PCRemoteReceiverSetup_7_8_1[.]exe

resource
unpack001/avcodec-59.dll
unpack001/avutil-57.dll
unpack001/swscale-6.dll
unpack001/avcodec-59.dll
unpack001/avutil-57.dll
unpack001/swscale-6.dll
unpack001/avformat-59.dll
unpack001/swresample-4.dll
unpack001/swscale-6.dll
unpack001/avcodec-59.dll
unpack001/avutil-57.dll
unpack001/swscale-6.dll
unpack001/swresample-4.dll

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/NSISdl.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/7z.dll
unpack001/SDL2.dll
unpack001/SDL2_image.dll
unpack001/avcodec-59.dll
unpack001/avformat-59.dll
unpack001/avutil-57.dll
unpack001/driver/usbmmidd_v2/deviceinstaller64.exe
unpack001/driver/usbmmidd_v2/x64/usbmmIdd.dll
unpack001/libjpeg-9.dll
unpack001/libpng16-16.dll
unpack001/libtiff-5.dll
unpack001/libwebp-7.dll
unpack001/swresample-4.dll
unpack001/swscale-6.dll
unpack001/zlib1.dll

resource
unpack001/driver/legacy/vJoy/WdfCoinstaller01009.dll
unpack001/driver/legacy/vJoy/hidkmdf.sys
unpack001/driver/legacy/vJoy/vJoy.sys

PCRemoteReceiverSetup_7_8_1.exe

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 30b0299ab64ab5ca9e8319fd305921d84edfc2c53b0477297f5f3a21c509b599
MD5 014e761e7539ea0414e6880ff8985509
SHA1 6e7b0cf7b6f45a3a8009d0cb1e4e3d3d389c517e
SHA512 d44537df660e7cc00de4d5e2381e0f596613d186e0c440fe35ffccd4788c12ad49d1393ee12e0bda07c26b70667d1baabea5eee74b1a68aeb0e2f91c229a3e23
SSDEEP 1572864:+/SOr9D2YYvt8/7Z9lRA9lg5yJQh++JDMvrvHC5sY8tYtht/tyL/t6rRYyjvZX:+/SW9DoFE3lKYgJUD+rv8/ruyjv1
TLSH
T14CF733EDB5C4EA38C26A94BECFEA5C152A3D045586F15A72CBB4CBA74C379C205ED04C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

62:8d:60:ff:ef:d2:98:62:6d:d1:b0:79:d2:b0:1a:04:5a:cb:50:e8:96:a5:0b:64:6e:89:5b:70:39:9b:0f:eb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 17, 2025

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

43:52:15:04:9b:64:6e:84:37:81:b8:f3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 4, 2024 - Dec 5, 2025

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

4

Entry point

13650

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

$PLUGINSDIR/InstallOptions.dll

IMPHASH 85f08eb0cbec010ecbc287fa68321173
SHA256 89dd7d646278d8bfc41d5446bdc348b9a9afaa832abf02c1396272bb7ac7262a
MD5 d1eefb07abc2577dfb92eb2e95a975e4
SHA1 0584c2b1807bc3bd10d4b60d2d23eeb0e6832ca2
SHA512 eaffd9940b1df59e95e2adb79b3b6415fff5bf196ebea5fe625a6c52e552a00b44d985a36a8dd9eb33eba2425ffea4244ed07a75d87284ff51ec9f9a5e1ac65e
SSDEEP 192:E6GQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT311929WtshLAzgSrX8:E6Nt+4t7uJalUnGesY7Lt8nC3/Yosa
TLSH
T186624D1137D598B3E2E62A797EF377138FA5F722A4428E0BC7332E4678565805D78311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryW GetCurrentDirectoryW GlobalUnlock GlobalLock GetModuleHandleW CloseHandle SetEndOfFile GetPrivateProfileIntW SetFilePointer MultiByteToWideChar ReadFile GetFileSize CreateFileW lstrcmpiW GetPrivateProfileStringW lstrcatW lstrcpynW WritePrivateProfileStringW lstrlenW lstrcpyW GlobalFree WriteFile GlobalAlloc

user32

PtInRect LoadCursorW GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard GetClientRect SetWindowRgn LoadIconW LoadImageW SetWindowLongW CreateWindowExW MapDialogRect SetWindowPos GetWindowRect CreateDialogParamW ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW SetCursor DrawTextW GetWindowLongW DrawFocusRect CallWindowProcW PostMessageW MessageBoxW GetSysColor CharNextW wsprintfW GetWindowTextW SetWindowTextW SendMessageW MapWindowPoints

gdi32

SetTextColor CreateCompatibleDC GetObjectW GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderW SHGetDesktopFolder SHGetPathFromIDListW ShellExecuteW

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/LangDLL.dll

IMPHASH fe3375e7e4529b73ba45ab2246b9269b
SHA256 131aa0df90c08dce2eecee46cce8759e9afff04bf15b7b0002c2a53ae5e92c36
MD5 549ee11198143574f4d9953198a09fe8
SHA1 2e89ba5f30e1c1c4ce517f28ec1505294bb6c4c1
SHA512 0fb4cea4fd320381fe50c52d1c198261f0347d6dcee857917169fcc3e2083ed4933beff708e81d816787195cca050f3f5f9c5ac9cc7f781831b028ef5714bec8
SSDEEP 48:S46+/sTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8mWofjLl:z+uPbO5tCZBVEAWyMEFv2Cm9L
TLSH
T1D5C1A370B3D248B9C591413778AB33D36612AE747784504FDB6311AA3820AE7AD3EBC2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/NSISdl.dll

IMPHASH db80d5e142e716e818b7f4614dcade3c
SHA256 c0047d34ff3590f99aa3a6ca6383ad683980fd762dc4849a2682ef30908b8e74
MD5 3a162f7c6dac6d48aef620d4098750e4
SHA1 aee0464d7d202d694ce6929ad6a70d54c2d31a5a
SHA512 cad64bc47b734e65ca29ad288c37bf9230df55589f57fe0dfa9cba94ad7d9d67bb27bab05c424f45f724cfcbb0c3a0c59707977effc2065c867ea9488884757e
SSDEEP 384:hrSQMCOUILnCaSPy/yhJzmGSMRWyOUKiX:hrSQMCOp0yamMRWysiX
TLSH
T17D623C56B62084F5CBB2167034D73B3E6BB28F6A1A2848C24BF35C4EDE52307B675D85
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9321

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
MD5 192639861e3dc2dc5c08bb8f8c7260d5
SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
TLSH
T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
TLSH
T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

7z.dll

IMPHASH 7eebc574882853097d054cbf11b75a0f
SHA256 882063948d675ee41b5ae68db3e84879350ec81cf88d15b9babf2fa08e332863
MD5 c4aabd70dc28c9516809b775a30fdd3f
SHA1 43804fa264bf00ece1ee23468c309bc1be7c66de
SHA512 5a88ec6714c4f78b061aed2f2f9c23e7b69596c1185fcb4b21b4c20c84b262667225cc3f380d6e31a47f54a16dc06e4d6ad82cfca7f499450287164c187cec51
SSDEEP 24576:tL9NgP+4hcdTDeM1EF7Jx2meoI4Tzp7iyeNgzd6Nv7:x9NgPjM1E7JPx+ye5
TLSH
T1DE953C5AF6748270D0B6C079C5E2AB9AEE7134868730A6CB12859B3D3F17BF5C539321
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1288320

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

oleaut32

SysStringLen VariantClear VariantCopy SysAllocString SysAllocStringByteLen SysFreeString SysAllocStringLen

user32

CharUpperW CharPrevExA

advapi32

SystemFunction036

msvcrt

_purecall memset free malloc strlen strchr wcscmp strcmp memmove __CxxFrameHandler _CxxThrowException memcpy memcmp realloc __C_specific_handler _beginthreadex ??1type_info@@UEAA@XZ ?terminate@@YAXXZ __dllonexit _onexit _initterm strstr

kernel32

InitializeCriticalSection ReleaseSemaphore CreateSemaphoreW ResetEvent Sleep CreateEventW SetThreadAffinityMask ResumeThread WaitForSingleObject SetEvent GetCurrentDirectoryW IsProcessorFeaturePresent GetLargePageMinimum VirtualFree VirtualAlloc QueryPerformanceCounter GetOEMCP DeleteCriticalSection LocalFileTimeToFileTime WaitForMultipleObjects LeaveCriticalSection EnterCriticalSection GetSystemTimeAsFileTime FileTimeToDosDateTime DosDateTimeToFileTime GlobalMemoryStatusEx GetSystemInfo GetCurrentProcess GetProcessAffinityMask FileTimeToLocalFileTime FileTimeToSystemTime CompareFileTime WriteFile ReadFile GetLastError MultiByteToWideChar WideCharToMultiByte CloseHandle SetFileTime CreateFileW SetFileAttributesW CreateDirectoryW DeleteFileW GetTempPathW SetLastError GetCurrentProcessId GetTickCount GetCurrentThreadId GetFileInformationByHandle FindClose FindFirstFileW FindFirstStreamW FindNextStreamW GetFileAttributesW

MVCameraDriver.dll

IMPHASH fcf21f84155354d4c94b56c7f8bc039a
SHA256 23f8e0f4fe011eedffc8106e307665c528c5cf6fabf5e9cb5c4ca6114c8c6896
MD5 835311dae32077b666a558fffd7eaffe
SHA1 a649447afb2c02c664a9f0cf8a795f1a99d1e7ae
SHA512 7bd59979e6a31f3457f9d11cf01f8cf9e27c74f216ac9235054f62bc5733c602127a47a4dfc0de9936e412375a63c8b7e70f3260c122443b467140e82d0da5ee
SSDEEP 3072:pFQ/OdnzngYosOq8G6TTIL84zpZw4Yaflx2Q:pF2Odnysw4zpZw4Y0x
TLSH
T1FCC35B233AA045EAD56F913E94934946E771B0A01BB14BCF3232835F1F23BD49EB8759
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

21:6b:21:82:a1:26:72:5e:fd:54:98:21:45:41:78:46:e0:0a:20:eb:d2:aa:c4:56:cd:fb:52:92:35:d7:eb:d9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 17, 2025

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

43:52:15:04:9b:64:6e:84:37:81:b8:f3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 4, 2024 - Dec 5, 2025

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

57348

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\monec\workspace\Monect_host\x64\Release\MVCameraDriver.pdb

mfplat

MFCreateStreamDescriptor MFCreateVideoSampleAllocatorEx MFCreateAttributes MFCreatePresentationDescriptor MFCreateEventQueue MFCreateMediaType MFGetSystemTime

mfsensorgroup

MFCreateSensorProfile MFCreateSensorProfileCollection

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection AcquireSRWLockExclusive CreateSemaphoreExW OpenEventW ReleaseMutex ReleaseSemaphore InitializeCriticalSection EnterCriticalSection ReleaseSRWLockExclusive CreateMutexExW OpenSemaphoreW WaitForSingleObjectEx OpenMutexW WaitForSingleObject DeleteCriticalSection

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess TerminateProcess GetCurrentThreadId GetCurrentProcessId

api-ms-win-core-namedpipe-l1-1-0

WaitNamedPipeW SetNamedPipeHandleState

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError GetLastError

api-ms-win-core-heap-l1-1-0

GetProcessHeap HeapFree HeapAlloc

api-ms-win-core-file-l1-1-0

WriteFile CreateFileW

api-ms-win-core-debug-l1-1-0

DebugBreak IsDebuggerPresent OutputDebugStringW

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-memory-l1-1-0

OpenFileMappingW UnmapViewOfFile MapViewOfFile

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW GetModuleFileNameA GetModuleHandleW GetProcAddress

api-ms-win-core-com-l1-1-0

PropVariantClear CoTaskMemAlloc CoCreateFreeThreadedMarshaler CoTaskMemFree

api-ms-win-core-largeinteger-l1-1-0

MulDiv

user32

DrawTextW FillRect

gdi32

CreateDIBSection GetDeviceCaps CreateFontIndirectW SelectObject DeleteObject DeleteDC GetStockObject SetBkMode SetTextColor CreateCompatibleDC

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_purecall __std_exception_destroy memmove __std_terminate memset __std_type_info_destroy_list memcmp memcpy _CxxThrowException __C_specific_handler __std_exception_copy

api-ms-win-crt-heap-l1-1-0

calloc _callnewh free malloc

api-ms-win-crt-runtime-l1-1-0

_invoke_watson _invalid_parameter_noinfo _configure_narrow_argv _initterm_e _initterm _cexit _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table _initialize_narrow_environment abort _seh_filter_dll _errno

api-ms-win-crt-string-l1-1-0

iswspace wcscpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf __stdio_common_vswprintf_s __stdio_common_vsnprintf_s

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList InitializeSListHead

oleaut32

SetErrorInfo SysStringLen GetErrorInfo SysFreeString

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

MonectMediaCenter.exe

IMPHASH 8b9838460608055560e2f9ae3a370b77
SHA256 6b09ca55c28d7b466f6ea6e2c1e715775c5c56e9ae8a551fc9fd8a597e78a6fc
MD5 16eae6bb7d5934aafce8217e53755716
SHA1 e362132b03b53412e51f6f9fd9b8840b21398626
SHA512 45bd3d3f027572ae358cd7390806755669c2d1a9c19028354f5add850b392300f6d004031ef394676e64533f402155ef0aa2cd1c509fe67cf9e0fcd528d9ab47
SSDEEP 3072:aq27nhsD4rVOfMGqbX6vxMrUtmBgxEnQ:aqIQ4rVODqbX6vxMEmBsE
TLSH
T142E3BF95B65900E9D86E85BDCAE69407E7B070420BA06BEF1770D829CF37BD07D3921E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

29:46:ce:a5:db:41:f2:fe:36:41:2f:92:99:53:b7:92:20:d8:ea:07:6c:53:9e:bf:47:64:77:44:40:ea:be:ff

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 17, 2025

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

43:52:15:04:9b:64:6e:84:37:81:b8:f3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 4, 2024 - Dec 5, 2025

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

64680

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\monec\workspace\Monect_host\x64\Release\MonectMediaCenter.pdb

sdl2

SDL_SetWindowSize SDL_SetWindowFullscreen SDL_CondBroadcast SDL_WaitThread SDL_Delay SDL_CloseAudio SDL_CreateThread SDL_PauseAudio SDL_OpenAudio SDL_getenv SDL_AddTimer SDL_SetWindowPosition SDL_UnlockMutex SDL_CondSignal SDL_LockMutex SDL_Init SDL_CreateCond SDL_CreateMutex SDL_UpdateYUVTexture SDL_CreateTexture SDL_GetWindowSize SDL_GetWindowMaximumSize SDL_Quit SDL_CondWait SDL_DestroyRenderer SDL_PollEvent SDL_setenv SDL_SetHint SDL_GetWindowWMInfo SDL_CreateRenderer SDL_ShowCursor SDL_CreateWindow SDL_GetDesktopDisplayMode SDL_RenderPresent SDL_RenderClear SDL_PushEvent SDL_DestroyTexture SDL_RenderCopyEx SDL_QueryTexture SDL_RWFromMem SDL_memcpy SDL_PauseAudioDevice SDL_OpenAudioDevice SDL_memset SDL_GetError SDL_Log SDL_QueueAudio SDL_ClearQueuedAudio SDL_GetQueuedAudioSize SDL_CloseAudioDevice SDL_DestroyWindow

sdl2_image

IMG_LoadTexture IMG_LoadTexture_RW IMG_Quit IMG_Init

ws2_32

htonl ntohl closesocket ntohs bind WSAGetLastError getsockopt setsockopt WSAStartup socket listen accept WSARecv WSASend recvfrom sendto htons

shlwapi

StrCmpW PathFileExistsW StrRChrW

avcodec-59

av_packet_alloc av_packet_free av_packet_ref av_packet_unref av_parser_close av_parser_init av_parser_parse2 avcodec_alloc_context3 avcodec_close avcodec_find_decoder avcodec_free_context avcodec_open2 avcodec_parameters_to_context avcodec_receive_frame avcodec_send_packet

avutil-57

av_dict_get av_fast_malloc av_frame_alloc av_frame_free av_frame_unref av_free av_freep av_get_bytes_per_sample av_get_channel_layout_nb_channels av_get_default_channel_layout av_get_sample_fmt_name av_gettime av_image_alloc av_log av_log_set_callback av_malloc av_mallocz av_samples_get_buffer_size

swscale-6

sws_getCachedContext sws_scale

avformat-59

av_dump_format av_read_frame avformat_alloc_context avformat_close_input avformat_find_stream_info avformat_network_deinit avformat_open_input avformat_seek_file

swresample-4

swr_alloc_set_opts swr_convert swr_free swr_init

kernel32

FindClose CopyFileW SetFileAttributesW DeleteFileW RemoveDirectoryW GetModuleFileNameW LoadLibraryW GetComputerNameW CreateEventW ResetEvent SetEvent ReleaseMutex ExitProcess CreateMutexW GetFileSizeEx CreateFileMappingW MapViewOfFile UnmapViewOfFile FindResourceW GetModuleHandleW FindFirstFileW LockResource SizeofResource WideCharToMultiByte GetTickCount64 InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCommandLineW Sleep SetNamedPipeHandleState WaitNamedPipeW CreateFileW DisconnectNamedPipe FlushFileBuffers WaitForSingleObject WriteFile ReadFile HeapFree HeapAlloc GetProcessHeap ConnectNamedPipe GetLastError CreateNamedPipeW OutputDebugStringA GetProcAddress FindNextFileW InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CloseHandle LoadResource CreateThread

user32

ReleaseDC GetDC GetWindowLongPtrW CreateWindowExW RegisterClassW LoadCursorW SetWindowPos LoadIconW DefWindowProcW PostQuitMessage SetWindowLongPtrW ShowWindow UpdateLayeredWindow DispatchMessageW TranslateMessage GetMessageW UpdateWindow

gdi32

SelectObject CreateCompatibleBitmap CreateCompatibleDC DeleteDC DeleteObject GetDeviceCaps

advapi32

RegCreateKeyExW RegOpenKeyExW InitializeSecurityDescriptor SetSecurityDescriptorDacl RegCloseKey RegQueryInfoKeyW RegEnumValueW

shell32

CommandLineToArgvW ord165

ole32

CoInitialize

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

gdiplus

GdipCreateFromHDC GdipDrawLine GdipDeletePen GdipCreatePen1 GdipReleaseDC GdiplusShutdown GdipDeleteGraphics GdipCreateSolidFill GdiplusStartup GdipAlloc GdipFree GdipDeleteBrush GdipGraphicsClear GdipSetCompositingMode GdipFillRectangleI

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_copy __std_exception_destroy __C_specific_handler memcpy _CxxThrowException __current_exception __current_exception_context memset memmove

api-ms-win-crt-heap-l1-1-0

free _set_new_mode malloc _callnewh calloc

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode __stdio_common_vsnprintf_s __stdio_common_vswprintf_s __acrt_iob_func __stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

_beginthreadex terminate _configure_wide_argv _set_app_type _register_thread_local_exe_atexit_callback _c_exit _initialize_wide_environment _exit _initialize_onexit_table _seh_filter_exe _register_onexit_function _get_wide_winmain_command_line _initterm_e _initterm _endthreadex exit _invalid_parameter_noinfo _errno _crt_atexit _invoke_watson _cexit

api-ms-win-crt-string-l1-1-0

strcpy_s wcscat_s wcsnlen wcscpy_s

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-math-l1-1-0

__setusermatherr rint

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

MonectRuntimeCheck.exe

IMPHASH a4b941ee4cb98eb0b23eb0012f4e16b8
SHA256 84d0135bdd7b3e51d79ba0a799145bc9be78b4870e8b48d38722e45f6fc2af34
MD5 51279d9552fb2c254ab6fb3ecdf6a193
SHA1 9fac8bca5dced38d0451263dadced6b720f8997e
SHA512 f0bd92b9c14b1a9486ef5ae1d36cad0a3b9743835ee0a1f74b1ce376475ad46350af15c1fa33c77a97c8ae95c1eec639309a49a7a93d5ccc442a6fcf71ec71b7
SSDEEP 768:gn14UXdaG1+zAThzn9Sbh9SbPvNCr2lxVWV9+ka:8yUUQhnC4vNS6xQ
TLSH
T101C3A5439AEC3CC7C03897B073BB93D5D72EED95A0A2C10E96D00295D8BD5177A227D8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

15:71:31:e4:89:f6:ad:ea:3a:13:4c:85:c7:5c:c6:01:f9:d4:bf:e7:5f:53:be:42:e7:92:b1:af:7d:e6:42:3a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 17, 2025

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

43:52:15:04:9b:64:6e:84:37:81:b8:f3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 4, 2024 - Dec 5, 2025

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

7288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\monec\workspace\Monect_host\x64\Release\MonectRuntimeCheck.pdb

shlwapi

StrCmpW StrRChrW

kernel32

LoadLibraryW GetSystemDirectoryW CreateProcessW Sleep CloseHandle GetModuleFileNameW GetProcAddress FreeLibrary GetCurrentProcess TerminateProcess IsProcessorFeaturePresent RtlCaptureContext SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry GetCommandLineW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime GetModuleHandleW GetStartupInfoW IsDebuggerPresent InitializeSListHead

user32

MessageBoxW

advapi32

RegCreateKeyExW RegOpenKeyExW RegSetValueExW RegEnumValueW RegQueryInfoKeyW RegCloseKey

shell32

CommandLineToArgvW

vcruntime140

memset __current_exception_context memcpy __current_exception __C_specific_handler

api-ms-win-crt-string-l1-1-0

wcscpy_s wcsnlen

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vswprintf_s __p__commode

api-ms-win-crt-runtime-l1-1-0

_get_wide_winmain_command_line _cexit _c_exit _register_thread_local_exe_atexit_callback _exit _initialize_wide_environment _configure_wide_argv exit _initialize_onexit_table _register_onexit_function _crt_atexit terminate _initterm_e _invalid_parameter_noinfo _errno _initterm _set_app_type _seh_filter_exe

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

MonectServer.exe

IMPHASH d41314de41e38b5ce2364acb0c0c50eb
SHA256 ad8050604ac9222b179dae314127db229cd08a240fab9e1b62f32cf8bc644653
MD5 c80a4d6f6003c13818965046ca634f7b
SHA1 98c939088d1909351a5137b9372952ca885b1477
SHA512 11a537eeb72fe1de51c324ae2f809393cda83d3949103b9770fbf0b888019d68a826f92a1abd6b50c222fa33ba34d142ddb673cc409323c99aaaffe2575f6d13
SSDEEP 1536:62+yB0dN2Wl485dPcsHQvxmcmDwOrKCd6W4Q:67hl485GsHQ7mDwhCd54Q
TLSH
T126F37D4396EC3CC6D43893B473BB93D6D72DFC556692C08E52D00285EA7E5A33A227D8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

a7:87:e4:8b:14:15:a4:c9:f0:07:7b:a1:e2:05:34:90:5a:65:bd:6d:82:a5:33:b8:e1:e7:12:12:25:83:ab:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 17, 2025

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

43:52:15:04:9b:64:6e:84:37:81:b8:f3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 4, 2024 - Dec 5, 2025

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

35640

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\monec\workspace\Monect_host\x64\Release\MonectServer.pdb

shlwapi

ord12 StrCmpW StrRChrW

d3d11

D3D11CreateDevice

ws2_32

ntohl htonl ntohs

gdiplus

GdipBitmapLockBits GdipBitmapUnlockBits GdiplusShutdown GdipGetImagePixelFormat GdipCreateBitmapFromHBITMAP GdipCreateBitmapFromScan0 GdipGetImageHeight GdipGetImageWidth GdipSaveImageToStream GdipCloneImage GdipDisposeImage GdipAlloc GdipFree GdiplusStartup GdipGetImageEncodersSize GdipGetImageEncoders

kernel32

GetSystemTimeAsFileTime GetCurrentProcessId IsProcessorFeaturePresent TerminateProcess InitializeSListHead SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext IsDebuggerPresent GetStartupInfoW WaitForMultipleObjects Sleep GlobalSize QueryPerformanceFrequency QueryPerformanceCounter GetModuleHandleW GetCurrentProcess InitializeCriticalSection DeleteCriticalSection CloseHandle CreateThread CreateNamedPipeW GetLastError ConnectNamedPipe GetProcessHeap HeapAlloc HeapFree ReadFile WriteFile FlushFileBuffers DisconnectNamedPipe EnterCriticalSection LeaveCriticalSection CreateFileW WaitNamedPipeW SetNamedPipeHandleState GetModuleFileNameW LoadLibraryW LocalAlloc CreateEventW LocalFree ResetEvent WaitForSingleObject ExitProcess VerSetConditionMask VerifyVersionInfoW GetProcAddress SetEvent ReleaseMutex FreeLibrary GlobalAlloc GlobalLock GlobalUnlock GetCurrentThreadId CreateMutexW OpenFileMappingW MapViewOfFile UnmapViewOfFile

user32

SetDisplayConfig SetThreadDesktop GetMessageExtraInfo SendInput SetCursorPos OpenClipboard EmptyClipboard SetClipboardData CloseClipboard EnumDisplayMonitors GetMessageW UnhookWinEvent TranslateMessage DispatchMessageW OpenDesktopW ChangeDisplaySettingsW GetSystemMetrics GetCursorInfo GetDC ReleaseDC LoadCursorW CopyIcon GetIconInfo DestroyCursor EnumDisplayDevicesW GetMonitorInfoW EnumDisplaySettingsW PostThreadMessageW GetUserObjectInformationW OpenInputDesktop CloseDesktop SetWinEventHook

gdi32

CreateDIBSection DeleteObject SelectObject BitBlt DeleteDC CreateCompatibleDC

advapi32

InitializeSecurityDescriptor SetSecurityDescriptorDacl

ole32

CreateStreamOnHGlobal GetHGlobalFromStream

oleaut32

OleCreatePictureIndirect

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove memcpy _CxxThrowException __C_specific_handler __std_exception_destroy __std_exception_copy __std_terminate __current_exception_context memset __current_exception

api-ms-win-crt-heap-l1-1-0

_set_new_mode _callnewh malloc calloc free

api-ms-win-crt-runtime-l1-1-0

_errno _invalid_parameter_noinfo _invoke_watson terminate _crt_atexit _register_onexit_function _seh_filter_exe _set_app_type _initialize_onexit_table _configure_wide_argv _initialize_wide_environment _get_wide_winmain_command_line _initterm _initterm_e exit _exit _cexit _c_exit _register_thread_local_exe_atexit_callback

api-ms-win-crt-string-l1-1-0

wcscpy_s wcsnlen _wcsicmp

api-ms-win-crt-math-l1-1-0

ceilf __setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

MonectServerService.exe

IMPHASH 5be7fce7546789559ba3d33d90c7d8af
SHA256 4ad47150551ce94811c480fbb3ab9c088084624498897bd61cd399f98ad59bfd
MD5 8f1b1f56e95a5a5d5219c1a5193e7dd1
SHA1 a8899b6547930dcc152f7caa239ee17692acbb3b
SHA512 bbaf86f53fff3c1bddb9263884898fd2925eede307188116065dae09b7b1ddf08f30be96294fce3a24662164fbd744af3b3021348cc368830fdd70c771758c01
SSDEEP 49152:rFVwASOKGtlqgzIU6ibJ9jIcO5EFPsl6EmoC/TAOh5PZ9lFcISeZ/iPoUwuD6Y:Hc+vsEFmAnUw
TLSH
T134D59E66A2A800E4D576C17CC9578537E7F1B45913B09BDB06B5CAA90F23BE16F3EB00
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

93:9c:56:c7:50:ce:60:6e:1f:e1:b9:11:aa:40:d3:b0:18:44:f1:7c:88:2f:91:f2:78:bf:cb:fc:09:f7:e3:f2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 17, 2025

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

43:52:15:04:9b:64:6e:84:37:81:b8:f3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 4, 2024 - Dec 5, 2025

