CloudVideoMonitor-setup.zip
- SHA256 b550d7b4a57f9bd334eb10ccff0e88d1a88ffc8cce7fe6e90c644c3bd176db76
Overview
overview
3Static
static
3�...up.exe
windows10-2004-x64
3�...up.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...on.dll
windows10-2004-x64
3$PLUGINSDI...on.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3AACDecoder.dll
windows10-2004-x64
3AACDecoder.dll
windows11-ltsc_2024-x64
3AmrDll.dll
windows10-2004-x64
3AmrDll.dll
windows11-ltsc_2024-x64
3CMCenter.dll
windows10-2004-x64
3CMCenter.dll
windows11-ltsc_2024-x64
3CMDvsComm.dll
windows10-2004-x64
3CMDvsComm.dll
windows11-ltsc_2024-x64
3CMLanDevMgr.exe
windows10-2004-x64
3CMLanDevMgr.exe
windows11-ltsc_2024-x64
3CMPlayAV.dll
windows10-2004-x64
3CMPlayAV.dll
windows11-ltsc_2024-x64
3CMPlayBack.exe
windows10-2004-x64
3CMPlayBack.exe
windows11-ltsc_2024-x64
3CM_Billing_Clt.dll
windows10-2004-x64
3CM_Billing_Clt.dll
windows11-ltsc_2024-x64
3CM_Billing_UI.dll
windows10-2004-x64
3CM_Billing_UI.dll
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
Ƶͻ-2.1.11.2013.07.26-setup.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ƶͻ-2.1.11.2013.07.26-setup.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/GetVersion.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/GetVersion.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
AACDecoder.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
AACDecoder.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
AmrDll.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral18
Sample
AmrDll.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
CMCenter.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
CMCenter.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
CMDvsComm.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral22
Sample
CMDvsComm.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
CMLanDevMgr.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
CMLanDevMgr.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral25
Sample
CMPlayAV.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral26
Sample
CMPlayAV.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
CMPlayBack.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral28
Sample
CMPlayBack.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral29
Sample
CM_Billing_Clt.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral30
Sample
CM_Billing_Clt.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral31
Sample
CM_Billing_UI.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral32
Sample
CM_Billing_UI.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target CloudVideoMonitor-setup.zip
- Size 5.2MB
- Sample260929-phebjazbmg
- SHA256 b550d7b4a57f9bd334eb10ccff0e88d1a88ffc8cce7fe6e90c644c3bd176db76
- MD5 7393bee4940e60c12f011dce51322e13
- SHA1 8c577c6be5f4d420bdbe8fbb82f023ebc78989e9
- SHA512 f44284308507898e390abd519ad859e388877537a837c0efb2c5c8f861838417a8bb1bb345430136afae35abdc90f244949b5c084f28312ef58f14f7d71e2da1
- SSDEEP 98304:/3Aora1SZjIox6ejTdzo0E6imbU/JOUn1oMzl7r5B376LzCipC0nq:/3AorNy66eVoD2bURrD7rj3OLzlpCUq
- TLSH T1F64633EEA409B1CE5C76BDC305A1547C320C76A9C1B366A846F85A01CCFD9626F6C3E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 91 IoCs
Checks for missing Authenticode signature.
resource unpack001/Ƶͻ-2.1.11.2013.07.26-setup.exe unpack002/$PLUGINSDIR/GetVersion.dll unpack002/$PLUGINSDIR/LangDLL.dll unpack002/$PLUGINSDIR/StartMenu.dll unpack002/$PLUGINSDIR/System.dll unpack002/$PLUGINSDIR/UserInfo.dll unpack002/$PLUGINSDIR/nsDialogs.dll unpack002/AACDecoder.dll unpack002/AmrDll.dll unpack002/CMCenter.dll unpack002/CMDvsComm.dll unpack002/CMLanDevMgr.exe unpack002/CMPlayAV.dll unpack002/CMPlayBack.exe unpack002/CM_Billing_Clt.dll unpack002/CM_Billing_UI.dll unpack002/CM_CenterRes.dll unpack002/CM_Common_UI.dll unpack002/CM_DevMgr_Clt.dll unpack002/CM_LanDeviceMgr_UI.dll unpack002/CM_LocalSet_UI.dll unpack002/CM_LogInfo_Clt.dll unpack002/CM_LogInfo_UI.dll unpack002/CM_LoginMgr_UI.dll unpack002/CM_MediaMgr_Clt.dll unpack002/CM_MessageMgr_UI.dll unpack002/CM_Monitor.exe unpack002/CM_PermMgr_Clt.dll unpack002/CM_PlaybackImageMgr_UI.dll unpack002/CM_PlaybackMgr_UI.dll unpack002/CM_RolePerm_UI.dll unpack002/CM_ServerMgr_Clt.dll unpack002/CM_ServerMgr_UI.dll unpack002/CM_Setting_UI.dll unpack002/CM_Statistics_UI.dll unpack002/CM_StatsMgr_Clt.dll unpack002/CM_SysCfgMgr.dll unpack002/CM_UserMgr_Clt.dll unpack002/CM_UserPermMgr_UI.dll unpack002/DllDeinterlace.dll unpack002/GDIPLUS.DLL unpack002/MP3Decoder.dll unpack002/MSVCRTD.DLL unpack002/SG_DHDVRCommon.dll unpack002/Uninstall.exe unpack003/$PLUGINSDIR/CheckFileDLL.dll unpack003/$PLUGINSDIR/GetVersion.dll unpack003/$PLUGINSDIR/LangDLL.dll unpack003/$PLUGINSDIR/System.dll unpack002/Update.dll unpack002/cachefile.dll unpack002/cmav.dll unpack002/cmavmodule/conversion.dll unpack002/cmavmodule/div2coder.dll unpack002/cmavmodule/gsm610.dll unpack002/cmavmodule/h264decoder.dll unpack002/cmavmodule/h264encoder.dll unpack002/cmavmodule/hivoice.dll unpack002/cmavmodule/mmstaticfunc.dll unpack002/cmavmodule/multimedia.dll unpack002/cmavmodule/speex.dll unpack002/cmavmodule/videocapture.dll unpack002/cmavmodule/videocapturemgr.dll unpack002/cmavmodule/videodecodercontainer.dll unpack002/cmavmodule/videodevwdm2.dll unpack002/cmavmodule/videoencodercontainer.dll unpack002/cmavmodule/videorendererdx.dll unpack002/cmavmodule/wavedecodercontainer.dll unpack002/cmavmodule/waveencodercontainer.dll unpack002/cmavmodule/waveex.dll unpack002/cmnet.dll unpack002/dhconfigsdk.dll unpack002/dhdvr.dll unpack002/dhnetsdk.dll unpack002/dhplay.dll unpack002/dllh264.dll unpack002/dllmpeg4.dll unpack002/downmgr.dll unpack002/httpdown.dll unpack002/jpegdec.dll unpack002/kdm.dll unpack002/lib_VoiceEngine_dll.dll unpack002/monitordown.dll unpack002/mstorage.dll unpack002/sgmempool.dll unpack002/sgupdate.dll unpack002/sgupdateapp.exe unpack002/smvxplay.dll unpack002/sqlite3.dll unpack002/updateres.dll unpack002/virtualmem.dll - NSIS installer 4 IoCs
resource yara_rule static1/unpack001/Ƶͻ-2.1.11.2013.07.26-setup.exe nsis_installer_1 static1/unpack001/Ƶͻ-2.1.11.2013.07.26-setup.exe nsis_installer_2 static1/unpack002/Uninstall.exe nsis_installer_1 static1/unpack002/Uninstall.exe nsis_installer_2
File Explorer
-
CloudVideoMonitor-setup.zip.zip 5.2MB
-
Ƶͻ-2.1.11.2013.07.26-setup.exe.exe 5.3MB
-
$PLUGINSDIR/GetVersion.dll.dll 6KB
-
$PLUGINSDIR/LangDLL.dll.dll 5KB
-
$PLUGINSDIR/StartMenu.dll.dll 7KB
-
$PLUGINSDIR/System.dll.dll 10KB
-
$PLUGINSDIR/UserInfo.dll.dll 4KB
-
$PLUGINSDIR/modern-header.bmp25KB
-
$PLUGINSDIR/modern-wizard.bmp51KB
-
$PLUGINSDIR/nsDialogs.dll.dll 9KB
-
AACDecoder.dll.dll 272KB
-
AmrDll.dll.dll 164KB
-
CMCenter.dll.dll 348KB
-
CMDvsComm.dll.dll 600KB
-
CMLanDevMgr.exe.exe 292KB
-
CMPlayAV.dll.dll 112KB
-
CMPlayBack.exe.exe 304KB
-
CM_Billing_Clt.dll.dll 92KB
-
CM_Billing_UI.dll.dll 296KB
-
CM_CenterRes.dll.dll 624KB
-
CM_Common_UI.dll.dll 172KB
-
CM_DevMgr_Clt.dll.dll 852KB
-
CM_LanDeviceMgr_UI.dll.dll 796KB
-
CM_LocalSet_UI.dll.dll 140KB
-
CM_LogInfo_Clt.dll.dll 76KB
-
CM_LogInfo_UI.dll.dll 88KB
-
CM_LoginMgr_UI.dll.dll 176KB
-
CM_MediaMgr_Clt.dll.dll 652KB
-
CM_MessageMgr_UI.dll.dll 60KB
-
CM_Monitor.exe.exe 2.0MB
-
CM_Monitor.exe.manifest.xml 474B
-
CM_Monitor.ini465B
-
CM_PermMgr_Clt.dll.dll 72KB
-
CM_PlaybackImageMgr_UI.dll.dll 480KB
-
CM_PlaybackMgr_UI.dll.dll 1.5MB
-
CM_RolePerm_UI.dll.dll 160KB
-
CM_ServerMgr_Clt.dll.dll 60KB
-
CM_ServerMgr_UI.dll.dll 216KB
-
CM_Setting_UI.dll.dll 1.0MB
-
CM_Statistics_UI.dll.dll 228KB
-
CM_StatsMgr_Clt.dll.dll 96KB
-
CM_SysCfgMgr.dll.dll 104KB
-
CM_UserMgr_Clt.dll.dll 236KB
-
CM_UserPermMgr_UI.dll.dll 460KB
-
DllDeinterlace.dll.dll 48KB
-
GDIPLUS.DLL.dll 1.7MB
-
LoginImage/CMClient.ico33KB
-
LoginImage/CMClientOffline.ico33KB
-
LoginImage/LoginWndBkg.bmp322KB
-
MP3Decoder.dll.dll 168KB
-
MSVCRTD.DLL.dll 376KB
-
SG_DHDVRCommon.dll.dll 300KB
-
Uninstall.exe.exe 55KB
-
$PLUGINSDIR/CheckFileDLL.dll.dll 20KB
-
$PLUGINSDIR/GetVersion.dll.dll 6KB
-
$PLUGINSDIR/LangDLL.dll.dll 5KB
-
$PLUGINSDIR/System.dll.dll 10KB
-
$PLUGINSDIR/modern-header.bmp25KB
-
Update.dll.dll 472KB
-
Update.xml.xml 462B
-
cachefile.dll.dll 108KB
-
cmav.dll.dll 84KB
-
cmav.ini1KB
-
cmavmodule/conversion.dll.dll 100KB
-
cmavmodule/div2coder.dll.dll 52KB
-
cmavmodule/gsm610.dll.dll 60KB
-
cmavmodule/h264decoder.dll.dll 392KB
-
cmavmodule/h264encoder.dll.dll 72KB
-
cmavmodule/hivoice.dll.dll 44KB
-
cmavmodule/mmstaticfunc.dll.dll 28KB
-
cmavmodule/multimedia.dll.dll 44KB
-
cmavmodule/speex.dll.dll 96KB
-
cmavmodule/videocapture.dll.dll 68KB
-
cmavmodule/videocapturemgr.dll.dll 28KB
-
cmavmodule/videodecodercontainer.dll.dll 40KB
-
cmavmodule/videodevwdm2.dll.dll 132KB
-
cmavmodule/videoencodercontainer.dll.dll 40KB
-
cmavmodule/videorendererdx.dll.dll 172KB
-
cmavmodule/wavedecodercontainer.dll.dll 36KB
-
cmavmodule/waveencodercontainer.dll.dll 36KB
-
cmavmodule/waveex.dll.dll 84KB
-
cmnet.dll.dll 192KB
-
dhconfigsdk.dll.dll 264KB
-
dhdvr.dll.dll 284KB
-
dhnetsdk.dll.dll 872KB
-
dhplay.dll.dll 1.2MB
-
dllh264.dll.dll 332KB
-
dllmpeg4.dll.dll 316KB
-
downmgr.dll.dll 80KB
-
httpdown.dll.dll 112KB
-
jpegdec.dll.dll 64KB
-
kdm.dll.dll 156KB
-
language.ini826B
-
lib_VoiceEngine_dll.dll.dll 48KB
-
monitordown.dll.dll 100KB
-
mstorage.dll.dll 52KB
-
productid.ini64B
-
sgmempool.dll.dll 32KB
-
sgupdate.dll.dll 148KB
-
sgupdateapp.exe.exe 132KB
-
sgupdateapp.exe.manifest.xml 474B
-
smvxplay.dll.dll 164KB
-
sqlite3.dll.dll 552KB
-
sysvideo.ini27B
-
updateres.dll.dll 156KB
-
virtualmem.dll.dll 56KB
-
ûʹֲ.chm.chm 250KB
Ƶͻ-2.1.11.2013.07.26-setup.exe
- IMPHASH dfb06052e74b26a42b0e490bd1c07959
- SHA256 a7c3f8ca79483395ccac678ec4252a625a7464aa57eb47f9db32b2b472cab258
- MD5 8118e03d3258809e6eb053ef050f6978
- SHA1 7f1752017521bddea80d28206ffc5b2e5a5fbcd0
- SHA512 ddbc62ca8393b3b9dbb382b86f3e86d44c2b0cd322f679fd16edc975dcc496a84d2eaa21470b7495b7f429c1be3f355803a29c2c165031e643905dfcd28da67c
- SSDEEP 98304:c7ooXIRoRzagx6YxxhfimE8sAbs7DMUV1YC33XFbbP7GlpMMHY0JA:c7ooXvoS6YVilsbsvhPXFfPKlphHYEA
- TLSH T1444633DEA405E0CFCC716EF306A5547C221C6A99C1B3265A47F87E01DCBA4625F6D2E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
13984
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
MulDiv
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
RegisterClassA
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
EmptyClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetForegroundWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, version=2190,
count=158, id=1, productName=Unmarked objects,
count=17, id=93, version=2179,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/GetVersion.dll
- IMPHASH 5e41893d1528e7648e03f81030aca366
- SHA256 7d76c7dd8f7cd5a87e0118dacb434db3971a049501e22a5f4b947154621ab3d4
- MD5 5264f7d6d89d1dc04955cfb391798446
- SHA1 211d8d3e7c2b2f57f54a11cb8bc4fa536df08acc
- SHA512 80d27ee2f87e2822bd5c8c55cc3d1e49beebb86d8557c92b52b7cbea9f27882d80e59eefa25e414eecee268a9a6193b6b50b748de33c778b007cde24ef8bcfb7
- SSDEEP 96:E12Z84uiwpGTVTDSpaHYfniz0R3GhCvXY6Ix5vdR7pBi46AQ5Vu4:2STVTGwYhR3GhCvy5vH7pBi46AQ5Vu
- TLSH T1F4D1C3F343E50BE0D03751BE40D64A9B0770E6684EE0E46A48478DE264E731AEF3BB15
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetProcAddress
lstrcmpiA
GetSystemInfo
GlobalAlloc
lstrcpynA
GetModuleHandleA
lstrcatA
GetVersionExA
user32
wsprintfA
GetSystemMetrics
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
WindowsName
WindowsPlatformArchitecture
WindowsPlatformId
WindowsServerName
WindowsServicePack
WindowsServicePackBuild
WindowsServicePackMajor
WindowsServicePackMinor
WindowsType
WindowsVersion
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
374B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=93, version=2067,
count=5, id=93, version=2179,
count=13, id=1, productName=Unmarked objects,
count=1, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=92, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,
$PLUGINSDIR/LangDLL.dll
- IMPHASH 9b6b6a7858e17fb0b17e1c1428330343
- SHA256 4b6f2ff82fc4ef5533141681a59e2d8b4ebe013c4be2e423c81a3191b9cc3239
- MD5 ff580abf149f3f22a0cc310a6b7ea41b
- SHA1 d52c18cd9e4b6d76f8070b880f7607c8a3f0a2fe
- SHA512 b2aba398e60f98a8649bfc8653ea16279e21e1234fd932c45f8d66f04bd599e6296acd1d11c0c41d8bc83bb14284231dd8c56195e93fdb00605ad660a6827f4d
- SSDEEP 48:S/EFLUmNDsKWMPUptxEqK6/loUI+VcNSmwVs3J0vrpXLta1JvR0Joofbm:3RDsKGEi/ZVcNSmwVs3JI9t8R0N
- TLSH T1C6C1C773B3C641F6D6950233656333C36253AA343365420F9B6791AB39109E7DD2EB83
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5533
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalFree
GetACP
lstrlenA
lstrcmpA
lstrcpynA
GetModuleHandleA
MulDiv
lstrcpyA
GlobalAlloc
user32
SetWindowTextA
SetDlgItemTextA
SendDlgItemMessageA
EndDialog
DialogBoxParamA
LoadIconA
SendMessageA
ShowWindow
GetDC
gdi32
CreateFontIndirectA
GetDeviceCaps
DeleteObject
LangDialog
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
697B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
322B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=19, version=8078,
$PLUGINSDIR/StartMenu.dll
- IMPHASH a648aeaa164b592c1e8892a10400b5ae
- SHA256 05f699d932f1fea8e6f1a711c3bc8ba51463b924b78a68bfd0683295de008da1
- MD5 72f18eaa88886bd0d46de64a17d9720c
- SHA1 e604c84de0ded023cf4c5e215c0534faf1d18227
- SHA512 5a80e303f1418dde67ffe0b9b60d574b85634de0d2b557a6691229812e9b376fb34ba7e276efd0e20f35baec91f1030b738e2138d7b7ee146715fcab5cd7e018
- SSDEEP 96:VgJbo7bG2VHk3C45rJixqE+6nSvMn0iGLG8wq/aAtJ1t2RhU1fU:qJk7ZHgRJRHvcwBwqP/t6wf
- TLSH T10FF1E57AFBC008F3CA5B46703C077B178B66A621532561A38B6316CA79C26F3ED25712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6386
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleA
lstrcatA
FindClose
FindNextFileA
MulDiv
GlobalFree
lstrcpynA
GlobalAlloc
lstrcmpiA
FindFirstFileA
lstrcpyA
user32
TranslateMessage
GetMessageA
IsDialogMessageA
PostMessageA
DispatchMessageA
GetWindowLongA
CheckDlgButton
ShowWindow
LoadIconA
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextA
SendMessageA
IsDlgButtonChecked
GetWindowTextA
DestroyWindow
GetDlgItem
CreateDialogParamA
SetWindowLongA
wsprintfA
CallWindowProcA
gdi32
GetTextMetricsA
SelectObject
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ole32
CoTaskMemFree
Init
Select
Show
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
296B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
518B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=42, id=1, productName=Unmarked objects,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=19, version=8078,
$PLUGINSDIR/System.dll
- IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
- SHA256 761dcdf12f41d119f49dbdca9bcab3928bbdfd8edd67e314d54689811f9d3e2f
- MD5 2b54369538b0fb45e1bb9f49f71ce2db
- SHA1 c20df42fda5854329e23826ba8f2015f506f7b92
- SHA512 25e4898e3c082632dfd493756c4cc017decbef43ffa0b68f36d037841a33f2a1721f30314a85597ac30c7ecc99b7257ea43f3a903744179578a9c65fcf57a8b7
- SSDEEP 192:ibEOXfXZQ6i1AZ2q6grklcm/iaULQAos:ib/41AZN6uklckLUJo
- TLSH T106222D4563E141F3D095813C086B3B7A47FE7A2865644ED3CF6328829F29DEAAD77312
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10792
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect
user32
wsprintfA
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
784B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
470B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=14, version=7299,
count=19, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=18, version=8444,
count=4, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=19, version=8078,
$PLUGINSDIR/UserInfo.dll
- IMPHASH afa8e526425f3585465337467d0b5909
- SHA256 2f5cb1445f30c164aa553484ac45aba2111a49fd80784b75dfeec7e0110ec309
- MD5 399ccf738bc1af3b47220695a4893698
- SHA1 b70b37f5f3504f10a4d2a918b3ce3cae29828e91
- SHA512 a71ad49050747790f16d32bc08708fd08cb82816968fc56f0c3c134eb8219cbc2beca075d543f62fddb2a6f2c8a2065fe20ba6ec16c150eb69c0dcc5a97ba3ac
- TLSH T16981717793E00AF7E0884B3B00D71CD713B2C8745395411F89671ECA24B5A6BEE6EB06
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4771
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetVersion
GetCurrentThread
lstrcpynA
GetCurrentProcess
GetModuleHandleA
GetProcAddress
GetLastError
GlobalFree
CloseHandle
GlobalAlloc
advapi32
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
GetUserNameA
OpenThreadToken
GetAccountType
GetName
GetOriginalAccountType
Name
.text
Size
1024B
Virtual Size
750B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
673B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
190B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=19, version=8078,
$PLUGINSDIR/modern-header.bmp
- SHA256 5bed81e7fc72f732a6d186ce1fe604592965dc2a11e48e95e66522e035b9de54
- MD5 c44dcffdf34b10d976328482ec7ed540
- SHA1 5ea8f6f35e10d275b2e0fe8d91d23b2471d261b0
- SHA512 ceef4f067fa3e57b2e0b247cb628a6f95066995025d450cfd3e18fbddcc65be4948d4adef92f6cbbfe21b2299f61a6499d8bf3b32e9bc5fa95c2ab68b6cc6481
- SSDEEP 96:edR6Q4cXsfCtRzvvKSyn+vlb/QsC638Haz4HA9viP+OiQTiE5u1lQWIv:edR6NcoeRzvvKSynEjQF6n2UaPji1G
- TLSH T16BC2E7217508C84194966318DE39CAFC93B71ED9FEFDBA0B3950BB9F7F761882029095
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/modern-wizard.bmp
- SHA256 331d997e586cba40d4da0587887fc4caa4cc44e53421737dafa67e67445e6753
- MD5 ab2021e67e0e08657288d880abfbaa72
- SHA1 ffcf7956d5aaad47f4801b32b5fc893dc78a6dbc
- SHA512 e2975814169efe247b2f8954d60f331eea9340419f96255e4d0ce3c19ff9ddd3b98ec87f51d73ce3dae045142c2c40e600ad7d5dca3eeb156e038eba1a21bac9
- SSDEEP 1536:e14QhBgKrsMGr5G+slCbUuz2KLj3tC7wjsX/jVh9:e14QhBgdACFleksXD9
- TLSH T13B33D964D418FD39ED02D6340438E2DF722E0F54A671CC3DBA69B5291DB32E83BA5E64
- MD5 SHA1 SHA512 SSDEEP TLSH
$PLUGINSDIR/nsDialogs.dll
- IMPHASH 1e2884056e655f2b7bc5a904e352fc80
- SHA256 79914940cbbf70a385f13a9970a9d577d7a7e07d240fe44563b45a472cd4bc3f
- MD5 c6284e23cd7e4d11db8298deb4541083
- SHA1 e338686c7579620383ab8cc5a51bbb8d846f60cf
- SHA512 72103e470d770fb402a18e975ff339526a3e4c9aeb8fac1b0977995a6eace0eca965b1915404df9b5a25b59628db1b199d2b9b10372841309c137054356a5cd7
- SSDEEP 96:q0HzOxnC1hncrcpRciM8wcxMkDOW6LbUXv8X2PXv5bcndYosRn:qJxw3pmiMRxNE/8c5bcdo
- TLSH T13A121BA35A5001B3D5922239316E2A3FD77CA325D0532D03C2779F466AB53597E3E385
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7432
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrcpyA
GetFileAttributesA
lstrcmpiA
MulDiv
lstrlenA
HeapFree
GetCurrentDirectoryA
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
GetProcessHeap
SetCurrentDirectoryA
user32
GetPropA
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
RemovePropA
CharPrevA
GetWindowLongA
DrawTextA
GetWindowTextA
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapWindowPoints
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
MapDialogRect
GetClientRect
CharNextA
SendMessageA
DrawFocusRect
gdi32
SetTextColor
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
574B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=53, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=19, version=8078,
AACDecoder.dll
- IMPHASH 0c9ec1c9c5dc5e8296e50698ebb5b5de
- SHA256 68076b56b36fdd5670507b008469eac704d1758f76935c61eba3af98b404e210
- MD5 cbe124335264e8b89c36fac3627f7f92
- SHA1 197dea050a28cf3d97b52d99b8241020010c0a15
- SHA512 4ecb84e7c49af53b2caa0b9848b0bd46adc4e4dceb1c1d060c431ed093696ba02420bf69bcf622fd60c20c7c4d86273bd49b4c96a777fecab5e854715ef76a25
- SSDEEP 6144:Qph364nt9EhhumF0Q0D3fu4KJfOMBfcBG:Qz362tenFA7K9Oy8G
- TLSH T1BD44AE02A2829172F0473B72C49BEF36C536CE60452B8A47B7E4FD5FACE1B41652774A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7208
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
OutputDebugStringA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
RaiseException
GetProcAddress
GetModuleHandleA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
AAC_Cleanup
AAC_Close
AAC_Decode
AAC_Init
AAC_Open
Name
.text
Size
136KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
92KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=27, id=14, version=7299,
count=117, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=19, version=8034,
count=69, id=1, productName=Unmarked objects,
count=3, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
AmrDll.dll
- IMPHASH b58634822a69d0c315367b2259e3ee43
- SHA256 f04b4b508f38c02ae19949abee62684510a0b1fea6b400c2b0a7d6c83270ce34
- MD5 a2cc8a53e8cf1e426afe6ec1043163f0
- SHA1 916b7e72abe0011c45fa1938a6e956abf6121f54
- SHA512 5c807da29a0787315d4468db756707e39f04bcf3bb60fe16bbfedda364e82b225e5efacf5074be6a72f0265ccd9402e42ee64b99f24f622f675efb9dcb31d4e8
- SSDEEP 3072:nZtfXReZDLA0wyWB7LeITbCvUDRbURbrRbAARbzcoNL1:nZtZ8LsyEL0vUDR4R/RDRt1
- TLSH T183F39E0360764272DAB0933994937E335A3AD47B2711461293F0ED756E39A23DAE73CB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
55481
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetCommandLineA
GetVersion
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
FlushFileBuffers
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
CloseHandle
SetStdHandle
AMR_Decode_Exit
AMR_Decode_Frame
AMR_Decode_Init
AMR_Encode_Exit
AMR_Encode_Frame
AMR_Encode_Init
AMR_Get_Length
Name
.text
Size
72KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
44KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
36KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=20, id=14, version=7299,
count=78, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=50, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=70, id=1, productName=Unmarked objects,
count=3, id=19, version=8034,
count=2, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
CMCenter.dll
- IMPHASH a41a3617077db2e9a2ad5fc6858419d8
- SHA256 3bee75812d202dd33f0e4ef81b02f18b9e42b13526513e537e898bbc3a5df9dd
- MD5 11fa4f2dbe7b7061ec29f86406353bc7
- SHA1 84b0d540aaa0c67589dc8408fa5d1f2af91581a4
- SHA512 ac364a545337f5a01400526938264dbd6c8216647594ed12deb8307015171b5a9a244d57f0a2baba85fa6a2368c045f53785faf199acb847b964244f5bb3d394
- SSDEEP 6144:FPul13Otl/zeAT6WKbxqcll6sNCNeWMPlEwWeT6eyS6wv2tTBIGoQ75qqDLuRI2:FPun3Otl/zeAT6WKbxqcll6sNCgWMPlD
- TLSH T1CB747D01A9C244F6C98506795CBFAB3A65785BC51B8297CB878CFE851F321C35A322DF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
189159
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrlenW
InterlockedIncrement
OutputDebugStringA
GetVersionExW
WaitForSingleObject
SetEvent
TerminateThread
ResumeThread
SetThreadPriority
CreateEventW
CreateThread
CloseHandle
GetTickCount
ExitThread
CreateDirectoryW
WideCharToMultiByte
SetCurrentDirectoryW
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
LoadLibraryW
FreeLibrary
LocalFree
DisableThreadLibraryCalls
Sleep
DuplicateHandle
ReleaseSemaphore
CreateSemaphoreW
GetLocalTime
DeleteFileW
MultiByteToWideChar
GetModuleHandleW
InterlockedDecrement
lstrcatW
lstrlenA
UnlockFileEx
LockFileEx
FileTimeToLocalFileTime
FileTimeToSystemTime
FlushFileBuffers
FindFirstFileW
FindClose
GetFullPathNameW
GetProcAddress
LoadLibraryA
GetLastError
LeaveCriticalSection
TryEnterCriticalSection
CreateDirectoryA
GetModuleFileNameA
GetStdHandle
AllocConsole
SetEndOfFile
WriteFile
ReadFile
SetFilePointer
CreateFileW
MoveFileExW
OutputDebugStringW
WriteConsoleW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
user32
SendMessageW
EndDialog
FindWindowExW
GetWindowThreadProcessId
IsWindow
GetParent
SetWindowLongW
GetWindowLongW
UnregisterClassW
RegisterClassExW
DestroyWindow
CreateWindowExW
PostMessageW
DefWindowProcW
SetTimer
LoadStringW
CharNextW
CharNextA
KillTimer
advapi32
RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExW
oleaut32
SysFreeString
SetErrorInfo
CreateErrorInfo
VariantClear
SysAllocString
VariantChangeType
VariantInit
GetErrorInfo
sgmempool
ord2
ord1
winmm
timeGetTime
timeSetEvent
timeKillEvent
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
msvcrt
wcsncpy
_ftol
realloc
malloc
vswprintf
swprintf
iswdigit
_wtoi
wcscmp
free
wcsrchr
srand
_CxxThrowException
_vsnprintf
_vsnwprintf
fclose
fputs
fopen
ctime
time
_wctime
strrchr
_wcsdup
fflush
_fdopen
_dup2
_open_osfhandle
_iob
localtime
_tzset
isspace
wcscpy
memcpy
memset
rand
wctomb
_wcsicmp
__dllonexit
_onexit
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
wcschr
iswspace
memmove
wcsstr
atoi
wcslen
sprintf
vsprintf
strstr
_assert
printf
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_purecall
isdigit
ws2_32
accept
WSAGetLastError
getpeername
gethostbyname
connect
ntohs
inet_ntoa
inet_addr
getsockname
setsockopt
getsockopt
socket
bind
htons
htonl
closesocket
__WSAFDIsSet
select
recv
gethostname
listen
ntohl
send
msvcrtd
_timezone
ole32
CoInitialize
CoUninitialize
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
204KB
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
44KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
84KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=11, version=8798,
count=1, id=12, version=7291,
count=1, id=11, version=8047,
count=5, id=14, version=7299,
count=5, id=10, version=8047,
count=4, id=4, version=8047,
count=10, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=15, id=93, version=2179,
count=187, id=1, productName=Unmarked objects,
count=36, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CMDvsComm.dll
- IMPHASH 08bcdd3e2f0a8617d1af58af8ca52eee
- SHA256 d8e546d2636506db219287f4471b24baaad3ed0b74e7fb8557c99170a579b7eb
- MD5 7bb18b8181252e21de95a98a9ca03524
- SHA1 e90451501ff21d046179e1febb01791fbdd64767
- SHA512 19f6fdb82b8134356418125cc0558b4763ecf3aa57c965464e796043c3e59d2b285fe51218ecf386e6c5df34bda4cec6a6d99ca30fbcaa0bf9483aa90ef9b56e
- SSDEEP 12288:MKXFJqJ5W6Q73gwQiCx39XdFRkVksOMWlhQD/jeOtTOTqqnu/c0:MKXF65WdSx8VzAlhQD/jptTZ+u/c0
- TLSH T18BD45C43D5D680F6DADC19741A3EBF386E7902E64716ABD7BF1EFD4486108C2683B04A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
472001
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrlenA
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
OutputDebugStringA
GetCurrentThreadId
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
OutputDebugStringW
CreateDirectoryA
GetModuleFileNameA
GetStdHandle
AllocConsole
SetEndOfFile
WriteFile
ReadFile
SetFilePointer
CreateFileW
MoveFileExW
lstrcatW
CloseHandle
WriteConsoleW
GetLastError
GetFullPathNameW
FindClose
FindFirstFileW
FlushFileBuffers
FileTimeToSystemTime
FileTimeToLocalFileTime
LockFileEx
UnlockFileEx
DeleteFileW
GetLocalTime
CreateSemaphoreW
WaitForSingleObject
ReleaseSemaphore
ResumeThread
CreateEventW
CreateThread
DuplicateHandle
GetCurrentProcess
SetEvent
TerminateThread
ExitThread
DisableThreadLibraryCalls
user32
CharNextA
CharNextW
ole32
CoInitialize
CoUninitialize
sgmempool
ord1
ord2
winmm
timeGetDevCaps
timeBeginPeriod
timeGetTime
timeKillEvent
timeEndPeriod
timeSetEvent
msvcrt
_dup2
_onexit
__dllonexit
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
malloc
memset
memcpy
srand
iswspace
isspace
_wtoi
iswdigit
_purecall
__CxxFrameHandler
??3@YAXPAX@Z
_assert
??2@YAPAXI@Z
wcsncpy
vswprintf
_CxxThrowException
printf
wcscpy
vsprintf
sprintf
wcslen
isdigit
atoi
time
strchr
rand
fread
fseek
_vsnprintf
_vsnwprintf
fclose
fputs
fopen
ctime
_wctime
strrchr
_wcsdup
swprintf
fflush
_fdopen
_stricmp
_open_osfhandle
_iob
free
localtime
wcsrchr
_tzset
ws2_32
listen
accept
setsockopt
htons
inet_addr
inet_ntoa
htonl
ntohl
gethostname
ntohs
getsockname
getsockopt
socket
bind
closesocket
__WSAFDIsSet
select
recv
send
connect
gethostbyname
msvcrtd
_timezone
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
484KB
Virtual Size
483KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
64KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
28KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=1, id=11, version=8047,
count=7, id=14, version=7299,
count=5, id=10, version=8047,
count=4, id=4, version=8047,
count=10, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=48, version=9044,
count=11, id=93, version=2179,
count=138, id=1, productName=Unmarked objects,
count=25, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CMLanDevMgr.exe
- IMPHASH d02bb0f9aee230dc3f7317672f0cbd6d
