Super Meat Boy Jack OLantern.rar
- SHA256 4b07b2869d643cac80397c55178c390d2bbf5ebd3a0cd1df87dcad1df5fccaa5
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Super Meat Boy Jack O'Lantern/Prerequisites/DXSETUP.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Super Meat Boy Jack O'Lantern/Prerequisites/vcredist_x64.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Super Meat Boy Jack O'Lantern/Prerequisites/vcredist_x86.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
Super Meat Boy Jack O'Lantern/SuperMeatBoy.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target Super Meat Boy Jack OLantern.rar
- Size 179.1MB
- Sample260627-sd3ecabt8v
- SHA256 4b07b2869d643cac80397c55178c390d2bbf5ebd3a0cd1df87dcad1df5fccaa5
- MD5 eaa0b4d83751c4c7b69e35b33bdc0ba2
- SHA1 57babee9d3d3da3b1ec9e2b9a75c4671c22f9894
- SHA512 ffa0013f5af31a8e0f2e80b041106ddc3a6d1e6a985cef983ab86391b1402dd00ca952340afe92a89e35592c8e8bc9f6f9ecf58a37c0d5f2640d6cf517bd2936
- SSDEEP 3145728:kQAFsYniawr5aB478SkSDzs+X+4EOYH1gQZZm6xSHBTofgWOZJpn+:PYfFJ7+zs+XpETVgkZmLzbo
- TLSH T12698339700EA63C7C73E57B60780873879ACE7092E11FCD99F8196D91783AE30A6C55B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack004/infinst.exe unpack006/infinst.exe unpack008/infinst.exe unpack001/Super Meat Boy Jack O'Lantern/SuperMeatBoy.exe unpack001/Super Meat Boy Jack O'Lantern/steam_api.dll - Untrusted Codesign Signers 16 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack002/infinst.exe unpack002/xinput1_3.dll unpack003/xinput1_3.dll unpack004/D3DCompiler_42.dll unpack005/D3DCompiler_42.dll unpack006/d3dx9_42.dll unpack007/d3dx9_42.dll unpack001/Super Meat Boy Jack O'Lantern/Prerequisites/DSETUP.dll unpack001/Super Meat Boy Jack O'Lantern/Prerequisites/DXSETUP.exe unpack008/XAPOFX1_4.dll unpack008/XAudio2_6.dll unpack009/XAPOFX1_4.dll unpack009/XAudio2_6.dll unpack001/Super Meat Boy Jack O'Lantern/Prerequisites/dsetup32.dll unpack001/Super Meat Boy Jack O'Lantern/Prerequisites/vcredist_x64.exe unpack001/Super Meat Boy Jack O'Lantern/Prerequisites/vcredist_x86.exe
File Explorer
-
Super Meat Boy Jack OLantern.rar.rar 179.1MB
-
Super Meat Boy Jack O'Lantern/Levels/LevelReadMe.txt104B
-
Super Meat Boy Jack O'Lantern/Prerequisites/APR2007_xinput_x64.cab.cab 94KB
-
apr2007_xinput_x64.inf860B
-
infinst.exe.exe 68KB
-
xinput1_3.dll.dll 104KB
-
xinput1_3_x64.cat10KB
-
xinput1_3_x64.inf669B
-
xinput1_3_x64_xp.inf445B
-
Super Meat Boy Jack O'Lantern/Prerequisites/APR2007_xinput_x86.cab.cab 52KB
-
apr2007_xinput_x86.inf1KB
-
xinput1_3.dll.dll 79KB
-
xinput1_3_x86.cat10KB
-
xinput1_3_x86.inf783B
-
xinput1_3_x86_xp.inf559B
-
Super Meat Boy Jack O'Lantern/Prerequisites/Aug2009_D3DCompiler_42_x64.cab.cab 897KB
-
AUG2009_D3DCompiler_42_x64.inf830B
-
D3DCompiler_42.dll.dll 2.5MB
-
D3DCompiler_42_x64.cat6KB
-
D3DCompiler_42_x64.inf683B
-
D3DCompiler_42_x64_xp.inf454B
-
infinst.exe.exe 74KB
-
Super Meat Boy Jack O'Lantern/Prerequisites/Aug2009_D3DCompiler_42_x86.cab.cab 879KB
-
AUG2009_D3DCompiler_42_x86.inf1KB
-
D3DCompiler_42.dll.dll 1.9MB
-
D3DCompiler_42_x86.cat6KB
-
D3DCompiler_42_x86.inf801B
-
D3DCompiler_42_x86_xp.inf572B
-
Super Meat Boy Jack O'Lantern/Prerequisites/Aug2009_d3dx9_42_x64.cab.cab 908KB
-
AUG2009_d3dx9_42_x64.inf812B
-
d3dx9_42.dll.dll 2.4MB
-
d3dx9_42_x64.cat6KB
-
d3dx9_42_x64.inf667B
-
d3dx9_42_x64_xp.inf444B
-
infinst.exe.exe 74KB
-
Super Meat Boy Jack O'Lantern/Prerequisites/Aug2009_d3dx9_42_x86.cab.cab 711KB
-
AUG2009_d3dx9_42_x86.inf1KB
-
d3dx9_42.dll.dll 1.8MB
-
d3dx9_42_x86.cat6KB
-
d3dx9_42_x86.inf779B
-
d3dx9_42_x86_xp.inf556B
-
Super Meat Boy Jack O'Lantern/Prerequisites/DSETUP.dll.dll 91KB
-
Super Meat Boy Jack O'Lantern/Prerequisites/DXSETUP.exe.exe 513KB
-
Super Meat Boy Jack O'Lantern/Prerequisites/Feb2010_XAudio_x64.cab.cab 270KB
-
FEB2010_XAudio_x64.inf923B
-
XAPOFX1_4.dll.dll 76KB
-
XAudio2_6.dll.dll 518KB
-
XAudio2_6_x64.cat6KB
-
XAudio2_6_x64.inf755B
-
XAudio2_6_x64_xp.inf531B
-
infinst.exe.exe 74KB
-
Super Meat Boy Jack O'Lantern/Prerequisites/Feb2010_XAudio_x86.cab.cab 270KB
-
FEB2010_XAudio_x86.inf1KB
-
XAPOFX1_4.dll.dll 72KB
-
XAudio2_6.dll.dll 515KB
-
XAudio2_6_x86.cat6KB
-
XAudio2_6_x86.inf882B
-
XAudio2_6_x86_xp.inf659B
-
Super Meat Boy Jack O'Lantern/Prerequisites/dsetup32.dll.dll 1.6MB
-
Super Meat Boy Jack O'Lantern/Prerequisites/dxdllreg_x86.cab.cab .ps1 43KB
-
Super Meat Boy Jack O'Lantern/Prerequisites/dxnt.cab.cab 12.6MB
-
Super Meat Boy Jack O'Lantern/Prerequisites/dxupdate.cab.cab 93KB
-
Super Meat Boy Jack O'Lantern/Prerequisites/vcredist_x64.exe.exe 2.3MB
-
Super Meat Boy Jack O'Lantern/Prerequisites/vcredist_x86.exe.exe 1.7MB
-
Super Meat Boy Jack O'Lantern/SuperMeatBoy.exe.exe 2.9MB
-
Super Meat Boy Jack O'Lantern/UserData/Reg0.dat81B
-
Super Meat Boy Jack O'Lantern/buttonmap.cfg171B
-
Super Meat Boy Jack O'Lantern/buttonmap.cfg.bak171B
-
Super Meat Boy Jack O'Lantern/gameaudio.dat144.0MB
-
Super Meat Boy Jack O'Lantern/gamedata.dat90.6MB
-
Super Meat Boy Jack O'Lantern/installscript.vdf1KB
-
Super Meat Boy Jack O'Lantern/locdb.txt164KB
-
Super Meat Boy Jack O'Lantern/pixel.cache60B
-
Super Meat Boy Jack O'Lantern/resources/Fonts/Chinese.fnt13KB
-
Super Meat Boy Jack O'Lantern/resources/Fonts/Chinese_0.png.png 867KB
-
Super Meat Boy Jack O'Lantern/resources/Fonts/Chinese_1.png.png 7KB
-
Super Meat Boy Jack O'Lantern/resources/Fonts/EFIGS.fnt3KB
-
Super Meat Boy Jack O'Lantern/resources/Fonts/EFIGS_0.png.png 6KB
-
Super Meat Boy Jack O'Lantern/resources/Fonts/Japanese.fnt13KB
-
Super Meat Boy Jack O'Lantern/resources/Fonts/Japanese_0.png.png 538KB
-
Super Meat Boy Jack O'Lantern/resources/Fonts/Korean.fnt10KB
-
Super Meat Boy Jack O'Lantern/resources/Fonts/Korean_0.png.png 411KB
-
Super Meat Boy Jack O'Lantern/resources/Fonts/Korean_1.png.png 4KB
-
Super Meat Boy Jack O'Lantern/resources/Fonts/Russian.fnt7KB
-
Super Meat Boy Jack O'Lantern/resources/Fonts/Russian_0.png.png 10KB
-
Super Meat Boy Jack O'Lantern/resources/Shaders/ShaderMacros.h4KB
-
Super Meat Boy Jack O'Lantern/resources/Shaders/psshaders.frags2KB
-
Super Meat Boy Jack O'Lantern/resources/Shaders/psshaders.psh6KB
-
Super Meat Boy Jack O'Lantern/resources/Shaders/vsshaders.frags1KB
-
Super Meat Boy Jack O'Lantern/resources/Shaders/vsshaders.vsh2KB
-
Super Meat Boy Jack O'Lantern/resources/Textures/editoricons.tp1KB
-
Super Meat Boy Jack O'Lantern/steam_api.dll.dll 76KB
-
Super Meat Boy Jack O'Lantern/steam_appid.txt5B
-
Super Meat Boy Jack O'Lantern/steam_rld.ini684B
-
Super Meat Boy Jack O'Lantern/vertex.cache40B
Super Meat Boy Jack O'Lantern/Levels/LevelReadMe.txt
- SHA256 95ac5595e65cddfb616edb9b282ad922a52572deed9ec1c3820c0d5e9d06c404
- MD5 220eb3a71139eed45e2f9a55c7091240
- SHA1 eeb68ed16e1bfbdf8d449d57f88212abb31a809e
- SHA512 4eed01b2b5c6e8123b7fb108355b8dadf2e22638f715993b40f66457e15ab096fa7d2db16fd5bc9157ffd4ece618be290d2ca99d076516f4b2004cf9cb3b5ec6
- TLSH T11DB0123331C00156880333010C0341D21B3339E0112A32FCA93E725C1B735A04183E79
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/Prerequisites/APR2007_xinput_x64.cab
- SHA256 ca84a2ab5f43ed1e7f0d6eb75ec3ad1e801514eda002ae91a0801f0664c83f06
- MD5 34738449260416609e1ac581a531ae3d
- SHA1 801ae604be6f4a768ae4039c3b1fe5d97df740cc
- SHA512 c4d1e5d3324b0404f97cfb2858c2b32b96fde69ae3f1f0c5468268b5a2f3367f5ba34d0bfc057814e4c63b76fcd9b21b6ebf2cccf97d74ef93672656513b00d1
- SSDEEP 1536:CEDWhtT9OVcSEbv2sSXSf2rGrqZj64W/msrR2rKg+Yy9bMP+rGb2HtDZzmwqq5t:It5OSvuXSf2rbZu4Kmsr4eLRwPC5B9qM
- TLSH T14F9302D9297BDE03EF175EFDA7C6A4087924DF25D4E0701627EEA2980C143C56532F2A
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
43f7402009f2762e24528455dbbd59841c6b1a4f
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 16, 2009
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:27:81:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2008 - Jan 22, 2010
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
apr2007_xinput_x64.inf
- SHA256 0d6e1c0e961d878b319ac30d3439056883448dcf26774003b73920f3377ecac8
- MD5 94563a3b9affb41d2bfd41a94b81e08d
- SHA1 17cad981ef428e132aa1d571e0c77091e750e0dd
- SHA512 53cac179d7e11c74772e7b9bd7dd94ffbc810cfc25e28326e4d0844f3f59fd10d9089b44a88358ac6dbd09fb8b456a0937778f78ecc442645764f693ccd620b8
- TLSH T1CC118CCCCC0290327789E2B17B8B3BCA5B6B0417E961225C35DF4588EB67145A27C6FD
- MD5 SHA1 SHA512 TLSH
infinst.exe
- IMPHASH 6668c9525ad04c4190169dc04fde550d
- SHA256 34ab99536ea59ad60ba6efda3ea6d18291ef096a0bab3664248d6045805da0ec
- MD5 45d4dac07aa361bcd77aa815d1724a16
- SHA1 3bbdf7da5d51211ae269572961b5ebf508ada28d
- SHA512 d940002a8e0112a3b56a909008403b447e9cbb80e38b9bbd508f40aa68224f7e5d9681e1039e747ae939e0829a25be2319b9f9d0862cebb042e4c525ccbc20be
- SSDEEP 1536:dSKL6bzRYK/ixmu3XyhJRxjWhKfLXJ/y/Fae:dSKL62K/u3XmxCAfLXJ/y/E
- TLSH T1E8637DC3A648407AE0BFA53486F15B23F7F5F854033953DF1A1489290A67BDC2A3D74A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
44:c2:26:68:e3:a7:0e:0f:e1:0d:6e:d0:a5:42:df:15:4c:e1:0a:0f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 5, 2007
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:47:52:ba:00:00:00:00:00:04
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 16, 2006 - Sep 16, 2011
Subject
CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:49:7c:ed:00:00:00:00:00:05
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 16, 2006 - Sep 16, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 4, 2006 - Apr 26, 2012
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:46:9e:cb:00:04:00:00:00:65
Issuer
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 4, 2006 - Oct 4, 2007
Minor OS version
2
Major OS version
5
Entry point
22464
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
infinst.pdb
kernel32
OutputDebugStringA
GetWindowsDirectoryA
GetLastError
LocalFree
FormatMessageA
CompareStringA
CloseHandle
CreateFileA
lstrlenA
GetPrivateProfileStringA
FindClose
FindFirstFileA
MoveFileExA
CopyFileA
GetCurrentDirectoryA
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetLocalTime
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
RtlUnwindEx
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSetInformation
HeapCreate
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
Sleep
SetFilePointer
SetStdHandle
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
ReadFile
GetLocaleInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
user32
CharNextA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
setupapi
SetupDiGetDeviceRegistryPropertyA
SetupOpenInfFileA
SetupOpenFileQueue
SetupInstallFromInfSectionA
SetupCloseFileQueue
SetupCloseInfFile
SetupCopyOEMInfA
SetupDiDestroyDeviceInfoList
SetupDiSetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDefaultQueueCallbackA
Name
.text
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=9, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=88, id=1, productName=Unmarked objects,
count=7, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=71, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=4, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=120, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
xinput1_3.dll
- IMPHASH cfb6d24996ee7fd94a9861f495966a8f
- SHA256 756cad002e1553cfa1a91ebe8c1b9380ffabe0b4b1916c4a4db802396ddfbef8
- MD5 bfb3091b167550ec6e6454813d3db244
- SHA1 87e86a7c783f607697a4880e7e063ab87bf63034
- SHA512 ce2ead2480a3942081af4df4baee32de18862b5f0288169b9e8135cc710eb128f9a2b8a36bda87212c53fd4317359349c94d38b5da082638230dcb5669efede9
- SSDEEP 1536:S1ea+pg4i1fprOwSGiExJ70MBzLrPbYMGsJ0OXrLSkfmrxy/Fae:S1nz1UrGiEPg0LH7GNO7LSkfaxy/E
- TLSH T15DA3299AF25991F9D47BC07886D3BB26F6B2B450073487CB2764466A0F13BD89E3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
b1:13:a0:12:c8:ac:fe:2a:cf:9b:de:3a:9a:57:d2:44:15:68:d9:0f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 5, 2007
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:47:52:ba:00:00:00:00:00:04
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 16, 2006 - Sep 16, 2011
Subject
CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:49:7c:ed:00:00:00:00:00:05
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 16, 2006 - Sep 16, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 4, 2006 - Apr 26, 2012
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:46:9e:cb:00:04:00:00:00:65
Issuer
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 4, 2006 - Oct 4, 2007
Minor OS version
2
Major OS version
5
Entry point
39136
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
XInput1_3.pdb
ntdll
RtlPcToFileHeader
RtlUnwindEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
kernel32
LeaveCriticalSection
LocalFree
DuplicateHandle
GetCurrentProcess
LocalAlloc
SetEvent
GetLastError
CreateThread
CreateFileW
LoadLibraryW
FreeLibrary
GetProcAddress
DeviceIoControl
GetOverlappedResult
CreateEventW
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
ExitProcess
GetModuleHandleA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
Sleep
HeapSetInformation
HeapCreate
HeapDestroy
EnterCriticalSection
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
DeleteCriticalSection
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
WriteFile
RaiseException
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetFilePointer
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
FlushFileBuffers
InitializeCriticalSection
CloseHandle
SetHandleCount
GetEnvironmentStrings
advapi32
TraceMessage
setupapi
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
DllMain
XInputEnable
XInputGetBatteryInformation
XInputGetCapabilities
XInputGetDSoundAudioDeviceGuids
XInputGetKeystroke
XInputGetState
XInputSetState
Name
.text
Size
83KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
860B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=108, id=1, productName=Unmarked objects,
count=11, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=91, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=122, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=25, id=110, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=120, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
xinput1_3_x64.cat
- SHA256 3c21371bed285644d9732a1cd3b365da8e68c810c9306cad0a5d9f731a4bb181
- MD5 cebe3d6e47ab85624ebf561c69c73260
- SHA1 0f347828d6ff978cb82e83c26c023a28424d3d84
- SHA512 0a8dbac94e59a804154f3e9b63aec2ab604b2903d7c727b4e337ca3d307e0dbb91a02438e70d0b27f6e533af0a87b576048a31c9df962b39ea3bffb85c8dd222
- SSDEEP 96:KqmReWk1DPDaxDPDaFOgkHDPDab3vTDPDaxDPDaFOgkHDPDab3vND74ODvrRAm8P:MYVEo6opz+jaIhjuOu39DKmHj70lfAe