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

2027148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\monec\workspace\Monect_host\x64\Release\MonectServerService.pdb

shlwapi

StrCmpW StrRChrW StrStrW PathFindExtensionW PathFindFileNameW StrRChrA

wtsapi32

WTSEnumerateSessionsW WTSFreeMemory

hid

HidP_GetCaps HidP_GetValueCaps HidP_GetLinkCollectionNodes HidD_GetHidGuid HidD_GetAttributes HidD_GetPreparsedData HidD_FreePreparsedData HidP_GetButtonCaps

setupapi

SetupDiGetClassDevsW SetupDiGetDeviceInterfaceDetailW SetupDiDestroyDeviceInfoList SetupDiGetDeviceInterfaceDetailA SetupDiEnumDeviceInterfaces

iphlpapi

GetAdaptersAddresses GetIpAddrTable NotifyAddrChange

bthprops.cpl

BluetoothFindRadioClose BluetoothGetRadioInfo BluetoothEnableIncomingConnections BluetoothIsDiscoverable BluetoothEnableDiscovery BluetoothFindFirstRadio

powrprof

SetSuspendState

ws2_32

ntohs ntohl htons htonl WSAGetLastError WSAStartup socket bind closesocket getsockname WSASetServiceW listen accept WSAResetEvent WSAGetOverlappedResult WSAWaitForMultipleEvents WSASend gethostname freeaddrinfo select __WSAFDIsSet ioctlsocket WSACleanup WSAIoctl WSASetLastError getpeername connect send recv inet_ntop getsockopt WSACreateEvent recvfrom sendto setsockopt getaddrinfo WSARecv

wldap32

ord143 ord217 ord46 ord211 ord60 ord45 ord50 ord41 ord22 ord26 ord27 ord32 ord33 ord35 ord79 ord30 ord200 ord301

crypt32

CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext CryptStringToBinaryA PFXImportCertStore CryptDecodeObjectEx CertAddCertificateContextToStore CertFindExtension CertGetNameStringA CryptQueryObject CertCreateCertificateChainEngine CertCloseStore CertFreeCertificateChainEngine CertGetCertificateChain CertFreeCertificateChain CertOpenStore

normaliz

IdnToAscii

bcrypt

BCryptSetProperty BCryptCloseAlgorithmProvider BCryptDestroyKey BCryptEncrypt BCryptGetProperty BCryptDecrypt BCryptCreateHash BCryptHashData BCryptOpenAlgorithmProvider BCryptGenerateSymmetricKey BCryptFinishHash BCryptDestroyHash

avcodec-59

av_parser_close av_parser_init avcodec_alloc_context3 avcodec_close avcodec_find_decoder avcodec_open2 avcodec_receive_frame avcodec_send_packet

avutil-57

av_frame_alloc av_free av_freep av_image_alloc av_image_copy_to_buffer

swscale-6

sws_freeContext sws_getCachedContext sws_scale

kernel32

RtlLookupFunctionEntry UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW InitializeSListHead RtlCaptureContext GetFileInformationByHandleEx SetFileTime GetFileAttributesExW ReadConsoleW ReadConsoleA AreFileApisANSI SetFileInformationByHandle CreateDirectoryW GetLocaleInfoEx IsDebuggerPresent SetConsoleMode GetConsoleMode ConvertFiberToThread TerminateProcess DeleteFiber GetSystemTimeAsFileTime GetModuleHandleExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlVirtualUnwind GetEnvironmentVariableW PeekNamedPipe GetFileType GetStdHandle GetEnvironmentVariableA WaitForSingleObjectEx MoveFileExA QueryPerformanceCounter VerifyVersionInfoA LoadLibraryA GetModuleHandleA GetSystemDirectoryA QueryPerformanceFrequency SleepEx InitializeCriticalSectionEx FormatMessageA SetLastError GetModuleHandleW CreateFileA GetCurrentProcessId SetThreadPriority InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CloseHandle CreateThread CreateNamedPipeW GetLastError ConnectNamedPipe GetProcessHeap HeapAlloc HeapFree ReadFile WriteFile FlushFileBuffers DisconnectNamedPipe CreateFileW WaitNamedPipeW SetNamedPipeHandleState FindFirstFileW FindNextFileW FindClose CopyFileW SetFileAttributesW GetModuleFileNameA GetModuleFileNameW LoadLibraryW lstrlenW CreateProcessW OpenProcess GetTickCount WaitForSingleObject Sleep LocalAlloc CreateEventW LocalFree ResetEvent ExitProcess GetComputerNameW GetProcAddress FreeLibrary GetPrivateProfileIntW SetEvent WideCharToMultiByte VerSetConditionMask VerifyVersionInfoW WaitForMultipleObjects MultiByteToWideChar lstrcmpA OpenEventW GetTickCount64 GetSystemTime GetCurrentThreadId DeleteFileA GetFileSizeEx SetFilePointerEx GetLogicalDriveStringsW GetDriveTypeW GetDiskFreeSpaceW GetFileSize DeviceIoControl GetOverlappedResult GetCurrentProcess lstrcmpiW CreateMutexW CreateFileMappingW MapViewOfFile UnmapViewOfFile ReleaseMutex

user32

MapVirtualKeyW SetWindowPos ExitWindowsEx DefWindowProcW GetKeyState GetForegroundWindow IsZoomed GetUserObjectInformationW GetProcessWindowStation RegisterDeviceNotificationW PostQuitMessage EndPaint BeginPaint DispatchMessageW TranslateMessage GetMessageW UpdateWindow ShowWindow CreateWindowExW RegisterClassExW LoadCursorW LoadIconW SendMessageW MessageBoxW UnregisterDeviceNotification GetWindowRect wsprintfW

advapi32

CryptImportKey RegisterEventSourceW CryptAcquireContextW CryptEncrypt CryptDestroyKey CryptDestroyHash CryptHashData CryptCreateHash CryptGenRandom CryptGetHashParam CryptReleaseContext SetServiceStatus RegisterServiceCtrlHandlerExW DeleteService OpenServiceW CloseServiceHandle CreateServiceW OpenSCManagerW StartServiceCtrlDispatcherW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegEnumKeyExW RegDeleteKeyW RegCreateKeyExW CryptAcquireContextA RegDeleteTreeW RegCreateKeyW CreateProcessAsUserW SetTokenInformation RegOpenKeyExW ReportEventW InitializeSecurityDescriptor SetSecurityDescriptorDacl RegCloseKey RegQueryInfoKeyW RegEnumValueW RegQueryInfoKeyA RegEnumValueA RegSetValueExW RegSetValueExA DuplicateTokenEx DeregisterEventSource RegDeleteValueW RegEnumKeyW

shell32

SHFileOperationA ShellExecuteW SHGetFileInfoW ord165 SHGetKnownFolderPath SHFileOperationW

ole32

CoCreateInstance CoTaskMemFree CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoInitialize CoUninitialize CoCreateGuid

oleaut32

SysStringLen SysAllocStringLen VariantInit VariantClear SysFreeString SysAllocString

msvcp140

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?good@ios_base@std@@QEBA_NXZ ??7ios_base@std@@QEBA_NXZ ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Id_cnt@id@locale@std@@0HA ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?uncaught_exception@std@@YA_NXZ ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?_Xbad_alloc@std@@YAXXZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Throw_Cpp_error@std@@YAXH@Z _Thrd_detach _Cnd_do_broadcast_at_thread_exit ?__ExceptionPtrDestroy@@YAXPEAX@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?__ExceptionPtrToBool@@YA_NPEBX@Z ?__ExceptionPtrRethrow@@YAXPEBX@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Winerror_map@std@@YAHH@Z ?_Xbad_function_call@std@@YAXXZ ?bad@ios_base@std@@QEBA_NXZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?fail@ios_base@std@@QEBA_NXZ ?pubsetbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAPEAV12@PEAD_J@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?__ExceptionPtrCreate@@YAXPEAX@Z ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?_Xlength_error@std@@YAXPEBD@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Xout_of_range@std@@YAXPEBD@Z

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

wcsstr __C_specific_handler __current_exception __current_exception_context __std_exception_copy __std_terminate _CxxThrowException memchr memcmp memmove memset memcpy strrchr strstr _purecall strchr __std_exception_destroy

api-ms-win-crt-heap-l1-1-0

free calloc realloc _callnewh _set_new_mode malloc

api-ms-win-crt-runtime-l1-1-0

_c_exit __p___wargv abort __p___argc _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _configure_wide_argv _errno _set_app_type _seh_filter_exe _cexit perror _crt_atexit _register_onexit_function _initialize_onexit_table _invalid_parameter_noinfo_noreturn signal strerror_s raise _exit _getpid terminate _beginthreadex _invalid_parameter_noinfo _register_thread_local_exe_atexit_callback _invoke_watson __sys_nerr strerror exit

api-ms-win-crt-string-l1-1-0

isdigit _strnicmp iswdigit strlen isspace _wcsicmp isupper strcat_s strspn strcspn strcmp wcscat_s _stricmp wcscpy_s wcsncpy_s tolower strcpy_s wcsnlen strnlen strpbrk strncmp _strlwr_s strncpy _strdup

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf __acrt_iob_func __stdio_common_vsprintf _set_fmode fopen fputs __p__commode feof __stdio_common_vswprintf_s ftell fclose _read fseek fread fgets _write fgetc _lseeki64 _close _get_stream_buffer_pointers fputc ungetc fflush __stdio_common_vswprintf setvbuf ferror _fileno _setmode fwrite _wfopen fsetpos _open __stdio_common_vsscanf _setmaxstdio fgetpos _fseeki64 __stdio_common_vsprintf_s

api-ms-win-crt-math-l1-1-0

_dclass __setusermatherr ceilf modf

api-ms-win-crt-convert-l1-1-0

strtoul strtol atoi mbstowcs_s wcstombs _wtoi64 strtoll

api-ms-win-crt-time-l1-1-0

_gmtime64 _time64 _gmtime64_s

api-ms-win-crt-utility-l1-1-0

srand rand qsort

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _fstat64 _unlink _access _stat64i32 _lock_file _stat64

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _configthreadlocale

PCRemoteReceiver.exe

IMPHASH 6b8a0f3f5c359c03676aba78fd0d18b8
SHA256 0f9df02f001812ebf67e383c50a59a5b853c39992ff55b9a230006f358642501
MD5 68c8a759758f2689f7f3798a91ba30cf
SHA1 a2cfe837052531bb259c28eb1c59a193c4fc12e0
SHA512 3b6221edeea41676b0e7af04e012a5571394ff313b62e115a3372ebfc2a2b6063a97c4b3bf5325fff9bcff78ccebfbbdd34716d320885d38691bb3e4430a5f54
SSDEEP 98304:6+6LgxyQTdliOQuTsLdTSiJf/i9eCH7LB1LygaZZe:6cNdliOhYL55Jfze1LygKZe
TLSH
T1E9768D5AA3E800DCE476D039C9578A27E7B1B8125331C7CF02A49AAA1F736E15F3E751
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

42:0a:96:c9:a9:6c:4d:03:72:68:37:0f:ff:cf:06:1b:a9:6a:6d:95:0d:8f:e3:06:e7:6e:ea:26:06:03:71:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 17, 2025

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

43:52:15:04:9b:64:6e:84:37:81:b8:f3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 4, 2024 - Dec 5, 2025

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

4945908

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\monec\workspace\Monect_host\x64\Release\PCRemoteReceiver.pdb

iphlpapi

GetAdaptersAddresses

avcodec-59

av_packet_alloc av_packet_free av_parser_close av_parser_init av_parser_parse2 avcodec_alloc_context3 avcodec_close avcodec_find_decoder avcodec_free_context avcodec_open2 avcodec_receive_frame avcodec_send_packet

avutil-57

av_buffer_ref av_buffer_unref av_frame_alloc av_frame_free av_freep av_get_default_channel_layout av_hwdevice_ctx_create av_image_alloc av_log_set_callback av_samples_get_buffer_size

swscale-6

sws_freeContext sws_getCachedContext sws_scale

swresample-4

swr_alloc_set_opts swr_convert swr_free swr_init

d3d11

D3D11CreateDevice

xinput1_4

ord2 ord3

sdl2

SDL_CloseAudioDevice SDL_GetQueuedAudioSize SDL_FreeSurface SDL_RWFromMem SDL_PauseAudioDevice SDL_OpenAudioDevice SDL_memset SDL_GetError SDL_Log SDL_QueueAudio SDL_ClearQueuedAudio SDL_Init

sdl2_image

IMG_Load_RW

crypt32

CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty

kernel32

EncodePointer GetSystemDirectoryW LoadLibraryExW GlobalDeleteAtom lstrcmpW GlobalAddAtomW GlobalFindAtomW CompareStringW GetCurrentThread GetVersionExW lstrcmpA lstrcpyW GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW SetThreadPriority ResumeThread GetFileSize GetFullPathNameW GetVolumeInformationW LockFile SetEndOfFile SetFilePointer UnlockFile DuplicateHandle lstrcmpiW GetThreadLocale GlobalFlags GlobalReAlloc GlobalHandle LocalReAlloc GlobalGetAtomNameW FileTimeToSystemTime GetCurrentDirectoryW GetLocaleInfoW GetSystemDefaultUILanguage GetFileAttributesW FileTimeToLocalFileTime GetFileAttributesExW GetFileTime SystemTimeToTzSpecificLocalTime SetErrorMode GetTempPathW GetWindowsDirectoryW SearchPathW GetTickCount64 GetProfileIntW FindResourceExW GetTempFileNameW GetUserDefaultLCID WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InitializeSListHead GetStartupInfoW RtlUnwind WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW FindFirstFileExW GetOEMCP IsValidCodePage GetConsoleOutputCP SetFilePointerEx GetTimeZoneInformation EnumSystemLocalesW IsValidLocale LCMapStringW GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc SetStdHandle VirtualQuery HeapQueryInformation GetCommandLineA PeekNamedPipe GetFileInformationByHandle GetDriveTypeW SetConsoleCtrlHandler FreeLibraryAndExitThread ExitThread RtlUnwindEx GetStringTypeW GetCPInfo CompareStringEx LCMapStringEx RtlPcToFileHeader TryAcquireSRWLockExclusive GetExitCodeThread GetLocaleInfoEx RaiseException MulDiv OutputDebugStringA GetProcAddress FreeLibrary InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CloseHandle CreateThread CreateNamedPipeW GetLastError ConnectNamedPipe GetProcessHeap HeapAlloc HeapFree ReadFile WriteFile FlushFileBuffers DisconnectNamedPipe CreateFileW WaitNamedPipeW SetNamedPipeHandleState FindFirstFileW FindNextFileW FindClose CopyFileW DeleteFileW GetModuleFileNameA GetModuleFileNameW LoadLibraryW LocalAlloc CreateEventW LocalFree ResetEvent WaitForSingleObject ExitProcess GetComputerNameW lstrlenW SizeofResource LockResource LoadResource FindResourceW MultiByteToWideChar GlobalUnlock GlobalFree GlobalAlloc GlobalLock FormatMessageA FormatMessageW WideCharToMultiByte TlsAlloc InitializeCriticalSectionAndSpinCount Sleep GetSystemTimeAsFileTime WaitForMultipleObjects TerminateThread QueueUserAPC SetEvent SleepEx PostQueuedCompletionStatus CreateIoCompletionPort SetWaitableTimer GetQueuedCompletionStatus SetLastError VerSetConditionMask VerifyVersionInfoW CreateWaitableTimerW GetModuleHandleA TlsGetValue TlsSetValue TlsFree CreateProcessW OpenEventW GetSystemInfo GetModuleHandleExW QueryPerformanceFrequency QueryPerformanceCounter LoadLibraryA ReleaseMutex ReleaseSemaphore WaitForSingleObjectEx GetCurrentThreadId DebugBreak GetModuleHandleW IsDebuggerPresent OutputDebugStringW OpenSemaphoreW GetCurrentProcess GetProcessId GetCommandLineW GetUserDefaultUILanguage OpenMutexW CreateMutexW GetCurrentProcessId CreateMutexExW CreateSemaphoreExW GetFileSizeEx InitializeCriticalSectionEx HeapSize HeapReAlloc DecodePointer GetSystemTime SystemTimeToFileTime InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared VirtualAlloc VirtualProtect VirtualFree SwitchToFiber DeleteFiber CreateFiberEx GetSystemDirectoryA GetEnvironmentVariableW GetACP GetStdHandle GetFileType ConvertFiberToThread ConvertThreadToFiberEx RtlVirtualUnwind GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW CreateActCtxW ActivateActCtx DeactivateActCtx FindActCtxSectionStringW QueryActCtxW GlobalSize

user32

ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow ValidateRect TrackPopupMenu SetMenu GetMenu IsWindowVisible EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement IsChild IsMenu GetClassInfoExW GetClassInfoW RegisterClassW CallWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW IsDialogMessageW GetWindow SetWindowLongW GetWindowTextLengthW GetWindowTextW SetWindowTextW SetFocus GetDlgCtrlID CheckDlgButton GetDlgItemTextW MoveWindow IntersectRect InflateRect CopyRect OffsetRect SetRectEmpty SendDlgItemMessageA CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetFocus GetSysColor EndPaint BeginPaint GetWindowDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW RemoveMenu AppendMenuW InsertMenuW GetMenuItemCount GetMenuItemID GetMenuState GetMenuStringW SetPropW GetWindowLongW GetActiveWindow GetNextDlgTabItem EndDialog CreateDialogIndirectParamW DestroyWindow WindowFromPoint IsWindowEnabled CreateMenu LoadBitmapW GetClassNameW FillRect DrawStateW MessageBoxW GetUserObjectInformationW GetProcessWindowStation UnregisterClassW GetParent SetDlgItemTextA SetActiveWindow EnumWindows AllowSetForegroundWindow LockWorkStation GetDesktopWindow GetWindowThreadProcessId GetPropW RemovePropW AdjustWindowRectEx SendMessageW GetCursorPos GetWindowRect SetCursor LoadCursorW MapWindowPoints EqualRect GetClassLongPtrW GetTopWindow SetScrollInfo GetScrollInfo WinHelpW CheckMenuItem SetMenuItemBitmaps GetMenuCheckMarkDimensions GetKeyNameTextW MapVirtualKeyW EnableWindow InvalidateRect RedrawWindow GetClientRect LoadMenuW SetMenuItemInfoW GetSubMenu EnableMenuItem SetWindowPos LoadIconW ShowWindow GetDlgItem IsIconic GetSystemMetrics DrawIcon SetForegroundWindow PostQuitMessage SetDlgItemTextW TrackMouseEvent GetDC OpenClipboard EmptyClipboard SetClipboardData CloseClipboard GetDlgItemTextA CreateIconIndirect PostMessageW DestroyIcon GetWindowLongPtrW DefWindowProcW RegisterClassExW DestroyMenu GetMenuItemInfoW GetNextDlgGroupItem SetTimer KillTimer DrawFocusRect IsRectEmpty LoadImageW CopyImage DrawIconEx GetIconInfo SetWindowContextHelpId MapDialogRect GetMessageW ShowOwnedPopups CharUpperW SetLayeredWindowAttributes GetSysColorBrush EnumDisplayMonitors RealChildWindowFromPoint AdjustWindowRect CreateWindowExW UpdateWindow SetWindowLongPtrW IsZoomed GetAsyncKeyState GetSystemMenu DeleteMenu SetWindowRgn MessageBeep NotifyWinEvent GetWindowRgn GetComboBoxInfo GetLastActivePopup PeekMessageW TranslateMessage DispatchMessageW MonitorFromWindow GetMonitorInfoW GetKeyState GetForegroundWindow ClientToScreen SetCursorPos ScreenToClient GetMessageExtraInfo CreatePopupMenu GetCapture SetCapture ReleaseCapture IsWindowUnicode ReleaseDC GetClipboardData SystemParametersInfoW UpdateLayeredWindow PtInRect SubtractRect GetUpdateRect IsClipboardFormatAvailable TranslateMDISysAccel ExitWindowsEx DestroyCursor DefMDIChildProcW DefFrameProcW DrawMenuBar MapVirtualKeyExW IsCharLowerW GetDoubleClickTime InvertRect HideCaret PostThreadMessageW FrameRect CopyIcon ReuseDDElParam UnpackDDElParam InsertMenuItemW TranslateAcceleratorW ModifyMenuW CharUpperBuffW RegisterClipboardFormatW SetClassLongPtrW LockWindowUpdate BringWindowToTop SetParent DestroyAcceleratorTable CreateAcceleratorTableW LoadAcceleratorsW GetKeyboardState GetKeyboardLayout ToUnicodeEx SetRect InvalidateRgn CopyAcceleratorTableW CharNextW WaitMessage DrawFrameControl DrawEdge MonitorFromPoint UnionRect EnableScrollBar SetMenuDefaultItem GetMenuDefaultItem IsWindow

gdi32

GetTextFaceW CreateCompatibleDC CreateRectRgn GetDeviceCaps DeleteObject CreateCompatibleBitmap CreateBitmap CreateSolidBrush SetBkMode SetPixelV GetViewportOrgEx GetWindowOrgEx PtInRegion GetBoundsRect FrameRgn FillRgn SetPaletteEntries ExtFloodFill RoundRect EnumFontFamiliesExW LPtoDP GetSystemPaletteEntries GetPaletteEntries GetNearestPaletteIndex CreatePalette OffsetRgn GetRgnBox Rectangle Polyline Polygon CreatePolygonRgn GetTextColor GetBkColor Ellipse CreateEllipticRgn SetDIBColorTable StretchBlt SetPixel RealizePalette CreateDIBSection CreateRoundRectRgn GetTextMetricsW GetTextCharsetInfo EnumFontFamiliesW CreateDIBitmap GetTextExtentPoint32W DPtoLP SetRectRgn PatBlt GetMapMode CreateRectRgnIndirect CombineRgn ScaleWindowExtEx ScaleViewportExtEx OffsetWindowOrgEx OffsetViewportOrgEx SetWindowOrgEx SetWindowExtEx SetViewportOrgEx SetViewportExtEx ExtTextOutW TextOutW MoveToEx SetTextAlign SetTextColor SetROP2 SetPolyFillMode GetLayout SetLayout SetMapMode SetBkColor SelectPalette ExtSelectClipRgn SelectClipRgn SaveDC RestoreDC RectVisible PtVisible LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetPixel GetObjectType GetClipBox ExcludeClipRect Escape CreatePatternBrush CreatePen CreateHatchBrush BitBlt CreateDCW CopyMetaFileW GetStockObject DeleteDC CreateFontIndirectW SelectObject GetObjectW

msimg32

TransparentBlt AlphaBlend

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

CryptEnumProvidersA RegCloseKey RegEnumValueW RegSetValueExW InitializeSecurityDescriptor RegDeleteValueW RegEnumKeyW RegOpenKeyExW RegCreateKeyExW RegQueryValueW RegQueryValueExW CryptEnumProvidersW CryptSignHashW CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptAcquireContextW ReportEventW RegisterEventSourceW DeregisterEventSource RegDeleteKeyW CryptGenRandom CryptReleaseContext CryptAcquireContextA AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegEnumKeyExW SetSecurityDescriptorDacl

shell32

DragFinish DragQueryFileW SHAppBarMessage SHGetDesktopFolder SHGetSpecialFolderLocation SHGetMalloc SHGetPathFromIDListW SHGetKnownFolderPath CommandLineToArgvW ShellExecuteExW SHGetFileInfoW Shell_NotifyIconW ShellExecuteA ShellExecuteW SHBrowseForFolderW

comctl32

_TrackMouseEvent InitCommonControlsEx ImageList_AddMasked

shlwapi

StrCmpW StrRChrA PathAppendW StrStrW StrChrW StrRChrW PathFindFileNameW PathIsUNCW PathStripToRootW PathRemoveFileSpecW StrFormatKBSizeW PathFindExtensionW

uxtheme

IsThemeBackgroundPartiallyTransparent GetThemePartSize GetThemeSysColor GetWindowTheme GetCurrentThemeName GetThemeColor SetWindowTheme IsAppThemed DrawThemeParentBackground DrawThemeText OpenThemeData CloseThemeData DrawThemeBackground

ole32

ReleaseStgMedium CoRegisterMessageFilter CoRevokeClassObject RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleGetClipboard OleDuplicateData CoTaskMemAlloc CoUninitialize CoInitializeEx CreateStreamOnHGlobal CoCreateInstance CoTaskMemFree OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleLockRunning OleUninitialize OleInitialize CoFreeUnusedLibraries DoDragDrop OleIsCurrentClipboard OleFlushClipboard CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject CoDisconnectObject CoInitialize CLSIDFromProgID CLSIDFromString CoCreateGuid IsAccelerator

oleaut32

SysStringLen LoadTypeLi SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy SysAllocString VariantCopy VarBstrFromDate OleCreateFontIndirect VariantChangeType VariantClear VariantInit SysAllocStringLen SysFreeString SetErrorInfo

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipBitmapUnlockBits GdipSetStringFormatLineAlign GdipCreateBitmapFromHBITMAP GdipSetInterpolationMode GdipGetImagePalette GdipDeleteStringFormat GdipCreateStringFormat GdipCloneBrush GdipAlloc GdipGetImagePixelFormat GdipGetImageGraphicsContext GdipFillEllipseI GdipFillPath GdipClosePathFigure GdipAddPathArcI GdipAddPathLineI GdipDeletePath GdipCreatePath GdiplusShutdown GdiplusStartup GdipDrawImageRectI GdipSetSmoothingMode GdipGetImageHeight GdipGetImageWidth GdipSetSolidFillColor GdipLoadImageFromStream GdipFree GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromStream GdipCloneImage GdipDeleteBrush GdipDisposeImage GdipDeleteGraphics GdipGraphicsClear GdipDrawString GdipDeleteFont GdipCreateFontFamilyFromName GdipCreateSolidFill GdipGetImagePaletteSize GdipDeleteFontFamily GdipGetGenericFontFamilySansSerif GdipSetStringFormatAlign GdipCreateFont GdipCreateFromHDC GdipDrawImageI

ws2_32

shutdown getservbyname getservbyport gethostbyname gethostbyaddr inet_ntoa inet_addr send recv getsockname getpeername connect bind accept recvfrom socket sendto __WSAFDIsSet WSACleanup WSAStartup htons htonl ntohl freeaddrinfo getaddrinfo WSAAddressToStringW WSASocketW WSASend WSARecv listen select ioctlsocket closesocket WSAGetLastError setsockopt getsockopt WSAIoctl WSASetLastError ntohs

bcrypt

BCryptGenRandom

d3dcompiler_47

D3DCompile

imm32

ImmSetCandidateWindow ImmGetContext ImmGetOpenStatus ImmReleaseContext ImmSetCompositionWindow

oleacc

AccessibleObjectFromWindow LresultFromObject CreateStdAccessibleObject

winmm

PlaySoundW

Name

.text

Size

5.1MB

Virtual Size

5.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

84KB

Virtual Size

139KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

243KB

Virtual Size

243KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

151KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

106KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

PCRemoteReceiverUI.exe

IMPHASH 109ae12e2ff070c35ed3be197fc37933
SHA256 454a5aaf8535e7fd0ff3de4dd4c1b30f057597c64e56112964bebf5c06a1c744
MD5 3bad24053b28dc3edd25dc9c298f6ab1
SHA1 d5008165364f4856c3ebbaa145a327edfef94c21
SHA512 9a60caa50c61e4b7f7b21d4fccbd82516994ba6df38ef4259f6d5f2afd3cc3615ce7d02e745cc57acc98bbef0d50f8ef7224aa217601e92d292d2ce8de30af08
SSDEEP 196608:VvkprnW5/cok0BTz7IXu6dBjzNUODL/SrCMgZ:VurnQ/cW8+6dBVz/SrCMgZ
TLSH
T144071821BA9B9A6CD05BC4B0834786764E3170CB1B35B9BF45C496382F6DBF42F28359
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

33:e7:bc:ac:df:31:8e:02:2d:8a:cf:50:28:2a:2a:af:e1:67:ba:b3:e6:f0:90:da:72:06:10:34:3e:c4:b9:09

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 17, 2025

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

43:52:15:04:9b:64:6e:84:37:81:b8:f3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 4, 2024 - Dec 5, 2025

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

10620736

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

pc_receiver.pdb

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

shell32

ShellExecuteExW SHCreateItemFromParsingName SHAppBarMessage ShellExecuteW DragFinish DragQueryFileW ExtractIconExW SHGetKnownFolderPath

shlwapi

AssocQueryStringW ord12

kernel32

InitializeCriticalSectionAndSpinCount DeleteCriticalSection OpenMutexW CreateMutexW CreateThread CreatePipe WaitForSingleObject LCIDToLocaleName GetUserDefaultUILanguage ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW LoadLibraryW GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentThreadId IsProcessorFeaturePresent RtlUnwindEx RtlPcToFileHeader RaiseException GetModuleHandleW GetProcessHeap EncodePointer HeapAlloc TlsAlloc LoadLibraryA CreateMutexA WaitForSingleObjectEx GetTempPathW WideCharToMultiByte WriteConsoleW MultiByteToWideChar UpdateProcThreadAttribute InitializeProcThreadAttributeList CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetFullPathNameW lstrlenW HeapFree WaitForMultipleObjects ReadFileEx CreateNamedPipeW ExitProcess SetEnvironmentVariableW CancelIo CopyFileExW GetFinalPathNameByHandleW GetFileAttributesW CreateFileW OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetLastError GetProcAddress TlsGetValue TlsSetValue CloseHandle LoadLibraryExW CreateFileA FreeLibrary GetEnvironmentVariableW DeviceIoControl RemoveDirectoryW MoveFileExW DeleteFileW FindFirstFileW CreateDirectoryW GetFileInformationByHandleEx FindClose FindNextFileW ReleaseMutex HeapReAlloc TlsFree QueryPerformanceFrequency GetProcessId TerminateProcess GetExitCodeProcess SleepEx DisconnectNamedPipe WriteFileEx FlushFileBuffers WriteFile GetCurrentProcessId GetStdHandle SetFilePointerEx DuplicateHandle GetCurrentProcess SetFileInformationByHandle GetCommandLineW GetEnvironmentStringsW GetCurrentDirectoryW SetLastError SetHandleInformation RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetSystemInfo QueryPerformanceCounter SetWaitableTimer CreateWaitableTimerExW SwitchToThread GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler CompareStringOrdinal DeleteProcThreadAttributeList FreeEnvironmentStringsW GetModuleHandleA CreateIoCompletionPort GetQueuedCompletionStatusEx Sleep GetOverlappedResult PostQueuedCompletionStatus GetConsoleMode SetFileCompletionNotificationModes GetFileInformationByHandle LoadLibraryExA CreateEventW ReadFile ConnectNamedPipe CreateNamedPipeA FormatMessageW

ws2_32

getaddrinfo freeaddrinfo accept getsockname getpeername WSASocketW bind connect ioctlsocket listen getsockopt closesocket recv send WSASend setsockopt WSAIoctl WSACleanup WSAStartup WSAGetLastError shutdown

user32

DrawTextW FillRect GetWindowDC OffsetRect GetMenuBarInfo PostQuitMessage TrackPopupMenu CheckMenuItem GetActiveWindow GetMenuItemInfoW SetMenuItemInfoW AppendMenuW InsertMenuW CreateAcceleratorTableW DestroyAcceleratorTable CreatePopupMenu CreateMenu DestroyMenu RemoveMenu DrawMenuBar SetMenu DispatchMessageA GetMessageA IsIconic EnumChildWindows ToUnicodeEx SetWindowPos CreateWindowExW GetKeyboardLayout FlashWindowEx SetWindowLongW EnableMenuItem GetSystemMenu SendInput SetForegroundWindow SetWindowDisplayAffinity GetWindowTextW RegisterClassExW SetWindowTextW MapVirtualKeyExW GetKeyState MapVirtualKeyW GetKeyboardState SystemParametersInfoA SetPropW IsWindowVisible ClipCursor GetClipCursor DispatchMessageW IsWindow GetSystemMetrics ShowCursor AdjustWindowRectEx RedrawWindow GetMenu GetRawInputData SetCursorPos MonitorFromPoint AdjustWindowRect EnumDisplayMonitors TranslateAcceleratorW SetCursor TranslateMessage CreateIcon SystemParametersInfoW RegisterTouchWindow ReleaseCapture SetCapture SetWindowLongPtrW MsgWaitForMultipleObjectsEx RegisterRawInputDevices SetParent MapWindowPoints RegisterWindowMessageA ShowWindow IsProcessDPIAware ReleaseDC GetDC GetWindowLongPtrW GetParent SetWindowRgn FindWindowExW IsWindowEnabled EnableWindow LoadCursorW InvalidateRgn PostMessageW GetWindowPlacement SetWindowPlacement PeekMessageW ChangeDisplaySettingsExW ClientToScreen DefWindowProcW GetAsyncKeyState PostThreadMessageW DestroyWindow DestroyIcon GetWindowRect SendMessageW GetUpdateRect ValidateRect GetMonitorInfoW MonitorFromWindow GetCursorPos CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent MonitorFromRect GetWindowLongW ScreenToClient GetClientRect GetForegroundWindow GetMessageW GetWindowTextLengthW DrawIconEx

gdiplus

GdipDisposeImage GdipCreateBitmapFromHICON GdipSaveImageToFile GdipGetImageEncoders GdipGetImageEncodersSize GdiplusShutdown GdiplusStartup

advapi32

RegQueryValueExW InitializeSecurityDescriptor SetSecurityDescriptorDacl SystemFunction036 EventUnregister RegGetValueW RegOpenKeyExW EventWriteTransfer EventSetInformation EventRegister RegCloseKey

ole32

CoUninitialize RegisterDragDrop OleInitialize RevokeDragDrop CoTaskMemAlloc CoInitializeEx CoTaskMemFree CoCreateInstance

comctl32

RemoveWindowSubclass SetWindowSubclass TaskDialogIndirect DefSubclassProc

gdi32

CombineRgn DeleteObject CreateSolidBrush SetBkMode CreateRectRgn DeleteDC CreateCompatibleDC BitBlt SetTextColor CreateDIBSection SelectObject GetDeviceCaps

dwmapi

DwmGetWindowAttribute DwmEnableBlurBehindWindow DwmSetWindowAttribute

secur32

AcceptSecurityContext InitializeSecurityContextW FreeContextBuffer DecryptMessage DeleteSecurityContext QueryContextAttributesW AcquireCredentialsHandleA FreeCredentialsHandle ApplyControlToken EncryptMessage

crypt32

CertGetCertificateChain CertVerifyCertificateChainPolicy CertEnumCertificatesInStore CertAddCertificateContextToStore CertOpenStore CertCloseStore CertFreeCertificateChain CertDuplicateCertificateChain CertDuplicateStore CertFreeCertificateContext CertDuplicateCertificateContext

ntdll

NtWriteFile NtCancelIoFileEx NtReadFile RtlGetVersion NtDeviceIoControlFile RtlNtStatusToDosError NtCreateFile

oleaut32

GetErrorInfo SysFreeString SysStringLen SetErrorInfo

bcrypt

BCryptGenRandom

api-ms-win-crt-string-l1-1-0

wcscmp _wcsicmp strlen wcsncmp strcmp wcslen strcpy_s

api-ms-win-crt-math-l1-1-0

trunc floor __setusermatherr round pow

api-ms-win-crt-convert-l1-1-0

_ultow_s wcstol _wtoi

api-ms-win-crt-heap-l1-1-0

free calloc malloc _set_new_mode _callnewh

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _cexit _register_thread_local_exe_atexit_callback __p___argc _set_app_type __p___argv _initterm _initterm_e _initialize_onexit_table _exit _get_initial_narrow_environment _c_exit _initialize_narrow_environment _crt_atexit _configure_narrow_argv terminate exit abort _register_onexit_function