- SHA256 58af280ff2f4d202e51941568ef3bb558d364064c3d0b2d8f8117044bd1b5f29
- MD5 e31388e1ba9865154c8eefd555c665ff
- SHA1 8bd3846fd0a70a9af3111acb5986998c4c0b5c39
- SHA512 c9a9e5e6573a664d3f38d65f9a324466215570b9b6e23febbe6c4f1b0abe929c5f734f956919efc60048c37ecfedadcf5374480885c44b87df173dd3256c776e
- SSDEEP 3072:D17pBqjRIDIZEZMQSkHhHLmIEcguC7jj0DD1ZKTWhm0UzvtqXQDM:R7pZSEZlHB+7jjatQAQ
- TLSH T147546B0AEAC609F6DB0115740CFFAB763135AA854F035FF3E329EE9859172D1922329D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
144879
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CreateDirectoryA
GetModuleFileNameA
GetProcAddress
FreeLibrary
LoadLibraryA
GetLastError
lstrcatW
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
Sleep
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
FlushInstructionCache
InterlockedDecrement
GetModuleFileNameW
SetCurrentDirectoryW
CreateDirectoryW
WideCharToMultiByte
lstrlenA
SetEvent
WaitForSingleObject
TerminateThread
CloseHandle
lstrlenW
InterlockedIncrement
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
GetStartupInfoA
GetModuleHandleA
ExitThread
DuplicateHandle
CreateThread
CreateEventW
ResumeThread
ReleaseSemaphore
CreateSemaphoreW
OutputDebugStringA
user32
PostQuitMessage
GetActiveWindow
DialogBoxParamW
GetMessageW
TranslateMessage
RegisterClassExW
DestroyWindow
DispatchMessageW
GetClassInfoExW
PostMessageW
LoadStringW
CharNextW
CharNextA
DefWindowProcW
InvalidateRect
IsWindow
SetTimer
KillTimer
wsprintfW
InflateRect
FillRect
GetClientRect
EndPaint
CopyRect
BeginPaint
SetWindowLongW
GetWindowLongW
CallWindowProcW
ShowWindow
EnableWindow
CreateWindowExW
GetDlgItem
DrawTextW
EndDialog
OffsetRect
UnregisterClassW
LoadCursorW
gdi32
GetStockObject
SaveDC
SetBkMode
SetTextColor
RestoreDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
DeleteObject
MoveToEx
LineTo
BitBlt
DeleteDC
CreatePen
SelectObject
sqlite3
sqlite3_column_bytes
sqlite3_column_int64
sqlite3_column_double
sqlite3_column_int
sqlite3_column_blob
sqlite3_column_name
sqlite3_column_type
sqlite3_data_count
sqlite3_column_count
sqlite3_column_text
sqlite3_prepare_v2
sqlite3_step
sqlite3_finalize
sqlite3_close
sqlite3_open
sgmempool
ord1
ord2
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
fprintf
_snprintf
tolower
strncmp
isalnum
isalpha
_timezone
_strcmpi
_ltoa
_itoa
_purecall
__CxxFrameHandler
??3@YAXPAX@Z
wcslen
??2@YAPAXI@Z
memmove
printf
_wcsicmp
wcsncpy
vswprintf
swprintf
iswdigit
_wtoi
sprintf
wcsrchr
_assert
atoi
vsprintf
isdigit
atol
_XcptFilter
swscanf
wcsstr
strstr
sscanf
wcscmp
free
strrchr
strchr
_vsnprintf
fclose
fputs
fopen
time
_tzset
isspace
srand
__dllonexit
_onexit
_except_handler3
_exit
msvcp60
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
ws2_32
inet_addr
gethostname
gethostbyname
htonl
htons
closesocket
send
ole32
CoUninitialize
CoInitialize
winmm
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
timeSetEvent
timeKillEvent
timeGetTime
Name
.text
Size
176KB
Virtual Size
175KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=96, version=2190,
count=4, id=12, version=7291,
count=1, id=11, version=8047,
count=5, id=14, version=7299,
count=11, id=10, version=8047,
count=4, id=4, version=8047,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=23, id=93, version=2179,
count=421, id=1, productName=Unmarked objects,
count=35, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
CMPlayAV.dll
- IMPHASH 445c57a0f9020a94dad04da5db751245
- SHA256 a3525dd6b9ed3ff84f10e55dcf21ae2c595817333cf71a300ae03d916c855d89
- MD5 caabc414dc0a0b8ce2576786e58eb50e
- SHA1 e86c2eaaf341869eeef3e5b78cac028ac5ec42d9
- SHA512 e1db254b576ab13727a93102b9531a8c47858ca921cf20f7ced8ba6ecb84190cbb298d3fb92c4d02039f964cf4267ad64a9e261d8d4ac8edab30ec347d5072e7
- SSDEEP 1536:MGmWzyCodOKHMI0wfgQSI9IyMyi2uUduaffmSEppp6EMDrHw:MJWVodDHMI0MgQ62L+SEppp61DD
- TLSH T1DEB33A05BDD608F1E28A563C9D7BB732627E5AD88B678FC39338FDA009212D194761C7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
72803
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetFileSize
SetFilePointer
WriteFile
ReadFile
CreateFileW
WaitForSingleObject
CloseHandle
ResumeThread
GetCurrentThreadId
LeaveCriticalSection
CreateSemaphoreW
ReleaseSemaphore
CreateEventW
DuplicateHandle
GetCurrentProcess
SetEvent
TerminateThread
ExitThread
GetProcAddress
GetModuleFileNameA
CreateDirectoryA
SetFileAttributesA
GetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
RemoveDirectoryA
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
MultiByteToWideChar
lstrlenW
Sleep
GetModuleFileNameW
WideCharToMultiByte
lstrlenA
InterlockedDecrement
CreateThread
FreeLibrary
LoadLibraryA
GetLastError
FlushInstructionCache
OutputDebugStringW
OutputDebugStringA
DeleteFileA
EnterCriticalSection
user32
CreateWindowExW
DestroyWindow
RegisterClassExW
UnregisterClassW
SendMessageW
PostMessageW
CharNextA
GetClientRect
CharNextW
DefWindowProcW
SetWindowLongW
winmm
timeGetDevCaps
timeEndPeriod
timeSetEvent
timeKillEvent
timeGetTime
timeBeginPeriod
msvcrt
_adjust_fdiv
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
time
ctime
fopen
fputs
fclose
_vsnwprintf
_vsnprintf
strchr
strrchr
memmove
srand
_beginthreadex
wcscpy
_wtoi
iswdigit
swprintf
vswprintf
printf
malloc
atoi
isdigit
wcslen
sprintf
vsprintf
??2@YAPAXI@Z
_CxxThrowException
free
__CxxFrameHandler
wcsrchr
??3@YAXPAX@Z
_assert
_purecall
_tzset
ws2_32
inet_addr
closesocket
send
ole32
CoUninitialize
CoInitialize
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
72KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=96, version=2190,
count=2, id=12, version=7291,
count=3, id=14, version=7299,
count=4, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=21, id=93, version=2179,
count=275, id=1, productName=Unmarked objects,
count=23, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
CMPlayBack.exe
- IMPHASH 1d4e726b99e9a31324047e66675500d7
- SHA256 bfbc2ca39d6a9eb5f23ed03358872e1e34c46629a237ea108d5c837f4af1e840
- MD5 d4b6d3758748daaae99ba14ce0655129
- SHA1 270fcde322e58ce138d611b1a0ab5c164f117fb9
- SHA512 10b2fe1528acf497bc633c002bd761835560e7e376c5aec8ba825246c0e22ef8cb9e91b8208fce1563ed3de0bab9faba0b824e12e897d13f82f6a27d70d4aebb
- SSDEEP 3072:9FpbxPfGWLgcFqC2vOT07SrC2ZZ58KJplO5NwQsqXQDp:rpbxPccF1X/58H5W6Q
- TLSH T1CE646C09BAD109F6DB0951B40CFFAB753636AED50B139BC3D328FE492A162C195322DD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
145615
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CreateDirectoryA
GetModuleFileNameA
GetProcAddress
FreeLibrary
LoadLibraryA
CreateMutexA
GetLastError
lstrcatW
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
Sleep
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
FlushInstructionCache
InterlockedDecrement
GetModuleFileNameW
SetCurrentDirectoryW
CreateDirectoryW
WideCharToMultiByte
lstrlenA
SetEvent
WaitForSingleObject
TerminateThread
CloseHandle
lstrlenW
InterlockedIncrement
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
GetStartupInfoA
GetModuleHandleA
ExitThread
DuplicateHandle
CreateThread
CreateEventW
ResumeThread
ReleaseSemaphore
CreateSemaphoreW
OutputDebugStringA
user32
MessageBoxW
GetActiveWindow
DialogBoxParamW
PostQuitMessage
GetMessageW
TranslateMessage
RegisterClassExW
DestroyWindow
DispatchMessageW
PostMessageW
LoadStringW
CharNextW
CharNextA
DefWindowProcW
InvalidateRect
IsWindow
SetTimer
KillTimer
GetClassInfoExW
InflateRect
FillRect
GetClientRect
EndPaint
CopyRect
BeginPaint
SetWindowLongW
GetWindowLongW
CallWindowProcW
ShowWindow
EnableWindow
CreateWindowExW
GetDlgItem
DrawTextW
EndDialog
wsprintfW
OffsetRect
UnregisterClassW
LoadCursorW
gdi32
GetStockObject
SaveDC
SetBkMode
SetTextColor
RestoreDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
SelectObject
CreatePen
LineTo
BitBlt
DeleteDC
MoveToEx
DeleteObject
sqlite3
sqlite3_column_bytes
sqlite3_column_int64
sqlite3_column_double
sqlite3_column_int
sqlite3_column_blob
sqlite3_column_name
sqlite3_column_type
sqlite3_data_count
sqlite3_column_count
sqlite3_column_text
sqlite3_prepare_v2
sqlite3_step
sqlite3_finalize
sqlite3_close
sqlite3_open
sgmempool
ord1
ord2
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
fprintf
_snprintf
tolower
strncmp
isalnum
isalpha
_timezone
_strcmpi
_ltoa
_itoa
_purecall
__CxxFrameHandler
??3@YAXPAX@Z
wcslen
??2@YAPAXI@Z
memmove
printf
_wcsicmp
wcsncpy
vswprintf
swprintf
iswdigit
_wtoi
sprintf
wcsrchr
_assert
atoi
vsprintf
isdigit
_exit
atol
swscanf
wcsstr
strstr
sscanf
wcscmp
free
strrchr
strchr
_vsnprintf
fclose
fputs
fopen
time
_tzset
isspace
srand
__dllonexit
_onexit
_except_handler3
msvcp60
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
ws2_32
inet_addr
gethostname
gethostbyname
htonl
htons
closesocket
send
ole32
CoUninitialize
CoInitialize
winmm
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
timeSetEvent
timeKillEvent
timeGetTime
Name
.text
Size
180KB
Virtual Size
176KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=96, version=2190,
count=4, id=12, version=7291,
count=1, id=11, version=8047,
count=5, id=14, version=7299,
count=11, id=10, version=8047,
count=4, id=4, version=8047,
count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=23, id=93, version=2179,
count=422, id=1, productName=Unmarked objects,
count=35, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
CM_Billing_Clt.dll
- IMPHASH 86bb39010bb55b0f110ae2d8f8652033
- SHA256 8bb345852e7145d7d3bb6f11d5ad6c0ac4bb0a76e3fedfdb08a7e20b80320b7a
- MD5 1b956d72060c12d4e0ae537cecede813
- SHA1 87497422e90b8d9564d1d4b500eaf47fef563399
- SHA512 86b6deb1400851b87730480d6abfeee0a301f8ba555f16dfe28a8f89a2e222f37ffa967e383f675c71e582a490f8e42a77c608d1f1f487dc48097350e1464950
- SSDEEP 1536:ytkqGRYzbzy+R95ASg30AQr1MZYmLxsfE+6lr9hE0euMkL4DWj2:QkEbzy+R95XpAAKCqiKzZz6
- TLSH T1E6932905FDE548B5D2884338ADBBE7313A7E5AD86B538FC3831DFE1409361D0867229A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
57898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
lstrlenA
InterlockedIncrement
GetModuleHandleW
lstrlenW
DisableThreadLibraryCalls
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryA
GetModuleFileNameA
user32
SetWindowLongW
GetWindowLongW
UnregisterClassW
RegisterClassExW
DestroyWindow
CreateWindowExW
PostMessageW
DefWindowProcW
sgmempool
ord1
ord2
msvcrt
wcschr
wscanf
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
_tzset
_CxxThrowException
_timezone
free
strrchr
fopen
fputs
fclose
_vsnprintf
sprintf
time
_purecall
_stricmp
printf
??2@YAPAXI@Z
_assert
??3@YAXPAX@Z
__CxxFrameHandler
ws2_32
closesocket
send
inet_addr
winmm
timeGetTime
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
60KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=1, id=11, version=8047,
count=5, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=9, id=93, version=2179,
count=138, id=1, productName=Unmarked objects,
count=18, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_Billing_UI.dll
- IMPHASH 38032a8c35d4345752804c02e5bff042
- SHA256 5cf265cc49a1ea1f3c797304da230a8ea2c4477508203f58d67f7e5d4a4cdaaa
- MD5 e5b557a398b6d29326097b90c82d7f33
- SHA1 e2d7816e0c248178891893944d14cf9f230480b6
- SHA512 d4328e7618aebc996328ece38cbcdc1d8bdb55cf90a9ff6389fb476df6c6e36d575b3bce38d8f18dfa90f842bd2fc95ca340d654a602bb6e2aa0398c11c00fa5
- SSDEEP 6144:3JFqJWcx2exDb+16vQ+/IGYKtUb0CICkE6n:3JFqJWMpb+gvyGYKtUb0CICh6
- TLSH T11D542808EDE10EBEC58653399CBB5B7625B85EC10B06C793F71CFD5988321C6976A388
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
160389
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
OutputDebugStringA
MultiByteToWideChar
InterlockedDecrement
lstrcmpW
DisableThreadLibraryCalls
OutputDebugStringW
DebugBreak
lstrcpyW
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
GetModuleHandleW
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
GetCurrentProcess
FlushInstructionCache
lstrcpynW
lstrlenA
lstrlenW
InterlockedIncrement
user32
BeginPaint
CreateWindowExW
SetRect
EndPaint
LoadStringW
IsWindowVisible
GetDlgItem
LoadBitmapW
SetCapture
CharNextW
MessageBoxW
CallWindowProcW
SetDlgItemTextW
MapWindowPoints
GetWindow
DialogBoxParamW
GetActiveWindow
EndDialog
DestroyWindow
ShowWindow
MoveWindow
ScreenToClient
CheckDlgButton
GetDlgItemInt
IsDlgButtonChecked
CreateDialogParamW
DestroyCursor
GetCursorPos
DestroyMenu
TrackPopupMenu
EnableMenuItem
IsMenu
GetClassInfoExW
wsprintfW
RegisterClassExW
wvsprintfW
GetWindowTextLengthW
LoadIconW
GetSubMenu
LoadMenuW
EnumChildWindows
GetSysColor
DefWindowProcW
DrawTextW
GetWindowTextW
DrawFocusRect
InflateRect
GetSystemMetrics
DrawEdge
FillRect
FrameRect
RedrawWindow
BringWindowToTop
SetDlgItemInt
IsRectEmpty
CopyRect
RegisterWindowMessageW
UnregisterClassW
GetClientRect
IsWindowEnabled
GetCapture
InvalidateRect
UpdateWindow
SystemParametersInfoW
SetTimer
ReleaseCapture
ClientToScreen
GetWindowRect
PtInRect
KillTimer
GetWindowLongW
IsWindow
GetMenu
AdjustWindowRectEx
SetWindowPos
GetDC
ReleaseDC
PostMessageW
GetFocus
EnableWindow
GetDlgCtrlID
GetParent
GetDlgItemTextW
LoadCursorW
SetCursor
SetWindowTextW
SetWindowLongW
ChildWindowFromPoint
SendMessageW
gdi32
CreateSolidBrush
DeleteDC
BitBlt
GetStockObject
ExtTextOutW
CreateCompatibleDC
CreateCompatibleBitmap
SaveDC
CreatePen
RestoreDC
Ellipse
MoveToEx
LineTo
StretchBlt
CreateRectRgn
SelectClipRgn
GetTextExtentPoint32W
Rectangle
SetBkColor
GetDeviceCaps
DPtoLP
CreateFontIndirectW
GetObjectW
DeleteObject
SetBkMode
SelectObject
CreateRectRgnIndirect
SetTextColor
shell32
ShellExecuteExW
ole32
CoInitialize
CoUninitialize
comctl32
ImageList_LoadImageW
_TrackMouseEvent
ImageList_GetIconSize
ImageList_AddMasked
ImageList_SetBkColor
ImageList_Create
ImageList_Add
ImageList_Destroy
ImageList_Draw
InitCommonControlsEx
msvcrt
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
wcsncpy
_timezone
_vsnprintf
_tzset
wcscmp
sprintf
atol
free
_ftol
swscanf
wcschr
memmove
_wcsicmp
_purecall
_wtoi
__CxxFrameHandler
??3@YAXPAX@Z
_assert
time
??2@YAPAXI@Z
printf
vswprintf
swprintf
wcslen
iswdigit
ws2_32
closesocket
inet_addr
send
winmm
timeGetTime
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
164KB
Virtual Size
162KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
44KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=2, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=19, id=93, version=2179,
count=266, id=1, productName=Unmarked objects,
count=30, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_CenterRes.dll
- IMPHASH e07e00e45407ff0dd6abc9eaa981fa7b
- SHA256 27e32ef36e0cd3bc43dc2f39f2043f7e162319d9ac43799cf65271a0a5929f32
- MD5 9b1e85a6fb23e06f05dbb6f765fadd87
- SHA1 e31f3cd389e7fc6545e53c55d839ab9304e0a40f
- SHA512 72ac8fcd6e5a743d6e7f00b4acb67cba07b44bc4fd3102a7dfe848696e0f8daea6e5f1589b87b9d779313821f8f6061368de23754aca6604e0006d3d77926d10
- SSDEEP 6144:2hWBWhjMeG/JN6GJP7w2PPPPPPPPPPPPPjEhPPPPPPPPPPPPPPP8PPPPPPPPPPPV:8WBWh3G/JN6GJP75ELL3PYXhM1
- TLSH T1A9D464CD3C6B7CB1D157D83184542E0AF63896F0B036D623B6FEBA1E50719DB0A366A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4283
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
_initterm
malloc
_adjust_fdiv
free
Name
.text
Size
4KB
Virtual Size
350B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
138B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
604KB
Virtual Size
603KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
324B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=10, version=8047,
count=6, id=1, productName=Unmarked objects,
count=3, id=4, version=8047,
count=1, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
CM_Common_UI.dll
- IMPHASH 17af7a111608ef694df29229d2c529cc
- SHA256 d62b081bd29c4edb794b51227be716d37f2b68135cb09bf49cc84e7fa415afa7
- MD5 229caf3828662680f86e0009884a14a7
- SHA1 925e3a26497862abfa3b7cee69eb838fca4f8a28
- SHA512 dfafe608be3436110497ddf66b2a3a11f868f6b93ed9c61bc6d4a6e9082d79251eeec7660b0f98c2a6b5dd2de8193bab92ba537c15e81161ef0441865da25ffb
- SSDEEP 1536:e4pCtZsHoj7ngQyVnI0FSMFY0IskxXG4IRFXp+tqXQpJqX+H8dAi:1noj7n+JSMFY0PkG4I/MqXQ78dAi
- TLSH T1D2046C02F9C90AF5DB46917C0DFF2F32713B99D54B12CB839B14EEA9D8A06C1AD71285
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
63697
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetFileSize
WriteFile
ReadFile
CloseHandle
CreateFileW
GetTickCount
GetCurrentProcess
FlushInstructionCache
lstrcpynW
lstrlenW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
GetCurrentThreadId
InterlockedIncrement
lstrlenA
InterlockedDecrement
OutputDebugStringA
lstrcpyW
DeleteCriticalSection
HeapDestroy
GetModuleHandleW
Sleep
lstrcmpW
user32
DefWindowProcW
DestroyWindow
SendMessageW
GetDlgItem
DialogBoxParamW
EndDialog
IsWindow
ShowWindow
SetWindowTextW
SetWindowLongW
SetWindowPos
MapWindowPoints
GetClientRect
SystemParametersInfoW
GetWindowRect
GetWindow
GetWindowLongW
GetParent
GetActiveWindow
MessageBoxW
LoadStringW
CharNextW
SetTimer
CreateWindowExW
GetFocus
GetDC
ReleaseDC
ScreenToClient
EnableWindow
SetFocus
MoveWindow
GetSystemMetrics
LoadImageW
PostMessageW
GetWindowTextW
SetDlgItemTextW
KillTimer
GetCursorPos
DestroyMenu
TrackPopupMenu
InvalidateRect
DrawTextW
FillRect
GetSysColor
CopyRect
LoadMenuW
GetSubMenu
CallWindowProcW
GetWindowThreadProcessId
FindWindowExW
RegisterWindowMessageW
InflateRect
IsRectEmpty
SetCursor
LoadCursorW
PtInRect
BringWindowToTop
RedrawWindow
ClientToScreen
FrameRect
UpdateWindow
gdi32
SetBkMode
SetTextColor
GetStockObject
RestoreDC
LineTo
MoveToEx
CreatePen
CreateSolidBrush
DeleteObject
SelectObject
CreateRectRgnIndirect
SaveDC
SelectClipRgn
CreateRectRgn
DeleteDC
StretchBlt
BitBlt
CreateCompatibleBitmap
GetObjectW
CreateCompatibleDC
Rectangle
ExtTextOutW
SetBkColor
GetTextExtentPoint32W
CreateFontIndirectW
Ellipse
comdlg32
GetOpenFileNameW
GetSaveFileNameW
ole32
CoInitialize
CoUninitialize
winmm
timeGetTime
comctl32
InitCommonControlsEx
msvcrt
__CxxFrameHandler
printf
??2@YAPAXI@Z
_assert
fclose
fread
ftell
fseek
_wfopen
_purecall
swscanf
wcsncpy
wcsrchr
wcscmp
vswprintf
swprintf
wcslen
iswdigit
_wtoi
_ftol
memmove
wcsstr
sprintf
_vsnprintf
_tzset
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
??3@YAXPAX@Z
free
ws2_32
inet_addr
send
closesocket
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
64KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
68KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=2, id=11, version=8047,
count=5, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=19, id=93, version=2179,
count=231, id=1, productName=Unmarked objects,
count=17, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_DevMgr_Clt.dll
- IMPHASH 107c955478852bfcb5e285a2696dd3a5
- SHA256 d49d106e1d45406469efedc5b79e43d522f6dbe1689fdb4283a702f8419883f6
- MD5 0ec0796fc7defba45986375abd2c9428
- SHA1 7c1c095df37a017421237de74d4f69afdc3d0225
- SHA512 4c6e9acad9fe5858d7b1b569a820caa3d88b79e9a8a838bf4e77c38bb6b12f3d33fbcbf7b314cbc3e063868447c9123800c9743cdf9455f60a1416b3e6efe20a
- SSDEEP 6144:CeuAkQTJ/dVYINljD98EP2Pi0uymbz30Oe8Ld2R6uIQsQDQlQsQRQgQnJY1w1N:zJL/ibi0uymHEx8Ld2R6uw1N
- TLSH T1CC056C01E2C100F9D74E85B4083EFF39797A47C917198BD7976DDD86E9322C3A93622A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
333393
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
lstrlenA
InterlockedIncrement
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
GetDriveTypeW
GetLogicalDrives
GetSystemDirectoryW
GetModuleHandleW
GetTickCount
InitializeCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
GetCurrentThreadId
LeaveCriticalSection
OutputDebugStringA
CreateDirectoryA
GetModuleFileNameA
DeleteCriticalSection
user32
CharNextA
SetWindowLongW
GetWindowLongW
UnregisterClassW
RegisterClassExW
DestroyWindow
CreateWindowExW
wsprintfW
PostMessageW
DefWindowProcW
CharUpperA
CharNextW
LoadStringW
sgmempool
ord1
ord2
winmm
timeGetTime
msvcp60
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
msvcrt
fopen
time
strrchr
fputs
free
_tzset
vsprintf
isdigit
atoi
isspace
iswspace
atol
swscanf
wcsstr
strstr
sscanf
wcschr
isalpha
isalnum
strncmp
strchr
tolower
_snprintf
fprintf
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
fclose
_vsnprintf
_CxxThrowException
wcscpy
_wcsicmp
_stricmp
wcscmp
memmove
sprintf
_assert
wcsncpy
_wtoi
iswdigit
wcslen
swprintf
vswprintf
??2@YAPAXI@Z
printf
__CxxFrameHandler
_timezone
_itoa
_purecall
_ltoa
ws2_32
inet_addr
closesocket
send
inet_ntoa
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
348KB
Virtual Size
345KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
432KB
Virtual Size
430KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
32KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=12, version=7291,
count=5, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=11, version=8047,
count=4, id=4, version=8047,
count=9, id=93, version=2179,
count=207, id=1, productName=Unmarked objects,
count=26, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_LanDeviceMgr_UI.dll
- IMPHASH c4b3075f2a6a22dbfc0eee088da512a4
- SHA256 e7ff9603c36d7e15b839387769d17a5c9dc5c02485069ef9715a8da421860066
- MD5 47d599b2d523fbfca4a59a8307f4d3c2
- SHA1 5d76a286a8e8b5ba4b99fb67f295f8bafbe28fe7
- SHA512 3ff319d4e7e0467cc3dc3f58a3f45ecce559039bb597fbec63c5fa72430253798a01ed4b06e354fb5f316948ef216dca34cd66950ce071efaa1969c1c9422a2f
- SSDEEP 6144:mwU1aO7rmXD4Mu8yXi2RyuKQoQrQlQxQnQfQ5Q8QlQ:N7OvmzzyXi2Ryu
- TLSH T114050A42E6C549BEC78582BD4C7F5E7A31769C81573687C3A708DE89F4D03C2BEA5288
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
114570
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
WideCharToMultiByte
InitializeCriticalSection
DisableThreadLibraryCalls
lstrcpyW
DeleteCriticalSection
OutputDebugStringA
FreeLibrary
HeapDestroy
GetModuleHandleW
MultiByteToWideChar
lstrcmpW
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
lstrlenA
InterlockedIncrement
lstrlenW
InterlockedDecrement
user32
DestroyMenu
SetDlgItemTextW
BeginPaint
CopyRect
EndPaint
FillRect
InflateRect
OffsetRect
InvalidateRect
CreateWindowExW
GetClassInfoExW
wsprintfW
RegisterClassExW
IsWindowEnabled
SetWindowTextW
SetWindowPos
MapWindowPoints
GetClientRect
SystemParametersInfoW
GetWindowRect
GetWindow
GetParent
GetWindowLongW
EnableWindow
GetDlgItem
EndDialog
MessageBoxW
LoadStringW
SetFocus
GetCursorPos
PostMessageW
GetFocus
GetDC
ReleaseDC
UpdateWindow
FrameRect
ClientToScreen
GetSysColor
CheckDlgButton
SendDlgItemMessageW
IsDlgButtonChecked
CharNextA
GetSystemMetrics
LoadImageW
SetDlgItemTextA
GetActiveWindow
DialogBoxParamW
LoadCursorW
LoadIconW
GetSubMenu
RedrawWindow
TrackPopupMenu
LoadMenuW
KillTimer
CallWindowProcW
DefWindowProcW
CreateDialogParamW
MoveWindow
GetDlgItemTextW
IsWindow
DestroyWindow
SendMessageW
ScreenToClient
ShowWindow
SetWindowLongW
CharNextW
SetTimer
GetWindowTextLengthW
GetWindowTextW
MessageBeep
UnregisterClassW
RegisterWindowMessageW
DrawTextW
IsRectEmpty
SetCursor
PtInRect
BringWindowToTop
gdi32
MoveToEx
CreatePen
DeleteObject
LineTo
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
SelectObject
DeleteDC
SelectClipRgn
CreateRectRgn
SetTextColor
SaveDC
CreateRectRgnIndirect
RestoreDC
Ellipse
CreateFontIndirectW
GetTextExtentPoint32W
SetBkColor
ExtTextOutW
GetStockObject
Rectangle
SetBkMode
GetObjectW
StretchBlt
ole32
CoInitialize
CoUninitialize
comctl32
InitCommonControlsEx
msvcrt
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
wctomb
wcsncpy
memmove
_ftol
wcschr
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
wcscmp
vswprintf
swprintf
wcslen
iswdigit
_wtoi
wcscpy
_itow
_assert
free
vsprintf
sprintf
isdigit
atoi
swscanf
_vsnprintf
_tzset
iswspace
iphlpapi
GetNetworkParams
GetAdaptersInfo
ws2_32
closesocket
inet_addr
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
116KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
620KB
Virtual Size
618KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=2, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=19, id=93, version=2179,
count=244, id=1, productName=Unmarked objects,
count=22, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_LocalSet_UI.dll
- IMPHASH 06942e72e8902f268524a22ef2d252fd
- SHA256 a7bce47da85f63bca5187ee432d1bd9bd381b6ed799fed5187c733f5520ee3a3
- MD5 84766e2d0fc3cb7016529059fba1e783
- SHA1 03ff9bfa5bffaab2659183cbdf21538da218035f
- SHA512 26ce53fc53d4a7f00cfcaa53b3f679bbf3c0a4092063cc94342c631b9bf0c074c3213e663d75292ae05c4b598d7bdf983ac165044c1aebed9c83d8cb89ffd13f
- SSDEEP 1536:p5N2PEMvcnJ3mJTu3UDoKNbfj0BWdYiHqXQphHB8bCE:pX2PEMvcEJKkoU0QdRHqXQfBeCE
- TLSH T132E35D00AAC548F9D6474534285F2F76B1305E524B9A8787BF13FFA9EC31252BD3A706
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
44591
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedIncrement
HeapDestroy
DeleteCriticalSection
InitializeCriticalSection
GetLogicalDrives
lstrcpyW
GetDriveTypeW
MultiByteToWideChar
lstrlenA
GetCurrentProcess
FlushInstructionCache
lstrcpynW
FindFirstFileW
FindClose
GetModuleHandleW
lstrlenW
InterlockedDecrement
GetCurrentThreadId
DisableThreadLibraryCalls
LeaveCriticalSection
EnterCriticalSection
Sleep
user32
EnumChildWindows
CreateDialogParamW
GetSysColor
MoveWindow
IsWindow
EndDialog
DialogBoxParamW
DefWindowProcW
GetSubMenu
CallWindowProcW
CharUpperA
CharNextA
EndPaint
TrackPopupMenu
DestroyMenu
GetCursorPos
ScreenToClient
GetWindowThreadProcessId
PostMessageW
CharNextW
LoadMenuW
BeginPaint
IsWindowEnabled
SetDlgItemInt
SendDlgItemMessageW
EnableWindow
GetParent
LoadImageW
SetWindowTextW
GetWindow
GetWindowRect
SystemParametersInfoW
MapWindowPoints
SetWindowPos
GetClientRect
ShowScrollBar
GetWindowLongW
GetSystemMetrics
ScrollWindow
GetScrollInfo
SetScrollInfo
SetWindowLongW
IsDlgButtonChecked
GetWindowTextW
GetWindowTextLengthW
CheckDlgButton
MessageBeep
SetFocus
GetDlgItemTextW
ShowWindow
LoadStringW
MessageBoxW
SetDlgItemTextW
DestroyIcon
LoadIconW
GetDlgItem
SendMessageW
InvalidateRect
DestroyWindow
FindWindowExW
gdi32
DeleteDC
SaveDC
CreatePen
SelectObject
CreateSolidBrush
Ellipse
Pie
SetBkMode
RestoreDC
SetBkColor
ExtTextOutW
DeleteObject
GetStockObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
shell32
SHGetDiskFreeSpaceExW
ole32
CoUninitialize
CoInitialize
comctl32
InitCommonControlsEx
msvfw32
MCIWndCreateW
msvcrt
_ftol
printf
free
iswdigit
vswprintf
_wtoi
wcslen
swprintf
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
_assert
_adjust_fdiv
malloc
__dllonexit
_onexit
_initterm
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
44KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
64KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=14, version=7299,
count=1, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=19, id=93, version=2179,
count=138, id=1, productName=Unmarked objects,
count=10, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_LogInfo_Clt.dll
- IMPHASH 9a827fc7dd8f0542f6f99651bf8ed818
- SHA256 71c0febbf555e78dd2f81c740b180e9e9381ae6dee9fa1d05fe37c2702db20ab
- MD5 d892684c3b6935b6bff82875cb76a32f
- SHA1 c8fc2655edef3fb2c1f159c99c0de90882dfae82
- SHA512 c3f7bf6dc0997633143df300f80320f053c2f9dd427cb93fde044b08b425b871f6fa29b3350921d54a8fe5a9b185bac73ca104c9a816e2d85cb4bf4248e0ae86
- SSDEEP 768:YcbvyIbYj3rbJbM1O14rF9CxFxFppXnSyDX4/Z088fltS9ujI6PPgvFDqSzTnHXR:Y0vq3E0xn7h93aDHXZOJR6vt
- TLSH T199730905EDE20EB2D588567CCDBFA73630BC66C45F4387839B16FE5258212D19AF90CA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
44634
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
InterlockedIncrement
lstrlenW
DeleteFileW
lstrlenA
DisableThreadLibraryCalls
LocalFree
LeaveCriticalSection
OutputDebugStringA
MultiByteToWideChar
CreateDirectoryA
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
user32
LoadStringW
CharNextW
CharNextA
ole32
CoCreateInstance
OleRun
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoUninitialize
oleaut32
SysAllocString
SysFreeString
VariantChangeType
VariantClear
winmm
timeGetTime
sgmempool
ord1
ord2
msvcrt
strrchr
sprintf
_tzset
vsprintf
isdigit
atoi
malloc
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
__dllonexit
_onexit
time
fopen
fputs
fclose
_timezone
_vsnprintf
_CxxThrowException
iswdigit
swprintf
vswprintf
wcsncpy
_wcsicmp
wcslen
_wtoi
free
_assert
??3@YAXPAX@Z
__CxxFrameHandler
_purecall
??2@YAPAXI@Z
ws2_32
inet_addr
closesocket
send
