9932fa8d24b3e9a1e39a722fe6e34e75cdd3feb51fcdab67d636d95b4f068935.zip.sample.gz
- SHA256 b080ceb59f3406a53c2bf869af5dc3b4e4c08f04c99fe0c5cae7d6edcd881b30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9932fa8d24b3e9a1e39a722fe6e34e75cdd3feb51fcdab67d636d95b4f068935.zip
Resource
win11-20260130-es
windows11-21h2-x64
16 signatures
150 seconds
General
- Target 9932fa8d24b3e9a1e39a722fe6e34e75cdd3feb51fcdab67d636d95b4f068935.zip.sample.gz
- Size 5.7MB
- Sample260415-xp91sagy2q
- SHA256 b080ceb59f3406a53c2bf869af5dc3b4e4c08f04c99fe0c5cae7d6edcd881b30
- MD5 ac477f19606b56c0de77beb856af0e0e
- SHA1 0d15d8557b373665c3d24d99d74ccdf34cae0d3d
- SHA512 2f2d5e86ec35f69233b4a4f6f782c7ae5c9f7ec9d7d9f5c2cbe13d43f234ccc3356d833ceaf3aa8dfc6931f534de8f411683e8cd1c562d24d451ac754fabe297
- SSDEEP 98304:JYUwbfgCWGi1nwL43kTJZsfJoISijbvxb+FD9LhUshFLWMIiRx0OUtbr:pkHi1hCjsqXYvo59bh1NDRSOE
- TLSH T11B56331BF36F3DA8D23122F84405D817A3F47FA1CA58567FB64E468EA8382B5041A75E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/cpu-z_2.19-en + CRYPT/CRYPTBASE.dll
File Explorer
-
9932fa8d24b3e9a1e39a722fe6e34e75cdd3feb51fcdab67d636d95b4f068935.zip.sample.gz.gz 5.7MB
-
9932fa8d24b3e9a1e39a722fe6e34e75cdd3feb51fcdab67d636d95b4f068935.zip.sample.zip 5.8MB
-
cpu-z_2.19-en + CRYPT/CRYPTBASE.dll.dll 2.1MB
-
cpu-z_2.19-en + CRYPT/cpuz.ini610B
-
cpu-z_2.19-en + CRYPT/cpuz_readme.txt41KB
-
cpu-z_2.19-en + CRYPT/cpuz_x32.exe.exe 5.6MB
-
cpu-z_2.19-en + CRYPT/cpuz_x64.exe.exe 7.1MB
9932fa8d24b3e9a1e39a722fe6e34e75cdd3feb51fcdab67d636d95b4f068935.zip.sample
- SHA256 9932fa8d24b3e9a1e39a722fe6e34e75cdd3feb51fcdab67d636d95b4f068935
- MD5 9bb330aabcc41bae4c596a0c5f36c013
- SHA1 d0568eaa55f495fd756fa205997ae8d93588d2a2
- SHA512 b22f7ece89612a16154a519b793754835315d4b292b08379f8e60882a70bdfa0e1249ad73b37d393c71bad4af15673f5b3c9c7aeda16e1abfa612b495632b40a
- SSDEEP 98304:xowHq8jJTsBta+056pchCmjU9GNbvgpuJz5SBUvnxY0vaed5F:bljJjh6mgmj5NiOz5S+vne0CI
- TLSH T1D5563353A3577CBCD1B403E848CAF9A773F0B6A099DCD077EA4A865D681E3210847B9D
- MD5 SHA1 SHA512 SSDEEP TLSH
cpu-z_2.19-en + CRYPT/CRYPTBASE.dll
- IMPHASH 76ef47c106370a232be021dc2e46cdf7
- SHA256 0d5578b212c64d91772a146f7e56f91824ecc10c8394a3ee6ec3e7b99937712c
- MD5 07e6560a11578548bea6a45be490bb41
- SHA1 4e3195399a9135247e55781ad13226c6b0e86c0d
- SHA512 aa5cae544a24e18c5487f5a587b1f8a53b9f2dbfac8ebfe52124c030c9d9ebbc414818b4d4ca27299cb9205402fb5c99c9a97062917f9dca08a60a4b34cedb41
- SSDEEP 24576:via/5A2ZXAdQ0YtjvM2GdXVJKMbcBBp6Rb2qHs96eHNuL:vZ
- TLSH T1D4A50B65423FC874EABEA6368E5F399F0D6B495D003AB1F83A534D909D273168BF0D21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
AcquireSRWLockExclusive
CloseHandle
CreateThread
ExitProcess
FreeLibrary
GetCurrentThreadId
GetFileSizeEx
GetProcAddress
LoadLibraryExA
OpenThread
ReadFile
ReleaseSRWLockExclusive
ResumeThread
SetFilePointerEx
SuspendThread
VirtualAlloc
WriteFile
ntdll
NtAllocateVirtualMemory
NtFreeVirtualMemory
RtlWaitOnAddress
DllMain
SystemFunction001
SystemFunction002
SystemFunction003
SystemFunction004
SystemFunction005
SystemFunction028
SystemFunction029
SystemFunction034
SystemFunction036
SystemFunction040
SystemFunction041
_DllMainCRTStartup
__xl_a
__xl_z
_tls_end
_tls_index
_tls_start
_tls_used
Name
.text
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
588B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
119KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
cpu-z_2.19-en + CRYPT/cpuz.ini
- SHA256 b7b3560e286ba5f39c019e99face5cfa68cca42cf29bbe2e0f0d1e9626de5c8f
