Dental Systems (Justin Shafer),O=On-site Dental Systems (Justin Shafer),L=North Richland Hills,ST=Texas,C=US,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.1=#130e54617272616e7420436f756e7479,1.3.6.1.4.1.311.60.2.1.2=#13055465786173,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

08:df:1f:fb:8b:0e:ef:71:ed:95:73:aa:e3:ec:fc:dc

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 10, 2019 - Jul 13, 2020

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:25:3a:27:38:69:0a:34:51:c1:00:00:00:00:00:25

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 6, 2018 - Sep 6, 2019

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Oct 15, 2014 - Oct 15, 2029

Minor OS version

0

Major OS version

10

Entry point

4484

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Justin\Desktop\vJoy-master\x64\Release\hidkmdf.pdb

Name

.text

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

512B

Virtual Size

11B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1024B

Virtual Size

706B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/vJoy/vJoy.sys

IMPHASH c067f33df7bc725d02da26ea021d07e9
SHA256 297f9c12df8bd91640439c0bf7fe1ee391bbd01d330f5e1604a29c4669977774
MD5 cc63b7e91816e5001fe79a840916f1c9
SHA1 63ff46f8b85bc29e298ef2ac7a434ff2df49918e
SHA512 58fdcec81b6cff4e0d3a44ca93cfe1d86d8849afd0dd31af3a0d6e94483b5492a0f4729b3a0996084b56d4f5584166c4902abe195784ac7c2584489d699f0e48
SSDEEP 768:DdS7aoujYkg67j4F6dnd+MJe8pYdDQQQ/gPLgiRzTCBUac+k0pZtq01cAVJV1hZu:+ujY/jOn4MZi1vPLirkQHt1cOz/Zu
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

PE Signature issue

Digest

9e:c6:30:4e:39:23:15:e9:56:6e:86:b1:36:b8:eb:6c:4c:54:5d:04:ca:69:ac:7a:86:66:f8:c8:8e:3c:2d:d9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 21, 2024

Digest

1f:92:81:8a:e1:ad:79:e1:0d:f6:2f:d4:31:56:00:0c:13:d9:38:7b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=A214013764,CN=On-site Dental Systems (Justin Shafer),O=On-site Dental Systems (Justin Shafer),L=North Richland Hills,ST=Texas,C=US,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.1=#130e54617272616e7420436f756e7479,1.3.6.1.4.1.311.60.2.1.2=#13055465786173,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Jul 14, 2019

SERIALNUMBER=A214013764,CN=On-site Dental Systems (Justin Shafer),O=On-site Dental Systems (Justin Shafer),L=North Richland Hills,ST=Texas,C=US,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.1=#130e54617272616e7420436f756e7479,1.3.6.1.4.1.311.60.2.1.2=#13055465786173,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=A214013764,CN=On-site Dental Systems (Justin Shafer),O=On-site Dental Systems (Justin Shafer),L=North Richland Hills,ST=Texas,C=US,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.1=#130e54617272616e7420436f756e7479,1.3.6.1.4.1.311.60.2.1.2=#13055465786173,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

08:df:1f:fb:8b:0e:ef:71:ed:95:73:aa:e3:ec:fc:dc

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 10, 2019 - Jul 13, 2020

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:25:3a:27:38:69:0a:34:51:c1:00:00:00:00:00:25

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 6, 2018 - Sep 6, 2019

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Oct 15, 2014 - Oct 15, 2029

Minor OS version

0

Major OS version

10

Entry point

4484

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Justin\Desktop\vJoy-master\x64\Release\vJoy.pdb

Name

.text

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

864B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/vJoy/vjoy.cat

SHA256 784ea14d897c88be331d5c129d254a3a09add3d47066ad2879adecef3f00c97d
MD5 fb06e77f7c7bc0902d416c079c32d6a3
SHA1 b75aee99d492d84e83cc5ddba4791b8d2a570e7a
SHA512 1d0299593a0ce9ec23784b52602475ddea6e1b86dd3a02173061fdd9b724627265a3d6f8f08fd955615b972e9887111158fb86125c0dfde3659b4854294b66cb
SSDEEP 192:wdfduYKINIQEYWikyAE7EwWZhYCfhstj02qnajJZOQt:n9Zh3WjXlPOc
MD5 SHA1 SHA512 SSDEEP

driver/vJoy/vjoy.inf

SHA256 33fe32886a8bf72769c3e4991265546c3d1cca9247dbb661f23f7f82362226a4
MD5 731f3d80f2296e3e13f4335885fa2556
SHA1 27e8a4a8eb907b1b1c8b720ef02a45bf9b1c6124
SHA512 b154c375f49934c1858646e9e750fcb7b06d6c453f61d283bb5ee5d2fe509f887d796d722d8fb7084734ee178549a33a85b23d012dc9bcd5c74136700dc4ceb4
SSDEEP 192:zMAmc6WSKnlXe1kLcCuRyG5Z7NHBD8oUQT:zbJQ0Xe1kLcCqyGL7D8oP
MD5 SHA1 SHA512 SSDEEP

driververifyx64.exe

IMPHASH 3653d686ede37ba23c7c315ce2cdfb76
SHA256 262b46dd994d187d03c8391a7f454e0f223b8a4f7c4e4bbcc0b2195f8519f0df
MD5 70706a45954282e4fbd88e56bfa0de64
SHA1 2b0711c1874e8b729a2a9548a48f9d82ef0c2caf
SHA512 f253bf614b0a623d1604f74075723f78ae8fd2a30caecf5066c33133b5ba4f67b5201451e48c07327d343f77287eec7a15ef0de31a563af08cb015e1fb5a576f
SSDEEP 3072:UqYGvp7VuYJTEEfy4FVQnqXHgUS9wfTEiSSzm+h7t3mg/A:UqYEVuYJwF4Fk4Hg5tNSzm47t3mX
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

87:b4:50:d4:a2:75:dc:16:02:0e:03:dd:3d:12:24:4a:43:b4:46:6a:85:66:13:27:b6:7e:48:a9:2a:5f:2b:f3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Apr 11, 2024

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

5e:c9:ed:d5:94:78:85:7b:d5:61:c6:28

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 7, 2023 - Sep 6, 2024

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 2, 2023 - Dec 4, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

12576

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\monec\Documents\workspace\Monect_host\x64\Release\driververifyx64.pdb

setupapi

SetupDiCreateDeviceInfoList SetupDiCreateDeviceInfoW SetupDiSetDeviceRegistryPropertyW SetupDiCallClassInstaller SetupDiGetDeviceInstallParamsW SetupDiEnumDriverInfoW SetupDiBuildDriverInfoList CM_Get_Sibling SetupDiSetClassInstallParamsW SetupDiEnumDeviceInfo SetupDiGetClassDevsW CM_Get_Device_IDW CM_Get_Child SetupDiDestroyDeviceInfoList SetupDiGetINFClassW

shlwapi

StrCmpW StrRChrW

kernel32

TlsSetValue WriteConsoleW CreateFileW HeapReAlloc HeapSize SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetProcessHeap GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW VerSetConditionMask VerifyVersionInfoW GetModuleFileNameW lstrlenW LoadLibraryW GetProcAddress FreeLibrary CreateProcessW WaitForSingleObject CloseHandle WideCharToMultiByte RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsFree LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar

Name

.text

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

920B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

emulators/virtuanes/English.vlp

IMPHASH b2e50cc60a521158b3ea2d099cbea42b
SHA256 7a3f0ac7aa2b277de15eb935162c0ef096c157468e79c42ce94736289c7a7c39
MD5 2c8aea8253301911c5d3972fdbe253b9
SHA1 baac1a411ddc736392feefad97903f0cafa44f00
SHA512 1decde58f5bdd4a9a4b0b910283a2968c586e6ee7a8f759eb93eb0915323b5c1c48bf7c380e275c34f7df28c30ee8588d94db16d98b8d8fe93d600343156b67d
SSDEEP 768:uYVTOtpfxRPpBOCllW9yJ6NoGxCjohx7ErspteRp8jyFHmJkukG/6:uYVTOTpB1lKyJ9YSm2HV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4409

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

emulators/virtuanes/VirtuaNES.exe

IMPHASH 7647bdbefd6e10c04c4630fe9ea74a1c
SHA256 8039687a5274b46763677deb477d00b22466824d93d52db1306efaf05aa80f20
MD5 f9c7c80681ac40d1836c8ec1bf59dc24
SHA1 25fa98ae13be80b9f7c996b10adbca9232a73b92
SHA512 cc4e0a68b3a29a2fb9b9c29a5bf1aca6fc85684ff5b5b83dd2fcaebe02863b6eb47891d0b817721ebe9c0c2e896bb008da663d7a0401604e75a256d4f176309a
SSDEEP 12288:CWbnoKN+yM2E+0RVL4exo6yo1x90jZH8ultU2PQzN1MpSF29kIPsJf2C:CWboKNs2R0R2Wo6y+wHVa1MpkokIee
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

604615

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareStringA SetEndOfFile FlushFileBuffers SetStdHandle IsBadCodePtr IsBadReadPtr GetEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsW FreeEnvironmentStringsA GetStringTypeW GetStringTypeA UnhandledExceptionFilter WriteFile LCMapStringW LCMapStringA MultiByteToWideChar WideCharToMultiByte SetUnhandledExceptionFilter GetOEMCP GetACP GetCPInfo SetFilePointer GetFileType GetStdHandle SetHandleCount ReadFile IsBadWritePtr FreeLibrary GetLocalTime HeapCreate CompareStringW HeapSize HeapReAlloc GetCurrentProcess TerminateProcess TlsGetValue SetLastError TlsAlloc ExitProcess GetVersion GetCommandLineA GetStartupInfoA GetModuleHandleA ExitThread TlsSetValue InterlockedIncrement InterlockedDecrement GetSystemTime GetTimeZoneInformation RaiseException HeapFree HeapAlloc RtlUnwind LeaveCriticalSection DeleteCriticalSection InterlockedExchange InitializeCriticalSection EnterCriticalSection GetCurrentThreadId GetModuleFileNameA CreateMutexA GetLastError ReleaseMutex GetVersionExA WritePrivateProfileStructA WritePrivateProfileStringA GetPrivateProfileStructA GetPrivateProfileStringA HeapDestroy GetPrivateProfileIntA FindClose GetUserDefaultLCID QueryPerformanceFrequency CreateFileA GetFileInformationByHandle LoadLibraryA GetProcAddress GetTempPathA DeleteFileA lstrlenA FileTimeToLocalFileTime FileTimeToSystemTime FindFirstFileA FindNextFileA CreateEventA ResetEvent SetEvent SetThreadPriority lstrcmpiA Sleep CreateThread ResumeThread TerminateThread CreateDirectoryA WaitForSingleObject VirtualFree CloseHandle SetEnvironmentVariableA VirtualAlloc lstrcpyA

user32

SendDlgItemMessageA LoadIconA SendMessageA DrawTextA FindWindowA UpdateWindow TranslateMessage DispatchMessageA DeleteMenu InsertMenuA DrawEdge CheckRadioButton LoadCursorA GetWindowLongA DialogBoxParamA IsDialogMessageA SetWindowsHookExA UnhookWindowsHookEx OffsetRect CallNextHookEx InvertRect FillRect GetScrollInfo SetScrollInfo EnableMenuItem GetMenuStringA ModifyMenuA GetDlgItem GetMessageA SetWindowPlacement RedrawWindow SetWindowLongA GetDC GetClientRect IsWindow SetCursor PtInRect CallWindowProcA EndPaint BeginPaint EndDialog LoadStringA DefWindowProcA GetWindowTextA EnableWindow SetWindowTextA KillTimer GetDlgItemTextA MessageBoxA wsprintfA SetTimer PostMessageA CreateDialogParamA SetDlgItemTextA DestroyWindow GetWindowRect GetWindowTextLengthA MessageBeep IsWindowVisible SetForegroundWindow GetWindowPlacement DrawMenuBar PostQuitMessage SetMenu RegisterClassExA CreateWindowExA GetDlgItemInt SetDlgItemInt CheckMenuItem GetMenuItemCount GetMenuItemID GetAsyncKeyState GetCursorPos ClientToScreen SetRect ReleaseDC GetParent TrackPopupMenu CheckDlgButton GetSystemMetrics LoadMenuA GetSubMenu IsDlgButtonChecked InvalidateRect DestroyMenu SetFocus MoveWindow ScreenToClient SetWindowPos ShowWindow GetFocus

