[Guru3D]-RTSSSetup737Build28314.zip
- SHA256 9b084a8cb3e53ec1a673894d0b66e22b16c9fd8785636b020b2d422f3f2a820e
Overview
overview
7Static
static
3[Guru3D]-R...14.zip
windows10-2004-x64
1[Guru3D]-R...14.zip
windows11-ltsc_2024-x64
1RTSSSetup737.exe
windows10-2004-x64
7RTSSSetup737.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...st.dll
windows10-2004-x64
3$PLUGINSDI...st.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...64.dll
windows10-2004-x64
1$PLUGINSDI...64.dll
windows11-ltsc_2024-x64
1$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...rd.bmp
windows10-2004-x64
1$PLUGINSDI...rd.bmp
windows11-ltsc_2024-x64
1$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$R0.dll
windows10-2004-x64
3$R0.dll
windows11-ltsc_2024-x64
3Codec/rtvcvfw32.dll
windows10-2004-x64
3Codec/rtvcvfw32.dll
windows11-ltsc_2024-x64
3DesktopOve...st.exe
windows10-2004-x64
3DesktopOve...st.exe
windows11-ltsc_2024-x64
3DesktopOve...64.exe
windows10-2004-x64
1DesktopOve...64.exe
windows11-ltsc_2024-x64
1DesktopOve...er.exe
windows10-2004-x64
7DesktopOve...er.exe
windows11-ltsc_2024-x64
3EncoderServer.cfg
windows10-2004-x64
3EncoderServer.cfg
windows11-ltsc_2024-x64
3EncoderServer.exe
windows10-2004-x64
3EncoderServer.exe
windows11-ltsc_2024-x64
3Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
[Guru3D]-RTSSSetup737Build28314.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
[Guru3D]-RTSSSetup737Build28314.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
RTSSSetup737.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
RTSSSetup737.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/LockedList.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/LockedList.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
$PLUGINSDIR/LockedList64.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
$PLUGINSDIR/LockedList64.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
$R0.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
$R0.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral21
Sample
Codec/rtvcvfw32.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
Codec/rtvcvfw32.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
DesktopOverlayHost.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral24
Sample
DesktopOverlayHost.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral25
Sample
DesktopOverlayHost64.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral26
Sample
DesktopOverlayHost64.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
DesktopOverlayHostLoader.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral28
Sample
DesktopOverlayHostLoader.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral29
Sample
EncoderServer.cfg
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral30
Sample
EncoderServer.cfg
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral31
Sample
EncoderServer.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral32
Sample
EncoderServer.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target [Guru3D]-RTSSSetup737Build28314.zip
- Size 17.2MB
- Sample260925-3vbcasssb1
- SHA256 9b084a8cb3e53ec1a673894d0b66e22b16c9fd8785636b020b2d422f3f2a820e
- MD5 9f667a94fb12fbd1134e5cb685597ae5
- SHA1 f25d8df6d3b99207ac798a77482c5ec8b06702fa
- SHA512 089384270d92abcd1861e32541d209005479d5fa7da0629e0c95d07f27cd6c3b2bec5cb2eaa56fdd6d42fb299e31f89c052214fbf46994be75ce73bde5dc6cc2
- SSDEEP 393216:uWuY9/YEY6fK0l1x9wP5YFZOwrROE6oWRtWl4uT2P6:T9AEY6f1l79whYFUmROjoWzWlW6
- TLSH T1AC07331C4105B7E63E9DD64F24D1ABC07816EABA7193BC3824373729C957570A83AFA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Insecure Codesign Algorithm 13 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/RTSSSetup737.exe unpack002/DesktopOverlayHost.exe unpack002/DesktopOverlayHost64.exe unpack002/DesktopOverlayHostLoader.exe unpack002/EncoderServer.exe unpack002/EncoderServer64.exe unpack002/RTSS.exe unpack002/RTSSHooks.dll.copy unpack002/RTSSHooks64.dll.copy unpack002/RTSSHooksLoader.exe unpack002/RTSSHooksLoader64.exe unpack002/SaveMedia.dll unpack002/SaveMedia64.dll - Unsigned PE 11 IoCs
Checks for missing Authenticode signature.
resource unpack002/$PLUGINSDIR/LangDLL.dll unpack002/$PLUGINSDIR/LockedList.dll unpack002/$PLUGINSDIR/LockedList64.dll unpack002/$PLUGINSDIR/StartMenu.dll unpack002/$PLUGINSDIR/System.dll unpack002/$PLUGINSDIR/nsDialogs.dll unpack002/$R0 unpack002/Codec/rtvcvfw32.dll unpack002/RTFC.dll unpack002/RTMUI.dll unpack002/RTUI.dll - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack002/libmfxsw32.dll unpack002/libmfxsw64.dll
File Explorer
-
[Guru3D]-RTSSSetup737Build28314.zip.zip 17.2MB
-
RTSSSetup737.exe.exe 17.2MB
-
$PLUGINSDIR/LangDLL.dll.dll 5KB
-
$PLUGINSDIR/LockedList.dll.dll 28KB
-
$PLUGINSDIR/LockedList64.dll.dll 9KB
-
$PLUGINSDIR/StartMenu.dll.dll 7KB
-
$PLUGINSDIR/System.dll.dll 12KB
-
$PLUGINSDIR/modern-wizard.bmp25KB
-
$PLUGINSDIR/nsDialogs.dll.dll 9KB
-
$R0.dll 871KB
-
Codec/rtvcvfw32.dll.dll 871KB
-
DesktopOverlayHost.exe.exe 95KB
-
DesktopOverlayHost64.exe.exe 107KB
-
DesktopOverlayHostLoader.exe.exe 25KB
-
EncoderServer.cfg89B
-
EncoderServer.exe.exe 72KB
-
EncoderServer64.exe.exe 77KB
-
RTFC.dll.dll 73KB
-
RTMUI.dll.dll 110KB
-
RTSS.dat349B
-
RTSS.exe.exe 518KB
-
RTSSHooks.dll.copy.dll 1.3MB
-
RTSSHooks64.dll.copy.dll 1.7MB
-
RTSSHooksLoader.exe.exe 67KB
-
RTSSHooksLoader64.exe.exe 71KB
-
RTUI.dll.dll 404KB
-
SaveMedia.cfg548B
-
SaveMedia.dll.dll 903KB
-
SaveMedia64.dll.dll 1.0MB
-
libmfxsw32.dll.dll 15.4MB
-
libmfxsw64.dll.dll 19.6MB
-
downloaded_from_www.guru3d.com.txt40KB
RTSSSetup737.exe
- IMPHASH 6e7f9a29f2c85394521a08b9f31f6275
- SHA256 04f4704ced86a68b650bf87156c02e69160e6c049b576661250250beeabaa5ef
- MD5 457478f7c16e3dd8b25c829dd249af9c
- SHA1 66ac07d816b08bd36f992624ab7ba91adb93cfe4
- SHA512 227fbdd7fb5a7c3a4c33892319479c7450f652739e4339de6ec3bc85ad2cd7520a15a8804a22e993573721a6f7021e2bebae33a334f4a9c9d230db608874f587
- SSDEEP 393216:DVuK2BtyEcwROqvt3RQVIkjHuoI6B9h0+v3QP28i2A:DiBUEcwRdv9RQakjOqG+PQPRA
- TLSH T14307331F43BC9363ED19D93F14979AF5AC85CF766092E828117A322DBD366202835BD3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
9b:6d:09:8e:72:8a:44:85:b6:92:84:2e:4a:99:07:3c:af:25:e8:34
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Sep 28, 2025
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=Globalsign TSA for MS Authenticode Advanced - G4 - 2025,O=GlobalSign nv-sa,C=BE
Serial Number
01:5c:c0:8a:f3:9b:b4:53:73:96:89:c7:1a:82:9d:32
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 15, 2025 - Dec 10, 2034
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:5e:21:e8:3e:4f:82:88:70:9d:5a:d6
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 13, 2022 - Oct 16, 2025
Minor OS version
0
Major OS version
4
Entry point
13455
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
advapi32
RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW
shell32
SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree
comctl32
ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
user32
GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
SetWindowPos
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu
gdi32
SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject
kernel32
GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
CreateFileW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersion
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
ExitProcess
CopyFileW
GetCurrentProcess
GetModuleFileNameW
GetFileSize
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
176KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=165, id=1, productName=Unmarked objects,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/LangDLL.dll
- IMPHASH 3e8d18bb71c7ebbda2ddc2a4bb03547b
- SHA256 4883cd4231744be2dca4433ef62824b7957a3c16be54f8526270402d9413ebe6
- MD5 08de81a4584f5201086f57a7a93ed83b
- SHA1 266a6ecc8fb7dca115e6915cd75e2595816841a8
- SHA512 b72e7cea5ce1f4dc64e65a1f683a3ef9e3fa2dc45cf421f569eb461f1fdcc0caf4ff62a872e62b400579f567c6ff9fc3c2e6e020cdca89d96015502c803a09b9
- SSDEEP 48:S46+/1TKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mLofjLl:zHuPbOBtWZBV8jAWiAJCdv2CmeL
- TLSH T12BC1A570B3C248B9C491863378E773D36612EE746784500F9B6311AA38209E7AD3EBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5439
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrlenW
GlobalFree
lstrcpynW
lstrcmpW
GlobalAlloc
MulDiv
GetModuleHandleW
lstrcpyW
user32
DialogBoxParamW
SetDlgItemTextW
SendDlgItemMessageW
EndDialog
SetWindowTextW
LoadIconW
ShowWindow
SendMessageW
GetDC
gdi32
GetDeviceCaps
CreateFontIndirectW
DeleteObject
LangDialog
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
681B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=23, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/LockedList.dll
- IMPHASH c26621761683a926589c7f7a96aa5d75
- SHA256 cf1b3d307918e11f4c90888ef65f9cad0302eabf7235187eaad5764646874340
- MD5 84c93011c323095555fcfcbebab4df83
- SHA1 69d6b67f1d73b9cda8397f8e0748b45c91987bd5
- SHA512 c95008dce262608bee2bd2081d456a98e4a9d2814c0bfdd77c9a74394dd3aca373d57975d2c30be5f9af013772abed0a9b924a4e24e266110821147afa5e50e8
- SSDEEP 768:on7n6hKdgWn9Cb22ryBD3fvMkGksfLqo7B:onWhKdne22ryBDvvMPne+
- TLSH T148D2090557B444E3F3BE1670386A3B160ABEF92988BAD56B8F3715CA1D75112FA39303
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
16529
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
comctl32
ImageList_ReplaceIcon
ImageList_Create
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
shlwapi
PathFileExistsW
PathRemoveFileSpecW
PathAppendW
kernel32
QueryDosDeviceW
DuplicateHandle
CreateEventW
GetCurrentProcess
WaitForSingleObject
GetModuleHandleW
OpenProcess
GlobalAlloc
Sleep
TerminateProcess
GetModuleFileNameW
CreateFileW
lstrcmpW
lstrlenW
GetLastError
GlobalFree
LocalAlloc
GetExitCodeThread
WaitForMultipleObjects
lstrcmpiW
lstrcatW
CloseHandle
GetCurrentProcessId
LocalFree
lstrcpyW
CreateThread
lstrcpynW
SetEvent
LoadLibraryW
TerminateThread
GetProcAddress
ResetEvent
GetVersion
user32
DestroyIcon
SetWindowTextW
CallWindowProcW
SetClipboardData
EnableWindow
MapWindowPoints
SendMessageW
GetSystemMetrics
MessageBoxW
OpenClipboard
CreateWindowExW
IsWindow
CreateDialogParamW
SendMessageTimeoutW
CreatePopupMenu
ShowWindow
GetCursorPos
SetWindowPos
SetWindowLongW
GetDlgItem
EmptyClipboard
GetClassNameW
MoveWindow
GetWindowTextW
AppendMenuW
SetCursorPos
IsDialogMessageW
TranslateMessage
wsprintfW
CharLowerW
GetClientRect
MsgWaitForMultipleObjects
PostMessageW
LoadImageW
TrackPopupMenu
GetMessageW
SetActiveWindow
GetWindowRect
ScreenToClient
CloseClipboard
SetCursor
DestroyWindow
GetWindow
GetWindowThreadProcessId
GetWindowLongW
EnumWindows
DispatchMessageW
PeekMessageW
DestroyMenu
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
shell32
ExtractIconExW
ShellExecuteExW
AddApplications
AddCaption
AddClass
AddCustom
AddFile
AddFolder
AddModule
CloseProcess
Dialog
EnumProcesses
FindProcess
InitDialog
IsFileLocked
Show
SilentPercentComplete
SilentSearch
SilentWait
Name
.text
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=97, id=1, productName=Unmarked objects,
count=4, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
$PLUGINSDIR/LockedList64.dll
- IMPHASH 30682cbcd9e51d263811845cece41fd0
- SHA256 fbe4c84d389b32d3646991f0f59c987d5052ecc0ecbaa4da2bbebd922fd3762c
- MD5 f982f688c44a109382504be756e54a28
- SHA1 0050bf1d09975c9faa34ddf0cc579f3f611b71c0
- SHA512 fa0f10819b6a8d6a298a6274073b466ef5756f00e8dc7fdc786e5e0a8fd0dbb2777eb608d213874a92bd0481a363464f2a615bcde9ed3ed13db12ab338a91ae9
- SSDEEP 192:oDe6qk8regn9R+MO2Sz4p/sAMMmsGA/i9MWDqX:oDe6grPEMO2Sz4CAysN/i9Msq
- TLSH T11D12E80177F8168CE4F742749A750A1BBBF5B44A0932971F0570C24E6F1B752BD3ABA1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
4272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
GetCurrentProcess
lstrcmpW
CloseHandle
GlobalAlloc
lstrcpynW
GlobalFree
lstrcpyW
WaitForSingleObject
GetModuleHandleW
OpenProcess
LoadLibraryW
lstrlenW
GetProcAddress
ResetEvent
CreateEventW
lstrcatW
GetVersion
QueryDosDeviceW
user32
wsprintfW
GetWindow
GetWindowThreadProcessId
GetWindowTextW
EnumWindows
GetWindowLongPtrW
IsWindow
SendMessageW
advapi32
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
shell32
CommandLineToArgvW
EnumSystemProcesses64W
GetSystemModulesCount64W
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
116B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
168B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=41, id=1, productName=Unmarked objects,
count=1, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
$PLUGINSDIR/StartMenu.dll
- IMPHASH 80469f6834e579db68a646d49780b9d5
- SHA256 72fa1a91185fda8b68a49b9ebb8d5ddf00f899f590d1e657a58c229f9bd0a700
- MD5 6581c243481c0ba91ec1bd9fd93f1c30
- SHA1 b00b7fe38b0dbf5576239a8f62f01df7fb993e5d
- SHA512 c882c15e1222929369753addb023fe028dd95345c0b29a5a8c0ba00cbdee45f3a7aacafd9d4cdc5fe86e3676ba958abf841801d73361c4630e7f48ab63725055
- SSDEEP 96:g8dPIKJhMuhik+CfoEwknt6io8zv+qy5/utta/c3lkCTcaqHCI:tZIKXgk+cx6QYFkAElncviI
- TLSH T153F1C776F3D10673F9AB427438232F221B2AF521576581A7450316CE7661CE3FD34B21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6430
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrcatW
FindClose
FindNextFileW
lstrcmpW
GetModuleHandleW
lstrcmpiW
MulDiv
lstrcpynW
GlobalAlloc
lstrcpyW
FindFirstFileW
GlobalFree
user32
GetMessageW
TranslateMessage
PostMessageW
DispatchMessageW
GetDlgItem
GetWindowLongW
CheckDlgButton
ShowWindow
LoadIconW
GetClientRect
MoveWindow
DestroyWindow
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextW
SendMessageW
IsDlgButtonChecked
GetWindowTextW
CreateDialogParamW
SetWindowLongW
wsprintfW
ScreenToClient
IsDialogMessageW
CallWindowProcW
gdi32
GetTextMetricsW
SelectObject
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ole32
CoTaskMemFree
Init
Select
Show
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
296B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
578B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=45, id=1, productName=Unmarked objects,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/System.dll
- IMPHASH fc0224e99e736751432961db63a41b76
- SHA256 acf90ab6f4edc687e94aaf604d05e16e6cfb5e35873783b50c66f307a35c6506
- MD5 6e55a6e7c3fdbd244042eb15cb1ec739
- SHA1 070ea80e2192abc42f358d47b276990b5fa285a9
- SHA512 2d504b74da38edc967e3859733a2a9cacd885db82f0ca69bfb66872e882707314c54238344d45945dc98bae85772aceef71a741787922d640627d3c8ae8f1c35
- SSDEEP 192:MenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBaIwL:M8+Qlt70Fj/lQRY/9VjjgL
- TLSH T1BE428D1193B089F2F590593805A67F2A6FBEAC5C27E44A63CFE345853D702DFA47A243
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10719
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
867B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
648B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/modern-wizard.bmp
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/nsDialogs.dll
- IMPHASH 6b5c4f7d679059f68f1269aad3a5cecd
- SHA256 c719697d5ced17d97bbc48662327339ccec7e03f6552aa1d5c248f6fa5f16324
- MD5 ca5bb0ee2b698869c41c087c9854487c
- SHA1 4a8abbb2544f1a9555e57a142a147dfeb40c4ca4
- SHA512 363a80843d7601ba119bc981c4346188f490b388e3ed390a0667aaf5138b885eec6c69d4e7f60f93b069d6550277f4c926bd0f37bc893928111dc62494124770
- SSDEEP 96:ojsvUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3Y/NqkzfS:ojsvWyNO81b8pCHFcM0PuAgkOyhIFc
- TLSH T1FE12F892E5A450B3C5D6533A35AA2F2DCBBD5329B0926C00C7738E4D39395BA6E38353
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7527
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetFileAttributesW
lstrcpyW
MulDiv
lstrlenW
HeapFree
GetCurrentDirectoryW
lstrcmpiW
GetProcessHeap
HeapReAlloc
GlobalFree
lstrcpynW
GlobalAlloc
SetCurrentDirectoryW
HeapAlloc
user32
DestroyWindow
CallWindowProcW
SetCursor
LoadCursorW
GetPropW
CharPrevW
DrawFocusRect
GetWindowLongW
DrawTextW
GetClientRect
SetWindowLongW
GetDlgItem
GetSysColor
SetWindowPos
CreateDialogParamW
MapDialogRect
GetWindowRect
SetPropW
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
CharNextW
SendMessageW
MapWindowPoints
RemovePropW
GetWindowTextW
gdi32
SetTextColor
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
ole32
CoTaskMemFree
Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
638B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=56, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$R0
- IMPHASH 738ffe5e32f854da1e1205178a94885a
- SHA256 7865c3e4003778ced6aa3ebcb7fad83421a45a13eb43ea2a5ba303d8e479a4b7
- MD5 0a91221306a3298fba8fd1e0d4be269a
- SHA1 2ecc9696f03fa694aa0ff01e3658bb24e632ed91
- SHA512 01885ebb32e0b4ed703341bc083f721393ab2ac1663ac3aaefcdd31990bca4a103e88afb631041bf1a565cb328fefbe8d60e1463f19f9d33f0b0b1affda64045
- SSDEEP 24576:huBpXNDkxDRsX1sUsJ7mq/ZBx69v9IbzehK9Ko:hqBNgJ7D29Ibzec
- TLSH T1AC157C42B5928C63CBD52471CD6AE2791B2D7D2C4BF785F7B290BA3ABD306C1753420A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
380860
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Projects\RTSS735_2022\RTV\Release\rtvcvfw32.pdb
winmm
DefDriverProc
kernel32
lstrcmpiA
ReadFile
CreateFileW
ReadConsoleW
GetFileSize
OutputDebugStringW
WriteConsoleW
OpenFile
GetModuleFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
RaiseException
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
DecodePointer
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
GetCurrentThread
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetStdHandle
GetFileSizeEx
SetFilePointerEx
GetStringTypeW
HeapSize
HeapReAlloc
CloseHandle
user32
GetDesktopWindow
advapi32
RegOpenKeyA
RegCloseKey
RegQueryValueExA
Configure
DriverProc
Name
.text
Size
719KB
Virtual Size
718KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
130KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=29395,
count=145, id=261, version=29395,
count=20, id=260, version=29395,
count=35, id=261, version=31935,
count=15, id=260, version=31935,
count=19, id=259, version=31935,
count=56, id=260, productName=VS2015 UPD1 build 23506, version=23506,
count=44, productName=Unmarked objects (old),
count=9, id=239, version=40116,
count=88, id=1, productName=Unmarked objects,
count=4, id=261, version=32216,
count=1, id=256, version=32216,
count=1, id=255, version=32216,
count=1, id=151,
count=1, id=258, version=32216,
Codec/rtvcvfw32.dll
- IMPHASH 738ffe5e32f854da1e1205178a94885a
- SHA256 7865c3e4003778ced6aa3ebcb7fad83421a45a13eb43ea2a5ba303d8e479a4b7
- MD5 0a91221306a3298fba8fd1e0d4be269a
- SHA1 2ecc9696f03fa694aa0ff01e3658bb24e632ed91
- SHA512 01885ebb32e0b4ed703341bc083f721393ab2ac1663ac3aaefcdd31990bca4a103e88afb631041bf1a565cb328fefbe8d60e1463f19f9d33f0b0b1affda64045
- SSDEEP 24576:huBpXNDkxDRsX1sUsJ7mq/ZBx69v9IbzehK9Ko:hqBNgJ7D29Ibzec
- TLSH T1AC157C42B5928C63CBD52471CD6AE2791B2D7D2C4BF785F7B290BA3ABD306C1753420A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
380860
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Projects\RTSS735_2022\RTV\Release\rtvcvfw32.pdb
winmm
DefDriverProc
kernel32
lstrcmpiA
ReadFile
CreateFileW
ReadConsoleW
GetFileSize
OutputDebugStringW
WriteConsoleW
OpenFile
GetModuleFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
RaiseException
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
DecodePointer
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
GetCurrentThread
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetStdHandle
GetFileSizeEx
SetFilePointerEx
GetStringTypeW
HeapSize
HeapReAlloc
CloseHandle
user32
GetDesktopWindow
advapi32
RegOpenKeyA
RegCloseKey
RegQueryValueExA
Configure
DriverProc
Name
.text
Size
719KB
Virtual Size
718KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
130KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=29395,
count=145, id=261, version=29395,
count=20, id=260, version=29395,
count=35, id=261, version=31935,
count=15, id=260, version=31935,
count=19, id=259, version=31935,
count=56, id=260, productName=VS2015 UPD1 build 23506, version=23506,
count=44, productName=Unmarked objects (old),
count=9, id=239, version=40116,
count=88, id=1, productName=Unmarked objects,
count=4, id=261, version=32216,
count=1, id=256, version=32216,
count=1, id=255, version=32216,
count=1, id=151,
count=1, id=258, version=32216,
DesktopOverlayHost.exe
- IMPHASH 589ef4b59bffcbf7665303b58759b1b0
- SHA256 3d1ea89eafee8b7c4ff7d3e81328a44bd855a99dd6f112dfbcc86342698c2a02
- MD5 7cefd33227619ebb11601f0bf95286b0
- SHA1 6030ad91b46558f27d35a59bfab327229b4022d9
- SHA512 2464d6d2b059c83a8acc01e1d6fda9757b5c4d49af5e42eaa518f1cbd8ec9563c9f4ccd6d8ae7135125e1a005f4a1fedd6d1045de5ddafad05e26e38e9acb1f4
- SSDEEP 1536:Hc26aZKWdI0AEQhoCfdrud8UTzicJqeTnV9twFU9qkxFOM/elqLIB0Titw:Hc26ashoCNuzJqeJ9V9qkxF5/IaIuTiu
- TLSH T1F593280376B08072D952C1706865EBAA9EAEEC311B55D5C3BB423B1E3D342D25E74BCB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
68:65:10:ad:90:95:a2:bd:69:6e:30:04:1a:8d:ca:42:21:e2:6d:70
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Sep 28, 2025
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=Globalsign TSA for MS Authenticode Advanced - G4 - 2025,O=GlobalSign nv-sa,C=BE
Serial Number
01:5c:c0:8a:f3:9b:b4:53:73:96:89:c7:1a:82:9d:32
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 15, 2025 - Dec 10, 2034
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:5e:21:e8:3e:4f:82:88:70:9d:5a:d6
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 13, 2022 - Oct 16, 2025
Minor OS version
0
Major OS version
6
Entry point
45639
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
winmm
timeKillEvent
timeSetEvent
d3d9
Direct3DCreate9
opengl32
glViewport
glClearColor
glClear
wglDeleteContext
wglCreateContext
wglMakeCurrent
mfc140
ord12115
ord5938