- MD5 fbd46f0338de6aa93a92d50ff8061c9a
- SHA1 250446934d56585b0c9ace947f707b3316d64a8f
- SHA512 13e263229fcf4080f10384678ef0be6be659310fdb7699fcbf8a4323b4d2dbb4348830c053828e36da17e55e41c5db1628d1276c1900d9601a309dd4dbeea30f
- TLSH T167F01D5721E92030D077BEC8EAED40B557A7B529AE0D865DF0C5020A4CE49409037AEB
- MD5 SHA1 SHA512 TLSH
cpu-z_2.19-en + CRYPT/cpuz_readme.txt
- SHA256 7eb3223b9759e6553fdb23f93b384f451af342982a21343735d4349827e5d1a5
- MD5 15f2b115a7e5e828c368261841a7718b
- SHA1 2a160f0bcd0fd2a5983d41c77a99feaf2139ae64
- SHA512 c10d8eb9c46ee0e0469a3b2bb8fa790d6fec17f8640ed959ac506fde99d9b2bc11646820606baebe2f39d43ccf14c69422ce31a3bbed9ffc07c40c3e1233df55
- SSDEEP 384:++nb8KjZWrC2NFdvnxyZ1EfKNckGde6POdDP3d8yw9VU3ctu22t+YuZTZLGWtLup:+UVWLn0i3WwAYgthu1ZLBRuHDY1i
- TLSH T1FA13B6895F7DD3A025F2C783391E1A97EF231433A596C41E906EC2386BC2CE1D95F998
- MD5 SHA1 SHA512 SSDEEP TLSH
cpu-z_2.19-en + CRYPT/cpuz_x32.exe
- IMPHASH 37e69770324f373923ed4cbe6e73918b
- SHA256 d4b7556f00a6d5ea5a47a5aefe267681334167db8c83ba94806da3dfd9fdca79
- MD5 2626eec5416d458773755e7311908d91
- SHA1 cbc15c2b57329b65764f7bb7f7d7ad649aeac680
- SHA512 3697a5f569f916aab52a6c18c26b1401979dab7abf59a655ae3542c6f8a390676d7eb2328044303acf2a91eec6ad0820de1f98a2e2b3111d492a2eb521587cdb
- SSDEEP 98304:HOP/KFu6z8z9Lf8W8yOqLKfcvzL1wsHdV/E2aeK4P7qyTLIj7BI:uPyFmks1hdV/ER4P7qq2BI
- TLSH T12156AF50FA82CC77C16155318966EBB482B4BE319EF6819F35947F2CFE71283392861B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
fb:1b:16:6e:fe:d1:60:07:ed:c1:a4:a6:09:17:fe:01:0c:9e:53:bd:7a:27:e5:21:2a:fe:f5:61:a8:46:7e:b9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=493 590 202 00047,CN=CPUID,O=CPUID,ST=Nord,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652
Chains
Mar 16, 2026
SERIALNUMBER=493 590 202 00047,CN=CPUID,O=CPUID,ST=Nord,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Serial Number
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
SERIALNUMBER=493 590 202 00047,CN=CPUID,O=CPUID,ST=Nord,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652
Serial Number
a6:5d:6f:19:1c:7d:2d:22:5c:59:da:6d:93:13:7a:70
Issuer
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 5, 2025 - Jun 4, 2028
Subject
CN=Sectigo Public Time Stamping Signer R36,O=Sectigo Limited,ST=West Yorkshire,C=GB
Serial Number
a4:29:3b:6e:1e:dd:d7:a7:34:08:87:ad:7a:4e:b7:24
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 27, 2025 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
5
Entry point
2224431
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\cpuid2\cpu_z\cpu_z_en_vc2008\Release\cpuz_x32.pdb
winmm
PlaySoundW
timeGetTime
kernel32
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetConsoleOutputCP
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
FindResourceW
LoadResource
SizeofResource
LockResource
GetCurrentDirectoryW
GetComputerNameW
SetCurrentDirectoryW
CreateThread
SetEvent
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
SetPriorityClass
GetCommandLineW
SetThreadPriority
ResumeThread
Sleep
GlobalFree
GlobalAlloc
GlobalReAlloc
GlobalSize
GetModuleHandleW
GetProcAddress
GetLastError
LoadLibraryW
SetLastError
FreeLibrary
InterlockedDecrement
CloseHandle
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
MulDiv
GetLocalTime
GetPriorityClass
GetStdHandle
ExitThread
WriteConsoleW
lstrcpyW
lstrlenW
WinExec
GetVersionExW
GetFileAttributesW
GetConsoleMode
GetConsoleCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFileType
SetStdHandle
HeapSize
VirtualQuery
