c5d86ec8a4bbc97aa76db600cc9874300986a9a9f64dc8a07b9356f11918e4d7
- SHA256 c5d86ec8a4bbc97aa76db600cc9874300986a9a9f64dc8a07b9356f11918e4d7
Overview
overview
7Static
static
7腾龙工�...om.url
windows10-2004-x64
1腾龙工�...om.url
windows11-21h2-x64
1App/ImageT...er.chm
windows10-2004-x64
1App/ImageT...er.chm
windows11-21h2-x64
1App/ImageT...er.exe
windows10-2004-x64
4App/ImageT...er.exe
windows11-21h2-x64
3App/ImageT...32.dll
windows10-2004-x64
3App/ImageT...32.dll
windows11-21h2-x64
3App/ImageT...pr.dll
windows10-2004-x64
3App/ImageT...pr.dll
windows11-21h2-x64
3App/ImageT...er.chm
windows10-2004-x64
1App/ImageT...er.chm
windows11-21h2-x64
1App/ImageT...er.exe
windows10-2004-x64
3App/ImageT...er.exe
windows11-21h2-x64
3App/ImageT...lc.exe
windows10-2004-x64
3App/ImageT...lc.exe
windows11-21h2-x64
3App/ImageT...64.dll
windows10-2004-x64
1App/ImageT...64.dll
windows11-21h2-x64
1App/ImageT...pr.dll
windows10-2004-x64
3App/ImageT...pr.dll
windows11-21h2-x64
3ImageTuner...le.exe
windows10-2004-x64
7ImageTuner...le.exe
windows11-21h2-x64
7$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-21h2-x64
3$PLUGINSDI...os.dll
windows10-2004-x64
3$PLUGINSDI...os.dll
windows11-21h2-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDI...sh.dll
windows11-21h2-x64
3Behavioral task
behavioral1
Sample
腾龙工作室 - TenlonStudio.Com.url
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
腾龙工作室 - TenlonStudio.Com.url
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
App/ImageTuner32/ImageTuner.chm
Resource
win10v2004-20260130-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
App/ImageTuner32/ImageTuner.chm
Resource
win11-20260130-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
App/ImageTuner32/ImageTuner.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
15 signatures
150 seconds
Behavioral task
behavioral6
Sample
App/ImageTuner32/ImageTuner.exe
Resource
win11-20260130-en
windows11-21h2-x64
5 signatures
150 seconds
Behavioral task
behavioral7
Sample
App/ImageTuner32/ielib32.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
App/ImageTuner32/ielib32.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
App/ImageTuner32/itpr.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral10
Sample
App/ImageTuner32/itpr.dll
Resource
win11-20260130-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral11
Sample
App/ImageTuner64/ImageTuner.chm
Resource
win10v2004-20260130-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral12
Sample
App/ImageTuner64/ImageTuner.chm
Resource
win11-20260130-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
App/ImageTuner64/ImageTuner.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral14
Sample
App/ImageTuner64/ImageTuner.exe
Resource
win11-20260130-en
windows11-21h2-x64
6 signatures
150 seconds
Behavioral task
behavioral15
Sample
App/ImageTuner64/balc.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
App/ImageTuner64/balc.exe
Resource
win11-20260130-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
App/ImageTuner64/ielib64.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
App/ImageTuner64/ielib64.dll
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
App/ImageTuner64/itpr.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral20
Sample
App/ImageTuner64/itpr.dll
Resource
win11-20260130-en
windows11-21h2-x64
4 signatures
150 seconds
Behavioral task
behavioral21
Sample
ImageTunerPortable.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral22
Sample
ImageTunerPortable.exe
Resource
win11-20260130-en
windows11-21h2-x64
9 signatures
150 seconds
Behavioral task
behavioral23
Sample
$PLUGINSDIR/MoreInfo.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
$PLUGINSDIR/MoreInfo.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral25
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral26
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral28
Sample
$PLUGINSDIR/UAC.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral29
Sample
$PLUGINSDIR/execDos.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral30
Sample
$PLUGINSDIR/execDos.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral31
Sample
$PLUGINSDIR/newadvsplash.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral32
Sample
$PLUGINSDIR/newadvsplash.dll
Resource
win11-20260130-en
windows11-21h2-x64
2 signatures
150 seconds
General
- Target c5d86ec8a4bbc97aa76db600cc9874300986a9a9f64dc8a07b9356f11918e4d7
- Size 10.8MB
- Sample260418-baxagset3s
- SHA256 c5d86ec8a4bbc97aa76db600cc9874300986a9a9f64dc8a07b9356f11918e4d7
- MD5 f6d479acc964ef20727b3dccec6c3429
- SHA1 75fe15158a40b6c649305c9c5355ea9dab62f1f4
- SHA512 a3a3d1c4b6e68a8400dd8245d650922078945f6536d9510d4f9d1a307bec3a77ae8a0a34717936278ee7f96ffa5e54405f2e7d70159ce37e0390179b58eda42b
- SSDEEP 196608:gCPdRVaWgxQYz/oqISkiiAUvTEG9vyJTMHT0to1ahjTRFcgLgNKTJUQX:gCPdexTzg3Shi3vdNyJGralTRumwKVUY
- TLSH T1CCB633C4B9FF691FC42A557EE9BA29D60A62780AD34E65C3C0C2F249377072DC2E8517
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack002/App/ImageTuner32/itpr.dll aspack_v212_v242 static1/unpack002/App/ImageTuner64/itpr.dll aspack_v212_v242 - Insecure Codesign Algorithm 2 IoCs
File was codesigned using an insecure algorithm.
resource unpack002/App/ImageTuner32/ielib32.dll unpack002/App/ImageTuner64/ielib64.dll - Unsigned PE 11 IoCs
Checks for missing Authenticode signature.
resource unpack002/App/ImageTuner32/ImageTuner.exe unpack002/App/ImageTuner64/ImageTuner.exe unpack002/ImageTunerPortable.exe unpack003/$PLUGINSDIR/MoreInfo.dll unpack003/$PLUGINSDIR/System.dll unpack003/$PLUGINSDIR/UAC.dll unpack003/$PLUGINSDIR/execDos.dll unpack003/$PLUGINSDIR/newadvsplash.dll unpack003/$PLUGINSDIR/newtextreplace.dll unpack003/$PLUGINSDIR/nsExec.dll unpack003/$PLUGINSDIR/registry.dll - Untrusted Codesign Signers 3 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack002/App/ImageTuner32/itpr.dll unpack002/App/ImageTuner64/balc.exe unpack002/App/ImageTuner64/itpr.dll
File Explorer
-
c5d86ec8a4bbc97aa76db600cc9874300986a9a9f64dc8a07b9356f11918e4d7.zip 10.8MB
-
腾龙工作室 - TenlonStudio.Com.url.url 119B
-
װ˵.txt91B
-
/ImageTuner.zip.zip 10.8MB
-
App/AppInfo/AppIcon.ico14KB
-
App/AppInfo/AppInfo.ini200B
-
App/AppInfo/Launcher/ImageTunerPortable.ini940B
-
App/DefaultData/imagetuner.ini37B
-
App/ImageTuner32/Dark.vsf51KB
-
App/ImageTuner32/ImageTuner.chm.chm 60KB
-
App/ImageTuner32/ImageTuner.exe.exe 7.5MB
-
App/ImageTuner32/ielib32.dll.dll 2.5MB
-
App/ImageTuner32/itpr.dll.dll 541KB
-
App/ImageTuner64/Dark.vsf51KB
-
App/ImageTuner64/ImageTuner.chm.chm 60KB
-
App/ImageTuner64/ImageTuner.exe.exe 10.9MB
-
App/ImageTuner64/balc.exe.exe 91KB
-
App/ImageTuner64/ielib64.dll.dll 2.8MB
-
App/ImageTuner64/itpr.dll.dll 541KB
-
ImageTunerPortable.exe.exe 199KB
-
$PLUGINSDIR/MoreInfo.dll.dll 7KB
-
$PLUGINSDIR/System.dll.dll 11KB
-
$PLUGINSDIR/UAC.dll.dll 13KB
-
$PLUGINSDIR/execDos.dll.dll 5KB
-
$PLUGINSDIR/newadvsplash.dll.dll 8KB
-
$PLUGINSDIR/newtextreplace.dll.dll 11KB
-
$PLUGINSDIR/nsExec.dll.dll 6KB
-
$PLUGINSDIR/registry.dll.dll 29KB
腾龙工作室 - TenlonStudio.Com.url
- SHA256 e48fd29bebda80b29ccca94ff2dfab22ce1c99d3facac276a451d9e2a0c9a4d4
- MD5 a9916cabbb855b9aad2cf6f86537e23b
- SHA1 4227217ce5cf6d47c42038ee167f4b1e6ccddecd
- SHA512 d912f7da39041beaafa1eeabcabae2ec5ce8a517099f85e9cd098cc6ad4133f4aba50ab9f1189a9652018f47bacda9d62ec3068b6192f8af645e452f2cdafdb7
- TLSH T158B092AE50098689D241940A6075F848982FBAA048D2D8AC6688DE8A0D480D2C888B26
- MD5 SHA1 SHA512 TLSH
װ˵.txt
- SHA256 2fce0984a9a6c5c361c1adcab232dc9f5aef673929aeb3e2971ab073710dbe3d
- MD5 36ce5da5b60615e7c852561e7e65a08d
- SHA1 41fc6b58acf3a15d9b95b1865973493f838cdcb7
- SHA512 130d7b57347e73fe5357eb670223331ce2e657e61f80a33af725a1d52d25b2cb95819297353f4074bed4ee37a1a1bb07e4ceff2d9738cf81588d157355bfa234
- TLSH T13EB012BA33270DC40FA942C232194844E432451C32916BD02254046416045A467024C8
- MD5 SHA1 SHA512 TLSH
/ImageTuner.zip
- SHA256 ba249ef2a30b5c58501d7710afaca32f6b48d42906e46377141122f9debbb762
- MD5 739682a42043ca36d8dea0cb7411871b
- SHA1 a190b60f74f30cfb73bcdbc31647668cb75e553d
- SHA512 9db6b3a3a761fef2690b40a641f933c4eacb3c065d90ef50b7b6fec8a60703db81e960029cf4f414ad0fba5935cd60d4597c984e5049c7b96e244e15c8215784
- SSDEEP 196608:rMJlQVfYtT4NBeSYHNiIMs5Sa+lMif/xHk3QELNHsP0fu/iJaZLLKXGsH5SaH:rMJlINISmZMaSllzJkVq0W/igZXqGsZr
- TLSH T134B633C1F9FF791BC426947EADBA18E606A37C5AC20EA2C3C0C1E24D3774729D675816
- MD5 SHA1 SHA512 SSDEEP TLSH
App/AppInfo/AppIcon.ico
- SHA256 215f2acf756e649ede6d4163cdf2f0e38a2246798e4130e57b85e5b051e26ccb
- MD5 34532cd4d95d9b626d0480856a61d5c3
- SHA1 b53a684112979d62397b89d765af52c2a29d45f5
- SHA512 99690e54ceb1e69fecced503b745da0c4df61265bc1219a18d420150cce4c6a3b8ff7c1381f7538142d64623f3c26f60f92b5765e74df7c6e8ab3a986819bc12
- SSDEEP 192:j+yhZcLbqRR+M4ThwWikNz/fT8ggh/ZpgDVn80VgBUkU3pLgny:jBiLosvySx78ggh/Z2DVn80VSU5LWy
- TLSH T16D626D6360022256EF3DC6B5A49F8E59C7463CBEDEF11D929350F65B2C92036932C1BB
- MD5 SHA1 SHA512 SSDEEP TLSH
App/AppInfo/AppInfo.ini
- SHA256 00419b04f70af8650fc8438c9045f48c56d70a815963a768c2271d974932b386
- MD5 c57aab3c067b8810f9db472343dd8f91
- SHA1 e6e534122e2d396f6344233dfc285330c57e489e
- SHA512 5fc953e2b9451f9567e1aa2b0a5118d867a5199e3d27840ad1555f4bb3f86767c7be7c51103470fc6f85b7923057e9c4d472be0f1c00201ed888a4be26da7db2
- TLSH T154D0222A06702E3D3188630630384C81B2DA62F4060C828E28C24C0C17CFACD10572BA
- MD5 SHA1 SHA512 TLSH
App/AppInfo/Launcher/ImageTunerPortable.ini
- SHA256 9b3455fed83649394327baf6338e9224dcf0b4b4df4bf945f82fb65a821817f4
- MD5 7d04d37089160e7f91f5a62e6b2f2bbb
- SHA1 23f9f14ebac635b2718ed281f21f94509dcf564b
- SHA512 a028b60a1f21239384461ccafad35c9b99bf56cc17707aa828dae6dde8a4b947ba6ff3205c6731705e42ced73c136cad539514532cfc7c7001401fb0f434784d
- TLSH T17611E10E5877E9B36E5369E439000B43E7DD884194DBEEDA24A2E70D19028BC35353D7
- MD5 SHA1 SHA512 TLSH
App/DefaultData/imagetuner.ini
- SHA256 6508602bbb08dd105ed9f3ea8a5c5bb9d382f3ed14ab0d3582663a88f7adc6d5
- MD5 0b625eeadc5b5a4ebc9d8a435680c083
- SHA1 ddaef294b2224a3ead319233c54c2f167bc96ea3
- SHA512 7d42da9de53c9f4bcf7044b5aec80711b93d87511aff4a7e883ac5c7d13b3c03521aa2680f145395a42c887f5e58631e6d3fd98731b778c6a52226407c740b3a
- MD5 SHA1 SHA512
App/ImageTuner32/Dark.vsf
- SHA256 cef7419b8a6af782f26c7f9ad72a2b78e0fa585553aa9b839e9dbbbbc7f25bc8
- MD5 79c8258326a763ebff9ae486a093f03b
- SHA1 077e21214ea03e2770fc2aedf22f73a891b2aeb4
- SHA512 3318bfe046652b32b587b720917433d9dd24c01702a97476ef6df7dbe4d206a4880486910969cb0a3890f223d28ab8820557d943686cd580a0bb6f07c44ae266
- SSDEEP 768:PdwUZijLtuQCBlcF+gm/Yqjt4c9v/YwriH/M+QxubGxOZg8en2xwbumBo7TGr1OX:VCjRPmco354fIwM3o+Oa8enawbjBLQ
- TLSH T14A33F11E38E4E76D8BB1B3FE4BBB04A7D9684403286ECB51479A6C460630F1D5835DD3
- MD5 SHA1 SHA512 SSDEEP TLSH
App/ImageTuner32/ImageTuner.chm
- SHA256 a4591640edc1c212fb2c8983796780490dbc93ee699cef980c971ea7a2ddf7b4
- MD5 6d0023129f168beefaca07d5c93fd6a7
- SHA1 f1c98f937c606761c48a5416c442d07aa0efb609
- SHA512 0d76914c5b05e351f12b56a0c69c6e01d1e6528fd5d79f0bacc69b04be440953e7bd869dc8534177acef70ca789f6208ea5bac37531c78a8a279b6f2be115ef6
- SSDEEP 1536:O0LJZ0Jvyc4+WM/NH169QL3CkSDAPmg7mk5Oxb:DA+hM/RL3TZ+g7Dmb
- TLSH T1D1530152AF273862C4E136326B1990DAE3358D17A018BB4B6C1B77C9F9CBE1D0595D0A
- MD5 SHA1 SHA512 SSDEEP TLSH
App/ImageTuner32/ImageTuner.exe
- IMPHASH 7d11ab1bdff8c5de061e2dfe9ebbace5
- SHA256 4cd0283d69649e660f3eb6b0cff1c487357020f1143a1d087f00309458ef6050
- MD5 9383ae2bc8bb3bc3f6154530ed026181
- SHA1 2287747b4f9afb452cbd83260d2369f8e0c8e146
- SHA512 abd5d77243a3853ac969e176377bd36690eafab8dbad616f853c02d1ad52f99eacfc0673317b5158bc8afdf7191e30ffb684b2d21fd2f830d8979fae248cd127
- SSDEEP 196608:d47Rvw8sRDMLmcFwWhKUzJvDqWMcLkwj52:d4Fvw8sRDMLNwWhKUzJveWMYB5
- TLSH T164869E13B249607FC0AB1B358C3BDB98593BBB216B268D6757B41C4C4F356807A2BB47
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