- TLSH T15322F8C78D3C9147BD4A6C5263ACED937C78DBC34845DA2720AAF6D809937D6A71882C
- MD5 SHA1 SHA512 SSDEEP TLSH
xinput1_3_x64.inf
- SHA256 0d411d9424128f19fed2daa95a2983b4b29197f022a754f59d0c7740ad654cca
- MD5 c9635b7617d68d95f9113282472218c9
- SHA1 e3da3f2600a0f5cd0e28722ee313e04fc29dfc60
- SHA512 0481e008619d3b3a45d0a90825b576e4c03f27668b0792762cb9165b15955645667392f23eac5e5c4eb8a7fe6fa47cae4c319323b02225289af0cffaf1ca8c83
- TLSH T1A301FE6C93910B88F4CBBA00244599C3A5AE01405685209A75FE8A84FB72284D7BC4BB
- MD5 SHA1 SHA512 TLSH
xinput1_3_x64_xp.inf
- SHA256 1d3de640065e0bcfaa69991835a6bd80b2b8d984056d895f90b9aa6eede693bb
- MD5 975293467ddbe757f32e3fe04743d8d1
- SHA1 50e01aff1073ea5b4e9fbfabc7902a24a89216b7
- SHA512 baa92034f4a892a00683ff6f6fb95033fc892737632ec0cd799fc214c156da97dc710914739c2c5ca346f1ea1f88a001e55121bac64655d207ba2a29a442e6f0
- TLSH T1EDF05C5DD3514A1DF09B7E1024468AC2B86D10401709304D78DE8EC8F775284C3F84BA
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/Prerequisites/APR2007_xinput_x86.cab
- SHA256 aae9109b726d2eb092ec0c917542245903c12ea020bae3e27f5b2016bb9f7639
- MD5 fe4b170965fda7aac0f92c015dc0688a
- SHA1 d7d19d31b750175728c25a46e8e7b6cd7ef209f4
- SHA512 c134d45ce5394740b3a0d76980f47548f2ba00bdcc0982011ad443864b0ba0c936a745cc3a4ddffaa801375f8ce469eac00980e8b0289575b9c301f1399f492b
- SSDEEP 1536:9cnwcwzHEdb27WH2SfZDNu75ddnVR+ZFaNk0ZLqrHUD:0wb+2eZonQwZqoD
- TLSH T14F33F1D6840EEC5DAEC51EB0397DF6919C39D3C784B3251B852FE896088A3E0A704B7D
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
7fb855fec80c7b921601074d62ee4fcb8af41946
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 16, 2009
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:27:81:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2008 - Jan 22, 2010
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
apr2007_xinput_x86.inf
- SHA256 1c798cb80e9e46ce03356ea7316e1eff5d3a88ccdd7cbfbfcdce73cded23b4e5
- MD5 e188f534500688cec2e894d3533997b4
- SHA1 f073f8515b94cb23b703ab5cdb3a5cfcc10b3333
- SHA512 332ccb25c5ed92ae48c5805a330534d985d6b41f9220af0844d407b2019396fcefea7076b409439f5ab8a9ca6819b65c07ada7bd3aa1222429966dc5a440d4f7
- TLSH T1D42126DDC8039435778AF2B27F9F7A8F663B8406E951221C73CA4994AB73341126C2F8
- MD5 SHA1 SHA512 TLSH
xinput1_3.dll
- IMPHASH 50f64a1d9783342119da2ac75a894235
- SHA256 8d540d484ea41e374fd0107d55d253f87ded4ce780d515d8fd59bbe8c98970a7
- MD5 77f595dee5ffacea72b135b1fce1312e
- SHA1 d2a710b332de3ef7a576e0aed27b0ae66892b7e9
- SHA512 a8683050d7758c248052c11ac6a46c9a0b3b3773902cca478c1961b6d9d2d57c75a8c925ba5af4499989c0f44b34eaf57abafafa26506c31e5e4769fb3439746
- SSDEEP 1536:TVeqvNS6T6jxeEsU6b0xZtDDVb9X8u9JA7zitdrz/R8cy/FaeBD:TVeqvNOeFgxZ9DVVtRBy/EeD
- TLSH T199835B107480D236D8E361F806FDB714763CD66513A559C32BC4BBEE9EA63C26E3069B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
f7:70:e2:42:9a:d8:ac:d3:80:f7:72:5c:76:ce:b2:e1:96:69:e6:f7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Apr 5, 2007
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:47:52:ba:00:00:00:00:00:04
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 16, 2006 - Sep 16, 2011
Subject
CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:49:7c:ed:00:00:00:00:00:05
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 16, 2006 - Sep 16, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 4, 2006 - Apr 26, 2012
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:46:9e:cb:00:04:00:00:00:65
Issuer
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 4, 2006 - Oct 4, 2007
Minor OS version
2
Major OS version
5
Entry point
32799
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
XInput1_3.pdb
ntdll
RtlUnwind
kernel32
LocalAlloc
SetEvent
GetLastError
CreateThread
CreateFileW
LoadLibraryW
FreeLibrary
GetProcAddress
DeviceIoControl
GetOverlappedResult
CreateEventW
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
ExitProcess
GetModuleHandleA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCurrentProcess
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
DuplicateHandle
VirtualFree
WriteFile
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
RaiseException
IsBadReadPtr
IsBadCodePtr
SetFilePointer
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
VirtualProtect
GetSystemInfo
FlushFileBuffers
LocalFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CloseHandle
FreeEnvironmentStringsW
HeapCreate
advapi32
TraceMessage
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
DllMain
XInputEnable
XInputGetBatteryInformation
XInputGetCapabilities
XInputGetDSoundAudioDeviceGuids
XInputGetKeystroke
XInputGetState
XInputSetState
Name
.text
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=105, id=1, productName=Unmarked objects,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=17, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=92, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=92, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=24, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
xinput1_3_x86.cat
- SHA256 784fc9d9f071130803e34792755ca68b5d0ca3f509f265b109a533ebe0e5314a
- MD5 d0c1f2fb476cdda4cce9deb7856500da
- SHA1 05365c782fca083f03c5714c5067ada547b44cac
- SHA512 cb7f47de766add6fa3c37f738bb562b352cb7ef89eb637417fddd8235d86c503d7037713b0b5af0c82a6bf4ec816cde28a90418dc7ecb1e731b64eee839b8ae4
- SSDEEP 192:Hu8+s9dsGEo6opz+Hz+ehjuOu39DKmHj70dpQ:b+sfhnhu1jRaeWb
- TLSH T1B922E7D28D2C8147BD0A7C5263A8ED93BC7CEBC30845DD26119BFAE809977D5A71881C
- MD5 SHA1 SHA512 SSDEEP TLSH
xinput1_3_x86.inf
- SHA256 ba212aa1514df6509474a46c7b2fa07c210d249b524bf7d47d058461009a75c1
- MD5 e16c94edc4b577b7abe7b06e31376884
- SHA1 e86cf530fe00c0fa2a107684a198b37e97b9ce76
- SHA512 5405f6936e05e1260a3778d86d76145d2853a345afa156ba6e0a7cf4bc9267cd4cbb5cd32878adda3c6130721218fb899fc896bf823cd63c32c7086b18cfe9db
- TLSH T1B601B86CE3A12A48F497B610345996C3A9AC10406759346F35EE8790EB72680C3F94FF
- MD5 SHA1 SHA512 TLSH
xinput1_3_x86_xp.inf
- SHA256 576ad2f8cc0f371d0e061f4a407153bd90e48841fce7a8f7ef1ff3fdd4138c99
- MD5 1b4a9360253bbbf4ff2dc1f8f3c0005c
- SHA1 bc639a35d965c579a7dda8d60748d7482f737f66
- SHA512 c0390cab5db06a5930ee563055c29ea10b6751049a77b33c9dd89f4016a3887d4d49670cf66d1f395edc00a3e127864129ec57cbb4af21b0d67ed6855950ede3
- TLSH T182F08B68E3A11908F09ABA20249ACAC379AC10002719301F39DE8BD0E77225083F94BF
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/Prerequisites/Aug2009_D3DCompiler_42_x64.cab
- SHA256 f4cee975c8e3e9053deafae6d9fb8424015ed3fadf04e64992f5898747e6e263
- MD5 50a7c5178700f007876544464be75a54
- SHA1 597e9f6dbc865b4f857c035d85bd555fa6d4b900
- SHA512 de4dc2bae14dd5177b8a0dc60d9f2faa1ea0680b6ae5d028f9f2b73f7e08272fb28c77774ed738c8fe952968a125b1889bca42765f981b6b9e9db216d4a75629
- SSDEEP 24576:MDpsM5o0SU8j80MOpdoS2d8th4R61+U/NW:msM5x9L0LpdoS2d4qRy+U/k
- TLSH T15B15332F1B9DE440FF8A9C9549C1B98A5F32E0EF453B15B8426C557E003E3AAA57F508
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
99a5c7cd64279e610319cc5a469640e3755e8209
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
AUG2009_D3DCompiler_42_x64.inf
- SHA256 8977772e5392b8e79364b3b8d97300e97ad891f38d5a2dd306549401e46b05ff
- MD5 bf489f4a6f1c8772091caf9d3f96628e
- SHA1 c0da8b93f1e17acd81e5664ff7f014cf470d12f8
- SHA512 2e21de522c0be4b797262528399d7ec8604fbf466e8de49cc12b9c2e2daa3a8f0977e952bd36135ed4887516d31ff8c782273325d2afad48f8b3202f35b4ffbd
- TLSH T176016B9DCC02D43276EAA9F27B87674B1767084AED1565187D9900D4EF63304117D6FC
- MD5 SHA1 SHA512 TLSH
D3DCompiler_42.dll
- IMPHASH 2ce53bb78c55b169c28c6f2a1c9aa930
- SHA256 4d61e843aa86d8801a60d01b8e872379c5b2503795a2bcbe6141978396ade00b
- MD5 e92d2e4afa43cd39a8c1c2c2db59667e
- SHA1 35011f5ffdd070ce9d19052d589af02df9e3e94e
- SHA512 1cd8966b58be205b99cca480ea3fdeea38214580fb464bd6e6397e3ba1854dba1f71a964dc4f1ef47ce668e71deb8c785c3b827aa2630f1827961b6c61514239
- SSDEEP 49152:cOk2W3AmsPwVLo+UzmUYzfdVZI5IP+lB4YtevCOWh:bWw1upCOWh
- TLSH T149C57D47F3A180E9C9ABC1B48A535317EB70780443249BD75250EA662FBBFE25A3F714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
26:5a:b4:fc:99:c5:bf:97:7f:0b:eb:25:da:37:39:f3:6e:ff:1b:29
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 17, 2009
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:27:81:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2008 - Jan 22, 2010
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
6
Entry point
2401812
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D3DCompiler_42.pdb
msvcrt
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_CxxThrowException
memset
memcpy
__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
isxdigit
atof
setlocale
_strdup
_mbstrlen
modf
isalnum
_isnan
_finite
strrchr
_clearfp
_controlfp
_strnicmp
_fpclass
_purecall
strncmp
isspace
strchr
strstr
getenv
_stricmp
memmove
qsort
isalpha
toupper
atoi
isdigit
tolower
free
malloc
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
_vsnprintf
__CxxFrameHandler
floor
fmod
memcmp
acos
asin
atan
atan2
ceil
cos
cosh
exp
log
pow
sin
sinh
sqrt
tan
tanh
floorf
gdi32
DeleteObject
kernel32
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
CloseHandle
UnmapViewOfFile
DeleteCriticalSection
UnhandledExceptionFilter
InitializeCriticalSection
FreeLibrary
GetSystemInfo
VirtualAlloc
VirtualFree
MultiByteToWideChar
WideCharToMultiByte
GetFullPathNameA
HeapCreate
OutputDebugStringA
GetProcAddress
LoadLibraryA
GetModuleHandleA
lstrcmpiA
GetProcessHeap
HeapFree
HeapAlloc
TlsFree
TlsGetValue
HeapDestroy
TlsSetValue
TlsAlloc
Sleep
VirtualProtect
DisableThreadLibraryCalls
SetUnhandledExceptionFilter
D3DAssemble
D3DCompile
D3DDisassemble
D3DDisassemble10Effect
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DPreprocess
D3DReflect
D3DReturnFailure1
D3DStripShader
DebugSetMute
Name
.text
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
27KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
968B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=165, id=1, productName=Unmarked objects,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=59, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=106, id=138, version=30729,
count=1, id=126, version=50727,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
D3DCompiler_42_x64.cat
- SHA256 9081ebfc6641f805699c547a00815f98a0fcadd12fc866428842497bee1d15ad
- MD5 c618267ccc0da275928f13d3f6c7e880
- SHA1 6c44b9b7cd9dbb28d3a43762b7ca4786927c641c
- SHA512 6ea525fb65d6e1affddde98be0d370eef8a39df615a7c907e036056093ed065383c64402ff20f627d5ce1d77e7e0b32e1af9401019a6e95599036fa1975969af
- SSDEEP 96:xxmmCnkkDPDaD9D743Ss/kPnE8UADPDaMm4D743IkDODskNXYxYRIaED74CDWrwq:xxZCkJQKPnEtTIXXYxjaIhjrK87b45
- TLSH T1CFE1E7E69D2C9183EE4A5D51A3E8EDE77C38D7C34411992B109BF7D409833D5B72982C
- MD5 SHA1 SHA512 SSDEEP TLSH
D3DCompiler_42_x64.inf
- SHA256 04762b02a94ac09cb0e437c3a362662f844d72dccdf87c6708af57908ef373b8
- MD5 9ef8421e06bef5924bd861a3f7c20831
- SHA1 1f621e33d9c87160217f09cf7429835d44e4218a
- SHA512 f5cd3f9d7245557985c0544781f19eecf1d8fdd06cacb7a527482c13ba15c3a61452df839867fee933f6c8f3996fd68bbcfd230f8ca73eaca60f81b27426d510
- TLSH T1E001FEBCA3646F14B0E739412B1046837A995285A689505AB8FD8546FB72608C2BF0FF
- MD5 SHA1 SHA512 TLSH
D3DCompiler_42_x64_xp.inf
- SHA256 40e272c73c1d68c1e577c66ec06760ccf7396e6a07f7fcf7e46390ae0503a5a5
- MD5 6b15faf544f563347ec19b1f85bb4d7b
- SHA1 4aaf8288b3ff7fb253f24cdcd370025294ef856f
- SHA512 4df11a78484ebe9f0bdb683d05b0f70a99d69836bb7ce76b32fb90cd29bf2682322900e3f056f8bfbeb31a15ed912b583da5f73f524dcc6616ffad95dad1661a
- TLSH T151F05CBDA3159E18B1AA3D402B0646837A9861416619A44DF8EC8989F7B2204C2BE4FE
- MD5 SHA1 SHA512 TLSH
infinst.exe
- IMPHASH b22a4f669312ee374cb26a4eb9e4098a
- SHA256 3a07c2436d3fd2473e15518a53262d4f0fb7f2a05589437cc5668f929063e782
- MD5 7d8f5afb77c3ada97a83f3fc253d6392
- SHA1 e5424d020c6de84ccf72253834c545024161f682
- SHA512 52f4bd961febfe6f691d7dd1e826f689319656393756e0c5c9e3d9729ad47e072071b204f63a3b37b67204fcdffd4539db08cbf190605dd9652ace51627e8845
- SSDEEP 1536:qkXfyLmGfmXJu7jiwgQ87Nl5LJw3xzFtmQVbSt5RuY:qkXfyLm/XJuUT7z5L8xzFIQVbSt5Z
- TLSH T145735B98B39450B9C46AC17DC9C29715E7B2F81A037643CF072886AA5F737E5693F322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Minor OS version
0
Major OS version
6
Entry point
21504
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
infinst.pdb
kernel32
LocalFree
FormatMessageA
GetWindowsDirectoryA
CreateDirectoryA
GetLastError
OutputDebugStringA
MoveFileExA
GetModuleFileNameA
FindFirstFileA
CopyFileA
GetCurrentDirectoryA
CompareStringA
FindClose
GetPrivateProfileStringA
CloseHandle
CreateFileA
lstrlenA
CreateFileW
VirtualQuery
GetSystemInfo
SetThreadStackGuarantee
VirtualAlloc
VirtualProtect
ReadFile
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetCommandLineA
GetVersionExW
GetStartupInfoW
GetLocalTime
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
EncodePointer
DecodePointer
FlsFree
SetLastError
FlsSetValue
FlsGetValue
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
Sleep
GetConsoleCP
GetConsoleMode
SetFilePointer
SetStdHandle
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
user32
CharNextA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
setupapi
SetupCloseInfFile
SetupCloseFileQueue
SetupOpenFileQueue
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupOpenInfFileA
SetupDiSetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupInstallFromInfSectionA
SetupDefaultQueueCallbackA
SetupCopyOEMInfA
Name
.text
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
668B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=125, productName=VS2005 build 50727, version=50727,
count=32, id=110, productName=VS2005 build 50727, version=50727,
count=9, id=123, productName=VS2005 build 50727, version=50727,
count=116, id=1, productName=Unmarked objects,
count=102, id=109, productName=VS2005 build 50727, version=50727,
count=2, id=113, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Super Meat Boy Jack O'Lantern/Prerequisites/Aug2009_D3DCompiler_42_x86.cab
- SHA256 9561e3326e14fb25cdb3770995b5a748cd1776a1ed87d953315a483a5198328e
- MD5 9ea4d9006e7f2834dd3c8e91fc6945b7
- SHA1 c0fa3e990f2c651d9c6912a62608b72ef5d8566c
- SHA512 abf73717d494b82179e04ffecf84457c9cd06edd22fb3a25633fc2a5784e9baf90d1a7a2b75f66f4372a04de5e94e3dd67812864192292406a9adda8f30bf364
- SSDEEP 24576:wWl8lkb28nNHiYNk9tb59zmj000KFiBudeBsbgoH:Ro8NHi7/pAJioES
- TLSH T1D01533B5D1C2B83AAC104D3CA270D2D3CD67F9AAA54AA741E156104F374FBE21C39EB5
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
80efd5a0613efa20d0063f1bd11a4859755e040f
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