ExitProcess
HeapReAlloc
RtlUnwind
RaiseException
HeapAlloc
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
SearchPathW
GetProfileIntW
GetTempFileNameW
GetSystemDirectoryW
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
WritePrivateProfileStringW
GlobalFlags
lstrlenA
GlobalGetAtomNameW
HeapDestroy
HeapCreate
GetStartupInfoA
lstrcatW
SetHandleCount
FindResourceExW
InterlockedIncrement
CreateDirectoryW
GetTempPathW
GetTickCount
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
GetFileSize
DeleteCriticalSection
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetCurrentThreadId
FreeResource
GetCurrentProcessId
VirtualProtect
CopyFileW
GlobalLock
GlobalUnlock
FormatMessageW
PurgeComm
GetCommState
GetCommTimeouts
SetEnvironmentVariableA
GetThreadPriority
GetOverlappedResult
SetDllDirectoryA
CancelIo
CreateEventA
FileTimeToSystemTime
VirtualAlloc
VirtualFree
GetDiskFreeSpaceA
QueryPerformanceFrequency
QueryPerformanceCounter
WriteConsoleA
SetFilePointer
CreateDirectoryA
GetTempPathA
GetModuleHandleA
FindResourceA
DeleteFileA
GetWindowsDirectoryA
ReadFile
GetComputerNameA
OpenMutexA
CreateMutexA
CreateFileA
DeviceIoControl
GetCurrentDirectoryA
GetModuleFileNameA
ReleaseMutex
CreateToolhelp32Snapshot
Process32First
OpenProcess
GetProcessTimes
Process32Next
LocalAlloc
LocalFree
GetSystemInfo
GetVersionExA
lstrcmpiA
VerSetConditionMask
VerifyVersionInfoW
LoadLibraryA
GetSystemDirectoryA
GetProcessHeap
HeapFree
FlushFileBuffers
WriteFile
CreateFileW
InterlockedExchangeAdd
ReleaseSemaphore
CreateSemaphoreW
WaitForMultipleObjects
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
QueueUserAPC
WaitForSingleObjectEx
SetThreadAffinityMask
ResetEvent
CreateEventW
GlobalMemoryStatus
user32
GetUpdateRect
CharUpperBuffW
RegisterClipboardFormatW
UpdateLayeredWindow
EnableScrollBar
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyAcceleratorTableW
DestroyAcceleratorTable
SetClassLongW
GetDoubleClickTime
CopyIcon
GetIconInfo
SetCursorPos
GetMenuDefaultItem
SetMenuDefaultItem
IsMenu
SetParent
LockWindowUpdate
IsZoomed
NotifyWinEvent
MessageBeep
GetSystemMenu
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
BringWindowToTop
TranslateAcceleratorW
UnionRect
RedrawWindow
SetWindowRgn
DrawIconEx
CharUpperW
DeleteMenu
WaitMessage
SetCapture
LoadCursorW
GetSysColorBrush
UnregisterClassW
CopyImage
SetRectEmpty
DrawStateW
DestroyMenu
GetMenuItemInfoW
ShowOwnedPopups
PostQuitMessage
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
LoadIconW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
GetClassNameW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
ShowScrollBar
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SubtractRect
SetWindowPlacement
DefWindowProcW
CallWindowProcW
GetMenu
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
PeekMessageW
ValidateRect
GetKeyState
GetCursorPos
MoveWindow
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetDlgItemInt
SendDlgItemMessageW
CheckDlgButton
GetDesktopWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
GetWindow
EndPaint
BeginPaint
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
GetLastActivePopup
SetPropW
GetCapture
GetActiveWindow
SetActiveWindow
MapDialogRect
SetWindowPos
ShowWindow
GetPropW
RemovePropW
GetAsyncKeyState
GetFocus
SetFocus
GetDlgItem
IsWindowEnabled
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
IsClipboardFormatAvailable
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
PostThreadMessageW
IsCharLowerW
MapVirtualKeyExW