6512608
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit
GetErrorInfo
GetActiveObject
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegFlushKey
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextA
user32
MessageBoxA
CharNextW
LoadStringW
SetClassLongW
GetClassLongW
SetWindowLongW
GetWindowLongW
CreateWindowExW
wvsprintfA
WindowFromPoint
WaitMessage
ValidateRect
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
TrackMouseEvent
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCaret
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetCaretPos
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
SendDlgItemMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadKeyboardLayoutW
LoadImageA
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
IsCharAlphaNumericA
IsCharAlphaNumericW
InvalidateRect
InsertMenuItemW
InsertMenuW
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetScrollBarInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemRect
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItemTextA
GetDlgItemTextW
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardFormatNameW
GetClipboardData
GetClientRect
GetClassNameW
GetClassInfoExW
GetClassInfoW
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EndMenu
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DestroyAcceleratorTable
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIconIndirect
CreateIcon
CreateCursor
CreateCaret
CreateAcceleratorTableW
CountClipboardFormats
CopyImage
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperBuffW
CharUpperW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
CharLowerBuffA
AdjustWindowRectEx
ActivateKeyboardLayout
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
MonitorFromWindow
kernel32
Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
SetCurrentDirectoryW
GetCurrentDirectoryW
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
LoadLibraryA
TlsSetValue
TlsGetValue
LocalFree
LocalAlloc
lstrlenA
lstrcpyW
lstrcmpW
lstrcatA
WritePrivateProfileStringW
WaitForSingleObject
WaitForMultipleObjectsEx
WaitForMultipleObjects
VirtualQueryEx
VirtualProtect
VerSetConditionMask
VerifyVersionInfoW
UnmapViewOfFile
TerminateThread
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
SuspendThread
SizeofResource
SetThreadPriority
SetLastError
SetFileTime
SetFileAttributesW
SetEvent
SetErrorMode
ResumeThread
ResetEvent
RemoveDirectoryW
ReadDirectoryChangesW
QueryDosDeviceW
IsDebuggerPresent
OutputDebugStringW
MulDiv
MoveFileW
MapViewOfFile
LockResource
LocalFileTimeToFileTime
LoadResource
LoadLibraryW
InitializeCriticalSectionAndSpinCount
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalSize
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryA
GetWindowsDirectoryW
GetVolumeInformationW
GetVersionExW
GetTimeZoneInformation
GetThreadPriority
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetLongPathNameW
GetShortPathNameW
GetPrivateProfileStringW
GetOverlappedResult
GetModuleFileNameA
GetLogicalDriveStringsW
GetLocalTime
GetFullPathNameW
GetFileAttributesExW
GetFileAttributesA
GetFileAttributesW
GetExitCodeThread
GetEnvironmentVariableW
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetComputerNameW
GetCPInfoExW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FormatMessageW
FindResourceW
FindNextFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsW
EnumSystemLocalesW
EnumResourceNamesW
EnumCalendarInfoW
DosDateTimeToFileTime
DeviceIoControl
DeleteFileW
CreateProcessA
CreatePipe
CreateFileMappingW
CreateFileA
CreateEventW
CreateDirectoryW
CopyFileW
GetFileSizeEx
TzSpecificLocalTimeToSystemTime
gdi32
UnrealizeObject
TextOutW
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWorldTransform
SetWindowOrgEx
SetWindowExtEx
SetWinMetaFileBits
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetTextAlign
SetStretchBltMode
SetROP2
SetPixelV
SetPixel
SetPaletteEntries
SetMetaFileBitsEx
SetMapMode
SetGraphicsMode
SetEnhMetaFileBits
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SelectClipRgn
SaveDC
RoundRect
RestoreDC
ResizePalette
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
PlgBlt
PlayEnhMetaFile
Pie
PatBlt
OffsetWindowOrgEx
OffsetViewportOrgEx
OffsetRgn
MoveToEx
ModifyWorldTransform
MaskBlt
LineTo
LineDDA
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetViewportOrgEx
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetTextColor
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetRandomRgn
GetPixel
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetGraphicsMode
GetGlyphOutlineW
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetCurrentPositionEx
GetCurrentObject
GetClipRgn
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
ExtCreateRegion
ExtCreatePen
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteMetaFile
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
CreatePolygonRgn
CreatePenIndirect
CreatePalette
CreateMetaFileW
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateEllipticRgn
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
CloseMetaFile
Chord
BitBlt
ArcTo
Arc
AngleArc
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
mpr
WNetOpenEnumW
WNetGetUniversalNameW
WNetEnumResourceW
WNetCloseEnum
ole32
CoCreateGuid
CreateILockBytesOnHGlobal
OleGetIconOfClass
ReleaseStgMedium
OleSetMenuDescriptor
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleSetContainedObject
OleCreateStaticFromData
OleUninitialize
OleInitialize
CreateBindCtx
StgCreateDocfileOnILockBytes
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitialize
IsEqualGUID
FreePropVariantArray
comctl32
InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls
msvcrt
memset
memcpy
shell32
SHGetFileInfoW
SHFileOperationA
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
DragQueryFileW
SHCreateShellItem
SHChangeNotifyDeregister
SHChangeNotification_Unlock
SHBindToParent
IsUserAnAdmin
ILRemoveLastID
ILGetNext
ILFree
ILFindLastID
ILFindChild
ILCreateFromPathW
ILCombine
ILClone
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
SHGetDataFromIDListA
SHGetDataFromIDListW
SHBrowseForFolderW
SHGetImageList
wininet
InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCloseHandle
HttpQueryInfoW
comdlg32
PrintDlgW
ChooseFontW
ReplaceTextW
FindTextW
ChooseColorW
GetSaveFileNameA
GetSaveFileNameW
GetOpenFileNameA
GetOpenFileNameW
winspool.drv
OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
GetDefaultPrinterW
oledlg
OleUIInsertObjectW
avifil32
AVISaveOptionsFree
AVISaveVW
AVIStreamGetFrameClose
AVIStreamGetFrame
AVIStreamGetFrameOpen
AVIStreamInfoW
AVIStreamRelease
AVIFileGetStream
AVIFileOpenW
AVIFileRelease
AVIFileExit
AVIFileInit
msvfw32
DrawDibOpen
DrawDibDraw
DrawDibClose
shlwapi
PathMatchSpecW
StrRetToStrW
TMethodImplementationIntercept
Name
.text
Size
6.2MB
Virtual Size
6.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
209KB
Virtual Size
209KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
96B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
451KB
Virtual Size
450KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
627KB
Virtual Size
628KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
App/ImageTuner32/ielib32.dll
- IMPHASH ad8ff5ddbe1d5e150009df8df0fa22e7
- SHA256 d18b293b7762706b15459f26d2908061637c26d048abfcbb9faa675005eca3e9
- MD5 c24c1adbb85f2097d1cd2b4c0b778e28
- SHA1 bbac5f056878882032ab4597fab81cba072d0d73
- SHA512 eb26f8003162df0ec9081a569255f5b2d1d1473ebb02b3a734d8cf1b9fad993ae33af64b8d7848859a9f0778b6ad082bb9142b6e2d3223cd053aa93926b4b558
- SSDEEP 49152:a2TFgJPhBDebamquNwwWQcx0z467e9urJ5vnBbEOc8BsXUkT1ON2:aNsbl3lWQ6sD75vnBbEOcGa
- TLSH T1FFC5BE11B9128122D49F013185FEEFBB5CBC9B7907248DE363C469B89924AD26F7731B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
16:2f:af:30:b6:7b:2d:81:e3:c5:66:09:1c:06:03:9e:be:3e:43:d4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Xequte Software,O=Xequte Software,POSTALCODE=6037,STREET=52 Winsley Tce,L=Wellington,C=NZ
Chains
Dec 17, 2021
CN=Xequte Software,O=Xequte Software,POSTALCODE=6037,STREET=52 Winsley Tce,L=Wellington,C=NZ
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=Xequte Software,O=Xequte Software,POSTALCODE=6037,STREET=52 Winsley Tce,L=Wellington,C=NZ
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Xequte Software,O=Xequte Software,POSTALCODE=6037,STREET=52 Winsley Tce,L=Wellington,C=NZ
Serial Number
ea:26:02:06:48:c0:8a:99:31:5f:03:e7:89:26:19:f7
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 8, 2020 - Dec 7, 2023
Subject
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Serial Number
39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 12, 2019 - Dec 31, 2028
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 2, 2018 - Dec 31, 2030
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2020 - Jan 22, 2032
Minor OS version
0
Major OS version
6
Entry point
543830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\sviluppo\ievision\ielib\ievision.pdb
ws2_32
ntohs
htonl
ntohl
htons
kernel32
WaitForSingleObject
SetEndOfFile
HeapSize
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateDirectoryA
RemoveDirectoryA
GetTempPathA
GetTempFileNameA
OutputDebugStringA
IsProcessorFeaturePresent
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
GetLastError
WideCharToMultiByte
MultiByteToWideChar
EncodePointer
DecodePointer
SetLastError
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
CreateFileW
GetFileSizeEx
GetFileAttributesExW
HeapReAlloc
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
ExitProcess
lstrlenA
WriteConsoleW
CreateEventA
GetSystemInfo
InterlockedFlushSList
RaiseException
RtlUnwind
FreeLibrary
LoadLibraryExW
SetFileTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
ReadFile
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleHandleExW
GetModuleFileNameW
GetTempPathW
CreateThread
ExitThread
FreeLibraryAndExitThread
HeapAlloc
HeapFree
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetTimeZoneInformation
ReadConsoleW
FlushFileBuffers
DeleteFileW
GetCurrentDirectoryW
GetFullPathNameW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
oleaut32
CreateErrorInfo
SetErrorInfo
bcrypt
BCryptGenRandom
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
??1Interface@ievision@@UAE@XZ
?AddRef@Interface@ievision@@UBGKXZ
?JP2KFinalize@IELib@ievision@@UAGJXZ
?JP2KInitialize@IELib@ievision@@UAGJXZ
?PNGGetErrorPtr@IELib@ievision@@UAGJPAXAAPAX@Z
?PNGGetIOPtr@IELib@ievision@@UAGJPAXAAPAX@Z
?PNGSigCmp@IELib@ievision@@UAGJPAXIIAAH@Z
?QueryInterface@Interface@ievision@@UBGJABU_GUID@@PAPAX@Z
?Release@Interface@ievision@@UBGKXZ
?adjustParameters@JPEGTransform@ievision@@UAGJAAVJPEGDecompressor@2@AAVJPEGCompressor@2@PAXAAPAX@Z
?append1@String@ievision@@UAGJABV12@@Z
?append2@String@ievision@@UAGJPBD@Z
?assign@JP2KComponentParamsList@ievision@@UAGJHIIIIIIGH@Z
?assign@PNGTextList@ievision@@UAGJHHPBD0@Z
?at@String@ievision@@UBGJHAAD@Z
?beginCompression@OPJWriter@ievision@@UAGJHAAH@Z
?c_str@String@ievision@@UBGJAAPBD@Z
?c_str@TempDirName@ievision@@UBGJAAPBD@Z
?c_str@TempFileName@ievision@@UBGJAAPBD@Z
?cameraCount@LibRaw@ievision@@UAGJAAH@Z
?cameraList@LibRaw@ievision@@UAGJAAPAPBD@Z
?capacity@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UBGJAAI@Z
?clear@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UAGJXZ
?clear@MemoryStream@ievision@@UAGJXZ
?close@FileStream@ievision@@UAGJXZ
?copyCriticalParameters@JPEGCopy@ievision@@UAGJAAVJPEGDecompressor@2@AAVJPEGCompressor@2@@Z
?copyMarkersExecute@JPEGCopy@ievision@@UAGJAAVJPEGDecompressor@2@AAVJPEGCompressor@2@H@Z
?copyMarkersSetup@JPEGCopy@ievision@@UAGJAAVJPEGDecompressor@2@H@Z
?copyRow@LibRawProcessedImage@ievision@@UAGJHPAX@Z
?copyRowFrom@OPJImage@ievision@@UAGJHPBXPAXHHHH@Z
?copyRowTo@OPJImage@ievision@@UAGJHPAX0@Z
?createCompress@JPEGCompressor@ievision@@UAGJXZ