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
44KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=1, id=11, version=8047,
count=6, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=11, version=8798,
count=3, id=95, version=2190,
count=13, id=93, version=2179,
count=149, id=1, productName=Unmarked objects,
count=15, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_LogInfo_UI.dll
- IMPHASH 546d7e68f7924ab6cb55baac651ffbb8
- SHA256 3ad06f19e8ab9b5df5f7547921bc9c47e06785ec9fadb667880d46d9fac6d0c8
- MD5 986f1183a2c3b3f6a2e9cbae9e44d2bb
- SHA1 02e2f7699476b291fc231d8c450c017755f7b79b
- SHA512 e941cf730cf5932d9f4fa24a812277f89a2bbf25e6e8fadc3f1a7b8a62f43c788197e362a2ddd6f84165d6dae317f73e1fbe835f97dc3c5c5393ce95ec5b7706
- SSDEEP 1536:tLQ9gyTX8MZACkADXp8J+THe4/8fIsQR5jUvCICh0a9y1:tuk01TsCICh0qy1
- TLSH T1C0934A017AD653FEDD1550380C6B7B33613062450ED9C687973BEEAC6D12A8EEA3E346
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50954
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
DisableThreadLibraryCalls
lstrlenA
lstrcpynW
lstrcpyW
DeleteFileW
GetLogicalDrives
GetDriveTypeW
InterlockedIncrement
GetCurrentProcess
FlushInstructionCache
InitializeCriticalSection
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
GetModuleHandleW
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedDecrement
lstrlenW
Sleep
user32
GetParent
EnableWindow
GetWindowThreadProcessId
GetWindowLongW
DefWindowProcW
DestroyCursor
InvalidateRect
SetCursor
FindWindowExW
SetWindowLongW
SendMessageW
BeginPaint
GetClientRect
GetSysColor
CallWindowProcW
LoadStringW
IsWindow
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetKeyState
CreateWindowExW
DestroyWindow
DialogBoxParamW
CharNextW
GetClassInfoExW
wsprintfW
RegisterClassExW
GetSubMenu
LoadMenuW
UpdateWindow
GetWindowTextW
GetActiveWindow
GetDlgItemTextW
GetCursorPos
PtInRect
TrackPopupMenu
DestroyMenu
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetWindow
GetWindowRect
SystemParametersInfoW
MapWindowPoints
SetWindowPos
LoadImageW
SendDlgItemMessageW
ScreenToClient
GetDlgItem
SetWindowTextW
ShowWindow
MessageBoxW
PostMessageW
LoadCursorW
EndPaint
DrawTextW
EndDialog
gdi32
GetStockObject
ExtTextOutW
SetBkColor
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
SetBkMode
EndPage
TextOutW
StartPage
StartDocW
CreateFontIndirectW
SetTextColor
DeleteObject
EndDoc
BitBlt
DeleteDC
comdlg32
GetOpenFileNameW
GetSaveFileNameW
PrintDlgW
shell32
SHGetSpecialFolderPathW
comctl32
ImageList_Destroy
ImageList_Draw
ImageList_LoadImageW
msvcrt
_timezone
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
_tzset
_itow
printf
_wtoi
iswdigit
wcslen
swprintf
vswprintf
wcscpy
wcscmp
_waccess
wcsrchr
time
_purecall
free
_assert
??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
52KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=2, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=17, id=93, version=2179,
count=157, id=1, productName=Unmarked objects,
count=9, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_LoginMgr_UI.dll
- IMPHASH f32734b743cad78ed66428e3ed7e5a79
- SHA256 a7a0444d7f430c41c3e270575d543f510d5508a502aa8568360c0158095c19aa
- MD5 9b8a20c11c6298aeda9ae40740533028
- SHA1 a1892d6432cccfcaf47ea598236140ce8831b6d7
- SHA512 b2d30d1b7543caca92c83fb3c5711bd105fd032c80bf28a1dce613293632f7ef51b6aff93cea9b4487b4192ab92738859686f7eb657854f5ffe706604fc57e0c
- SSDEEP 3072:fomOKtt8h8m+CLWFAWIrTCtmiMqqDLy/2Lbgc:fo4tOOm3P5rToIqqDLun
- TLSH T1F4046C0296C509F6E54A523C4DFF7B71773B0AE48B358E83D712FE6509331E2593A28A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
108952
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
DisableThreadLibraryCalls
OutputDebugStringA
lstrlenW
LoadLibraryA
GetLastError
GetModuleFileNameW
GetProcAddress
InitializeCriticalSection
GetCurrentProcess
lstrcmpiW
lstrcpyW
lstrcpynW
CreateProcessA
DeleteFileW
CopyFileW
GetModuleFileNameA
MultiByteToWideChar
CreateDirectoryW
GetCommandLineW
lstrlenA
WideCharToMultiByte
FreeLibrary
lstrcmpW
FlushInstructionCache
InterlockedDecrement
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
DeleteCriticalSection
HeapDestroy
GetModuleHandleW
user32
DrawEdge
DefWindowProcW
DestroyWindow
EndDialog
IsWindow
DialogBoxParamW
SetWindowLongW
EnableWindow
ShowWindow
SendMessageW
GetDlgItem
SendDlgItemMessageW
SetWindowPos
MapWindowPoints
GetClientRect
SystemParametersInfoW
GetWindowRect
GetWindow
GetParent
GetWindowLongW
SetDlgItemTextW
wsprintfW
GetDlgItemTextW
MessageBoxW
LoadStringW
GetWindowTextLengthW
PostMessageW
SetWindowTextW
GetSysColor
SetRect
ScreenToClient
MoveWindow
LoadBitmapW
LoadIconW
LoadImageW
IsWindowEnabled
InvalidateRect
SetTimer
GetWindowTextW
SetDlgItemInt
GetActiveWindow
CharLowerW
CharNextW
ReleaseDC
GetDC
SetRectEmpty
CreateWindowExW
AdjustWindowRectEx
GetMenu
CallWindowProcW
RegisterClassExW
LoadCursorW
GetClassInfoExW
FillRect
EndPaint
BeginPaint
SetCursor
PtInRect
SetCapture
SetFocus
GetDlgCtrlID
ReleaseCapture
GetCapture
GetCursorPos
OffsetRect
DrawTextW
GetClassNameW
GetSystemMetrics
InflateRect
DrawFocusRect
ClientToScreen
KillTimer
UpdateWindow
gdi32
DPtoLP
CreateFontIndirectW
SetBkMode
SetTextColor
GetStockObject
CreateCompatibleDC
SelectObject
StretchBlt
DeleteDC
GetObjectW
DeleteObject
CreateBitmap
GetDeviceCaps
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
shell32
CommandLineToArgvW
ole32
CoUninitialize
CoInitialize
shlwapi
PathFileExistsW
comctl32
ImageList_GetIconSize
ImageList_Create
ImageList_Add
ImageList_Destroy
_TrackMouseEvent
ImageList_Draw
InitCommonControlsEx
msvcrt
_tzset
__dllonexit
_onexit
_initterm
_adjust_fdiv
_assert
??3@YAXPAX@Z
free
??2@YAPAXI@Z
__CxxFrameHandler
wctomb
memmove
_wtoi
wcscmp
_purecall
_wcsicmp
atoi
wcscpy
wcslen
wcsncpy
strrchr
_wrename
iswspace
wcschr
vswprintf
swprintf
iswdigit
malloc
wcsrchr
fread
fclose
ftell
fwrite
fseek
fopen
_access
wcsstr
strstr
_ltow
printf
_vsnprintf
ws2_32
closesocket
inet_addr
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
112KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=96, version=2190,
count=1, id=12, version=7291,
count=1, id=11, version=8047,
count=5, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=27, id=93, version=2179,
count=349, id=1, productName=Unmarked objects,
count=19, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_MediaMgr_Clt.dll
- IMPHASH cf91729f56614c8f3de6496ce271373b
- SHA256 139f26dbc00d5bfbad193031d7cdf46a9c91584769914284fbc85cd8c1f8a9e0
- MD5 0619eaefc837e09a7c8cf2c68304acf3
- SHA1 2afb89705f260fbc6dda0f89a44efb300056f1a4
- SHA512 aad85a6bd1b6c96b3c25030c7c82bbc523497e557d8804d2b09cdba67d30f03d6f7b9ec204c39a64f6184403c381ff78def1fb7ab45413892a9dbb488c51b654
- SSDEEP 12288:mU20+qHgH2rvouptNyKHU3dyfTQ+S7KsYY:mU20fAWr7tw3dSQ+S7KsYY
- TLSH T101E44A03A9D680F0EB8D1670183EFB3966B91E9A4B129FD7D71DFE4449231C2653B24B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
472911
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetExitCodeThread
GetSystemTime
GetModuleHandleW
CopyFileExW
SetFileAttributesW
DeleteFileW
RemoveDirectoryW
FindNextFileW
CreateDirectoryW
GetDiskFreeSpaceExW
GetModuleFileNameW
SetCurrentDirectoryW
FindFirstFileW
FindClose
InterlockedIncrement
ReleaseSemaphore
CreateSemaphoreW
ExitThread
MultiByteToWideChar
lstrlenA
lstrlenW
WideCharToMultiByte
InterlockedDecrement
Sleep
SetEvent
WaitForSingleObject
CreateThread
CreateEventW
SetThreadPriority
ResumeThread
TerminateThread
CloseHandle
DisableThreadLibraryCalls
LocalAlloc
LocalFree
FreeLibrary
LoadLibraryA
UnlockFileEx
LockFileEx
GetLastError
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FlushFileBuffers
GetFullPathNameW
WriteConsoleW
lstrcatW
MoveFileExW
SetFilePointer
ReadFile
SetEndOfFile
AllocConsole
GetStdHandle
OutputDebugStringW
OutputDebugStringA
GlobalAlloc
GlobalFree
GlobalLock
GlobalSize
GlobalUnlock
WriteFile
DeleteFileA
RemoveDirectoryA
FindFirstFileA
FindNextFileA
GetFileAttributesW
GetFileAttributesA
SetFileAttributesA
GetTempPathW
GetTempFileNameW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
TryEnterCriticalSection
LeaveCriticalSection
GetVersion
GetVersionExW
lstrcmpiW
GetProcAddress
GetModuleFileNameA
GetFileSize
CreateFileA
CreateFileW
GetTempFileNameA
CreateDirectoryA
GetTempPathA
GetLocalTime
user32
LoadImageW
CreateWindowExW
DestroyWindow
RegisterClassExW
UnregisterClassW
SetWindowLongW
ShowWindow
GetParent
GetWindowThreadProcessId
FindWindowExW
EndDialog
FrameRect
FillRect
InflateRect
CharNextW
CharNextA
PostMessageW
IsWindow
UpdateWindow
GetDesktopWindow
GetWindowRect
CopyRect
GetWindowLongW
DefWindowProcW
wsprintfW
LoadStringW
IsRectEmpty
ReleaseDC
SendMessageW
MoveWindow
ScreenToClient
SetWindowPos
SetWindowTextW
GetDC
gdi32
SetStretchBltMode
SetMapMode
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
Rectangle
DeleteObject
CreatePen
SetBrushOrgEx
CreateBrushIndirect
CloseEnhMetaFile
CreateEnhMetaFileW
SetBkMode
SetTextColor
TextOutW
GetObjectW
StretchBlt
SetDIBitsToDevice
GetStockObject
SetWindowExtEx
SetViewportExtEx
CreateSolidBrush
CreateFontW
SetViewportOrgEx
shell32
SHGetPathFromIDListW
SHFileOperationW
SHGetMalloc
SHBrowseForFolderW
winmm
timeGetTime
mixerOpen
waveOutClose
mixerGetID
waveOutOpen
mixerGetNumDevs
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA
mixerSetControlDetails
mixerGetControlDetailsA
waveInClose
waveInOpen
sqlite3
sqlite3_exec
sqlite3_close
sqlite3_prepare_v2
sqlite3_open
sqlite3_step
sqlite3_column_count
sqlite3_data_count
sqlite3_column_type
sqlite3_finalize
sqlite3_column_text
sqlite3_column_int
sqlite3_column_double
sqlite3_column_int64
sqlite3_column_bytes
sqlite3_column_blob
sqlite3_key
sqlite3_errmsg
sqlite3_changes
sqlite3_last_insert_rowid
sqlite3_bind_blob
sqlite3_free
sqlite3_mprintf
sqlite3_column_name
dhplay
ord53
ord97
ord96
ord30
ord122
ord89
ord88
ord3
ord118
ord95
ord4
ord50
ord111
ord80
ord17
ord34
ord38
ord6
ord79
ord18
ord101
ord12
ord22
ord49
ord83
ord114
ord47
ord14
ord15
ord16
ord10
ord55
ord9
ord8
ord7
ord5
ord11
ord82
ord112
ord99
ord51
ord52
ord19
sgmempool
ord2
ord1
msvcrt
vsprintf
sprintf
isdigit
atoi
atol
_wcsicmp
wcscmp
wcschr
sscanf
time
_CxxThrowException
strstr
_ltow
_ultow
wcscat
_stricmp
rand
srand
wctomb
iswspace
_tzset
isspace
wcscpy
strrchr
strchr
free
malloc
_vsnprintf
_vsnwprintf
fclose
fputs
fopen
ctime
_wctime
_wcsdup
fflush
_fdopen
_dup2
_open_osfhandle
_iob
localtime
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_waccess
_snprintf
wcsrchr
wcsncpy
_wtoi
iswdigit
wcslen
swprintf
vswprintf
_assert
memmove
_ftol
printf
??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
_purecall
wcsstr
_timezone
ws2_32
connect
send
recv
ntohl
__WSAFDIsSet
closesocket
htonl
htons
bind
socket
getsockopt
setsockopt
getsockname
ntohs
inet_addr
gethostname
gethostbyname
inet_ntoa
accept
select
listen
gdiplus
GdipImageSelectActiveFrame
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCloneImage
GdipLoadImageFromStreamICM
GdipCloneBrush
GdipDrawPolygon
GdipFillPolygon
GdipFillEllipseI
GdipDrawEllipseI
GdipCreatePath
GdipClonePath
GdipAddPathArcI
GdipAddPathLineI
GdipFillPath
GdipDrawPath
GdipDeletePath
GdipFree
GdipCreateSolidFill
GdipFillRectangleI
GdipLoadImageFromFile
GdipAlloc
GdipDisposeImage
GdipSaveImageToFile
GdipDrawImageRectI
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdipDrawRectangleI
GdipDeleteBrush
GdipSetPenCustomStartCap
GdipCreateAdjustableArrowCap
GdipSetPenCustomEndCap
GdipDeleteCustomLineCap
GdipCreatePen1
GdipSetSmoothingMode
GdipDrawLineI
GdipDeletePen
GdipGetImageThumbnail
GdipLoadImageFromStream
GdipDeleteGraphics
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipCreateBitmapFromHBITMAP
GdipGetImageWidth
GdipGetImageHeight
GdipCreateFromHDC
GdipCreateBitmapFromScan0
GdipCreateMetafileFromEmf
GdipSaveImageToStream
comdlg32
ChooseFontW
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
ole32
CreateStreamOnHGlobal
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
488KB
Virtual Size
485KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
56KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
76KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
28KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=96, version=2190,
count=1, id=12, version=7291,
count=3, id=11, version=8047,
count=6, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=49, version=9044,
count=21, id=93, version=2179,
count=380, id=1, productName=Unmarked objects,
count=38, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=7, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_MessageMgr_UI.dll
- IMPHASH 9c6f3d0cda3357b37d1d4faccce6b4be
- SHA256 012b85741967cc7d96a9e25f6339ff15e70cd65484dcdef85a7f07b0590fb6eb
- MD5 55feb2993ed194839a4f9cbbaf830eb5
- SHA1 9b8c4883071561712afb9898975d82d4ef61b5dc
- SHA512 39a101c38565c322388ad86b4d5cb5d332c8959542bb3438a709c0cba5a17d632b718e83b4767ebeeaa7cfdbcf1f2ab65eef05f3c0b618def16dca2e506434ea
- SSDEEP 768:zLQfKAOW+vdbIP5PPG2wquk7SIyyxyyOPAh:zLE+vSX7XyyxyyOPA
- TLSH T19153F80CEEE41FBED181827EEDB75A32217889D06B439743B30EF54619512E95BD23D8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
17403
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
FlushInstructionCache
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
lstrlenW
DisableThreadLibraryCalls
Sleep
GetCurrentThreadId
OutputDebugStringA
GetProcAddress
FreeLibrary
LoadLibraryA
GetLastError
MultiByteToWideChar
lstrlenA
GetModuleHandleW
user32
EndDialog
FindWindowExW
GetWindowThreadProcessId
CharNextW
DefWindowProcW
DestroyWindow
SetForegroundWindow
BringWindowToTop
ShowWindow
IsWindow
PostMessageW
LoadAcceleratorsW
LoadMenuW
LoadStringW
RegisterClassExW
LoadImageW
wsprintfW
LoadCursorW
GetClassInfoExW
CreateWindowExW
SetWindowLongW
SetWindowPos
MapWindowPoints
SendMessageW
SetWindowTextW
GetDlgItem
CallWindowProcW
GetActiveWindow
GetClientRect
DialogBoxParamW
GetWindowLongW
GetParent
GetWindow
GetWindowRect
SystemParametersInfoW
ole32
CoInitialize
CoUninitialize
comctl32
InitCommonControlsEx
msvcrt
malloc
_adjust_fdiv
??3@YAXPAX@Z
_assert
??2@YAPAXI@Z
free
_purecall
__CxxFrameHandler
_tzset
wcslen
vswprintf
swprintf
iswdigit
_wtoi
_vsnprintf
__dllonexit
_onexit
_initterm
_timezone
ws2_32
closesocket
inet_addr
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=2, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=15, id=93, version=2179,
count=165, id=1, productName=Unmarked objects,
count=16, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_Monitor.exe
- IMPHASH 8504a9d49689cd9e1e5f0a3a8e5d15b2
- SHA256 22293fd8c602a51cd374decdf6bfdbde96a4ff7454a00a2f3d699752314157ff
- MD5 8f6369f589e9c58f429ba99118700caa
- SHA1 f01c081249548850ac893620e0e660de9415ee03
- SHA512 7d18a6353c3df327f81452011179ae4b06bdb94a4b8a82f93cc60cde0d433c3a6aa8a46d91a2d563fab36a8c43161e9e0e0db9b01a8c41dfdfef26621be6fe38
- SSDEEP 24576:W286h8UoQu2Z0P8i53J5Y1Ckbbw4tx2XveTmQu7DZtXY8:WGusCP4txG5Do8
- TLSH T1DDA53BE4E7A3D447FF42903814FAE23665A04D92D719F6BFFE58F92015351E3202A93A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
793724
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
SetEndOfFile
GetFullPathNameW
SetFilePointer
ReadFile
GetLocalTime
GlobalSize
WriteFile
DeleteFileW
DeleteFileA
RemoveDirectoryW
GlobalAlloc
RemoveDirectoryA
FindFirstFileA
FindNextFileA
GetFileAttributesW
SetFileAttributesW
GetFileAttributesA
SetFileAttributesA
GetTempPathW
GetTempFileNameW
GetTempPathA
FlushFileBuffers
GetTempFileNameA
CreateFileW
GetFileSize
GetModuleFileNameW
GetProcAddress
lstrcmpiW
ExitThread
TerminateThread
WaitForSingleObject
SetEvent
DuplicateHandle
CreateThread
CreateEventW
ResumeThread
GlobalLock
GlobalUnlock
GlobalFree
WideCharToMultiByte
MultiByteToWideChar
MulDiv
lstrcpynA
GetVersionExW
InterlockedIncrement
GetCurrentThreadId
EnterCriticalSection
InterlockedDecrement
LeaveCriticalSection
lstrcpynW
lstrcpyW
FindFirstFileW
FindClose
GetModuleHandleW
FileTimeToSystemTime
FileTimeToLocalFileTime
LockFileEx
UnlockFileEx
TryEnterCriticalSection
GetFileTime
LoadLibraryA
OutputDebugStringA
GetStdHandle
AllocConsole
MoveFileExW
lstrcatW
WriteConsoleW
GetStartupInfoA
CreateDirectoryW
GetSystemDirectoryW
GetVersion
lstrcmpW
FindResourceW
LoadResource
LockResource
DeleteCriticalSection
HeapDestroy
Sleep
InitializeCriticalSection
FreeLibrary
LoadLibraryW
CreateMutexW
GetLastError
SetUnhandledExceptionFilter
RaiseException
GetModuleHandleA
GetModuleFileNameA
CreateFileA
GetCurrentProcessId
CreateDirectoryA
CloseHandle
Beep
OutputDebugStringW
DebugBreak
lstrlenA
GetCurrentProcess
FlushInstructionCache
lstrlenW
FindNextFileW
user32
SetCursor
DrawFocusRect
InvalidateRect
SetFocus
SetCapture
ReleaseCapture
BeginPaint
EndPaint
GetDlgCtrlID
GetKeyState
GetClientRect
SetWindowPos
ExitWindowsEx
DrawFrameControl
GetParent
GetSysColorBrush
FrameRect
CharLowerW
GetMessagePos
WindowFromPoint
CheckMenuItem
GetMenuStringW
InsertMenuItemW
SetDlgItemTextW
IsMenu
SetMenuItemInfoW
SetMenu
InvalidateRgn
CreateAcceleratorTableW
GetClassNameW
IsChild
GetDesktopWindow
RegisterWindowMessageW
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
ModifyMenuW
EndMenu
GetFocus
CreateDialogParamW
CheckDlgButton
IsDlgButtonChecked
IsIconic
IsRectEmpty
SetWindowsHookExW
UnhookWindowsHookEx
DestroyCursor
CallNextHookEx
GetWindowTextLengthW
ScrollWindow
GetScrollInfo
IntersectRect
SetScrollInfo
FindWindowExW
GetWindowThreadProcessId
BringWindowToTop
SetForegroundWindow
GetForegroundWindow
EnableMenuItem
DrawIcon
GetIconInfo
CharUpperW
DestroyWindow
GetActiveWindow
MessageBoxW
SetParent
GetWindowRgn
DialogBoxParamW
SetRectEmpty
GetMenuItemRect
SetWindowRgn
RemoveMenu
PeekMessageW
CreatePopupMenu
GetMenuItemCount
AppendMenuW
GetMenuItemInfoW
MessageBeep
IsWindowVisible
PostQuitMessage
LoadStringA
TrackPopupMenuEx
IsWindowEnabled
DrawEdge
InflateRect
GetCapture
UpdateWindow
SetTimer
ClientToScreen
KillTimer
GetWindowDC
DefWindowProcW
DispatchMessageW
UnregisterClassW
CharNextA
LoadBitmapW
SetWindowLongW
GetWindowLongW
CallWindowProcW
SendMessageW
LoadStringW
GetSystemMetrics
GetWindowRect
GetDlgItem
MapWindowPoints
SystemParametersInfoW
GetWindow
PostMessageW
EndDialog
EnableWindow
GetWindowTextW
SetWindowTextW
IsWindow
FindWindowW
CharNextW
wvsprintfW
MoveWindow
ShowWindow
RedrawWindow
ScreenToClient
GetCursorPos
DestroyMenu
TrackPopupMenu
LoadMenuW
GetSubMenu
GetSysColor
DrawTextW
FillRect
SetRect
LoadCursorW
LoadImageW
EndDeferWindowPos
OffsetRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
AdjustWindowRectEx
GetMenu
ReleaseDC
GetDC
CreateWindowExW
RegisterClassExW
wsprintfW
GetClassInfoExW
PtInRect
DrawIconEx
IsZoomed
gdi32
DeleteObject
SelectObject
CreateCompatibleDC
GetObjectW
BitBlt
CreateCompatibleBitmap
SetTextColor
SetBkColor
GetPixel
CreateBitmap
RestoreDC
CreateSolidBrush
SetBkMode
SaveDC
TextOutW
GetStockObject
CreateFontIndirectW
DPtoLP
GetDeviceCaps
StretchBlt
SetStretchBltMode
CreateRoundRectRgn
CreatePolygonRgn
FillRgn
GetMapMode
SetDIBitsToDevice
CreateEnhMetaFileW
CloseEnhMetaFile
CreateBrushIndirect
SetMapMode
SetWindowExtEx
SetViewportExtEx
SetViewportOrgEx
CreateFontW
CreateEllipticRgn
LineTo
MoveToEx
CreatePen
SelectClipRgn
CreateRectRgn
ExtTextOutW
Rectangle
GetTextExtentPoint32W
PatBlt
SetBrushOrgEx
CreateDIBSection
CreatePatternBrush
DeleteDC
comdlg32
GetOpenFileNameW
ChooseFontW
GetSaveFileNameW
ChooseColorW
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
Shell_NotifyIconW
SHGetMalloc
ole32
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
OleInitialize
OleUninitialize
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoTaskMemFree
StringFromCLSID
OleLockRunning
CoTaskMemAlloc
oleaut32
SysStringLen
SysFreeString
VariantClear
DispCallFunc
SysAllocStringLen
SysAllocString
LoadRegTypeLi
OleCreateFontIndirect
winmm
timeGetTime
shlwapi
PathFileExistsW
comctl32
ImageList_DragLeave
ImageList_EndDrag
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Remove
InitCommonControlsEx
ImageList_GetImageCount
ord8
ImageList_BeginDrag
ImageList_DragEnter
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_GetIconSize
ImageList_Add
ImageList_Draw
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ImageList_LoadImageW
CreateStatusWindowW
FlatSB_EnableScrollBar
InitializeFlatSB
msvcrt
_wtoi
iswdigit
wcslen
swprintf
vswprintf
??2@YAPAXI@Z
_ftol
__CxxFrameHandler
??3@YAXPAX@Z
wcsncpy
printf
wcscpy
_purecall
memmove
wcsstr
time
wcschr
wcsrchr
free
_wcsicmp
malloc
realloc
rand
localtime
sprintf
strrchr
_except_handler3
_wcsnicmp
iswspace
_assert
_stricmp
wcscmp
srand
wcscat
strchr
_tzset
vsprintf
isdigit
atoi
isspace
_vsnprintf
_vsnwprintf
fclose
fputs
fopen
ctime
_wctime
_wcsdup
fflush
_fdopen
_dup2
_open_osfhandle
_iob
wctomb
_CxxThrowException
strstr
?terminate@@YAXXZ
_exit
_XcptFilter
exit
_acmdln
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
??1type_info@@UAE@XZ
_controlfp
_strcmpi
__getmainargs
_timezone
msvfw32
MCIWndCreateW
dbghelp
MiniDumpWriteDump
MakeSureDirectoryPathExists
gdiplus
GdipDrawPath
GdipDeletePath
GdipSetPenCustomStartCap
GdipCreateAdjustableArrowCap
GdipSetPenCustomEndCap
GdipDeleteCustomLineCap
GdipSetSmoothingMode
GdipDrawLineI
GdipGetImageThumbnail
GdipImageSelectActiveFrame
GdipImageGetFrameDimensionsCount
GdipClonePath
GdipImageGetFrameCount
GdipCreateBitmapFromHBITMAP
GdipSaveImageToStream
GdipCreateMetafileFromEmf
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipSetInterpolationMode
GdipLoadImageFromFile
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipFillPath
GdiplusStartup
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipCloneBrush
GdipCreateSolidFill
GdipFillRectangleI
GdipDrawImageRectI
GdipDeleteBrush
GdipCreateBitmapFromResource
GdipCreateFromHDC
GdipDeleteGraphics
GdipCloneImage
GdipFree
GdipAlloc
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipSaveImageToFile
GdipCreatePen1
GdipDrawRectangleI
GdipDeletePen
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectRectI
GdipAddPathLineI
GdiplusShutdown
GdipAddPathArcI
GdipDrawPolygon
GdipFillPolygon
GdipDrawEllipseI
GdipFillEllipseI
GdipImageGetFrameDimensionsList
GdipCreatePath
GdipDisposeImage
ws2_32
htonl
gethostname
accept
listen
inet_addr
ntohs
getsockname
inet_ntoa
setsockopt
getsockopt
socket
bind
htons
closesocket
__WSAFDIsSet
select
recv
send
connect
gethostbyname
ntohl
Name
.text
Size
804KB
Virtual Size
801KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
88KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
76KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=96, version=2190,
count=2, id=12, version=7291,
count=5, id=14, version=7299,
count=3, id=11, version=8047,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=9, id=95, version=2190,
count=31, id=93, version=2179,
count=508, id=1, productName=Unmarked objects,
count=63, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
CM_Monitor.exe.manifest
- SHA256 7fea100b60064dc8670c62c13b90881f0b069c34e081da1928d9d46c9514a508
- MD5 0202dcb5864d092e44d013572ad95260
- SHA1 b6f9e87373510278202dfb39d79287d6f9ecb9f5
- SHA512 4b345dbe7232de4349bbeb4a728e3e5319af0d9fcd0303d334776f3a7e4b3053d51ea02b3b2f7703ead31ffb9ceb77eef5fe6b5acb916c2dd0f9de0ad8eec8d7
- TLSH T1E6F0DCC1D20EAE39831026F12973D508A2B9231619AD06AC5CD076BFEE06A9ACDC21F1
- MD5 SHA1 SHA512 TLSH
CM_Monitor.ini
- SHA256 efa5c020d7080e59527c53960024b3b2c33dc864834fc24263e768058d34f3a2
- MD5 3343437d72b588bc2f4266d9225df47d
- SHA1 99080b8153786a9fefd234ffdeb6be46953f3dcb
- SHA512 efe9be95b6c75dbc92c7c533c519222a8cdc4e48301f31e76d3ad0959f83f7fc8ca4aaab63aae6ed4731b79ede1d9e09a26737d80e62d1e0cebe3c44ea569075
- TLSH T1B2F0DC6C9308815E73BA407E3071014932B10B90227CC2069F9AF85ACDF86DD8BB67E7
- MD5 SHA1 SHA512 TLSH
CM_PermMgr_Clt.dll
- IMPHASH 6255dde5f74c428f7e462618fd50471a
- SHA256 1ed9c64953bb839843fb37533931766571c08ebc826f07ca45c049f055ab9f79
- MD5 197526c083a044fbe32841323c677237
- SHA1 fac0830ff63ba1dab7e72e90dc10c444e9d39f72
- SHA512 2a92aca5e439cd573e7c2df8d46611dce994d26cc90623bb9901f4f8e9b570dfb94c93459b405c2de9f2aff93f552781048789c658643381214d069ad0e033fe
- SSDEEP 1536:L2HE0r2IUID//26aaoaGjiGZX7x/BnwSOdVbMOWJ02Kg3SC:90r2Ihze6ujiGZX7x/eHdRIiC
- TLSH T113734B05ADE605F2E2485234BEBBD73519782ED42BE38BC7D316EE9508232C35277297
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42058
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
lstrlenA
InterlockedIncrement
lstrlenW
DisableThreadLibraryCalls
LeaveCriticalSection
GetCurrentThreadId
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
user32
LoadStringW
winmm
timeGetTime
sgmempool
ord1
ord2
msvcrt
_assert
_purecall
__CxxFrameHandler
wcscmp
wcsncpy
_wcsicmp
sprintf
_CxxThrowException
??2@YAPAXI@Z
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
free
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
printf
??3@YAXPAX@Z
ws2_32
send
inet_addr
closesocket
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=14, version=7299,
count=3, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=9, id=93, version=2179,
count=83, id=1, productName=Unmarked objects,
count=9, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_PlaybackImageMgr_UI.dll
- IMPHASH bc5915d6fae697335913ffd8a0238486
- SHA256 faa21e4885a897ce8e5fada7006b06a65529673bf6e8eba3c38fee9f65defe9b
- MD5 89e963b1e45b9e016d43074bd3cd255a
- SHA1 b452e14764f71f50086b23827e32eef034c4b47f
- SHA512 37901ee3c3858930177ba9f90bf1617c1a50d7e4b2f4b4b3b52119725e38a4a5b79aba1e711726d30ae55cbac96e737454a2a90dc6b61978511be2f9dc217835
- SSDEEP 6144:TlnTUxLfs4qrnKfCCIECpgYysQQrAMVBCV:TlnTeLfs4EhCMPyskMVBC
- TLSH T191A41814D980CBA3F74169F94F6A77316530DD2D8A8EA6B39320F9509CF33925F2934A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
204203
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
LoadLibraryA
GetLastError
GetProcAddress
GetVersion
FreeLibrary
OutputDebugStringA
lstrlenW
MulDiv
Sleep
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
GetModuleHandleW
lstrlenA
CopyFileW
InterlockedIncrement
lstrcpynA
lstrcpynW
lstrcmpW
GetVersionExW
GetCurrentProcessId
lstrcpyW
GetCurrentProcess
FlushInstructionCache
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
InterlockedDecrement
user32
SetWindowsHookExW
SetRectEmpty
InvalidateRect
ShowWindow
SetFocus
BringWindowToTop
SetParent
SetWindowLongW
ScreenToClient
OffsetRect
MoveWindow
GetSystemMetrics
UnhookWindowsHookEx
RegisterClassExW
LoadImageW
wsprintfW
LoadCursorW
GetClassInfoExW
CreateWindowExW
LoadStringW
PtInRect
DestroyMenu
TrackPopupMenu
EnableMenuItem
ClientToScreen
GetSysColor
CopyRect
ReleaseDC
GetDC
DrawTextW
LoadMenuW
IsWindow
EndPaint
GetWindowDC
IsZoomed
DrawIconEx
SetRect
RegisterWindowMessageW
IsWindowVisible
GetFocus
MessageBeep
GetActiveWindow
GetWindowThreadProcessId
GetMessagePos
WindowFromPoint
IsMenu
UnregisterClassW
SetCursor
FindWindowExW
EndDialog
GetWindowTextW
SetWindowTextW
GetParent
GetWindowLongW
GetWindow
GetWindowRect
SystemParametersInfoW
GetClientRect
DestroyWindow
GetDlgItem
FillRect
CharLowerW
SendMessageW
DefWindowProcW
GetKeyState
GetSubMenu
CallNextHookEx
MapWindowPoints
SetWindowPos
SetForegroundWindow
SetDlgItemTextW
CharNextW
FrameRect
GetSysColorBrush
PeekMessageW
ModifyMenuW
TrackPopupMenuEx
GetClassNameW
DrawFrameControl
LoadStringA
PostQuitMessage
AppendMenuW
CreatePopupMenu
RemoveMenu
SetWindowRgn
GetMenuItemRect
RedrawWindow
DialogBoxParamW
CheckMenuItem
GetMenuState
CheckRadioButton
IsDlgButtonChecked
GetDlgItemTextW
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetIconInfo
DrawIcon
ScrollWindow
SetScrollInfo
GetScrollInfo
LoadAcceleratorsW
CallWindowProcW
BeginPaint
KillTimer
EnableWindow
ReleaseCapture
GetDlgCtrlID
SetTimer
UpdateWindow
GetCapture
SetCapture
GetCursorPos
LoadBitmapW
AdjustWindowRectEx
GetMenu
DrawFocusRect
InflateRect
DrawEdge
IsWindowEnabled
PostMessageW
GetWindowTextLengthW
SetMenu
MessageBoxW
SetMenuItemInfoW
GetMenuItemCount
GetMenuItemInfoW
gdi32
StretchBlt
SetStretchBltMode
PatBlt
GetStockObject
CreateCompatibleDC
CreatePolygonRgn
FillRgn
CreateCompatibleBitmap
Rectangle
CreateBitmap
SetBrushOrgEx
CreateDIBSection
CreatePatternBrush
CreateRoundRectRgn
DPtoLP
GetDeviceCaps
CreatePen
BitBlt
CreateSolidBrush
GetObjectW
DeleteDC
SaveDC
GetTextExtentPoint32W