ord9167
ord6473
ord8713
ord10963
ord6505
ord8997
ord1507
ord4870
ord14048
ord310
ord1529
ord1526
ord13628
ord14514
ord14512
ord4807
ord14149
ord8705
ord4218
ord6581
ord3924
ord2524
ord4869
ord14291
ord265
ord266
ord2381
ord14571
ord12348
ord14518
ord2376
ord12291
ord6724
ord7407
ord7619
ord7774
ord2407
ord11663
ord6848
ord14508
ord7887
ord14510
ord3050
ord4485
ord9647
ord4493
ord4972
ord4911
ord4896
ord4958
ord5003
ord4926
ord4981
ord4997
ord4938
ord4944
ord4950
ord4932
ord4987
ord4920
ord1772
ord1751
ord1765
ord1739
ord1717
ord12201
ord12205
ord13798
ord3259
ord9213
ord10950
ord6947
ord12163
ord8922
ord14502
ord11881
ord3830
ord12032
ord9096
ord11672
ord11671
ord5631
ord2758
ord10236
ord10238
ord10239
ord10237
ord6193
ord2759
ord8173
ord3295
ord3298
ord13681
ord6195
ord3240
ord3354
ord316
ord1109
ord458
ord12526
ord14223
ord8438
ord9165
ord8931
ord14131
ord11838
ord12948
ord2799
ord8420
ord8429
ord8347
ord12806
ord8285
ord5336
ord2484
ord12484
ord12485
ord14509
ord7886
ord14507
ord9353
ord4143
ord4082
ord12888
ord7905
ord2027
ord11927
ord11928
ord14380
ord12474
ord7964
ord14581
ord6322
ord14583
ord6324
ord14582
ord6323
ord3844
ord5894
ord12182
ord12190
ord8180
ord10383
ord12162
ord5228
ord5528
ord5739
ord9305
ord5504
ord5742
ord5231
ord5390
ord5210
ord7687
ord7688
ord7677
ord5388
ord8182
ord3159
ord3395
ord3396
ord4084
ord11343
ord10202
ord9166
ord6832
ord12194
ord12869
ord10240
ord13677
ord4581
ord3933
ord1044
ord2344
ord3363
ord14243
ord2241
ord2200
ord7961
ord1469
ord994
ord7618
ord10330
ord1509
ord10962
ord8996
ord12074
ord4083
ord365
ord8306
ord5398
ord9332
ord9422
ord5401
ord10379
ord10986
ord1389
ord890
ord3825
ord305
ord5898
ord3005
ord300
ord14054
ord7783
ord14421
ord13820
ord10421
ord7459
ord3685
ord3689
ord3688
ord2210
ord1431
ord1000
ord1472
ord6798
ord10207
ord6104
ord5769
ord12111
ord3258
ord3364
ord12067
ord2680
ord14699
ord5911
ord8735
kernel32
InitializeCriticalSectionEx
CreateFileMappingA
GetLastError
GetModuleFileNameA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
Sleep
SetEnvironmentVariableA
OpenFileMappingA
MapViewOfFile
GetCurrentProcessId
QueryPerformanceFrequency
DeleteCriticalSection
MultiByteToWideChar
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
GetModuleHandleW
OutputDebugStringW
LocalFree
LoadLibraryExA
SwitchToThread
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
CloseHandle
GetModuleHandleA
UnmapViewOfFile
GetProcAddress
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
InitializeSListHead
user32
RegisterWindowMessageA
GetClientRect
MonitorFromPoint
SetLayeredWindowAttributes
SetCursor
GetAsyncKeyState
CopyRect
MessageBeep
DrawIcon
FindWindowA
GetSubMenu
CheckMenuItem
LoadCursorA
GetDC
ReleaseDC
EnumDisplayMonitors
MonitorFromWindow
EqualRect
PostMessageA
SetForegroundWindow
LoadCursorW
DefWindowProcW
RegisterClassW
ModifyMenuA
RedrawWindow
GetSysColor
SetCapture
ReleaseCapture
PeekMessageA
ClientToScreen
GetWindowRect
MessageBoxA
EnableWindow
LoadIconW
SendMessageA
IsIconic
InsertMenuA
GetSystemMetrics
PtInRect
LoadImageA
LoadMenuW
GetCursorPos
GetMonitorInfoA
gdi32
ChoosePixelFormat
SetPixelFormat
SwapBuffers
CreateSolidBrush
GetStockObject
DeleteObject
shell32
Shell_NotifyIconA
ShellExecuteA
comctl32
InitCommonControlsEx
shlwapi
PathRemoveFileSpecA
PathRenameExtensionA
ole32
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoCreateInstance
oleaut32
SysFreeString
SysAllocString
VariantClear
VariantInit
msvcp140
?_Xlength_error@std@@YAXPBD@Z
vcruntime140
__CxxFrameHandler3
__std_terminate
_purecall
__std_exception_copy
__std_exception_destroy
memset
__current_exception
__current_exception_context
_except_handler4_common
_CxxThrowException
memcpy
api-ms-win-crt-string-l1-1-0
_stricmp
strcpy_s
strcat_s
api-ms-win-crt-runtime-l1-1-0
_c_exit
_invalid_parameter_noinfo
_controlfp_s
_register_thread_local_exe_atexit_callback
_initterm_e
_initterm
_get_narrow_winmain_command_line
_exit
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
terminate
_invalid_parameter_noinfo_noreturn
exit
_errno
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsscanf
__stdio_common_vsprintf_s
__p__commode
_set_fmode
api-ms-win-crt-filesystem-l1-1-0
_access
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
_setmbcp
Name
.text
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=7, id=259, version=33808,
count=13, id=260, version=33808,
count=6, id=257, version=33808,
count=39, id=261, version=33808,
count=1, id=262, version=29395,
count=27, id=257, version=29395,
count=470, id=1, productName=Unmarked objects,
count=16, id=265, version=34120,
count=1, id=255, version=34120,
count=1, id=151,
count=1, id=258, version=34120,
DesktopOverlayHost64.exe
- IMPHASH 74ffd2601ed381059433bcc750a09f4f
- SHA256 0ba9dc1c4a71e9f779060aeb5e27b2d6ebd19cfb6a8978ca807094be9661d5e3
- MD5 a05408dc7d8efbc00213601bed435be1
- SHA1 8547507719e2648fee7474e28e78e1ad83334dcb
- SHA512 2b7b5e072a78b1cb0a7e5117bb932d735a89488bf40424e255e5a3a8cdab65b63135291cc00f6a5a50e46bdf20a61e118f5b06eed2cdb58c0636968710546da7
- SSDEEP 1536:ujoIw00HLxPCxVOSS+bLELqqq4w3xftxaAXfw7xWOtcIylWTitIG:eW00ZKW24w3pvw7xWkcfWTiqG
- TLSH T133B3F30B327500E5D06AC4B9888A9F16EFB1FC961715C7CF1370662E3F722E46EB8295
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
32:44:d9:94:6c:7b:30:5c:28:7a:18:76:25:5c:98:93:42:99:e0:f1
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Sep 28, 2025
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=Globalsign TSA for MS Authenticode Advanced - G4 - 2025,O=GlobalSign nv-sa,C=BE
Serial Number
01:5c:c0:8a:f3:9b:b4:53:73:96:89:c7:1a:82:9d:32
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 15, 2025 - Dec 10, 2034
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:5e:21:e8:3e:4f:82:88:70:9d:5a:d6
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 13, 2022 - Oct 16, 2025
Minor OS version
0
Major OS version
6
Entry point
47996
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
winmm
timeSetEvent
timeKillEvent
d3d9
Direct3DCreate9
opengl32
wglDeleteContext
glViewport
glClearColor
wglCreateContext
glClear
wglMakeCurrent
mfc140
ord4715
ord13683
ord310
ord1507
ord1504
ord8435
ord6557
ord14138
ord4648
ord13784
ord8405
ord4077
ord6340
ord3795
ord2477
ord4714
ord13918
ord265
ord266
ord2342
ord14197
ord12035
ord14144
ord2338
ord11978
ord6483
ord7153
ord7364
ord7510
ord9903
ord5896
ord5566
ord11798
ord3165
ord3271
ord11754
ord2627
ord5704
ord13284
ord11357
ord6607
ord14134
ord7620
ord14136
ord2962
ord4343
ord9343
ord4351
ord4817
ord4756
ord4741
ord4803
ord4848
ord4771
ord4826
ord4842
ord4783
ord4789
ord4795
ord4777
ord4832
ord4765
ord1750
ord1729
ord1743
ord1717
ord1695
ord11888
ord11892
ord13438
ord3166
ord8909
ord10644
ord6703
ord11850
ord8618
ord14128
ord11575
ord3710
ord11719
ord8792
ord11366
ord11365
ord1485
ord9936
ord9932
ord9934
ord9935
ord6264
ord14279
ord2696
ord7881
ord8413
ord11802
ord13331
ord5982
ord3147
ord3261
ord316
ord1087
ord446
ord12212
ord13857
ord8140
ord8861
ord8627
ord13766
ord11532
ord12631
ord2723
ord8122
ord8131
ord8050
ord12490
ord7989
ord5167
ord2437
ord12170
ord12171
ord14135
ord7619
ord14133
ord9049
ord4002
ord3941
ord12571
ord7637
ord2004
ord11614
ord11615
ord14007
ord12160
ord7688
ord14207
ord6100
ord14209
ord6102
ord14208
ord6101
ord3723
ord5687
ord11869
ord11877
ord7888
ord10079
ord11849
ord5064
ord5347
ord5536
ord9001
ord5323
ord5539
ord5067
ord5213
ord5049
ord7430
ord7431
ord7420
ord5211
ord7890
ord9898
ord8862
ord6591
ord11881
ord12552
ord4437
ord3804
ord1032
ord5435
ord8693
ord2310
ord3270
ord13876
ord2207
ord2173
ord7685
ord1447
ord982
ord7363
ord10026
ord1487
ord300
ord10657
ord13689
ord7519
ord14047
ord13459
ord6239
ord2695
ord13327
ord5980
ord3066
ord8863
ord3202
ord10117
ord3299
ord7204
ord3300
ord3943
ord11037
ord10656
ord8692
ord11761
ord3942
ord364
ord8009
ord5221
ord9028
ord3587
ord9118
ord5224
ord10075
ord10680
ord1367
ord878
ord3705
ord305
ord3591
ord3590
ord5691
ord2917
ord2182
ord5731
ord3205
ord1409
ord988
ord9933
ord1450
ord14140
ord2368
kernel32
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
GetCurrentProcessId
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
LoadLibraryA
FreeLibrary
GetSystemDirectoryA
SwitchToThread
InitializeCriticalSectionEx
Sleep
DeleteCriticalSection
LocalFree
MultiByteToWideChar
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
GetModuleHandleW
GetPrivateProfileIntA
WritePrivateProfileStringA
LoadLibraryExA
SetEnvironmentVariableA
GetPrivateProfileStringA
GetModuleFileNameA
GetLastError
CreateFileMappingA
CloseHandle
GetModuleHandleA
OutputDebugStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetProcAddress
user32
GetCursorPos
MonitorFromPoint
GetMonitorInfoA
SetLayeredWindowAttributes
SetCursor
GetAsyncKeyState
CopyRect
MessageBeep
RegisterWindowMessageA
LoadImageA
GetSubMenu
CheckMenuItem
InsertMenuA
GetDC
ReleaseDC
EnumDisplayMonitors
MonitorFromWindow
EqualRect
FindWindowA
PtInRect
GetWindowRect
ClientToScreen
ReleaseCapture
ModifyMenuA
SetCapture
PostMessageA
SetForegroundWindow
LoadCursorW
DefWindowProcW
RegisterClassW
MessageBoxA
LoadCursorA
PeekMessageA
EnableWindow
LoadIconW
SendMessageA
IsIconic
GetSysColor
GetClientRect
DrawIcon
LoadMenuW
RedrawWindow
GetSystemMetrics
gdi32
ChoosePixelFormat
SetPixelFormat
SwapBuffers
CreateSolidBrush
GetStockObject
DeleteObject
shell32
Shell_NotifyIconA
ShellExecuteA
comctl32
InitCommonControlsEx
shlwapi
PathRemoveFileSpecA
PathRenameExtensionA
ole32
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoCreateInstance
oleaut32
VariantInit
SysFreeString
SysAllocString
VariantClear
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
memset
__std_exception_destroy
__std_exception_copy
_purecall
__std_terminate
memcpy
__current_exception
_CxxThrowException
__C_specific_handler
api-ms-win-crt-string-l1-1-0
strcpy_s
strcat_s
_stricmp
api-ms-win-crt-runtime-l1-1-0
_cexit
terminate
_errno
_register_thread_local_exe_atexit_callback
_c_exit
_invalid_parameter_noinfo_noreturn
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_invalid_parameter_noinfo
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__p__commode
__stdio_common_vsscanf
_set_fmode
api-ms-win-crt-filesystem-l1-1-0
_access
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_setmbcp
_configthreadlocale
Name
.text
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=33808,
count=10, id=260, version=33808,
count=8, id=257, version=33808,
count=41, id=261, version=33808,
count=1, id=262, version=29395,
count=27, id=257, version=29395,
count=478, id=1, productName=Unmarked objects,
count=16, id=265, version=34120,
count=1, id=255, version=34120,
count=1, id=151,
count=1, id=258, version=34120,
DesktopOverlayHostLoader.exe
- IMPHASH 5881c5fe7804123c71cb27810b229ad5
- SHA256 3ce6389323c4bc68f143e159454379cba838aff9f20a6cb74efb0709c87b9983
- MD5 48e36d05beab50980b3ee18fb3d50248
- SHA1 20d7df40996235ed6c707136a763cff95423eceb
- SHA512 04ae315cff4cc260b129faf20e392d945e149a27bf3cd3ed1b0989bf0217c659dd5d8240f290ac2981a7cc064e6b4edb4cc76a05f546392cdc8097c8332fbbca
- SSDEEP 384:pD7BJrXjaFaOTM2N1VGFfC/uVGBkuAo9jb6W6ki2ApxiRggivp0B:pD7BtWFaO42zV4DWkuAsi2ApZL8
- TLSH T127C26B47AA394503DB44CEF851E2C4569CB99F838DDED083A7377A243D38382BA594DE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
95:51:e4:37:01:de:dc:1f:08:79:b7:f3:30:00:98:1c:24:1f:90:11
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Sep 28, 2025
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=Globalsign TSA for MS Authenticode Advanced - G4 - 2025,O=GlobalSign nv-sa,C=BE
Serial Number
01:5c:c0:8a:f3:9b:b4:53:73:96:89:c7:1a:82:9d:32
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 15, 2025 - Dec 10, 2034
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:5e:21:e8:3e:4f:82:88:70:9d:5a:d6
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 13, 2022 - Oct 16, 2025
Minor OS version
0
Major OS version
6
Entry point
4894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
shlwapi
PathRemoveFileSpecA
kernel32
GetModuleHandleW
GetStartupInfoW
GetModuleFileNameA
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
UnhandledExceptionFilter
shell32
ShellExecuteA
vcruntime140
__current_exception
__current_exception_context
memset
_except_handler4_common
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_c_exit
terminate
_initialize_narrow_environment
_get_narrow_winmain_command_line
_set_app_type
_initterm
_cexit
_initterm_e
_seh_filter_exe
exit
_exit
__p___argv
__p___argc
_controlfp_s
api-ms-win-crt-string-l1-1-0
strcat_s
_stricmp
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
964B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
364B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=33218,
count=19, id=261, version=33218,
count=12, id=260, version=33218,
count=1, id=259, version=33218,
count=7, id=257, version=29395,
count=50, id=1, productName=Unmarked objects,
count=1, id=265, version=33523,
count=1, id=255, version=33523,
count=1, id=151,
count=1, id=258, version=33523,
EncoderServer.cfg
- SHA256 d505f1850d38d5d6b5d4924cca0f7ed679bbae6ae1ecd8e5c24257fce01f602e
- MD5 d81d3a63c3597a1ac1f61e7862e174f1
- SHA1 416c43386386a8916ae80482aacd5a998e9d4e83
- SHA512 72188bb3629c4938a5b1c93e5be7b8fd87ed3ca946feccf36de4b3acb999585b3edde4bd517a173c32774ce46492bf94819e5a49350135ebb370648478685f14
- TLSH T1F3B0122D361E03122C205121FD51018411708413204827218100001E01BF3A1305E213
- MD5 SHA1 SHA512 TLSH
EncoderServer.exe
- IMPHASH a0f3ff6e1deda9ba76340276602d9d01
- SHA256 98e57521e497495c5eddf0c70a32210229e3b9aa6279e5f3e1e4a35b7b7178d2
- MD5 5c0a3d836500c2ce34ebcc12bfced34b
- SHA1 f00f9e91c74601cb58f3bf849f01c407c6ab2dc6
- SHA512 b18bd7a3409bf1cdb8ea867e1e29f89391a4351cd9798d3c2661d7e1b99b340318ed573d19efc1d41efeed94b9c7943e291c53439a8d0a95675f44218be26eaa
- SSDEEP 768:Sz9iRKUJZzEFkSskElHwpoT6lHNxgt0HoSViHfdO/AlgWkuAsi2ApZLN8h:Sz9SCFkpHwppHNxxBVes/eTitmh
- TLSH T1B77338437A358462D642C5789822D5FA9EBBAD710F99C0C7E2907E2E3C307E06E341DE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
e4:a8:46:38:01:8c:92:db:b7:03:ae:58:e7:ac:15:be:b1:45:d6:e6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Sep 28, 2025
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=Globalsign TSA for MS Authenticode Advanced - G4 - 2025,O=GlobalSign nv-sa,C=BE
Serial Number
01:5c:c0:8a:f3:9b:b4:53:73:96:89:c7:1a:82:9d:32
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 15, 2025 - Dec 10, 2034
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:5e:21:e8:3e:4f:82:88:70:9d:5a:d6
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 13, 2022 - Oct 16, 2025
Minor OS version
0
Major OS version
6
Entry point
13848
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Projects\RTSS737\EncoderServer\EncoderServer\Release\EncoderServer.pdb
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
mfc140
ord11928
ord11927
ord2027
ord7905
ord12888
ord4082
ord4143
ord9353
ord14507
ord7886
ord14509
ord12485
ord12484
ord2484
ord5336
ord8285
ord12806
ord8347
ord8429
ord8420
ord2799
ord12948
ord11838
ord4580
ord8931
ord9165
ord8438
ord14223
ord12526
ord12706
ord366
ord1070
ord6724
ord7406
ord998
ord1471
ord4582
ord7452
ord12870
ord10384
ord12191
ord555
ord1184
ord8468
ord1655
ord2407
ord2344
ord1044
ord11972
ord7961
ord1469
ord994
ord7618
ord10330
ord6195
ord13681
ord3298
ord3295
ord8173
ord14380
ord14699
ord10237
ord10239
ord10238
ord10236
ord10240
ord5631
ord11671
ord5894
ord9096
ord12032
ord11881
ord14502
ord8922
ord12163
ord6947
ord10950
ord9213
ord7964
ord13798
ord12205
ord12201
ord1717
ord1739
ord1765
ord1751
ord1772
ord4920
ord4987
ord4932
ord4950
ord4944
ord4938
ord4997
ord4981
ord4926
ord5003
ord4958
ord4896
ord4911
ord4972
ord4493
ord9647
ord4485
ord3050
ord14510
ord7887
ord14508
ord6848
ord11663
ord13628
ord5911
ord2680
ord12067
ord3933
ord3364
ord3363
ord3258
ord12111
ord5228
ord5528
ord5739
ord9305
ord5504
ord2759
ord12474
ord5769
ord5231
ord5390
ord5210
ord7687
ord7688
ord7677
ord5388
ord8182
ord14581
ord6322
ord14583
ord10207
ord6324
ord9166
ord12182
ord12190
ord8180
ord10383
ord12194
ord12162
ord12869
ord5742
ord10202
ord6832
ord266
ord6836
ord305
ord5898
ord3005
ord14582
ord4807
ord316
ord3627
ord1507
ord6323
ord265
ord1529
ord9422
ord3259
ord3844
ord3825
ord3830
ord11672
ord310
ord7619
ord1472
ord1000
ord1509
ord2241
ord14131
kernel32
CloseHandle
OutputDebugStringW
CreateFileMappingA
GetLastError
OpenEventA
MapViewOfFile
UnmapViewOfFile
QueryPerformanceFrequency
QueryPerformanceCounter
CreateEventA
WaitForMultipleObjects
GetPrivateProfileIntA
SetEvent
WaitForSingleObject
CreateMutexA
OpenFile
ReleaseMutex
SetFilePointer
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
WriteFile
_lclose
LoadLibraryA
GetProcAddress
GetModuleFileNameA
ResumeThread
ResetEvent
UnhandledExceptionFilter
FreeLibrary
InitializeCriticalSectionEx
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
SetThreadPriority
GetModuleHandleW
DeleteCriticalSection
user32
FindWindowA
LoadCursorA
EnableWindow
KillTimer
PostMessageA
PeekMessageA
SetTimer
comctl32
InitCommonControlsEx
shlwapi
PathRemoveFileSpecA
PathRenameExtensionA
vcruntime140
__CxxFrameHandler3
__std_terminate
memset
_except_handler4_common
__current_exception
__current_exception_context
api-ms-win-crt-string-l1-1-0
_stricmp
strcat_s
strcpy_s
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
__stdio_common_vsprintf_s
api-ms-win-crt-filesystem-l1-1-0
_splitpath_s
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_controlfp_s
terminate
_register_thread_local_exe_atexit_callback
_c_exit
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
_setmbcp
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35207,
count=13, id=260, version=35207,
count=31, id=261, version=35207,
count=4, id=257, version=35207,
count=17, id=257, version=33140,
count=308, id=1, productName=Unmarked objects,
count=9, id=265, version=35217,
count=1, id=255, version=35217,
count=1, id=151,
count=1, id=258, version=35217,
EncoderServer64.exe
- IMPHASH c6d186d15b251b7b6ea3cbaf33e809fa
- SHA256 09c44cc1cbc7e714767565aa6db85d6d8d2a714323588a01e6d4b66dc15f7471
- MD5 1c90fd3ada53319c6aff622dcb8b9b00
- SHA1 a4bb1126f49e870080c7606954a091b5a70c40c9
- SHA512 4679284db6a977851e4f2d6ad7f65952e6e6bd44727541df70fdc0e889a185a4a245034bd7d422854f1083edabb1102863786471a92249392f353a8d2b7a956a
- SSDEEP 768:4zh9qo4g0azYAfbuYYC/+3uziK6iY1renEmuje6iY1lxFvjM0ja4iHfdO/oWkuAp:g9/ft/+3bHbigjbVxxrm4es/xTitv5
- TLSH T193730557663880D2C154C138C5A2CFABAD71FC618B55C59F13B17A2F3E323903EA86E9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
7b:7b:3e:10:85:86:00:78:96:86:ea:23:3f:f4:ea:ac:04:e4:c7:b5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Sep 28, 2025
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=Globalsign TSA for MS Authenticode Advanced - G4 - 2025,O=GlobalSign nv-sa,C=BE
Serial Number
01:5c:c0:8a:f3:9b:b4:53:73:96:89:c7:1a:82:9d:32
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 15, 2025 - Dec 10, 2034
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:5e:21:e8:3e:4f:82:88:70:9d:5a:d6
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 13, 2022 - Oct 16, 2025
Minor OS version
0
Major OS version
6
Entry point
14140
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Projects\RTSS737\EncoderServer\EncoderServer\Release\EncoderServer.pdb
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
mfc140
ord14133
ord7619
ord14135
ord12171
ord12170
ord2437
ord5167
ord7989
ord12490
ord8050
ord8131
ord8122
ord2723
ord12631
ord11532
ord13766
ord8627
ord8861
ord8140
ord12212
ord12391
ord365
ord1057
ord6483
ord7152
ord986
ord1449
ord4438
ord7198
ord12553
ord10080
ord11878
ord543
ord1162
ord8170
ord1633
ord2368
ord1032
ord11659
ord7685
ord1447
ord982
ord7363
ord10026
ord5982
ord13331
ord3205
ord3202
ord7881
ord2696
ord14279
ord9933
ord9935
ord9934
ord9932
ord9936
ord5435
ord11365
ord11366
ord9049
ord11719
ord11575
ord14128
ord8618
ord11850
ord3941
ord10644
ord11614
ord2917
ord13438
ord11892
ord11888
ord1695
ord1717
ord1743
ord1729
ord1750
ord4765
ord4832
ord4777
ord4795
ord4789
ord4783
ord4842
ord4826
ord4771
ord4848
ord4803
ord4741
ord4756
ord4817
ord4351
ord9343
ord4343
ord2962
ord14136
ord7620
ord14134
ord6607
ord11357
ord13284
ord5704
ord2627
ord11754
ord3804
ord3271
ord3270
ord3165
ord11798
ord5064
ord5347
ord5536
ord9001
ord5323
ord5566
ord5067
ord5213
ord5049
ord7430
ord7431
ord7420
ord5211
ord7890
ord9903
ord8792
ord4002
ord8862
ord6595
ord3529
ord1485
ord9118
ord3705
ord3710
ord7364
ord1450
ord988
ord12571
ord11615
ord7637
ord316
ord4648
ord265
ord14007
ord12160
ord7688
ord14207
ord6100
ord14209
ord6102
ord14208
ord6101
ord3723
ord5687
ord11869
ord11877
ord7888
ord10079
ord11881
ord11849
ord12552
ord5539
ord9898
ord6591
ord266
ord305
ord1507
ord2004
ord8909
ord310
ord4436
ord5691
ord3166
ord1487
ord6703
ord2310
ord2207
ord13857
kernel32
OutputDebugStringW
GetPrivateProfileIntA
CloseHandle
CreateFileMappingA
GetLastError
OpenEventA
MapViewOfFile
QueryPerformanceFrequency
QueryPerformanceCounter
CreateEventA
WaitForMultipleObjects
ResetEvent
SetEvent
WaitForSingleObject
CreateMutexA
GetModuleFileNameA
ResumeThread
UnmapViewOfFile
OpenFile
ReleaseMutex
SetFilePointer
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
WriteFile
_lclose
LoadLibraryA
GetProcAddress
InitializeSListHead
GetSystemTimeAsFileTime
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetThreadPriority
DeleteCriticalSection
InitializeCriticalSectionEx
FreeLibrary
user32
FindWindowA
SetTimer
EnableWindow
LoadCursorA
PostMessageA
PeekMessageA
KillTimer
comctl32
InitCommonControlsEx
shlwapi
PathRemoveFileSpecA
PathRenameExtensionA
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcpy
__std_terminate
__C_specific_handler
memset