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Packages/vc_redist.x64.exe

IMPHASH 1a5cdbf711fee14b077e599d13fddab2
SHA256 b6c82087a2c443db859fdbeaae7f46244d06c3f2a7f71c35e50358066253de52
MD5 f0248d477e74687c5619ae16498b13d4
SHA1 9ed4b091148c9b53f66b3f2c69be7e60e74c486a
SHA512 0c373b06ffe84f3e803831e90f22d7d73304e47a47839db614f63399ff1b7fcf33153bf3d23998877c96d2a75e316291a219fdd12358ca48928526284b802591
SSDEEP 393216:q5lptVYmfr7yBG/4WoI+j6LTinXKSf0fzTDv8:q7pttD7yBG/uljIinXj0fQ
TLSH
T1AFE63332A598402BDBF20473EA94F9242E3DD119735589BBE2DCDD0E1F7818217FBA16
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

b4:cd:00:d9:81:97:db:3f:fb:fb:3f:54:d1:0a:0d:d4:f4:56:29:a6:03:63:86:3f:a0:b1:71:7e:4c:43:8a:da

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jan 8, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

77:97:6d:62:92:5a:37:44:2f:5d:c5:b0:8d:43:91:09:56:54:b2:48

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jan 8, 2020

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Time-Stamp service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:E041-4BEE-FA7E,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Serial Number

33:00:00:01:34:22:1e:7e:49:2a:ac:da:6a:00:00:00:00:01:34

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 8, 2019 - Jan 3, 2021

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 2, 2019 - May 2, 2020

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:16:68:34:00:00:00:00:00:1c

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 3, 2007 - Apr 3, 2021

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0e:90:d2:00:00:00:00:00:03

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 8, 2011 - Jul 8, 2026

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Serial Number

33:00:00:01:13:b3:70:87:3d:fa:f0:c8:24:00:00:00:00:01:13

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2019 - Jan 21, 2021

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

1

Major OS version

5

Entry point

188525

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

advapi32

RegCloseKey RegOpenKeyExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW InitiateSystemShutdownExW GetUserNameW RegQueryValueExW RegDeleteValueW ConvertStringSecurityDescriptorToSecurityDescriptorW DecryptFileW CreateWellKnownSid InitializeAcl SetEntriesInAclW ChangeServiceConfigW CloseServiceHandle ControlService OpenSCManagerW OpenServiceW QueryServiceStatus SetNamedSecurityInfoW CheckTokenMembership AllocateAndInitializeSid SetEntriesInAclA SetSecurityDescriptorGroup SetSecurityDescriptorOwner SetSecurityDescriptorDacl InitializeSecurityDescriptor RegSetValueExW RegQueryInfoKeyW RegEnumValueW RegEnumKeyExW RegDeleteKeyW RegCreateKeyExW GetTokenInformation CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW QueryServiceConfigW

user32

GetMessageW PostMessageW IsWindow WaitForInputIdle PostQuitMessage PeekMessageW MsgWaitForMultipleObjects PostThreadMessageW GetMonitorInfoW MonitorFromPoint IsDialogMessageW LoadCursorW LoadBitmapW SetWindowLongW GetWindowLongW GetCursorPos MessageBoxW CreateWindowExW UnregisterClassW RegisterClassW DefWindowProcW DispatchMessageW TranslateMessage

oleaut32

SysFreeString SysAllocString VariantInit VariantClear

gdi32

CreateCompatibleDC DeleteObject SelectObject StretchBlt GetObjectW DeleteDC

shell32

SHGetFolderPathW CommandLineToArgvW ShellExecuteExW

ole32

CoUninitialize CoInitializeEx CoInitialize StringFromGUID2 CoCreateInstance CoTaskMemFree CoInitializeSecurity CLSIDFromProgID

kernel32

GetCommandLineA GetCPInfo GetOEMCP CloseHandle CreateFileW GetProcAddress LocalFree HeapSetInformation GetLastError GetModuleHandleW FormatMessageW lstrlenA lstrlenW MultiByteToWideChar WideCharToMultiByte LCMapStringW Sleep GetLocalTime GetModuleFileNameW ExpandEnvironmentStringsW GetTempPathW GetTempFileNameW CreateDirectoryW GetFullPathNameW CompareStringW GetCurrentProcessId WriteFile SetFilePointer LoadLibraryW GetSystemDirectoryW CreateFileA HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap FindClose GetCommandLineW GetCurrentDirectoryW RemoveDirectoryW SetFileAttributesW GetFileAttributesW DeleteFileW FindFirstFileW FindNextFileW MoveFileExW GetCurrentProcess GetCurrentThreadId InitializeCriticalSection DeleteCriticalSection ReleaseMutex GetEnvironmentStringsW TlsGetValue TlsSetValue TlsFree CreateProcessW GetVersionExW VerSetConditionMask FreeLibrary EnterCriticalSection LeaveCriticalSection GetSystemTime GetNativeSystemInfo GetModuleHandleExW GetWindowsDirectoryW GetSystemWow64DirectoryW GetComputerNameW VerifyVersionInfoW GetVolumePathNameW GetDateFormatW GetSystemDefaultLangID GetUserDefaultLangID GetStringTypeW ReadFile SetFilePointerEx DuplicateHandle InterlockedExchange InterlockedCompareExchange CreateEventW ProcessIdToSessionId OpenProcess GetProcessId WaitForSingleObject ConnectNamedPipe SetNamedPipeHandleState CreateNamedPipeW CreateThread GetExitCodeThread SetEvent WaitForMultipleObjects InterlockedIncrement InterlockedDecrement ResetEvent SetEndOfFile SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime CompareStringA GetExitCodeProcess SetThreadExecutionState CopyFileExW MapViewOfFile UnmapViewOfFile CreateMutexW CreateFileMappingW GetThreadLocale IsValidCodePage FreeEnvironmentStringsW TlsAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers DecodePointer WriteConsoleW GetModuleHandleA GlobalAlloc GlobalFree GetFileSizeEx CopyFileW VirtualAlloc VirtualFree SystemTimeToTzSpecificLocalTime GetTimeZoneInformation SystemTimeToFileTime GetSystemInfo VirtualProtect VirtualQuery SetCurrentDirectoryW FindFirstFileExW GetFileType GetACP ExitProcess GetStdHandle LoadLibraryExW InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind SetLastError LoadLibraryExA

rpcrt4

UuidCreate

Name

.text

Size

294KB

Virtual Size

293KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

123KB

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.wixburn

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

SDL2.dll

IMPHASH e538e9ba4f1bc8265fd3d7bc6fe3d137
SHA256 81c70b7bfa5690b0ff20c15caa499f615a82cf5b49d278da89265eb836036465
MD5 5a2819c823a5af53420511a1ceb7a9aa
SHA1 3b80b1228631abbb7f2745828a25cbce0d9dce09
SHA512 da85ca5a8666eb5a2a4bc6b0c9e2f7b7811eb22fe1632a8604274f4fdd5b4303e8943b85cdacb4a3378261d1c0c2d754f4db372294a7146c26a9a546ba83b399
SSDEEP 24576:HzJfKNu0feee3s8LjMwUiny7Irssh55Z0lZGO5cO7bSbtnG4+bDYnZVBsi9s8ZF7:H9fd8y5m5cv9F0Qc3OW/a45m5
TLSH
T10EA5F945B3FA178CF6F78AB49676B7225836FC299910CAAE2250953D0C31F908974F37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4725

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

gdi32

BitBlt ChoosePixelFormat CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateFontIndirectW CreateFontW CreatePen CreateRectRgn CreateSolidBrush DeleteDC DeleteObject DescribePixelFormat ExtTextOutW GetDIBits GetDeviceCaps GetDeviceGammaRamp GetICMProfileW GetPixelFormat GetTextExtentPoint32A GetTextExtentPoint32W GetTextMetricsW Rectangle SelectObject SetBkMode SetDeviceGammaRamp SetPixelFormat SetTextColor SwapBuffers

imm32

ImmAssociateContext ImmGetCandidateListW ImmGetCompositionStringW ImmGetContext ImmGetIMEFileNameA ImmNotifyIME ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionStringW ImmSetCompositionWindow

kernel32

AttachConsole CancelIo CloseHandle CompareStringA CreateDirectoryW CreateEventW CreateFileA CreateFileW CreateSemaphoreW CreateThread CreateToolhelp32Snapshot DeleteCriticalSection DeviceIoControl EnterCriticalSection ExitProcess FormatMessageW FreeLibrary GetConsoleMode GetCurrentProcess GetCurrentThread GetCurrentThreadId GetEnvironmentVariableA GetFileSizeEx GetLastError GetLocaleInfoA GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOverlappedResult GetProcAddress GetStdHandle GetSystemInfo GetSystemPowerStatus GetTickCount GlobalAlloc GlobalLock GlobalMemoryStatusEx GlobalUnlock InitializeCriticalSection InitializeCriticalSectionAndSpinCount IsDebuggerPresent LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LocalFree MulDiv OutputDebugStringW Process32First Process32Next QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseSemaphore ResetEvent SetEnvironmentVariableA SetErrorMode SetFilePointer SetFilePointerEx SetThreadExecutionState SetThreadPriority Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW WriteFile

msvcrt

__iob_func _amsg_exit _initterm _lock _unlock abort calloc fputs free memcpy memset realloc strlen strncmp vfprintf

ole32

CoCreateInstance CoInitializeEx CoTaskMemFree CoUninitialize PropVariantClear

oleaut32

SysFreeString

setupapi

CM_Get_Device_IDA CM_Get_Parent CM_Locate_DevNodeA SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiEnumDeviceInterfaces SetupDiGetClassDevsA SetupDiGetDeviceInterfaceDetailA SetupDiGetDeviceRegistryPropertyA

shell32

DragAcceptFiles DragFinish DragQueryFileW ExtractIconExW SHGetFolderPathW ShellExecuteW

user32

AdjustWindowRectEx AttachThreadInput CallNextHookEx CallWindowProcW ChangeDisplaySettingsExW ClientToScreen ClipCursor CloseClipboard CopyImage CreateIconFromResource CreateIconIndirect CreateWindowExA CreateWindowExW DefWindowProcW DestroyIcon DestroyWindow DialogBoxIndirectParamW DispatchMessageW DrawTextW EmptyClipboard EndDialog EnumDisplayDevicesW EnumDisplayMonitors EnumDisplaySettingsW FlashWindowEx GetAsyncKeyState GetClassInfoExW GetClientRect GetClipCursor GetClipboardData GetClipboardSequenceNumber GetCursorPos GetDC GetDesktopWindow GetDlgItem GetDoubleClickTime GetFocus GetForegroundWindow GetKeyState GetKeyboardLayout GetKeyboardState GetMenu GetMessageExtraInfo GetMessageW GetMonitorInfoW GetParent GetPropW GetRawInputData GetRawInputDeviceInfoA GetRawInputDeviceList GetSystemMetrics GetUpdateRect GetWindowLongPtrW GetWindowLongW GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId IntersectRect InvalidateRect IsClipboardFormatAvailable IsIconic IsRectEmpty KillTimer LoadCursorW LoadIconW MapVirtualKeyW MessageBoxA OpenClipboard PeekMessageW PostMessageW PostThreadMessageW PtInRect RegisterClassExA RegisterClassExW RegisterClassW RegisterDeviceNotificationW RegisterRawInputDevices RegisterWindowMessageA ReleaseCapture ReleaseDC RemovePropW ScreenToClient SendMessageW SetActiveWindow SetCapture SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetLayeredWindowAttributes SetPropW SetTimer SetWindowLongPtrW SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextW SetWindowsHookExW ShowWindow SystemParametersInfoA SystemParametersInfoW ToUnicode TrackMouseEvent TranslateMessage UnhookWindowsHookEx UnregisterClassA UnregisterClassW UnregisterDeviceNotification ValidateRect

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

winmm

timeBeginPeriod timeEndPeriod waveInAddBuffer waveInClose waveInGetDevCapsW waveInGetNumDevs waveInOpen waveInPrepareHeader waveInReset waveInStart waveInUnprepareHeader waveOutClose waveOutGetDevCapsW waveOutGetErrorTextW waveOutGetNumDevs waveOutOpen waveOutPrepareHeader waveOutReset waveOutUnprepareHeader waveOutWrite

SDL_AddEventWatch SDL_AddHintCallback SDL_AddTimer SDL_AllocFormat SDL_AllocPalette SDL_AllocRW SDL_AtomicAdd SDL_AtomicCAS SDL_AtomicCASPtr SDL_AtomicGet SDL_AtomicGetPtr SDL_AtomicLock SDL_AtomicSet SDL_AtomicSetPtr SDL_AtomicTryLock SDL_AtomicUnlock SDL_AudioInit SDL_AudioQuit SDL_AudioStreamAvailable SDL_AudioStreamClear SDL_AudioStreamFlush SDL_AudioStreamGet SDL_AudioStreamPut SDL_BuildAudioCVT SDL_CalculateGammaRamp SDL_CaptureMouse SDL_ClearComposition SDL_ClearError SDL_ClearHints SDL_ClearQueuedAudio SDL_CloseAudio SDL_CloseAudioDevice SDL_ComposeCustomBlendMode SDL_CondBroadcast SDL_CondSignal SDL_CondWait SDL_CondWaitTimeout SDL_ConvertAudio SDL_ConvertPixels SDL_ConvertSurface SDL_ConvertSurfaceFormat SDL_CreateColorCursor SDL_CreateCond SDL_CreateCursor SDL_CreateMutex SDL_CreateRGBSurface SDL_CreateRGBSurfaceFrom SDL_CreateRGBSurfaceWithFormat SDL_CreateRGBSurfaceWithFormatFrom SDL_CreateRenderer SDL_CreateSemaphore SDL_CreateShapedWindow SDL_CreateSoftwareRenderer SDL_CreateSystemCursor SDL_CreateTexture SDL_CreateTextureFromSurface SDL_CreateThread SDL_CreateThreadWithStackSize SDL_CreateWindow SDL_CreateWindowAndRenderer SDL_CreateWindowFrom SDL_DXGIGetOutputInfo SDL_DYNAPI_entry SDL_DelEventWatch SDL_DelHintCallback SDL_Delay SDL_DequeueAudio SDL_DestroyCond SDL_DestroyMutex SDL_DestroyRenderer SDL_DestroySemaphore SDL_DestroyTexture SDL_DestroyWindow SDL_DetachThread SDL_Direct3D9GetAdapterIndex SDL_DisableScreenSaver SDL_DuplicateSurface SDL_EnableScreenSaver SDL_EncloseFPoints SDL_EnclosePoints SDL_Error SDL_EventState SDL_FillRect SDL_FillRects SDL_FilterEvents SDL_FlashWindow SDL_FlushEvent SDL_FlushEvents SDL_FreeAudioStream SDL_FreeCursor SDL_FreeFormat SDL_FreePalette SDL_FreeRW SDL_FreeSurface SDL_FreeWAV SDL_GL_BindTexture SDL_GL_CreateContext SDL_GL_DeleteContext SDL_GL_ExtensionSupported SDL_GL_GetAttribute SDL_GL_GetCurrentContext SDL_GL_GetCurrentWindow SDL_GL_GetDrawableSize SDL_GL_GetProcAddress SDL_GL_GetSwapInterval SDL_GL_LoadLibrary SDL_GL_MakeCurrent SDL_GL_ResetAttributes SDL_GL_SetAttribute SDL_GL_SetSwapInterval SDL_GL_SwapWindow SDL_GL_UnbindTexture SDL_GL_UnloadLibrary SDL_GameControllerAddMapping SDL_GameControllerAddMappingsFromRW SDL_GameControllerClose SDL_GameControllerEventState SDL_GameControllerFromInstanceID SDL_GameControllerFromPlayerIndex SDL_GameControllerGetAppleSFSymbolsNameForAxis SDL_GameControllerGetAppleSFSymbolsNameForButton SDL_GameControllerGetAttached SDL_GameControllerGetAxis SDL_GameControllerGetAxisFromString SDL_GameControllerGetBindForAxis SDL_GameControllerGetBindForButton SDL_GameControllerGetButton SDL_GameControllerGetButtonFromString SDL_GameControllerGetJoystick SDL_GameControllerGetNumTouchpadFingers SDL_GameControllerGetNumTouchpads SDL_GameControllerGetPlayerIndex SDL_GameControllerGetProduct SDL_GameControllerGetProductVersion SDL_GameControllerGetSensorData SDL_GameControllerGetSensorDataRate SDL_GameControllerGetSerial SDL_GameControllerGetStringForAxis SDL_GameControllerGetStringForButton SDL_GameControllerGetTouchpadFinger SDL_GameControllerGetType SDL_GameControllerGetVendor SDL_GameControllerHasAxis SDL_GameControllerHasButton SDL_GameControllerHasLED SDL_GameControllerHasRumble SDL_GameControllerHasRumbleTriggers SDL_GameControllerHasSensor SDL_GameControllerIsSensorEnabled SDL_GameControllerMapping SDL_GameControllerMappingForDeviceIndex SDL_GameControllerMappingForGUID SDL_GameControllerMappingForIndex SDL_GameControllerName SDL_GameControllerNameForIndex SDL_GameControllerNumMappings SDL_GameControllerOpen SDL_GameControllerRumble SDL_GameControllerRumbleTriggers SDL_GameControllerSendEffect SDL_GameControllerSetLED SDL_GameControllerSetPlayerIndex SDL_GameControllerSetSensorEnabled SDL_GameControllerTypeForIndex SDL_GameControllerUpdate SDL_GetAssertionHandler SDL_GetAssertionReport SDL_GetAudioDeviceName SDL_GetAudioDeviceSpec SDL_GetAudioDeviceStatus SDL_GetAudioDriver SDL_GetAudioStatus SDL_GetBasePath SDL_GetCPUCacheLineSize SDL_GetCPUCount SDL_GetClipRect SDL_GetClipboardText SDL_GetClosestDisplayMode SDL_GetColorKey SDL_GetCurrentAudioDriver SDL_GetCurrentDisplayMode SDL_GetCurrentVideoDriver SDL_GetCursor SDL_GetDefaultAssertionHandler SDL_GetDefaultCursor SDL_GetDesktopDisplayMode SDL_GetDisplayBounds SDL_GetDisplayDPI SDL_GetDisplayMode SDL_GetDisplayName SDL_GetDisplayOrientation SDL_GetDisplayUsableBounds SDL_GetError SDL_GetErrorMsg SDL_GetEventFilter SDL_GetGlobalMouseState SDL_GetGrabbedWindow SDL_GetHint SDL_GetHintBoolean SDL_GetKeyFromName SDL_GetKeyFromScancode SDL_GetKeyName SDL_GetKeyboardFocus SDL_GetKeyboardState SDL_GetMemoryFunctions SDL_GetModState SDL_GetMouseFocus SDL_GetMouseState SDL_GetNumAllocations SDL_GetNumAudioDevices SDL_GetNumAudioDrivers SDL_GetNumDisplayModes SDL_GetNumRenderDrivers SDL_GetNumTouchDevices SDL_GetNumTouchFingers SDL_GetNumVideoDisplays SDL_GetNumVideoDrivers SDL_GetPerformanceCounter SDL_GetPerformanceFrequency SDL_GetPixelFormatName SDL_GetPlatform SDL_GetPowerInfo SDL_GetPrefPath SDL_GetPreferredLocales SDL_GetQueuedAudioSize SDL_GetRGB SDL_GetRGBA SDL_GetRelativeMouseMode SDL_GetRelativeMouseState SDL_GetRenderDrawBlendMode SDL_GetRenderDrawColor SDL_GetRenderDriverInfo SDL_GetRenderTarget SDL_GetRenderer SDL_GetRendererInfo SDL_GetRendererOutputSize SDL_GetRevision SDL_GetRevisionNumber SDL_GetScancodeFromKey SDL_GetScancodeFromName SDL_GetScancodeName SDL_GetShapedWindowMode SDL_GetSurfaceAlphaMod SDL_GetSurfaceBlendMode SDL_GetSurfaceColorMod SDL_GetSystemRAM SDL_GetTextureAlphaMod SDL_GetTextureBlendMode SDL_GetTextureColorMod SDL_GetTextureScaleMode SDL_GetTextureUserData SDL_GetThreadID SDL_GetThreadName SDL_GetTicks SDL_GetTicks64 SDL_GetTouchDevice SDL_GetTouchDeviceType SDL_GetTouchFinger SDL_GetTouchName SDL_GetVersion SDL_GetVideoDriver SDL_GetWindowBordersSize SDL_GetWindowBrightness SDL_GetWindowData SDL_GetWindowDisplayIndex SDL_GetWindowDisplayMode SDL_GetWindowFlags SDL_GetWindowFromID SDL_GetWindowGammaRamp SDL_GetWindowGrab SDL_GetWindowICCProfile SDL_GetWindowID SDL_GetWindowKeyboardGrab SDL_GetWindowMaximumSize SDL_GetWindowMinimumSize SDL_GetWindowMouseGrab SDL_GetWindowMouseRect SDL_GetWindowOpacity SDL_GetWindowPixelFormat SDL_GetWindowPosition SDL_GetWindowSize SDL_GetWindowSurface SDL_GetWindowTitle SDL_GetWindowWMInfo SDL_GetYUVConversionMode SDL_GetYUVConversionModeForResolution SDL_HapticClose SDL_HapticDestroyEffect SDL_HapticEffectSupported SDL_HapticGetEffectStatus SDL_HapticIndex SDL_HapticName SDL_HapticNewEffect SDL_HapticNumAxes SDL_HapticNumEffects SDL_HapticNumEffectsPlaying SDL_HapticOpen SDL_HapticOpenFromJoystick SDL_HapticOpenFromMouse SDL_HapticOpened SDL_HapticPause SDL_HapticQuery SDL_HapticRumbleInit SDL_HapticRumblePlay SDL_HapticRumbleStop SDL_HapticRumbleSupported SDL_HapticRunEffect SDL_HapticSetAutocenter SDL_HapticSetGain SDL_HapticStopAll SDL_HapticStopEffect SDL_HapticUnpause SDL_HapticUpdateEffect SDL_Has3DNow SDL_HasARMSIMD SDL_HasAVX SDL_HasAVX2 SDL_HasAVX512F SDL_HasAltiVec SDL_HasClipboardText SDL_HasColorKey SDL_HasEvent SDL_HasEvents SDL_HasIntersection SDL_HasIntersectionF SDL_HasMMX SDL_HasNEON SDL_HasRDTSC SDL_HasSSE SDL_HasSSE2 SDL_HasSSE3 SDL_HasSSE41 SDL_HasSSE42 SDL_HasScreenKeyboardSupport SDL_HasSurfaceRLE SDL_HideWindow SDL_Init SDL_InitSubSystem SDL_IntersectFRect SDL_IntersectFRectAndLine SDL_IntersectRect SDL_IntersectRectAndLine SDL_IsGameController SDL_IsScreenKeyboardShown SDL_IsScreenSaverEnabled SDL_IsShapedWindow SDL_IsTablet SDL_IsTextInputActive SDL_IsTextInputShown SDL_JoystickAttachVirtual SDL_JoystickClose SDL_JoystickCurrentPowerLevel SDL_JoystickDetachVirtual SDL_JoystickEventState SDL_JoystickFromInstanceID SDL_JoystickFromPlayerIndex SDL_JoystickGetAttached SDL_JoystickGetAxis SDL_JoystickGetAxisInitialState SDL_JoystickGetBall SDL_JoystickGetButton SDL_JoystickGetDeviceGUID SDL_JoystickGetDeviceInstanceID SDL_JoystickGetDevicePlayerIndex SDL_JoystickGetDeviceProduct SDL_JoystickGetDeviceProductVersion SDL_JoystickGetDeviceType SDL_JoystickGetDeviceVendor SDL_JoystickGetGUID SDL_JoystickGetGUIDFromString SDL_JoystickGetGUIDString SDL_JoystickGetHat SDL_JoystickGetPlayerIndex SDL_JoystickGetProduct SDL_JoystickGetProductVersion SDL_JoystickGetSerial SDL_JoystickGetType SDL_JoystickGetVendor SDL_JoystickHasLED SDL_JoystickHasRumble SDL_JoystickHasRumbleTriggers SDL_JoystickInstanceID SDL_JoystickIsHaptic SDL_JoystickIsVirtual SDL_JoystickName SDL_JoystickNameForIndex SDL_JoystickNumAxes SDL_JoystickNumBalls SDL_JoystickNumButtons SDL_JoystickNumHats SDL_JoystickOpen SDL_JoystickRumble SDL_JoystickRumbleTriggers SDL_JoystickSendEffect SDL_JoystickSetLED SDL_JoystickSetPlayerIndex SDL_JoystickSetVirtualAxis SDL_JoystickSetVirtualButton SDL_JoystickSetVirtualHat SDL_JoystickUpdate SDL_LoadBMP_RW SDL_LoadDollarTemplates SDL_LoadFile SDL_LoadFile_RW SDL_LoadFunction SDL_LoadObject SDL_LoadWAV_RW SDL_LockAudio SDL_LockAudioDevice SDL_LockJoysticks SDL_LockMutex SDL_LockSensors SDL_LockSurface SDL_LockTexture SDL_LockTextureToSurface SDL_Log SDL_LogCritical SDL_LogDebug SDL_LogError SDL_LogGetOutputFunction SDL_LogGetPriority SDL_LogInfo SDL_LogMessage SDL_LogMessageV SDL_LogResetPriorities SDL_LogSetAllPriority SDL_LogSetOutputFunction SDL_LogSetPriority SDL_LogVerbose SDL_LogWarn SDL_LowerBlit SDL_LowerBlitScaled SDL_MapRGB SDL_MapRGBA SDL_MasksToPixelFormatEnum SDL_MaximizeWindow SDL_MemoryBarrierAcquireFunction SDL_MemoryBarrierReleaseFunction SDL_Metal_CreateView SDL_Metal_DestroyView SDL_Metal_GetDrawableSize SDL_Metal_GetLayer SDL_MinimizeWindow SDL_MixAudio SDL_MixAudioFormat SDL_MouseIsHaptic SDL_NewAudioStream SDL_NumHaptics SDL_NumJoysticks SDL_NumSensors SDL_OnApplicationDidBecomeActive SDL_OnApplicationDidEnterBackground SDL_OnApplicationDidReceiveMemoryWarning SDL_OnApplicationWillEnterForeground SDL_OnApplicationWillResignActive SDL_OnApplicationWillTerminate SDL_OpenAudio SDL_OpenAudioDevice SDL_OpenURL SDL_PauseAudio SDL_PauseAudioDevice SDL_PeepEvents SDL_PixelFormatEnumToMasks SDL_PollEvent SDL_PremultiplyAlpha SDL_PumpEvents SDL_PushEvent SDL_QueryTexture SDL_QueueAudio SDL_Quit SDL_QuitSubSystem SDL_RWFromConstMem SDL_RWFromFP SDL_RWFromFile SDL_RWFromMem SDL_RWclose SDL_RWread SDL_RWseek SDL_RWsize SDL_RWtell SDL_RWwrite SDL_RaiseWindow SDL_ReadBE16 SDL_ReadBE32 SDL_ReadBE64 SDL_ReadLE16 SDL_ReadLE32 SDL_ReadLE64 SDL_ReadU8 SDL_RecordGesture SDL_RegisterApp SDL_RegisterEvents SDL_RemoveTimer SDL_RenderClear SDL_RenderCopy SDL_RenderCopyEx SDL_RenderCopyExF SDL_RenderCopyF SDL_RenderDrawLine SDL_RenderDrawLineF SDL_RenderDrawLines SDL_RenderDrawLinesF SDL_RenderDrawPoint SDL_RenderDrawPointF SDL_RenderDrawPoints SDL_RenderDrawPointsF SDL_RenderDrawRect SDL_RenderDrawRectF SDL_RenderDrawRects SDL_RenderDrawRectsF SDL_RenderFillRect SDL_RenderFillRectF SDL_RenderFillRects SDL_RenderFillRectsF SDL_RenderFlush SDL_RenderGeometry SDL_RenderGeometryRaw SDL_RenderGetClipRect SDL_RenderGetD3D11Device SDL_RenderGetD3D9Device SDL_RenderGetIntegerScale SDL_RenderGetLogicalSize SDL_RenderGetMetalCommandEncoder SDL_RenderGetMetalLayer SDL_RenderGetScale SDL_RenderGetViewport SDL_RenderGetWindow SDL_RenderIsClipEnabled SDL_RenderLogicalToWindow SDL_RenderPresent SDL_RenderReadPixels SDL_RenderSetClipRect SDL_RenderSetIntegerScale SDL_RenderSetLogicalSize SDL_RenderSetScale SDL_RenderSetVSync SDL_RenderSetViewport SDL_RenderTargetSupported SDL_RenderWindowToLogical SDL_ReportAssertion SDL_ResetAssertionReport SDL_RestoreWindow SDL_SIMDAlloc SDL_SIMDFree SDL_SIMDGetAlignment SDL_SIMDRealloc SDL_SaveAllDollarTemplates SDL_SaveBMP_RW SDL_SaveDollarTemplate SDL_SemPost SDL_SemTryWait SDL_SemValue SDL_SemWait SDL_SemWaitTimeout SDL_SensorClose SDL_SensorFromInstanceID SDL_SensorGetData SDL_SensorGetDeviceInstanceID SDL_SensorGetDeviceName SDL_SensorGetDeviceNonPortableType SDL_SensorGetDeviceType SDL_SensorGetInstanceID SDL_SensorGetName SDL_SensorGetNonPortableType SDL_SensorGetType SDL_SensorOpen SDL_SensorUpdate SDL_SetAssertionHandler SDL_SetClipRect SDL_SetClipboardText SDL_SetColorKey SDL_SetCursor SDL_SetError SDL_SetEventFilter SDL_SetHint SDL_SetHintWithPriority SDL_SetMainReady SDL_SetMemoryFunctions SDL_SetModState SDL_SetPaletteColors SDL_SetPixelFormatPalette SDL_SetRelativeMouseMode SDL_SetRenderDrawBlendMode SDL_SetRenderDrawColor SDL_SetRenderTarget SDL_SetSurfaceAlphaMod SDL_SetSurfaceBlendMode SDL_SetSurfaceColorMod SDL_SetSurfacePalette SDL_SetSurfaceRLE SDL_SetTextInputRect SDL_SetTextureAlphaMod SDL_SetTextureBlendMode SDL_SetTextureColorMod SDL_SetTextureScaleMode SDL_SetTextureUserData SDL_SetThreadPriority SDL_SetWindowAlwaysOnTop SDL_SetWindowBordered SDL_SetWindowBrightness SDL_SetWindowData SDL_SetWindowDisplayMode SDL_SetWindowFullscreen SDL_SetWindowGammaRamp SDL_SetWindowGrab SDL_SetWindowHitTest SDL_SetWindowIcon SDL_SetWindowInputFocus SDL_SetWindowKeyboardGrab SDL_SetWindowMaximumSize SDL_SetWindowMinimumSize SDL_SetWindowModalFor SDL_SetWindowMouseGrab SDL_SetWindowMouseRect SDL_SetWindowOpacity SDL_SetWindowPosition SDL_SetWindowResizable SDL_SetWindowShape SDL_SetWindowSize SDL_SetWindowTitle SDL_SetWindowsMessageHook SDL_SetYUVConversionMode SDL_ShowCursor SDL_ShowMessageBox SDL_ShowSimpleMessageBox SDL_ShowWindow SDL_SoftStretch SDL_SoftStretchLinear SDL_StartTextInput SDL_StopTextInput SDL_TLSCleanup SDL_TLSCreate SDL_TLSGet SDL_TLSSet SDL_ThreadID SDL_TryLockMutex SDL_UnionFRect SDL_UnionRect SDL_UnloadObject SDL_UnlockAudio SDL_UnlockAudioDevice SDL_UnlockJoysticks SDL_UnlockMutex SDL_UnlockSensors SDL_UnlockSurface SDL_UnlockTexture SDL_UnregisterApp SDL_UpdateNVTexture SDL_UpdateTexture SDL_UpdateWindowSurface SDL_UpdateWindowSurfaceRects SDL_UpdateYUVTexture SDL_UpperBlit SDL_UpperBlitScaled SDL_VideoInit SDL_VideoQuit SDL_Vulkan_CreateSurface SDL_Vulkan_GetDrawableSize SDL_Vulkan_GetInstanceExtensions SDL_Vulkan_GetVkGetInstanceProcAddr SDL_Vulkan_LoadLibrary SDL_Vulkan_UnloadLibrary SDL_WaitEvent SDL_WaitEventTimeout SDL_WaitThread SDL_WarpMouseGlobal SDL_WarpMouseInWindow SDL_WasInit SDL_WriteBE16 SDL_WriteBE32 SDL_WriteBE64 SDL_WriteLE16 SDL_WriteLE32 SDL_WriteLE64 SDL_WriteU8 SDL_abs SDL_acos SDL_acosf SDL_asin SDL_asinf SDL_asprintf SDL_atan SDL_atan2 SDL_atan2f SDL_atanf SDL_atof SDL_atoi SDL_calloc SDL_ceil SDL_ceilf SDL_copysign SDL_copysignf SDL_cos SDL_cosf SDL_crc32 SDL_exp SDL_expf SDL_fabs SDL_fabsf SDL_floor SDL_floorf SDL_fmod SDL_fmodf SDL_free SDL_getenv SDL_hid_ble_scan SDL_hid_close SDL_hid_device_change_count SDL_hid_enumerate SDL_hid_exit SDL_hid_free_enumeration SDL_hid_get_feature_report SDL_hid_get_indexed_string SDL_hid_get_manufacturer_string SDL_hid_get_product_string SDL_hid_get_serial_number_string SDL_hid_init SDL_hid_open SDL_hid_open_path SDL_hid_read SDL_hid_read_timeout SDL_hid_send_feature_report SDL_hid_set_nonblocking SDL_hid_write SDL_iconv SDL_iconv_close SDL_iconv_open SDL_iconv_string SDL_isalnum SDL_isalpha SDL_isblank SDL_iscntrl SDL_isdigit SDL_isgraph SDL_islower SDL_isprint SDL_ispunct SDL_isspace SDL_isupper SDL_isxdigit SDL_itoa SDL_lltoa SDL_log SDL_log10 SDL_log10f SDL_logf SDL_lround SDL_lroundf SDL_ltoa SDL_malloc SDL_memcmp SDL_memcpy SDL_memmove SDL_memset SDL_pow SDL_powf SDL_qsort SDL_realloc SDL_round SDL_roundf SDL_scalbn SDL_scalbnf SDL_setenv SDL_sin SDL_sinf SDL_snprintf SDL_sqrt SDL_sqrtf SDL_sscanf SDL_strcasecmp SDL_strchr SDL_strcmp SDL_strdup SDL_strlcat SDL_strlcpy SDL_strlen SDL_strlwr SDL_strncasecmp SDL_strncmp SDL_strrchr SDL_strrev SDL_strstr SDL_strtod SDL_strtokr SDL_strtol SDL_strtoll SDL_strtoul SDL_strtoull SDL_strupr SDL_tan SDL_tanf SDL_tolower SDL_toupper SDL_trunc SDL_truncf SDL_uitoa SDL_ulltoa SDL_ultoa SDL_utf8strlcpy SDL_utf8strlen SDL_vasprintf SDL_vsnprintf SDL_vsscanf SDL_wcscasecmp SDL_wcscmp SDL_wcsdup SDL_wcslcat SDL_wcslcpy SDL_wcslen SDL_wcsncasecmp SDL_wcsncmp SDL_wcsstr