?createCustomStream@IELib@ievision@@UAGJAAVCustomStreamProvider@2@AAPAVCustomStream@2@@Z
?createDCRAWDecoder@IELib@ievision@@UAGJAAVStream@2@AAVVectorString@2@PBX2AAPAVDCRAWDecoder@2@@Z
?createDecompress@JPEG12Decompressor@ievision@@UAGJXZ
?createDecompress@JPEGDecompressor@ievision@@UAGJXZ
?createJP2KComponentParamsList@IELib@ievision@@UAGJHAAPAVJP2KComponentParamsList@2@@Z
?createJP2KImage1@IELib@ievision@@UAGJAAVStream@2@AAPAVJP2KImage@2@@Z
?createJP2KImage2@IELib@ievision@@UAGJGAAVJP2KComponentParamsList@2@HAAPAVJP2KImage@2@@Z
?createJP2KMatrix@IELib@ievision@@UAGJHHAAPAVJP2KMatrix@2@@Z
?createJPEG12Decompressor@IELib@ievision@@UAGJAAPAVJPEG12Decompressor@2@@Z
?createJPEG12ErrorManager@IELib@ievision@@UAGJAAPAVJPEG12ErrorManager@2@@Z
?createJPEGCompressor@IELib@ievision@@UAGJAAPAVJPEGCompressor@2@@Z
?createJPEGCopy@IELib@ievision@@UAGJAAPAVJPEGCopy@2@@Z
?createJPEGDecompressor@IELib@ievision@@UAGJAAPAVJPEGDecompressor@2@@Z
?createJPEGErrorManager@IELib@ievision@@UAGJAAPAVJPEGErrorManager@2@@Z
?createJPEGTransform@IELib@ievision@@UAGJHHHIIIIAAPAVJPEGTransform@2@@Z
?createLibRaw@IELib@ievision@@UAGJAAPAVLibRaw@2@@Z
?createOPJImage@IELib@ievision@@UAGJHHHHHHHHHAAPAVOPJImage@2@@Z
?createOPJReader@IELib@ievision@@UAGJAAPAVOPJReader@2@@Z
?createOPJWriter@IELib@ievision@@UAGJAAPAVOPJWriter@2@@Z
?createPNGCompressor@IELib@ievision@@UAGJPAX00AAPAVPNGCompressor@2@@Z
?createPNGDecompressor@IELib@ievision@@UAGJPAX00AAPAVPNGDecompressor@2@@Z
?createPNGTextList@IELib@ievision@@UAGJIAAPAVPNGTextList@2@@Z
?createString1@IELib@ievision@@UAGJAAPAVString@2@@Z
?createString2@IELib@ievision@@UAGJABVString@2@AAPAV32@@Z
?createString3@IELib@ievision@@UAGJPBDAAPAVString@2@@Z
?createVectorString1@IELib@ievision@@UAGJAAPAVVectorString@2@@Z
?createVectorString2@IELib@ievision@@UAGJABVVectorString@2@AAPAV32@@Z
?data@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UBGJAAPBX@Z
?dcraw_process@LibRaw@ievision@@UAGJAAH@Z
?debug@IELib@ievision@@UAGJXZ
?decodeArea@OPJReader@ievision@@UAGJHHHHAAPAVOPJImage@2@@Z
?destroyCompress@JPEGCompressor@ievision@@UAGJXZ
?destroyDecompress@JPEG12Decompressor@ievision@@UAGJXZ
?destroyDecompress@JPEGDecompressor@ievision@@UAGJXZ
?dispose@Interface@ievision@@UBGXXZ
?empty@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UBGJAAH@Z
?encode@JP2KImage@ievision@@UAGJAAVStream@2@HPAD@Z
?encodeTile@OPJWriter@ievision@@UAGJHAAH@Z
?endCompression@OPJWriter@ievision@@UAGJAAH@Z
?eof@CustomStream@ievision@@UAGJAAH@Z
?eof@ExistingMemoryStream@ievision@@UAGJAAH@Z
?eof@FileStream@ievision@@UAGJAAH@Z
?eof@MemoryStream@ievision@@UAGJAAH@Z
?erase1@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UAGJIAAI@Z
?erase2@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UAGJIIAAI@Z
?executeTransformation@JPEGTransform@ievision@@UAGJAAVJPEGDecompressor@2@AAVJPEGCompressor@2@PAX@Z
?finishCompress@JPEGCompressor@ievision@@UAGJXZ
?finishDecompress@JPEG12Decompressor@ievision@@UAGJXZ
?finishDecompress@JPEGDecompressor@ievision@@UAGJXZ
?getBackground@PNGDecompressor@ievision@@UAGJU?$BasicBGR@E@2@AAU32@@Z
?getBitsPerPixel@LibRawProcessedImage@ievision@@UAGJAAH@Z
?getCString@VectorString@ievision@@UBGJHAAPBD@Z
?getChannels@LibRawProcessedImage@ievision@@UAGJAAH@Z
?getChannels@PNGDecompressor@ievision@@UAGJAAE@Z
?getColorSpace@JP2KImage@ievision@@UAGJAAH@Z
?getColorSpace@OPJImage@ievision@@UAGJAAH@Z
?getComponentByType@JP2KImage@ievision@@UAGJHAAH@Z
?getComponentHStep@JP2KImage@ievision@@UAGJHAAH@Z
?getComponentHeight@JP2KImage@ievision@@UAGJHAAH@Z
?getComponentPrecision@JP2KImage@ievision@@UAGJHAAH@Z
?getComponentTopLeftX@JP2KImage@ievision@@UAGJHAAH@Z
?getComponentTopLeftY@JP2KImage@ievision@@UAGJHAAH@Z
?getComponentVStep@JP2KImage@ievision@@UAGJHAAH@Z
?getComponentWidth@JP2KImage@ievision@@UAGJHAAH@Z
?getData@JPEG12Marker@ievision@@UBGJAAPAX@Z
?getData@JPEGMarker@ievision@@UBGJAAPAX@Z
?getData@LibRawProcessedImage@ievision@@UAGJAAPAX@Z
?getDataSize@LibRawProcessedImage@ievision@@UAGJAAI@Z
?getDensityUnit@JPEG12Decompressor@ievision@@UAGJAAE@Z
?getDensityUnit@JPEGDecompressor@ievision@@UAGJAAE@Z
?getDepth@OPJImage@ievision@@UAGJAAI@Z
?getErrMsgCode@JPEG12ErrorManager@ievision@@UBGJAAH@Z
?getErrMsgCode@JPEGErrorManager@ievision@@UBGJAAH@Z
?getFilename@TempFileStream@ievision@@UBGJAAPBD@Z
?getHeight@JP2KImage@ievision@@UAGJAAH@Z
?getHeight@LibRawProcessedImage@ievision@@UAGJAAH@Z
?getHeight@OPJImage@ievision@@UAGJAAI@Z
?getICC@OPJImage@ievision@@UAGJAAPBX@Z
?getICCLength@OPJImage@ievision@@UAGJAAI@Z
?getID@JPEG12Marker@ievision@@UBGJAAE@Z
?getID@JPEGMarker@ievision@@UBGJAAE@Z
?getIHDR@PNGDecompressor@ievision@@UAGJPAI0PAH1111AAI@Z
?getImageHeight@JPEG12Decompressor@ievision@@UAGJAAI@Z
?getImageHeight@JPEGDecompressor@ievision@@UAGJAAI@Z
?getImageInfo@OPJReader@ievision@@UAGJHPAH000000AAH@Z
?getImageWidth@JPEG12Decompressor@ievision@@UAGJAAI@Z
?getImageWidth@JPEGDecompressor@ievision@@UAGJAAI@Z
?getIntInfo@DCRAWDecoder@ievision@@UAGJHAAH@Z
?getInterlaceType@PNGDecompressor@ievision@@UAGJAAE@Z
?getJpegColorSpace@JPEG12Decompressor@ievision@@UAGJAAI@Z
?getJpegColorSpace@JPEGDecompressor@ievision@@UAGJAAI@Z
?getKey@PNGText@ievision@@UAGJAAPAD@Z
?getLength@JPEG12Marker@ievision@@UBGJAAI@Z
?getLength@JPEGMarker@ievision@@UBGJAAI@Z
?getLibraryInfo@IELib@ievision@@UAGJHAAPAVString@2@@Z
?getMarkerList@JPEG12Decompressor@ievision@@UAGJAAPAVJPEG12Marker@2@@Z
?getMarkerList@JPEGDecompressor@ievision@@UAGJAAPAVJPEGMarker@2@@Z
?getNext@PNGText@ievision@@UAGJAAPAV12@@Z
?getNextScanlineIndex@JPEGCompressor@ievision@@UAGJAAI@Z
?getNumComponents@JP2KImage@ievision@@UAGJAAH@Z
?getNumComps@OPJImage@ievision@@UAGJAAI@Z
?getNumWarnings@JPEG12ErrorManager@ievision@@UBGJAAH@Z
?getNumWarnings@JPEGErrorManager@ievision@@UBGJAAH@Z
?getOutColorSpace@JPEG12Decompressor@ievision@@UAGJAAI@Z
?getOutColorSpace@JPEGDecompressor@ievision@@UAGJAAI@Z
?getOutStream@DCRAWDecoder@ievision@@UAGJAAPAVMemoryStream@2@@Z
?getOutputComponents@JPEG12Decompressor@ievision@@UAGJAAI@Z
?getOutputComponents@JPEGDecompressor@ievision@@UAGJAAI@Z
?getOutputHeight@JPEG12Decompressor@ievision@@UAGJAAI@Z
?getOutputHeight@JPEGDecompressor@ievision@@UAGJAAI@Z
?getOutputScanline@JPEG12Decompressor@ievision@@UAGJAAI@Z
?getOutputScanline@JPEGDecompressor@ievision@@UAGJAAI@Z
?getOutputWidth@JPEG12Decompressor@ievision@@UAGJAAI@Z
?getOutputWidth@JPEGDecompressor@ievision@@UAGJAAI@Z
?getPalette@PNGDecompressor@ievision@@UAGJPAXPAHAAI@Z
?getProgressiveMode@JPEG12Decompressor@ievision@@UAGJAAH@Z
?getProgressiveMode@JPEGDecompressor@ievision@@UAGJAAH@Z
?getQDepth@OPJImage@ievision@@UAGJAAI@Z
?getRefCount@Interface@ievision@@UBGKXZ
?getRow@DCRAWDecoder@ievision@@UAGJIPAX@Z
?getString@VectorString@ievision@@UBGJHAAPAVString@2@@Z
?getTRNS@PNGDecompressor@ievision@@UAGJPAXPAHAAI@Z
?getText@PNGDecompressor@ievision@@UAGJAAPAVPNGText@2@AAI@Z
?getText@PNGText@ievision@@UAGJAAPAD@Z
?getTextInfo@DCRAWDecoder@ievision@@UAGJHAAPAVString@2@@Z
?getTileCount@OPJWriter@ievision@@UAGJAAH@Z
?getTileInfo@OPJWriter@ievision@@UAGJHPAI0000@Z
?getType@LibRawProcessedImage@ievision@@UAGJAAH@Z
?getValue@JP2KMatrix@ievision@@UAGJHHAAH@Z
?getVersion@LibRaw@ievision@@UAGJAAPBD@Z
?getVersion@OPJReader@ievision@@UAGJAAPBD@Z
?getVersion@OPJWriter@ievision@@UAGJAAPBD@Z
?getVersionStr@JPEG12Decompressor@ievision@@UAGJAAPBD@Z
?getVersionStr@JPEGDecompressor@ievision@@UAGJAAPBD@Z
?getWidth@JP2KImage@ievision@@UAGJAAH@Z
?getWidth@LibRawProcessedImage@ievision@@UAGJAAH@Z
?getWidth@OPJImage@ievision@@UAGJAAI@Z
?getXDensity@JPEG12Decompressor@ievision@@UAGJAAG@Z
?getXDensity@JPEGDecompressor@ievision@@UAGJAAG@Z
?getXPixelsPerMeter@PNGDecompressor@ievision@@UAGJAAI@Z
?getYDensity@JPEG12Decompressor@ievision@@UAGJAAG@Z
?getYDensity@JPEGDecompressor@ievision@@UAGJAAG@Z
?getYPixelsPerMeter@PNGDecompressor@ievision@@UAGJAAI@Z
?hasAlpha@OPJImage@ievision@@UAGJAAH@Z
?imageLoaded@DCRAWDecoder@ievision@@UAGJAAH@Z
?imgData_color_getLocalizedCameraModel@LibRaw@ievision@@UAGJAAPBD@Z
?imgData_color_getModel2@LibRaw@ievision@@UAGJAAPBD@Z
?imgData_color_getUniqueCameraModel@LibRaw@ievision@@UAGJAAPBD@Z
?imgData_color_get_color@LibRaw@ievision@@UAGJAAPAX@Z
?imgData_color_get_iparams@LibRaw@ievision@@UAGJAAPAX@Z
?imgData_color_get_lens@LibRaw@ievision@@UAGJAAPAX@Z
?imgData_color_get_makernotes@LibRaw@ievision@@UAGJAAPAX@Z
?imgData_color_get_other@LibRaw@ievision@@UAGJAAPAX@Z
?imgData_color_get_shootinginfo@LibRaw@ievision@@UAGJAAPAX@Z
?imgData_idata_getMake@LibRaw@ievision@@UAGJAAPBD@Z
?imgData_idata_getModel@LibRaw@ievision@@UAGJAAPBD@Z
?imgData_idata_getRawCount@LibRaw@ievision@@UAGJAAH@Z
?imgData_idata_getSoftware@LibRaw@ievision@@UAGJAAPBD@Z
?imgData_sizes_getFlip@LibRaw@ievision@@UAGJAAH@Z
?imgData_sizes_getIHeight@LibRaw@ievision@@UAGJAAH@Z
?imgData_sizes_getIWidth@LibRaw@ievision@@UAGJAAH@Z
?imgData_sizes_getRawHeight@LibRaw@ievision@@UAGJAAH@Z
?imgData_sizes_getRawWidth@LibRaw@ievision@@UAGJAAH@Z
?imgData_thumbnail_getHeight@LibRaw@ievision@@UAGJAAH@Z
?imgData_thumbnail_getWidth@LibRaw@ievision@@UAGJAAH@Z
?isValid@OPJImage@ievision@@UAGJAAH@Z
?isValid@PNGCompressor@ievision@@UAGJAAH@Z
?isValid@PNGDecompressor@ievision@@UAGJAAH@Z
?lastError@LibRaw@ievision@@UAGJAAH@Z
?lastErrorStr@LibRaw@ievision@@UAGJAAPBD@Z
?length@String@ievision@@UBGJAAH@Z
?loadFromFile1@Stream@ievision@@UAGJPBD@Z
?loadFromFile2@Stream@ievision@@UAGJPB_W@Z
?makeProcessedImage@LibRaw@ievision@@UAGJAAPAVLibRawProcessedImage@2@@Z
?makeProcessedThumb@LibRaw@ievision@@UAGJAAPAVLibRawProcessedImage@2@@Z
?max_size@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UBGJAAI@Z
?next@JPEG12Marker@ievision@@UBGJAAPAV12@@Z
?next@JPEGMarker@ievision@@UBGJAAPAV12@@Z
?open1@FileStream@ievision@@UAGJPBDH@Z
?open2@FileStream@ievision@@UAGJPB_WH@Z
?open_buffer@LibRaw@ievision@@UAGJPAXIAAH@Z
?operatorASSIGN@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UAGJABV12@@Z
?operatorASSIGN@String@ievision@@UAGJABV12@@Z
?operatorEQUAL@String@ievision@@UAGJABV12@AAH@Z
?outputParams_setAdjustMaximumThr@LibRaw@ievision@@UAGJN@Z
?outputParams_setAutoBrightThr@LibRaw@ievision@@UAGJN@Z
?outputParams_setBandingReduction@LibRaw@ievision@@UAGJN@Z
?outputParams_setBlueScale@LibRaw@ievision@@UAGJN@Z
?outputParams_setBright@LibRaw@ievision@@UAGJN@Z
?outputParams_setChromaticAberrationsSuppression@LibRaw@ievision@@UAGJH@Z
?outputParams_setFourColorRGB@LibRaw@ievision@@UAGJH@Z
?outputParams_setGamma@LibRaw@ievision@@UAGJNN@Z
?outputParams_setGreenMatching@LibRaw@ievision@@UAGJH@Z
?outputParams_setHalfSize@LibRaw@ievision@@UAGJH@Z
?outputParams_setHighlight@LibRaw@ievision@@UAGJH@Z
?outputParams_setInterpolationQuality@LibRaw@ievision@@UAGJH@Z
?outputParams_setMazeArtifactsReduction@LibRaw@ievision@@UAGJN@Z
?outputParams_setMedianFilterPasses@LibRaw@ievision@@UAGJH@Z
?outputParams_setNoAutoBright@LibRaw@ievision@@UAGJH@Z
?outputParams_setNoAutoScale@LibRaw@ievision@@UAGJH@Z
?outputParams_setNoInterpolation@LibRaw@ievision@@UAGJH@Z
?outputParams_setOutputBPS@LibRaw@ievision@@UAGJH@Z
?outputParams_setOutputColorSpace@LibRaw@ievision@@UAGJH@Z
?outputParams_setRedScale@LibRaw@ievision@@UAGJN@Z
?outputParams_setShotSelect@LibRaw@ievision@@UAGJH@Z
?outputParams_setThreshold@LibRaw@ievision@@UAGJN@Z
?outputParams_setUseAutoWB@LibRaw@ievision@@UAGJH@Z
?outputParams_setUseCameraMatrix@LibRaw@ievision@@UAGJH@Z
?outputParams_setUseCameraWB@LibRaw@ievision@@UAGJH@Z
?outputParams_setUserBlack@LibRaw@ievision@@UAGJH@Z
?outputParams_setUserFlip@LibRaw@ievision@@UAGJH@Z
?outputParams_setUserMul@LibRaw@ievision@@UAGJNNNN@Z
?outputParams_setUserSaturation@LibRaw@ievision@@UAGJH@Z
?pop_back@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UAGJXZ
?push_back1@VectorString@ievision@@UAGJABVString@2@@Z
?push_back2@VectorString@ievision@@UAGJPBD@Z
?raw2Image@LibRaw@ievision@@UAGJAAH@Z
?read@Stream@ievision@@UAGJPAX_J@Z