__current_exception
__current_exception_context
api-ms-win-crt-string-l1-1-0
_stricmp
strcat_s
strcpy_s
api-ms-win-crt-stdio-l1-1-0
__p__commode
__stdio_common_vsprintf_s
_set_fmode
api-ms-win-crt-filesystem-l1-1-0
_splitpath_s
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
api-ms-win-crt-runtime-l1-1-0
_get_narrow_winmain_command_line
terminate
_register_thread_local_exe_atexit_callback
_c_exit
_configure_narrow_argv
_exit
exit
_initterm_e
_initterm
_initialize_onexit_table
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_narrow_environment
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
_setmbcp
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
852B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
584B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35207,
count=10, id=260, version=35207,
count=33, id=261, version=35207,
count=6, id=257, version=35207,
count=17, id=257, version=33140,
count=315, id=1, productName=Unmarked objects,
count=9, id=265, version=35217,
count=1, id=255, version=35217,
count=1, id=151,
count=1, id=258, version=35217,
RTFC.dll
- IMPHASH 3e8d48e95652b98c2e2613040452524c
- SHA256 910d9dc14f11514497e979c10b01d66fbc2abf1fd9f0156a8773aa1b335cd077
- MD5 f0d373902dea0edc72fb841796de1695
- SHA1 f7bbf831d876059c3db783b4bf917e0341f7e14d
- SHA512 d1b15c21661def7775deae9f5d0800c70bdf1f2adb7ba9dcc431c4bc1b5df94abdf9d633bdaf45651c018ef29986eea596273466bcd05ddee18c2ccd687a1c93
- SSDEEP 1536:AvhvRedSojqLsz1jtH1JYhkmwiI/3/CxdRnuva:AXwqLARSI/36xdRnuy
- TLSH T12B7339107A6645F7C74683325D2A66A443FDD9F09FB59B43EB6A070F0EA21CB6F24603
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
37701
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Projects\RTSS737\RTFCSDK\lib\free\RTFC.pdb
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
shlwapi
PathRemoveFileSpecA
SHDeleteKeyA
PathAddBackslashA
kernel32
GetFileSize
ReadFile
OpenFile
CreateFileA
CloseHandle
GetLastError
SetLastError
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
SetFilePointer
WriteFile
WritePrivateProfileStringA
WaitForSingleObject
CreateMutexA
GetCurrentProcessId
GetLocalTime
_lclose
GetVersionExA
GetModuleFileNameA
MultiByteToWideChar
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
LocalFree
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ReleaseMutex
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
RegOpenKeyA
ole32
CoInitializeSecurity
CoCreateInstance
CoUninitialize
CoInitializeEx
oleaut32
SysAllocString
SysFreeString
VariantInit
VariantClear
SetErrorInfo
VariantChangeType
GetErrorInfo
CreateErrorInfo
vcruntime140
memset
__current_exception
__current_exception_context
strchr
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
__std_terminate
strstr
_purecall
_except_handler4_common
memcpy
__CxxFrameHandler3
strrchr
_CxxThrowException
api-ms-win-crt-string-l1-1-0
wcscmp
strcat_s
isdigit
_strnicmp
strlen
_stricmp
strcpy_s
_strupr_s
strpbrk
strncpy_s
_strlwr_s
api-ms-win-crt-filesystem-l1-1-0
_splitpath_s
api-ms-win-crt-stdio-l1-1-0
_sopen_s
fseek
fgets
__stdio_common_vsprintf_s
feof
__stdio_common_vsscanf
fclose
__stdio_common_vsnprintf_s
api-ms-win-crt-math-l1-1-0
pow
_fdopen
api-ms-win-crt-runtime-l1-1-0
terminate
_cexit
_crt_atexit
_crt_at_quick_exit
_initterm
_initterm_e
_execute_onexit_table
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
??0CCRC32@@QAE@ABV0@@Z
??0CCRC32@@QAE@XZ
??0CConfigCache@@QAE@ABV0@@Z
??0CConfigCache@@QAE@XZ
??0CFileVersion@@QAE@ABV0@@Z
??0CFileVersion@@QAE@XZ
??0CFormulaLexicalAnalyzer@@QAE@ABV0@@Z
??0CFormulaLexicalAnalyzer@@QAE@XZ
??0CFormulaTranslator@@QAE@ABV0@@Z
??0CFormulaTranslator@@QAE@XZ
??0CFormulaTranslatorVariableProvider@@QAE@ABV0@@Z
??0CFormulaTranslatorVariableProvider@@QAE@XZ
??0CLexicalAnalyzer@@QAE@ABV0@@Z
??0CLexicalAnalyzer@@QAE@XZ
??0CLog@@QAE@ABV0@@Z
??0CLog@@QAE@XZ
??0CMultiString@@QAE@ABV0@@Z
??0CMultiString@@QAE@PBD@Z
??0CMultiString@@QAE@XZ
??0COSVersion@@QAE@ABV0@@Z
??0COSVersion@@QAE@XZ
??0CPtrListLite@@QAE@ABV0@@Z
??0CPtrListLite@@QAE@XZ
??0CPtrStack@@QAE@ABV0@@Z
??0CPtrStack@@QAE@XZ
??0CRegValue@@QAE@ABV0@@Z
??0CRegValue@@QAE@XZ
??0CStringLite@@QAE@ABV0@@Z
??0CStringLite@@QAE@PBD@Z
??0CStringLite@@QAE@PBDH@Z
??0CStringLite@@QAE@XZ
??0CTaskSchedulerInterface@@QAE@ABV0@@Z
??0CTaskSchedulerInterface@@QAE@XZ
??0CTextFile@@QAE@ABV0@@Z
??0CTextFile@@QAE@XZ
??0CTokenString@@QAE@ABV0@@Z
??0CTokenString@@QAE@XZ
??0CWOW64@@QAE@ABV0@@Z
??0CWOW64@@QAE@XZ
??1CCRC32@@UAE@XZ
??1CConfigCache@@UAE@XZ
??1CFileVersion@@UAE@XZ
??1CFormulaLexicalAnalyzer@@UAE@XZ
??1CFormulaTranslator@@UAE@XZ
??1CFormulaTranslatorVariableProvider@@UAE@XZ
??1CLexicalAnalyzer@@UAE@XZ
??1CLog@@UAE@XZ
??1CMultiString@@UAE@XZ
??1COSVersion@@UAE@XZ
??1CPtrListLite@@UAE@XZ
??1CPtrStack@@UAE@XZ
??1CRegValue@@UAE@XZ
??1CStringLite@@UAE@XZ
??1CTaskSchedulerInterface@@UAE@XZ
??1CTextFile@@UAE@XZ
??1CTokenString@@UAE@XZ
??1CWOW64@@UAE@XZ
??4CCRC32@@QAEAAV0@ABV0@@Z
??4CConfigCache@@QAEAAV0@ABV0@@Z
??4CFileVersion@@QAEAAV0@ABV0@@Z
??4CFormulaLexicalAnalyzer@@QAEAAV0@ABV0@@Z
??4CFormulaTranslator@@QAEAAV0@ABV0@@Z
??4CFormulaTranslatorVariableProvider@@QAEAAV0@ABV0@@Z
??4CLexicalAnalyzer@@QAEAAV0@ABV0@@Z
??4CLog@@QAEAAV0@ABV0@@Z
??4CMultiString@@QAEABV0@ABV0@@Z
??4COSVersion@@QAEAAV0@ABV0@@Z
??4CPtrListLite@@QAEAAV0@ABV0@@Z
??4CPtrStack@@QAEAAV0@ABV0@@Z
??4CRegValue@@QAEAAV0@ABV0@@Z
??4CStringLite@@QAEABV0@ABV0@@Z
??4CStringLite@@QAEABV0@D@Z
??4CStringLite@@QAEABV0@PBD@Z
??4CTaskSchedulerInterface@@QAEAAV0@ABV0@@Z
??4CTextFile@@QAEAAV0@ABV0@@Z
??4CTokenString@@QAEAAV0@ABV0@@Z
??4CWOW64@@QAEAAV0@ABV0@@Z
??BCStringLite@@QBEPBDXZ
??H@YA?AVCStringLite@@ABV0@0@Z
??H@YA?AVCStringLite@@ABV0@PBD@Z
??H@YA?AVCStringLite@@PBDABV0@@Z
??YCStringLite@@QAEABV0@ABV0@@Z
??YCStringLite@@QAEABV0@D@Z
??YCStringLite@@QAEABV0@PBD@Z
??_7CCRC32@@6B@
??_7CConfigCache@@6B@
??_7CFileVersion@@6B@
??_7CFormulaLexicalAnalyzer@@6B@
??_7CFormulaTranslator@@6B@
??_7CFormulaTranslatorVariableProvider@@6B@
??_7CLexicalAnalyzer@@6B@
??_7CLog@@6B@
??_7CMultiString@@6B@
??_7COSVersion@@6B@
??_7CPtrListLite@@6B@
??_7CPtrStack@@6B@
??_7CRegValue@@6B@
??_7CStringLite@@6B@
??_7CTaskSchedulerInterface@@6B@
??_7CTextFile@@6B@
??_7CTokenString@@6B@
??_7CWOW64@@6B@
?AddHead@CPtrListLite@@QAEPAUPTR_LIST_NODE@@PAX@Z
?AddIndent@CLog@@QAEKK@Z
?AddTail@CPtrListLite@@QAEPAUPTR_LIST_NODE@@PAX@Z
?AddTask@CTaskSchedulerInterface@@QAEHPBD000@Z
?AddUnhandledLexeme@CLexicalAnalyzer@@QAEXXZ
?AllocLexemeDescData@CLexicalAnalyzer@@QAEXKPAE@Z
?AllocateCopy@CStringLite@@QAEPADXZ
?AllocateCopy@CStringLite@@SAPADPBD@Z
?Analyze@CLexicalAnalyzer@@QAEJPBD@Z
?Append@CLog@@QAEXPBDH@Z
?Append@CMultiString@@QAEXPBD@Z
?AppendCharset@CLexicalAnalyzer@@QAEJD@Z
?AppendCharset@CLexicalAnalyzer@@QAEJDD@Z
?AppendCharset@CLexicalAnalyzer@@QAEJPBD@Z
?AppendHelper@CMultiString@@AAEXPBDK@Z
?AppendJumpTable@CLexicalAnalyzer@@QAEJGGK@Z
?AppendJumpTable@CLexicalAnalyzer@@QAEJGGKD@Z
?AppendJumpTable@CLexicalAnalyzer@@QAEJGGKDD@Z
?AppendJumpTable@CLexicalAnalyzer@@QAEJGGKPBD@Z
?AppendLexemeStr@CLexicalAnalyzer@@QAEXD@Z
?AppendLexemesList@CFormulaLexicalAnalyzer@@AAEJXZ
?AppendMulti@CMultiString@@QAEXPBD@Z
?Calc@CCRC32@@QAEKKPAEK@Z
?Calc@CCRC32@@QAEKKPBD@Z
?Calc@CFormulaTranslator@@QAEJXZ
?CalcAdd@CFormulaTranslator@@AAEHPAUFORMULATRANSLATOR_VALUE_DESC@@0@Z
?CalcDiv@CFormulaTranslator@@AAEHPAUFORMULATRANSLATOR_VALUE_DESC@@0@Z
?CalcMul@CFormulaTranslator@@AAEHPAUFORMULATRANSLATOR_VALUE_DESC@@0@Z
?CalcPow@CFormulaTranslator@@AAEHPAUFORMULATRANSLATOR_VALUE_DESC@@0@Z
?CalcSub@CFormulaTranslator@@AAEHPAUFORMULATRANSLATOR_VALUE_DESC@@0@Z
?CalcUnaryMinus@CFormulaTranslator@@AAEHPAUFORMULATRANSLATOR_VALUE_DESC@@@Z
?Close@CTextFile@@QAEXXZ
?CompareWithWildcard@CStringLite@@QAEHPBDD@Z
?CompareWithWildcard@CStringLite@@SAHPBD0D@Z
?CreateLexemeDesc@CLexicalAnalyzer@@QAEJK@Z
?DeleteBuf@CTokenString@@AAEXXZ
?DeleteKey@CRegValue@@QAEHXZ
?DeleteTask@CTaskSchedulerInterface@@QAEHPBD@Z
?DeleteValue@CRegValue@@QAEHPBD@Z
?DestroyCache@CTextFile@@QAEXXZ
?DestroyLexemeDesc@CLexicalAnalyzer@@QAEXPAULEXEME_DESC@@@Z
?DestroyLexemes@CLexicalAnalyzer@@QAEXXZ
?DestroyOperandsStack@CFormulaTranslator@@QAEXXZ
?DestroySectionsCache@CTextFile@@QAEXXZ
?DestroyThisLexeme@CLexicalAnalyzer@@QAEPAULEXEME_DESC@@XZ
?EnumSections@CTextFile@@QAE?AVCMultiString@@XZ
?Filter@CMultiString@@QAE?AV1@PAV1@0@Z
?Find@CPtrListLite@@QAEPAUPTR_LIST_NODE@@K@Z
?Find@CPtrListLite@@QAEPAUPTR_LIST_NODE@@PAX@Z
?Find@CStringLite@@QBEHPBD@Z
?Find@CStringLite@@QBEHPBDH@Z
?FindNoCase@CStringLite@@QBEHPBD@Z
?FindNoCase@CStringLite@@QBEHPBDH@Z
?Format@CFormulaTranslator@@QAE?AVCStringLite@@XZ
?Format@CStringLite@@QAAXPBDZZ
?Get@CConfigCache@@QAEPAUCONFIG_CACHE_ENTRY@@PBD@Z
?Get@CFileVersion@@SAKPBD@Z
?GetAt@CPtrListLite@@QAEPAXPAUPTR_LIST_NODE@@@Z
?GetCharsetSize@CLexicalAnalyzer@@QAEGXZ
?GetCount@CPtrListLite@@QAEKXZ
?GetErrName@CLexicalAnalyzer@@SA?AVCStringLite@@J@Z
?GetFilename@CLog@@QAEPBDXZ
?GetFirst@CMultiString@@QAEPBDXZ
?GetFltValue@CFormulaTranslator@@AAEMPAUFORMULATRANSLATOR_VALUE_DESC@@@Z
?GetFltValue@CFormulaTranslator@@QAEMXZ
?GetHead@CPtrListLite@@QAEPAUPTR_LIST_NODE@@XZ
?GetHeadLexeme@CLexicalAnalyzer@@QAEPAULEXEME_DESC@@XZ
?GetHeaderFlags@CLog@@QAEKXZ
?GetIndent@CLog@@QAEKXZ
?GetIntValue@CFormulaTranslator@@AAEJPAUFORMULATRANSLATOR_VALUE_DESC@@@Z
?GetIntValue@CFormulaTranslator@@QAEJXZ
?GetLength@CStringLite@@QBEHXZ
?GetLexemeStr@CLexicalAnalyzer@@QAEPBDXZ
?GetMajorVersion@COSVersion@@QAEKXZ
?GetMinorVersion@COSVersion@@QAEKXZ
?GetNext@CMultiString@@QAEPBDXZ
?GetNext@CPtrListLite@@QAEPAXAAPAUPTR_LIST_NODE@@@Z
?GetNextLexeme@CLexicalAnalyzer@@QAEPAULEXEME_DESC@@XZ
?GetParam@CTextFile@@SAHHPBDAAVCStringLite@@0H@Z
?GetParams@CTextFile@@SAHHHPBDAAVCStringLite@@0H@Z
?GetParams@CTextFile@@SAHPBDAAVCStringLite@@10H@Z
?GetParams@CTextFile@@SAHPBDAAVCStringLite@@110H@Z
?GetPlatformID@COSVersion@@QAEKXZ
?GetPrev@CPtrListLite@@QAEPAXAAPAUPTR_LIST_NODE@@@Z
?GetPrevLexeme@CLexicalAnalyzer@@QAEPAULEXEME_DESC@@XZ
?GetPrivateProfileStringA@CConfigCache@@QAEKPBD00PADK0@Z
?GetRange@CTextFile@@SAHPBDAAK1@Z
?GetSamDesired@CRegValue@@QAEKXZ
?GetSeparator@CTokenString@@QAEDXZ
?GetSize@CMultiString@@SAKPBD@Z
?GetStr@CFileVersion@@SA?AVCStringLite@@PBD@Z
?GetStrUni@CFileVersion@@CA?AVCStringLite@@PBD@Z
?GetStrVxd@CFileVersion@@CA?AVCStringLite@@PBD@Z
?GetSystemWow64DirectoryA@CWOW64@@SAIPADI@Z
?GetTail@CPtrListLite@@QAEPAUPTR_LIST_NODE@@XZ
?GetTailLexeme@CLexicalAnalyzer@@QAEPAULEXEME_DESC@@XZ
?GetThisLexeme@CLexicalAnalyzer@@QAEPAULEXEME_DESC@@XZ
?GetTimeStamp@CLog@@QAE_JXZ
?GetUnhandledLexeme@CLexicalAnalyzer@@QAEPAULEXEME_DESC@@XZ
?GetValue@CRegValue@@QAE?AVCMultiString@@PBDAAV2@@Z
?GetValue@CRegValue@@QAE?AVCStringLite@@PBD0@Z
?GetValue@CRegValue@@QAEKPBDKK@Z
?GetValue@CTextFile@@SAHPBDAAKK@Z
?GetVxdVersion@CFileVersion@@CAHPADPAKPAX@Z
?GetVxdVersionInfo@CFileVersion@@CAHPADKPAX@Z
?GetVxdVersionInfoSize@CFileVersion@@CAKPAD@Z
?Home@CTextFile@@QAEXXZ
?Init@CFormulaLexicalAnalyzer@@QAEXXZ
?Init@CMultiString@@QAEXPBD@Z
?Init@CTaskSchedulerInterface@@QAEHXZ
?InitJumpTable@CLexicalAnalyzer@@QAEJG@Z
?InitLexemePriority@CFormulaTranslator@@AAEKPAULEXEME_DESC@@@Z
?InitMulti@CMultiString@@QAEXPBD@Z
?InitTable@CCRC32@@QAEXXZ
?IsConstFltLexeme@CFormulaLexicalAnalyzer@@QAEHPAULEXEME_DESC@@@Z
?IsConstIntLexeme@CFormulaLexicalAnalyzer@@QAEHPAULEXEME_DESC@@@Z
?IsConstLexeme@CFormulaLexicalAnalyzer@@QAEHPAULEXEME_DESC@@@Z
?IsEmpty@CMultiString@@QAEHXZ
?IsEmpty@CPtrListLite@@QAEHXZ
?IsEmpty@CStringLite@@QBEHXZ
?IsFltValue@CFormulaTranslator@@AAEHPAUFORMULATRANSLATOR_VALUE_DESC@@@Z
?IsFltValue@CFormulaTranslator@@QAEHXZ
?IsInRange@CTextFile@@SAHKPBD@Z
?IsIntValue@CFormulaTranslator@@AAEHPAUFORMULATRANSLATOR_VALUE_DESC@@@Z
?IsIntValue@CFormulaTranslator@@QAEHXZ
?IsOperationBracketLexeme@CFormulaLexicalAnalyzer@@QAEHPAULEXEME_DESC@@@Z
?IsOperationCloseBracketLexeme@CFormulaLexicalAnalyzer@@QAEHPAULEXEME_DESC@@@Z
?IsOperationLexeme@CFormulaLexicalAnalyzer@@QAEHPAULEXEME_DESC@@@Z
?IsOperationOpenBracketLexeme@CFormulaLexicalAnalyzer@@QAEHPAULEXEME_DESC@@@Z
?IsTaskExist@CTaskSchedulerInterface@@QAEHPBD@Z
?IsVarLexeme@CFormulaLexicalAnalyzer@@QAEHPAULEXEME_DESC@@@Z
?IsWindows2000@COSVersion@@QAEHXZ
?IsWindows2000OrLater@COSVersion@@QAEHXZ
?IsWindows7@COSVersion@@QAEHXZ
?IsWindows7OrLater@COSVersion@@QAEHXZ
?IsWindows95@COSVersion@@QAEHXZ
?IsWindows98@COSVersion@@QAEHXZ
?IsWindows98OrLater@COSVersion@@QAEHXZ
?IsWindows9x@COSVersion@@QAEHXZ
?IsWindowsME@COSVersion@@QAEHXZ
?IsWindowsNT4@COSVersion@@QAEHXZ
?IsWindowsNT4OrLater@COSVersion@@QAEHXZ
?IsWindowsNT@COSVersion@@QAEHXZ
?IsWindowsVista@COSVersion@@QAEHXZ
?IsWindowsVistaOrLater@COSVersion@@QAEHXZ
?IsWindowsXP64OrLater@COSVersion@@QAEHXZ
?IsWindowsXP@COSVersion@@QAEHXZ
?IsWindowsXPOrLater@COSVersion@@QAEHXZ
?IsWow64Process@CWOW64@@SAHPAXPAH@Z
?KillTable@CCRC32@@QAEXXZ
?Left@CStringLite@@QBE?AV1@H@Z
?MakeLower@CStringLite@@QAEXXZ
?MakeUpper@CStringLite@@QAEXXZ
?MarkReachabilityHelper@CLexicalAnalyzer@@AAEXPAEG@Z
?Mid@CStringLite@@QBE?AV1@HH@Z
?OnStateChange@CFormulaLexicalAnalyzer@@EAEJGGD@Z
?Open@CTextFile@@QAEHPBD@Z
?Peek@CPtrStack@@QAEPAXXZ
?Pop@CPtrStack@@QAEPAXXZ
?PostAnalyze@CFormulaLexicalAnalyzer@@EAEJH@Z
?PreAnalyze@CFormulaLexicalAnalyzer@@EAEJXZ
?Precache@CTextFile@@QAEXPBD@Z
?Precache@CTextFile@@QAEXXZ
?PrecacheSections@CTextFile@@QAEXXZ
?Push@CPtrStack@@QAEXPAX@Z
?PushVal@CFormulaTranslator@@AAEXKJ@Z
?PushVar@CFormulaTranslator@@AAEHPBD@Z
?QueryValue@CRegValue@@QAEHPBDAAKK@Z
?QueryValueEx@CRegValue@@QAEHPBDPAEAAK2@Z
?ReadSection@CTextFile@@UAEHPBDAAVCStringLite@@@Z
?ReadSectionParam@CTextFile@@UAE?AVCStringLite@@PBD00@Z
?ReadSectionParam@CTextFile@@UAEHPBD0AAVCStringLite@@@Z
?ReadString@CTextFile@@QAEHAAVCStringLite@@@Z
?RemoveAll@CPtrListLite@@QAEXXZ
?RemoveAt@CPtrListLite@@QAEXPAUPTR_LIST_NODE@@@Z
?Replace@CStringLite@@QAEHPBD0@Z
?ResetLexemeStr@CLexicalAnalyzer@@QAEXXZ
?Right@CStringLite@@QBE?AV1@H@Z
?SetFilename@CLog@@QAEXPBD@Z
?SetHeaderFlags@CLog@@QAEXK@Z
?SetIndent@CLog@@QAEXK@Z
?SetLexemeStr@CLexicalAnalyzer@@QAEXD@Z
?SetRegistryKey@CRegValue@@QAEXPAUHKEY__@@PBD@Z
?SetSamDesired@CRegValue@@QAEXK@Z
?SetValue@CRegValue@@QAEHPBD0@Z
?SetValue@CRegValue@@QAEHPBDKK@Z
?SetValueEx@CRegValue@@QAEHPBDPAEKK@Z
?SetVariableProvider@CFormulaTranslator@@QAEXPAVCFormulaTranslatorVariableProvider@@@Z
?Sort@CPtrListLite@@QAEXHP6AHPAUPTR_LIST_NODE@@0@Z@Z
?SortLexemesHelper@CFormulaTranslator@@CAHPAUPTR_LIST_NODE@@0@Z
?StrToDWORD@CFileVersion@@SAKPBD@Z
?StripComments@CTextFile@@QAEHAAVCStringLite@@@Z
?SubIndent@CLog@@QAEKK@Z
?SwapWithNext@CPtrListLite@@QAEXPAUPTR_LIST_NODE@@@Z
?SwapWithPrev@CPtrListLite@@QAEXPAUPTR_LIST_NODE@@@Z
?Translate@CFormulaTranslator@@QAEJPBD@Z
?TrimLeft@CStringLite@@QAEXD@Z
?TrimLeft@CStringLite@@QAEXPBD@Z
?TrimLeft@CStringLite@@QAEXXZ
?TrimRight@CStringLite@@QAEXD@Z
?TrimRight@CStringLite@@QAEXPBD@Z
?TrimRight@CStringLite@@QAEXXZ
?Uninit@CConfigCache@@QAEXXZ
?Uninit@CMultiString@@QAEXXZ
?Uninit@CTaskSchedulerInterface@@QAEXXZ
?UninitCharset@CLexicalAnalyzer@@QAEXXZ
?UninitJumpTable@CLexicalAnalyzer@@QAEXXZ
?ValidateJumpTable@CLexicalAnalyzer@@QAEJXZ
?Wow64DisableWow64FsRedirection@CWOW64@@SAHPAPAX@Z
?Wow64RevertWow64FsRedirection@CWOW64@@SAHPAX@Z
?WritePrivateProfileStringA@CConfigCache@@QAEHPBD000@Z
?g_hRTFCDLL@@3PAUHINSTANCE__@@A
?helper_AppendBuf@CStringLite@@IAEXD@Z
?helper_AppendBuf@CStringLite@@IAEXPBD@Z
?helper_FreeBuf@CStringLite@@IAEXXZ
?helper_InitBuf@CStringLite@@IAEXD@Z
?helper_InitBuf@CStringLite@@IAEXPBD@Z
?helper_InitBuf@CStringLite@@IAEXPBDH@Z
?strtok@CTokenString@@QAEPADPBD0@Z
?strtokex@CTokenString@@QAEPADPBD0@Z
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=3, id=259, version=35207,
count=11, id=260, version=35207,
count=1, id=262, version=33140,
count=24, id=261, version=35207,
count=13, id=257, version=33140,
count=115, id=1, productName=Unmarked objects,
count=22, id=261, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=151,
count=1, id=258, version=35217,
RTMUI.dll
- IMPHASH 43e8d250d4c3553f3fb27a3edbaa43aa
- SHA256 471c937d20dd9fdf234ce0a9f377fd58e3b805caeecfe5b09cc8b85e14e9106d
- MD5 b9bb9c25812e9b60bdd8a4268384a3eb
- SHA1 c8c4ebef39739d499890f32c3db4b54e8d1ebfcc
- SHA512 805bc78607b694b5a02ecbe453b3e1e385b9dd5147fa5849837a5758a141e269a863f8d749a49ee864c5fc1b3f6395afe95b7d6ec44690160ce56b14ef5a6d67
- SSDEEP 3072:MMyl4Z28y0/cdesUZx8PW5yLLASGD2+DwmN/aBkGEjyxkeEPr7XpqD+DZQxudQlR:9yl47/cdesUZx8Qi
- TLSH T1F2B33A23B69243A8EAAF923F78285722435D9135DFF585C79B0F0E5E5C202E75F30A16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
46720
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Projects\RTSS737\RTMUISDK\lib\free\RTMUI.pdb
shlwapi
PathRemoveFileSpecA
rtfc
?GetParam@CTextFile@@SAHHPBDAAVCStringLite@@0H@Z
?Calc@CCRC32@@QAEKKPBD@Z
??0CStringLite@@QAE@XZ
??1CCRC32@@UAE@XZ
??0CCRC32@@QAE@XZ
??1CStringLite@@UAE@XZ
mfc140
ord9167
ord2758
ord13677
ord6193
ord12074
ord7459
ord6581
ord3924
ord2524
ord4218
ord8705
ord2210
ord13855
ord13856
ord12984
ord13854
ord11850
ord7346
ord917
ord914
ord916
ord6354
ord13644
ord8934
ord11182
ord10969
ord8999
ord11280
ord10519
ord11117
ord11877
ord11880
ord11878
ord11879
ord6283
ord1406
ord10948
ord12159
ord7592
ord4870
ord2759
ord13681
ord6195
ord7347
ord922
ord2680
ord3232
ord6222
ord4100
ord10447
ord1409
ord12160
ord2592
ord9210
ord3049
ord9182
ord14702
ord7593
ord1692
ord14334
ord14328
ord12372
ord974
ord13883
ord13199
ord1447
ord6569
ord554
ord8467
ord1654
ord12541
ord6153
ord1183
ord5398
ord10963
ord7637
ord2022
ord3897
ord485
ord2263
ord2370
ord8188
ord8426
ord4869
ord5930
ord8732
ord14054
ord7783
ord14048
ord5858
ord9166
ord12163
ord6821
ord983
ord3256
ord3361
ord1458
ord7611
ord11343
ord12067
ord12115
ord3363
ord3364
ord3258
ord12111
ord5228
ord5528
ord5739
ord9305
ord5504
ord5231
ord5390
ord5210
ord7687
ord7688
ord7677
ord5388
ord8182
ord4841
ord3230
ord2241
ord14571
ord12348
ord14518
ord12291
ord2894
ord4796
ord11917
ord1446
ord14592
ord973
ord4807
ord12706
ord2986
ord5898
ord1696
ord1529
ord1526
ord1044
ord310
ord300
ord305
ord316
ord3005
ord6724
ord2387
ord10421
ord4084
ord458
ord3395
ord3396
ord3159
ord460
ord7076
ord3298
ord3295
ord10207
ord8173
ord14699
ord10237
ord10239
ord10238
ord10236
ord10240
ord5631
ord11671
ord11672
ord9096
ord12032
ord3830
ord3825
ord11881
ord14502
ord8922
ord6947
ord10950
ord9213
ord3259
ord13798
ord12205
ord2376
ord2381
ord2383
ord266
ord12201
ord1717
ord1739
ord1765
ord1751
ord1772
ord4920
ord4987
ord4932
ord4950
ord1109
ord4944
ord4938
ord4997
ord4981
ord4926
ord5003
ord4958
ord4896
ord3933
ord4911
ord4972
ord4493
ord5769
ord9647
ord4485
ord3050
ord14510
ord7887
ord14508
ord6848
ord11663
ord12969
ord2860
ord8997
ord13628
ord5911
ord2251
ord5401
ord1509
ord1507
ord924
kernel32
GetCurrentThreadId
GetLocalTime
FreeLibrary
LoadLibraryA
GetPrivateProfileIntA
EnterCriticalSection
MultiByteToWideChar
RaiseException
OutputDebugStringW
WideCharToMultiByte
GetACP
GetPrivateProfileStringA
LeaveCriticalSection
LoadResource
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
LoadLibraryW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
SetLastError
OutputDebugStringA
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
DecodePointer
GetProcAddress
GetModuleFileNameA
FindResourceA
LockResource
GetLastError
user32
DestroyIcon
LoadImageA
EnableWindow
InvalidateRect
GetClientRect
LoadMenuW
SendMessageA
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetWindowRect
GetWindow
IsWindow
IsWindowVisible
GetDlgCtrlID
GetCursorPos
ClientToScreen
ScreenToClient
PtInRect
GetClassNameA
MapDialogRect
GetSystemMetrics
GetMenuState
GetSubMenu
GetMenuItemID
ModifyMenuA
GetDC
ReleaseDC
GetWindowLongA
GetParent
MonitorFromPoint
UnregisterClassA
WindowFromPoint
gdi32
GetDeviceCaps
oleaut32
SysFreeString
vcruntime140
strstr
__CxxFrameHandler3
__std_terminate
memset
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
memmove
api-ms-win-crt-string-l1-1-0
_stricmp
strcpy_s
api-ms-win-crt-heap-l1-1-0
free
calloc
_recalloc
api-ms-win-crt-filesystem-l1-1-0
_findnext64i32
_findfirst64i32
_access
_findclose
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsscanf
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
terminate
_crt_atexit
_crt_at_quick_exit
_cexit
_initterm
_initterm_e
_invalid_parameter_noinfo
_errno
_execute_onexit_table
??0?$CList@PAULANGUAGE_DESC@@PAU1@@@QAE@H@Z
??0?$CList@PAULOCALIZED_STRING@@PAU1@@@QAE@H@Z
??0?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAE@H@Z
??0CLocalizationManager@@QAE@XZ
??0CLocalizedDialog@@IAE@XZ
??0CLocalizedDialog@@QAE@IPAVCWnd@@@Z
??0CLocalizedMenu@@QAE@XZ
??0CLocalizedPropertyPage@@QAE@II@Z
??0CLocalizedPropertyPage@@QAE@PBDI@Z
??0CLocalizedPropertyPage@@QAE@XZ
??0CLocalizedPropertySheet@@QAE@IPAVCWnd@@I@Z
??0CLocalizedPropertySheet@@QAE@PBDPAVCWnd@@I@Z
??0CLocalizedStringDifferenceList@@QAE@XZ
??0CLocalizedStringList@@QAE@XZ
??0CLocalizedTooltip@@QAE@XZ
??0CToolTipCtrlEx@@QAE@XZ
??1?$CList@PAULANGUAGE_DESC@@PAU1@@@UAE@XZ
??1?$CList@PAULOCALIZED_STRING@@PAU1@@@UAE@XZ
??1?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@UAE@XZ
??1CLocalizationManager@@UAE@XZ
??1CLocalizedDialog@@MAE@XZ
??1CLocalizedMenu@@UAE@XZ
??1CLocalizedPropertyPage@@UAE@XZ
??1CLocalizedPropertySheet@@UAE@XZ
??1CLocalizedStringDifferenceList@@UAE@XZ
??1CLocalizedStringList@@UAE@XZ
??1CLocalizedTooltip@@UAE@XZ
??1CToolTipCtrlEx@@UAE@XZ
??_7?$CList@PAULANGUAGE_DESC@@PAU1@@@6B@
??_7?$CList@PAULOCALIZED_STRING@@PAU1@@@6B@
??_7?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@6B@
??_7CLocalizationManager@@6B@
??_7CLocalizedDialog@@6B@
??_7CLocalizedMenu@@6B@
??_7CLocalizedPropertyPage@@6B@
??_7CLocalizedPropertySheet@@6B@
??_7CLocalizedStringDifferenceList@@6B@
??_7CLocalizedStringList@@6B@
??_7CLocalizedTooltip@@6B@
