Installer (1).zip
- SHA256 e4002f1d34937cf82adc2b717df8012e9107651236827c1534a075edd61674a2
Password
2026
Overview
overview
7Static
static
3Installer/...er.exe
windows10-2004-x64
5Installer/...ub.dll
windows10-2004-x64
1Installer/...lg.dll
windows10-2004-x64
1Installer/...Ex.dll
windows10-2004-x64
1Installer/...xt.dll
windows10-2004-x64
1Installer/...es.dll
windows10-2004-x64
1Installer/...xe.dll
windows10-2004-x64
1Installer/...nt.dll
windows10-2004-x64
1Installer/...ix.dll
windows10-2004-x64
1Installer/...st.dll
windows10-2004-x64
1Installer/...sc.dll
windows10-2004-x64
1Installer/...sg.dll
windows10-2004-x64
1Installer/...SP.dll
windows10-2004-x64
1Installer/...st.dll
windows10-2004-x64
1Installer/...mI.dll
windows10-2004-x64
1Installer/...ax.dll
windows10-2004-x64
7Installer/...id.dll
windows10-2004-x64
1Installer/...19.dll
windows10-2004-x64
1Installer/...ge.dll
windows10-2004-x64
1Installer/...nt.dll
windows10-2004-x64
1Installer/...ix.exe
windows10-2004-x64
7Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Installer/Installer.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Installer/act/OneCoreUAPCommonProxyStub.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Installer/act/Serilg.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Installer/act/SystemEx.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Installer/act/bin/shellext.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Installer/act/extensions/MsMpRes.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Installer/act/extensions/OfflineScannerShell.exe.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Installer/act/extensions/ProtectionManagement.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Installer/act/extensions/sfcdix.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Installer/act/lib/EppManifest.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Installer/act/lib/MpAsDesc.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Installer/act/lib/MpEvMsg.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Installer/act/local/DefenderCSP.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Installer/act/local/EppManifest.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Installer/act/mshtmI.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Installer/act/mstscax.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
Installer/act/ncuvid.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
Installer/act/prm0019.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
Installer/act/windows.storage.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
Installer/act/x64_x32/ProtectionManagement.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
Installer/alternative/Fix.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
10 signatures
150 seconds
General
- Target Installer (1).zip
- Size 30.0MB
- Sample260608-vec7ysds3n
- SHA256 e4002f1d34937cf82adc2b717df8012e9107651236827c1534a075edd61674a2
- MD5 212449c92e02050ec9c34df58850f196
- SHA1 8b2d432c9e00de860f50d746fee203257553db1a
- SHA512 3cc59a174dd5459267dfd2502934607f3bd9efe80b81057d67979f6a270ba4a2531f960c1a15322a05f287ee484fa71b9b1e64547f85cc262ad497b149de109c
- SSDEEP 786432:MBMtQg6MzBNwcwfgknU9RTqQExeX18QT2O77y/SZ4e:6cPmgkU9cWX1RaOPy/SKe
- TLSH T1F06733DA754944F7F94ED02A07681DFB07B258C36EC2764BD18E3A6CCC499422798EBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 11 IoCs
Checks for missing Authenticode signature.
resource unpack001/Installer/act/Serilg.dll unpack001/Installer/act/bin/shellext.dll.mui unpack001/Installer/act/extensions/MsMpRes.dll.mui unpack001/Installer/act/extensions/OfflineScannerShell.exe.mui unpack001/Installer/act/extensions/ProtectionManagement.dll.mui unpack001/Installer/act/lib/EppManifest.dll.mui unpack001/Installer/act/lib/MpAsDesc.dll.mui unpack001/Installer/act/lib/MpEvMsg.dll.mui unpack001/Installer/act/mshtmI.dll unpack001/Installer/act/mstscax.dll unpack001/Installer/act/prm0019.dll - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/Installer/Installer.exe unpack001/Installer/alternative/Fix.exe
File Explorer
-
Installer (1).zip.zip 30.0MB
-
Installer/!!README!!.txt5KB
-
Installer/Installer.exe.exe 3.1MB
-
Installer/act/ALI213.ini2KB
-
Installer/act/GameSettings.ini4KB
-
Installer/act/Localization.json8KB
-
Installer/act/OneCoreUAPCommonProxyStub.dll.dll 7.9MB
-
Installer/act/Serilg.dll.dll 125KB
-
Installer/act/SystemEx.dll.dll 23KB
-
Installer/act/bin/ProtectionManagement.mfl98KB
-
Installer/act/bin/ProtectionManagement_Uninstall.mfl1KB
-
Installer/act/bin/shellext.dll.mui.dll 3KB
-
Installer/act/config.jet697B
-
Installer/act/eula.1042.txt17KB
-
Installer/act/eula.2052.txt17KB
-
Installer/act/extensions/MsMpRes.dll.mui.dll 9KB
-
Installer/act/extensions/OfflineScannerShell.exe.mui.dll 8KB
-
Installer/act/extensions/ProtectionManagement.dll.mui.dll 38KB
-
Installer/act/extensions/sfcdix.dll.dll 10.0MB
-
Installer/act/globdata.ini1KB
-
Installer/act/kernel.bin518KB
-
Installer/act/lib/EppManifest.dll.mui.dll 3KB
-
Installer/act/lib/MpAsDesc.dll.mui.dll 57KB
-
Installer/act/lib/MpEvMsg.dll.mui.dll 47KB
-
Installer/act/local/DefenderCSP.dll.dll 205KB
-
Installer/act/local/EppManifest.dll.dll 716KB
-
Installer/act/mshtmI.dll.dll 22.4MB
-
Installer/act/mstscax.dll.dll 8.0MB
-
Installer/act/ncuvid.dll.dll 19.0MB
-
Installer/act/overrideAutodetect.lua162B
-
Installer/act/prm0019.dll.dll 8.2MB
-
Installer/act/windows.storage.dll.dll 7.7MB
-
Installer/act/x64_x32/ProtectionManagement.dll.dll 678KB
-
Installer/act/x64_x32/ProtectionManagement.mof32KB
-
Installer/act/x64_x32/ProtectionManagement_Uninstall.mof2KB
-
Installer/alternative/Fix.exe.exe 3.1MB
-
Installer/config.jet697B
Installer/!!README!!.txt
- SHA256 f5bc5765c2b5deb8bf4b06e2d945ca59c5b202fd83f571c162212d7bf8e1d87e
- MD5 080fbc9fc7257539fca2d30cbc22304e
- SHA1 cd8ffa57bdb0a3302224406ccebc2b8f9526c285
- SHA512 0ba453ab4e54e61faea12b731617b7c0764c3614b6084b6965607141ff1566e8489e31d002760643fa669cad42aa18b3e09f5e2e14fefa48029caca97777dbc6
- SSDEEP 48:JYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYG:z
- TLSH T10DC1926BEF9B8783495221660BA70E47A404501FE6D786C425B982A19B50BA16AB03FD
- MD5 SHA1 SHA512 SSDEEP TLSH
Installer/Installer.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 96441ea144d5abcef928718595c1a8eb951003e92d86b143a23f9a0a26301ec2
- MD5 cddd4444c5c5edb82c189ae676c75db6
- SHA1 a703b603259e6c04bc4f3893d83736ecb8ad07fb
- SHA512 408fbf611cc4e06248fb987ec903fa7a3aeb65726c46487a013bc6d4860665605d67e6d5c70527c53cc704abdedaedbde7425e407356b929a019191b861d4fba
- SSDEEP 49152:6NHtmKoLRTdO63aWJw1uQaDwyxRe72qsifnQ0i:62hgbwZQI
- TLSH T19EE56C427CD445FED068733188F27196BE61B8080F3667D32F626AA82FB67D14C3A765
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
2026
PE Signature issue
Digest
4a:ed:98:1d:83:a1:c0:00:a2:0d:68:4f:39:29:95:91:f5:62:48:c0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=*.ifixit.com
Chains
Jun 8, 2026
CN=*.ifixit.com
Subject
CN=*.ifixit.com
Serial Number
08:e0:aa:cf:eb:43:5c:8c:e3:93:6a:c6:3e:18:4c:b4
Issuer
CN=Amazon RSA 2048 M01
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Mar 23, 2026 - Oct 6, 2026
Minor OS version
1
Major OS version
6
Entry point
467168
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
975KB
Virtual Size
974KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
60KB
Virtual Size
352KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
118KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Installer/act/ALI213.ini
- SHA256 bbd3bfc1f61c8eec3bd404478226e9b2e509082f1a68341095a7cab6eb9a9383
- MD5 c2a1e48fc987e950cb2f447027a3af72
- SHA1 b10d6503095805d0a4ff725bd5014ff5c97b49e6
- SHA512 ac79b7d1ca93cd7784288b5d595a356a2192aa761457465fb3fb4b089c70a8c394f26e4c700307a4ec4bcd126a6580fb80ad34e6c6e62cb1c0a58fe288f2e4c2
- TLSH T18051508FF7CE104F2306608B69A70C91B1E3B1482C230996FC6DBB00AE05E1EE44247F
- MD5 SHA1 SHA512 TLSH
Installer/act/GameSettings.ini
- SHA256 f6b23c96431deed5152dedb5c41a73cfc3a28fcfa644a31f4c5255dc3f612021
- MD5 e8520eabc3656c930a8513885f98ed3d
- SHA1 a1549127bf7997e630c525fa3c7e42ed74382927
- SHA512 774bbaa754859a8d7991c975d18316981be0e4c63654bb7f25561d523f82a3653ec0cefe948981704702e4c3f176c47452459bbfd86b77440d15bc7bcb148ff6
- SSDEEP 96:ETmU1EeU3IyA6zVDdOHzEGbrOS9++Z0WG7++NzPPdSB6v5LFDY:pUvU0inOAGvLZ0WG7++NzPPdSB6v5Ly
- TLSH T108A194A7512E009AC917E2A089E4338373D531CA17D91B7C7FCE111E6F46B26D22662F
- MD5 SHA1 SHA512 SSDEEP TLSH
Installer/act/Localization.json
- SHA256 0ed2630f4d0450117719a6200426a1e1b78eeb9b100a0fb8e4cc10b7995e3aa2
- MD5 53efcb8e8d93ca156a3962254cde417e
- SHA1 dca16a76e1345958a33cc09d9dbbf080adc0aead
- SHA512 63fd95544513f9f6716d39c5e9d732fb2b30927e0e43717846dcc1d59f80e5dd31e8f302d169f7d5f3a7d897adf264cab22b6e610f35409968b3a5b04d5f4fd6
- SSDEEP 192:Q7WjQPr8cHgeaxcE57vTQNZfl0RB7vTQNZflBa7vTQNZflhWhN7vTQNZfl1B:iXrUcIspERspBAsphWhdsp1B
- TLSH T1D9020114FB401CAB822261A16405FC1774A901FFAB29B7FF764C811E6BAD02ED477AE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Installer/act/OneCoreUAPCommonProxyStub.dll
- IMPHASH 0ed0a8a35ae8832788929586d3fafa12
- SHA256 c9362fb3ccfb865da7194ac989dfade277e44d7049230b4148581efc687c99ff
- MD5 dc70e2fa1684815f82fb2fd5acf258ad
- SHA1 53bed8ab4e38f6fbfd4e05fd86cda9eec77378f7
- SHA512 34f643ff66322073b1e0d669137d5e6c7ead648baf7cbedba6c361fea4f6d852821b284de41b18a011c85f67f882ea949ad18af8627f16d136eff42225766928
- SSDEEP 24576:aIQbD1BNlg7CTHBTCj05vorkPHN00Kgc33DeyvQL0Ff:YbD1BNwCTHBTCo5Q4PHS0/c3HO0Ff
- TLSH T1AA86618FBA4548A7C43FA33185AF0E6CDBB65D10A2E1835A409471248E7B3CDBF356D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
2026
Digest
35:d6:3c:fe:32:7d:98:1a:6e:e9:07:6d:21:22:9b:6c:6f:f7:3f:43:89:b3:47:14:a3:aa:4b:f5:a9:b4:df:06
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 22, 2025
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:a8:82:e6:b8:ac:1c:5d:5f:f0:00:00:00:00:04:a8
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 12, 2024 - Sep 11, 2025
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:7F00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f0:2a:7c:1d:59:3b:e6:1f:ad:00:01:00:00:01:f0
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
92432
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
OneCoreUAPCommonProxyStub.pdb
msvcrt
_XcptFilter
free
memcmp
_amsg_exit
__C_specific_handler
_initterm
malloc
memcpy
rpcrt4
CStdStubBuffer_Connect
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
NdrStubCall3
NdrGetUserMarshalInfo
RpcRaiseException
NdrClientCall3
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrCStdStubBuffer2_Release
NdrOleAllocate
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
CStdStubBuffer_Invoke
NdrStubForwardingFunction
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_AddRef
NdrOleFree
api-ms-win-core-libraryloader-l1-2-0
DisableThreadLibraryCalls
api-ms-win-core-com-midlproxystub-l1-1-0
NdrProxyForwardingFunction5
ObjectStublessClient6
NdrProxyForwardingFunction10
NdrProxyForwardingFunction9
NdrProxyForwardingFunction12
NdrProxyForwardingFunction7
NdrProxyForwardingFunction4
CStdStubBuffer2_CountRefs
CStdStubBuffer2_Connect
CStdStubBuffer2_Disconnect
NdrProxyForwardingFunction11
NdrProxyForwardingFunction6
NdrProxyForwardingFunction19
NdrProxyForwardingFunction16
NdrProxyForwardingFunction8
NdrProxyForwardingFunction20
NdrProxyForwardingFunction15
NdrProxyForwardingFunction14
NdrProxyForwardingFunction17
NdrProxyForwardingFunction18
ObjectStublessClient4
CStdAsyncStubBuffer_QueryInterface
NdrProxyForwardingFunction13
CStdAsyncStubBuffer_Invoke
CStdAsyncStubBuffer_AddRef
CStdAsyncStubBuffer_Connect
CStdAsyncStubBuffer_Disconnect
CStdAsyncStubBuffer_Release
ObjectStublessClient30
ObjectStublessClient31
ObjectStublessClient25
ObjectStublessClient3
ObjectStublessClient7
ObjectStublessClient8
NdrProxyForwardingFunction21
CStdStubBuffer2_QueryInterface
NdrProxyForwardingFunction3
ObjectStublessClient5
ObjectStublessClient11
ObjectStublessClient9
ObjectStublessClient10
ObjectStublessClient12
ObjectStublessClient14
ObjectStublessClient15
ObjectStublessClient13
ObjectStublessClient17
ObjectStublessClient16
ObjectStublessClient18
ObjectStublessClient20
ObjectStublessClient19
ObjectStublessClient21
ObjectStublessClient22
ObjectStublessClient27
ObjectStublessClient28
ObjectStublessClient23
ObjectStublessClient26
ObjectStublessClient29
ObjectStublessClient24
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-processthreads-l1-1-0
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
TerminateProcess
api-ms-win-core-sysinfo-l1-1-0
GetTickCount
GetSystemTimeAsFileTime
api-ms-win-core-rtlsupport-l1-1-0
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
api-ms-win-core-errorhandling-l1-1-0
UnhandledExceptionFilter
SetUnhandledExceptionFilter
api-ms-win-core-marshal-l1-1-0
HMENU_UserFree64
HICON_UserFree64
HGLOBAL_UserSize
HMENU_UserMarshal64
HACCEL_UserFree
HBITMAP_UserFree
HGLOBAL_UserUnmarshal64
HMONITOR_UserFree
HMENU_UserSize
HBITMAP_UserUnmarshal64
HMENU_UserSize64
HBITMAP_UserMarshal64
HGLOBAL_UserFree64
HMONITOR_UserMarshal
HACCEL_UserSize64
HWND_UserUnmarshal
HWND_UserFree
HWND_UserFree64
HWND_UserSize64
HWND_UserSize
HWND_UserMarshal
HWND_UserMarshal64
HWND_UserUnmarshal64
HACCEL_UserFree64
HMENU_UserUnmarshal64
HMENU_UserMarshal
HMENU_UserFree
HMONITOR_UserSize64
HICON_UserUnmarshal
HGLOBAL_UserUnmarshal
HMONITOR_UserFree64
HGLOBAL_UserSize64
HMENU_UserUnmarshal
HACCEL_UserUnmarshal64
HMONITOR_UserSize
HBITMAP_UserSize
HGLOBAL_UserMarshal64
HMONITOR_UserMarshal64
HACCEL_UserMarshal
HICON_UserMarshal64
HICON_UserMarshal
HACCEL_UserUnmarshal
HMONITOR_UserUnmarshal64
HGLOBAL_UserMarshal
HACCEL_UserSize
HBITMAP_UserFree64
HICON_UserUnmarshal64
HACCEL_UserMarshal64
HBITMAP_UserMarshal
HBITMAP_UserSize64
HICON_UserFree
HBITMAP_UserUnmarshal
HICON_UserSize64
HICON_UserSize
HMONITOR_UserUnmarshal
HGLOBAL_UserFree
api-ms-win-core-com-l1-1-0
CoTaskMemRealloc
CoTaskMemFree
api-ms-win-core-delayload-l1-1-1
ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-0
DelayLoadFailureHook
combase
ord140
DllCanUnloadNow
DllGetClassObject
GetProxyDllInfo
Name
.text
Size
96KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6.9MB
Virtual Size
6.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
52KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
296B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
756KB
Virtual Size
755KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=26, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=259, version=27412,
count=25, id=260, version=27412,
count=205, id=1, productName=Unmarked objects,
count=5, id=257, version=27412,
count=1, id=256, version=27412,
count=625, id=269, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Installer/act/Serilg.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 db0a4c4a21a1ba0937d1c22095c2b0702422efd4c7a41aaa577608288a2e69fc
- MD5 181f3e3d0c509566283156816eb317ca
- SHA1 400debdd4fb9ae24719157132a87c4bfeff7fa6c
- SHA512 039d5a0013d6f0e916a86baa95452d79d4524f5c83b913170daa73e1333b2d424c0d9a74193e71ede3a0866b778781c57993806baa08833d11df825626e6d667
- SSDEEP 3072:6obKO7RaoWuUeZk/f0Sh1HlWZm1ZZTdyGFkNUMT+P65jDt:bbKKz1UeZk/Phv8lDuPa
- TLSH T18EC34C2863FC9EA1CBEE75B5A0B081810B74FC9F6077EF8E695C25F91D123094A60B57
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
2026
Minor OS version
0
Major OS version
4
Entry point
133174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/Serilog/obj/Release/netstandard2.1/Serilog.pdb
mscoree
_CorDllMain
Name
.text
Size
122KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/act/SystemEx.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a78c4d08c6726e1e560c3a47436c631847423cab95032d02ccd4e10f92e6d937
- MD5 fba0fc7ec66d149d2096ab7032f751c5
- SHA1 e2d9f46a045235548ae4d648de1d317b71531b5a
- SHA512 124966ca2827b1d11d8e49dada8e5a708047e6819fac6031d5f83150dcbad0b2935bb630304e4589845b22ce22665796c9987bd343668345875143b44f80d342
- SSDEEP 384:TZucmhNHUrP0p/gN9ro7zjLIYiVTAM+o/8E9VF0NyJWQI:8LN0IgLE7X0YipAMxkELI
- TLSH T117B26E0A9F489803CA5F5A7070D5532AC230F69A6BC2D7E7369CC1359F4338639E63E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
2026
Digest
9b:d5:2d:fb:35:36:ad:88:00:0c:63:c4:c5:ef:37:00:61:53:fe:f6:b4:ad:bf:5a:5e:61:2c:be:b0:82:ed:55
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2019191556,CN=Smartly Dressed Games Ltd.,O=Smartly Dressed Games Ltd.,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Chains
Feb 13, 2024
SERIALNUMBER=2019191556,CN=Smartly Dressed Games Ltd.,O=Smartly Dressed Games Ltd.,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2019191556,CN=Smartly Dressed Games Ltd.,O=Smartly Dressed Games Ltd.,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2019191556,CN=Smartly Dressed Games Ltd.,O=Smartly Dressed Games Ltd.,L=Calgary,ST=Alberta,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1307416c6265727461,1.3.6.1.4.1.311.60.2.1.3=#13024341
Serial Number
01:5b:2f:ef:63:1a:86:9c:b5:99:97:32:fa:03:c4:29
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 4, 2023 - Jun 22, 2024
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
19394
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Unturned\Library\Bee\artifacts\1900b0aP.dag\SystemEx.pdb
mscoree
_CorDllMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
680B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Installer/act/bin/ProtectionManagement.mfl
- SHA256 2c4b7fb581d8b6be9c0e03e5d326f74e342cd4e7d7e0f79e37f1ab4cd5015916
- MD5 4c4e0e5647ff1dc91adff6461673fd9d
- SHA1 55e93694d7cb71aaf35870daf95fd5758b77198a
- SHA512 1f19d8d569a8b4d43348ef9dcfb77f281a7ba9b2eea5b6265c1726680d0121bf466227212771bbe1c4c9923d38d60b61d9295f60f5acd772cf420aba02c8bfbd
- SSDEEP 1536:nmC1+kUNkARKacuN0ZPgA42AhY4u+xY4ur5d/V:mC1+kUNkARKacuN0ZPgA42AM3r5/
- TLSH T19BA3200BA2FC6254B6B6AB105F7640E248777F491B34C4DD968F6D5E0878E34AA307B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Installer/act/bin/ProtectionManagement_Uninstall.mfl
- SHA256 1d1186d3677d1cf17666a76e7b9635326ccf8371d9fd45188cdd7014e0a0d181
- MD5 fd0a757d59aad53a698ad07dab3ea22a
- SHA1 cb28d492d3cf643c7ae863ce4d5f2e6d9038a9b5
- SHA512 27aee87a4953b9c4afbb2e3cbd5f6614bc81172a168844e4e1d4746ed195732ce4494fa6bae75e18e7960d50afe05c5e27a232b371a1a057b80b5a50d3bfd108
- TLSH T13E2194D973F821387677AF143DB928581E9B7A902D1DC07C41004E9E09FDB54C9A6BA7
- MD5 SHA1 SHA512 TLSH
Installer/act/bin/shellext.dll.mui
- SHA256 965d0e8e10aa6b54143ee53fdddab4d741c6d98d25d98178b952ce59525fc38f
- MD5 efc6c0bdcfcc4855ffaa417c21dd974c
- SHA1 09ba48ecfb36e41e5c6cd15a26f2107b5a306e4e
- SHA512 2a69e0bf20ab668397a6d1bdeb4dff03156360eff00dec42b898e03174509de8ac05adc384db129a17e05d6d3f84b4fa82fc93331b37dce83ffd8527138c6456
- TLSH T1AC71A10F9BBB4117F0A65B304BE745C227BD7E137392A56FCF0A142924641386A90FF2
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
2026
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Installer/act/config.jet
- SHA256 7ab308abac85601d348005bbb7032c92261fa25c782a712f1b0482bd85845ede
- MD5 53a9cdbb5470cba6ec4fbafdf7ac618c
- SHA1 dd8600c6f92b975ce54f300ac854abbdddb96559
- SHA512 c501cf9bbce1186e42352612d60c1f41699c0e297bfa93a6a91ad586b8f09fcd81b00b67ca1cc52a80a227d29750739ec56a8b494fe3f679ffca0c797ccec02f
- TLSH T1CD0176308A7D243C430CCEAC3D62EB5AAA7C020F5784C41FD56D8EED1BC00A159D7352
- MD5 SHA1 SHA512 TLSH
Installer/act/eula.1042.txt