?readCoefficients@JPEGCopy@ievision@@UAGJAAVJPEGDecompressor@2@AAPAX@Z
?readComponent@JP2KImage@ievision@@UAGJGHHHHAAVJP2KMatrix@2@AAH@Z
?readEnd@PNGDecompressor@ievision@@UAGJXZ
?readHeader@JPEG12Decompressor@ievision@@UAGJH@Z
?readHeader@JPEGDecompressor@ievision@@UAGJH@Z
?readInfo@PNGDecompressor@ievision@@UAGJXZ
?readLinearBGR8@JP2KImage@ievision@@UAGJAAVJP2KMatrix@2@00HHHHPAEH@Z
?readRows@PNGDecompressor@ievision@@UAGJPAX0I@Z
?readScanlines@JPEG12Decompressor@ievision@@UAGJPAXIAAI@Z
?readScanlines@JPEGDecompressor@ievision@@UAGJPAXIAAI@Z
?readUpdateInfo@PNGDecompressor@ievision@@UAGJXZ
?requestWorkspace@JPEGTransform@ievision@@UAGJAAVJPEGDecompressor@2@@Z
?reserve@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UAGJI@Z
?reserve@MemoryStream@ievision@@UAGJI@Z
?reset@CustomStream@ievision@@UAGJAAVCustomStreamProvider@2@@Z
?reset@ExistingMemoryStream@ievision@@UAGJPBXH@Z
?resize@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UAGJI@Z
?saveMarkers@JPEG12Decompressor@ievision@@UAGJHI@Z
?saveMarkers@JPEGDecompressor@ievision@@UAGJHI@Z
?saveToFile1@Stream@ievision@@UAGJPBD@Z
?saveToFile2@Stream@ievision@@UAGJPB_W@Z
?saveToFile@String@ievision@@UBGJPBD@Z
?seek@CustomStream@ievision@@UAGJ_JH@Z
?seek@ExistingMemoryStream@ievision@@UAGJ_JH@Z
?seek@FileStream@ievision@@UAGJ_JH@Z
?seek@MemoryStream@ievision@@UAGJ_JH@Z
?setBGR@PNGCompressor@ievision@@UAGJXZ
?setBGR@PNGDecompressor@ievision@@UAGJXZ
?setBackground@PNGCompressor@ievision@@UAGJU?$BasicBGR@E@2@E@Z
?setCancelFlag@LibRaw@ievision@@UAGJXZ
?setColorSpace@JPEGCompressor@ievision@@UAGJI@Z
?setComponentType@JP2KImage@ievision@@UAGJHH@Z
?setCompressionLevel@PNGCompressor@ievision@@UAGJH@Z
?setCompressionRate@OPJWriter@ievision@@UAGJHN@Z
?setDCTMethod@JPEG12Decompressor@ievision@@UAGJI@Z
?setDCTMethod@JPEGCompressor@ievision@@UAGJI@Z
?setDCTMethod@JPEGDecompressor@ievision@@UAGJI@Z
?setDefaults@JPEGCompressor@ievision@@UAGJXZ
?setDensityUnit@JPEGCompressor@ievision@@UAGJE@Z
?setErrorManager@JPEG12Decompressor@ievision@@UAGJAAVJPEG12ErrorManager@2@@Z
?setErrorManager@JPEGCompressor@ievision@@UAGJAAVJPEGErrorManager@2@@Z
?setErrorManager@JPEGDecompressor@ievision@@UAGJAAVJPEGErrorManager@2@@Z
?setExpand@PNGDecompressor@ievision@@UAGJXZ
?setFilter@PNGCompressor@ievision@@UAGJHH@Z
?setGrayToRGB@PNGDecompressor@ievision@@UAGJXZ
?setICC@OPJImage@ievision@@UAGJPAXI@Z
?setIHDR@PNGCompressor@ievision@@UAGJIIHHHHH@Z
?setImage@OPJWriter@ievision@@UAGJPAVOPJImage@2@@Z
?setImageHeight@JPEGCompressor@ievision@@UAGJI@Z
?setImageWidth@JPEGCompressor@ievision@@UAGJI@Z
?setInColorSpace@JPEGCompressor@ievision@@UAGJI@Z
?setInputComponents@JPEGCompressor@ievision@@UAGJI@Z
?setInterlaceHandling@PNGCompressor@ievision@@UAGJAAH@Z
?setInterlaceHandling@PNGDecompressor@ievision@@UAGJAAH@Z
?setIrreversible@OPJWriter@ievision@@UAGJH@Z
?setLogFile@IELib@ievision@@UAGJPBD@Z
?setOptimizeCoding@JPEGCompressor@ievision@@UAGJH@Z
?setOutColorSpace@JPEG12Decompressor@ievision@@UAGJI@Z
?setOutColorSpace@JPEGDecompressor@ievision@@UAGJI@Z
?setPHYS@PNGCompressor@ievision@@UAGJIIH@Z
?setPacking@PNGDecompressor@ievision@@UAGJXZ
?setPalette@PNGCompressor@ievision@@UAGJPAXH@Z
?setProgressHandler@LibRaw@ievision@@UAGJP6GHPBXHHH@ZPAX@Z
?setProgressionOrder@OPJWriter@ievision@@UAGJH@Z
?setQuality@JPEGCompressor@ievision@@UAGJHH@Z
?setQuality@OPJWriter@ievision@@UAGJHN@Z
?setReadFunction@PNGDecompressor@ievision@@UAGJPAX0@Z
?setReduce@OPJReader@ievision@@UAGJH@Z
?setSampleFactor@JPEGCompressor@ievision@@UAGJHHH@Z
?setScale@JPEG12Decompressor@ievision@@UAGJII@Z
?setScale@JPEGDecompressor@ievision@@UAGJII@Z
?setSmoothingFactor@JPEGCompressor@ievision@@UAGJH@Z
?setStream@OPJReader@ievision@@UAGJPAVStream@2@@Z
?setStream@OPJWriter@ievision@@UAGJPAVStream@2@@Z
?setString1@VectorString@ievision@@UAGJHABVString@2@@Z
?setString2@VectorString@ievision@@UAGJHPBD@Z
?setStrip16@PNGDecompressor@ievision@@UAGJXZ
?setSwap@PNGDecompressor@ievision@@UAGJXZ
?setTRNS@PNGCompressor@ievision@@UAGJPAEH@Z
?setTRNStoAlpha@PNGDecompressor@ievision@@UAGJXZ
?setText@PNGCompressor@ievision@@UAGJAAVPNGTextList@2@@Z
?setThreadsCount@OPJReader@ievision@@UAGJH@Z
?setWriteFunction@PNGCompressor@ievision@@UAGJPAX00@Z
?setWriteJFIFHeader@JPEGCompressor@ievision@@UAGJH@Z
?setXDensity@JPEGCompressor@ievision@@UAGJG@Z
?setYDensity@JPEGCompressor@ievision@@UAGJG@Z
?setupReadStream@JPEG12Decompressor@ievision@@UAGJAAVStream@2@I@Z
?setupReadStream@JPEGDecompressor@ievision@@UAGJAAVStream@2@I@Z
?setupWriteStream@JPEGCompressor@ievision@@UAGJAAVStream@2@I@Z
?silent_getc@CustomStream@ievision@@UAGJAAH@Z
?silent_getc@ExistingMemoryStream@ievision@@UAGJAAH@Z
?silent_getc@FileStream@ievision@@UAGJAAH@Z
?silent_getc@MemoryStream@ievision@@UAGJAAH@Z
?silent_read@CustomStream@ievision@@UAGJPAX_JAA_J@Z
?silent_read@ExistingMemoryStream@ievision@@UAGJPAX_JAA_J@Z
?silent_read@FileStream@ievision@@UAGJPAX_JAA_J@Z
?silent_read@MemoryStream@ievision@@UAGJPAX_JAA_J@Z
?silent_write@CustomStream@ievision@@UAGJPBX_JAA_J@Z
?silent_write@ExistingMemoryStream@ievision@@UAGJPBX_JAA_J@Z
?silent_write@FileStream@ievision@@UAGJPBX_JAA_J@Z
?silent_write@MemoryStream@ievision@@UAGJPBX_JAA_J@Z
?simpleProgression@JPEGCompressor@ievision@@UAGJXZ
?size@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UBGJAAH@Z
?size@CustomStream@ievision@@UAGJAA_J@Z
?size@ExistingMemoryStream@ievision@@UAGJAA_J@Z
?size@FileStream@ievision@@UAGJAA_J@Z
?size@MemoryStream@ievision@@UAGJAA_J@Z
?sort@VectorString@ievision@@UAGJH@Z
?startCompress@JPEGCompressor@ievision@@UAGJH@Z
?startDecompress@JPEG12Decompressor@ievision@@UAGJXZ
?startDecompress@JPEGDecompressor@ievision@@UAGJXZ
?swap@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UAGJAAV12@@Z
?tell@CustomStream@ievision@@UAGJAA_J@Z
?tell@ExistingMemoryStream@ievision@@UAGJAA_J@Z
?tell@FileStream@ievision@@UAGJAA_J@Z
?tell@MemoryStream@ievision@@UAGJAA_J@Z
?unpack@LibRaw@ievision@@UAGJHAAH@Z
?write@Stream@ievision@@UAGJPBX_J@Z
?writeCoefficients@JPEGCopy@ievision@@UAGJAAVJPEGCompressor@2@PAX@Z
?writeComponentSample@JP2KImage@ievision@@UAGJHHHI@Z
?writeEnd@PNGCompressor@ievision@@UAGJXZ
?writeInfo@PNGCompressor@ievision@@UAGJXZ
?writeMarker@JPEGCompressor@ievision@@UAGJHPAXI@Z
?writeRowRGB8@JP2KImage@ievision@@UAGJHHPBE0H@Z
?writeRows@PNGCompressor@ievision@@UAGJPAXI@Z
?writeScanlines@JPEGCompressor@ievision@@UAGJPAXIAAI@Z
?zcompress@InputOutput@ievision@@UAGJAAVStream@2@0H@Z
?zdecompress@InputOutput@ievision@@UAGJAAVStream@2@0@Z
iev_IELib_create
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
371KB
Virtual Size
370KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
308KB
Virtual Size
908KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=33, id=259, version=26213,
count=213, id=261, version=26213,
count=56, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,
count=13, id=199, version=41118,
count=58, id=261, version=26706,
count=34, id=260, version=26706,
count=30, id=259, version=26706,
count=9, id=257, version=26213,
count=130, id=1, productName=Unmarked objects,
count=30, id=260, version=26213,
count=113, id=260, version=27045,
count=121, id=261, version=27045,
count=1, id=256, version=27045,
count=1, id=255, version=27045,
count=1, id=151,
count=1, id=258, version=27045,
App/ImageTuner32/itpr.dll
- SHA256 8dd5eeff1325ebd066df1fdf3f379fa25f7328b367b2e337cd98ca91dc436598
- MD5 243180cb1538a9b2ec675a657aa04882
- SHA1 bf0986be1123cfd5f957bdb0447136469e08c1e2
- SHA512 ef29bba4fba5ecdb262ac90ac112187cde81e109c4981c1b2511904e31676161a80a1026f6395b34f8e7c17584d797a9b34f9eec1c15fc9b99045c69f0a1201b
- SSDEEP 12288:MNt5sxeuGGFN1Tam1IljfSPosK5Cvt3zFZa0j4Bic3Mbqg1i:A2ekNRKljf8jK5Cvt3jGN3xei
- TLSH T19AC42301EA846D86D0DEE4F5A4F3CE801BB266B56D1D05C656E563021FF69E0FC3C8AE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
f2:42:2f:61:94:f6:02:99:10:ee:04:ae:46:18:6d:d5:b7:6d:f7:96:7b:58:67:ab:f4:04:ae:56:ea:97:7b:5d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Burnaware S.L.,O=Burnaware S.L.,ST=Málaga,C=ES
Chains
Aug 2, 2022
CN=Burnaware S.L.,O=Burnaware S.L.,ST=Málaga,C=ES
Subject
CN=Burnaware S.L.,O=Burnaware S.L.,ST=Málaga,C=ES
Serial Number
ee:4c:c3:0a:8d:fe:40:09:93:7f:96:02:27:4f:10:ec
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 19, 2022 - Apr 19, 2023
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 11, 2022 - Aug 10, 2033
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 2, 2019 - Jan 18, 2038
Minor OS version
0
Major OS version
5
Entry point
811009
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
GetDays
GetMode
GetVersion
RegisterApplication
TMethodImplementationIntercept
Name
Size
167KB
Virtual Size
648KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
36KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
316KB
Virtual Size
320KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
App/ImageTuner64/Dark.vsf
- SHA256 cef7419b8a6af782f26c7f9ad72a2b78e0fa585553aa9b839e9dbbbbc7f25bc8
- MD5 79c8258326a763ebff9ae486a093f03b
- SHA1 077e21214ea03e2770fc2aedf22f73a891b2aeb4
- SHA512 3318bfe046652b32b587b720917433d9dd24c01702a97476ef6df7dbe4d206a4880486910969cb0a3890f223d28ab8820557d943686cd580a0bb6f07c44ae266
- SSDEEP 768:PdwUZijLtuQCBlcF+gm/Yqjt4c9v/YwriH/M+QxubGxOZg8en2xwbumBo7TGr1OX:VCjRPmco354fIwM3o+Oa8enawbjBLQ
- TLSH T14A33F11E38E4E76D8BB1B3FE4BBB04A7D9684403286ECB51479A6C460630F1D5835DD3
- MD5 SHA1 SHA512 SSDEEP TLSH
App/ImageTuner64/ImageTuner.chm
- SHA256 a4591640edc1c212fb2c8983796780490dbc93ee699cef980c971ea7a2ddf7b4
- MD5 6d0023129f168beefaca07d5c93fd6a7
- SHA1 f1c98f937c606761c48a5416c442d07aa0efb609
- SHA512 0d76914c5b05e351f12b56a0c69c6e01d1e6528fd5d79f0bacc69b04be440953e7bd869dc8534177acef70ca789f6208ea5bac37531c78a8a279b6f2be115ef6
- SSDEEP 1536:O0LJZ0Jvyc4+WM/NH169QL3CkSDAPmg7mk5Oxb:DA+hM/RL3TZ+g7Dmb
- TLSH T1D1530152AF273862C4E136326B1990DAE3358D17A018BB4B6C1B77C9F9CBE1D0595D0A
- MD5 SHA1 SHA512 SSDEEP TLSH
App/ImageTuner64/ImageTuner.exe
- IMPHASH 03bde91aeddc9811278c068f90a2d026
- SHA256 e181de4290cd2b990b5d273af4d26f4e77d90ca46de3480b976f54c7c8e3c8ed
- MD5 5d87b11d2126c89ede45be041912355d
- SHA1 ccf58ba99a9c819b3ba6e857e82db37c63de44d4
- SHA512 9fb0157006ee1d4ad3c038976dd9dfe72515fd88bf484a1369b0d3afe78cc881b71fc5867953a473947657b7ca09d4137817378fba364d878d57ec0173db005f
- SSDEEP 49152:k2OHKopNYIhr8JuyJtO6ejbjSlKNY7WsIgIPJLPHvXaigtvXHeZo2Z22tRnHy2GR:kATga1OVZJnxPJoeoGqKCPNU
- TLSH T1DDB64B6B72B4826DC16DC13AC0978B41EA3370B51B3BC6FB52A015B95F626C49E3F721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
9348224
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit
GetErrorInfo
GetActiveObject
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegFlushKey
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextA
user32
MessageBoxA
CharNextW
LoadStringW
SetClassLongPtrW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
CreateWindowExW
WindowFromPoint
WaitMessage
ValidateRect
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
TrackMouseEvent
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCaret
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetCaretPos
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
SendDlgItemMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadKeyboardLayoutW
LoadImageA
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
IsCharAlphaNumericA
IsCharAlphaNumericW
InvalidateRect
InsertMenuItemW
InsertMenuW
InflateRect
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetScrollBarInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemRect
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItemTextA
GetDlgItemTextW
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardFormatNameW
GetClipboardData
GetClientRect
GetClassNameW
GetClassInfoExW
GetClassInfoW
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EndMenu