gdi32

CreateFontIndirectA GetObjectA SelectObject DeleteObject SetTextColor SetBkMode GetStockObject SetBkColor ExtTextOutA CreatePalette GetSystemPaletteEntries RealizePalette SelectPalette AnimatePalette StretchDIBits TextOutA

comdlg32

GetSaveFileNameA GetOpenFileNameA

advapi32

RegCloseKey RegOpenKeyExA RegQueryValueExA RegEnumValueA RegEnumKeyExA

shell32

DragFinish SHBrowseForFolderA SHGetPathFromIDListA SHGetMalloc ShellExecuteA DragAcceptFiles DragQueryFileA

ole32

CoUninitialize CoInitialize CoCreateInstance

winmm

timeBeginPeriod timeEndPeriod timeGetTime

comctl32

ord17 ord6 ImageList_Create ImageList_ReplaceIcon ImageList_Destroy ImageList_LoadImageA

imm32

ImmAssociateContext

shlwapi

StrStrIA StrCmpNIA PathIsRelativeA PathAppendA PathCanonicalizeA PathFindExtensionA PathUnquoteSpacesA

avifil32

AVIStreamWrite AVIStreamRelease AVIFileRelease AVIFileOpenA AVIFileCreateStreamA AVIMakeCompressedStream AVIStreamSetFormat AVIFileExit AVIFileInit

msvfw32

ICCompressorFree ICCompressorChoose

wsock32

recv WSACancelAsyncRequest shutdown socket setsockopt closesocket htonl htons sendto inet_ntoa WSAAsyncSelect listen connect WSAGetLastError ioctlsocket WSAAsyncGetHostByName WSAStartup WSACleanup recvfrom inet_addr bind send accept

version

GetFileVersionInfoSizeA

emulators/virtuanes/VirtuaNES.ini

SHA256 839eb38446bcd6f4038335868ee43c80970c797302ae2a04151ecb3bed31ff87
MD5 35af3f37c36c1463464a0d997e599a8a
SHA1 c7dd1f52c648da87c6e04fd167bf8b7672f243ac
SHA512 746d2e35bb413991cd33e6a98a18b8baded43b77995cd0213f7d45e945f0151d387520a9c0f5b7b43124154a9b285ed0d54d675a015a2260cf9a69585ddeed46
SSDEEP 96:1aGMGLJlrGaylnWO9Qf0/OrCq0CYMGCrCKCFCRCVCYCVCxCTCg:AK7KaypWOJ/OOqnYMtOpEI0z0oWg
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Archon(U).zip

SHA256 6d58a5a42bff7ac13a751fcfb89ff21c7adf4d70f1429d47cb5efc7a0a856b62
MD5 1afd07eb0517e870c9f6b9c18edc416e
SHA1 2d862f777c2a9e4b2e0e6f911628dedea63c5e6e
SHA512 f34420f1180074c366615dbfd79022a127143a83f6540e4497d420bc595db032fd4aa7912e857947daf3e749815c9fa8ea98137665b9b41142688b6a9957d4ad
SSDEEP 1536:t1mRK7KLLVGi4wnbAxM8XycYNH/7GmqFwuZBzEKs9llyLv:t1miKdvHnqM8ah7hq2uZB2rlWv
MD5 SHA1 SHA512 SSDEEP

Archon (U).nes

SHA256 a46ad8370dbb2c09200a19d7323b28e705f8557e3a90b1f32786ff84ecf1b226
MD5 58a1709e95685e4c1e8998c0b945bca5
SHA1 f8c39a801e949a98071966bd78eeb97856386644
SHA512 85a8dde943ffd01d4f4612b2d95c51b2290e07038daf454c3deab8f0125fd38fedd23fbaffb61ce73b1d276ae61ae4e303bf1112cc6aa391f8fac4fdda4f3825
SSDEEP 1536:SDJux2z6J+8SRwifza3xSoswaVTcbKQnF13pUBPGu8KcZvImZfL/l:SUw3zaBVvaZcbKQn3sPQZvImZD/l
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/BOMBMAN.zip

SHA256 a1c0201a9d175f80beb70d32cbe27a53fc8f214739b2cb0d6d8f40dbe5204802
MD5 e03e5ca353bc89613cac7f8594259a15
SHA1 c5e176698f10aa38e9d57e34acd97dd1b5bde7de
SHA512 ab415d962d94426fcf8afeebbcc4a816a009d4cb9729443eed65734fe9ff5df78e6a7f9d4c963eb14447d528596ad3ca039ca73b83e3b5d6bed017619f241182
SSDEEP 768:nWuO7Saq/fmfCWXmORad9GETARUvU577xvWr:ni7YDjZFTrUzvWr
MD5 SHA1 SHA512 SSDEEP

BOMBMAN.NES

SHA256 860b41525eb019e5383c084c25ce3a54feb8b651302fba33269fcac52e198f42
MD5 2638c6ad6881fb277aea2cd9cfe99356
SHA1 1eeff79a0c30c3577c384444fe2a575ea5bcf041
SHA512 4d85c7c56b6de7f9f2cb40b3f3483f622ca4ae6a64db4a90cec55652d490d45ccc697a37e20abb8408d386b09c1cd6c7e0c363a25b3bed74772f329f9679603f
SSDEEP 768:iQypVhcuTvEoZkFafpy8TmoSI07upb/+dp+e/:iRpVhbJOFasmS5ue1
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Battle.City(J).zip

SHA256 817e0956a7c82573d4e25d948b21bf6b69ed0187c31db47640a651f51bbaab25
MD5 c0e11e9dc8d9d4de8bcb4bbba3855dea
SHA1 61c91d447b8b572081d988e63adcddcb514f5948
SHA512 709e4654cf05fbb6d699bc405601f7dc627ff2a090145aa6516bb24da57372ed7b9502117f5e538b1b0002ef1cc93a14232bc7691ba45a51a3612b22c316d49f
SSDEEP 384:qSA95yXPatiBklrCmxQ3dOuldyIzc///dJNESB5:qSG5y/wiYWmKtOiQ///byc
MD5 SHA1 SHA512 SSDEEP

Battle City (J).nes

SHA256 a869aead5b6957fc62002ff9636e048cc34baf0100d629b07dc51aa18f220c0c
MD5 cd4fe2e78df0696dbe652f02c19541a1
SHA1 e1061c9241b06a965fb7845cb951d921aca010ef
SHA512 8c173d181c1fad4233ba1970d7a9de88babb8b9fd036a59ea92eefa2bcb962314166ea1e9b48f2ebd7e86a52af53d791f4b490704ef79818b30e16130cf80b53
SSDEEP 384:WRwhjY1CXEcoEDVuzlcovUwuT5cbeQXFHWeth6uhqycgB5y:W+jY1CUEclTv+dcNXA9
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Castlevania3-Draculas.Curse.zip

SHA256 27a08cef8ac37d9632b7e81c69e624d4e70d465d240a902fb3a67504f07abd60
MD5 5139e5e14f3a181c9763335203c31d99
SHA1 6533a3340eef19bd1349fd82a20e3880b4b1332a
SHA512 3baffa4d68b2bafaa3f1a4f6c9e9a320008d4be695a168606c561ea60a166a31f79c5c33da901e2d007dc110cf66cb475916898fd6a28c56bb960c61dfe97d6e
SSDEEP 6144:IF4ZDAg7DJQQcNQPG81JdGYOMnPzcxHroXr1+qg7AbZwTJZ/Eke:I6kg7DJVcNQPG81JdGYlnrkro7o7Atey
MD5 SHA1 SHA512 SSDEEP

Castlevania 3 - Dracula's Curse.NES

SHA256 cfc252a30d54ac6cb083a67624a6670829fce5516684aec97ef39f983fd7224a
MD5 374e8206f5efd11ce033e500c29081df
SHA1 426ed68c7788b97191aa327ba873eee002e8a29b
SHA512 5a543942d914b2299ae5738a66e90eb9bc0dc87b198beafa8dde9378c7a80abddbc4e6c439346226c198c78170ca1c2bac44bf2802a4a550898043b25ecd0681
SSDEEP 6144:x0lWB+4m+U1ifQFLgZ/XMQ3ott4I+uGUBGPjiFb15iFb1:D4+YifMLqV4ttuuG2Q
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Circus.Charlie(J).zip

SHA256 c08329f769690a34383ca9ad13eb210747a9e71dfbf7456b49411dde83831ce0
MD5 d5d79a096318130dac8b000251561142
SHA1 a1665c8d93cab159ffb3e1356d8d19ab0fa22e3e
SHA512 ba6a2ff6754186859309334fe1bd08def32532df1e686969c35c2d53555a74ca98ed34f5f79b73048ec93837f6ec3da4c0a863ce49bb4feca09c8deeecf7a9c2
SSDEEP 384:dKuPokHBSRIOIwha44osiSLtRV7X8ssGECRSVmX+eG+9x:dKuPowCIOnsosiSzVHSVmX+eF
MD5 SHA1 SHA512 SSDEEP

Circus Charlie (J).nes

SHA256 608a8c542e49d5fa500634aa49ee96921d52c49c6e1646db7ca21ac7682ce4ba
MD5 8486048c48f40f3787e4b7d9f1788659
SHA1 c310fd08866a215e71b9713b115da260f9d722dd
SHA512 8f3583c55fd9b2989ad1001eed34e0cc57d30c1579a2864e70482815567a920601fee59bc44498e9b51a1c66bf9816a5bfc51a6bedb0bd900d8bde617d835158
SSDEEP 384:bJrIx8ZBSpke+RlJpIGKLErmbCUaYoReqA84KQMmtgXurJsc3mBH:Z5Z4iRlJekkCUPoReqA8zmGyscWBH
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Contra(J).zip

SHA256 88a43758abce8b6faddc6a1482531b80ed69efd22eea6ac669a1f49dd0587827
MD5 4af916603335af09f5a676770347c0c2
SHA1 82a02599d9519448d034382976280fe55dcd35b5
SHA512 1261f0201e2767052c0c7c80a83718d3459024307dc434a9454cfd33733a4a84779f1bf3bc5fb9ccd0b2ac5b2a4b17dc45189db447d89306d2f68c2425d5a3f8
SSDEEP 3072:4XG//aRzyhR5qxPxzw4t3mxJLMz45xCFTlYv57JRZ:4W/iNogxPxzxt2T+4zQYv57JRZ
MD5 SHA1 SHA512 SSDEEP

Contra (J).nes

SHA256 6ba53139fa88b8de1ae527c438bda6f1541d1ee7df26d63dec5164a32d166bfe
MD5 0e40bc1b049c16c5d7246cc28399cb5d
SHA1 376836361f404c815d404e1d5903d5d11f4eff0e
SHA512 e615666a432d63588ea9459587e58fdedee44684c717aaf96beba47ab266521e3ac3c41a104a9e15beec946d638c14156ed2449bf2071299ea1ea05bf6862de2
SSDEEP 3072:ZLb4nWJ9ENUM9KrRQACAkC24ePIWRro6JV1EunqBEY2Lila:1GWEi8KrElCPePm6uIq22la
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Dig.Dug(J).zip