AUG2009_D3DCompiler_42_x86.inf
- SHA256 bb8834d2366f6899c507bae176a13dadbd44488451a263eac830be95f4bad43f
- MD5 e7f9ca8ca804cc404f855be173f6ac61
- SHA1 5cbe6a3e7cd65a66bb6ed17930ccfacb8c756fcd
- SHA512 cca663b914f6f6d1b86db83e4f2976b103af041ca171257b9815a689788018434228182bac943fcdc7770d43180d53f887ec987e9639edc26ecabc7d20dbc4e1
- TLSH T1983114ED8916A43076E5B6B2BF8F274F57674406ED252108BBC908A4EB73701126D1FC
- MD5 SHA1 SHA512 TLSH
D3DCompiler_42.dll
- IMPHASH 5d1c43e7023ad760215252a187c333c2
- SHA256 6c976311406c23aa71018d274da0ecdef43b6e3a3b0b01e941a5e8e4e974386c
- MD5 b33b21db610116262d906305ce65c354
- SHA1 38eef8d8917351ee9bdff2cc4fbfaefaa16b8231
- SHA512 7049726ccbba90d06b3a56e1dbde8196935d4681b5548248cd3e6a8e38183c268152ba2b07eb90823bbe327c02ec946c59abe3562b59e29d9bcff8fe90e0adcc
- SSDEEP 24576:JvjFvnqUUI6tHi2E0HvSiMKR4lKNZtPUJplNNbvnnVb4T9zSAUtcLt/oW1XfY6RO:nvFD2E0H6iMFyFUJNNDnVbk9zRUtA/Nq
- TLSH T125958C11D70A807ACCCE11B96F5E772539689F61036097C77290BEE49D727E32E3A60B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
f7:ba:7a:fb:82:65:dc:af:11:4d:56:c7:01:a0:11:a3:9c:90:4c:a6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Aug 17, 2009
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:27:81:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2008 - Jan 22, 2010
Subject
CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:47:52:ba:00:00:00:00:00:04
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 16, 2006 - Sep 16, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Minor OS version
1
Major OS version
6
Entry point
1888507
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D3DCompiler_42.pdb
msvcrt
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
_initterm
_XcptFilter
_CxxThrowException
memset
memcpy
isxdigit
atof
setlocale
_strdup
_mbstrlen
modf
isalnum
_isnan
ceil
_finite
strrchr
_clearfp
_controlfp
_strnicmp
_fpclass
_purecall
strncmp
isspace
strstr
getenv
_stricmp
memmove
qsort
isalpha
toupper
atoi
isdigit
tolower
free
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z
strchr
_vsnprintf
__CxxFrameHandler
floor
_CIfmod
_CItanh
_CItan
_CIsinh
_CIsin
_CIlog
_CIpow
_CIexp
_CIsqrt
_CIcosh
_CIcos
_CIatan2
_CIatan
_CIasin
_CIacos
gdi32
DeleteObject
kernel32
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
UnmapViewOfFile
CloseHandle
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
VirtualFree
UnhandledExceptionFilter
WideCharToMultiByte
GetFullPathNameA
HeapCreate
OutputDebugStringA
LoadLibraryA
GetModuleHandleA
lstrcmpiA
TlsFree
TlsGetValue
HeapDestroy
TlsSetValue
InterlockedExchange
TlsAlloc
Sleep
InterlockedCompareExchange
GetVersion
GetSystemInfo
GetProcAddress
VirtualAlloc
GetProcessHeap
HeapFree
HeapAlloc
DisableThreadLibraryCalls
MultiByteToWideChar
SetUnhandledExceptionFilter
D3DAssemble
D3DCompile
D3DDisassemble
D3DDisassemble10Effect
D3DGetDebugInfo
D3DGetInputAndOutputSignatureBlob
D3DGetInputSignatureBlob
D3DGetOutputSignatureBlob
D3DPreprocess
D3DReflect
D3DReturnFailure1
D3DStripShader
DebugSetMute
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
21KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
968B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=166, id=1, productName=Unmarked objects,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=38, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=63, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=138, version=30729,
count=1, id=126, version=50727,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
D3DCompiler_42_x86.cat
- SHA256 c20a13c427b6521d12fd68d39f0befd39693e6fe88ddd745ab7a08ecab0a7fe6
- MD5 769d8fb040b4fd1754b30bb5ccdb58c3
- SHA1 73860903f56ae6beb70adb93e6c3c8dfdfc2cbfd
- SHA512 c414f2c6aaf9670c8bfa5c5fab02ade1288f25449a5c023e9788f3745b61afb1ee911e9c2126394ed401bd62bc6eb14bbc58dcab1ec0142fc4517b64986d8504
- SSDEEP 96:TUmNDWkkDPDaD9D743Ss/kPnE8UADPDaMm4D743IkDODskNXYxYRIaeD74ODvrRl:TXNDVJQKPnEtTIXXYxHz+ehjro5w
- TLSH T1C3E1D7D64D6C9147EE061D9163E8EDA7BC3CE7C34821892B109BFBD40A937D1A72982C
- MD5 SHA1 SHA512 SSDEEP TLSH
D3DCompiler_42_x86.inf
- SHA256 d59bcbbb6d30d9034abeb8d9af12740b6e1c365903faefb19a92235edef24923
- MD5 816d0236fdcf81540c36d1ab618abb11
- SHA1 febe0620b7197d5fd398289105681b05bac567b6
- SHA512 5c6ff704568a30a937da4158bd57f163750d89ca96180af4150adb0f5199f7e8404928fab3542a1af6f3218945530039ef15a21743fa44b592e71b65b4367293
- TLSH T16B01FDBDB3347E14B0927A402B1483833A985140A929605BBAEC8385FB7260083BE4FF
- MD5 SHA1 SHA512 TLSH
D3DCompiler_42_x86_xp.inf
- SHA256 66d25a47feecc669d25d1f49689a44f85a5484f860abe17f1aaeb7ece22b4e6d
- MD5 6c1c299fa15d2c42bfc2d2c17379a89b
- SHA1 72ea01ea55ea2d11eecf9be8fee28c78a4aa132b
- SHA512 a5b46847fa8fe6dbb6a4bcab16b08fb181a545b452b79d0bdf57980a762cae7a767248b48dbae380fd44ef1d9c7c09449c25174b33be838939660f37fa2079ed
- TLSH T12AF0467DB365AD24B0A53E002B5687833A9860016629B05FB8DC8789F76260183BE4FF
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/Prerequisites/Aug2009_d3dx9_42_x64.cab
- SHA256 20ab4e5f194ab55973aace710e085487047e9b4296672bd4198908d25bdef493
- MD5 a5edaa1d7f320a069b6c76c2075a5899
- SHA1 1f600655f1c9daf988bf485afb715e5d3c67bffb
- SHA512 ac5c39cb3d2aefc6919666ed38bc04813249f1ee0c5d73d3833f904ad5e1d903179b77fdde13e2d6c1b272fda3be20aee6c0ee5b52c3d90e30ecb020f4d3b265
- SSDEEP 24576:d3pwYa9fbSzpdh2Yp+iZ1YAqhfeO9yx2Ejb7yzfso:d5wYabSzLhZYw1YAQfvIMA+5
- TLSH T1401533F1C54F5881891D6948A0C56BE664EB930590718F0EA2F677E90BC0FBC7E16EDC
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
7fc3762e140d30cab689c23553ba1fcb56f80585
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
AUG2009_d3dx9_42_x64.inf
- SHA256 4887cbec8545b02152eb16f6296987a43a256b69b408330eaee362184f298d98
- MD5 ecbefd1db4cb52d5089b1d4b20a08656
- SHA1 85134f773bccff3e874d27d7e79dcd1e9485c903
- SHA512 a50afd834f0d892af5eb33b9c6ffbb330ddebcebd123fc7f706f05efac9491b49dfdcfe6196f3b6a3c9f7ffedf4fa723e0499f03417552404c0fb4f4fa3c046c
- TLSH T11F016B99CC02E43676EAE9B27B8B274A2767050AFA127158799A01C4AF63250116C6EC
- MD5 SHA1 SHA512 TLSH
d3dx9_42.dll
- IMPHASH e79722d5c95f67dfd652b6c1d4e76dc8
- SHA256 1d6f5aa25ac2f1e55d3fd89cd5b33edd4de3709bf0353c75ab8645cebc087fa5
- MD5 1af7ae1fde027a30b9097280819a0a86
- SHA1 79e158e4b9b04bc5b69537343f244fc2d12db1af
- SHA512 92cf7ae0dfe1437227f8be37f50d84a6b18876485cb953c6a972a2f0c9f10d940941f34e8c8188559523b69bf2f6ad463526f87de52f8f142337031e753f6f0d
- SSDEEP 24576:tGvy5sSUvEa7i5Y1rfEucPAm+hYSIh9lCm88ShZtZJB69sncQolAD1CNGQ4cBx0n:ZzRe6bwBoQUGQd6p
- TLSH T1CAB51622F2F1C1E8E3269438B197B217EB71380907184BD797E04E95AFE27D469FA315
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d7:b3:e2:fc:e1:d1:e3:d7:f6:fb:b9:bd:31:3b:9d:96:45:4f:a5:2f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 27, 2009
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:27:81:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2008 - Jan 22, 2010
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
6
Entry point
2256464
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
d3dx9_42.pdb
msvcrt
malloc
_vsnprintf
_finite
memmove
_purecall
qsort
_stricmp
modff
iswpunct
_clearfp
iswdigit
iswalpha
iswspace
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
_strdup
setlocale
free
calloc
realloc
sscanf
_strtime
_isatty
_write
_lseeki64
_fileno
__pioinfo
__badioinfo
wctomb
_itoa
_snprintf
_iob
isleadbyte
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
memset
memcpy
__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
srand
strtod
fread
fwrite
fflush
abort
_tempnam
_ultoa
isalpha
atol
atof
isxdigit
wcstombs
_isnan
rand
atoi
isalnum
_vsnwprintf
isdigit
isspace
longjmp
ldexp
frexp
__CxxFrameHandler
_errno
_strdate
sqrt
powf
sqrtf
floor
fmodf
memcmp
log
cos
exp
sinf
cosf
floorf
ceilf
atan2
atan
acos
asin
sin
pow
atan2f
logf
acosf
fmod
asinf
_setjmp
ceil
gdi32
GetObjectW
GetGlyphOutlineW
GetCurrentObject
GetOutlineTextMetricsA
TranslateCharsetInfo
ExtTextOutA
MoveToEx
ExtTextOutW
CreateDIBSection
GetGlyphOutlineA
GetObjectA
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsA
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject
kernel32
FindResourceW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetProcessHeap
HeapFree
HeapAlloc
ReleaseMutex
WaitForSingleObject
CreateMutexA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
ExpandEnvironmentStringsA
GlobalMemoryStatus
GetSystemInfo
SetEndOfFile
MoveFileW
GetTempFileNameW
MoveFileA
CompareStringA
SetFilePointer
DeleteFileW
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalFree
FormatMessageA
GetFullPathNameW
CreateFileW
GetFileSizeEx
GetLastError
IsDBCSLeadByte
WriteFile
DeleteFileA
CloseHandle
ReadFile
CreateFileA
GetTempFileNameA
GetTempPathA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetACP
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
Sleep
VirtualProtect
DisableThreadLibraryCalls
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
D3DXAssembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShaderFromFileW
D3DXAssembleShaderFromResourceA
D3DXAssembleShaderFromResourceW
D3DXBoxBoundProbe
D3DXCheckCubeTextureRequirements
D3DXCheckTextureRequirements
D3DXCheckVersion
D3DXCheckVolumeTextureRequirements
D3DXCleanMesh
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXCompileShaderFromFileW
D3DXCompileShaderFromResourceA
D3DXCompileShaderFromResourceW
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXComputeIMTFromPerTexelSignal
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeNormalMap
D3DXComputeNormals
D3DXComputeTangent
D3DXComputeTangentFrame
D3DXComputeTangentFrameEx
D3DXConcatenateMeshes
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXCreateAnimationController
D3DXCreateBox
D3DXCreateBuffer
D3DXCreateCompressedAnimationSet
D3DXCreateCubeTexture
D3DXCreateCubeTextureFromFileA
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileW
D3DXCreateCubeTextureFromResourceA
D3DXCreateCubeTextureFromResourceExA
D3DXCreateCubeTextureFromResourceExW
D3DXCreateCubeTextureFromResourceW
D3DXCreateCylinder
D3DXCreateEffect
D3DXCreateEffectCompiler
D3DXCreateEffectCompilerFromFileA
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompilerFromResourceA
D3DXCreateEffectCompilerFromResourceW
D3DXCreateEffectEx
D3DXCreateEffectFromFileA
D3DXCreateEffectFromFileExA
D3DXCreateEffectFromFileExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceA
D3DXCreateEffectFromResourceExA
D3DXCreateEffectFromResourceExW
D3DXCreateEffectFromResourceW
D3DXCreateEffectPool
D3DXCreateFontA
D3DXCreateFontIndirectA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXCreateKeyframedAnimationSet
D3DXCreateLine
D3DXCreateMatrixStack
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXCreateNPatchMesh
D3DXCreatePMeshFromStream
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXCreatePRTCompBuffer
D3DXCreatePRTEngine
D3DXCreatePatchMesh
D3DXCreatePolygon
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateSPMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSphere
D3DXCreateSprite
D3DXCreateTeapot
D3DXCreateTextA
D3DXCreateTextW
D3DXCreateTexture
D3DXCreateTextureFromFileA
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXCreateTextureFromResourceA
D3DXCreateTextureFromResourceExA
D3DXCreateTextureFromResourceExW
D3DXCreateTextureFromResourceW
D3DXCreateTextureGutterHelper
D3DXCreateTextureShader
D3DXCreateTorus
D3DXCreateVolumeTexture
D3DXCreateVolumeTextureFromFileA
D3DXCreateVolumeTextureFromFileExA
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileW
D3DXCreateVolumeTextureFromResourceA
D3DXCreateVolumeTextureFromResourceExA
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateVolumeTextureFromResourceW
D3DXDebugMute
D3DXDeclaratorFromFVF
D3DXDisassembleEffect
D3DXDisassembleShader
D3DXFVFFromDeclarator
D3DXFileCreate
D3DXFillCubeTexture
D3DXFillCubeTextureTX
D3DXFillTexture
D3DXFillTextureTX
D3DXFillVolumeTexture
D3DXFillVolumeTextureTX
D3DXFilterTexture
D3DXFindShaderComment
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFrameAppendChild
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXFrameFind
D3DXFrameNumNamedMatrices
D3DXFrameRegisterNamedMatrices
D3DXFresnelTerm
D3DXGenerateOutputDecl
D3DXGeneratePMesh
D3DXGetDeclLength
D3DXGetDeclVertexSize
D3DXGetDriverLevel
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileA
D3DXGetImageInfoFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromResourceA
D3DXGetImageInfoFromResourceW
D3DXGetPixelShaderProfile
D3DXGetShaderConstantTable
D3DXGetShaderConstantTableEx
D3DXGetShaderInputSemantics
D3DXGetShaderOutputSemantics
D3DXGetShaderSamplers
D3DXGetShaderSize
D3DXGetShaderVersion
D3DXGetVertexShaderProfile
D3DXIntersect
D3DXIntersectSubset
D3DXIntersectTri
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXResource
D3DXLoadMeshFromXW
D3DXLoadMeshFromXof
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXLoadMeshHierarchyFromXW
D3DXLoadPRTBufferFromFileA
D3DXLoadPRTBufferFromFileW
D3DXLoadPRTCompBufferFromFileA
D3DXLoadPRTCompBufferFromFileW
D3DXLoadPatchMeshFromXof
D3DXLoadSkinMeshFromXof
D3DXLoadSurfaceFromFileA
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromMemory
D3DXLoadSurfaceFromResourceA
D3DXLoadSurfaceFromResourceW
D3DXLoadSurfaceFromSurface
D3DXLoadVolumeFromFileA
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromMemory
D3DXLoadVolumeFromResourceA
D3DXLoadVolumeFromResourceW
D3DXLoadVolumeFromVolume
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXPreprocessShader
D3DXPreprocessShaderFromFileA
D3DXPreprocessShaderFromFileW
D3DXPreprocessShaderFromResourceA
D3DXPreprocessShaderFromResourceW
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXRectPatchSize
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHMultiply2
D3DXSHMultiply3
D3DXSHMultiply4
D3DXSHMultiply5
D3DXSHMultiply6
D3DXSHPRTCompSplitMeshSC
D3DXSHPRTCompSuperCluster
D3DXSHProjectCubeMap
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSaveMeshHierarchyToFileA
D3DXSaveMeshHierarchyToFileW
D3DXSaveMeshToXA
D3DXSaveMeshToXW
D3DXSavePRTBufferToFileA
D3DXSavePRTBufferToFileW
D3DXSavePRTCompBufferToFileA
D3DXSavePRTCompBufferToFileW
D3DXSaveSurfaceToFileA
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileW
D3DXSaveTextureToFileA
D3DXSaveTextureToFileInMemory
D3DXSaveTextureToFileW
D3DXSaveVolumeToFileA
D3DXSaveVolumeToFileInMemory
D3DXSaveVolumeToFileW
D3DXSimplifyMesh
D3DXSphereBoundProbe
D3DXSplitMesh
D3DXTessellateNPatches
D3DXTessellateRectPatch
D3DXTessellateTriPatch
D3DXTriPatchSize
D3DXUVAtlasCreate
D3DXUVAtlasPack
D3DXUVAtlasPartition