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DestroyAcceleratorTable
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIconIndirect
CreateIcon
CreateCursor
CreateCaret
CreateAcceleratorTableW
CountClipboardFormats
CopyImage
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperBuffW
CharUpperW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
CharLowerBuffA
AdjustWindowRectEx
ActivateKeyboardLayout
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
MonitorFromWindow
kernel32
Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsDBCSLeadByteEx
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleCP
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
SetCurrentDirectoryW
GetCurrentDirectoryW
WriteFile
SetFilePointer
SetEndOfFile
ReadFile
GetFileType
GetFileSize
CreateFileW
GetStdHandle
CloseHandle
LoadLibraryA
TlsSetValue
TlsGetValue
LocalFree
LocalAlloc
lstrlenA
lstrcpyW
lstrcmpW
lstrcatA
WritePrivateProfileStringW
WaitForSingleObject
WaitForMultipleObjectsEx
WaitForMultipleObjects
VirtualQueryEx
VirtualProtect
VerSetConditionMask
VerifyVersionInfoW
UnmapViewOfFile
TerminateThread
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
SuspendThread
SizeofResource
SetThreadPriority
SetLastError
SetFileTime
SetFileAttributesW
SetEvent
SetErrorMode
ResumeThread
ResetEvent
RemoveDirectoryW
ReadDirectoryChangesW
QueryDosDeviceW
IsDebuggerPresent
OutputDebugStringW
MulDiv
MoveFileW
MapViewOfFile
LockResource
LocalFileTimeToFileTime
LoadResource
LoadLibraryW
InitializeCriticalSectionAndSpinCount
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalSize
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryA
GetWindowsDirectoryW
GetVolumeInformationW
GetVersionExW
GetTimeZoneInformation
GetThreadPriority
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetLongPathNameW
GetShortPathNameW
GetPrivateProfileStringW
GetOverlappedResult
GetModuleFileNameA
GetLogicalDriveStringsW
GetLocalTime
GetFullPathNameW
GetFileAttributesExW
GetFileAttributesA
GetFileAttributesW
GetExitCodeThread
GetExitCodeProcess
GetEnvironmentVariableW
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetComputerNameW
GetCPInfoExW
GetCPInfo
FreeResource
FormatMessageW
FindResourceW
FindNextFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsW
EnumSystemLocalesW
EnumResourceNamesW
EnumCalendarInfoW
DosDateTimeToFileTime
DeviceIoControl
DeleteFileW
CreateProcessA
CreateProcessW
CreatePipe
CreateFileMappingW
CreateFileA
CreateEventW
CreateDirectoryW
CopyFileW
GetFileSizeEx
TzSpecificLocalTimeToSystemTime
gdi32
UnrealizeObject
TextOutW
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWorldTransform
SetWindowOrgEx
SetWindowExtEx
SetWinMetaFileBits
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetTextAlign
SetStretchBltMode
SetROP2
SetPixelV
SetPixel
SetPaletteEntries
SetMetaFileBitsEx
SetMapMode
SetGraphicsMode
SetEnhMetaFileBits
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SelectClipRgn
SaveDC
RoundRect
RestoreDC
ResizePalette
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
PlgBlt
PlayEnhMetaFile
Pie
PatBlt
OffsetWindowOrgEx
OffsetViewportOrgEx
OffsetRgn
MoveToEx
ModifyWorldTransform
MaskBlt
LineTo
LineDDA
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetViewportOrgEx
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetTextColor
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetRandomRgn
GetPixel
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetGraphicsMode
GetGlyphOutlineW
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetCurrentPositionEx
GetCurrentObject
GetClipRgn
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
ExtCreateRegion
ExtCreatePen
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteMetaFile
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
CreatePolygonRgn
CreatePenIndirect
CreatePalette
CreateMetaFileW
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateEllipticRgn
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
CloseMetaFile
Chord
BitBlt
ArcTo
Arc
AngleArc
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
mpr
WNetOpenEnumW
WNetGetUniversalNameW
WNetEnumResourceW
WNetCloseEnum
ole32
CoCreateGuid
CreateILockBytesOnHGlobal
OleGetIconOfClass
ReleaseStgMedium
OleSetMenuDescriptor
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleSetContainedObject
OleCreateStaticFromData
OleUninitialize
OleInitialize
CreateBindCtx
StgCreateDocfileOnILockBytes
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitialize
IsEqualGUID
FreePropVariantArray
comctl32
InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls
msvcrt
memset
memcpy
shell32
SHGetFileInfoW
SHFileOperationA
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
DragQueryFileW
SHCreateShellItem
SHChangeNotifyDeregister
SHChangeNotification_Unlock
SHBindToParent
IsUserAnAdmin
ILRemoveLastID
ILGetNext
ILFree
ILFindLastID
ILFindChild
ILCreateFromPathW
ILCombine
ILClone
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
SHGetDataFromIDListA
SHGetDataFromIDListW
SHBrowseForFolderW
SHGetImageList
wininet
InternetReadFile
InternetOpenUrlW
InternetOpenW
InternetCloseHandle
HttpQueryInfoW
comdlg32
PrintDlgW
ChooseFontW
ReplaceTextW
FindTextW
ChooseColorW
GetSaveFileNameA
GetSaveFileNameW
GetOpenFileNameA
GetOpenFileNameW
winspool.drv
OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
GetDefaultPrinterW
oledlg
OleUIInsertObjectW
avifil32
AVISaveOptionsFree
AVISaveVW
AVIStreamGetFrameClose
AVIStreamGetFrame
AVIStreamGetFrameOpen
AVIStreamInfoW
AVIStreamRelease
AVIFileGetStream
AVIFileOpenW
AVIFileRelease
AVIFileExit
AVIFileInit
msvfw32
DrawDibOpen
DrawDibDraw
DrawDibClose
shlwapi
PathMatchSpecW
StrRetToStrW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
.text
Size
8.9MB
Virtual Size
8.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
668KB
Virtual Size
668KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
528B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
366KB
Virtual Size
365KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.pdata
Size
330KB
Virtual Size
329KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
627KB
Virtual Size
628KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
App/ImageTuner64/balc.exe
- IMPHASH 4bfd284ec9e8c86215d14d1a79af8757
- SHA256 f6a23ec46fa5d1371fe1ff85b1f976f59f2ae31877255abdae2df3022eaeb9a3
- MD5 953b2e40e33dc381b9bf4c7f35db50ef
- SHA1 a7170ced36c68b188a37fa76c7d7806efc7b291c
- SHA512 176061671f6dd60a632bb1945f23bbce3e0a22eac0b69ae05aa23e82b346f86460ef4a0b241faadf000e89d4b85bfb2bb1508ad147905e4e1576729af81752af
- SSDEEP 1536:5oLL8dOf8rTYeVsJ5qkMJQirvuEaoLF7Bu8A53bKXbUxUQ+8iAv:5oLL8dOfkjTrWoLF7A9RbKrUxLDv
- TLSH T1E5935B23BAD05533D064CBBD1C666FE5987FB9303922046B6EBCA94D0CE92C09D4E367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
2b:dc:54:79:2f:ac:c5:9d:ba:2f:7b:47:05:6a:22:b9:53:d2:a9:d8:70:eb:fe:3b:7f:3e:a5:36:e9:de:3d:aa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Burnaware S.L.,O=Burnaware S.L.,ST=Málaga,C=ES
Chains
Apr 21, 2022
CN=Burnaware S.L.,O=Burnaware S.L.,ST=Málaga,C=ES
Subject
CN=Burnaware S.L.,O=Burnaware S.L.,ST=Málaga,C=ES
Serial Number
ee:4c:c3:0a:8d:fe:40:09:93:7f:96:02:27:4f:10:ec
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 19, 2022 - Apr 19, 2023
Subject
CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2020 - Jan 22, 2032
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 2, 2019 - Jan 18, 2038
Minor OS version
0
Major OS version
5
Entry point
70048
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
user32
LoadStringW
MessageBoxA
CharNextW
MessageBoxW
LoadStringW
CharUpperW
kernel32
lstrcmpiA
LoadLibraryA
LocalFree
LocalAlloc
Sleep
VirtualFree
VirtualAlloc
GetACP
GetSystemInfo
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
IsValidLocale
GetSystemDefaultUILanguage
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetUserDefaultUILanguage
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
SetEvent
ResetEvent
LoadLibraryW
IsValidLocale
GetVersionExW
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetDiskFreeSpaceW
GetCPInfo
FreeLibrary
EnumSystemLocalesW
EnumCalendarInfoW
CreateEventW
CloseHandle
Name
.text
Size
60KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
19KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
512B
Virtual Size
154B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
App/ImageTuner64/ielib64.dll
- IMPHASH 798d661b92f2906f262b765910d95d28
- SHA256 43999c311d6d0bf9abd725a321cb3ae6d10b99c7995e0c73210de9c9fec863b6
- MD5 c9cfd6e93f941050aabc5c95e3bacf90
- SHA1 a5d34aa00a53ef65c578e72a16a9368322767474
- SHA512 4c2ea5db112185f2640a3c8ad1c002605a1ecc7d5c96c3c94ade8551f6c209f2fda8c9c3e22ccf88daafd106cfcc9f85e65ef838b395b7ed2a4890c2f071ab5f
- SSDEEP 49152:8ySezQ0PpH5zGxv38ok8P7xRftV875uHTUvhI:86GlRkWbAy
- TLSH T1B9D59E42BBB814F4D427C0388997D60BF771749607244BEB16D08ABA2F63FE11A7B752
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
c5:38:59:09:81:1e:40:3e:88:85:b7:60:ff:44:e7:4c:d9:f1:41:89
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Xequte Software,O=Xequte Software,POSTALCODE=6037,STREET=52 Winsley Tce,L=Wellington,C=NZ
Chains
Dec 17, 2021
CN=Xequte Software,O=Xequte Software,POSTALCODE=6037,STREET=52 Winsley Tce,L=Wellington,C=NZ
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=Xequte Software,O=Xequte Software,POSTALCODE=6037,STREET=52 Winsley Tce,L=Wellington,C=NZ
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Xequte Software,O=Xequte Software,POSTALCODE=6037,STREET=52 Winsley Tce,L=Wellington,C=NZ
Serial Number
ea:26:02:06:48:c0:8a:99:31:5f:03:e7:89:26:19:f7
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 8, 2020 - Dec 7, 2023
Subject
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Serial Number
39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 12, 2019 - Dec 31, 2028
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 2, 2018 - Dec 31, 2030
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2020 - Jan 22, 2032
Minor OS version
0
Major OS version
6
Entry point
451408
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\sviluppo\ievision\ielib\ievision.pdb
ws2_32
ntohs
htonl
ntohl
htons
kernel32
CreateEventA
WriteConsoleW
SetEndOfFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetLastError
WideCharToMultiByte
MultiByteToWideChar
EncodePointer
DecodePointer
SetLastError
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
CreateFileW
GetFileSizeEx
HeapSize
GetFileAttributesExW
HeapReAlloc
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
ExitProcess
lstrlenA
WaitForSingleObject
RtlUnwind
GetSystemInfo
RtlPcToFileHeader
InterlockedFlushSList
RaiseException
RtlUnwindEx
FreeLibrary
LoadLibraryExW
SetFileTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
GetCurrentProcess
TerminateProcess
ReadFile
GetFileType
GetModuleHandleExW
GetModuleFileNameW
GetTempPathW
CreateThread
ExitThread
FreeLibraryAndExitThread
HeapAlloc
HeapFree
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetTimeZoneInformation
ReadConsoleW
FlushFileBuffers
DeleteFileW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
oleaut32
CreateErrorInfo
SetErrorInfo
??1Interface@ievision@@UEAA@XZ
?AddRef@Interface@ievision@@UEBAKXZ
?JP2KFinalize@IELib@ievision@@UEAAJXZ
?JP2KInitialize@IELib@ievision@@UEAAJXZ
?PNGGetErrorPtr@IELib@ievision@@UEAAJPEAXAEAPEAX@Z
?PNGGetIOPtr@IELib@ievision@@UEAAJPEAXAEAPEAX@Z
?PNGSigCmp@IELib@ievision@@UEAAJPEAXIIAEAH@Z
?QueryInterface@Interface@ievision@@UEBAJAEBU_GUID@@PEAPEAX@Z
?Release@Interface@ievision@@UEBAKXZ
?adjustParameters@JPEGTransform@ievision@@UEAAJAEAVJPEGDecompressor@2@AEAVJPEGCompressor@2@PEAXAEAPEAX@Z
?append1@String@ievision@@UEAAJAEBV12@@Z
?append2@String@ievision@@UEAAJPEBD@Z
?assign@JP2KComponentParamsList@ievision@@UEAAJHIIIIIIGH@Z
?assign@PNGTextList@ievision@@UEAAJHHPEBD0@Z
