AIVOICE2_GUMI_NV.zip
- SHA256 0714a2ef3ea8415d5db9abd48d92d08c53a95dff53d8c63dae7025f0c0f76f5c
Static task
static1
Behavioral task
behavioral1
Sample
AIVOICE2 GUMI (NV)\installer\app\AIVoice2Editor_GUMI_ns_48.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
AIVOICE2 GUMI (NV)\installer\app\AIVoice2Editor_GUMI_ns_48.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
AIVOICE2 GUMI (NV)\setup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
AIVOICE2 GUMI (NV)\setup.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target AIVOICE2_GUMI_NV.zip
- Size 513KB
- Sample260812-mcbmcavapf
- SHA256 0714a2ef3ea8415d5db9abd48d92d08c53a95dff53d8c63dae7025f0c0f76f5c
- MD5 86b20f32fd90044a2d5b136231b8411f
- SHA1 091607316b9827b4cbb8fb9d1cc3fa72207d3873
- SHA512 314a117ed9a7eab74a161db8ca3af2b93f994fa7b24cedd4b085468d98f47f53bac43b2fb1297cf8cd360c8e4466f3e03b3dbada9bd97fb8561bad41cc31a4ee
- SSDEEP 12288:PblHK6+9eCWgtDQWx7GhvXmvdEGNSFphZW18T:PkEADvx7GhvXmvWG4FphZW18T
- TLSH T112B423E2436C408581C7E3F8FD64E1711DB1270FAD501DBFAAA452F7869EBC866B5B02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
AIVOICE2_GUMI_NV.zip.zip 513KB
-
AIVOICE2 GUMI (NV)\autorun.inf55B
-
AIVOICE2 GUMI (NV)\installer\app\AIVoice2Editor_GUMI_ns_48.exe.exe 612KB
-
AIVOICE2 GUMI (NV)\installer\settings.ini172B
-
AIVOICE2 GUMI (NV)\installer\settings_ja-JP.ini176B
-
AIVOICE2 GUMI (NV)\installer\setup.ico13KB
-
AIVOICE2 GUMI (NV)\installer\setup.ico[1]2KB
-
AIVOICE2 GUMI (NV)\setup.exe.exe 252KB
AIVOICE2 GUMI (NV)\autorun.inf
- SHA256 591fb7c3beba3d792418268fad789f439aec3351d53ab6f05f881b9199d0b3d6
- MD5 0e0afbc9f3dc6e7189d325e48c41ad87
- SHA1 7e58587e5920895b7032cb31dbc194b851f56d73
- SHA512 72788f9762852136772cb77f4db3d2ef40097bdf48179c88329c08139489b6e2e8c21ac176f11ac3c6901aee9d70dd9c6a5d168de095386168e680209b654d14
- TLSH T143900208CE0F009D370521A605AF04319A86B0988900C6B093E6204400221481F25059
- MD5 SHA1 SHA512 TLSH
AIVOICE2 GUMI (NV)\installer\app\AIVoice2Editor_GUMI_ns_48.exe
- IMPHASH 42d651751c1d75ed4fa8fe71751854ff
- SHA256 44cbdd7aa2ec3e8cbb8d514d2c00121b223d31aa7605e81aba2f3538d3f369ae
- MD5 233eb07832eee61890713fa4f48651e3
- SHA1 b0a633103cc903a05fe36bd7da2e195de1dc84a7
- SHA512 1911eb551dbacab9ac55ef9d622e33b88ccae7d6608245d6597e1ce557b57e35709ad3503eda49ba88377d506a6e32bb114a61d65fdd07d23960638b47822391
- SSDEEP 12288:CzNB0JfiwSdYSui8zZH94I3H1v1Fg2HnBEGpSnZh58gkK:2NsfiTdYSuVzZH9tH1v1F5CGMnZh5GK
- TLSH T1DAD49D32A5604032E7F105B3B928D6303E7CE328275189AAD7D4AD1E7EE84C56BF7257
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
bf:94:47:bc:b9:be:78:19:a4:22:4f:8d:4e:84:2e:75:42:1d:f1:82:30:5d:bb:c5:5f:42:fa:ea:00:d0:a4:55
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=AI\, Inc.,O=AI\, Inc.,ST=Tokyo,C=JP
Chains
Jun 5, 2024
CN=AI\, Inc.,O=AI\, Inc.,ST=Tokyo,C=JP
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AI\, Inc.,O=AI\, Inc.,ST=Tokyo,C=JP
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=AI\, Inc.,O=AI\, Inc.,ST=Tokyo,C=JP
Serial Number
7f:d3:17:92:d2:7a:76:15:c9:43:4a:e2:cb:b0:fd:ed
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 22, 2023 - Aug 21, 2024
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 2, 2019 - Jan 18, 2038
Minor OS version
1
Major OS version
5
Entry point
188273
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
C:\agent\_work\66\s\build\ship\x86\burn.pdb
advapi32
RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
CloseEventLog