D3DXValidMesh
D3DXValidPatchMesh
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray
D3DXWeldVertices
Name
.text
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
57KB
Virtual Size
148KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=231, id=1, productName=Unmarked objects,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=59, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=222, id=138, version=30729,
count=1, id=126, version=50727,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
d3dx9_42_x64.cat
- SHA256 ab18e05cdedda98240b37415e1c5899ab77a76f117832b92ba5c5baa972c439f
- MD5 41976cbf09e9b498421e9815ac2c88fa
- SHA1 ac4d2a286cff65aa77d4b20da8a8a4a2264705c2
- SHA512 1c72af16250c4bbfc88b15692f1e9e7a31f6d53bee4e7ff1c1c56803180e0aee4394f6c125b1050193ebb8cff847bd76d765201da5251121a001ab56a330d82c
- SSDEEP 96:6Y4OxmekkDPDaD9D743Ss/kPnE8UADPDaMm4D743IkDODskNXYxYRIaeD74ODvrp:6/NJQKPnEtTIXXYxHz+ehjr/XH7eq
- TLSH T1D9E1E7D28D6C9147EE166D5163ECE9A77C3CD7C34811D82B019BFBE409877D1A71A82C
- MD5 SHA1 SHA512 SSDEEP TLSH
d3dx9_42_x64.inf
- SHA256 40862ca38cadb273b767341f3bb0121b8639c5512db40b6f1dba658023c68de0
- MD5 ee80b4dd98d7d121f1700f82d4862963
- SHA1 3e51bfef57d5c1898c9c7fe99d2a19f61a946019
- SHA512 f0ac11cd5aaec7b9af44f27f0c098256adc7e62ccd3724e0a3cd8e96bcace2751f2c8ccb0912d4401e959624b70c54215ebc5636cb7f31c432d68673f384eef2
- TLSH T1EA01231CE762BFC870D339012411468379591144B746B086B4EEC545FBB2704C3BD0FB
- MD5 SHA1 SHA512 TLSH
d3dx9_42_x64_xp.inf
- SHA256 ff249f67c081bbf5513df3adbc830ac4fd024b6144e0f9d4e80138194105f5d9
- MD5 5ce12ea5edeb286eeb1e205148811a3b
- SHA1 4ca075502a9ac7921fe82446c5d4db5583d55c33
- SHA512 9347c04c8efd3e5efc0dd57b124f443d1a8475270b44e4462a3b4430f597c5506e5f3ae25cda0ffe2664051269d96605e65f40ef4ef44dcdf587a9d3b45be6ad
- TLSH T16EF0555DE712FA08B1A63E0025424A82796921416315B08EB8EE8A85F7B2204C2B94FA
- MD5 SHA1 SHA512 TLSH
infinst.exe
- IMPHASH b22a4f669312ee374cb26a4eb9e4098a
- SHA256 3a07c2436d3fd2473e15518a53262d4f0fb7f2a05589437cc5668f929063e782
- MD5 7d8f5afb77c3ada97a83f3fc253d6392
- SHA1 e5424d020c6de84ccf72253834c545024161f682
- SHA512 52f4bd961febfe6f691d7dd1e826f689319656393756e0c5c9e3d9729ad47e072071b204f63a3b37b67204fcdffd4539db08cbf190605dd9652ace51627e8845
- SSDEEP 1536:qkXfyLmGfmXJu7jiwgQ87Nl5LJw3xzFtmQVbSt5RuY:qkXfyLm/XJuUT7z5L8xzFIQVbSt5Z
- TLSH T145735B98B39450B9C46AC17DC9C29715E7B2F81A037643CF072886AA5F737E5693F322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Minor OS version
0
Major OS version
6
Entry point
21504
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
infinst.pdb
kernel32
LocalFree
FormatMessageA
GetWindowsDirectoryA
CreateDirectoryA
GetLastError
OutputDebugStringA
MoveFileExA
GetModuleFileNameA
FindFirstFileA
CopyFileA
GetCurrentDirectoryA
CompareStringA
FindClose
GetPrivateProfileStringA
CloseHandle
CreateFileA
lstrlenA
CreateFileW
VirtualQuery
GetSystemInfo
SetThreadStackGuarantee
VirtualAlloc
VirtualProtect
ReadFile
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetCommandLineA
GetVersionExW
GetStartupInfoW
GetLocalTime
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
EncodePointer
DecodePointer
FlsFree
SetLastError
FlsSetValue
FlsGetValue
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
Sleep
GetConsoleCP
GetConsoleMode
SetFilePointer
SetStdHandle
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
user32
CharNextA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
setupapi
SetupCloseInfFile
SetupCloseFileQueue
SetupOpenFileQueue
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupOpenInfFileA
SetupDiSetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupInstallFromInfSectionA
SetupDefaultQueueCallbackA
SetupCopyOEMInfA
Name
.text
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
668B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=125, productName=VS2005 build 50727, version=50727,
count=32, id=110, productName=VS2005 build 50727, version=50727,
count=9, id=123, productName=VS2005 build 50727, version=50727,
count=116, id=1, productName=Unmarked objects,
count=102, id=109, productName=VS2005 build 50727, version=50727,
count=2, id=113, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Super Meat Boy Jack O'Lantern/Prerequisites/Aug2009_d3dx9_42_x86.cab
- SHA256 336a003bed0cb1239594d05c6497cf9e9657ff26b4183cfa63b7df56b12ce449
- MD5 984cb91937310c9b74ce5d8b062dcb01
- SHA1 78ded85f95d5b5cb5cb44a4195576fe4cc4bff0a
- SHA512 cc602ba9550be44c4dd9a9fa07ea917f9666dbd18dda15b9e4301f7217a4324e986e42964ec725ed32694e386f133eca379104c6fefbbff220ba2f86bd6a5958
- SSDEEP 12288:cDTg2rIyRKFAtmsFp1UChyax+LFl9NiHEpMH5Vfe8PIqEqnyA6F56kB:g02fKYVFvhKLFl9NikiH5V28PXyA6GkB
- TLSH T106F42363D1ADFE1653BBEA6871499F3D6FFD4F0B18E9D3D9951848D0089068C728EC48
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
676e5882b5c0d336642e5eb15410f74c534a1c8e
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
AUG2009_d3dx9_42_x86.inf
- SHA256 5989dc367a8f84815bcfa1c46ff756527c6250c62973220d1af354b70027eaf2
- MD5 dff48361a5cb0dea034dc6f16de99477
- SHA1 afa417acf7e9da37923255a623ef34c7f6446c80
- SHA512 750b69eee07e7d6e7fbdba722e2e1ce377729dca5fe52b4d57d23dd2b80b28b3af8403aa43c469a5042ad35eb09ba4dbefc40a014a137e1b5d87e0f2de203856
- TLSH T1253146DD8C02F4307AA4B6B27B9F374F2727450BEA61310977C90990ABB3351115D2F8
- MD5 SHA1 SHA512 TLSH
d3dx9_42.dll
- IMPHASH 12b2200cb5e3bf090d11cb95972d3afc
- SHA256 f8b9cfab7fffbc8f98e41aa439d72921dc180634a1febca2a9d41a0df35d3472
- MD5 c6a44fc3cf2f5801561804272217b14d
- SHA1 a173e7007e0f522d47eb97068df0ca43563b22bc
- SHA512 2371844bc86cdce2d1933625b921b982c4d1b84a39698b51180b09a2d45732407d721fa01d294ca92a88777607a1bb00283f6bcdd4231137a388216d0b09dd5a
- SSDEEP 49152:E8kmV+RIMtAO1r5EHT7SPy/OsXEKWtElmrAtmguohFR:E8k8+RIMtAO1r5EHT7SPy/XXtlmrAAgd
- TLSH T198958D91D66B0174E8E29070510D72F0609C8632976127CFAA681FD9AFB87E1DFF42E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
c2:59:7d:ad:3c:49:b0:89:c0:ae:6d:82:0d:6a:6b:3e:88:16:d8:b3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 27, 2009
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:27:81:00:00:00:00:00:08
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2008 - Jan 22, 2010
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
6
Entry point
1728150
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d3dx9_42.pdb
msvcrt
_isatty
_write
_lseeki64
_fileno
__pioinfo
__badioinfo
wctomb
_itoa
_snprintf
isleadbyte
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
_amsg_exit
_initterm
_XcptFilter
srand
strtod
fread
fflush
fwrite
abort
_tempnam
exit
isalpha
atof
atol
isxdigit
_ultoa
wcstombs
_CIexp
_isnan
rand
atoi
isalnum
floor
_strtime
_strdate
sscanf
isspace
isdigit
_setjmp3
longjmp
ldexp
frexp
calloc
realloc
_CIlog
setlocale
_strdup
free
_clearfp
ceil
_controlfp
malloc
_CIatan
_CIcos
_CIasin
_finite
_CIsin
_CIatan2
_CIacos
memmove
qsort
_CIfmod
_purecall
_stricmp
modf
iswspace
iswalpha
iswdigit
iswpunct
_CIsqrt
memcpy
memset
_CIpow
??2@YAPAXI@Z
??3@YAXPAX@Z
_iob
_vsnprintf
_vsnwprintf
_errno
__CxxFrameHandler
gdi32
GetTextMetricsA
GetObjectA
GetGlyphOutlineA
CreateDIBSection
DeleteDC
DeleteObject
SelectObject
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
SetTextAlign
SetMapMode
CreateCompatibleDC
ExtTextOutA
MoveToEx
ExtTextOutW
TranslateCharsetInfo
GetCurrentObject
GetOutlineTextMetricsA
GetGlyphOutlineW
GetObjectW
kernel32
SetFilePointer
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FindResourceA
LoadResource
LockResource
SizeofResource
FreeResource
CompareStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FormatMessageA
LocalFree
CreateFileW
GetFileSizeEx
GetFullPathNameW
GetLastError
IsDBCSLeadByte
WriteFile
GetTempPathA
GetTempFileNameA
DeleteFileW
ReadFile
CloseHandle
DeleteFileA
InterlockedDecrement
InterlockedIncrement
IsProcessorFeaturePresent
VirtualFree
GetACP
WideCharToMultiByte
MultiByteToWideChar
OutputDebugStringA
GetModuleHandleA
FreeLibrary
LoadLibraryA
GetVersionExA
GetVersion
GetSystemInfo
GetProcAddress
VirtualAlloc
GetProcessHeap
HeapFree
HeapAlloc
DisableThreadLibraryCalls
MoveFileA
MoveFileW
GetTempFileNameW
GlobalMemoryStatus
SetEndOfFile
ExpandEnvironmentStringsA
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
WaitForSingleObject
ReleaseMutex
CreateMutexA
Sleep
InterlockedExchange
InterlockedCompareExchange
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateFileA
FindResourceW
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
D3DXAssembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShaderFromFileW
D3DXAssembleShaderFromResourceA
D3DXAssembleShaderFromResourceW
D3DXBoxBoundProbe
D3DXCheckCubeTextureRequirements
D3DXCheckTextureRequirements
D3DXCheckVersion
D3DXCheckVolumeTextureRequirements
D3DXCleanMesh
D3DXColorAdjustContrast
D3DXColorAdjustSaturation
D3DXCompileShader
D3DXCompileShaderFromFileA
D3DXCompileShaderFromFileW
D3DXCompileShaderFromResourceA
D3DXCompileShaderFromResourceW
D3DXComputeBoundingBox
D3DXComputeBoundingSphere
D3DXComputeIMTFromPerTexelSignal
D3DXComputeIMTFromPerVertexSignal
D3DXComputeIMTFromSignal
D3DXComputeIMTFromTexture
D3DXComputeNormalMap
D3DXComputeNormals
D3DXComputeTangent
D3DXComputeTangentFrame
D3DXComputeTangentFrameEx
D3DXConcatenateMeshes
D3DXConvertMeshSubsetToSingleStrip
D3DXConvertMeshSubsetToStrips
D3DXCreateAnimationController
D3DXCreateBox
D3DXCreateBuffer
D3DXCreateCompressedAnimationSet
D3DXCreateCubeTexture
D3DXCreateCubeTextureFromFileA
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileW
D3DXCreateCubeTextureFromResourceA
D3DXCreateCubeTextureFromResourceExA
D3DXCreateCubeTextureFromResourceExW
D3DXCreateCubeTextureFromResourceW
D3DXCreateCylinder
D3DXCreateEffect
D3DXCreateEffectCompiler
D3DXCreateEffectCompilerFromFileA
D3DXCreateEffectCompilerFromFileW
D3DXCreateEffectCompilerFromResourceA
D3DXCreateEffectCompilerFromResourceW
D3DXCreateEffectEx
D3DXCreateEffectFromFileA
D3DXCreateEffectFromFileExA
D3DXCreateEffectFromFileExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceA
D3DXCreateEffectFromResourceExA
D3DXCreateEffectFromResourceExW
D3DXCreateEffectFromResourceW
D3DXCreateEffectPool
D3DXCreateFontA
D3DXCreateFontIndirectA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXCreateKeyframedAnimationSet
D3DXCreateLine
D3DXCreateMatrixStack
D3DXCreateMesh
D3DXCreateMeshFVF
D3DXCreateNPatchMesh
D3DXCreatePMeshFromStream
D3DXCreatePRTBuffer
D3DXCreatePRTBufferTex
D3DXCreatePRTCompBuffer
D3DXCreatePRTEngine
D3DXCreatePatchMesh
D3DXCreatePolygon
D3DXCreateRenderToEnvMap
D3DXCreateRenderToSurface
D3DXCreateSPMesh
D3DXCreateSkinInfo
D3DXCreateSkinInfoFVF
D3DXCreateSkinInfoFromBlendedMesh
D3DXCreateSphere
D3DXCreateSprite
D3DXCreateTeapot
D3DXCreateTextA
D3DXCreateTextW
D3DXCreateTexture
D3DXCreateTextureFromFileA
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXCreateTextureFromResourceA
D3DXCreateTextureFromResourceExA
D3DXCreateTextureFromResourceExW
D3DXCreateTextureFromResourceW
D3DXCreateTextureGutterHelper
D3DXCreateTextureShader
D3DXCreateTorus
D3DXCreateVolumeTexture
D3DXCreateVolumeTextureFromFileA
D3DXCreateVolumeTextureFromFileExA
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXCreateVolumeTextureFromFileW
D3DXCreateVolumeTextureFromResourceA
D3DXCreateVolumeTextureFromResourceExA
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateVolumeTextureFromResourceW
D3DXDebugMute
D3DXDeclaratorFromFVF
D3DXDisassembleEffect
D3DXDisassembleShader
D3DXFVFFromDeclarator
D3DXFileCreate
D3DXFillCubeTexture
D3DXFillCubeTextureTX
D3DXFillTexture
D3DXFillTextureTX
D3DXFillVolumeTexture
D3DXFillVolumeTextureTX
D3DXFilterTexture
D3DXFindShaderComment
D3DXFloat16To32Array
D3DXFloat32To16Array
D3DXFrameAppendChild
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXFrameFind
D3DXFrameNumNamedMatrices
D3DXFrameRegisterNamedMatrices
D3DXFresnelTerm
D3DXGenerateOutputDecl
D3DXGeneratePMesh
D3DXGetDeclLength
D3DXGetDeclVertexSize
D3DXGetDriverLevel
D3DXGetFVFVertexSize
D3DXGetImageInfoFromFileA
D3DXGetImageInfoFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXGetImageInfoFromResourceA
D3DXGetImageInfoFromResourceW
D3DXGetPixelShaderProfile
D3DXGetShaderConstantTable
D3DXGetShaderConstantTableEx
D3DXGetShaderInputSemantics
D3DXGetShaderOutputSemantics
D3DXGetShaderSamplers
D3DXGetShaderSize
D3DXGetShaderVersion
D3DXGetVertexShaderProfile
D3DXIntersect
D3DXIntersectSubset
D3DXIntersectTri
D3DXLoadMeshFromXA
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXResource
D3DXLoadMeshFromXW
D3DXLoadMeshFromXof
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXLoadMeshHierarchyFromXW
D3DXLoadPRTBufferFromFileA
D3DXLoadPRTBufferFromFileW
D3DXLoadPRTCompBufferFromFileA
D3DXLoadPRTCompBufferFromFileW
D3DXLoadPatchMeshFromXof
D3DXLoadSkinMeshFromXof
D3DXLoadSurfaceFromFileA
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromMemory
D3DXLoadSurfaceFromResourceA
D3DXLoadSurfaceFromResourceW
D3DXLoadSurfaceFromSurface
D3DXLoadVolumeFromFileA
D3DXLoadVolumeFromFileInMemory
D3DXLoadVolumeFromFileW
D3DXLoadVolumeFromMemory
D3DXLoadVolumeFromResourceA
D3DXLoadVolumeFromResourceW
D3DXLoadVolumeFromVolume
D3DXMatrixAffineTransformation
D3DXMatrixAffineTransformation2D
D3DXMatrixDecompose
D3DXMatrixDeterminant
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXMatrixLookAtRH
D3DXMatrixMultiply
D3DXMatrixMultiplyTranspose
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixOrthoOffCenterRH
D3DXMatrixOrthoRH
D3DXMatrixPerspectiveFovLH
D3DXMatrixPerspectiveFovRH
D3DXMatrixPerspectiveLH
D3DXMatrixPerspectiveOffCenterLH
D3DXMatrixPerspectiveOffCenterRH
D3DXMatrixPerspectiveRH
D3DXMatrixReflect
D3DXMatrixRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixRotationYawPitchRoll
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixShadow
D3DXMatrixTransformation
D3DXMatrixTransformation2D
D3DXMatrixTranslation
D3DXMatrixTranspose
D3DXOptimizeFaces
D3DXOptimizeVertices
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXPlaneTransform
D3DXPlaneTransformArray
D3DXPreprocessShader
D3DXPreprocessShaderFromFileA
D3DXPreprocessShaderFromFileW
D3DXPreprocessShaderFromResourceA
D3DXPreprocessShaderFromResourceW
D3DXQuaternionBaryCentric
D3DXQuaternionExp
D3DXQuaternionInverse
D3DXQuaternionLn
D3DXQuaternionMultiply
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXQuaternionRotationMatrix
D3DXQuaternionRotationYawPitchRoll
D3DXQuaternionSlerp
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionToAxisAngle
D3DXRectPatchSize
D3DXSHAdd
D3DXSHDot
D3DXSHEvalConeLight
D3DXSHEvalDirection
D3DXSHEvalDirectionalLight