?at@String@ievision@@UEBAJHAEAD@Z
?beginCompression@OPJWriter@ievision@@UEAAJHAEAH@Z
?c_str@String@ievision@@UEBAJAEAPEBD@Z
?c_str@TempDirName@ievision@@UEBAJAEAPEBD@Z
?c_str@TempFileName@ievision@@UEBAJAEAPEBD@Z
?cameraCount@LibRaw@ievision@@UEAAJAEAH@Z
?cameraList@LibRaw@ievision@@UEAAJAEAPEAPEBD@Z
?capacity@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UEBAJAEAI@Z
?clear@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UEAAJXZ
?clear@MemoryStream@ievision@@UEAAJXZ
?close@FileStream@ievision@@UEAAJXZ
?copyCriticalParameters@JPEGCopy@ievision@@UEAAJAEAVJPEGDecompressor@2@AEAVJPEGCompressor@2@@Z
?copyMarkersExecute@JPEGCopy@ievision@@UEAAJAEAVJPEGDecompressor@2@AEAVJPEGCompressor@2@H@Z
?copyMarkersSetup@JPEGCopy@ievision@@UEAAJAEAVJPEGDecompressor@2@H@Z
?copyRow@LibRawProcessedImage@ievision@@UEAAJHPEAX@Z
?copyRowFrom@OPJImage@ievision@@UEAAJHPEBXPEAXHHHH@Z
?copyRowTo@OPJImage@ievision@@UEAAJHPEAX0@Z
?createCompress@JPEGCompressor@ievision@@UEAAJXZ
?createCustomStream@IELib@ievision@@UEAAJAEAVCustomStreamProvider@2@AEAPEAVCustomStream@2@@Z
?createDCRAWDecoder@IELib@ievision@@UEAAJAEAVStream@2@AEAVVectorString@2@PEBX2AEAPEAVDCRAWDecoder@2@@Z
?createDecompress@JPEG12Decompressor@ievision@@UEAAJXZ
?createDecompress@JPEGDecompressor@ievision@@UEAAJXZ
?createJP2KComponentParamsList@IELib@ievision@@UEAAJHAEAPEAVJP2KComponentParamsList@2@@Z
?createJP2KImage1@IELib@ievision@@UEAAJAEAVStream@2@AEAPEAVJP2KImage@2@@Z
?createJP2KImage2@IELib@ievision@@UEAAJGAEAVJP2KComponentParamsList@2@HAEAPEAVJP2KImage@2@@Z
?createJP2KMatrix@IELib@ievision@@UEAAJHHAEAPEAVJP2KMatrix@2@@Z
?createJPEG12Decompressor@IELib@ievision@@UEAAJAEAPEAVJPEG12Decompressor@2@@Z
?createJPEG12ErrorManager@IELib@ievision@@UEAAJAEAPEAVJPEG12ErrorManager@2@@Z
?createJPEGCompressor@IELib@ievision@@UEAAJAEAPEAVJPEGCompressor@2@@Z
?createJPEGCopy@IELib@ievision@@UEAAJAEAPEAVJPEGCopy@2@@Z
?createJPEGDecompressor@IELib@ievision@@UEAAJAEAPEAVJPEGDecompressor@2@@Z
?createJPEGErrorManager@IELib@ievision@@UEAAJAEAPEAVJPEGErrorManager@2@@Z
?createJPEGTransform@IELib@ievision@@UEAAJHHHIIIIAEAPEAVJPEGTransform@2@@Z
?createLibRaw@IELib@ievision@@UEAAJAEAPEAVLibRaw@2@@Z
?createOPJImage@IELib@ievision@@UEAAJHHHHHHHHHAEAPEAVOPJImage@2@@Z
?createOPJReader@IELib@ievision@@UEAAJAEAPEAVOPJReader@2@@Z
?createOPJWriter@IELib@ievision@@UEAAJAEAPEAVOPJWriter@2@@Z
?createPNGCompressor@IELib@ievision@@UEAAJPEAX00AEAPEAVPNGCompressor@2@@Z
?createPNGDecompressor@IELib@ievision@@UEAAJPEAX00AEAPEAVPNGDecompressor@2@@Z
?createPNGTextList@IELib@ievision@@UEAAJIAEAPEAVPNGTextList@2@@Z
?createString1@IELib@ievision@@UEAAJAEAPEAVString@2@@Z
?createString2@IELib@ievision@@UEAAJAEBVString@2@AEAPEAV32@@Z
?createString3@IELib@ievision@@UEAAJPEBDAEAPEAVString@2@@Z
?createVectorString1@IELib@ievision@@UEAAJAEAPEAVVectorString@2@@Z
?createVectorString2@IELib@ievision@@UEAAJAEBVVectorString@2@AEAPEAV32@@Z
?data@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UEBAJAEAPEBX@Z
?dcraw_process@LibRaw@ievision@@UEAAJAEAH@Z
?debug@IELib@ievision@@UEAAJXZ
?decodeArea@OPJReader@ievision@@UEAAJHHHHAEAPEAVOPJImage@2@@Z
?destroyCompress@JPEGCompressor@ievision@@UEAAJXZ
?destroyDecompress@JPEG12Decompressor@ievision@@UEAAJXZ
?destroyDecompress@JPEGDecompressor@ievision@@UEAAJXZ
?dispose@Interface@ievision@@UEBAXXZ
?empty@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UEBAJAEAH@Z
?encode@JP2KImage@ievision@@UEAAJAEAVStream@2@HPEAD@Z
?encodeTile@OPJWriter@ievision@@UEAAJHAEAH@Z
?endCompression@OPJWriter@ievision@@UEAAJAEAH@Z
?eof@CustomStream@ievision@@UEAAJAEAH@Z
?eof@ExistingMemoryStream@ievision@@UEAAJAEAH@Z
?eof@FileStream@ievision@@UEAAJAEAH@Z
?eof@MemoryStream@ievision@@UEAAJAEAH@Z
?erase1@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UEAAJIAEAI@Z
?erase2@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UEAAJIIAEAI@Z
?executeTransformation@JPEGTransform@ievision@@UEAAJAEAVJPEGDecompressor@2@AEAVJPEGCompressor@2@PEAX@Z
?finishCompress@JPEGCompressor@ievision@@UEAAJXZ
?finishDecompress@JPEG12Decompressor@ievision@@UEAAJXZ
?finishDecompress@JPEGDecompressor@ievision@@UEAAJXZ
?getBackground@PNGDecompressor@ievision@@UEAAJU?$BasicBGR@E@2@AEAU32@@Z
?getBitsPerPixel@LibRawProcessedImage@ievision@@UEAAJAEAH@Z
?getCString@VectorString@ievision@@UEBAJHAEAPEBD@Z
?getChannels@LibRawProcessedImage@ievision@@UEAAJAEAH@Z
?getChannels@PNGDecompressor@ievision@@UEAAJAEAE@Z
?getColorSpace@JP2KImage@ievision@@UEAAJAEAH@Z
?getColorSpace@OPJImage@ievision@@UEAAJAEAH@Z
?getComponentByType@JP2KImage@ievision@@UEAAJHAEAH@Z
?getComponentHStep@JP2KImage@ievision@@UEAAJHAEAH@Z
?getComponentHeight@JP2KImage@ievision@@UEAAJHAEAH@Z
?getComponentPrecision@JP2KImage@ievision@@UEAAJHAEAH@Z
?getComponentTopLeftX@JP2KImage@ievision@@UEAAJHAEAH@Z
?getComponentTopLeftY@JP2KImage@ievision@@UEAAJHAEAH@Z
?getComponentVStep@JP2KImage@ievision@@UEAAJHAEAH@Z
?getComponentWidth@JP2KImage@ievision@@UEAAJHAEAH@Z
?getData@JPEG12Marker@ievision@@UEBAJAEAPEAX@Z
?getData@JPEGMarker@ievision@@UEBAJAEAPEAX@Z
?getData@LibRawProcessedImage@ievision@@UEAAJAEAPEAX@Z
?getDataSize@LibRawProcessedImage@ievision@@UEAAJAEAI@Z
?getDensityUnit@JPEG12Decompressor@ievision@@UEAAJAEAE@Z
?getDensityUnit@JPEGDecompressor@ievision@@UEAAJAEAE@Z
?getDepth@OPJImage@ievision@@UEAAJAEAI@Z
?getErrMsgCode@JPEG12ErrorManager@ievision@@UEBAJAEAH@Z
?getErrMsgCode@JPEGErrorManager@ievision@@UEBAJAEAH@Z
?getFilename@TempFileStream@ievision@@UEBAJAEAPEBD@Z
?getHeight@JP2KImage@ievision@@UEAAJAEAH@Z
?getHeight@LibRawProcessedImage@ievision@@UEAAJAEAH@Z
?getHeight@OPJImage@ievision@@UEAAJAEAI@Z
?getICC@OPJImage@ievision@@UEAAJAEAPEBX@Z
?getICCLength@OPJImage@ievision@@UEAAJAEAI@Z
?getID@JPEG12Marker@ievision@@UEBAJAEAE@Z
?getID@JPEGMarker@ievision@@UEBAJAEAE@Z
?getIHDR@PNGDecompressor@ievision@@UEAAJPEAI0PEAH1111AEAI@Z
?getImageHeight@JPEG12Decompressor@ievision@@UEAAJAEAI@Z
?getImageHeight@JPEGDecompressor@ievision@@UEAAJAEAI@Z
?getImageInfo@OPJReader@ievision@@UEAAJHPEAH000000AEAH@Z
?getImageWidth@JPEG12Decompressor@ievision@@UEAAJAEAI@Z
?getImageWidth@JPEGDecompressor@ievision@@UEAAJAEAI@Z
?getIntInfo@DCRAWDecoder@ievision@@UEAAJHAEAH@Z
?getInterlaceType@PNGDecompressor@ievision@@UEAAJAEAE@Z
?getJpegColorSpace@JPEG12Decompressor@ievision@@UEAAJAEAI@Z
?getJpegColorSpace@JPEGDecompressor@ievision@@UEAAJAEAI@Z
?getKey@PNGText@ievision@@UEAAJAEAPEAD@Z
?getLength@JPEG12Marker@ievision@@UEBAJAEAI@Z
?getLength@JPEGMarker@ievision@@UEBAJAEAI@Z
?getLibraryInfo@IELib@ievision@@UEAAJHAEAPEAVString@2@@Z
?getMarkerList@JPEG12Decompressor@ievision@@UEAAJAEAPEAVJPEG12Marker@2@@Z
?getMarkerList@JPEGDecompressor@ievision@@UEAAJAEAPEAVJPEGMarker@2@@Z
?getNext@PNGText@ievision@@UEAAJAEAPEAV12@@Z
?getNextScanlineIndex@JPEGCompressor@ievision@@UEAAJAEAI@Z
?getNumComponents@JP2KImage@ievision@@UEAAJAEAH@Z
?getNumComps@OPJImage@ievision@@UEAAJAEAI@Z
?getNumWarnings@JPEG12ErrorManager@ievision@@UEBAJAEAH@Z
?getNumWarnings@JPEGErrorManager@ievision@@UEBAJAEAH@Z
?getOutColorSpace@JPEG12Decompressor@ievision@@UEAAJAEAI@Z
?getOutColorSpace@JPEGDecompressor@ievision@@UEAAJAEAI@Z
?getOutStream@DCRAWDecoder@ievision@@UEAAJAEAPEAVMemoryStream@2@@Z
?getOutputComponents@JPEG12Decompressor@ievision@@UEAAJAEAI@Z
?getOutputComponents@JPEGDecompressor@ievision@@UEAAJAEAI@Z
?getOutputHeight@JPEG12Decompressor@ievision@@UEAAJAEAI@Z
?getOutputHeight@JPEGDecompressor@ievision@@UEAAJAEAI@Z
?getOutputScanline@JPEG12Decompressor@ievision@@UEAAJAEAI@Z
?getOutputScanline@JPEGDecompressor@ievision@@UEAAJAEAI@Z
?getOutputWidth@JPEG12Decompressor@ievision@@UEAAJAEAI@Z
?getOutputWidth@JPEGDecompressor@ievision@@UEAAJAEAI@Z
?getPalette@PNGDecompressor@ievision@@UEAAJPEAXPEAHAEAI@Z
?getProgressiveMode@JPEG12Decompressor@ievision@@UEAAJAEAH@Z
?getProgressiveMode@JPEGDecompressor@ievision@@UEAAJAEAH@Z
?getQDepth@OPJImage@ievision@@UEAAJAEAI@Z
?getRefCount@Interface@ievision@@UEBAKXZ
?getRow@DCRAWDecoder@ievision@@UEAAJIPEAX@Z
?getString@VectorString@ievision@@UEBAJHAEAPEAVString@2@@Z
?getTRNS@PNGDecompressor@ievision@@UEAAJPEAXPEAHAEAI@Z
?getText@PNGDecompressor@ievision@@UEAAJAEAPEAVPNGText@2@AEAI@Z
?getText@PNGText@ievision@@UEAAJAEAPEAD@Z
?getTextInfo@DCRAWDecoder@ievision@@UEAAJHAEAPEAVString@2@@Z
?getTileCount@OPJWriter@ievision@@UEAAJAEAH@Z
?getTileInfo@OPJWriter@ievision@@UEAAJHPEAI0000@Z
?getType@LibRawProcessedImage@ievision@@UEAAJAEAH@Z
?getValue@JP2KMatrix@ievision@@UEAAJHHAEAH@Z
?getVersion@LibRaw@ievision@@UEAAJAEAPEBD@Z
?getVersion@OPJReader@ievision@@UEAAJAEAPEBD@Z
?getVersion@OPJWriter@ievision@@UEAAJAEAPEBD@Z
?getVersionStr@JPEG12Decompressor@ievision@@UEAAJAEAPEBD@Z
?getVersionStr@JPEGDecompressor@ievision@@UEAAJAEAPEBD@Z
?getWidth@JP2KImage@ievision@@UEAAJAEAH@Z
?getWidth@LibRawProcessedImage@ievision@@UEAAJAEAH@Z
?getWidth@OPJImage@ievision@@UEAAJAEAI@Z
?getXDensity@JPEG12Decompressor@ievision@@UEAAJAEAG@Z
?getXDensity@JPEGDecompressor@ievision@@UEAAJAEAG@Z
?getXPixelsPerMeter@PNGDecompressor@ievision@@UEAAJAEAI@Z
?getYDensity@JPEG12Decompressor@ievision@@UEAAJAEAG@Z
?getYDensity@JPEGDecompressor@ievision@@UEAAJAEAG@Z
?getYPixelsPerMeter@PNGDecompressor@ievision@@UEAAJAEAI@Z
?hasAlpha@OPJImage@ievision@@UEAAJAEAH@Z
?imageLoaded@DCRAWDecoder@ievision@@UEAAJAEAH@Z
?imgData_color_getLocalizedCameraModel@LibRaw@ievision@@UEAAJAEAPEBD@Z
?imgData_color_getModel2@LibRaw@ievision@@UEAAJAEAPEBD@Z
?imgData_color_getUniqueCameraModel@LibRaw@ievision@@UEAAJAEAPEBD@Z
?imgData_color_get_color@LibRaw@ievision@@UEAAJAEAPEAX@Z
?imgData_color_get_iparams@LibRaw@ievision@@UEAAJAEAPEAX@Z
?imgData_color_get_lens@LibRaw@ievision@@UEAAJAEAPEAX@Z
?imgData_color_get_makernotes@LibRaw@ievision@@UEAAJAEAPEAX@Z
?imgData_color_get_other@LibRaw@ievision@@UEAAJAEAPEAX@Z
?imgData_color_get_shootinginfo@LibRaw@ievision@@UEAAJAEAPEAX@Z
?imgData_idata_getMake@LibRaw@ievision@@UEAAJAEAPEBD@Z
?imgData_idata_getModel@LibRaw@ievision@@UEAAJAEAPEBD@Z
?imgData_idata_getRawCount@LibRaw@ievision@@UEAAJAEAH@Z
?imgData_idata_getSoftware@LibRaw@ievision@@UEAAJAEAPEBD@Z
?imgData_sizes_getFlip@LibRaw@ievision@@UEAAJAEAH@Z
?imgData_sizes_getIHeight@LibRaw@ievision@@UEAAJAEAH@Z
?imgData_sizes_getIWidth@LibRaw@ievision@@UEAAJAEAH@Z
?imgData_sizes_getRawHeight@LibRaw@ievision@@UEAAJAEAH@Z
?imgData_sizes_getRawWidth@LibRaw@ievision@@UEAAJAEAH@Z
?imgData_thumbnail_getHeight@LibRaw@ievision@@UEAAJAEAH@Z
?imgData_thumbnail_getWidth@LibRaw@ievision@@UEAAJAEAH@Z
?isValid@OPJImage@ievision@@UEAAJAEAH@Z
?isValid@PNGCompressor@ievision@@UEAAJAEAH@Z
?isValid@PNGDecompressor@ievision@@UEAAJAEAH@Z
?lastError@LibRaw@ievision@@UEAAJAEAH@Z
?lastErrorStr@LibRaw@ievision@@UEAAJAEAPEBD@Z
?length@String@ievision@@UEBAJAEAH@Z
?loadFromFile1@Stream@ievision@@UEAAJPEBD@Z
?loadFromFile2@Stream@ievision@@UEAAJPEB_W@Z
?makeProcessedImage@LibRaw@ievision@@UEAAJAEAPEAVLibRawProcessedImage@2@@Z
?makeProcessedThumb@LibRaw@ievision@@UEAAJAEAPEAVLibRawProcessedImage@2@@Z
?max_size@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UEBAJAEAI@Z
?next@JPEG12Marker@ievision@@UEBAJAEAPEAV12@@Z
?next@JPEGMarker@ievision@@UEBAJAEAPEAV12@@Z
?open1@FileStream@ievision@@UEAAJPEBDH@Z
?open2@FileStream@ievision@@UEAAJPEB_WH@Z
?open_buffer@LibRaw@ievision@@UEAAJPEAXIAEAH@Z
?operatorASSIGN@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UEAAJAEBV12@@Z
?operatorASSIGN@String@ievision@@UEAAJAEBV12@@Z
?operatorEQUAL@String@ievision@@UEAAJAEBV12@AEAH@Z
?outputParams_setAdjustMaximumThr@LibRaw@ievision@@UEAAJN@Z
?outputParams_setAutoBrightThr@LibRaw@ievision@@UEAAJN@Z
?outputParams_setBandingReduction@LibRaw@ievision@@UEAAJN@Z
?outputParams_setBlueScale@LibRaw@ievision@@UEAAJN@Z
?outputParams_setBright@LibRaw@ievision@@UEAAJN@Z
?outputParams_setChromaticAberrationsSuppression@LibRaw@ievision@@UEAAJH@Z
?outputParams_setFourColorRGB@LibRaw@ievision@@UEAAJH@Z