??_7CToolTipCtrlEx@@6B@
??_F?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEXXZ
??_F?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEXXZ
??_F?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEXXZ
?ANSIToUTF8@CLocalizationManager@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBDI@Z
?ANSIToUTF8@CLocalizationManager@@QAEXAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?Add@CLocalizedStringDifferenceList@@QAEXPBDPAULOCALIZED_STRING@@@Z
?Add@CLocalizedStringList@@QAEHPBDJJ0IKJJ@Z
?AddHead@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEPAU__POSITION@@PAULANGUAGE_DESC@@@Z
?AddHead@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEXPAV1@@Z
?AddHead@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEPAU__POSITION@@PAULOCALIZED_STRING@@@Z
?AddHead@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEXPAV1@@Z
?AddHead@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEPAU__POSITION@@PAULOCALIZED_STRING_DIFFERENCE@@@Z
?AddHead@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEXPAV1@@Z
?AddLanguageDesc@CLocalizationManager@@QAEXPBD@Z
?AddTail@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEPAU__POSITION@@PAULANGUAGE_DESC@@@Z
?AddTail@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEXPAV1@@Z
?AddTail@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEPAU__POSITION@@PAULOCALIZED_STRING@@@Z
?AddTail@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEXPAV1@@Z
?AddTail@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEPAU__POSITION@@PAULOCALIZED_STRING_DIFFERENCE@@@Z
?AddTail@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEXPAV1@@Z
?AllocateLocalizedTooltip@CLocalizationManager@@QAEPAVCLocalizedTooltip@@XZ
?AppendLog@CLocalizationManager@@QAEXV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H0HK@Z
?AreTooltipsEnabled@CLocalizationManager@@QAEHXZ
?Compare@CLocalizationManager@@QAEXPBD@Z
?CompareFileSystem@CLocalizationManager@@QAEXPBD0K@Z
?CompareFileSystemHelper@CLocalizationManager@@QAEXPBD00KPAK@Z
?CreateObject@CLocalizedDialog@@SGPAVCObject@@XZ
?CreateObject@CLocalizedPropertyPage@@SGPAVCObject@@XZ
?DefWindowProcA@CLocalizedDialog@@MAEJIIJ@Z
?DefWindowProcA@CLocalizedPropertyPage@@MAEJIIJ@Z
?DefWindowProcA@CLocalizedPropertySheet@@MAEJIIJ@Z
?Destroy@CLocalizedStringDifferenceList@@QAEXXZ
?Destroy@CLocalizedStringList@@QAEXXZ
?DoDataExchange@CLocalizedDialog@@MAEXPAVCDataExchange@@@Z
?DoDataExchange@CLocalizedPropertyPage@@MAEXPAVCDataExchange@@@Z
?Enable@CLocalizedTooltip@@QAEXH@Z
?EnableScroll@CLocalizedPropertyPage@@QAEXH@Z
?EnableScroll@CLocalizedPropertySheet@@QAEXH@Z
?EnableTooltips@CLocalizationManager@@QAEXH@Z
?Find@?$CList@PAULANGUAGE_DESC@@PAU1@@@QBEPAU__POSITION@@PAULANGUAGE_DESC@@PAU2@@Z
?Find@?$CList@PAULOCALIZED_STRING@@PAU1@@@QBEPAU__POSITION@@PAULOCALIZED_STRING@@PAU2@@Z
?Find@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QBEPAU__POSITION@@PAULOCALIZED_STRING_DIFFERENCE@@PAU2@@Z
?Find@CLocalizationManager@@QAEPAULANGUAGE_DESC@@PBD@Z
?FindIndex@?$CList@PAULANGUAGE_DESC@@PAU1@@@QBEPAU__POSITION@@H@Z
?FindIndex@?$CList@PAULOCALIZED_STRING@@PAU1@@@QBEPAU__POSITION@@H@Z
?FindIndex@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QBEPAU__POSITION@@H@Z
?FreeNode@?$CList@PAULANGUAGE_DESC@@PAU1@@@IAEXPAUCNode@1@@Z
?FreeNode@?$CList@PAULOCALIZED_STRING@@PAU1@@@IAEXPAUCNode@1@@Z
?FreeNode@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@IAEXPAUCNode@1@@Z
?Get@CLocalizationManager@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBDAAJ10I@Z
?Get@CLocalizedStringList@@QAEHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AAJ1PBDI11@Z
?GetAllocateLocalizedTooltip@CLocalizationManager@@QAEP6APAVCLocalizedTooltip@@XZXZ
?GetAt@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEAAPAULANGUAGE_DESC@@PAU__POSITION@@@Z
?GetAt@?$CList@PAULANGUAGE_DESC@@PAU1@@@QBEABQAULANGUAGE_DESC@@PAU__POSITION@@@Z
?GetAt@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEAAPAULOCALIZED_STRING@@PAU__POSITION@@@Z
?GetAt@?$CList@PAULOCALIZED_STRING@@PAU1@@@QBEABQAULOCALIZED_STRING@@PAU__POSITION@@@Z
?GetAt@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEAAPAULOCALIZED_STRING_DIFFERENCE@@PAU__POSITION@@@Z
?GetAt@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QBEABQAULOCALIZED_STRING_DIFFERENCE@@PAU__POSITION@@@Z
?GetCodepage@CLocalizationManager@@QAEIXZ
?GetCount@?$CList@PAULANGUAGE_DESC@@PAU1@@@QBEHXZ
?GetCount@?$CList@PAULOCALIZED_STRING@@PAU1@@@QBEHXZ
?GetCount@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QBEHXZ
?GetCreator@CLocalizationManager@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetCreatorEmail@CLocalizationManager@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetCreatorICQ@CLocalizationManager@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetDebugFlags@CLocalizationManager@@QAEKXZ
?GetDpi@@YAIPAUHWND__@@@Z
?GetFolder@CLocalizationManager@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetHead@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEAAPAULANGUAGE_DESC@@XZ
?GetHead@?$CList@PAULANGUAGE_DESC@@PAU1@@@QBEABQAULANGUAGE_DESC@@XZ
?GetHead@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEAAPAULOCALIZED_STRING@@XZ
?GetHead@?$CList@PAULOCALIZED_STRING@@PAU1@@@QBEABQAULOCALIZED_STRING@@XZ
?GetHead@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEAAPAULOCALIZED_STRING_DIFFERENCE@@XZ
?GetHead@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QBEABQAULOCALIZED_STRING_DIFFERENCE@@XZ
?GetHeadPosition@?$CList@PAULANGUAGE_DESC@@PAU1@@@QBEPAU__POSITION@@XZ
?GetHeadPosition@?$CList@PAULOCALIZED_STRING@@PAU1@@@QBEPAU__POSITION@@XZ
?GetHeadPosition@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QBEPAU__POSITION@@XZ
?GetHelpFilePath@CLocalizedTooltip@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?GetID@CLocalizationManager@@QAEPBDXZ
?GetLabel@CLocalizedPropertyPage@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetLanguage@CLocalizationManager@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetMessageMap@CLocalizedDialog@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CLocalizedPropertyPage@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CLocalizedPropertySheet@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CToolTipCtrlEx@@MBEPBUAFX_MSGMAP@@XZ
?GetNext@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEAAPAULANGUAGE_DESC@@AAPAU__POSITION@@@Z
?GetNext@?$CList@PAULANGUAGE_DESC@@PAU1@@@QBEABQAULANGUAGE_DESC@@AAPAU__POSITION@@@Z
?GetNext@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEAAPAULOCALIZED_STRING@@AAPAU__POSITION@@@Z
?GetNext@?$CList@PAULOCALIZED_STRING@@PAU1@@@QBEABQAULOCALIZED_STRING@@AAPAU__POSITION@@@Z
?GetNext@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEAAPAULOCALIZED_STRING_DIFFERENCE@@AAPAU__POSITION@@@Z
?GetNext@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QBEABQAULOCALIZED_STRING_DIFFERENCE@@AAPAU__POSITION@@@Z
?GetPrev@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEAAPAULANGUAGE_DESC@@AAPAU__POSITION@@@Z
?GetPrev@?$CList@PAULANGUAGE_DESC@@PAU1@@@QBEABQAULANGUAGE_DESC@@AAPAU__POSITION@@@Z
?GetPrev@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEAAPAULOCALIZED_STRING@@AAPAU__POSITION@@@Z
?GetPrev@?$CList@PAULOCALIZED_STRING@@PAU1@@@QBEABQAULOCALIZED_STRING@@AAPAU__POSITION@@@Z
?GetPrev@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEAAPAULOCALIZED_STRING_DIFFERENCE@@AAPAU__POSITION@@@Z
?GetPrev@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QBEABQAULOCALIZED_STRING_DIFFERENCE@@AAPAU__POSITION@@@Z
?GetResourceFilePath@@YA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD0@Z
?GetRuntimeClass@CLocalizedDialog@@UBEPAUCRuntimeClass@@XZ
?GetRuntimeClass@CLocalizedPropertyPage@@UBEPAUCRuntimeClass@@XZ
?GetRuntimeClass@CLocalizedPropertySheet@@UBEPAUCRuntimeClass@@XZ
?GetSize@?$CList@PAULANGUAGE_DESC@@PAU1@@@QBEHXZ
?GetSize@?$CList@PAULOCALIZED_STRING@@PAU1@@@QBEHXZ
?GetSize@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QBEHXZ
?GetTail@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEAAPAULANGUAGE_DESC@@XZ
?GetTail@?$CList@PAULANGUAGE_DESC@@PAU1@@@QBEABQAULANGUAGE_DESC@@XZ
?GetTail@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEAAPAULOCALIZED_STRING@@XZ
?GetTail@?$CList@PAULOCALIZED_STRING@@PAU1@@@QBEABQAULOCALIZED_STRING@@XZ
?GetTail@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEAAPAULOCALIZED_STRING_DIFFERENCE@@XZ
?GetTail@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QBEABQAULOCALIZED_STRING_DIFFERENCE@@XZ
?GetTailPosition@?$CList@PAULANGUAGE_DESC@@PAU1@@@QBEPAU__POSITION@@XZ
?GetTailPosition@?$CList@PAULOCALIZED_STRING@@PAU1@@@QBEPAU__POSITION@@XZ
?GetTailPosition@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QBEPAU__POSITION@@XZ
?GetTemplateName@CLocalizedDialog@@QAEPBDXZ
?GetThisClass@CLocalizedDialog@@SGPAUCRuntimeClass@@XZ
?GetThisClass@CLocalizedPropertyPage@@SGPAUCRuntimeClass@@XZ
?GetThisClass@CLocalizedPropertySheet@@SGPAUCRuntimeClass@@XZ
?GetThisMessageMap@CLocalizedDialog@@KGPBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CLocalizedPropertyPage@@KGPBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CLocalizedPropertySheet@@KGPBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CToolTipCtrlEx@@KGPBUAFX_MSGMAP@@XZ
?GetTooltipID@CLocalizedTooltip@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HH@Z
?Init@CLocalizationManager@@QAEXPBD0K@Z
?Init@CLocalizedTooltip@@QAEXPAVCWnd@@@Z
?InitToolTipText@CLocalizedTooltip@@QAEXHH@Z
?InsertAfter@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEPAU__POSITION@@PAU2@PAULANGUAGE_DESC@@@Z
?InsertAfter@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEPAU__POSITION@@PAU2@PAULOCALIZED_STRING@@@Z
?InsertAfter@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEPAU__POSITION@@PAU2@PAULOCALIZED_STRING_DIFFERENCE@@@Z
?InsertBefore@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEPAU__POSITION@@PAU2@PAULANGUAGE_DESC@@@Z
?InsertBefore@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEPAU__POSITION@@PAU2@PAULOCALIZED_STRING@@@Z
?InsertBefore@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEPAU__POSITION@@PAU2@PAULOCALIZED_STRING_DIFFERENCE@@@Z
?IsEmpty@?$CList@PAULANGUAGE_DESC@@PAU1@@@QBEHXZ
?IsEmpty@?$CList@PAULOCALIZED_STRING@@PAU1@@@QBEHXZ
?IsEmpty@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QBEHXZ
?IsInitialized@CLocalizationManager@@QAEHXZ
?LoadMenuA@CLocalizedMenu@@QAEHI@Z
?LoadStringA@@YA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@I@Z
?LoadStringA@@YA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?LoadStringA@@YAHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AAJ1PBDI@Z
?LoadTooltip@CLocalizedTooltip@@UAEXPBD@Z
?Localize@@YAXPAVCMenu@@@Z
?Localize@@YAXPAVCWnd@@@Z
?LockSetModified@CLocalizedPropertyPage@@QAEXH@Z
?NewNode@?$CList@PAULANGUAGE_DESC@@PAU1@@@IAEPAUCNode@1@PAU21@0@Z
?NewNode@?$CList@PAULOCALIZED_STRING@@PAU1@@@IAEPAUCNode@1@PAU21@0@Z
?NewNode@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@IAEPAUCNode@1@PAU21@0@Z
?OnAdjustHeight@CLocalizedPropertySheet@@UAEXXZ
?OnCreate@CLocalizedPropertyPage@@IAEHPAUtagCREATESTRUCTA@@@Z
?OnDpiChange@CLocalizedPropertyPage@@UAEXXZ
?OnGetMinMaxInfo@CLocalizedPropertySheet@@IAEXPAUtagMINMAXINFO@@@Z
?OnInitDialog@CLocalizedDialog@@MAEHXZ
?OnInitDialog@CLocalizedPropertyPage@@MAEHXZ
?OnInitDialog@CLocalizedPropertySheet@@MAEHXZ
?OnMouseMove@CLocalizedDialog@@IAEXIVCPoint@@@Z
?OnMouseMove@CLocalizedPropertyPage@@IAEXIVCPoint@@@Z
?OnMouseMove@CLocalizedTooltip@@QAEXIVCPoint@@@Z
?OnPreTranslateMessage@CLocalizedTooltip@@QAEXPAUtagMSG@@@Z
?OnSize@CLocalizedPropertyPage@@IAEXIHH@Z
?OnSize@CLocalizedPropertySheet@@IAEXIHH@Z
?OnToolTipText@CLocalizedDialog@@IAEHIPAUtagNMHDR@@PAJ@Z
?OnToolTipText@CLocalizedPropertyPage@@IAEHIPAUtagNMHDR@@PAJ@Z
?OnToolTipText@CLocalizedTooltip@@QAEHIPAUtagNMHDR@@PAJ@Z
?OnVScroll@CLocalizedPropertyPage@@IAEXIIPAVCScrollBar@@@Z
?OnWindowFromPoint@CToolTipCtrlEx@@IAEJIJ@Z
?PostLoadTooltip@CLocalizedTooltip@@UAEXPBD@Z
?PreTranslateMessage@CLocalizedDialog@@MAEHPAUtagMSG@@@Z
?PreTranslateMessage@CLocalizedPropertyPage@@MAEHPAUtagMSG@@@Z
?PrepareTooltips@CLocalizedTooltip@@QAEXXZ
?RedrawChild@CLocalizedDialog@@QAEXI@Z
?RemoveAll@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEXXZ
?RemoveAll@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEXXZ
?RemoveAll@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEXXZ
?RemoveAt@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEXPAU__POSITION@@@Z
?RemoveAt@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEXPAU__POSITION@@@Z
?RemoveAt@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEXPAU__POSITION@@@Z
?RemoveHead@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEPAULANGUAGE_DESC@@XZ
?RemoveHead@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEPAULOCALIZED_STRING@@XZ
?RemoveHead@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEPAULOCALIZED_STRING_DIFFERENCE@@XZ
?RemoveTail@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEPAULANGUAGE_DESC@@XZ
?RemoveTail@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEPAULOCALIZED_STRING@@XZ
?RemoveTail@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEPAULOCALIZED_STRING_DIFFERENCE@@XZ
?RepositionChildren@CLocalizedPropertySheet@@QAEXHH@Z
?ResetScrollbars@CLocalizedPropertyPage@@QAEXXZ
?Save@CLocalizedStringDifferenceList@@QAEXPAVCStringArray@@@Z
?Serialize@?$CList@PAULANGUAGE_DESC@@PAU1@@@UAEXAAVCArchive@@@Z
?Serialize@?$CList@PAULOCALIZED_STRING@@PAU1@@@UAEXAAVCArchive@@@Z
?Serialize@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@UAEXAAVCArchive@@@Z
?SetAllocateLocalizedTooltip@CLocalizationManager@@QAEXP6APAVCLocalizedTooltip@@XZ@Z
?SetAt@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEXPAU__POSITION@@PAULANGUAGE_DESC@@@Z
?SetAt@?$CList@PAULOCALIZED_STRING@@PAU1@@@QAEXPAU__POSITION@@PAULOCALIZED_STRING@@@Z
?SetAt@?$CList@PAULOCALIZED_STRING_DIFFERENCE@@PAU1@@@QAEXPAU__POSITION@@PAULOCALIZED_STRING_DIFFERENCE@@@Z
?SetDpiAware@@YAHK@Z
?SetModifiedLockable@CLocalizedPropertyPage@@QAEXH@Z
?SetTargetWnd@CToolTipCtrlEx@@QAEXPAVCWnd@@@Z
?SetupScrollbars@CLocalizedPropertyPage@@QAEXXZ
?UTF8ToANSI@CLocalizationManager@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBDI@Z
?UTF8ToANSI@CLocalizationManager@@QAEXAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?Uninit@CLocalizationManager@@QAEXXZ
?_GetBaseClass@CLocalizedDialog@@KGPAUCRuntimeClass@@XZ
?_GetBaseClass@CLocalizedPropertyPage@@KGPAUCRuntimeClass@@XZ
?_GetBaseClass@CLocalizedPropertySheet@@KGPAUCRuntimeClass@@XZ
?_GetDpiForMonitor@@YAIPAUHMONITOR__@@@Z
?_GetDpiForWindow@@YAIPAUHWND__@@@Z
?_GetSystemMetricsForDpi@@YAHHI@Z
?classCLocalizedDialog@CLocalizedDialog@@2UCRuntimeClass@@B
?classCLocalizedPropertyPage@CLocalizedPropertyPage@@2UCRuntimeClass@@B
?classCLocalizedPropertySheet@CLocalizedPropertySheet@@2UCRuntimeClass@@B
?g_dwDpiAware@@3KA
?g_localizationManager@@3VCLocalizationManager@@A
Name
.text
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35207,
count=11, id=260, version=35207,
count=20, id=261, version=35207,
count=4, id=257, version=35207,
count=2, id=257, version=35217,
count=11, id=257, version=33140,
count=351, id=1, productName=Unmarked objects,
count=13, id=261, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=151,
count=1, id=258, version=35217,
RTSS.dat
- SHA256 fc61f2760b636b9eff46f51be4b6d670168b75412418e598cfc8a86190e155ba
- MD5 5121ab6f62c30d9c02d28bf4e0531cc2
- SHA1 4fd3f569a93c5697aa0a5be994141cbff0451966
- SHA512 c5b517d3f79750384cfa809d94acd9c7a8e4b6f6ca8c2f1142f1be8da4b633e0f143b16790ae5cc8011383381c9e5ca61c7640f5265404705a2460e511d325b0
- TLSH T147E0C085041587178E428953593B0BC2BC0E61F1675B11DB670F0A10525580654FEC25
- MD5 SHA1 SHA512 TLSH
RTSS.exe
- IMPHASH da16b81eb2b16edd8e23603100eb77fe
- SHA256 84e6e439d313dcee0ba9549d8248d3923d9de6805d0380be5eab337446856736
- MD5 375f3073a071229c00ff5b711d4bef66
- SHA1 b00b9202e125548bfa40526233d45742d28a18f1
- SHA512 67fee8ce98f695c1a148d39b649eb4bb2bd01679ee18dd613f364669d0a93a82fa42d5a34defc6413ff7c9ebe14640bdb0b3e5acb2b675a427bff5750470d406
- SSDEEP 12288:y8bf0vFc1thVoo82IDbXJnIAPv4ZpC9xpvu/Un9XNTUcVF:y8YvOthVoo82IDLbv4ZpMhbTUY
- TLSH T130B49D63B9708032D2A1C2309EB9C6B65EB97D201B65C9DB37D8762D3C346D1B6307DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
4f:f7:53:35:20:d2:df:c0:0f:df:8f:76:6b:83:c5:dc:fe:f6:f9:6f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Sep 28, 2025
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=Globalsign TSA for MS Authenticode Advanced - G4 - 2025,O=GlobalSign nv-sa,C=BE
Serial Number
01:5c:c0:8a:f3:9b:b4:53:73:96:89:c7:1a:82:9d:32
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 15, 2025 - Dec 10, 2034
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:5e:21:e8:3e:4f:82:88:70:9d:5a:d6
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 13, 2022 - Oct 16, 2025
Minor OS version
0
Major OS version
6
Entry point
288603
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Projects\RTSS737\RTSS\Release\RTSS.pdb
dinput8
DirectInput8Create
shlwapi
PathIsRelativeA
PathRenameExtensionA
PathRemoveFileSpecA
PathStripPathA
rtfc
?AddTask@CTaskSchedulerInterface@@QAEHPBD000@Z
?Uninit@CTaskSchedulerInterface@@QAEXXZ
?Init@CTaskSchedulerInterface@@QAEHXZ
??H@YA?AVCStringLite@@PBDABV0@@Z
??YCStringLite@@QAEABV0@ABV0@@Z
??YCStringLite@@QAEABV0@PBD@Z
??1CFileVersion@@UAE@XZ
??0CFileVersion@@QAE@XZ
?GetStr@CFileVersion@@SA?AVCStringLite@@PBD@Z
?DeleteValue@CRegValue@@QAEHPBD@Z
?GetValue@CRegValue@@QAE?AVCStringLite@@PBD0@Z
?GetValue@CTextFile@@SAHPBDAAKK@Z
?IsWow64Process@CWOW64@@SAHPAXPAH@Z
?ReadSection@CTextFile@@UAEHPBDAAVCStringLite@@@Z
?ReadSectionParam@CTextFile@@UAE?AVCStringLite@@PBD00@Z
??1CTextFile@@UAE@XZ
??0CTextFile@@QAE@XZ
?Precache@CTextFile@@QAEXPBD@Z
?DeleteTask@CTaskSchedulerInterface@@QAEHPBD@Z
?GetParam@CTextFile@@SAHHPBDAAVCStringLite@@0H@Z
??4CStringLite@@QAEABV0@PBD@Z
??1CRegValue@@UAE@XZ
??0CRegValue@@QAE@XZ
?SetValue@CRegValue@@QAEHPBD0@Z
?SetRegistryKey@CRegValue@@QAEXPAUHKEY__@@PBD@Z
??1CTokenString@@UAE@XZ
??0CTokenString@@QAE@XZ
?strtok@CTokenString@@QAEPADPBD0@Z
?IsWindowsVistaOrLater@COSVersion@@QAEHXZ
?ReadSectionParam@CTextFile@@UAEHPBD0AAVCStringLite@@@Z
?IsEmpty@CStringLite@@QBEHXZ
??H@YA?AVCStringLite@@ABV0@PBD@Z
??0CStringLite@@QAE@PBD@Z
??0CStringLite@@QAE@XZ
??0COSVersion@@QAE@XZ
?IsWindows9x@COSVersion@@QAEHXZ
??1CStringLite@@UAE@XZ
?IsTaskExist@CTaskSchedulerInterface@@QAEHPBD@Z
??1CTaskSchedulerInterface@@UAE@XZ
??0CTaskSchedulerInterface@@QAE@XZ
??0CStringLite@@QAE@PBDH@Z
??1COSVersion@@UAE@XZ
rtui
?GetControlByName@CSkinnedWnd@@QAEPAVCSkinnedControl@@PBD@Z
?OnKillFocus@CSkinnedSlider@@UAEXXZ
?GetIndicatorValue@CSkinnedSlider@@UAEMK@Z
?HitTest@CSkinnedSlider@@UAEHVCPoint@@K@Z
?GetClassNameA@CSkinnedSlider@@UAE?AVCStringLite@@XZ
?OnLButtonDown@CSkinnedSlider@@UAEXVCPoint@@@Z
?OnLButtonUp@CSkinnedSlider@@UAEXVCPoint@@@Z
?OnMouseMove@CSkinnedSlider@@UAEXVCPoint@@@Z
?OnKeyDown@CSkinnedSlider@@UAEXIII@Z
?OnKeyUp@CSkinnedSlider@@UAEXIII@Z
?Draw@CSkinnedSlider@@UAEXPAVCDIB@@0@Z
??1CSkinnedSlider@@UAE@XZ
??0CSkinnedSlider@@QAE@XZ
?GetPos@CSkinnedSlider@@QAEJXZ
?SetPos@CSkinnedSlider@@QAEXJ@Z
?SetRange@CSkinnedSlider@@QAEHJJ@Z
?OnCreate@CSkinnedSlider@@UAEHPAVCSkin@@PBDK1K@Z
?SetPage@CSkinnedSlider@@QAEXK@Z
?SetTimerPeriod@CSkinnedControl@@QAEXK@Z
?PauseTimer@CSkinnedControl@@QAEXH@Z
?IsKeyboardFocusCaptured@CSkinnedControl@@UAEHXZ
?OnKillKeyboardFocus@CSkinnedControl@@UAEXXZ
?OnKillFocus@CSkinnedButton@@UAEXXZ
?SetVisible@CSkinnedControl@@UAEHH@Z
?NotifyParent@CSkinnedControl@@UAEXKK@Z
?HitTest@CSkinnedButton@@UAEHVCPoint@@K@Z
?GetClassNameA@CSkinnedButton@@UAE?AVCStringLite@@XZ
?CreateTimer@CSkinnedWnd@@QAEKK@Z
?SortControls@CSkinnedWnd@@QAEXXZ
?OnLButtonDown@CSkinnedButton@@UAEXVCPoint@@@Z
?OnLButtonUp@CSkinnedButton@@UAEXVCPoint@@@Z
?IsKeyboardFocusCaptured@CSkinnedWnd@@QAEHXZ
?OnMouseMove@CSkinnedButton@@UAEXVCPoint@@@Z
?OnKeyDown@CSkinnedButton@@UAEXIII@Z
?OnKeyUp@CSkinnedControl@@UAEXIII@Z
?Swap@CSkinnedWnd@@QAEHHPBD@Z
?Draw@CSkinnedButton@@UAEXPAVCDIB@@0@Z
?OnCreate@CSkinnedButton@@UAEHPAVCSkin@@PBDK1K@Z
?OverrideDIBPressed@CSkinnedButton@@QAEXPAVCDIB@@@Z
?OverrideDIBPressedHottrack@CSkinnedButton@@QAEXPAVCDIB@@@Z
?OverrideDIBHottrack@CSkinnedButton@@QAEXPAVCDIB@@@Z
?RemoveControl@CSkinnedWnd@@QAEHPAVCSkinnedControl@@@Z
?IsCaptured@CSkinnedWnd@@QAEHXZ
?EnableRedraw@CSkinnedWnd@@QAEXH@Z
?IsRedrawEnabled@CSkinnedWnd@@QAEHXZ
?OverrideDIB@CSkinnedButton@@QAEXPAVCDIB@@@Z
?Redraw@CSkinnedControl@@QAEXXZ
?UpdateDIB@CSkinnedWnd@@UAEHXZ
?UpdateDIB@CSkinnedWnd@@UAEHPAVCDC@@VCRect@@@Z
?OnReadDefaultControlDesc@CSkinnedWnd@@UAEHPAVCSkin@@PBD1K1AAVCStringLite@@@Z
?OnReadControlDesc@CSkinnedWnd@@UAEHPAVCSkin@@PBD1K1AAVCStringLite@@@Z
?SetLayout@CSkinnedWnd@@UAEHK@Z
?OnMoveWindow@CSkinnedWnd@@UAEXVCPoint@@@Z
??1CSkinnedPlaceholder@@UAE@XZ
??0CSkinnedPlaceholder@@QAE@XZ
?GetParam@CSkinnedPlaceholder@@QAEHHAAVCStringLite@@@Z
??1CSkinnedText@@UAE@XZ
??0CSkinnedText@@QAE@XZ
?GetText@CSkinnedText@@QAE?AVCStringLite@@XZ
?SetText@CSkinnedText@@QAEXPBD@Z
?SetEditMode@CSkinnedText@@QAEHH@Z
?SetEditMask@CSkinnedText@@QAEXPBD@Z
?SetEditTextLen@CSkinnedText@@QAEHH@Z
?SetEditCursor@CSkinnedText@@QAEDD@Z
?SetEditAnimationFrames@CSkinnedText@@QAEKK@Z
?IsHorizontal@CSkinnedSlider@@QAEHXZ
?GetThisMessageMap@CSkinnedWnd@@KGPBUAFX_MSGMAP@@XZ
?OnDestroy@CSkinnedWnd@@IAEXXZ
?OnTimer@CSkinnedWnd@@IAEXI@Z
?OnKeyDown@CSkinnedWnd@@IAEXIII@Z
?OnLButtonUp@CSkinnedWnd@@IAEXIVCPoint@@@Z
?OnMouseMove@CSkinnedWnd@@IAEXIVCPoint@@@Z
?OnLButtonDown@CSkinnedWnd@@IAEXIVCPoint@@@Z
??1CSkinnedWnd@@UAE@XZ
?Create@CSkinnedWnd@@UAEHPAVCSkin@@PBDK@Z
?GetLayeredWindowAlpha@CSkinnedWnd@@QAEKXZ
?AddControl@CSkinnedWnd@@QAEHPAVCSkinnedControl@@H@Z