D3DXSHEvalHemisphereLight
D3DXSHEvalSphericalLight
D3DXSHMultiply2
D3DXSHMultiply3
D3DXSHMultiply4
D3DXSHMultiply5
D3DXSHMultiply6
D3DXSHPRTCompSplitMeshSC
D3DXSHPRTCompSuperCluster
D3DXSHProjectCubeMap
D3DXSHRotate
D3DXSHRotateZ
D3DXSHScale
D3DXSaveMeshHierarchyToFileA
D3DXSaveMeshHierarchyToFileW
D3DXSaveMeshToXA
D3DXSaveMeshToXW
D3DXSavePRTBufferToFileA
D3DXSavePRTBufferToFileW
D3DXSavePRTCompBufferToFileA
D3DXSavePRTCompBufferToFileW
D3DXSaveSurfaceToFileA
D3DXSaveSurfaceToFileInMemory
D3DXSaveSurfaceToFileW
D3DXSaveTextureToFileA
D3DXSaveTextureToFileInMemory
D3DXSaveTextureToFileW
D3DXSaveVolumeToFileA
D3DXSaveVolumeToFileInMemory
D3DXSaveVolumeToFileW
D3DXSimplifyMesh
D3DXSphereBoundProbe
D3DXSplitMesh
D3DXTessellateNPatches
D3DXTessellateRectPatch
D3DXTessellateTriPatch
D3DXTriPatchSize
D3DXUVAtlasCreate
D3DXUVAtlasPack
D3DXUVAtlasPartition
D3DXValidMesh
D3DXValidPatchMesh
D3DXVec2BaryCentric
D3DXVec2CatmullRom
D3DXVec2Hermite
D3DXVec2Normalize
D3DXVec2Transform
D3DXVec2TransformArray
D3DXVec2TransformCoord
D3DXVec2TransformCoordArray
D3DXVec2TransformNormal
D3DXVec2TransformNormalArray
D3DXVec3BaryCentric
D3DXVec3CatmullRom
D3DXVec3Hermite
D3DXVec3Normalize
D3DXVec3Project
D3DXVec3ProjectArray
D3DXVec3Transform
D3DXVec3TransformArray
D3DXVec3TransformCoord
D3DXVec3TransformCoordArray
D3DXVec3TransformNormal
D3DXVec3TransformNormalArray
D3DXVec3Unproject
D3DXVec3UnprojectArray
D3DXVec4BaryCentric
D3DXVec4CatmullRom
D3DXVec4Cross
D3DXVec4Hermite
D3DXVec4Normalize
D3DXVec4Transform
D3DXVec4TransformArray
D3DXWeldVertices
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
62KB
Virtual Size
148KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=224, id=1, productName=Unmarked objects,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=15, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=80, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=244, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=126, version=50727,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
d3dx9_42_x86.cat
- SHA256 f82a72e678fc3e94653aad4175dd2c098a37c16e7a8b6a3f0c707776af0ab960
- MD5 8afcf4cf6659958e0cb3936819ff0dbd
- SHA1 430daef97383264937af3db50834546035d73881
- SHA512 6d3cdf58e4e761214b9cc03b7d2c301654d1a1bfdd524ff28bedc5ca772682b554b189fe8f50c0a19a738579a7b6b235951723d9a6c08bce2f650252dff0b533
- SSDEEP 192:CxwiwEQKPnEtTIXXYxehjXHUz1Tr2mavkdG:9ELz4qjXHU5aMw
- TLSH T162E1E8D64D5C9547EE0A6D94A3E8FDEBBC38D7C34811892A10ABFBD409837D1A71982C
- MD5 SHA1 SHA512 SSDEEP TLSH
d3dx9_42_x86.inf
- SHA256 5a4b5bd43e41419cca22b94bc04bcac155f9425f593d9e60d94debde7ea86f15
- MD5 9701420c0d7bca36b230bd54a42d65f2
- SHA1 4026b0fd59fa4ee8750e969aa826630aca4842ba
- SHA512 a46ddc164fb9571d9d138304ad5384321797cf7fa25c1d15626a3e857d346a0e8534cad2d91911eb638ba3ce7cb02442ef7174499e0f051c9ccd4eb97b16509b
- TLSH T11801D06CFB717A44B0C27A01352587C33D5C2140A75A709B76EE8781BB72A0583AD4FF
- MD5 SHA1 SHA512 TLSH
d3dx9_42_x86_xp.inf
- SHA256 41bb2dba19c3f068553d9658ff56974ddee2618de6b831a0b0c4acddffdd2c12
- MD5 33967e32dd0472de4429eac8135a9931
- SHA1 6dd6932b1010a8151c88988e246d14108f722996
- SHA512 78e242173ff9b46e20a28a863f07adfe0d07cb57f3ce500a463f0d867cdcec2bb5466abed9673a71534b2e6997d660f2458dce4f88ca351def5de82c1fa4f54c
- TLSH T1C5F08B2DFB62B804B0913E00215287C33E9C20016329B09F78DD8781B77261183A94FF
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/Prerequisites/DSETUP.dll
- IMPHASH b021ff25749d5d8bb42615cc84f1ef1b
- SHA256 e533560fca67b31433cf30be935a88151180feafc4e0f50b80ba569f04111722
- MD5 56ece9bd3c4a321166f1bd1efcabf585
- SHA1 ee01f1198b56b08ea419e7783a7c9477f2cb932e
- SHA512 34d80e243e7403fd4dd997a20c19809b46cb1f6152fc769e6fe498c7c329b31a7ec7828b4036cae732f9be902770686429c637a0b8808c046a5eb4687781bd2e
- SSDEEP 1536:wMtBqvGYlCOeR3+MPb3hzgS/1nJvMgqAlTJQs0MajclgUukW+j2c5o5INSWVg7Xk:FtAvGoCOA39b3h7/1CfWYcZ5x5o58SWT
- TLSH T133936C15BE90C072D8D120F916CCE771A6BEE1B40B2999C7B35047DAD9613C6AE3A34F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
a3:87:88:b6:5a:f2:2f:cf:cc:d5:a5:c0:f4:d5:18:78:f6:5f:54:8b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
6
Entry point
27618
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DSETUP.pdb
kernel32
LocalFree
LocalAlloc
lstrcmpA
WideCharToMultiByte
GetSystemDefaultLCID
GetModuleFileNameA
SetLastError
MultiByteToWideChar
lstrlenA
lstrlenW
CompareStringA
CreateDirectoryA
GetWindowsDirectoryA
FormatMessageA
GetCommandLineA
HeapFree
HeapAlloc
HeapReAlloc
GetLocalTime
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentDirectoryA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
WriteFile
RtlUnwind
InitializeCriticalSection
GetModuleHandleW
GetCPInfo
GetACP
GetOEMCP
Sleep
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
CreateFileA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
ReadFile
VirtualProtect
GetSystemInfo
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
GetVersionExA
LoadLibraryA
GetProcAddress
OutputDebugStringA
CreateMutexA
GetLastError
CloseHandle
TerminateProcess
FreeLibrary
user32
GetKeyboardType
DestroyWindow
SetFocus
CreateDialogParamA
SetDlgItemTextA
MessageBoxA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
advapi32
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegSetValueExW
RegCreateKeyExW
RegQueryValueExA
winmm
mmioRead
mmioDescend
mmioClose
mmioOpenA
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
ole32
StringFromGUID2
DirectXDeviceDriverSetupA
DirectXDeviceDriverSetupW
DirectXLoadString
DirectXRegisterApplicationA
DirectXRegisterApplicationW
DirectXSetupA
DirectXSetupCallback
DirectXSetupGetEULAA
DirectXSetupGetEULAW
DirectXSetupGetFileVersion
DirectXSetupGetVersion
DirectXSetupIsEng
DirectXSetupIsJapan
DirectXSetupIsJapanNec
DirectXSetupSetCallback
DirectXSetupShowEULA
DirectXSetupW
DirectXUnRegisterApplication
Name
.text
Size
74KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
968B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=123, productName=VS2005 build 50727, version=50727,
count=136, id=1, productName=Unmarked objects,
count=17, id=125, productName=VS2005 build 50727, version=50727,
count=30, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=108, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Super Meat Boy Jack O'Lantern/Prerequisites/DXSETUP.exe
- IMPHASH 06e947b532bbd61410aea9cbe5ad7d45
- SHA256 cdfdc371a373cd0f0daa00db46bae7e19258dd8ef7e521e57be96cbacdbb242f
- MD5 f5443547caac20aa334a88817579270f
- SHA1 3bf8b321c2e43af72307508df417a154c3f1afd5
- SHA512 106c9181bd98bfd82a3247267043b71d269d1ea7503ad12ef0fa2f395378205c274d11393752d21450a56a70f8c16b740901d433cf334bea4f1f7691c08ce38e
- SSDEEP 3072:6i6LKeHXG/8nUc2nDzw0FWtj/WM0PSQ5WOTLxcZ6rKmMH2/5Mjt4zT1mFDYkCIEu:S72nDzw0FWdw9x2Ws4VMVZ
- TLSH T183B4D05076F4D925F2F32F343AB9626159BB7E80A938C20D2605725D1BB3B40E968F37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
53:b4:75:e9:16:9e:80:86:fb:9f:62:c4:cb:e2:3e:23:06:be:eb:d3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
6
Entry point
28647
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
DXSETUP.pdb
advapi32
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
kernel32
FindClose
FindFirstFileA
lstrlenA
ReadFile
GetFileSize
CreateFileA
GetCurrentDirectoryA
GetCurrentProcess
GetModuleFileNameA
SetErrorMode
CreateMutexA
GetModuleHandleA
CreateThread
GetSystemDirectoryA
CloseHandle
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
CompareStringA
FormatMessageA
lstrcmpiA
LocalFree
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapReAlloc
VirtualAlloc
Sleep
GetModuleHandleW
InitializeCriticalSection
LCMapStringW
GetWindowsDirectoryA
OutputDebugStringA
CreateDirectoryA
GetLastError
GetCommandLineA
GetStartupInfoA
GetLocalTime
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
HeapDestroy
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
MultiByteToWideChar
gdi32
StretchBlt
DeleteDC
CreateCompatibleDC
SelectObject
CreateFontIndirectA
DeleteObject
GetDeviceCaps
GetObjectA
user32
ReleaseDC
GetDC
LoadImageA
SystemParametersInfoA
SendDlgItemMessageA
SetWindowTextA
GetWindowLongA
SetWindowLongA
PostMessageA
GetParent
SetDlgItemTextA
GetDlgItem
SendMessageA
ShowWindow
GetAsyncKeyState
ExitWindowsEx
EnumWindows
CharLowerA
LoadStringA
MessageBoxA
GetWindowTextA
GetClassNameA
SetForegroundWindow
SetFocus
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
comctl32
CreatePropertySheetPageA
PropertySheetA
ord17
Name
.text
Size
71KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
424KB
Virtual Size
424KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=125, productName=VS2005 build 50727, version=50727,
count=13, id=123, productName=VS2005 build 50727, version=50727,
count=157, id=1, productName=Unmarked objects,
count=104, id=109, productName=VS2005 build 50727, version=50727,
count=36, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Super Meat Boy Jack O'Lantern/Prerequisites/Feb2010_XAudio_x64.cab
- SHA256 18a4379b871a316071cf382a8c963af99eb2026b77bea42d6d81d737c94199d4
- MD5 4cc695ea3f2da46cd1e8f2d612ab306e
- SHA1 cf23782e8fdc5cb8554466797829c89f0b07fcec
- SHA512 1533f278c48fc846696716c50d23a8781142fd22f9d79ab1dbdb6b6a6a080c6a03260d7c54ff951af6668fba520fc50654d68a5886b75b01d89ae8dc19be4c0f
- SSDEEP 6144:en5u2aBnn2X6WOUMvwnwY9R1rfXGbwQlixqgH7P4m2tQBPdwB9:S5u24oz5jX1rfXGbwnxqgH7P4m2IC3
- TLSH T11A4423BB01D4D7C4BF5FC8E2E37CBE17E579668B8053C64760A11A2730176D9C8A4E16
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
0d64393611f45ec4d8a2c704fab4e1c3bb70cf88
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
FEB2010_XAudio_x64.inf
- SHA256 da63330fd2a1538b714ee6cf2e09256446a04a55f866b3f70237d8a7165cb3e3
- MD5 1c4dc3c97e96135a784867d68d193bef
- SHA1 5019f79ea9b624999fe58420daac619c5695994c
- SHA512 d529d68ccdacd41a7bb688bf226a23f4d08639213d96e3e428c16176681c5f7d45ca8527291322b2a6d4dd14fea1cab3cf183006bca3b5a45fbf2e05c2ee1437
- TLSH T1B7117DC5CC4382337B89B0F2BF572A8A57571416ED212248FA9605CD5BE310652AC1EE
- MD5 SHA1 SHA512 TLSH
XAPOFX1_4.dll
- IMPHASH dae43bcd13a7d4666efa357462bb9496
- SHA256 d42e7e91eafce25550f08a63240e23fbe3ddd278b852e36e4eab05bc42f5ec7d
- MD5 a9724eb3d6cc032d0c4ecaff4ad8c17f
- SHA1 3f951a9eb2d50cdd7a0d2210391e14ce9acacc63
- SHA512 ab7cb86abb44e0989047de945f723fb0c42e7a527d19851dd52847b019b13028280a71b7581b2600d942a0576ca4b33029f589bc08934208d4250c2cab3cbe25
- SSDEEP 1536:XZGrYBQSbWXBjyc2gYb06wgNqrYJZFgiC9514e2:XKYyjyHo6vNqrYPgiC95qX
- TLSH T1D2735A4264FAC6BAF02D3479B5C8B51BE632B5114B2585D703B44665AAA3BC04EFF332
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d2:45:4c:23:18:9d:70:4c:ae:01:4f:93:26:f3:87:52:ce:66:44:21
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
6
Entry point
60484
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
XAPOFX1_4.pdb
msvcrt
_amsg_exit
__C_specific_handler
free
_initterm
malloc
_XcptFilter
sqrtf
memset
memcpy
_aligned_free
memcmp
_aligned_malloc
pow
powf
floorf
cos
_vsnprintf
sin
tanf
kernel32
HeapAlloc
GetProcessHeap
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
Sleep
HeapFree
ole32
CoTaskMemFree
CoTaskMemAlloc
CreateFX
Name
.text
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
426B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=125, productName=VS2005 build 50727, version=50727,
count=15, id=110, productName=VS2005 build 50727, version=50727,
count=93, id=1, productName=Unmarked objects,
count=7, id=123, productName=VS2005 build 50727, version=50727,
count=58, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=18, id=114, version=50727,
count=1, id=126, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
XAudio2_6.dll
- IMPHASH 919a640fd051c2bbab5fdf06dfd1aac2
- SHA256 3240447ef7bab48ec32a19f36e990bbddfdcb0f664fd9f58449f46788b5c32dd
- MD5 05e88c8d8e652dff03b469331f474cce
- SHA1 a2b70fc91e5e598d1e63ae6f563f4c1f511e2327
- SHA512 144a89c7870fde2bbec8b6fb1959496fb32cfc005d9e02cc1fa78a0749bca926e6523ea4ee6528ca4bd05d94b23622837d2e61d91d1fcbab9a2d8c443d858ca0
- SSDEEP 6144:fcg7Y93Myyv3uAUrG/mFVA4HsOmlboFanHhNde8BP5nlH9R05fjJig3B0AJaGwJ2:fOAUrG/gO4HsOmO0Hh45biiwJljXg3r
- TLSH T15DB46D53F1A18BB6D1AA4135D192A32BD371B4486B460BCB13E0C5357EE36E02EBD3B5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
3b:1d:e1:55:bf:60:0b:84:03:82:e9:a3:47:91:f9:fe:ec:f0:a2:ac
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
6
Entry point
472936
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
xaudio2_6.pdb
msvcrt
sqrtf
memmove
memset
memcpy
__C_specific_handler
powf
_amsg_exit
free
_initterm
malloc
_XcptFilter
atanf
cosf
_purecall
_vsnprintf
sinf
log
_aligned_malloc
_aligned_free
_vsnwprintf
sin
floorf
cos
memcmp
pow
exp
kernel32
HeapFree
GetVersionExA
LoadLibraryA
lstrcmpW
WaitForSingleObjectEx
CreateThread
ResumeThread
GetProcessAffinityMask
SetThreadAffinityMask
ResetEvent
SetEvent
CreateEventA
CreateSemaphoreA
CloseHandle
GetProcAddress
GetProcessHeap
HeapSize
GetSystemInfo
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
Sleep
DisableThreadLibraryCalls
WaitForSingleObject
WaitForMultipleObjects
DuplicateHandle
FreeLibrary
ReleaseSemaphore
GetLastError
EnterCriticalSection
GetModuleFileNameA
GetCurrentThreadId
TryEnterCriticalSection
SetThreadPriority
GetCurrentThread
GetThreadPriority
InitializeCriticalSection
HeapCreate
HeapDestroy
HeapAlloc
DeleteCriticalSection
OutputDebugStringA
QueryPerformanceFrequency
LeaveCriticalSection
ole32
PropVariantClear
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CLSIDFromString
rpcrt4
RpcStringFreeA
UuidToStringA
advapi32
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
winmm
timeEndPeriod
timeBeginPeriod
user32
GetDesktopWindow
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
484KB
Virtual Size
483KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.no_bbt
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=125, productName=VS2005 build 50727, version=50727,
count=17, id=110, productName=VS2005 build 50727, version=50727,
count=156, id=1, productName=Unmarked objects,
count=15, id=123, productName=VS2005 build 50727, version=50727,
count=58, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=101, id=114, version=50727,
count=1, id=126, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
XAudio2_6_x64.cat
- SHA256 ec372ea2e0aa1443eb6f4af23b683c48835404f5ed0bb68ef24bd45a34a2fbc8
- MD5 31734250627c3dc97504d96d3a5ff9ba
- SHA1 e59e7702d7b1071e88a0103bad8932a322174487
- SHA512 fe8bd21b81a4b1688a2493693e7d8c1dd219b32511102685fa3680a0d2b9331ca915dd9c588bb952b1cc93f550765af5d6b8d5ec9a5e4f2c091f0dd5f58f4352