?outputParams_setGamma@LibRaw@ievision@@UEAAJNN@Z
?outputParams_setGreenMatching@LibRaw@ievision@@UEAAJH@Z
?outputParams_setHalfSize@LibRaw@ievision@@UEAAJH@Z
?outputParams_setHighlight@LibRaw@ievision@@UEAAJH@Z
?outputParams_setInterpolationQuality@LibRaw@ievision@@UEAAJH@Z
?outputParams_setMazeArtifactsReduction@LibRaw@ievision@@UEAAJN@Z
?outputParams_setMedianFilterPasses@LibRaw@ievision@@UEAAJH@Z
?outputParams_setNoAutoBright@LibRaw@ievision@@UEAAJH@Z
?outputParams_setNoAutoScale@LibRaw@ievision@@UEAAJH@Z
?outputParams_setNoInterpolation@LibRaw@ievision@@UEAAJH@Z
?outputParams_setOutputBPS@LibRaw@ievision@@UEAAJH@Z
?outputParams_setOutputColorSpace@LibRaw@ievision@@UEAAJH@Z
?outputParams_setRedScale@LibRaw@ievision@@UEAAJN@Z
?outputParams_setShotSelect@LibRaw@ievision@@UEAAJH@Z
?outputParams_setThreshold@LibRaw@ievision@@UEAAJN@Z
?outputParams_setUseAutoWB@LibRaw@ievision@@UEAAJH@Z
?outputParams_setUseCameraMatrix@LibRaw@ievision@@UEAAJH@Z
?outputParams_setUseCameraWB@LibRaw@ievision@@UEAAJH@Z
?outputParams_setUserBlack@LibRaw@ievision@@UEAAJH@Z
?outputParams_setUserFlip@LibRaw@ievision@@UEAAJH@Z
?outputParams_setUserMul@LibRaw@ievision@@UEAAJNNNN@Z
?outputParams_setUserSaturation@LibRaw@ievision@@UEAAJH@Z
?pop_back@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UEAAJXZ
?push_back1@VectorString@ievision@@UEAAJAEBVString@2@@Z
?push_back2@VectorString@ievision@@UEAAJPEBD@Z
?raw2Image@LibRaw@ievision@@UEAAJAEAH@Z
?read@Stream@ievision@@UEAAJPEAX_J@Z
?readCoefficients@JPEGCopy@ievision@@UEAAJAEAVJPEGDecompressor@2@AEAPEAX@Z
?readComponent@JP2KImage@ievision@@UEAAJGHHHHAEAVJP2KMatrix@2@AEAH@Z
?readEnd@PNGDecompressor@ievision@@UEAAJXZ
?readHeader@JPEG12Decompressor@ievision@@UEAAJH@Z
?readHeader@JPEGDecompressor@ievision@@UEAAJH@Z
?readInfo@PNGDecompressor@ievision@@UEAAJXZ
?readLinearBGR8@JP2KImage@ievision@@UEAAJAEAVJP2KMatrix@2@00HHHHPEAEH@Z
?readRows@PNGDecompressor@ievision@@UEAAJPEAX0I@Z
?readScanlines@JPEG12Decompressor@ievision@@UEAAJPEAXIAEAI@Z
?readScanlines@JPEGDecompressor@ievision@@UEAAJPEAXIAEAI@Z
?readUpdateInfo@PNGDecompressor@ievision@@UEAAJXZ
?requestWorkspace@JPEGTransform@ievision@@UEAAJAEAVJPEGDecompressor@2@@Z
?reserve@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UEAAJI@Z
?reserve@MemoryStream@ievision@@UEAAJI@Z
?reset@CustomStream@ievision@@UEAAJAEAVCustomStreamProvider@2@@Z
?reset@ExistingMemoryStream@ievision@@UEAAJPEBXH@Z
?resize@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UEAAJI@Z
?saveMarkers@JPEG12Decompressor@ievision@@UEAAJHI@Z
?saveMarkers@JPEGDecompressor@ievision@@UEAAJHI@Z
?saveToFile1@Stream@ievision@@UEAAJPEBD@Z
?saveToFile2@Stream@ievision@@UEAAJPEB_W@Z
?saveToFile@String@ievision@@UEBAJPEBD@Z
?seek@CustomStream@ievision@@UEAAJ_JH@Z
?seek@ExistingMemoryStream@ievision@@UEAAJ_JH@Z
?seek@FileStream@ievision@@UEAAJ_JH@Z
?seek@MemoryStream@ievision@@UEAAJ_JH@Z
?setBGR@PNGCompressor@ievision@@UEAAJXZ
?setBGR@PNGDecompressor@ievision@@UEAAJXZ
?setBackground@PNGCompressor@ievision@@UEAAJU?$BasicBGR@E@2@E@Z
?setCancelFlag@LibRaw@ievision@@UEAAJXZ
?setColorSpace@JPEGCompressor@ievision@@UEAAJI@Z
?setComponentType@JP2KImage@ievision@@UEAAJHH@Z
?setCompressionLevel@PNGCompressor@ievision@@UEAAJH@Z
?setCompressionRate@OPJWriter@ievision@@UEAAJHN@Z
?setDCTMethod@JPEG12Decompressor@ievision@@UEAAJI@Z
?setDCTMethod@JPEGCompressor@ievision@@UEAAJI@Z
?setDCTMethod@JPEGDecompressor@ievision@@UEAAJI@Z
?setDefaults@JPEGCompressor@ievision@@UEAAJXZ
?setDensityUnit@JPEGCompressor@ievision@@UEAAJE@Z
?setErrorManager@JPEG12Decompressor@ievision@@UEAAJAEAVJPEG12ErrorManager@2@@Z
?setErrorManager@JPEGCompressor@ievision@@UEAAJAEAVJPEGErrorManager@2@@Z
?setErrorManager@JPEGDecompressor@ievision@@UEAAJAEAVJPEGErrorManager@2@@Z
?setExpand@PNGDecompressor@ievision@@UEAAJXZ
?setFilter@PNGCompressor@ievision@@UEAAJHH@Z
?setGrayToRGB@PNGDecompressor@ievision@@UEAAJXZ
?setICC@OPJImage@ievision@@UEAAJPEAXI@Z
?setIHDR@PNGCompressor@ievision@@UEAAJIIHHHHH@Z
?setImage@OPJWriter@ievision@@UEAAJPEAVOPJImage@2@@Z
?setImageHeight@JPEGCompressor@ievision@@UEAAJI@Z
?setImageWidth@JPEGCompressor@ievision@@UEAAJI@Z
?setInColorSpace@JPEGCompressor@ievision@@UEAAJI@Z
?setInputComponents@JPEGCompressor@ievision@@UEAAJI@Z
?setInterlaceHandling@PNGCompressor@ievision@@UEAAJAEAH@Z
?setInterlaceHandling@PNGDecompressor@ievision@@UEAAJAEAH@Z
?setIrreversible@OPJWriter@ievision@@UEAAJH@Z
?setLogFile@IELib@ievision@@UEAAJPEBD@Z
?setOptimizeCoding@JPEGCompressor@ievision@@UEAAJH@Z
?setOutColorSpace@JPEG12Decompressor@ievision@@UEAAJI@Z
?setOutColorSpace@JPEGDecompressor@ievision@@UEAAJI@Z
?setPHYS@PNGCompressor@ievision@@UEAAJIIH@Z
?setPacking@PNGDecompressor@ievision@@UEAAJXZ
?setPalette@PNGCompressor@ievision@@UEAAJPEAXH@Z
?setProgressHandler@LibRaw@ievision@@UEAAJP6AHPEBXHHH@ZPEAX@Z
?setProgressionOrder@OPJWriter@ievision@@UEAAJH@Z
?setQuality@JPEGCompressor@ievision@@UEAAJHH@Z
?setQuality@OPJWriter@ievision@@UEAAJHN@Z
?setReadFunction@PNGDecompressor@ievision@@UEAAJPEAX0@Z
?setReduce@OPJReader@ievision@@UEAAJH@Z
?setSampleFactor@JPEGCompressor@ievision@@UEAAJHHH@Z
?setScale@JPEG12Decompressor@ievision@@UEAAJII@Z
?setScale@JPEGDecompressor@ievision@@UEAAJII@Z
?setSmoothingFactor@JPEGCompressor@ievision@@UEAAJH@Z
?setStream@OPJReader@ievision@@UEAAJPEAVStream@2@@Z
?setStream@OPJWriter@ievision@@UEAAJPEAVStream@2@@Z
?setString1@VectorString@ievision@@UEAAJHAEBVString@2@@Z
?setString2@VectorString@ievision@@UEAAJHPEBD@Z
?setStrip16@PNGDecompressor@ievision@@UEAAJXZ
?setSwap@PNGDecompressor@ievision@@UEAAJXZ
?setTRNS@PNGCompressor@ievision@@UEAAJPEAEH@Z
?setTRNStoAlpha@PNGDecompressor@ievision@@UEAAJXZ
?setText@PNGCompressor@ievision@@UEAAJAEAVPNGTextList@2@@Z
?setThreadsCount@OPJReader@ievision@@UEAAJH@Z
?setWriteFunction@PNGCompressor@ievision@@UEAAJPEAX00@Z
?setWriteJFIFHeader@JPEGCompressor@ievision@@UEAAJH@Z
?setXDensity@JPEGCompressor@ievision@@UEAAJG@Z
?setYDensity@JPEGCompressor@ievision@@UEAAJG@Z
?setupReadStream@JPEG12Decompressor@ievision@@UEAAJAEAVStream@2@I@Z
?setupReadStream@JPEGDecompressor@ievision@@UEAAJAEAVStream@2@I@Z
?setupWriteStream@JPEGCompressor@ievision@@UEAAJAEAVStream@2@I@Z
?silent_getc@CustomStream@ievision@@UEAAJAEAH@Z
?silent_getc@ExistingMemoryStream@ievision@@UEAAJAEAH@Z
?silent_getc@FileStream@ievision@@UEAAJAEAH@Z
?silent_getc@MemoryStream@ievision@@UEAAJAEAH@Z
?silent_read@CustomStream@ievision@@UEAAJPEAX_JAEA_J@Z
?silent_read@ExistingMemoryStream@ievision@@UEAAJPEAX_JAEA_J@Z
?silent_read@FileStream@ievision@@UEAAJPEAX_JAEA_J@Z
?silent_read@MemoryStream@ievision@@UEAAJPEAX_JAEA_J@Z
?silent_write@CustomStream@ievision@@UEAAJPEBX_JAEA_J@Z
?silent_write@ExistingMemoryStream@ievision@@UEAAJPEBX_JAEA_J@Z
?silent_write@FileStream@ievision@@UEAAJPEBX_JAEA_J@Z
?silent_write@MemoryStream@ievision@@UEAAJPEBX_JAEA_J@Z
?simpleProgression@JPEGCompressor@ievision@@UEAAJXZ
?size@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UEBAJAEAH@Z
?size@CustomStream@ievision@@UEAAJAEA_J@Z
?size@ExistingMemoryStream@ievision@@UEAAJAEA_J@Z
?size@FileStream@ievision@@UEAAJAEA_J@Z
?size@MemoryStream@ievision@@UEAAJAEA_J@Z
?sort@VectorString@ievision@@UEAAJH@Z
?startCompress@JPEGCompressor@ievision@@UEAAJH@Z
?startDecompress@JPEG12Decompressor@ievision@@UEAAJXZ
?startDecompress@JPEGDecompressor@ievision@@UEAAJXZ
?swap@?$BaseVector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ievision@@UEAAJAEAV12@@Z
?tell@CustomStream@ievision@@UEAAJAEA_J@Z
?tell@ExistingMemoryStream@ievision@@UEAAJAEA_J@Z
?tell@FileStream@ievision@@UEAAJAEA_J@Z
?tell@MemoryStream@ievision@@UEAAJAEA_J@Z
?unpack@LibRaw@ievision@@UEAAJHAEAH@Z
?write@Stream@ievision@@UEAAJPEBX_J@Z
?writeCoefficients@JPEGCopy@ievision@@UEAAJAEAVJPEGCompressor@2@PEAX@Z
?writeComponentSample@JP2KImage@ievision@@UEAAJHHHI@Z
?writeEnd@PNGCompressor@ievision@@UEAAJXZ
?writeInfo@PNGCompressor@ievision@@UEAAJXZ
?writeMarker@JPEGCompressor@ievision@@UEAAJHPEAXI@Z
?writeRowRGB8@JP2KImage@ievision@@UEAAJHHPEBE0H@Z
?writeRows@PNGCompressor@ievision@@UEAAJPEAXI@Z
?writeScanlines@JPEGCompressor@ievision@@UEAAJPEAXIAEAI@Z
?zcompress@InputOutput@ievision@@UEAAJAEAVStream@2@0H@Z
?zdecompress@InputOutput@ievision@@UEAAJAEAVStream@2@0@Z
iev_IELib_create
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
543KB
Virtual Size
543KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
295KB
Virtual Size
923KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
76KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=23, id=259, version=26213,
count=213, id=261, version=26213,
count=14, id=199, version=41118,
count=60, id=261, version=26706,
count=33, id=260, version=26706,
count=13, id=259, version=26706,
count=9, id=257, version=26213,
count=135, id=1, productName=Unmarked objects,
count=30, id=260, version=26213,
count=169, id=260, version=27045,
count=121, id=261, version=27045,
count=1, id=256, version=27045,
count=1, id=255, version=27045,
count=1, id=151,
count=1, id=258, version=27045,
App/ImageTuner64/itpr.dll
- SHA256 8dd5eeff1325ebd066df1fdf3f379fa25f7328b367b2e337cd98ca91dc436598
- MD5 243180cb1538a9b2ec675a657aa04882
- SHA1 bf0986be1123cfd5f957bdb0447136469e08c1e2
- SHA512 ef29bba4fba5ecdb262ac90ac112187cde81e109c4981c1b2511904e31676161a80a1026f6395b34f8e7c17584d797a9b34f9eec1c15fc9b99045c69f0a1201b
- SSDEEP 12288:MNt5sxeuGGFN1Tam1IljfSPosK5Cvt3zFZa0j4Bic3Mbqg1i:A2ekNRKljf8jK5Cvt3jGN3xei
- TLSH T19AC42301EA846D86D0DEE4F5A4F3CE801BB266B56D1D05C656E563021FF69E0FC3C8AE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
f2:42:2f:61:94:f6:02:99:10:ee:04:ae:46:18:6d:d5:b7:6d:f7:96:7b:58:67:ab:f4:04:ae:56:ea:97:7b:5d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Burnaware S.L.,O=Burnaware S.L.,ST=Málaga,C=ES
Chains
Aug 2, 2022
CN=Burnaware S.L.,O=Burnaware S.L.,ST=Málaga,C=ES
Subject
CN=Burnaware S.L.,O=Burnaware S.L.,ST=Málaga,C=ES
Serial Number
ee:4c:c3:0a:8d:fe:40:09:93:7f:96:02:27:4f:10:ec
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 19, 2022 - Apr 19, 2023
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 11, 2022 - Aug 10, 2033
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 2, 2019 - Jan 18, 2038
Minor OS version
0
Major OS version
5
Entry point
811009
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
GetDays
GetMode
GetVersion
RegisterApplication
TMethodImplementationIntercept
Name
Size
167KB
Virtual Size
648KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
36KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
316KB
Virtual Size
320KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
ImageTunerPortable.exe
- IMPHASH 32f3282581436269b3a75b6675fe3e08
- SHA256 f9a4525a27269be6b5cbc1b0788f65bfda1d22855c6d2fff9fa90d05343af327
- MD5 a00ca306549c3d2310f5d04a0400c8c8
- SHA1 4ae6379444011c458ae1fb51d4d6ef5840a5d975
- SHA512 ee1d6035889b183296c1c45d77e8131d20db964472506e3bb7fdc72e12e6ccd272825dd2656d58b417d7f80a43e40770269503b5110766e3a88caa699508a6dd
- SSDEEP 3072:VqeqOYEUXPnLSeuKyjOEmLeANssUxRrzva5Xdb97o6c9jHtn16p8osnBV0mp0TLh:UEUXpy6zeBnRGb9+jNnQCLBVwB
- TLSH T1D514F142EBE5D07BF6B10FF12A768A418EB6FD2408749A5BA344DACD3C32195D92C707
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
14819
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
MulDiv
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA
user32
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
advapi32
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
415KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
78KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=172, id=1, productName=Unmarked objects,
count=12, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
$PLUGINSDIR/MoreInfo.dll
- IMPHASH 149adf074d317fbf0d2f17314bd18969
- SHA256 227a4fc9408a44faa5eca608a974bd536814f97b8a4d28b4cac479727167b026
- MD5 bd393029cc49b415b6c9aeb8a4936516
- SHA1 c67fd92fffd18941bed41bfd6ac4f3b04fd123df