RestoreDC
GetTextMetricsW
SetBkColor
ExtTextOutW
SetBkMode
SetTextColor
SelectObject
CreateFontIndirectW
DeleteObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
shell32
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
ole32
CoUninitialize
CoInitialize
gdiplus
GdiplusShutdown
GdiplusStartup
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipFree
GdipCloneBrush
GdipAlloc
GdipCreateFromHDC
GdipCreateSolidFill
GdipFillRectangleI
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectI
GdipDeleteBrush
GdipDeleteGraphics
comctl32
InitCommonControlsEx
ImageList_GetImageCount
ImageList_Add
ImageList_Draw
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
ImageList_GetIconSize
msvcrt
_tzset
_adjust_fdiv
_initterm
_onexit
__dllonexit
_vsnprintf
isdigit
malloc
_purecall
_ftol
wcsncpy
wcschr
wcscmp
printf
_wtoi
iswdigit
wcslen
swprintf
vswprintf
wcsstr
_waccess
wcsrchr
realloc
free
wcscpy
memmove
_assert
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
ws2_32
inet_addr
closesocket
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
204KB
Virtual Size
202KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
156KB
Virtual Size
152KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=14, version=7299,
count=2, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=1, id=12, version=7291,
count=1, id=96, version=2190,
count=25, id=93, version=2179,
count=422, id=1, productName=Unmarked objects,
count=36, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_PlaybackMgr_UI.dll
- IMPHASH 7f8d6529e4864dd40d499218687f711a
- SHA256 f276cfa5fce5ac15fd4e2da237faa228e4ff7365dc63ce10c6f3537bb5f06962
- MD5 642cf5883ffd564bd4bdf9c075aff1c0
- SHA1 d947673b88210943b9f39ad53cc1d1dbec82dda6
- SHA512 0e227676314331c7e82204e71ac86206cc02986ac0af9d23f77203a2f98e883561b266c4233621dd2f82cee8ccef12916597b56dcfe21ad2abee820765203ef0
- SSDEEP 24576:5b11TROK8zEqgTSEpzP3ZZFvPZZ15HvPZZ1KkZFvPZZ14qZZFvPZZ13+FvPZZ1N:FSEqgtP3ZZFvPZZ15HvPZZ1KkZFvPZZa
- TLSH T1BB653859B8A66133E25690B18EC67771EB20CEF9421D85F36538FE5802F33E30E79598
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
412049
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetLastError
LoadLibraryA
WriteFile
CreateFileW
CloseHandle
GetModuleFileNameW
GetProcAddress
FreeLibrary
OutputDebugStringA
lstrlenW
MulDiv
Sleep
DisableThreadLibraryCalls
GetVersion
GetSystemDirectoryW
CreateDirectoryW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
GetModuleHandleW
lstrcmpW
GetCurrentProcessId
FindResourceW
LoadResource
LockResource
WideCharToMultiByte
lstrcpynA
GetVersionExW
GetTickCount
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
lstrcpynW
lstrcpyW
lstrlenA
DeleteFileW
InterlockedIncrement
InterlockedDecrement
ReadFile
user32
GetMenuItemRect
IsZoomed
GetWindowDC
TrackPopupMenuEx
LoadStringA
GetWindowRect
SystemParametersInfoW
GetClientRect
MapWindowPoints
PostQuitMessage
MessageBeep
SetWindowRgn
AppendMenuW
GetMenuItemCount
CreatePopupMenu
PeekMessageW
SetWindowPos
SetDlgItemTextW
RemoveMenu
SetRectEmpty
RedrawWindow
EnableMenuItem
BringWindowToTop
RegisterHotKey
MoveWindow
CheckRadioButton
IsDlgButtonChecked
CharUpperW
GetDlgItemTextW
GetIconInfo
DrawIcon
DialogBoxParamW
CheckMenuItem
SetMenu
SetMenuItemInfoW
IsMenu
WindowFromPoint
GetMessagePos
GetKeyState
GetWindowThreadProcessId
GetFocus
RegisterWindowMessageW
UnhookWindowsHookEx
SetWindowsHookExW
FillRect
CharLowerW
FrameRect
GetSysColorBrush
CallNextHookEx
ModifyMenuW
GetClassNameW
DrawFrameControl
IsRectEmpty
SetParent
GetWindowTextLengthW
ScrollWindow
GetScrollInfo
IntersectRect
SetScrollInfo
LoadAcceleratorsW
SetForegroundWindow
GetMenuItemInfoW
GetWindow
GetWindowLongW
GetParent
SetWindowTextW
GetWindowTextW
EndDialog
LoadStringW
MessageBoxW
GetActiveWindow
IsWindow
LoadIconW
CharNextW
DefWindowProcW
DestroyWindow
FindWindowExW
SetCursor
UnregisterClassW
SetRect
GetSysColor
SendMessageW
EndDeferWindowPos
OffsetRect
DeferWindowPos
BeginDeferWindowPos
EndPaint
CopyRect
BeginPaint
SetFocus
ReleaseDC
GetDC
CreateWindowExW
AdjustWindowRectEx
GetMenu
LoadBitmapW
RegisterClassExW
wsprintfW
LoadCursorW
GetClassInfoExW
CallWindowProcW
SetWindowLongW
DestroyMenu
TrackPopupMenu
LoadMenuW
GetSubMenu
PostMessageW
ScreenToClient
GetCursorPos
KillTimer
PtInRect
ClientToScreen
ReleaseCapture
GetDlgCtrlID
SetTimer
UpdateWindow
InvalidateRect
GetCapture
SetCapture
DrawTextW
DrawFocusRect
InflateRect
GetSystemMetrics
DrawEdge
IsWindowEnabled
GetDlgItem
ShowWindow
EnableWindow
LoadImageW
IsWindowVisible
DrawIconEx
gdi32
CreateRoundRectRgn
ExtTextOutW
SetBkColor
GetTextExtentPoint32W
TextOutW
Rectangle
CreateSolidBrush
PatBlt
CreateBitmap
SetBrushOrgEx
CreateDIBSection
CreatePatternBrush
RestoreDC
SaveDC
SetStretchBltMode
StretchBlt
SetBkMode
SetTextColor
GetStockObject
GetDeviceCaps
GetMapMode
CreatePolygonRgn
FillRgn
Ellipse
CreateRectRgn
SelectClipRgn
SetMapMode
DPtoLP
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
CreatePen
MoveToEx
LineTo
BitBlt
DeleteDC
GetObjectW
DeleteObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
shell32
SHOpenFolderAndSelectItems
ord165
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
ShellExecuteW
ole32
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
shlwapi
PathFileExistsW
comctl32
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Add
InitCommonControlsEx
_TrackMouseEvent
ImageList_GetIconSize
ImageList_Destroy
ImageList_Create
ord8
ImageList_Draw
ImageList_AddMasked
msvcrt
_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
_ftol
_vsnprintf
isdigit
_tzset
wcscpy
malloc
_wcsicmp
wcschr
_purecall
realloc
free
wcsncpy
_assert
strncmp
_wtoi
iswdigit
wcslen
swprintf
vswprintf
printf
wcscmp
_waccess
wcsstr
memmove
wcsrchr
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
gdiplus
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCreateBitmapFromResource
GdipCloneBrush
GdipCreateSolidFill
GdipFillRectangleI
GdipDrawImageRectI
GdipDeleteBrush
GdipCreateFromHDC
GdipDeleteGraphics
GdipCloneImage
GdipDisposeImage
GdipFree
GdipAlloc
GdipLoadImageFromStream
GdipSaveImageToFile
GdipCreatePen1
GdipDrawRectangleI
GdipDeletePen
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectRectI
GdiplusShutdown
GdiplusStartup
GdipLoadImageFromStreamICM
ws2_32
inet_addr
closesocket
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
416KB
Virtual Size
415KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
72KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
916KB
Virtual Size
915KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=96, version=2190,
count=1, id=12, version=7291,
count=6, id=14, version=7299,
count=3, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=27, id=93, version=2179,
count=437, id=1, productName=Unmarked objects,
count=51, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_RolePerm_UI.dll
- IMPHASH 4cc31c511129df98f2ee0facdc38141f
- SHA256 61e06e5492314667e92b1537eb5bab7bb914e56b6644b61e7106be8aa0325ae7
- MD5 dea5310e7cbed65982097240d906d219
- SHA1 e7cc37a84a8aff5326a5e1e4923a5fe75c2212cb
- SHA512 464c204596336d189515a5ab3272d9045037bc58ede936077af5ac79ec388bd75584bb02cdf4884517adee7c70e2a46b800f2cd5e613406558037ca08ce761f8
- SSDEEP 3072:3gtuTbetEX84S4yf+4aoRVcI6D756CwijFWZ9UeD:3gtuOEM4SPf+loOD7568jFWV
- TLSH T1E9F37D02BDD50CF9D285517C187F3732277F56A74B0A9B83E724DD68C8261C2AEB634A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
107743
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
OutputDebugStringA
WideCharToMultiByte
InitializeCriticalSection
Sleep
DeleteCriticalSection
HeapDestroy
GetModuleHandleW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
lstrcpyW
GetCurrentProcess
FlushInstructionCache
lstrlenA
DisableThreadLibraryCalls
lstrcmpW
InterlockedIncrement
lstrlenW
InterlockedDecrement
user32
SendMessageW
GetDlgItem
GetWindowTextW
SetWindowTextW
IsWindow
CreateDialogParamW
ShowWindow
DestroyWindow
IsWindowEnabled
GetActiveWindow
DialogBoxParamW
MoveWindow
GetSystemMetrics
LoadImageW
GetSubMenu
MessageBoxW
LoadStringW
EndDialog
SetDlgItemTextW
EnableWindow
SetWindowLongW
SetWindowPos
MapWindowPoints
GetClientRect
SystemParametersInfoW
GetWindowRect
GetWindow
GetWindowLongW
GetParent
GetDlgItemTextW
IsDlgButtonChecked
CharNextW
DestroyMenu
TrackPopupMenu
DefWindowProcW
PostMessageW
GetCursorPos
LoadMenuW
CallWindowProcW
GetWindowThreadProcessId
FindWindowExW
DrawTextW
FillRect
CopyRect
RegisterWindowMessageW
InflateRect
IsRectEmpty
SetCursor
LoadCursorW
PtInRect
BringWindowToTop
RedrawWindow
ClientToScreen
FrameRect
UpdateWindow
ReleaseDC
GetDC
GetFocus
CreateWindowExW
GetSysColor
InvalidateRect
ScreenToClient
ole32
CoInitialize
CoUninitialize
winmm
timeGetTime
comctl32
InitCommonControlsEx
msvcrt
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
_ftol
wcsncpy
__CxxFrameHandler
??3@YAXPAX@Z
_assert
??2@YAPAXI@Z
vswprintf
swprintf
wcslen
iswdigit
_wtoi
_purecall
free
printf
wcscmp
_wcsicmp
_vsnprintf
sprintf
_tzset
ws2_32
send
inet_addr
closesocket
gdi32
RestoreDC
LineTo
MoveToEx
CreatePen
CreateSolidBrush
DeleteObject
SelectObject
CreateRectRgnIndirect
SaveDC
SelectClipRgn
CreateRectRgn
SetTextColor
DeleteDC
StretchBlt
BitBlt
CreateCompatibleBitmap
GetObjectW
CreateCompatibleDC
SetBkMode
Rectangle
GetStockObject
ExtTextOutW
SetBkColor
GetTextExtentPoint32W
CreateFontIndirectW
Ellipse
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
108KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=2, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=17, id=93, version=2179,
count=220, id=1, productName=Unmarked objects,
count=19, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_ServerMgr_Clt.dll
- IMPHASH 8fe5a95a3d81ef5774344ebe457e2a87
- SHA256 284d5e8f781cac4bd06d90ab026a3f1fe388a7fe332e4e81275be1a118c5f3b0
- MD5 5e0f7525379e86fea4ddfab473653acd
- SHA1 59acefd0b84926cb3a0b89c3c7b1ddc3b3cd5eb1
- SHA512 f94c14c0af8b75a3b9e1e7b83f4e36919db97f5e4c51542d1c85894e8432e6dfd58419051e6a445586399510373bf3299f72baafac90dbc419d6f71669af2240
- SSDEEP 768:1O685kT4nv+8TRNBFUJCXZDhyIKHYReEDSSh26ec/rhQ2X4BT2Ar:1YRlFeYReQH/lQ84BT2A
- TLSH T1AC530806DAD60DF6C6494638AEBB9335707C29E47B9753C3B70AFDE118212D1C2A62C9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34819
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
lstrlenW
lstrcpyW
WideCharToMultiByte
lstrlenA
InterlockedIncrement
DisableThreadLibraryCalls
CreateDirectoryA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
GetModuleFileNameA
user32
CharNextA
wsprintfW
LoadStringW
winmm
timeGetTime
sgmempool
ord1
ord2
msvcrt
_tzset
vsprintf
isdigit
atoi
wcscpy
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
free
strrchr
sprintf
time
wcslen
fopen
fputs
fclose
_vsnprintf
_CxxThrowException
wcsncpy
__CxxFrameHandler
??3@YAXPAX@Z
_assert
??2@YAPAXI@Z
_timezone
ws2_32
closesocket
inet_addr
send
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=3, id=11, version=8047,
count=5, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=9, id=93, version=2179,
count=130, id=1, productName=Unmarked objects,
count=12, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_ServerMgr_UI.dll
- IMPHASH 90a723df3a5abc5be9482705e2587b39
- SHA256 fa5ca570577aa49167435c3a370fe990d06f147a29cd85eea11e47af5f5836e3
- MD5 bcefa089babcf3c2517a87ddf2be27c9
- SHA1 bf75d1c76663f59d58ffaadaa1715f0bd3f2127b
- SHA512 9a79a4779b2f4ab0ad8252141c8f209ee9277bcd0f49dd64f4e8cfd7ad968cfbf24f34ec671519990a38b071324d7d4b29dd9c10a66f0476b38c57e8a9be36ee
- SSDEEP 3072:1OU1biYUOi7+2RUy3uNtU41tSoxUR5VnWoNMPsFN8bUrZF0XQheaym:vkPRgj0XMsFN8bSoQ8ar
- TLSH T18B244C01BDC50DF5E645913C1C7F3B36623B2A974B5AAB83E704FE589831182AEFA345
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
108170
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
GetModuleHandleW
OutputDebugStringW
DebugBreak
MultiByteToWideChar
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DisableThreadLibraryCalls
Sleep
lstrcpyW
GetProcAddress
FreeLibrary
LoadLibraryA
lstrlenA
GetLastError
lstrcmpW
OutputDebugStringA
InterlockedIncrement
lstrlenW
InterlockedDecrement
user32
SendDlgItemMessageW
EnableWindow
SendMessageW
GetDlgItem
SetWindowPos
MapWindowPoints
GetClientRect
SystemParametersInfoW
GetWindowRect
GetWindow
GetParent
GetWindowLongW
EndDialog
SetFocus
LoadStringW
MessageBoxW
SetDlgItemTextW
wsprintfW
GetDlgItemTextW
MessageBeep
GetWindowTextW
GetWindowTextLengthW
SetWindowLongW
IsWindow
FindWindowExW
GetWindowThreadProcessId
FillRect
CreateWindowExW
GetFocus
MoveWindow
SetTimer
CreateDialogParamW
ShowWindow
InvalidateRect
DestroyWindow
GetDlgItemInt
SetDlgItemInt
SetWindowTextW
PostMessageW
CharNextW
wvsprintfW
CallWindowProcW
DefWindowProcW
GetSubMenu
LoadMenuW
GetCursorPos
ScreenToClient
PtInRect
EnableMenuItem
TrackPopupMenu
DestroyMenu
DialogBoxParamW
RegisterWindowMessageW
DrawTextW
InflateRect
GetSysColor
CopyRect
IsRectEmpty
SetCursor
LoadCursorW
BringWindowToTop
RedrawWindow
ClientToScreen
FrameRect
UpdateWindow
ReleaseDC
GetDC
gdi32
CreateFontIndirectW
DeleteObject
SelectClipRgn
CreateRectRgn
SetTextColor
DeleteDC
StretchBlt
BitBlt
CreateCompatibleBitmap
GetObjectW
CreateCompatibleDC
SetBkMode
Rectangle
GetStockObject
SelectObject
ExtTextOutW
SetBkColor
GetTextExtentPoint32W
LineTo
MoveToEx
SaveDC
CreateRectRgnIndirect
RestoreDC
Ellipse
CreateSolidBrush
CreatePen
ole32
CoUninitialize
CoInitialize
comctl32
InitCommonControlsEx
msvcrt
_adjust_fdiv
malloc
__dllonexit
_onexit
??3@YAXPAX@Z
__CxxFrameHandler
_itow
wcscmp
wcsncpy
??2@YAPAXI@Z
memmove
_wtoi
wctomb
_purecall
_ftol
_assert
wcscpy
_wcsicmp
wcslen
iswdigit
wcsstr
time
_ultow
vswprintf
swprintf
free
realloc
_tzset
_vsnprintf
_except_handler3
?terminate@@YAXXZ
_initterm
_timezone
ws2_32
inet_addr
closesocket
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
108KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=3, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=19, id=93, version=2179,
count=239, id=1, productName=Unmarked objects,
count=23, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_Setting_UI.dll
- IMPHASH b7ddabca7794a9ef0d4e8bad313646c6
- SHA256 8a3738d040f50fcef5b2d65bc089f5ca6533c87a22d24189dcb8cf3d8679ed3a
- MD5 7561aaed9314c24ed8e6d260bffb4864
- SHA1 b93894ed8460bfb5d7b7e1f83a8296626ef41c62
- SHA512 33a20637de65a88aa80357932a6bcc02118668a241c3892c99a66edf105e56a6304e835a25a6e39bd0423dd21df3bb8c51cff0547c9b6feed703fe15000a3040
- SSDEEP 12288:s9mAD0ofxNd9/Q99giplbuMa9lgnqvfquOHFZ/I:sUAD0ofxNPQ9yi/a9lgnqvR6F1I
- TLSH T1B4256B01A6C200E6DB5952B01C7D7F7B7A785E414F398B93AF14FEADE9B1282ED35108
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
359445
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetLastError
LoadLibraryA
FreeLibrary
GetProcAddress
OutputDebugStringA
GetFileSize
DisableThreadLibraryCalls
lstrcmpW
WriteFile
ReadFile
CloseHandle
CreateFileW
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
GetModuleHandleW
Sleep
GetTickCount
lstrcpynW
WideCharToMultiByte
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
lstrlenA
MultiByteToWideChar
InterlockedIncrement
GetCurrentProcess
FlushInstructionCache
lstrlenW
InterlockedDecrement
lstrcpyW
user32
MapWindowPoints
GetWindowRect
GetWindowTextW
SetWindowTextW
EndDialog
SetWindowPos
SystemParametersInfoW
GetWindow
SendMessageW
EnableWindow
LoadBitmapW
PostMessageW
SetWindowLongW
CallWindowProcW
InvalidateRect
GetDlgItem
ScreenToClient
GetCursorPos
GetSubMenu
LoadMenuW
GetParent
MoveWindow
GetClientRect
LoadImageW
GetSystemMetrics
CharNextW
SetDlgItemInt
DestroyWindow
CheckDlgButton
GetDlgCtrlID
SendDlgItemMessageW
IsDlgButtonChecked
IsWindowEnabled
DrawTextW
PtInRect
FillRect
InflateRect
UpdateWindow
GetWindowDC
ReleaseDC
IsRectEmpty
SetWindowRgn
GetAsyncKeyState
ChildWindowFromPointEx
SetCapture
GetMessageW
DispatchMessageW
ReleaseCapture
IntersectRect
EqualRect
CreateDialogParamW
EnumChildWindows
CopyRect
SetRect
SetFocus
GetWindowTextLengthW
ChildWindowFromPoint
OffsetRect
GetSysColor
KillTimer
MessageBoxW
BeginPaint
EndPaint
RegisterWindowMessageW
GetDlgItemTextW
IsWindow
GetActiveWindow
DialogBoxParamW
SetTimer
GetDlgItemInt
CheckRadioButton
ShowWindow
ShowScrollBar
ScrollWindow
GetScrollInfo
SetScrollInfo
CreateWindowExW
GetClassInfoExW
LoadCursorW
wsprintfW
RegisterClassExW
SetDlgItemTextW
DefWindowProcW
LoadStringW
GetWindowLongW
GetFocus
GetDC
FrameRect
ClientToScreen
RedrawWindow
BringWindowToTop
SetCursor
FindWindowExW
GetWindowThreadProcessId
DestroyMenu
TrackPopupMenu
IsWindowVisible
gdi32
RestoreDC
LineTo
MoveToEx
CreatePen
SelectObject
CreateSolidBrush
SaveDC
SetBkMode
CombineRgn
CreateRectRgn
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
Rectangle
SetTextColor
GetStockObject
SetBkColor
DeleteDC
ExtTextOutW
CreateRectRgnIndirect
SelectClipRgn
StretchBlt
GetObjectW
GetTextExtentPoint32W
CreateFontIndirectW
Ellipse
SetMapMode
GetMapMode
DeleteObject
comdlg32
GetOpenFileNameW
ChooseColorW
GetSaveFileNameW
ole32
CoInitialize
CoUninitialize
winmm
timeGetTime
comctl32
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
InitCommonControlsEx
msvcrt
wcscmp
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
wctomb
iswspace
_tzset
_vsnprintf
memmove
free
wcscat
_purecall
swscanf
mktime
time
gmtime
_ftol
strncpy
printf
wcschr
_strnicmp
strrchr
wcsrchr
_wtol
_wtoi
iswdigit
wcslen
swprintf
vswprintf
sprintf
wcsncpy
_assert
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
ws2_32
closesocket
inet_addr
send
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
368KB
Virtual Size
365KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
532KB
Virtual Size
531KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
64KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=2, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=19, id=93, version=2179,
count=277, id=1, productName=Unmarked objects,
count=51, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_Statistics_UI.dll
- IMPHASH 1046a49345d08be3c9635e12a9031918
- SHA256 02c5b1766d4d71ea81f85f1c674973f697ad340b3846ae9d0255d89c269095a2
- MD5 a55fd58730fd5b51e9cd6c4029a1a7fc
- SHA1 e8c23a9a7f15cbe3df590529a338a9da4a0f0e37
- SHA512 83cc4a332531fc528a155fd1295ecda83b05bdd1e034b94ff9a4e6df4038dd83d89fc6c910b6c0362c7972f37f56a122863fd2fed55c701f102f52809b0e2b2a
- SSDEEP 3072:qPq7kHNsxWuw9iH1a96joAH2XMXyGr5YqXQoP1s1p:qPmkHNi69ik6joAWcia5xQoP
- TLSH T113346B02E9C545FACB5B663419BF3B72333413854B5E8BD3D304EE46ED225C26D3A28A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
121414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
lstrcpyW
lstrlenA
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetVersionExW
DisableThreadLibraryCalls
LocalFree
lstrcpynW
DeleteFileW
GetLogicalDrives
GetDriveTypeW
OutputDebugStringA
Sleep
lstrcmpW
InterlockedIncrement
lstrlenW
InterlockedDecrement
user32
MapWindowPoints
GetClientRect
SetWindowPos
LoadStringW
SendMessageW
SystemParametersInfoW
GetWindowRect
GetWindow
GetDlgItem
SetWindowTextW
GetParent
GetWindowLongW
SetWindowLongW
GetCursorPos
PostMessageW
DialogBoxParamW
DestroyWindow
ScreenToClient
MoveWindow
CreateDialogParamW
ShowWindow
GetWindowTextW
GetSubMenu
LoadMenuW
TrackPopupMenu
DestroyMenu
CallWindowProcW
DefWindowProcW
CreateWindowExW
InvalidateRect
DrawTextW
FillRect
GetSysColor
CopyRect
GetWindowThreadProcessId
FindWindowExW
RegisterWindowMessageW
InflateRect
IsRectEmpty
SetCursor
LoadCursorW
PtInRect
BringWindowToTop
RedrawWindow
ClientToScreen
FrameRect
UpdateWindow
GetFocus
IsWindow
CharNextW
GetActiveWindow
MessageBoxW
EnableWindow
GetDlgItemTextW
EndDialog
GetDC
GetSystemMetrics
ReleaseDC
gdi32
DeleteDC
SelectObject
GetTextExtentPoint32W
RestoreDC
LineTo
MoveToEx
CreatePen
CreateSolidBrush
DeleteObject
CreateRectRgnIndirect
SaveDC
SelectClipRgn
CreateRectRgn
SetTextColor
StretchBlt
BitBlt
CreateCompatibleBitmap
GetObjectW
CreateCompatibleDC
Ellipse
CreateFontIndirectW
SetBkColor
ExtTextOutW
GetStockObject
Rectangle
SetBkMode
comdlg32
GetSaveFileNameW
GetOpenFileNameW
shell32
SHGetSpecialFolderPathW
ole32
CLSIDFromString
CoInitialize
CoUninitialize
OleRun
CLSIDFromProgID
CoCreateInstance
oleaut32
SysAllocString
VariantChangeType
SysFreeString
VariantClear
comctl32
InitCommonControlsEx
msvcrt
__CxxFrameHandler
??3@YAXPAX@Z
wcsncpy
??2@YAPAXI@Z
_wcsicmp
wcscmp
wcsrchr
_waccess
vswprintf
swprintf
wcslen
iswdigit
_wtoi
printf
_itow
free
time
_assert
_tzset
_CxxThrowException
_purecall
_ftol
_vsnprintf
malloc
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_timezone
ws2_32
inet_addr
closesocket
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
124KB
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
64KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=2, id=11, version=8047,
count=5, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=11, version=8798,
count=3, id=95, version=2190,
count=21, id=93, version=2179,
count=245, id=1, productName=Unmarked objects,
count=24, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_StatsMgr_Clt.dll
- IMPHASH 5872968ff5732a6a6c71a45a0dfb3c3f
- SHA256 59565d8fd5b5739eed4e0bdecee59eaa547a52b01a96222e12134c8aea7465eb
- MD5 d72db9797579c6dff3e4ea788cbbb23e
- SHA1 6836dfb5d693724c845be11896b601b11c2e98ed
- SHA512 352d8ff3c03979b70c305c85739c452c9c33d00d3d94ea2777192b7d02ab249289afeb24d6fdfb7f14f6eb60687d93b4431d7c28e035f0b3ca2e07d57e9a07dd
- SSDEEP 384:kMEX9/g0zJf3tOiSuDk2E2ymVfmP195Pxku83kt+Misy4Txg+QPuRNdon4aG6LAB:v4N3t+u/VohPCRy+Mis5XQEon4cASn
- TLSH T121A32A02F9D408FDC74882B8ADBF9F78767868803B3243877309EDD665A12D1BE76195
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19603
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
lstrlenA
InterlockedIncrement
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
DisableThreadLibraryCalls
sgmempool
ord1
ord2
msvcrt
??3@YAXPAX@Z
printf
??2@YAPAXI@Z
_assert
_purecall
__CxxFrameHandler
_CxxThrowException
_tzset
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
20KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
64KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=3, id=11, version=8047,
count=5, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=7, id=93, version=2179,
count=61, id=1, productName=Unmarked objects,
count=7, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_SysCfgMgr.dll
- IMPHASH db3d28ee37868a32d8e8ac6755110dac
- SHA256 291d2a11b48cf12e58feeb1a46845b2d8e2986f7f5cb64e390db69e988ddf6ab
- MD5 0132afcb2ee41cfe9984ff88240d4507
- SHA1 2538e4efd31229d9b5d2103997b253076ea17115
- SHA512 72e214d99f1acc51afa41e70680d3f601d7ecbc170fbb2f0db7df344424aa2b4c7aefff7e3a0d8026e73b64c2aa696d908a9c4bf746c0d72f5d6a26a74e51939
- SSDEEP 1536:oNZNryq68HSNp5EhuRBDkXfpAkqL+IcE0+nQVN4hMqqU+NV23S2pPJ:KVvyREhuPDkPpzQ0+n9MqqDLy/pP
- TLSH T1B5A36C06A8D009FDE5C84A7C4D7FBB32713917E457C25693E71AFD6608A21C2277A3CA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
57309
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
MultiByteToWideChar
GetFileAttributesA
WideCharToMultiByte
GetModuleFileNameW
GetModuleHandleW
lstrlenW
InterlockedIncrement
lstrlenA
InterlockedDecrement
user32
CharLowerW
CharNextW
advapi32
RegSetValueExW
RegDeleteValueW
RegFlushKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
sgmempool
ord1
ord2
msvcrt
_chkesp
_wcsicmp
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_wtol
_ltow
_ultow
strstr
malloc
free
_access
fopen
fseek
??3@YAXPAX@Z
printf
??2@YAPAXI@Z
wcscpy
_assert
wcscmp
wcsrchr
memmove
wcsncpy
iswspace
wcschr
_wtoi
wcslen
vswprintf
swprintf
iswdigit
wcsstr
swscanf
_CxxThrowException
__CxxFrameHandler
fread
fclose
ftell
fwrite
ws2_32
closesocket
inet_addr
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
56KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=96, version=2190,
count=2, id=14, version=7299,
count=1, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=21, id=93, version=2179,
count=258, id=1, productName=Unmarked objects,
count=13, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_UserMgr_Clt.dll
- IMPHASH 680f59fb3221c64692fb4929ad1a0ebb
- SHA256 ea6ec7382ea057c79976fe66d5844e64ec793f2b11354b8a10498972080ba9df
- MD5 0ad1d957bd1e80068c9fe571c79f4e5f
- SHA1 da1ffcef1ae715c9bfa449ba78bda8da0a295f4e
- SHA512 573b11c3439d99dde4c50d6445344571c003a403fca15f16fb940dd9d31412a6e51794fc4719724023f6ca14997660c0828f4eb8d6d46ec2003d7f5751fb8b80
- SSDEEP 6144:K9nWV+Ym5RnZejP8U5QPLs0OT53mzZJ7Z5qqDLuzAkK:4nWV+YNjP8U5QTUT53mzXaqnu
- TLSH T173343A06A9D744F8C2CD52305A3EA732A87886FD2B15DED3A71FEEA44C361C3653611E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
170753
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
lstrlenA
InterlockedIncrement
GetModuleHandleW
WideCharToMultiByte
lstrlenW
GetSystemTime
MultiByteToWideChar
DisableThreadLibraryCalls
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
user32
SetWindowLongW
GetWindowLongW
UnregisterClassW
RegisterClassExW
DestroyWindow
CreateWindowExW
DefWindowProcW
wsprintfW
LoadStringW
CharNextW
PostMessageW
winmm
timeGetTime
sgmempool
ord1
ord2
msvcrt
_adjust_fdiv
??3@YAXPAX@Z
printf
??2@YAPAXI@Z
_assert
_purecall
__CxxFrameHandler
wcscmp
atol
sprintf
_wcsicmp
wcsncpy
wcslen
vswprintf
swprintf
iswdigit
_wtoi
_CxxThrowException
_tzset
wcscpy
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
free
_initterm
malloc
_timezone
ws2_32
send
closesocket
inet_addr
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
176KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=3, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=9, id=93, version=2179,
count=102, id=1, productName=Unmarked objects,
count=13, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
CM_UserPermMgr_UI.dll
- IMPHASH ed4efb10c3e83b8cb94ebe4a078e7e67
- SHA256 d5ac2d408728b41563d9a986060f13833901268df613cdcf54db8436ce082877
- MD5 2a9d9adc4da720eb72689429cfd659ac
- SHA1 a043859e06885397d0b2eddcd466dc73e3520cd1
- SHA512 d3c8c644818c26e4a8409fac85f14acd71b7130fe99d97ac9b7a9708cc64088a86c0b3e50ae8c0d80060e5f5081ccce196f60bed09b851e7ab654cf804bb1291
- SSDEEP 12288:sKRL9zy0RhQMqMwyDtw6xm0tgFYY+kukaYyYqkakuYctgFfF:s2XDtwaQF
- TLSH T129A44A529AD300F6E65C85743D6E7B7679381E85076A8BD3DB05FD68C9321C2E83E30A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
295627
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleFileNameA
CreateDirectoryA
OutputDebugStringA
GetLastError
InterlockedDecrement
LoadLibraryA
FreeLibrary
GetProcAddress
Sleep
DisableThreadLibraryCalls
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
GetModuleHandleW
lstrcmpW
lstrcpyW
OutputDebugStringW
DebugBreak
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
InterlockedIncrement
GetCurrentProcess
FlushInstructionCache
lstrcpynW
lstrlenW
user32
SystemParametersInfoW
UpdateWindow
InvalidateRect
GetCapture
SetCapture
EndPaint
BeginPaint
GetWindowTextW
InflateRect
GetClientRect
DrawEdge
SetDlgItemTextW
GetDlgItem
MapWindowPoints
GetWindow
MessageBoxW
EndDialog
LoadStringW
wsprintfW
GetSystemMetrics
DialogBoxParamW
GetSysColor
DefWindowProcW
SendMessageW
MoveWindow
SendDlgItemMessageW
SetFocus
OffsetRect
ScreenToClient
CharNextW
RegisterClassExW
GetClassInfoExW
wvsprintfW
DestroyMenu
TrackPopupMenu
LoadMenuW
GetSubMenu
DestroyWindow
GetCursorPos
FillRect
CopyRect
GetWindowTextLengthW
CharUpperW
IsDlgButtonChecked
ShowWindow
EnableMenuItem
CharNextA
CheckDlgButton
DestroyCursor
RedrawWindow
CreatePopupMenu
IsWindowVisible
CreateDialogParamW
GetActiveWindow
ChildWindowFromPoint
FrameRect
BringWindowToTop
IsWindow
IsRectEmpty
RegisterWindowMessageW
FindWindowExW
GetWindowThreadProcessId
SetWindowLongW
SetWindowTextW
SetCursor
LoadCursorW
GetDlgItemTextW
GetParent
GetDlgCtrlID
EnableWindow
GetFocus
PostMessageW
ReleaseDC
GetDC
SetWindowPos
AdjustWindowRectEx
SetTimer
ReleaseCapture
ClientToScreen
GetWindowRect
PtInRect
KillTimer
SetRect
CallWindowProcW
IsWindowEnabled
DrawTextW
DrawFocusRect
CreateWindowExW
LoadBitmapW
GetWindowLongW
GetMenu
gdi32
SaveDC
ExtTextOutW
BitBlt
Ellipse
CreateRectRgnIndirect
CreateRectRgn
SelectClipRgn
CreateCompatibleDC
CreateCompatibleBitmap
MoveToEx
LineTo
RestoreDC
DeleteDC
GetStockObject
GetTextExtentPoint32W
SetBkMode
CreateSolidBrush
SelectObject
CreatePen
Rectangle
SetBkColor
SetTextColor
GetDeviceCaps
DPtoLP