- SHA256 a75019ac38e0d3570633fa282f3d95d20763657f4a2fe851fae52a3185d1eded
- MD5 9147a93f43d8e58218ebcb15fda888c9
- SHA1 8277c722ba478be8606d8429de3772b5de4e5f09
- SHA512 cc9176027621a590a1d4f6e17942012023e3fabc3316bc62c4b17cd61ce76bf5cf270bd32da95dba7ddf3163e84114be1103a6f810ca1a05d914712895f09705
- SSDEEP 384:Ce91JzQa6Kc6ZyaMeqFjLD+f2bTdmKMvO:Ce94aUaijLD+fiTdmKMvO
- TLSH T1E0827622A3FD4618F6FB3F506EB966685E7ABC96AC3DC64D1150104E09B6E80CD70B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Installer/act/eula.2052.txt
- SHA256 a75019ac38e0d3570633fa282f3d95d20763657f4a2fe851fae52a3185d1eded
- MD5 9147a93f43d8e58218ebcb15fda888c9
- SHA1 8277c722ba478be8606d8429de3772b5de4e5f09
- SHA512 cc9176027621a590a1d4f6e17942012023e3fabc3316bc62c4b17cd61ce76bf5cf270bd32da95dba7ddf3163e84114be1103a6f810ca1a05d914712895f09705
- SSDEEP 384:Ce91JzQa6Kc6ZyaMeqFjLD+f2bTdmKMvO:Ce94aUaijLD+fiTdmKMvO
- TLSH T1E0827622A3FD4618F6FB3F506EB966685E7ABC96AC3DC64D1150104E09B6E80CD70B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Installer/act/extensions/MsMpRes.dll.mui
- SHA256 7dc00f580512cdc58fe0625234760a3564edcd5ceb27871c885aa76b901f843f
- MD5 08ea6ca706a9450d3ada3409623c17f2
- SHA1 12cb203016805c1e447e6230adfaab5208f1e91e
- SHA512 93a23c2822aac18ceb4c41b611ee8672921d3c732f31de8a3737c91bb023afe44363b2733a732c2c7cd77fe6abb654b17d53709fb882d738280c7a74999e0175
- SSDEEP 96:bRLh6zFE378xxYWYFYDYi2YqIUTY+McKBu7mfa7H67mfa7HK64ftlZSOcBz9WPEw:JIzFK78cd28sT8K6mMUmMRgAxWxBVt
- TLSH T15D126A4F96FE4151F4B6E6301F7304E20A7A7A41A378968E838FBC5D34646346B21BE7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
2026
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Installer/act/extensions/OfflineScannerShell.exe.mui
- SHA256 bd9d30abf6636560a421a2e310c56d2052a8336d2db89a85d411ab563c25a751
- MD5 4e64213c8a3679498e8c04abab65eb20
- SHA1 83de413d03c2ba285a03bef445272e564ed87050
- SHA512 423a62133d801b19001da5a1be728203f14b0701bf3e87a62972a89595e8e47af9f0de5610e84fde2e57d80d13dd20afd86ecc36eb7f79cb65d9e80f32b22c78
- SSDEEP 96:xIxJttaQESpy99V9KzEcEKLqs0xAgig9p9EjGdVUIu9Wd349bfr:xIxJfaRDAzzLgige+KWNUfr
- TLSH T1F2F1AC0FA7FE8114F4F69B300AB24AD21679BE517B34C28D868F782C5474631BB257A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
2026
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
7KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Installer/act/extensions/ProtectionManagement.dll.mui
- SHA256 0d7e9308bbeec72ffa091019d75c831be7ed9c9ec9b19273b7720ad15f7f3540
- MD5 8833d843787b0a0e68aa736eb930c403
- SHA1 ed89e93cfaf9886b0d3f00c76aa88b22ab1f767b
- SHA512 2a709586a1182e0cad075fba3afb29703546a749cf79e6f063a006f8414b9616afe6ca3b1e02ceccc877803bbb3ad7c3841432d4b42ac7eb0540c0ced0052237
- SSDEEP 384:nRQCYKhcqGFzkg8uTjDP+T6kUHuQhgg9auYk7AY54X74yX31899iWdK:nyNjDmT6kUHuyx7N074YkZK
- TLSH T17203404FBAFC9564FAA5D2700F7348D7142ABB402325D6CA968F7C69202CA3177243E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
2026
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
37KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Installer/act/extensions/sfcdix.dll
- IMPHASH 60837e4dd409d2baaa153de31ef7d8a0
- SHA256 7abc2b2b8544cd3aa9cd03e0f19fa1447c6636c3712ae4cfc5e02db3105b520e
- MD5 9eddcdce6dfe6812b282616a7de33699
- SHA1 4b30e7882dfd2643c639d6f74035a22cd28d6471
- SHA512 02ffb8a17b27754f1cbd06a814a6cd377ecec25392e08a2ec72bb6c679e922ff232d240d858ff2ff319e7f52787af5d919ab0f26cd26d2844033e2bcc5a4edfc
- SSDEEP 49152:Ml7PcvfsbYs9lYyaieo78r4y6OVof5p4F92I2q2q2q2U2d2E25Y32j:V+Xazo7U6OVI5pkL
- TLSH T1BBB6A30572E8C247FEB27A3059B752BD492E7CD19A35C39E12437BCD9F31A908963722
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
58:9b:9c:17:a4:ac:a6:25:8a:72:7f:69:16:12:2f:b4:19:2f:32:23:0d:b8:00:ad:46:61:36:16:86:01:9d:8e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=MAGIX Software GmbH,O=MAGIX Software GmbH,L=Berlin,C=DE
Chains
Aug 8, 2023
CN=MAGIX Software GmbH,O=MAGIX Software GmbH,L=Berlin,C=DE
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=MAGIX Software GmbH,O=MAGIX Software GmbH,L=Berlin,C=DE
Serial Number
02:7d:e3:d8:45:44:11:80:5d:bf:c9:db:d0:f5:12:b5
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 27, 2023 - Apr 26, 2026
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
6
Entry point
1756864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\GitLab-Runner\builds\NightlyBuild\BUILD sonic3\build\cddrvs\sfcdix\Release\sfcdix.pdb
sfscsi
?SfScsi_pnp_RescanAllDrives@@YAJXZ
?SfScsi_Terminate@@YAJPEAUHINSTANCE__@@@Z
?SfScsi_InitializeEx@@YAJPEAUHINSTANCE__@@KHPEA_WPEB_WK@Z
?SfScsi_pnp_IsDeviceInDeviceTable@@YAHPEB_W@Z
?SfScsi_pnp_FindClose@@YAJPEAUHSFCDCT_MMDEVFIND__@@@Z
?SfScsi_pnp_FindNext@@YAJPEAUHSFCDCT_MMDEVFIND__@@PEAU_tSFCDCT_FIND_MMDEV_DATA@@@Z
?SfScsi_GetDriveLetter@@YAJHHPEAU_INQUIRYDATA@@PEAH@Z
?SfPerf_Initialize@@YAJXZ
?SfScsi_pnp_FindFirst@@YAJKPEAU_tSFCDCT_FIND_MMDEV_DATA@@PEAPEAUHSFCDCT_MMDEVFIND__@@@Z
?SfScsi_pnp_Close@@YAHPEAUHSFSCSIPORT__@@@Z
?SfScsi_Close@@YAHPEAUHSFSCSIPORT__@@@Z
?SfScsi_GetIOBufferSize@@YAKPEAUHSFSCSIPORT__@@@Z
?SfScsi_Open@@YAPEAUHSFSCSIPORT__@@IIPEAK@Z
?SfScsi_pnp_Open@@YAPEAUHSFSCSIPORT__@@PEB_WPEAK@Z
?SfScsi_CloseAdapter@@YAHPEAUHSFSCSIADAPTER__@@@Z
?SfScsi_FormatInquiryName@@YAHPEA_WPEAU_INQUIRYDATA@@@Z
?SfScsi_ScanDevice@@YAHPEAUHSFSCSIPORT__@@PEAU_INQUIRYDATA@@K@Z
?SfScsi_GetInquiryData@@YAHPEAUHSFSCSIADAPTER__@@PEAUtSFSCSIINQUIRYDATA@@@Z
?SfScsi_OpenAdapter@@YAPEAUHSFSCSIADAPTER__@@IPEAK@Z
?SfScsi_GetNumAdapters@@YAIXZ
?SfScsi_pnp_GetDriveLetter@@YAJPEB_WPEAH@Z
gdiplus
GdipSetPenMode
GdipSetPenColor
GdipCreateFromHDC
GdipSetSmoothingMode
GdipDrawLine
GdipDeletePen
GdipDeleteGraphics
GdipDrawArcI
GdipCreatePen1
msimg32
TransparentBlt
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
winmm
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutClose
waveOutPause
waveOutOpen
timeGetTime
waveOutRestart
waveOutReset
sndPlaySoundW
waveOutWrite
errorreport
ErrorReport_StartTrapBypass
ErrorReport_EndTrapBypass
ErrorReport_UnmanagedException
kernel32
LoadLibraryW
ActivateActCtx
FindActCtxSectionStringW
CreateActCtxW
GetModuleFileNameW
GetModuleHandleExW
QueryActCtxW
OutputDebugStringA
GetProcAddress
FreeLibrary
GetWindowsDirectoryW
CreateFileW
WriteFile
CloseHandle
EnterCriticalSection
LeaveCriticalSection
lstrcmpW
GetFileAttributesW
GetTempPathW
GetLocalTime
GetShortPathNameW
DeleteFileW
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSection
FindFirstFileW
FindNextFileW
FindClose
lstrcmpA
lstrcpynA
SetFilePointer
GetPrivateProfileSectionA
lstrlenA
GetTimeZoneInformation
WriteProcessMemory
GetCurrentProcess
DeactivateActCtx
DuplicateHandle
OpenProcess
ReadProcessMemory
GetCurrentProcessId
CreateFileMappingW
MapViewOfFile
WaitForSingleObject
SetEvent
CreateEventW
CreateThread
ResetEvent
WaitForMultipleObjects
ReleaseMutex
GetTickCount
GetExitCodeThread
GetCurrentThreadId
SetEndOfFile
LocalAlloc
LocalFree
CreateMutexW
DisableThreadLibraryCalls
FindFirstFileExW
GetFullPathNameW
GetOverlappedResult
GetFileSize
GetSystemInfo
GetDiskFreeSpaceW
GetSystemTime
IsBadReadPtr
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
HeapCreate
GlobalSize
GetLongPathNameW
GetDiskFreeSpaceExW
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
CreateDirectoryW
SetFileAttributesW
RemoveDirectoryW
ReadFile
DeviceIoControl
CopyFileW
MoveFileExW
GetACP
Beep
FormatMessageW
MulDiv
LockResource
FindResourceExW
LoadResource
SizeofResource
FindResourceW
GetLocaleInfoW
SetThreadLocale
GetSystemDefaultLCID
EnumResourceLanguagesW
GetUserDefaultUILanguage
VerSetConditionMask
VerifyVersionInfoW
GetNativeSystemInfo
GetModuleHandleW
GetNumberFormatW
FreeResource
WritePrivateProfileStringW
VirtualQuery
GetModuleFileNameA
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentDirectoryW
SetCurrentDirectoryW
LoadLibraryExW
MoveFileW
SetLastError
SetErrorMode
GlobalReAlloc
GetPrivateProfileStringW
GlobalAlloc
GlobalLock
GlobalFree
GlobalHandle
GlobalUnlock
lstrcmpiW
GetLastError
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
UnmapViewOfFile
user32
ReleaseDC
GetParent
InvalidateRect
UpdateWindow
FillRect
DrawEdge
DefWindowProcW
BeginPaint
EndPaint
GetClientRect
UnregisterClassW
RegisterClassW
GetSysColor
GetSysColorBrush
CreateCaret
SetCaretPos
GetMessageTime
HideCaret
SetCapture
ClientToScreen
SetCursorPos
GetCapture
ReleaseCapture
ShowCaret
SetFocus
GetMessagePos
DestroyCaret
GetKeyState
GetFocus
IsWindow
GetCursor
GetCursorPos
GetPropW
MessageBeep
RemovePropW
SetPropW
DrawTextW
DrawFrameControl
DrawTextExW
FrameRect
CharNextA
CharNextW
GetWindowTextLengthW
GetDesktopWindow
DestroyWindow
CreateDialogIndirectParamW
CreateDialogParamW
DialogBoxIndirectParamW
DialogBoxParamW
CreateAcceleratorTableW
LoadAcceleratorsW
GetMenuItemCount
GetSubMenu
GetMenuStringW
GetMenuItemID
ModifyMenuW
LoadMenuIndirectW
LoadMenuW
GetMenuState
GetDC
EnableMenuItem
GetMenuItemInfoW
LoadStringW
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
SetProcessDefaultLayout
GetMonitorInfoW
EnumDisplayMonitors
CallNextHookEx
GetClassNameW
GetWindowTextW
UnhookWindowsHookEx
GetLastActivePopup
SetWindowsHookExW
MessageBoxW
GetSystemMenu
CreateWindowExW
GetClassInfoW
MonitorFromRect
SystemParametersInfoW
GetWindowPlacement
SetWindowPlacement
FindWindowW
IsIconic
BringWindowToTop
SetForegroundWindow
EnumWindows
MsgWaitForMultipleObjectsEx
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
DestroyCursor
WinHelpW
SetActiveWindow
SetWindowPos
ScreenToClient
GetWindowRect
MsgWaitForMultipleObjects
DispatchMessageW
TranslateMessage
PostQuitMessage
PeekMessageW
EnableWindow
IsWindowEnabled
SetCursor
EndDialog
PostMessageW
SetDlgItemTextW
SetWindowTextW
GetDlgItem
ShowWindow
SetWindowLongPtrW
SendMessageW
GetWindowLongPtrW
wsprintfW
wsprintfA
CharUpperW
CheckRadioButton
EndDeferWindowPos
DeferWindowPos
MapWindowPoints
GetWindow
BeginDeferWindowPos
CheckDlgButton
KillTimer
SetTimer
GetSystemMetrics
IntersectRect
GetDlgItemTextW
IsDlgButtonChecked
GetDlgCtrlID
RegisterDeviceNotificationW
DeleteMenu
UnregisterDeviceNotification
CallWindowProcW
gdi32
GetTextExtentPoint32W
CreateFontW
GetTextExtentPointW
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
MoveToEx
LineTo
CreateSolidBrush
CreatePen
GetDeviceCaps
CreateCompatibleDC
PatBlt
CreateFontIndirectW
GetTextMetricsW
CreateDCW
GetBkColor
SetBrushOrgEx
SetBkMode
CreateDIBitmap
RestoreDC
StretchBlt
SetStretchBltMode
IntersectClipRect
SaveDC
SetTextColor
RealizePalette
SelectPalette
GetDCBrushColor
CreateBitmapIndirect
CreatePatternBrush
GetNearestColor
GetTextCharset
GetClipBox
GetPixel
BitBlt
CreateBitmap
SetBkColor
MaskBlt
ExtTextOutW
GetStockObject
SetDCPenColor
SetDCBrushColor
Rectangle
Polygon
CreateCompatibleBitmap
GetObjectW
GetTextFaceW
shell32
SHGetFolderPathW
SHGetSpecialFolderPathW
ShellExecuteW
ole32
CoCreateInstance
OleUninitialize
CoUninitialize
CoInitializeEx
CoInitialize
GetHGlobalFromStream
CoRevokeInitializeSpy
CoRegisterInitializeSpy
CoFreeLibrary
CoLoadLibrary
OleInitialize
StringFromGUID2
oleaut32
SysAllocString
SysAllocStringLen
advapi32
RegCreateKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
shlwapi
SHCreateStreamOnFileW
StrCmpLogicalW
StrCpyNW
PathAppendW
StrStrIW
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_type_info_destroy_list
wcsstr
__C_specific_handler
_purecall
__current_exception_context
memset
memmove
memcpy
memcmp
__current_exception
__std_terminate
api-ms-win-crt-string-l1-1-0
iswlower
isspace
toupper
iswspace
iswalpha
iswdigit
wmemcpy_s
strcat
towupper
isalnum
iswxdigit
strcpy
wcsncpy_s
wcsncat_s
iswupper
isdigit
wmemmove_s
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__stdio_common_vswprintf
__stdio_common_vswscanf
__stdio_common_vsscanf
__stdio_common_vsnwprintf_s
_wfopen_s
__stdio_common_vfwprintf_s
fclose
api-ms-win-crt-heap-l1-1-0
realloc
_msize
free
calloc
api-ms-win-crt-multibyte-l1-1-0
_mbbtype
_mbstok
api-ms-win-crt-convert-l1-1-0
_wtoi
_wtol
_wtoi64
wcstod
atoi
atol
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
_register_onexit_function
_seh_filter_dll
_execute_onexit_table
_configure_narrow_argv
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initialize_onexit_table
_initialize_narrow_environment
_errno
_getpid
_invalid_parameter_noinfo
api-ms-win-crt-filesystem-l1-1-0
_wsplitpath_s
_wmakepath_s
api-ms-win-crt-locale-l1-1-0
_getmbcp
api-ms-win-crt-math-l1-1-0
pow
floor
_isnan
atan2
cos
sqrt
sin
vcomp140
_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_fork
_vcomp_barrier
??0CMappingOfSfMemoryToken@@QEAA@AEBU_sfmemorytoken@@K@Z
??0CMonitored_CoInitializeEx@@QEAA@$$QEAV0@@Z
??0CMonitored_CoInitializeEx@@QEAA@AEBV0@@Z
??0CMonitored_CoInitializeEx@@QEAA@XZ
??0COutOfProcessMemoryToken@@QEAA@AEAU_sfmemorytoken@@KH@Z
??0CSfReadAudio@@QEAA@I@Z
??0CSfReadAudio@@QEAA@IPEAU_cdrtoc@@@Z
??0_sfwaveformat_wfxcopyhelper@@QEAA@AEBU_sfwaveformat@@@Z
??0_sfwaveformat_wfxecopyhelper@@QEAA@AEBU_sfwaveformat@@@Z
??1CMappingOfSfMemoryToken@@QEAA@XZ
??1COutOfProcessMemoryToken@@QEAA@XZ
??1CSfReadAudio@@QEAA@XZ
??4CMappingOfSfMemoryToken@@QEAAAEAV0@AEBV0@@Z
??4CMonitored_CoInitializeEx@@QEAAAEAV0@$$QEAV0@@Z
??4CMonitored_CoInitializeEx@@QEAAAEAV0@AEBV0@@Z
??4COutOfProcessMemoryToken@@QEAAAEAV0@AEBV0@@Z
??8_sfwaveformat@@QEBA_NAEBU0@@Z
??8_sfwaveformat@@QEBA_NAEBUtWAVEFORMATEX@@@Z
??_7CMonitored_CoInitializeEx@@6B@
?AddRef@CMonitored_CoInitializeEx@@UEAAKXZ
?BitsPerSample@_sfwaveformat@@QEBAGXZ
?BytesPerSample@_sfwaveformat@@QEBAGXZ
?CSfAudioXDAO_MapMarkerToPQ@@YAJPEAUtSFLIST@@0@Z
?Close@CMappingOfSfMemoryToken@@QEAAXXZ
?CoInitialize@CMonitored_CoInitializeEx@@QEAAJPEAX@Z
?CoInitializeEx@CMonitored_CoInitializeEx@@QEAAJPEAXK@Z
?CoUninitialize@CMonitored_CoInitializeEx@@QEAAXXZ
?CreateRawSectors@@YAJPEAE0JII@Z
?DataSize@CMappingOfSfMemoryToken@@QEAAJXZ
?Dispose@CMappingOfSfMemoryToken@@QEAAXXZ
?DriveDB_Compare@@YAJPEB_WH0HP6AJPEAXI1IW4_SFCOMPARECDDBS_CALLBACK_TYPE@@1@Z1@Z
?DriveDB_CompileCDDB@@YAJPEB_W0W4SFCDI_CDDB_TXT_FORMAT@@W4SFCDI_CDDB_BIN_FORMAT@@@Z
?DriveDB_CreateCFG@@YAJXZ
?DriveDB_EnumerateEntries@@YAJPEB_WHP6AJPEAUdrivedbentry@@PEAX@Z2@Z
?DriveDB_Export_Bin@@YAJPEA_WPEAUtSFLIST@@@Z
?DriveDB_Export_Bin_Fmt@@YAJPEA_WPEAUtSFLIST@@W4SFCDI_CDDB_BIN_FORMAT@@@Z
?DriveDB_Export_Text@@YAJPEA_WPEAUtSFLIST@@@Z
?DriveDB_GetDriveConfigString@@YAHPEA_WPEAU_INQUIRYDATA@@PEADI@Z
?DriveDB_GetDriveEntry@@YAJPEAUtSFLIST@@PEAU_INQUIRYDATA@@PEAUdrivedbentry@@K@Z
?DriveDB_GetInfo@@YAJPEB_WPEAU_CDDDBINFO@@@Z
?DriveDB_Import_Text@@YAJPEB_WPEAUtSFLIST@@W4SFCDI_CDDB_TXT_FORMAT@@@Z
?DriveDB_Load@@YAJPEAPEAUtSFLIST@@K@Z
?DriveDB_ParseOption@@YAHPEAD00I@Z
?DtAddEntryToDirTree@@YAJPEAUtagDIR_TREE@@PEAUtagDIR_ENTRY@@PEA_W@Z
?DtAllocateDirectoryEntry@@YAJPEAUtagDIR_TREE@@PEAUtagDIR_ENTRY@@PEB_W22_K3KHPEAPEAU2@@Z
?DtBuildShortNames@@YAJPEAUtagDIR_TREE@@PEAUtagDIR_ENTRY@@H@Z
?DtBuildTreeFromList@@YAJPEAUtagDIR_TREE@@PEAUtSFLIST@@@Z
?DtCopyDirEntry@@YAJPEAUtagDIR_TREE@@PEAUtagDIR_ENTRY@@1@Z
?DtCreateDirectoryTree@@YAJPEAPEAUtagDIR_TREE@@@Z
?DtDeleteDirEntry@@YAJPEAUtagDIR_TREE@@PEAUtagDIR_ENTRY@@@Z
?DtDestroyDirectoryTree@@YAXPEAUtagDIR_TREE@@@Z
?DtGetCommonRootPath@@YAPEA_WPEA_W0@Z
?DtGetDirEntry@@YAJPEAUtagDIR_TREE@@PEA_WHPEAPEAUtagDIR_ENTRY@@@Z
?DtGetDirEntryPath@@YAJPEAUtagDIR_ENTRY@@PEA_W@Z
?DtGetFileCountAndSize@@YAJPEAUtagDIR_TREE@@PEA_WPEAK2PEA_K@Z
?DtGetLastErrorString@@YAXPEAUtagDIR_TREE@@PEA_WI@Z
?DtGetLocalDirEntry@@YAPEAUtagDIR_ENTRY@@PEAU1@PEB_W@Z
?DtGetMultiByteFromTstring@@YAHPEADKPEA_W@Z
?DtGetTstringFromMultiByte@@YAHPEA_WKPEAD@Z
?DtGetTstringFromWideChar@@YAHPEA_WK0@Z
?DtGetWideCharFromTstring@@YAHPEA_WK0@Z
?DtPopulateDirTreeFromCompilationBuilder@@YAJPEAUtagDIR_TREE@@PEAUISfCdCompilationTreeBuilder@@@Z
?DtPrepareAllDirEntries@@YAJPEAUtagDIR_TREE@@PEAUtagDIR_ENTRY@@@Z
?DtPrepareDirEntry@@YAJPEAUtagDIR_TREE@@PEAUtagDIR_ENTRY@@@Z
?DtPrepareDirTree@@YAJPEAUtagDIR_TREE@@HH@Z
?DtPrepareDirectoryTree@@YAJPEAUtagDIR_TREE@@PEAUtagDIR_ENTRY@@@Z
?DtReparentDirEntry@@YAJPEAUtagDIR_TREE@@PEAUtagDIR_ENTRY@@PEA_W12@Z
?DtSortDirEntry@@YAJPEAUtagDIR_TREE@@PEAUtagDIR_ENTRY@@@Z
?DtSwapEndianWideChar@@YAXPEA_WK@Z
?DtUnprepareDirEntry@@YAJPEAUtagDIR_TREE@@PEAUtagDIR_ENTRY@@@Z
?DtUnprepareDirTree@@YAJPEAUtagDIR_TREE@@@Z
?FormatTag@_sfwaveformat@@QEBAGXZ
?GetDvdVideoFolderInfo@@YAJPEB_WKPEAUtagSFDVDVIDEO_FOLDER_INFO@@@Z
?GetISfBurnBDAVCompilation@@YAJPEAPEAUISfBurnCompilation@@@Z
?GetISfBurnDataCompilation@@YAJPEAPEAUISfBurnCompilation@@@Z
?GetISfBurnISOImage@@YAJPEAPEAUISfBurnISOImage@@@Z
?GetISfCdBurnParams@@YAJPEAPEAUISfCdBurnParams@@@Z
?GetISfCdCompilationBuilder@@YAJPEAPEAUISfCdCompilationBuilder@@@Z
?GetMemoryToken@COutOfProcessMemoryToken@@QEAAJAEAU_sfmemorytoken@@@Z
?GetPointer@CMappingOfSfMemoryToken@@QEAAJPEAPEAX@Z
?ISO9660_BuildLongDateTime@@YAXPEAU_SYSTEMTIME@@PEAD@Z
?ISO9660_BuildShortDateTime@@YAXPEAU_SYSTEMTIME@@PEAUtagISO9660_DATE_TIME@@@Z
?ISO9660_FileNameCmp@@YAHQEADE0E@Z
?ISO9660_GetFileSystemCaps@@YAJPEAUtagFILE_SYSTEM_CAPS@@@Z
?ISO9660_GetNameParts@@YAJPEADEPEAE11@Z
?ISO9660_MakeShortFileName@@YAEPEA_WHGQEAD@Z
?ISO9660_achCpyPadSpace@@YAXPEADHPEB_W@Z
?Init@_sfwaveformat@@QEAAXKAEBUtWAVEFORMATEX@@@Z
?Init@_sfwaveformat@@QEAAXKW4SFSAMPLETYPE@@IKK@Z
?Init@_sfwaveformat_wfxplus@@QEAAXPEBUtWAVEFORMATEX@@W4SFWAVEFORMAT_COPY_DEST@@@Z
?InitAsWfx@_sfwaveformat@@QEAAXGKGGKK@Z
?Initialize@CMonitored_CoInitializeEx@@AEAAXXZ
?Initialize@CSfReadAudio@@QEAAJXZ
?IsCompressed@_sfwaveformat@@QEBA_NXZ
?IsISRCValid@@YAHPEAE@Z
?IsInSfQueue@@YAHPEAUtSFQHEAD@@PEAUtSFQELM@@@Z
?IsLikelyCursorFilePtr@@YA_NPEBEI@Z
?IsLikelyCursorRESPtr@@YA_NPEBEI@Z
?IsSFLANGSTRINGID@@YA_NPEAUHSFLANG__@@PEB_W@Z
?IsSfGroupCursorPtr@@YA_NPEBEI@Z
?OleInitialize@CMonitored_CoInitializeEx@@QEAAJPEAX@Z
?OleUninitialize@CMonitored_CoInitializeEx@@QEAAXXZ
?Pointer@CMappingOfSfMemoryToken@@QEAAPEAXXZ
?PostInitialize@CMonitored_CoInitializeEx@@UEAAJJKK@Z
?PostUninitialize@CMonitored_CoInitializeEx@@UEAAJK@Z
?PreInitialize@CMonitored_CoInitializeEx@@UEAAJKK@Z
?PreUninitialize@CMonitored_CoInitializeEx@@UEAAJK@Z
?QueryInterface@CMonitored_CoInitializeEx@@UEAAJAEBU_GUID@@PEAPEAX@Z
?Read@CSfReadAudio@@QEAAJPEAEKPEAK@Z
?Release@CMonitored_CoInitializeEx@@UEAAKXZ
?SFSMPTE_DeccrementByFrame@@YAXPEAU_smpteval@@K@Z
?SFSMPTE_SmpteLikeToNanos@@YA_JNPEAU_smpteval@@@Z
?SfAudioPeak_PrimeMinMaxArray@@YAJW4SFSAMPLETYPE@@IPEAUtSFAUDIOPEAK_SAMPLESMINMAX@@0PEAX@Z
?SfAudio_AllocAndCopyWfx@@YAPEAUtWAVEFORMATEX@@AEBU_sfwaveformat@@W4SFWAVEFORMAT_COPY_DEST@@@Z
?SfAudio_AllocAndCopyWfx@@YAPEAUtWAVEFORMATEX@@PEBU_sfwaveformat@@W4SFWAVEFORMAT_COPY_DEST@@@Z
?SfAudio_Copy@@YAJPEBU_sfwaveformat@@PEAX0PEBXJM@Z
?SfAudio_Copy@@YAJPEBU_sfwaveformat@@PEAXPEBUtWAVEFORMATEX@@PEBXJM@Z
?SfAudio_Copy@@YAJPEBUtWAVEFORMATEX@@PEAXPEBU_sfwaveformat@@PEBXJM@Z
?SfAudio_CopyWfExt@@YAXPEAUWAVEFORMATEXTENSIBLE@@PEBUtWAVEFORMATEX@@W4SFWAVEFORMAT_COPY_DEST@@@Z
?SfAudio_CopyWfx@@YAXPEAUtWAVEFORMATEX@@IPEBU1@W4SFWAVEFORMAT_COPY_DEST@@@Z
?SfAudio_CreateWaveFileStreamReader@@YAJPEAPEAVCSfAudioPeakStreamReader@@PEB_W@Z
?SfAudio_DestroyWaveFileStreamReader@@YAJPEAVCSfAudioPeakStreamReader@@@Z
?SfAudio_ExtractChannel@@YAJPEAXJPEBXW4SFSAMPLETYPE@@IJ@Z
?SfAudio_FillSilence@@YAJPEBU_sfwaveformat@@PEAXK@Z
?SfAudio_GeneralCopySfWaveFormat@@YAPEAU_sfwaveformat@@PEAU1@IAEBU1@W4SFWAVEFORMAT_COPY_DEST@@@Z
?SfAudio_GeneralCopyWfx@@YAPEAUtWAVEFORMATEX@@PEAU1@IAEBU_sfwaveformat@@W4SFWAVEFORMAT_COPY_DEST@@@Z
?SfAudio_GetCopyFunction@@YAP6AXPEAXPEBXJM@ZPEBU_sfwaveformat@@PEBUtWAVEFORMATEX@@@Z