GetNextDlgGroupItem
CreateMenu
UnhookWindowsHookEx
wsprintfA
ModifyMenuW
WindowFromPoint
PostMessageW
ReleaseCapture
DrawEdge
FrameRect
DrawFrameControl
FillRect
GetWindowRgn
SetScrollInfo
CheckMenuItem
EnableMenuItem
RemoveMenu
AppendMenuW
ClientToScreen
CreatePopupMenu
CreateCursor
SetCursor
DestroyCursor
UpdateWindow
SetRect
OffsetRect
DrawIcon
GetSystemMetrics
IsIconic
MessageBoxW
wsprintfW
SystemParametersInfoW
InflateRect
DrawFocusRect
GetSysColor
IsRectEmpty
CopyRect
GetParent
PtInRect
DestroyIcon
SetWindowLongW
GetWindowLongW
LoadImageW
ReleaseDC
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClientRect
GetDC
GetWindowDC
KillTimer
SetTimer
InvalidateRect
EnableWindow
GetWindowRect
SetForegroundWindow
LoadBitmapW
SendMessageW
RegisterWindowMessageW
SetMenu
gdi32
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetObjectType
CreatePen
CreateHatchBrush
GetDCOrgEx
CreateRectRgnIndirect
PatBlt
SetRectRgn
CombineRgn
DPtoLP
SetDIBColorTable
StretchBlt
CreateDIBSection
GetTextMetricsW
EnumFontFamiliesExW
CreateEllipticRgn
CreatePolygonRgn
TextOutW
GetTextColor
Polyline
Ellipse
Polygon
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
Rectangle
CreateRoundRectRgn
OffsetRgn
GetRgnBox
SelectObject
GetPaletteEntries
RoundRect
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetNearestPaletteIndex
GetWindowOrgEx
GetTextFaceW
SetPixelV
PtVisible
RectVisible
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetDeviceCaps
GetSystemPaletteEntries
CreatePalette
GetStockObject
GetObjectW
SelectPalette
RealizePalette
GetDIBits
GetTextExtentPoint32W
CreateFontW
CreateBitmap
GetPixel
CreateFontIndirectW
GetCurrentObject
SetPixel
CreateDCA
GetBkColor
CopyMetaFileW
CreateSolidBrush
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
DeleteService
RegQueryValueW
RegCloseKey
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
RegEnumKeyExW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExW
OpenSCManagerA
ControlService
StartServiceA
OpenServiceA
RegOpenKeyExW
CreateServiceW
CloseServiceHandle
ImpersonateSelf
OpenThreadToken
OpenProcessToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
FreeSid
RevertToSelf
shell32
SHGetPathFromIDListW
SHGetFileInfoW
DragFinish
DragQueryFileW
SHAppBarMessage
SHBrowseForFolderW
ShellExecuteW
comctl32
ImageList_GetIconSize
shlwapi
PathAppendW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW
PathIsUNCW
ole32
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
CreateStreamOnHGlobal
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoInitializeSecurity
CoSetProxyBlanket
CoInitializeEx
CoCreateInstance
CoUninitialize
StringFromGUID2
oleaut32
SysAllocStringLen
SysStringLen
VariantInit
VariantClear
VariantChangeType
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocString
gdiplus
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipCloneImage
imm32
ImmGetOpenStatus
ImmGetContext
ImmReleaseContext
iphlpapi
GetIfEntry
GetAdaptersInfo
psapi
GetProcessMemoryInfo
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
733KB
Virtual Size
733KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
211KB
Virtual Size
259KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=9, id=109, productName=VS2005 build 50727, version=50727,
count=47, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=200, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=610, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=261, productName=VS2017 v15.8.0 build 26726, version=26726,