SHA256 b87499b299e40b2b75de2edb052db5cd13ead2fadb2e839197363e96b767db34
MD5 edc0e93f4c9880784041cee39344661f
SHA1 a159f8fa6fb14a92c8b626caecddb6fa40b4a5cd
SHA512 bd40546791474022e6f8103b611e765fdb1c378fdc473d9bf6abc7705a1257d8b75bfd91dc36617e08cc78c991c2fe0ce062823cd02cdf10b1da367c7c527a6d
SSDEEP 384:PDBY+QVFv+eD0KG0qBNa8UUPtRs/9jw3ui:PNQVFvzD/kq/9a
MD5 SHA1 SHA512 SSDEEP

Dig Dug (J).nes

SHA256 bb8199df2fb2024d45128f9bcca6a05eeb4c8ab832a20078652d9bb8f811187c
MD5 b335e805dde69e63a66cd5eaf5b01ad1
SHA1 ef9d2a241ecd6a99c3a5e8fc30a7958aced8ea4e
SHA512 504cef18d36cec4f26e7afeaeabe7b5acc8eaf2307800940d7e7e3e0486a244a79a929e81642e167c8cf5e61d223c3b3db9ca1b67dee2f1cff102f818f952558
SSDEEP 768:LXFbdETgGxtC2F/4bNe09ni5ejWsputed59Qo:rDETgGnC2F/4bNp9ni5GWiu62o
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Donkey.Kong.Classics(U).zip

SHA256 fd205ce00dcbf124851f10e40cd1b5565b254d171436d59aee81fb189c620b09
MD5 af3e5404a3e5e031d4860b8a95c95092
SHA1 0977771c09ed104baf3496c17551a510112aa27e
SHA512 cdf3ded42019b5abdd1d5a7f62e8e13551a135f9dcb2582f86aef1d531dbefa4cad2615df420db14b05a323d36ed2231c1ccf08fbf3cdce912f100de75899e3e
SSDEEP 768:yeVgO1jpseTDPLsfmg6TlZVJhiJOSLeCVH:zKO1jpVTLOVCZVJDSqC5
MD5 SHA1 SHA512 SSDEEP

Donkey Kong Classics (U).nes

SHA256 b066798d1468bc4bcec187c1d71f57007abc3d920d6f224d23a76d11fea905a5
MD5 2331cc29201607f6df527607918d38a3
SHA1 8d21ea39765c31ec545bf84af339a12ad2fe16de
SHA512 9996f0f08056f3147669349dcbc7c28f0052f081e8ba4472b28490abf26d94fc2507c18ea9f6a6233ae9ba9d8984b7475f03871655b388ed542172a37aeadbe0
SSDEEP 768:G2AjCbfWWf9K/+LRgm3xRTuDtqZ/wPAddS3VdB+Hx2uCIyb4va8fGS:G2Rbf9f9K6wtWoAdI3Yx2uCIyb4va8uS
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Double.Dragon.2-The.Revenge(J).zip

SHA256 df95f0d340d3007d335c7f4561c96abfb1858ec849e26bdfeba76fa131c27a61
MD5 d871242e649dbba03880bc642e7aa56f
SHA1 e2a90c46c542f83f32bab5139a32434dd3e7f881
SHA512 44c5a2f34e5f0abd2d1a7247c075d496efc16a40ccfa8cfe690ec15483aac1aa14e11b43f5deac3459512b4d0b6a44c76774de16fab1647b63efbdcc249aa870
SSDEEP 3072:M+Vo0U5XdChzL6IQEfBjSpdRt9U6XV6qs28vMKN0iqL/suIQEPx+AXwNAc5iL:1UhdC7QEfBjYRtKAPc6i0/h+miL
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Dr.Mario(C).zip

SHA256 b0b87a44d89302afa9d20d723ea756dffbdf6ddff68e7ddb7ee8a9044cda64d9
MD5 ccd6fef91c5775d9c3e861c588816e50
SHA1 c8973f8a9359b955f99f7b630e6d188621cbf8fc
SHA512 e1f9c29bd6982f8b563af18c105c3304fad48ec1c4c0b302424f22bf58be5cc61f72cc362a93a86bf756f01b498d29f7b3f07f6dabbaa1d1782103b4a76ce214
SSDEEP 768:5g6afQGYtKCGsZOJWWurBt6ikScyC2hVBF+EQ6u4FQdV7mNh:5gKGYMuc/8B8ih+B6jFq8
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Excitebike(JU).zip

SHA256 4998db29db8cfb6b990101a6f682d7dcd3321d7f5f73ee60e8f7ea117a260de1
MD5 4d9d709333f7e9c7af00d28e3e70fac7
SHA1 f6429bdbfc3e8a1f0ae8b5c22bcfcac2204f6c63
SHA512 36b1d9215c11fe9026ff6070a8aa56bf7f76331d4c342c53dff9a73108d01d59184de40cc14060f24beeb08e54ff7a10ca75b8efdce4f268fc4dd30fa4dbb93e
SSDEEP 384:ubHgs6wBL8m3TGtJ7SHMwNc3m2rU3DieLg8PNeABaCb:uss7BL32oNc3m026ONBaCb
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/FormationZ(J).zip

SHA256 0189c0b3d590cef14cc19ab524942a3bdd9af3e488c4bd7ea45a030429caaad9
MD5 96ea4df0149c44856804c3afedb1c657
SHA1 ecb018a97885daa339f0c47d15552df51b32470d
SHA512 a6a434f90a82f5dcf250f3560dca96ba82799841c61b169b42b89a91ac610579ef4729e71e79d1d533a9fe9ad68b635bb690b52b699f50cef130b31cc833c92d
SSDEEP 384:Wb4/+uRh+PwWcT/lemM7hibz4RedW/6wvGBDtcuZd4:Wb42ufewWcT/liibzUedJ5kX
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Hokuto.No.Ken(J).zip

SHA256 335eb82b4e60d42886439fa8c06f6b411104ea78f4e88a2fb24a08ece8c3dda4
MD5 ec7def972e6e7826c079ca4cf3484a69
SHA1 670f2374928551c37729f27c21cf31a67217488c
SHA512 a2136847fc958c8f4876e63c1a578c2a9ee635ea080fa8e8b7fef35ded017e67d884dd351ebe3a5ff06a8b26fcada4e0230d359d38053de5b2e12bfe8809114a
SSDEEP 768:wu8NYXzSuKuf91OwVIInODyXG3ZAgkXmex21wTwbtUmlZKB3g+:wu8uXzSuKuHVIwOe2iBAeTw6oZKx
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Hudson.s.Adventure.Island(U).zip

SHA256 6ba062e7222a35fda88ae194057c09a10850161839b8651dac25436a131501b4
MD5 a9a8ea4c66203abe89758c5bec5a13e5
SHA1 49f60741d5dde2d1798fcc309783c8087ba374d8
SHA512 5cdbe6e92cdd5555e8334007a6eced21cc0c7c1beb2a4432f1c3d78daab3f0f1f4672e7f0e33002b4d6cc7c4e20e763c2e48812ef79e62dc82665a7e169fbb6b
SSDEEP 768:jRvm+JBquSkPZROeDIxEuNsOnDy0p5u6b1B/hMs6ij+Tjf9t52Pm/IoCc/dgJ:jRu+OulXDIxEhODJp5uQFhqij+ff9zaZ
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Ice.Climber(JE).zip

SHA256 014e39553f81b18daec1992008c1c8a9752a2c9ec46ba097720f2f99fac4906e
MD5 3885af483a24cb84b975feeb8d0f8f61
SHA1 a1a6cb831431df5e48780d07c40503efa34a6681
SHA512 fac47f701809d1f29a19d943626a6133df426172a7ef3099652366c5c06e5726deadce99d9564fd08265208305fabd227a9f8274639c081eedfb19575c1ee4df
SSDEEP 384:/7gUdslJmL04zMmiY5hW9mAc1QbvVhdzfmwiVQ7mcKpwsyjU7TY/Ho:/7gUd03yhW9mZQbvRD7TKhYw
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Jackal(U)NEW.zip

SHA256 4640b7679b3f95818030880fef498ea918880f23a46434a3edd1f8dd9d69f462
MD5 7951cd79133781d831aea68f53932da9
SHA1 7aea12a1466a9f9217dc38938e5a9d78eb5abe6e
SHA512 5d46ce515371934989854f4f352931fd1e40b1e42276985193cfb759bf46f37a5636dee336d8b2ff1f9e59f740f8e115e6c7e4d1bff8029a8a8b23ea27ba9205
SSDEEP 1536:5rAaMp2kS+3klPum8We6nKfkU12aKPxl8JZj8+LRHm5jXG+1V5XnYNEI5mk:BlM2kSVlLnKf12aGqwQJ+1vIN7mk
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Kage(J).zip

SHA256 3a8c0df778afb5126015a0d829f7ef96deacb1894bc07df6252e105c02bbd8fd
MD5 6ae791a3f8cdd675628c282f47be8280
SHA1 5f88802ca48f239df00d37fd62f084d3d9860479
SHA512 7c4284593ec6f27995eb901fa3d6edf4bf850521afa142f47f1b4412dd283d031d24e76329169e46f0dde9f48042ab4e1384dc51f3072ecb0bb9cb8bda395700
SSDEEP 3072:PS7U2eLihL/ATh8No/nkfOwRRClVT/Oq+L4rQJylYL:MeLilAhXkfhRRaT/Oq+86ym
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Kage.No.Densetsu(J).zip

SHA256 7cd9a45219f7305651276ecbcfbfd94ba97e77d3a08d4ba01cffd78d255c3baf
MD5 47e4da4a49e2df73ad65d56fc8fb351d
SHA1 f5ee9eff4f401c90335eb02d37cddfdce1867c94
SHA512 e7ca50aebf0478886a1954bf90b3887604b5e33b42c79ab017c3b6effb4c09b65308bc9c500d31ec5a20f9373d56c47cd69fc584f016f206bb8409b885b35713
SSDEEP 384:y1IOZ82iicBQ7kDDYsg2EXBoUGUP92PzjSu39wXXeF9FErXGDlLSU6wnXjx:yqOZ82Scsg2ERoHUlcSutwXOFlhZXjx
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/LIFEFORC.zip

SHA256 5f4aa0a657ef10746390d9ed07fb4afbf7709925d1bf9a415447f5158de6ddef
MD5 4df11c845af966dd8cd26beed291ae11
SHA1 570626b3f3420c126f4b079b27d97135bcd307f9
SHA512 c02e049c70dbce364833af47ecbc5509a9833a181840d276aefc39c3e2832821ff8985ce588ace1be621331f177405a92ff433eb392dc5505871657a473ae353
SSDEEP 1536:HEHdWR07Iy6wpLbPBa7wj/cruMmjFWBpZ215MDxgB7MZcUwHm6FD/HCKYYTh9m9z:HEHdWST6wRHc6MpBpU1axgBcwHloKYcA
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Pac-Man(J).zip

SHA256 92d47a77f1198076e24f289b8a55870af25d7b46072bc9d77deae50b569a699a
MD5 566191a7b1950f8ef2f244fffba7da46
SHA1 2a78a4a585e296874d5543c708a17ef2b488224c
SHA512 055d844e03fbc767d6d6e8f6a79c5ee932bf59015303ca1c814337a73e86108e0e280f31c39b503b764e334d44dd4f1684ef16b2b0441563ec47ff3037b9c520
SSDEEP 192:e+LkqHVWW/x88HzIxltzxnFwmc4/bTT8G7CAtTkuRpwcEHctQ:THHc2x8+zqRxnFw54/bTg8hvXfE8tQ
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/RXSuper4in1.zip