- SSDEEP 192:DdUlVEQKPnEtObMacxc8hjXHUz1Tr28rMoAGs:DOELXci2jXHUzr+
- TLSH T145E1D8D64D6CD143DE5A9D9167E8FD977C38C7C34811593E10ABF79809833D16B1A82C
- MD5 SHA1 SHA512 SSDEEP TLSH
XAudio2_6_x64.inf
- SHA256 d4eee50184721bc362d5ea130543f3f8ff7d6e42cce62679f8484c82cf175163
- MD5 3da109896978fab946c22b8a48219844
- SHA1 ec63c12fe336f597f1be8818fb415ea83591df23
- SHA512 a8cb965d7b4a87b853a0870c65d59c398e1bb98b3ed3f80ba9c1016a00c1e306f41d6b7de7cb9d292c54bc3e752c6ebfb159947d99a35073774eaa9b8a5cb85b
- TLSH T1FA0125D8E9119758A4833AC132214DC3AE68131C6E50209775FC4489F7A300AD2790FB
- MD5 SHA1 SHA512 TLSH
XAudio2_6_x64_xp.inf
- SHA256 f39e547e99c0eca8ecf8ac9009e3706e9305f6cd1ec44e50aa3a5cd49dadd21a
- MD5 f87d90d92fa67b1641a8513cf14a4745
- SHA1 82b108184a55cbbdb765d2737f62bcbf88f05e5c
- SHA512 74bb44cb679afe49ae804f05e1d1653bce95769152da722b991db81569db9f06627fd0347272e04ddefc2155a42f7d3b56efc5e437daeeedcb2fa359875a2b63
- TLSH T123F08189D5518718A146398022220DC3BE6823152F10114A79FC8989B79300682751FB
- MD5 SHA1 SHA512 TLSH
infinst.exe
- IMPHASH b22a4f669312ee374cb26a4eb9e4098a
- SHA256 d808bb408a4bd695a9793e70b1c61637e008ac11174dbe1373481e2bdb0c9299
- MD5 730e5493910e5693499485e352381c6a
- SHA1 2871488c24d069e677868e0a590e7e74f1f19b12
- SHA512 62fb2a2ddfd62d48ca8a709426c07e1cda0e66df5b977c3bfdc3b191d15c3a139a5c6180ed7a66b2418a5436273d713f2af1cb21f7dc77df78e0743d6a18e176
- SSDEEP 1536:dlXfyLmGfmXJu7jiwgQ87Nl5LJw3xzFtmQVbSt5RuY:dlXfyLm/XJuUT7z5L8xzFIQVbSt5Z
- TLSH T1D6736B98B39450B9C46AC17DC9C29715E7B2F81A037643CF072886AA5F737E5693F322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Minor OS version
0
Major OS version
6
Entry point
21504
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
infinst.pdb
kernel32
LocalFree
FormatMessageA
GetWindowsDirectoryA
CreateDirectoryA
GetLastError
OutputDebugStringA
MoveFileExA
GetModuleFileNameA
FindFirstFileA
CopyFileA
GetCurrentDirectoryA
CompareStringA
FindClose
GetPrivateProfileStringA
CloseHandle
CreateFileA
lstrlenA
CreateFileW
VirtualQuery
GetSystemInfo
SetThreadStackGuarantee
VirtualAlloc
VirtualProtect
ReadFile
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetCommandLineA
GetVersionExW
GetStartupInfoW
GetLocalTime
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
EncodePointer
DecodePointer
FlsFree
SetLastError
FlsSetValue
FlsGetValue
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
Sleep
GetConsoleCP
GetConsoleMode
SetFilePointer
SetStdHandle
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
user32
CharNextA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
setupapi
SetupCloseInfFile
SetupCloseFileQueue
SetupOpenFileQueue
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupOpenInfFileA
SetupDiSetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupInstallFromInfSectionA
SetupDefaultQueueCallbackA
SetupCopyOEMInfA
Name
.text
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
668B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=125, productName=VS2005 build 50727, version=50727,
count=32, id=110, productName=VS2005 build 50727, version=50727,
count=9, id=123, productName=VS2005 build 50727, version=50727,
count=116, id=1, productName=Unmarked objects,
count=102, id=109, productName=VS2005 build 50727, version=50727,
count=2, id=113, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Super Meat Boy Jack O'Lantern/Prerequisites/Feb2010_XAudio_x86.cab
- SHA256 281bb0e12f617e9ae7fe3301a7d4a08201b377caa0311a886e8cddc2526f734a
- MD5 5da6e4a80fa53568d2fdde31cbff2979
- SHA1 9606fda70427cd9f4eb8e67b625417e2775e6876
- SHA512 649fc2578388064267ebe8e55daada29d2e51ae6422b10088b6bfacd229bc0439aafdc4f9af7b3b5e187df179c72b4d85f70839a8c91505d17da06d53a40cf3b
- SSDEEP 6144:ScGQ0hz7ScOGCq29xXhKj2bVZevb+7KwDcxbaLhz6:aQu3TxCqCZEGVZej+BDVd6
- TLSH T1C74412A28C9A65D34D17A33EF39C54872CF5DBC126A15004601AEAEB52D7BE3CF2764C
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
68ec697a3eced3875027a8a96b98a50ead75ef3f
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
FEB2010_XAudio_x86.inf
- SHA256 74c827ef94881099761e04397ef8f162fd0ccaf4876a5503c4b53a5216d2acca
- MD5 e6e942a2cfbb587bfcc4203b5bb34fd4
- SHA1 2e0172ea1936911a98e11a6e98990703e24172c0
- SHA512 3d70d76e6f459819a1703c5019a2e10fe518ee6e8eb5d3313fe57d3d1b6313b52c4904398a26841c78a9ecf9d715e1201e834ab3df47265e070ec94417a78e4d
- TLSH T1A0317CC9CC0293717B88B1B27F5F3A8F57670416ED612108B3D64E996BE3202256C9FE
- MD5 SHA1 SHA512 TLSH
XAPOFX1_4.dll
- IMPHASH a3a674b1b02986f74e6f1f4671ca62fc
- SHA256 0aee44b12913a95840ee6431d90518b0d72c54a27392e21ee6995e2151554a06
- MD5 e4ce2af32f501a7f7dddd908704a0ee6
- SHA1 9dc2976efb15b6fba08bebdeb98929b6961063a5
- SHA512 ec14a58414d595a36c6b575cdae690f11481cd3f0b35fd2f4c6a6d162a6272882cfe03da865e09a34972775790529f51c80b69056a2fcb909f25b549ed2f7f01
- SSDEEP 1536:1/GrYvIGDi/t+YoCBlrT8EGscPCEBu0OI+k95M:qYw/VoCBl0EGsjEh1+k95M
- TLSH T11D734C026CF9C6F2F46468F5D4BD39A73838CA84A7248AC3625445D1D9F07E0AEF93B5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
c8:20:d6:41:8e:81:c3:0e:41:97:f0:d1:b3:b0:62:ef:28:23:71:40
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
6
Entry point
16602
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
XAPOFX1_4.pdb
msvcrt
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter
sqrt
_aligned_malloc
memcpy
_aligned_free
memcmp
sin
_vsnprintf
memset
_CIpow
floor
cos
kernel32
GetCurrentProcessId
GetProcessHeap
HeapAlloc
HeapFree
GetVersion
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
InterlockedIncrement
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
IsProcessorFeaturePresent
InterlockedDecrement
ole32
CoTaskMemFree
CoTaskMemAlloc
user32
MessageBoxA
CreateFX
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=125, productName=VS2005 build 50727, version=50727,
count=85, id=1, productName=Unmarked objects,
count=9, id=123, productName=VS2005 build 50727, version=50727,
count=62, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=31, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=126, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
XAudio2_6.dll
- IMPHASH 3f01b646c2444455f7233e736b73c9c4
- SHA256 61b57170f7c6365714396072d22cb98746718c0f44c9f0d5c62fdb1b218639c7
- MD5 4976243bd70fae3d1d24e49739ab2710
- SHA1 6ef27b10bcf4e697fe77c3e964b326be11e4444f
- SHA512 af2d6aaad44bed880a1a2ee947618b142c76a5eca42d4608196b74df9108a9649059d8207e84a58b76ad43aefe9b66ffcc519f8126667177011cf4199f163e83
- SSDEEP 12288:QWi8lqH+P+wCS+OlElME9IdMANXtaDWzF6xuwEiS:QBtZEPMAN0WzoxuwhS
- TLSH T17CB43A12A4528275C9F722F184AE333B2738CB8457451AD753E499F9EED21E07FB01EA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
5a:50:92:57:49:13:c2:26:0f:d6:5b:7b:c1:00:17:b1:b6:90:72:c4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
6
Entry point
204293
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
xaudio2_6.pdb
msvcrt
memset
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter
ceil
_CIpow
strlen
_purecall
memmove
sqrt
_vsnprintf
memcmp
memcpy
_aligned_malloc
_aligned_free
strcmp
wcslen
_vsnwprintf
sin
cos
floor
kernel32
WaitForSingleObjectEx
CreateThread
ResumeThread
GetProcessAffinityMask
SetThreadAffinityMask
lstrcmpW
FreeLibrary
GetVersionExA
ResetEvent
SetEvent
CreateEventA
CreateSemaphoreA
CloseHandle
GetProcAddress
GetProcessHeap
HeapSize
GetSystemInfo
GetVersion
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
DisableThreadLibraryCalls
LoadLibraryA
WaitForSingleObject
DuplicateHandle
WaitForMultipleObjects
ReleaseSemaphore
GetCurrentThreadId
GetModuleFileNameA
HeapDestroy
TryEnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
HeapCreate
GetLastError
GetCurrentThread
QueryPerformanceFrequency
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
HeapFree
GetThreadPriority
OutputDebugStringA
InterlockedIncrement
InterlockedDecrement
SetThreadPriority
IsProcessorFeaturePresent
ole32
PropVariantClear
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CLSIDFromString
user32
MessageBoxA
GetDesktopWindow
rpcrt4
UuidToStringA
RpcStringFreeA
advapi32
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
winmm
timeEndPeriod
timeBeginPeriod
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
491KB
Virtual Size
490KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.no_bbt
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=15, id=125, productName=VS2005 build 50727, version=50727,
count=146, id=1, productName=Unmarked objects,
count=15, id=123, productName=VS2005 build 50727, version=50727,
count=62, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=117, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=126, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
XAudio2_6_x86.cat
- SHA256 d834535e5c822613281c525fe159ff7c1ebd4a3fe26ba635303342d70ad47160
- MD5 ceac56e4fb461dc6680709e425f2ec0c
- SHA1 94410802d2d55ff4b337a3471aaebde29f253ff9
- SHA512 07f4820ef248d4fa30eeead73ce8c1633577eccf3d4c66920292ab180483b96cb8f5af3747d7097c6372223e046097aed702f1e6233461031417a1e450799d07
- SSDEEP 192:DfvSmBEQKPnEtObMacxc8hjXHUz1Tr2hBnr:DfDELXci2jXHUinr
- TLSH T1F8E1C7D6896C9147EE0AAC91A7F4FDAB7C38C7C31521953E109BF79409833D2A71D82C
- MD5 SHA1 SHA512 SSDEEP TLSH
XAudio2_6_x86.inf
- SHA256 c60c4a6018e5f860a12322a0d77a1f2ad85c2d6d6dd04cc651560790dd66c9ad
- MD5 e547742e48e3170b9ea1fcffcd22b607
- SHA1 c361a5516bbad8a3faddbb8ab9e42682be22fc7b
- SHA512 16079fdc88f1a010958ea44c88bca3287b44c308e97dadede13aab761eabb91d67ba3e7a72cb9c89c844994dcb71eb33559a27c7668b4bab40b67ab58d780bbc
- TLSH T18F119C5DED616758A4823A8072328DC77EA823186E64209775FC868977A300B977A0FB
- MD5 SHA1 SHA512 TLSH
XAudio2_6_x86_xp.inf
- SHA256 54683fe0b24abf295ec8e8dae3136394e2f979e65a60f0f7ac0538b1898bbc30
- MD5 dd3ef18c043ec016eadc6887ea7e1c33
- SHA1 0ec35ffe1c3c49f0a9ff90910f979d4d80084565
- SHA512 de5ea4cab0d34e37c786f8fe9bdb74695c3e7e43e813d246d45dc6d775ab949f09c817b21bbb5012c528fdedb8660b284accc00ea586227e5b255b1b372e17b0
- TLSH T1AB014E59E9619618F546398033724EC77FA823142F24315B79EC8795779300743BA1FB
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/Prerequisites/dsetup32.dll
- IMPHASH 9f5697c8aad28db39ef5e8311ec1a191
- SHA256 ce9d7814ee5b52d554199d434d654bacc2e7ae5c8efa05e6218fbfef9e8e33c7
- MD5 ef0ecde0df6dc9ce1ac6d6907c261cea
- SHA1 f5556a3f21ed89b184356e8a1257701b3aa40322
- SHA512 5254fec23d2b9367a1dacd2cad3f4035404b2e0bf69adcc14e8c028a18f33e48be51b141723f15d3296fc95c7f991929d7373a568175c32f5b263ac8502fcafe
- SSDEEP 49152:WjfO/POOOOOOOOOOOOOOOOMiWeXiWeXiWeXiWeXiWeXiWeXiWeXiWeXiWeXiWeXN:WCa
- TLSH T16375AE35B1D40331E6B203B167128AB7F73EDBDDE21AD521B9AE82552186B8CC33E355
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
3d:ea:90:13:ef:f5:da:f9:9f:d7:2a:78:b4:f3:48:72:0e:b3:51:f6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
0
Major OS version
6
Entry point
106721
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
dsetup32.pdb
kernel32
FindClose
FindFirstFileA
GetSystemDirectoryA
CopyFileA
DeleteFileA
SetFileAttributesA
WideCharToMultiByte
LoadResource
FindResourceA
GetSystemDefaultLCID
GetModuleFileNameA
lstrcmpA
LockResource
SizeofResource
SetLastError
GetPrivateProfileStringA
MultiByteToWideChar
CloseHandle
GetFileSize
CreateFileA
GetPrivateProfileSectionA
lstrcmpiA
lstrlenA
FindNextFileA
GetShortPathNameA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryExA
GetFileAttributesA
GetPrivateProfileSectionNamesA
GetSystemInfo
GetDiskFreeSpaceA
GetModuleHandleA
ReadFile
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetTempFileNameA
GetDriveTypeA
GetCurrentDirectoryA
ExpandEnvironmentStringsA
GetTempPathA
MoveFileExA
SetFileTime
GetFileTime
Sleep
CreateMutexA
GetCommandLineA
GetLocalTime
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
GetVersionExA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
WriteFile
GetConsoleCP
GetConsoleMode
InitializeCriticalSection
GetModuleHandleW
SetFilePointer
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
VirtualQuery
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
GetProcAddress
LoadLibraryA
GetCurrentProcess
FreeLibrary
CompareStringA
FormatMessageA
LocalFree
GetWindowsDirectoryA
OutputDebugStringA
CreateDirectoryA
GetCurrentThreadId
GetLastError
gdi32
GetDeviceCaps
user32
PeekMessageA
ShowWindow
GetDlgItem
SendMessageA
CharLowerA
MessageBoxA
CreateDialogParamA
SetFocus
DestroyWindow
DialogBoxParamA
GetMessageA
CharNextA
EndDialog
SetDlgItemTextA
SendDlgItemMessageA
GetDesktopWindow
GetWindowRect
GetDC
ReleaseDC
SetWindowPos
LoadStringA
DispatchMessageA
TranslateMessage
GetKeyboardType
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
RegQueryValueExA
shlwapi
SHDeleteKeyA
winmm
mmioDescend
mmioOpenA
mmioClose
mmioRead
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
shell32
SHFileOperationA
ole32
StringFromGUID2
DirectXLoadString
DirectXSetupCallback
DirectXSetupSetCallback
DirectXSetupShowEULA
iDirectXSetup
iDirectXSetupGetEULA
Name
.text
Size
154KB
Virtual Size
153KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=123, productName=VS2005 build 50727, version=50727,
count=178, id=1, productName=Unmarked objects,
count=18, id=125, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=112, id=109, productName=VS2005 build 50727, version=50727,
count=44, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Super Meat Boy Jack O'Lantern/Prerequisites/dxdllreg_x86.cab
- SHA256 273eeab645ef719e69a04c8c365774b4222bc98602400ce859ddf3bef6d60ed4
- MD5 45fb6c8a625a56688b3e77e28a408c60
- SHA1 6cc63c19a0ab8db3179726bc08e68a3b5d08adbc
- SHA512 1ea4d9af1ba064c1712086ed0c2c308cb6aa2d41894ae7c80cb3295649c47e93bed2d024470bfd3405e9e461d6091d4c7e6b0314bccc1e620fd5c087e6b9a53a
- SSDEEP 768:mUOgUEOpM074cXDrypYiGB3+SBQZdcioEuNVNjaO9n2Mi2jXHU5G:5UND0cXDWpY53+7tuduO9nB9rHU5G
- TLSH T1C913F1928558A486DCBF64C4811DEB47BC74A2D3DFB2704AA2FFE0D004527E29B958CE
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
4c2de3dffe765bd2cd6ee08f4beb53f8797045da
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Super Meat Boy Jack O'Lantern/Prerequisites/dxnt.cab
- SHA256 8254beb9724139e01503ec65e7682da593cc4e81ec4bff431e5fd37ce5656034
- MD5 debdc5b140ef132a1adc4b29ea18e818
- SHA1 142e2165506ad36185b2d0b59b221afbae2fc4b0
- SHA512 30fce472a1e24b62fd137fce0201c32ed2bd5241114075c59725f3200702892de2340064d942f0f6269190f3464c73f1780cad3cfb45a22ce22c236fc5b4bd6a
- SSDEEP 393216:gpUg665XQQKEpboFCyl444tMCPAJPnc2zRCjjMkVGdjYHBJIt6R:gcGXHprY6t+JnjzRCjoLdjYhJI4R
- TLSH T1D0D63397A0AD8F8F4C52EC39A545A3178CB1E35CE88489DA7B56F5B04E283FB3134E45
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