?SfAudio_GetCopyFunction@@YAP6AXPEAXPEBXJM@ZPEBUtWAVEFORMATEX@@PEBU_sfwaveformat@@@Z
?SfAudio_GetFormatTagExtensible@@YAHPEAUWAVEFORMATEXTENSIBLE@@PEAK@Z
?SfAudio_GetWaveFormatTag@@YAGPEBUtWAVEFORMATEX@@@Z
?SfAudio_InitWfx@@YAXPEAUtWAVEFORMATEX@@KW4SFSAMPLETYPE@@K@Z
?SfAudio_InitWfxFlex@@YAXPEAUtWAVEFORMATEX@@KKKKKI@Z
?SfAudio_IsCompressed@@YAHPEBUtWAVEFORMATEX@@@Z
?SfAudio_IsCompressedExtensible@@YAHPEAUWAVEFORMATEXTENSIBLE@@@Z
?SfAudio_MuteChannel@@YAJPEAXPEBU_sfwaveformat@@JJ@Z
?SfAudio_MuteChannel@@YAJPEAXW4SFSAMPLETYPE@@HJJ@Z
?SfCDDrivePlay_GetStatus@@YAHPEAUHSFCD__@@PEAUtSFCDPLAYAUDIO@@@Z
?SfCDDrivePlay_Pause@@YAHPEAUHSFCD__@@@Z
?SfCDDrivePlay_Play@@YAHPEAUHSFCD__@@KK@Z
?SfCDDrivePlay_Resume@@YAHPEAUHSFCD__@@@Z
?SfCDDrivePlay_SetVolume@@YAHPEAUHSFCD__@@I@Z
?SfCDDrivePlay_Stop@@YAHPEAUHSFCD__@@@Z
?SfCDGetFreeSpaceAudio@@YAJPEAUHSFCD__@@PEAU_cdrmsf@@@Z
?SfCDGetFreeSpaceData@@YAJPEAUHSFCD__@@PEAKH@Z
?SfCDGetFreeSpaceDataFromMediaInfo@@YAJPEAU_mediainfo@@PEAKH@Z
?SfCDGetISfBdMuxImageReader@@YAJPEAPEAUISfBdMuxImageReader@@@Z
?SfCDGetISfCDBurnAudioDAO@@YAJPEAPEAUISfCDBurnAudioDAO@@@Z
?SfCDGetISfCDBurnAudioTAO@@YAJPEAPEAUISfCDBurnAudioTAO@@@Z
?SfCDGetISfCDBurnDataBasic2@@YAJPEAPEAUISfCDBurnDataBasic2@@@Z
?SfCDGetISfCDBurnDataBasic@@YAJPEAPEAUISfCDBurnDataBasic@@@Z
?SfCDGetISfCDBurnVCDAdvanced@@YAJPEAPEAUISfCDBurnVCDAdvanced@@@Z
?SfCDGetISfCDBurnVCDBasic@@YAJPEAPEAUISfCDBurnVCDBasic@@@Z
?SfCDGetISfCDErase@@YAJPEAPEAUISfCDErase@@@Z
?SfCDGetISfCDErase@@YAJPEAPEAVCSfCDReadAudioSubcode@@@Z
?SfCDProject_FreeProject@@YAJPEAUtagSFCDPRJ_PROJECT@@@Z
?SfCDProject_FreeTrack@@YAJPEAUtagSFCDPRJ_TRACK_PROJECT@@@Z
?SfCDProject_IsProject@@YAJPEAXPEAK@Z
?SfCDProject_ReadPQListFile@@YAJPEAXPEAHPEADPEAUtSFLIST@@HK@Z
?SfCDProject_ReadProject@@YAJPEAXPEAUtagSFCDPRJ_PROJECT@@PEAK@Z
?SfCDProject_SavePQListFile@@YAJPEAXHPEADPEAUtSFLIST@@H@Z
?SfCDProject_WriteProject@@YAJPEA_WPEAXPEAUtagSFCDPRJ_PROJECT@@PEAK@Z
?SfCDUI_CD_FillInDebugMessage@@YAXPEAUHSFCD__@@JIPEA_WI@Z
?SfCDUI_CD_FillInErrorBoxInfo@@YAXPEAUHSFCD__@@JIPEAUtOPERR_PARAMS@@@Z
?SfCDUI_CD_FillInErrorMessages@@YAXPEAUHSFCD__@@JPEA_WI1II@Z
?SfCDUI_CD_ShowErrorBox@@YAHPEAUHWND__@@JPEAUHSFCD__@@I@Z
?SfCDUI_CD_ShowErrorBoxBasic@@YAHPEAUHWND__@@PEAUtOPERR_PARAMS@@@Z
?SfCDUI_GetErrorMessage@@YAXJIPEB_WPEA_WI@Z
?SfCDUI_LoadProcessName@@YAHIPEA_WI@Z
?SfCDUI_LoadProcessNameEx@@YAHEIPEA_WI@Z
?SfCDUI_Loader_ShowErrorBox@@YAHPEAUHWND__@@HPEAUtPARAMETERS_LDRCFG@@@Z
?SfCDUI_Printer_ShowErrorBox@@YAHPEAUHWND__@@HPEAUtPARAMETERS_PRNCFG@@@Z
?SfCDUI_ShowErrorBox@@YAHPEAUHWND__@@JIPEB_W@Z
?SfCDUI_WarnIfPlayingDisc@@YAIPEAUHSFCD__@@@Z
?SfCDXPLAY_GetPlayEngine@@YAJPEAPEAVCPlayEngine@@@Z
?SfCD_GetProcessTime@@YAJPEAUHSFCD__@@IPEAK@Z
?SfCD_WaitForPrintThreadDeath@@YAJPEAUHWND__@@PEAXK@Z
?SfCD_WaitForThreadDeath@@YAJPEAUHWND__@@PEAXK@Z
?SfCdiAddFileToLookaside@@YAJPEB_WPEAXPEAPEAX@Z
?SfCdiAllocateFileStream@@YAJKKPEAPEAX@Z
?SfCdiCloseFileLookaside@@YAJPEAX@Z
?SfCdiCreateFileLookaside@@YAJPEA_WKKPEAUHINSTANCE__@@PEAPEAX@Z
?SfCdiDeInitPrintInfo@@YAJPEAX@Z
?SfCdiDeinitFileStream@@YAJPEAX@Z
?SfCdiDeinitializeFileSystem@@YAJPEAUtagDIR_TREE@@@Z
?SfCdiFreeFileStream@@YAJPEAX@Z
?SfCdiGetBoundedBDWriteSpeeds@@YAJPEAPEAIPEAI@Z
?SfCdiGetBoundedDvdMinusWriteSpeeds@@YAJPEAPEAIPEAI@Z
?SfCdiGetBoundedDvdPlusWriteSpeeds@@YAJPEAPEAIPEAI@Z
?SfCdiGetCanonicDeviceName@@YAJPEAUtCDR_AUTOFIND@@PEA_WPEAI@Z
?SfCdiGetDataFromLookaside@@YAJPEAXPEAEK@Z
?SfCdiGetFilePosition@@YAJPEAXPEA_K@Z
?SfCdiGetFileStreamSize@@YAJPEAXPEA_K@Z
?SfCdiGetPrintStats@@YAJPEAXPEAUtagSFCDI_PRINT_STATS@@@Z
?SfCdiGetStringFromMediaType@@YAJPEA_WPEAKK@Z
?SfCdiInitFileStream@@YAJPEAXPEB_W_K2K@Z
?SfCdiInitPrintInfo@@YAJPEAPEAXKHPEAUtPARAMETERS_PRNCFG@@P6AJPEAXPEAEJ@Z2@Z
?SfCdiInitializeFileSystem@@YAJPEAUtagFILE_SYSTEM_CAPS@@W4tagFILE_SYSTEM_TYPE@@PEAUtagDIR_TREE@@PEAUHWND__@@@Z
?SfCdiInitializeFileSystemEx@@YAJPEAUtagFILE_SYSTEM_CAPS@@W4tagFILE_SYSTEM_TYPE@@KPEAUtagDIR_TREE@@PEAUHWND__@@@Z
?SfCdiPrepFileLookaside@@YAJPEAX@Z
?SfCdiPrint@@YAJPEAX@Z
?SfCdiReadFileStream@@YAJPEAXPEAEKPEAK@Z
?SfCdiSim_GetCurrentWorkMode@@YA?AW4eSFCDSIM_ENUM_WORK_MODE@@XZ
?SfCdiSim_GetImageRecorderMediaType@@YAKXZ
?SfCdiSim_GetWorkModeInfo@@YAJPEAU_tSFCDSIM_WORK_MODE_INFO@@@Z
?SfCdiSim_SetWorkModeInfo@@YAJPEBU_tSFCDSIM_WORK_MODE_INFO@@@Z
?SfCdiUpdateReadStatus@@YAHPEAUtCDRDEVPARAMS_DEVINFO@@I_J@Z
?SfCdiWaitForPrintEvent@@YAHPEAX@Z
?SfCdi_CheckMediaCompatibleStatus@@YAJPEAUHSFCD__@@W4eSFCDI_BRNPRJ_TYPE@@PEAH@Z
?SfCdi_GetAboutInfo@@YAJPEAUtSFLIST@@PEA_W@Z
?SfCdi_GetAboutInfoEx@@YAJPEAUtSFLIST@@KPEA_WPEAH@Z
?SfCdi_GetCdiInitializeOptions@@YAKXZ
?SfCdi_GetCurrentBrnPrjType@@YAJPEAUtSFCDI_CURRENT_BRNPRJ_TYPE@@@Z
?SfCdi_GetDriveDescription@@YAJPEAUtCDR_AUTOFIND@@KPEAU_cdrdecsriptionbuffer@@H@Z
?SfCdi_GetMediaDescription@@YAJPEAUtCDR_AUTOFIND@@KPEAU_cdrdecsriptionbuffer@@H@Z
?SfCdi_GetMediaDescription@@YAJPEAUtCDR_AUTOFIND@@PEAU_mediadecsription@@@Z
?SfCdi_Initialize@@YAJPEAUHINSTANCE__@@KPEA_WK@Z
?SfCdi_InitializeEx@@YAJPEAUHINSTANCE__@@KPEA_WPEB_WK@Z
?SfCdi_IsAudioTooShortToBurn@@YAH_JPEBUtWAVEFORMATEX@@@Z
?SfCdi_RescanAllDrives@@YAJK@Z
?SfCdi_SetCurrentBrnPrjType@@YAJPEBUtSFCDI_CURRENT_BRNPRJ_TYPE@@@Z
?SfCdi_Terminate@@YAHPEAUHINSTANCE__@@@Z
?SfCdi_Version@@YAKXZ
?SfCdx_FindDriveMatch@@YAHPEAUHWND__@@PEAUtSFLIST@@PEBUtPARAMETERS_DEVDES@@@Z
?SfCdx_GetDescriptionFromSfCdOpState@@YAJW4tagSFCD_OP_STATE@@PEA_WPEAK@Z
?SfCdx_GetDvdMasteredLayerFolderInfo@@YAJPEB_WKPEAUtagSFDVDMASTERED_LAYER_FOLDER_INFO@@@Z
?SfCdx_GetDvdMasteredRootFolderInfo@@YAJPEB_WKPEAUtSFLIST@@@Z
?SfCdx_GetISfCdCtRandomAccessDataSourceFromDevice@@YAJPEAUHSFCD__@@PEAPEAUISfCdCtRandomAccessDataSource@@@Z
?SfCdx_GetISfCdCtRandomAccessDataSourceFromFileHandle@@YAJPEAXPEAPEAUISfCdCtRandomAccessDataSource@@@Z
?SfCdx_GetMediaFsDescription2@@YAJPEAUtCDR_AUTOFIND@@KPEAU_cdrdecsriptionbuffer@@H@Z
?SfCdx_GetMediaFsDescription@@YAJPEAUtCDR_AUTOFIND@@PEAUtagCDX_MEDIA_MULTIFS_DESCRIPTION@@@Z
?SfCdx_GetMediaFsDescriptionFromDataReader@@YAJPEAUISfCdCtRandomAccessDataSource@@PEAUtagCDX_MEDIA_MULTIFS_DESCRIPTION@@@Z
?SfCdx_GetMediaFsDescriptionFromHSFCD@@YAJPEAUHSFCD__@@PEAUtagCDX_MEDIA_MULTIFS_DESCRIPTION@@@Z
?SfCdx_GetMediaFsDescriptionFromISOImageFile@@YAJPEB_WPEAUtagCDX_MEDIA_MULTIFS_DESCRIPTION@@@Z
?SfCdx_GetMediaFsDescriptionFromISOImageFileHandle@@YAJPEAXPEAUtagCDX_MEDIA_MULTIFS_DESCRIPTION@@@Z
?SfCdx_Initialize@@YAJPEAUHINSTANCE__@@KPEA_WK@Z
?SfCdx_IsDiscBlank@@YAJPEAUHSFCD__@@@Z
?SfCdx_IsValidDevicePath@@YAHPEB_W@Z
?SfCdx_ReEnumerateDrives@@YAJP6AJPEAU_tSFCDI_DISCOVERCDDEVICES_CONTEXT@@@ZPEAPEAUtSFLIST@@@Z
?SfCdx_RegisterDeviceNotification@@YAJPEAUHWND__@@PEAPEAX@Z
?SfCdx_SwitchDrive@@YAJPEAUtSFLIST@@HPEAUtPARAMETERS_DEVDES@@@Z
?SfCdx_Terminate@@YAJPEAUHINSTANCE__@@@Z
?SfCdx_UnRegisterDeviceNotification@@YAJPEAX@Z
?SfCreateDialogTemplate@@YAPEBUDLGTEMPLATE@@PEAUHSFLANG__@@PEBU_sfdlghdrcreate@@QEBU_sfdlgctrlcreate@@@Z
?SfCreateDialogTemplateEx@@YAPEBUDLGTEMPLATE@@PEAUHSFLANG__@@PEBU_sfdlghdrcreateex@@QEBU_sfdlgctrlcreateex@@PEAG@Z
?SfDAEX_AutoName@@YAJPEA_WIPEAU_sfdaeitemtag@@PEB_W2K@Z
?SfDAEX_Dialog@@YAJPEAUHWND__@@PEAU_sfdaexparams@@@Z
?SfDAEX_FreeRipList@@YAJPEAUtSFLIST@@@Z
?SfDAEX_GetCDText@@YAJPEAU_sfcdtext@@QEAUtPARAMETERS_DEVDES@@PEAU_cdrtoc@@K@Z
?SfDAEX_GetSumyItem@@YAHKPEAU_sfdaeitemtag@@PEA_WI@Z
?SfDAEX_InitItemFromCDAFile@@YAJPEAUtSFLIST@@PEAU_sfdaeitemtag@@PEB_W@Z
?SfDAEX_MakeRipList@@YAJPEAPEAUtSFLIST@@AEBU_sfdaexpreset@@PEAU_cdrtoc@@PEBU_sfcdtext@@K@Z
?SfDAEX_ReadToc@@YAJAEBU_sfdaexpreset@@PEAU_cdrtoc@@@Z
?SfDAEX_ReadToc@@YAJPEBUtPARAMETERS_DEVDES@@PEAU_cdrtoc@@@Z
?SfDAEX_ReleaseParams@@YAJPEAU_sfdaexparams@@@Z
?SfDAEX_RipItemToHandle@@YAJPEAUtSFLIST@@PEAU_sfdaeitemtag@@KPEAU_cdrtoc@@PEAXPEAUtWAVEFORMATEX@@PEAUISFCDIProgress@@@Z
?SfDAEX_RipItemToStream@@YAJPEAUtSFLIST@@PEAU_sfdaeitemtag@@KPEAU_cdrtoc@@PEAUISequentialStream@@PEAUtWAVEFORMATEX@@PEAUISFCDIProgress@@@Z
?SfDAEX_RipItemToWav@@YAJPEAUHWND__@@PEAUtSFLIST@@PEAU_sfdaeitemtag@@PEA_WIKPEAU_cdrtoc@@@Z
?SfDAEX_SetSumyItem@@YAJKPEAU_sfdaeitemtag@@PEB_W@Z
?SfDAE_DAEPlayFillInDeviceDescriptor@@YAJPEAUtSFLIST@@PEAU_sfdaeitemtag@@PEAHPEAUtPARAMETERS_DEVDES@@@Z
?SfDAE_Dialog@@YAHPEAUHWND__@@PEAUSFDAEPARAMS@@K@Z
?SfDAE_GetISFCDDAE@@YAJPEAPEAUISFCDDAE@@@Z
?SfDAOX_Dialog@@YAJPEAUHWND__@@PEAU_sfdaoxburntag@@@Z
?SfDDPProject_FreeProject@@YAJPEAUtagSFDDP_PROJECT@@@Z
?SfDDPProject_OpenDDP@@YAJPEA_WPEAUtagSFDDP_PROJECT@@@Z
?SfDDPProject_ReadIdStream@@YAJPEAUtagSFDDP_PROJECT@@PEA_W@Z
?SfDDPProject_ReadMapStreams@@YAJPEAUtagSFDDP_PROJECT@@PEA_W@Z
?SfDDPProject_ReadProject@@YAJPEA_WPEAUtagSFDDP_PROJECT@@@Z
?SfDDPProject_SaveProject@@YAJPEA_WPEAUtagSFCDPRJ_PROJECT@@PEAUtSFLIST@@HPEAD@Z
?SfDVDGetBurnFolderImageInfo@@YAJPEAUtagSFDVD_FOLDER_IMAGE_VOLUME_INFO@@@Z
?SfDVDGetISfDVDBurnFolder@@YAJPEAPEAUISfDVDBurnFolder@@@Z
?SfDVDGetISfReadDVDFolderImage@@YAJPEAPEAUISfReadDVDFolderImage@@@Z
?SfDVD_DeterminePaddingVTS@@YAJPEB_WPEAI@Z
?SfDVD_GetIDvdImage@@YAJPEAPEAUIDvdImage@@@Z
?SfDVD_GetLayoutVMG@@YAJPEB_WPEAU_tSFDVD_VMG_LAYOUT_EX@@@Z
?SfDVD_GetLayoutVTS@@YAJPEB_WPEAU_tSFDVD_VTS_LAYOUT_EX@@@Z
?SfDecodePQBuffer@@YAJPEAUSFPQdecodetag@@PEAEK@Z
?SfDecodePQ_Init@@YAXPEAUSFPQdecodetag@@K@Z
?SfDialogTemplateFromRCID@@YAJPEAUHSFLANG__@@PEB_WPEAPEBUDLGTEMPLATE@@@Z
?SfDrawThemeBackground@tXPTHEME@@QEBAJW4SFXPTHEME_CONTROL@@PEAUHDC__@@HHPEBUtagRECT@@2@Z
?SfDrawThemeIcon@tXPTHEME@@QEBAJW4SFXPTHEME_CONTROL@@PEAUHDC__@@HHPEBUtagRECT@@PEAU_IMAGELIST@@H@Z
?SfDrawThemeText@tXPTHEME@@QEBAJW4SFXPTHEME_CONTROL@@PEAUHDC__@@HHPEB_WHKKPEBUtagRECT@@@Z
?SfEraseX_Dialog@@YAJPEAUHWND__@@PEAU_sferasextag@@@Z
?SfErrorHandler_AddErrorTable@@YAJPEAUHSFLANG__@@PEAU_sferror_table_rcid@@I@Z
?SfErrorHandler_AddErrorTable@@YAJPEAU_sferror_table@@I@Z
?SfErrorHandler_DumpHex@@YAIPEADIPEAXI@Z
?SfErrorHandler_DumpHexDWords@@YAIPEADIPEFAKJ@Z
?SfErrorHandler_GetErrorMessage@@YAPEA_W_KJPEB_W@Z
?SfFindDialogTemplateInResPool@@YAPEBUDLGTEMPLATE@@PEBU_SFRESPOOL@@PEAIPEB_WK@Z
?SfFindResourceInResPool@@YAPEAXPEBU_SFRESPOOL@@PEAIPEB_W2KPEAK@Z
?SfFixTrashedW64@@YAJPEAXPEAU_sfwaveformat@@_J@Z
?SfFixTrashedWav@@YAJPEAXPEAU_sfwaveformat@@K@Z
?SfFourCCToStringCPU@@YAXHPEA_W@Z
?SfGetDialogSize@@YAHPEAUHSFLANG__@@PEBU_sfdlghdrcreate@@PEAUtagSIZE@@@Z
?SfGetDialogSizeEx@@YAHPEAUHSFLANG__@@PEBU_sfdlghdrcreateex@@PEAUtagSIZE@@@Z
?SfGetString@@YAPEB_WPEAUHSFLANG__@@I@Z
?SfGetString@@YAPEB_WPEAUHSFLANG__@@PEBQEB_W@Z
?SfGetStringSmart@@YAPEB_WPEAUHSFLANG__@@PEB_W@Z
?SfGetThemeBackgroundContentRect@tXPTHEME@@QEBAJW4SFXPTHEME_CONTROL@@PEAUHDC__@@HHPEBUtagRECT@@PEAU4@@Z
?SfGetThemeBackgroundExtentRect@tXPTHEME@@QEBAJW4SFXPTHEME_CONTROL@@PEAUHDC__@@HHPEBUtagRECT@@PEAU4@@Z
?SfGetThemeFont@tXPTHEME@@QEAAJW4SFXPTHEME_CONTROL@@PEAUHDC__@@HHHPEAUtagLOGFONTW@@@Z
?SfGetThemeTextExtent@tXPTHEME@@QEAAJW4SFXPTHEME_CONTROL@@PEAUHDC__@@HHPEB_WHKPEBUtagRECT@@PEAU4@@Z
?SfInitializeWav64@@YAJPEB_WPEAU_sfwaveformat@@K@Z
?SfInitializeWav64WithJunk@@YAJPEB_WPEAU_sfwaveformat@@K_J@Z
?SfInitializeWav@@YAJPEB_WPEAU_sfwaveformat@@K@Z
?SfInitializeWavWithJunk@@YAJPEB_WPEAU_sfwaveformat@@KK@Z
?SfInsertW64Header@@YAJPEAXPEAU_sfwaveformat@@_J2@Z
?SfInsertWavHeader@@YAJPEAXPEAU_sfwaveformat@@KK@Z
?SfIsThemeBackgroundPartiallyTransparent@tXPTHEME@@QEBAHW4SFXPTHEME_CONTROL@@HH@Z
?SfList_ConvertToInPlace@@YAJPEAPEAUtSFLIST@@PEAU1@@Z
?SfLoadString@@YAHPEAUHSFLANG__@@IPEA_WH@Z
?SfLoadString@@YAHPEAUHSFLANG__@@PEBQEB_WPEA_WH@Z
?SfMapDialogTemplate@@YAJPEBUDLGTEMPLATE@@JPEAPEAU_sfdlghdrcreateex@@@Z
?SfMpegStreamClose@@YAJPEAUtagMPEG_BIT_STREAM@@@Z
?SfMpegStreamOpen@@YAJPEAUtagMPEG_BIT_STREAM@@PEA_W@Z
?SfMpegStreamReadCached@@YAJPEAUtagMPEG_BIT_STREAM@@PEAEKPEAK@Z
?SfMpegStreamSeekNextStartCode@@YAJPEAUtagMPEG_BIT_STREAM@@@Z
?SfMpegStreamSkipCached@@YAJPEAUtagMPEG_BIT_STREAM@@K@Z
?SfMsgBoxSetHook@@YAHP6AH_KPEAUHWND__@@PEB_W2I@ZK@Z
?SfPQList_GetItemText@@YAPEA_WPEAUcditemtag@@@Z
?SfPQList_InsertItem@@YAHPEAUtSFLIST@@HPEAUcditemtag@@PEA_W@Z
?SfResPoolDialogBox@@YA_JPEBU_SFRESPOOL@@PEAUHSFLANG__@@PEB_WPEAUHWND__@@P6A_J3I_K_J@Z5@Z
?SfSUBCODEX_Dialog@@YAJPEAUHWND__@@PEAU_sfsubcodextag@@H@Z
?SfSUBCODEX_ReadTextDataFromDrive@@YAJPEAUHWND__@@UtPARAMETERS_DEVDES@@PEAU_sfcdtext@@@Z
?SfScsi_CloseWrap@@YAHPEAUHSFSCSIPORT__@@II@Z
?SfScsi_OpenWrap@@YAPEAUHSFSCSIPORT__@@IIPEAK@Z
?SfScsi_pnp_CloseWrap@@YAHPEAUHSFSCSIPORT__@@PEB_W@Z
?SfScsi_pnp_OpenWrap@@YAPEAUHSFSCSIPORT__@@PEB_WPEAK@Z
?SfTAOX_Dialog@@YAJPEAUHWND__@@PEAU_sftaoxburntag@@@Z
?SfTextToFeetAndFramesToken@@YA_JPEB_WPEBU_sfposfmt@@H@Z
?SfTextToHMSFToken@@YA_JPEB_WPEBU_sfposfmt@@HPEAPEB_W@Z
?SfVCD_GetFileInfo@@YAJPEA_WPEAW4tagSFVCD_VIDEO_TYPE@@PEAI@Z
?SfValidateMPEGAsVCD@@YAJPEA_WPEAW4tagSFVCD_VIDEO_TYPE@@@Z
?SfVcdiAddMPEGItem@@YAJPEAUtagDIR_TREE@@PEA_WIHPEAG@Z
?SfVcdiAddSegmentItem@@YAJPEAUtagDIR_TREE@@PEA_WIEEPEAG@Z
?SfVcdiCreateDirectoryTree@@YAJPEAPEAUtagDIR_TREE@@PEA_W@Z
?SfVcdiFreeAllSystemInfo@@YAJPEAUtagDIR_ENTRY@@@Z
?SfVcdiPrepare@@YAJPEAUtagDIR_ENTRY@@@Z
?Start@CSfReadAudio@@QEAAJPEAUcdreadaudiotag@@@Z
?Stop@CSfReadAudio@@QEAAJXZ
?SystemAgent_HotEnable@@YAHH@Z
?UDF25_CompressUnicode@@YAIIPEB_WPEAEK@Z
?UDF25_GetFileSystemCaps@@YAJPEAUtagFILE_SYSTEM_CAPS@@@Z
?UDF25_SortDirEntry@@YAJPEAXPEAUtagDIR_ENTRY@@@Z
?UDF25_UncompressUnicode@@YAKPEBEKPEA_WK@Z
?UDF_CompressUnicode@@YAIIPEB_WPEAEK@Z
?UDF_GetFileSystemCaps@@YAJPEAUtagFILE_SYSTEM_CAPS@@@Z
?UDF_SortDirEntry@@YAJPEAXPEAUtagDIR_ENTRY@@@Z
?UDF_UncompressUnicode@@YAKPEAEKPEA_WK@Z
?UnInitialize@CMonitored_CoInitializeEx@@AEAAXXZ
?UpdateBlockAlign@_sfwaveformat@@QEAAKXZ
?VCD_GetFileSystemCaps@@YAJPEAUtagFILE_SYSTEM_CAPS@@@Z
?VCD_SortDirEntry@@YAJPEAXPEAUtagDIR_ENTRY@@@Z
?cdr_AutoFindDevices@@YAJPEAPEAUtSFLIST@@K@Z
?cdr_BoundBurnSpeed@@YAIPEAUHSFCD__@@I@Z
?cdr_BufferToDataQ@@YAXPEAUtDATAQ@@PEAE@Z
?cdr_BufferToDataQBCD@@YAXPEAUtDATAQ@@PEAE@Z
?cdr_BusyWait@@YAXJ@Z
?cdr_ByteSwap16@@YAXPEAEI@Z
?cdr_ByteSwap32@@YAXPEAEI@Z
?cdr_CellsToLBA@@YAJPEAK_K@Z
?cdr_Close@@YAJPEAUHSFCD__@@@Z
?cdr_CloseSession@@YAJPEAUHSFCD__@@PEAUtCDRPARAMS_CLOSESESSION@@@Z
?cdr_DataRateToSpeedIndex@@YAMII@Z
?cdr_DeviceFromPath@@YAPEAUtCDR_AUTOFIND@@PEAUtSFLIST@@PEB_W@Z
?cdr_Eject@@YAJPEAUHSFCD__@@H@Z
?cdr_EndProfile@@YAKK@Z
?cdr_Erase@@YAJPEAUHSFCD__@@PEAUtCDRPARAMS_ERASE@@@Z
?cdr_EstimateOperationTime@@YAJPEAUHSFCD__@@W4eGETTIMEESTIMATE_OP@@PEAXPEAK@Z
?cdr_FillInterfaceList@@YAXPEAUHWND__@@IH@Z
?cdr_FindInterface@@YAIPEB_W@Z
?cdr_FormatHMSF@@YAHPEA_WPEAU_cdrhmsf@@@Z
?cdr_FormatISRC@@YAHPEA_W0@Z
?cdr_FormatInquiryStrings@@YAJPEAU_INQUIRYDATA@@PEAU_cdinqstrings@@@Z
?cdr_FormatLBA@@YAHPEA_WKH@Z
?cdr_FormatLBAEx@@YAHPEA_WKKI@Z
?cdr_FormatMSF@@YAHPEA_WPEAU_cdrmsf@@@Z
?cdr_FromBCD@@YAJPEAEI@Z
?cdr_GetBurnProofMode@@YAHPEAUHSFCD__@@@Z
?cdr_GetDeviceCaps@@YAJPEAUHSFCD__@@PEAUcdrcaps_tag@@@Z
?cdr_GetDeviceDescription@@YAJPEAUHSFCD__@@PEAUtPARAMETERS_DEVDES@@I@Z
?cdr_GetDriveEntry@@YAJPEAUtPARAMETERS_DEVDES@@PEAUdrivedbentry@@@Z
?cdr_GetDriverErrorString@@YAJPEAUHSFCD__@@PEAUtCDR_ERRORDATA@@PEA_WI@Z
?cdr_GetErrorState@@YAJPEAUHSFCD__@@PEAUtCDR_ERRORDATA@@@Z
?cdr_GetFailedDriveDetect@@YAJPEAPEAUtSFLIST@@@Z
?cdr_GetInterface@@YAPEAUtCDR_INTERFACE@@H@Z
?cdr_GetInterfaceCaps@@YAJHPEAUcdrcaps_tag@@@Z
?cdr_GetMediaDescription@@YAJPEAUHSFCD__@@PEAU_mediadecsription@@@Z
?cdr_GetMediaInfo@@YAJPEAUHSFCD__@@PEAU_mediainfo@@@Z
?cdr_GetNumInterfaces@@YAHXZ
?cdr_GetOwningApplication@@YAJPEAUtPARAMETERS_DEVDES@@PEA_WI@Z
?cdr_GetSpeed@@YAIPEAUHSFCD__@@I@Z
?cdr_GetTestCapsResults@@YAKPEAUHSFCD__@@@Z
?cdr_GetTestMode@@YAHPEAUHSFCD__@@@Z
?cdr_GetWriteFeatureSupport@@YAJPEAUHSFCD__@@_KPEAI@Z
?cdr_GetWriteSpeedIndexFromDataRate@@YAMKII@Z
?cdr_GetWriteState@@YAIPEAUHSFCD__@@@Z
?cdr_HMSFToLBA@@YAJPEAKPEAU_cdrhmsf@@@Z
?cdr_HMSFToMSF@@YAJPEAU_cdrmsf@@PEAU_cdrhmsf@@@Z
?cdr_IsDeviceInUse@@YAHPEAUtPARAMETERS_DEVDES@@@Z
?cdr_IsISRCValid@@YAHPEAE@Z
?cdr_IsSimulator@@YAHPEAUtPARAMETERS_DEVDES@@@Z
?cdr_IsSimulatorFromHSFCD@@YAHPEAUHSFCD__@@@Z
?cdr_KillAutoFindDevices@@YAJPEAPEAUtSFLIST@@@Z
?cdr_LBAToCells@@YAJPEAKK@Z
?cdr_LBAToHMSF@@YAJPEAU_cdrhmsf@@K@Z
?cdr_LBAToMSF@@YAJPEAU_cdrmsf@@K@Z
?cdr_LoadErrorString@@YAHJPEA_WI@Z
?cdr_LoadSenseString@@YAHHPEA_WI@Z
?cdr_Lock@@YAJPEAUHSFCD__@@H@Z
?cdr_MSFToHMSF@@YAJPEAU_cdrhmsf@@PEAU_cdrmsf@@@Z
?cdr_MSFToLBA@@YAJPEAKPEAU_cdrmsf@@@Z
?cdr_Open@@YAJQEAUtPARAMETERS_DEVDES@@PEAPEAUHSFCD__@@@Z
?cdr_ParseISRC@@YAHPEA_W0@Z
?cdr_ReadAudioUnstitched@@YAJPEAUcdreadaudiotag@@@Z
?cdr_ReadBarCode@@YAJPEAUHSFCD__@@PEAUtCDRPARAMS_READBARCODE@@P6AHPEAXI_J@Z@Z
?cdr_ReadCDText@@YAJPEAUHSFCD__@@PEAUtCDRPARAMS_READCDTEXT@@P6AHPEAXI_J@Z@Z
?cdr_ReadData@@YAJPEAUHSFCD__@@P6AJPEAXPEAEJ@ZKKKIP6AH1I_J@Z1@Z
?cdr_ReadTOC@@YAJPEAUHSFCD__@@PEAU_cdrtoc@@IP6AHPEAXI_J@Z@Z
?cdr_ReleaseAutoFoundDevices@@YAJPEAUtSFLIST@@@Z
?cdr_SetErrorState@@YAJPEAUHSFCD__@@PEAUtCDR_ERRORDATA@@@Z
?cdr_SetReadMethod@@YAJPEAUHSFCD__@@K@Z
?cdr_SetSpeed@@YAJPEAUHSFCD__@@II@Z
?cdr_SetTestCapsMode@@YAJPEAUHSFCD__@@H@Z
?cdr_SpeedIndexToDataRate@@YAIIM@Z
?cdr_StartProfile@@YAXPEAK@Z
?cdr_TestConfigured@@YAJPEAUtPARAMETERS_DEVDES@@@Z
?cdr_TestIOCTLError@@YAJPEAUHSFCD__@@J@Z
?cdr_TestUnderRunTAO@@YAJPEAUHSFCD__@@HJ@Z
?cdr_ToBCD@@YAJPEAEI@Z
?cdrtoc_AllocIndexList@@YAJPEAU_indexlist@@@Z
?cdrtoc_AllocTrackList@@YAJPEAU_cdrtracklist@@@Z
?cdrtoc_Copy@@YAJPEAU_cdrtoc@@0@Z
?cdrtoc_FillBytesPerFrame@@YAJPEAU_cdrtoc@@@Z
?cdrtoc_FillTrackLengths@@YAJPEAU_cdrtoc@@@Z
?cdrtoc_FindTrack@@YAHPEAU_cdrtoc@@K@Z
?cdrtoc_FreeIndexList@@YAJPEAU_indexlist@@@Z
?cdrtoc_FreeTrackList@@YAJPEAU_cdrtracklist@@@Z
?cdrtoc_GetTrack@@YAPEAU_cdrtrack@@PEAU_cdrtoc@@I@Z
?cdrtoc_GetTrackCount@@YAHPEAU_cdrtoc@@@Z
?cdrtoc_HasAudioTracks@@YAHPEAU_cdrtoc@@@Z
?cdrtoc_HasDataTracks@@YAHPEAU_cdrtoc@@@Z
?cdrtoc_IsMixedMode@@YAHPEAU_cdrtoc@@@Z
?cdrtoc_ReAllocIndexList@@YAJPEAU_indexlist@@@Z
?cdrtoc_ReAllocTrackList@@YAJPEAU_cdrtracklist@@@Z
?cdrtoc_Validate@@YAJPEAU_cdrtoc@@@Z
?cdrtrack_FillBytesPerFrame@@YAJPEAU_cdrtrack@@@Z
?cdrtrack_FillBytesPerFrameTAO@@YAJPEAU_cdrtrack@@@Z
?cdrtrack_GetIndex@@YAPEAKPEAU_cdrtrack@@I@Z
?cdrtrack_GetIndexCount@@YAHPEAU_cdrtrack@@@Z
?cdrtrack_SetIndex@@YAJPEAU_cdrtrack@@IK@Z
?cdtext_Copy@@YAJPEAU_sfcdtext@@PEBU1@@Z
?cdtext_Create@@YAJPEAU_sfcdtext@@@Z
?cdtext_Destroy@@YAJPEAU_sfcdtext@@@Z
?cdtext_FillTOCINFO@@YAJPEAU_sfcdtext@@PEAU_cdrtoc@@@Z
?cdtext_GetDescription@@YAPEBU_cdtexttrkfield@@PEBU_sfcdtext@@I@Z
?cdtext_GetGenre@@YAJPEBU_sfcdtext@@PEAKPEA_WI@Z
?cdtext_GetItemText@@YAJPEBU_sfcdtext@@IIPEA_WI@Z
?cdtext_GetItemText@@YAPEB_WPEBU_sfcdtext@@II@Z
?cdtext_GetTrackCount@@YAHPEBU_sfcdtext@@@Z
?cdtext_IsCDTextValid@@YAHPEBU_sfcdtext@@@Z
?cdtext_PackFromRawPW@@YAXPEAU_cdtextpack@@PEAEI@Z
?cdtext_PacketsToSfCDText@@YAJPEAU_sfcdtext@@PEAU_cdtextpack@@K@Z
?cdtext_RawPWFromPack@@YAXPEAEPEAU_cdtextpack@@I@Z
?cdtext_ReadTextDataFromDrive@@YAJPEAUHSFCD__@@PEAU_sfcdtext@@@Z
?cdtext_Reset@@YAJPEAU_sfcdtext@@K@Z
?cdtext_RiffLoad@@YAJPEAXPEAU_sfcdtext@@H@Z
?cdtext_RiffLoadDes@@YAJPEAXPEAU_cdtexttrkfield@@PEAK@Z
?cdtext_RiffLoadDesList@@YAJPEAXPEAU_sfcdtext@@K@Z
?cdtext_RiffSave@@YAJPEAXPEAU_sfcdtext@@HPEAK@Z
?cdtext_RiffSaveDes@@YAJPEAXPEAU_cdtexttrkfield@@PEAK@Z
?cdtext_RiffSaveDesList@@YAJPEAXPEAU_sfcdtext@@PEAK@Z
?cdtext_SetGenre@@YAJPEAU_sfcdtext@@KPEA_W@Z
?cdtext_SetItemText@@YAJPEAU_sfcdtext@@IIPEB_W@Z
?cdtext_SfCDTextToPackets@@YAJPEAU_sfcdtext@@PEAU_cdtextpack@@PEAK@Z
?cdtext_SfCDTextToRawPW@@YAJPEAU_sfcdtext@@PEAPEAEPEAK@Z
?devdes_GetScsiInfo@@YAHPEAUtPARAMETERS_DEVDES@@PEAU_INQUIRYDATA@@@Z
?ldr_DriverConfig@@YAHPEAUtPARAMETERS_LDRCFG@@PEAUHWND__@@@Z
?ldr_FillInterfaceList@@YAXPEAUHWND__@@I@Z
?ldr_FindInterface@@YAIPEA_W@Z