OpenEventLogW
ReportEventW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW
user32
PeekMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
GetMessageW
TranslateMessage
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
oleaut32
VariantInit
SysAllocString
VariantClear
SysFreeString
gdi32
DeleteDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
CreateCompatibleDC
shell32
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteExW
ole32
CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CLSIDFromProgID
CoInitializeSecurity
kernel32
GetCPInfo
GetOEMCP
IsValidCodePage
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineA
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetCommandLineW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetUserDefaultUILanguage
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
LoadLibraryExW
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
GetComputerNameW
SetCurrentDirectoryW
GetFileType
GetACP
ExitProcess
GetStdHandle
InitializeCriticalSectionAndSpinCount
SetLastError
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
LoadLibraryExA
rpcrt4
UuidCreate
Name
.text
Size
292KB
Virtual Size
291KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
126KB
Virtual Size
125KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=241, version=40116,
count=125, id=243, version=40116,
count=24, id=242, version=40116,
count=19, id=260, version=26706,
count=20, id=259, version=26706,
count=43, id=261, version=26706,
count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=341, id=1, productName=Unmarked objects,
count=75, id=261, productName=VS2017 v15.9.11 build 27030, version=27030,
count=1, id=255, productName=VS2017 v15.9.11 build 27030, version=27030,
count=2, id=151,
count=1, id=258, productName=VS2017 v15.9.11 build 27030, version=27030,
AIVOICE2 GUMI (NV)\installer\settings.ini
- SHA256 043a3c68bacbd97d088f9704aa254402112f7f8ea04d1f8b754c8715a43c1fc6
- MD5 76a1dbded204da7d780ad85ea246fb81
- SHA1 284e59565a074d61dfdd26d08c05d7ca8ba96f9d
- SHA512 267145650268e9743f9d6fea159d9e11ebbca6d36681c2f00a7d3f4a3d7c4aa5cd243f67b1739e8a4354b8ae35d4484a277dc96d82bf3cdafd272d12a9d6b214
- TLSH T106C0807F738A20AD917124EF4D4A427C7C51131A5E5D4578D5F70A090C610BDE78741D
- MD5 SHA1 SHA512 TLSH
AIVOICE2 GUMI (NV)\installer\settings_ja-JP.ini
- SHA256 afebc1916da1a934706284d6e21d7e23229dd9e98baa0153615c6d8df1bf218e
- MD5 e994c9ba67e48b3744a5efbabff95098
- SHA1 001f31af58d27fa0048c4988db66da7edc253b4c
- SHA512 7b6e6f174096f36269423618da440d36777c3664a8febd5fa02b89d2188e441a8b3a113b3abddeb66e20ac020a8cadc72f58d4aadadc85ee77238966f7696ccb
- TLSH T1F7C0226F33862098C03018DB881B02293812A20A6BAD42A8E0B2520C4C220F8D28700D
- MD5 SHA1 SHA512 TLSH
AIVOICE2 GUMI (NV)\installer\setup.ico
- SHA256 e8a636f47fcfd15b6b6e4e55ce633884d17b2298cd08d8e116075e04bad49039
- MD5 7c0347cc1d05f5042169397288c10fa5
- SHA1 82aa01e6aa232b615a2f98f1b30eba554ada980a
- SHA512 9ad331c192efd8ba82f54c09a9dd02a8d6b403ce72558f5fe1ac023110b1dfa150e16204f72e8500f4d20b414089546fea76caeb235bdccebb78108fd7613cb7
- SSDEEP 12:Mteu6tFdVdKtKtlt6YlX9XX+HOeu14lJXZkFDFLkcw12UmuOT6qFtuua44He+XVQ:81a
- TLSH T1D9523694222970DEE85D90794AB2E2F1641C3C9B5F34416BBFFA7DD73AF8500AB18513
- MD5 SHA1 SHA512 SSDEEP TLSH
AIVOICE2 GUMI (NV)\installer\setup.ico[1]
- SHA256 28ef8ec8a42822fb1b54d274b14c997065f2c21060e0b7f8e14a4f0d25720bab
- MD5 c67961a4189bb0386849483e958d5c16