SHA256 88548f5c6b794239c9ca91821834cf2f6ee6d334a6e278e4fc0cc6a9200c14de
MD5 15ebc70c9c014214654603bfc744e319
SHA1 11ee9a6f92f06ee3c97714d3f3f507593c0cdd39
SHA512 26dbadd6fe8f9718f46eb423fb330a4fac8d534792b9edd00d3d9c0c8eae6eed2052b68ef044e23f45b49bc45d9d1f0dc944647841e3ea29fa8385c3df86e85f
SSDEEP 12288:AseeeRKItmFK10U6qti3l55m7yjWWg32kgCcfhx:Lw4NF67A3NBWWg32kgTfH
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Rush.n.Attack.zip

SHA256 60cd7bc53d6eafda3da0c1a1242f3a190e46bb4eb83ffc4a290a83816dd6c7d5
MD5 94a0c5752b209ad2fc247fbe2f12217f
SHA1 29d8275821ba6184f7a79d2c85f60b55f6d19a8e
SHA512 ef9d3c8d3b3ec8a142c4f32fc0ae36402912d5626e1c7da98dfc04d35e13ad5c73744aa545d57d4cf9264f4c10830d29eaf72bc22927a3370d63875b7d8cf3d0
SSDEEP 1536:NMvQ39r/Sqt/ioKaqcRwSZ2qy5aj/2mAgHdAbnbCnIdztZTeI:N/9r/HKuqcsqi7IenCnIptZTeI
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/SILKWORM.zip

SHA256 2c332c038328b1179786719342e1d3bfa8ba46f5aa53eb2fb739a691b31f5e95
MD5 e2146c7f386c373b604247377166aa9c
SHA1 5722e52639687c046af9bd110ee570bd0be079b3
SHA512 fee22377cce42ca06554484b323511049210fb7deabbd06a2ba9de2bb2361a1ffa597b9cd555e0da288f294bf8bc9041c2a2ae0c88566e618b681ea4332513de
SSDEEP 1536:/AxTHGfhbvC4a7PF/U7uoc/L3YIY9QcX6UKstwlN8E9UFRfPtDiRhAA7/Glx:IpmMBxguoc/UDScb6NT9UL1Oty
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/SMB1AA-Super Mario Bros.nes

SHA256 f61548fdf1670cffefcc4f0b7bdcdd9eaba0c226e3b74f8666071496988248de
MD5 811b027eaf99c2def7b933c5208636de
SHA1 ea343f4e445a9050d4b4fbac2c77d0693b1d0922
SHA512 c2eb66533f2bfec61f15793884777b1c711aebd74533cd33bd5774112a0381234583b9aa05588225282fd3071a42a7a4da27bde485d21fc0b45b2b2ca2d5461f
SSDEEP 768:OdceGPIqfjTiAfHiL8UgXhlgv3SS+Wl1KcH1irR0wq:QGPxbJiL8RlgyWl1KcHS0d
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/SpartanX(J).zip

SHA256 9b5b7198693a578524320b226f9b5c43397a4e6dfddb2b031058ef66f6e986f9
MD5 dd4aa4073967710cab7d6dacb9bdf656
SHA1 97e19fcfd75d9d5b546562151714754d6c72653f
SHA512 88e3867b5a4c1cde80502861b8937efd82058a766b99080bb3919dd03b5c86e4c0495413c40ef589fffb99ca118293f4c0a4e6488f33af7aa285f469d93bb0a1
SSDEEP 768:1XdRym6XxKyeyEmpRwX9xU34oVRF0SAbILYa53zVPwg:1Xyn5eyDgXcTAb653pJ
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Super.Contra(J).zip

SHA256 ec6dd73ba97e887f8be11acd3d8eefc9b5fa2cd935b3140080e4dc6c7821c63f
MD5 6ae6d8c615d953087c259fcd2a05a39e
SHA1 1a6001ec85d2fe968f6e2c5992da005115d33c32
SHA512 d44636720fbfe40aef013128fe43802f1fe04edb196c8fc38edbbd1a4b30d93c642a606c051323e36e2bdd7892bb043767dfcd4cf40110ec4f55866cdd471d04
SSDEEP 3072:Nj8pNnamB5xi2ImsOZeSe5AAhZdZe6hgVB3q2GGIe/qT5aWp9:NUNnaq5om9ZenNdhSq2YaE
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Super.Mario.USA(J).zip

SHA256 45425034cb7b9ecf764c76465a8a719df65e4cb71a57bb46a93d0a033e9fe4c9
MD5 0d05ae799f786b5bbcc3a4fbe2c28eb0
SHA1 8b78b5cd153140a967ebd90ba7d31e1562e74e3b
SHA512 10b8548d5537d81bcb79a8682aa6a1b37099d85d8635921dbbd9d1eededf79dda74400a72084ca7f5f2c70a3252fe90bf9643bbb78000a8e05b6c58f83938e18
SSDEEP 1536:w5K4jZXvJMrRBkW9jzsgnqTOUh937lQFNF5y3G7JGW+ONNPZb1pOxEOr/A68escW:w5/jZBMtBV9P7nV09LWd7yONNPZRpO1I
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/TMNT2.zip

SHA256 7f904c89734e6f9b2fbe702d557a8b7088d69041abcb09e66b43b524caaa4798
MD5 76c033426e9e70ca9de42c677841b92f
SHA1 097c08d26373811319dac4988d7eeb9e4220d5c7
SHA512 67e23338c45afb7fe65fba21a4c324025aa5569664c0ff5cd1938ee06181376f6ff25de7b981ac0f2ce2463e1dbd8cac8c74da8c377e1cb423f612a3acbd5507
SSDEEP 6144:np7Ty+nOxZPqC78USLwnsuxMcRi56a10YiqPs58OP9RqYZWCQWFBryhb:np7Ty1JaLwntdPa+6q8ODFa
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/TMNT3.zip

SHA256 0dcadf114d36776de7c71c3f7c3d751bda5d8a8cb8bac72dbc88a6ef23d898e1
MD5 7c743bdbc453144fef74943880bc7891
SHA1 595311dcde2a6fe3524ca053249c871f790251a5
SHA512 aaac4b635afea669472d16c7d81fe4eb716fc727bcb46774f079773d8bc5f6b3d0068ea0b243351d7c015610deee2c3cd6a6585e62f35e8f9672d8a41d2b10d7
SSDEEP 6144:Kp0WQx8TDcKZobvb1+elfNrUGI5jFJdPRSPjvP34:KVB5obD1FN4GITJBCLQ
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/Yie.Ar.Kung-Fu(J).zip

SHA256 4128428a984f14ddf2425e59819f426caef806160a7680f72d53466e8f89cfdc
MD5 d23732e313a656ec19bb38ed8c941d89
SHA1 0c8d60d1a47d9bb2181b388973c6811a417f6d73
SHA512 1a10d1b72a0a5e8a2f7fa271c1745cd5a0e887339faae756a954661e68575862c40e59729d482e5bb23caef6de0c900355ac03f2cd55599b69842e0d1251cc96
SSDEEP 384:Q+RDpAtl23S7xOyybdLdnf4kv9EYlNuCZdVlrUvFTrKu:QgDX38xOxbdyktfVlrUvFTrKu
MD5 SHA1 SHA512 SSDEEP

emulators/virtuanes/roms/kuaidaxuanfeng_chs.zip

SHA256 cb68b8c91a673753989b2d89c91ba60e629711b82d27e5715cb373942c764613
MD5 7c1d4c13d2c3d3f85707c40e09f9d292
SHA1 997e9e98a1f6bd5978a11932054b36687d1a2ea5
SHA512 f8b6d4e2c4af00e8a8bf5e853ad27b5e77bb9e853549ba5889f5a2402599753fcec3d27f264769ebc78feaf6d185da7bac0e5e7e64c761057a8c937753be33a0
SSDEEP 3072:Nc0gxVqWMk0JLjUVxMOUdgwyWu+xZriEH8wzTu7/rC:bgfxMnJOedXD/riEHHGzrC
MD5 SHA1 SHA512 SSDEEP

fonts/MaterialIcons-Regular.ttf

SHA256 c99898d73b4c22a204781ccb546e7fed09f2aeece0629736768e93a805cd0873
MD5 74535251e17acfdf74c0ce531fa7d39a
SHA1 6e0d65c4583e95aed81d09fa61f3ea95c46cf20e
SHA512 ddcaa332626858da19ea627446aa067a8da737e7b838880facd036f846fef6927610d6cfc999d87bc33a389e9d8c51dc871d41622bc1d8deb8f567c1978c22cf
SSDEEP 6144:rIuzpsDRGNuPLcc6GsPIttNzW5DsLHHBkCwihR4syP5VbLF5cXgZ1b4Gy8SF5JOE:rIuzeDRoeLcpG9ttNzW9sL2sxxnN8fmd
MD5 SHA1 SHA512 SSDEEP

install.dll

IMPHASH 9a97daa9060ba1a30a2b5415e6dc623f
SHA256 10acbcf011f06a42d9f2577abdd5d455d6770ec7dfefd0da2832e1f36231819e
MD5 b343876cb4c4574e675ef636074dac2f
SHA1 af43f04949b1405bb5015de99603ff5f7a40d09a
SHA512 886998baf7e063b4eb5793760f44b68c7ab04df8fb167d79ab3293582ed26e6b8d89790dc330aa92c782b22a879d42feb0010d6c6166eae97a13d7b8304a9358
SSDEEP 384:a0o5eUmw4k4b39kbslT7MQv/uo6ki2Di+vpM/S+ShjmM6IGBkSm:HUm9ky39koIr2u+vW/S+ST6nkf
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

4c:96:c2:cd:1f:40:ef:d3:56:24:69:24:fc:e1:a5:69:7e:44:24:94:f2:8c:fb:de:51:11:ea:c9:37:2f:e5:ae

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Apr 11, 2024

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

5e:c9:ed:d5:94:78:85:7b:d5:61:c6:28

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 7, 2023 - Sep 6, 2024

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 2, 2023 - Dec 4, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

6284

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\monec\Documents\workspace\Monect_host\x64\Release\install.pdb

lang/en_us.lg

SHA256 db923c6b728fcbf6d7e6bdb3906bcbd2b0e169d188f1da8f953bd3a0ff1e9e89
MD5 eacd9c8aa0725f2ecd4953f56a1bc769
SHA1 6b9b029c4ff464c17f4f94c999ad3ed2051e4259
SHA512 0b08970ed8a476fea3378118a1d7ffa2b9e5a7a3896a084592ac6c4942a1d0fd4089624284116d8912392153016e46b97fb3032751157d1eaa4951ffa2e95dab
SSDEEP 192:5XeqHjLFlKuxOtoH+/XnPnt3j68ia3BunacdCLqf9qQ8nWDaV:wa1wuKoH2Ptd3BIxfgQ8niaV
MD5 SHA1 SHA512 SSDEEP

lang/zh_cn.lg

SHA256 87e69c25d48931eaa5f47db6825fabbe3ccf41e782ed17fef1003d29744f338e
MD5 7eb97308c0850b4695e76ad7b37caa3b
SHA1 cbb84b9d33f17703c52ae75900424a847682632c
SHA512 68cbe200cb9362b70e4d29bf20f8e32a6ceab189725274134df40555193dbfedd6ef76dcd2ed6d319e1d05300d642956a8f06adafb4dd0b349de13a66c7fe2c5
SSDEEP 192:5+KBTDPzO4zmLMwKA6Z0KQpT64q7IJo08AQK3S3:koDPRKLe0KZdST8A83
MD5 SHA1 SHA512 SSDEEP

libjpeg-9.dll

IMPHASH 0c2dc34190018f12ac94500a6ddd639a
SHA256 3a224af540c96574800f5e9acf64b2cdfb9060e727919ec14fbd187a9b5bfe69
MD5 c540308d4a8e6289c40753fdd3e1c960
SHA1 1b84170212ca51970f794c967465ca7e84000d0e
SHA512 1dadc6b92de9af998f83faf216d2ab6483b2dea7cdea3387ac846e924adbf624f36f8093daf5cee6010fea7f3556a5e2fcac494dbc87b5a55ce564c9cd76f92b
SSDEEP 6144:I7wNZIYb0maLgCaqrWqg7EdP8J1dJHoFaeghCbBL:I7we7gCaqrWqg7EdP8jpY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5136