?ldr_GetDriverErrorString@@YAHPEAUtPARAMETERS_LDRCFG@@PEAUtCDR_ERRORDATA@@PEA_WI@Z
?ldr_GetInterface@@YAPEAUtLDR_INTERFACE@@H@Z
?ldr_GetInterfaceCaps@@YAHHPEAUldrcaps_tag@@I@Z
?ldr_GetNumInterfaces@@YAHXZ
?ldr_GetStatus@@YAHPEAUtPARAMETERS_LDRCFG@@PEAUtLDRPARAMS_STATUS@@@Z
?ldr_LoadErrorString@@YAHHPEA_WI@Z
?ldr_Move@@YAHPEAUtPARAMETERS_LDRCFG@@PEAUtLDRPARAMS_MOVE@@@Z
?ldr_Reset@@YAHPEAUtPARAMETERS_LDRCFG@@@Z
?ldrcfg_SetErrorState@@YAHPEAUtPARAMETERS_LDRCFG@@PEAUtCDR_ERRORDATA@@@Z
?pqlist_ValidateAgainstDrive@@YAHPEAUHWND__@@PEAUHSFCD__@@PEAUtSFLIST@@H@Z
?pqlist_ValidateAgainstRedbook@@YAHPEAUHWND__@@PEAUtSFLIST@@1H@Z
?pqlist_ValidateFramePositions@@YAHPEAUHWND__@@PEAUHSFCD__@@PEAUtSFLIST@@2H@Z
?prn_DriverConfig@@YAHPEAUtPARAMETERS_PRNCFG@@PEAUHWND__@@@Z
?prn_FillInterfaceList@@YAXPEAUHWND__@@I@Z
?prn_FindInterface@@YAIPEA_W@Z
?prn_GetDriverErrorString@@YAHPEAUtPARAMETERS_PRNCFG@@PEAUtCDR_ERRORDATA@@PEA_WI@Z
?prn_GetInterface@@YAPEAUtPRN_INTERFACE@@H@Z
?prn_GetInterfaceCaps@@YAHHPEAUprncaps_tag@@I@Z
?prn_GetNumInterfaces@@YAHXZ
?prn_LoadErrorString@@YAHHPEA_WI@Z
?prncfg_SetErrorState@@YAHPEAUtPARAMETERS_PRNCFG@@PEAUtCDR_ERRORDATA@@@Z
?sfDiscID@@YAKPEAU_cdrtoc@@@Z
?sfvcdGetENTRIES_INFO@@YAPEAUtagSFVCD_ENTRIES@@PEAUtagDIR_ENTRY@@@Z
?sfvcdGetLOT_VCD@@YAPEAUtagSFVCD_LOT@@PEAUtagDIR_ENTRY@@@Z
?sfvcdGetPSD_VCD@@YAPEAUtagSFVCD_PSD@@PEAUtagDIR_ENTRY@@@Z
?sfvcdGetVCD_INFO@@YAPEAUtagSFVCD_INFO@@PEAUtagDIR_ENTRY@@@Z
DibCleanupSubpixelParam
DibCopy_OpenCL_Initialize
DibCopy_OpenCL_Shutdown
DibInterlace_OpenCL_Initialize
DibInterlace_OpenCL_Shutdown
DibPrepareSubpixelParam
DllMain
Edit_CursorToEnd
HotCheckNTSCYIQ
HotCheckNTSCYIQReturn
HotCheckNTSCYUV
HotCheckNTSCYUVReturn
HotCheckPALYUV
HotCheckPALYUVReturn
Internet_BrowseWebPage
Internet_MailFile
Internet_SendFeedback
Internet_SendMail
SFDIBPIXEL_To_SFHSL
SFDIBPIXEL_To_SFHSL_Float
SFHSL_To_SFDIBPIXEL
SFHSL_To_SFDIBPIXEL_Float
SFHSL_To_SFRGBA
SFHSL_To_SFRGBAFLOAT
SFRGBAFLOAT_To_SFHSL
SFRGBA_To_SFHSL
SFSMPTE_AddSMPTE
SFSMPTE_FrameCountToSMPTE
SFSMPTE_IncrementByFrame
SFSMPTE_NanoToSMPTE
SFSMPTE_SMPTECompare
SFSMPTE_SMPTEToFrameCount
SFSMPTE_SMPTEToNanos
SFSMPTE_SubtractSMPTE
SFSMPTE_TextToSMPTE
ScopeInitialize
ScopeInst_Deinit
ScopeInst_Draw
ScopeInst_GetCount
ScopeInst_GetSize
ScopeInst_GetStyle
ScopeInst_Init
ScopeInst_Message
ScopeInst_Move
ScopeInst_Reset
ScopeInst_SetColors
ScopeInst_SetCount
ScopeInst_SetEnabled
ScopeInst_SetFade
ScopeInst_SetOwnerHwnd
ScopeInst_SetPos
ScopeInst_SetRange
ScopeInst_SetStyle
ScopeInst_SetTicks
ScopeTerminate
SfActivatePrevAppInstance
SfAddExtensionToPathName
SfAddSlashToPathName
SfAllowCPUSupport
SfAppendToPathName
SfAudioCopy_UnitTest
SfAudioPeak_CalcMinMax
SfAudioPeak_CreateInstance
SfAudioPeak_CreateMemoryInstance
SfAudioPeak_GetMinMaxFunction
SfAudioPeak_GetPeakResampleFunction
SfAudioPeak_HandleMediaRename
SfAudioPeak_InitMinMaxArray
SfAudioPeak_Resample
SfAudio_AllocAndCopyWfx
SfAudio_BitsFromSampleType
SfAudio_BytesFromSampleType
SfAudio_ChannelChange
SfAudio_ChannelChangeAvg
SfAudio_Copy
SfAudio_CopyChannelToAll
SfAudio_CopyChannelToChannel
SfAudio_CopyChannelToMultiMono
SfAudio_CopyChannelToMultiMono2
SfAudio_CopySwapStereoChannels
SfAudio_ExtractChannel
SfAudio_ExtractChannelPair
SfAudio_FillSilence
SfAudio_FillSilenceChannel
SfAudio_FillWithSample
SfAudio_FixBadWfx
SfAudio_FormatTagFromSampleType
SfAudio_GetCopyFunction
SfAudio_GetCopyFunction2
SfAudio_GetNormalizeFactor
SfAudio_GetSampleType
SfAudio_GetSampleType2
SfAudio_InsertChannel
SfAudio_IsEqualFormat
SfAudio_MonoChannel
SfAudio_MuteChannel
SfAudio_SwapStereoChannels
SfBWFField_Copy
SfBWFField_Free
SfBWFList_Copy
SfBWFList_DeleteItem
SfBWFList_Free
SfBWFList_GetItemIndex
SfBWFList_SetItem
SfBeep
SfBitmapColorTranslate
SfBltStandardUIGlyph
SfCalcPathEllipsis
SfCalcPathEllipsisEx
SfCalcPathEllipsisExCtl
SfCalcStringEllipsis
SfCalcStringEllipsisFromEnd
SfCanMoveFolder
SfCchPrintF
SfChannelizeStereoName
SfCleanMenu
SfColorrefToText
SfColorrefToTextEx
SfComposeStr
SfComputeWndCenter
SfCopyHandle
SfCountBits
SfCreateBitMask
SfCreateBitmapMask
SfCreateDialogIndirectParam
SfCreateDialogParam
SfCreateDirectory
SfCreateTempFileAndName
SfCreateTempFileAndNameEx
SfCreateToolbarEmpty
SfCullMenu
SfDWordLongToText
SfDWordLongToTextN
SfDWordToText
SfDWordToTextN
SfDeleteDirectoryTree
SfDeleteFiles
SfDeleteMetric
SfDeleteMetricUsingName
SfDeltaMicrosecEx
SfDeltaMillisecEx
SfDialogBoxIndirectParam
SfDialogBoxParam
SfDibAlloc
SfDibBoxFilterOCL
SfDibCopy
SfDibCopyInterlace
SfDibCopyInterlaceCopyFieldOCL
SfDibCopyInterlaceOCL
SfDibCopyInterlaceVerticalOCL
SfDibCopyOCL
SfDibCreateColorQuantizer
SfDibFadeToColor
SfDibFadeToColorOCL
SfDibFillRect
SfDibFillRectChannel
SfDibFillRectOCL
SfDibFlip
SfDibFree
SfDibGetPixel
SfDibInfo
SfDibMergeFields
SfDibMergeFieldsRotated
SfDibPrepareRects
SfDibQuantizePalette
SfDibResampledInterlacedFrameOCL
SfDibScale_BiCubic
SfDibScale_BiCubicSubPixel
SfDibScale_Bilinear
SfDibScale_BilinearSubPixel
SfDibSet
SfDibSetPixel
SfDibSwapRB
SfDibSwapRB_OCL
SfDib_Initialize
SfDirectoryUpOneLevel
SfDisallowCPUSupport
SfDlgDeltaControlMove
SfDlgDeltaControlSize
SfDlgEnableControls
SfDlgGetControlRect
SfDlgInitFont
SfDlgShowControls
SfDlgUndropComboBox
SfDlgWhichRadioButton
SfDllCreateInstance
SfDllCreateInstanceFromFile
SfDoesFileExist
SfDoesMetricExist
SfDosGetDateTime
SfDosGetDateTimeUTC
SfDoubleToText
SfDoubleToTextN
SfDrawEdge
SfDrawOutline
SfDrawStandardUIGlyph
SfEnableAllMenuItems
SfEnumResourceLanguages
SfErrorHandler_ComposeErrorText
SfErrorHandler_DetailsAddString
SfErrorHandler_DetailsInfo
SfErrorHandler_DetailsInit
SfErrorHandler_DetailsSetHyperlink
SfErrorHandler_DumpExceptionRecord
SfErrorHandler_ExceptionFilter
SfErrorHandler_GetContextString
SfErrorHandler_GetHresultString
SfErrorHandler_GetLastError
SfErrorHandler_MsgBox
SfErrorHandler_MsgBoxText
SfErrorHandler_TranslateCommDlgError
SfErrorHandler_TranslateWin32Error
SfExtractResourceToFile
SfFileIsAiff
SfFileIsWave
SfFileIsWave64
SfFilenameFormat
SfFilenameFormatForCtl
SfFilenameFormatForWidth
SfFilenameLogicalCompare
SfFindResInstance
SfFindResource
SfFindResourceMulti
SfFindSubMenu
SfFixNameForMenu
SfFixTrashedW64
SfFixTrashedWav
SfFixWindowPlacement
SfForcePopupRectOntoDesktop
SfForceRectOntoDesktop
SfFormatDecimalNumber
SfFormatDiskFreeSpace
SfFormatFileSize
SfFormatGroupDecimalNumber
SfFormatNumber
SfFourCCToString
SfFreeUIColoredObjects
SfGetAppInstanceCount
SfGetBasePathRelative
SfGetByteSizeText
SfGetByteSizeText2
SfGetByteSizeTextWithSpace
SfGetCPUSupport
SfGetDateTime
SfGetDialogSize
SfGetDialogSizeIndirect
SfGetDialogUnitsForFont
SfGetDirectorySize
SfGetDiskFreeSpace
SfGetDiskTotalSpace
SfGetFileExecutableInfo
SfGetFileNameExtensionPtrA
SfGetFileNameExtensionPtrW
SfGetFileNamePtrA
SfGetFileNamePtrRelative
SfGetFileNamePtrW
SfGetFileNameWithoutPathOrExtension
SfGetFileSizeByName
SfGetFileWfx
SfGetFontSize
SfGetFullPathName
SfGetInat
SfGetInatN
SfGetKernelCursorBits
SfGetLabeledStringFixed
SfGetLabeledStringFloat
SfGetLocale
SfGetLongPathName
SfGetMetric
SfGetMetricAny
SfGetMetricBinary
SfGetMetricBinaryEx
SfGetMetricBool
SfGetMetricEx
SfGetMetricMultiStringEx
SfGetMetricStream
SfGetMetricStringEx
SfGetMetricUsingName
SfGetMicrosec
SfGetMicrosecEx
SfGetMillisec
SfGetMillisecEx
SfGetModuleFileName
SfGetModulePath
SfGetMultiByteFromPrintString
SfGetOS
SfGetOSSupport
SfGetPathNameFromFilePath
SfGetPixelBitsPerChannel
SfGetPixelType
SfGetPresetFolder
SfGetPrintFromMultiByteString
SfGetPrintFromWideString
SfGetPrivateProfileColorref
SfGetProcessorCount
SfGetRealClientRect
SfGetRootPathFromFilePath
SfGetSharedComponentsFolder
SfGetSpecialFolderNoVer
SfGetSpecialFolderVer
SfGetSpecialSonyDefaultFolderName
SfGetSpecialSonyFolder
SfGetSubmenuByID
SfGetSysColor
SfGetTempPath
SfGetTempStringBuffer
SfGetTextExtent
SfGetToolbarSize
SfGetUIBrush
SfGetUIColor
SfGetUIColorAbsolute
SfGetUICursor
SfGetUIFont
SfGetUIFontCharset
SfGetUIFontSize
SfGetUIPen
SfGetUIPenWithStyle
SfGetUniqueSubFolder
SfGetWideFromPrintString
SfGetdBStringFixed
SfGetdBStringFloat
SfGrayAllMenuItems
SfGrayMenu
SfGuidFromString
SfGuidToString
SfHMSFToNanoTime
SfHSLtoRGB
SfHelp_ContextHelp
SfHelp_ContextPopupHelp
SfHelp_CreateHelpFilePath
SfHelp_CreateHelpFilePathEX
SfHelp_CreatePluginHelpFilePath
SfHelp_CreateSharedHelpFilePath
SfHelp_CreateUnsharedHelpFilePath
SfHelp_GetHelpFilePath
SfHelp_HitTestToolbar
SfHelp_SetHelpFilePath
SfHexToDWordLongToken
SfHexToDWordLongTokenEx
SfHexToDWordToken
SfHexToDWordTokenEx
SfImageList_LoadImage
SfInitializeWav
SfInitializeWav64
SfInitializeWav64WithJunk
SfInitializeWavWithJunk
SfInsertW64Header
SfInsertWavHeader
SfIsAllMonitorsHighColor
SfIsDirectoryEmpty
SfIsDirectoryEmptyRecursive
SfIsDirectoryWritable
SfIsExplorerFileExtHidden
SfIsFileExecutable
SfIsFileWritable
SfIsHiddenFolderByDefault
SfIsHighColor
SfIsHighColorDisplay
SfIsMatchWildCard
SfIsMouseInControl
SfIsOS64Bit
SfIsPowerUser
SfIsWindowCaptionVisible
SfKernel_EarlyInitialize
SfKernel_GetAppKernel
SfKernel_GetAppKernelPathName
SfKernel_LateTerminate
SfKernel_SetSplash
SfKernel_UserPrefChanges
SfLang_ChangeLangInst
SfLang_Close
SfLang_DetectMultiByteCharacters
SfLang_DetectPossibleCodepage
SfLang_DisableProcessMirroring
SfLang_EnableProcessMirroring
SfLang_GetConditionedLCID
SfLang_GetInternationals
SfLang_GetLCID
SfLang_GetLangAbbrev
SfLang_GetLangllCC
SfLang_InstFromLang
SfLang_IsLCIDEnglish
SfLang_IsNameOrderReversed
SfLang_LoadUserLCIDMetric
SfLang_LoadUserLCIDMetricAppReg
SfLang_LocalizeUserName
SfLang_Open
SfLang_SaveUserLCIDMetric
SfLang_SaveUserLCIDMetricAppReg
SfLang_UpdateKernelLCID
SfLang_UpdateThreadLocale
SfLang_UseRTL
SfLineupHookWithMainDialog
SfList_AllocAndInsertItem
SfList_AllocItem
SfList_AllocSize
SfList_ArrayForceItemCount
SfList_CreateExZ
SfList_DeleteList
SfList_Destroy
SfList_FindItemRange
SfList_FindSortedInsertIndexRange
SfList_FindSortedItemRange
SfList_FindSpecificItemRange
SfList_GetCreateOptions
SfList_GetFileAndLine
SfList_GetSortCriteria
SfList_GetThreadOwner
SfList_GetUserData
SfList_GrowAllocated
SfList_HeapSort
SfList_InsertList
SfList_IsList
SfList_IsListFast
SfList_IsValidIndexSlow
SfList_MoveItemsBetweenHeapLists
SfList_MoveRange
SfList_ReAllocItem
SfList_SetThreadOwner
SfList_SetUserData
SfList_ShrinkAllocated
SfList_Sort
SfList_SortTo
SfLoadAccelerators
SfLoadBitmap
SfLoadCulledMenu
SfLoadCursor
SfLoadCursorFromBits
SfLoadCursorFromBitsEx
SfLoadIcon
SfLoadImage
SfLoadKernelCursor
SfLoadMenu
SfLoadResource
SfLoadResourceCustom
SfLoadUIBitmapEx
SfLoadUIColors
SfLoadWindowPlacement
SfLongLongToText
SfLongLongToTextN
SfLongToText
SfLongToTextN
SfMEditPrintF
SfMarker_Create
SfMeasuresAndTicksToText
SfMenuReplaceTokens
SfMessageBox
SfMetricGetName
SfMetric_Close
SfMetric_CloseAndDeleteKey
SfMetric_DeleteAll
SfMetric_DeleteAllHiveAndVersion
SfMetric_DeleteKey
SfMetric_DeleteKeyHiveAndVersion
SfMetric_DeleteUserMetrics
SfMetric_Open
SfMetric_OpenAppVersion
SfMetric_OpenRegHiveAndVersion
SfMetric_OpenSubKey
SfMoveFolder
SfMsgBoxF
SfMsgBoxId
SfMsgBoxNoF
SfMsgBoxSetAppData
SfMsgBoxSetNoUIHook
SfMsgBox_CustomExF
SfMsgBox_CustomExLinkF
SfMsgBox_CustomExNoF
SfMsgBox_CustomF
SfMsgBox_CustomNoF
SfMsgBox_TitledF
SfMsgBox_TitledNoF
SfNVPrintF
SfNanoTimeToHMSF
SfNanoTimeToMeasures
SfNanoTimeToText
SfNanoTimeToTextEx
SfNanoTimeToTextExN
SfNanoTimeToTextFormat
SfNanoTimeToTextFormatN
SfNanoTimeToTextN
SfOSVersionOK
SfOleInit
SfOnlyAllowCPUSupport
SfPixelTypeToBitAttribs
SfPrepareName
SfPrepareSubpixelParam
SfPrintF
SfPrintF_AddToken
SfPrintF_DeleteToken
SfQualifyPath
SfQueueDelete
SfQueueFind
SfQueueFindAndMoveToHead
SfQueueFindAndMoveToTail
SfQueueFindAndRemove
SfQueueFindAndRemoveRev
SfQueueFindRev
SfQueueFlush
SfQueueInitialize
SfQueueInsert
SfQueueInsertEx
SfQueueInsertExRev
SfQueueInsertHead
SfQueueMoveToHead
SfQueueMoveToTail
SfQueueRemove
SfQueueRemoveAlertable
SfQueueRemoveEx
SfQueueRemoveTail
SfQueueWait
SfRGB2UYVY
SfRGBA2UYVY
SfRGB_B64A_To_RGBA64_SubRect
SfRGB_RGBA64_To_B64A_SubRect
SfRGB_RGBA_To_B64A_SubRect
SfRGB_RGBA_To_RGBA64_SubRect
SfRGBtoHSL
SfReadFile
SfReadIStream
SfRegDeleteKey
SfRegGetSubKeyCount
SfRegisterClass
SfRegisterServer
SfRemoveSlashFromPathNameEnd
SfReplaceBasePathRelative
SfReplaceExtensionOnPathName
SfReplaceExtensionOnPathNameEx
SfSaveUIColors
SfScope_GetCount
SfScope_GetStyle
SfScope_Reset
SfScope_SetColors
SfScope_SetCount
SfScope_SetEnabled
SfScope_SetFade
SfScope_SetPos
SfScope_SetRange
SfScope_SetStyle
SfScope_SetTicks
SfSelfRegister_IsSupported
SfSelfRegister_Register
SfSetCPUClassBySupport
SfSetDlgItemTextF
SfSetDlgItemTextId
SfSetDlgItemTextNoF
SfSetDlgItemTextNoFlashF
SfSetDlgItemTextNoFlashNoF
SfSetFileWfx
SfSetHorizHookControlPos
SfSetLangID
SfSetLocale
SfSetMetric
SfSetMetricBinary
SfSetMetricMultiString
SfSetMetricStream
SfSetMetricString
SfSetMetricUsingName
SfSetPresetFolder
SfSetSpecialSonyFolder
SfSetUIColor
SfSetWindowTextF
SfSetWindowTextId
SfSetWindowTextNoF
SfSizeofResource
SfStringReplaceChars
SfStringReplaceCharsW
SfStripWhiteSpace
SfSummary_Compare
SfSummary_Copy
SfSummary_Free
SfSummary_GetItemIndex
SfSummary_GetItemText
SfSummary_GetStringFromFile
SfSummary_Load
SfSummary_LoadUNFO
SfSummary_Merge
SfSummary_Save
SfSummary_SaveUNFO
SfSummary_SetItem
SfSysColorsAlphaBlend
SfTextToBeatsTicks
SfTextToColorref
SfTextToColorrefToken
SfTextToColorrefTokenEx
SfTextToDWordLongToken
SfTextToDWordLongTokenEx
SfTextToDWordToken
SfTextToDWordTokenEx
SfTextToDoubleToken
SfTextToDoubleTokenEx
SfTextToLongLongToken
SfTextToLongLongTokenEx
SfTextToLongToken
SfTextToLongTokenEx
SfTextToMeasuresBeatsTicks
SfTextToMusicTimeToken
SfTextToNanoTimeToken
SfTextToNanoTimeToken2
SfTextToNanoTimeTokenEx
SfTextToTicks
SfTextToTimeToken
SfTicksToText
SfTimer_LateInitialize
SfUYVY2RGB
SfUYVY2RGBA
SfUnregisterClass
SfVPrintF
SfValidateFileName
SfVersion_GetString
SfVideoDSP_ForceExternRef
SfVideo_GetAttribsText
SfVideo_GetAttribsTextEx
SfVideo_GetFormatText
SfVideo_InitBitmapInfo
SfVideo_IsCompressed
SfVideo_PaletteEntryFromRGBA
SfVideo_PaletteRGBAFromEntry
SfWindowPlacement
SfWndCenter
SfWndCenterAndResize
SfWritePrivateProfileColorref
SfWritePrivateProfileDWord
SfWritePrivateProfileDouble
SfWritePrivateProfileInt
SfXCHGGetFunctionPointers
SfYUV420ToRGBA
SfYUV420ToRGBA_Half
SfYUV420ToRGBA_HalfHorz
SfYUV420ToRGBA_Half_BlendFields
SfYUV420ToRGBA_Quarter
SfYUV420ToRGBA_QuarterHorz_HalfVert_BlendFields
SfYUV420ToRGBA_Quarter_BlendFields
SfYUV422PlanarToRGBA
SfYUVImageBytesAndOffsets
SfYUV_I420_To_I420_SubRect
SfYUV_I420_To_NV12
SfYUV_I420_To_YV12
SfYUV_NV12_To_I420
SfYUV_NV12_To_I420_SubRect
SfYUV_P010_To_I420
SfYUV_P010_To_P010_SubRect
SfYUV_P210_To_I420
SfYUV_P210_To_v210
SfYUV_P216_To_P216_SubRect
SfYUV_P410_To_I420
SfYUV_RGBToYUV
SfYUV_RGBToYUV_OCL
SfYUV_Y210_To_Y210_SubRect
SfYUV_YUVToRGB
SfYUV_YUVToRGB_OCL
SfYUV_YUVToYUV
SfYUV_YV12_To_I420
SfYUV_YV12_To_I420_SubRect
SfYUV_YV16_To_YUYV_SubRect
SfYUV_v210_TO_UYVY
SfYUV_v210_To_P210
SpinnerInitialize
SpinnerInst_DefScrollProc
SpinnerInst_Deinit
SpinnerInst_Draw
SpinnerInst_GetSize
SpinnerInst_Init
SpinnerInst_Message
SpinnerInst_Move
SpinnerInst_SetId
SpinnerInst_SetOwnerHwnd
SpinnerInst_SetScrollProc
SpinnerTerminate
Spinner_DefScrollProc
TrackbarInitialize
TrackbarInst_DefScrollProc
TrackbarInst_Draw
TrackbarInst_DrawThumb
TrackbarInst_GetMinSize
TrackbarInst_GetSize
TrackbarInst_GetThumbRect
TrackbarInst_Init
TrackbarInst_Message
TrackbarInst_Move
TrackbarInst_SetId
TrackbarInst_SetOwnerHwnd
TrackbarInst_SetThumbBitmap
TrackbarInst_SetThumbImageList
TrackbarTerminate
Trackbar_DefScrollProc
XPTheme_Cleanup
XPTheme_Default
XPTheme_DrawFrameControl
XPTheme_GetDefault
XPTheme_Handle_WM_THEMECHANGED
XPTheme_Initialize
YUV_OpenCL_Initialize
YUV_OpenCL_Shutdown
aiff_ConvertRate
aiff_CreateRate
aiff_WriteByteSwap16
aiff_WriteByteSwap32
displist64_Load
displist64_Save
displist_Create
displist_CreateBitmapFromFile
displist_Destroy
displist_Free
displist_GetItem
displist_Load
displist_LoadFromStream
displist_Save
displist_SetItem
iff_ByteSwap16
iff_ByteSwap32
iff_DeleteChunk
iff_FindChunkFromStart
iff_FindChunkHeader
iff_FindMarker
iff_GetAIFFWfx
iff_IsAIFFFile
iff_IsAIFFFileEx
iff_ReadChunkHdr
iff_ReadDWORD
iff_ReadFormType
iff_ReadWORD
iff_SeekChunkHeader
iff_SkipChunk
iff_WriteChunk
iff_WriteDWORD
iff_WriteFileID
iff_WriteWORD
riff64_AmountWritten
riff64_CompleteChunk
riff64_DeleteChunk
riff64_FindChunkHeader
riff64_FindChunkHeaderInRIFF
riff64_FindListChunk
riff64_FindListChunkFromStart
riff64_GetNumListEntries
riff64_Pad
riff64_PrepareChunk
riff64_PrepareList
riff64_ReadChunkHeader
riff64_ReadData
riff64_ReadDataAlloc
riff64_ReadDataBounded
riff64_ReadFileID
riff64_ReadListHeader
riff64_RestoreLocation
riff64_SaveLocation
riff64_SeekDataStart
riff64_SeekListEntry
riff64_SetRIFFSize
riff64_SkipChunk
riff64_UpdateRIFFSize
riff64_ValidateChunkHeader
riff64_WriteChunk
riff64_WriteChunkHeader
riff64_WriteChunkToFile
riff64_WriteData
riff64_WriteFileID
riff64_WriteListHeader
riff64_WriteToFile
riff64_getGUIDLabel
riff64_getGUIDLabelProperly
riff_DeleteChunk
riff_FindChunkHeader
riff_FindChunkHeaderInRIFF
riff_FindListChunk
riff_FindListChunkFromStart
riff_GetFileSize
riff_GetNumListEntries
riff_ReadANSIString
riff_ReadCDAFile
riff_ReadChunkHeader
riff_ReadData
riff_ReadDataAlloc
riff_ReadDataBounded
riff_ReadFileID
riff_ReadListHeader
riff_ReadRIFFCDDA
riff_RestoreLocation
riff_SaveLocation
riff_SeekDataStart
riff_SeekListEntry
riff_SetRIFFSize
riff_SkipChunk
riff_UpdateRIFFSize
riff_ValidateChunkHeader
riff_WriteANSIString
riff_WriteChunk
riff_WriteChunkHeader
riff_WriteFileID
riff_WriteListHeader
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5.3MB
Virtual Size
5.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
25KB
Virtual Size
217KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
87KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
strings
Size
562KB
Virtual Size
562KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.SFCDIX
Size
155KB
Virtual Size
154KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
sflang_t
Size
55KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=32420,
count=2, id=253, version=32420,
count=18, id=261, version=32420,
count=8, id=260, version=32420,
count=5, id=259, version=32420,
count=3, id=260, version=29395,
count=24, id=257, version=29395,
count=5, id=257, version=32532,
count=482, id=1, productName=Unmarked objects,
count=7, productName=Unmarked objects (old),
count=115, id=265, version=32532,
count=1, id=256, version=32532,
count=1, id=255, version=32532,
count=1, id=151,
count=1, id=258, version=32532,
Installer/act/globdata.ini
- SHA256 7912e3fcf2698cf4f8625e563cd8215c6668739cae18bd6f27af2d25bec5c951
- MD5 0a6b586fabd072bd7382b5e24194eac7
- SHA1 60e3c7215c1a40fbfb3016d52c2de44592f8ca95
- SHA512 b96b0448e9f0e94a7867b6bb103979e9ef2c0e074bcb85988d450d63de6edcf21dc83bb154aafb7de524af3c3734f0bb1ba649db0408612479322e1aa85be9f4
- TLSH T1AF11D64846A04125E2F2485298E21CEA9DAB74235E39E95A00D52BCF9AB4E41FD3634B
- MD5 SHA1 SHA512 TLSH
Installer/act/kernel.bin
- SHA256 952ca2531233f5993cadc72e6396983d96957a435c9b78a568dd8ff4fa9ca4d4
- MD5 d9b31471fa5f562bf746a1fd1f07094a
- SHA1 95a381ad0e3aa296aa0545ca5b86cb5ca96924b5
- SHA512 af2c1f585001ae50bdb1dd0d407eff25fb0b4bd3c98c8c07da873afedf7aef3b75c4757d583616a666154b2911be3744a4c358a4c20afed24241ca82be48952c
- SSDEEP 12288:GEakMQ33cCxTWI8W8o9hMCiWIUdJWz3L1bfQmudC4WPgHGwgQ3piVnMlPs2n6aJk:3aDw3h9/xZjM/dkWzBbn0rGwgQ3piVnx