?RedrawControls@CSkinnedWnd@@QAEXXZ
?OnTimer@CSkinnedButton@@UAEXXZ
??0CDIBWnd@@QAE@XZ
??1CDIBWnd@@UAE@XZ
?GetThisMessageMap@CDIBWnd@@KGPBUAFX_MSGMAP@@XZ
?UpdateDIB@CDIBWnd@@UAEHXZ
?UpdateDIB@CDIBWnd@@UAEHPAVCDC@@VCRect@@@Z
?DefWindowProcA@CDIBWnd@@UAEJIIJ@Z
?ConvertHSLToRGB@CDIB@@QAEXPAK00000@Z
?ConvertRGBToHSL@CDIB@@QAEXPAK00000@Z
?Bar@CDIB@@QAEHJJJJJ@Z
?GetIndicatorValue@CSkinnedControl@@UAEMK@Z
?Create@CDIB@@QAEHJJGK@Z
?GetWidth@CDIB@@QAEJXZ
?GetWidthB@CDIB@@QAEJXZ
?GetHeight@CDIB@@QAEJXZ
?GetImage@CDIB@@QAEPAEXZ
??0CDIB@@QAE@XZ
??1CDIB@@UAE@XZ
?Create@CDIBWnd@@QAEHKABUtagRECT@@PAVCWnd@@I@Z
?AttachDIB@CDIBWnd@@QAEHPAVCDIB@@@Z
?ClipInt@CValueClipper@@SAHHHH@Z
?GetPixel@CDIB@@QAEHHHAAK@Z
?CreateBitmap@CDIB@@QAEPAUHBITMAP__@@PAVCDC@@@Z
?GetRect@CDIB@@QAEXPAVCRect@@@Z
?LoadImageA@CDIB@@QAEHPAD@Z
?IsSupportedFormat@CSkin@@QAEHXZ
?ReadHeaderSectionParam@CSkin@@QAEHPBD0AAVCStringLite@@@Z
?Load@CSkin@@QAEHPAVCMemFile@@@Z
?SetPath@CSkin@@QAEHPBD@Z
?Compile@CSkin@@QAEHPBDK@Z
?Decompile@CSkin@@QAEHPBDK@Z
??0CSkin@@QAE@XZ
??1CSkin@@UAE@XZ
?SetAsyncScaling@CDIBWnd@@QAEXK@Z
?SetScalingMode@CDIBWnd@@QAEXK@Z
?SetScaleFactor@CSkinnedWnd@@QAEXK@Z
?Destroy@CSkinnedWnd@@QAEXH@Z
?SetLayeredWindowMode@CSkinnedWnd@@QAEXK@Z
?SetLayeredWindowAlpha@CSkinnedWnd@@QAEXK@Z
?GetSizeB@CDIB@@QAEKXZ
?AlphaBlt@CDIB@@QAEHPAV1@0JJJJJJK@Z
?Create@CMMTimer@@QAEHIIKPAUHWND__@@IIJ@Z
?Kill@CMMTimer@@QAEXH@Z
?IsActive@CMMTimer@@QAEHXZ
?EatMessages@CMMTimer@@QAEHXZ
??0CMMTimer@@QAE@XZ
??1CMMTimer@@UAE@XZ
?Blt@CDIB@@QAEHPAV1@JJJJJJ@Z
?ConvertToTrueColor@CDIB@@QAEHXZ
?DestroyDIB@CDIB@@QAEHXZ
?GetName@CSkinnedControl@@QAEPBDXZ
?HitTest@CSkinnedWnd@@QAEPAVCSkinnedControl@@VCPoint@@K@Z
?LoadPAK@CDIB@@QAEHPAVCSZArray@@PBD@Z
?MapBitmapName@CSkin@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?IsNative@CSkin@@QAEHXZ
?GetPAK@CSkin@@QAEPAVCSZArray@@XZ
?UpdateLayeredWindowAttributes@CSkinnedWnd@@QAEXXZ
?UpdateLayeredWindow@CSkinnedWnd@@QAEXXZ
?GetLayeredWindowMode@CSkinnedWnd@@QAEKXZ
?SaveDIB@CDIB@@QAEHPAD@Z
?Uninit@CSkin@@QAEXXZ
?IsVisible@CSkinnedControl@@QAEHXZ
?Create@CSkinnedControl@@QAEHPAVCSkin@@PBDK1KH@Z
?SetID@CSkinnedControl@@QAEXK@Z
?GetID@CSkinnedControl@@QAEKXZ
?Enable@CSkinnedControl@@QAEHH@Z
?IsEnabled@CSkinnedControl@@QAEHXZ
?GetControlRect@CSkinnedControl@@QAE?AVCRect@@XZ
?SetState@CSkinnedButton@@QAEXK@Z
?SetNextState@CSkinnedButton@@QAEKXZ
?SetSpin@CSkinnedButton@@QAEXH@Z
?SetCheckbox@CSkinnedButton@@QAEXH@Z
?Press@CSkinnedButton@@QAEXH@Z
?IsPressed@CSkinnedButton@@QAEHXZ
??0CSkinnedButton@@QAE@XZ
??1CSkinnedButton@@UAE@XZ
?GetDC@CLayeredWindowDC@@QAEPAUHDC__@@XZ
?DeleteDC@CLayeredWindowDC@@QAEXXZ
??0CSkinnedWnd@@QAE@XZ
?DefWindowProcA@CSkinnedWnd@@MAEJIIJ@Z
?ClientToSkin@CSkinnedWnd@@QAE?AVCPoint@@V2@@Z
?SkinToClient@CSkinnedWnd@@QAEHH@Z
?SkinToClient@CSkinnedWnd@@QAE?AVCRect@@V2@@Z
?GetScaleFactor@CSkinnedWnd@@QAEKXZ
?LockUpdateDIB@CSkinnedWnd@@QAEXH@Z
?CreateAdditionalControls@CSkinnedWnd@@QAEHPAVCSkin@@PBDKHH@Z
rtmui
?GetHeadPosition@?$CList@PAULANGUAGE_DESC@@PAU1@@@QBEPAU__POSITION@@XZ
?EnableTooltips@CLocalizationManager@@QAEXH@Z
?Init@CLocalizedTooltip@@QAEXPAVCWnd@@@Z
?PrepareTooltips@CLocalizedTooltip@@QAEXXZ
?OnPreTranslateMessage@CLocalizedTooltip@@QAEXPAUtagMSG@@@Z
?OnMouseMove@CLocalizedTooltip@@QAEXIVCPoint@@@Z
?OnToolTipText@CLocalizedTooltip@@QAEHIPAUtagNMHDR@@PAJ@Z
?GetNext@?$CList@PAULANGUAGE_DESC@@PAU1@@@QAEAAPAULANGUAGE_DESC@@AAPAU__POSITION@@@Z
?GetThisMessageMap@CLocalizedPropertyPage@@KGPBUAFX_MSGMAP@@XZ
?GetHelpFilePath@CLocalizedTooltip@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
??1CLocalizedTooltip@@UAE@XZ
??0CLocalizedTooltip@@QAE@XZ
?LoadTooltip@CLocalizedTooltip@@UAEXPBD@Z
?GetTooltipID@CLocalizedTooltip@@UAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HH@Z
?DefWindowProcA@CLocalizedPropertySheet@@MAEJIIJ@Z
?OnAdjustHeight@CLocalizedPropertySheet@@UAEXXZ
?GetThisMessageMap@CLocalizedPropertySheet@@KGPBUAFX_MSGMAP@@XZ
?OnInitDialog@CLocalizedPropertySheet@@MAEHXZ
??1CLocalizedPropertySheet@@UAE@XZ
?EnableScroll@CLocalizedPropertySheet@@QAEXH@Z
??0CLocalizedPropertySheet@@QAE@PBDPAVCWnd@@I@Z
??0CLocalizedPropertySheet@@QAE@IPAVCWnd@@I@Z
?GetThisClass@CLocalizedPropertySheet@@SGPAUCRuntimeClass@@XZ
??1CLocalizedMenu@@UAE@XZ
??0CLocalizedMenu@@QAE@XZ
?GetThisClass@CLocalizedDialog@@SGPAUCRuntimeClass@@XZ
??0CLocalizedDialog@@QAE@IPAVCWnd@@@Z
??1CLocalizedDialog@@MAE@XZ
?DoDataExchange@CLocalizedDialog@@MAEXPAVCDataExchange@@@Z
?OnInitDialog@CLocalizedDialog@@MAEHXZ
?GetThisMessageMap@CLocalizedDialog@@KGPBUAFX_MSGMAP@@XZ
?LoadStringA@@YA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@I@Z
?DefWindowProcA@CLocalizedDialog@@MAEJIIJ@Z
?PreTranslateMessage@CLocalizedDialog@@MAEHPAUtagMSG@@@Z
?Init@CLocalizationManager@@QAEXPBD0K@Z
?g_localizationManager@@3VCLocalizationManager@@A
?SetAllocateLocalizedTooltip@CLocalizationManager@@QAEXP6APAVCLocalizedTooltip@@XZ@Z
?Compare@CLocalizationManager@@QAEXPBD@Z
?Find@CLocalizationManager@@QAEPAULANGUAGE_DESC@@PBD@Z
?SetDpiAware@@YAHK@Z
?Localize@@YAXPAVCMenu@@@Z
?Localize@@YAXPAVCWnd@@@Z
?LoadStringA@@YA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?GetThisClass@CLocalizedPropertyPage@@SGPAUCRuntimeClass@@XZ
??0CLocalizedPropertyPage@@QAE@II@Z
??1CLocalizedPropertyPage@@UAE@XZ
?DoDataExchange@CLocalizedPropertyPage@@MAEXPAVCDataExchange@@@Z
?OnInitDialog@CLocalizedPropertyPage@@MAEHXZ
?LoadMenuA@CLocalizedMenu@@QAEHI@Z
?OnDpiChange@CLocalizedPropertyPage@@UAEXXZ
?DefWindowProcA@CLocalizedPropertyPage@@MAEJIIJ@Z
?PreTranslateMessage@CLocalizedPropertyPage@@MAEHPAUtagMSG@@@Z
?GetDpi@@YAIPAUHWND__@@@Z
?g_dwDpiAware@@3KA
msimg32
GradientFill
mfc140
ord10948
ord12706
ord2394
ord321
ord2560
ord4490
ord12821
ord8776
ord2326
ord3230
ord4841
ord2004
ord6533
ord4639
ord14291
ord3232
ord13165
ord4444
ord4100
ord1922
ord12160
ord2592
ord9210
ord3049
ord9182
ord4868
ord2344
ord13644
ord6472
ord3143
ord3332
ord5785
ord8030
ord1069
ord12529
ord6581
ord3924
ord2524
ord4218
ord8705
ord2860
ord11339
ord10421
ord1109
ord12115
ord6996
ord2251
ord2210
ord6473
ord10962
ord8996
ord5938
ord6200
ord501
ord1141
ord4085
ord5561
ord5568
ord509
ord4086
ord2027
ord12870
ord998
ord7406
ord5742
ord7452
ord10202
ord1507
ord266
ord265
ord7619
ord1472
ord6836
ord1431
ord13820
ord3354
ord3240
ord6798
ord4476
ord6104
ord3830
ord10379
ord14421
ord13475
ord14149
ord12969
ord7783
ord5401
ord1000
ord3799
ord4807
ord6195
ord13681
ord2759
ord3825
ord12163
ord4870
ord7407
ord9166
ord8031
ord11928
ord5648
ord5792
ord13584
ord13574
ord12074
ord6193
ord13677
ord2758
ord9167
ord8997
ord10963
ord11343
ord4084
ord3395
ord3396
ord3159
ord3298
ord3295
ord10207
ord8173
ord14699
ord10237
ord10239
ord10238
ord10236
ord10240
ord5631
ord11671
ord11672
ord9096
ord12032
ord11881
ord14502
ord8922
ord6947
ord10950
ord9213
ord3259
ord13798
ord12205
ord12201
ord1717
ord1739
ord11927
ord14380
ord12474
ord7964
ord14581
ord6322
ord14583
ord6324
ord14582
ord6323
ord993
ord6283
ord2986
ord5898
ord305
ord3005
ord14238
ord9088
ord1177
ord2751
ord14487
ord3866
ord2989
ord8704
ord4215
ord3184
ord6562
ord9332
ord5398
ord13230
ord3946
ord12863
ord8679
ord4656
ord1693
ord1529
ord3627
ord1169
ord3861
ord6553
ord12194
ord7855
ord6946
ord5826
ord13582
ord5814
ord2298
ord11850
ord9422
ord3177
ord540
ord13011
ord8326
ord8770
ord13003
ord13966
ord13234
ord13028
ord13027
ord6785
ord6460
ord358
ord6463
ord898
ord6768
ord3874
ord2520
ord4866
ord6540
ord1765
ord1751
ord1772
ord4920
ord4987
ord4932
ord4950
ord4944
ord4938
ord4997
ord4981
ord4926
ord5003
ord4958
ord4896
ord4911
ord4972
ord4493
ord5769
ord9647
ord4485
ord3050
ord14510
ord7887
ord14508
ord6848
ord11663
ord13628
ord5911
ord14054
ord2680
ord12067
ord3933
ord3363
ord3364
ord3258
ord12111
ord5228
ord5528
ord5739
ord9305
ord5504
ord5231
ord5390
ord5210
ord7687
ord7688
ord7677
ord5388
ord8182
ord3689
ord1448
ord4715
ord12555
ord2003
ord975
ord13198
ord1696
ord1044
ord316
ord14571
ord12348
ord14518
ord12291
ord6724
ord2376
ord2383
ord13101
ord1447
ord13199
ord974
ord6810
ord8322
ord14328
ord1692
ord1526
ord310
ord300
ord5960
ord7475
ord9089
ord1178
ord4216
ord6563
ord1389
ord11879
ord11878
ord11880
ord11877
ord11117
ord10519
ord890
ord11280
ord8999
ord1106
ord10969
ord11182
ord8934
ord6354
ord9085
ord1068
ord4640
ord3864
ord13904
ord3856
ord450
ord2988
ord8703
ord2518
ord4213
ord3142
ord6471
ord4468
ord3685
ord3688
ord3808
ord3798
ord3796
ord4865
ord4869
ord1140
ord3844
ord2880
ord14520
ord12294
ord5862
ord1471
ord11907
ord500
ord12162
ord1070
ord366
ord2200
ord8429
ord7618
ord1468
ord8347
ord12190
ord10383
ord12869
ord12806
ord4580
ord8285
ord5336
ord10330
ord2484
ord12485
ord12484
ord14509
ord5894
ord12182
ord7886
ord14507
ord9353
ord12191
ord4582
ord4143
ord4082
ord12888
ord7905
ord6831
ord8180
ord11972
ord8026
ord10384
ord2381
ord1509
ord2387
ord2241
ord2407
kernel32
RaiseException
OutputDebugStringW
EnterCriticalSection
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
LoadLibraryW
GetModuleHandleW
GetModuleFileNameW
SetLastError
OutputDebugStringA
ExitProcess
_lclose
OpenFile
WriteFile
ReadFile
GetFileSize
WritePrivateProfileStringA
GetLocalTime
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
DecodePointer
MultiByteToWideChar
LocalFree
GetModuleHandleA
GetVersionExA
OpenProcess
DeleteFileA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
EnumResourceNamesA
EnumResourceTypesA
FindResourceA
SizeofResource
LockResource
LoadResource
GetModuleFileNameA
GetCurrentProcess
CreateFileMappingA
Sleep
GetLastError
GetPrivateProfileStringA
GetPrivateProfileIntA
GetTickCount
GetSystemDirectoryA
WaitForMultipleObjects
CreateMutexA
ReleaseMutex
ResetEvent
CloseHandle
ResumeThread
lstrlenA
lstrcatA
lstrcpyA
SetThreadPriority
SwitchToThread
CreateEventA
WaitForSingleObject
SetEvent
QueryPerformanceFrequency
QueryPerformanceCounter
LoadLibraryA
GetProcAddress
FreeLibrary
OpenFileMappingA
UnmapViewOfFile
MapViewOfFile
LeaveCriticalSection
user32
SendMessageA
EnableWindow
GetClientRect
GetWindowLongA
SetWindowLongA
SetCapture
ReleaseCapture
OffsetRect
GetParent
GetWindowRect
PostMessageA
IsWindowVisible
GetActiveWindow
GetForegroundWindow
GetDC
ReleaseDC
IsRectEmpty
GetAsyncKeyState
GetCapture
SetTimer
KillTimer
DrawTextA
InvalidateRgn
RedrawWindow
SetCursor
GetCursorPos
ScreenToClient
WindowFromPoint
FillRect
CopyRect
PtInRect
DestroyIcon
LoadImageA
RegisterWindowMessageA
BroadcastSystemMessageA
SetForegroundWindow
FindWindowA
ExitWindowsEx
GetSystemMetrics
MessageBoxA
EndDeferWindowPos
GetDesktopWindow
UnregisterClassA
EnumDisplayMonitors
MonitorFromWindow
EnumDisplayDevicesA
GetWindow
GetWindowThreadProcessId
AdjustWindowRectEx
SetWindowRgn
InsertMenuA
CheckMenuItem
CreatePopupMenu
LoadMenuW
IsIconic
SystemParametersInfoA
DeferWindowPos
BeginDeferWindowPos
IsWindow
SendMessageTimeoutA
LoadCursorA
GetUpdateRect
SetMenuInfo
GetMenuInfo
GetSubMenu
GetMonitorInfoA
MonitorFromPoint
GetSysColor
gdi32
SelectObject
DeleteObject
SetBitmapBits
StretchBlt
TextOutA
GetTextMetricsA
SetTextColor
SetBkColor
Pie
GetTextCharacterExtra
GetDIBits
GetCharABCWidthsA
GetCharWidth32A
DeleteDC
GetObjectA
CreateCompatibleDC
GetBitmapBits
SetStretchBltMode
StretchDIBits
CreatePen
CreateFontA
CreateSolidBrush
GetTextExtentPoint32A
GetCurrentObject
CreateRectRgn
CreateCompatibleBitmap
CombineRgn
BitBlt
advapi32
OpenProcessToken
RegEnumValueA
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyA
RegSetValueExA
ConvertStringSidToSidA
SetEntriesInAclA
GetNamedSecurityInfoA
SetNamedSecurityInfoA
RegDeleteValueA
shell32
SHGetSpecialFolderPathA
Shell_NotifyIconA
ShellExecuteA
comctl32
ImageList_AddMasked
ImageList_DrawEx
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_ReplaceIcon
ord17
ImageList_BeginDrag
oleaut32
SysFreeString
wininet
InternetErrorDlg
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetSetOptionA
InternetOpenA
InternetConnectA
InternetCloseHandle
InternetReadFile
vcruntime140
memmove
__std_type_info_destroy_list
__current_exception_context
__current_exception
_except_handler4_common
_setjmp3
longjmp
__RTDynamicCast
strstr
__std_terminate
__CxxFrameHandler3
memcpy
memset
api-ms-win-crt-filesystem-l1-1-0
_splitpath_s
_access
_fullpath
_mkdir
_findfirst32
_findnext32
_findclose
remove
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
fwrite
fflush
ferror
fread
fopen
__stdio_common_vsprintf_s
__acrt_iob_func
_set_fmode
__p__commode
fclose
__stdio_common_vsscanf
api-ms-win-crt-string-l1-1-0
_stricmp
wcscmp
strlen
strcat_s
strcmp
strcpy_s
_strnicmp
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_c_exit
_invalid_parameter_noinfo
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
terminate
_set_app_type
_seh_filter_exe
_cexit
_crt_at_quick_exit
_controlfp_s
_execute_onexit_table
_register_onexit_function
_crt_atexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
strerror
_errno
abort
api-ms-win-crt-time-l1-1-0
_mktime64
strftime
_time32
_time64
_localtime64_s
_gmtime64
api-ms-win-crt-utility-l1-1-0
labs
abs
api-ms-win-crt-heap-l1-1-0
malloc
free
_set_new_mode
_recalloc
api-ms-win-crt-math-l1-1-0
modf
floor
_libm_sse2_pow_precise
_except1
__setusermatherr
frexp
api-ms-win-crt-convert-l1-1-0
atof
api-ms-win-crt-locale-l1-1-0
_setmbcp
_configthreadlocale
GetColorPreview
GetHostAppID
GetHostAppProperty
GetHostAppVersion
LocalizeMenu
LocalizeStr
LocalizeWnd
PickColor
PickColorEx
Name
.text
Size
297KB
Virtual Size
297KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
115KB
Virtual Size
115KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
85KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=253, version=35207,
count=9, id=259, version=35207,
count=13, id=260, version=35207,
count=31, id=261, version=35207,
count=4, id=257, version=35207,
count=22, id=260, version=30147,
count=6, id=257, version=35217,
count=1, id=245, version=40116,
count=2, id=244, version=40116,
count=23, id=239, version=40116,
count=952, id=1, productName=Unmarked objects,
count=40, id=261, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=151,
count=1, id=258, version=35217,
RTSSHooks.dll.copy
- IMPHASH 50d53220815ab558981f165fa63b57e6
- SHA256 db3edd721c720de144782d7544442bf418eda0c8248a6b7b34aa89f0acc22955
- MD5 9121b5b51ce15caa6fa7e086a8b48bf2
- SHA1 93ceae990861ec2f4cad06c87170f9147d958ddc
- SHA512 7281c843807c98a7b9a0b860a1857a5275be3c65d5cfe811488b5a60d8af344dff628ae014cc4c705379a12d6c85d806e77cca0523c86c0c24ef5043c7d0bd5e
- SSDEEP 24576:22fx2Sn7EUWu+nRD6kVqq0alHHtr5/rHPmnwgpBTd7g9U:2en7EDu+nRDbttr5/rHPmwgpBTF4U
- TLSH T1F0658E01FC51D130D9AA58BB47AAE2BA271C3532072580F763F914B1AFA11D35BF9B87
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
3d:9e:17:aa:14:38:02:25:f4:cc:a4:c5:09:0c:e2:e0:5b:46:15:f7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Sep 28, 2025
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=Globalsign TSA for MS Authenticode Advanced - G4 - 2025,O=GlobalSign nv-sa,C=BE
Serial Number
01:5c:c0:8a:f3:9b:b4:53:73:96:89:c7:1a:82:9d:32
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 15, 2025 - Dec 10, 2034
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:5e:21:e8:3e:4f:82:88:70:9d:5a:d6
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 13, 2022 - Oct 16, 2025
Minor OS version
0
Major OS version
6
Entry point
715511
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Projects\RTSS737\RTSSHooks\Release\RTSSHooks.pdb
setupapi
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdA
shlwapi
PathRemoveExtensionA
PathRenameExtensionA
StrStrIA
PathIsRelativeA
PathStripPathA
PathMatchSpecA
PathRemoveFileSpecA
PathAddBackslashA
winmm
timeKillEvent
timeSetEvent
kernel32
CreateRemoteThread
OpenProcess
GetTickCount
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
VirtualAllocEx
VirtualFreeEx
WriteProcessMemory
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
WritePrivateProfileStringA
GetFileSize
ReadFile
OpenFile
QueryPerformanceCounter
QueryPerformanceFrequency
LoadLibraryA
GetSystemDirectoryA
FreeLibrary
GetVersionExA
CreateEventA
GetCurrentProcessId
SetEvent
ResetEvent
OpenEventA
MapViewOfFile
UnmapViewOfFile
OpenFileMappingA
SetFilePointer
WriteFile
OutputDebugStringA
GetCurrentThreadId
GetLocalTime
_lclose
GetEnvironmentVariableA
CreateFileA
DuplicateHandle
GetLastError
SetNamedPipeHandleState
Sleep
GetCurrentProcess
GetWindowsDirectoryA
CreateFileMappingA
WaitNamedPipeA
SetWaitableTimer
CreateWaitableTimerA
GetExitCodeProcess
InterlockedCompareExchange
ResumeThread
FlushInstructionCache
SetThreadContext
GetThreadContext
SuspendThread
GetCurrentThread
VirtualProtectEx
VirtualQueryEx
SetLastError
LoadLibraryExW
LoadLibraryExA
GetModuleHandleW
SwitchToThread
GetPrivateProfileStringA
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
InterlockedExchangeAdd
InterlockedDecrement
InterlockedIncrement
LocalAlloc
GetSystemDirectoryW
GetFileAttributesW
CreateFileW
lstrcmpA
LocalFree
FileTimeToSystemTime
GetModuleFileNameW
VerifyVersionInfoW
VerSetConditionMask
lstrcmpW
ExpandEnvironmentStringsW
GetFullPathNameW
OutputDebugStringW
CreateProcessW
CreateProcessA
RaiseException
GetSystemInfo
TlsGetValue
GetFileSizeEx
SetConsoleCtrlHandler
DeleteFileW
FlushFileBuffers
DecodePointer
ReadConsoleW
SetEndOfFile
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
TlsAlloc
SetFilePointerEx
CreateDirectoryW
WideCharToMultiByte
GetTimeZoneInformation
GetFileAttributesExW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
InitializeCriticalSectionEx
IsThreadAFiber
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetTempPathW
MultiByteToWideChar
GetStdHandle
HeapAlloc
HeapFree
GetModuleHandleExW
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
GetStringTypeW
HeapSize
HeapReAlloc
TlsSetValue
TlsFree
FindClose
FindFirstFileExW
FindNextFileW
SystemTimeToTzSpecificLocalTime
DeleteFileA
WriteConsoleW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetFileType
user32
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
MessageBeep
GetForegroundWindow
IsWindowVisible
DestroyWindow
CreateWindowExA
RegisterClassA
PostMessageA
SendMessageTimeoutA
SendMessageA
DrawIcon
IsRectEmpty
SubtractRect
IntersectRect
GetActiveWindow
GetClientRect
WindowFromDC
FindWindowA
GetMonitorInfoA
MonitorFromWindow
GetWindowThreadProcessId
GetClassNameA
FindWindowExA
GetDC
ReleaseDC
GetCursorPos
LoadCursorA
GetIconInfo
EnumDisplaySettingsA
GetAsyncKeyState
FillRect
RegisterWindowMessageA
OffsetRect
gdi32
TextOutA
GetTextMetricsA
SetTextColor
SetBkColor
Pie
GetTextExtentPoint32A
GetTextCharacterExtra
GetCharABCWidthsA
GetCharWidth32A
CreateSolidBrush
CreatePen
CreateFontA
CreateCompatibleBitmap
GetDeviceGammaRamp
SelectObject
GetDIBits
GetDeviceCaps
DeleteObject
DeleteDC
CreateDCA
CreateCompatibleDC
CreateBitmap
BitBlt
GetStockObject
BeginRecord
CleanupPreview
CopyFontTexture
DeleteProfile
DesktopVideoCapture
EndRecord
EnumProfiles
GetFlags
GetFnOffsetCacheErr
GetFontTextureWidth
GetPreviewStats
GetProfileProperty
InitFnOffsetCache
InitPreview
InjectProcess
InstallRTSSHook
IsCaptureInProgress
IsValidFnOffsetCache
LatencyMarker
LoadProfile
PTTEvent
RenderPreviewBeginD3D9
RenderPreviewEnd
ResetProfile
SaveProfile
ScreenCapture
SetFlags
SetProfileProperty
UninstallRTSSHook
UpdateProfiles
ValidateRuntimes
VideoCapture
VideoCaptureEx
_RTSSCBTProc@12
_RTSSRemoteProc@4
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
148KB
Virtual Size
147KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
15KB
Virtual Size
609KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.shared
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourd
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=24, id=259, version=33140,
count=190, id=261, version=33140,
count=23, id=260, version=33140,
count=2, id=253, version=35207,
count=26, id=259, version=35207,
count=19, id=260, version=35207,
count=1, id=244, version=40116,
count=40, id=261, version=35207,
count=1, id=245, version=40116,
count=1, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=22, id=260, version=30147,
count=13, id=239, version=40116,
count=259, id=1, productName=Unmarked objects,
count=3, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=66, id=261, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
RTSSHooks64.dll.copy
- IMPHASH f27593302cc9c4d52df1c3648de23763
- SHA256 68c496dea7ded5b8766092f0159f4e9ba3947df0829f594eb6981d2b06352ad5
- MD5 4d5a0642f13f995666e38348cae39f84
- SHA1 4b69def3d90ce9578ec7b85278435fe5554e52c8
- SHA512 f2ec07cd0dd834be6f63671e6c9aced8d3b2d170bd83f70290841af1823413f2015bb235bdc3c62bc86afcba5db0cca46edcf8324b0d8cb718a5e9d4930ce2d0
- SSDEEP 24576:wYXNwbH8o/DX7Hy2R+m/Zr6880777TaTNugcLTxdEDAW:wY9wb3LO2om/jlQNugcLTrK
- TLSH T1A2858D4B7AE812A4F0B7E179CA435606F1F2785403609BCF07A406E63F937E6567E392
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
1d:86:9b:53:cc:68:d8:d3:ec:3e:5f:fc:17:8f:d7:df:fb:5a:53:f0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Sep 28, 2025
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=Globalsign TSA for MS Authenticode Advanced - G4 - 2025,O=GlobalSign nv-sa,C=BE
Serial Number
01:5c:c0:8a:f3:9b:b4:53:73:96:89:c7:1a:82:9d:32
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 15, 2025 - Dec 10, 2034
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:5e:21:e8:3e:4f:82:88:70:9d:5a:d6
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 13, 2022 - Oct 16, 2025
Minor OS version
0
Major OS version
6
Entry point
796296
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects\RTSS737\RTSSHooks\Release\RTSSHooks.pdb
setupapi
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdA
shlwapi
PathRemoveExtensionA
PathRenameExtensionA
StrStrIA
PathIsRelativeA
PathStripPathA
PathMatchSpecA
PathRemoveFileSpecA
PathAddBackslashA
winmm
timeKillEvent