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

755KB

Virtual Size

754KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

792B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

SDL2_image.dll

IMPHASH 4dddb0e55addd0918013d39a1ac31b1a
SHA256 1e364af75fee0c83506fbdfd4d5b0e386c4e9c6a33ddbddac61ddb131e360194
MD5 b8d249a5e394b4e6a954c557af1b80e6
SHA1 b03bb9d09447114a018110bfb91d56ef8d5ec3bb
SHA512 2f2e248c3963711f1a9f5d8baea5b8527d1df1748cd7e33bf898a380ae748f7a65629438711ff9a5343e64762ec0b5dc478cdf19fbf7111dac9d11a8427e0007
SSDEEP 3072:6bsejIuO504fzsOM05Nmy7iGpJ7SvFisgf:6bmX0qQOhmyPs
TLSH
T182C34A17F2E3A0FCC617D0B4A297B637F43138551630BEBE1BA09A345E61E207B9D916
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4855

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection QueryPerformanceCounter RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcrt

__dllonexit __iob_func _amsg_exit _initterm _lock _onexit _setjmp _unlock abort calloc fputs free longjmp malloc signal strncmp vfprintf

sdl2

SDL_ClearError SDL_ConvertSurfaceFormat SDL_CreateRGBSurface SDL_CreateTextureFromSurface SDL_Error SDL_FillRect SDL_FreeSurface SDL_GetError SDL_LoadFile_RW SDL_LoadFunction SDL_LoadObject SDL_Log SDL_MapRGB SDL_RWFromFile SDL_ReadBE32 SDL_ReadLE16 SDL_ReadLE32 SDL_SetColorKey SDL_SetError SDL_UnloadObject SDL_UpperBlit SDL_acosf SDL_atan2f SDL_calloc SDL_ceilf SDL_cosf SDL_fabs SDL_fabsf SDL_floorf SDL_fmodf SDL_free SDL_isdigit SDL_isspace SDL_malloc SDL_memcmp SDL_memcpy SDL_memset SDL_pow SDL_qsort SDL_realloc SDL_sinf SDL_snprintf SDL_sqrt SDL_sqrtf SDL_sscanf SDL_strchr SDL_strcmp SDL_strlcpy SDL_strlen SDL_strncasecmp SDL_strncmp SDL_strrchr SDL_strstr SDL_strtol SDL_strtoll SDL_tanf SDL_toupper

Name

.text

Size

97KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

240B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

824B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

TouchInput.dll

IMPHASH 14bf287cca8eea3ac952bdd6cc2a3f7c
SHA256 0c3cac7d838a60ea68f0788e49c3fdeb5db19c60e2d15b15dfb4ed8a261151b3
MD5 f4808a93bf42f6698c91d4a49e01a6ab
SHA1 ababb7d20df32afc2fe0a50cc73905b6ad60406b
SHA512 b64071dc3586a5724bdca7215e536ba48b201db66a405d0187352f4a6b553730078e5322035521585cffc35d14e060733280157f68fea484787943cb4597d598
SSDEEP 384:BhxCrc+5InevrQIS+T7MQv/uo6ki2ZLUxiTKt0VWVFTwWdGBkS+:BCtWeTQISFr2l7VWV9+k
TLSH
T173C28E8B6A2A4593EF56C9BCC0D65907B8B8F2415FDA25CB5323C2181E463D03BEC66D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

33:67:b3:4d:aa:97:41:b2:3f:4e:9e:c4:4e:8d:89:cf:29:e9:68:a6:2d:01:bd:7c:46:30:e5:3e:16:26:13:87

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 17, 2025

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

43:52:15:04:9b:64:6e:84:37:81:b8:f3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 4, 2024 - Dec 5, 2025

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

6004

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\monec\workspace\Monect_host\x64\Release\TouchInput.pdb

avcodec-59.dll

IMPHASH 270ade4fb1c52d88eca2783c9cbf51cf
SHA256 5023347055e0dc62d02d6e1d557832d61834fda26da11f43ea7eb04f224ed92d
MD5 5398be059d32fc99ae35a469bcd55255
SHA1 dd4a6154a185e1fe24a4ce024179441ec8a44194
SHA512 c0f6b782030c8bd4da9bde690192a826f4eb9bb027918bdb81b1a91195e22d2a1e2475767f250cc4e6cd23e5a21650030765ec769acb8399f330172200251f94
SSDEEP 393216:rh5v+6bVVGcq20EPrEStqiJ0WOf5dd0EhRCe9lBZkvxMXHthsT6ltmPshdPPRX29:r7HK20+RJ8jd0EjCilb+MXc4Ph4dH3
TLSH
T1B5F79F9DD5D3919CD52BD8F003BEFB23BA28783D51106B7627CAAA306972BC4571AF40
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

DLL Hijacking vulnerability

Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

avutil-57

av_asprintf av_audio_fifo_alloc av_audio_fifo_drain av_audio_fifo_free av_audio_fifo_read av_audio_fifo_reset av_audio_fifo_size av_audio_fifo_write av_base64_decode av_base64_encode av_bmg_get av_bprint_append_data av_bprint_channel_layout av_bprint_chars av_bprint_clear av_bprint_escape av_bprint_finalize av_bprint_get_buffer av_bprint_init av_bprint_init_for_buffer av_bprintf av_buffer_alloc av_buffer_allocz av_buffer_create av_buffer_default_free av_buffer_get_ref_count av_buffer_is_writable av_buffer_make_writable av_buffer_pool_get av_buffer_pool_init av_buffer_pool_init2 av_buffer_pool_uninit av_buffer_realloc av_buffer_ref av_buffer_replace av_buffer_unref av_calloc av_chroma_location_name av_color_primaries_name av_color_range_name av_color_space_name av_color_transfer_name av_content_light_metadata_create_side_data av_cpu_count av_crc av_crc_get_table av_crc_init av_d2q av_default_item_name av_dict_copy av_dict_free av_dict_get av_dict_set av_display_matrix_flip av_display_rotation_set av_div_q av_dovi_metadata_alloc av_downmix_info_update_side_data av_dynamic_hdr_plus_alloc av_dynarray_add av_dynarray_add_nofree av_expr_eval av_expr_free av_expr_parse av_fast_malloc av_fast_mallocz av_fast_realloc av_fifo_alloc av_fifo_alloc_array av_fifo_drain av_fifo_free av_fifo_freep av_fifo_generic_peek av_fifo_generic_peek_at av_fifo_generic_read av_fifo_generic_write av_fifo_grow av_fifo_realloc2 av_fifo_reset av_fifo_size av_fifo_space av_film_grain_params_create_side_data av_find_best_pix_fmt_of_2 av_fourcc_make_string av_frame_alloc av_frame_apply_cropping av_frame_clone av_frame_copy av_frame_copy_props av_frame_free av_frame_get_buffer av_frame_get_side_data av_frame_is_writable av_frame_make_writable av_frame_move_ref av_frame_new_side_data av_frame_new_side_data_from_buf av_frame_ref av_frame_remove_side_data av_frame_unref av_free av_freep av_gcd av_get_bits_per_pixel av_get_bytes_per_sample av_get_channel_layout_channel_index av_get_channel_layout_nb_channels av_get_channel_layout_string av_get_cpu_flags av_get_default_channel_layout av_get_media_type_string av_get_picture_type_char av_get_pix_fmt_name av_get_planar_sample_fmt av_get_sample_fmt_name av_get_token av_gettime av_hwdevice_ctx_create av_hwdevice_get_type_name av_hwframe_ctx_alloc av_hwframe_ctx_init av_hwframe_get_buffer av_hwframe_map av_hwframe_transfer_data av_image_check_sar av_image_check_size av_image_check_size2 av_image_copy av_image_copy_plane av_image_copy_to_buffer av_image_fill_arrays av_image_fill_black av_image_fill_linesizes av_image_fill_plane_sizes av_image_fill_pointers av_image_get_buffer_size av_image_get_linesize av_lfg_init av_lfg_init_from_data av_log av_log_get_level av_log_once av_lzo1x_decode av_malloc av_malloc_array av_mallocz av_mastering_display_metadata_create_side_data av_match_list av_md5_alloc av_md5_final av_md5_init av_md5_update av_memcpy_backptr av_memdup av_mul_q av_nearer_q av_opt_copy av_opt_free av_opt_get_int av_opt_next av_opt_set av_opt_set_defaults av_opt_set_defaults2 av_opt_set_dict av_opt_set_dict2 av_opt_set_from_string av_opt_set_int av_parse_color av_pix_fmt_count_planes av_pix_fmt_desc_get av_pix_fmt_get_chroma_sub_sample av_realloc av_realloc_array av_realloc_f av_reallocp av_reallocp_array av_reduce av_rescale av_rescale_q av_rescale_q_rnd av_rescale_rnd av_sample_fmt_is_planar av_samples_copy av_samples_fill_arrays av_samples_get_buffer_size av_samples_set_silence av_size_mult av_sscanf av_stereo3d_alloc av_stereo3d_create_side_data av_strcasecmp av_strdup av_strerror av_stristr av_strlcat av_strlcatf av_strlcpy av_strncasecmp av_strtok av_timecode_adjust_ntsc_framenum2 av_timecode_get_smpte av_timecode_init_from_string av_timecode_make_mpeg_tc_string av_timecode_make_smpte_tc_string2 av_tx_init av_tx_uninit av_usleep av_vbprintf av_video_enc_params_create_side_data av_vlog avpriv_alloc_fixed_dsp avpriv_cga_font avpriv_float_dsp_alloc avpriv_get_gamma_from_trc avpriv_get_trc_function_from_trc avpriv_init_lls avpriv_report_missing_feature avpriv_request_sample avpriv_scalarproduct_float_c avpriv_set_systematic_pal2 avpriv_slicethread_create avpriv_slicethread_execute avpriv_slicethread_free avpriv_solve_lls avpriv_tempfile avpriv_vga16_font

swresample-4

swr_alloc swr_close swr_convert swr_free swr_init swr_is_initialized

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext OpenProcessToken RegCloseKey RegEnumKeyExW RegEnumValueW RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW

bcrypt

BCryptGenRandom

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared AddVectoredExceptionHandler CancelIo CloseHandle CompareStringOrdinal CopyFileExW CreateDirectoryW CreateEventA CreateEventW CreateFileMappingA CreateFileW CreateHardLinkW CreateMutexA CreateNamedPipeW CreateProcessW CreateSemaphoreA CreateSemaphoreW CreateSymbolicLinkW CreateThread CreateToolhelp32Snapshot DebugBreak DeleteCriticalSection DeleteFileW DeviceIoControl DuplicateHandle EnterCriticalSection ExitProcess FindClose FindFirstFileW FindNextFileW FlushFileBuffers FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetActiveProcessorGroupCount GetCommandLineW GetConsoleMode GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFinalPathNameByHandleW GetFullPathNameW GetHandleInformation GetLastError GetLogicalProcessorInformation GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNumaHighestNodeNumber GetNumaNodeProcessorMaskEx GetOverlappedResult GetProcAddress GetProcessAffinityMask GetProcessHeap GetProcessId GetStdHandle GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadContext GetThreadGroupAffinity GetThreadPriority GetTickCount64 GetTimeZoneInformation GetWindowsDirectoryW HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSRWLock IsDBCSLeadByteEx IsDebuggerPresent LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW LoadLibraryW MapViewOfFile Module32FirstW Module32NextW MoveFileExW MultiByteToWideChar OpenFileMappingA OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReleaseMutex ReleaseSRWLockExclusive ReleaseSRWLockShared ReleaseSemaphore RemoveDirectoryW RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetCurrentDirectoryW SetEnvironmentVariableW SetEvent SetFileAttributesW SetFileInformationByHandle SetFilePointerEx SetHandleInformation SetLastError SetProcessAffinityMask SetThreadAffinityMask SetThreadContext SetThreadErrorMode SetThreadGroupAffinity SetThreadPriority SetThreadStackGuarantee Sleep SleepConditionVariableCS SleepConditionVariableSRW SuspendThread SwitchToThread TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryAcquireSRWLockExclusive TryEnterCriticalSection UnmapViewOfFile VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile __C_specific_handler

mfplat

MFCreateAlignedMemoryBuffer MFCreateMediaType MFCreateSample MFShutdown MFStartup

msvcrt

___lc_codepage_func ___mb_cur_max_func __iob_func __setusermatherr _aligned_free _aligned_malloc _aligned_realloc _amsg_exit _assert _beginthreadex _close _endthreadex _errno _exit _fdopen _filelengthi64 _fileno _fileno _fstat64 _ftime64 _ftime64_s _gmtime64 _initterm _hypot _localtime64 _lock _lseeki64 _mktime64 _open _read _setjmp _stat64 _stricmp _strdup _strnicmp _time64 _ultoa _unlink _unlock _vscprintf _vsnprintf _wfopen _wfopen_s _wrename _wunlink abort acos atan atof atoi bsearch calloc clearerr exit fclose feof ferror fflush fgetc fgetpos fgets fgetws fopen fprintf fputc fputs fread free fseek fsetpos ftell fwrite getc getenv getwc isalnum islower isspace isupper iswctype isxdigit _write localeconv log10 longjmp malloc memchr memcmp memcpy memmove memset printf putc putwc qsort realloc rand remove setlocale setvbuf signal srand strcat strchr strcmp strcoll strcpy strcspn strerror strftime strlen strncat strncmp strncpy strpbrk strrchr strspn strstr strtok strtol strtoul strxfrm swscanf_s tan tanh tolower toupper towlower towupper ungetc vfprintf ungetwc wcscat wcschr wcscoll wcscpy wcscspn wcsftime wcslen wcsrchr wcsstr wcstoul wcsxfrm

ole32

CoInitializeEx CoTaskMemFree CoUninitialize StringFromGUID2

userenv

GetUserProfileDirectoryW

ws2_32

WSACleanup WSADuplicateSocketW WSAGetLastError WSARecv WSASend WSASocketW WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket listen recv recvfrom select send sendto setsockopt shutdown

av_ac3_parse_header av_adts_header_parse av_bsf_alloc av_bsf_flush av_bsf_free av_bsf_get_by_name av_bsf_get_class av_bsf_get_null_filter av_bsf_init av_bsf_iterate av_bsf_list_alloc av_bsf_list_append av_bsf_list_append2 av_bsf_list_finalize av_bsf_list_free av_bsf_list_parse_str av_bsf_receive_packet av_bsf_send_packet av_codec_ffversion av_codec_is_decoder av_codec_is_encoder av_codec_iterate av_cpb_properties_alloc av_d3d11va_alloc_context av_dct_calc av_dct_end av_dct_init av_dirac_parse_sequence_header av_dv_codec_profile av_dv_codec_profile2 av_dv_frame_profile av_fast_padded_malloc av_fast_padded_mallocz av_fft_calc av_fft_end av_fft_init av_fft_permute av_get_audio_frame_duration av_get_audio_frame_duration2 av_get_bits_per_sample av_get_exact_bits_per_sample av_get_pcm_codec av_get_profile_name av_grow_packet av_imdct_calc av_imdct_half av_init_packet av_jni_get_java_vm av_jni_set_java_vm av_mdct_calc av_mdct_end av_mdct_init av_mediacodec_alloc_context av_mediacodec_default_free av_mediacodec_default_init av_mediacodec_release_buffer av_mediacodec_render_buffer_at_time av_new_packet av_packet_add_side_data av_packet_alloc av_packet_clone av_packet_copy_props av_packet_free av_packet_free_side_data av_packet_from_data av_packet_get_side_data av_packet_make_refcounted av_packet_make_writable av_packet_move_ref av_packet_new_side_data av_packet_pack_dictionary av_packet_ref av_packet_rescale_ts av_packet_shrink_side_data av_packet_side_data_name av_packet_unpack_dictionary av_packet_unref av_parser_close av_parser_init av_parser_iterate av_parser_parse2 av_qsv_alloc_context av_rdft_calc av_rdft_end av_rdft_init av_shrink_packet av_vorbis_parse_frame av_vorbis_parse_frame_flags av_vorbis_parse_free av_vorbis_parse_init av_vorbis_parse_reset av_xiphlacing avcodec_align_dimensions avcodec_align_dimensions2 avcodec_alloc_context3 avcodec_chroma_pos_to_enum avcodec_close avcodec_configuration avcodec_dct_alloc avcodec_dct_get_class avcodec_dct_init avcodec_decode_subtitle2 avcodec_default_execute avcodec_default_execute2 avcodec_default_get_buffer2 avcodec_default_get_encode_buffer avcodec_default_get_format avcodec_descriptor_get avcodec_descriptor_get_by_name avcodec_descriptor_next avcodec_encode_subtitle avcodec_enum_to_chroma_pos avcodec_fill_audio_frame avcodec_find_best_pix_fmt_of_list avcodec_find_decoder avcodec_find_decoder_by_name avcodec_find_encoder avcodec_find_encoder_by_name avcodec_flush_buffers avcodec_free_context avcodec_get_class avcodec_get_frame_class avcodec_get_hw_config avcodec_get_hw_frames_parameters avcodec_get_name avcodec_get_subtitle_rect_class avcodec_get_type avcodec_is_open avcodec_license avcodec_open2 avcodec_parameters_alloc avcodec_parameters_copy avcodec_parameters_free avcodec_parameters_from_context avcodec_parameters_to_context avcodec_pix_fmt_to_codec_tag avcodec_profile_name avcodec_receive_frame avcodec_receive_packet avcodec_send_frame avcodec_send_packet avcodec_string avcodec_version avpriv_ac3_parse_header avpriv_adts_header_parse avpriv_codec_get_cap_skip_frame_fill_param avpriv_dca_convert_bitstream avpriv_dca_parse_core_frame_header avpriv_elbg_do avpriv_elbg_free avpriv_exif_decode_ifd avpriv_find_start_code avpriv_fits_header_init avpriv_fits_header_parse_line avpriv_get_raw_pix_fmt_tags avpriv_h264_has_num_reorder_frames avpriv_mpeg4audio_get_config2 avpriv_mpegaudio_decode_header avpriv_packet_list_free avpriv_packet_list_get avpriv_packet_list_put avpriv_pix_fmt_find avpriv_split_xiph_headers avpriv_tak_parse_streaminfo avsubtitle_free

Name

.text

Size

57.1MB

Virtual Size

57.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rodata

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

209KB

Virtual Size

209KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

8.5MB

Virtual Size

8.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

501KB

Virtual Size

501KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

810KB

Virtual Size

810KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

11.7MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

896B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

137KB

Virtual Size

137KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

avformat-59.dll

IMPHASH 40570676c8f8801717eef760b624b85d
SHA256 2072e00d0c821eff03b22cfafdc164404ec7a15c2cee28520184efe6fd97bee6
MD5 73719d8f1cc65ebce26a5e2959b92bc4
SHA1 3b27af34a204c0feebe1ff217880ea90d6341584
SHA512 2d19463188bd36cc7cfa1b18c3bb4e58642d14cab12cf8653730f93260a9c2e0e8101e768d30ca22ba26887d2abb11ea8f407203df50a4de754dc7f019b6c395
SSDEEP 196608:+EizaE5RwATgZaqd+KPRkbTNV/3Ew/1g3wg7T:+RRlY+GRkbTT3HgXT
TLSH
T15BF65B16E29350ECC66BC130866BA773B632FC691130BE7F1694EB742E31F90565EB24
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

DLL Hijacking vulnerability

Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

avcodec-59

av_ac3_parse_header av_adts_header_parse av_bsf_alloc av_bsf_flush av_bsf_free av_bsf_get_by_name av_bsf_get_null_filter av_bsf_init av_bsf_list_parse_str av_bsf_receive_packet av_bsf_send_packet av_codec_is_decoder av_codec_iterate av_dirac_parse_sequence_header av_dv_codec_profile2 av_dv_frame_profile av_get_audio_frame_duration av_get_audio_frame_duration2 av_get_bits_per_sample av_get_exact_bits_per_sample av_grow_packet av_init_packet av_new_packet av_packet_add_side_data av_packet_alloc av_packet_clone av_packet_copy_props av_packet_free av_packet_from_data av_packet_get_side_data av_packet_make_refcounted av_packet_move_ref av_packet_new_side_data av_packet_pack_dictionary av_packet_ref av_packet_rescale_ts av_packet_unref av_parser_close av_parser_init av_parser_parse2 av_shrink_packet av_vorbis_parse_frame_flags av_vorbis_parse_free av_vorbis_parse_init av_vorbis_parse_reset av_xiphlacing avcodec_alloc_context3 avcodec_chroma_pos_to_enum avcodec_close avcodec_decode_subtitle2 avcodec_descriptor_get avcodec_descriptor_get_by_name avcodec_enum_to_chroma_pos avcodec_find_decoder avcodec_find_decoder_by_name avcodec_free_context avcodec_get_name avcodec_get_type avcodec_is_open avcodec_open2 avcodec_parameters_alloc avcodec_parameters_copy avcodec_parameters_free avcodec_parameters_from_context avcodec_parameters_to_context avcodec_pix_fmt_to_codec_tag avcodec_receive_frame avcodec_send_packet avcodec_string avpriv_ac3_parse_header avpriv_adts_header_parse avpriv_codec_get_cap_skip_frame_fill_param avpriv_dca_convert_bitstream avpriv_dca_parse_core_frame_header avpriv_exif_decode_ifd avpriv_find_start_code avpriv_fits_header_init avpriv_fits_header_parse_line avpriv_h264_has_num_reorder_frames avpriv_mpeg4audio_get_config2 avpriv_mpegaudio_decode_header avpriv_packet_list_free avpriv_packet_list_get avpriv_packet_list_put avpriv_pix_fmt_find avpriv_split_xiph_headers avpriv_tak_parse_streaminfo avsubtitle_free

avutil-57

av_add_q av_add_stable av_adler32_update av_aes_alloc av_aes_crypt av_aes_ctr_alloc av_aes_ctr_crypt av_aes_ctr_free av_aes_ctr_get_iv av_aes_ctr_increment_iv av_aes_ctr_init av_aes_ctr_set_full_iv av_aes_ctr_set_random_iv av_aes_init av_append_path_component av_asprintf av_base64_decode av_base64_encode av_basename av_blowfish_crypt_ecb av_blowfish_init av_bprint_append_data av_bprint_chars av_bprint_clear av_bprint_finalize av_bprint_init av_bprint_init_for_buffer av_bprintf av_buffer_alloc av_buffer_create av_buffer_default_free av_buffer_pool_get av_buffer_pool_init av_buffer_pool_uninit av_buffer_realloc av_buffer_ref av_buffer_unref av_calloc av_color_primaries_name av_color_space_name av_color_transfer_name av_compare_mod av_compare_ts av_content_light_metadata_alloc av_crc av_crc_get_table av_d2q av_default_item_name av_des_alloc av_des_crypt av_des_init av_des_mac av_dict_copy av_dict_count av_dict_free av_dict_get av_dict_get_string av_dict_parse_string av_dict_set av_dict_set_int av_dirname av_display_rotation_get av_div_q av_dovi_alloc av_dynarray2_add av_dynarray_add av_dynarray_add_nofree av_encryption_info_add_side_data av_encryption_info_alloc av_encryption_info_clone av_encryption_info_free av_encryption_init_info_add_side_data av_encryption_init_info_alloc av_encryption_init_info_free av_encryption_init_info_get_side_data av_escape av_expr_eval av_expr_parse av_fast_malloc av_fast_realloc av_fifo_alloc av_fifo_alloc_array av_fifo_drain av_fifo_freep av_fifo_generic_peek_at av_fifo_generic_read av_fifo_generic_write av_fifo_realloc2 av_fifo_reset av_fifo_size av_fifo_space av_find_info_tag av_fourcc_make_string av_frame_alloc av_frame_free av_free av_freep av_gcd av_get_bits_per_pixel av_get_bytes_per_sample av_get_channel_layout_nb_channels av_get_channel_layout_string av_get_channel_name av_get_media_type_string av_get_picture_type_char av_get_pix_fmt av_get_pix_fmt_name av_get_random_seed av_get_sample_fmt_name av_get_token av_gettime av_gettime_relative av_hash_alloc av_hash_final_hex av_hash_freep av_hash_get_name av_hash_init av_hash_update av_hmac_alloc av_hmac_final av_hmac_free av_hmac_init av_hmac_update av_image_check_sar av_image_check_size av_image_fill_linesizes av_image_get_buffer_size av_lfg_init av_log av_log_get_level av_log_once av_lzo1x_decode av_malloc av_malloc_array av_mallocz av_mastering_display_metadata_alloc av_match_list av_match_name av_md5_alloc av_md5_final av_md5_init av_md5_sum av_md5_update av_memdup av_mul_q av_opt_copy av_opt_flag_is_set av_opt_free av_opt_get av_opt_get_dict_val av_opt_get_int av_opt_get_key_value av_opt_ptr av_opt_set av_opt_set_bin av_opt_set_defaults av_opt_set_dict av_opt_set_dict2 av_opt_set_dict_val av_opt_set_int av_parse_time av_parse_video_rate av_pix_fmt_desc_get av_pix_fmt_get_chroma_sub_sample av_q2intfloat av_rc4_alloc av_rc4_crypt av_rc4_init av_realloc av_realloc_array av_realloc_f av_reallocp av_reallocp_array av_reduce av_rescale av_rescale_q av_rescale_q_rnd av_rescale_rnd av_sample_fmt_is_planar av_set_options_string av_sha_alloc av_sha_final av_sha_init av_sha_update av_small_strptime av_spherical_alloc av_spherical_projection_name av_spherical_tile_bounds av_sscanf av_stereo3d_alloc av_stereo3d_type_name av_strcasecmp av_strdup av_strerror av_strireplace av_stristart av_stristr av_strlcat av_strlcatf av_strlcpy av_strncasecmp av_strndup av_strnstr av_strstart av_strtod av_strtok av_sub_q av_tea_alloc av_tea_crypt av_tea_init av_thread_message_flush av_thread_message_queue_alloc av_thread_message_queue_free av_thread_message_queue_recv av_thread_message_queue_send av_thread_message_queue_set_err_recv av_thread_message_queue_set_err_send av_thread_message_queue_set_free_func av_timecode_get_smpte_from_framenum av_timecode_init av_timecode_init_from_string av_timecode_make_smpte_tc_string2 av_timecode_make_string av_timegm av_tree_destroy av_tree_enumerate av_tree_find av_tree_insert av_tree_node_alloc av_usleep av_vbprintf av_xtea_le_crypt av_xtea_le_init avpriv_dict_set_timestamp avpriv_get_gamma_from_trc avpriv_open avpriv_report_missing_feature avpriv_request_sample avpriv_tempfile

advapi32

CryptAcquireContextA CryptAcquireContextW CryptCreateHash CryptDecrypt CryptDestroyHash CryptGenRandom CryptGetHashParam CryptGetProvParam CryptReleaseContext CryptSetHashParam CryptSetProvParam CryptSignHashA DeregisterEventSource GetUserNameA InitializeSecurityDescriptor RegCloseKey RegOpenKeyExW RegQueryValueExW RegisterEventSourceW ReportEventW SetSecurityDescriptorDacl SystemFunction036

crypt32

CertCloseStore CertDeleteCertificateFromStore CertEnumCRLsInStore CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext CertGetCertificateContextProperty CertOpenStore PFXImportCertStore