count=8, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=28, version=9178,
count=37, id=123, productName=VS2005 build 50727, version=50727,
count=823, id=1, productName=Unmarked objects,
count=47, id=138, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=151,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
cpu-z_2.19-en + CRYPT/cpuz_x64.exe
- IMPHASH dab82eca1b32434777fbfa17c5b583cc
- SHA256 8e0077a742183fbcbb4f6cf2fe945ea2ced13a058ccf79f5b81157ededc47e16
- MD5 c4f7f0ce6b6ceab637da82892d2dbdc6
- SHA1 648bd8788e877a88bd6e08c4b9dca87b12e283fc
- SHA512 991ecf0459b8ec18d4980d9293acf76a863c1700c9d4941cffeacf56847b24b18fb2d85b807cb7b2c6a821fe144a01255471bd926ffb9178e62d60fe9ee4c303
- SSDEEP 49152:IAMh4TRFV+udQIWWaFNIjDx7/SyMotaDNotqzBl986mFRR1i6VQWwZn7LGRWL/Dp:F6FNIjDx7ayHmWwRfGE+4P7qyTLIj7B2
- TLSH T126768E51F269C8D6E022C03ACA43DA67C2B27C555B7187EF2490BB5DEF733916C78622
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a8:94:f9:87:3d:ee:c7:ac:bb:8d:4e:a9:9b:37:51:de:76:1f:1c:41:8a:66:38:bf:73:28:d8:ba:86:5f:2c:12
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=493 590 202 00047,CN=CPUID,O=CPUID,ST=Nord,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652
Chains
Mar 16, 2026
SERIALNUMBER=493 590 202 00047,CN=CPUID,O=CPUID,ST=Nord,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Serial Number
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
SERIALNUMBER=493 590 202 00047,CN=CPUID,O=CPUID,ST=Nord,C=FR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024652
Serial Number
a6:5d:6f:19:1c:7d:2d:22:5c:59:da:6d:93:13:7a:70
Issuer
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 5, 2025 - Jun 4, 2028
Subject
CN=Sectigo Public Time Stamping Signer R36,O=Sectigo Limited,ST=West Yorkshire,C=GB
Serial Number
a4:29:3b:6e:1e:dd:d7:a7:34:08:87:ad:7a:4e:b7:24
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 27, 2025 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
2
Major OS version
5
Entry point
2929304
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\cpuid2\cpu_z\cpu_z_en_vc2008\x64\Release\cpuz_x64.pdb
winmm
PlaySoundW
timeGetTime
kernel32
FlsAlloc
HeapSetInformation
HeapCreate
HeapDestroy
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetConsoleOutputCP
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
FindResourceW
LoadResource
SizeofResource
LockResource
GetCurrentDirectoryW
GetComputerNameW
SetCurrentDirectoryW
CreateThread
SetEvent
GetCommandLineW
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
SetPriorityClass
SetThreadPriority
ResumeThread
Sleep
GlobalFree
GlobalAlloc
GlobalReAlloc
GlobalSize
GetModuleHandleW
GetProcAddress
GetLastError
LoadLibraryW
SetLastError
FreeLibrary
CloseHandle
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
MulDiv
GetLocalTime
GetPriorityClass
GetStdHandle
FlsFree
WriteConsoleW
lstrcpyW
lstrcatW
lstrlenW
WinExec
GetVersionExW
GetFileAttributesW
CreateDirectoryW
FlsSetValue
FlsGetValue
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFileType
SetStdHandle
HeapQueryInformation
HeapSize
VirtualQuery
ExitProcess
HeapReAlloc
RtlUnwindEx
RtlPcToFileHeader
RaiseException
HeapAlloc
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
SearchPathW
GetProfileIntW
GetTempFileNameW
GetSystemDirectoryW
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
WritePrivateProfileStringW
GlobalFlags
DecodePointer
EncodePointer
GetStartupInfoA
ExitThread
SetHandleCount
GetTickCount
GlobalMemoryStatus
CreateEventW
lstrlenA
GlobalGetAtomNameW
FindResourceExW
TlsFree