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

jcopy_block_row jcopy_sample_rows jdiv_round_up jinit_1pass_quantizer jinit_2pass_quantizer jinit_arith_decoder jinit_arith_encoder jinit_c_coef_controller jinit_c_main_controller jinit_c_master_control jinit_c_prep_controller jinit_color_converter jinit_color_deconverter jinit_compress_master jinit_d_coef_controller jinit_d_main_controller jinit_d_post_controller jinit_downsampler jinit_forward_dct jinit_huff_decoder jinit_huff_encoder jinit_input_controller jinit_inverse_dct jinit_marker_reader jinit_marker_writer jinit_master_decompress jinit_memory_mgr jinit_merged_upsampler jinit_upsampler jpeg_CreateCompress jpeg_CreateDecompress jpeg_abort jpeg_abort_compress jpeg_abort_decompress jpeg_add_quant_table jpeg_alloc_huff_table jpeg_alloc_quant_table jpeg_aritab jpeg_calc_jpeg_dimensions jpeg_calc_output_dimensions jpeg_consume_input jpeg_copy_critical_parameters jpeg_core_output_dimensions jpeg_default_colorspace jpeg_default_qtables jpeg_destroy jpeg_destroy_compress jpeg_destroy_decompress jpeg_fdct_10x10 jpeg_fdct_10x5 jpeg_fdct_11x11 jpeg_fdct_12x12 jpeg_fdct_12x6 jpeg_fdct_13x13 jpeg_fdct_14x14 jpeg_fdct_14x7 jpeg_fdct_15x15 jpeg_fdct_16x16 jpeg_fdct_16x8 jpeg_fdct_1x1 jpeg_fdct_1x2 jpeg_fdct_2x1 jpeg_fdct_2x2 jpeg_fdct_2x4 jpeg_fdct_3x3 jpeg_fdct_3x6 jpeg_fdct_4x2 jpeg_fdct_4x4 jpeg_fdct_4x8 jpeg_fdct_5x10 jpeg_fdct_5x5 jpeg_fdct_6x12 jpeg_fdct_6x3 jpeg_fdct_6x6 jpeg_fdct_7x14 jpeg_fdct_7x7 jpeg_fdct_8x16 jpeg_fdct_8x4 jpeg_fdct_9x9 jpeg_fdct_float jpeg_fdct_ifast jpeg_fdct_islow jpeg_finish_compress jpeg_finish_decompress jpeg_finish_output jpeg_free_large jpeg_free_small jpeg_get_large jpeg_get_small jpeg_has_multiple_scans jpeg_idct_10x10 jpeg_idct_10x5 jpeg_idct_11x11 jpeg_idct_12x12 jpeg_idct_12x6 jpeg_idct_13x13 jpeg_idct_14x14 jpeg_idct_14x7 jpeg_idct_15x15 jpeg_idct_16x16 jpeg_idct_16x8 jpeg_idct_1x1 jpeg_idct_1x2 jpeg_idct_2x1 jpeg_idct_2x2 jpeg_idct_2x4 jpeg_idct_3x3 jpeg_idct_3x6 jpeg_idct_4x2 jpeg_idct_4x4 jpeg_idct_4x8 jpeg_idct_5x10 jpeg_idct_5x5 jpeg_idct_6x12 jpeg_idct_6x3 jpeg_idct_6x6 jpeg_idct_7x14 jpeg_idct_7x7 jpeg_idct_8x16 jpeg_idct_8x4 jpeg_idct_9x9 jpeg_idct_float jpeg_idct_ifast jpeg_idct_islow jpeg_input_complete jpeg_mem_available jpeg_mem_dest jpeg_mem_init jpeg_mem_src jpeg_mem_term jpeg_natural_order jpeg_natural_order2 jpeg_natural_order3 jpeg_natural_order4 jpeg_natural_order5 jpeg_natural_order6 jpeg_natural_order7 jpeg_new_colormap jpeg_open_backing_store jpeg_quality_scaling jpeg_read_coefficients jpeg_read_header jpeg_read_raw_data jpeg_read_scanlines jpeg_resync_to_restart jpeg_save_markers jpeg_set_colorspace jpeg_set_defaults jpeg_set_linear_quality jpeg_set_marker_processor jpeg_set_quality jpeg_simple_progression jpeg_start_compress jpeg_start_decompress jpeg_start_output jpeg_std_error jpeg_std_message_table jpeg_stdio_dest jpeg_stdio_src jpeg_suppress_tables jpeg_write_coefficients jpeg_write_m_byte jpeg_write_m_header jpeg_write_marker jpeg_write_raw_data jpeg_write_scanlines jpeg_write_tables jround_up

Name

.text

Size

196KB

Virtual Size

195KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

520B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

libpng16-16.dll

IMPHASH 1d243a681c53b17663865498e77cb5a2
SHA256 e688b4a4d18f4b6ccc99c6ca4980f51218cb825610775192d9b60b2f05eff2d5
MD5 3a26cd3f92436747d2285dcef1fae67f
SHA1 e3d1403be06beb32fc8dc7e8a58c31e18b586a70
SHA512 73d651f063246723807d837811ead30e3faca8cb0581603f264c28fea1b2bdb6d874a73c1288c7770e95463786d6945b065d4ca1cf553e08220aea4e78a6f37f
SSDEEP 3072:VatMOImapxER0/vnm2mjq61IJJT1fX0yuWUQstxZw2TnzFEY5IQ:VatMOImapaR03nmnYJV1cjtnwunw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4855

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

png_access_version_number png_benign_error png_build_grayscale_palette png_calloc png_chunk_benign_error png_chunk_error png_chunk_warning png_convert_from_struct_tm png_convert_from_time_t png_convert_to_rfc1123 png_convert_to_rfc1123_buffer png_create_info_struct png_create_read_struct png_create_read_struct_2 png_create_write_struct png_create_write_struct_2 png_data_freer png_destroy_info_struct png_destroy_read_struct png_destroy_write_struct png_error png_free png_free_data png_free_default png_get_IHDR png_get_PLTE png_get_bKGD png_get_bit_depth png_get_cHRM png_get_cHRM_XYZ png_get_cHRM_XYZ_fixed png_get_cHRM_fixed png_get_channels png_get_chunk_cache_max png_get_chunk_malloc_max png_get_color_type png_get_compression_buffer_size png_get_compression_type png_get_copyright png_get_current_pass_number png_get_current_row_number png_get_eXIf png_get_eXIf_1 png_get_error_ptr png_get_filter_type png_get_gAMA png_get_gAMA_fixed png_get_hIST png_get_header_ver png_get_header_version png_get_iCCP png_get_image_height png_get_image_width png_get_int_32 png_get_interlace_type png_get_io_chunk_type png_get_io_ptr png_get_io_state png_get_libpng_ver png_get_mem_ptr png_get_oFFs png_get_pCAL png_get_pHYs png_get_pHYs_dpi png_get_palette_max png_get_pixel_aspect_ratio png_get_pixel_aspect_ratio_fixed png_get_pixels_per_inch png_get_pixels_per_meter png_get_progressive_ptr png_get_rgb_to_gray_status png_get_rowbytes png_get_rows png_get_sBIT png_get_sCAL png_get_sCAL_fixed png_get_sCAL_s png_get_sPLT png_get_sRGB png_get_signature png_get_tIME png_get_tRNS png_get_text png_get_uint_16 png_get_uint_31 png_get_uint_32 png_get_unknown_chunks png_get_user_chunk_ptr png_get_user_height_max png_get_user_transform_ptr png_get_user_width_max png_get_valid png_get_x_offset_inches png_get_x_offset_inches_fixed png_get_x_offset_microns png_get_x_offset_pixels png_get_x_pixels_per_inch png_get_x_pixels_per_meter png_get_y_offset_inches png_get_y_offset_inches_fixed png_get_y_offset_microns png_get_y_offset_pixels png_get_y_pixels_per_inch png_get_y_pixels_per_meter png_handle_as_unknown png_image_begin_read_from_file png_image_begin_read_from_memory png_image_begin_read_from_stdio png_image_finish_read png_image_free png_image_write_to_file png_image_write_to_memory png_image_write_to_stdio png_info_init_3 png_init_io png_longjmp png_malloc png_malloc_default png_malloc_warn png_permit_mng_features png_process_data png_process_data_pause png_process_data_skip png_progressive_combine_row png_read_end png_read_image png_read_info png_read_png png_read_row png_read_rows png_read_update_info png_reset_zstream png_save_int_32 png_save_uint_16 png_save_uint_32 png_set_IHDR png_set_PLTE png_set_add_alpha png_set_alpha_mode png_set_alpha_mode_fixed png_set_bKGD png_set_background png_set_background_fixed png_set_benign_errors png_set_bgr png_set_cHRM png_set_cHRM_XYZ png_set_cHRM_XYZ_fixed png_set_cHRM_fixed png_set_check_for_invalid_index png_set_chunk_cache_max png_set_chunk_malloc_max png_set_compression_buffer_size png_set_compression_level png_set_compression_mem_level png_set_compression_method png_set_compression_strategy png_set_compression_window_bits png_set_crc_action png_set_eXIf png_set_eXIf_1 png_set_error_fn png_set_expand png_set_expand_16 png_set_expand_gray_1_2_4_to_8 png_set_filler png_set_filter png_set_filter_heuristics png_set_filter_heuristics_fixed png_set_flush png_set_gAMA png_set_gAMA_fixed png_set_gamma png_set_gamma_fixed png_set_gray_to_rgb png_set_hIST png_set_iCCP png_set_interlace_handling png_set_invalid png_set_invert_alpha png_set_invert_mono png_set_keep_unknown_chunks png_set_longjmp_fn png_set_mem_fn png_set_oFFs png_set_option png_set_pCAL png_set_pHYs png_set_packing png_set_packswap png_set_palette_to_rgb png_set_progressive_read_fn png_set_quantize png_set_read_fn png_set_read_status_fn png_set_read_user_chunk_fn png_set_read_user_transform_fn png_set_rgb_to_gray png_set_rgb_to_gray_fixed png_set_rows png_set_sBIT png_set_sCAL png_set_sCAL_fixed png_set_sCAL_s png_set_sPLT png_set_sRGB png_set_sRGB_gAMA_and_cHRM png_set_scale_16 png_set_shift png_set_sig_bytes png_set_strip_16 png_set_strip_alpha png_set_swap png_set_swap_alpha png_set_tIME png_set_tRNS png_set_tRNS_to_alpha png_set_text png_set_text_compression_level png_set_text_compression_mem_level png_set_text_compression_method png_set_text_compression_strategy png_set_text_compression_window_bits png_set_unknown_chunk_location png_set_unknown_chunks png_set_user_limits png_set_user_transform_info png_set_write_fn png_set_write_status_fn png_set_write_user_transform_fn png_sig_cmp png_start_read_image png_warning png_write_chunk png_write_chunk_data png_write_chunk_end png_write_chunk_start png_write_end png_write_flush png_write_image png_write_info png_write_info_before_PLTE png_write_png png_write_row png_write_rows png_write_sig

Name

.text

Size

157KB

Virtual Size

157KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

libtiff-5.dll

IMPHASH 07faa6c186f4189cca71ff04643bcd7e
SHA256 ebfe97ac5ef26b94945af3db5ffd110a4b8e92dc02559bf81ccb33f0d5ebce95
MD5 7d40a697ca6f21a8f09468b9fce565ad
SHA1 dc3b7f7fc0d9056af370e06f1451a65e77ff07f7
SHA512 5a195e3123f7f17d92b7eca46b9afa1ea600623ad6929ac29197447bb4d474a068fd5f61fca6731a60514125d3b0b2cafe1ff6be3a0161251a366355b660d61a
SSDEEP 6144:d8x4RKXHtEOtiYFJEn9RX9kgr+6Dr1Xu1ih/QpGJylW:qx4RK3tvKRH3Dt4ih9Ji
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5040