c624c95c47d4cde1d3b2871e9fb8ef9637df4027
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Super Meat Boy Jack O'Lantern/Prerequisites/dxupdate.cab
- SHA256 54d68f154058433865708ee0dbf3ecf2d609ffbd618e84a1056440379494d9fd
- MD5 c187448c8104d30087f3f25a9d112014
- SHA1 b64ac3e44f2f38a3bf8400f11a40a39039fc9caa
- SHA512 9148cece409557444eeaf66dee58e2a6043a64d7b76b91e6c4074a5ba0d066cd1ebb2c60d44e1c7a40ca1dc63d72aa7afcc410202901d5afbf2116e3ba8b0f11
- SSDEEP 1536:CegbA3a2D3njmzI60hJijpy/Ykm3BSLGK/grkE5qYYH5UzbMrW+uft9rHUx:Jt3ao7hSynHLHEoYYHGAWlft9ox
- TLSH T18D9312C0AE8C328FB0567824524CF9326CB977D396A143139C89688613B7BF1DF26C2D
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
202f2df6111a45bcfb45a186a9a6db70730f2372
Digest Algorithm
sha1
Digest Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 4, 2010
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:cf:3e:00:00:00:00:00:0f
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 7, 2009 - Mar 7, 2011
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:05:a2:30:00:00:00:00:00:08
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 25, 2008 - Jul 25, 2013
Super Meat Boy Jack O'Lantern/Prerequisites/vcredist_x64.exe
- IMPHASH 092eb6daba2f17cbda102fd1a32acd00
- SHA256 baaaeddc17bcda8d20c0a82a9eb1247be06b509a820d65dda1342f4010bdb4a0
- MD5 a31dc1a74f1dee5caf63aec8ebb5fe20
- SHA1 5580072a056fdd50cdf93d470239538636f8f3a9
- SHA512 fc65d9c85503ff2a3444a6b57abe376ad78d8f476ebbc1d51e7f4bbbbc7e3a3ae1fdf4d00ef9198e4f9a356585fbdff1d932ffd95606a575dfc192fb26e40cf9
- SSDEEP 49152:NQN2skpzPXDFBjWRJTCAIHuDeeaJ98mjRC9YC2Ns+/X0h54GEewKk:N62bz/5YvpI2eey98CRC4L0ZRbk
- TLSH T1F1B533D5B718C507FA8836B9019D850BBCBDA2DEC61DB3773AC606CC600B58CA86DB57
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
57:e6:99:fb:8f:72:9a:f5:39:99:a9:2a:e1:ea:ad:f0:0c:29:bc:a8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 7, 2007
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0f:78:4d:00:00:00:00:00:03
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 23, 2007 - Feb 23, 2009
Subject
CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:14:2c:a7:00:00:00:00:00:06
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 12, 2007 - Jun 13, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Minor OS version
2
Major OS version
5
Entry point
22898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
kernel32
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
SetEvent
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
GetVersionExA
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
CreateFileA
FindNextFileA
FindFirstFileA
CopyFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceA
QueryDosDeviceA
GetCurrentDirectoryA
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetExitCodeProcess
CreateProcessA
ExpandEnvironmentStringsA
GetFileSize
CreateThread
CreateEventA
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CloseHandle
DeviceIoControl
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
SetErrorMode
GetTickCount
CreateDirectoryA
GetLastError
RemoveDirectoryA
MoveFileExA
SetFilePointer
FindClose
ReadFile
msvcrt
strchr
_strnicmp
_stricmp
strrchr
_strlwr
strncpy
strstr
_snprintf
sprintf
advapi32
AllocateAndInitializeSid
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
InitializeSecurityDescriptor
OpenProcessToken
user32
ShowWindow
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
LoadStringA
EndDialog
SetParent
MessageBoxA
ntdll
NtShutdownSystem
NtAdjustPrivilegesToken
NtClose
NtOpenProcessToken
comctl32
ord17
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2.2MB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=15, id=93, version=2179,
count=107, id=1, productName=Unmarked objects,
count=20, id=95, version=2190,
count=1, id=94, version=2179,
count=1, id=90, version=2179,
Super Meat Boy Jack O'Lantern/Prerequisites/vcredist_x86.exe
- IMPHASH 092eb6daba2f17cbda102fd1a32acd00
- SHA256 c6a7e484f4d84883bc1205bccea3114c0521025712922298ede9b2a1cd632357
- MD5 b936f0f378b9a35489353e878154e899
- SHA1 56719288ab6514c07ac2088119d8a87056eeb94a
- SHA512 acdf7b464a258b3ae3015c808d0e08a697ba3209662faa9b18c1aee882bf236dc725f6c3425cb6f9e10d8ab5cbb82ac118ff947a4b9ec6f91c2e150b0beef70f
- SSDEEP 49152:wQixbpVndRcpfqwYO3u2XoKNLlMDEe/pmVS/F0jD:wtdnfnwp3oOLuB/3/uD
- TLSH T1CE8533428124885AF1C52A30ABB73E5E8EF9D651743F87BB314B8543E65B770A923F34
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
3e:b8:2d:0b:41:de:b8:14:82:b2:6d:80:ac:85:6a:a4:1c:9b:ef:50
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Nov 7, 2007
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0f:78:4d:00:00:00:00:00:03
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 23, 2007 - Feb 23, 2009
Subject
CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:27F4-D440-54F3,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:14:2c:a7:00:00:00:00:00:06
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 12, 2007 - Jun 13, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Minor OS version
2
Major OS version
5
Entry point
22898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
kernel32
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
SetEvent
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
GetVersionExA
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
CreateFileA
FindNextFileA
FindFirstFileA
CopyFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceA
QueryDosDeviceA
GetCurrentDirectoryA
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetExitCodeProcess
CreateProcessA
ExpandEnvironmentStringsA
GetFileSize
CreateThread
CreateEventA
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CloseHandle
DeviceIoControl
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
SetErrorMode
GetTickCount
CreateDirectoryA
GetLastError
RemoveDirectoryA
MoveFileExA
SetFilePointer
FindClose
ReadFile
msvcrt
strchr
_strnicmp
_stricmp
strrchr
_strlwr
strncpy
strstr
_snprintf
sprintf
advapi32
AllocateAndInitializeSid
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
InitializeSecurityDescriptor
OpenProcessToken
user32
ShowWindow
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
LoadStringA
EndDialog
SetParent
MessageBoxA
ntdll
NtShutdownSystem
NtAdjustPrivilegesToken
NtClose
NtOpenProcessToken
comctl32
ord17
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.7MB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=15, id=93, version=2179,
count=107, id=1, productName=Unmarked objects,
count=20, id=95, version=2190,
count=1, id=94, version=2179,
count=1, id=90, version=2179,
Super Meat Boy Jack O'Lantern/SuperMeatBoy.exe
- IMPHASH 86e410e5dc77ae285e1b78c0a43f1c37
- SHA256 a559c65cef15fb29d93504823c8c1cdbf16afa5f7daecd3643e104beb5c55bca
- MD5 9de9b684b8b2e028d55e3808a7325d54
- SHA1 9d6675dc85cc56705cde9fc39316cbf1d555c55a
- SHA512 043e70d49ea74ac88f48b8aacd31f38fece098b734c3d65e8b3bf007fc3bddbb5eb2a348a6288b109f5d27c956cee19ca9975474e64523e6e0db9c5b7cd143f8
- SSDEEP 49152:ku5p4bND30QAq+lZtVpak6sGdPgp+rDKDAPeVTwRJ9Ne69Zyfd0:kuANDemDKDAPeI3y
- TLSH T172E5CF50BFD7C2F2D997293D009E5A3EDE2AD750032955C3BBE00AC9CE207E2597616E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
1189820
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\projects\SuperMeatBoy\System\SuperMeatBoy_Release.pdb
winmm
timeGetTime
steam_api
SteamAPI_RegisterCallback
SteamAPI_UnregisterCallResult
SteamAPI_RegisterCallResult
SteamApps
SteamAPI_Init
SteamUtils
SteamAPI_RunCallbacks
SteamAPI_SetMiniDumpComment
SteamAPI_WriteMiniDump
SteamFriends
SteamAPI_IsSteamRunning
SteamUser
SteamUserStats
SteamAPI_UnregisterCallback
user32
GetForegroundWindow
GetCursorPos
SetRect
BringWindowToTop
SetWindowPos
InvalidateRect
SetWindowLongA
MessageBoxA
DestroyWindow
DispatchMessageA
TranslateMessage
PostQuitMessage
PeekMessageA
ChangeDisplaySettingsA
LoadCursorA
UpdateWindow
GetSystemMetrics
UnregisterClassA
CreateWindowExA
DefWindowProcA
GetWindowRect
RegisterClassExA
EnumDisplaySettingsA
AdjustWindowRectEx
ShowWindow
ShowCursor
ole32
CoInitialize
CoCreateInstance
CoSetProxyBlanket
CoInitializeEx
CoUninitialize
oleaut32
SysAllocString
SysFreeString
dinput8
DirectInput8Create
xinput9_1_0
XInputGetState
psapi
GetProcessMemoryInfo
kernel32
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoW
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFullPathNameA
GetConsoleMode
GetConsoleCP
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
InterlockedExchange
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EnumSystemLocalesA
GetTickCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapDestroy
HeapCreate
VirtualAlloc
VirtualFree
FatalAppExitA
LoadLibraryW
GetCurrentThread
SetLastError
HeapSize
GetDriveTypeA
PeekNamedPipe
GetFileInformationByHandle
SetStdHandle
FileTimeToLocalFileTime
GetCurrentProcessId
IsValidLocale
GetTimeZoneInformation
WideCharToMultiByte
SetConsoleCtrlHandler
ExitProcess
Sleep
GetProcessAffinityMask
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GlobalMemoryStatusEx
TryEnterCriticalSection
CompareStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateFileA
GetFileSize
SetFilePointer
WriteFile
FileTimeToSystemTime
ReadFile
FindFirstFileA
GetLastError
FindClose
FindNextFileA
GetFileTime
CloseHandle
DeleteFileA
OutputDebugStringA
WaitForSingleObject
SetEvent
CreateEventA
ResetEvent
InterlockedDecrement
SetThreadPriority
WaitForMultipleObjects
SuspendThread
ResumeThread
CreateThread
FreeLibrary
LoadLibraryA
GetSystemDirectoryA
SetNamedPipeHandleState
WaitNamedPipeA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
OpenEventA
GetModuleFileNameA
GetWindowsDirectoryA
GetLocaleInfoA
QueryPerformanceCounter
GetSystemTimeAsFileTime
QueryPerformanceFrequency
TlsFree
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsAlloc
InterlockedIncrement
SetFilePointerEx
SetEndOfFile
GetStdHandle
GetFileSizeEx
DuplicateHandle
SetEnvironmentVariableW
FlushFileBuffers
GetFileAttributesA
CompareStringW
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP
GetProcessHeap
InitializeCriticalSection
GetFileAttributesExA
GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
GetCommandLineA
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
GetModuleFileNameW
GetFileType
WriteConsoleW
RtlUnwind
advapi32
CryptReleaseContext
CryptAcquireContextA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
CryptGenRandom
ws2_32
inet_ntoa
gethostbyname
WSAGetLastError
inet_addr
htonl
getservbyname
htons
gethostbyaddr
ntohs
WSASetLastError
connect
closesocket
__WSAFDIsSet
socket
ioctlsocket
WSAStartup
WSACleanup
getpeername
shutdown
setsockopt
send
recv
select
getservbyport
d3d9
Direct3DCreate9
d3dx9_42
D3DXCreateTextureFromFileInMemoryEx
D3DXGetPixelShaderProfile
D3DXGetVertexShaderProfile
D3DXCompileShaderFromFileA
D3DXCompileShader
D3DXCreateTextureFromFileExA
D3DXCreateRenderToSurface
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
233KB
Virtual Size
233KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.1MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
87KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=150, version=20413,
count=57, id=149, productName=VS2008 build 21022, version=21022,
count=204, id=131, productName=VS2008 build 21022, version=21022,
count=100, id=109, productName=VS2005 build 50727, version=50727,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=3, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=32, id=110, productName=VS2005 build 50727, version=50727,
count=222, id=1, productName=Unmarked objects,
count=23, id=123, productName=VS2005 build 50727, version=50727,
count=27, id=138, version=21022,
count=182, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
Super Meat Boy Jack O'Lantern/UserData/Reg0.dat
- SHA256 7d191a0825e249d448a62fd95b00e68abbc3f44bfc9137fa4a87de1bc32a3fae
- MD5 06de9e880c75ecaf5154269c96446b8b
- SHA1 8cbbe2e4df1083bb39bef5c230751a46e5f0d855
- SHA512 32e7ec25c00d378ffc061448630309e9e308ab77b0df394a7587ceb5f657b912e024c66f918979aaacd588d72c45bd8405e08b33ebcff127da6aff88887c9a86
- TLSH T1A1A002B8F31F1A68C193C8775591475A5330D75D97D5AC522360AA35BE0137A34350EA
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/buttonmap.cfg
- SHA256 ed7051c7de118b679c5e0212f701f6206cb7e902fac9d92fac14ca95b20d82dd
- MD5 5f9b49b249984644f0c6b028fc81cb15
- SHA1 d179db9f743a02e9e6022633860b66c728f3db76
- SHA512 3109a8d0497933260630649b8b81a03372daddac60490cfd34e4be8ea252367991e43aed9fe16f3c9527d3030fdcb8c03a0624604d7e874c28c0f69781ab15fa
- TLSH T18BC08C15C98EC02E2EA7B52BEB39E11BB04868888B1318D0709DB0882144EBF08C70AD
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/buttonmap.cfg.bak
- SHA256 ed7051c7de118b679c5e0212f701f6206cb7e902fac9d92fac14ca95b20d82dd
- MD5 5f9b49b249984644f0c6b028fc81cb15
- SHA1 d179db9f743a02e9e6022633860b66c728f3db76
- SHA512 3109a8d0497933260630649b8b81a03372daddac60490cfd34e4be8ea252367991e43aed9fe16f3c9527d3030fdcb8c03a0624604d7e874c28c0f69781ab15fa
- TLSH T18BC08C15C98EC02E2EA7B52BEB39E11BB04868888B1318D0709DB0882144EBF08C70AD
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/gameaudio.dat
- SHA256 c376550eee6c580a913b1e17e33ff3c4bf7f5ba77f219a9f19974264332eca5a
- MD5 b269f9994ccffbdc0b38235790c211d1
- SHA1 48aeba418af2d8e273ef8152b1683d681e3eb27a
- SHA512 c8a6bc517f0b8a3187549fb7c43153ab0214173817f1992efc7f8130d122efe5b6a1a4e4c7a1d5650522ae5de93e9009e50c9b42d447bb9475e4e98c9f5803c6
- SSDEEP 3145728:vPdzn/k1NbKbLuEP8+gTzkuId2UNelcyK1GpFc:t2E0+WSNOcj1Iy
- TLSH T1CC78E1A2BB96C977C09C2139845687FC2250FE2181E59E0B7BCD5F9FD80B6C49D7AE10
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/gamedata.dat
- SHA256 a640f9b44244f52f53896299ffdd77d974c85831073579ff88d1f5dea40ebeef
- MD5 dea55a3493d684f615940b1f0fdfd7de
- SHA1 df2d64ae9eb1123204afc8ab1d07f31c4047b795
- SHA512 12085e750eba50c25c7ed642e2a283015f6faa4b7f6ad158f74f52ca816279419f626ffa5250e98dcf7e0ac3b033a5770ccb096abe64fba983e29bc54caac11f
- SSDEEP 786432:vK3Pho9nKCS/CtxkWUVMMDkp++iWDeXn7dHbrOIYkF7v8mX+xArCHR:vKp6K/4aPTD4Fi7A+7GxArA
- TLSH T10F287C3793A1B99AC4223E36486BDEDC8D63ED14496822F371B0773E7CF9711AA72054
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/installscript.vdf
- SHA256 0fcf97a09d6dedce10e5e3b2941cc6f12bcedd777cb63b8fb4569f4e6fd70050
- MD5 f853d8a8314c6428bb1a9f6d0eb0dd9d
- SHA1 7d0a6da3e1865793d893fd6d094bdd2f94ac8897
- SHA512 02b8503d433ccb90c2c5264dcc6cbc0859db1292b645f8685e6308a1bc248acc92b8bb6e98b50781d8116ff2c3bd5e196a672ba3ef800ac04e684394b8df871f
- TLSH T15C11AD2BBB5D90A922E510EF4B75BECF6C8DC504166C04E9C892049BC538E211AACE72