- TLSH T1EDB40E68273B0BA5E106ECC554921C03DF54A39633BEDEF19F579EB60350CAAA4B4CD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Installer/act/lib/EppManifest.dll.mui
- SHA256 7e1ebbefca708f911b9ec83a7a5b5e0d4137950a2ead5eaa8040e91a4395dc6d
- MD5 5fd4c80b53fa105d4ab070b6ab32278c
- SHA1 21eeb2f26a52e84eaaa4a6af9fd5b7051991628d
- SHA512 5deb775c514eaa1988e2d73bcfb8ad4ecdb40d20bd9eb956f73073b5df5fab27d545b6917f2663a50fd737df1acb11fdeb88f5f3c201967ba473c74ca646cde2
- TLSH T19F51390A9BB74117F0AA4B318BE745D62BFD7D137692A16FCF05201824A41295AE0FF3
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Installer/act/lib/MpAsDesc.dll.mui
- SHA256 5ce03545cd628d5b3b2756690449a4895b38233db328c42b7c590d410acd058b
- MD5 ebf57b30f3ebf0a190e52d23d404eb9d
- SHA1 803f3875e5ce9de8ff0129956a4e1693f8063bfa
- SHA512 0c42457780e32e9103bbe6cb2958e5cf5729aa2201d6e3015f0126baccd914264e95abf1f99542bbf38919d7fce2c25cfc54c641705f9743b262b61d2763caf8
- SSDEEP 384:Y3PMBRJYGHUp8wtVM8xrYXoHEPbl0af619kSG9yvJGNV8GzWE0:QbrOh0
- TLSH T18843F44FEABCE564F899F2720F6348E7106AB710271895CEA68F7C68602C63573356C7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
56KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Installer/act/lib/MpEvMsg.dll.mui
- SHA256 337d7db6d5b025f7ef9cd4b3451f70e03367b9bcf2e5cd27f79112b56c881f93
- MD5 c897fcc7aa7076cd5811eaa0bec573c4
- SHA1 da6279b19c3ceefce26f1d28d09bfbda4e18a54d
- SHA512 3a246260a0a2e476efa805bd88472cc2b3338888e6533aada62ca08b1cf20df0ef60b74d73ce09913e4be8fcc9cbab6e94cb4d7d87264342d662f1c659b7dd00
- SSDEEP 192:FpDOkKFqqXbRFp/opQ+yARMFTw0Thx49laYZUBmynWeIxbNxXed2DB4iW+orDgFg:FpDtGbvhMhmMUBmKYDp0ra/rkfzkWc+
- TLSH T15F23AE0FA9BFD290E854D3711B6284E201297B9063B9D4C9978FFD7870985363B247EB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
46KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Installer/act/local/DefenderCSP.dll
- IMPHASH dc6e642dc387549da85c120a390dcc65
- SHA256 e9e08a225fd2b0e405fcdf941ab801a392c730b21a960012af5da583731e2586
- MD5 a9665cb49312498993a85d7f42e05f01
- SHA1 744d49cb7d4facdf796f7652f7ddca9a665258da
- SHA512 aabc8e0f3e0666d48ebba87ccacda5b90dae9e7fb6c08d56b21d5942b2dbc55012ba6c216d429d80e72ccf08e4a18e156277d46ac27cceee5e18f3256694fddd
- SSDEEP 3072:ce0Te+mTVxdl7Vk/BBs8H3iqNJgmDtT+kgJoS0MTU8ZVKTegU0s5nAqX:c9e+OVPEBBFBHF98Zt
- TLSH T168246D5A73A400B6E977C135C9538A06F6B3B4591B218BCF1364437EAF6F3E09939B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
29:8a:ea:ad:f1:5f:a1:a5:96:0d:89:4c:00:b3:23:c2:b8:47:e1:6c:44:51:41:dd:09:d5:bd:5d:9d:d1:74:59
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 25, 2019
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:31:32:34:cb:af:a8:ab:9a:4d:00:00:00:00:02:31
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:04:09:01:75:08:58:87:2d:29:00:00:00:00:01:04
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 6, 2019 - Dec 4, 2020
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
10
Entry point
69648
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
DefenderCSP.pdb
kernel32
MultiByteToWideChar
ExitProcess
GetModuleHandleW
GetModuleHandleExW
GetProcessHeap
WideCharToMultiByte
HeapSize
HeapReAlloc
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
RtlPcToFileHeader
RaiseException
EncodePointer
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LCMapStringW
LoadLibraryExW
GetStringTypeW
GetProcAddress
FreeLibrary
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
HeapAlloc
GetCurrentThreadId
InitializeCriticalSection
HeapDestroy
CreateFileW
DeleteFileW
SetFileAttributesW
FindNextFileW
FindClose
GetFileAttributesW
GetExitCodeProcess
ReadFile
GetFileSizeEx
WriteFile
SetFilePointerEx
ExpandEnvironmentStringsW
GetModuleFileNameW
WaitForSingleObject
GetSystemDirectoryW
CreateEventW
FileTimeToSystemTime
FindFirstFileExW
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetFileType
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
WriteConsoleW
SetLastError
GetLastError
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CloseHandle
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
advapi32
RegOpenKeyExW
RegQueryValueExW
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
TraceMessage
RegCloseKey
ole32
CoTaskMemFree
CoTaskMemAlloc
mpclient
MpHandleClose
MpUtilsExportFunctions
MpOfflineScanInstall
MpThreatQuery
MpThreatEnumerate
MpThreatOpen
MpManagerStatusQueryEx
MpConfigUninitialize
MpConfigInitialize
MpConfigOpen
MpConfigGetValueAlloc
MpConfigClose
MpFreeMemory
MpConfigGetValue
MpConfigSetValue
MpManagerOpen
MpManagerVersionQuery
user32
UnregisterClassA
DllCanUnloadNow
DllGetClassObject
Name
.text
Size
127KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=257, version=27412,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=260, version=26213,
count=21, id=257, version=26213,
count=326, id=1, productName=Unmarked objects,
count=29, id=260, version=27412,
count=14, id=259, version=27412,
count=202, id=261, version=27412,
count=1, id=256, version=27412,
count=70, id=265, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Installer/act/local/EppManifest.dll
- SHA256 00395278372faaa6d1218598edcf71c518a25fe1294444ba925d185340669f5e
- MD5 54abd7931a6492b29bbb3bb413b036bf
- SHA1 7e7bc93f3a993b6703ababb0514763008b0e393e
- SHA512 ae53fc7c8e619b8fcdbc3feaf663e4f3ee7c9dd33c22d3d56fa3426d8fba259ae5e0fe1d8b41cd1d92d7ab0227533aa086195ad4ac14a886225d41f3d045c3ce
- SSDEEP 3072:89QqQUH6HNaTx9F7qIIuwSJ5FSpw2phBB:ma
- TLSH T1EDF485656A88E333C8029738CC13A5F5562A3DC5DA18415BFD783E2EF73E9B024ED994
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
66:71:0a:9c:0f:df:54:e7:9c:2a:da:d8:a8:5c:f1:7c:3e:07:a9:e4:40:56:47:b8:f4:f7:f8:62:14:82:17:45
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 7, 2019
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:02:91:63:5c:c5:b4:59:b9:3c:00:00:00:00:01:02
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 6, 2019 - Dec 4, 2020
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
706KB
Virtual Size
706KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Installer/act/mshtmI.dll
- IMPHASH 553af065af7b2fe1efd5ef3893fdefa8
- SHA256 6b3eb32ff53bc3dc5e315ee9d427194ad33e41414fca50217e99e22f179b906d
- MD5 bf26ced3e757f560ef66151e475dd7d8
- SHA1 a4598bdca53710bc33550756ba494039cdefeda7
- SHA512 2b3c96784770b4beca0c080c076d3ec19cc1e73cd1b8cc0add36c8ed73826f8ee07e5ac5564a54083e76716ce5d3ea6f75ef2b95734a0ec5a80013640a0edcfc
- SSDEEP 393216:CoQwzklNkFNV9bUR53WGm2UQ87gDmPSsRNy:0wwsR
- TLSH T1DA377C1A66E88184C4B6E038D65B4A4BFAB17C21233157CF01B177795F337E66A3E7A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
1330368
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mshtml.pdb
msvcrt
wcspbrk
strncpy_s
_lock
_unlock
__dllonexit
_onexit
?terminate@@YAXXZ
??1type_info@@UEAA@XZ
_XcptFilter
_amsg_exit
_initterm
tanf
_statusfp
_beginthreadex
fwprintf
_flushall
fclose
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
__CxxFrameHandler3
malloc
free
realloc
strtoul
strpbrk
bsearch_s
modf
wcstod
wcstok_s
towlower
_wtoi64
_aligned_free
_aligned_malloc
_stricmp
iswgraph
_itoa_s
swprintf_s
bsearch
_finite
_wtoi
_isnan
_ui64tow_s
_wcstoui64
_wtof
iswalnum
iswdigit
iswalpha
_wcslwr_s
_i64tow_s
wcscat_s
_ultow_s
__C_specific_handler
qsort
wcscpy_s
_vsnprintf
_wcsupr
_wcslwr
tolower
wcsncpy_s
strstr
strchr
strncmp
wcsrchr
_wcsupr_s
_itow_s
abort
wcstol
wcsncmp
_wtol
_wcsnicmp
memmove_s
memcpy_s
_errno
wcstoul
rand_s
fflush
strnlen
wcscspn
wcstombs_s
towupper
iswlower
strrchr
_strnicmp
isalpha
isxdigit
isdigit
wcsncat_s
_fpclass
_mbsicmp
_mbscspn
_mbsspn
_mbsstr
isspace
_mbschr
_ismbcdigit
_mbscmp
iswcntrl
_ultoa_s
swscanf_s
_wcsrev
wcsspn
exit
fprintf
_fileno
_isatty
fwrite
atof
atoi
strtol
qsort_s
rand
sin
powf
memset
memmove
memcpy
wcsstr
_ltow
_ltow_s
_clearfp
_controlfp_s
iswascii
calloc
_resetstkoflw
_wcsicmp
wcsnlen
sinf
sqrt
sqrtf
strcmp
tan
_vsnprintf_s
wcschr
_vsnwprintf
__iob_func
iswspace
iswpunct
_purecall
_HUGE
_CxxThrowException
_setjmp
acosf
asinf
atan2
atan2f
ceil
ceilf
cos
cosf
floor
floorf
fmod
fmodf
memcmp
wcscmp
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetModuleFileNameA
DebugBreak
GetProcAddress
IsDebuggerPresent
OutputDebugStringW
SetLastError
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
OpenSemaphoreW
QueryPerformanceCounter
GetProfileIntA
GlobalFree
GetTickCount
PowerSetRequest
PowerClearRequest
PowerCreateRequest
LoadLibraryExW
MulDiv
GetTickCount64
GetSystemTimeAsFileTime
CreateMutexExW
CreateSemaphoreExW
CreateThreadpoolTimer
WideCharToMultiByte
GlobalSize
GlobalLock
GlobalUnlock
IsDBCSLeadByteEx
MultiByteToWideChar
OpenProcess
GetCPInfo
GetSystemInfo
GetSystemDefaultLocaleName
GetUserDefaultLocaleName
GlobalMemoryStatusEx
FormatMessageW
CreateThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
SubmitThreadpoolWork
GetFullPathNameW
SetFilePointer
WriteFile
ReadFile
GlobalAlloc
GetTempPathW
GetTempFileNameW
CreateFileW
GetFileSize
DeleteFileW
GetSystemTime
SystemTimeToFileTime
FindFirstFileW
FindClose
CopyFileW
GetFileType
WaitForMultipleObjectsEx
CreateEventExW
Sleep
ResolveLocaleName
GetLocaleInfoEx
GetUserGeoID
GetGeoInfoW
IsValidLocaleName
GetEnvironmentVariableW
SetEnvironmentVariableW
InitializeCriticalSectionAndSpinCount
CreateMutexW
GetFileAttributesW
InitOnceExecuteOnce
CompareStringEx
GetSystemTimeAdjustment
GetVersionExW
TrySubmitThreadpoolCallback
InitializeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
LoadLibraryW
ResumeThread
GetUserDefaultLCID
GetLocalTime
GetACP
LocaleNameToLCID
LCIDToLocaleName
GetUserDefaultUILanguage
IsValidCodePage
GetExitCodeThread
ResetEvent
lstrcmpiA
lstrcmpA
InitOnceInitialize
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
QueryDepthSList
CompareFileTime
TerminateThread
GetActiveProcessorCount
GetFileTime
DeleteFiber
SwitchToFiber
CreateFiber
ConvertThreadToFiber
ConvertFiberToThread
CompareStringOrdinal
SetEndOfFile
CreateFileMappingW
FlushViewOfFile
lstrcmpW
GetLocaleInfoW
GetDiskFreeSpaceW
FileTimeToSystemTime
CompareStringW
LCMapStringW
GetFileSizeEx
ExpandEnvironmentStringsW
GetSystemDirectoryW
GetCurrentThread
lstrcmpiW
VerSetConditionMask
VerifyVersionInfoW
SetThreadPreferredUILanguages
GetCommandLineW
GlobalDeleteAtom
GlobalAddAtomW
GlobalFindAtomW
HeapSetInformation
GetStringTypeExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
SleepConditionVariableSRW
WaitForSingleObjectEx
WerGetFlags
WerSetFlags
InitializeCriticalSectionEx
ReleaseSemaphore
GetLastError
ReleaseMutex
RaiseException
InitializeSRWLock
ReleaseSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockShared
AcquireSRWLockExclusive
FlsSetValue
HeapDestroy
MapViewOfFile
OpenFileMappingW
GetCurrentProcessId
HeapCreate
FlsAlloc
InitializeCriticalSection
TlsAlloc
AddAtomW
TlsSetValue
TlsGetValue
GetModuleFileNameW
LocalFree
LocalAlloc
FindAtomW
DeleteAtom
UnmapViewOfFile
TlsFree
FlsFree
RaiseFailFastException
GetModuleHandleW
DeleteCriticalSection
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
SetEvent
FreeLibrary
CreateThread
CreateEventW
GetModuleHandleExW
FreeLibraryAndExitThread
CloseHandle
WaitForSingleObject
GetCurrentProcess
ActivateActCtx
DeactivateActCtx
CreateActCtxW
ReleaseActCtx
QueueUserWorkItem
GlobalFlags
FindResourceExA
LocalSize
GlobalReAlloc
WTSGetActiveConsoleSessionId
LCMapStringEx
ResolveDelayLoadedAPI
DelayLoadFailureHook
QueryPerformanceFrequency
api-ms-win-downlevel-advapi32-l1-1-0
EventRegister
EventActivityIdControl
EventWrite
EventWriteTransfer
RegCreateKeyExW
RegSetValueExW
DuplicateTokenEx
EventWriteEx
OpenProcessToken
RegGetValueW
RegOpenKeyExW
RegCloseKey
RegOpenKeyExA
RegDeleteTreeW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumKeyExW
EventUnregister
CreateProcessAsUserW
OpenThreadToken
GetTokenInformation
api-ms-win-downlevel-version-l1-1-0
GetFileVersionInfoExW
GetFileVersionInfoSizeExW
VerQueryValueW
api-ms-win-downlevel-shlwapi-l1-1-0
StrStrIW
StrCmpNIA
IsInternetESCEnabled
PathCreateFromUrlW
PathQuoteSpacesW
StrChrNIW
StrCmpNICW
UrlEscapeW
UrlCombineW
StrCmpNIW
StrCmpICW
UrlUnescapeW
PathRemoveFileSpecW
HashData
StrCmpNCW
PathGetArgsW
StrCmpICA
StrStrA
PathRemoveBlanksW
UrlIsW
UrlCreateFromPathW
QISearch
StrChrW
PathStripPathW
StrCmpW
StrCpyNW
StrStrW
StrCmpCW
StrCmpNW
StrToIntExW
PathIsFileSpecW
ParseURLW
PathFileExistsW
StrTrimW
PathFindExtensionW
UrlGetLocationW
SHLoadIndirectString
StrPBrkW
PathIsRelativeW
PathGetCharTypeW
StrToInt64ExW
PathSearchAndQualifyW
PathUnquoteSpacesW
IsCharSpaceW
StrStrIA
StrCmpNICA
UrlApplySchemeW
PathIsURLW
StrToIntW
GetAcceptLanguagesW
StrChrA
UrlGetPartW
StrCmpCA
UrlCanonicalizeW
PathFindFileNameW
StrCmpIW
PathIsUNCW
StrCSpnW
PathGetDriveNumberW
StrDupW
api-ms-win-downlevel-user32-l1-1-0
CharLowerBuffW
CharLowerW
CharUpperW
CharNextW
LoadStringW
CharLowerA
IsCharAlphaNumericW
IsCharAlphaW
gdi32
DeleteDC
SetWorldTransform
SetGraphicsMode
CreateDIBSection
ExtTextOutW
SetTextAlign
GetTextColor
GetBkColor
SetStretchBltMode
StretchDIBits
SetDIBits
GetCurrentObject
GetClipRgn
ExtSelectClipRgn
SetBrushOrgEx
CreatePatternBrush
CreateBitmap
Ellipse
Polyline
Polygon
LineTo
MoveToEx
PatBlt
CreatePen
SetDCPenColor
ExtCreatePen
UnrealizeObject
SetBkMode
CreateHatchBrush
SetDCBrushColor
SetROP2
GetFontUnicodeRanges
GetGlyphOutlineW
GetCharWidthW
GetFontData
GetOutlineTextMetricsW
AddFontMemResourceEx
GetTextFaceW
RemoveFontMemResourceEx
StretchBlt
GdiFlush
Rectangle
CreateSolidBrush
GetTextCharsetInfo
TranslateCharsetInfo
ExtEscape
EndDoc
StartDocW
CreateEnhMetaFileW
CloseEnhMetaFile
GetEnhMetaFileW
EqualRgn
ExtCreateRegion
GetRegionData
OffsetViewportOrgEx
RealizePalette
SelectPalette
GetPaletteEntries
DeleteObject
SelectObject
GetObjectType
GetDeviceCaps
CreateRectRgn
BitBlt
GetPixel
CreateCompatibleBitmap
CreateCompatibleDC
CreateRectRgnIndirect
GetRandomRgn
OffsetRgn
GetClipBox
SetViewportOrgEx
CombineRgn
GetRgnBox
RestoreDC
SaveDC
GetViewportOrgEx
CreatePolygonRgn
EnumFontFamiliesExW
EnumFontsW
CreateFontIndirectW
GetTextCharset
SelectClipRgn
DeleteMetaFile
CreateMetaFileW
SetMapMode
SetWindowOrgEx
SetWindowExtEx
CloseMetaFile
SetViewportExtEx
PlayMetaFile
GetWindowOrgEx
GetWindowExtEx
LPtoDP
SetTextColor
SetBkColor
GetStockObject
IntersectClipRect
GetTextMetricsW
GetTextExtentPoint32W
GetObjectW
GetDIBits
GetNearestPaletteIndex
EnumObjects
GetEnhMetaFileHeader
GetDIBColorTable
SetDIBColorTable
SetMetaFileBitsEx
SetEnhMetaFileBits
GetEnhMetaFilePaletteEntries
PlayEnhMetaFile
DeleteEnhMetaFile
AbortDoc
StartPage
EndPage
CreateICW
CreateDCW
user32
CheckMenuRadioItem
CreatePopupMenu
AppendMenuW
GetMenuStringW
ToUnicodeEx
SubtractRect
UnionRect
MsgWaitForMultipleObjects
GetCaretBlinkTime
GetComboBoxInfo
DrawFocusRect
SendMessageA
ScrollDC
GetLayeredWindowAttributes
CreateCaret
DestroyCaret
SetCaretPos
GetLastInputInfo
EnumDisplaySettingsW
DisplayConfigGetDeviceInfo
GetDisplayConfigBufferSizes
RegisterClassW
GetWindowTextW
FindWindowW
GetLastActivePopup
DrawFrameControl
ShowCaret
HideCaret
GetCaretPos
GetKeyboardLayout
InsertMenuItemW
GetMenuItemInfoW
SetWindowsHookExW
PostThreadMessageW
GetSysColorBrush
IsDlgButtonChecked
CallWindowProcW
RemovePropW
GetUpdateRect
FindWindowExW
IsWindowVisible
CopyRect
CallNextHookEx
QueryDisplayConfig
InflateRect
GetUpdateRgn
InvalidateRgn
GetWindowDC
LockWindowUpdate
DestroyIcon
AdjustWindowRectEx
BringWindowToTop
GetSystemMenu
GetWindowLongA
SetWindowLongA
GetShellWindow
GetKeyboardLayoutList
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
RegisterClipboardFormatA
GetClassInfoExW
UnregisterClassW
GetDpiForSystem
LoadBitmapW
TrackPopupMenu
RegisterPowerSettingNotification
UnregisterPowerSettingNotification
SetRect
GetKeyboardLayoutNameW
DestroyCursor
GetIconInfo
ChildWindowFromPoint
MessageBeep
UpdateLayeredWindow
GetClassInfoW
SetCursorPos
SetRectEmpty
GetWindowRgn
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
InSendMessage
SetMenuItemInfoW
ShowCursor
TrackPopupMenuEx
DestroyAcceleratorTable
TranslateAcceleratorW
AttachThreadInput
IsClipboardFormatAvailable
GetClipboardFormatNameW
GetWindowPlacement
GetWindowLongPtrA
GetTopWindow
RemoveMenu
MoveWindow
UnhookWindowsHookEx
UnregisterClassA
GetDlgItem
LoadIconW
SendDlgItemMessageW
LoadImageW
GetWindow
SetWindowLongPtrW
DefWindowProcW
PostMessageW
GetParent
SetActiveWindow
GetWindowLongPtrW
GetKeyState
GetWindowThreadProcessId
GetDCEx
ReleaseDC
RegisterClipboardFormatW
RegisterWindowMessageW
GetDoubleClickTime
IsWindow
DestroyWindow
GetClientRect
FillRect
AllowSetForegroundWindow
GetClassNameW
IsWinEventHookInstalled
NotifyWinEvent
SetTimer
GetDesktopWindow
TranslateMessage
MessageBoxW
DialogBoxParamW
SetWindowTextW
EndDialog
GetFocus
ValidateRect
SetCursor
LoadCursorW
SendMessageW
KillTimer
EnumChildWindows
IsIconic
GetAncestor
GetSystemMetrics
GetMessageExtraInfo
GetCursorInfo
ChildWindowFromPointEx
ScreenToClient
GetCursorPos
WindowFromPoint
IsChild
MapWindowPoints
GetAsyncKeyState
GetMenuState
InsertMenuW
DeleteMenu
LoadMenuW
GetSubMenu
EnableMenuItem
DestroyMenu
GetCapture
ReleaseCapture
IsWindowUnicode
UpdateWindow
EnableWindow
SendMessageTimeoutW
EnumWindows
GetSysColor
GetForegroundWindow
WinHelpW
SetDlgItemTextW
CheckDlgButton
GetDlgItemTextW
InSendMessageEx
ShowWindow
SetWindowPos
SetForegroundWindow
SetFocus
ClientToScreen
SystemParametersInfoW
MonitorFromWindow
GetActiveWindow
GetWindowRect
GetMessagePos
PtInRect
GetKeyboardState
MapVirtualKeyExW
ToAsciiEx
IsRectEmpty
IntersectRect
LoadAcceleratorsW
CopyAcceleratorTableW
VkKeyScanW
GetMenuItemCount
GetMenuItemID
CheckMenuItem
MonitorFromRect
GetMonitorInfoW
GetMessageW
DispatchMessageW
PeekMessageW
MsgWaitForMultipleObjectsEx
PostQuitMessage
MonitorFromPoint
GetDC
RedrawWindow
CreateAcceleratorTableW
OffsetRect
EqualRect
SetWindowRgn
SetPropW
SetParent
CreateWindowExW
SetLayeredWindowAttributes
SetCapture
GetWindowLongW
SetWindowLongW
IsWindowEnabled
GetCursor
LoadCursorA
GetPropW
InvalidateRect
ValidateRgn
BeginPaint
EndPaint
WindowFromDC
GetMessageTime
WaitMessage
RegisterClassExW
iertutil
ord32
ord764
ord209
ord690
ord19
ord21
ord775
CreateIUriBuilder
ord700
ord18
ord96
ord25
ord681
GetIUriPriv
ord820
ord26
CreateUriWithFragment
ord174
ord56
ord58
ord793
ord688
ord606
ord139
ord325
ord916
ord656
ord661
ord665
ord651
ord655
ord682
ord667
ord650
ord678
ord660
ord677
ord658
ord662
ord652
ord663
ord654
ord54
ord110
ord151
ord111
ord17
ord44
ord30
ord134
IntlPercentEncodeNormalize
ord466
ord597
ord594
ord792
ord177
ord603
ord779
ord781
ord774
ord765
ord138
ord607
ord281
ord282
ord35
ord42
GetPortFromUrlScheme
ord210
ord398
ord50
ord82
ord679
ord791
ord796
ord49
CreateUri
ord701
ord657
ord600
ord605
ntdll
NtQueryLicenseValue
NtCreateFile
RtlInitUnicodeString
NtQuerySystemInformation
RtlDllShutdownInProgress
NtClose
rpcrt4
RpcAsyncInitializeHandle
Ndr64AsyncClientCall
NdrClientCall3
RpcBindingFree
RpcBindingCreateW
RpcAsyncCancelCall
RpcAsyncCompleteCall
I_RpcExceptionFilter
UuidCreate
RpcBindingBind
api-ms-win-core-path-l1-1-0
PathCchAddBackslash
PathCchCanonicalize
PathCchAppend
PathCchCombine
sspicli
GetUserNameExW
api-ms-win-core-quirks-l1-1-0
QuirkIsEnabled
api-ms-win-core-file-l1-1-0
SetFileInformationByHandle
FlushFileBuffers
GetFileInformationByHandle
CreateDirectoryW
GetDiskFreeSpaceExW
GetFullPathNameA
GetFileAttributesExW
FileTimeToLocalFileTime
SetFilePointerEx
GetLongPathNameW
api-ms-win-core-synch-l1-2-0
InitOnceBeginInitialize
InitOnceComplete