CreateFontIndirectW
GetObjectW
StretchBlt
DeleteObject
ole32
CoUninitialize
CoInitialize
comctl32
ImageList_AddMasked
ImageList_DragMove
ImageList_DragShowNolock
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_EndDrag
InitCommonControlsEx
ImageList_LoadImageW
ImageList_GetBkColor
ImageList_DrawEx
_TrackMouseEvent
ImageList_Draw
ImageList_GetIconSize
ImageList_SetBkColor
ImageList_Create
ImageList_Add
ImageList_Destroy
winmm
timeGetTime
msvcrt
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
_ftol
_tzset
_timezone
strrchr
fopen
fputs
fclose
_vsnprintf
wcschr
free
atof
time
isdigit
sprintf
vsprintf
atoi
wctomb
wcsncpy
_itow
iswdigit
swprintf
vswprintf
_wcsicmp
wcscmp
wcsstr
_wtoi
memmove
_assert
wcslen
_purecall
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
printf
ws2_32
send
closesocket
inet_addr
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
304KB
Virtual Size
302KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
32KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
68KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=3, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=17, id=93, version=2179,
count=276, id=1, productName=Unmarked objects,
count=38, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
DllDeinterlace.dll
- IMPHASH f4eece3455122e92593ed52c10e509c7
- SHA256 ecf16a6abdb777de4f45cbbf7eb491698c7947f2786f22c7590ea08b5ad869ce
- MD5 8d3b62a4c04f5d00d3eb4dbc6445f7c3
- SHA1 743a23a986cad77b043936f74772c891efa41708
- SHA512 e0245f09aab7f4556c1edafa14cd18a879980c87c01e6bb7176fe24cdb9b239bbbe4053c4eb19b1204695114935d3f236dcad53ac474a3bd265a7da91b37c9a6
- SSDEEP 768:RYgKj3yc5v3tTyJS2BfOYQLCTK7/XSaoI+KQY:g3vN9TyJ5f6uOrZoI+K
- TLSH T12E237C523AD640F3D29F433099F65B2BAD7E3D2026E588839B6519CA1D716F1E63B303
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7084
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HI_Deinterlace
HI_GetVersion
HI_InitDeinterlace
HI_ReleaseDeinterlace
Name
.text
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=11, version=8047,
count=20, id=14, version=7299,
count=57, id=10, version=8047,
count=65, id=1, productName=Unmarked objects,
count=3, id=19, version=8034,
count=1, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
GDIPLUS.DLL
- IMPHASH c435c81e120e4837142e9074d88cf1cc
- SHA256 5f25405d991a2118dffcaa4929aa94e44a8692916e363a84011555f4c8c4c423
- MD5 c5ea2d4f8f7ac5188a98c6a9efaddc26
- SHA1 fe5c1e41d2eaa24e2af4770c1d507c6fba08dbe3
- SHA512 197bc8083c6d8a1ac6f5f48ec17d0128b08e09926162abdd73a1b0b8f0921a5ac050e8429c93d15612964dd217036382139ee57f4157b89436feefa0b14455fe
- SSDEEP 24576:fjYLltJx99q8QiLl5Bb1/QB/vwQjiDHER8uSSvqrhdewD2XgfegLcvRbleESOdL:fc7JBb1/QSQho3yggh
- TLSH T1F985BF62F593D039C46356B1AA56333AB3F99B31003D8A4A7ED51D0DEAB1C42CB39367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
232700
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\postbuild\opt\microsoftwindowsgdiplus-1100-gdiplus.pdb
kernel32
VirtualAlloc
GetSystemInfo
GetCommandLineA
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
RtlUnwind
VirtualQuery
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
IsValidLocale
ConvertDefaultLocale
GetLocaleInfoW
GetModuleFileNameW
GetModuleFileNameA
FindResourceA
LoadResource
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
GetProcAddress
HeapReAlloc
HeapFree
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
InterlockedExchange
GetProcessHeap
HeapAlloc
InterlockedCompareExchange
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
Sleep
CloseHandle
WriteFile
CreateFileA
WaitForSingleObject
SetEvent
lstrcmpiA
CreateThread
CreateEventA
WideCharToMultiByte
MultiByteToWideChar
GetSystemDefaultLCID
GetACP
GetVersionExA
GetWindowsDirectoryA
GetSystemDirectoryW
LoadLibraryA
HeapDestroy
FreeLibrary
GetModuleHandleW
LoadLibraryW
HeapCreate
GlobalFree
GlobalUnlock
GlobalSize
GlobalLock
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
GlobalAlloc
SetLastError
VirtualFree
GetProfileSectionA
ReleaseSemaphore
CreateFileMappingW
GetSystemDirectoryA
CreateFileW
CreateSemaphoreA
IsDBCSLeadByteEx
GetLastError
FlushFileBuffers
LockFile
GetFileInformationByHandle
UnlockFile
ReadFile
SetFilePointer
SetEndOfFile
GetOEMCP
SearchPathA
SearchPathW
GetFileTime
LocalFree
LocalAlloc
MulDiv
LocalReAlloc
lstrcmpiW
GetProfileStringA
GetProfileIntA
LockResource
RaiseException
user32
ReleaseDC
GetDC
wsprintfA
GetSysColor
UnregisterClassA
DestroyWindow
LoadBitmapW
LoadBitmapA
IntersectRect
IsRectEmpty
wsprintfW
SystemParametersInfoA
GetClassLongA
GetWindowLongA
GetDCEx
GetIconInfo
CreateIconIndirect
WindowFromDC
GetWindowRect
GetDesktopWindow
GetClientRect
PeekMessageA
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageA
ClientToScreen
wvsprintfA
InflateRect
UnionRect
SetRectEmpty
OffsetRect
RegisterClassA
RegisterWindowMessageA
CreateWindowExA
DefWindowProcA
GetSystemMetrics
gdi32
ExtTextOutA
PolylineTo
Polyline
LineTo
GetCurrentPositionEx
PolyPolyline
StrokeAndFillPath
FillPath
SetPolyFillMode
GetGraphicsMode
StrokePath
CreateSolidBrush
SetMiterLimit
FillRgn
GetDIBColorTable
GetNearestPaletteIndex
ArcTo
SetArcDirection
SelectClipPath
GetPath
CloseFigure
AbortPath
FlattenPath
WidenPath
BeginPath
Ellipse
AngleArc
PolyBezierTo
PolyBezier
RoundRect
PolyDraw
Pie
Chord
Arc
EndPath
OffsetClipRgn
GetRgnBox
SetPaletteEntries
ResizePalette
CreatePalette
GetSystemPaletteEntries
GetSystemPaletteUse
GetDeviceCaps
ExtEscape
GetObjectType
GetPixel
DeleteObject
SelectPalette
GetTextFaceA
GetTextMetricsA
GetTextFaceW
GetTextMetricsW
EnumFontFamiliesExA
EnumFontFamiliesExW
SelectObject
CreateFontIndirectW
CreateFontIndirectA
GetRegionData
DeleteDC
DrawEscape
CreateDCA
CreateICA
CreateRectRgn
GetRandomRgn
LPtoDP
GetWindowExtEx
GetViewportExtEx
GetWindowOrgEx
GetViewportOrgEx
GetMapMode
SetICMMode
Escape
GetDCOrgEx
GetObjectA
GetCurrentObject
GetDIBits
CreateCompatibleDC
CreateDIBSection
RealizePalette
GetPaletteEntries
PatBlt
CreateBrushIndirect
GdiFlush
SetDIBits
SetBkMode
SetBkColor
SetTextColor
CreateBitmap
GetStockObject
EnumMetaFile
GetMetaFileBitsEx
PlayEnhMetaFileRecord
EnumEnhMetaFile
SetMetaRgn
DeleteMetaFile
DeleteEnhMetaFile
CloseEnhMetaFile
PlayMetaFile
SetWindowExtEx
SetWindowOrgEx
SetViewportExtEx
SetViewportOrgEx
SetMapMode
CreateEnhMetaFileA
SetEnhMetaFileBits
SetMetaFileBitsEx
GetEnhMetaFileHeader
CopyMetaFileA
CopyEnhMetaFileA
GetEnhMetaFileBits
GetEnhMetaFileA
GetEnhMetaFileW
RestoreDC
SetWorldTransform
SetGraphicsMode
SaveDC
GetMetaFileA
GetMetaFileW
GdiComment
CreateEnhMetaFileW
SetDIBColorTable
SetBitmapBits
ExtTextOutW
PlayMetaFileRecord
IntersectClipRect
PolyPolygon
SetROP2
SetTextJustification
SetTextAlign
StretchDIBits
SetStretchBltMode
GetNearestColor
CreateDIBPatternBrushPt
DPtoLP
GetObjectW
CreatePenIndirect
GetTextColor
GetBkColor
SelectClipRgn
GetClipRgn
SetBrushOrgEx
Polygon
Rectangle
GetROP2
GetWorldTransform
ExtCreatePen
CombineRgn
TranslateCharsetInfo
GetTextCharsetInfo
GetPolyFillMode
GetArcDirection
GetTextAlign
GetBkMode
GetMiterLimit
CreateCompatibleBitmap
ExtCreateRegion
ModifyWorldTransform
ExtSelectClipRgn
CreatePatternBrush
ExcludeClipRect
CreatePen
SetMapperFlags
CombineTransform
ScaleWindowExtEx
ScaleViewportExtEx
StretchBlt
OffsetViewportOrgEx
BitBlt
PlgBlt
GetWinMetaFileBits
PlayEnhMetaFile
MoveToEx
CreateDIBitmap
ole32
CoTaskMemFree
CoTaskMemAlloc
GetHGlobalFromStream
CreateStreamOnHGlobal
advapi32
RegSetValueExW
RegSetValueExA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyExA
RegEnumKeyExW
RegEnumKeyExA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueW
RegCloseKey
RegEnumValueA
GdipAddPathArc
GdipAddPathArcI
GdipAddPathBezier
GdipAddPathBezierI
GdipAddPathBeziers
GdipAddPathBeziersI
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathClosedCurve2I
GdipAddPathClosedCurveI
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathCurve2I
GdipAddPathCurve3
GdipAddPathCurve3I
GdipAddPathCurveI
GdipAddPathEllipse
GdipAddPathEllipseI
GdipAddPathLine
GdipAddPathLine2
GdipAddPathLine2I
GdipAddPathLineI
GdipAddPathPath
GdipAddPathPie
GdipAddPathPieI
GdipAddPathPolygon
GdipAddPathPolygonI
GdipAddPathRectangle
GdipAddPathRectangleI
GdipAddPathRectangles
GdipAddPathRectanglesI
GdipAddPathString
GdipAddPathStringI
GdipAlloc
GdipBeginContainer
GdipBeginContainer2
GdipBeginContainerI
GdipBitmapApplyEffect
GdipBitmapConvertFormat
GdipBitmapCreateApplyEffect
GdipBitmapGetHistogram
GdipBitmapGetHistogramSize
GdipBitmapGetPixel
GdipBitmapLockBits
GdipBitmapSetPixel
GdipBitmapSetResolution
GdipBitmapUnlockBits
GdipClearPathMarkers
GdipCloneBitmapArea
GdipCloneBitmapAreaI
GdipCloneBrush
GdipCloneCustomLineCap
GdipCloneFont
GdipCloneFontFamily
GdipCloneImage
GdipCloneImageAttributes
GdipCloneMatrix
GdipClonePath
GdipClonePen
GdipCloneRegion
GdipCloneStringFormat
GdipClosePathFigure
GdipClosePathFigures
GdipCombineRegionPath
GdipCombineRegionRect
GdipCombineRegionRectI
GdipCombineRegionRegion
GdipComment
GdipConvertToEmfPlus
GdipConvertToEmfPlusToFile
GdipConvertToEmfPlusToStream
GdipCreateAdjustableArrowCap
GdipCreateBitmapFromDirectDrawSurface
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateCachedBitmap
GdipCreateCustomLineCap
GdipCreateEffect
GdipCreateFont
GdipCreateFontFamilyFromName
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCreateFontFromLogfontW
GdipCreateFromHDC
GdipCreateFromHDC2
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipCreateHalftonePalette
GdipCreateHatchBrush
GdipCreateImageAttributes
GdipCreateLineBrush
GdipCreateLineBrushFromRect
GdipCreateLineBrushFromRectI
GdipCreateLineBrushFromRectWithAngle
GdipCreateLineBrushFromRectWithAngleI
GdipCreateLineBrushI
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCreateMatrix3I
GdipCreateMetafileFromEmf
GdipCreateMetafileFromFile
GdipCreateMetafileFromStream
GdipCreateMetafileFromWmf
GdipCreateMetafileFromWmfFile
GdipCreatePath
GdipCreatePath2
GdipCreatePath2I
GdipCreatePathGradient
GdipCreatePathGradientFromPath
GdipCreatePathGradientI
GdipCreatePathIter
GdipCreatePen1
GdipCreatePen2
GdipCreateRegion
GdipCreateRegionHrgn
GdipCreateRegionPath
GdipCreateRegionRect
GdipCreateRegionRectI
GdipCreateRegionRgnData
GdipCreateSolidFill
GdipCreateStreamOnFile
GdipCreateStringFormat
GdipCreateTexture
GdipCreateTexture2
GdipCreateTexture2I
GdipCreateTextureIA
GdipCreateTextureIAI
GdipDeleteBrush
GdipDeleteCachedBitmap
GdipDeleteCustomLineCap
GdipDeleteEffect
GdipDeleteFont
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeleteMatrix
GdipDeletePath
GdipDeletePathIter
GdipDeletePen
GdipDeletePrivateFontCollection
GdipDeleteRegion
GdipDeleteStringFormat
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawArc
GdipDrawArcI
GdipDrawBezier
GdipDrawBezierI
GdipDrawBeziers
GdipDrawBeziersI
GdipDrawCachedBitmap
GdipDrawClosedCurve
GdipDrawClosedCurve2
GdipDrawClosedCurve2I
GdipDrawClosedCurveI
GdipDrawCurve
GdipDrawCurve2
GdipDrawCurve2I
GdipDrawCurve3
GdipDrawCurve3I
GdipDrawCurveI
GdipDrawDriverString
GdipDrawEllipse
GdipDrawEllipseI
GdipDrawImage
GdipDrawImageFX
GdipDrawImageI
GdipDrawImagePointRect
GdipDrawImagePointRectI
GdipDrawImagePoints
GdipDrawImagePointsI
GdipDrawImagePointsRect
GdipDrawImagePointsRectI
GdipDrawImageRect
GdipDrawImageRectI
GdipDrawImageRectRect
GdipDrawImageRectRectI
GdipDrawLine
GdipDrawLineI
GdipDrawLines
GdipDrawLinesI
GdipDrawPath
GdipDrawPie
GdipDrawPieI
GdipDrawPolygon
GdipDrawPolygonI
GdipDrawRectangle
GdipDrawRectangleI
GdipDrawRectangles
GdipDrawRectanglesI
GdipDrawString
GdipEmfToWmfBits
GdipEndContainer
GdipEnumerateMetafileDestPoint
GdipEnumerateMetafileDestPointI
GdipEnumerateMetafileDestPoints
GdipEnumerateMetafileDestPointsI
GdipEnumerateMetafileDestRect
GdipEnumerateMetafileDestRectI
GdipEnumerateMetafileSrcRectDestPoint
GdipEnumerateMetafileSrcRectDestPointI
GdipEnumerateMetafileSrcRectDestPoints
GdipEnumerateMetafileSrcRectDestPointsI
GdipEnumerateMetafileSrcRectDestRect
GdipEnumerateMetafileSrcRectDestRectI
GdipFillClosedCurve
GdipFillClosedCurve2
GdipFillClosedCurve2I
GdipFillClosedCurveI
GdipFillEllipse
GdipFillEllipseI
GdipFillPath
GdipFillPie
GdipFillPieI
GdipFillPolygon
GdipFillPolygon2
GdipFillPolygon2I
GdipFillPolygonI
GdipFillRectangle
GdipFillRectangleI
GdipFillRectangles
GdipFillRectanglesI
GdipFillRegion
GdipFindFirstImageItem
GdipFindNextImageItem
GdipFlattenPath
GdipFlush
GdipFree
GdipGetAdjustableArrowCapFillState
GdipGetAdjustableArrowCapHeight
GdipGetAdjustableArrowCapMiddleInset
GdipGetAdjustableArrowCapWidth
GdipGetAllPropertyItems
GdipGetBrushType
GdipGetCellAscent
GdipGetCellDescent
GdipGetClip
GdipGetClipBounds
GdipGetClipBoundsI
GdipGetCompositingMode
GdipGetCompositingQuality
GdipGetCustomLineCapBaseCap
GdipGetCustomLineCapBaseInset
GdipGetCustomLineCapStrokeCaps
GdipGetCustomLineCapStrokeJoin
GdipGetCustomLineCapType
GdipGetCustomLineCapWidthScale
GdipGetDC
GdipGetDpiX
GdipGetDpiY
GdipGetEffectParameterSize
GdipGetEffectParameters
GdipGetEmHeight
GdipGetEncoderParameterList
GdipGetEncoderParameterListSize
GdipGetFamily
GdipGetFamilyName
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFontUnit
GdipGetGenericFontFamilyMonospace
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetHatchBackgroundColor
GdipGetHatchForegroundColor
GdipGetHatchStyle
GdipGetHemfFromMetafile
GdipGetImageAttributesAdjustedPalette
GdipGetImageBounds
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipGetImageDimension
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageFlags
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImageItemData
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageThumbnail
GdipGetImageType
GdipGetImageVerticalResolution
GdipGetImageWidth
GdipGetInterpolationMode
GdipGetLineBlend
GdipGetLineBlendCount
GdipGetLineColors
GdipGetLineGammaCorrection
GdipGetLinePresetBlend
GdipGetLinePresetBlendCount
GdipGetLineRect
GdipGetLineRectI
GdipGetLineSpacing
GdipGetLineTransform
GdipGetLineWrapMode
GdipGetLogFontA
GdipGetLogFontW
GdipGetMatrixElements
GdipGetMetafileDownLevelRasterizationLimit
GdipGetMetafileHeaderFromEmf
GdipGetMetafileHeaderFromFile
GdipGetMetafileHeaderFromMetafile
GdipGetMetafileHeaderFromStream
GdipGetMetafileHeaderFromWmf
GdipGetNearestColor
GdipGetPageScale
GdipGetPageUnit
GdipGetPathData
GdipGetPathFillMode
GdipGetPathGradientBlend
GdipGetPathGradientBlendCount
GdipGetPathGradientCenterColor
GdipGetPathGradientCenterPoint
GdipGetPathGradientCenterPointI
GdipGetPathGradientFocusScales
GdipGetPathGradientGammaCorrection
GdipGetPathGradientPath
GdipGetPathGradientPointCount
GdipGetPathGradientPresetBlend
GdipGetPathGradientPresetBlendCount
GdipGetPathGradientRect
GdipGetPathGradientRectI
GdipGetPathGradientSurroundColorCount
GdipGetPathGradientSurroundColorsWithCount
GdipGetPathGradientTransform
GdipGetPathGradientWrapMode
GdipGetPathLastPoint
GdipGetPathPoints
GdipGetPathPointsI
GdipGetPathTypes
GdipGetPathWorldBounds
GdipGetPathWorldBoundsI
GdipGetPenBrushFill
GdipGetPenColor
GdipGetPenCompoundArray
GdipGetPenCompoundCount
GdipGetPenCustomEndCap
GdipGetPenCustomStartCap
GdipGetPenDashArray
GdipGetPenDashCap197819
GdipGetPenDashCount
GdipGetPenDashOffset
GdipGetPenDashStyle
GdipGetPenEndCap
GdipGetPenFillType
GdipGetPenLineJoin
GdipGetPenMiterLimit
GdipGetPenMode
GdipGetPenStartCap
GdipGetPenTransform
GdipGetPenUnit
GdipGetPenWidth
GdipGetPixelOffsetMode
GdipGetPointCount
GdipGetPropertyCount
GdipGetPropertyIdList
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGetPropertySize
GdipGetRegionBounds
GdipGetRegionBoundsI
GdipGetRegionData
GdipGetRegionDataSize
GdipGetRegionHRgn
GdipGetRegionScans
GdipGetRegionScansCount
GdipGetRegionScansI
GdipGetRenderingOrigin
GdipGetSmoothingMode
GdipGetSolidFillColor
GdipGetStringFormatAlign
GdipGetStringFormatDigitSubstitution
GdipGetStringFormatFlags
GdipGetStringFormatHotkeyPrefix
GdipGetStringFormatLineAlign
GdipGetStringFormatMeasurableCharacterRangeCount
GdipGetStringFormatTabStopCount
GdipGetStringFormatTabStops
GdipGetStringFormatTrimming
GdipGetTextContrast
GdipGetTextRenderingHint
GdipGetTextureImage
GdipGetTextureTransform
GdipGetTextureWrapMode
GdipGetVisibleClipBounds
GdipGetVisibleClipBoundsI
GdipGetWorldTransform
GdipGraphicsClear
GdipGraphicsSetAbort
GdipImageForceValidation
GdipImageGetFrameCount
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageRotateFlip
GdipImageSelectActiveFrame
GdipImageSetAbort
GdipInitializePalette
GdipInvertMatrix
GdipIsClipEmpty
GdipIsEmptyRegion
GdipIsEqualRegion
GdipIsInfiniteRegion
GdipIsMatrixEqual
GdipIsMatrixIdentity
GdipIsMatrixInvertible
GdipIsOutlineVisiblePathPoint
GdipIsOutlineVisiblePathPointI
GdipIsStyleAvailable
GdipIsVisibleClipEmpty
GdipIsVisiblePathPoint
GdipIsVisiblePathPointI
GdipIsVisiblePoint
GdipIsVisiblePointI
GdipIsVisibleRect
GdipIsVisibleRectI
GdipIsVisibleRegionPoint
GdipIsVisibleRegionPointI
GdipIsVisibleRegionRect
GdipIsVisibleRegionRectI
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipMeasureCharacterRanges
GdipMeasureDriverString
GdipMeasureString
GdipMultiplyLineTransform
GdipMultiplyMatrix
GdipMultiplyPathGradientTransform
GdipMultiplyPenTransform
GdipMultiplyTextureTransform
GdipMultiplyWorldTransform
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPathIterCopyData
GdipPathIterEnumerate
GdipPathIterGetCount
GdipPathIterGetSubpathCount
GdipPathIterHasCurve
GdipPathIterIsValid
GdipPathIterNextMarker
GdipPathIterNextMarkerPath
GdipPathIterNextPathType
GdipPathIterNextSubpath
GdipPathIterNextSubpathPath
GdipPathIterRewind
GdipPlayMetafileRecord
GdipPlayTSClientRecord
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipRecordMetafile
GdipRecordMetafileFileName
GdipRecordMetafileFileNameI
GdipRecordMetafileI
GdipRecordMetafileStream
GdipRecordMetafileStreamI
GdipReleaseDC
GdipRemovePropertyItem
GdipResetClip
GdipResetImageAttributes
GdipResetLineTransform
GdipResetPageTransform
GdipResetPath
GdipResetPathGradientTransform
GdipResetPenTransform
GdipResetTextureTransform
GdipResetWorldTransform
GdipRestoreGraphics
GdipReversePath
GdipRotateLineTransform
GdipRotateMatrix
GdipRotatePathGradientTransform
GdipRotatePenTransform
GdipRotateTextureTransform
GdipRotateWorldTransform
GdipSaveAdd
GdipSaveAddImage
GdipSaveGraphics
GdipSaveImageToFile
GdipSaveImageToStream
GdipScaleLineTransform
GdipScaleMatrix
GdipScalePathGradientTransform
GdipScalePenTransform
GdipScaleTextureTransform
GdipScaleWorldTransform
GdipSetAdjustableArrowCapFillState
GdipSetAdjustableArrowCapHeight
GdipSetAdjustableArrowCapMiddleInset
GdipSetAdjustableArrowCapWidth
GdipSetClipGraphics
GdipSetClipHrgn
GdipSetClipPath
GdipSetClipRect
GdipSetClipRectI
GdipSetClipRegion
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetCustomLineCapBaseCap
GdipSetCustomLineCapBaseInset
GdipSetCustomLineCapStrokeCaps
GdipSetCustomLineCapStrokeJoin
GdipSetCustomLineCapWidthScale
GdipSetEffectParameters
GdipSetEmpty
GdipSetImageAttributesCachedBackground
GdipSetImageAttributesColorKeys
GdipSetImageAttributesColorMatrix
GdipSetImageAttributesGamma
GdipSetImageAttributesNoOp
GdipSetImageAttributesOutputChannel
GdipSetImageAttributesOutputChannelColorProfile
GdipSetImageAttributesRemapTable
GdipSetImageAttributesThreshold
GdipSetImageAttributesToIdentity
GdipSetImageAttributesWrapMode
GdipSetImagePalette
GdipSetInfinite
GdipSetInterpolationMode
GdipSetLineBlend
GdipSetLineColors
GdipSetLineGammaCorrection
GdipSetLineLinearBlend
GdipSetLinePresetBlend
GdipSetLineSigmaBlend
GdipSetLineTransform
GdipSetLineWrapMode
GdipSetMatrixElements
GdipSetMetafileDownLevelRasterizationLimit
GdipSetPageScale
GdipSetPageUnit
GdipSetPathFillMode
GdipSetPathGradientBlend
GdipSetPathGradientCenterColor
GdipSetPathGradientCenterPoint
GdipSetPathGradientCenterPointI
GdipSetPathGradientFocusScales
GdipSetPathGradientGammaCorrection
GdipSetPathGradientLinearBlend
GdipSetPathGradientPath
GdipSetPathGradientPresetBlend
GdipSetPathGradientSigmaBlend
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientTransform
GdipSetPathGradientWrapMode
GdipSetPathMarker
GdipSetPenBrushFill
GdipSetPenColor
GdipSetPenCompoundArray
GdipSetPenCustomEndCap
GdipSetPenCustomStartCap
GdipSetPenDashArray
GdipSetPenDashCap197819
GdipSetPenDashOffset
GdipSetPenDashStyle
GdipSetPenEndCap
GdipSetPenLineCap197819
GdipSetPenLineJoin
GdipSetPenMiterLimit
GdipSetPenMode
GdipSetPenStartCap
GdipSetPenTransform
GdipSetPenUnit
GdipSetPenWidth
GdipSetPixelOffsetMode
GdipSetPropertyItem
GdipSetRenderingOrigin
GdipSetSmoothingMode
GdipSetSolidFillColor
GdipSetStringFormatAlign
GdipSetStringFormatDigitSubstitution
GdipSetStringFormatFlags
GdipSetStringFormatHotkeyPrefix
GdipSetStringFormatLineAlign
GdipSetStringFormatMeasurableCharacterRanges
GdipSetStringFormatTabStops
GdipSetStringFormatTrimming
GdipSetTextContrast
GdipSetTextRenderingHint
GdipSetTextureTransform
GdipSetTextureWrapMode
GdipSetWorldTransform
GdipShearMatrix
GdipStartPathFigure
GdipStringFormatGetGenericDefault
GdipStringFormatGetGenericTypographic
GdipTestControl
GdipTransformMatrixPoints
GdipTransformMatrixPointsI
GdipTransformPath
GdipTransformPoints
GdipTransformPointsI
GdipTransformRegion
GdipTranslateClip
GdipTranslateClipI
GdipTranslateLineTransform
GdipTranslateMatrix
GdipTranslatePathGradientTransform
GdipTranslatePenTransform
GdipTranslateRegion
GdipTranslateRegionI
GdipTranslateTextureTransform
GdipTranslateWorldTransform
GdipVectorTransformMatrixPoints
GdipVectorTransformMatrixPointsI
GdipWarpPath
GdipWidenPath
GdipWindingModeOutline
GdiplusNotificationHook
GdiplusNotificationUnhook
GdiplusShutdown
GdiplusStartup
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
36KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Shared
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
72KB
Virtual Size
70KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
36KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=125, version=21213,
count=11, id=123, version=21213,
count=351, id=1, productName=Unmarked objects,
count=215, id=109, version=21213,
count=1, id=122, version=21213,
count=313, id=110, version=21213,
count=1, id=94, version=2179,
count=1, id=120, version=21213,
LoginImage/CMClient.ico
- SHA256 63c7ba733ddbafc2d490a7afe9418947521c2347d52a70c2bf9cf343d7bc6962
- MD5 d120973cc81c4a36f82a6f933c0500c4
- SHA1 63dbbecc3447c0cb44a4aa0a280724085f075339
- SHA512 4f9f444405ec888000ce665d8acb70787611c728259ba024d596cf5265cb9f2becda7dd84f20a3afe81ea7cadc5bd686a455c2966e43af662210aa8f03169690
- SSDEEP 768:rlu+8ZX3PQIDsyC7F4LlLe8FnQ8H616YvN3I:rluXYIDsNEF+1BNI
- TLSH T1E1F2AF71296258D2C434D430F60BE3B007BA6E7164B2D7A305D5722F954ACBBD60F67E
- MD5 SHA1 SHA512 SSDEEP TLSH
LoginImage/CMClientOffline.ico
- SHA256 097fbad268f01d2ea65cf3d3e3c65b18da97ba030446c92b83dac4bd7b10858f
- MD5 221479c7154e5005104941b31c0aad4b
- SHA1 3b37691a265e0cf66e75524e28272afff1e93501
- SHA512 b0eb5d44963a998c55e2d41ae152b437c17208680a4159cf69b056b7f30c28af7a308d8467dc0f02d98115baeb95d340fb5e721358f16ad86a16ad3fa0aca6c7
- SSDEEP 384:oGeyi2iRiVWmd1X0iHYGU3luVWF94BB+H/pFXKV61/Z/vY787ouXbPRCxeg8D6xG:iKnX2GDURYV61xT7DkGUbcJ
- TLSH T112F229728B18196BCD8858B9CC775CDB64F4E850B8A0D4A1B427BE3BC435285CB3F65E
- MD5 SHA1 SHA512 SSDEEP TLSH
LoginImage/LoginWndBkg.bmp
- SHA256 04413d0e4fea141aeba6a46b948757daa462d57b59e8b9a4229ae658af7b639d
- MD5 be3b227f198f06978867fe4338a957fa
- SHA1 cd0c6fb0c240356d89e000831666d5834a12170e
- SHA512 4c219808e19174f3d58765c2a55c874682457b266d05ae680ccf6155f3466d91bee1fc8d701d78ea8539a4738a8cc25eac122472d43fb472d3db363cdfb29d7f
- SSDEEP 768:vfVkkksA99cHlTGaVubukVTTDVe+j23TqKR7hNcirBbtoMQ6IsrJMV6JthXb+NOX:DHl+bi+q3041mh6LrN1b+NOPBbZ
- TLSH T1C76420CB7E12B9F150DFEC4050EC620EB42E99B2A0597B53AFDF184DD655BD6280E2C2
- MD5 SHA1 SHA512 SSDEEP TLSH
MP3Decoder.dll
- IMPHASH 9e406b1faf9b70ea331461dc1321b6bd
- SHA256 a0fe0f56bd34627c20f94966e62f668e4ef01c02636e2a031d8f4fdee0542d6f
- MD5 cef5b19a69d8f9212ceef5e87525ba9f
- SHA1 bdc4dc4634fa3df43635a5f0f14cfa7f0f1d3bf3
- SHA512 c0eefd7475b7141740c522ade8caca87aa9d8b0fae7decb840df11ed17359388b878e6d035fda9afd667fe7dd7103557028b4ab8e5328e8d0c8d732da8cf2d83
- SSDEEP 1536:uuTUlL3GToYuPYak8XUj1fVkNeUXD0r2fWxcQNYXloN2qHVp4z56TyroPuUTscbx:ur3G0BC5EIfNJHVtyroPuUTP1uL6Nnh
- TLSH T102F3AD237AA3C4B2D09C83B9256F4F279B3962114371C987DF603E099D25EA1A52B35F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5171
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
FlushFileBuffers
CloseHandle
RaiseException
SetStdHandle
SetFilePointer
ReadFile
CreateFileA
SetEndOfFile
MP3_Cleanup
MP3_Close
MP3_Decode
MP3_Init
MP3_Open
Name
.text
Size
80KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
60KB
Virtual Size
153KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data1
Size
4KB
Virtual Size
508B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=42, version=8803,
count=8, productName=Unmarked objects (old),
count=2, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=29, id=14, version=7299,
count=120, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=19, version=8034,
count=75, id=1, productName=Unmarked objects,
count=3, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
MSVCRTD.DLL
- IMPHASH aafabb794a4fc88d1217ad6b5bf28840
- SHA256 db39f55c12069c366e4d1ce73dc42fb76cd5587468182048cc11ecfedd518b9a
- MD5 2760781da57e727ba519af0139b4b1bc
- SHA1 f378f53bb3da9d2bf5580bf5cbd9cc8e224f896b
- SHA512 2c81fc965874513e51d9730690e124e72f73b1c6b5e99e8eb493e8bb891e99c144422e838875cbab04b1382597ade9089768cd4cbb96b20aba0d953378c4a4ee
- SSDEEP 6144:R4oS2r52o9Ee35JEBv3ksFdQv7UzMB+4IGU6niRiKW9DeiXij4XrDtr8k3MWiFJp:Rxr52o9Ee356Bv0sFd67UzMB+4IGU6ix
- TLSH T1B9845C20EB51D479F4E640FEC7F7867DEA2C5B31435860C783F479AA97258E67A3200A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46128
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetFilePointer
RtlUnwind
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetUnhandledExceptionFilter
GetModuleFileNameA
GetModuleFileNameW
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
ResumeThread
GetLastError
CreateThread
TlsSetValue
ExitThread
CloseHandle
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapFree
HeapAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
HeapValidate
GetProcAddress
LoadLibraryA
DebugBreak
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
SetEnvironmentVariableW
FlushFileBuffers
RaiseException
SetStdHandle
Sleep
CompareStringA
CompareStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetLocaleInfoW
GetTimeZoneInformation
SetEnvironmentVariableA
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapCompact
HeapWalk
ReadConsoleA
SetConsoleMode
GetConsoleMode
SetEndOfFile
WriteConsoleA
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
GetSystemTimeAsFileTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
SetLocalTime
GetSystemTime
GetModuleHandleA
$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??2@YAPAXIHPBDH@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CrtCheckMemory
_CrtDbgBreak
_CrtDbgReport
_CrtDoForAllClientObjects
_CrtDumpMemoryLeaks
_CrtIsMemoryBlock
_CrtIsValidHeapPointer
_CrtIsValidPointer
_CrtMemCheckpoint
_CrtMemDifference
_CrtMemDumpAllObjectsSince
_CrtMemDumpStatistics
_CrtSetAllocHook
_CrtSetBreakAlloc
_CrtSetDbgBlockType
_CrtSetDbgFlag
_CrtSetDumpClient
_CrtSetReportFile
_CrtSetReportHook
_CrtSetReportMode
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__argc
__argv
__badioinfo
__crtCompareStringA
__crtGetLocaleInfoW
__crtLCMapStringA
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__isascii
__iscsym
__iscsymf
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__crtAssertBusy
__p__crtBreakAlloc
__p__crtDbgFlag
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pioinfo
__pxcptinfoptrs
__set_app_type
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unDNameEx
__unguarded_readlc_active
__wargv
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_calloc_dbg
_cexit
_cgets
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_creat
_crtAssertBusy
_crtBreakAlloc
_crtDbgFlag
_cscanf
_ctype
_cwait
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_expand_dbg
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirsti64