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/locdb.txt
- SHA256 5b3b040ea2ee48e3997021a4645530771400373b3a69a43d6f7fec029c562b7e
- MD5 cc8c93f95afdd9eabf6e9f0432cfeb97
- SHA1 1e2585d8e50def0005395309c09ee7287c1f09b6
- SHA512 c4a2641ef5053d762ca8996753d5c1cbe39c53c7edb5cd3fd8cd1fa0be80fcb86e7a327fa1cedc8d79d41c30687b9033be5349f7409c494d05aa1948c0e072ec
- SSDEEP 3072:QG9tBqIvHdlSSRwNNCt7mF1FfitJDaxbRvKIhmcZstKqqqqqqqqqqq1:XppyI
- TLSH T174F31E1163FA6208F6F3BF446EB852954F7ABDA2AD39CC5E1240554E09B0E91F970B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/pixel.cache
- SHA256 1651e3e89ac6161f5b84eb271ab39f96907c097a8db84dff2cb90d9b4e450233
- MD5 c4da6798624bbf149ad08b0f7bacd9bf
- SHA1 c8a10ba1cd5b40c2f790de8ff88c57536a812fbd
- SHA512 3c8e9d2faee68b4fe68525165e5381c86183a4c447962ecc2a1e191ff802140733f525899bfaea6cb9e0bf3a73b2deab866b958def8903d46142e419a6bd0cbe
- MD5 SHA1 SHA512
Super Meat Boy Jack O'Lantern/resources/Fonts/Chinese.fnt
- SHA256 9702199cfb482352ae460bfb3eea2232734b44da3b22496ed9ee92cfc4a4d34c
- MD5 8c170f204a2d4bdbfce827315076efa9
- SHA1 eae0f5ae667fe6c83c01153a5c1c0929abaa2a49
- SHA512 34232adc99480ce2ec841cb704997837f34607e706b865509f78b9381c43b18b5868eebba73ba324d84671692a6d81f5f581191ce60f4c72424e8ad220e1638a
- SSDEEP 192:lphtNkxROH0t/pD12kS9KD5qefsb+tVIg2CQdOcq8csARs335s:wD5xyOJU+Du6IASG
- TLSH T1BB5277CB8A4FCA23E110B2755AEAE2D3972E76472E075B2771D1133E2C207A1B7519DC
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/resources/Fonts/Chinese_0.png
- SHA256 f6978258f3cab7a1fbb2113c449861babddc0076a19e33e6c87e82664e7e64c8
- MD5 e20f6468a6b1a63bd7c9647969e32d04
- SHA1 0b46e53f47ed0149d6fae516a1de6d56b1aeb5ca
- SHA512 9419c718b0ddd1c5ec72298e32d635be161b5e75fb7eea615ba58936dc56898ac7ad5ec24ab549e0a3d0517d73aaab99e12e88c23ae2685d34536d645a95403c
- SSDEEP 24576:boMx7J1pRo2II5dl0TETGLfg4aF7N3yAqqXS1:J1pRokJvGY77bPXS1
- TLSH T1DF15F1C5F5A5584BFF3F3034B80AED48D9FA2005445ED47420ABB584AE4BBB61335BAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/resources/Fonts/Chinese_1.png
- SHA256 f20e2f5800a83e0588f15e92c0f6fde7be3144e5b296c581f6c59c5242a4b1ca
- MD5 2c3b2cff6c245331bd7bddec2e9deb79
- SHA1 f27caebc2705255ea5e07b9a9a3436025a71456c
- SHA512 99dacac773d2a8675aa135921246452d4de550fe6d02e35393ed93ce5ee27d9f31273bb80e4379ce56b4dc021673154cf1b243b66c5218b2fcba764bd5f46486
- SSDEEP 96:yG4711Z7Xq4P1F33BQ4zsJfN9OvzEEwr9dQymBHAyItqnWhaC3BFe0g:M711xzz3BQJNIzIr9dQDSyUdhaaF2
- TLSH T1F5F1B04FCF1F3431FA6291BB4C90E86614B09038DFD36B81677D792AFB48342D996249
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/resources/Fonts/EFIGS.fnt
- SHA256 19af8d7eb698bb72a6518f0168e6f377bba9edc15e652b712b2236ca5a2111dd
- MD5 e54a49dae310c422f50c2925aea92e85
- SHA1 2e59d90d2193e7f4f477b6acb935bc0e1c7a1bc6
- SHA512 1434ddc6a1ab704f7a167b8173de77a612e19cae481d24f66cb05c0a705c6a2ca64592fa42be72af6e763ca4307675a6d6d28f07925e8280dbd322b068f9d26f
- TLSH T1C78188D0940FBE0ED91A6FF1CB819FD449A07607569DAE2756C3FCADE5606020A1B3E0
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/resources/Fonts/EFIGS_0.png
- SHA256 858bd977d8956a80ade326bfa2013b5f132bb9f6710dfef5177bce344bdbc851
- MD5 138830d94b9942169edd895768502750
- SHA1 d544de570108299c424f4a705452c15857dc46b6
- SHA512 b448b18439951185aeffe617334b42bc289460b09085a0b33c0fd29d2622f85139a47de09af673f81745e370b13d866632b0b5600ca2e5cc1123c77d80b3e3eb
- SSDEEP 192:4KdDLVqSwBmqKoWJF3+6XavC2uFXmeXEfmF5LM:BBLV+Bmq/yF5HP/DLM
- TLSH T1DCE18D4B8B18E8E2CCA42775854F9E974DF3712E0B563609B91D88AF3968781157258C
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/resources/Fonts/Japanese.fnt
- SHA256 f1ce2be024c406c1c6bf8b53737debedf29dd5d186c2819bfae0a9ddfeb9de13
- MD5 27629dbd97104a1f081400a1802b0bdf
- SHA1 68bee9e939052d1993d11df8b63ffcf74015f99b
- SHA512 77ab94d9f55f9a030df37daff7cea4b308698ae7899a93bb86df22a27c2613ca8a4689388482d18f04fb675e219eff903a2ab6d0d7626b7b623447789947b4b3
- SSDEEP 192:X+gezL3WxVp//EVfT7UjM6WihnGMzYAz5SyfKUzAWKi655FB/+iKWLWTRGYkRS:PaLA/8V6htz5z5jfz8B/+iKkWTRGTo
- TLSH T1E5528729FD836433D8A478E79C63F6B684A31F5B2DD1A035B2CC6F3097927451E8B215
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/resources/Fonts/Japanese_0.png
- SHA256 6cca443e9ff88c32fa1fd146803cf6d7f58f36bf322a0039115ea074b77770f1
- MD5 abe8c95a2f76cebc8c9c2e01c36a7332
- SHA1 d7ae2c3734cecee0bfc9daa87a5ef7767973ea19
- SHA512 0e20a035a632d873fe0c13109bee5776b2af2ca172e81eb57aef627a63f6c12a506db32498ad2de331d587df84ac320d0322c8da6c754d1e630ca82db48720aa
- SSDEEP 12288:xvP4T9tw+QIMtV+FFVoHMWGfccahjTw/PCV8TvgtgoWPeQUSst:AzUx64spfcLh+m8FGS8
- TLSH T1D7C4F1C4D5E5884BDB3F3074B80BEE98DAF6200A445DE8F465ABB0916A867761031FDF
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/resources/Fonts/Korean.fnt
- SHA256 8b0fb716c39794ff5e562aac05af9e60bcfb299591572ce7b6f59f2be7a4f6be
- MD5 ba95677efb8e96d29f337ade0dc6c1d9
- SHA1 fc5f62674de3d30ba14126d50d32274d766b951f
- SHA512 1c0c3a52543d197465d649acc9b2f252886bb5f3d5e68aa2d741493431b0eabe1141eee10fb2792e6557e168b3a73eee80fd53647de03aafe9e2f73f3485ee73
- SSDEEP 192:5L5bG4WCKhLUSVcP3wbaE8sLjmeWLEyvLeJkK:5047Kh83waEXLjTtyjeN
- TLSH T1EE22EDF79702CD42C88095FB87148BDFE7E6F64A27128B1B66C0E57F7E001A96188D39
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/resources/Fonts/Korean_0.png
- SHA256 f9ea78304c979a73dbd9a240be66da4be4cff71def224cfc7c0101a8c0013b9e
- MD5 aba2de357ef78c958f4beee5c87f8c8c
- SHA1 28b19f356703739e86951e9ed70822f7086856d1
- SHA512 ab28fae9b331cc3d4c7d9e2e818af8921203bb22a93c950782f6c9e72d21a9f50f81faa0da49cfc699243fa2ed75c95799a7249227781b32adde18abcb47e808
- SSDEEP 6144:+/B/kHJ6eUV5GHzESO5Y67XcpN+dWZURxrD/3eopTt6SCFtxJDOK8N3:IB/ExYYzkV7X0ycUvrD/eoLAFtxJDOL
- TLSH T19194F1C4B19A185BFB7F2134AC0EDD58D9F62092804D94B064EABC44AE8B7761335F9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/resources/Fonts/Korean_1.png
- SHA256 0cf997d53e83fbab7b961df134e4a7038c04d7e7f48cc275d2e21ce2c54f85a0
- MD5 4a62add58515c055f96b200a7002c856
- SHA1 35a6b76d34055f634f71fcf1afe098aaebfe4871
- SHA512 ed6cb8542063ef6f0c8a7e61e0a4adc2dd25ba405c415b2ba350922e4913974ef5a617c8a16190964231342606b6ec382ef39fa3023b4404661ed4523b5455f5
- SSDEEP 96:61YGUmw+SVl5Sxx0y0eIMcPd+GNyLVmc7mDn0s:61v7HUlgbopMcV+tVp7mD0s
- TLSH T1E1A16B8D01249999F3AA557FD1D9C3AD0B8D4C2FA79FC23F2B8AD67099002031283DE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/resources/Fonts/Russian.fnt
- SHA256 613a7299e31b632500cfc41bf1d4d0c3ae2d19e895c600035f5d9a43c2cc9fcf
- MD5 2dda747afbd56d6fae23edf05d560b25
- SHA1 a9a32e4de60558003be802a05afac023b53c1aaf
- SHA512 fe68cbbd798aef58335cd08e1afb1fe64794d1d91276d45c1329bbc802ec8496d4b4dae7ad076e447554e4c94c00b4d17042fdbc7b579bcc91290ec4b9954e82
- SSDEEP 192:8yi1+Sqr5uBhxzTL9+YnlwVImHs6+WS/lLWSh470/phkueJqB8yi:hbSS5uBhxzTp+Yn+VImHsmSZPPkxJqB8
- TLSH T1A0F197D16E1B310ACD381BFEEBA48FC01518B25A8B4E1D8B85D3FD95E0823461B133DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/resources/Fonts/Russian_0.png
- SHA256 723d6c26f78fc99862ab4cd2949feb8707f67982fe8f52cbef7820fa6a32f05b
- MD5 3ce8106a594eabae9f583648349e9642
- SHA1 e95de4e495b2f81f6803a594e59567699fea464f
- SHA512 e1699b4ff2ffac430d44f1facf8e98c6171c826767dfd93c8bbf1b27fa68e2e1fc052ffa5706ec34c22b0a0aec33bcd58d0ae7f0703221c56e293f48157b0bbc
- SSDEEP 192:wnjGIXiA55tMsmuiGAyxf4nmPMHz4p+2cXIv313G8jcpCdzZjO52vVrRKgSky:uiqp+GAy+ms4E2c4vplIyjZpQ
- TLSH T18832B0932256D324D5AFE17A0CF9291F61231EE5B00755A3FF26A0E12E0D71B7074F4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/resources/Shaders/ShaderMacros.h
- SHA256 b369ac742bdf93c0df9c34e9a3976a1c4d4dc3f5b668726e5ff86a4cb23d72e9
- MD5 fa26f788464e137681d264580150511f
- SHA1 f396c36658903be768d0fcb0775ddb34891f199d
- SHA512 03f7f2358411d73a4828622348b9b6fa0d36354beae6e40fcd2107df7741f4efe0e99034400f4d1bd3252b66bac5aed0a3fc3881ac50a283e1bfc2df8d2ead29
- SSDEEP 96:3hcSL+mYfqmXmGR9loluwlGOldlRlCl2plYlTl9AlVlcl0lpglwlmwlOOl1lZlak:RNLs3R9lolll5ldlRlCl2plYlTlGlVl1
- TLSH T12791836A8298ED038D8F17842D3A15F12F46FEC346B876CD598A70F9144F46FC9E4AD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/resources/Shaders/psshaders.frags
- SHA256 7bd537adc2c040bd7f697eb45b47cee0ef1682bb5aca47037e11020d487c4de3
- MD5 2dbd30ff30fff353e47ce7327c829af7
- SHA1 b80a668be20b929f79145de5dc64cf34f1a5e188
- SHA512 81baedef371bd617d6e4451e6711b113d1dd6338ba6332eabad70a59cc72ed035c6c6568dc0cfce8e675082c1e6dae8edbd92c52b726e5dcecc22f91a3e2f552
- TLSH T101413AEFB0DB95550B67F9CE9FF2464955433AD1E8A26B70E8CE0A74C0E547D44081B8
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/resources/Shaders/psshaders.psh
- SHA256 e027eafbf9a99b0dbb7df1bf06cf7737fa3c247c83d6ad83c121ea80ebd430a8
- MD5 4cb869a87b4be8726aa16204bed5ca09
- SHA1 5c7ce4eb66f32f89f0e72bf922812453f971ac8f
- SHA512 ff9ec634d73207129cdbe94a40dde79d9f27607a1417a114eb037929a83680bed10f1d7d7fcc2bbfcb2200879553764f90a5e6723c45e9d11524e875c1da46f5
- SSDEEP 192:PjoXPEiayBsQxvW+D9o8Nry6EMcUEXQpwcvOzTN/979fgrdvlz9fTs086H3HJ643:7oXMyGc+Ae0WzMcUEXKwcmzTN/979fgr
- TLSH T1B5D105E7B8DE4C108EA770CF6B92468E51333FE8C8867B9310DD50B4A0F5D9E56849DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Super Meat Boy Jack O'Lantern/resources/Shaders/vsshaders.frags
- SHA256 c80253b91d4c4450fbab2a21cfd73c9e9c0be171844589a3e08a5b7ca135d785
- MD5 139628b4fffe90738ca517716c801a22
- SHA1 a6c5f0407f89c0759f6496a36b734138216f6701
- SHA512 eae2cf93391374c98b4ddbf968a6da05334c9804ae09822832400a9cb7da058e59e3208bd7c7a5b1aa44b0e40b7e879893a8dd68dec91bea8739a56190b3d16a
- TLSH T1D9216A273834847A1E52A09ECFD10A24BE1EECE804B654B2F86F14D329C506F136DFDA
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/resources/Shaders/vsshaders.vsh
- SHA256 17f67cc679b813d0b01b8a8ef5e8565d3914818cf5e98594cdbe1ba71b98ad40
- MD5 12a297a7fd98da57aaf57ae098933218
- SHA1 1a46c1b28735a7523a9e8caa8eb47d7dc7d70eec
- SHA512 6a026595d43ea4a52f13d9715cdd734f44953e290963c39e6e608f255b48bb319f0d460db5efcca2939c3758b3d5e9bf90bbf3436298093e7e353a697daf2aa5
- TLSH T179412600313E3C026FCD669A8F55B5BFA911CD5D81F49F92688DECF3C64214B4A8DD8A
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/resources/Textures/editoricons.tp
- SHA256 7d64bfbb153e794610fefc17e9a5db6105047db65f6765363a5490e9be80cb32
- MD5 c3ac61fde760de632517e485b6e564e7
- SHA1 cc08677027516df732923de753f21ef8f1337b8a
- SHA512 5576e86f05a1ae2afd1111a481147f776768619381d6f79e5cc24b8a969970132a4de39db04b01f234da8024e05299f40ecc98a5dbc2396381e8cffe53486ea7
- TLSH T1A03121CF5361097A88BB14F3288780287DFB8A8C1C67B89AD90A55264E753157B61307
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/steam_api.dll
- IMPHASH 3b5489cdddf611c533449f3176295fe1
- SHA256 e5e0d00a93b81c7346c0799c32121c148aa1645e03716a6ba31229a4de6f7024
- MD5 1c096d808c768359c69e9819cc3d742d
- SHA1 a3d5d4a4eeb1080e2c9fa17dcbad759de2a29530
- SHA512 92aa242d574d7f34fbbc24096f1ee60872a376cac47fa1828753289943ae5d444f1e8c17e937d2d59fccc41fafeac8261f66a9dd2836b5e109365873316bf90a
- SSDEEP 1536:KF0pSokjb97B+kcYUWVUGPbxEEHZ+J52OaoFb:KFuC97B8FJ5faU
- TLSH T190737C6231B4D1F6C09FD2790856C707677AB1618BF688C77F560ACE9D622C0AB3B346
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
24492
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetFileAttributesW
GetModuleFileNameW
DeleteFileW
GetPrivateProfileStructW
GetTickCount
GetLastError
WritePrivateProfileStructW
GetCurrentDirectoryW
GetPrivateProfileStringW
CreateDirectoryW
FindClose
ReadFile
GetFileSize
CreateFileW
CloseHandle
FindNextFileW
FindFirstFileW
WriteFile
GetFileTime
DeleteFileA
FlushFileBuffers
CreateFileA
WideCharToMultiByte
GetSystemTimeAsFileTime
MultiByteToWideChar
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
RaiseException
ExitProcess
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
LoadLibraryA
InitializeCriticalSection
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
user32
MessageBoxA
shell32
SHGetSpecialFolderPathW
GetHSteamPipe
GetHSteamUser
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_Init
SteamAPI_InitSafe
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamAPI_SetBreakpadAppID
SteamAPI_SetMiniDumpComment
SteamAPI_SetTryCatchCallbacks
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_UseBreakpadCrashHandler
SteamAPI_WriteMiniDump
SteamApps
SteamClient
SteamContentServer
SteamContentServerUtils
SteamContentServer_Init
SteamContentServer_RunCallbacks
SteamContentServer_Shutdown
SteamFriends
SteamGameServer
SteamGameServerApps
SteamGameServerNetworking
SteamGameServerStats
SteamGameServerUtils
SteamGameServer_BSecure
SteamGameServer_GetHSteamPipe
SteamGameServer_GetHSteamUser
SteamGameServer_GetIPCCallCount
SteamGameServer_GetSteamID
SteamGameServer_Init
SteamGameServer_InitSafe
SteamGameServer_RunCallbacks
SteamGameServer_Shutdown
SteamHTTP
SteamMasterServerUpdater
SteamMatchmaking
SteamMatchmakingServers
SteamNetworking
SteamRemoteStorage
SteamScreenshots
SteamUser
SteamUserStats
SteamUtils
Steam_GetHSteamUserCurrent
Steam_RegisterInterfaceFuncs
Steam_RunCallbacks
g_pSteamClientGameServer
Name
.text
Size
63KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=125, productName=VS2005 build 50727, version=50727,
count=44, id=110, productName=VS2005 build 50727, version=50727,
count=103, id=109, productName=VS2005 build 50727, version=50727,
count=7, id=123, productName=VS2005 build 50727, version=50727,
count=104, id=1, productName=Unmarked objects,
count=4, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Super Meat Boy Jack O'Lantern/steam_appid.txt
- SHA256 d0f718abb62c271e6665a0510f571f9c908e5e3239a3acb51430a43b1569dc9d
- MD5 d752136587ea829e1f5c07ceb23dc72c
- SHA1 f5c9b3db91669fd5f9760c1c039aad7d995894ca
- SHA512 fc3edb2b9fdd6e94351190564e6f25270b6b47b3526a200387f2017476b9bb2aa5c1efdde7691163a3ab78e161567e329cd6174b1f8cae6a8b63ebdb8a075603
- MD5 SHA1 SHA512
Super Meat Boy Jack O'Lantern/steam_rld.ini
- SHA256 bc7c8f832886db166c191eb76d570db11dbb8789f993d62c44195a257bf44567
- MD5 30f12a9f25f59790e722eabc27895054
- SHA1 398c17a2fd896c8b3a6bcfff1ce23dcdc45f44af
- SHA512 b3d89a3d59dca42886a9b68f68ed44fbc507371bed5eccc9e60664f961000629dbcc9b4ab0e154133cc81dc30c452e55a849e67ee6618822ad1ab30e71f18382
- TLSH T15E01814103E331746727467922527852E1E5D0743E776D7C716CCACC79B2752D22150D
- MD5 SHA1 SHA512 TLSH
Super Meat Boy Jack O'Lantern/vertex.cache
- SHA256 8183703c7790a64d2e23cb508d3ede04090b2b5cc6ae87d9d66479db48f4c43e
- MD5 b949f117302b615be49f6d1bae4b7dc1
- SHA1 7aa7fbee457c6d4e4ff49a7825171626ef4d4dbf
- SHA512 f4d03aa9f7110927a48365cc5bb67f34a456204f3ebf0927b05ce89e23b383faa7aa96960ce1b3ae3663ce503ac633ef4335dbec49380176172246aa16d51fa8
- MD5 SHA1 SHA512