api-ms-win-core-sysinfo-l1-1-0
GetSystemWindowsDirectoryW
GetLogicalProcessorInformation
GetVersionExA
api-ms-win-core-libraryloader-l1-2-0
LoadResource
SizeofResource
FindResourceExW
LockResource
LoadLibraryExA
api-ms-win-core-processenvironment-l1-1-0
GetCurrentDirectoryW
ExpandEnvironmentStringsA
GetStdHandle
SearchPathW
api-ms-win-core-file-l2-1-0
MoveFileExW
GetFileInformationByHandleEx
api-ms-win-core-synch-l1-1-0
TryAcquireSRWLockExclusive
TryEnterCriticalSection
OpenEventW
api-ms-win-core-io-l1-1-0
GetOverlappedResult
CancelIoEx
DeviceIoControl
api-ms-win-core-threadpool-l1-2-0
SetThreadpoolThreadMaximum
DisassociateCurrentThreadFromCallback
CloseThreadpool
CreateThreadpool
api-ms-win-core-handle-l1-1-0
DuplicateHandle
api-ms-win-core-localization-l1-2-0
GetThreadUILanguage
GetThreadPreferredUILanguages
GetSystemDefaultLCID
GetUserPreferredUILanguages
GetUserDefaultLangID
IsDBCSLeadByte
api-ms-win-core-string-l1-1-0
GetStringTypeW
api-ms-win-core-memory-l1-1-0
VirtualAlloc
VirtualQuery
VirtualProtect
VirtualFree
api-ms-win-core-processenvironment-l1-2-0
SearchPathA
api-ms-win-core-errorhandling-l1-1-0
SetErrorMode
api-ms-win-core-com-l1-1-0
IIDFromString
ProgIDFromCLSID
CoGetStandardMarshal
api-ms-win-core-memory-l1-1-1
ResetWriteWatch
VirtualUnlock
GetWriteWatch
api-ms-win-core-string-l2-1-0
IsCharUpperW
IsCharLowerW
CharPrevW
api-ms-win-core-processthreads-l1-1-0
SuspendThread
SwitchToThread
GetProcessTimes
OpenThread
ProcessIdToSessionId
SetThreadPriority
GetProcessIdOfThread
GetProcessId
api-ms-win-core-heap-l1-1-0
HeapUnlock
HeapSize
HeapLock
HeapReAlloc
api-ms-win-core-synch-l1-2-1
WaitForMultipleObjects
api-ms-win-core-sysinfo-l1-2-0
GetNativeSystemInfo
GetProductInfo
api-ms-win-core-datetime-l1-1-0
GetTimeFormatW
api-ms-win-core-heap-l2-1-0
LocalReAlloc
api-ms-win-power-base-l1-1-0
CallNtPowerInformation
api-ms-win-core-realtime-l1-1-0
QueryProcessCycleTime
QueryThreadCycleTime
api-ms-win-core-psapi-l1-1-0
K32GetProcessMemoryInfo
api-ms-win-core-interlocked-l1-1-0
InterlockedFlushSList
api-ms-win-core-libraryloader-l1-2-1
FindResourceW
api-ms-win-core-datetime-l1-1-2
GetDurationFormatEx
api-ms-win-core-registry-l1-1-0
RegEnumValueW
RegDeleteValueW
api-ms-win-core-delayload-l1-1-1
ResolveDelayLoadsFromDll
winhttp
WinHttpGetIEProxyConfigForCurrentUser
api-ms-win-core-wow64-l1-1-0
IsWow64Process
api-ms-win-core-processthreads-l1-1-1
GetThreadContext
api-ms-win-core-console-l2-1-0
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
api-ms-win-core-rtlsupport-l1-1-0
RtlCaptureStackBackTrace
kernelbase
EnumUILanguagesW
lstrlenW
lstrlenA
StrToIntA
OpenGlobalizationUserSettingsKey
GetSystemDefaultUILanguage
GetNumberFormatW
api-ms-win-downlevel-shell32-l1-1-0
CommandLineToArgvW
ClearPhishingFilterData
ConvertAndEscapePostData
CreateCoreWebView
CreateHTMLPropertyPage
DllCanUnloadNow
DllEnumClassObjects
DllGetClassObject
GetColorValueFromString
GetWebPlatformObject
IEIsXMLNSRegistered
IERegisterXMLNS
InitializeLocalHtmlEngine
MatchExactGetIDsOfNames
PrintHTML
RunHTMLApplication
ShowHTMLDialog
ShowHTMLDialogEx
ShowModalDialog
ShowModelessHTMLDialog
TravelLogCreateInstance
TravelLogStgCreateInstance
UninitializeLocalHtmlEngine
Name
.text
Size
15.8MB
Virtual Size
15.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5.0MB
Virtual Size
5.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
179KB
Virtual Size
267KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
908KB
Virtual Size
907KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
538KB
Virtual Size
538KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=253, version=27412,
count=108, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=259, version=27412,
count=93, id=260, version=27412,
count=1851, id=1, productName=Unmarked objects,
count=15, id=257, version=27412,
count=11, id=261, version=27412,
count=1, id=256, version=27412,
count=2873, id=269, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Installer/act/mstscax.dll
- IMPHASH 15e835284d25480ac4792b7c473bf9b6
- SHA256 9430965c7c980faa356025e139f983624fa67565d4c5b2cc776f698117325b60
- MD5 96bd36ed3d5a04e8a9f44fd38b0bfa91
- SHA1 6ad76494cad227633b01f52ed5bae6e28e2acb1d
- SHA512 d2f4caf5a2c78c75ee267574775c996490b4f2c08e790075d6ab9e1dc07aa4e2f7153d4a8df6297f3928bf213b912de058606fe4b582ef400f1b40355e4ed09d
- SSDEEP 196608:frDIdWVp5K3s3V3w7t0K9TkHge7nnB1IhTKMa4JVl8tkxQDdRfKez2mW5iIAa2tG:frDIdWVp5K3Q3w7t0K9TkHge7nnB1IhH
- TLSH T1A1865C18A3FC2054D4BAD23886454A1AFEB17C1C3F739ADB4066812A7F77ED15A38F16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
773136
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mstscax.pdb
msvcrt
_ltow
_ultow
wcsncat_s
wcstoul
wcsftime
_itow_s
towupper
printf
isdigit
tolower
isalpha
memcpy
memcmp
memchr
strnlen
log10f
log10
log
floorf
floor
cos
_waccess_s
_wfopen
vswprintf_s
wcsnlen
memcpy_s
memmove_s
swscanf_s
_snprintf_s
_strnicmp
_strlwr_s
srand
time
rand
_vsnprintf
wcschr
wcstol
iswdigit
iswspace
toupper
wcstombs_s
_wcsnicmp
__CxxFrameHandler3
wcstok_s
wcsrchr
??1exception@@UEAA@XZ
??0exception@@QEAA@XZ
??0exception@@QEAA@AEBV0@@Z
_vsnprintf_s
realloc
_vscwprintf
exp
wcscat_s
wcsncmp
bsearch
wcsstr
vsprintf_s
towlower
memmove
memset
pow
sin
sqrt
_onexit
__dllonexit
_unlock
_lock
__C_specific_handler
_initterm
_amsg_exit
swprintf_s
_XcptFilter
free
_callnewh
_aligned_free
_aligned_malloc
gmtime
_wfopen_s
fclose
fprintf
fwrite
_wtoi
_itoa_s
wcscspn
sprintf_s
_ltow_s
_snwprintf_s
_stricmp
wcsncpy_s
wcscpy_s
_resetstkoflw
calloc
strtok_s
_wtol
strncmp
iswalnum
wcspbrk
_wcslwr
malloc
_wcsicmp
_vsnwprintf
?terminate@@YAXXZ
_purecall
??1type_info@@UEAA@XZ
_errno
ceilf
ceil
atan2
__RTDynamicCast
_CxxThrowException
wcscmp
ntdll
RtlFreeUnicodeString
RtlGetLastNtStatus
RtlVerifyVersionInfo
RtlStringFromGUID
RtlAreBitsSet
RtlClearBits
RtlInitializeBitMap
RtlFindClearBitsAndSet
RtlCaptureContext
NtSetInformationFile
RtlNtStatusToDosError
RtlInitString
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlAppendUnicodeToString
NtReadFile
NtWriteFile
RtlEnumerateGenericTableWithoutSplaying
RtlLookupElementGenericTable
RtlDeleteElementGenericTable
RtlInsertElementGenericTable
RtlEnumerateGenericTable
RtlInitializeGenericTable
NtDeviceIoControlFile
NtClose
NtOpenSection
kernel32
VerSetConditionMask
TlsGetValue
FlushFileBuffers
CreateSemaphoreExW
LeaveCriticalSection
CreateMutexExW
GetSystemDefaultLangID
DeviceIoControl
FindCloseChangeNotification
QueryDosDeviceW
FindFirstChangeNotificationW
FindNextChangeNotification
GetVolumeInformationW
GetFileInformationByHandle
GetFileAttributesExW
SetFileTime
CreateTimerQueueTimer
DeleteTimerQueueTimer
LocalAlloc
LocalFree
SystemTimeToFileTime
GetSystemTime
LoadLibraryExW
LoadLibraryA
GetACP
ExpandEnvironmentStringsW
RemoveDirectoryW
MoveFileW
LockFileEx
GetVersionExW
LockFile
CompareStringW
K32GetModuleFileNameExW
VerifyVersionInfoW
GetDriveTypeW
InitializeSListHead
UnlockFile
CreateDirectoryW
EscapeCommFunction
InterlockedFlushSList
PostQueuedCompletionStatus
GetCommState
GlobalDeleteAtom
lstrcmpA
GetVersion
GetModuleHandleA
GetModuleFileNameW
CreateFileW
DuplicateHandle
DeleteFileW
GetFileAttributesW
SetFileAttributesW
SetCommState
WriteFile
ReadFile
CreateMutexW
GetDiskFreeSpaceW
GlobalAddAtomW
TransmitCommChar
WaitCommEvent
TerminateThread
TryAcquireSRWLockExclusive
LoadResource
IsDBCSLeadByte
GetCPInfo
GlobalHandle
GetCommandLineW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
GetVersionExA
SetCommTimeouts
GetCommTimeouts
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempPathW
InitOnceExecuteOnce
CompareStringOrdinal
SetupComm
GlobalFree
GetCommMask
SetCommMask
GetSystemFirmwareTable
CreateEventW
SetEvent
ResetEvent
CreateThread
PurgeComm
CreateEventExW
CreateWaitableTimerW
SetWaitableTimer
QueryPerformanceFrequency
WaitForMultipleObjectsEx
CancelWaitableTimer
GetComputerNameExW
GetCommModemStatus
ClearCommError
TlsFree
GetComputerNameA
TlsAlloc
SetErrorMode
CancelIo
BindIoCompletionCallback
CreateThreadpoolTimer
OpenSemaphoreW
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSectionEx
EnterCriticalSection
WaitForSingleObjectEx
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
ReleaseMutex
ReleaseSemaphore
SetLastError
ReleaseSRWLockShared
AcquireSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
OutputDebugStringW
IsDebuggerPresent
GetModuleHandleW
DebugBreak
GetModuleFileNameA
GetModuleHandleExW
HeapFree
GetProcessHeap
HeapAlloc
FormatMessageW
LoadLibraryW
GetSystemDirectoryW
GetCommProperties
CreateFileMappingW
CloseHandle
GetCommConfig
GetDefaultCommConfigW
GetLastError
SleepConditionVariableSRW
WakeAllConditionVariable
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
DecodePointer
EncodePointer
VirtualAlloc
VirtualFree
LoadLibraryExA
VirtualProtect
DisableThreadLibraryCalls
SizeofResource
lstrcmpiW
GetTimeZoneInformation
GetLocalTime
OpenThread
SwitchToThread
InitializeCriticalSection
GetComputerNameW
Beep
TrySubmitThreadpoolCallback
CloseThreadpool
CloseThreadpoolCleanupGroup
CloseThreadpoolCleanupGroupMembers
CreateThreadpoolCleanupGroup
SetThreadpoolThreadMaximum
CreateThreadpool
InitializeCriticalSectionAndSpinCount
ProcessIdToSessionId
FindFirstVolumeW
FindNextVolumeW
GetVolumePathNamesForVolumeNameW
FindVolumeClose
GetModuleHandleExA
OpenProcess
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
Sleep
SleepConditionVariableCS
InitializeConditionVariable
WakeConditionVariable
HeapSize
HeapReAlloc
HeapDestroy
GetWindowsDirectoryW
CreateIoCompletionPort
GetQueuedCompletionStatus
GetTempFileNameW
CreateProcessW
GetProcAddress
FreeLibrary
TlsSetValue
GlobalSize
SetFilePointer
SetThreadpoolThreadMinimum
SetThreadPriority
GetOverlappedResult
GetTickCount64
DisconnectNamedPipe
CreateThreadpoolIo
CancelThreadpoolIo
StartThreadpoolIo
CloseThreadpoolIo
WaitForThreadpoolIoCallbacks
QueueUserWorkItem
CreateSemaphoreW
FreeLibraryAndExitThread
CreateWaitableTimerExW
IsProcessorFeaturePresent
WaitForMultipleObjects
GetNativeSystemInfo
CompareStringEx
SearchPathW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
UnmapViewOfFile
MultiByteToWideChar
FindResourceExW
MapViewOfFile
WideCharToMultiByte
DeactivateActCtx
ActivateActCtx
FindActCtxSectionStringW
CreateActCtxW
QueryActCtxW
OutputDebugStringA
PowerCreateRequest
PowerSetRequest
PowerClearRequest
NormalizeString
MulDiv
lstrcmpW
RaiseException
GetExitCodeThread
SuspendThread
ResumeThread
VirtualQuery
CloseThreadpoolWait
WaitForThreadpoolWaitCallbacks
SetThreadpoolWait
InitializeSRWLock
GetFileSize
OpenEventW
OpenMutexW
OpenFileMappingW
GetSystemInfo
GetActiveProcessorCount
GetProcessAffinityMask
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
SetEndOfFile
FindFirstFileW
FindNextFileW
FindClose
GetFileSizeEx
SetFilePointerEx
gdi32
OffsetWindowOrgEx
GdiDrawStream
GetDeviceCaps
CreateRectRgn
SetRectRgn
CombineRgn
DeleteObject
OffsetRgn
DPtoLP
IntersectClipRect
CreateRectRgnIndirect
GetRgnBox
ExtCreateRegion
CreateSolidBrush
GetRegionData
CreateDIBPatternBrushPt
RestoreDC
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
SaveDC
DeleteMetaFile
CloseMetaFile
SetWindowExtEx
CreateMetaFileW
PtInRegion
CreateFontIndirectW
GetDIBColorTable
GetTextExtentPoint32W
ExtTextOutW
CreatePolygonRgn
GdiFlush
TextOutW
GetMapMode
GetTextExtentPointW
GetClipRgn
UpdateColors
GetPixel
LPtoDP
DeleteDC
CreateDCW
GetSystemPaletteEntries
SelectObject
CreateDIBitmap
CreateCompatibleDC
SelectPalette
SetStretchBltMode
StretchBlt
RealizePalette
SetMetaFileBitsEx
SelectClipRgn
CreatePalette
SetBrushOrgEx
GetBrushOrgEx
GetMetaFileBitsEx
PlayMetaFile
SetBkMode
GetBkMode
SetBkColor
SetTextColor
SetTextAlign
GetTextAlign
GetPaletteEntries
GetClipBox
GetNearestColor
SetDIBColorTable
GetNearestPaletteIndex
SetPixel
StretchDIBits
BitBlt
GetStockObject
SetDCBrushColor
PatBlt
SetROP2
CreateBrushIndirect
CreatePen
SetBitmapBits
CreateBitmap
MoveToEx
LineTo
Rectangle
SetPolyFillMode
Ellipse
Polygon
FrameRgn
FillRgn
GetCurrentObject
CreateCompatibleBitmap
GetObjectW
CreateDIBSection
advapi32
CredDeleteW
IsTextUnicode
RegisterTraceGuidsW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
EventSetInformation
CredUnprotectW
CredProtectW
RegEnumKeyW
RegFlushKey
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptGenRandom
CryptAcquireContextW
RegQueryInfoKeyW
EventUnregister
EventRegister
CopySid
GetLengthSid
OpenProcessToken
EventWriteTransfer
GetTokenInformation
CryptReleaseContext
CryptSetProvParam
CredFree
CredUnmarshalCredentialW
GetUserNameA
RegDeleteKeyW
CredIsMarshaledCredentialW
CredReadW
CredWriteW
CredGetSessionTypes
RegNotifyChangeKeyValue
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyExW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
EventActivityIdControl
CredReadDomainCredentialsW
CredWriteDomainCredentialsW
GetFileSecurityW
GetSecurityDescriptorLength
SetFileSecurityW
CryptDestroyKey
SystemFunction036
RegSetKeyValueW
TraceEvent
RegCloseKey
RegGetValueW
RegQueryValueExW
RegOpenKeyExW
TraceMessage
UnregisterTraceGuids
user32
EnumWindows
GetCaretBlinkTime
SetWinEventHook
UnhookWinEvent
GetLastInputInfo
UpdateLayeredWindow
RedrawWindow
GetIconInfo
DrawIconEx
SetForegroundWindow
RegisterHotKey
UnregisterHotKey
RegisterDeviceNotificationW
UnregisterDeviceNotification
GetTopWindow
OffsetRect
TranslateMessage
UnionRect
EnumChildWindows
EnumDisplayMonitors
EnumDisplayDevicesW
CopyIcon
PostThreadMessageW
MsgWaitForMultipleObjectsEx
CharNextW
IsChild
CallWindowProcW
DrawTextW
SetWindowLongW
EnumThreadWindows
AllowSetForegroundWindow
MonitorFromPoint
UnregisterClassA
CharLowerW
GetWindowDC
FillRect
IntersectRect
SetTimer
LoadCursorW
SetWindowPos
ShowWindow
KillTimer
DestroyWindow
UnregisterClassW
GetClassInfoW
RegisterClassW
CreateWindowExW
SetPropW
GetKeyState
SetParent
MoveWindow
GetKeyboardType
ScreenToClient
GetCapture
GetSystemMetrics
SetCursorPos
ClientToScreen
SetFocus
DeferWindowPos
GetKeyboardState
keybd_event
GetCursorPos
GetRawInputData
GetAncestor
GetKeyboardLayoutNameW
TrackMouseEvent
DefWindowProcW
GetWindowLongPtrW
SetWindowLongPtrW
GetAsyncKeyState
AttachThreadInput
ReleaseCapture
RegisterClassExW
SetCapture
GetGUIThreadInfo
BeginDeferWindowPos
GetClassNameW
GetActiveWindow
FindWindowExW
SendMessageTimeoutW
GetMessageExtraInfo
MessageBeep
FlashWindow
GetWindowTextW
MsgWaitForMultipleObjects
GetWindowThreadProcessId
SetWindowsHookExW
SetCursor
GetWindowLongW
DispatchMessageW
GetMessageW
PostQuitMessage
ValidateRect
GetWindowTextLengthW
CloseClipboard
GetParent
GetLastActivePopup
RemovePropW
SetClipboardData
EmptyClipboard
OpenClipboard
EnableWindow
UpdateWindow
LoadIconW
GetSystemMenu
EnableMenuItem
SetWindowPlacement
CloseWindow
GetWindowPlacement
SystemParametersInfoA
LockWindowUpdate
GetSysColor
SetScrollPos
AdjustWindowRect
ShowScrollBar
SetScrollInfo
GetCursorInfo
CheckDlgButton
EndDialog
IsDlgButtonChecked
SetDlgItemTextW
GetDlgItem
GetProcessDefaultLayout
GetDlgCtrlID
MonitorFromRect
IsWindowEnabled
SetLayeredWindowAttributes
GetSubMenu
TrackPopupMenuEx
SetClassLongPtrW
GetClassLongPtrW
GetMenuItemInfoW
SetMenuItemInfoW
DestroyMenu
DestroyIcon
LoadImageW
AnimateWindow
GetClassInfoExW
IsRectEmpty
SendDlgItemMessageW
GetNextDlgTabItem
GetDlgItemTextW
InflateRect
GetSysColorBrush
SetRectEmpty
LoadStringW
CharPrevA
GetClipboardFormatNameW
CharNextA
LoadMenuW
DialogBoxParamW
CreateDialogParamW
GetKeyboardLayoutNameA
GetKeyboardLayout
EqualRect
MapWindowPoints
IsWindow
DisplayConfigGetDeviceInfo
QueryDisplayConfig
GetDisplayConfigBufferSizes
EnumDisplaySettingsW
SetWindowRgn
SetActiveWindow
IsIconic
IsZoomed
RegisterWindowMessageW
GetWindow
IsWindowVisible
FindWindowW
CreateCursor
GetClientRect
SendMessageW
ReleaseDC
GetDC
InvalidateRect
RegisterClipboardFormatW
GetForegroundWindow
GetFocus
PostMessageW
CallNextHookEx
UnhookWindowsHookEx
BeginPaint
CopyRect
SetRect
GetMonitorInfoW
IsClipboardFormatAvailable
DefDlgProcW
MonitorFromWindow
SystemParametersInfoW
PtInRect
RegisterRawInputDevices
GetWindowRgn
SetWindowTextW
EndDeferWindowPos
EndPaint
GetWindowRect
CreateIconIndirect
GetDesktopWindow
DestroyCursor
PeekMessageW
SendInput
ShowCursor
FlashWindowEx
MapVirtualKeyW
iphlpapi
FreeMibTable
CreateSortedAddressPairs
ParseNetworkString
d2d1
ord1
dwrite
DWriteCreateFactory
rpcrt4
MesHandleFree
IUnknown_AddRef_Proxy
UuidFromStringW
NdrMesTypeEncode3
MesEncodeDynBufferHandleCreate
CStdStubBuffer_DebugServerQueryInterface
MesDecodeBufferHandleCreate
UuidToStringW
RpcStringFreeW
NdrMesTypeDecode3
NdrMesTypeFree3
NdrCStdStubBuffer_Release
CStdStubBuffer_Connect
NdrDllCanUnloadNow
CStdStubBuffer_IsIIDSupported
NdrOleFree
CStdStubBuffer_Invoke
CStdStubBuffer_AddRef
IUnknown_Release_Proxy
NdrDllUnregisterProxy
CStdStubBuffer_CountRefs
CStdStubBuffer_QueryInterface
NdrOleAllocate
CStdStubBuffer_DebugServerRelease
NdrDllRegisterProxy
NdrDllGetClassObject
CStdStubBuffer_Disconnect
I_RpcExceptionFilter
IUnknown_QueryInterface_Proxy
msacm32
acmDriverEnum
acmFormatTagDetailsW
acmDriverOpen
acmStreamOpen
acmStreamClose
acmFormatSuggest
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader
acmStreamSize
acmDriverClose
dwmapi
DwmGetWindowAttribute
DwmSetWindowAttribute
setupapi
CM_Locate_DevNodeW
CM_Get_Parent
CM_Get_Device_ID_Size
CM_Get_Device_IDW
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiOpenDeviceInterfaceW
CM_Get_DevNode_Status
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiOpenDevRegKey
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiCreateDeviceInfoList
SetupDiGetClassDevsExW
SetupDiOpenClassRegKeyExW
SetupDiOpenDeviceInfoW
secur32
EncryptMessage
AcceptSecurityContext
DeleteSecurityContext
QueryContextAttributesW
AcquireCredentialsHandleW
SetContextAttributesW
FreeCredentialsHandle
DecryptMessage
InitializeSecurityContextW
LsaFreeReturnBuffer
LsaDeregisterLogonProcess
LsaConnectUntrusted
LsaLookupAuthenticationPackage
InitSecurityInterfaceW
QuerySecurityPackageInfoW
FreeContextBuffer
GetUserNameExW
LsaCallAuthenticationPackage
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
uxtheme
SetWindowTheme
GetCurrentThemeName
dxgi
CreateDXGIFactory1
imm32
ImmAssociateContext
ImmGetContext
ncrypt
NCryptFreeObject
NCryptSignHash
NCryptExportKey
NCryptFinalizeKey
NCryptCreatePersistedKey
NCryptOpenStorageProvider
NCryptSetProperty
netapi32
NetGetJoinInformation
NetApiBufferFree
uiautomationcore
UiaReturnRawElementProvider
d3d11
D3D11CreateDevice
cfgmgr32
CM_Get_Child
CM_MapCrToWin32Err
CM_Get_Device_Interface_PropertyW
CM_Get_DevNode_Registry_PropertyW
CM_Get_Sibling
pdh
PdhCollectQueryData
PdhRemoveCounter
PdhGetFormattedCounterValue
PdhAddEnglishCounterW
PdhCloseQuery
PdhOpenQueryW
bcrypt
BCryptCreateHash
BCryptHashData
BCryptImportKeyPair
BCryptDestroyHash
BCryptImportKey
BCryptEncrypt
BCryptDestroyKey
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptGenerateSymmetricKey
BCryptCloseAlgorithmProvider
BCryptFinishHash
api-ms-win-core-path-l1-1-0
PathCchCanonicalize
DllCanUnloadNow
DllGetClassObject
DllGetTscCtlVer
DllRegisterServer
DllUnregisterServer
Name
.text
Size
5.9MB
Virtual Size
5.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
62KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
181KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
81KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=27412,
count=35, id=260, version=27412,
count=1420, id=1, productName=Unmarked objects,
count=39, id=257, version=27412,