_findnext
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_free_dbg
_fsopen
_fstat
_fstati64
_ftime
_ftol
_fullpath
_futime
_gcvt
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getws
_global_unwind2
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_malloc_dbg
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_msize
_msize_dbg
_nextafter
_onexit
_open
_open_osfhandle
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putws
_pwctype
_read
_realloc_dbg
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_searchenv
_seh_longjmp_unwind
_set_error_mode
_set_sbh_threshold
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snwprintf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_stat
_stati64
_statusfp
_strcmpi
_strdate
_strdup
_strerror
_stricmp
_stricoll
_strlwr
_strncoll
_strnicmp
_strnicoll
_strnset
_strrev
_strset
_strtime
_strupr
_swab
_sys_errlist
_sys_nerr
_tell
_telli64
_tempnam
_timezone
_tolower
_toupper
_tzname
_tzset
_ui64toa
_ui64tow
_ultoa
_ultow
_umask
_ungetch
_unlink
_unloaddll
_unlock
_utime
_vsnprintf
_vsnwprintf
_waccess
_wasctime
_wchdir
_wchmod
_wcmdln
_wcreat
_wcsdup
_wcsicmp
_wcsicoll
_wcslwr
_wcsncoll
_wcsnicmp
_wcsnicoll
_wcsnset
_wcsrev
_wcsset
_wcsupr
_wctime
_wenviron
_wexecl
_wexecle
_wexeclp
_wexeclpe
_wexecv
_wexecve
_wexecvp
_wexecvpe
_wfdopen
_wfindfirst
_wfindfirsti64
_wfindnext
_wfindnexti64
_wfopen
_wfreopen
_wfsopen
_wfullpath
_wgetcwd
_wgetdcwd
_wgetenv
_winmajor
_winminor
_winver
_wmakepath
_wmkdir
_wmktemp
_wopen
_wperror
_wpgmptr
_wpopen
_wputenv
_wremove
_wrename
_write
_wrmdir
_wsearchenv
_wsetlocale
_wsopen
_wspawnl
_wspawnle
_wspawnlp
_wspawnlpe
_wspawnv
_wspawnve
_wspawnvp
_wspawnvpe
_wsplitpath
_wstat
_wstati64
_wstrdate
_wstrtime
_wsystem
_wtempnam
_wtmpnam
_wtoi
_wtoi64
_wtol
_wunlink
_wutime
_y0
_y1
_yn
abort
abs
acos
asctime
asin
atan
atan2
atexit
atof
atoi
atol
bsearch
calloc
ceil
clearerr
clock
cos
cosh
ctime
difftime
div
exit
exp
fabs
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fgetwc
fgetws
floor
fmod
fopen
fprintf
fputc
fputs
fputwc
fputws
fread
free
freopen
frexp
fscanf
fseek
fsetpos
ftell
fwprintf
fwrite
fwscanf
getc
getchar
getenv
gets
getwc
getwchar
gmtime
is_wctype
isalnum
isalpha
iscntrl
isdigit
isgraph
isleadbyte
islower
isprint
ispunct
isspace
isupper
iswalnum
iswalpha
iswascii
iswcntrl
iswctype
iswdigit
iswgraph
iswlower
iswprint
iswpunct
iswspace
iswupper
iswxdigit
isxdigit
labs
ldexp
ldiv
localeconv
localtime
log
log10
longjmp
malloc
mblen
mbstowcs
mbtowc
memchr
memcmp
memcpy
memmove
memset
mktime
modf
perror
pow
printf
putc
putchar
puts
putwc
putwchar
qsort
raise
rand
realloc
remove
rename
rewind
scanf
setbuf
setlocale
setvbuf
signal
sin
sinh
sprintf
sqrt
srand
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtod
strtok
strtol
strtoul
strxfrm
swprintf
swscanf
system
tan
tanh
time
tmpfile
tmpnam
tolower
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
vfwprintf
vprintf
vsprintf
vswprintf
vwprintf
wcscat
wcschr
wcscmp
wcscoll
wcscpy
wcscspn
wcsftime
wcslen
wcsncat
wcsncmp
wcsncpy
wcspbrk
wcsrchr
wcsspn
wcsstr
wcstod
wcstok
wcstol
wcstombs
wcstoul
wcsxfrm
wctomb
wprintf
wscanf
Name
.text
Size
304KB
Virtual Size
301KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=19, version=8034,
count=145, id=1, productName=Unmarked objects,
count=19, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=65, id=14, version=7299,
count=482, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
SG_DHDVRCommon.dll
- IMPHASH f2bf1d67df9be6961e532330ff1fae96
- SHA256 a75ee93777338342a5057d7886af3e08265c94426759766113748910e4488718
- MD5 b72455cbbc09d8e3b1ea2028b4e4b749
- SHA1 e6bccd9db81b0e37a9db349b3d366082376f6d57
- SHA512 84530f536a17d98de30a76c1a2987cc676845d786ace3c033fe53221d9fa1e9fb1c9d771cd5cf5ee8bf00d02b21eea929e268f23d7c848eb8e2ad36379065f9c
- SSDEEP 3072:BOgeIhqvdIBaZ1OfvHxLykr3ff///XQYRXQozENUVU:BIIsINhuMvn//QYRQox
- TLSH T152647D02F9D541FAD74A52744DBF7F36B5388ACA1B229FC7D718FC9808211C2A5371AA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
134475
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
lstrlenA
InterlockedIncrement
CloseHandle
TerminateThread
ResumeThread
SetThreadPriority
CreateEventW
CreateThread
WaitForSingleObject
SetEvent
GetTickCount
Sleep
ExitThread
DisableThreadLibraryCalls
GetLocalTime
DeleteFileW
UnlockFileEx
LockFileEx
FileTimeToLocalFileTime
FileTimeToSystemTime
FlushFileBuffers
FindFirstFileW
FindClose
GetFullPathNameW
GetLastError
WriteConsoleW
lstrcatW
MoveFileExW
CreateFileW
SetFilePointer
ReadFile
WriteFile
SetEndOfFile
AllocConsole
GetStdHandle
WideCharToMultiByte
GetModuleFileNameA
CreateDirectoryA
lstrlenW
MultiByteToWideChar
OutputDebugStringW
OutputDebugStringA
ReleaseSemaphore
CreateSemaphoreW
LeaveCriticalSection
TryEnterCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
user32
CharNextW
CharNextA
winmm
timeGetTime
dhnetsdk
ord103
ord41
ord162
ord78
ord73
ord77
ord79
ord133
ord9
ord6
ord5
ord90
ord56
ord85
ord8
ord2
ord1
ord7
ord95
ord98
ord26
ord25
ord91
ord22
ord94
ord97
ord99
ord83
ord120
ord93
ord96
ord88
ord81
ord89
ord72
ord161
dhconfigsdk
ord1
ord2
sgmempool
ord1
ord2
msvcrt
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
wcscpy
__CxxFrameHandler
??3@YAXPAX@Z
_assert
??2@YAPAXI@Z
_stricmp
printf
_purecall
strncpy
vsprintf
sprintf
wcslen
isdigit
atoi
memmove
time
_vsnprintf
_vsnwprintf
fclose
fputs
fopen
ctime
_wctime
strrchr
_wcsdup
swprintf
fflush
_fdopen
_dup2
_open_osfhandle
_iob
free
localtime
_CxxThrowException
wcsrchr
_tzset
vswprintf
iswdigit
_wtoi
isspace
iswspace
_timezone
ws2_32
listen
ntohl
gethostbyname
inet_addr
ntohs
getsockname
inet_ntoa
setsockopt
getsockopt
socket
bind
htons
htonl
closesocket
__WSAFDIsSet
select
recv
send
connect
accept
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
136KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
128KB
Virtual Size
125KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=3, id=11, version=8047,
count=5, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=4, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
count=9, id=93, version=2179,
count=164, id=1, productName=Unmarked objects,
count=17, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Uninstall.exe
- IMPHASH dfb06052e74b26a42b0e490bd1c07959
- SHA256 651971831a4136987e1bad71f737746a761656977110420e00e24215bb310197
- MD5 ad551798fa521548d0bf7965c03daf39
- SHA1 9977943409334421fc93b80df462625cb16e4bdb
- SHA512 3b5e6c93ee597b07c497f683b2e5f82c294665fa72e50cf07a254919cc8bd132b0988c22de2a28b5caa0efae07750469b0c5371214919f53aea752b1bd237456
- SSDEEP 1536:Dm3Gu3e9hHjSNvHmJXiOqJPjUoOpfCvnSYkl:D43eHHeNHmJX23Op6vnSYE
- TLSH T1F043CF5236E0D47BC5730AB10ABE9B1BFBFAE21521D1139B9B909F1D7C230528D9E187
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
13984
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
MulDiv
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
RegisterClassA
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
EmptyClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetForegroundWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
112KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, version=2190,
count=158, id=1, productName=Unmarked objects,
count=17, id=93, version=2179,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/CheckFileDLL.dll
- IMPHASH 69bb13bcff0da5f2c8886794665fe9c9
- SHA256 ac0eae7e38ad334b76c964a8d403b0500a238a59e0c614d38cb61578afeefdaf
- MD5 079da7c7baea6c36a519676f69f2eb14
- SHA1 fb6f6c5e7be474875cda724026e0ca267c24f1f9
- SHA512 7827350bebcc222f8ce2142125e0ca4ce8308b43faaf607c78b70c0b0c42837f97ac3c88b6e33f33bd7a559190a873625867b15c8d427d91531a59b4ff4a8ae7
- SSDEEP 24:ev1GSlPyuhTOxzrbEWelYw/eI2uMB695EigyYF484VHc7/QwMVNpmN/PmV2R3tjP:q4eaxzxmeID9D6u8T74VmN6Bla5v13
- TLSH T1C592B3339AD122B6E0411773054B29F7A0266B94A7CDA58E8F13CC54182BA73FD38F83
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5483
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
CreateFileA
FindClose
FindNextFileA
SetFileAttributesA
FindFirstFileA
GetFileAttributesA
GlobalFree
lstrcpyA
DisableThreadLibraryCalls
msvcrt
free
_initterm
malloc
_adjust_fdiv
sprintf
CheckFile
Replace
Name
.text
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
559B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
84B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=3, id=93, version=2179,
count=17, id=1, productName=Unmarked objects,
count=2, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
$PLUGINSDIR/GetVersion.dll
- IMPHASH 5e41893d1528e7648e03f81030aca366
- SHA256 7d76c7dd8f7cd5a87e0118dacb434db3971a049501e22a5f4b947154621ab3d4
- MD5 5264f7d6d89d1dc04955cfb391798446
- SHA1 211d8d3e7c2b2f57f54a11cb8bc4fa536df08acc
- SHA512 80d27ee2f87e2822bd5c8c55cc3d1e49beebb86d8557c92b52b7cbea9f27882d80e59eefa25e414eecee268a9a6193b6b50b748de33c778b007cde24ef8bcfb7
- SSDEEP 96:E12Z84uiwpGTVTDSpaHYfniz0R3GhCvXY6Ix5vdR7pBi46AQ5Vu4:2STVTGwYhR3GhCvy5vH7pBi46AQ5Vu
- TLSH T1F4D1C3F343E50BE0D03751BE40D64A9B0770E6684EE0E46A48478DE264E731AEF3BB15
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4662
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetProcAddress
lstrcmpiA
GetSystemInfo
GlobalAlloc
lstrcpynA
GetModuleHandleA
lstrcatA
GetVersionExA
user32
wsprintfA
GetSystemMetrics
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
WindowsName
WindowsPlatformArchitecture
WindowsPlatformId
WindowsServerName
WindowsServicePack
WindowsServicePackBuild
WindowsServicePackMajor
WindowsServicePackMinor
WindowsType
WindowsVersion
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
374B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=93, version=2067,
count=5, id=93, version=2179,
count=13, id=1, productName=Unmarked objects,
count=1, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=92, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,
$PLUGINSDIR/LangDLL.dll
- IMPHASH 9b6b6a7858e17fb0b17e1c1428330343
- SHA256 4b6f2ff82fc4ef5533141681a59e2d8b4ebe013c4be2e423c81a3191b9cc3239
- MD5 ff580abf149f3f22a0cc310a6b7ea41b
- SHA1 d52c18cd9e4b6d76f8070b880f7607c8a3f0a2fe
- SHA512 b2aba398e60f98a8649bfc8653ea16279e21e1234fd932c45f8d66f04bd599e6296acd1d11c0c41d8bc83bb14284231dd8c56195e93fdb00605ad660a6827f4d
- SSDEEP 48:S/EFLUmNDsKWMPUptxEqK6/loUI+VcNSmwVs3J0vrpXLta1JvR0Joofbm:3RDsKGEi/ZVcNSmwVs3JI9t8R0N
- TLSH T1C6C1C773B3C641F6D6950233656333C36253AA343365420F9B6791AB39109E7DD2EB83
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5533
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalFree
GetACP
lstrlenA
lstrcmpA
lstrcpynA
GetModuleHandleA
MulDiv
lstrcpyA
GlobalAlloc
user32
SetWindowTextA
SetDlgItemTextA
SendDlgItemMessageA
EndDialog
DialogBoxParamA
LoadIconA
SendMessageA
ShowWindow
GetDC
gdi32
CreateFontIndirectA
GetDeviceCaps
DeleteObject
LangDialog
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
697B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
322B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=19, version=8078,
$PLUGINSDIR/System.dll
- IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
- SHA256 761dcdf12f41d119f49dbdca9bcab3928bbdfd8edd67e314d54689811f9d3e2f
- MD5 2b54369538b0fb45e1bb9f49f71ce2db
- SHA1 c20df42fda5854329e23826ba8f2015f506f7b92
- SHA512 25e4898e3c082632dfd493756c4cc017decbef43ffa0b68f36d037841a33f2a1721f30314a85597ac30c7ecc99b7257ea43f3a903744179578a9c65fcf57a8b7
- SSDEEP 192:ibEOXfXZQ6i1AZ2q6grklcm/iaULQAos:ib/41AZN6uklckLUJo
- TLSH T106222D4563E141F3D095813C086B3B7A47FE7A2865644ED3CF6328829F29DEAAD77312
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10792
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect
user32
wsprintfA
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
784B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
470B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=14, version=7299,
count=19, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=18, version=8444,
count=4, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=19, version=8078,
$PLUGINSDIR/modern-header.bmp
- SHA256 5bed81e7fc72f732a6d186ce1fe604592965dc2a11e48e95e66522e035b9de54
- MD5 c44dcffdf34b10d976328482ec7ed540
- SHA1 5ea8f6f35e10d275b2e0fe8d91d23b2471d261b0
- SHA512 ceef4f067fa3e57b2e0b247cb628a6f95066995025d450cfd3e18fbddcc65be4948d4adef92f6cbbfe21b2299f61a6499d8bf3b32e9bc5fa95c2ab68b6cc6481
- SSDEEP 96:edR6Q4cXsfCtRzvvKSyn+vlb/QsC638Haz4HA9viP+OiQTiE5u1lQWIv:edR6NcoeRzvvKSynEjQF6n2UaPji1G
- TLSH T16BC2E7217508C84194966318DE39CAFC93B71ED9FEFDBA0B3950BB9F7F761882029095
- MD5 SHA1 SHA512 SSDEEP TLSH
Update.dll
- IMPHASH 2a70c4b3e6a8fccefd222c5f69fc84b1
- SHA256 fa6247aa0ef6686f662c772a31ff4d0a47b43d0f8cd861cbc2f406acd16d28f2
- MD5 aad292083f34870a2c1b824d476aaeec
- SHA1 034a63809965936db48dfbde8913a56795045c79
- SHA512 8b697c24819294ca64f525dbf5ead0e6cfb47b2cb7f2e9ebcc9fa71424d3a3ca332dadd7c4ea489eeb09df35b20746a2f37b87499cb28eda17e633f86acb8b3f
- SSDEEP 12288:xj+gAKfzjH2/ChodbkvAEi3Znqc+qlltL0nT3DgqnuLc:LAGyLST3Dg+uLc
- TLSH T186A47B0299D602B9E66D27340DBEB735707D9BE5072AABC3C398ED4A1D621C1613738F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
319579
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
WaitForSingleObject
GetTempPathW
DeleteFileA
OpenProcess
TerminateProcess
Sleep
GetFullPathNameW
FormatMessageW
MoveFileA
SetFileAttributesA
CopyFileW
GetModuleFileNameW
DebugBreak
OutputDebugStringW
ReleaseSemaphore
CreateDirectoryW
GetFileAttributesW
TerminateThread
MoveFileExW
GetLastError
MultiByteToWideChar
FindFirstFileW
FindClose
GetDiskFreeSpaceExW
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
SetEvent
WideCharToMultiByte
lstrlenA
GetPrivateProfileSectionNamesW
SetUnhandledExceptionFilter
RaiseException
GetModuleHandleA
MoveFileW
GetCurrentProcessId
GetModuleHandleW
lstrcpyW
SetLastError
RemoveDirectoryA
FindNextFileW
CreateFileA
GlobalAlloc
GlobalLock
GlobalFree
GetFullPathNameA
FormatMessageA
LocalFree
WriteConsoleW
SetEndOfFile
AllocConsole
GetStdHandle
GetModuleFileNameA
OutputDebugStringA
GetProcAddress
FreeLibrary
LoadLibraryA
GetFileAttributesA
GetPrivateProfileStringW
ExitThread
DuplicateHandle
CreateThread
ResumeThread
GetLocalTime
CreateEventW
GetTickCount
WaitForMultipleObjects
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
WriteFile
SetFilePointer
ReadFile
GetFileSize
InterlockedIncrement
InterlockedDecrement
SetFileAttributesW
lstrlenW
DeleteFileW
CreateFileW
CloseHandle
CreateSemaphoreW
user32
LoadStringW
DestroyWindow
SendMessageW
KillTimer
CharNextA
CharLowerW
SetTimer
PostMessageW
LoadAcceleratorsW
LoadMenuW
DefWindowProcW
CreateWindowExW
wvsprintfW
CharNextW
GetClassInfoExW
LoadCursorW
wsprintfW
LoadImageW
RegisterClassExW
CallWindowProcW
GetWindowLongW
SetWindowLongW
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
shell32
SHCreateDirectoryExW
ord165
shlwapi
PathIsDirectoryW
PathFileExistsW
psapi
GetModuleFileNameExW
EnumProcessModules
EnumProcesses
sgmempool
ord2
ord1
msvcrt
_iob
localtime
_snprintf
_open_osfhandle
fputc
isalpha
isalnum
strncmp
tolower
_wfullpath
_wcsnicmp
_except_handler3
fputws
_chsize
_wfopen
rand
wcspbrk
wcsncpy
_ltoa
_timezone
__dllonexit
_onexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
time
memmove
wcsstr
_dup2
_fdopen
fflush
strrchr
_vsnwprintf
_vsnprintf
_wcsicmp
_ltow
strchr
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
_assert
free
malloc
_access
fwrite
fread
srand
isspace
atoi
isdigit
sprintf
vsprintf
_tzset
wcscpy
atol
iswspace
fopen
fseek
ftell
fclose
_wtoi
iswdigit
wcslen
swprintf
vswprintf
strncpy
_CxxThrowException
_wtol
strstr
printf
_endthread
_beginthread
_itow
_waccess
wcscmp
_ftol
_purecall
wcschr
wcsrchr
fprintf
ws2_32
ntohs
inet_ntoa
send
htons
closesocket
inet_addr
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
dbghelp
MiniDumpWriteDump
MakeSureDirectoryPathExists
ole32
CoInitialize
CoUninitialize
winmm
timeSetEvent
timeKillEvent
timeGetTime
timeGetDevCaps
timeEndPeriod
timeBeginPeriod
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
340KB
Virtual Size
337KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
60KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=96, version=2190,
count=3, id=11, version=8047,
count=7, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=12, version=7291,
count=10, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=29, id=93, version=2179,
count=372, id=1, productName=Unmarked objects,
count=44, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Update.xml
- SHA256 6ee3440c7a95a2681515c5024ce64fb98eb05938a0fe31f7a00175b5b558b5cd
- MD5 f8ea5edb743ea67e99269e076e6a25ae
- SHA1 86f0979c658f1f90825e151f9b529f8e2b382764
- SHA512 4c8ab899c7cf765ad4a5d71311c46648f7e7665dfa2e7836e3a07845a9815d4a5bf2ed4123eee623cf3202894623bc807e507e49c465db0e5a98c668a6f797a7
- TLSH T19AF0ED21CAC0B8E4C8BE01A3C6618364FF21205B2900054EB6AE9783FFB998ECF43415
- MD5 SHA1 SHA512 TLSH
cachefile.dll
- IMPHASH 85000421f5047f70e21802c91607eedd
- SHA256 4bfb9570619ef40763437d1ce24d2357adf274079a4666e49579ddd856bbe859
- MD5 b5145986cf8149b69d9f8dca22362826
- SHA1 e094d80a9f6edd307632c63c1c74bd17c160e998
- SHA512 07489793184f581db9050303ce367966b92f3a9cc3feae80ce0fe30e63c18c0d0b7274ab9b4cd07e75526853f2de3a5e524ee40bb0e00c50484fb4ff77343a19
- SSDEEP 1536:PKsp1B5T5m8Euf+jh5hNBuwUO2fSqtvDMiQ55JpkuMph:XY/H+LfSoA3TpkJph
- TLSH T139B31801A9C606F1D6D8163C1D7FBB3A617B1BE88F0A6BC3E715FD9409531C3A92618E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
75781
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
lstrlenW
GetDriveTypeW
GetLogicalDriveStringsW
GetFileAttributesW
InterlockedIncrement
lstrlenA
MoveFileW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetDiskFreeSpaceExW
FindClose
FindNextFileW
FindFirstFileW
MultiByteToWideChar
DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
LoadLibraryA
FlushFileBuffers
SetEndOfFile
GetFullPathNameW
SetFilePointer
GetLastError
WriteFile
ReadFile
CloseHandle
CreateFileW
FileTimeToLocalFileTime
LockFileEx
UnlockFileEx
DeleteFileW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
TryEnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
OutputDebugStringW
CreateDirectoryA
GetModuleFileNameA
WideCharToMultiByte
GetStdHandle
AllocConsole
MoveFileExW
lstrcatW
WriteConsoleW
GetLocalTime
FileTimeToSystemTime
user32
CharNextW
CharNextA
winmm
timeGetTime
msvcrt
fflush
_wcsdup
_dup2
_open_osfhandle
_iob
free
localtime
_CxxThrowException
_tzset
vsprintf
isdigit
atoi
isspace
iswspace
fread
fseek
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
strrchr
_wctime
time
ctime
fopen
fputs
fclose
_vsnwprintf
_vsnprintf
sprintf
printf
_purecall
_wtoi
iswdigit
wcslen
swprintf
vswprintf
wcscpy
wcspbrk
??2@YAPAXI@Z
strchr
_stricmp
_assert
wcsstr
memmove
wcsrchr
wcschr
_wcsicmp
??3@YAXPAX@Z
__CxxFrameHandler
_fdopen
_timezone
ws2_32
send
recv
select
__WSAFDIsSet
closesocket
htonl
htons
connect
socket
getsockopt
setsockopt
inet_ntoa
getsockname
ntohs
inet_addr
ntohl
gethostbyname
listen
accept
bind
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
76KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=5, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=9, id=93, version=2179,
count=128, id=1, productName=Unmarked objects,
count=16, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
cmav.dll
- IMPHASH 303c57c98748390f72358291661d03de
- SHA256 87f7939780a1e66954ddbaecbd8723b8d16eeb5984bced53a6c4eb16d12d09a5
- MD5 d22593b2ccb0393e30b6bf0e10c682a9
- SHA1 732b7b89bf7af0c9653cf92d24a45d635397a954
- SHA512 7c75a6752ccf2d8eb48bb441f4b0f21bb7201da4a5ec936bbe23567923f5d19bd578b092c6d094cc78913a0b04157b7cb1ae43d4159a09896968761ac1af8ce5
- SSDEEP 768:maB9PwD4x+xM9KIZ4wjOfl63OQQyQ8kl+smYc3zyDmRp2+cLGrd9GcTWReCPZmWu:mowDx6H+0+f/5mYVapWGvPT6rB4OQ
- TLSH T161831905AAE60BFDD58D42384C7BBB3530B85BE44B87DB93C316FD944A123C1A4B528E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
50826
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleA
FindClose
FindNextFileW
WideCharToMultiByte
InterlockedDecrement
FindFirstFileW
lstrlenW
lstrlenA
InterlockedIncrement
SetCurrentDirectoryW
GetModuleFileNameW
GetModuleHandleW
Sleep
OutputDebugStringA
GetProcAddress
FreeLibrary
MultiByteToWideChar
GetFileAttributesA
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateFileW
CloseHandle
GetLastError
GetFullPathNameW
DeleteFileW
LoadLibraryA
user32
CharLowerW
CharNextA
winmm
timeGetTime
msvcrt
_wcsicmp
_vsnprintf
_initterm
_adjust_fdiv
__dllonexit
_onexit
_ltow
wcschr
strstr
malloc
wcsstr
free
_access
fopen
fseek
fwrite
ftell
fclose
fread
wcscmp
printf
wcsrchr
strchr
memmove
atol
atoi
isdigit
wcslen
sprintf
vsprintf
_assert
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
wcscpy
_purecall
_tzset
ws2_32
closesocket
inet_addr
send
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
52KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=9, id=93, version=2179,
count=135, id=1, productName=Unmarked objects,
count=12, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmav.ini
- SHA256 5002203e9dd09bfc48861075c42aad0137491628d28dcb2315154e645c64e406
- MD5 ec8b3dff9f79da98507f3aacaeb2a292
- SHA1 9b192fda0f245561f382e6efcc3d38b6c063250e
- SHA512 d26a02dc8806ac4de307317afda71fe861d7956275ba716e3e46bf857dc1a0cb2c5f2c6831c1e5a614e68498403b5c6d77d22734a42a9686f5130f42611583db
- TLSH T1D7315FC8851C5A3F9E3D1477E3E089684CD880E5ABA19724B53FE3D5B44D3E505CB7A2
- MD5 SHA1 SHA512 TLSH
cmavmodule/conversion.dll
- IMPHASH d09a2a3fb057ae4f1407989c78eaa18e
- SHA256 42d176bbdcfe1c852a8f1931d82cceb77ab01d4e176a046c9199b97d81b25e89
- MD5 dc45355e2dde52fab8c14249eca49d0e
- SHA1 84cf4ba6586955071995b3a360eebbc2a7ada833
- SHA512 d864776a467ab935ca7786d395df5621193f35470dbf1d6306c553ab772709ddacc20db2b19a9e68340c7a280ffc1bb439bded9febaf40d8ff391f17f43ca1d9
- SSDEEP 1536:mIJZur5p8OHHwI59IjcMAG58www969CfoRuudZFIWqmdwJFb9ATIw/X:mIPur5p8OHljG58wwMoRuudZF5lajE/
- TLSH T1F7A33BC39FDF89D2C869393EC076B7771725F76A050BE2425160EE96FE29123A01E21D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
80623
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
_ftol
??2@YAPAXI@Z
??3@YAXPAX@Z
fclose
fwrite
free
_assert
__dllonexit
_onexit
_initterm
_adjust_fdiv
fopen
malloc
_stricmp
kernel32
DisableThreadLibraryCalls
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
76KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=3, id=14, version=7299,
count=5, id=10, version=8047,
count=3, id=4, version=8047,
count=15, id=1, productName=Unmarked objects,
count=2, id=93, version=2179,
count=4, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/div2coder.dll
- IMPHASH 5a9d32f95d96d5fc54e891d827ae879e
- SHA256 d2a224741151889325973bf347e355c2858f5cebf6151ea40be82321cc45b597
- MD5 ddd2e1ed8f890fb76e13bba66cf0c90b
- SHA1 90943ddd758f9cda88ae36420f13cde73d3996bc
- SHA512 01ecd1471b52ba1c4a344b8e4dc0c82362ed33f380bc8fcd9cc11b5626298dcd2f88c2ab0e1aaf36c606ee78b09a14c532d58e9161e4549c3632a569000b5147
- SSDEEP 768:u2XKq1qdplDMuRqmQXfiTt+TC6JDJPY8Qd2dnuWN+w:56mqdpJr0XfIyC6Nedc5N
- TLSH T124330805FEE84DF1D2494634ECBF2B3611789AD92BC397C34B75FDA698222D070B2195
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
23738
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetLastError
GetModuleFileNameA
InterlockedDecrement
lstrlenA
LoadLibraryA
FreeLibrary
GetProcAddress
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
OutputDebugStringA
user32
CharNextA
msvfw32
ICDecompress
ICSendMessage
ICRemove
ICInstall
ICSeqCompressFrameStart
ICOpen
ICClose
ICCompressorFree
ICSeqCompressFrameEnd
ICSeqCompressFrame
winmm
timeGetTime
msvcrt
free
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
_vsnprintf
atoi
isdigit
wcslen
sprintf
vsprintf
_assert
_purecall
??2@YAPAXI@Z
printf
strrchr
__CxxFrameHandler
??3@YAXPAX@Z
_tzset
ws2_32
inet_addr
closesocket
send
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
24KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=11, id=93, version=2179,
count=117, id=1, productName=Unmarked objects,
count=11, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/gsm610.dll
- IMPHASH e34f39f75e34d3bc172994d0efd6c488
- SHA256 31bfabec01a2f3e7fb95253cecb1b7c1af0dbdafd4ec3bfb436d4696ddfd608d
- MD5 aaf8388e1f8fbb44e5709958d0920cef
- SHA1 2f491ca614de72b5371abac5dc5d08779ed94363
- SHA512 2aa75a72ee568718b7f9543b0becc31d06132908406122ee850fd33fa830c929087aa02c0e5cf822cfc7f6145e8c2e853d55acb16e6af186c5c6476760bc969e
- SSDEEP 1536:Eq2Y8ROjgAHAxTJPl7RXNjZNLzxznztzjzJzfzlzbzBz3zgz9zzzZzvz1zrzRzHt:X6Li2TJPl7RXNjZ9lTp3N7x/1jM5HdLN
- TLSH T1ED531B01EAE52BF3E104023A5CBBEFB6A934D6EA079747C3CF54F556D8255C224B62C1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34827
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
winmm
timeGetTime
msvcrt
malloc
__dllonexit
_initterm
_adjust_fdiv
_tzset
free
_vsnprintf
sprintf
_purecall
??2@YAPAXI@Z
printf
??3@YAXPAX@Z
memmove
_assert
__CxxFrameHandler
_onexit
ws2_32
send
inet_addr
closesocket
kernel32
OutputDebugStringA
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
36KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=13, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=105, id=1, productName=Unmarked objects,
count=9, id=93, version=2179,
count=10, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/h264decoder.dll
- IMPHASH bc7633ca6a9ec350ac3977b03b21b605
- SHA256 514e170eb95b12a608d65f58bd8fd072e765568082aacf572ec6cffa7662888a
- MD5 6e2451be75d32454bd5879bf4414d22d
- SHA1 e19b975b5df03dca74d9849da72fe36e2eccfa77
- SHA512 9754fea9163f958cb94463ae0ae2fc5781e11a1756484b986f09638ed5e3e56839a304f1d89c4be1bf37700741074b96d700c14fc7053a05e22cbfc645d9f41d
- SSDEEP 12288:qtr+9+G/IT+7gY+sSAwhWww3pnSnncJjB9:qhG/dgY+sSAwUww5nSnncZ
- TLSH T115848DC1FBCB2CB2DA09A83411AF17775A3907D31516E743DB59FD96E837242B82234A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
300394
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleFileNameW
InterlockedDecrement
lstrlenA
OutputDebugStringA
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
lstrlenW
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
user32
CharLowerW
CharNextA
winmm
timeGetTime
msvcrt
_vsnprintf
_iob
_wcsicmp
realloc
vfprintf
fprintf
_ftol
toupper
abort
__dllonexit
_onexit
_initterm
_adjust_fdiv
printf
sscanf
memmove
_ltow
wcschr
strstr
malloc
wcsstr
free
_access
fopen
fseek
fwrite
ftell
fclose
fread
wcscmp
atoi
isdigit
wcslen
sprintf
vsprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_assert
wcsrchr
wcscat
_purecall
_tzset
ws2_32
closesocket
inet_addr
send
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
296KB
Virtual Size
292KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
52KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=12, version=7291,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=19, id=48, version=9044,
count=9, id=93, version=2179,
count=139, id=1, productName=Unmarked objects,
count=11, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/h264encoder.dll
- IMPHASH 85062c8fe5ea91c0c6b0d73bcf45bcc5
- SHA256 c688dc462036c82fded196b6368b5e1cc8205c3a8db021590ce3a5db086f64bf
- MD5 173f64804480f9702749febc42b9e5d5
- SHA1 67f82b776661014f3286a5eef656695f83db2887
- SHA512 d64e8e5381554fa83b4046f30d505c449ff82b5cbbee909da6dba3ebea8de325184cae50d1662ecab225c97041fe498743c566dae231a0b8dde4e0dc6e3d726a
- SSDEEP 1536:/tRBuYX4JxgMP0N5GVZ+993vJ2cFADFt:1Rw0N64L3vJ2cFA5t
- TLSH T13A731909A9D509F1D28942346DBBAB35207C5FE54BD357C3CB27FEA84C222C361B61DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
41850
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleA
InterlockedDecrement
lstrlenA
WideCharToMultiByte
GetModuleFileNameW
GetModuleHandleW
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
InterlockedIncrement
LeaveCriticalSection
OutputDebugStringA
MultiByteToWideChar
CreateDirectoryA
GetModuleFileNameA
GetLastError
LoadLibraryA
FreeLibrary
GetProcAddress
GetCurrentThreadId
user32
CharLowerW
CharNextA
winmm
timeGetTime
msvcrt
strstr
wcschr
_ltow
malloc
_wcsicmp
__dllonexit
_onexit
_initterm
_adjust_fdiv
wcsstr
_access
fseek
fwrite
ftell
fread
wcscmp
free
printf
strrchr
time
fopen
fputs
fclose
_vsnprintf
atoi
isdigit
wcslen
sprintf
vsprintf