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle CreateFileA CreateFileMappingA CreateFileW DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetFileSize GetLastError GetModuleHandleA GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection LoadLibraryW LocalAlloc LocalFree MapViewOfFile QueryPerformanceCounter ReadFile RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetFilePointer SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter UnmapViewOfFile VirtualProtect VirtualQuery WideCharToMultiByte WriteFile

msvcrt

__dllonexit __iob_func _amsg_exit _assert _errno _initterm _lock _onexit _setjmp _unlock _vsnprintf abort atan2 atoi bsearch calloc exp floor fprintf fputc fputs free frexp fwrite getenv isprint ldexp log longjmp malloc memcmp memcpy memmove memset qsort rand realloc signal sprintf sqrt strchr strcmp strcpy strlen strncmp vfprintf

user32

GetFocus MessageBoxA

libjpeg-9

jpeg_destroy jpeg_write_raw_data jpeg_finish_compress jpeg_set_colorspace jpeg_std_error jpeg_CreateDecompress jpeg_abort jpeg_CreateCompress jpeg_set_defaults jpeg_write_tables jpeg_finish_decompress jpeg_read_header jpeg_has_multiple_scans jpeg_start_decompress jpeg_read_raw_data jpeg_resync_to_restart jpeg_set_quality jpeg_suppress_tables jpeg_start_compress jpeg_write_scanlines jpeg_read_scanlines

zlib1

deflateParams inflateEnd deflateEnd deflate deflateReset inflate inflateSync inflateReset deflateInit_ inflateInit_

TIFFAccessTagMethods TIFFCIELabToRGBInit TIFFCIELabToXYZ TIFFCheckTile TIFFCheckpointDirectory TIFFCleanup TIFFClientOpen TIFFClientdata TIFFClose TIFFComputeStrip TIFFComputeTile TIFFCreateCustomDirectory TIFFCreateDirectory TIFFCreateEXIFDirectory TIFFCurrentDirOffset TIFFCurrentDirectory TIFFCurrentRow TIFFCurrentStrip TIFFCurrentTile TIFFDataWidth TIFFDefaultStripSize TIFFDefaultTileSize TIFFError TIFFErrorExt TIFFFdOpen TIFFFieldDataType TIFFFieldName TIFFFieldPassCount TIFFFieldReadCount TIFFFieldTag TIFFFieldWithName TIFFFieldWithTag TIFFFieldWriteCount TIFFFileName TIFFFileno TIFFFindCODEC TIFFFindField TIFFFlush TIFFFlushData TIFFFreeDirectory TIFFGetBitRevTable TIFFGetClientInfo TIFFGetCloseProc TIFFGetConfiguredCODECs TIFFGetField TIFFGetFieldDefaulted TIFFGetMapFileProc TIFFGetMode TIFFGetReadProc TIFFGetSeekProc TIFFGetSizeProc TIFFGetTagListCount TIFFGetTagListEntry TIFFGetUnmapFileProc TIFFGetVersion TIFFGetWriteProc TIFFIsBigEndian TIFFIsByteSwapped TIFFIsCODECConfigured TIFFIsMSB2LSB TIFFIsTiled TIFFIsUpSampled TIFFLastDirectory TIFFMergeFieldInfo TIFFNumberOfDirectories TIFFNumberOfStrips TIFFNumberOfTiles TIFFOpen TIFFOpenW TIFFPrintDirectory TIFFRGBAImageBegin TIFFRGBAImageEnd TIFFRGBAImageGet TIFFRGBAImageOK TIFFRasterScanlineSize TIFFRasterScanlineSize64 TIFFRawStripSize TIFFRawStripSize64 TIFFReadBufferSetup TIFFReadCustomDirectory TIFFReadDirectory TIFFReadEXIFDirectory TIFFReadEncodedStrip TIFFReadEncodedTile TIFFReadRGBAImage TIFFReadRGBAImageOriented TIFFReadRGBAStrip TIFFReadRGBAStripExt TIFFReadRGBATile TIFFReadRGBATileExt TIFFReadRawStrip TIFFReadRawTile TIFFReadScanline TIFFReadTile TIFFRegisterCODEC TIFFReverseBits TIFFRewriteDirectory TIFFScanlineSize TIFFScanlineSize64 TIFFSetClientInfo TIFFSetClientdata TIFFSetCompressionScheme TIFFSetDirectory TIFFSetErrorHandler TIFFSetErrorHandlerExt TIFFSetField TIFFSetFileName TIFFSetFileno TIFFSetMode TIFFSetSubDirectory TIFFSetTagExtender TIFFSetWarningHandler TIFFSetWarningHandlerExt TIFFSetWriteOffset TIFFSetupStrips TIFFStripSize TIFFStripSize64 TIFFSwabArrayOfDouble TIFFSwabArrayOfFloat TIFFSwabArrayOfLong TIFFSwabArrayOfLong8 TIFFSwabArrayOfShort TIFFSwabArrayOfTriples TIFFSwabDouble TIFFSwabFloat TIFFSwabLong TIFFSwabLong8 TIFFSwabShort TIFFTileRowSize TIFFTileRowSize64 TIFFTileSize TIFFTileSize64 TIFFUnRegisterCODEC TIFFUnlinkDirectory TIFFUnsetField TIFFVGetField TIFFVGetFieldDefaulted TIFFVSetField TIFFVStripSize TIFFVStripSize64 TIFFVTileSize TIFFVTileSize64 TIFFWarning TIFFWarningExt TIFFWriteBufferSetup TIFFWriteCheck TIFFWriteCustomDirectory TIFFWriteDirectory TIFFWriteEncodedStrip TIFFWriteEncodedTile TIFFWriteRawStrip TIFFWriteRawTile TIFFWriteScanline TIFFWriteTile TIFFXYZToRGB TIFFYCbCrToRGBInit TIFFYCbCrtoRGB _TIFFCheckMalloc _TIFFCheckRealloc _TIFFMultiply32 _TIFFMultiply64 _TIFFRewriteField _TIFFfree _TIFFmalloc _TIFFmemcmp _TIFFmemcpy _TIFFmemset _TIFFrealloc

Name

.text

Size

255KB

Virtual Size

254KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

143KB

Virtual Size

142KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

660B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

libwebp-7.dll

IMPHASH f91d797666de5b6280ece58a34ceba9e
SHA256 9a53563b6058f70f2725029b7dd2fe96f869c20e8090031cd303e994dfe07b50
MD5 2c5aca898ff88eb2c9028bbeefebbd1e
SHA1 7a0048674ef614bebe6cc83b1228d670372076c9
SHA512 46fe8b151e3a13ab506c4fc8a9f3f0f47b21f64f37097a4f1f573b547443ed23e7b2f489807c1623fbc41015f7da11665d88690d8cd0ddd61aa53789586c5a13
SSDEEP 6144:t2lROjMXfhVy+tEZzshykv2SxgQceWni1UC2JCsJ5zIGWexIaZOovMPVt9ACB/1O:JMtVykiiiCsJdpxIaZOokPVtW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4855