iphlpapi

GetAdaptersAddresses if_indextoname if_nametoindex

kernel32

AddVectoredExceptionHandler CancelIoEx CloseHandle ConvertFiberToThread ConvertThreadToFiber CreateDirectoryW CreateEventA CreateFiber CreateFileA CreateSemaphoreA DeleteCriticalSection DeleteFiber DuplicateHandle EnterCriticalSection FindClose FindFirstFileA FindFirstFileW FindNextFileW FormatMessageA FormatMessageW FreeLibrary GetACP GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentVariableW GetFileAttributesW GetFileInformationByHandle GetFileType GetFinalPathNameByHandleA GetFullPathNameW GetHandleInformation GetLastError GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleExA GetModuleHandleExW GetModuleHandleW GetProcAddress GetProcessAffinityMask GetProcessTimes GetStdHandle GetSystemDirectoryA GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetThreadTimes GetTickCount GetTickCount64 GetVersion GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalHandle GlobalLock GlobalUnlock InitializeCriticalSection InitializeCriticalSectionAndSpinCount IsDBCSLeadByteEx IsDebuggerPresent IsValidCodePage LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree MoveFileExA MoveFileExW MultiByteToWideChar OpenProcess OutputDebugStringA PeekNamedPipe QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleA ReadConsoleW ReadFile ReleaseSemaphore RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetConsoleMode SetDllDirectoryW SetEvent SetHandleInformation SetLastError SetProcessAffinityMask SetThreadAffinityMask SetThreadContext SetThreadPriority Sleep SuspendThread SwitchToFiber TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection VirtualAlloc VirtualFree VirtualLock VirtualProtect VirtualQuery VirtualUnlock WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile __C_specific_handler lstrcmpiW lstrcpyA lstrcpynA

msvcrt

___lc_codepage_func ___mb_cur_max_func __argv __iob_func __setusermatherr _access _amsg_exit _assert _beginthread _beginthreadex _close _close _dup _dup2 _endthreadex _errno _exit _fdopen _filelengthi64 _fileno _findclose _fileno _fstat64 _ftime64 _get_osfhandle _getcwd _getmaxstdio _gmtime64 _initterm _hypot _isctype _localtime64 _lock _lseeki64 _mkdir _mktime64 _onexit _open _open_osfhandle _putenv _read _read _rmdir _setjmp _setmaxstdio _setmode _setmode _stat64 _stricmp _strdup _strdup _strnicmp _time64 _ultoa _unlink _unlink _unlock _vscprintf _vsnprintf _vsnwprintf _vsnprintf_s _waccess _wassert _wfindfirst64 _wfindnext64 _wfopen _wfullpath _wmkdir _wopen _wremove _wrmdir _wstat64 _wunlink abort atof atoi bsearch calloc div exit fclose feof ferror fflush fgetc fgetpos fgets fopen fprintf fputc fputs fread free fseek fsetpos ftell fwrite getc getenv getwc isalnum isalpha islower isprint isspace isupper iswctype isxdigit _write localeconv log10 longjmp malloc memchr memcmp memcpy memmove memset printf putc puts putwc qsort raise realloc rand setlocale setvbuf signal sinh sprintf srand strcat strchr strcmp strcoll strcpy strcpy_s strcspn strerror strftime strlen strncat strncmp strncpy strpbrk strrchr strspn strstr strtok strtok_s strtol strtoul strxfrm tan tolower toupper towlower towupper ungetc vfprintf ungetwc wcscat wcscoll wcscpy wcsftime wcslen wcsrchr wcsstr wcstombs wcsxfrm

ncrypt

BCryptCloseAlgorithmProvider BCryptGenRandom BCryptOpenAlgorithmProvider NCryptDecrypt NCryptDeleteKey NCryptFreeObject NCryptGetProperty NCryptOpenKey NCryptOpenStorageProvider NCryptSignHash

shell32

SHGetFolderPathW SHGetSpecialFolderPathA

user32

GetProcessWindowStation GetUserObjectInformationW MessageBoxW wsprintfA

ws2_32

WSACleanup WSACloseEvent WSACreateEvent WSAEventSelect WSAGetLastError WSAIoctl WSARecvFrom WSASendTo WSASetLastError WSASocketA WSAStartup WSAStringToAddressA WSAWaitForMultipleEvents __WSAFDIsSet accept bind closesocket connect freeaddrinfo getaddrinfo gethostbyaddr gethostbyname gethostname getnameinfo getpeername getservbyname getservbyport getsockname getsockopt htonl htons inet_addr inet_ntoa inet_ntop inet_pton ioctlsocket listen ntohl ntohs recv recvfrom select send sendto setsockopt shutdown socket

av_add_index_entry av_append_packet av_codec_get_id av_codec_get_tag av_codec_get_tag2 av_demuxer_iterate av_disposition_from_string av_disposition_to_string av_dump_format av_filename_number_test av_find_best_stream av_find_default_stream_index av_find_input_format av_find_program_from_stream av_fmt_ctx_get_duration_estimation_method av_format_ffversion av_format_inject_global_side_data av_get_frame_filename av_get_frame_filename2 av_get_output_timestamp av_get_packet av_guess_codec av_guess_format av_guess_frame_rate av_guess_sample_aspect_ratio av_hex_dump av_hex_dump_log av_index_search_timestamp av_interleaved_write_frame av_interleaved_write_uncoded_frame av_match_ext av_muxer_iterate av_new_program av_pkt_dump2 av_pkt_dump_log2 av_probe_input_buffer av_probe_input_buffer2 av_probe_input_format av_probe_input_format2 av_probe_input_format3 av_program_add_stream_index av_read_frame av_read_pause av_read_play av_sdp_create av_seek_frame av_stream_add_side_data av_stream_get_class av_stream_get_codec_timebase av_stream_get_end_pts av_stream_get_parser av_stream_get_side_data av_stream_new_side_data av_url_split av_write_frame av_write_trailer av_write_uncoded_frame av_write_uncoded_frame_query avformat_alloc_context avformat_alloc_output_context2 avformat_close_input avformat_configuration avformat_find_stream_info avformat_flush avformat_free_context avformat_get_class avformat_get_mov_audio_tags avformat_get_mov_video_tags avformat_get_riff_audio_tags avformat_get_riff_video_tags avformat_index_get_entries_count avformat_index_get_entry avformat_index_get_entry_from_timestamp avformat_init_output avformat_license avformat_match_stream_specifier avformat_network_deinit avformat_network_init avformat_new_stream avformat_open_input avformat_query_codec avformat_queue_attached_pictures avformat_seek_file avformat_transfer_internal_stream_timing_info avformat_version avformat_write_header avio_accept avio_alloc_context avio_check avio_close avio_close_dir avio_close_dyn_buf avio_closep avio_context_free avio_enum_protocols avio_feof avio_find_protocol_name avio_flush avio_free_directory_entry avio_get_dyn_buf avio_get_str avio_get_str16be avio_get_str16le avio_handshake avio_open avio_open2 avio_open_dir avio_open_dyn_buf avio_pause avio_print_string_array avio_printf avio_protocol_get_class avio_put_str avio_put_str16be avio_put_str16le avio_r8 avio_rb16 avio_rb24 avio_rb32 avio_rb64 avio_read avio_read_dir avio_read_partial avio_read_to_bprint avio_rl16 avio_rl24 avio_rl32 avio_rl64 avio_seek avio_seek_time avio_size avio_skip avio_w8 avio_wb16 avio_wb24 avio_wb32 avio_wb64 avio_wl16 avio_wl24 avio_wl32 avio_wl64 avio_write avio_write_marker avpriv_dv_get_packet avpriv_dv_init_demux avpriv_dv_produce_packet avpriv_mpegts_parse_close avpriv_mpegts_parse_open avpriv_mpegts_parse_packet avpriv_new_chapter avpriv_register_devices avpriv_set_pts_info avpriv_stream_set_need_parsing avpriv_update_cur_dts gme_ay_type gme_clear_playlist gme_delete gme_enable_accuracy gme_equalizer gme_free_info gme_gbs_type gme_gym_type gme_hes_type gme_identify_extension gme_identify_file gme_identify_header gme_ignore_silence gme_kss_type gme_load_custom gme_load_data gme_load_file gme_multi_channel gme_mute_voice gme_mute_voices gme_new_emu gme_new_emu_multi_channel gme_nsf_type gme_nsfe_type gme_open_data gme_open_file gme_play gme_sap_type gme_seek gme_seek_samples gme_set_autoload_playback_limit gme_set_equalizer gme_set_fade gme_set_stereo_depth gme_set_tempo gme_set_user_cleanup gme_set_user_data gme_spc_type gme_start_track gme_tell gme_tell_samples gme_track_count gme_track_ended gme_track_info gme_type gme_type_extension gme_type_list gme_type_multitrack gme_type_system gme_user_data gme_vgm_type gme_vgz_type gme_voice_count gme_voice_name gme_warning gme_wrong_file_type

Name

.text

Size

10.6MB

Virtual Size

10.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

42KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3.4MB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

325KB

Virtual Size

325KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

424KB

Virtual Size

423KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

972KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

920B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

avutil-57.dll

IMPHASH 79a06e95dbe0f701eb98f08d95a82191
SHA256 cb86f74c46b1771d9ce5aba2fd83796b60c0d2a3f1f9ba7ed9cc111f0b25b0a1
MD5 fa3f45bb731c4de12e3f56662d488164
SHA1 d1988df5b0c643ba9b7729b0312fdfb2d2d61077
SHA512 1c209ab2589ef5f3eb43e954cc85349e81b9c28a01f1ae8646520c3aab57a8f9798b421b816235646853954b677a8fbf97e3048ed231a36d48a58faa086468a9
SSDEEP 12288:KznPFPp7redNfXlwVtBQwRHoCwxQO+NF+nWypr1G7tvRommHiSG:gPFP9GNfl6BQwRHMyOnn71G7/m+
TLSH
T199256B02E6D264BEC12BD13056ABA733F631B81A52347E3E1791CB752E20F905E5FB25
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

DLL Hijacking vulnerability

Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext RegCloseKey RegEnumKeyExW RegEnumValueW RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW

bcrypt

BCryptCloseAlgorithmProvider BCryptGenRandom BCryptOpenAlgorithmProvider

kernel32

AddVectoredExceptionHandler CloseHandle CreateEventA CreateFileMappingA CreateMutexA CreateSemaphoreA DeleteCriticalSection DuplicateHandle EnterCriticalSection FileTimeToSystemTime FindClose FindFirstFileW FindNextFileW FreeLibrary GetConsoleMode GetConsoleScreenBufferInfo GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetFileAttributesW GetHandleInformation GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetProcAddress GetProcessAffinityMask GetProcessTimes GetStdHandle GetSystemDirectoryW GetSystemTimeAdjustment GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetThreadTimes GetTickCount64 GetTimeZoneInformation InitializeCriticalSection IsDBCSLeadByteEx IsDebuggerPresent LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW LocalAlloc LocalFree MapViewOfFile MultiByteToWideChar OpenProcess OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReleaseMutex ReleaseSemaphore RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetConsoleTextAttribute SetEvent SetLastError SetProcessAffinityMask SetSystemTime SetThreadContext SetThreadErrorMode SetThreadPriority Sleep SuspendThread SwitchToThread TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection UnmapViewOfFile VerSetConditionMask VerifyVersionInfoW VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteConsoleW __C_specific_handler

msvcrt

___lc_codepage_func ___mb_cur_max_func __iob_func __setusermatherr _aligned_free _aligned_malloc _aligned_realloc _amsg_exit _assert _beginthreadex _close _endthreadex _errno _exit _fdopen _fstat64 _get_osfhandle _gmtime64 _initterm _hypot _isatty _localtime64 _lock _mktime64 _open _read _setjmp _sopen _strdup _ultoa _unlock _wfopen_s _wsopen abort acos asin atan atoi bsearch calloc clock cosh exit fclose fgetws fprintf fputc fputs free fwrite getc getenv islower isspace isupper isxdigit _write localeconv log10 longjmp malloc memchr memcmp memcpy memmove memset printf qsort realloc rand signal sinh strchr strcmp strcspn strerror strftime strlen strncmp strrchr strspn strstr strtol strtoul swscanf_s tan tanh tolower ungetc vfprintf wcscat wcschr wcscpy wcscspn wcslen wcsrchr wcsstr wcstoul

ole32

StringFromGUID2

user32

GetDesktopWindow

av_add_i av_add_q av_add_stable av_adler32_update av_aes_alloc av_aes_crypt av_aes_ctr_alloc av_aes_ctr_crypt av_aes_ctr_free av_aes_ctr_get_iv av_aes_ctr_increment_iv av_aes_ctr_init av_aes_ctr_set_full_iv av_aes_ctr_set_iv av_aes_ctr_set_random_iv av_aes_init av_aes_size av_append_path_component av_asprintf av_assert0_fpu av_audio_fifo_alloc av_audio_fifo_drain av_audio_fifo_free av_audio_fifo_peek av_audio_fifo_peek_at av_audio_fifo_read av_audio_fifo_realloc av_audio_fifo_reset av_audio_fifo_size av_audio_fifo_space av_audio_fifo_write av_base64_decode av_base64_encode av_basename av_blowfish_alloc av_blowfish_crypt av_blowfish_crypt_ecb av_blowfish_init av_bmg_get av_bprint_append_data av_bprint_channel_layout av_bprint_chars av_bprint_clear av_bprint_escape av_bprint_finalize av_bprint_get_buffer av_bprint_init av_bprint_init_for_buffer av_bprint_strftime av_bprintf av_buffer_alloc av_buffer_allocz av_buffer_create av_buffer_default_free av_buffer_get_opaque av_buffer_get_ref_count av_buffer_is_writable av_buffer_make_writable av_buffer_pool_buffer_get_opaque av_buffer_pool_get av_buffer_pool_init av_buffer_pool_init2 av_buffer_pool_uninit av_buffer_realloc av_buffer_ref av_buffer_replace av_buffer_unref av_calloc av_camellia_alloc av_camellia_crypt av_camellia_init av_camellia_size av_cast5_alloc av_cast5_crypt av_cast5_crypt2 av_cast5_init av_cast5_size av_channel_layout_extract_channel av_chroma_location_from_name av_chroma_location_name av_cmp_i av_color_primaries_from_name av_color_primaries_name av_color_range_from_name av_color_range_name av_color_space_from_name av_color_space_name av_color_transfer_from_name av_color_transfer_name av_compare_mod av_compare_ts av_content_light_metadata_alloc av_content_light_metadata_create_side_data av_cpu_count av_cpu_force_count av_cpu_max_align av_crc av_crc_get_table av_crc_init av_d2q av_d2str av_default_get_category av_default_item_name av_des_alloc av_des_crypt av_des_init av_des_mac av_detection_bbox_alloc av_detection_bbox_create_side_data av_dict_copy av_dict_count av_dict_free av_dict_get av_dict_get_string av_dict_parse_string av_dict_set av_dict_set_int av_dirname av_display_matrix_flip av_display_rotation_get av_display_rotation_set av_div_i av_div_q av_dovi_alloc av_dovi_metadata_alloc av_downmix_info_update_side_data av_dynamic_hdr_plus_alloc av_dynamic_hdr_plus_create_side_data av_dynarray2_add av_dynarray_add av_dynarray_add_nofree av_encryption_info_add_side_data av_encryption_info_alloc av_encryption_info_clone av_encryption_info_free av_encryption_info_get_side_data av_encryption_init_info_add_side_data av_encryption_init_info_alloc av_encryption_init_info_free av_encryption_init_info_get_side_data av_escape av_expr_count_func av_expr_count_vars av_expr_eval av_expr_free av_expr_parse av_expr_parse_and_eval av_fast_malloc av_fast_mallocz av_fast_realloc av_fifo_alloc av_fifo_alloc_array av_fifo_drain av_fifo_free av_fifo_freep av_fifo_generic_peek av_fifo_generic_peek_at av_fifo_generic_read av_fifo_generic_write av_fifo_grow av_fifo_realloc2 av_fifo_reset av_fifo_size av_fifo_space av_file_map av_file_unmap av_film_grain_params_alloc av_film_grain_params_create_side_data av_find_best_pix_fmt_of_2 av_find_info_tag av_find_nearest_q_idx av_fopen_utf8 av_force_cpu_flags av_fourcc_make_string av_frame_alloc av_frame_apply_cropping av_frame_clone av_frame_copy av_frame_copy_props av_frame_free av_frame_get_buffer av_frame_get_plane_buffer av_frame_get_side_data av_frame_is_writable av_frame_make_writable av_frame_move_ref av_frame_new_side_data av_frame_new_side_data_from_buf av_frame_ref av_frame_remove_side_data av_frame_side_data_name av_frame_unref av_free av_freep av_gcd av_gcd_q av_get_alt_sample_fmt av_get_bits_per_pixel av_get_bytes_per_sample av_get_channel_description av_get_channel_layout av_get_channel_layout_channel_index av_get_channel_layout_nb_channels av_get_channel_layout_string av_get_channel_name av_get_colorspace_name av_get_cpu_flags av_get_default_channel_layout av_get_extended_channel_layout av_get_known_color_name av_get_media_type_string av_get_packed_sample_fmt av_get_padded_bits_per_pixel av_get_picture_type_char av_get_pix_fmt av_get_pix_fmt_loss av_get_pix_fmt_name av_get_pix_fmt_string av_get_planar_sample_fmt av_get_random_seed av_get_sample_fmt av_get_sample_fmt_name av_get_sample_fmt_string av_get_standard_channel_layout av_get_time_base_q av_get_token av_gettime av_gettime_relative av_gettime_relative_is_monotonic av_hash_alloc av_hash_final av_hash_final_b64 av_hash_final_bin av_hash_final_hex av_hash_freep av_hash_get_name av_hash_get_size av_hash_init av_hash_names av_hash_update av_hmac_alloc av_hmac_calc av_hmac_final av_hmac_free av_hmac_init av_hmac_update av_hwdevice_ctx_alloc av_hwdevice_ctx_create av_hwdevice_ctx_create_derived av_hwdevice_ctx_create_derived_opts av_hwdevice_ctx_init av_hwdevice_find_type_by_name av_hwdevice_get_hwframe_constraints av_hwdevice_get_type_name av_hwdevice_hwconfig_alloc av_hwdevice_iterate_types av_hwframe_constraints_free av_hwframe_ctx_alloc av_hwframe_ctx_create_derived av_hwframe_ctx_init av_hwframe_get_buffer av_hwframe_map av_hwframe_transfer_data av_hwframe_transfer_get_formats av_i2int av_image_alloc av_image_check_sar av_image_check_size av_image_check_size2 av_image_copy av_image_copy_plane av_image_copy_plane_uc_from av_image_copy_to_buffer av_image_copy_uc_from av_image_fill_arrays av_image_fill_black av_image_fill_linesizes av_image_fill_max_pixsteps av_image_fill_plane_sizes av_image_fill_pointers av_image_get_buffer_size av_image_get_linesize av_int2i av_int_list_length_for_size av_lfg_init av_lfg_init_from_data av_log av_log2 av_log2_16bit av_log2_i av_log_default_callback av_log_format_line av_log_format_line2 av_log_get_flags av_log_get_level av_log_once av_log_set_callback av_log_set_flags av_log_set_level av_lzo1x_decode av_malloc av_malloc_array av_mallocz av_mallocz_array av_mastering_display_metadata_alloc av_mastering_display_metadata_create_side_data av_match_list av_match_name av_max_alloc av_md5_alloc av_md5_final av_md5_init av_md5_size av_md5_sum av_md5_update av_memcpy_backptr av_memdup av_mod_i av_mul_i av_mul_q av_murmur3_alloc av_murmur3_final av_murmur3_init av_murmur3_init_seeded av_murmur3_update av_nearer_q av_opt_child_class_iterate av_opt_child_next av_opt_copy av_opt_eval_double av_opt_eval_flags av_opt_eval_float av_opt_eval_int av_opt_eval_int64 av_opt_eval_q av_opt_find av_opt_find2 av_opt_flag_is_set av_opt_free av_opt_freep_ranges av_opt_get av_opt_get_channel_layout av_opt_get_dict_val av_opt_get_double av_opt_get_image_size av_opt_get_int av_opt_get_key_value av_opt_get_pixel_fmt av_opt_get_q av_opt_get_sample_fmt av_opt_get_video_rate av_opt_is_set_to_default av_opt_is_set_to_default_by_name av_opt_next av_opt_ptr av_opt_query_ranges av_opt_query_ranges_default av_opt_serialize av_opt_set av_opt_set_bin av_opt_set_channel_layout av_opt_set_defaults av_opt_set_defaults2 av_opt_set_dict av_opt_set_dict2 av_opt_set_dict_val av_opt_set_double av_opt_set_from_string av_opt_set_image_size av_opt_set_int av_opt_set_pixel_fmt av_opt_set_q av_opt_set_sample_fmt av_opt_set_video_rate av_opt_show2 av_parse_color av_parse_cpu_caps av_parse_ratio av_parse_time av_parse_video_rate av_parse_video_size av_pix_fmt_count_planes av_pix_fmt_desc_get av_pix_fmt_desc_get_id av_pix_fmt_desc_next av_pix_fmt_get_chroma_sub_sample av_pix_fmt_swap_endianness av_pixelutils_get_sad_fn av_q2intfloat av_rc4_alloc av_rc4_crypt av_rc4_init av_read_image_line av_read_image_line2 av_realloc av_realloc_array av_realloc_f av_reallocp av_reallocp_array av_reduce av_rescale av_rescale_delta av_rescale_q av_rescale_q_rnd av_rescale_rnd av_ripemd_alloc av_ripemd_final av_ripemd_init av_ripemd_size av_ripemd_update av_sample_fmt_is_planar av_samples_alloc av_samples_alloc_array_and_samples av_samples_copy av_samples_fill_arrays av_samples_get_buffer_size av_samples_set_silence av_set_options_string av_sha512_alloc av_sha512_final av_sha512_init av_sha512_size av_sha512_update av_sha_alloc av_sha_final av_sha_init av_sha_size av_sha_update av_shr_i av_size_mult av_small_strptime av_spherical_alloc av_spherical_from_name av_spherical_projection_name av_spherical_tile_bounds av_sscanf av_stereo3d_alloc av_stereo3d_create_side_data av_stereo3d_from_name av_stereo3d_type_name av_strcasecmp av_strdup av_strerror av_strireplace av_stristart av_stristr av_strlcat av_strlcatf av_strlcpy av_strncasecmp av_strndup av_strnstr av_strstart av_strtod av_strtok av_sub_i av_sub_q av_tea_alloc av_tea_crypt av_tea_init av_tea_size av_tempfile av_thread_message_flush av_thread_message_queue_alloc av_thread_message_queue_free av_thread_message_queue_nb_elems av_thread_message_queue_recv av_thread_message_queue_send av_thread_message_queue_set_err_recv av_thread_message_queue_set_err_send av_thread_message_queue_set_free_func av_timecode_adjust_ntsc_framenum2 av_timecode_check_frame_rate av_timecode_get_smpte av_timecode_get_smpte_from_framenum av_timecode_init av_timecode_init_from_components av_timecode_init_from_string av_timecode_make_mpeg_tc_string av_timecode_make_smpte_tc_string av_timecode_make_smpte_tc_string2 av_timecode_make_string av_timegm av_tree_destroy av_tree_enumerate av_tree_find av_tree_insert av_tree_node_alloc av_tree_node_size av_twofish_alloc av_twofish_crypt av_twofish_init av_twofish_size av_tx_init av_tx_uninit av_usleep av_utf8_decode av_util_ffversion av_vbprintf av_version_info av_video_enc_params_alloc av_video_enc_params_create_side_data av_vk_frame_alloc av_vkfmt_from_pixfmt av_vlog av_write_image_line av_write_image_line2 av_xtea_alloc av_xtea_crypt av_xtea_init av_xtea_le_crypt av_xtea_le_init avpriv_alloc_fixed_dsp avpriv_cga_font avpriv_dict_set_timestamp avpriv_float_dsp_alloc avpriv_get_gamma_from_trc avpriv_get_trc_function_from_trc avpriv_init_lls avpriv_open avpriv_report_missing_feature avpriv_request_sample avpriv_scalarproduct_float_c avpriv_set_systematic_pal2 avpriv_slicethread_create avpriv_slicethread_execute avpriv_slicethread_free avpriv_solve_lls avpriv_tempfile avpriv_vga16_font avutil_configuration avutil_license avutil_version

Name

.text

Size

712KB

Virtual Size

711KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

152KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

896B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

channel.dll

IMPHASH 5d903603c5cbbd4603b51160946b605a
SHA256 eabcd6679a72f19e8f8f4a3518a9e1e20b1ea69cc78bf878734514cbb6aee09b
MD5 ed0feaf14a121201dafc914116ba6c82
SHA1 03c14f21031d43dac91a4e3434939967d8725dcf
SHA512 caf22188522ccb1b37971c9cb64f1c8dc450786cb8ac38311d3afd4b531a419cdfb02246617449e785fa6ee62621ff1a68a8100a0b18da74c1b90ac1c34e3fa9
SSDEEP 49152:ADg3KtCY2XGaNkNZ+sqHYxmcPYJTF3Y6eMR2SlKKIZI2LM+G3hSamQ3:lIaN1LY6tR78sp
TLSH
T1E8067C5B67A440AAD07BD138CA178A57EBB2744B437097CF02B046A62F67BF1697F310
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

be:77:9d:2d:8a:93:26:cd:85:6e:42:b4:f2:02:62:55:44:0f:02:b9:2d:76:f6:83:51:39:68:65:a5:79:15:9f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 17, 2025

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

43:52:15:04:9b:64:6e:84:37:81:b8:f3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 4, 2024 - Dec 5, 2025

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

2614500

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\monec\workspace\Monect_host\x64\Release\channel.pdb

ws2_32

ntohl freeaddrinfo getaddrinfo ntohs htons WSAWaitForMultipleEvents WSASetEvent WSAResetEvent WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent WSAGetLastError socket setsockopt sendto send recvfrom recv listen getsockopt getsockname getpeername ioctlsocket connect closesocket bind accept htonl

winmm

timeEndPeriod timeBeginPeriod timeGetTime

secur32

AcquireCredentialsHandleA DeleteSecurityContext CompleteAuthToken InitializeSecurityContextA FreeCredentialsHandle

kernel32

WriteConsoleW GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc SetStdHandle GetFileSizeEx FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection WaitForSingleObject SetEvent WideCharToMultiByte HeapSize CreateThread CloseHandle GetCurrentThreadId GetTickCount64 GetLastError Sleep OpenThread TlsAlloc TlsGetValue TlsSetValue GetStdHandle WriteFile IsDebuggerPresent OutputDebugStringA FormatMessageA DebugBreak RaiseException GetCurrentThread GetModuleHandleA GetProcAddress TryEnterCriticalSection ResetEvent MultiByteToWideChar SetLastError InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared InitOnceExecuteOnce InitializeConditionVariable WakeAllConditionVariable SleepConditionVariableCS RtlVirtualUnwind GetSystemTimeAsFileTime GlobalAlloc GlobalFree HeapAlloc CreateEventW InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId InitializeSListHead RtlUnwindEx RtlPcToFileHeader InterlockedFlushSList InitializeCriticalSectionAndSpinCount TlsFree FreeLibrary LoadLibraryExW GetTimeZoneInformation GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW GetFileType QueryPerformanceFrequency ExitProcess GetModuleHandleExW GetModuleFileNameW

advapi32

SystemFunction036

iphlpapi

GetAdaptersAddresses

Name

.text

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

628KB

Virtual Size

628KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

69KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

113KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

248B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/ViGEm/ViGEmBus.inf

SHA256 63774d6149f036c0d9faf98b062fea6b97debed559a9522099e46b54fe58da40
MD5 c75c1a401eba37e59c4477b22f8ced9b
SHA1 5e845664f66e4d005fa2b041db4c9f6bf0d564a9
SHA512 1a12908961361eeea00b98174434e931f5d575a9cf72858a21536c2900c7c55107b5d34952cc149119572d3ea93e3c7d2fca018dd3535660dfb008c82eff8bb2
TLSH
T15641A94C4B420F703B936F1AAB17DAD2F51421C0A196942874EFBE0D4B8CF2B965D36A
MD5 SHA1 SHA512 TLSH

driver/ViGEm/vigembus.cat

SHA256 5b03a642a52d5ee895931c8fad98b2a67f20331c313aec42aa96d76c9c3ff928
MD5 e67c26e6c46015f05da50046aacf8581
SHA1 32dfcee6d080e1b0c8012f8a6198f1e7d2afa3a0
SHA512 dd197b897c71f11abb9eefbad70691ed0b2b2ad0636616276d08d2c2a002b99e1ff7c5c47a54df94967f9a9f8c977fafba247f6aecfaa917dfb7efdb2d983493
SSDEEP 192:8dfdE4fk16zraBdnqddgyVDGtxURYWEhV0+3Ef5KYpBjSI5xPXyE:QO74nxKTu+3Ef5dpBjR3PXyE
TLSH
T1C122D7A396BC5296E9939D7062D8D54BBC3EBBCB9C10522C717B67381C923D0F71841E
MD5 SHA1 SHA512 SSDEEP TLSH

driver/ViGEm/x64/ViGEmBus.sys

IMPHASH 8d1a4e8712010d023cba4c6cbe2df2be
SHA256 1a1e57cb0dd7ca08d96bbb1b6ce667e3273702c13a7ecf86839b7642ef8255e0
MD5 129165f67ccbb25be6be8ae2f0c15dda
SHA1 499865e046dc1d70edbf2a31ef06c03b6c6ea855
SHA512 4666cf73ef77b0e7b86822fdc18743d41496c46686a91535ed7757dbdb8e0354489383aa4a27ab943e26360e8e1c8aed5600724034e0e6c38163faea24344ca2
SSDEEP 1536:z+qh1jHbs7EZAusYDJg47/5tEYyD7B4G91eZ0dicytMaop:KqPjHb7zT7/5tEPnTeZ0dicytw
TLSH
T115636A6422E810B4E56BCEFCADF59562B5F17D441F31CAEF02509096AF13BC89A3532E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

39:d9:75:e9:2d:4b:cb:0f:bb:c9:5b:aa:2a:22:4a:b1:20:6e:16:da:bf:5c:b6:87:3f:12:a6:18:6d:7d:ac:0d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 23, 2018

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

10

Entry point

4512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\projects\vigembus\bin\x64\ViGEmBus.pdb

Name

.text

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

68B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/ViGEm/x64/WdfCoinstaller01009.dll

IMPHASH 70497fec79daa5f71de3b34faee686a5
SHA256 1a7627c11aecf24e8e0c9a519498e8456f0457bd89f0ffe649bd8fb53a194f89
MD5 f279d3e406114192148dd976de222138
SHA1 0567e9073c46c40e60e2ecd0a509579f029efd8e
SHA512 e72d1011bd3c4208c3733228aac45a6ae00c3979ffb49130d4141293764db1b91551edf9340b5cc5c987b848e3ffc661b8084923c2032b175fcf55321f42dc25
SSDEEP 24576:FU4MsColC6Je/ZgY7OOfcEpiRLH87SyVXGe38uKUj+NFVov1PJLfVKZ8F5mEeZWq:uFCsfZRZA6Xn388avVovfLd+Mo4iEq
TLSH
T1AD85234577FC1178F1F3AEB48ABA84062A767C854FB6D28E0250C95D2DB2FC489B4367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Digest

0b:20:71:26:48:08:48:76:34:3b:cf:73:92:14:96:ef:4e:d0:0a:b9:cd:75:42:5e:e9:be:11:8f:40:5f:0b:25

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 23, 2018

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

05:63:99:fa:ac:b9:fc:49:f3:cf:78:bf:c3:d9:f2:f4:63:e5:01:2e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 14, 2009

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:47:52:ba:00:00:00:00:00:04

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 16, 2011

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 15, 2019

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 11, 2005 - Apr 26, 2010

Subject

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:02:a4:e9:00:00:00:00:00:09

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 11, 2009 - Apr 26, 2010

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:58:4c:08:4c:80:a1:c8:d5:61:00:00:00:00:00:58

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 1, 2017 - Nov 1, 2018

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0b:aa:c1:00:00:00:00:00:09

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:843D-37F6-F104,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:e7:50:e9:25:9b:cf:e5:95:c4:00:00:00:00:00:e7