- SHA1 88b95b332400bf2b53f0d78be4f000254280025e
- SHA512 276220853998548bbeceb51db139feaa25ebd3139ae89fdd484ca28301b234a1608ff7b83fa80c1a189ff5f5ead118636db33c53012b476ddc0af820caf5db8f
- TLSH T1F4415E92CFD2D1A9CAA7B73CBB9A4A12F1850D1518C32545500C13FE55F17D52C9372C
- MD5 SHA1 SHA512 TLSH
AIVOICE2 GUMI (NV)\setup.exe
- IMPHASH 25d360dc15f079d4c73e21f43dd353a6
- SHA256 7acda16adaf5d2320b911a2674af7ecd62cbfd2f4457b01aecbd32f6782dc6e3
- MD5 adaba6d22dedd9befd76119373153b19
- SHA1 079d78792b1846d3b8f3258897027fac250671da
- SHA512 6c86b42e6eb33169f66372dd7903d743cdf0d6ff8411df41a2a7b7e42b4c5ae2f1424b4fc9a1de94f639a37cbf613fca5765771dca4ae49ec78d427e0c532d55
- SSDEEP 6144:8INrLSCiQn6Fp18E99zA7yYRbAO/oLGFmazqY:5sFp18BxpoKFma2Y
- TLSH T10A448C0175D2C032D572153119E4EBB69A7EB9304BA289EF67D40F7E8E303C1A635A7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
38:41:91:55:75:2c:31:c7:4c:c7:39:ba:fb:0e:df:18:4c:86:98:90:0e:69:db:a6:46:fd:f2:85:fa:6c:bc:0e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=AI\,INC.,O=AI\,INC.,ST=Tokyo,C=JP
Chains
Aug 22, 2023
CN=AI\,INC.,O=AI\,INC.,ST=Tokyo,C=JP
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AI\,INC.,O=AI\,INC.,ST=Tokyo,C=JP
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=AI\,INC.,O=AI\,INC.,ST=Tokyo,C=JP
Serial Number
90:5d:04:c0:c6:a4:0e:c1:32:30:bd:83:fb:88:32:65
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 30, 2022 - Aug 30, 2023
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 2, 2019 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
57397
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\D\GIT\Editor\Xplatform-review\Installer\Windows\Installer\SetupProgram\Release\setup.pdb
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
shlwapi
PathFileExistsW
PathRemoveFileSpecW
msi
ord118
ord159
ord160
ord32
ord8
ord92
ord115
kernel32
FreeEnvironmentStringsW
GetPrivateProfileStringW
GetUserDefaultLocaleName
GetModuleFileNameW
CreateMutexW
GetLastError
CloseHandle
FindFirstFileW
FindNextFileW
FindClose
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetProcessHeap
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetFileType
HeapAlloc
HeapFree
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
LoadLibraryExW
SetStdHandle
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
CreateFileW
GetProcAddress
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
WriteConsoleW
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
user32
BeginPaint
UpdateWindow
ShowWindow
CreateWindowExW
GetSystemMetrics
RegisterClassExW
LoadIconW
DispatchMessageW
TranslateMessage
EndPaint
GetMessageW
LoadAcceleratorsW
GetClientRect
DestroyWindow
MessageBoxW
LoadCursorW
LoadImageW
FillRect
SetCursor
InvalidateRect
PostMessageW
LoadStringW
PostQuitMessage
DefWindowProcW
TranslateAcceleratorW
gdi32
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
BitBlt
GetObjectW
TextOutW
SelectObject
SetBkMode
SetTextColor
DeleteObject
CreateFontW
GetTextExtentPoint32W
shell32
ShellExecuteW
Name
.text
Size
154KB
Virtual Size
154KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=29395,
count=158, id=261, version=29395,
count=22, id=260, version=29395,
count=17, id=260, version=31935,
count=19, id=259, version=31935,
count=77, id=261, version=31935,
count=15, id=257, version=29395,
count=141, id=1, productName=Unmarked objects,
count=7, id=265, version=32217,
count=1, id=255, version=32217,
count=1, id=151,
count=1, id=258, version=32217,