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

QuantizeLevels VP8AccumulateSSE VP8AdjustFilterStrength VP8ApplyNearLossless VP8BitReaderSetBuffer VP8BitWriterAppend VP8BitWriterFinish VP8BitWriterInit VP8BitWriterWipeOut VP8CalculateLevelCosts VP8Cat3 VP8Cat4 VP8Cat5 VP8Cat6 VP8CheckSignature VP8Clear VP8CodeIntraModes VP8CoeffsProba0 VP8CoeffsUpdateProba VP8CollectHistogram VP8Copy16x8 VP8Copy4x4 VP8Decimate VP8Decode VP8DecodeMB VP8DecompressAlphaRows VP8DefaultProbas VP8Delete VP8DitherCombine8x8 VP8DspInit VP8DspInitMIPS32 VP8DspInitMIPSdspR2 VP8DspInitMSA VP8DspInitNEON VP8DspInitSSE2 VP8DspInitSSE41 VP8DspScan VP8EmitTokens VP8EncAnalyze VP8EncBands VP8EncDeleteAlpha VP8EncDspCostInit VP8EncDspCostInitMIPS32 VP8EncDspCostInitMIPSdspR2 VP8EncDspCostInitNEON VP8EncDspCostInitSSE2 VP8EncDspInit VP8EncDspInitMIPS32 VP8EncDspInitMIPSdspR2 VP8EncDspInitMSA VP8EncDspInitNEON VP8EncDspInitSSE2 VP8EncDspInitSSE41 VP8EncFinishAlpha VP8EncFreeBitWriters VP8EncInitAlpha VP8EncLoop VP8EncPredChroma8 VP8EncPredLuma16 VP8EncPredLuma4 VP8EncQuantize2Blocks VP8EncQuantizeBlock VP8EncQuantizeBlockWHT VP8EncStartAlpha VP8EncTokenLoop VP8EncWrite VP8EnterCritical VP8EntropyCost VP8EstimateTokenSize VP8ExitCritical VP8FTransform VP8FTransform2 VP8FTransformWHT VP8FilterStrengthFromDelta VP8FiltersInit VP8FiltersInitMIPSdspR2 VP8FiltersInitMSA VP8FiltersInitNEON VP8FiltersInitSSE2 VP8FixedCostsI16 VP8FixedCostsI4 VP8FixedCostsUV VP8GetCPUInfo VP8GetCostLuma16 VP8GetCostLuma4 VP8GetCostUV VP8GetHeaders VP8GetInfo VP8GetResidualCost VP8GetSignedValue VP8GetThreadMethod VP8GetValue VP8HFilter16 VP8HFilter16i VP8HFilter8 VP8HFilter8i VP8I16ModeOffsets VP8I4ModeOffsets VP8ITransform VP8InitBitReader VP8InitClipTables VP8InitDithering VP8InitFilter VP8InitFrame VP8InitIoInternal VP8InitRandom VP8InitResidual VP8InitScanline VP8IteratorBytesToNz VP8IteratorExport VP8IteratorImport VP8IteratorInit VP8IteratorIsDone VP8IteratorNext VP8IteratorNzToBytes VP8IteratorProgress VP8IteratorReset VP8IteratorRotateI4 VP8IteratorSaveBoundary VP8IteratorSetCountDown VP8IteratorSetRow VP8IteratorStartI4 VP8LAddGreenToBlueAndRed VP8LAddGreenToBlueAndRed_C VP8LAddVector VP8LAddVectorEq VP8LAllocateHistogram VP8LAllocateHistogramSet VP8LBackwardReferencesTraceBackwards VP8LBackwardRefsClear VP8LBackwardRefsCursorAdd VP8LBackwardRefsInit VP8LBitEntropyInit VP8LBitReaderSetBuffer VP8LBitWriterClone VP8LBitWriterFinish VP8LBitWriterInit VP8LBitWriterReset VP8LBitWriterSwap VP8LBitWriterWipeOut VP8LBitsEntropy VP8LBitsEntropyUnrefined VP8LBuildHuffmanTable VP8LBundleColorMap VP8LBundleColorMap_C VP8LCheckSignature VP8LClear VP8LClearBackwardRefs VP8LCollectColorBlueTransforms VP8LCollectColorBlueTransforms_C VP8LCollectColorRedTransforms VP8LCollectColorRedTransforms_C VP8LColorCacheClear VP8LColorCacheCopy VP8LColorCacheInit VP8LColorIndexInverseTransformAlpha VP8LColorSpaceTransform VP8LCombinedShannonEntropy VP8LConvertBGRAToBGR VP8LConvertBGRAToBGR_C VP8LConvertBGRAToRGB VP8LConvertBGRAToRGB565 VP8LConvertBGRAToRGB565_C VP8LConvertBGRAToRGBA VP8LConvertBGRAToRGBA4444 VP8LConvertBGRAToRGBA4444_C VP8LConvertBGRAToRGBA_C VP8LConvertBGRAToRGB_C VP8LConvertFromBGRA VP8LCreateCompressedHuffmanTree VP8LCreateHuffmanTree VP8LDecodeAlphaHeader VP8LDecodeAlphaImageStream VP8LDecodeHeader VP8LDecodeImage VP8LDelete VP8LDistanceToPlaneCode VP8LDoFillBitWindow VP8LDspInit VP8LDspInitMIPSdspR2 VP8LDspInitMSA VP8LDspInitNEON VP8LDspInitSSE2 VP8LEncDspInit VP8LEncDspInitMIPS32 VP8LEncDspInitMIPSdspR2 VP8LEncDspInitMSA VP8LEncDspInitNEON VP8LEncDspInitSSE2 VP8LEncDspInitSSE41 VP8LEncodeImage VP8LEncodeStream VP8LExtraCost VP8LExtraCostCombined VP8LFastLog2Slow VP8LFastSLog2Slow VP8LFreeHistogram VP8LFreeHistogramSet VP8LGetBackwardReferences VP8LGetCombinedEntropyUnrefined VP8LGetEntropyUnrefined VP8LGetHistoImageSymbols VP8LGetHistogramSize VP8LGetInfo VP8LHashChainClear VP8LHashChainFill VP8LHashChainInit VP8LHistogramAdd VP8LHistogramAddSinglePixOrCopy VP8LHistogramCreate VP8LHistogramEstimateBits VP8LHistogramInit VP8LHistogramSetClear VP8LHistogramStoreRefs VP8LHtreeGroupsFree VP8LHtreeGroupsNew VP8LInitBitReader VP8LInverseTransform VP8LMapColor32b VP8LMapColor8b VP8LNew VP8LPredictors VP8LPredictorsAdd VP8LPredictorsAdd_C VP8LPredictorsSub VP8LPredictorsSub_C VP8LPredictors_C VP8LPutBitsFlushBits VP8LPutBitsInternal VP8LReadBits VP8LRefsCursorInit VP8LRefsCursorNextBlock VP8LResidualImage VP8LSubtractGreenFromBlueAndRed VP8LSubtractGreenFromBlueAndRed_C VP8LTransformColor VP8LTransformColorInverse VP8LTransformColorInverse_C VP8LTransformColor_C VP8LVectorMismatch VP8LevelCodes VP8LevelFixedCosts VP8LoadFinalBytes VP8MakeChroma8Preds VP8MakeIntra4Preds VP8MakeLuma16Preds VP8Mean16x4 VP8New VP8ParseIntraModeRow VP8ParseProba VP8ParseQuant VP8PredChroma8 VP8PredLuma16 VP8PredLuma4 VP8ProcessRow VP8PutBit VP8PutBitUniform VP8PutBits VP8PutSignedBits VP8RecordCoeffTokens VP8RecordCoeffs VP8RemapBitReader VP8ResetProba VP8SSE16x16 VP8SSE16x8 VP8SSE4x4 VP8SSE8x8 VP8SSIMDspInit VP8SSIMDspInitSSE2 VP8SSIMFromStats VP8SSIMFromStatsClipped VP8SSIMGet VP8SSIMGetClipped VP8Scan VP8SetError VP8SetHistogramData VP8SetIntra16Mode VP8SetIntra4Mode VP8SetIntraUVMode VP8SetResidualCoeffs VP8SetSegment VP8SetSegmentParams VP8SetSkip VP8SimpleHFilter16 VP8SimpleHFilter16i VP8SimpleVFilter16 VP8SimpleVFilter16i VP8Status VP8StatusMessage VP8StoreFilterStats VP8TBufferClear VP8TBufferInit VP8TDisto16x16 VP8TDisto4x4 VP8Transform VP8TransformAC3 VP8TransformDC VP8TransformDCUV VP8TransformUV VP8TransformWHT VP8UVModeOffsets VP8VFilter16 VP8VFilter16i VP8VFilter8 VP8VFilter8i VP8WriteProbas VP8YuvToArgb32_SSE2 VP8YuvToBgr32_SSE2 VP8YuvToBgr32_SSE41 VP8YuvToBgra32_SSE2 VP8YuvToRgb32_SSE2 VP8YuvToRgb32_SSE41 VP8YuvToRgb56532_SSE2 VP8YuvToRgba32_SSE2 VP8YuvToRgba444432_SSE2 VP8kabs0 VP8kclip1 VP8ksclip1 VP8ksclip2 WebPAllocateDecBuffer WebPApplyAlphaMultiply WebPApplyAlphaMultiply4444 WebPAvoidSlowMemory WebPBlendAlpha WebPCleanupTransparentArea WebPCleanupTransparentAreaLossless WebPConfigInitInternal WebPConfigLosslessPreset WebPConvertARGBToUV WebPConvertARGBToUV_C WebPConvertARGBToY WebPConvertBGR24ToY WebPConvertRGB24ToY WebPConvertRGBA32ToUV WebPConvertRGBA32ToUV_C WebPCopyDecBuffer WebPCopyDecBufferPixels WebPCopyPixels WebPCopyPlane WebPDeallocateAlphaMemory WebPDecode WebPDecodeARGB WebPDecodeARGBInto WebPDecodeBGR WebPDecodeBGRA WebPDecodeBGRAInto WebPDecodeBGRInto WebPDecodeRGB WebPDecodeRGBA WebPDecodeRGBAInto WebPDecodeRGBInto WebPDecodeYUV WebPDecodeYUVInto WebPDequantizeLevels WebPDispatchAlpha WebPDispatchAlphaToGreen WebPEncode WebPEncodeBGR WebPEncodeBGRA WebPEncodeLosslessBGR WebPEncodeLosslessBGRA WebPEncodeLosslessRGB WebPEncodeLosslessRGBA WebPEncodeRGB WebPEncodeRGBA WebPEncodingSetError WebPEstimateBestFilter WebPExtractAlpha WebPExtractGreen WebPFilters WebPFlipBuffer WebPFree WebPFreeDecBuffer WebPGetColorPalette WebPGetDecoderVersion WebPGetEncoderVersion WebPGetFeaturesInternal WebPGetInfo WebPGetLinePairConverter WebPGetWorkerInterface WebPGrabDecBuffer WebPHasAlpha32b WebPHasAlpha8b WebPIAppend WebPIDecGetRGB WebPIDecGetYUVA WebPIDecode WebPIDecodedArea WebPIDelete WebPINewDecoder WebPINewRGB WebPINewYUV WebPINewYUVA WebPISetIOHooks WebPIUpdate WebPInitAlphaProcessing WebPInitAlphaProcessingMIPSdspR2 WebPInitAlphaProcessingNEON WebPInitAlphaProcessingSSE2 WebPInitAlphaProcessingSSE41 WebPInitConvertARGBToYUV WebPInitConvertARGBToYUVNEON WebPInitConvertARGBToYUVSSE2 WebPInitConvertARGBToYUVSSE41 WebPInitCustomIo WebPInitDecBufferInternal WebPInitDecoderConfigInternal WebPInitSamplers WebPInitSamplersMIPS32 WebPInitSamplersMIPSdspR2 WebPInitSamplersSSE2 WebPInitSamplersSSE41 WebPInitSharpYUVNEON WebPInitSharpYUVSSE2 WebPInitUpsamplers WebPInitUpsamplersMIPSdspR2 WebPInitUpsamplersMSA WebPInitUpsamplersNEON WebPInitUpsamplersSSE2 WebPInitUpsamplersSSE41 WebPInitYUV444Converters WebPInitYUV444ConvertersMIPSdspR2 WebPInitYUV444ConvertersSSE2 WebPInitYUV444ConvertersSSE41 WebPIoInitFromOptions WebPMemoryWrite WebPMemoryWriterClear WebPMemoryWriterInit WebPMultARGBRow WebPMultARGBRow_C WebPMultARGBRows WebPMultRow WebPMultRow_C WebPMultRows WebPPackRGB WebPParseHeaders WebPPictureARGBToYUVA WebPPictureARGBToYUVADithered WebPPictureAlloc WebPPictureAllocARGB WebPPictureAllocYUVA WebPPictureCopy WebPPictureCrop WebPPictureDistortion WebPPictureFree WebPPictureHasTransparency WebPPictureImportBGR WebPPictureImportBGRA WebPPictureImportBGRX WebPPictureImportRGB WebPPictureImportRGBA WebPPictureImportRGBX WebPPictureInitInternal WebPPictureIsView WebPPictureRescale WebPPictureResetBuffers WebPPictureSharpARGBToYUVA WebPPictureSmartARGBToYUVA WebPPictureView WebPPictureYUVAToARGB WebPPlaneDistortion WebPReportProgress WebPRescaleNeededLines WebPRescalerDspInit WebPRescalerDspInitMIPS32 WebPRescalerDspInitMIPSdspR2 WebPRescalerDspInitMSA WebPRescalerDspInitNEON WebPRescalerDspInitSSE2 WebPRescalerExport WebPRescalerExportRow WebPRescalerExportRowExpand WebPRescalerExportRowExpand_C WebPRescalerExportRowShrink WebPRescalerExportRowShrink_C WebPRescalerGetScaledDimensions WebPRescalerImport WebPRescalerImportRow WebPRescalerImportRowExpand WebPRescalerImportRowExpand_C WebPRescalerImportRowShrink WebPRescalerImportRowShrink_C WebPRescalerInit WebPResetDecParams WebPSafeCalloc WebPSafeFree WebPSafeMalloc WebPSamplerProcessPlane WebPSamplers WebPSetWorkerInterface WebPSharpYUVFilterRow WebPSharpYUVUpdateRGB WebPSharpYUVUpdateY WebPUnfilters WebPUpsamplers WebPValidateConfig WebPYUV444Converters WebPYuv444ToArgb_C WebPYuv444ToBgr_C WebPYuv444ToBgra_C WebPYuv444ToRgb565_C WebPYuv444ToRgb_C WebPYuv444ToRgba4444_C WebPYuv444ToRgba_C kLog2Table kPrefixEncodeCode kPrefixEncodeExtraBitsValue kSLog2Table kVP8Log2Range kVP8NewRange

Name

.text

Size

354KB

Virtual Size

353KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

336B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

mfwrap.dll

IMPHASH c64fbb7bebcc6c4af6d9722b74103fbd
SHA256 539a6ff095f8a52d8fa1162b1971a0ed31c15d769d24bf2abe8f7bcb2380c05f
MD5 70d2b9c7cbc7134b037325c51fa3fb66
SHA1 9fe89420baeebb6404bca991e37bc3a3a6eea4a7
SHA512 a1d07e2715dd0e808afeb4fb21d5d060b6dc9cb4b0d08226ef18ab7d0cbe16ea65f1e20059dd2e8f05fdc6c81a2af6b52b4b865e4ab448ffbaeabc32ba301747
SSDEEP 768:oTgyUqNOEaTUXGn8ZR0ZaFy7Vjgdr2u+v9KS+ST6nkH:oTgyTgn2R0Za07Rg5xn/mJ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

0f:d1:8e:28:fc:9b:cb:3d:dc:0a:f6:70:48:be:e1:ce:12:9d:a7:b2:b0:f5:95:4d:d1:48:d1:79:e7:4d:e6:1e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 2, 2024

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

5e:c9:ed:d5:94:78:85:7b:d5:61:c6:28

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 7, 2023 - Sep 6, 2024

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 2, 2023 - Dec 4, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