LocalReAlloc
TlsSetValue
GlobalHandle
TlsAlloc
TlsGetValue
GetFileSize
DeleteCriticalSection
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
CompareStringA
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetCurrentThreadId
FreeResource
GetCurrentProcessId
VirtualProtect
CopyFileW
GlobalLock
GlobalUnlock
FormatMessageW
PurgeComm
GetCommState
GetCommTimeouts
SetEnvironmentVariableA
GetOverlappedResult
SetDllDirectoryA
CancelIo
CreateEventA
FileTimeToSystemTime
VirtualAlloc
VirtualFree
GetDiskFreeSpaceA
QueryPerformanceFrequency
QueryPerformanceCounter
WriteConsoleA
SetFilePointer
CreateDirectoryA
GetTempPathA
GetModuleHandleA
FindResourceA
DeleteFileA
GetWindowsDirectoryA
ReadFile
GetComputerNameA
OpenMutexA
CreateMutexA
CreateFileA
DeviceIoControl
GetCurrentDirectoryA
GetModuleFileNameA
ReleaseMutex
CreateToolhelp32Snapshot
Process32First
OpenProcess
GetProcessTimes
Process32Next
LocalAlloc
LocalFree
GetSystemInfo
GetVersionExA
lstrcmpiA
VerSetConditionMask
VerifyVersionInfoW
LoadLibraryA
GetSystemDirectoryA
GetProcessHeap
HeapFree
FlushFileBuffers
WriteFile
CreateFileW
ReleaseSemaphore
CreateSemaphoreW
WaitForMultipleObjects
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
QueueUserAPC
WaitForSingleObjectEx
SetThreadAffinityMask
ResetEvent
GetTempPathW
user32
GetUpdateRect
CharUpperBuffW
RegisterClipboardFormatW
UpdateLayeredWindow
EnableScrollBar
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyAcceleratorTableW
DestroyAcceleratorTable
SetClassLongPtrW
GetDoubleClickTime
CopyIcon
GetIconInfo
SetCursorPos
GetMenuDefaultItem
SetMenuDefaultItem
IsMenu
SetParent
LockWindowUpdate
IsZoomed
NotifyWinEvent
MessageBeep
GetSystemMenu
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
BringWindowToTop
TranslateAcceleratorW
UnionRect
RedrawWindow
SetWindowRgn
DrawIconEx
CharUpperW
DeleteMenu
WaitMessage
SetCapture
LoadCursorW
GetSysColorBrush
UnregisterClassW
CopyImage
SetRectEmpty
DrawStateW
DestroyMenu
GetMenuItemInfoW
ShowOwnedPopups
PostQuitMessage
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
LoadIconW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassNameW
GetClassLongPtrW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
SubtractRect
SetScrollInfo
SetWindowPlacement
DefWindowProcW
CallWindowProcW
GetMenu
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
PeekMessageW
ValidateRect
GetKeyState
GetCursorPos
MoveWindow
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetDlgItemInt
SendDlgItemMessageW
CheckDlgButton
GetDesktopWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
GetWindow
EndPaint
BeginPaint
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
GetLastActivePopup
SetPropW
GetCapture
GetActiveWindow
SetActiveWindow
MapDialogRect
SetWindowPos
ShowWindow
GetPropW
RemovePropW
GetAsyncKeyState
GetFocus
SetFocus
GetDlgItem
IsWindowEnabled
GetMenuState
GetMenuStringW
InsertMenuW
GetMenuItemID
GetMenuItemCount
GetSubMenu
IsClipboardFormatAvailable
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
PostThreadMessageW
IsCharLowerW
MapVirtualKeyExW
GetNextDlgGroupItem
CreateMenu
UnhookWindowsHookEx
wsprintfA
ModifyMenuW
WindowFromPoint
PostMessageW
ReleaseCapture
DrawEdge
FrameRect
DrawFrameControl
FillRect
GetWindowRgn
GetScrollInfo
CheckMenuItem
EnableMenuItem
RemoveMenu
AppendMenuW
ClientToScreen
CreatePopupMenu
CreateCursor
SetCursor
DestroyCursor
UpdateWindow
SetRect
OffsetRect
DrawIcon
GetSystemMetrics
IsIconic
MessageBoxW
wsprintfW
SystemParametersInfoW
InflateRect