count=15, id=261, version=27412,
count=1, id=256, version=27412,
count=1182, id=264, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Installer/act/ncuvid.dll
- IMPHASH 566222781dc2bbda99739b571cd503e4
- SHA256 21ef8438a1f4b3f645edd20aec1989943d32d72f35ad9d983c548c5c71b480d3
- MD5 bb82a77952eace70b6de3267aa573a9e
- SHA1 ffca4b1fc6663af6b2c57fd06f769b56bde719b2
- SHA512 131d177fd56575e2e29c0e65a724798a4d91ce5bfddcac9ba162a46d3ef2cf7d339057879f38e99e880f53011932f539a6782ca1121b6f2ce03d8c5bfb62270e
- SSDEEP 98304:24KpWnNrEhBRGgyDcOEl/QCAWYGlKMifJs3asrbcg4m2oY:2snNYBnysl/Y+KMea2oY
- TLSH T1D417E9C9B496DA07C50A463C94EBDBF4EA39394306258BCB67C016FB3DA7BF65931021
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3e:b8:e9:95:37:7b:c7:d3:a9:e0:2f:44:b5:e2:4b:0c:32:81:c9:ca:60:35:1e:da:b2:0c:d2:d8:1c:53:a8:fa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 15, 2025
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
3e:b8:e9:95:37:7b:c7:d3:a9:e0:2f:44:b5:e2:4b:0c:32:81:c9:ca:60:35:1e:da:b2:0c:d2:d8:1c:53:a8:fa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=NVIDIA Corporation,OU=1-F,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
Chains
Mar 14, 2025
CN=NVIDIA Corporation,OU=1-F,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=NVIDIA Corporation,OU=1-F,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
Serial Number
0d:01:94:cd:1e:31:42:20:51:35:d1:c6:36:e4:e9:ba
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 18, 2022 - Oct 15, 2025
Subject
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Serial Number
38:63:de:f8
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Dec 24, 1999 - Jul 24, 2029
Subject
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Serial Number
58:da:13:ff:00:00:00:00:51:ce:0d:f7
Issuer
CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 22, 2015 - Jun 22, 2029
Subject
CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,C=US
Serial Number
98:40:7c:5e:16:cf:87:c1:e9:c1:ff:f9:b4:0a:88:8d
Issuer
CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 22, 2025 - Jun 21, 2029
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:11:2a:07:90:aa:e5:56:85:29:00:00:00:00:01:11
Issuer
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 16, 2024 - May 14, 2025
Subject
CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0b:aa:c1:00:00:00:00:00:09
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:401A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fe:d0:a8:c2:7b:34:21:0b:01:00:01:00:00:01:fe
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
2243528
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\dvs\p4\build\sw\rel\gpu_drv\r570\r572_77\drivers\multimedia\codecs\cuda\nvcuvid\_out\wddm2_amd64_release\nvcuvid64.pdb
winmm
timeGetTime
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsA
nvcuda
cuInit
kernel32
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateFileW
CloseHandle
DeviceIoControl
Sleep
FreeLibrary
GetProcAddress
VerSetConditionMask
GetFileAttributesW
GetFullPathNameW
GetLastError
SetLastError
CreateProcessA
CreateProcessW
GetSystemDirectoryW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
SetEnvironmentVariableW
LocalAlloc
LocalFree
VerifyVersionInfoW
ExpandEnvironmentStringsW
CreateDirectoryW
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentProcessId
MoveFileExW
WaitForSingleObject
CreateEventA
LoadLibraryW
GetTickCount
GetModuleHandleExW
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
CreateThread
GetCurrentThreadId
SetThreadPriority
GetThreadPriority
GetModuleHandleA
CreateSemaphoreA
MultiByteToWideChar
GetProcessHeap
SetConsoleCtrlHandler
GetStringTypeW
HeapSize
HeapReAlloc
SetEndOfFile
RtlUnwind
WriteConsoleW
LoadLibraryExW
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
ReadFile
ExitProcess
GetCurrentThread
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetTimeZoneInformation
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
SetFilePointerEx
GetFileSizeEx
ReadConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
advapi32
EventWriteTransfer
EventRegister
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
EventUnregister
CreateEncoderInterface
NvToolCreateInterface
NvToolDestroyInterface
NvToolGetApiFunctionCount
NvToolGetApiID
NvToolGetApiNames
NvToolGetInterface
NvToolSetApiID
NvToolSetInterface
__std_2U4S4U_X08
__std_4U4S4U_X04
cuvidConvertYUVToRGB
cuvidConvertYUVToRGBArray
cuvidCreateDecoder
cuvidCreateVideoParser
cuvidCreateVideoSource
cuvidCreateVideoSourceW
cuvidCtxLock
cuvidCtxLockCreate
cuvidCtxLockDestroy
cuvidCtxUnlock
cuvidDecodePicture
cuvidDestroyDecoder
cuvidDestroyVideoParser
cuvidDestroyVideoSource
cuvidGetDecodeStatus
cuvidGetDecoderCaps
cuvidGetSourceAudioFormat
cuvidGetSourceVideoFormat
cuvidGetVideoFrameSurface
cuvidGetVideoSourceState
cuvidMapVideoFrame
cuvidMapVideoFrame64
cuvidParseVideoData
cuvidPrivateOp
cuvidReconfigureDecoder
cuvidSetVideoSourceState
cuvidUnmapVideoFrame
cuvidUnmapVideoFrame64
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16.1MB
Virtual Size
16.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
162KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=259, version=29395,
count=177, id=261, version=29395,
count=17, id=260, version=29395,
count=41, id=261, version=30625,
count=16, id=260, version=30625,
count=10, id=259, version=30625,
count=2, id=203, productName=VS2012 build 50727, version=50727,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=33136,
count=140, id=1, productName=Unmarked objects,
count=127, id=261, version=30706,
count=1, id=256, version=30706,
count=1, id=255, version=30706,
count=1, id=258, version=30706,
Installer/act/overrideAutodetect.lua
- SHA256 817dc1b1f94ab2bae24edb81907f0ef36a00631563de9e47b2263d2c23958db9
- MD5 a51d997e849f796e0df777cb67f2f3e7
- SHA1 7f59e9422d976cef13ebb588c62e28f5e4b22dec
- SHA512 581d26ad578ef711a03dc9f58e90a946e3000021907f3d1a118c4f6caf89038cd3ac7303448768a735a0a7e3d53c1edf4945e992e141c90cdc4b04509103de1b
- TLSH T15FC08CB09736B9280B1BF7B7EC022A0604F0E81A01A7242F1350008C5A00F69A42AC1F
- MD5 SHA1 SHA512 TLSH
Installer/act/prm0019.dll
- SHA256 706b25874604f74f20f1edac93769a08589114ed87cacec8f2d7b2ca8ab32f67
- MD5 95e3c7c5af6b29749ef27d5f6d49c67a
- SHA1 51ec3dff0cccb502e4f2c278d284f094548bfae6
- SHA512 6b14d302f888cfa2d78567f89896dd1c5a82197ec804af6c8e86c659942bc9964e3f45f0cbabedc516ec215c49423a4c1db66bbfcb780656cf418334f67c4f0d
- SSDEEP 49152:zwDbIRcWGudJcDomboWWCsFA5O8WIjFsQt1/TL97hQjSHDP7iDHVEC5WHzeejZMM:zinfm3DvYYisVQBP
- TLSH T1AF9609CEABEB882BFE1D8C37A6C54F65B200B492C8E30D554168F660DD766DC44379B8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
8.2MB
Virtual Size
8.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Installer/act/windows.storage.dll
- IMPHASH 5764183dd62eaccf932c7e70327b6f96
- SHA256 3aa0f13fe0b9a2bb98b1a9d0fdde3c2ca35ef04e35bf5a3c3545a7b7cf90e826
- MD5 671416db764d153463b7bb4e01910d3a
- SHA1 4412711364f3c3697595c1fa54356da7867458a0
- SHA512 a434ca292ea1083554f62a602469e8ef7ff2565167ab1517e27217ea9e9398ceb25fb5346eb3d9c39866e237180b1dcca96276d9d302acb6a43150b591af68f3
- SSDEEP 49152:6nQqxnPRrbN8fy/4RTum/LTw0gm1H6xlpudPn4ih1QMTa7FDFIThcs58LjOM9Zix:6nxPnAnr07IyVbXW/XK7FKjfZlH
- TLSH T1E3865B5E16FC01A4D2BAE23DC647424EF6B27835132297DF0121827E8F2BBE6593DB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6a:2e:48:b0:26:de:37:a2:ea:6c:35:6e:61:33:5f:66:e8:f3:d1:93:4f:57:44:24:b7:45:a0:6e:40:2f:97:2c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 13, 2025
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:a8:82:e6:b8:ac:1c:5d:5f:f0:00:00:00:00:04:a8
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 12, 2024 - Sep 11, 2025
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0d:0d:77:be:7b:36:8f:7f:e3:00:01:00:00:02:0d
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
1809328
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Windows.Storage.pdb
api-ms-win-crt-string-l1-1-0
wcscmp
wcscspn
memset
wcsncmp
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
api-ms-win-crt-private-l1-1-0
_o__recalloc
_o__register_onexit_function
_o__resetstkoflw
_o__seh_filter_dll
_o__set_errno
_o__ui64tow_s
_o__wcsicmp
_o__wcsnicmp
_o__wcstoi64
_o__wtoi
_o_bsearch
_o_calloc
_o_free
_o_iswalnum
memmove
_o_iswcntrl
_o_iswprint
_o_iswspace
_o_malloc
_o_memcpy_s
_o_rand
_o_realloc
_o_srand
_o_strncat_s
_o_strncpy_s
_o_strtol
_o_strtoul
_o_terminate
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o_wcstok_s
_o_wcstol
_o_wcstoul
_o__purecall
_o__get_errno
wcsrchr
wcschr
wcsstr
strchr
__CxxFrameHandler3
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__ltow_s
_o__configure_narrow_argv
_o__cexit
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_onexit_table
_o__initialize_narrow_environment
_o__i64tow_s
__C_specific_handler
__std_terminate
__CxxFrameHandler4
_CxxThrowException
memcmp
memcpy
api-ms-win-core-libraryloader-l1-2-0
LoadLibraryExW
GetModuleFileNameA
FreeLibrary
SizeofResource
GetModuleFileNameW
FindResourceExW
LoadResource
GetModuleHandleExW
FindStringOrdinal
LoadStringW
GetProcAddress
GetModuleHandleW
LoadStringA
LockResource
DisableThreadLibraryCalls
api-ms-win-core-synch-l1-1-0
DeleteCriticalSection
ReleaseSRWLockExclusive
InitializeCriticalSectionEx
LeaveCriticalSection
ResetEvent
InitializeCriticalSection
CreateEventW
WaitForMultipleObjectsEx
AcquireSRWLockExclusive
CreateMutexExW
OpenSemaphoreW
CreateWaitableTimerExW
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
InitializeSRWLock
CreateEventExW
TryEnterCriticalSection
CreateMutexW
SetWaitableTimer
OpenMutexW
TryAcquireSRWLockShared
SetEvent
WaitForSingleObjectEx
AcquireSRWLockShared
TryAcquireSRWLockExclusive
ReleaseSRWLockShared
OpenEventW
ReleaseMutex
ReleaseSemaphore
CreateSemaphoreExW
EnterCriticalSection
api-ms-win-core-heap-l1-1-0
GetProcessHeap
HeapReAlloc
HeapAlloc
HeapFree
api-ms-win-core-errorhandling-l1-1-0
SetErrorMode
GetLastError
SetLastError
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
api-ms-win-core-processthreads-l1-1-0
TerminateProcess
OpenThread
DeleteProcThreadAttributeList
GetExitCodeProcess
InitializeProcThreadAttributeList
GetCurrentProcess
TlsFree
GetThreadPriority
GetProcessId
OpenThreadToken
OpenProcessToken
GetCurrentThread
UpdateProcThreadAttribute
SetThreadPriority
SetThreadToken
GetCurrentProcessId
ProcessIdToSessionId
CreateProcessW
TlsAlloc
CreateProcessAsUserW
GetCurrentThreadId
TlsGetValue
TlsSetValue
ResumeThread
GetExitCodeThread
CreateThread
api-ms-win-core-localization-l1-2-0
GetSystemDefaultLCID
ResolveLocaleName
GetSystemPreferredUILanguages
FindNLSString
LCMapStringW
FormatMessageW
IsDBCSLeadByte
GetUserDefaultLCID
SetThreadPreferredUILanguages
GetLocaleInfoW
GetThreadPreferredUILanguages
IdnToAscii
LocaleNameToLCID
GetThreadUILanguage
FindNLSStringEx
api-ms-win-core-debug-l1-1-0
OutputDebugStringW
IsDebuggerPresent
DebugBreak
api-ms-win-core-handle-l1-1-0
DuplicateHandle
CloseHandle
ntdll
NtQueryInformationProcess
NtQueryVolumeInformationFile
EtwCheckCoverage
NtSetInformationProcess
RtlIsCloudFilesPlaceholder
RtlIsPartialPlaceholder
WinSqmIsOptedIn
RtlSetProxiedProcessId
NtOpenProcessToken
WinSqmAddToStream
WinSqmSetDWORD
RtlQueryPackageClaims
NtClose
RtlMapGenericMask
NtCreateLowBoxToken
RtlGetAppContainerSidType
NtQueryWnfStateData
RtlSubscribeWnfStateChangeNotification
RtlGetDeviceFamilyInfoEnum
NtQueryInformationFile
RtlNtStatusToDosError
RtlDeriveCapabilitySidsFromName
NtQueryInformationThread
NtGetCachedSigningLevel
RtlIsMultiUsersInSessionSku
NtSetSecurityObject
WinSqmAddToStreamEx
NtQuerySecurityObject
RtlSetDaclSecurityDescriptor
RtlAddAccessAllowedAce
RtlAddAce
RtlGetAce
RtlCreateAcl
RtlLengthSid
RtlQueryInformationAcl
RtlGetDaclSecurityDescriptor
EtwEventActivityIdControl
NtCompareSigningLevels
NtSetCachedSigningLevel
RtlDosPathNameToRelativeNtPathName_U
NtQueryAttributesFile
RtlFreeHeap
RtlReleaseRelativeName
RtlDosPathNameToRelativeNtPathName_U_WithStatus
RtlLengthRequiredSid
RtlCreateServiceSid
RtlGetOwnerSecurityDescriptor
NtSetInformationThread
NtGetNextThread
RtlReportExceptionEx
RtlEqualSid
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
RtlIsTextUnicode
NtQuerySystemInformation
RtlQueryThreadPlaceholderCompatibilityMode
NtOpenThreadToken
RtlCompareUnicodeString
RtlSetThreadPlaceholderCompatibilityMode
RtlInitUnicodeStringEx
NtQueryDirectoryFile
ZwQueryWnfStateData
RtlInitUnicodeString
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlAreLongPathsEnabled
RtlQueryResourcePolicy
RtlFlushHeaps
NtQuerySystemInformationEx
RtlDllShutdownInProgress
RtlAllocateHeap
RtlNtStatusToDosErrorNoTeb
NtQueryInformationToken
RtlCreateSecurityDescriptor
NtOpenProcessTokenEx
RtlPrefixString
RtlInitString
RtlOemStringToUnicodeString
RtlDowncaseUnicodeString
RtlUnicodeStringToOemString
NtFsControlFile
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW
EtwGetTraceEnableFlags
RtlpEnsureBufferSize
RtlNtPathNameToDosPathName
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwEventSetInformation
EtwEventRegister
SbSelectProcedure
EtwEventUnregister
EtwEventWriteTransfer
RtlGetLastNtStatus
NtQueryKey
RtlDosPathNameToNtPathName_U
NtOpenFile
RtlIsNonEmptyDirectoryReparsePointAllowed
RtlFreeUnicodeString
NtSetInformationFile
NtCreateFile
api-ms-win-core-url-l1-1-0
PathIsURLW
ParseURLW
PathCreateFromUrlW
UrlGetLocationW
UrlGetPartW
UrlEscapeW
UrlCombineW
UrlCompareW
UrlApplySchemeW
UrlIsW
UrlUnescapeW
UrlCreateFromPathW
api-ms-win-core-string-obsolete-l1-1-0
lstrlenW
lstrcmpiA
lstrcmpiW
lstrcmpA
lstrcmpW
lstrlenA
api-ms-win-core-shlwapi-legacy-l1-1-0
PathFindNextComponentW
PathMatchSpecW
PathGetArgsA
PathIsSameRootW
PathStripPathW
PathRemoveExtensionW
PathCommonPrefixW
PathGetCharTypeW
PathUnExpandEnvStringsW
PathRemoveBlanksW
PathRelativePathToW
PathIsRelativeW
PathIsUNCW
PathSkipRootW
PathIsUNCServerW
PathIsFileSpecW
PathUnquoteSpacesW
PathRemoveBackslashW
PathIsRootW
PathMatchSpecExW
SHExpandEnvironmentStringsW
PathIsValidCharW
PathGetDriveNumberW
PathGetDriveNumberA
PathIsPrefixW
PathParseIconLocationW
PathQuoteSpacesW
PathFileExistsW
PathFindFileNameW
PathFindExtensionW
PathIsUNCServerShareW
PathStripToRootW
PathRemoveFileSpecW
api-ms-win-core-registry-l1-1-0
RegCloseKey
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegDeleteTreeW
RegOpenCurrentUser
RegEnumKeyExW
RegSetValueExW
RegDeleteValueW
RegGetKeySecurity
RegNotifyChangeKeyValue
RegDeleteKeyExW
RegEnumValueW
RegCreateKeyExW
RegGetValueW
api-ms-win-core-heap-l2-1-0
LocalAlloc
GlobalAlloc
LocalFree
GlobalFree
LocalReAlloc
api-ms-win-core-string-l1-1-0
WideCharToMultiByte
CompareStringW
CompareStringEx
MultiByteToWideChar
GetStringTypeW
CompareStringOrdinal
api-ms-win-core-shlwapi-obsolete-l1-1-0
StrCpyNXW
StrCSpnW
StrStrW
StrDupA
StrCmpNW
StrCmpW
StrRChrW
StrStrIW
StrCmpNICW
StrTrimW
StrToIntExW
StrCmpICW
StrPBrkW
StrDupW
StrChrIW
StrCmpNIW
StrToIntW
StrCmpICA
StrStrNIW
StrCmpLogicalW
StrCmpCW
StrChrW
StrCmpIW
QISearch
api-ms-win-core-string-l2-1-0
CharUpperBuffW
CharLowerBuffW
CharUpperW
CharLowerW
CharPrevW
CharNextW
api-ms-win-core-synch-l1-2-0
InitOnceExecuteOnce
InitOnceBeginInitialize
Sleep
InitOnceComplete
api-ms-win-core-winrt-error-l1-1-0
SetRestrictedErrorInfo
GetRestrictedErrorInfo
RoTransformError
RoOriginateError
RoOriginateErrorW
api-ms-win-core-util-l1-1-0
DecodePointer
EncodePointer
api-ms-win-core-stringansi-l1-1-0
CharPrevA
CharNextA
api-ms-win-core-processenvironment-l1-1-0
ExpandEnvironmentStringsW
GetEnvironmentVariableW
FreeEnvironmentStringsW
SearchPathW
GetEnvironmentStringsW
GetCurrentDirectoryW
SetCurrentDirectoryW
api-ms-win-core-localization-obsolete-l1-2-0
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
api-ms-win-core-rtlsupport-l1-1-0
RtlVirtualUnwind
RtlCompareMemory
RtlCaptureContext
RtlLookupFunctionEntry
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
OpenProcess
api-ms-win-core-profile-l1-1-0
QueryPerformanceFrequency
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GlobalMemoryStatusEx
GetLocalTime
GetComputerNameExW
GetTickCount
GetSystemDirectoryW
GetSystemWindowsDirectoryW
GetWindowsDirectoryW
GetTickCount64
GetVersionExW
api-ms-win-core-interlocked-l1-1-0
InterlockedPushEntrySList
InitializeSListHead
InterlockedFlushSList
combase
ord140
ord157
ord167
SetErrorInfo
ord90
GetErrorInfo
ord148
msvcp_win
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?_Xlength_error@std@@YAXPEBD@Z
api-ms-win-crt-time-l1-1-0
_time64
wldp
WldpQueryWindowsLockdownMode
api-ms-win-eventing-provider-l1-1-0
EventEnabled
EventWrite
EventProviderEnabled
EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer
EventActivityIdControl
api-ms-win-core-threadpool-l1-2-0
CreateThreadpoolTimer
TrySubmitThreadpoolCallback
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolWaitCallbacks
SetThreadpoolWait
CloseThreadpoolWait
IsThreadpoolTimerSet
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
api-ms-win-core-winrt-error-l1-1-1
RoReportFailedDelegate
IsErrorPropagationEnabled
RoGetMatchingRestrictedErrorInfo
RoOriginateLanguageException
api-ms-win-core-quirks-l1-1-0
QuirkIsEnabledForProcess
QuirkIsEnabled
api-ms-win-core-path-l1-1-0
PathCchAddBackslashEx
PathCchRemoveBackslash
PathCchRenameExtension
PathCchCanonicalizeEx
PathCchSkipRoot
PathAllocCombine
PathCchStripToRoot
PathCchAppendEx
PathCchAppend
PathCchCombine
PathCchAddBackslash
PathCchCombineEx
PathCchCanonicalize
PathIsUNCEx
PathAllocCanonicalize
PathCchFindExtension
PathCchRemoveFileSpec
api-ms-win-core-file-l1-1-0
GetFileAttributesW
FindNextFileW
ReadFile
SetFilePointer
UnlockFile
FindClose
GetFileSizeEx
LockFile
GetLogicalDrives
GetFileTime
CompareFileTime
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
FlushFileBuffers
SetFilePointerEx
GetDiskFreeSpaceExW
QueryDosDeviceW
GetLongPathNameW
GetFileSize
GetVolumePathNameW
GetFileInformationByHandle
SetFileTime
DeleteFileW
GetVolumeInformationW
GetShortPathNameW
GetFileAttributesExW
GetVolumeInformationByHandleW
GetFinalPathNameByHandleW
GetTempFileNameW
CreateDirectoryW
SetFileInformationByHandle
FindFirstFileExW
FindFirstFileW
RemoveDirectoryW
GetDriveTypeW
CreateFileW
SetFileAttributesW
api-ms-win-core-file-l2-1-0
ReadDirectoryChangesW
CopyFile2
ReplaceFileW
CreateHardLinkW
MoveFileExW
GetFileInformationByHandleEx
api-ms-win-core-string-l2-1-1
SHLoadIndirectString
api-ms-win-core-com-private-l1-1-0
CoRevokeInitializeSpy
CoRegisterInitializeSpy
api-ms-win-core-file-l1-2-0
GetTempPathW
GetVolumePathNamesForVolumeNameW
GetVolumeNameForVolumeMountPointW
CreateFile2
api-ms-win-shell-shellcom-l1-1-0
SHCoCreateInstance
api-ms-win-core-psapi-l1-1-0
K32GetModuleFileNameExW
K32GetProcessImageFileNameW
QueryFullProcessImageNameW
api-ms-win-core-timezone-l1-1-0
GetTimeZoneInformationForYear
TzSpecificLocalTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SystemTimeToFileTime
api-ms-win-stateseparation-helpers-l1-1-0
GetPersistedRegistryLocationW
api-ms-win-core-largeinteger-l1-1-0
MulDiv
api-ms-win-core-sysinfo-l1-2-0
GetOsSafeBootMode
GetSystemTimePreciseAsFileTime
GetProductInfo
api-ms-win-core-heap-obsolete-l1-1-0
GlobalSize
GlobalLock
GlobalReAlloc
GlobalUnlock
api-ms-win-core-wow64-l1-1-1
Wow64SetThreadDefaultGuestMachine
GetSystemWow64DirectoryW
IsWow64Process2
api-ms-win-core-file-l2-1-2
CopyFileW
api-ms-win-core-kernel32-legacy-l1-1-0
SetVolumeLabelW
MoveFileW
DosDateTimeToFileTime
GetComputerNameW
FileTimeToDosDateTime