wcsrchr
wcscat
_purecall
__CxxFrameHandler
??2@YAPAXI@Z
_assert
??3@YAXPAX@Z
_tzset
_wtol
_timezone
ws2_32
closesocket
inet_addr
send
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=9, id=93, version=2179,
count=135, id=1, productName=Unmarked objects,
count=13, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/hivoice.dll
- IMPHASH 4018b2ce205d7354280ce13d7b631e84
- SHA256 49643cdac24c532f8b86126f6256ce67081b8f3ed3864f60bdb2461adc37f538
- MD5 2f3f8a7dcc7b2a02475903a1d0f8fa52
- SHA1 12d5ad56cd17afb6c6430874cc9b9c10919e54f1
- SHA512 43c2a7527cee5ecdd7e3614791da62c4559683a6244d2b20d12f66decc6a6772b3a2167a3e6775b491282a18bd35bda195795021efdf68603d8d94021a15c044
- SSDEEP 384:axHb8R267gHGlgOH1AZIHUZf9R00eR6vWwbgawxnlWPyp9w/TFK:+78R267BiOHK6OFR04EjsP7FK
- TLSH T16F130806A9E155F1E30C0A315DBB2F3694399AF51FD74BD3DF29FD96883A2C0643218A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20815
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
OutputDebugStringA
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
lib_voiceengine_dll
HI_VOICE_DecReset
HI_VOICE_EncodeFrame
HI_VOICE_EncReset
HI_VOICE_DecodeFrame
winmm
timeGetTime
msvcrt
__dllonexit
_assert
memmove
__CxxFrameHandler
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
printf
sprintf
_adjust_fdiv
_onexit
free
_initterm
malloc
ws2_32
inet_addr
closesocket
send
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
count=7, id=93, version=2179,
count=46, id=1, productName=Unmarked objects,
count=7, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/mmstaticfunc.dll
- IMPHASH f193523952210cee7b8a828a63a54034
- SHA256 cc7801f2f5e47d4577d49a626e8d7f653e765c50d2e1cde8d882d31265d63fb8
- MD5 8149fe5df67d5068dcc3b25cfa2065fe
- SHA1 8f75700981c44e5b83dddd61b9cd780cf02f0258
- SHA512 d7821cfce6ca76a88c26ddf75a0e01646307c108ae2a38696040a2755928995f52c06763acf21ea3ce8c89a871787ce007a3ab08123ea0de1d0c7d060655f89c
- SSDEEP 192:Ze0ZE9k9pISlQtVes0J5rNy78UkowjqD0CTgXPishoSLPoeejCL:Zh+IsqNy783CTgXPisOpea
- TLSH T193D2B609DEE90CF2D1894638DEBB2731603CAAD45F9387535B40FA9708256E06FA73C9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10616
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
InterlockedIncrement
lstrlenW
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
winmm
timeGetTime
msvcrt
wcslen
sprintf
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
??3@YAXPAX@Z
_assert
__CxxFrameHandler
??2@YAPAXI@Z
ws2_32
closesocket
send
inet_addr
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
852B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=7, id=93, version=2179,
count=42, id=1, productName=Unmarked objects,
count=7, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/multimedia.dll
- IMPHASH df8fecbeddbb79a62e79d23f67aec412
- SHA256 25c6218b278ce65d5e32fb98b731fd54424c97df4fe3199802bf5bfe02f22a9b
- MD5 beb62c765905a2aa9ae87eeca18f558c
- SHA1 26b7478e513920dd63fed12e82e0aec50928a4f5
- SHA512 fc24fdecf045112277e90ad8caeca26564fadc38f91d19da4d713421206634d274e4ffeed6d2862ba70ddaadf3f0d577c666ae93b28aa85a933118a40ee54729
- SSDEEP 384:oIB5vhrA7b020GOPF3Hu/eerHsCV37hje2f8sjnPQPibeQv9Y0/bf:VfvLFXksCV37E2ksjnPQyr/b
- TLSH T1A713D801BDF549F1E34C05316CBB6F36A475A6E92FD34BC78B29EE9A883A2C19433151
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20923
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
winmm
timeGetTime
msvcrt
_purecall
sprintf
_CxxThrowException
__dllonexit
_onexit
??2@YAPAXI@Z
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
printf
??3@YAXPAX@Z
__CxxFrameHandler
_assert
free
ws2_32
closesocket
send
inet_addr
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
InitializeCriticalSection
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=11, version=8047,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=42, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=8, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/speex.dll
- IMPHASH ee40a4e2d6d4e4688494d2aad9542dfc
- SHA256 e68d6f1ea2f7adc5e3aa6dd84a22f44cb703508cdd74df075a83c7d3427e17ae
- MD5 7962fb2437646fc9adb35d352006bf9a
- SHA1 3439c759a3c65e8f49eb80c2ab84b54550680090
- SHA512 bdb884c751f4e46ebab74d4fe03d90035262746334012b78c53c378c9834bdb4e7c5a89ee4836ac7b29d4c9720ddefe60daab76e0784b8fa633fde8a132b6a32
- SSDEEP 1536:LF3Er13yCzjoyTLBapughe/T3xVdpwQ2yFacZ3R8Ns/+OLnY+q:yJjoyvBapuwe/T3xVdpwWFaEP6
- TLSH T167A38E83D6E150F0E40F09BE1CAB3B776A345FC687B2DB838B15EE55AD212A165321B4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
62609
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
winmm
timeGetTime
msvcrt
memmove
_ftol
printf
sprintf
floor
calloc
realloc
free
exit
fprintf
_purecall
rand
_CIpow
_CIacos
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
??3@YAXPAX@Z
_assert
__CxxFrameHandler
??2@YAPAXI@Z
_iob
ws2_32
closesocket
send
inet_addr
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
InitializeCriticalSection
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=28, id=48, version=9044,
count=51, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=7, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/videocapture.dll
- IMPHASH e2163624720c6319eac5429f12dece4f
- SHA256 80f71e65fc658b2de8af5e89ba51415516f58b387694d0304f064e62419a2c8a
- MD5 3a65839567ed15ecc94b771d139fa103
- SHA1 203aafc70c0677fae6907d7d242e678e3b34350a
- SHA512 4f1cb5bd8b02062924a2f334d0dd0eeb7f36d43b80878a9945c532c770dc03d1ae4374aa9dc1688e3ba3306bd27a3dfe21ceaefe38ae277cc4946baab1f9f4db
- SSDEEP 768:cxO6tVOUrwHFLtW1bIWji90BHH0s1SQmKjps0yzH9aFOPBmsJ/jYidO0:16HWtWJrjJbSQmtLwFA/jYis0
- TLSH T1C2632805EDF148F2D7480774BCBBA736693C9AC61BC79BC38F25FE6506211D190B60AA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
35930
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
lstrlenW
InterlockedIncrement
Sleep
lstrlenA
CloseHandle
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateEventW
CreateThread
DuplicateHandle
GetCurrentProcess
SetEvent
WaitForSingleObject
TerminateThread
ExitThread
OutputDebugStringA
OutputDebugStringW
ResumeThread
user32
GetClientRect
IsWindow
CharNextA
winmm
timeGetTime
msvcrt
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
free
_vsnwprintf
_vsnprintf
srand
atoi
isdigit
sprintf
vsprintf
wcscmp
memmove
printf
_wcsicmp
??2@YAPAXI@Z
_assert
__CxxFrameHandler
wcscpy
_purecall
??3@YAXPAX@Z
wcslen
_tzset
ws2_32
closesocket
send
inet_addr
ole32
CoUninitialize
CoInitialize
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
36KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=11, id=93, version=2179,
count=124, id=1, productName=Unmarked objects,
count=14, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/videocapturemgr.dll
- IMPHASH 7d23c161cacffde697695975e423700e
- SHA256 456f92d51ad8d4b65505c0cf2836195f0e51400c5edb716fad461e4db4837d4f
- MD5 1d476b60f7683fcdf8412756afd1f178
- SHA1 97974b1f161c5b965ea63ecfe88b7cc2188ff3a4
- SHA512 c672205bac264757e44374c0886eb6ef8ada679b1fc74be49069aab832b8af98602ecb72beb4a5f671aa55cd8b81be7aded07277ca4c30ed3816d38495a29fcb
- SSDEEP 192:doChWnGnDcfXZRl++2wzRr9Uq90GNtq6R+E4llxlqgPkqop1oeG6b:doUnQfX1+1b+FqrvnNPpBeL
- TLSH T15AD29309EEE40DF6E2454635DDFB67336178A9E05B9387574B40F99608213E0AEF32C6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10017
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
lstrlenW
InterlockedIncrement
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
winmm
timeGetTime
msvcrt
??2@YAPAXI@Z
wcscmp
sprintf
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
__CxxFrameHandler
??3@YAXPAX@Z
_assert
_purecall
ws2_32
closesocket
send
inet_addr
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
884B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
854B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=7, id=93, version=2179,
count=43, id=1, productName=Unmarked objects,
count=7, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/videodecodercontainer.dll
- IMPHASH 0eba4770d1b5a7b4a186acabf0e2a284
- SHA256 f5f60f617108d9f6619b1e57a2c2fad7a30748078e4a3e698f2844712bcaed81
- MD5 978aada21dc1b2b2572ee265e295b398
- SHA1 3d815387fa4a0aafbafcac71c425c4727b4d56ff
- SHA512 0161375a8c1804de06c15cdbdbe94fb9ce86cd22cf9f55f7b85ec0f675f371f9f7f043b54fbf4f2fb8cdc9d956e27e45cddc5e6f50a2b41641bb01f8249699b2
- SSDEEP 384:IUkruObmiEGej5D3IRjPnuUeIa+uorpvKLP1rg6Qk30Wtvd:I+2EGeVURjGUenC9vKLP1r53/
- TLSH T11D03A509EEE50DF2E1484638BDB76B31647C99E51BC387C7CB15FD9688222E064F3196
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16120
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
lstrlenA
OutputDebugStringA
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
user32
CharNextA
winmm
timeGetTime
msvcrt
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
free
_vsnprintf
atoi
isdigit
wcslen
sprintf
vsprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_assert
_purecall
_tzset
ws2_32
send
closesocket
inet_addr
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=9, id=93, version=2179,
count=104, id=1, productName=Unmarked objects,
count=10, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/videodevwdm2.dll
- IMPHASH e2436a59ff369cb652bd6c7cd3992ba4
- SHA256 a99a805c1d88b047e4692ade92f33e03183bf6acda3ded201320b9d7a860e313
- MD5 9b4bbb6cdd69d9adc42fc47c2e1e86e4
- SHA1 3d505c630bf7393862262c146be2d356fa92c6b8
- SHA512 b5d594abdc3fd4c56012de0e577a2fdc7199e2fcdaeea8f1eed221572e0c17d91758b588cd0a213c0c44bd388febd469fb86d18f52afce2e981a2b0c3aa1b5a1
- SSDEEP 1536:ePEueV65GErZhhSDtD83BrYUf13YRGuZdCuSlgt13XinggK1nnB:avhSDV831uZdLmksKtn
- TLSH T183D32901AAE604F1D2AE517C4D7F6B34613F1BE48B136B83D734FEE419122C2997A19B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
88554
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
Sleep
InterlockedDecrement
lstrlenW
InterlockedIncrement
GetModuleFileNameW
lstrlenA
GetCurrentThreadId
MultiByteToWideChar
GetModuleHandleA
WideCharToMultiByte
GetLastError
FlushInstructionCache
ExitThread
TerminateThread
SetEvent
GetCurrentProcess
DuplicateHandle
CreateThread
CreateEventW
ResumeThread
ReleaseSemaphore
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
OutputDebugStringA
OutputDebugStringW
CreateDirectoryA
GetModuleFileNameA
CloseHandle
LoadLibraryA
FreeLibrary
GetProcAddress
CreateSemaphoreW
WaitForSingleObject
LeaveCriticalSection
user32
CharUpperW
wsprintfW
CharUpperA
DefWindowProcW
RegisterDeviceNotificationW
UnregisterDeviceNotification
CharNextW
CreateWindowExW
DestroyWindow
RegisterClassExW
UnregisterClassW
SetWindowLongW
CharLowerW
CharNextA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
oleaut32
OleCreatePropertyFrame
VariantClear
winmm
timeGetTime
msvcrt
fopen
fputs
strrchr
free
fread
ftell
fwrite
fseek
_access
malloc
wcschr
_ltow
_wtol
_wcsicmp
srand
__dllonexit
_onexit
_initterm
_adjust_fdiv
fclose
_vsnwprintf
_vsnprintf
printf
_wtoi
iswdigit
swprintf
vswprintf
wcscmp
isdigit
wcslen
sprintf
vsprintf
_purecall
wcsrchr
wcscat
wcscpy
wcsstr
memmove
atoi
strstr
_ftol
_assert
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
_tzset
time
_timezone
quartz
AMGetErrorTextW
ws2_32
inet_addr
closesocket
send
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
88KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=25, version=9210,
count=2, id=12, version=7291,
count=2, id=11, version=8047,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=1, id=28, version=9178,
count=3, id=95, version=2190,
count=13, id=93, version=2179,
count=168, id=1, productName=Unmarked objects,
count=18, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/videoencodercontainer.dll
- IMPHASH fbf95f2c904e9bd92c9c4875fdd8bc88
- SHA256 d7fb13b3e59b3b42e9927af2502d87e6d3f7fd8a3a58456033696b0d6a6c72cf
- MD5 d1ac57469b8a865d00e20eb2e13d5830
- SHA1 61087c014d23133be1aa1f275881c22f0347f14e
- SHA512 15dcc31b80d45d7e12d517d8baa9758f171e20cdf1ebd6932a6d18086ff4c0a62ca214bf050113dbac77e34b10c096cdea0940c68fa2455606f767ad231bd5b1
- SSDEEP 384:9/P7oyVypLKESxhm/+rx1DmU7xBQgQMMURSAPOCgYdrokNQ9763uqKX:hPkjS7C+rxRmU7jQVlUoAPOCldO
- TLSH T15803C709EEF50DF1E2490678ACB76B33647C9AE91FD38BC38B19FD4648225E051B2196
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18040
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
GetLastError
lstrlenA
OutputDebugStringA
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
user32
CharNextA
winmm
timeGetTime
msvcrt
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
free
_vsnprintf
atoi
isdigit
wcslen
sprintf
vsprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_assert
_purecall
_tzset
ws2_32
send
closesocket
inet_addr
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=9, id=93, version=2179,
count=104, id=1, productName=Unmarked objects,
count=10, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/videorendererdx.dll
- IMPHASH d492ecba3fd6551e8e2ca15ea3de8674
- SHA256 1685e945531d42c8b4a7420c17afa4ea0693cbca0d2633d1e5d23270c8d6a8e5
- MD5 13fe0016e33e025b4a8d65692a710dc2
- SHA1 af8ddea299b33dba9ac9bf165cf7b3092b1c1eda
- SHA512 1172093eec23c1b3d76ca0f525c6b1c18a6387bf70c90322f8870942f9a26ee9bbed787031c8368154a7c26d395667a5c5a79b4e8f324b94bade386291146500
- SSDEEP 3072:pU+J1JXNji/BUtXF9ns2l2MvooBDgngQ0E54h9CX5cxVcs:ZPBi/c723cD8dsh9CX5cxb
- TLSH T113043A016AD617BDD79D13381DFFBB36317C0BD44B8697C3D71AFD900A22182A53A1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
123471
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
FileTimeToSystemTime
FlushFileBuffers
FindFirstFileW
FindClose
FileTimeToLocalFileTime
InterlockedIncrement
GetFileAttributesA
WritePrivateProfileStringW
GetPrivateProfileStringW
LockFileEx
UnlockFileEx
GetLocalTime
OutputDebugStringW
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleA
CreateFileW
WriteFile
CloseHandle
DeleteFileW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrcmpW
MulDiv
lstrcpyW
GetFullPathNameW
lstrlenW
LeaveCriticalSection
TryEnterCriticalSection
GetLastError
InterlockedDecrement
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WriteConsoleW
lstrcatW
MoveFileExW
SetFilePointer
CreateDirectoryA
GetModuleFileNameA
GetStdHandle
OutputDebugStringA
AllocConsole
SetEndOfFile
ReadFile
user32
CharNextW
CharUpperW
GetDC
FillRect
CallWindowProcW
DefWindowProcW
GetClientRect
CharLowerW
SetWindowLongW
GetWindowRect
OffsetRect
ClientToScreen
IsWindowVisible
CharNextA
ReleaseDC
IsWindow
gdi32
SetDIBitsToDevice
CreateCompatibleBitmap
GetDIBits
ExtTextOutW
GetStockObject
GetObjectW
GetDeviceCaps
CreateFontIndirectW
CreateDIBSection
CreateCompatibleDC
CreateSolidBrush
SetTextColor
SetBkColor
TextOutW
DeleteDC
SelectObject
GetTextExtentPoint32W
DeleteObject
StretchDIBits
quartz
AMGetErrorTextW
ddraw
DirectDrawCreate
winmm
timeBeginPeriod
timeGetTime
timeKillEvent
timeSetEvent
timeEndPeriod
timeGetDevCaps
msvcrt
wcscat
wcsrchr
free
vsprintf
sprintf
wcslen
isdigit
atoi
_vsnprintf
_vsnwprintf
fclose
fputs
fopen
ctime
time
_wctime
strrchr
_wcsdup
swprintf
fflush
printf
_fdopen
_dup2
_open_osfhandle
_iob
localtime
fread
ftell
fwrite
fseek
_access
wcsstr
malloc
strstr
strchr
wcschr
_ultow
_ltow
_wtol
memmove
sscanf
strtoul
isspace
_wcsicmp
vswprintf
iswdigit
_wtoi
iswspace
wcscpy
__dllonexit
_onexit
_initterm
_adjust_fdiv
_assert
_ftol
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_purecall
_tzset
wcscmp
_timezone
ws2_32
inet_addr
ntohs
getsockname
inet_ntoa
setsockopt
getsockopt
socket
bind
accept
listen
ntohl
gethostbyname
connect
send
recv
select
__WSAFDIsSet
closesocket
htonl
htons
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
128KB
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=4, id=25, version=9210,
count=11, id=93, version=2179,
count=171, id=1, productName=Unmarked objects,
count=12, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/wavedecodercontainer.dll
- IMPHASH ca76d6bcbe6b82d695cfcbd0db08f390
- SHA256 0d2b6323b61982a6bee201b2111999cea5e016f39d6fbfebb9772674a2f4fe61
- MD5 04a7a9e2fc96bf9862c99fc28fb3b079
- SHA1 1dee93cd5471efb4169aef5fa1e6261304c93ea2
- SHA512 b0e64193f82f51793c6d9f7d96eb3c9a4742a9357dde8fdd5331bf8d67998c81d9bf1508c11715fd318957d01ee22d05f5eb74db5ddb01ced931c0ee6a0a5736
- SSDEEP 192:9eLQKucPfJynmsATm0PSEme199GyGTmoY2iF0PiZ2j3Z72WoKPULKNoEop3oBPbd:gIcPgnIdJDnGnYZf0jPYRdpYZ
- TLSH T12CF2B505EEF51DF1E20D0638ADBB2B3214799AE51FD78BC38F18EA5A4C323D050721A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13041
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
winmm
timeGetTime
msvcrt
sprintf
__dllonexit
_onexit
??2@YAPAXI@Z
_initterm
malloc
_adjust_fdiv
__CxxFrameHandler
_assert
_purecall
??3@YAXPAX@Z
free
ws2_32
closesocket
send
inet_addr
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
InitializeCriticalSection
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
804B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=39, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=7, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/waveencodercontainer.dll
- IMPHASH ca76d6bcbe6b82d695cfcbd0db08f390
- SHA256 bdea24c7aab0847541e01b61118df0ca40c69e8c1b1d235abef7a4de087fc664
- MD5 dbf411905f4296c3153b05e88acaf3a7
- SHA1 f98a70dddfc9a6cbdc1194c37919f4fca4ff86d5
- SHA512 e74efce96316c29210c2cd710941be3fb4cc25455ec44ace00172c2d1ac0baa0e8ce6f89c3ad7e8d45a84f445806662bdc55ef4435eda7bd3286ec233178f048
- SSDEEP 384:mdMc4/5YNyTNkE4vBZIiYiT8V1NsBLWH9W+jZdjHeP4hWcpYZ:qMcu5YYQZIiYXvOBuW+KPCs
- TLSH T15BF2B505EEF56DF1E20D0A38ACBB1B3610799DE51FD78BC78B58EA5A48317C011B31A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12705
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
winmm
timeGetTime
msvcrt
sprintf
__dllonexit
_onexit
??2@YAPAXI@Z
_initterm
malloc
_adjust_fdiv
__CxxFrameHandler
_assert
_purecall
??3@YAXPAX@Z
free
ws2_32
closesocket
send
inet_addr
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
InitializeCriticalSection
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
784B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=39, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=7, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmavmodule/waveex.dll
- IMPHASH 82c82a8d59a3ee041f69ca16e0d46553
- SHA256 0b92c7b7b401f23d8e6ad34763556b702f82b5ed82bdfcbed0465b010c4c35d0
- MD5 5d6856366de8d90ed4e36f82b71527bb
- SHA1 b50d02488b587592b9c61638637bb0e3d8458a07
- SHA512 9b68630f459726f7952ded48c7cb226dd6d80cae45e60b3a0a97ec1802e37e77f2191ce96f7432dcdaf68f4c95347b929e156558b2a67671e543befa6973e222
- SSDEEP 1536:o2WYmw/URdjwJMvbEXCiPEFRi5mLQflwG4Z9:og5MUJMoEFRi5mLQdWb
- TLSH T1D4835B41FDEA05F5D15D0A789CBF3B359C389FC24796C7A39325ED82AC322E094B1299
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
53121
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
InterlockedIncrement
WaitForSingleObject
CreateEventW
GetCurrentThread
SetThreadPriority
WaitForMultipleObjects
GetLastError
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CloseHandle
OutputDebugStringA
ResumeThread
dsound
ord1
ord6
ord7
ord2
winmm
timeGetTime
msvcrt
calloc
_CIpow
floor
__dllonexit
_onexit
_initterm
_adjust_fdiv
srand
_beginthreadex
_tzset
??3@YAXPAX@Z
__CxxFrameHandler
printf
_ftol
??2@YAPAXI@Z
_vsnprintf
fclose
fputs
fopen
sprintf
malloc
memmove
_purecall
strncpy
_assert
free
ws2_32
closesocket
send
inet_addr
user32
GetDesktopWindow
PostMessageW
IsWindow
ole32
CoInitialize
CoUninitialize
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
52KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=7, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=25, version=9210,
count=1, id=48, version=9044,
count=1, id=29, version=9178,
count=1, id=95, version=2190,
count=11, id=93, version=2179,
count=127, id=1, productName=Unmarked objects,
count=12, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
cmnet.dll
- IMPHASH e4a1e8b6ef000d444a3a13d97909ab5a
- SHA256 c439dd317427e8e7543c7ad0d2342816f7415f6b839c236dc095d67cd31ea257
- MD5 c1c7babbdccfa70bf14ac0e70e965f68
- SHA1 be9539172f3a44e99a7708827dbab17a331956b2
- SHA512 989ed2d0a72811119b80c968218f00f5109d69363f6e02cd18148658984ed3325d489c1907f29241658a9aa6d1f1522c99229dac490076c7c7a4a49f60c52589
- SSDEEP 3072:IGQmfW0WQ7vReWVV9jZYVDKdIVJJ5JS/I9zN+chm7WlDE4Mx481Bx+xX:Ix0WeV99wdRVNFhm7M4Z1BxA
- TLSH T13E144905A9C042FCE60A4778447F7B3666B997C76B466BD7C335FC601A132E2E03B296
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
146024
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
CreateEventW
CloseHandle
GetSystemInfo
WaitForSingleObject
SetEvent
PostQueuedCompletionStatus
lstrlenA
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
CreateIoCompletionPort
GetLastError
Sleep
GetQueuedCompletionStatus
MultiByteToWideChar
lstrlenW
WaitForMultipleObjects
DisableThreadLibraryCalls
WriteFile
ReadFile
CreateFileW
WideCharToMultiByte
ReleaseSemaphore
CreateSemaphoreW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
ExitThread
TerminateThread
GetCurrentProcess
DuplicateHandle
CreateThread
ResumeThread
user32
GetMessageW
DispatchMessageW
PostMessageW
PostThreadMessageW
DefWindowProcW
GetWindowLongW
UnregisterClassW
CharLowerW
CharNextA
SetWindowLongW
RegisterClassExW
DestroyWindow
CreateWindowExW
ws2_32
socket
WSAIoctl
WSARecvFrom
WSARecv
WSASend
sendto
listen
WSAConnect
WSASendTo
WSASocketW
bind
WSASetLastError
recv
recvfrom
send
WSAAccept
getsockname
inet_addr
gethostbyname
htons
WSAAsyncSelect
WSAGetLastError
closesocket
ioctlsocket
accept
select
connect
WSAStartup
WSACleanup
setsockopt
inet_ntoa
ntohs
shutdown
mswsock
AcceptEx
GetAcceptExSockaddrs
sgmempool
ord1
ord4
ord2
ord3
winmm
timeGetDevCaps
timeEndPeriod
timeSetEvent
timeKillEvent
timeBeginPeriod
timeGetTime
msvcrt
_adjust_fdiv
_initterm
_onexit
__dllonexit
_beginthreadex
_wcsicmp
_wtol
_ltow
wcschr
malloc
wcsstr
free
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_assert
printf
atoi
memmove
isspace
wcscat
wcsrchr
srand
rand
_ftol
strstr
sprintf
strtok
time
wcscmp
fread
fclose
ftell
fwrite
fseek
fopen
_access
ole32
CoUninitialize
CoInitialize
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
148KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=13, id=93, version=2179,
count=164, id=1, productName=Unmarked objects,
count=21, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
dhconfigsdk.dll
- IMPHASH fef73c362ba6c8536577e686401b26a2
- SHA256 2f6d8b8a7db548095d6676162c8690eb29f6c7426570b5e4db28282fcf1eab6b
- MD5 a7bd8dc440fe307b542ba96f6dc6bdbc
- SHA1 13a068902fe1cc51b0ead20931f2a0e9121fbd40
- SHA512 e79f58b2506b4ddf820f258e00bc9ee729e484af93044edea1f81483919c4999523e3dc6fa6c6a9244e40cfa702bfac5cdcdbdaf17851d574a2a49ee63c12ce5
- SSDEEP 6144:BuACXmf6KZnK3Bwg5PIUa9mEn8sLbtioxYZ+nWMaRxygw:BNLZnoVPIUa9mE8sLbtiPIWKh
- TLSH T18B445B13E58140B5CA4F2BB054ED2378EE30269B1324E69FDFB5EE656D2F16390B520B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
178112
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetModuleFileNameA
RaiseException
ExitProcess
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetProcAddress
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
LoadLibraryA
SetUnhandledExceptionFilter
GetCPInfo
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
ReadFile
CloseHandle
CLIENT_PacketData
CLIENT_ParseData
Name
.text
Size
212KB
Virtual Size
210KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=25, id=14, version=7299,
count=101, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=3, id=19, version=8034,
count=76, id=1, productName=Unmarked objects,
count=27, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
dhdvr.dll
- IMPHASH bce5459d6a3c8a9289f8b2de793f52fc
- SHA256 aa90855ee0b288c53d51394534ae0f47e9e4d65bd1d6a9608d26d75308b4d981
- MD5 fcb1f94592a810eb0357129ddb0bda1e
- SHA1 55efd3dc7a6d494eb46ba42f67a19ed57e81ca6f
- SHA512 061a851f97347fd1ba787e1f6c5274d760fca8a4446e7b5edb98a3209bbe92320ddbc30b5af06e2d73353dc54b87d391370009f1919bf7b3a25d09000fd991b1
- SSDEEP 3072:zHR8oWjAq2XcsVx1YmAkDufIrL+BGTf4HYdnrWx/QYrs2SG9//0ywfBTuT9vN+VL:zAjS9Vx1YmAo+SCSzeYVXy6nFABw
- TLSH T13A549E02F58200F4DF8E5570217D3B39BAB5BF595F919BE39724ECA92C336A1E42710A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
179566
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
Sleep
CloseHandle
CreateEventA
SetEvent
ResetEvent
WaitForSingleObject
CreateThread
TerminateThread
GetTickCount
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
SetEndOfFile
GetOEMCP
GetACP
CreateFileA
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetProcAddress
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemInfo
CreateIoCompletionPort
WaitForMultipleObjects
PostQueuedCompletionStatus
GetLastError
GetQueuedCompletionStatus
RtlUnwind
HeapAlloc
HeapFree
RaiseException
GetCommandLineA
GetVersion
GetModuleFileNameA
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
ExitProcess
SetFilePointer
ReadFile
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedExchange
ws2_32
accept
listen
select
__WSAFDIsSet
getsockopt
gethostname
gethostbyname
socket
WSARecv
WSARecvFrom
WSASend
WSAGetLastError
WSASendTo
WSACleanup
WSAStartup
WSASocketA
bind
ioctlsocket
WSAJoinLeaf
setsockopt
connect
inet_addr
htons
closesocket
ntohs
inet_ntoa
plugin_info
Name
.text
Size
216KB
Virtual Size
213KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=11, version=8047,
count=13, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=109, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=24, id=14, version=7299,
count=5, id=19, version=8034,
count=117, id=1, productName=Unmarked objects,
count=49, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
dhnetsdk.dll
- IMPHASH ae9d6ac5ebabdba8a08e37524c9fa4f3
- SHA256 ca763048fdbfe960bcc324691ae32c375ee90acc63147c76683e13f769cfab63
- MD5 124cefeaa069d534d68abfbb64930a03
- SHA1 26ebed2bfd44299e22765bb8a5fdf162ca83b8b6
- SHA512 c2a5e658eb51e5253ab2c749f366649346d083ecbf85c751427f5fa5030ae6ead4cd7124179653db9570ef0fd1dcdc974efa564006ef55fa5744d1033bcac422
- SSDEEP 24576:xIJY+KgIiw5sYEvmJw+v2XDbVbsryC7KO:mKgIiw5g+v2TbxsGC7
- TLSH T171159E22F5CA40F0DB1D797010BB2737DB36224945259ED7EBB8ED619933661E12B20F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
636561
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
OutputDebugStringA
SetLastError
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
GetCurrentThreadId
CloseHandle
CreateEventA
SetEvent
ResetEvent
WaitForSingleObject
CreateThread
TerminateThread
GetTickCount
InterlockedIncrement
InterlockedDecrement
GetLastError
WideCharToMultiByte
MultiByteToWideChar
CompareFileTime
SystemTimeToFileTime
CompareStringW
CompareStringA
SetEndOfFile
CreateFileA
SetStdHandle
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetTimeZoneInformation
FlushFileBuffers
SetUnhandledExceptionFilter
ReadFile
SetFilePointer
WriteFile
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
InterlockedExchange
RtlUnwind
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
GetCommandLineA
GetVersion
GetModuleFileNameA
ExitProcess
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapSize
GetProcAddress
GetModuleHandleA
GetCPInfo
GetACP
GetOEMCP
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
SetEnvironmentVariableA
dhplay
ord102
ord89
ord103
ord101
ord49
ord83
ord82
ord50
ord98
ord18
ord88
ord10
ord7
ord8
ord9
ord99
ord30
ord14
ord43
ord34
ord17
ord27
ord19
ord86
ord79
ord5
ord42
ord100
ord6
ord94
dhdvr
plugin_info
ws2_32
inet_ntoa
inet_addr
winmm
timeBeginPeriod
AMR_Encode_Exit
AMR_Encode_Frame
AMR_Encode_Init
CLIENT_AddTourCombin
CLIENT_AdjustFluency
CLIENT_AudioBroadcastAddDev
CLIENT_AudioBroadcastDelDev
CLIENT_AudioDec
CLIENT_AudioEncode
CLIENT_CapturePicture
CLIENT_Cleanup
CLIENT_ClientGetVideoEffect
CLIENT_ClientSetVideoEffect
CLIENT_CloseSound
CLIENT_ControlConnectServer
CLIENT_ControlDevice
CLIENT_ControlDisconnectRegServer
CLIENT_ControlRegisterServer
CLIENT_CreateTransComChannel
CLIENT_CtrlDecPlayback
CLIENT_CtrlDecTVScreen
CLIENT_CtrlDecoderTour
CLIENT_DHPTZControl
CLIENT_DHPTZControlEx
CLIENT_DecTVPlayback
CLIENT_DelTourCombin
CLIENT_DestroyTransComChannel
CLIENT_DownloadByRecordFile
CLIENT_DownloadByTime
CLIENT_DownloadMediaFile
CLIENT_ExportConfigFile
CLIENT_FastPlayBack
CLIENT_FileTransmit
CLIENT_FindClose
CLIENT_FindCloseEx
CLIENT_FindFile
CLIENT_FindFileEx
CLIENT_FindNextFile
CLIENT_FindNextFileEx