DrawFocusRect
GetSysColor
IsRectEmpty
CopyRect
GetParent
PtInRect
DestroyIcon
SetWindowLongW
GetWindowLongW
LoadImageW
ReleaseDC
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClientRect
GetDC
GetWindowDC
KillTimer
SetTimer
InvalidateRect
EnableWindow
GetWindowRect
SetForegroundWindow
LoadBitmapW
SendMessageW
RegisterWindowMessageW
ShowScrollBar
gdi32
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetObjectType
CreatePen
CreateHatchBrush
GetDCOrgEx
CreateRectRgnIndirect
PatBlt
SetRectRgn
CombineRgn
DPtoLP
SetDIBColorTable
StretchBlt
CreateDIBSection
GetTextMetricsW
EnumFontFamiliesExW
CreateEllipticRgn
CreatePolygonRgn
TextOutW
GetTextColor
Polyline
Ellipse
Polygon
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
Rectangle
CreateRoundRectRgn
OffsetRgn
GetRgnBox
GetPaletteEntries
RoundRect
ExtFloodFill
SetPixel
SetPaletteEntries
GetViewportOrgEx
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetNearestPaletteIndex
GetWindowOrgEx
GetTextFaceW
SetPixelV
PtVisible
RectVisible
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CopyMetaFileW
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetDeviceCaps
GetSystemPaletteEntries
CreatePalette
GetStockObject
GetObjectW
SelectPalette
RealizePalette
GetDIBits
GetTextExtentPoint32W
CreateFontW
CreateBitmap
GetPixel
CreateFontIndirectW
CreateSolidBrush
GetBkColor
SelectObject
GetCurrentObject
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
DeleteService
RegQueryValueW
RegCloseKey
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
RegEnumKeyExW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExW
OpenSCManagerA
ControlService
StartServiceA
OpenServiceA
RegOpenKeyExW
CreateServiceW
CloseServiceHandle
ImpersonateSelf
OpenThreadToken
OpenProcessToken
AllocateAndInitializeSid
FreeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
RevertToSelf
shell32
SHGetPathFromIDListW
SHGetFileInfoW
DragFinish
DragQueryFileW
SHAppBarMessage
SHBrowseForFolderW
ShellExecuteW
comctl32
ImageList_GetIconSize
shlwapi
PathAppendW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW
PathIsUNCW
ole32
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
CreateStreamOnHGlobal
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoInitializeSecurity
CoSetProxyBlanket
CoInitializeEx
CoCreateInstance
CoUninitialize
StringFromGUID2
oleaut32
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SysAllocString
gdiplus
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipCloneImage
imm32
ImmGetOpenStatus
ImmGetContext
ImmReleaseContext
iphlpapi
GetIfEntry
GetAdaptersInfo
psapi
GetProcessMemoryInfo
Name
.text
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
259KB
Virtual Size
326KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
170KB
Virtual Size
170KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
Name
data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=128, version=50727,
count=8, id=109, productName=VS2005 build 50727, version=50727,
count=200, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=19, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=607, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=261, productName=VS2017 v15.8.0 build 26726, version=26726,
count=8, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=37, id=123, productName=VS2005 build 50727, version=50727,
count=832, id=1, productName=Unmarked objects,
count=47, id=138, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=151,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,