api-ms-win-core-registry-l1-1-1
RegSetKeyValueW
RegDeleteKeyValueW
api-ms-win-core-file-l2-1-1
OpenFileById
api-ms-win-core-threadpool-legacy-l1-1-0
QueueUserWorkItem
CreateTimerQueueTimer
DeleteTimerQueueTimer
api-ms-win-core-io-l1-1-0
GetOverlappedResult
CancelIoEx
DeviceIoControl
api-ms-win-core-io-l1-1-1
CancelSynchronousIo
api-ms-win-core-kernel32-legacy-l1-1-1
PowerClearRequest
PowerCreateRequest
PowerSetRequest
api-ms-win-core-memory-l1-1-0
CreateFileMappingW
VirtualFree
MapViewOfFile
UnmapViewOfFile
ReadProcessMemory
WriteProcessMemory
api-ms-win-core-privateprofile-l1-1-1
WritePrivateProfileSectionW
api-ms-win-core-privateprofile-l1-1-0
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileSectionW
api-ms-win-core-sysinfo-l1-2-1
GetPhysicallyInstalledSystemMemory
api-ms-win-core-registryuserspecific-l1-1-0
SHRegGetBoolUSValueW
SHRegGetUSValueW
api-ms-win-core-console-l3-2-0
GetConsoleWindow
api-ms-win-core-atoms-l1-1-0
GlobalAddAtomW
GlobalDeleteAtom
GlobalGetAtomNameW
api-ms-win-core-sysinfo-l1-2-3
GetIntegratedDisplaySize
api-ms-win-core-synch-l1-2-1
CreateSemaphoreW
WaitForMultipleObjects
api-ms-win-core-kernel32-private-l1-1-0
CheckElevationEnabled
CheckElevation
api-ms-win-core-apiquery-l1-1-0
ApiSetQueryApiSetPresence
api-ms-win-core-file-l1-2-1
GetCompressedFileSizeW
api-ms-win-core-sidebyside-l1-1-0
DeactivateActCtx
ReleaseActCtx
ActivateActCtx
CreateActCtxW
api-ms-win-core-wow64-l1-1-0
IsWow64Process
api-ms-win-core-delayload-l1-1-1
ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-0
DelayLoadFailureHook
kernelbase
GetPackageFamilyNameFromToken
IsDeveloperModeEnabled
ParseApplicationUserModelId
PackageNameAndPublisherIdFromFamilyName
GetPackageApplicationIds
GetCurrentPackageId
GetCurrentPackageInfo
GetCurrentApplicationUserModelId
GetCurrentPackageFamilyName
CheckAllowDecryptedRemoteDestinationPolicy
GetApplicationUserModelIdFromToken
GetCurrentPackageInfo2
FindPackagesByPackageFamily
GetPackageInfo2
GetStagedPackagePathByFullName2
api-ms-win-core-psm-key-l1-1-0
PsmGetKeyFromToken
api-ms-win-crt-math-l1-1-0
ceilf
AssocCreateForClasses
AssocGetDetailsOfPropKey
AssocShouldProcessUseAppToAppLaunching
CCachedShellItem_CreateInstance
CCollectionFactory_CreateInstance
CDesktopFolder_CreateInstanceWithBindContext
CFSFolder_AdjustForSlowColumn
CFSFolder_CreateFolder
CFSFolder_IsCommonItem
CFileOperationRecorder_CreateInstance
CFreeThreadedItemContainer_CreateInstance
CMruLongList_CreateInstance
CPrivateProfileCache_Save
CRegFolder_CreateAndInit
CRegFolder_CreateInstance
CShellItemArrayAsCollection_CreateInstance
CShellItemArrayAsVirtualizedObjectArray_CreateInstance
CShellItemArrayWithCommonParent_CreateInstance
CShellItemArray_CreateInstance
CShellItem_CreateInstance
CStorageItem_GetValidatedStorageItemObject
CTaskAddDoc_Create
CViewSettings_CreateInstance
CheckSmartScreenWithAltFile
CopyDefaultLibrariesFromGroupPolicy
CreateExtrinsicPropertyStore
CreateItemArrayFromItemStore
CreateItemArrayFromObjectArray
CreateLocalizationDesktopIni
CreateSortColumnArray
CreateStorageItemFromPath_FullTrustCaller
CreateStorageItemFromPath_FullTrustCaller_ForPackage
CreateStorageItemFromPath_PartialTrustCaller
CreateStorageItemFromShellItem
CreateStorageItemFromShellItem_FullTrustCaller_ForPackage
CreateVolatilePropertyStore
CustomStatePropertyDescription_CreateWithItemPropertyStore
CustomStatePropertyDescription_CreateWithStateIdentifier
DataAccessCaches_InvalidateForLibrary
DeserializeTextToLink
DetermineFolderDestinationParentAppID
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
DragQueryFileW
EnumShellItemsFromEnumFullIdList
GetCachedFileUpdateInformation
GetCommandProviderForFolderType
GetFileUndoText
GetFindDataForPath
GetFindDataFromFileInformationByHandle
GetInfoForFileInUse
GetRegDataDrivenCommand
GetRegDataDrivenCommandWithAssociation
GetSelectionStateFromItemArray
GetSystemPersistedStorageItemList
GetSystemPersistedStorageItemListForUser
GetThreadFlags
GetUserChoiceForUrl
Global_WindowsStorage_MaxIcons
Global_WindowsStorage_Untyped_FileClassSRWLock
Global_WindowsStorage_Untyped_MountPoint
Global_WindowsStorage_Untyped_pFileClassCacheTable
Global_WindowsStorage_Untyped_pFileHanderMap
Global_WindowsStorage_Untyped_rgshil
Global_WindowsStorage_afNotRedirected
Global_WindowsStorage_ccIcon
Global_WindowsStorage_csIconCache
Global_WindowsStorage_csSCN
Global_WindowsStorage_dwThreadBindCtx
Global_WindowsStorage_dwThreadInitializing
Global_WindowsStorage_esServerMode
Global_WindowsStorage_fEndInitialized
Global_WindowsStorage_fIconCacheHasBeenSuccessfullyCreated
Global_WindowsStorage_fIconCacheIsValid
Global_WindowsStorage_fNeedsInitBroadcast
Global_WindowsStorage_hwndSCN
Global_WindowsStorage_iLastSysIcon
Global_WindowsStorage_iLastSystemColorDepth
Global_WindowsStorage_iUseLinkPrefix
Global_WindowsStorage_lProcessClassCount
Global_WindowsStorage_lrFlags
Global_WindowsStorage_nImageManagerVersion
Global_WindowsStorage_tlsChangeClientProxy
Global_WindowsStorage_tlsIconCache
Global_WindowsStorage_tlsThreadFlags
Global_WindowsStorage_ulNextID
GrantPathAccess_FullTrustCaller_ForPackage
GrantWorkingDirectoryAccess_FullTrustCaller_ForPackage
HideExtension
ILAppendID
ILClone
ILCloneFirst
ILCombine
ILFindChild
ILFindLastID
ILFree
ILGetNext
ILGetSize
ILIsEqual
ILIsParent
ILLoadFromStreamEx
ILRemoveLastID
ILSaveToStream
IsLFNDriveW
IsLibraryCreatedByPolicy
IsLibraryPolicyEnabled
IsNameListedUnderKey
IsUserAnAdmin
NeverProvidedByJunction
PathCleanupSpec
PathContainedByManifestedKnownFolder_FullTrustCaller_ForPackage
PathIsExe
PathMakeUniqueName
PathYetAnotherMakeUniqueName
QueryStorageAccess_FullTrustCaller_ForPackage
QueryStorageAccess_FullTrustCaller_ForToken
RebaseOnDriveLetter
RebaseOnVolumeID
RegistryVerbs_GetHandlerMultiSelectModel
SHBindToFolderIDListParent
SHBindToFolderIDListParentEx
SHBindToObject
SHBindToParent
SHCLSIDFromString
SHChangeNotification_Lock
SHChangeNotification_Unlock
SHChangeNotify
SHChangeNotifyDeregister
SHChangeNotifyRegister
SHCoCreateInstanceWorker
SHCreateAssociationRegistration
SHCreateDataObject
SHCreateDefaultExtractIcon
SHCreateDirectory
SHCreateDirectoryExA
SHCreateDirectoryExW
SHCreateItemFromIDList
SHCreateItemFromParsingName
SHCreateItemInKnownFolder
SHCreateItemWithParent
SHCreateItemWithParentAndChildId
SHCreateShellItemArray
SHCreateShellItemArrayFromDataObject
SHCreateShellItemArrayFromIDLists
SHCreateShellItemArrayFromShellItem
SHCreateShellItemArrayWithFolderParent
SHCreateStdEnumFmtEtc
SHFileOperationWithAdditionalFlags
SHFindFiles
SHFlushSFCache
SHGetDesktopFolder
SHGetFileInfoW
SHGetFolderLocation
SHGetFolderPathA
SHGetFolderPathAndSubDirA
SHGetFolderPathAndSubDirW
SHGetFolderPathEx
SHGetFolderPathW
SHGetIDListFromObject
SHGetInstanceExplorer
SHGetItemFromObject
SHGetKnownFolderIDList
SHGetKnownFolderIDList_Internal
SHGetKnownFolderItem
SHGetKnownFolderPath
SHGetNameFromIDList
SHGetPathFromIDListEx
SHGetPathFromIDListW
SHGetSetSettings
SHGetSpecialFolderLocation
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
SHGetStockIconInfo
SHGetTemporaryPropertyForItem
SHILCreateFromPath
SHKnownFolderFromCSIDL
SHKnownFolderToCSIDL
SHParseDisplayName
SHPrepareKnownFoldersCommon
SHPrepareKnownFoldersUser
SHResolveLibrary
SHRestricted
SHSetFolderPathA
SHSetFolderPathW
SHSetKnownFolderPath
SHSetLocalizedName
SHSetTemporaryPropertyForItem
SHSysErrorMessageBox
SHTestTokenMembership
STORAGE_AddItemToRecentDocs
STORAGE_AddNewFolderToFrequentPlaces
STORAGE_CEnumFiles_CreateInstance
STORAGE_CStatusProvider_CreateInstance
STORAGE_CStorageItem_GetValidatedStorageItem
STORAGE_CStorageItem_GetValidatedStorageItemObject
STORAGE_ClearDestinationsForAllApps
STORAGE_CreateSortColumnArrayFromListDesc
STORAGE_CreateStorageItemFromPath_FullTrustCaller
STORAGE_CreateStorageItemFromPath_FullTrustCaller_ForPackage
STORAGE_CreateStorageItemFromPath_PartialTrustCaller
STORAGE_CreateStorageItemFromShellItem_FullTrustCaller
STORAGE_CreateStorageItemFromShellItem_FullTrustCaller_ForPackage
STORAGE_CreateStorageItemFromShellItem_FullTrustCaller_ForPackage_WithProcessHandle
STORAGE_CreateStorageItemFromShellItem_FullTrustCaller_ForPackage_WithProcessHandleAndSecondaryStreamName
STORAGE_CreateStorageItemFromShellItem_FullTrustCaller_UseImplicitFlagsAndPackage
STORAGE_FillResultWithNullForKeys
STORAGE_GetShellItemFromStorageItem
STORAGE_GetSystemPersistedStorageItemList
STORAGE_MakeDestinationItem
STORAGE_PathIsEqualOrSubFolderOfKnownFolders
STORAGE_SHAddToRecentDocs
STORAGE_SHAddToRecentDocsEx
STORAGE_SHConfirmOperation
STORAGE_SHCreateDirectory
STORAGE_SHCreateDirectoryExA
STORAGE_SHCreateDirectoryExWWorker
STORAGE_SHCreateShellItemArray
STORAGE_SHCreateShellItemArrayFromDataObject
STORAGE_SHCreateShellItemArrayFromIDLists
STORAGE_SHCreateShellItemArrayFromShellItem
STORAGE_SHFileOperation
STORAGE_SHFileOperationA
STORAGE_SHFreeNameMappings
STORAGE_SHGetDesktopFolderWorker
STORAGE_SHGetPathFromMsUri
STORAGE_SHPathPrepareForWriteA
STORAGE_SHPathPrepareForWriteW
STORAGE_SHValidateMSUri
SendNotificationsForLibraryItem
SerializeLinkToText
SetThreadFlags
ShellExecuteExW
StateRepoVerbsCache_Destroy
StateRepoVerbsCache_GetContextMenuVerbs
StateRepoVerbsCache_RebuildCacheAsync
StorageItemHelpers_IsSupportedRemovablePath
Storage_Internal_GetAccessListForPackage
_CleanRecentDocs
_PredictReasonableImpact
Name
.text
Size
5.6MB
Virtual Size
5.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
329KB
Virtual Size
329KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
121KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=167, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=44, id=260, version=27412,
count=3, id=259, version=27412,
count=2642, id=1, productName=Unmarked objects,
count=8, id=257, version=27412,
count=1, id=256, version=27412,
count=428, id=269, version=27412,
count=29, id=261, version=27412,
count=10, id=253, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Installer/act/x64_x32/ProtectionManagement.dll
- IMPHASH d3de22d58487131393a770a2f82698cb
- SHA256 049f84d124f419f11f47a2e24dba15f289eed4587e426779c747329009a90222
- MD5 642ce7226b6376d01e89ac40f7805cdb
- SHA1 2590411155db3b365384607e3e86edd554321c7e
- SHA512 ac32e337b5cb536433ea00a0006e0ebfed57cdd1f9b918fd4494938b7c06e62e8fa56851ef6f658cdedc597f8ae160595a152fe156e26c2254a3989008faf8df
- SSDEEP 6144:tzU9gF+RtP1UjCPCXD099yNoPyvQccWnEeSi5T++vgCmrOz57ewij7w8Q0c6+6TG:BChsjssQcQeS4+LLyewijPc6+0bGY
- TLSH T18FE44C1AEBE84466D1A6927784A34A15E7B2B8191F21D7CF0264B32F5F1F3E44F79320
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
57:e5:72:2f:ce:14:87:82:6d:02:66:6f:e7:d4:cd:f9:1f:c4:11:b0:cc:62:28:2a:70:45:24:35:be:95:cc:d5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 25, 2019
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:31:32:34:cb:af:a8:ab:9a:4d:00:00:00:00:02:31
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 2, 2019 - May 2, 2020
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:07:76:56:00:00:00:00:00:08
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 19, 2011 - Oct 19, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:04:09:01:75:08:58:87:2d:29:00:00:00:00:01:04
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 6, 2019 - Dec 4, 2020
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:09:81:2a:00:00:00:00:00:02
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 1, 2010 - Jul 1, 2025
Minor OS version
0
Major OS version
10
Entry point
354224
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
ProtectionManagement.pdb
kernel32
SetLastError
GetCurrentThreadId
GetStdHandle
GetFileType
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
LCMapStringW
GetLocaleInfoW
GetCPInfo
IsValidCodePage
GetACP
GetOEMCP
GetFileSizeEx
SetFilePointerEx
IsProcessorFeaturePresent
SetStdHandle
ExitProcess
GetModuleHandleExW
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetModuleFileNameW
ReadFile
CreateFileW
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
RtlPcToFileHeader
EncodePointer
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
GetModuleHandleW
RtlLookupFunctionEntry
RtlCaptureContext
WideCharToMultiByte
MultiByteToWideChar
RaiseException
DeleteCriticalSection
InitializeCriticalSection
HeapDestroy
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
WaitForSingleObject
GetSystemTime
GetTimeZoneInformation
CloseHandle
LeaveCriticalSection
EnterCriticalSection
FindResourceExW
LoadResource
LockResource
SizeofResource
LoadLibraryExW
FreeLibrary
GetProcAddress
GetLastError
GetStringTypeW
GetSystemDirectoryW
WaitForSingleObjectEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
FindFirstFileExW
FreeLibraryAndExitThread
ExitThread
GetFileAttributesExW
GetTickCount
SwitchToThread
CompareFileTime
GetExitCodeProcess
CreateEventW
SetEvent
FileTimeToSystemTime
GlobalFindAtomW
GetDriveTypeW
GetVersionExW
GetLocalTime
SystemTimeToFileTime
GetNativeSystemInfo
ProcessIdToSessionId
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetExitCodeThread
ResetEvent
CreateThread
MoveFileW
GetLongPathNameW
GetFileSize
VerifyVersionInfoW
K32GetModuleFileNameExW
DeleteFileW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
FreeResource
FindResourceW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
OpenProcess
GetDiskFreeSpaceExW
GetWindowsDirectoryW
Sleep
LocalFree
IsWow64Process
ReleaseMutex
CreateMutexW
CreateProcessW
CopyFileW
GetTempFileNameW
GetTempPathW
CreateDirectoryW
FormatMessageW
SetFileAttributesW
GetFileAttributesW
TryEnterCriticalSection
oleaut32
SysAllocString
VariantInit
VariantClear
VarBstrCat
SysAllocStringLen
SafeArrayCreate
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysStringLen
advapi32
CreateProcessAsUserW
CloseServiceHandle
InitiateSystemShutdownExW
AdjustTokenPrivileges
PrivilegeCheck
LookupPrivilegeValueW
QueryServiceStatus
ControlService
ChangeServiceConfigW
OpenServiceW
OpenSCManagerW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
GetSidSubAuthority
DuplicateTokenEx
GetSidSubAuthorityCount
GetTokenInformation
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegisterEventSourceW
DeregisterEventSource
ReportEventW
TraceMessage
GetTraceLoggerHandle
GetTraceEnableFlags
GetTraceEnableLevel
RegisterTraceGuidsW
UnregisterTraceGuids
LookupPrivilegeNameW
ole32
CoCreateInstance
StringFromGUID2
CoCreateGuid
user32
LoadImageW
DestroyIcon
CreateDialogParamW
LoadIconW
DestroyWindow
SendMessageW
ShowWindow
LoadStringW
PostMessageW
GetSystemMetrics
FindWindowW
GetWindowThreadProcessId
MessageBoxW
SetForegroundWindow
SetTimer
KillTimer
IsDialogMessageW
PostThreadMessageW
AdjustWindowRectEx
SetWindowTextW
GetLastActivePopup
UnregisterClassA
mpclient
MpThreatOpen
MpThreatRollup
MpDetectionEnumerate
MpConfigGetValue
MpConfigGetValueAlloc
MpConfigClose
MpConfigIteratorClose
MpConfigUnregisterNotifications
MpConfigRegisterForNotifications
MpConfigOpen
MpConfigIteratorOpen
MpGetCallistoDetections
MpManagerVersionQuery
MpGetTPStateInfo
MpCreateComInstance
MpScanStartEx
MpUpdateStartEx
MpOfflineScanInstall
MpTriggerHeartbeatOnUninstall
MpCleanStart
MpThreatEnumerate
MpManagerStatusQueryEx
MpNotificationRegister
MpManagerOpen
MpHandleClose
MpElevateCleanHandle
MpElevationHandleAcquire
MpThreatQuery
MpUtilsExportFunctions
MpCleanOpen
MpAllocMemory
MpClientUtilExportFunctions
MpConfigUninitialize
MpConfigInitialize
MpFreeMemory
MpConfigIteratorEnum
shell32
SHGetPathFromIDListW
SHGetFolderPathW
SHGetSpecialFolderLocation
shlwapi
PathFindFileNameW
PathIsRelativeW
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW
PathCombineW
PathAppendW
PathMatchSpecW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
crypt32
CertVerifyCertificateChainPolicy
wintrust
WTHelperGetProvSignerFromChain
CryptCATAdminEnumCatalogFromHash
WinVerifyTrust
CryptCATCatalogInfoFromContext
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminAcquireContext
WTHelperProvDataFromStateData
CryptCATAdminReleaseCatalogContext
CryptCATAdminReleaseContext
wtsapi32
WTSQuerySessionInformationW
WTSEnumerateSessionsW
WTSFreeMemory
WTSQueryUserToken
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
GetProviderClassID
MI_Main
Name
.text
Size
390KB
Virtual Size
390KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
215KB
Virtual Size
215KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
26KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=257, version=27412,
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=23, id=257, version=26213,
count=383, id=1, productName=Unmarked objects,
count=29, id=260, version=27412,
count=14, id=259, version=27412,
count=203, id=261, version=27412,
count=1, id=256, version=27412,
count=140, id=265, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
Installer/act/x64_x32/ProtectionManagement.mof
- SHA256 1a3279e31fb9a46172dd27b93ac66e1277baaf5b36fdf892bd4717dd924f7b62
- MD5 e9492fb7888d8f96fc6e379b49ca1dd5
- SHA1 d14d7abfbc9e43c0519bd34067930fb26abc21dd
- SHA512 499550c9bb95e6904a0a23c3b8230d6d9b7b73c11db903b58f98226efed58156f4cc9bc60d7192fc56031646fa35fc60b73d9996f6f1d91e14610d2d540d9ea6
- SSDEEP 384:9emdf8e0KSACZLDBaGuapf8e0KSACZLDBaGuab:9emdf8mBeyapf8mBeyab
- TLSH T18FE2EF3EF2F46C132053DDF75A96158EBA618BB1D2C80C71A8F7A55F0D0EC57A36242A
- MD5 SHA1 SHA512 SSDEEP TLSH
Installer/act/x64_x32/ProtectionManagement_Uninstall.mof
- SHA256 30a0ad834d7b3f4fb47010b4bb6905576792e83064e9dd858eabf0cca17fc3df
- MD5 72d045707d108d55b76cd70ad9a84ad6
- SHA1 8fe25f4f289302a49cf2fa0f962fea4d7d82fb8a
- SHA512 e3c6f3f931aefcf1f0b1061b7355451692af1f459f8ed13c39b03951a6a3e833aebb1031796b5d806c615d3e84c178d628b10ab5ec5ccbc50935cbb0d584fa50
- TLSH T18A519C8663F92228B7F7AF1569F91C2819777EE41919F03E44004E8E0CB9B44FAA1773
- MD5 SHA1 SHA512 TLSH
Installer/alternative/Fix.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 ea9db4fee228003e1a837974a8c41ca591284cb1f54912d8344d055c713f93ed
- MD5 7621c23308859a2f62f9245b23e65e34
- SHA1 711b9c4050ce09b1f0d6575e61b3ba7ded0f2a36
- SHA512 ab9d68cb3657ba058a87abe6617fad44e3c8f3a52b48c31678cfcad607c09c2c9708500f8d7eba20f2395c902eb75f7d662edd55e9f12632b192d4d4c78ff513
- SSDEEP 49152:ttzkmFl+3hsM63eGrQfXXnBcUhBfzXypwOKRu97T5yu1mAMSsIvzRO3nC0:tRmbnBZ7zipD8Mou1sI2p
- TLSH T125E56C427C9109FEC159B33188B2719ABF74BC89073627D32FA16A782E72BD41D36716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
2b:3a:ee:5e:50:7f:0b:a1:b2:02:d3:29:d7:dc:12:55:56:ad:c5:df
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=*.ifixit.com
Chains
Jun 8, 2026
CN=*.ifixit.com
Subject
CN=*.ifixit.com
Serial Number
08:e0:aa:cf:eb:43:5c:8c:e3:93:6a:c6:3e:18:4c:b4
Issuer
CN=Amazon RSA 2048 M01
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth
Timespan
Mar 23, 2026 - Oct 6, 2026
Minor OS version
1
Major OS version
6
Entry point
467168
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
975KB
Virtual Size
974KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
60KB
Virtual Size
352KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
118KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Installer/config.jet
- SHA256 7ab308abac85601d348005bbb7032c92261fa25c782a712f1b0482bd85845ede
- MD5 53a9cdbb5470cba6ec4fbafdf7ac618c
- SHA1 dd8600c6f92b975ce54f300ac854abbdddb96559
- SHA512 c501cf9bbce1186e42352612d60c1f41699c0e297bfa93a6a91ad586b8f09fcd81b00b67ca1cc52a80a227d29750739ec56a8b494fe3f679ffca0c797ccec02f
- TLSH T1CD0176308A7D243C430CCEAC3D62EB5AAA7C020F5784C41FD56D8EED1BC00A159D7352
- MD5 SHA1 SHA512 TLSH