timeSetEvent
kernel32
CreateRemoteThread
OpenProcess
GetTickCount
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
VirtualAllocEx
VirtualFreeEx
WriteProcessMemory
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
WritePrivateProfileStringA
GetFileSize
ReadFile
OpenFile
QueryPerformanceCounter
QueryPerformanceFrequency
LoadLibraryA
GetSystemDirectoryA
FreeLibrary
GetVersionExA
CreateEventA
GetCurrentProcessId
SetEvent
ResetEvent
OpenEventA
MapViewOfFile
UnmapViewOfFile
OpenFileMappingA
SetFilePointer
WriteFile
OutputDebugStringA
GetCurrentThreadId
GetLocalTime
_lclose
GetEnvironmentVariableA
CreateFileA
DuplicateHandle
GetLastError
SetNamedPipeHandleState
Sleep
GetCurrentProcess
GetWindowsDirectoryA
CreateFileMappingA
WaitNamedPipeA
SetWaitableTimer
CreateWaitableTimerA
GetExitCodeProcess
ResumeThread
FlushInstructionCache
SetThreadContext
GetThreadContext
SuspendThread
GetCurrentThread
VirtualProtectEx
VirtualQueryEx
SetLastError
LoadLibraryExW
SwitchToThread
GetModuleHandleW
DeleteFileA
GetPrivateProfileStringA
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
LocalAlloc
GetSystemDirectoryW
GetFileAttributesW
CreateFileW
lstrcmpA
LocalFree
FileTimeToSystemTime
GetModuleFileNameW
VerifyVersionInfoW
VerSetConditionMask
GetFullPathNameW
OutputDebugStringW
CreateProcessW
CreateProcessA
RaiseException
GetSystemInfo
TlsAlloc
GetFileSizeEx
SetConsoleCtrlHandler
DeleteFileW
FlushFileBuffers
ReadConsoleW
SetEndOfFile
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
CreateDirectoryW
WideCharToMultiByte
GetTimeZoneInformation
GetFileAttributesExW
EnumSystemLocalesW
InitializeCriticalSectionAndSpinCount
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
InitializeCriticalSectionEx
IsThreadAFiber
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetTempPathW
MultiByteToWideChar
GetStdHandle
HeapAlloc
HeapFree
GetModuleHandleExW
GetFileType
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
GetStringTypeW
HeapSize
HeapReAlloc
TlsGetValue
TlsSetValue
TlsFree
FindClose
FindFirstFileExW
FindNextFileW
LoadLibraryExA
WriteConsoleW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
RtlUnwind
DeleteCriticalSection
SystemTimeToTzSpecificLocalTime
user32
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
MessageBeep
GetForegroundWindow
IsWindowVisible
DestroyWindow
CreateWindowExA
RegisterClassA
PostMessageA
SendMessageA
RegisterWindowMessageA
DrawIcon
OffsetRect
SendMessageTimeoutA
IntersectRect
GetActiveWindow
GetClientRect
WindowFromDC
FindWindowA
GetMonitorInfoA
MonitorFromWindow
GetWindowThreadProcessId
GetClassNameA
FindWindowExA
GetDC
ReleaseDC
GetCursorPos
LoadCursorA
GetIconInfo
EnumDisplaySettingsA
GetAsyncKeyState
FillRect
IsRectEmpty
SubtractRect
gdi32
TextOutA
GetTextMetricsA
SetTextColor
SetBkColor
Pie
GetTextExtentPoint32A
GetTextCharacterExtra
GetCharABCWidthsA
GetCharWidth32A
CreateSolidBrush
CreatePen
CreateFontA
CreateCompatibleBitmap
GetDeviceGammaRamp
SelectObject
GetDIBits
GetDeviceCaps
DeleteObject
DeleteDC
CreateDCA
CreateCompatibleDC
CreateBitmap
BitBlt
GetStockObject
BeginRecord
CleanupPreview
CopyFontTexture
DeleteProfile
DesktopVideoCapture
EndRecord
EnumProfiles
GetFlags
GetFnOffsetCacheErr
GetFontTextureWidth
GetPreviewStats
GetProfileProperty
InitFnOffsetCache
InitPreview
InjectProcess
InstallRTSSHook
IsCaptureInProgress
IsValidFnOffsetCache
LatencyMarker
LoadProfile
PTTEvent
RTSSCBTProc
RTSSRemoteProc
RenderPreviewBeginD3D9
RenderPreviewEnd
ResetProfile
SaveProfile
ScreenCapture
SetFlags
SetProfileProperty
UninstallRTSSHook
UpdateProfiles
ValidateRuntimes
VideoCapture
VideoCaptureEx
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
276KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
18KB
Virtual Size
730KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
83KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.shared
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourd
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.detourc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=189, id=261, version=33140,
count=21, id=260, version=33140,
count=18, id=259, version=33140,
count=3, id=253, version=35207,
count=11, id=259, version=35207,
count=18, id=260, version=35207,
count=1, id=244, version=40116,
count=43, id=261, version=35207,
count=1, id=245, version=40116,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=22, id=260, version=30147,
count=13, id=239, version=40116,
count=256, id=1, productName=Unmarked objects,
count=4, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=66, id=261, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=258, version=35217,
RTSSHooksLoader.exe
- IMPHASH 63b48b509e829eb8e3100a58a6814037
- SHA256 db81a28067419701e2c455b1cab322448517e8571338bbd1a18a7b6e4be0fea3
- MD5 c927eb3e90167b0fa7a87a64f2bf95c5
- SHA1 03f849af00473911516a2f1f030ba7454f2af412
- SHA512 0b0c5148339bd1387873afbeff6c657fe28f9ed35fa7768029f89e9d4970b8598bb9c0f01f81dd54436ffa6669debacaa977dd4be84b9eb7acaa4e3f1910d916
- SSDEEP 768:X1Lqh2ycAwqmWklL/87gDCg3B8BDPWViHfdOw6fhWWkuAsi2ApZLX:X1qcDAwPWkh/87geg3B88VeswUhHTitX
- TLSH T1DF634A83B93891A2E111C5349863C6FA9EB6AD616F55C0C3B2917F1E3C713D26A703DE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
44:b6:96:5d:19:b1:8f:2e:aa:1b:02:ea:cc:69:62:37:80:c3:4a:f6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Sep 28, 2025
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=Globalsign TSA for MS Authenticode Advanced - G4 - 2025,O=GlobalSign nv-sa,C=BE
Serial Number
01:5c:c0:8a:f3:9b:b4:53:73:96:89:c7:1a:82:9d:32
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 15, 2025 - Dec 10, 2034
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:5e:21:e8:3e:4f:82:88:70:9d:5a:d6
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 13, 2022 - Oct 16, 2025
Minor OS version
0
Major OS version
6
Entry point
10706
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Projects\RTSS737\RTSSHooksLoader\RTSSHooksLoader\Release\RTSSHooksLoader.pdb
psapi
EnumProcesses
mfc140
ord6323
ord14582
ord6324
ord14583
ord6322
ord14581
ord7964
ord12474
ord14380
ord11928
ord11927
ord2027
ord7905
ord12888
ord4082
ord4143
ord9353
ord14507
ord7886
ord14509
ord12485
ord12484
ord11671
ord5336
ord8285
ord12806
ord8347
ord8429
ord8420
ord2799
ord12948
ord11838
ord14131
ord8931
ord9165
ord8438
ord14223
ord12526
ord366
ord1070
ord6724
ord265
ord266
ord2241
ord11672
ord9096
ord12032
ord11881
ord14502
ord8922
ord12163
ord6947
ord10950
ord3844
ord3259
ord13798
ord12205
ord12201
ord12182
ord1739
ord1765
ord1751
ord12162
ord4920
ord4987
ord4932
ord4950
ord4944
ord4938
ord4997
ord4981
ord4926
ord5003
ord4958
ord4896
ord4911
ord4972
ord4493
ord9647
ord4485
ord3050
ord14510
ord7887
ord14508
ord6848
ord11663
ord13628
ord5911
ord2680
ord12067
ord3933
ord3364
ord3363
ord3258
ord12111
ord5228
ord5528
ord5739
ord9305
ord5504
ord5769
ord5231
ord5390
ord5210
ord7687
ord7688
ord7677
ord5388
ord8182
ord10207
ord9213
ord5894
ord9166
ord6836
ord7783
ord4870
ord310
ord9422
ord3825
ord12190
ord3830
ord8180
ord10383
ord1717
ord7619
ord12869
ord5742
ord10202
ord6832
ord4580
ord2344
ord11972
ord7961
ord305
ord5898
ord3005
ord300
ord10240
ord1469
ord994
ord7618
ord10330
ord6195
ord13681
ord3298
ord3295
ord1529
ord1044
ord8173
ord2759
ord14699
ord10237
ord10239
ord12194
ord316
ord1472
ord10236
ord10238
ord1772
ord5631
ord1000
ord1509
ord2484
ord2407
kernel32
OpenProcess
GetModuleHandleA
CloseHandle
GetModuleFileNameA
CreateFileMappingA
GetLastError
InitializeCriticalSectionEx
OutputDebugStringW
DeleteCriticalSection
GetPrivateProfileStringA
GetProcAddress
GetSystemTimeAsFileTime
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
InitializeSListHead
LoadLibraryA
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
user32
FindWindowA
RegisterWindowMessageA
EnableWindow
SendMessageTimeoutA
LoadCursorA
PostMessageA
GetDesktopWindow
GetWindowThreadProcessId
GetWindow
comctl32
InitCommonControlsEx
shlwapi
PathStripPathA
PathRemoveFileSpecA
vcruntime140
memset
__current_exception
__current_exception_context
_except_handler4_common
__CxxFrameHandler3
api-ms-win-crt-string-l1-1-0
strpbrk
strcpy_s
_stricmp
strcat_s
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-runtime-l1-1-0
_get_narrow_winmain_command_line
_controlfp_s
terminate
_register_thread_local_exe_atexit_callback
_c_exit
_configure_narrow_argv
_exit
exit
_initterm_e
_initterm
_initialize_onexit_table
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_narrow_environment
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
_setmbcp
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=253, version=35207,
count=4, id=259, version=35207,
count=13, id=260, version=35207,
count=30, id=261, version=35207,
count=4, id=257, version=35207,
count=17, id=257, version=33140,
count=281, id=1, productName=Unmarked objects,
count=3, id=261, version=35217,
count=5, id=265, version=35217,
count=1, id=255, version=35217,
count=1, id=151,
count=1, id=258, version=35217,
RTSSHooksLoader64.exe
- IMPHASH 96bb11249bf46314c31db47e58012519
- SHA256 6df2f26bf77de69a79fde6713589ebf548fdedb4f8196910a1a9a4b35ab1d800
- MD5 6b4a46e6f402e6a66a88887f6691d17f
- SHA1 a57603c590e0cca9afbbab78592f3dbed4bdcdc7
- SHA512 becfa17e7049af895610e4b14b622a57daf4a9a93b9a8ac13ac928c14eba5f4054328dc7f3baf24b62a08f0c39eaaf05e8f13060c5a0f28a9c4e627fa87e9b79
- SSDEEP 768:QF4yFo4g0a35d98KLxkPaxKunLxkn3dPgvfriHfdOwEWkuAsi2ApZLY:Y4yy3wQKo6Afresw9TitY
- TLSH T15C7307472A3580D6D212C1348CA2CFA9AD60FD629B55C5DB23B07B1F3D353E27E286D9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
15:63:61:90:1a:79:8b:1d:0f:84:0a:5e:5f:5b:ee:89:b7:d5:a4:9b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Sep 28, 2025
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=Globalsign TSA for MS Authenticode Advanced - G4 - 2025,O=GlobalSign nv-sa,C=BE
Serial Number
01:5c:c0:8a:f3:9b:b4:53:73:96:89:c7:1a:82:9d:32
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 15, 2025 - Dec 10, 2034
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:5e:21:e8:3e:4f:82:88:70:9d:5a:d6
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 13, 2022 - Oct 16, 2025
Minor OS version
0
Major OS version
6
Entry point
11036
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Projects\RTSS737\RTSSHooksLoader\RTSSHooksLoader\Release\RTSSHooksLoader.pdb
psapi
EnumProcesses
mfc140
ord2004
ord7637
ord12571
ord3941
ord4002
ord9049
ord14133
ord7619
ord14135
ord12171
ord12170
ord2437
ord5167
ord7989
ord12490
ord8050
ord8131
ord11366
ord2723
ord12631
ord11532
ord13766
ord8627
ord8861
ord8140
ord13857
ord12212
ord365
ord1057
ord6483
ord265
ord266
ord2368
ord8792
ord11719
ord11575
ord14128
ord8618
ord11850
ord6703
ord10644
ord8909
ord3166
ord13438
ord11892
ord11888
ord1695
ord1717
ord1743
ord1729
ord1750
ord4765
ord11614
ord4777
ord4795
ord4789
ord13331
ord4842
ord4826
ord4771
ord4848
ord11869
ord4741
ord4756
ord4817
ord4351
ord9343
ord4343
ord2962
ord14136
ord7620
ord14007
ord6607
ord11357
ord13284
ord5704
ord2627
ord11754
ord3804
ord3271
ord3270
ord3165
ord11798
ord5064
ord5347
ord5536
ord9001
ord5323
ord5566
ord5067
ord5213
ord5049
ord7430
ord7431
ord7420
ord5211
ord7890
ord9903
ord8862
ord6595
ord7519
ord4715
ord310
ord9118
ord3705
ord3710
ord4832
ord11615
ord3205
ord7364
ord1507
ord1032
ord316
ord1450
ord3202
ord7881
ord12160
ord2696
ord7688
ord14207
ord6100
ord14279
ord14209
ord6102
ord9933
ord14208
ord11877
ord7888
ord10079
ord11881
ord11849
ord12552
ord5539
ord9898
ord6591
ord4436
ord2310
ord11659
ord7685
ord305
ord5691
ord2917
ord300
ord6101
ord1447
ord9935
ord9934
ord3723
ord982
ord7363
ord10026
ord9932
ord14134
ord9936
ord5435
ord5687
ord4803
ord5982
ord4783
ord988
ord1487
ord11365
ord2207
ord8122
kernel32
OpenProcess
GetModuleHandleA
CloseHandle
GetModuleFileNameA
CreateFileMappingA
OutputDebugStringW
InitializeCriticalSectionEx
GetProcAddress
GetLastError
SetUnhandledExceptionFilter
DeleteCriticalSection
GetPrivateProfileStringA
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
LoadLibraryA
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
user32
FindWindowA
EnableWindow
SendMessageTimeoutA
GetDesktopWindow
LoadCursorA
PostMessageA
GetWindowThreadProcessId
RegisterWindowMessageA
GetWindow
comctl32
InitCommonControlsEx
shlwapi
PathStripPathA
PathRemoveFileSpecA
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception
__current_exception_context
__C_specific_handler
memset
memcpy
api-ms-win-crt-string-l1-1-0
strcat_s
strpbrk
strcpy_s
_stricmp
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-runtime-l1-1-0
terminate
_register_thread_local_exe_atexit_callback
_c_exit
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_setmbcp
_configthreadlocale
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
828B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
516B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=253, version=35207,
count=4, id=259, version=35207,
count=10, id=260, version=35207,
count=32, id=261, version=35207,
count=6, id=257, version=35207,
count=17, id=257, version=33140,
count=291, id=1, productName=Unmarked objects,
count=3, id=261, version=35217,
count=5, id=265, version=35217,
count=1, id=255, version=35217,
count=1, id=151,
count=1, id=258, version=35217,
RTUI.dll
- IMPHASH 1736c20c278ca344fece9599e128765d
- SHA256 a209ad1ddbc525aadd3000635ac5df95bc62359a59c2b1752c53f068a975d6d2
- MD5 44f27a890993ea2f83f449afc3e58014
- SHA1 4e986eff37c97315a205a8cebd58a19077ecccd6
- SHA512 572104178ae15a5d6a4abe0777a079b986ee78b2d7a53ccc17cb2319618c3db7cf7310f554b5909d816125cb5cdb4c9d9a4e805bff456137e5402a9c327c5614
- SSDEEP 12288:Bg1ldQwfUMzr4lEHL3msJDbwJIk7bk4ZukkLEcOOiNTZ557lI:EkwfUor4wL3tJDU7YEcOOKTZ55hI
- TLSH T1D6949E31F9014073E5D68272DABC8FB916BEA6310B3D84D7D7C5686A19306E36B35B0B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
294751
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Projects\RTSS737\RTUISDK\lib\free\RTUI.pdb
shlwapi
PathRemoveFileSpecA
PathFileExistsA
PathStripPathA
PathIsRelativeA
winmm
timeSetEvent
timeKillEvent
rtfc
?GetCount@CPtrListLite@@QAEKXZ
?Sort@CPtrListLite@@QAEXHP6AHPAUPTR_LIST_NODE@@0@Z@Z
?GetTail@CPtrListLite@@QAEPAUPTR_LIST_NODE@@XZ
??YCStringLite@@QAEABV0@PBD@Z
?Left@CStringLite@@QBE?AV1@H@Z
??YCStringLite@@QAEABV0@D@Z
?GetParams@CTextFile@@SAHHHPBDAAVCStringLite@@0H@Z
?IsEmpty@CStringLite@@QBEHXZ
??0CTextFile@@QAE@XZ
?GetParams@CTextFile@@SAHPBDAAVCStringLite@@10H@Z
?GetParam@CTextFile@@SAHHPBDAAVCStringLite@@0H@Z
?ReadSection@CTextFile@@UAEHPBDAAVCStringLite@@@Z
?ReadString@CTextFile@@QAEHAAVCStringLite@@@Z
?Home@CTextFile@@QAEXXZ
?DestroyCache@CTextFile@@QAEXXZ
?PrecacheSections@CTextFile@@QAEXXZ
?Precache@CTextFile@@QAEXPBD@Z
?Open@CTextFile@@QAEHPBD@Z
?Format@CStringLite@@QAAXPBDZZ
?GetLength@CStringLite@@QBEHXZ
??H@YA?AVCStringLite@@ABV0@PBD@Z
??H@YA?AVCStringLite@@ABV0@0@Z
??YCStringLite@@QAEABV0@ABV0@@Z
??0CStringLite@@QAE@PBDH@Z
?RemoveAt@CPtrListLite@@QAEXPAUPTR_LIST_NODE@@@Z
?GetValue@CTextFile@@SAHPBDAAKK@Z
??1CTokenString@@UAE@XZ
??0CTokenString@@QAE@XZ
?strtok@CTokenString@@QAEPADPBD0@Z
??4CTextFile@@QAEAAV0@ABV0@@Z
??0CTextFile@@QAE@ABV0@@Z
??1CTextFile@@UAE@XZ
??4CPtrListLite@@QAEAAV0@ABV0@@Z
??0CPtrListLite@@QAE@ABV0@@Z
??1CPtrListLite@@UAE@XZ
??0CPtrListLite@@QAE@XZ
?RemoveAll@CPtrListLite@@QAEXXZ
?GetHead@CPtrListLite@@QAEPAUPTR_LIST_NODE@@XZ
?AddTail@CPtrListLite@@QAEPAUPTR_LIST_NODE@@PAX@Z
??1CStringLite@@UAE@XZ
??4CStringLite@@QAEABV0@ABV0@@Z
??4CStringLite@@QAEABV0@PBD@Z
??0CStringLite@@QAE@ABV0@@Z
??0CStringLite@@QAE@XZ
??1CCRC32@@UAE@XZ
??0CCRC32@@QAE@XZ
?Calc@CCRC32@@QAEKKPAEK@Z
??0CStringLite@@QAE@PBD@Z
mfc140
ord13628
ord5911
ord2680
ord12067
ord3933
ord3363
ord3364
ord3258
ord12111
ord1000
ord6836
ord5228
ord5528
ord5739
ord9305
ord5504
ord5231
ord5390
ord5210
ord7687
ord7688
ord7677
ord5388
ord8182
ord12194
ord1389
ord890
ord4865
ord12529
ord321
ord12162
ord12870
ord998
ord7406
ord5742
ord7452
ord10202
ord3627
ord2344
ord7619
ord6195
ord13681
ord3298
ord3295
ord10207
ord8173
ord2759
ord2387
ord11663
ord10237
ord10239
ord10238
ord10236
ord10240
ord5631
ord11671
ord11672
ord9096
ord12032
ord3830
ord2394
ord1526
ord300
ord14508
ord4866
ord1140
ord2880
ord14520
ord12294
ord5862
ord12989
ord11907
ord500
ord4807
ord1044
ord316
ord6724
ord1509
ord266
ord265
ord2383
ord3825
ord11881
ord14502
ord8922
ord12163
ord6947
ord9422
ord10950
ord9213
ord3259
ord13798
ord12205
ord12201
ord1717
ord1739
ord7887
ord14699
ord2748
ord14510
ord3050
ord4485
ord9647
ord5769
ord4493
ord4972
ord4911
ord4896
ord8713
ord13475
ord14048
ord4870
ord4958
ord5003
ord4926
ord8735
ord4981
ord4997
ord2298
ord4639
ord6533
ord4938
ord3874
ord2520
ord6540
ord1751
ord568
ord4944
ord4950
ord4932
ord11917
ord4987
ord4920
ord1446
ord14592
ord973
ord5898
ord1696
ord310
ord305
ord3005
ord2370
ord2263
ord485
ord2241
ord1529
ord3844
ord1471
ord5894
ord1772
ord6848
ord12182
ord1507
ord12191
ord10384
ord4582
ord1472
ord8180
ord9166
ord1765
ord1192
kernel32
CreateProcessA
GetModuleFileNameA
DecodePointer
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
ExitProcess
OutputDebugStringA
SetLastError
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
CloseHandle
GetModuleHandleW
LoadLibraryW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetFullPathNameA
GetLastError
WaitForMultipleObjects
CreateEventA
WaitForSingleObject
ResetEvent
SetEvent
GetTickCount
ResumeThread
LeaveCriticalSection
SetThreadPriority
GetPrivateProfileStringA
OutputDebugStringW
RaiseException
EnterCriticalSection
GetPrivateProfileIntA
FindResourceA
LockResource
GetModuleHandleA
LoadResource
user32
GetDC
ReleaseDC
RegisterWindowMessageA
PostMessageA
EnableWindow
GetUpdateRect
RedrawWindow
GetClientRect
CopyRect
LoadCursorA
PeekMessageA
GetCursorPos
ScreenToClient
IntersectRect
UnionRect
PtInRect
UnregisterClassA
EqualRect
ClientToScreen
GetWindowRect
LockWindowUpdate
SetWindowRgn
ReleaseCapture
SetCapture
GetFocus
SetLayeredWindowAttributes
UpdateLayeredWindow
IsWindow
SendMessageA
gdi32
GetDeviceCaps
CreateBitmap
CreateCompatibleDC
CreateDIBitmap
CreatePalette
CreateRectRgn
DeleteDC
DeleteObject
GetCurrentObject
GetDIBits
SelectObject
StretchBlt
StretchDIBits
SetStretchBltMode
SetDIBits
CreateFontA
BitBlt
CombineRgn
oleaut32
SysFreeString
vcruntime140
__CxxFrameHandler3
longjmp
_setjmp3
memcpy
memset
__std_terminate
_purecall
__RTDynamicCast
strchr
__current_exception
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
memmove
api-ms-win-crt-string-l1-1-0
strcpy_s
strcat_s
_stricmp
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-filesystem-l1-1-0
_mkdir
_splitpath_s
remove
_stat64i32
api-ms-win-crt-stdio-l1-1-0
fread
_fseeki64
__stdio_common_vfprintf
__acrt_iob_func
fopen_s
ferror
fopen
__stdio_common_vsscanf
fflush
freopen_s
fclose
_ftelli64
fwrite
api-ms-win-crt-heap-l1-1-0
realloc
malloc
free
_recalloc
api-ms-win-crt-time-l1-1-0
_utime64
_gmtime64
_time64
_mktime64
_localtime64_s
api-ms-win-crt-convert-l1-1-0
wcstombs_s
atof
api-ms-win-crt-math-l1-1-0
modf
floor
_except1
frexp
_libm_sse2_pow_precise
api-ms-win-crt-runtime-l1-1-0
abort
strerror
_errno
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
_initterm
_initterm_e
_invalid_parameter_noinfo
terminate
??0CDIB@@QAE@XZ
??0CDIBCache@@QAE@ABV0@@Z
??0CDIBCache@@QAE@XZ
??0CDIBDC@@QAE@XZ
??0CDIBWnd@@QAE@XZ
??0CDIBWndThread@@IAE@XZ
??0CDIBWndThread@@QAE@PAVCDIBWnd@@@Z
??0CLauncherThread@@IAE@XZ
??0CLauncherThread@@QAE@PAVCWnd@@PAVCLauncherThreadOwner@@PBDK@Z
??0CLauncherThreadOwner@@QAE@ABV0@@Z
??0CLauncherThreadOwner@@QAE@XZ
??0CLayeredWindowDC@@QAE@ABV0@@Z
??0CLayeredWindowDC@@QAE@XZ
??0CMMTimer@@QAE@ABV0@@Z
??0CMMTimer@@QAE@XZ
??0CSkin@@QAE@ABV0@@Z
??0CSkin@@QAE@XZ
??0CSkinnedButton@@QAE@ABV0@@Z
??0CSkinnedButton@@QAE@XZ
??0CSkinnedControl@@QAE@ABV0@@Z
??0CSkinnedControl@@QAE@XZ
??0CSkinnedIndicator@@QAE@XZ
??0CSkinnedIndicatorSource@@QAE@ABV0@@Z
??0CSkinnedIndicatorSource@@QAE@XZ
??0CSkinnedPlaceholder@@QAE@ABV0@@Z
??0CSkinnedPlaceholder@@QAE@XZ
??0CSkinnedSite@@QAE@ABV0@@Z
??0CSkinnedSite@@QAE@XZ
??0CSkinnedSlider@@QAE@ABV0@@Z
??0CSkinnedSlider@@QAE@XZ
??0CSkinnedText@@QAE@XZ
??0CSkinnedWnd@@QAE@XZ
??0CValueClipper@@QAE@ABV0@@Z
??0CValueClipper@@QAE@XZ
??1CDIB@@UAE@XZ
??1CDIBCache@@UAE@XZ
??1CDIBDC@@UAE@XZ
??1CDIBWnd@@UAE@XZ
??1CDIBWndThread@@MAE@XZ
??1CLauncherThread@@UAE@XZ
??1CLauncherThreadOwner@@UAE@XZ
??1CLayeredWindowDC@@UAE@XZ
??1CMMTimer@@UAE@XZ
??1CSkin@@UAE@XZ
??1CSkinnedButton@@UAE@XZ
??1CSkinnedControl@@UAE@XZ
??1CSkinnedIndicator@@UAE@XZ
??1CSkinnedIndicatorSource@@UAE@XZ
??1CSkinnedPlaceholder@@UAE@XZ
??1CSkinnedSite@@UAE@XZ
??1CSkinnedSlider@@UAE@XZ
??1CSkinnedText@@UAE@XZ
??1CSkinnedWnd@@UAE@XZ
??1CValueClipper@@UAE@XZ
??4CDIBCache@@QAEAAV0@ABV0@@Z
??4CLauncherThreadOwner@@QAEAAV0@ABV0@@Z
??4CLayeredWindowDC@@QAEAAV0@ABV0@@Z
??4CMMTimer@@QAEAAV0@ABV0@@Z
??4CSkin@@QAEAAV0@ABV0@@Z
??4CSkinnedButton@@QAEAAV0@ABV0@@Z
??4CSkinnedControl@@QAEAAV0@ABV0@@Z
??4CSkinnedIndicatorSource@@QAEAAV0@ABV0@@Z
??4CSkinnedPlaceholder@@QAEAAV0@ABV0@@Z
??4CSkinnedSite@@QAEAAV0@ABV0@@Z
??4CSkinnedSlider@@QAEAAV0@ABV0@@Z
??4CValueClipper@@QAEAAV0@ABV0@@Z
??_7CDIB@@6B@
??_7CDIBCache@@6B@
??_7CDIBDC@@6B@
??_7CDIBWnd@@6B@
??_7CDIBWndThread@@6B@
??_7CLauncherThread@@6B@
??_7CLauncherThreadOwner@@6B@
??_7CLayeredWindowDC@@6B@
??_7CMMTimer@@6B@
??_7CSkin@@6B@
??_7CSkinnedButton@@6B@
??_7CSkinnedControl@@6B@
??_7CSkinnedIndicator@@6B@
??_7CSkinnedIndicatorSource@@6B@
??_7CSkinnedPlaceholder@@6B@
??_7CSkinnedSite@@6B@
??_7CSkinnedSlider@@6B@
??_7CSkinnedText@@6B@
??_7CSkinnedWnd@@6B@
??_7CValueClipper@@6B@
?AddControl@CSkinnedWnd@@QAEHPAVCSkinnedControl@@H@Z
?AddDIB@CDIBCache@@QAEPAVCDIB@@PBDPAVCSkin@@0@Z
?AddDIB@CDIBCache@@QAEXPBDPAVCDIB@@K@Z
?AddDirtyRect@CSkinnedWnd@@QAEXPAVCRect@@@Z