- SHA512 3bb8e5cf4bea7e8adaa62196e58fff9031f49fd4efa78e5bd3e4b9c4e9ba1523864567521793053595d90abec719761a5964ff3abe04b93b24d52e5ffa4c1f96
- SSDEEP 96:LEjAlUFPxXJugoImuaKbkBSEPTpsxKaVQ4Ad:gjAiFPxXJugoImJKQk8yxKaVVe
- TLSH T1EEE1603263F441EDF9DB0B346C334B291D75BC21EA21957F2691098D3DB1A44EE227B6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5017
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
t:\untgz\MoreInfo\SRC\Release\MoreInfo.pdb
user32
wsprintfW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
kernel32
lstrlenW
lstrcpyW
lstrcpynW
lstrcatW
GlobalAlloc
GetSystemDirectoryW
GlobalFree
GetComments
GetCompanyName
GetFileDescription
GetFileVersion
GetInternalName
GetLegalCopyright
GetLegalTrademarks
GetOSUserinterfaceLanguage
GetOriginalFilename
GetPrivateBuild
GetProductName
GetProductVersion
GetSpecialBuild
GetUserDefined
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
188B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=13, id=1, productName=Unmarked objects,
count=2, id=113, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, productName=Unmarked objects (old),
count=1, id=120, productName=VS2005 build 50727, version=50727,
$PLUGINSDIR/System.dll
- IMPHASH 039bcbc605477e8e87ec550c2e60e748
- SHA256 7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af
- MD5 bf712f32249029466fa86756f5546950
- SHA1 75ac4dc4808ac148ddd78f6b89a51afbd4091c2e
- SHA512 13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4
- SSDEEP 192:0N2gQuUwXzioj4KALV2upWzVd7q1QDXEbBZ8KxHdGzyS/Kx:rJoiO8V2upW7vQjS/
- TLSH T1DC3229328B60C1F2D561C274496B3A3367B9761420B04D67DFB78446EC16AD66E3E327
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
10024
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary
user32
wsprintfW
ole32
CLSIDFromString
StringFromGUID2
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
963B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
64B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
588B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=21, id=1, productName=Unmarked objects,
count=6, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=4, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
$PLUGINSDIR/UAC.dll
- IMPHASH c4a726be6ec458c19b16bf3893cf4bc1
- SHA256 c5ab2926c268257122d0342739e73573d7eeda34c861bc7a68a02cbc69bd41af
- MD5 a88baad3461d2e9928a15753b1d93fd7
- SHA1 bb826e35264968bbc3b981d8430ac55df1e6d4a6
- SHA512 5edcf46680716930da7fd1a41b8b0426f057cf4becefb3ee84798ec8b449726afb822fb626c4942036a1ae3bb937184d1f71d0e45075abb5bf167f5d833df43a
- SSDEEP 192:qP6KdXy+Yo7e1J8qC25a5mDFmCLGUCVGpU6uNck87I0S/TDqwyTq+:q/q3Pgd5mx6VkEck87ILCTN
- TLSH T1CC526C5421D84BBFD24156383ADB776346B9FB316C62818FC6A349CB6871693A93E302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11694
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetLastError
lstrcmpiW
GetCurrentThreadId
GetProcAddress
GetCommandLineW
UnmapViewOfFile
WaitForSingleObject
GetCurrentProcessId
SetEvent
GetVersionExW
SetCurrentDirectoryW
MapViewOfFile
Sleep
OpenProcess
GetExitCodeProcess
GetExitCodeThread
CreateThread
CreateFileMappingW
CreateEventW
lstrlenW
GlobalAlloc
CreateProcessW
GetLastError
FormatMessageW
LocalFree
GlobalFree
CloseHandle
GetModuleFileNameW
lstrcatW
GetPrivateProfileIntW
GetPrivateProfileStringW
DuplicateHandle
LoadLibraryA
user32
SetWindowsHookExW
DispatchMessageW
TranslateMessage
IsDialogMessageW
PeekMessageW
MsgWaitForMultipleObjects
DefWindowProcW
PostMessageW
SetForegroundWindow
CreateWindowExW
GetWindowThreadProcessId
CallWindowProcW
SetWindowPos
GetWindowRect
UnhookWindowsHookEx
GetClassNameW
CallNextHookEx
CharNextW
DialogBoxParamW
MessageBoxW
EndDialog
SetWindowLongW
LoadImageW
GetWindowLongW
EnableWindow
ShowWindow
wsprintfW
LoadStringW
GetDlgItem
SendMessageW
DestroyWindow
advapi32
GetUserNameW
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
LookupPrivilegeValueW
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
OpenThreadToken
AdjustTokenPrivileges
OpenProcessToken
shell32
ShellExecuteExW
ole32
CoInitialize
_
Name
.text
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
892B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=79, id=1, productName=Unmarked objects,
count=11, id=93, version=2179,
count=3, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/execDos.dll
- IMPHASH a5d239ed12c9442d63c73cb9ff7cad0e
- SHA256 720be35cd1b4a333264713dc146b4ad024f3a7ad0644c2d8c6fcedd3c30e8a1f
- MD5 0deb397ca1e716bb7b15e1754e52b2ac
- SHA1 fbb9bcf872c5dbb4ca4c80fb21d41519bc273ef5
- SHA512 507db0bee0897660750007e7ce674406acf9e8bf942cf26ded5654c07682757b07c9eb767bead0966478abc554dc9a6461c4288dc35d12cacfadad4c128f1bb7
- SSDEEP 96:J++xDiP4p7t7dNOt3stxtRFFXxGD6qxlnKE6ttdH3r3:Rx9pJ7jQs5toD6Cln/6tt1
- TLSH T153C1E73AF2E409B3C2A806343EA6A42B17F9D02B071409B7876321CC6CD0DB8FE74256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
6324
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalFree
Sleep
lstrcatW
lstrcmpiW
TerminateProcess
ReadFile
GetExitCodeProcess
PeekNamedPipe
CreateFileW
FlushFileBuffers
WriteFile
lstrlenW
CloseHandle
CreateProcessW
DuplicateHandle
GetCurrentProcess
CreatePipe
GetProcAddress
GetModuleHandleW
GlobalAlloc
GetExitCodeThread
WaitForSingleObject
CreateThread
lstrcpyW
lstrcpynW
user32
wsprintfW
GetClassNameW
GetDlgItem
FindWindowExW
SendMessageW
exec
isdone
wait
Name
.text
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
20B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
334B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=32, id=1, productName=Unmarked objects,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=170, productName=VS2010 build 30319, version=30319,
count=1, id=155, productName=VS2010 build 30319, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
$PLUGINSDIR/newadvsplash.dll
- IMPHASH 7efb019e000b6e0291c32d00fe622590
- SHA256 0a70cc4b93d87ecd93e538cfbed7c9a4b8b5c6f1042c6069757bda0d1279ed06
- MD5 55a723e125afbc9b3a41d46f41749068
- SHA1 01618b26fec6b8c6bdb866e6e4d0f7a0529fe97c
- SHA512 559157fa1b3eb6ae1f9c0f2c71ccc692a0a0affb1d6498a8b8db1436d236fd91891897ac620ed5a588beba2efa43ef064211a7fcadb5c3a3c5e2be1d23ef9d4c
- SSDEEP 96:/VV0Rwtvrm2nQujIvP9dir3UniV/zRzVR3rN3k8Jd18tsPcaqhx:/VV0KtC2yH9d83BzVR53kEQFaq
- TLSH T17702C73972C169F3D26B05F82D526B2E0FEEA035135650228B33A4DA3DA0353FD26747
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6913
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleW
CloseHandle
WaitForSingleObject
GetProcAddress
lstrlenW
CreateThread
GetCurrentThreadId
Sleep
lstrcpyW
lstrcmpiW
GlobalAlloc
GlobalFree
lstrcpynW
user32
DefWindowProcW
DestroyWindow
IsWindowVisible
UnregisterClassW
EnumDisplaySettingsW
SendMessageW
wsprintfW
SystemParametersInfoW
EndPaint
SetWindowPos
LoadCursorW
RegisterClassW
CreateWindowExW
IsWindow
GetMessageW
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
SetWindowLongW
GetClientRect
TranslateMessage
DispatchMessageW
PostMessageW
SetWindowRgn
BeginPaint
gdi32
CombineRgn
GetObjectW
CreateCompatibleDC
SelectObject
GetDIBits
CreateRectRgn
DeleteObject
winmm
timeSetEvent
PlaySoundW
timeKillEvent
oleaut32
OleLoadPicturePath
msvcrt
_lseek
memset
memcmp
_read
memcpy
_wopen
_close
wcstol
hwnd
play
show
stop
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
318B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
596B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, productName=Unmarked objects (old),
count=3, id=19, version=8022,
count=57, id=1, productName=Unmarked objects,
count=9, id=19, version=8034,
count=2, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
$PLUGINSDIR/newtextreplace.dll
- IMPHASH 42624ab02b71999959eb0f4168f609bb
- SHA256 156b9b583399faf13c4d46b89339fb0f7f38dc847ac2d7872178d8e3998b9734
- MD5 b5358341df2cb171876a5f201e31a834
- SHA1 df34750ea5504274be5ff8ddd306b49e302d04f9
- SHA512 821dc42e24fa2d44a1d4d16b26c3da2688dac0fa44a266e38da2aff706c91440d83a87abc74131930e6c38a44a0c5e627db2d045375fde147e0edd3276f4b014
- SSDEEP 192:GGhRfigbU26niqo9m+9k15AA1NrW0QfaDx3nxNLr6s+:GIwgSnhv/IaDx3n6X
- TLSH T11832965F729645F6EA2259B00FCFF67B8E90C005402B4F6CB79A896CB933E84710D195
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4288
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
AddAtomA
CloseHandle
CopyFileW
CreateFileW
FindAtomA
GetAtomNameA
GetFileAttributesW
GetFileSize
GlobalAlloc
GlobalFree
MultiByteToWideChar
ReadFile
SetFileAttributesW
SetFilePointer
WideCharToMultiByte
WriteFile
lstrcmpiW
lstrcpyW
lstrcpynA
lstrcpynW
lstrlenA
lstrlenW
msvcrt
__dllonexit
_assert
_errno
abort
fflush
free
malloc
memset
user32
CharUpperA
wsprintfW
_FillReadBuffer
_FindInFile
_FreeReadBuffer
_ReplaceInFile
_Unload
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
360B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
456B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
$PLUGINSDIR/nsExec.dll
- IMPHASH 8700d0ebbb41c81ea52718af1ab70a93
- SHA256 d29afce2588d8dd7bb94c00ca91cac0e85b80ffa6b221f5ffcb83a2497228eb2
- MD5 132e6153717a7f9710dcea4536f364cd
- SHA1 e39bc82c7602e6dd0797115c2bd12e872a5fb2ab
- SHA512 9aeb0b3051ce07fb9f03dfee7cea4a5e423425e48cb538173bd2a167817f867a30bd4d27d07875f27ca00031745b24547030b7f146660b049fa717590f1c77e1
- SSDEEP 96:M/SspqrIYxLPEQhThvov3TE4/2Sa5P9QFFYzOx4uF3sbSEI5LP39sQvM:M/QUG7lhvov36S5FcUjliSEI5LuQ
- TLSH T1A4C1E5B656D909F3E41D00B83E31241F43FEE5260B7A03719E8B2AC61CD2AB6FD58791
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrcpyW
MultiByteToWideChar
lstrlenA
lstrcmpiW
lstrlenW
ExitProcess
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
lstrcpynW
GetCommandLineW
Sleep
TerminateProcess
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
GetModuleHandleW
GetTickCount
GetStartupInfoW
CreatePipe
GetVersionExW
GlobalLock
DeleteFileW
lstrcatW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
CopyFileW
GetTempFileNameW
GlobalFree
GlobalAlloc
GetModuleFileNameW
GetProcAddress
PeekNamedPipe
GetCurrentProcess
user32
CharPrevW
CharNextW
SendMessageW
FindWindowExW
wsprintfW
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
Exec
ExecToLog
ExecToStack
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
454B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=46, id=1, productName=Unmarked objects,
count=3, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
$PLUGINSDIR/registry.dll
- IMPHASH f450890bf454de37198f435d5832e67d
- SHA256 acb79c55b3b9c460d032a6f3aaf6c642bf8c1d450e23279d091cc0c6ca510973
- MD5 2880bf3bbbc8dcaeb4367df8a30f01a8
- SHA1 cb5c65eae4ae923514a67c95ada2d33b0c3f2118
- SHA512 ca978702ce7aa04f8d9781a819a57974f9627e969138e23e81e0792ff8356037c300bb27a37a9b5c756220a7788a583c8e40cc23125bcbe48849561b159c4fa3
- SSDEEP 768:HsKZwhFkGOr0Ga4+8DFFHR4mmw5+64fuKwX13:HLKmGOr0Ga4+8DFFHRrmw5+m
- TLSH T117D20980D64091A5E4F678FEB7D2633B462D6BB00553A09713F33E57AD68704BB2392E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19271
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrlenA
lstrcpyW
FindClose
FindFirstFileW
lstrcmpW
GetFileSize
SetFilePointer
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
WriteFile
CloseHandle
lstrlenW
lstrcpynW
lstrcmpiW
lstrcatW
GlobalAlloc
ReadFile
GlobalFree
user32
wsprintfW
CharUpperW
SendMessageW
FindWindowExW
GetDlgItem
advapi32
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegCloseKey
_Close
_CopyKey
_CopyValue
_CreateKey
_DeleteKey
_DeleteKeyEmpty
_DeleteValue
_Find
_HexToStr
_HexToStrUTF16LE
_KeyExists
_MoveKey
_MoveValue
_Open
_Read
_ReadExtra
_RestoreKey
_SaveKey
_StrToHex
_StrToHexUTF16LE
_Unload
_Write
_WriteExtra
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
356KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=19, version=8034,
count=33, id=1, productName=Unmarked objects,
count=1, id=21, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,