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 23, 2018 - Nov 23, 2019

Minor OS version

1

Major OS version

6

Entry point

60084

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WdfCoInstaller01009.pdb

msvcrt

memset memcpy __C_specific_handler _amsg_exit _initterm _XcptFilter _ultow malloc _wcsnicmp free _wtoi _wcsicmp _stricmp _vsnwprintf

setupapi

SetupDiSetDeviceInstallParamsW SetupCloseLog SetupOpenInfFileW SetupCloseInfFile CM_Set_DevNode_Problem_Ex SetupDiGetDeviceInstallParamsW SetupLogErrorW SetupOpenLog SetupDiGetActualSectionToInstallW SetupFindNextMatchLineW SetupDiGetSelectedDriverW SetupGetStringFieldW SetupPromptReboot SetupFindFirstLineW SetupGetLineCountW SetupDiGetDriverInfoDetailW

kernel32

GetModuleFileNameW SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind Sleep LoadLibraryExW ExpandEnvironmentStringsW GetFileInformationByHandle DeleteFileW CloseHandle FindNextFileW RemoveDirectoryW LockResource GetLocalTime FindClose SetLastError CreateFileW FileTimeToSystemTime TerminateProcess GetExitCodeProcess FormatMessageW SizeofResource WriteFile OutputDebugStringW WaitForSingleObject CreateDirectoryW CreateProcessW LoadResource FindResourceW FindFirstFileW LoadLibraryW WideCharToMultiByte FreeLibrary lstrlenA LocalFree GetWindowsDirectoryW LocalAlloc GlobalFree GetProcAddress GetLastError VerifyVersionInfoW GetModuleHandleW VerSetConditionMask

advapi32

DeleteService OpenSCManagerW QueryServiceConfigW ChangeServiceConfigW RegFlushKey RegSetValueExW RegCreateKeyExW RegCloseKey RegOpenKeyExW CloseServiceHandle QueryServiceStatusEx RegQueryValueExW OpenServiceW

crypt32

CertGetCertificateContextProperty

wintrust

WTHelperGetProvCertFromChain WTHelperGetProvSignerFromChain WinVerifyTrust WTHelperProvDataFromStateData

shell32

CommandLineToArgvW

user32

LoadStringW IsCharAlphaNumericW IsCharAlphaW

ole32

CoTaskMemFree

driver/legacy/ViGEm/ViGEmBus.inf

SHA256 63774d6149f036c0d9faf98b062fea6b97debed559a9522099e46b54fe58da40
MD5 c75c1a401eba37e59c4477b22f8ced9b
SHA1 5e845664f66e4d005fa2b041db4c9f6bf0d564a9
SHA512 1a12908961361eeea00b98174434e931f5d575a9cf72858a21536c2900c7c55107b5d34952cc149119572d3ea93e3c7d2fca018dd3535660dfb008c82eff8bb2
TLSH
T15641A94C4B420F703B936F1AAB17DAD2F51421C0A196942874EFBE0D4B8CF2B965D36A
MD5 SHA1 SHA512 TLSH

driver/legacy/ViGEm/vigembus.cat

SHA256 d20bdb3267fda3ef032eb0eb18f66fee1fad76d2117c0c46bfd560da9603f5a6
MD5 6a872036de7254ce91eb727db52462c6
SHA1 a9c3069dc1de64cc13e1c20caf9ddb94a4e93bca
SHA512 b6629793430ed69517c9694b8d107fe02d7d1ed18e75b045514225eef47f7583fbede814a06dedfec88e4921a4d1e73a83648a90ac562ea41a19e66f046ad3cc
SSDEEP 192:Xe47XtPc3n4e32E6xDetxURYWEhV0+3Ef5KYpBjSINxPGfdax:x78p6BVKTu+3Ef5dpBjRTPGfkx
TLSH
T12A12F9764ABC11A3E993DD7097D8D98BBC35FBD7B800463D21A767A019823D0F74892D
MD5 SHA1 SHA512 SSDEEP TLSH

driver/legacy/ViGEm/x64/ViGEmBus.sys

IMPHASH 8d1a4e8712010d023cba4c6cbe2df2be
SHA256 02e5554bbd32f852aa8abd53ee915143af78cdc0ad2bec86df24831b85e287b7
MD5 c852237eab4b5bebec7b3952371617be
SHA1 5336ec8ebba005b6c257826bd10061e01a48ee1c
SHA512 f002f8429dd592080b21e031c0ed753eb9bdc8653c7afa09bbfdc8f832c1a25b654810299f6ecc894bcb7871ce0e82f5abb05e92e1aad02db089547718eefc32
SSDEEP 1536:H+qh1jHbs7EZAusYDJg47/5tEYyD7B4G91eZ0dicy+M+EL:eqPjHb7zT7/5tEPnTeZ0dicy++
TLSH
T17B636B6462E810B4E16BCEFCAEF59562B9F17D441F30CAEF01509095AF13BD89A3532E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

39:d9:75:e9:2d:4b:cb:0f:bb:c9:5b:aa:2a:22:4a:b1:20:6e:16:da:bf:5c:b6:87:3f:12:a6:18:6d:7d:ac:0d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 23, 2018

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:58:4c:08:4c:80:a1:c8:d5:61:00:00:00:00:00:58

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 1, 2017 - Nov 1, 2018

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0b:aa:c1:00:00:00:00:00:09

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:F6FF-2DA7-BB75,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:e3:43:33:9a:b0:39:c5:f8:d7:00:00:00:00:00:e3

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 23, 2018 - Nov 23, 2019

Minor OS version

0

Major OS version

10

Entry point

4512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\projects\vigembus\bin\x64\ViGEmBus.pdb

Name

.text

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

68B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/legacy/ViGEm/x64/WdfCoinstaller01009.dll

IMPHASH 70497fec79daa5f71de3b34faee686a5
SHA256 ce8e9b8bebb225a399d8cfa53dc7ae1ed4766063dc34511a75ee4275966de182
MD5 d12337d099c43c6b9bddc7a31528fc12
SHA1 49bf9f5d3af223abb0ccf1c8b4f2c93c91e2c7c2
SHA512 3916bbce39fa7c523152cb74fdb4b3caec0777016df7b8262638cb3f2819455b5d60b24298bc4bd80cb4ce49a12569379a6ec32d46e51783ff874c5b7cdca0ef
SSDEEP 24576:IU4MsColC6Je/ZgY7OOfcEpiRLH87SyVXGe38uKUj+NFVov1PJLfVKZ8F5mEeZW0:hFCsfZRZA6Xn388avVovfLd+Mo4iE0
TLSH
T19F85234577FC1178F1F3AEB48ABA84062A767C854FB6D28E0250C95D2DB2FC489B4367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Digest

0b:20:71:26:48:08:48:76:34:3b:cf:73:92:14:96:ef:4e:d0:0a:b9:cd:75:42:5e:e9:be:11:8f:40:5f:0b:25

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Oct 23, 2018

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

05:63:99:fa:ac:b9:fc:49:f3:cf:78:bf:c3:d9:f2:f4:63:e5:01:2e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 14, 2009

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:47:52:ba:00:00:00:00:00:04

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 16, 2011

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 15, 2019

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 11, 2005 - Apr 26, 2010

Subject

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:02:a4:e9:00:00:00:00:00:09

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 11, 2009 - Apr 26, 2010

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:58:4c:08:4c:80:a1:c8:d5:61:00:00:00:00:00:58

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 1, 2017 - Nov 1, 2018

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:0b:aa:c1:00:00:00:00:00:09

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:e8:f8:07:23:36:e1:52:d5:a6:00:00:00:00:00:e8

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 23, 2018 - Nov 23, 2019

Minor OS version

1

Major OS version

6

Entry point

60084

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WdfCoInstaller01009.pdb

msvcrt

memset memcpy __C_specific_handler _amsg_exit _initterm _XcptFilter _ultow malloc _wcsnicmp free _wtoi _wcsicmp _stricmp _vsnwprintf

setupapi

SetupDiSetDeviceInstallParamsW SetupCloseLog SetupOpenInfFileW SetupCloseInfFile CM_Set_DevNode_Problem_Ex SetupDiGetDeviceInstallParamsW SetupLogErrorW SetupOpenLog SetupDiGetActualSectionToInstallW SetupFindNextMatchLineW SetupDiGetSelectedDriverW SetupGetStringFieldW SetupPromptReboot SetupFindFirstLineW SetupGetLineCountW SetupDiGetDriverInfoDetailW

kernel32

GetModuleFileNameW SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind Sleep LoadLibraryExW ExpandEnvironmentStringsW GetFileInformationByHandle DeleteFileW CloseHandle FindNextFileW RemoveDirectoryW LockResource GetLocalTime FindClose SetLastError CreateFileW FileTimeToSystemTime TerminateProcess GetExitCodeProcess FormatMessageW SizeofResource WriteFile OutputDebugStringW WaitForSingleObject CreateDirectoryW CreateProcessW LoadResource FindResourceW FindFirstFileW LoadLibraryW WideCharToMultiByte FreeLibrary lstrlenA LocalFree GetWindowsDirectoryW LocalAlloc GlobalFree GetProcAddress GetLastError VerifyVersionInfoW GetModuleHandleW VerSetConditionMask

advapi32

DeleteService OpenSCManagerW QueryServiceConfigW ChangeServiceConfigW RegFlushKey RegSetValueExW RegCreateKeyExW RegCloseKey RegOpenKeyExW CloseServiceHandle QueryServiceStatusEx RegQueryValueExW OpenServiceW

crypt32

CertGetCertificateContextProperty

wintrust

WTHelperGetProvCertFromChain WTHelperGetProvSignerFromChain WinVerifyTrust WTHelperProvDataFromStateData

shell32

CommandLineToArgvW

user32

LoadStringW IsCharAlphaNumericW IsCharAlphaW

ole32

CoTaskMemFree

driver/legacy/vJoy/WdfCoinstaller01009.dll

IMPHASH 70497fec79daa5f71de3b34faee686a5
SHA256 18487b4ff94edccc98ed59d9fca662d4a1331c5f1e14df8db3093256dd9f1c3e
MD5 4da5da193e0e4f86f6f8fd43ef25329a
SHA1 68a44d37ff535a2c454f2440e1429833a1c6d810
SHA512 b3d73ed5e45d6f2908b2f3086390dd28c1631e298756cee9bdf26b185f0b77d1b8c03ad55e0495dba982c5bed4a03337b130c76f7112f3e19821127d2cf36853
SSDEEP 24576:oU4MsColC6Je/ZgY7OOfcEpiRLH87SyVXGe38uKUj+NFVov1PJLfVKZ8F5mEeZWF:BFCsfZRZA6Xn388avVovfLd+Mo4iEF
TLSH
T10485234577FC1178F1F3AAB48ABA84062A767C854FB6D28F0250C95D6DB2FC489B4363
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

05:63:99:fa:ac:b9:fc:49:f3:cf:78:bf:c3:d9:f2:f4:63:e5:01:2e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 14, 2009

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:47:52:ba:00:00:00:00:00:04

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 16, 2006 - Sep 16, 2011

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 15, 2019

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 11, 2005 - Apr 26, 2010

Subject

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:02:a4:e9:00:00:00:00:00:09

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 11, 2009 - Apr 26, 2010

Minor OS version

1

Major OS version

6

Entry point

60084

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WdfCoInstaller01009.pdb

msvcrt

memset memcpy __C_specific_handler _amsg_exit _initterm _XcptFilter _ultow malloc _wcsnicmp free _wtoi _wcsicmp _stricmp _vsnwprintf

setupapi

SetupDiSetDeviceInstallParamsW SetupCloseLog SetupOpenInfFileW SetupCloseInfFile CM_Set_DevNode_Problem_Ex SetupDiGetDeviceInstallParamsW SetupLogErrorW SetupOpenLog SetupDiGetActualSectionToInstallW SetupFindNextMatchLineW SetupDiGetSelectedDriverW SetupGetStringFieldW SetupPromptReboot SetupFindFirstLineW SetupGetLineCountW SetupDiGetDriverInfoDetailW

kernel32

GetModuleFileNameW SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind Sleep LoadLibraryExW ExpandEnvironmentStringsW GetFileInformationByHandle DeleteFileW CloseHandle FindNextFileW RemoveDirectoryW LockResource GetLocalTime FindClose SetLastError CreateFileW FileTimeToSystemTime TerminateProcess GetExitCodeProcess FormatMessageW SizeofResource WriteFile OutputDebugStringW WaitForSingleObject CreateDirectoryW CreateProcessW LoadResource FindResourceW FindFirstFileW LoadLibraryW WideCharToMultiByte FreeLibrary lstrlenA LocalFree GetWindowsDirectoryW LocalAlloc GlobalFree GetProcAddress GetLastError VerifyVersionInfoW GetModuleHandleW VerSetConditionMask

advapi32

DeleteService OpenSCManagerW QueryServiceConfigW ChangeServiceConfigW RegFlushKey RegSetValueExW RegCreateKeyExW RegCloseKey RegOpenKeyExW CloseServiceHandle QueryServiceStatusEx RegQueryValueExW OpenServiceW

crypt32

CertGetCertificateContextProperty

wintrust

WTHelperGetProvCertFromChain WTHelperGetProvSignerFromChain WinVerifyTrust WTHelperProvDataFromStateData

shell32

CommandLineToArgvW

user32

LoadStringW IsCharAlphaNumericW IsCharAlphaW

ole32

CoTaskMemFree

driver/legacy/vJoy/hidkmdf.sys

IMPHASH b7b6f5f7218e6ff6a313485113ccffaf
SHA256 8fe4cac56e0ed66e5fc60f1468e1911196cadac49f0e350cfe7820c7ec7fcd7e
MD5 de50a50fd52a2bacb72f159aea6e3a38
SHA1 2bad3a7e7516e9fc68e2ab4c5d9a7ac60a576154
SHA512 c7542cf3b45d1d0ccbe87b5c220ecac6c4e9a8c1c171d5ce95f5bf76c1a3ffb576226486ed498ee12eedad9b1beed1d17a0f14d922df21287a70f69354c6a924
SSDEEP 96:Wlr8UaIa3tfivD26uThPWkQAVnEUt0t7SZs+zQTzdGusLPHxEKYYrBDU:rdIahi666hPhQAy72q6+GB/eKYChU
TLSH
T14732D719A7A81595F1FB6638C1F7571752F8B820432397EF0271036A5D739D0BA3CA2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

dc:ee:72:04:97:43:fc:0b:af:15:48:b7:4c:18:b4:45:0f:43:07:62

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=WDKTestCert Shaul\,131238418298116537

Chains

Jul 27, 2026

CN=WDKTestCert Shaul\,131238418298116537

Minor OS version

0

Major OS version

10

Entry point

4484

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Shaul\Documents\GitHub\vJoy\x64\Release\hidkmdf.pdb

Name

.text

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

512B

Virtual Size

11B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1024B

Virtual Size

706B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/legacy/vJoy/vJoy.sys

IMPHASH c067f33df7bc725d02da26ea021d07e9
SHA256 58e5cafbb5c3cc69c23ad85c3093b247208e3e5c43fe09aa06a6b7ec40fc3d1b
MD5 cb09581d30179ef1d9cac51717afa04f
SHA1 e3f54c575bb3daed87bccff8a207c7e9634ad7f0
SHA512 a961e9ece89adb83d4c81c601aa3d91c39b277b9a27233d9894caf46cd5b92c6cdc55aaa689e55408303607bac3012296b67bd1dbdb8d71c10d1ac9ec3178e25
SSDEEP 768:AdS7aoujYkg67j4Y6dnd+MJe8pYdDzedDNP7giRzTCBzac+k0pZtp1XZHA2c4rln:vujY/uOn4MZi2DP7iYkQH/XZHH1
TLSH
T130434C4263E805B9F5F3CA789AF14423AAB1F859AF35C6CF065094491F61BF198793C3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

4b:20:43:96:fa:41:df:3e:e4:d8:78:19:b7:30:9f:2d:2a:6f:18:c4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shaul Eizikovich,O=Shaul Eizikovich,L=Hod HaSharon,ST=Tel Aviv,C=IL

Chains

Apr 6, 2017

CN=Shaul Eizikovich,O=Shaul Eizikovich,L=Hod HaSharon,ST=Tel Aviv,C=IL

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shaul Eizikovich,O=Shaul Eizikovich,L=Hod HaSharon,ST=Tel Aviv,C=IL

Serial Number

02:ce:5e:93:97:27:8f:47:e8:6d:94:31:53:63:cc:30

Issuer

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 9, 2015 - Apr 13, 2017

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=DigiCert High Assurance Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

02:c4:d1:e5:8a:4a:68:0c:56:8d:a3:04:7e:7e:4d:5f

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Minor OS version

0

Major OS version

10

Entry point

4484

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Shaul\Documents\GitHub\vJoy\x64\Release\vJoy.pdb

Name

.text

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

864B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/legacy/vJoy/vjoy.cat

SHA256 09f859c2ac093ff4fab365ecead64c47c763230b091918be5abcc040579126ec
MD5 8ade7a899a6d5f2d34b9a0e32e8e881c
SHA1 01e7961bc2ba41bd8794da2b2d2e967172cfd739
SHA512 b1ef251b258bf2fc7cb10d2f8ad64c60d01a7da81df31fb362998b62c5f423a202ee067ba6d4f69b8935292a55a91d1d0199b4a08cd0e7f15a96420f6ea9c6b2
SSDEEP 192:Aedmwwb51SnYe+PjPQK4rtsgZdZubh9ZZ3xN5BdFJmrI6S:pnYPLQK4rTnZsZZvjwrfS
TLSH
T121120A958B2A1C53EEA7CD7026E5D46FBD31F6D2E810C0AE11AAC1904FC1FA276DE11D
MD5 SHA1 SHA512 SSDEEP TLSH

driver/legacy/vJoy/vjoy.inf

SHA256 3a4990e6462dbea0d925a64fc07a0c107e3e04b77755b9f6ff8222e92c617078
MD5 460c34649150136c91c1e4b9d48b12cc
SHA1 4d57ae74eb2422b6b33d6214f25674fa243537fe
SHA512 1a85af0aeac1014acbc97941e1e2a23ecabc005ab38dfbb5667adbbe822c913526a34bee69f39102cc4bd3a39dc3f0d63e0be4d35934979699f06c204f7e832c
SSDEEP 192:zMAm+6WSKnafK1kLc9uRyW5BS7NHBD8oUQa:zbZQnfK1kLc9qyWe7D8oO
TLSH
T10A22FF3593014B77C52EA681E7167B53E098D10220C1943DB9BF85518B6AFEB9334BEF
MD5 SHA1 SHA512 SSDEEP TLSH

driver/usbmmidd_v2/License.txt

SHA256 44c73fc4110979899dbb5054662de581f7d4350939f19bb2d50574f613314ba2
MD5 b2f8c01eb38b20af6c5a7d82d9adae7a
SHA1 8278dee7d49eedcc2aa31d2d93f71a135e6b4dcc
SHA512 02ea312f23178c5784bdca930ab867ad256028ec72ccb725d1a45e94396a0a2224936c31de4765185ecd674a63f5121494066fdbc0e15292b74d7ca1d3237cad
TLSH
T1A5110E5A73D8C3B214E202AD3A09CD82F71BAFA0AB9D87D1706DC05C37E592502718AC
MD5 SHA1 SHA512 TLSH

driver/usbmmidd_v2/deviceinstaller64.exe

IMPHASH a1299172b42388a072e9cae23c8ffa69
SHA256 e9baa02cdae921acf0aae4d8e8c29a4cdf4057ab61f9c60862b7cc439e2753f7
MD5 41283e1240acfc163f0e697073f07413
SHA1 a10cf33fbb23c4465921e6590c934873f3155317
SHA512 d7361a1656c8a8bf0b2bb8fa332105912285d23933bbc37ebe955b36e3fc158472216757bd87638860542cefadbbc17d36d5ef16cbd910b64fc25a2d7f42cfaf
SSDEEP 3072:MXiK11hTwS8XjJ3T/yub0koXAUthu3MA/KARW:MbillTK60koTQL
TLSH
T118F3810323E961A9F1F7BB3499B145219B777CA19A38D74D0298815E0FF3E809D39B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

33580

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FindFirstFileW FindNextFileW LocalFree GetCurrentProcess FormatMessageW FileTimeToSystemTime GetFileAttributesW SetFilePointerEx SetStdHandle HeapSize HeapReAlloc GetConsoleMode CreateFileW GetFullPathNameW GetWindowsDirectoryW LoadLibraryW lstrlenW CloseHandle FindClose DeviceIoControl GetLastError GetProcAddress GetDateFormatW FreeLibrary GetConsoleCP FlushFileBuffers OutputDebugStringW LoadLibraryExW LCMapStringW WideCharToMultiByte GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetStringTypeW GetStartupInfoW GetFileType RtlUnwindEx Sleep InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetModuleFileNameW WriteFile GetStdHandle GetModuleHandleExW WriteConsoleW ExitProcess GetProcessHeap MultiByteToWideChar GetCurrentThreadId SetLastError GetCPInfo GetOEMCP GetACP HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection GetCommandLineW EncodePointer DecodePointer RtlPcToFileHeader RaiseException IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage

user32

wsprintfW LoadStringW CharPrevW CharNextW

advapi32

RegQueryValueExW LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken OpenServiceW OpenSCManagerW CloseServiceHandle RegSetValueExW RegDeleteValueW RegCloseKey InitiateSystemShutdownExW

ole32

CLSIDFromString IIDFromString

setupapi

CM_Get_Next_Res_Des_Ex CM_Get_Res_Des_Data_Size_Ex CM_Get_Res_Des_Data_Ex CM_Get_First_Log_Conf_Ex CM_Free_Res_Des_Handle CM_Free_Log_Conf_Handle SetupDiGetDriverInstallParamsW SetupDiSetDeviceInstallParamsW SetupDiDestroyDriverInfoList SetupDiGetDriverInfoDetailW SetupDiSetSelectedDriverW SetupDiEnumDriverInfoW SetupDiBuildDriverInfoList SetupScanFileQueueW SetupCloseFileQueue SetupOpenFileQueue SetupGetStringFieldW SetupFindFirstLineW SetupCloseInfFile SetupOpenInfFileW SetupDiGetDeviceRegistryPropertyW SetupDiOpenDeviceInfoW SetupDiCreateDeviceInfoListExW CM_Reenumerate_DevNode_Ex CM_Locate_DevNode_ExW CM_Get_Device_Interface_List_SizeW CM_Get_Device_Interface_ListW CM_Get_DevNode_Status_Ex CM_Get_Device_ID_ExW CM_Disconnect_Machine CM_Connect_MachineW SetupDiClassGuidsFromNameExW SetupDiClassNameFromGuidExW SetupDiSetClassInstallParamsW SetupDiGetDeviceInstallParamsW SetupDiSetDeviceRegistryPropertyW SetupDiOpenClassRegKeyExW SetupDiCallClassInstaller SetupDiGetClassDescriptionExW SetupDiBuildClassInfoListExW SetupDiGetINFClassW SetupDiGetClassDevsExW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiCreateDeviceInfoW SetupDiGetDeviceInfoListDetailW SetupDiCreateDeviceInfoList SetupCopyOEMInfW SetupDiOpenDevRegKey

driver/usbmmidd_v2/usbmmIdd.inf

SHA256 a8750ca15a86742f3012886c9932bb974158cd2d9779cf891c730d976a47726a
MD5 0a09dab1c9a7f2e685cd7f8b5bd43ec0
SHA1 14b5fae8397fbda873dcc9ffd5cc189f14490c28
SHA512 f6cc96686f06f1871ae95ddbe9e553bbff506765965e4c846ee02328c6566730a9f4df493c36ab2104565d41dbd7ea67d054984163e45bc414a8f1efba293368
SSDEEP 96:t+r+1cQwGREmgX6sdtkQI/F7DniOrxr0Wx:t+hQwkb19N
TLSH
T1E7B1B142A3ED0618F1F35E80EAF540B26A273895583CD68D51E4578E29F2E40D8F37B7
MD5 SHA1 SHA512 SSDEEP TLSH

driver/usbmmidd_v2/usbmmidd.cat

SHA256 470149c4cf9970ba59070aa7c9409c9f63a15727de99bab53e7e51f55310779f
MD5 e5f60b2f3a491983eac00dc7dc7c408b
SHA1 2566bf2ddc9e58f5262a2b11dda0c451d5ec9468
SHA512 55b31a4da61b837891be7977bdf7b96457e5b54c5216e867bb1aca4580a84145f885896b13fcb72e937d3f424fec1105b4f9c0a9706dfabbec95fb53c7a302f5
SSDEEP 192:o7221lHt5iJCwwvngEw9JPgXkhYCISJ+/wmcVTW1KqnajKswd02FRC:YPmrwvuLh3I9/wmEy4lGswd0ARC
TLSH
T19A32F9A255AC4483F9936C6003E4F5577C3D67CF6820426A25AFF72A1C933C4F71926D
MD5 SHA1 SHA512 SSDEEP TLSH

driver/usbmmidd_v2/x64/usbmmIdd.dll

IMPHASH 8cce31b273712b965675a6ee6b242015
SHA256 dc135d675127113915a7e5aa9fe57c84edad6be41d0890b265ef124ab26ea9e3
MD5 ee848c427145609d998725a38e7ad9af
SHA1 6b97d9ab1c3978cdc2d6735c227adca8f0aabddb
SHA512 5bd0eca69d16a6fe32856978047967e44f0d49c59cd611b02e9d24ca59c0d862ad5f8a4d50c6bed816fa11e2f4fee6fabbe3d6d735224084f47161693eee8007
SSDEEP 1536:fNgohwVuXUd9g0TOHISWaxVTYwZVtDEWoG:f32eSNOoSWMVVZVFYG
TLSH
T11B638D597BE448A1E46B9470C4E29E4FFAB1F1422F31969F0374C21D2F637E0A62D366
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

18276

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

X:\Projects\usbmm\usbmmIdd\x64\Release\usbmmIdd.pdb

ntdll

RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlPcToFileHeader RtlUnwindEx DbgPrintEx

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-0

SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter RaiseException GetLastError

api-ms-win-core-synch-l1-1-0

SetEvent DeleteCriticalSection WaitForSingleObject CreateEventW InitializeCriticalSectionAndSpinCount

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-processthreads-l1-1-0

TerminateProcess CreateThread GetCurrentThreadId GetCurrentProcessId GetCurrentProcess TlsFree TlsSetValue TlsGetValue TlsAlloc

api-ms-win-core-com-l1-1-0

IIDFromString

dxgi

CreateDXGIFactory2

d3d11

D3D11CreateDevice

avrt

AvSetMmThreadCharacteristicsW AvRevertMmThreadCharacteristics

api-ms-win-crt-runtime-l1-1-0

_initterm _cexit _crt_atexit _initterm_e abort _errno _invalid_parameter_noinfo_noreturn _invalid_parameter_noinfo _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv terminate _execute_onexit_table _seh_filter_dll

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswscanf __stdio_common_vswprintf_s

api-ms-win-crt-string-l1-1-0

wcsncmp memset strcpy_s

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary GetProcAddress LoadLibraryExW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead InterlockedFlushSList

api-ms-win-core-util-l1-1-0

EncodePointer

api-ms-win-crt-heap-l1-1-0

malloc _callnewh calloc free

driver/vJoy/WdfCoinstaller01009.dll

IMPHASH 70497fec79daa5f71de3b34faee686a5
SHA256 44812fe5fe3b848d7d592278382c7c0370eba3115a9bd7f8db22efb89d1ed2b3
MD5 5cb42a31e35004ad81e5e89092adf3bc
SHA1 afdd47f3a2ec58f15abb2626e1233f5e356e8908
SHA512 328b35bb2b4963abc01602e2f0a78bf540c12e055bea3990d346e06edf53b5682c3387b6f86fbcf8552e2714c9d3ae6db28ca2a37a2bceb9db7e97076e932c1e
SSDEEP 24576:aU4MsColC6Je/ZgY7OOfcEpiRLH87SyVXGe38uKUj+NFVov1PJLfVKZ8F5mEeZWq:PFCsfZRZA6Xn388avVovfLd+Mo4iEq
TLSH
T19B85234577FC1178F1B3AEB48ABA84062A767C854FB6D28F0250C95D2DB2FC489B4367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Digest

0b:20:71:26:48:08:48:76:34:3b:cf:73:92:14:96:ef:4e:d0:0a:b9:cd:75:42:5e:e9:be:11:8f:40:5f:0b:25

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 14, 2019

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

PE Signature issue

Digest

05:63:99:fa:ac:b9:fc:49:f3:cf:78:bf:c3:d9:f2:f4:63:e5:01:2e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 14, 2009

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:47:52:ba:00:00:00:00:00:04

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 16, 2011

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 15, 2019

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 11, 2005 - Apr 26, 2010

Subject

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:02:a4:e9:00:00:00:00:00:09

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 11, 2009 - Apr 26, 2010

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:25:3a:27:38:69:0a:34:51:c1:00:00:00:00:00:25

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 6, 2018 - Sep 6, 2019

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:A841-4BB4-CA93,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Serial Number

33:00:00:00:dd:e4:de:3a:ec:ad:f3:f1:d4:00:00:00:00:00:dd

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 23, 2018 - Nov 23, 2019

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

1

Major OS version

6

Entry point

60084

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WdfCoInstaller01009.pdb

msvcrt

memset memcpy __C_specific_handler _amsg_exit _initterm _XcptFilter _ultow malloc _wcsnicmp free _wtoi _wcsicmp _stricmp _vsnwprintf

setupapi

SetupDiSetDeviceInstallParamsW SetupCloseLog SetupOpenInfFileW SetupCloseInfFile CM_Set_DevNode_Problem_Ex SetupDiGetDeviceInstallParamsW SetupLogErrorW SetupOpenLog SetupDiGetActualSectionToInstallW SetupFindNextMatchLineW SetupDiGetSelectedDriverW SetupGetStringFieldW SetupPromptReboot SetupFindFirstLineW SetupGetLineCountW SetupDiGetDriverInfoDetailW

kernel32

GetModuleFileNameW SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind Sleep LoadLibraryExW ExpandEnvironmentStringsW GetFileInformationByHandle DeleteFileW CloseHandle FindNextFileW RemoveDirectoryW LockResource GetLocalTime FindClose SetLastError CreateFileW FileTimeToSystemTime TerminateProcess GetExitCodeProcess FormatMessageW SizeofResource WriteFile OutputDebugStringW WaitForSingleObject CreateDirectoryW CreateProcessW LoadResource FindResourceW FindFirstFileW LoadLibraryW WideCharToMultiByte FreeLibrary lstrlenA LocalFree GetWindowsDirectoryW LocalAlloc GlobalFree GetProcAddress GetLastError VerifyVersionInfoW GetModuleHandleW VerSetConditionMask

advapi32

DeleteService OpenSCManagerW QueryServiceConfigW ChangeServiceConfigW RegFlushKey RegSetValueExW RegCreateKeyExW RegCloseKey RegOpenKeyExW CloseServiceHandle QueryServiceStatusEx RegQueryValueExW OpenServiceW

crypt32

CertGetCertificateContextProperty

wintrust

WTHelperGetProvCertFromChain WTHelperGetProvSignerFromChain WinVerifyTrust WTHelperProvDataFromStateData

shell32

CommandLineToArgvW

user32

LoadStringW IsCharAlphaNumericW IsCharAlphaW

ole32

CoTaskMemFree

driver/vJoy/hidkmdf.sys

IMPHASH b7b6f5f7218e6ff6a313485113ccffaf
SHA256 8668f69c256baff9422ac9b3ab77448c21b5043547920591148b152cb3afb0d2
MD5 bffc21f44b02fbdd4a09c445db87ec59
SHA1 f7ca5a2d0b2eb9ecaf75cbfcc73eeb65889490c8
SHA512 87ee090ed4581650a491df30e26da5420ae4d6a83d178ae9e0b0ca419e367a5f31424df407d0fab55a78f2300a712c66c62ef15425e44ae5bd8100f790fbda78
SSDEEP 384:FdIac6QHT3nYPLXZfm7PkZsHLMA9Zh3ZjXlPOmc:3I5HLV1FZ35nc
TLSH
T138C26D818BBC5842EEABBD3092F5D9533C38B7D15B20C5AB0066D5951EE3BC1BB2852D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Digest