?AlphaBlt@CDIB@@QAEHPAV1@0JJJJJJK@Z
?Animate@CSkinnedButton@@QAEHXZ
?Animate@CSkinnedIndicator@@QAEHXZ
?Animate@CSkinnedText@@QAEXXZ
?AppendPAK@CDIB@@QAEHPAVCSZArray@@PBDH@Z
?ApplyBitmapEffect@CSkin@@QAEHPBDPAVCDIB@@@Z
?AsyncPrepare@CDIBWnd@@QAEXXZ
?AsyncPresent@CDIBWnd@@QAEXXZ
?AsyncUpdate@CDIBWndThread@@QAEXXZ
?AsyncUpdateBackbuffer@CDIBWnd@@QAEXKK@Z
?Attach@CDIB@@QAEHPAV1@H@Z
?AttachDIB@CDIBWnd@@QAEHPAVCDIB@@@Z
?Bar@CDIB@@QAEHJJJJJ@Z
?BeginRedrawDirtyControls@CSkinnedWnd@@QAEXXZ
?Blt@CDIB@@QAEHPAV1@JJJJJJ@Z
?Blur9Tap@CDIB@@QAEHXZ
?CalcIndicatorValue@CSkinnedIndicatorSource@@UAEMM@Z
?CalcTimerPeriod@CSkinnedWnd@@QAEKXZ
?Capture@CDIB@@QAEHPAVCDC@@KK@Z
?CaptureDesktop@CDIB@@QAEHVCRect@@@Z
?ChangeRgn@CSkinnedWnd@@QAEXXZ
?ClientToSkin@CSkinnedWnd@@QAE?AVCPoint@@V2@@Z
?ClientToSkin@CSkinnedWnd@@QAE?AVCRect@@V2@@Z
?ClientToSkin@CSkinnedWnd@@QAEHH@Z
?ClipDWORD@CValueClipper@@SAKKKK@Z
?ClipFloat@CValueClipper@@SAMMMM@Z
?ClipInt@CValueClipper@@SAHHHH@Z
?ClipLong@CValueClipper@@SAJJJJ@Z
?ColorKeyBlt@CDIB@@QAEHPAV1@JJJJJJK@Z
?Compile@CSkin@@QAEHPBDK@Z
?CompressToPNG@CDIB@@QAEXXZ
?ConvertHSLToRGB@CDIB@@QAEXPAK00000@Z
?ConvertRGBToHSL@CDIB@@QAEXPAK00000@Z
?ConvertTo256Color@CDIB@@QAEHXZ
?ConvertTo256ColorHelper@CDIB@@KAHPBX0@Z
?ConvertToAlpha@CDIB@@QAEHXZ
?ConvertToGreyscale@CDIB@@QAEHXZ
?ConvertToHiColor@CDIB@@QAEHH@Z
?ConvertToTrueColor@CDIB@@QAEHXZ
?CopyCompressed@CDIB@@QAEXKPAEK@Z
?CopyDIB@CDIB@@QAEHPAV1@@Z
?Create@CDIB@@QAEHJJGK@Z
?Create@CDIBWnd@@QAEHKABUtagRECT@@PAVCWnd@@I@Z
?Create@CMMTimer@@QAEHIIKP6AXK@Z@Z
?Create@CMMTimer@@QAEHIIKPAUHWND__@@IIJ@Z
?Create@CSkinnedControl@@QAEHPAVCSkin@@PBDK1KH@Z
?Create@CSkinnedWnd@@UAEHPAVCSkin@@PBDK@Z
?CreateAdditionalButtons@CSkinnedWnd@@QAEHPAVCSkin@@PBDKHH@Z
?CreateAdditionalControls@CSkinnedWnd@@QAEHPAVCSkin@@PBDKHH@Z
?CreateAdditionalIndicator@CSkinnedWnd@@QAEHPAVCSkin@@PBDK11HH@Z
?CreateAdditionalIndicators@CSkinnedWnd@@QAEHPAVCSkin@@PBDKHH@Z
?CreateBitmap@CDIB@@QAEPAUHBITMAP__@@PAUHDC__@@@Z
?CreateBitmap@CDIB@@QAEPAUHBITMAP__@@PAVCDC@@@Z
?CreateDCA@CDIBDC@@QAEXXZ
?CreateDCA@CLayeredWindowDC@@QAEXPAVCDIB@@0KKK@Z
?CreateDCA@CSkinnedIndicator@@QAEXK@Z
?CreateFontA@CSkinnedText@@QAEHPAVCSkin@@PBD@Z
?CreateObject@CDIBWndThread@@SGPAVCObject@@XZ
?CreateObject@CLauncherThread@@SGPAVCObject@@XZ
?CreatePAK@CDIB@@SAJPBD0@Z
?CreatePalette@CDIB@@QAEPAUHPALETTE__@@XZ
?CreateRgn@CDIB@@QAEPAUHRGN__@@KK@Z
?CreateThread@CDIBWnd@@QAEXXZ
?CreateTimer@CSkinnedWnd@@QAEKK@Z
?Decompile@CSkin@@QAEHPBDK@Z
?DefWindowProcA@CDIBWnd@@UAEJIIJ@Z
?DefWindowProcA@CSkinnedWnd@@MAEJIIJ@Z
?DeleteDC@CDIBDC@@QAEXXZ
?DeleteDC@CLayeredWindowDC@@QAEXXZ
?Destroy@CDIBWndThread@@QAEXXZ
?Destroy@CSkinnedWnd@@QAEXH@Z
?DestroyAdditionalControls@CSkinnedWnd@@QAEXXZ
?DestroyCompressed@CDIB@@QAEXXZ
?DestroyDIB@CDIB@@QAEHXZ
?DestroyDirtyRects@CSkinnedWnd@@QAEXXZ
?DestroyImage@CDIB@@QAEHXZ
?DestroyPalette@CDIB@@QAEHXZ
?DestroyThread@CDIBWnd@@QAEXXZ
?DetachDIB@CDIBWnd@@QAEXXZ
?DisplayMessage@CSkinnedWnd@@UAEHPBDK@Z
?DoEdit@CSkinnedText@@QAEXXZ
?Draw@CSkinnedButton@@UAEXPAVCDIB@@0@Z
?Draw@CSkinnedIndicator@@UAEXPAVCDIB@@0@Z
?Draw@CSkinnedIndicatorSource@@UAEXPAVCDIB@@0@Z
?Draw@CSkinnedPlaceholder@@UAEXPAVCDIB@@0@Z
?Draw@CSkinnedSite@@UAEXPAVCDIB@@0@Z
?Draw@CSkinnedSlider@@UAEXPAVCDIB@@0@Z
?Draw@CSkinnedText@@UAEXPAVCDIB@@0@Z
?Dump@CDIBCache@@QAEXPBD@Z
?DumpCache@CSkinnedWnd@@QAEXPBD@Z
?EatMessages@CMMTimer@@QAEHXZ
?Emboss@CDIB@@QAEHEEEE@Z
?Enable@CSkinnedControl@@QAEHH@Z
?EnableAnimtation@CSkinnedIndicator@@QAEXH@Z
?EnableClickPos@CSkinnedSlider@@QAEXH@Z
?EnableRedraw@CSkinnedWnd@@QAEXH@Z
?EnableRedrawControls@CSkinnedWnd@@QAEXH@Z
?EncryptDecryptHeader@CSkin@@QAEXPAEK0K@Z
?EncryptDecryptHeader@CSkin@@QAEXPAVCSZArray@@@Z
?EndEdit@CSkinnedText@@QAEXH@Z
?EndRedrawDirtyControls@CSkinnedWnd@@QAEXXZ
?ExitInstance@CDIBWndThread@@UAEHXZ
?ExitInstance@CLauncherThread@@UAEHXZ
?ExtractAlpha@CDIB@@QAEHXZ
?FastCopyDIB@CDIB@@QAEHPAV1@@Z
?FastResizeA8R8G8B8@CDIB@@SAXPAEKKK0KKK@Z
?FastResizeR8G8B8@CDIB@@SAXPAEKKK0KKK@Z
?FastResizeR8G8B8@CDIB@@SAXPAEKKK0KKKK@Z
?FillBitmapInfoHeader@CDIB@@QAEXPAUtagBITMAPINFOHEADER@@@Z
?FindDIB@CDIBCache@@QAEPAVCDIB@@PBD@Z
?FixSize@CSkinnedControl@@QAEXPAVCDIB@@0@Z
?FixSizes@CSkinnedSite@@QAEXXZ
?FlushDC@CDIBDC@@QAEXXZ
?FlushDIB@CDIBDC@@QAEXXZ
?GetAdditionalError@CSkin@@QAEPBDXZ
?GetAlpha@CSkinnedControl@@QAEKXZ
?GetAlphaPath@CSkinnedSlider@@QAE?AVCPoint@@V2@@Z
?GetAnimationFrame@CSkinnedButton@@QAEKXZ
?GetAnimationFrames@CSkinnedButton@@QAEKXZ
?GetAsyncScaling@CDIBWnd@@QAEKXZ
?GetBackbuffer@CDIBWnd@@QAEHXZ
?GetBaseColorKey@CSkinnedWnd@@QAEHAAK@Z
?GetBgndRect@CSkinnedSlider@@AAE?AVCRect@@XZ
?GetBitmap@CLayeredWindowDC@@QAEPAUHBITMAP__@@XZ
?GetBitmapFilenameWithEffects@CSkin@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBDPAH@Z
?GetBltHitCount@CDIB@@QAEJPAV1@JJJJJJJJ@Z
?GetCapturedControl@CSkinnedWnd@@QAEPAVCSkinnedControl@@XZ
?GetClassNameA@CSkinnedButton@@UAE?AVCStringLite@@XZ
?GetClassNameA@CSkinnedIndicator@@UAE?AVCStringLite@@XZ
?GetClassNameA@CSkinnedIndicatorSource@@UAE?AVCStringLite@@XZ
?GetClassNameA@CSkinnedPlaceholder@@UAE?AVCStringLite@@XZ
?GetClassNameA@CSkinnedSite@@UAE?AVCStringLite@@XZ
?GetClassNameA@CSkinnedSlider@@UAE?AVCStringLite@@XZ
?GetClassNameA@CSkinnedText@@UAE?AVCStringLite@@XZ
?GetCommonParamsNum@CSkinnedControl@@SAKK@Z
?GetCompatibilityFlags@CSkinnedWnd@@QAEKXZ
?GetControlByID@CSkinnedWnd@@QAEPAVCSkinnedControl@@K@Z
?GetControlByName@CSkinnedWnd@@QAEPAVCSkinnedControl@@PBD@Z
?GetControlRect@CSkinnedControl@@QAE?AVCRect@@XZ
?GetControlRectInvalidated@CSkinnedControl@@QAE?AVCRect@@XZ
?GetControlRectRelative@CSkinnedControl@@QAE?AVCRect@@XZ
?GetDC@CDIBDC@@QAEPAUHDC__@@XZ
?GetDC@CLayeredWindowDC@@QAEPAUHDC__@@XZ
?GetDC@CSkinnedIndicator@@QAEPAVCDIBDC@@H@Z
?GetDIB@CSkinnedButton@@AAEPAVCDIB@@XZ
?GetDIB@CSkinnedIndicator@@QAEPAVCDIB@@XZ
?GetDIB@CSkinnedSlider@@AAEPAVCDIB@@XZ
?GetDIBAlpha@CSkinnedButton@@AAEPAVCDIB@@XZ
?GetDIBAlpha@CSkinnedIndicator@@QAEPAVCDIB@@XZ
?GetDIBAlpha@CSkinnedSlider@@AAEPAVCDIB@@XZ
?GetDIBAlphaBeforeClick@CSkinnedButton@@AAEPAVCDIB@@XZ
?GetDIBCache@CSkinnedControl@@QAEPAVCDIBCache@@XZ
?GetDepth@CDIB@@QAEGXZ
?GetDragRect@CSkinnedSlider@@AAE?AVCRect@@XZ
?GetEditAnimationFrames@CSkinnedText@@QAEKXZ
?GetEditCursor@CSkinnedText@@QAEDXZ
?GetEditMask@CSkinnedText@@QAEPBDXZ
?GetEditTextLen@CSkinnedText@@QAEHXZ
?GetFileType@CDIB@@QAEKPBD@Z
?GetFormat@CSkin@@QAEKXZ
?GetHeaderBitmapsSectionName@CSkin@@QAEPBDXZ
?GetHeaderGlobalSectionName@CSkin@@QAEPBDXZ
?GetHeight@CDIB@@QAEJXZ
?GetHost@CSkin@@QAEPBDXZ
?GetHottrackControl@CSkinnedWnd@@QAEPAVCSkinnedControl@@XZ
?GetID@CSkinnedControl@@QAEKXZ
?GetImage@CDIB@@QAEPAEXZ
?GetIndicatorValue@CSkinnedControl@@UAEMK@Z
?GetIndicatorValue@CSkinnedIndicatorSource@@UAEMK@Z
?GetIndicatorValue@CSkinnedSlider@@UAEMK@Z
?GetKeyboardFocus@CSkinnedWnd@@QAEPAVCSkinnedControl@@XZ
?GetLastError@CDIB@@QAEHXZ
?GetLauncherThread@CLauncherThreadOwner@@QAEPAVCLauncherThread@@XZ
?GetLayeredWindowAlpha@CSkinnedWnd@@QAEKXZ
?GetLayeredWindowMode@CSkinnedWnd@@QAEKXZ
?GetLayout@CSkinnedWnd@@QAEKXZ
?GetMMTimerMode@CMMTimer@@QAEKXZ
?GetMessageMap@CDIBWnd@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CDIBWndThread@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CLauncherThread@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CSkinnedWnd@@MBEPBUAFX_MSGMAP@@XZ
?GetName@CSkinnedControl@@QAEPBDXZ
?GetName@CSkinnedWnd@@QAEPBDXZ
?GetNearestColor@CDIB@@QAEHPAUtagPALETTEENTRY@@@Z
?GetNearestColor@CDIB@@SAHPAUtagPALETTEENTRY@@H0@Z
?GetOwner@CDIB@@QAEPAVCDIBWnd@@XZ
?GetPAK@CSkin@@QAEPAVCSZArray@@XZ
?GetPage@CSkinnedSlider@@QAEKXZ
?GetPalette@CDIB@@QAEPAUtagPALETTEENTRY@@XZ
?GetPaletteSize@CDIB@@QAEHXZ
?GetParam@CSkinnedIndicator@@QAEHHAAVCStringLite@@@Z
?GetParam@CSkinnedPlaceholder@@QAEHHAAVCStringLite@@@Z
?GetParams@CSkinnedIndicator@@QAEPBDXZ
?GetParams@CSkinnedPlaceholder@@QAEPBDXZ
?GetPeriod@CMMTimer@@QAEIXZ
?GetPixel@CDIB@@QAEHHHAAK@Z
?GetPoint@CSkinnedSlider@@QAE?AVCPoint@@XZ
?GetPos@CSkinnedSlider@@QAEJXZ
?GetRGBDifference@CDIB@@SAHPAUtagPALETTEENTRY@@0@Z
?GetRect@CDIB@@QAEXPAVCRect@@@Z
?GetReplace@CSkinnedText@@QAEEE@Z
?GetRuntimeClass@CDIBWndThread@@UBEPAUCRuntimeClass@@XZ
?GetRuntimeClass@CLauncherThread@@UBEPAUCRuntimeClass@@XZ
?GetSSAAHeight@CDIBDC@@QAEKXZ
?GetSSAAWidth@CDIBDC@@QAEKXZ
?GetScaleFactor@CSkinnedWnd@@QAEKXZ
?GetScalingMode@CDIBWnd@@QAEKXZ
?GetSite@CSkinnedControl@@QAEPAVCSkinnedSite@@XZ
?GetSize@CDIB@@QAEKXZ
?GetSizeB@CDIB@@QAEKXZ
?GetSourceControl@CSkinnedIndicator@@QAEPAVCSkinnedControl@@XZ
?GetState@CSkinnedButton@@QAEKXZ
?GetStates@CSkinnedButton@@QAEKXZ
?GetStrFilter@CDIB@@SAPADXZ
?GetText@CSkinnedText@@QAE?AVCStringLite@@XZ
?GetThisClass@CDIBWndThread@@SGPAUCRuntimeClass@@XZ
?GetThisClass@CLauncherThread@@SGPAUCRuntimeClass@@XZ
?GetThisMessageMap@CDIBWnd@@KGPBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CDIBWndThread@@KGPBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CLauncherThread@@KGPBUAFX_MSGMAP@@XZ
?GetThisMessageMap@CSkinnedWnd@@KGPBUAFX_MSGMAP@@XZ
?GetThread@CDIBWnd@@QAEPAVCDIBWndThread@@XZ
?GetTimerPeriod@CSkinnedControl@@QAEKXZ
?GetTimerRes@CSkinnedWnd@@QAEHXZ
?GetWidth@CDIB@@QAEJXZ
?GetWidthB@CDIB@@QAEJXZ
?GetWnd@CSkin@@QAEPAVCSkinnedWnd@@XZ
?GetWnd@CSkinnedControl@@QAEPAVCSkinnedWnd@@XZ
?GetZOrder@CSkinnedControl@@QAEKXZ
?HitTest@CSkinnedButton@@UAEHVCPoint@@K@Z
?HitTest@CSkinnedControl@@UAEHVCPoint@@K@Z
?HitTest@CSkinnedPlaceholder@@UAEHVCPoint@@K@Z
?HitTest@CSkinnedSite@@UAEHVCPoint@@K@Z
?HitTest@CSkinnedSlider@@UAEHVCPoint@@K@Z
?HitTest@CSkinnedText@@UAEHVCPoint@@K@Z
?HitTest@CSkinnedWnd@@QAEPAVCSkinnedControl@@VCPoint@@K@Z
?HitTestBase@CSkinnedWnd@@QAEHVCPoint@@K@Z
?InitDivLookup@CDIB@@QAEXXZ
?InitHeaderType@CSkin@@QAEHK@Z
?InitInstance@CDIBWndThread@@UAEHXZ
?InitInstance@CLauncherThread@@UAEHXZ
?InitResize@CDIB@@SAXPAK00000KKKKKKK@Z
?Invalidate@CSkinnedControl@@QAEXH@Z
?IsActive@CMMTimer@@QAEHXZ
?IsAlphaPath@CSkinnedSlider@@QAEHXZ
?IsAnimationEnabled@CSkinnedIndicator@@QAEHXZ
?IsBlind@CSkinnedIndicator@@QAEHXZ
?IsCaptured@CSkinnedControl@@QAEHXZ
?IsCaptured@CSkinnedWnd@@QAEHXZ
?IsCheckbox@CSkinnedButton@@QAEHXZ
?IsCmdLine@CSkinnedButton@@QAEHXZ
?IsCompressed@CDIB@@QAEHXZ
?IsEditMode@CSkinnedText@@QAEHXZ
?IsEditing@CSkinnedText@@QAEHXZ
?IsEnabled@CSkinnedControl@@QAEHXZ
?IsGDI@CSkinnedText@@QAEHXZ
?IsHorizontal@CSkinnedIndicator@@QAEHXZ
?IsHorizontal@CSkinnedSlider@@QAEHXZ
?IsHottrack@CSkinnedControl@@QAEHXZ
?IsIdle@CDIBWndThread@@QAEHXZ
?IsIntersected@CSkinnedControl@@QAEHPAVCRect@@@Z
?IsInverted@CSkinnedIndicator@@QAEHXZ
?IsKeyboardFocusCaptured@CSkinnedControl@@UAEHXZ
?IsKeyboardFocusCaptured@CSkinnedText@@UAEHXZ
?IsKeyboardFocusCaptured@CSkinnedWnd@@QAEHXZ
?IsNative@CSkin@@QAEHXZ
?IsPressed@CSkinnedButton@@QAEHXZ
?IsRedrawControlsEnabled@CSkinnedWnd@@QAEHXZ
?IsRedrawEnabled@CSkinnedWnd@@QAEHXZ
?IsSmooth@CSkinnedIndicator@@QAEHXZ
?IsSpin@CSkinnedButton@@QAEHXZ
?IsSupportedFormat@CSkin@@IAEHK@Z
?IsSupportedFormat@CSkin@@QAEHXZ
?IsTimerPaused@CSkinnedControl@@QAEHXZ
?IsUSFHeader@CSkin@@QAEHXZ
?IsUXFHeader@CSkin@@QAEHXZ
?IsValidChar@CSkinnedText@@QAEHE@Z
?IsVisible@CSkinnedControl@@QAEHXZ
?Kill@CDIBWndThread@@QAEXXZ
?Kill@CLauncherThread@@QAEXXZ
?Kill@CMMTimer@@QAEXH@Z
?KillDivLookup@CDIB@@QAEXXZ
?LaunchApplication@CLauncherThread@@QAEHPBDK@Z
?Line@CDIB@@QAEHJJJJJ@Z
?Load@CSkin@@QAEHPAVCMemFile@@@Z
?LoadDIB@CDIB@@QAEHHPAUHINSTANCE__@@@Z
?LoadDIB@CDIB@@QAEHPAD@Z
?LoadDIB@CDIB@@QAEHPBDPAUHINSTANCE__@@@Z
?LoadGIF@CDIB@@QAEHPAD@Z
?LoadImageA@CDIB@@QAEHPAD@Z
?LoadJPEG@CDIB@@QAEHPAD@Z
?LoadPAK@CDIB@@QAEHPAVCSZArray@@PBD@Z
?LoadPAK@CDIB@@QAEHPBD0@Z
?LoadPCX@CDIB@@QAEHPAD@Z
?LoadPNG@CDIB@@QAEHPAD@Z
?LoadPNG@CDIB@@QAEHPAEK@Z
?LockUpdateDIB@CSkinnedWnd@@QAEXH@Z
?LockUpdateLayeredWindow@CSkinnedWnd@@QAEXH@Z
?MapBitmapName@CSkin@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?NotifyParent@CSkinnedControl@@UAEXKK@Z
?OnAsyncUpdate@CDIBWnd@@QAEXXZ
?OnCreate@CDIBWnd@@QAEHPAUtagCREATESTRUCTA@@@Z
?OnCreate@CSkinnedButton@@UAEHPAVCSkin@@PBDK1K@Z
?OnCreate@CSkinnedIndicator@@UAEHPAVCSkin@@PBDK1K@Z
?OnCreate@CSkinnedIndicatorSource@@UAEHPAVCSkin@@PBDK1K@Z
?OnCreate@CSkinnedPlaceholder@@UAEHPAVCSkin@@PBDK1K@Z
?OnCreate@CSkinnedSite@@UAEHPAVCSkin@@PBDK1K@Z
?OnCreate@CSkinnedSlider@@UAEHPAVCSkin@@PBDK1K@Z
?OnCreate@CSkinnedText@@UAEHPAVCSkin@@PBDK1K@Z
?OnCreateCommon@CSkinnedControl@@IAEHKPBDAAK11K@Z
?OnDestroy@CDIBWnd@@IAEXXZ
?OnDestroy@CSkinnedWnd@@IAEXXZ
?OnKeyDown@CSkinnedButton@@UAEXIII@Z
?OnKeyDown@CSkinnedControl@@UAEXIII@Z
?OnKeyDown@CSkinnedPlaceholder@@UAEXIII@Z
?OnKeyDown@CSkinnedSlider@@UAEXIII@Z
?OnKeyDown@CSkinnedText@@UAEXIII@Z
?OnKeyDown@CSkinnedWnd@@IAEXIII@Z
?OnKeyUp@CSkinnedControl@@UAEXIII@Z
?OnKeyUp@CSkinnedSlider@@UAEXIII@Z
?OnKeyUp@CSkinnedWnd@@IAEXIII@Z
?OnKillFocus@CSkinnedButton@@UAEXXZ
?OnKillFocus@CSkinnedControl@@UAEXXZ
?OnKillFocus@CSkinnedSlider@@UAEXXZ
?OnKillFocus@CSkinnedText@@UAEXXZ
?OnKillFocus@CSkinnedWnd@@IAEXPAVCWnd@@@Z
?OnKillKeyboardFocus@CSkinnedControl@@UAEXXZ
?OnKillKeyboardFocus@CSkinnedText@@UAEXXZ
?OnLButtonDown@CSkinnedButton@@UAEXVCPoint@@@Z
?OnLButtonDown@CSkinnedControl@@UAEXVCPoint@@@Z
?OnLButtonDown@CSkinnedPlaceholder@@UAEXVCPoint@@@Z
?OnLButtonDown@CSkinnedSlider@@UAEXVCPoint@@@Z
?OnLButtonDown@CSkinnedText@@UAEXVCPoint@@@Z
?OnLButtonDown@CSkinnedWnd@@IAEXIVCPoint@@@Z
?OnLButtonUp@CSkinnedButton@@UAEXVCPoint@@@Z
?OnLButtonUp@CSkinnedControl@@UAEXVCPoint@@@Z
?OnLButtonUp@CSkinnedPlaceholder@@UAEXVCPoint@@@Z
?OnLButtonUp@CSkinnedSlider@@UAEXVCPoint@@@Z
?OnLButtonUp@CSkinnedText@@UAEXVCPoint@@@Z
?OnLButtonUp@CSkinnedWnd@@IAEXIVCPoint@@@Z
?OnMouseMove@CSkinnedButton@@UAEXVCPoint@@@Z
?OnMouseMove@CSkinnedControl@@UAEXVCPoint@@@Z
?OnMouseMove@CSkinnedPlaceholder@@UAEXVCPoint@@@Z
?OnMouseMove@CSkinnedSlider@@UAEXVCPoint@@@Z
?OnMouseMove@CSkinnedText@@UAEXVCPoint@@@Z
?OnMouseMove@CSkinnedWnd@@IAEXIVCPoint@@@Z
?OnMoveWindow@CSkinnedWnd@@UAEXVCPoint@@@Z
?OnPaint@CDIBWnd@@IAEXXZ
?OnReadControlDesc@CSkinnedWnd@@UAEHPAVCSkin@@PBD1K1AAVCStringLite@@@Z
?OnReadDefaultControlDesc@CSkinnedWnd@@UAEHPAVCSkin@@PBD1K1AAVCStringLite@@@Z
?OnSetScaleFactor@CSkinnedWnd@@UAEXK@Z
?OnTimer@CSkinnedButton@@UAEXXZ
?OnTimer@CSkinnedControl@@UAEXXZ
?OnTimer@CSkinnedIndicator@@UAEXXZ
?OnTimer@CSkinnedText@@UAEXXZ
?OnTimer@CSkinnedWnd@@IAEXI@Z
?OnUpdateLayeredWindow@CSkinnedWnd@@UAEXPAUHDC__@@@Z
?OutCode@CDIB@@IAEHJJJJJJ@Z
?OverrideDIB@CSkinnedButton@@QAEXPAVCDIB@@@Z
?OverrideDIB@CSkinnedIndicator@@QAEXPAVCDIB@@@Z
?OverrideDIBAlpha@CSkinnedButton@@QAEXPAVCDIB@@@Z
?OverrideDIBAlpha@CSkinnedIndicator@@QAEXPAVCDIB@@@Z
?OverrideDIBHottrack@CSkinnedButton@@QAEXPAVCDIB@@@Z
?OverrideDIBHottrackAlpha@CSkinnedButton@@QAEXPAVCDIB@@@Z
?OverrideDIBPressed@CSkinnedButton@@QAEXPAVCDIB@@@Z
?OverrideDIBPressedAlpha@CSkinnedButton@@QAEXPAVCDIB@@@Z
?OverrideDIBPressedHottrack@CSkinnedButton@@QAEXPAVCDIB@@@Z
?OverrideDIBPressedHottrackAlpha@CSkinnedButton@@QAEXPAVCDIB@@@Z
?OverrideHeader@CSkin@@AAEXPAVCTextFile@@@Z
?PauseTimer@CSkinnedControl@@QAEXH@Z
?PointToPos@CSkinnedSlider@@AAEJVCPoint@@@Z
?PosToPoint@CSkinnedSlider@@AAE?AVCPoint@@J@Z
?PostMessageToTarget@CMMTimer@@IAEXXZ
?Press@CSkinnedButton@@QAEXH@Z
?ProcessCommandLine@CLauncherThread@@QAEXPBDAAPAD1H@Z
?ProcessLButtonDown@CSkinnedWnd@@QAEHVCPoint@@@Z
?ProcessLButtonUp@CSkinnedWnd@@QAEHVCPoint@@@Z
?ProcessMouseMove@CSkinnedWnd@@QAEHVCPoint@@@Z
?RGBTo555@CDIB@@SAGEEE@Z
?ReadControlDesc@CSkin@@QAEHPBD0K0AAVCStringLite@@@Z
?ReadHeaderSection@CSkin@@QAEHPBDAAVCStringLite@@@Z
?ReadHeaderSectionParam@CSkin@@QAEHPBD0AAVCStringLite@@@Z
?ReadHeaderSectionParamForLayout@CSkin@@QAEHPBDK0AAVCStringLite@@H@Z
?RecalcControlRect@CSkinnedText@@QAEXXZ
?Recompress@CDIB@@QAEXXZ
?Recreate@CSkinnedControl@@QAEHPAVCSkin@@H@Z
?Redraw@CSkinnedControl@@QAEXXZ
?RedrawControl@CSkinnedWnd@@QAEXPAVCSkinnedControl@@@Z
?RedrawControls@CSkinnedWnd@@QAEXPAVCRect@@@Z
?RedrawControls@CSkinnedWnd@@QAEXXZ
?RedrawIndicators@CSkinnedControl@@QAEXXZ
?ReleaseKeyboardFocus@CSkinnedControl@@QAEXXZ
?RemoveControl@CSkinnedWnd@@QAEHPAVCSkinnedControl@@@Z
?RemoveUnusedEntries@CDIB@@QAEHXZ
?RepositionControl@CSkinnedControl@@QAEXXZ
?ResetLayouts@CSkinnedWnd@@QAEXXZ
?ResizeA8R8G8B8@CDIB@@SAXPAEKKK0KKK@Z
?ResizeDIB@CDIB@@QAEHHHH@Z
?ResizePalette@CDIB@@QAEHH@Z
?ResizePaletteHelper@CDIB@@KAHPBX0@Z
?ResizeR8G8B8@CDIB@@SAXPAEKKK0KKK@Z
?ResizeR8G8B8@CDIB@@SAXPAEKKK0KKKK@Z
?SaveDIB@CDIB@@QAEHPAD@Z
?SetAdditionalError@CSkin@@QAEXPBD@Z
?SetAlphaHitTest@CSkinnedButton@@QAEXH@Z
?SetAlphaPathThreshold@CSkinnedSlider@@QAEXK@Z
?SetAnimationFrame@CSkinnedButton@@QAEHK@Z
?SetAnimationFrames@CSkinnedIndicator@@QAEXK@Z
?SetAsyncScaling@CDIBWnd@@QAEXK@Z
?SetBackbuffer@CDIBWnd@@QAEXH@Z
?SetBgndColor@CSkinnedText@@QAEXK@Z
?SetCapture@CSkinnedControl@@QAEHH@Z
?SetCheckbox@CSkinnedButton@@QAEXH@Z
?SetCmdLine@CSkinnedButton@@QAEXPBD@Z
?SetColorKey@CDIBWnd@@QAEXK@Z
?SetCompatibilityFlags@CSkinnedWnd@@QAEXK@Z
?SetControlRect@CSkinnedControl@@QAEXKKKKH@Z
?SetDIBCache@CSkinnedControl@@QAEXPAVCDIBCache@@@Z
?SetDebugMode@CDIB@@QAEXH@Z
?SetEditAnimationFrames@CSkinnedText@@QAEKK@Z
?SetEditCursor@CSkinnedText@@QAEDD@Z
?SetEditMask@CSkinnedText@@QAEXPBD@Z
?SetEditMode@CSkinnedText@@QAEHH@Z
?SetEditTextLen@CSkinnedText@@QAEHH@Z
?SetHottrack@CSkinnedControl@@QAEHH@Z
?SetID@CSkinnedControl@@QAEXK@Z
?SetIndicator@CSkinnedControl@@QAEXPAV1@@Z
?SetKeyboardFocus@CSkinnedControl@@QAEXXZ
?SetKeyboardFocusControl@CSkinnedWnd@@QAEXPAVCSkinnedControl@@@Z
?SetLastError@CDIB@@IAEXH@Z
?SetLauncherThread@CLauncherThreadOwner@@QAEXPAVCLauncherThread@@@Z
?SetLayeredWindowAlpha@CSkinnedWnd@@QAEXK@Z
?SetLayeredWindowMode@CSkinnedWnd@@QAEXK@Z
?SetLayout@CSkinnedWnd@@UAEHK@Z
?SetNextState@CSkinnedButton@@QAEKXZ
?SetPage@CSkinnedSlider@@QAEXK@Z
?SetPaletteBase@CDIB@@QAEHHH@Z
?SetPath@CSkin@@QAEHPBD@Z
?SetPixel@CDIB@@QAEHHHK@Z
?SetPos@CSkinnedSlider@@QAEXJ@Z
?SetRange@CSkinnedIndicatorSource@@QAEXMM@Z
?SetRange@CSkinnedSlider@@QAEHJJ@Z
?SetReplace@CSkinnedText@@QAEXEE@Z
?SetSSAA@CDIBDC@@QAEXK@Z
?SetScaleFactor@CSkinnedWnd@@QAEXK@Z
?SetScalingMode@CDIBWnd@@QAEXK@Z
?SetSite@CSkinnedControl@@QAEXPAVCSkinnedSite@@@Z
?SetSourceControl@CSkinnedIndicator@@QAEXPAVCSkinnedControl@@@Z
?SetSpin@CSkinnedButton@@QAEXH@Z
?SetState@CSkinnedButton@@QAEXK@Z
?SetText@CSkinnedText@@QAEXPBD@Z
?SetTextColor@CSkinnedText@@QAEXK@Z
?SetTimerPeriod@CSkinnedControl@@QAEXK@Z
?SetTimerRes@CSkinnedWnd@@QAEXH@Z
?SetValue@CSkinnedIndicatorSource@@QAEHMKH@Z
?SetVisible@CSkinnedControl@@UAEHH@Z
?SetVisible@CSkinnedSite@@UAEHH@Z
?SetWnd@CSkin@@QAEXPAVCSkinnedWnd@@@Z
?SetWnd@CSkinnedControl@@QAEXPAVCSkinnedWnd@@@Z
?SetZOrder@CSkinnedControl@@QAEXK@Z
?SkinToClient@CSkinnedWnd@@QAE?AVCPoint@@V2@@Z
?SkinToClient@CSkinnedWnd@@QAE?AVCRect@@V2@@Z
?SkinToClient@CSkinnedWnd@@QAEHH@Z
?Smooth@CSkinnedIndicator@@QAEHXZ
?SortControls@CSkinnedWnd@@QAEXXZ
?SortControlsHelper@CSkinnedWnd@@SAHPAUPTR_LIST_NODE@@0@Z
?StoreCompressed@CDIB@@QAEXH@Z
?Swap@CDIBCache@@QAEHHPBD@Z
?Swap@CSkinnedWnd@@QAEHHPBD@Z
?SwapRB@CDIB@@QAEHXZ
?SwapRGB@CSkinnedWnd@@QAEKK@Z
?TimeProc@CMMTimer@@KGXIIKKK@Z
?TrackFocus@CSkinnedWnd@@QAEXVCPoint@@@Z
?Transform@CSkinnedButton@@QAEHXZ
?TuneBrightness@CDIB@@QAEHPAUtagPALETTEENTRY@@F@Z
?TuneColor@CDIB@@QAEHPAUtagPALETTEENTRY@@E@Z
?Uninit@CSkin@@QAEXXZ
?UninitCache@CDIBCache@@QAEXXZ
?Update@CLayeredWindowDC@@QAEXXZ
?UpdateBackbuffer@CDIBWnd@@QAEXKK@Z
?UpdateBuffers@CLayeredWindowDC@@IAEXXZ
?UpdateControlsLayout@CSkinnedWnd@@QAEHPAVCSkin@@H@Z
?UpdateDIB@CDIBWnd@@UAEHPAVCDC@@VCRect@@@Z
?UpdateDIB@CDIBWnd@@UAEHXZ
?UpdateDIB@CSkinnedWnd@@UAEHPAVCDC@@VCRect@@@Z
?UpdateDIB@CSkinnedWnd@@UAEHXZ
?UpdateLayeredWindow@CSkinnedWnd@@QAEXXZ
?UpdateLayeredWindowAttributes@CSkinnedWnd@@QAEXXZ
?UpdateRegion@CSkinnedWnd@@QAEXXZ
?_GetBaseClass@CDIBWndThread@@KGPAUCRuntimeClass@@XZ
?_GetBaseClass@CLauncherThread@@KGPAUCRuntimeClass@@XZ
?classCDIBWndThread@CDIBWndThread@@2UCRuntimeClass@@B
?classCLauncherThread@CLauncherThread@@2UCRuntimeClass@@B
Name
.text
Size
296KB
Virtual Size
295KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=259, version=35207,
count=11, id=260, version=35207,
count=22, id=261, version=35207,
count=4, id=257, version=35207,
count=2, id=257, version=35217,
count=13, id=239, version=40116,
count=388, id=1, productName=Unmarked objects,
count=22, id=260, version=30147,
count=28, id=261, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=151,
count=1, id=258, version=35217,
SaveMedia.cfg
- SHA256 14636e21add8f92780561e6b9d6fa150ec9ee146fb43e187c495f6a702fde682
- MD5 a62ac429fe77bbc9c66f41ae14f8beba
- SHA1 2473fa5452adad53d701c459d491c12c31e65348
- SHA512 b31075d15a9e596b7f69644d28023e7535d9c2d974923e63caca2b8210a577d6025c2af40a9327575fb5caa1f8fd8e7282b3e69c1db12ad994c9aa7b0c5bc217
- TLSH T1EFF04C693A1623773B7642D1E921F4F415B0218350CC19F5BAB611A9448EE96B04E91B
- MD5 SHA1 SHA512 TLSH
SaveMedia.dll
- IMPHASH 7da849b65959d1ef74f20421b758aa9b
- SHA256 4e12387c530ad6a66bb628613ba5cc1ab12de032fe1d9ff40176c745e126babe
- MD5 685453796065c6191f05611cc42b889b
- SHA1 05e3fd6e79021f8409992286b60be017b6b2ce11
- SHA512 6cbeab054920935c7a48bc74ade48729a0d3b950f60d74b267ac8afdaa3778f4a89ee358ffc47512a8b8207f34e9268d479190a004eb749222c71731e9cdf2d3
- SSDEEP 24576:BWwQACgzu/PrWZ1rDZDvfp+dD6eSsTS7g:VkPaDrDaV6lsTMg
- TLSH T1F1152743B6609C63DBD541B2CCADEAB927687A3D87FB40F3B180E6D978305D27930586
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
7c:f9:53:01:0f:81:80:79:63:90:1a:5b:60:c7:3e:94:22:5e:47:e5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Sep 28, 2025
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=Globalsign TSA for MS Authenticode Advanced - G4 - 2025,O=GlobalSign nv-sa,C=BE
Serial Number
01:5c:c0:8a:f3:9b:b4:53:73:96:89:c7:1a:82:9d:32
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 15, 2025 - Dec 10, 2034