13592

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\monec\Documents\workspace\Monect_host\x64\Release\mfwrap.pdb

mf

MFEnumDeviceSources

mfplat

MFTEnumEx MFCreateMediaType MFGetStrideForBitmapInfoHeader MFCreateAttributes MFStartup MFCreateSample MFCreateDXGISurfaceBuffer MFCreateDXGIDeviceManager MFShutdown

mfreadwrite

MFCreateSourceReaderFromMediaSource

shlwapi

ord219 StrRChrW

kernel32

InitializeCriticalSectionEx RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead OutputDebugStringW QueryPerformanceFrequency QueryPerformanceCounter WaitForSingleObject GetLastError GetModuleFileNameW LoadLibraryW GetProcAddress FreeLibrary MulDiv HeapAlloc GetProcessHeap InitializeCriticalSection HeapFree DeleteCriticalSection EnterCriticalSection LeaveCriticalSection Sleep RtlCaptureContext CreateThread

user32

SetRect

ole32

CoInitializeEx CoTaskMemFree CoUninitialize

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException __C_specific_handler __std_terminate memcpy __std_type_info_destroy_list __std_exception_destroy memset __std_exception_copy

api-ms-win-crt-heap-l1-1-0

malloc _callnewh free

api-ms-win-crt-runtime-l1-1-0

_initterm _cexit _initterm_e _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table

officehook.dll

IMPHASH 9ef61095aa73bae5a01683a878f1d64c
SHA256 aa65e91e8189dd104933a3c8cec167d6287b976d5a89f5fa5dad3a733a672ddc
MD5 94e97ffad1db29218b928d32917bcd5d
SHA1 12b0c7fc550897516ce7255256ca5537d4204e0d
SHA512 8b0261796b76a87460f487a09a18760eb357c5356ee520c6948ceee18b91798fb34ea2a454792a4d075cdc2e07314c419cb4c0d649cac978c73f45c2b7064c9b
SSDEEP 768:vz4X1CfOjfhC1xwESHtG06Nr2u+vlS+ST6nkG:GEeEBMtGjJxe/mw
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

6d:a6:10:a3:de:37:4f:26:d4:6a:c5:40:d6:3d:31:72:07:ca:df:6e:82:a3:99:75:1b:7a:80:15:09:ce:2a:12

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Apr 11, 2024

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

5e:c9:ed:d5:94:78:85:7b:d5:61:c6:28

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 7, 2023 - Sep 6, 2024

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 2, 2023 - Dec 4, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

14148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\monec\Documents\workspace\Monect_host\x64\Release\officehook.pdb

oleacc

AccessibleObjectFromWindow

ws2_32

htonl

kernel32

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind InitializeSListHead FindFirstFileW FindNextFileW RemoveDirectoryW FindClose SetFileAttributesW GetLastError DeleteFileW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent QueryPerformanceCounter GetSystemTimeAsFileTime GetCurrentProcessId

user32

SetWindowPos GetAncestor SetForegroundWindow GetClassNameW GetForegroundWindow ShowWindow GetSystemMetrics FindWindowExW SendMessageW EnumChildWindows

shell32

ord165

ole32

CoUninitialize CoInitializeEx

oleaut32

VariantInit SysAllocString VariantClear

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memset _CxxThrowException __C_specific_handler __std_exception_copy __std_exception_destroy memcpy __std_type_info_destroy_list memmove

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s

api-ms-win-crt-string-l1-1-0

wcscat_s

api-ms-win-crt-runtime-l1-1-0

_initterm _crt_atexit _initterm_e _configure_narrow_argv _seh_filter_dll _initialize_onexit_table _cexit _invalid_parameter_noinfo_noreturn _errno _invalid_parameter_noinfo _execute_onexit_table _register_onexit_function _initialize_narrow_environment

api-ms-win-crt-heap-l1-1-0

_callnewh malloc free

rtcompress.dll

IMPHASH 7e386e66e33c837a04248be8d67a70c4
SHA256 d7f74e4bf3a1d8504a117325ad77aa873d8744710da48cf2fe2ac3fc040fd65e
MD5 a5eda8021244c048b06d7d0e9cecd484
SHA1 238f617d178231ab4d78f029603f05d55c265584
SHA512 0f3e4e4806a2d9979f26d109aea31cb2f5767a775a7ef1586a527e635c2e026cdd1de00bf22feb5b45682b88beb81c4451cb81f8633c4579fd9a3d8f1e5541bc
SSDEEP 49152:BQuzrXZPHU5S8IzdMw1Ll+9q8JeuCNqzd/Ud3UTuRCb6b5HKQgM8PbhHW:BppK6bspW
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

eb:71:e2:da:e3:18:d9:0b:cf:16:c2:74:d6:80:92:d8:d8:ce:b7:6f:a3:ea:80:dd:c0:94:b4:90:ea:c3:e6:f4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 2, 2024

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653555a484f55,1.3.6.1.4.1.311.60.2.1.2=#13074a49414e475355,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

5e:c9:ed:d5:94:78:85:7b:d5:61:c6:28

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 7, 2023 - Sep 6, 2024

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Serial Number

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Nov 2, 2023 - Dec 4, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

1929924

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\monec\Documents\workspace\Monect_host\x64\Release\rtcompress.pdb

swscale-6

sws_freeContext sws_getCachedContext sws_scale

kernel32

IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObject CloseHandle CreateThread GetStdHandle MultiByteToWideChar GetConsoleMode WriteConsoleW GetCurrentThread SetThreadPriority EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ReleaseSemaphore CreateEventW CreateSemaphoreW GetCurrentProcess GetModuleHandleW GetProcAddress GetProcessAffinityMask FreeLibrary LoadLibraryW GetThreadPriority RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId TerminateProcess

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_copy __std_exception_destroy _CxxThrowException __std_type_info_destroy_list __C_specific_handler memset memcpy strstr strchr memcmp memmove __std_terminate

api-ms-win-crt-heap-l1-1-0

calloc free malloc _callnewh

api-ms-win-crt-stdio-l1-1-0

_fseeki64 fread fclose _ftelli64 _wfopen fwrite fputc fputs __acrt_iob_func _fileno __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vsscanf

api-ms-win-crt-string-l1-1-0

isdigit _strdup strcspn _stricmp strncmp _strnicmp strspn strcmp strpbrk strtok_s

api-ms-win-crt-convert-l1-1-0

strtod strtol

api-ms-win-crt-filesystem-l1-1-0

_fstat64 _wrename _wunlink

api-ms-win-crt-math-l1-1-0

floor log lrintf log2f log10 pow exp sqrt _dclass cos powf round log2

api-ms-win-crt-runtime-l1-1-0

_wassert _cexit _beginthreadex _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment abort _configure_narrow_argv _seh_filter_dll _initterm _initterm_e _execute_onexit_table

swresample-4.dll

IMPHASH ea65996d801c1b342ffbb0a72cac1321
SHA256 339114e12aaf6c5c4d5f17605eac4665ec570ff5de189adada800c177b238932
MD5 d4ba67aba67be2d58a0f4f0742cc6272
SHA1 71629abdcd513dc3e6704fb55f71b28f09d23dac
SHA512 f6a14f86636c078aadb9543e4660ad827f71a6bda3067a0490d4ab68d09197f05106e7d52e02fe989bca44f130ce265c1fde7c4dbec27b9dbc0e6180e92b7b6b
SSDEEP 6144:IJ9IQm83mfhnpf7QTsiXMFfdN4wJg48nhyUXtLGsRBek:IHIQFufUTWIt48r
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

361KB

Virtual Size

361KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

212KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

660B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

920B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

swscale-6.dll

IMPHASH c5b3ebeb069f26c5a5bbc3e68fbad949
SHA256 b2c3ee9cdc0e5292040bcd3336390e77ae8b467d65faa80f7e68625a619b32de
MD5 ce2c506023961712261ebf67296864de
SHA1 eaa7eac0ef9e7770876324f2934a2317f1519b7d
SHA512 5dafe6784faeb6cad509ebbca44e51b2b971369fafecacffc8915d4980bd303f57201183669c7c4972ad8d0a3ebe32ebccaf4544fd66ed1c21893992ce1d5d24
SSDEEP 12288:YSEgesaQ+8S2OS73oRUG43hbUoEALkv5tlbDhsUmSa9wCCn9lF5QSzY:YQOS73oRUGchbQALkv5zFsUmSa9wCCnK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

AddVectoredExceptionHandler CloseHandle CreateEventA CreateSemaphoreA DeleteCriticalSection DuplicateHandle EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetHandleInformation GetLastError GetProcessAffinityMask GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetTickCount64 InitializeCriticalSection IsDebuggerPresent LeaveCriticalSection OpenProcess OutputDebugStringA RaiseException ReleaseSemaphore RemoveVectoredExceptionHandler ResetEvent ResumeThread SetEvent SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority Sleep SuspendThread TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject __C_specific_handler

msvcrt

__iob_func __setusermatherr _amsg_exit _beginthreadex _endthreadex _errno _initterm _lock _setjmp _strdup _ultoa _unlock abort calloc exit fprintf free fwrite longjmp malloc memcpy memmove memset printf realloc signal strlen strncmp vfprintf

avutil-57

av_calloc av_fast_malloc av_fast_realloc av_frame_alloc av_frame_free av_frame_get_buffer av_frame_ref av_frame_unref av_free av_freep av_get_bits_per_pixel av_get_cpu_flags av_get_pix_fmt_name av_image_alloc av_log av_malloc av_malloc_array av_mallocz av_opt_copy av_opt_get_int av_opt_set_defaults av_opt_set_int av_pix_fmt_desc_get av_pix_fmt_get_chroma_sub_sample av_pix_fmt_swap_endianness avpriv_slicethread_create avpriv_slicethread_execute avpriv_slicethread_free

Name

.text

Size

526KB

Virtual Size

526KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

984B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

912B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

936B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

uninst.exe.nsis

SHA256 d020201446aa5b2dfec9d93d2a1f04caba273ad59a7286ebcc19b1f731509fff
MD5 c89eacc2622bbde003830d09647ac695
SHA1 4c2cc348149873e2ff0a183e057bae502800076f
SHA512 397b11417e7c7e55f4d9fc2b5a61379136d5af4ad0ba2e4e1dc59df932f3510f35d115155b00785f1db8d5dc92b16e8fb3835d65c89996e2e4b77b347efd34cd
SSDEEP 384:mYfAyOYh6XilvaKB8XlV7sbVjyX0gwR6a16oBB1wChalvX:d/OYckaD1oVjrgq686o71jQ5
MD5 SHA1 SHA512 SSDEEP

zlib1.dll

IMPHASH 9833fe070c600df4abfd312b6aa69324
SHA256 b1f58a17f3bfd55523e7bef685acf5b32d1c2a6f25abdcd442681266fd26ab08
MD5 5eac41b641e813f2a887c25e7c87a02e
SHA1 ec3f6cf88711ef8cfb3cc439cb75471a2bb9e1b5
SHA512 cad34a495f1d67c4d79ed88c5c52cf9f2d724a1748ee92518b8ece4e8f2fe1d443dfe93fb9dba8959c0e44c7973af41eb1471507ab8a5b1200a25d75287d5de5
SSDEEP 3072:wLmjK8n5MYk+NqZSB23eRenGvTBfs9Yy0J:wLl8n5MYCjFnaTBwYy0
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4855

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

912B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

PCRemoteReceiverSetup_7_5_16.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/LangDLL.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/modern-wizard.bmp

MonectMediaCenter.exe

sdl2

sdl2_image

ws2_32

shlwapi

avcodec-59

avutil-57

swscale-6

avformat-59

swresample-4

kernel32

user32

gdi32

advapi32

shell32

ole32

msvcp140

gdiplus

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic

MonectRuntimeCheck.exe

shlwapi

kernel32

user32

advapi32

shell32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic

MonectServer.exe

shlwapi

d3d11

ws2_32