56:2a:7c:3a:d9:36:44:e8:dd:7a:96:71:d0:a5:2e:0d:c4:5a:25:5d:d1:60:dd:54:51:cb:ad:43:7e:1f:1c:fc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 14, 2019

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

be:5d:82:7a:e5:12:0a:58:b4:91:b6:2c:cc:87:ec:d6:c9:cb:de:3e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=A214013764,CN=On-site Dental Systems (Justin Shafer),O=On-site Dental Systems (Justin Shafer),L=North Richland Hills,ST=Texas,C=US,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.1=#130e54617272616e7420436f756e7479,1.3.6.1.4.1.311.60.2.1.2=#13055465786173,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Jul 14, 2019

SERIALNUMBER=A214013764,CN=On-site Dental Systems (Justin Shafer),O=On-site Dental Systems (Justin Shafer),L=North Richland Hills,ST=Texas,C=US,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.1=#130e54617272616e7420436f756e7479,1.3.6.1.4.1.311.60.2.1.2=#13055465786173,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=A214013764,CN=On-site Dental Systems (Justin Shafer),O=On-site Dental Systems (Justin Shafer),L=North Richland Hills,ST=Texas,C=US,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.1=#130e54617272616e7420436f756e7479,1.3.6.1.4.1.311.60.2.1.2=#13055465786173,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

08:df:1f:fb:8b:0e:ef:71:ed:95:73:aa:e3:ec:fc:dc

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 10, 2019 - Jul 13, 2020

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:25:3a:27:38:69:0a:34:51:c1:00:00:00:00:00:25

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 6, 2018 - Sep 6, 2019

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=Thales TSS ESN:D2CD-E310-4AF1,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:f9:d3:0b:b2:19:01:1a:c1:2d:00:00:00:00:00:f9

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 24, 2018 - Jan 10, 2020

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

10

Entry point

4484

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Justin\Desktop\vJoy-master\x64\Release\hidkmdf.pdb

Name

.text

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

512B

Virtual Size

11B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1024B

Virtual Size

706B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/vJoy/vJoy.sys

IMPHASH c067f33df7bc725d02da26ea021d07e9
SHA256 297f9c12df8bd91640439c0bf7fe1ee391bbd01d330f5e1604a29c4669977774
MD5 cc63b7e91816e5001fe79a840916f1c9
SHA1 63ff46f8b85bc29e298ef2ac7a434ff2df49918e
SHA512 58fdcec81b6cff4e0d3a44ca93cfe1d86d8849afd0dd31af3a0d6e94483b5492a0f4729b3a0996084b56d4f5584166c4902abe195784ac7c2584489d699f0e48
SSDEEP 768:DdS7aoujYkg67j4F6dnd+MJe8pYdDQQQ/gPLgiRzTCBUac+k0pZtq01cAVJV1hZu:+ujY/jOn4MZi1vPLirkQHt1cOz/Zu
TLSH
T13C635B4263E805A5F5F3CA749AF18423AE71F989AF31C6CF0264D4491F62BE199783C7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Digest

9e:c6:30:4e:39:23:15:e9:56:6e:86:b1:36:b8:eb:6c:4c:54:5d:04:ca:69:ac:7a:86:66:f8:c8:8e:3c:2d:d9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 14, 2019

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Digest

1f:92:81:8a:e1:ad:79:e1:0d:f6:2f:d4:31:56:00:0c:13:d9:38:7b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=A214013764,CN=On-site Dental Systems (Justin Shafer),O=On-site Dental Systems (Justin Shafer),L=North Richland Hills,ST=Texas,C=US,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.1=#130e54617272616e7420436f756e7479,1.3.6.1.4.1.311.60.2.1.2=#13055465786173,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Jul 14, 2019

SERIALNUMBER=A214013764,CN=On-site Dental Systems (Justin Shafer),O=On-site Dental Systems (Justin Shafer),L=North Richland Hills,ST=Texas,C=US,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.1=#130e54617272616e7420436f756e7479,1.3.6.1.4.1.311.60.2.1.2=#13055465786173,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=A214013764,CN=On-site Dental Systems (Justin Shafer),O=On-site Dental Systems (Justin Shafer),L=North Richland Hills,ST=Texas,C=US,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.1=#130e54617272616e7420436f756e7479,1.3.6.1.4.1.311.60.2.1.2=#13055465786173,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

08:df:1f:fb:8b:0e:ef:71:ed:95:73:aa:e3:ec:fc:dc

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 10, 2019 - Jul 13, 2020

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:25:3a:27:38:69:0a:34:51:c1:00:00:00:00:00:25

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 6, 2018 - Sep 6, 2019

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Oct 15, 2014 - Oct 15, 2029

Subject

CN=Microsoft Time-Stamp service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:A841-4BB4-CA93,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Serial Number

33:00:00:00:dd:e4:de:3a:ec:ad:f3:f1:d4:00:00:00:00:00:dd

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 23, 2018 - Nov 23, 2019

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:09:81:2a:00:00:00:00:00:02

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jul 1, 2010 - Jul 1, 2025

Minor OS version

0

Major OS version

10

Entry point

4484

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Justin\Desktop\vJoy-master\x64\Release\vJoy.pdb

Name

.text

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

864B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PAGE

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

52B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

driver/vJoy/vjoy.cat

SHA256 784ea14d897c88be331d5c129d254a3a09add3d47066ad2879adecef3f00c97d
MD5 fb06e77f7c7bc0902d416c079c32d6a3
SHA1 b75aee99d492d84e83cc5ddba4791b8d2a570e7a
SHA512 1d0299593a0ce9ec23784b52602475ddea6e1b86dd3a02173061fdd9b724627265a3d6f8f08fd955615b972e9887111158fb86125c0dfde3659b4854294b66cb
SSDEEP 192:wdfduYKINIQEYWikyAE7EwWZhYCfhstj02qnajJZOQt:n9Zh3WjXlPOc
TLSH
T16D3207E248AC0982E9977DB05394E84B7C3E67CF8810416935AFFB681DA77C0F71992D
MD5 SHA1 SHA512 SSDEEP TLSH

driver/vJoy/vjoy.inf

SHA256 33fe32886a8bf72769c3e4991265546c3d1cca9247dbb661f23f7f82362226a4
MD5 731f3d80f2296e3e13f4335885fa2556
SHA1 27e8a4a8eb907b1b1c8b720ef02a45bf9b1c6124
SHA512 b154c375f49934c1858646e9e750fcb7b06d6c453f61d283bb5ee5d2fe509f887d796d722d8fb7084734ee178549a33a85b23d012dc9bcd5c74136700dc4ceb4
SSDEEP 192:zMAmc6WSKnlXe1kLcCuRyG5Z7NHBD8oUQT:zbJQ0Xe1kLcCqyGL7D8oP
TLSH
T1DF220F3593014B77C52EA681E7167B53E098D10220C1943DB9BF82518B6AFEB9334BDF
MD5 SHA1 SHA512 SSDEEP TLSH

driververifyx64.exe

IMPHASH 30a25f8832e81715fb1919ceaa76ad09
SHA256 147e27f46540b799ab600cbf30c0c0016cbe586922b53b92c3bf954d91d22ee7
MD5 3390b4d0ab837a3d0f1b416e392c8c67
SHA1 2528f903f4f264e4f5b2d26f620bfe130bb01051
SHA512 790e4b9777cf56810ffac809146c66c3272f77a216eb263d887dfe9fc6474c9a238a73c6de2e0202b3b6ec30b8af842c8edbc8f0ac864a98b10f406a1a75dcd1
SSDEEP 3072:oKyN+LZH/M1WNydf4a6VnjiIifTXSVgDCsVOcbrTRQBQ:oKyNWH/gL4a6VjiDSVeC1cb/RQ
TLSH
T178F36B5773A530E5E1B78238C9915646F77278760B609BDF03A883752F232D0AE3EB25
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

2d:ef:2a:0b:03:fb:9b:b9:d9:0c:8a:18:f1:71:90:f2:8d:f5:47:07:e8:5a:ff:e9:59:3c:c7:48:eb:fc:e6:2b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 13, 2025

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

43:52:15:04:9b:64:6e:84:37:81:b8:f3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 4, 2024 - Dec 5, 2025

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

12784

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\monec\workspace\Monect_host\x64\Release\driververifyx64.pdb

setupapi

SetupDiCreateDeviceInfoList SetupDiCreateDeviceInfoW SetupDiSetDeviceRegistryPropertyW SetupDiCallClassInstaller SetupDiGetDeviceInstallParamsW SetupDiEnumDriverInfoW SetupDiBuildDriverInfoList CM_Get_Sibling SetupDiSetClassInstallParamsW SetupDiEnumDeviceInfo SetupDiGetClassDevsW CM_Get_Device_IDW CM_Get_Child SetupDiDestroyDeviceInfoList SetupDiGetINFClassW

shlwapi

StrCmpW StrRChrW

kernel32

LoadLibraryExW WriteConsoleW CreateFileW HeapReAlloc HeapSize SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetProcessHeap GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW VerSetConditionMask VerifyVersionInfoW GetModuleFileNameW lstrlenW LoadLibraryW GetProcAddress FreeLibrary CreateProcessW WaitForSingleObject CloseHandle WideCharToMultiByte RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar

Name

.text

Size

86KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

920B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

eula/cn.txt

SHA256 af3e59142b1492c92c68378ea2ba3bf80d9c473036f811148135110d63225eef
MD5 3b5bed8bc885967ca446375b42dc66a0
SHA1 919d155fe86800459fb53c3bd563a62aeea0835e
SHA512 1f6034beab9b5ada8a4277d8a0ccb63af9e4cb1f9bef3c85b0d9f0ec9d3a56f360f7532cfab827fce6d0c131791705fc4568a9173697bd332ed5281bee4a832c
SSDEEP 96:Ky4q5vVKvk1VueeGgQ3n25vH+aAwER0HVYqQd9UDTSP04uajL29XlA0xWWkouc:U2I7vQ3+5MJdPaXmKkouc
TLSH
T187B1364234F25343E5E59BA575664172EBA7B202FD7C4EEC02E8244C0AE2C41E519FEF
MD5 SHA1 SHA512 SSDEEP TLSH

eula/en.txt

SHA256 8020fb22d7f5a33ae849b0fbf6131a1cce6334d66cf53db4faca1b5f0de73222
MD5 155c5a0a8494afcd41df232b28cecb24
SHA1 755950522f612713daf399ae19131a9c35018847
SHA512 6a7537847dea0e3d5d602766cc761da064c409445a5839ef52ed6a4dc2ff27193357b02dc5c574f4bec8ec01a672aa83c907449f6604f23c4e4e15fe4a90eaef
SSDEEP 192:BIMYCRjgT6/igptZjg7W2TuVUPvlCeZ8M/:BIMtiO6gTq75TjXBiM/
TLSH
T127426A52A7FA6608F6F73F5869B512645E3BBCA2AD3CDA8C1250100E49F2E50CD74B73
MD5 SHA1 SHA512 SSDEEP TLSH

fonts/MaterialIcons-Regular.ttf

SHA256 c99898d73b4c22a204781ccb546e7fed09f2aeece0629736768e93a805cd0873
MD5 74535251e17acfdf74c0ce531fa7d39a
SHA1 6e0d65c4583e95aed81d09fa61f3ea95c46cf20e
SHA512 ddcaa332626858da19ea627446aa067a8da737e7b838880facd036f846fef6927610d6cfc999d87bc33a389e9d8c51dc871d41622bc1d8deb8f567c1978c22cf
SSDEEP 6144:rIuzpsDRGNuPLcc6GsPIttNzW5DsLHHBkCwihR4syP5VbLF5cXgZ1b4Gy8SF5JOE:rIuzeDRoeLcpG9ttNzW9sL2sxxnN8fmd
TLSH
T12C741A57B36B887AC6839F3E543292B7C04E14137BB7260F884EF5A795DE48DC9A460C
MD5 SHA1 SHA512 SSDEEP TLSH

install.dll

IMPHASH 393265fbc116620b56161357f234d560
SHA256 969d851b53f685d34fd4429451dddb0c6e116a9ec145c8a7774c3c4acabab899
MD5 356b0d6b12c177098ce5d7682ad24a20
SHA1 993014e3368c518ec1f2958f1104a5d61560e1d0
SHA512 827e72462c44c5a7ac86a1af6b1224c94aafbed419337ff89dd87856e651dd108038b87279f4223f32c9f8a85317e62318345d311ed5bc30d53071bc730d1607
SSDEEP 384:pLFycY8hA7Fb9uqczuGEm5c7u3iR9gHqQZvpqT7MQv/uo6ki2ZLUxiTK3yVWVFT:9Yho9y6SRWKQZRRr2ljVWV9+ke
TLSH
T1FFE27D877F640087EBCACE76D8C35427E978FA919AD952CF2112C2192E147D0BF74B09
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

8d:fd:ae:99:d6:8c:6d:05:8a:fe:d6:8c:96:ce:01:76:bd:71:e9:4d:57:1a:a9:cd:b3:c1:94:1d:2f:eb:48:32

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 17, 2025

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

43:52:15:04:9b:64:6e:84:37:81:b8:f3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 4, 2024 - Dec 5, 2025

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

8868

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\monec\workspace\Monect_host\x64\Release\install.pdb

lang/en_us.lg

SHA256 db923c6b728fcbf6d7e6bdb3906bcbd2b0e169d188f1da8f953bd3a0ff1e9e89
MD5 eacd9c8aa0725f2ecd4953f56a1bc769
SHA1 6b9b029c4ff464c17f4f94c999ad3ed2051e4259
SHA512 0b08970ed8a476fea3378118a1d7ffa2b9e5a7a3896a084592ac6c4942a1d0fd4089624284116d8912392153016e46b97fb3032751157d1eaa4951ffa2e95dab
SSDEEP 192:5XeqHjLFlKuxOtoH+/XnPnt3j68ia3BunacdCLqf9qQ8nWDaV:wa1wuKoH2Ptd3BIxfgQ8niaV
TLSH
T110426F4236FE6118B1B2BBD5AFBDD1398F66BCE5597AC15E1090000F0BE0D529A637B3
MD5 SHA1 SHA512 SSDEEP TLSH

lang/zh_cn.lg

SHA256 87e69c25d48931eaa5f47db6825fabbe3ccf41e782ed17fef1003d29744f338e
MD5 7eb97308c0850b4695e76ad7b37caa3b
SHA1 cbb84b9d33f17703c52ae75900424a847682632c
SHA512 68cbe200cb9362b70e4d29bf20f8e32a6ceab189725274134df40555193dbfedd6ef76dcd2ed6d319e1d05300d642956a8f06adafb4dd0b349de13a66c7fe2c5
SSDEEP 192:5+KBTDPzO4zmLMwKA6Z0KQpT64q7IJo08AQK3S3:koDPRKLe0KZdST8A83
TLSH
T19402EC4535EF686DB932BBD1EF8ED66ECF96B1E8024B426A10E4851707D4C032B439F9
MD5 SHA1 SHA512 SSDEEP TLSH

libjpeg-9.dll

IMPHASH 0c2dc34190018f12ac94500a6ddd639a
SHA256 3a224af540c96574800f5e9acf64b2cdfb9060e727919ec14fbd187a9b5bfe69
MD5 c540308d4a8e6289c40753fdd3e1c960
SHA1 1b84170212ca51970f794c967465ca7e84000d0e
SHA512 1dadc6b92de9af998f83faf216d2ab6483b2dea7cdea3387ac846e924adbf624f36f8093daf5cee6010fea7f3556a5e2fcac494dbc87b5a55ce564c9cd76f92b
SSDEEP 6144:I7wNZIYb0maLgCaqrWqg7EdP8J1dJHoFaeghCbBL:I7we7gCaqrWqg7EdP8jpY
TLSH
T1FC347E16EBE3ACECC927C1B4079BE732E860B4651215ED2F1694DA313E52DA05F4DF28
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5136

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

jcopy_block_row jcopy_sample_rows jdiv_round_up jinit_1pass_quantizer jinit_2pass_quantizer jinit_arith_decoder jinit_arith_encoder jinit_c_coef_controller jinit_c_main_controller jinit_c_master_control jinit_c_prep_controller jinit_color_converter jinit_color_deconverter jinit_compress_master jinit_d_coef_controller jinit_d_main_controller jinit_d_post_controller jinit_downsampler jinit_forward_dct jinit_huff_decoder jinit_huff_encoder jinit_input_controller jinit_inverse_dct jinit_marker_reader jinit_marker_writer jinit_master_decompress jinit_memory_mgr jinit_merged_upsampler jinit_upsampler jpeg_CreateCompress jpeg_CreateDecompress jpeg_abort jpeg_abort_compress jpeg_abort_decompress jpeg_add_quant_table jpeg_alloc_huff_table jpeg_alloc_quant_table jpeg_aritab jpeg_calc_jpeg_dimensions jpeg_calc_output_dimensions jpeg_consume_input jpeg_copy_critical_parameters jpeg_core_output_dimensions jpeg_default_colorspace jpeg_default_qtables jpeg_destroy jpeg_destroy_compress jpeg_destroy_decompress jpeg_fdct_10x10 jpeg_fdct_10x5 jpeg_fdct_11x11 jpeg_fdct_12x12 jpeg_fdct_12x6 jpeg_fdct_13x13 jpeg_fdct_14x14 jpeg_fdct_14x7 jpeg_fdct_15x15 jpeg_fdct_16x16 jpeg_fdct_16x8 jpeg_fdct_1x1 jpeg_fdct_1x2 jpeg_fdct_2x1 jpeg_fdct_2x2 jpeg_fdct_2x4 jpeg_fdct_3x3 jpeg_fdct_3x6 jpeg_fdct_4x2 jpeg_fdct_4x4 jpeg_fdct_4x8 jpeg_fdct_5x10 jpeg_fdct_5x5 jpeg_fdct_6x12 jpeg_fdct_6x3 jpeg_fdct_6x6 jpeg_fdct_7x14 jpeg_fdct_7x7 jpeg_fdct_8x16 jpeg_fdct_8x4 jpeg_fdct_9x9 jpeg_fdct_float jpeg_fdct_ifast jpeg_fdct_islow jpeg_finish_compress jpeg_finish_decompress jpeg_finish_output jpeg_free_large jpeg_free_small jpeg_get_large jpeg_get_small jpeg_has_multiple_scans jpeg_idct_10x10 jpeg_idct_10x5 jpeg_idct_11x11 jpeg_idct_12x12 jpeg_idct_12x6 jpeg_idct_13x13 jpeg_idct_14x14 jpeg_idct_14x7 jpeg_idct_15x15 jpeg_idct_16x16 jpeg_idct_16x8 jpeg_idct_1x1 jpeg_idct_1x2 jpeg_idct_2x1 jpeg_idct_2x2 jpeg_idct_2x4 jpeg_idct_3x3 jpeg_idct_3x6 jpeg_idct_4x2 jpeg_idct_4x4 jpeg_idct_4x8 jpeg_idct_5x10 jpeg_idct_5x5 jpeg_idct_6x12 jpeg_idct_6x3 jpeg_idct_6x6 jpeg_idct_7x14 jpeg_idct_7x7 jpeg_idct_8x16 jpeg_idct_8x4 jpeg_idct_9x9 jpeg_idct_float jpeg_idct_ifast jpeg_idct_islow jpeg_input_complete jpeg_mem_available jpeg_mem_dest jpeg_mem_init jpeg_mem_src jpeg_mem_term jpeg_natural_order jpeg_natural_order2 jpeg_natural_order3 jpeg_natural_order4 jpeg_natural_order5 jpeg_natural_order6 jpeg_natural_order7 jpeg_new_colormap jpeg_open_backing_store jpeg_quality_scaling jpeg_read_coefficients jpeg_read_header jpeg_read_raw_data jpeg_read_scanlines jpeg_resync_to_restart jpeg_save_markers jpeg_set_colorspace jpeg_set_defaults jpeg_set_linear_quality jpeg_set_marker_processor jpeg_set_quality jpeg_simple_progression jpeg_start_compress jpeg_start_decompress jpeg_start_output jpeg_std_error jpeg_std_message_table jpeg_stdio_dest jpeg_stdio_src jpeg_suppress_tables jpeg_write_coefficients jpeg_write_m_byte jpeg_write_m_header jpeg_write_marker jpeg_write_raw_data jpeg_write_scanlines jpeg_write_tables jround_up

Name

.text

Size

196KB

Virtual Size

195KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

520B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

libpng16-16.dll

IMPHASH 1d243a681c53b17663865498e77cb5a2
SHA256 e688b4a4d18f4b6ccc99c6ca4980f51218cb825610775192d9b60b2f05eff2d5
MD5 3a26cd3f92436747d2285dcef1fae67f
SHA1 e3d1403be06beb32fc8dc7e8a58c31e18b586a70
SHA512 73d651f063246723807d837811ead30e3faca8cb0581603f264c28fea1b2bdb6d874a73c1288c7770e95463786d6945b065d4ca1cf553e08220aea4e78a6f37f
SSDEEP 3072:VatMOImapxER0/vnm2mjq61IJJT1fX0yuWUQstxZw2TnzFEY5IQ:VatMOImapaR03nmnYJV1cjtnwunw
TLSH
T194246C47F3A35DBDCA97C1748257E772A671BC242234EEBF1294DB302E11C60771AA29
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4855

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

png_access_version_number png_benign_error png_build_grayscale_palette png_calloc png_chunk_benign_error png_chunk_error png_chunk_warning png_convert_from_struct_tm png_convert_from_time_t png_convert_to_rfc1123 png_convert_to_rfc1123_buffer png_create_info_struct png_create_read_struct png_create_read_struct_2 png_create_write_struct png_create_write_struct_2 png_data_freer png_destroy_info_struct png_destroy_read_struct png_destroy_write_struct png_error png_free png_free_data png_free_default png_get_IHDR png_get_PLTE png_get_bKGD png_get_bit_depth png_get_cHRM png_get_cHRM_XYZ png_get_cHRM_XYZ_fixed png_get_cHRM_fixed png_get_channels png_get_chunk_cache_max png_get_chunk_malloc_max png_get_color_type png_get_compression_buffer_size png_get_compression_type png_get_copyright png_get_current_pass_number png_get_current_row_number png_get_eXIf png_get_eXIf_1 png_get_error_ptr png_get_filter_type png_get_gAMA png_get_gAMA_fixed png_get_hIST png_get_header_ver png_get_header_version png_get_iCCP png_get_image_height png_get_image_width png_get_int_32 png_get_interlace_type png_get_io_chunk_type png_get_io_ptr png_get_io_state png_get_libpng_ver png_get_mem_ptr png_get_oFFs png_get_pCAL png_get_pHYs png_get_pHYs_dpi png_get_palette_max png_get_pixel_aspect_ratio png_get_pixel_aspect_ratio_fixed png_get_pixels_per_inch png_get_pixels_per_meter png_get_progressive_ptr png_get_rgb_to_gray_status png_get_rowbytes png_get_rows png_get_sBIT png_get_sCAL png_get_sCAL_fixed png_get_sCAL_s png_get_sPLT png_get_sRGB png_get_signature png_get_tIME png_get_tRNS png_get_text png_get_uint_16 png_get_uint_31 png_get_uint_32 png_get_unknown_chunks png_get_user_chunk_ptr png_get_user_height_max png_get_user_transform_ptr png_get_user_width_max png_get_valid png_get_x_offset_inches png_get_x_offset_inches_fixed png_get_x_offset_microns png_get_x_offset_pixels png_get_x_pixels_per_inch png_get_x_pixels_per_meter png_get_y_offset_inches png_get_y_offset_inches_fixed png_get_y_offset_microns png_get_y_offset_pixels png_get_y_pixels_per_inch png_get_y_pixels_per_meter png_handle_as_unknown png_image_begin_read_from_file png_image_begin_read_from_memory png_image_begin_read_from_stdio png_image_finish_read png_image_free png_image_write_to_file png_image_write_to_memory png_image_write_to_stdio png_info_init_3 png_init_io png_longjmp png_malloc png_malloc_default png_malloc_warn png_permit_mng_features png_process_data png_process_data_pause png_process_data_skip png_progressive_combine_row png_read_end png_read_image png_read_info png_read_png png_read_row png_read_rows png_read_update_info png_reset_zstream png_save_int_32 png_save_uint_16 png_save_uint_32 png_set_IHDR png_set_PLTE png_set_add_alpha png_set_alpha_mode png_set_alpha_mode_fixed png_set_bKGD png_set_background png_set_background_fixed png_set_benign_errors png_set_bgr png_set_cHRM png_set_cHRM_XYZ png_set_cHRM_XYZ_fixed png_set_cHRM_fixed png_set_check_for_invalid_index png_set_chunk_cache_max png_set_chunk_malloc_max png_set_compression_buffer_size png_set_compression_level png_set_compression_mem_level png_set_compression_method png_set_compression_strategy png_set_compression_window_bits png_set_crc_action png_set_eXIf png_set_eXIf_1 png_set_error_fn png_set_expand png_set_expand_16 png_set_expand_gray_1_2_4_to_8 png_set_filler png_set_filter png_set_filter_heuristics png_set_filter_heuristics_fixed png_set_flush png_set_gAMA png_set_gAMA_fixed png_set_gamma png_set_gamma_fixed png_set_gray_to_rgb png_set_hIST png_set_iCCP png_set_interlace_handling png_set_invalid png_set_invert_alpha png_set_invert_mono png_set_keep_unknown_chunks png_set_longjmp_fn png_set_mem_fn png_set_oFFs png_set_option png_set_pCAL png_set_pHYs png_set_packing png_set_packswap png_set_palette_to_rgb png_set_progressive_read_fn png_set_quantize png_set_read_fn png_set_read_status_fn png_set_read_user_chunk_fn png_set_read_user_transform_fn png_set_rgb_to_gray png_set_rgb_to_gray_fixed png_set_rows png_set_sBIT png_set_sCAL png_set_sCAL_fixed png_set_sCAL_s png_set_sPLT png_set_sRGB png_set_sRGB_gAMA_and_cHRM png_set_scale_16 png_set_shift png_set_sig_bytes png_set_strip_16 png_set_strip_alpha png_set_swap png_set_swap_alpha png_set_tIME png_set_tRNS png_set_tRNS_to_alpha png_set_text png_set_text_compression_level png_set_text_compression_mem_level png_set_text_compression_method png_set_text_compression_strategy png_set_text_compression_window_bits png_set_unknown_chunk_location png_set_unknown_chunks png_set_user_limits png_set_user_transform_info png_set_write_fn png_set_write_status_fn png_set_write_user_transform_fn png_sig_cmp png_start_read_image png_warning png_write_chunk png_write_chunk_data png_write_chunk_end png_write_chunk_start png_write_end png_write_flush png_write_image png_write_info png_write_info_before_PLTE png_write_png png_write_row png_write_rows png_write_sig

Name

.text

Size

157KB

Virtual Size

157KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

libtiff-5.dll

IMPHASH 07faa6c186f4189cca71ff04643bcd7e
SHA256 ebfe97ac5ef26b94945af3db5ffd110a4b8e92dc02559bf81ccb33f0d5ebce95
MD5 7d40a697ca6f21a8f09468b9fce565ad
SHA1 dc3b7f7fc0d9056af370e06f1451a65e77ff07f7
SHA512 5a195e3123f7f17d92b7eca46b9afa1ea600623ad6929ac29197447bb4d474a068fd5f61fca6731a60514125d3b0b2cafe1ff6be3a0161251a366355b660d61a
SSDEEP 6144:d8x4RKXHtEOtiYFJEn9RX9kgr+6Dr1Xu1ih/QpGJylW:qx4RK3tvKRH3Dt4ih9Ji
TLSH
T13194C505CED109BFC97A813056E7C621B273B4953B12EF6BA258F1303E51B9026976FE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5040

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

CloseHandle CreateFileA CreateFileMappingA CreateFileW DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetFileSize GetLastError GetModuleHandleA GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection LoadLibraryW LocalAlloc LocalFree MapViewOfFile QueryPerformanceCounter ReadFile RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetFilePointer SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter UnmapViewOfFile VirtualProtect VirtualQuery WideCharToMultiByte WriteFile

msvcrt

__dllonexit __iob_func _amsg_exit _assert _errno _initterm _lock _onexit _setjmp _unlock _vsnprintf abort atan2 atoi bsearch calloc exp floor fprintf fputc fputs free frexp fwrite getenv isprint ldexp log longjmp malloc memcmp memcpy memmove memset qsort rand realloc signal sprintf sqrt strchr strcmp strcpy strlen strncmp vfprintf

user32

GetFocus MessageBoxA

libjpeg-9

jpeg_destroy jpeg_write_raw_data jpeg_finish_compress jpeg_set_colorspace jpeg_std_error jpeg_CreateDecompress jpeg_abort jpeg_CreateCompress jpeg_set_defaults jpeg_write_tables jpeg_finish_decompress jpeg_read_header jpeg_has_multiple_scans jpeg_start_decompress jpeg_read_raw_data jpeg_resync_to_restart jpeg_set_quality jpeg_suppress_tables jpeg_start_compress jpeg_write_scanlines jpeg_read_scanlines

zlib1

deflateParams inflateEnd deflateEnd deflate deflateReset inflate inflateSync inflateReset deflateInit_ inflateInit_