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:5e:21:e8:3e:4f:82:88:70:9d:5a:d6
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 13, 2022 - Oct 16, 2025
Minor OS version
0
Major OS version
6
Entry point
537309
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Projects\RTSS737\SaveMedia\Release\SaveMedia.pdb
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
msvfw32
ICOpen
ICCompressorFree
ICCompressorChoose
ICSendMessage
ICGetInfo
ICClose
shlwapi
PathRemoveFileSpecA
PathRenameExtensionA
PathStripPathA
dsound
ord6
ord7
mfc140
ord2759
ord14699
ord10237
ord10239
ord10238
ord10236
ord10240
ord5631
ord11671
ord11672
ord9096
ord12032
ord3830
ord11881
ord14502
ord8922
ord12163
ord6947
ord10950
ord9213
ord3259
ord13798
ord12205
ord12201
ord1717
ord1739
ord1765
ord1751
ord1772
ord4920
ord4987
ord4932
ord4950
ord4944
ord4938
ord4997
ord4981
ord4926
ord5003
ord4958
ord4896
ord4911
ord4972
ord4493
ord5769
ord9647
ord4485
ord3050
ord14510
ord7887
ord14508
ord8173
ord6848
ord4468
ord11663
ord13628
ord5911
ord5401
ord2680
ord12067
ord3933
ord3363
ord3364
ord3258
ord12111
ord1000
ord5228
ord5528
ord5739
ord9305
ord5504
ord5231
ord5390
ord5210
ord7687
ord7688
ord7677
ord5388
ord8182
ord9166
ord4490
ord2560
ord3689
ord2241
ord5898
ord310
ord305
ord1509
ord265
ord10207
ord3295
ord3298
ord2387
ord3005
ord1507
ord4841
ord3230
ord14571
ord12348
ord14518
ord12291
ord4807
ord1529
ord1044
ord316
ord6724
ord2376
ord2381
ord266
ord2383
ord13681
ord3844
ord1471
ord5894
ord12182
ord12191
ord4582
ord8180
ord10384
ord12194
ord12162
ord12870
ord998
ord7406
ord5742
ord7452
ord10202
ord3627
ord12706
ord1526
ord1186
ord12544
ord1657
ord8470
ord557
ord1184
ord1655
ord8468
ord555
ord2298
ord9085
ord1068
ord3864
ord2988
ord8703
ord4213
ord3142
ord6471
ord7459
ord12074
ord6193
ord13677
ord2758
ord9167
ord12115
ord1109
ord8997
ord10963
ord11343
ord10421
ord4084
ord458
ord3395
ord3396
ord3159
ord7076
ord6104
ord8713
ord6195
ord1696
kernel32
SetFilePointer
WriteFile
CloseHandle
GetTickCount
LoadLibraryExA
GetProcAddress
RaiseException
OutputDebugStringW
ReleaseMutex
WaitForSingleObject
GetModuleFileNameA
GetCurrentProcessId
GetLocalTime
_lclose
SystemTimeToFileTime
CreateFileA
SetEndOfFile
QueryPerformanceCounter
QueryPerformanceFrequency
TerminateThread
IsProcessorFeaturePresent
GetModuleHandleA
LoadLibraryA
GetPrivateProfileIntA
GetPrivateProfileStringA
FreeLibrary
GetCurrentThreadId
GetCurrentThread
EnterCriticalSection
OpenFile
ReadFile
CreateMutexA
LeaveCriticalSection
WritePrivateProfileStringA
SetThreadPriority
ResumeThread
GetSystemInfo
CreateEventA
SetEvent
ResetEvent
WaitForMultipleObjects
GetVersionExA
WideCharToMultiByte
DeleteFileA
DecodePointer
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
LoadLibraryW
GetModuleHandleW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
SetLastError
OutputDebugStringA
ExitProcess
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
GetFileSize
user32
GetDC
ReleaseDC
GetCursorPos
LoadCursorA
UnregisterClassA
EnableWindow
SendMessageA
EnumDisplaySettingsA
DrawIcon
GetIconInfo
gdi32
GetDeviceCaps
CreateCompatibleDC
SelectObject
CreateBitmap
DeleteObject
GetDIBits
DeleteDC
BitBlt
ole32
PropVariantClear
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoInitialize
oleaut32
SysFreeString
vcruntime140
memmove
__current_exception_context
__current_exception
_except_handler4_common
longjmp
strstr
_purecall
memset
memcpy
__CxxFrameHandler3
__std_type_info_destroy_list
_setjmp3
__std_terminate
api-ms-win-crt-stdio-l1-1-0
fflush
__stdio_common_vsnprintf_s
ferror
__stdio_common_vsprintf_s
__stdio_common_vsscanf
fopen
fread
fclose
fopen_s
__stdio_common_vfprintf
fwrite
__acrt_iob_func
api-ms-win-crt-string-l1-1-0
strcpy_s
strncpy_s
strcat_s
strpbrk
_stricmp
api-ms-win-crt-filesystem-l1-1-0
_findclose
_findfirst64i32
remove
_splitpath_s
_mkdir
_findnext64i32
api-ms-win-crt-convert-l1-1-0
atof
wcstombs_s
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-heap-l1-1-0
malloc
free
_recalloc
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_register_onexit_function
_initterm_e
_initialize_narrow_environment
_seh_filter_dll
_invalid_parameter_noinfo
exit
_configure_narrow_argv
_initterm
_execute_onexit_table
abort
terminate
_crt_atexit
_cexit
_crt_at_quick_exit
_errno
strerror
api-ms-win-crt-time-l1-1-0
_gmtime64
api-ms-win-crt-math-l1-1-0
frexp
_libm_sse2_pow_precise
_except1
floor
modf
api-ms-win-crt-environment-l1-1-0
getenv_s
Configure
EnumAudioSources
GetStat
Init
SaveMedia
Uninit
Name
.text
Size
564KB
Virtual Size
564KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
301KB
Virtual Size
301KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
393KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=259, version=35207,
count=12, id=260, version=35207,
count=22, id=261, version=35207,
count=4, id=257, version=35207,
count=2, id=245, version=40116,
count=47, id=260, productName=VS2015 UPD1 build 23506, version=23506,
count=44, productName=Unmarked objects (old),
count=22, id=260, version=30147,
count=19, id=239, version=40116,
count=349, id=1, productName=Unmarked objects,
count=55, id=261, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=151,
count=1, id=258, version=35217,
SaveMedia64.dll
- IMPHASH 7bc6aea5567983072c72dcb44b40676c
- SHA256 ab0b55d8d540dc96d0848bba1bf18a0407eeaad9a2c6e1f89b13b64d116362c9
- MD5 9db163f71a8ede59d77f43bc1dcf3a37
- SHA1 a504779274c2914ba3dfbf88b51322cf331e239f
- SHA512 484fc53a9b569f608ac8dd0ba649f0c0f3ad685e015218bad3a8cac5d8bbe9d06dd812c9372174c5dbe181896da12d120dc1075f60f7fd9b70dfa502e401b1a3
- SSDEEP 12288:KXFLeuopMIkKpvCDzc3qgYDF9TS5VfJcan0S:KX9ApqDzc3xijTSR1b
- TLSH T1A0251807B2251CAECBE68078CF6AC536D771382C43F316F73295A6E93A236D43679641
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
d2:d3:ef:dc:40:e0:c3:bd:df:78:27:3b:cf:63:e0:e8:ee:8a:c1:7b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Sep 28, 2025
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Serial Number
01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jun 20, 2018 - Dec 10, 2034
Subject
CN=Globalsign TSA for MS Authenticode Advanced - G4 - 2025,O=GlobalSign nv-sa,C=BE
Serial Number
01:5c:c0:8a:f3:9b:b4:53:73:96:89:c7:1a:82:9d:32
Issuer
CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 15, 2025 - Dec 10, 2034
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
SERIALNUMBER=22178368,CN=MICRO-STAR INTERNATIONAL CO.\, LTD.,O=MICRO-STAR INTERNATIONAL CO.\, LTD.,STREET=No. 69\, Lide St.\, Zhonghe Dist.,L=New Taipei,ST=New Taipei,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:5e:21:e8:3e:4f:82:88:70:9d:5a:d6
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 13, 2022 - Oct 16, 2025
Minor OS version
0
Major OS version
6
Entry point
559744
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\Projects\RTSS737\SaveMedia\Release\SaveMedia.pdb
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
msvfw32
ICClose
ICGetInfo
ICSendMessage
ICCompressorFree
ICCompressorChoose
ICOpen
shlwapi
PathRemoveFileSpecA
PathStripPathA
PathRenameExtensionA
dsound
ord7
ord6
mfc140
ord5566
ord9343
ord4343
ord2962
ord14136
ord7620
ord14134
ord8413
ord6607
ord4326
ord11357
ord13284
ord5704
ord5224
ord2627
ord11754
ord3804
ord3270
ord3271
ord3165
ord11798
ord988
ord5064
ord5347
ord5536
ord9001
ord5323
ord5067
ord5213
ord1055
ord7430
ord7431
ord7420
ord5211
ord7890
ord8862
ord4348
ord2512
ord3591
ord2207
ord5691
ord310
ord305
ord2917
ord1485
ord4686
ord3137
ord14197
ord12035
ord14144
ord11978
ord4648
ord1507
ord1032
ord316
ord6483
ord2338
ord2342
ord4351
ord265
ord1487
ord3738
ord2901
ord8403
ord4072
ord3053
ord6237
ord7204
ord11761
ord5980
ord13327
ord2695
ord8863
ord11802
ord1087
ord8693
ord10657
ord11037
ord10117
ord3943
ord446
ord3299
ord3300
ord3066
ord6822
ord5896
ord5982
ord4817
ord4756
ord4741
ord13331
ord3205
ord3202
ord9903
ord7881
ord2696
ord14279
ord9933
ord9935
ord9934
ord9932
ord9936
ord5435
ord11365
ord11366
ord8792
ord11719
ord3710
ord4803
ord4848
ord4771
ord11575
ord4826
ord4842
ord4783
ord14128
ord8618
ord11850
ord4789
ord4795
ord6703
ord10644
ord4777
ord4832
ord4765
ord1750
ord8909
ord8781
ord2348
ord2344
ord1674
ord3723
ord1449
ord3166
ord5687
ord11869
ord11878
ord4438
ord7888
ord10080
ord11881
ord11849
ord12553
ord13438
ord11892
ord986
ord7152
ord5539
ord11888
ord7198
ord9898
ord3529
ord12391
ord1504
ord1164
ord12230
ord1635
ord8172
ord545
ord1162
ord1633
ord8170
ord1695
ord543
ord266
ord1717
ord1743
ord2264
ord5049
ord1729
kernel32
InitializeSListHead
GetSystemTimeAsFileTime
RaiseException
EnterCriticalSection
OpenFile
OutputDebugStringW
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
GetModuleHandleExW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
SetLastError
OutputDebugStringA
ExitProcess
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
DecodePointer
DeleteFileA
WideCharToMultiByte
GetVersionExA
WaitForMultipleObjects
ResetEvent
SetEvent
CreateEventA
GetSystemInfo
ResumeThread
SetThreadPriority
WritePrivateProfileStringA
GetPrivateProfileIntA
LoadLibraryA
GetModuleHandleA
IsProcessorFeaturePresent
TerminateThread
QueryPerformanceFrequency
QueryPerformanceCounter
SetEndOfFile
CreateFileA
SystemTimeToFileTime
_lclose
GetLocalTime
GetCurrentProcessId
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
WriteFile
SetFilePointer
GetPrivateProfileStringA
GetTickCount
LoadLibraryExA
GetProcAddress
GetModuleFileNameA
FreeLibrary
GetCurrentThreadId
GetCurrentThread
LeaveCriticalSection
ReadFile
GetFileSize
user32
EnumDisplaySettingsA
DrawIcon
GetIconInfo
LoadCursorA
EnableWindow
GetCursorPos
GetDC
UnregisterClassA
ReleaseDC
SendMessageA
gdi32
BitBlt
CreateBitmap
SelectObject
GetDIBits
GetDeviceCaps
DeleteObject
DeleteDC
CreateCompatibleDC
ole32
PropVariantClear
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoInitialize
oleaut32
SysFreeString
vcruntime140_1
__CxxFrameHandler4
vcruntime140
longjmp
strstr
_purecall
memset
memcpy
memcmp
__intrinsic_setjmp
__current_exception
__std_type_info_destroy_list
memmove
__C_specific_handler
__std_terminate
__current_exception_context
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vsnprintf_s
fread
fopen
fflush
ferror
__stdio_common_vsprintf_s
__stdio_common_vfprintf
fwrite
__stdio_common_vsscanf
fopen_s
fclose
api-ms-win-crt-string-l1-1-0
wcslen
strncpy_s
strlen
strpbrk
_stricmp
strcpy_s
strcat_s
api-ms-win-crt-filesystem-l1-1-0
_findclose
_findfirst64i32
remove
_mkdir
_findnext64i32
_splitpath_s
api-ms-win-crt-convert-l1-1-0
wcstombs_s
atof
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-heap-l1-1-0
free
malloc
_recalloc
api-ms-win-crt-runtime-l1-1-0
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initterm
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
abort
exit
_initterm_e
_invalid_parameter_noinfo
strerror
_register_onexit_function
_errno
api-ms-win-crt-time-l1-1-0
_gmtime64
api-ms-win-crt-math-l1-1-0
pow
modf
frexp
floor
api-ms-win-crt-environment-l1-1-0
getenv_s
Configure
EnumAudioSources
GetStat
Init
SaveMedia
Uninit
Name
.text
Size
586KB
Virtual Size
586KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
392KB
Virtual Size
392KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
395KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=253, version=35207,
count=4, id=259, version=35207,
count=9, id=260, version=35207,
count=25, id=261, version=35207,
count=6, id=257, version=35207,
count=2, id=245, version=40116,
count=47, id=260, productName=VS2015 UPD1 build 23506, version=23506,
count=27, productName=Unmarked objects (old),
count=22, id=260, version=30147,
count=19, id=239, version=40116,
count=360, id=1, productName=Unmarked objects,
count=55, id=261, version=35217,
count=1, id=256, version=35217,
count=1, id=255, version=35217,
count=1, id=151,
count=1, id=258, version=35217,
libmfxsw32.dll
- IMPHASH 3b6ea42b172600bb5a8950b6766adce0
- SHA256 39aa5129f3e61473de411a3e286a8ab2a410436923bbaa9320610de30ee1df5f
- MD5 6980f97a2a92dce04c5cce88028bd160
- SHA1 e5d5daf7b8ce47bd2ecbc34a28357d5a16f7262a
- SHA512 954b75290c1223fd9652389b16f24dd7e5ed4bc1028b1be857c555248eda8b8b1c6414d36af529dec82adae303bdbc2138fa735f0d31a009bb415347756a32d9
- SSDEEP 196608:JdsQK8Wj/go87dBJA+qsIX0DSFzFveFVlNSmfJzPmFpfaGUaDHxnQ7doP5hlt1Ya:PeV8o87dB30B1lti9q
- TLSH T16FF68DC1E3E342E0D44708B0A43FB56FA634270A861CD6F3E7D4AF25E8767819EB6255
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
7e:7b:38:2d:2b:14:3d:42:3e:33:ac:81:56:4b:de:44:29:9d:dd:ad
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Intel(R) Software Products
Chains
Jun 21, 2013
CN=Intel(R) Software Products
Subject
OU=Equifax Secure Certificate Authority,O=Equifax,C=US
Serial Number
35:de:f4:cf
Issuer
OU=Equifax Secure Certificate Authority,O=Equifax,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 22, 1998 - Aug 22, 2018
Subject
CN=Intel External Basic Policy CA,O=Intel Corporation,C=US
Serial Number
05:b0:ff
Issuer
OU=Equifax Secure Certificate Authority,O=Equifax,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 16, 2006 - Feb 19, 2016
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Intel(R) Software Products
Serial Number
1b:aa:c3:a2:00:01:00:00:79:76
Issuer
CN=Intel External Basic Issuing CA 3A,O=Intel Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 12, 2011 - Nov 26, 2014
Subject
CN=Intel External Basic Issuing CA 3A,O=Intel Corporation,C=US
Serial Number
61:1e:80:b7:00:00:00:00:00:07
Issuer
CN=Intel External Basic Policy CA,O=Intel Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 15, 2009 - May 15, 2015
Minor OS version
1
Major OS version
5
Entry point
2666591
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\users\mkazakov\2013_R2\MediaSDK_2013_R2\build\win_Win32\bin\libmfxsw32.pdb
kernel32
GetLastError
CreateEventExW
GetOverlappedResult
WriteFile
CloseHandle
CreateEventW
InterlockedIncrement
WaitForSingleObject
SetEvent
ResetEvent
SetThreadAffinityMask
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetModuleFileNameW
GetSystemInfo
QueryPerformanceCounter
GetSystemTimeAsFileTime
Sleep
SwitchToThread
ReleaseSemaphore
CreateSemaphoreW
OutputDebugStringA
DecodePointer
EncodePointer
GetCurrentThreadId
GetCommandLineA
HeapAlloc
HeapReAlloc
HeapFree
ExitThread
CreateThread
GetProcAddress
GetModuleHandleW
ExitProcess
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
HeapSize
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
GetTickCount
GetCurrentProcessId
LoadLibraryW
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
SetStdHandle
WriteConsoleW
LCMapStringW
GetStringTypeW
FlushFileBuffers
CreateFileW
ReadFile
GetFileAttributesExW
DeleteFileW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
winmm
timeGetTime
MFXCloneSession
MFXClose
MFXDisjoinSession
MFXGetPriority
MFXInit
MFXJoinSession
MFXQueryIMPL
MFXQueryVersion
MFXSetPriority
MFXVideoCORE_GetHandle
MFXVideoCORE_SetBufferAllocator
MFXVideoCORE_SetFrameAllocator
MFXVideoCORE_SetHandle
MFXVideoCORE_SyncOperation
MFXVideoDECODE_Close
MFXVideoDECODE_DecodeFrameAsync
MFXVideoDECODE_DecodeHeader
MFXVideoDECODE_GetDecodeStat
MFXVideoDECODE_GetPayload
MFXVideoDECODE_GetVideoParam
MFXVideoDECODE_Init
MFXVideoDECODE_Query
MFXVideoDECODE_QueryIOSurf
MFXVideoDECODE_Reset
MFXVideoDECODE_SetSkipMode
MFXVideoENCODE_Close
MFXVideoENCODE_EncodeFrameAsync
MFXVideoENCODE_GetEncodeStat
MFXVideoENCODE_GetVideoParam
MFXVideoENCODE_Init
MFXVideoENCODE_Query
MFXVideoENCODE_QueryIOSurf
MFXVideoENCODE_Reset
MFXVideoUSER_ProcessFrameAsync
MFXVideoUSER_Register
MFXVideoUSER_Unregister
MFXVideoVPP_Close
MFXVideoVPP_GetVPPStat
MFXVideoVPP_GetVideoParam
MFXVideoVPP_Init
MFXVideoVPP_Query
MFXVideoVPP_QueryIOSurf
MFXVideoVPP_Reset
MFXVideoVPP_RunFrameVPPAsync
Name
.text
Size
14.6MB
Virtual Size
14.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
453KB
Virtual Size
453KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
194KB
Virtual Size
240KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
213KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=46, id=158, version=40117,
count=158, id=170, version=40117,
count=56, id=171, version=40117,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=130, id=1, productName=Unmarked objects,
count=526, id=205, version=50522,
count=6418, productName=Unmarked objects (old),
count=271, id=175, version=40117,
count=1, id=155, version=40117,
count=1, id=154, version=40117,
count=1, id=157, version=40117,
libmfxsw64.dll
- IMPHASH ceb419a5aaa755241938db3b7db9fb65
- SHA256 b5eaa1918ffbdcdfaf91a4895dac20b6325a9f53d20f343b7e7f05ff95c9aabd
- MD5 29bc29f7c4116ed33810a85c7de74532
- SHA1 034e6cd4ccfb319fe18007151cbe661436661ab5
- SHA512 9413ee1260c2eb758efcf32b5531e334d459542bb38164caf02aee93915eaafe33ff4f9ff4bca4b63081777cda9344ae81e365d82906d51dc0e9511dacefa084
- SSDEEP 196608:3QSvzp6YCFanvMwgVIzEcTNFkvQkSWDl5WRzu:3iG4cUIDRzu
- TLSH T131279E83F0E641DCE017C870957DE613FA20381D461866E797D1EA647E6BFC09D3AB2A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
d4:8a:b8:6f:64:ba:04:f3:b1:8d:3c:05:6d:e2:4e:53:02:44:df:08
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Intel(R) Software Products
Chains
Jun 21, 2013
CN=Intel(R) Software Products
Subject
OU=Equifax Secure Certificate Authority,O=Equifax,C=US
Serial Number
35:de:f4:cf
Issuer
OU=Equifax Secure Certificate Authority,O=Equifax,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 22, 1998 - Aug 22, 2018
Subject
CN=Intel External Basic Policy CA,O=Intel Corporation,C=US
Serial Number
05:b0:ff
Issuer
OU=Equifax Secure Certificate Authority,O=Equifax,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 16, 2006 - Feb 19, 2016
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Intel(R) Software Products
Serial Number
1b:aa:c3:a2:00:01:00:00:79:76
Issuer
CN=Intel External Basic Issuing CA 3A,O=Intel Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 12, 2011 - Nov 26, 2014
Subject
CN=Intel External Basic Issuing CA 3A,O=Intel Corporation,C=US
Serial Number
61:1e:80:b7:00:00:00:00:00:07
Issuer
CN=Intel External Basic Policy CA,O=Intel Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
May 15, 2009 - May 15, 2015
Minor OS version
2
Major OS version
5
Entry point
3215532
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\users\mkazakov\2013_R2\MediaSDK_2013_R2\build\win_x64\bin\libmfxsw64.pdb
kernel32
GetLastError
CreateEventExW
GetOverlappedResult
WriteFile
CloseHandle
CreateEventW
WaitForSingleObject
SetEvent
ResetEvent
SetThreadAffinityMask
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetModuleFileNameW
GetSystemInfo
QueryPerformanceCounter
GetSystemTimeAsFileTime
Sleep
SwitchToThread
ReleaseSemaphore
CreateSemaphoreW
OutputDebugStringA
DecodePointer
EncodePointer
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapAlloc
HeapReAlloc
HeapFree
ExitThread
CreateThread
GetProcAddress
GetModuleHandleW
ExitProcess
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
GetStdHandle
HeapSize
FlsGetValue
FlsFree
SetLastError
FlsAlloc
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetTickCount
GetCurrentProcessId
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
SetStdHandle
WriteConsoleW
LCMapStringW
GetStringTypeW
FlushFileBuffers
CreateFileW
ReadFile
GetFileAttributesExW
DeleteFileW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
winmm
timeGetTime
MFXCloneSession
MFXClose
MFXDisjoinSession
MFXGetPriority
MFXInit
MFXJoinSession
MFXQueryIMPL
MFXQueryVersion
MFXSetPriority
MFXVideoCORE_GetHandle
MFXVideoCORE_SetBufferAllocator
MFXVideoCORE_SetFrameAllocator
MFXVideoCORE_SetHandle
MFXVideoCORE_SyncOperation
MFXVideoDECODE_Close
MFXVideoDECODE_DecodeFrameAsync
MFXVideoDECODE_DecodeHeader
MFXVideoDECODE_GetDecodeStat
MFXVideoDECODE_GetPayload
MFXVideoDECODE_GetVideoParam
MFXVideoDECODE_Init
MFXVideoDECODE_Query
MFXVideoDECODE_QueryIOSurf
MFXVideoDECODE_Reset
MFXVideoDECODE_SetSkipMode
MFXVideoENCODE_Close
MFXVideoENCODE_EncodeFrameAsync
MFXVideoENCODE_GetEncodeStat
MFXVideoENCODE_GetVideoParam
MFXVideoENCODE_Init
MFXVideoENCODE_Query
MFXVideoENCODE_QueryIOSurf
MFXVideoENCODE_Reset
MFXVideoUSER_ProcessFrameAsync
MFXVideoUSER_Register
MFXVideoUSER_Unregister
MFXVideoVPP_Close
MFXVideoVPP_GetVPPStat
MFXVideoVPP_GetVideoParam
MFXVideoVPP_Init
MFXVideoVPP_Query
MFXVideoVPP_QueryIOSurf
MFXVideoVPP_Reset
MFXVideoVPP_RunFrameVPPAsync
Name
.text
Size
17.9MB
Virtual Size
17.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
RT_CODE
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1016KB
Virtual Size
1015KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
248KB
Virtual Size
299KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
337KB
Virtual Size
336KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
Name
data
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
74KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=156, id=170, version=40117,
count=17, id=158, version=40117,
count=57, id=171, version=40117,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=131, id=1, productName=Unmarked objects,
count=6654, productName=Unmarked objects (old),
count=860, id=205, version=50522,
count=271, id=175, version=40117,
count=1, id=155, version=40117,
count=1, id=154, version=40117,
count=1, id=157, version=40117,
downloaded_from_www.guru3d.com.txt
- SHA256 9cd4355474d05b039bcf8617141791364748c415891969ba49c756cbef326ffc
- MD5 487d479444e63372d89e868d26e36668
- SHA1 b31c0ac6204d24c0b4f0a2e09e154d502004a002
- SHA512 2a2ab1a8cc44514fd55d8330a2b98dbe4410057847d84e4a34818bf157e77116c2b26cb1d1e9d4c6f13ef5b00e46b97d7313bf120a8869eff31f35ece794f747
- SSDEEP 384:sFQypEPEsnuxqgSZ+RKgwkZCsz2H1jdqsP:sFQKEPEsCSZvBqCZgsP
- TLSH T17E03B51EFA91D1441EFBA4FDAC256401B46F5AAD41F0DC2B3C7E9A8617D27F2918B082
- MD5 SHA1 SHA512 SSDEEP TLSH