TIFFAccessTagMethods TIFFCIELabToRGBInit TIFFCIELabToXYZ TIFFCheckTile TIFFCheckpointDirectory TIFFCleanup TIFFClientOpen TIFFClientdata TIFFClose TIFFComputeStrip TIFFComputeTile TIFFCreateCustomDirectory TIFFCreateDirectory TIFFCreateEXIFDirectory TIFFCurrentDirOffset TIFFCurrentDirectory TIFFCurrentRow TIFFCurrentStrip TIFFCurrentTile TIFFDataWidth TIFFDefaultStripSize TIFFDefaultTileSize TIFFError TIFFErrorExt TIFFFdOpen TIFFFieldDataType TIFFFieldName TIFFFieldPassCount TIFFFieldReadCount TIFFFieldTag TIFFFieldWithName TIFFFieldWithTag TIFFFieldWriteCount TIFFFileName TIFFFileno TIFFFindCODEC TIFFFindField TIFFFlush TIFFFlushData TIFFFreeDirectory TIFFGetBitRevTable TIFFGetClientInfo TIFFGetCloseProc TIFFGetConfiguredCODECs TIFFGetField TIFFGetFieldDefaulted TIFFGetMapFileProc TIFFGetMode TIFFGetReadProc TIFFGetSeekProc TIFFGetSizeProc TIFFGetTagListCount TIFFGetTagListEntry TIFFGetUnmapFileProc TIFFGetVersion TIFFGetWriteProc TIFFIsBigEndian TIFFIsByteSwapped TIFFIsCODECConfigured TIFFIsMSB2LSB TIFFIsTiled TIFFIsUpSampled TIFFLastDirectory TIFFMergeFieldInfo TIFFNumberOfDirectories TIFFNumberOfStrips TIFFNumberOfTiles TIFFOpen TIFFOpenW TIFFPrintDirectory TIFFRGBAImageBegin TIFFRGBAImageEnd TIFFRGBAImageGet TIFFRGBAImageOK TIFFRasterScanlineSize TIFFRasterScanlineSize64 TIFFRawStripSize TIFFRawStripSize64 TIFFReadBufferSetup TIFFReadCustomDirectory TIFFReadDirectory TIFFReadEXIFDirectory TIFFReadEncodedStrip TIFFReadEncodedTile TIFFReadRGBAImage TIFFReadRGBAImageOriented TIFFReadRGBAStrip TIFFReadRGBAStripExt TIFFReadRGBATile TIFFReadRGBATileExt TIFFReadRawStrip TIFFReadRawTile TIFFReadScanline TIFFReadTile TIFFRegisterCODEC TIFFReverseBits TIFFRewriteDirectory TIFFScanlineSize TIFFScanlineSize64 TIFFSetClientInfo TIFFSetClientdata TIFFSetCompressionScheme TIFFSetDirectory TIFFSetErrorHandler TIFFSetErrorHandlerExt TIFFSetField TIFFSetFileName TIFFSetFileno TIFFSetMode TIFFSetSubDirectory TIFFSetTagExtender TIFFSetWarningHandler TIFFSetWarningHandlerExt TIFFSetWriteOffset TIFFSetupStrips TIFFStripSize TIFFStripSize64 TIFFSwabArrayOfDouble TIFFSwabArrayOfFloat TIFFSwabArrayOfLong TIFFSwabArrayOfLong8 TIFFSwabArrayOfShort TIFFSwabArrayOfTriples TIFFSwabDouble TIFFSwabFloat TIFFSwabLong TIFFSwabLong8 TIFFSwabShort TIFFTileRowSize TIFFTileRowSize64 TIFFTileSize TIFFTileSize64 TIFFUnRegisterCODEC TIFFUnlinkDirectory TIFFUnsetField TIFFVGetField TIFFVGetFieldDefaulted TIFFVSetField TIFFVStripSize TIFFVStripSize64 TIFFVTileSize TIFFVTileSize64 TIFFWarning TIFFWarningExt TIFFWriteBufferSetup TIFFWriteCheck TIFFWriteCustomDirectory TIFFWriteDirectory TIFFWriteEncodedStrip TIFFWriteEncodedTile TIFFWriteRawStrip TIFFWriteRawTile TIFFWriteScanline TIFFWriteTile TIFFXYZToRGB TIFFYCbCrToRGBInit TIFFYCbCrtoRGB _TIFFCheckMalloc _TIFFCheckRealloc _TIFFMultiply32 _TIFFMultiply64 _TIFFRewriteField _TIFFfree _TIFFmalloc _TIFFmemcmp _TIFFmemcpy _TIFFmemset _TIFFrealloc

Name

.text

Size

255KB

Virtual Size

254KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

143KB

Virtual Size

142KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

660B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

libwebp-7.dll

IMPHASH f91d797666de5b6280ece58a34ceba9e
SHA256 9a53563b6058f70f2725029b7dd2fe96f869c20e8090031cd303e994dfe07b50
MD5 2c5aca898ff88eb2c9028bbeefebbd1e
SHA1 7a0048674ef614bebe6cc83b1228d670372076c9
SHA512 46fe8b151e3a13ab506c4fc8a9f3f0f47b21f64f37097a4f1f573b547443ed23e7b2f489807c1623fbc41015f7da11665d88690d8cd0ddd61aa53789586c5a13
SSDEEP 6144:t2lROjMXfhVy+tEZzshykv2SxgQceWni1UC2JCsJ5zIGWexIaZOovMPVt9ACB/1O:JMtVykiiiCsJdpxIaZOokPVtW
TLSH
T131945B0EE69335DDD51BC47046AEA7B3B9647C2D4220A83B1755FE312D32F80970AF6A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4855

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

QuantizeLevels VP8AccumulateSSE VP8AdjustFilterStrength VP8ApplyNearLossless VP8BitReaderSetBuffer VP8BitWriterAppend VP8BitWriterFinish VP8BitWriterInit VP8BitWriterWipeOut VP8CalculateLevelCosts VP8Cat3 VP8Cat4 VP8Cat5 VP8Cat6 VP8CheckSignature VP8Clear VP8CodeIntraModes VP8CoeffsProba0 VP8CoeffsUpdateProba VP8CollectHistogram VP8Copy16x8 VP8Copy4x4 VP8Decimate VP8Decode VP8DecodeMB VP8DecompressAlphaRows VP8DefaultProbas VP8Delete VP8DitherCombine8x8 VP8DspInit VP8DspInitMIPS32 VP8DspInitMIPSdspR2 VP8DspInitMSA VP8DspInitNEON VP8DspInitSSE2 VP8DspInitSSE41 VP8DspScan VP8EmitTokens VP8EncAnalyze VP8EncBands VP8EncDeleteAlpha VP8EncDspCostInit VP8EncDspCostInitMIPS32 VP8EncDspCostInitMIPSdspR2 VP8EncDspCostInitNEON VP8EncDspCostInitSSE2 VP8EncDspInit VP8EncDspInitMIPS32 VP8EncDspInitMIPSdspR2 VP8EncDspInitMSA VP8EncDspInitNEON VP8EncDspInitSSE2 VP8EncDspInitSSE41 VP8EncFinishAlpha VP8EncFreeBitWriters VP8EncInitAlpha VP8EncLoop VP8EncPredChroma8 VP8EncPredLuma16 VP8EncPredLuma4 VP8EncQuantize2Blocks VP8EncQuantizeBlock VP8EncQuantizeBlockWHT VP8EncStartAlpha VP8EncTokenLoop VP8EncWrite VP8EnterCritical VP8EntropyCost VP8EstimateTokenSize VP8ExitCritical VP8FTransform VP8FTransform2 VP8FTransformWHT VP8FilterStrengthFromDelta VP8FiltersInit VP8FiltersInitMIPSdspR2 VP8FiltersInitMSA VP8FiltersInitNEON VP8FiltersInitSSE2 VP8FixedCostsI16 VP8FixedCostsI4 VP8FixedCostsUV VP8GetCPUInfo VP8GetCostLuma16 VP8GetCostLuma4 VP8GetCostUV VP8GetHeaders VP8GetInfo VP8GetResidualCost VP8GetSignedValue VP8GetThreadMethod VP8GetValue VP8HFilter16 VP8HFilter16i VP8HFilter8 VP8HFilter8i VP8I16ModeOffsets VP8I4ModeOffsets VP8ITransform VP8InitBitReader VP8InitClipTables VP8InitDithering VP8InitFilter VP8InitFrame VP8InitIoInternal VP8InitRandom VP8InitResidual VP8InitScanline VP8IteratorBytesToNz VP8IteratorExport VP8IteratorImport VP8IteratorInit VP8IteratorIsDone VP8IteratorNext VP8IteratorNzToBytes VP8IteratorProgress VP8IteratorReset VP8IteratorRotateI4 VP8IteratorSaveBoundary VP8IteratorSetCountDown VP8IteratorSetRow VP8IteratorStartI4 VP8LAddGreenToBlueAndRed VP8LAddGreenToBlueAndRed_C VP8LAddVector VP8LAddVectorEq VP8LAllocateHistogram VP8LAllocateHistogramSet VP8LBackwardReferencesTraceBackwards VP8LBackwardRefsClear VP8LBackwardRefsCursorAdd VP8LBackwardRefsInit VP8LBitEntropyInit VP8LBitReaderSetBuffer VP8LBitWriterClone VP8LBitWriterFinish VP8LBitWriterInit VP8LBitWriterReset VP8LBitWriterSwap VP8LBitWriterWipeOut VP8LBitsEntropy VP8LBitsEntropyUnrefined VP8LBuildHuffmanTable VP8LBundleColorMap VP8LBundleColorMap_C VP8LCheckSignature VP8LClear VP8LClearBackwardRefs VP8LCollectColorBlueTransforms VP8LCollectColorBlueTransforms_C VP8LCollectColorRedTransforms VP8LCollectColorRedTransforms_C VP8LColorCacheClear VP8LColorCacheCopy VP8LColorCacheInit VP8LColorIndexInverseTransformAlpha VP8LColorSpaceTransform VP8LCombinedShannonEntropy VP8LConvertBGRAToBGR VP8LConvertBGRAToBGR_C VP8LConvertBGRAToRGB VP8LConvertBGRAToRGB565 VP8LConvertBGRAToRGB565_C VP8LConvertBGRAToRGBA VP8LConvertBGRAToRGBA4444 VP8LConvertBGRAToRGBA4444_C VP8LConvertBGRAToRGBA_C VP8LConvertBGRAToRGB_C VP8LConvertFromBGRA VP8LCreateCompressedHuffmanTree VP8LCreateHuffmanTree VP8LDecodeAlphaHeader VP8LDecodeAlphaImageStream VP8LDecodeHeader VP8LDecodeImage VP8LDelete VP8LDistanceToPlaneCode VP8LDoFillBitWindow VP8LDspInit VP8LDspInitMIPSdspR2 VP8LDspInitMSA VP8LDspInitNEON VP8LDspInitSSE2 VP8LEncDspInit VP8LEncDspInitMIPS32 VP8LEncDspInitMIPSdspR2 VP8LEncDspInitMSA VP8LEncDspInitNEON VP8LEncDspInitSSE2 VP8LEncDspInitSSE41 VP8LEncodeImage VP8LEncodeStream VP8LExtraCost VP8LExtraCostCombined VP8LFastLog2Slow VP8LFastSLog2Slow VP8LFreeHistogram VP8LFreeHistogramSet VP8LGetBackwardReferences VP8LGetCombinedEntropyUnrefined VP8LGetEntropyUnrefined VP8LGetHistoImageSymbols VP8LGetHistogramSize VP8LGetInfo VP8LHashChainClear VP8LHashChainFill VP8LHashChainInit VP8LHistogramAdd VP8LHistogramAddSinglePixOrCopy VP8LHistogramCreate VP8LHistogramEstimateBits VP8LHistogramInit VP8LHistogramSetClear VP8LHistogramStoreRefs VP8LHtreeGroupsFree VP8LHtreeGroupsNew VP8LInitBitReader VP8LInverseTransform VP8LMapColor32b VP8LMapColor8b VP8LNew VP8LPredictors VP8LPredictorsAdd VP8LPredictorsAdd_C VP8LPredictorsSub VP8LPredictorsSub_C VP8LPredictors_C VP8LPutBitsFlushBits VP8LPutBitsInternal VP8LReadBits VP8LRefsCursorInit VP8LRefsCursorNextBlock VP8LResidualImage VP8LSubtractGreenFromBlueAndRed VP8LSubtractGreenFromBlueAndRed_C VP8LTransformColor VP8LTransformColorInverse VP8LTransformColorInverse_C VP8LTransformColor_C VP8LVectorMismatch VP8LevelCodes VP8LevelFixedCosts VP8LoadFinalBytes VP8MakeChroma8Preds VP8MakeIntra4Preds VP8MakeLuma16Preds VP8Mean16x4 VP8New VP8ParseIntraModeRow VP8ParseProba VP8ParseQuant VP8PredChroma8 VP8PredLuma16 VP8PredLuma4 VP8ProcessRow VP8PutBit VP8PutBitUniform VP8PutBits VP8PutSignedBits VP8RecordCoeffTokens VP8RecordCoeffs VP8RemapBitReader VP8ResetProba VP8SSE16x16 VP8SSE16x8 VP8SSE4x4 VP8SSE8x8 VP8SSIMDspInit VP8SSIMDspInitSSE2 VP8SSIMFromStats VP8SSIMFromStatsClipped VP8SSIMGet VP8SSIMGetClipped VP8Scan VP8SetError VP8SetHistogramData VP8SetIntra16Mode VP8SetIntra4Mode VP8SetIntraUVMode VP8SetResidualCoeffs VP8SetSegment VP8SetSegmentParams VP8SetSkip VP8SimpleHFilter16 VP8SimpleHFilter16i VP8SimpleVFilter16 VP8SimpleVFilter16i VP8Status VP8StatusMessage VP8StoreFilterStats VP8TBufferClear VP8TBufferInit VP8TDisto16x16 VP8TDisto4x4 VP8Transform VP8TransformAC3 VP8TransformDC VP8TransformDCUV VP8TransformUV VP8TransformWHT VP8UVModeOffsets VP8VFilter16 VP8VFilter16i VP8VFilter8 VP8VFilter8i VP8WriteProbas VP8YuvToArgb32_SSE2 VP8YuvToBgr32_SSE2 VP8YuvToBgr32_SSE41 VP8YuvToBgra32_SSE2 VP8YuvToRgb32_SSE2 VP8YuvToRgb32_SSE41 VP8YuvToRgb56532_SSE2 VP8YuvToRgba32_SSE2 VP8YuvToRgba444432_SSE2 VP8kabs0 VP8kclip1 VP8ksclip1 VP8ksclip2 WebPAllocateDecBuffer WebPApplyAlphaMultiply WebPApplyAlphaMultiply4444 WebPAvoidSlowMemory WebPBlendAlpha WebPCleanupTransparentArea WebPCleanupTransparentAreaLossless WebPConfigInitInternal WebPConfigLosslessPreset WebPConvertARGBToUV WebPConvertARGBToUV_C WebPConvertARGBToY WebPConvertBGR24ToY WebPConvertRGB24ToY WebPConvertRGBA32ToUV WebPConvertRGBA32ToUV_C WebPCopyDecBuffer WebPCopyDecBufferPixels WebPCopyPixels WebPCopyPlane WebPDeallocateAlphaMemory WebPDecode WebPDecodeARGB WebPDecodeARGBInto WebPDecodeBGR WebPDecodeBGRA WebPDecodeBGRAInto WebPDecodeBGRInto WebPDecodeRGB WebPDecodeRGBA WebPDecodeRGBAInto WebPDecodeRGBInto WebPDecodeYUV WebPDecodeYUVInto WebPDequantizeLevels WebPDispatchAlpha WebPDispatchAlphaToGreen WebPEncode WebPEncodeBGR WebPEncodeBGRA WebPEncodeLosslessBGR WebPEncodeLosslessBGRA WebPEncodeLosslessRGB WebPEncodeLosslessRGBA WebPEncodeRGB WebPEncodeRGBA WebPEncodingSetError WebPEstimateBestFilter WebPExtractAlpha WebPExtractGreen WebPFilters WebPFlipBuffer WebPFree WebPFreeDecBuffer WebPGetColorPalette WebPGetDecoderVersion WebPGetEncoderVersion WebPGetFeaturesInternal WebPGetInfo WebPGetLinePairConverter WebPGetWorkerInterface WebPGrabDecBuffer WebPHasAlpha32b WebPHasAlpha8b WebPIAppend WebPIDecGetRGB WebPIDecGetYUVA WebPIDecode WebPIDecodedArea WebPIDelete WebPINewDecoder WebPINewRGB WebPINewYUV WebPINewYUVA WebPISetIOHooks WebPIUpdate WebPInitAlphaProcessing WebPInitAlphaProcessingMIPSdspR2 WebPInitAlphaProcessingNEON WebPInitAlphaProcessingSSE2 WebPInitAlphaProcessingSSE41 WebPInitConvertARGBToYUV WebPInitConvertARGBToYUVNEON WebPInitConvertARGBToYUVSSE2 WebPInitConvertARGBToYUVSSE41 WebPInitCustomIo WebPInitDecBufferInternal WebPInitDecoderConfigInternal WebPInitSamplers WebPInitSamplersMIPS32 WebPInitSamplersMIPSdspR2 WebPInitSamplersSSE2 WebPInitSamplersSSE41 WebPInitSharpYUVNEON WebPInitSharpYUVSSE2 WebPInitUpsamplers WebPInitUpsamplersMIPSdspR2 WebPInitUpsamplersMSA WebPInitUpsamplersNEON WebPInitUpsamplersSSE2 WebPInitUpsamplersSSE41 WebPInitYUV444Converters WebPInitYUV444ConvertersMIPSdspR2 WebPInitYUV444ConvertersSSE2 WebPInitYUV444ConvertersSSE41 WebPIoInitFromOptions WebPMemoryWrite WebPMemoryWriterClear WebPMemoryWriterInit WebPMultARGBRow WebPMultARGBRow_C WebPMultARGBRows WebPMultRow WebPMultRow_C WebPMultRows WebPPackRGB WebPParseHeaders WebPPictureARGBToYUVA WebPPictureARGBToYUVADithered WebPPictureAlloc WebPPictureAllocARGB WebPPictureAllocYUVA WebPPictureCopy WebPPictureCrop WebPPictureDistortion WebPPictureFree WebPPictureHasTransparency WebPPictureImportBGR WebPPictureImportBGRA WebPPictureImportBGRX WebPPictureImportRGB WebPPictureImportRGBA WebPPictureImportRGBX WebPPictureInitInternal WebPPictureIsView WebPPictureRescale WebPPictureResetBuffers WebPPictureSharpARGBToYUVA WebPPictureSmartARGBToYUVA WebPPictureView WebPPictureYUVAToARGB WebPPlaneDistortion WebPReportProgress WebPRescaleNeededLines WebPRescalerDspInit WebPRescalerDspInitMIPS32 WebPRescalerDspInitMIPSdspR2 WebPRescalerDspInitMSA WebPRescalerDspInitNEON WebPRescalerDspInitSSE2 WebPRescalerExport WebPRescalerExportRow WebPRescalerExportRowExpand WebPRescalerExportRowExpand_C WebPRescalerExportRowShrink WebPRescalerExportRowShrink_C WebPRescalerGetScaledDimensions WebPRescalerImport WebPRescalerImportRow WebPRescalerImportRowExpand WebPRescalerImportRowExpand_C WebPRescalerImportRowShrink WebPRescalerImportRowShrink_C WebPRescalerInit WebPResetDecParams WebPSafeCalloc WebPSafeFree WebPSafeMalloc WebPSamplerProcessPlane WebPSamplers WebPSetWorkerInterface WebPSharpYUVFilterRow WebPSharpYUVUpdateRGB WebPSharpYUVUpdateY WebPUnfilters WebPUpsamplers WebPValidateConfig WebPYUV444Converters WebPYuv444ToArgb_C WebPYuv444ToBgr_C WebPYuv444ToBgra_C WebPYuv444ToRgb565_C WebPYuv444ToRgb_C WebPYuv444ToRgba4444_C WebPYuv444ToRgba_C kLog2Table kPrefixEncodeCode kPrefixEncodeExtraBitsValue kSLog2Table kVP8Log2Range kVP8NewRange

Name

.text

Size

354KB

Virtual Size

353KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

336B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

mfwrap.dll

IMPHASH 6c936fcfc1b0e49a049185e333afe26e
SHA256 4cdacdf47a1139d1f14a2448925ab4cf130430fd56fe78b1f1803caba82dc820
MD5 8a899c4cf25c99c2db2a65dba16792dc
SHA1 58c6fd83d0af1cce0feb7c8320d9e1094451adaa
SHA512 30c9d1466ad782732a73deca0a7a3059200edc03dfb74dc0f9cb25b38f0c1127651f335d43cdeb2767343d973838f212488afd10e2e5e340e8d58ac7ada6c6ba
SSDEEP 768:vNLp6xCveGs1dVR0l4FRXDrBr2lt2a0VWV9+k:vNL8TR0lADr96Y7Q
TLSH
T147038E877A681086E745CA39C0C39543EDB5F682A7A285CF7222423E1F263D07F79B19
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

00:14:70:6a:b1:da:d6:02:e3:5a:99:e8:5b:90:ee:93:91:b0:b9:41:f6:a3:93:49:18:48:79:d6:a5:15:28:c3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 17, 2025

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

43:52:15:04:9b:64:6e:84:37:81:b8:f3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 4, 2024 - Dec 5, 2025

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

13600

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\monec\workspace\Monect_host\x64\Release\mfwrap.pdb

mf

MFEnumDeviceSources

mfplat

MFCreateMediaType MFShutdown MFGetStrideForBitmapInfoHeader MFCreateAttributes MFStartup MFTEnumEx MFCreateSample MFCreateDXGISurfaceBuffer MFCreateDXGIDeviceManager

mfreadwrite

MFCreateSourceReaderFromMediaSource

shlwapi

StrRChrW ord219

kernel32

InitializeCriticalSectionEx RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead OutputDebugStringW QueryPerformanceFrequency QueryPerformanceCounter WaitForSingleObject GetLastError GetModuleFileNameW LoadLibraryW GetProcAddress FreeLibrary MulDiv HeapAlloc GetProcessHeap InitializeCriticalSection HeapFree DeleteCriticalSection EnterCriticalSection LeaveCriticalSection Sleep RtlCaptureContext CreateThread

user32

SetRect

ole32

CoUninitialize CoTaskMemFree CoInitializeEx

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException __std_exception_copy __std_terminate memcpy memcmp __std_type_info_destroy_list __C_specific_handler memset __std_exception_destroy

api-ms-win-crt-heap-l1-1-0

malloc _callnewh free

api-ms-win-crt-runtime-l1-1-0

_initterm_e _crt_atexit _initterm _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _cexit _execute_onexit_table _register_onexit_function

officehook.dll

IMPHASH 49c60b00c630dd491e30b9fc80bbd123
SHA256 dec20e516823734016626cf15f5adefe9a01572ee0becb03e6209c9247d2e6aa
MD5 de465b6f8943a8b134a94b62ea0457af
SHA1 312b11ba48e36d3d6b6519fa9499a3155f6894eb
SHA512 2b9cceab94cd52646e63444a2ab4d0e9e655199f7f36dc59551dd01ee3d6b4cb598f61cd5db8838dfb2239cb041e27ef30c0ac9ca90fe031b387b542bb6288a0
SSDEEP 768:d2kwWZEEC6W2jP31htr0iXj1r2lTKfzyVWV9+kK:ePALtr0SF6TwGQ
TLSH
T1BF038D87AB6D1482EA67CA7CC8D36513FCB4B5D16B5642CF5333421A1D263E13E7820A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

47:52:7c:30:fa:b5:dc:8e:11:ca:f4:fd:f0:99:9c:e0:10:8e:3d:34:47:ce:67:a2:54:18:45:a4:16:1d:ba:cf

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 13, 2025

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

43:52:15:04:9b:64:6e:84:37:81:b8:f3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 4, 2024 - Dec 5, 2025

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

14268

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\monec\workspace\Monect_host\x64\Release\officehook.pdb

oleacc

AccessibleObjectFromWindow

ws2_32

htonl

kernel32

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind InitializeSListHead FindFirstFileW FindNextFileW RemoveDirectoryW FindClose SetFileAttributesW GetLastError DeleteFileW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent QueryPerformanceCounter GetSystemTimeAsFileTime GetCurrentProcessId

user32

SetWindowPos GetAncestor SetForegroundWindow GetClassNameW GetForegroundWindow ShowWindow GetSystemMetrics FindWindowExW SendMessageW EnumChildWindows

shell32

ord165

ole32

CoUninitialize CoInitializeEx

oleaut32

VariantInit SysAllocString VariantClear

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memset _CxxThrowException __C_specific_handler __std_exception_copy __std_exception_destroy memcpy __std_type_info_destroy_list memmove

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s

api-ms-win-crt-runtime-l1-1-0

_initterm _crt_atexit _initterm_e _configure_narrow_argv _seh_filter_dll _initialize_onexit_table _cexit _errno _invalid_parameter_noinfo _execute_onexit_table _invoke_watson _register_onexit_function _initialize_narrow_environment

api-ms-win-crt-string-l1-1-0

wcscat_s

api-ms-win-crt-heap-l1-1-0

_callnewh malloc free

rtcompress.dll

IMPHASH 7e386e66e33c837a04248be8d67a70c4
SHA256 1f1f5baa17b949ee547679a8c92c7c84765eff95ad725e95328c094f50ed240d
MD5 dbde7cbeac85bc9012f62a7b99fd879c
SHA1 c4cd0296c7912c67399c76165cc32cb335e56c27
SHA512 81f537b2ada6683d796a02436ea9aeab89b7dfea05793dbf2baf794c807753adfb8a80da7842612e7908e07e5e3984ce5a6ad4f9a373138a39954a920c0d7707
SSDEEP 49152:jQuzrXZPHoTf6BT8TN2D1e9XsApLLyabNtXeDLXWtu5KQgxgDlh:j34tuL
TLSH
T12EB5AE5AA2BB41D8C6AB81B4C56BAB17F278342D03C01EF316C0D5646F27FD1367A71A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

41:6b:6a:b7:55:85:c7:33:99:18:e3:6b:62:9d:d8:1e:e0:50:5e:6c:14:ea:da:bb:07:59:9f:3a:10:62:04:dc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Oct 17, 2025

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:15:4b:5a:c3:94

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Sep 1, 1998 - Jan 28, 2028

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91320594MA251F5K75,CN=Monect (Suzhou) Co.\, Ltd.,O=Monect (Suzhou) Co.\, Ltd.,L=Suzhou,ST=Jiangsu,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130653757a686f75,1.3.6.1.4.1.311.60.2.1.2=#13074a69616e677375,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

43:52:15:04:9b:64:6e:84:37:81:b8:f3

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 4, 2024 - Dec 5, 2025

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:03:32:e1:65:bf:9b:78:43:e0:99:75:94:63:77:0b

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Apr 11, 2025 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

6

Entry point

1929936

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\monec\workspace\Monect_host\x64\Release\rtcompress.pdb

swscale-6

sws_freeContext sws_getCachedContext sws_scale

kernel32

IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObject CloseHandle CreateThread GetStdHandle MultiByteToWideChar GetConsoleMode WriteConsoleW GetCurrentThread SetThreadPriority EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ReleaseSemaphore CreateEventW CreateSemaphoreW GetCurrentProcess GetModuleHandleW GetProcAddress GetProcessAffinityMask FreeLibrary LoadLibraryW GetThreadPriority RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId TerminateProcess

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_copy __std_exception_destroy _CxxThrowException __std_type_info_destroy_list __C_specific_handler memset memcpy strstr strchr memcmp memmove __std_terminate

api-ms-win-crt-heap-l1-1-0

calloc free malloc _callnewh

api-ms-win-crt-stdio-l1-1-0

_fseeki64 fread fclose _ftelli64 _wfopen fwrite fputc fputs __acrt_iob_func _fileno __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vsscanf

api-ms-win-crt-string-l1-1-0

isdigit _strdup strcspn _stricmp strncmp _strnicmp strspn strcmp strpbrk strtok_s

api-ms-win-crt-convert-l1-1-0

strtod strtol

api-ms-win-crt-filesystem-l1-1-0

_fstat64 _wrename _wunlink

api-ms-win-crt-math-l1-1-0

floor log lrintf log2f log10 pow exp sqrt _dclass cos powf round log2

api-ms-win-crt-runtime-l1-1-0

_wassert _cexit _beginthreadex _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment abort _configure_narrow_argv _seh_filter_dll _initterm _initterm_e _execute_onexit_table

swresample-4.dll

IMPHASH ea65996d801c1b342ffbb0a72cac1321
SHA256 339114e12aaf6c5c4d5f17605eac4665ec570ff5de189adada800c177b238932
MD5 d4ba67aba67be2d58a0f4f0742cc6272
SHA1 71629abdcd513dc3e6704fb55f71b28f09d23dac
SHA512 f6a14f86636c078aadb9543e4660ad827f71a6bda3067a0490d4ab68d09197f05106e7d52e02fe989bca44f130ce265c1fde7c4dbec27b9dbc0e6180e92b7b6b
SSDEEP 6144:IJ9IQm83mfhnpf7QTsiXMFfdN4wJg48nhyUXtLGsRBek:IHIQFufUTWIt48r
TLSH
T1AA947C88E5E345FDE267D07062AF7A37F520386941685D3603F1C9786DAAF006E9B722
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

DLL Hijacking vulnerability

Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

361KB

Virtual Size

361KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

212KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

660B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

920B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

swscale-6.dll

IMPHASH c5b3ebeb069f26c5a5bbc3e68fbad949
SHA256 b2c3ee9cdc0e5292040bcd3336390e77ae8b467d65faa80f7e68625a619b32de
MD5 ce2c506023961712261ebf67296864de
SHA1 eaa7eac0ef9e7770876324f2934a2317f1519b7d
SHA512 5dafe6784faeb6cad509ebbca44e51b2b971369fafecacffc8915d4980bd303f57201183669c7c4972ad8d0a3ebe32ebccaf4544fd66ed1c21893992ce1d5d24
SSDEEP 12288:YSEgesaQ+8S2OS73oRUG43hbUoEALkv5tlbDhsUmSa9wCCn9lF5QSzY:YQOS73oRUGchbQALkv5zFsUmSa9wCCnK
TLSH
T1C4D47DE7C3732BDDCA778631825791B3B160B43B4436AD2B8681EE30396AD91661FF05
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

DLL Hijacking vulnerability

Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

kernel32

AddVectoredExceptionHandler CloseHandle CreateEventA CreateSemaphoreA DeleteCriticalSection DuplicateHandle EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetHandleInformation GetLastError GetProcessAffinityMask GetSystemTimeAsFileTime GetThreadContext GetThreadPriority GetTickCount64 InitializeCriticalSection IsDebuggerPresent LeaveCriticalSection OpenProcess OutputDebugStringA RaiseException ReleaseSemaphore RemoveVectoredExceptionHandler ResetEvent ResumeThread SetEvent SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority Sleep SuspendThread TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject __C_specific_handler

msvcrt

__iob_func __setusermatherr _amsg_exit _beginthreadex _endthreadex _errno _initterm _lock _setjmp _strdup _ultoa _unlock abort calloc exit fprintf free fwrite longjmp malloc memcpy memmove memset printf realloc signal strlen strncmp vfprintf

avutil-57

av_calloc av_fast_malloc av_fast_realloc av_frame_alloc av_frame_free av_frame_get_buffer av_frame_ref av_frame_unref av_free av_freep av_get_bits_per_pixel av_get_cpu_flags av_get_pix_fmt_name av_image_alloc av_log av_malloc av_malloc_array av_mallocz av_opt_copy av_opt_get_int av_opt_set_defaults av_opt_set_int av_pix_fmt_desc_get av_pix_fmt_get_chroma_sub_sample av_pix_fmt_swap_endianness avpriv_slicethread_create avpriv_slicethread_execute avpriv_slicethread_free

Name

.text

Size

526KB

Virtual Size

526KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

984B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

912B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

936B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

zlib1.dll

IMPHASH 9833fe070c600df4abfd312b6aa69324
SHA256 b1f58a17f3bfd55523e7bef685acf5b32d1c2a6f25abdcd442681266fd26ab08
MD5 5eac41b641e813f2a887c25e7c87a02e
SHA1 ec3f6cf88711ef8cfb3cc439cb75471a2bb9e1b5
SHA512 cad34a495f1d67c4d79ed88c5c52cf9f2d724a1748ee92518b8ece4e8f2fe1d443dfe93fb9dba8959c0e44c7973af41eb1471507ab8a5b1200a25d75287d5de5
SSDEEP 3072:wLmjK8n5MYk+NqZSB23eRenGvTBfs9Yy0J:wLl8n5MYCjFnaTBwYy0
TLSH
T16FB38E9BBA9362FDD972C17052E69BB4E930BC0109705ADB5148FBB02F12C906F597EC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4855

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

912B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

PCRemoteReceiverSetup_7_8_1.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/LangDLL.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/NSISdl.dll

advapi32

wsock32

user32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/modern-wizard.bmp

7z.dll

oleaut32

user32

advapi32

msvcrt

kernel32

generic

MVCameraDriver.dll

mfplat

mfsensorgroup

api-ms-win-core-synch-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-namedpipe-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-memory-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-largeinteger-l1-1-0

user32

gdi32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-interlocked-l1-1-0

oleaut32

api-ms-win-core-winrt-error-l1-1-1

api-ms-win-core-string-l1-1-0