CLIENT_FramCotrolPlayBackByRecordFile
CLIENT_FramCotrolPlayBackByTime
CLIENT_GetDEVWorkState
CLIENT_GetDVRIPByResolveSvr
CLIENT_GetDevConfig
CLIENT_GetDownloadPos
CLIENT_GetFileByTime
CLIENT_GetFramePlayBack
CLIENT_GetLastError
CLIENT_GetNewDevConfig
CLIENT_GetPlatFormInfo
CLIENT_GetPlayBackOsdTime
CLIENT_GetPtzOptAttr
CLIENT_GetSDKVersion
CLIENT_GetStatiscFlux
CLIENT_IOControl
CLIENT_ImportConfigFile
CLIENT_Init
CLIENT_InitAudioEncode
CLIENT_ListenServer
CLIENT_LoadOffLineFile
CLIENT_Login
CLIENT_LoginEx
CLIENT_Logout
CLIENT_MakeKeyFrame
CLIENT_MultiPlay
CLIENT_NormalPlayBack
CLIENT_OpenSound
CLIENT_OperateUserInfo
CLIENT_OperateUserInfoEx
CLIENT_PTZControl
CLIENT_PausePlayBack
CLIENT_PlayBackByRecordFile
CLIENT_PlayBackByRecordFileEx
CLIENT_PlayBackByTime
CLIENT_PlayBackByTimeEx
CLIENT_PlayBackControl
CLIENT_PlayBackControlDirection
CLIENT_QueryChannelName
CLIENT_QueryComProtocol
CLIENT_QueryConfig
CLIENT_QueryControlRegServerInfo
CLIENT_QueryDecChannelFlux
CLIENT_QueryDecEncoderInfo
CLIENT_QueryDecoderInfo
CLIENT_QueryDecoderTVInfo
CLIENT_QueryDecoderTour
CLIENT_QueryDevState
CLIENT_QueryDeviceLog
CLIENT_QueryDeviceTime
CLIENT_QueryFurthestRecordTime
CLIENT_QueryGPSLog
CLIENT_QueryIOControlState
CLIENT_QueryLog
CLIENT_QueryLogCallback
CLIENT_QueryLogEx
CLIENT_QueryNewSystemInfo
CLIENT_QueryRecordFile
CLIENT_QueryRecordState
CLIENT_QueryRecordTime
CLIENT_QuerySystemInfo
CLIENT_QueryTourCombin
CLIENT_QueryTransComParams
CLIENT_QueryUserInfo
CLIENT_QueryUserInfoEx
CLIENT_RealLoadPicture
CLIENT_RealLoadPictureEx
CLIENT_RealPlay
CLIENT_RealPlayEx
CLIENT_RebootDev
CLIENT_RecordStart
CLIENT_RecordStop
CLIENT_ReleaseAudioEncode
CLIENT_Reset
CLIENT_ResponseDevReg
CLIENT_RigisterDrawFun
CLIENT_SaveRealData
CLIENT_SearchDevices
CLIENT_SeekPlayBack
CLIENT_SendTalkData_Custom
CLIENT_SendTransComData
CLIENT_SendUpgrade
CLIENT_SetAudioClientVolume
CLIENT_SetAutoReconnect
CLIENT_SetConnectTime
CLIENT_SetDVRMessCallBack
CLIENT_SetDecPlaybackPos
CLIENT_SetDecTVOutEnable
CLIENT_SetDecoderTour
CLIENT_SetDevConfig
CLIENT_SetDeviceMode
CLIENT_SetFramePlayBack
CLIENT_SetMaxFlux
CLIENT_SetNetworkParam
CLIENT_SetNewDevConfig
CLIENT_SetOperateCallBack
CLIENT_SetPlatFormInfo
CLIENT_SetPlayerBufNumber
CLIENT_SetRealDataCallBack
CLIENT_SetRealDataCallBackEx
CLIENT_SetSnapRevCallBack
CLIENT_SetSubconnCallBack
CLIENT_SetSubcribeGPSCallBack
CLIENT_SetSubcribeGPSTHCallBack
CLIENT_SetTourCombin
CLIENT_SetVolume
CLIENT_SetupChannelName
CLIENT_SetupChannelOsdString
CLIENT_SetupConfig
CLIENT_SetupDeviceTime
CLIENT_SetupRecordState
CLIENT_ShutDownDev
CLIENT_SlowPlayBack
CLIENT_SnapPicture
CLIENT_SnapPictureEx
CLIENT_StartListen
CLIENT_StartListenEx
CLIENT_StartService
CLIENT_StartTalk
CLIENT_StartTalkEx
CLIENT_StartUpgrade
CLIENT_StartUpgradeEx
CLIENT_StepPlayBack
CLIENT_StopDownload
CLIENT_StopDownloadMediaFile
CLIENT_StopExportCfgFile
CLIENT_StopImportCfgFile
CLIENT_StopListen
CLIENT_StopListenServer
CLIENT_StopLoadPic
CLIENT_StopMultiPlay
CLIENT_StopPlayBack
CLIENT_StopRealPlay
CLIENT_StopRealPlayEx
CLIENT_StopSaveRealData
CLIENT_StopService
CLIENT_StopTalk
CLIENT_StopTalkEx
CLIENT_StopUpgrade
CLIENT_SubcribeGPS
CLIENT_SubcribeGPSTempHumidity
CLIENT_SwitchDecTVEncoder
CLIENT_TalkSendData
CLIENT_TransmitInfoForWeb
_CLIENT_SmartSearchPlayBack@8
Name
.text
Size
720KB
Virtual Size
717KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
48KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
68KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=12, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=36, id=14, version=7299,
count=150, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=10, version=8047,
count=8, id=11, version=8047,
count=7, id=19, version=8034,
count=124, id=1, productName=Unmarked objects,
count=97, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=36, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=5, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
dhplay.dll
- IMPHASH f1e3b1f30a89270e4b8eeeaf89a08875
- SHA256 d1fc61e3fcb94c7f52445fdc7bf07227ee1518257cce1ac3891e0878cad345bc
- MD5 e83fd2c17dd2528b337250493bb1f572
- SHA1 bfd704ebe1988bcd93e08cd39c5d442617466d1a
- SHA512 61daf8366223e6e32ee190de59af7f58f71fe737a73a2976bebb8ac8ce2171af07ba49b012f0e008f1bd716fda6774c6d5d6853351a2cdafc353180953dc3d36
- SSDEEP 12288:OkC6hznffIYiMc15nOV5sGdBRJnO5ZQnCiLsMG3EjUS+1hmzZ:7CWfAXR1E5swRYTeCX3SUS+1Yt
- TLSH T133555B10D901817EE9D502F7A9FF5AFD9A746B80D78814C311ECD8B6E76A2E27E310C9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
551168
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
avifil32
AVIFileOpenA
AVIFileInit
AVIStreamRelease
AVIStreamWrite
AVIStreamSetFormat
AVIFileCreateStreamA
AVIFileRelease
winmm
timeKillEvent
waveOutPrepareHeader
waveOutWrite
waveOutUnprepareHeader
waveOutOpen
waveOutReset
waveOutClose
waveOutGetVolume
waveOutSetVolume
timeGetTime
timeBeginPeriod
waveInGetDevCapsA
waveInGetNumDevs
waveInStart
waveInStop
waveInReset
waveInUnprepareHeader
waveInPrepareHeader
waveInClose
waveInOpen
waveInAddBuffer
timeSetEvent
ddraw
DirectDrawEnumerateExA
DirectDrawCreateEx
kernel32
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetACP
GetOEMCP
SetEndOfFile
ReadFile
SetFilePointer
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
CreateThread
GetFileSize
CreateFileA
WaitForSingleObject
Sleep
GetLocalTime
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
VirtualFree
VirtualProtect
VirtualAlloc
CreateDirectoryA
GetDiskFreeSpaceExA
FlushFileBuffers
CompareStringA
GetCurrentDirectoryA
OutputDebugStringA
GetPrivateProfileStringA
GetEnvironmentStringsW
GetModuleHandleA
SetEvent
QueryPerformanceCounter
WaitForMultipleObjects
CreateEventA
GetSystemInfo
TerminateThread
QueryPerformanceFrequency
GetProcAddress
LoadLibraryA
GetLastError
GetVersionExA
SetThreadPriority
lstrcpyA
CreateMutexA
ReleaseMutex
SystemTimeToFileTime
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetConsoleCtrlHandler
RaiseException
GetTimeZoneInformation
WideCharToMultiByte
GetCurrentThread
TlsGetValue
SetLastError
GetStringTypeA
GetStringTypeW
SetStdHandle
SetUnhandledExceptionFilter
IsBadCodePtr
UnhandledExceptionFilter
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetModuleFileNameA
GetUserDefaultLCID
TlsFree
TlsAlloc
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
WriteFile
IsBadWritePtr
IsBadReadPtr
HeapValidate
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
DebugBreak
GetStdHandle
FatalAppExitA
HeapAlloc
HeapReAlloc
HeapFree
GetEnvironmentVariableA
HeapDestroy
HeapCreate
TlsSetValue
user32
IsIconic
GetWindowRect
ClientToScreen
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetSystemMetrics
GetDC
GetClientRect
ReleaseDC
PostMessageA
gdi32
GetDCOrgEx
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
SetStretchBltMode
StretchDIBits
StretchBlt
DeleteObject
GetPixel
SetPixel
GetClipBox
ole32
CoInitialize
dlldeinterlace
HI_ReleaseDeinterlace
HI_InitDeinterlace
HI_Deinterlace
HI_VOICE_DecReset
HI_VOICE_DecodeFrame
HI_VOICE_EncReset
HI_VOICE_EncodeFrame
PLAY_AdjustFluency
PLAY_AdjustWaveAudio
PLAY_Back
PLAY_BackOne
PLAY_CatchPic
PLAY_CatchPicEx
PLAY_CatchResizePic
PLAY_ChangeRate
PLAY_CloseAudioRecord
PLAY_CloseFile
PLAY_CloseStream
PLAY_CloseStreamEx
PLAY_ConvertToBmpFile
PLAY_ConvertToJpegFile
PLAY_CreateFile
PLAY_CreateStream
PLAY_CutFileSegment
PLAY_DestroyFile
PLAY_DestroyStream
PLAY_Fast
PLAY_GetAudioRecScaling
PLAY_GetAudioRenderScaling
PLAY_GetBufferValue
PLAY_GetCaps
PLAY_GetCapsEx
PLAY_GetColor
PLAY_GetColorKey
PLAY_GetCurrentFrameNum
PLAY_GetCurrentFrameRate
PLAY_GetDDrawDeviceInfo
PLAY_GetDDrawDeviceTotalNums
PLAY_GetDisplayBuf
PLAY_GetDisplayType
PLAY_GetFileHeadLength
PLAY_GetFileTime
PLAY_GetFileTotalFrames
PLAY_GetFreePort
PLAY_GetKeyFramePos
PLAY_GetLastError
PLAY_GetMDPosition
PLAY_GetNextKeyFramePos
PLAY_GetOverlayMode
PLAY_GetPicBMP
PLAY_GetPicJPEG
PLAY_GetPictureQuality
PLAY_GetPictureSize
PLAY_GetPlayPos
PLAY_GetPlayedFrames
PLAY_GetPlayedTime
PLAY_GetPlayedTimeEx
PLAY_GetRealFrameBitRate
PLAY_GetRefValue
PLAY_GetSdkVersion
PLAY_GetSourceBufferRemain
PLAY_GetStreamOpenMode
PLAY_GetTimerType
PLAY_GetVideoPerTimer
PLAY_GetVolume
PLAY_InitDDraw
PLAY_InitDDrawDevice
PLAY_InputAudioData
PLAY_InputData
PLAY_InputVideoData
PLAY_OneByOne
PLAY_OneByOneBack
PLAY_OpenAudioRecord
PLAY_OpenFile
PLAY_OpenStream
PLAY_OpenStreamEx
PLAY_Pause
PLAY_Play
PLAY_PlaySound
PLAY_PlaySoundShare
PLAY_QueryInfo
PLAY_RealeseDDraw
PLAY_RefreshPlay
PLAY_RefreshPlayEx
PLAY_ReleaseDDrawDevice
PLAY_ReleasePort
PLAY_ResetBuffer
PLAY_ResetSourceBufFlag
PLAY_ResetSourceBuffer
PLAY_RigisterDrawFun
PLAY_RigisterDrawFunEx
PLAY_SetAudioCallBack
PLAY_SetAudioRecScaling
PLAY_SetAudioRenderScaling
PLAY_SetColor
PLAY_SetCurrentFrameNum
PLAY_SetDDrawDevice
PLAY_SetDDrawDeviceEx
PLAY_SetDecCBStream
PLAY_SetDecCallBack
PLAY_SetDecCallBackEx
PLAY_SetDemuxCallBack
PLAY_SetDisplayBuf
PLAY_SetDisplayCallBack
PLAY_SetDisplayRegion
PLAY_SetDisplayType
PLAY_SetEncChangeMsg
PLAY_SetEncTypeChangeCallBack
PLAY_SetFileEndCallBack
PLAY_SetFileEndMsg
PLAY_SetFileRefCallBack
PLAY_SetFileRefCallBackEx
PLAY_SetIVSCallBack
PLAY_SetMDRange
PLAY_SetMDThreShold
PLAY_SetOverlayMode
PLAY_SetPandoraWaterMarkCallBack
PLAY_SetPicQuality
PLAY_SetPlayPos
PLAY_SetPlayedTimeEx
PLAY_SetRefValue
PLAY_SetRotateAngle
PLAY_SetSourceBufCallBack
PLAY_SetStreamOpenMode
PLAY_SetTimerType
PLAY_SetVerifyCallBack
PLAY_SetVideoPerTimer
PLAY_SetVisibleDecCallBack
PLAY_SetVolume
PLAY_SetWaterMarkCallBack
PLAY_SetWaterMarkCallBackEx
PLAY_Slow
PLAY_StartAVIConvert
PLAY_StartAVIResizeConvert
PLAY_StartDataRecord
PLAY_Stop
PLAY_StopAVIConvert
PLAY_StopAVIResizeConvert
PLAY_StopDataRecord
PLAY_StopSound
PLAY_StopSoundShare
PLAY_ThrowBFrameNum
PLAY_VerticalSyncEnable
_PLAY_CloseYuvRender@4
_PLAY_OpenYuvRender@12
_PLAY_RenderYuv@24
Name
.text
Size
1024KB
Virtual Size
1021KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
148KB
Virtual Size
147KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
56KB
Virtual Size
138KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=11, version=8047,
count=13, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=30, id=14, version=7299,
count=2, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=8, id=48, version=9044,
count=128, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=49, version=9044,
count=2, id=25, version=9210,
count=1, id=29, version=9178,
count=160, id=1, productName=Unmarked objects,
count=13, id=19, version=8034,
count=17, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=10, productName=Unmarked objects (old),
count=45, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
dllh264.dll
- IMPHASH 0dcc342808824bad4db97ecb287e4c3e
- SHA256 e4a53fe452930dba7b19f3e553b84bcd55b84522becc6ee00c13e49feb977d3d
- MD5 9eaaecc5ec8272cb03770dc1b011c483
- SHA1 40e41cdb52b258c22e97c3e6849934191723f151
- SHA512 2467be3e880bb141412f953486ac7ae1a6315e665958d4bd3ed34808578d329a9b3fcc98ea48ccb156db71bcfbf0f93d03c585bd8c82e32103cfce3ef310d932
- SSDEEP 6144:CCC1EDqm3hTH2FRhMVm+XYg7xbS6ae74PRxhAfxMpZzoWRw7aNldz9CM5bv22CSF:hUsqcTH4VTe4
- TLSH T122748C83E69712B5E5026435206F4A7BA7780B4BD854EB6BC700ECB2E87B253593734F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
258381
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
SetStdHandle
H264_Dec_Close
H264_Dec_DeInit
H264_Dec_Decode
H264_Dec_Init
H264_Dec_Open
h264_decode_clean_all
h264_decode_end
h264_decode_frame
h264_decode_init
h264_decode_init_all
Name
.text
Size
272KB
Virtual Size
268KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rodata
Size
4KB
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rodata
Size
4KB
Virtual Size
136B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=11, version=8047,
count=20, id=14, version=7299,
count=76, id=10, version=8047,
count=69, id=1, productName=Unmarked objects,
count=3, id=19, version=8034,
count=11, id=48, version=9044,
count=8, productName=Unmarked objects (old),
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
dllmpeg4.dll
- IMPHASH e3207f8716ae9b72fc30c402ea161329
- SHA256 ebc950ef380d2a06a1570a8c9773639205d06d1acbb70bcba7f3957308620fe3
- MD5 fc7a2841fb81544e75706fa1b1d5df43
- SHA1 b0657ed452ba249ea57e055615fbfe9fc043cc7d
- SHA512 dd838d9808c04e27cf40564a04f420348b1ed29c93a50322dfaedd78b392ecb4c2f38b8eee65b24cc9b72ad88eb569bd0985b5600a4f20a64d754c0d4b1fa8cd
- SSDEEP 3072:S/AyXX2QcJOub29EsPKq0oGH265ULq8zxNKs+ew8+3cAGeO7KCob:3QcJOn5PKv7H265ULpvKs+ewjcADO
- TLSH T1A1647C43D3B775FBE402A73A403F17B73EB562395443E6428580AE23AC727669D2538B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
238889
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
OutputDebugStringA
GetCommandLineA
GetVersion
RtlUnwind
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
CloseHandle
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
SetStdHandle
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
xvid_decore_dll
xvid_encore_dll
xvid_init_dll
Name
.text
Size
256KB
Virtual Size
253KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
191KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=11, version=8047,
count=22, id=14, version=7299,
count=99, id=10, version=8047,
count=27, id=48, version=9044,
count=23, productName=Unmarked objects (old),
count=74, id=1, productName=Unmarked objects,
count=3, id=19, version=8034,
count=2, id=49, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
downmgr.dll
- IMPHASH 68071605e5fa398fc7ced786e77aebe6
- SHA256 476ec62b840fea7e850504be0d3bf3a7fc67f4b48560c4bc10a5621b4111ae8c
- MD5 5f5da03a922cca9f1b31a87f8e4fe3c9
- SHA1 b9a12ce096948b714a8ca945b1ba8e1160d1ae26
- SHA512 a325af55ccd16f8039d8d14fcc3b9ad4666ce68b3fe40f6e017f153d311fa1306b8ed16308f6a0aac55e3e452186e9ed2e2b74d0c36cbd79279bd8d76afde02a
- SSDEEP 768:dK7h/+UY97J1dXEoIWfS80XZ31VUlQds/mP1LqLG6SemRWc+TPPpnV+zGrp1AXI7:d+/ZY8xOQLJ6gyX/Ret7o3J
- TLSH T133832A056ED607FAEE8906385DBFB73661BC5ED41B82DBC3DB12FD944C212C2A0661C9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
51373
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
lstrlenW
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
CreateDirectoryA
OutputDebugStringW
OutputDebugStringA
GetProcAddress
FreeLibrary
WideCharToMultiByte
LoadLibraryA
GetLastError
MultiByteToWideChar
lstrlenA
GetLocalTime
LeaveCriticalSection
TryEnterCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
AllocConsole
SetEndOfFile
WriteFile
ReadFile
SetFilePointer
CreateFileW
MoveFileExW
lstrcatW
CloseHandle
WriteConsoleW
GetFullPathNameW
FindClose
FindFirstFileW
FlushFileBuffers
FileTimeToSystemTime
FileTimeToLocalFileTime
LockFileEx
UnlockFileEx
DeleteFileW
DisableThreadLibraryCalls
GetStdHandle
msvcrt
__dllonexit
wcsrchr
_initterm
malloc
_adjust_fdiv
localtime
free
_iob
_open_osfhandle
_dup2
_fdopen
fflush
_wcsdup
_timezone
strrchr
_wctime
ctime
fopen
fputs
fclose
_vsnwprintf
_vsnprintf
wcscpy
iswspace
isspace
time
_wtoi
iswdigit
swprintf
vswprintf
atoi
isdigit
wcslen
vsprintf
_tzset
sprintf
printf
_wcsicmp
??2@YAPAXI@Z
wcsstr
??3@YAXPAX@Z
_assert
__CxxFrameHandler
_purecall
_onexit
ws2_32
connect
send
recv
select
__WSAFDIsSet
closesocket
htonl
gethostbyname
socket
getsockopt
setsockopt
inet_ntoa
getsockname
ntohs
inet_addr
ntohl
listen
accept
bind
htons
user32
CharNextW
CharNextA
winmm
timeGetTime
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
52KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=5, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=9, id=93, version=2179,
count=110, id=1, productName=Unmarked objects,
count=11, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
httpdown.dll
- IMPHASH af3fee3f750ee1c1254c105870bac4dd
- SHA256 4c02dc03cb05c4fb32b926148c47aa7005d2073d0a0e1c40f17b1e1c673ba4a9
- MD5 acf4c2810cc804c6ee60ce5fb6f789b7
- SHA1 ae485170af66ebdd7c5e4d75246d924d5aa788d5
- SHA512 228fae721923ea4dba21dcc2e5b595aab248bf214efcf072fef81d489aa50edafb1f4c64e41cde292c0ef762254727dfedc517c94e2475ca6ecd26f5d2ea558f
- SSDEEP 1536:j610jhOag/celIPeYS7NEQXryxea+qJiWeJkGH:jplOaRQhDr3GiWeqGH
- TLSH T1C2B31805AAD605F2DAC8523C0DBF7B3A617E1BD48B0B9BC3DB10FD9059562C369361CA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
75821
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
lstrlenA
WideCharToMultiByte
InterlockedIncrement
lstrlenW
MultiByteToWideChar
DisableThreadLibraryCalls
DeleteFileW
UnlockFileEx
LockFileEx
FreeLibrary
LoadLibraryA
GetLastError
GetLocalTime
LeaveCriticalSection
TryEnterCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
OutputDebugStringA
OutputDebugStringW
CreateDirectoryA
GetModuleFileNameA
GetStdHandle
AllocConsole
SetEndOfFile
WriteFile
ReadFile
SetFilePointer
CreateFileW
MoveFileExW
lstrcatW
CloseHandle
WriteConsoleW
GetFullPathNameW
FindClose
FindFirstFileW
FlushFileBuffers
FileTimeToSystemTime
FileTimeToLocalFileTime
GetProcAddress
user32
CharNextA
CharNextW
winmm
timeGetTime
msvcrt
_vsnprintf
_vsnwprintf
fclose
fputs
fopen
fseek
_wctime
_wcsdup
fflush
_fdopen
_dup2
_open_osfhandle
_iob
free
localtime
wcsrchr
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
fread
iswspace
time
_wtoi
iswdigit
swprintf
vswprintf
_tzset
printf
_stricmp
sscanf
memmove
wcscpy
strchr
atoi
isdigit
wcslen
vsprintf
strrchr
isalnum
sprintf
isspace
_CIpow
_ftol
strstr
_atoi64
??2@YAPAXI@Z
??3@YAXPAX@Z
_assert
__CxxFrameHandler
_purecall
ctime
_timezone
ws2_32
send
recv
select
__WSAFDIsSet
closesocket
htonl
bind
connect
getsockopt
setsockopt
getsockname
ntohs
inet_addr
inet_ntoa
htons
ntohl
gethostbyname
listen
accept
socket
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
76KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=5, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=9, id=93, version=2179,
count=119, id=1, productName=Unmarked objects,
count=14, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
jpegdec.dll
- IMPHASH 36d84701af972e776e7b559e5d6a7cee
- SHA256 21c04be26fdeb54458d54f98336578df838555c1f409b3114a86a4b4b00b8dbd
- MD5 39c0f19e0522080d07fa7959370bde88
- SHA1 193fb46e8a6752cea7c6499fdb5f68272dbff7f0
- SHA512 069626523aea3a0289a81cad28c3945aa1f63701305c1e8128fce6d545f8136dcad4967c9d247b7991359400a9739eb0d494b745d6d5551d23a42ff5a56b335d
- SSDEEP 768:i0r/Lz8GS2S0nXHKOBvgNmWkB3vnl3vTcESk0wEiy6BCJj29i+6oIUxp:is/L4z2b3KOBTNfTcESk0tckY0on
- TLSH T12453AE413DD342F3E1CE43746592A73F9B3E6D1046E2A923CF25DA996E31962A13A30D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20145
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
HeapAlloc
HeapReAlloc
HeapFree
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
RtlUnwind
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
GetProcAddress
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
SetStdHandle
JPEG_Dec_Close
JPEG_Dec_DeInit
JPEG_Dec_Decode
JPEG_Dec_Init
JPEG_Dec_Open
Name
.text
Size
40KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=11, version=8047,
count=20, id=14, version=7299,
count=78, id=10, version=8047,
count=70, id=1, productName=Unmarked objects,
count=3, id=19, version=8034,
count=8, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
kdm.dll
- IMPHASH 8d7cdb8f4c9e3d9d18a0f86215679660
- SHA256 c4a2e6b5bfebf1f7a1cef880cdb0c980c613eccdd7c1234e68c58a6306ee0a9e
- MD5 d8ea30c0d8fa991ac8c7b407045d9d14
- SHA1 46f498533015b4c70e6817379addae7f8fac2fbc
- SHA512 596b6c0c79dcfd5cd1e313392142b2bd5de2fee4051ae09476b9122c9531c39d709acc09d07b9ae3a5bb9f882094edfbb98391b798fcc329f63c21a8bddd3fd7
- SSDEEP 3072:TPM/7waF3cRnf6cTjkH9aPqaG2y71IFCW1Dx:TPM/7HhcRnfpOViFC
- TLSH T139F32B06DDE64DF9D106563C9CBF6332623ACEDACB138BC79B14ED0018152D265EA3D6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
101402
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
CreateFileW
LeaveCriticalSection
ReadFile
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WriteFile
GetFileSize
GetLastError
WideCharToMultiByte
LocalFree
CreateFileA
CloseHandle
MultiByteToWideChar
lstrcpynW
lstrcpyW
GetModuleHandleW
FindResourceW
SizeofResource
LoadResource
FreeResource
LockResource
lstrlenW
InterlockedIncrement
InterlockedDecrement
lstrlenA
user32
SendMessageW
LoadIconW
LoadCursorW
SetWindowLongW
GetWindowLongW
MessageBoxA
MoveWindow
BeginPaint
EndPaint
DefWindowProcW
IsWindow
GetParent
FillRect
InvalidateRect
OffsetRect
SetCursor
GetSysColor
UnregisterClassW
RegisterClassExW
PtInRect
EqualRect
PostMessageW
CopyRect
ReleaseDC
GetDC
SetRectEmpty
SetRect
SetTimer
KillTimer
DestroyWindow
GetClientRect
LoadStringW
InflateRect
CreateWindowExW
IntersectRect
SetCapture
ReleaseCapture
IsRectEmpty
DrawTextW
gdi32
SetTextColor
CreateCompatibleBitmap
CreateDIBitmap
SetDIBitsToDevice
SetStretchBltMode
StretchDIBits
SetBkMode
CreateDIBSection
SelectObject
GetPixel
BitBlt
DeleteObject
DeleteDC
GetStockObject
SetViewportOrgEx
CreateCompatibleDC
MoveToEx
CreatePen
CreateSolidBrush
Rectangle
Ellipse
RoundRect
CreatePatternBrush
GetCurrentObject
FillRgn
CreatePolygonRgn
SetPixel
GetTextExtentPoint32W
LineTo
ole32
CoCreateInstance
OleRun
oleaut32
GetErrorInfo
VariantCopy
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantClear
VariantInit
SysFreeString
msimg32
GradientFill
TransparentBlt
comctl32
InitCommonControlsEx
_TrackMouseEvent
winmm
timeGetTime
msvcp60
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Xlen@std@@YAXXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
msvcrt
??2@YAPAXI@Z
printf
_assert
_ftol
wcscmp
_wcsicmp
memmove
_purecall
atoi
strncpy
sprintf
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
free
_CxxThrowException
wcslen
__CxxFrameHandler
wcsstr
ws2_32
send
closesocket
inet_addr
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
104KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
856B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=11, version=8047,
count=4, id=4, version=8047,
count=3, id=11, version=8798,
count=19, id=93, version=2179,
count=193, id=1, productName=Unmarked objects,
count=23, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
language.ini
- SHA256 2344fd1b79f150dff3d86a290aa22195745d5cc7f9950f0944a13df2e77fe618
- MD5 893a2f1e79a81acbd4c4994f5c8dbd48
- SHA1 82c6719091686dfbc946eebad5006f76a39e8a50
- SHA512 6b4c48fac4125c1ee78193d0cc4684a0a8afc04fd1e30c349ab5a883edd6ce9151961493ec5e10fda2888c7e5973f39803047f66615cdd3e2341ccde79324089
- TLSH T15301D32732C5E14CBEB32B45FD3199B86B69FC56280DD69DDBD0010848E2A4C8D679F7
- MD5 SHA1 SHA512 TLSH
lib_VoiceEngine_dll.dll
- IMPHASH b2e50cc60a521158b3ea2d099cbea42b
- SHA256 2c6f122dd15a57c132cfec5175bc677f9de1c265f742a9ee5c9a8a22679c9d17
- MD5 70212098f4917cc2fd2ddf71dcc1153b
- SHA1 28e208aa2f7340ebdf2cc8487d827b0a2b021775
- SHA512 b7566326b657fecc96d311498262e0f9e620de9ba2c7a4d14363ae811b2d08122671181b0b322ab791077bfa95e292a240577332ca434f36f6cd9ad06b0f98b5
- SSDEEP 768:9O7sGx00RgqRRKYTeLRStEGgrR3SIo9S4MTJJ:dXqRoYTeL0aDr7oQ4MF
- TLSH T1DA236B6021C681F7C586A934E5F6B737A63E2C4A11E0C1038FA5E98B6CB2750F91BF56
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18153
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
HI_VOICE_DecReset
HI_VOICE_DecodeFrame
HI_VOICE_EncReset
HI_VOICE_EncodeFrame
HI_VOICE_GetVersion
HI_VOICE_TransCodeFrame
HI_VOICE_TransCodeReset
Name
.text
Size
28KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=9, id=14, version=7299,
count=49, id=1, productName=Unmarked objects,
count=3, id=19, version=8034,
count=29, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
monitordown.dll
- IMPHASH d0125e7f52cf6bf42da5d8ae2df88a89
- SHA256 e287f70fc81232068ec451915ffe97d9f84950ebbe1d16dbcca6307c37e5f756
- MD5 5a22e29257cdbb7bbc399d6bb749dcab
- SHA1 1b24381faf9cfda3dd94952bb90fdf11ea197223
- SHA512 8d7d9d875bb548908a80895f2b2944de4d8a43419dda40f284134d18927dc9ed421f7859cdde29e761ba20867d12a2918241c8da60d92f0fc52f6b43bf7bd405
- SSDEEP 3072:Mx6K/+1tCLp/Adfnx+jiIMoLS6vsD34W67zMjszuPPx3Y7UXuQN+QCfvg8kXH6Dl:R5+OevftMaYo47E
- TLSH T16AA33902AADA05B5F9C8563C0D7FAB35613F0BE99F025BC3E724FE944D6138158762CA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
66321
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
lstrlenW
GetModuleFileNameW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
InterlockedIncrement
DisableThreadLibraryCalls
DeleteFileW
UnlockFileEx
LockFileEx
CreateDirectoryA
OutputDebugStringW
OutputDebugStringA
GetLocalTime
LeaveCriticalSection
TryEnterCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetStdHandle
AllocConsole
SetEndOfFile
WriteFile
ReadFile
SetFilePointer
CreateFileW
MoveFileExW
lstrcatW
CloseHandle
WriteConsoleW
GetLastError
LoadLibraryA
FreeLibrary
GetProcAddress
GetFullPathNameW
FindClose
FindFirstFileW
FlushFileBuffers
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleFileNameA
user32
CharNextW
CharNextA
winmm
timeGetTime
msvcrt
ctime
_wctime
strrchr
fopen
fflush
_fdopen
_dup2
_open_osfhandle
_iob
free
localtime
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
fputs
fclose
_vsnwprintf
_vsnprintf
isspace
time
iswdigit
swprintf
vswprintf
atoi
isdigit
wcslen
vsprintf
_tzset
sprintf
printf
wcsstr
iswspace
memmove
_wcsicmp
wcschr
_wtoi
_CxxThrowException
wcscpy
wcscmp
??2@YAPAXI@Z
wcsrchr
??3@YAXPAX@Z
_assert
__CxxFrameHandler
_purecall
_wcsdup
_timezone
ws2_32
send
recv
select
__WSAFDIsSet
closesocket
htonl
bind
connect
getsockopt
setsockopt
getsockname
ntohs
inet_addr
inet_ntoa
htons
ntohl
gethostbyname
listen
accept
socket
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
68KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=5, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=9, id=93, version=2179,
count=116, id=1, productName=Unmarked objects,
count=15, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
mstorage.dll
- IMPHASH fce8d500652f4e50ff8e57cc331aa7bc
- SHA256 ff80fef6143f0b2bda639904e9ade748411d369a575213c865fca38ceb67ec64
- MD5 1d93b77df40a903fb8b8c9d8f5407c17
- SHA1 6defb7df9e070ba83a7ce2a9c2966ce59ed532b6
- SHA512 3be0f909a0fc5ad7dc29352474da9c021e82f58b7b79946f6f232d90a08986e3da9e584220a70229f6db856f09f776c1a8b496b25ba8aeab3a5b105b23333cff
- SSDEEP 768:M7hQU7wR/5jocNXttmoTnIPeZoksoPSvjssLseaR:AfwJpNDBT6403seaR
- TLSH T163333B01EEE20CF3E6C1557C6DFBE73A21751AD94B1767C3C721FD6968222C091AA2C6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
28218
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
lstrlenW
lstrlenA
LeaveCriticalSection
FindFirstFileW
FindClose
GetFullPathNameW
SetFilePointer
GetLastError
WriteFile
ReadFile
CloseHandle
InterlockedIncrement
CreateFileW
OutputDebugStringA
CreateDirectoryA
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
winmm
timeGetTime
msvcrt
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
atoi
isdigit
vsprintf
free
_timezone
strrchr
sprintf
time
wcslen
fopen
fputs
fclose
_vsnprintf
_purecall
memmove
_assert
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_tzset
ws2_32
send
closesocket
inet_addr
user32
CharNextA
CappingEndData
ClosePlayFile
CloseRecordFile
CloseRepairFile
FlushBuf
GetConfDataOffset
GetCurReadBufLen
GetCurWriteBufLen
GetDataVersion
GetFileFlagLenth
GetHasIndex
GetIndexOffset
GetKeyFrameOffset
GetNoKeySessionDataOffset
GetObjHeadLenth
GetReadBufSize
GetSessionLifeDataOffset
GetTotalTime
GetUserInfoDataOffset
GetWriteBufSize
InitPlayFile
IsRecData
ModifyUserInfoData
OpenPlayFile
OpenPlayFileEx
OpenRecordFile
OpenRepairFile
PlaySeek
PlayTell
RecordData
RecordDataEx
RecordFixTag
RecordTell
RecordUserInfoData
RepairFile
RepairFileHead
RetrieveDataBody
RetrieveDataHeader
RetrieveIndex
RetrieveKeyFrame
RetrieveNextValidObj
RetrieveObjHeader
RetrieveUserInfoData
Name
.text
Size
28KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=5, id=14, version=7299,
count=4, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=9, id=93, version=2179,
count=105, id=1, productName=Unmarked objects,
count=9, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=3, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
productid.ini
- SHA256 34b1e2a92ade9474726a28ab63a609ddbc015b534be352f1b76f9c409e4aceca
- MD5 07507f66fd7e805bf1ebebf7d682694c
- SHA1 45ef36bddbed9d8411e0fc6be3ba121235bc6f77
- SHA512 44d4b50511dd6c72c68ec725b9a2260df9910bb6654ef32398f63b8a4fcfdf7b94511b35ed92e17d5d542aa6243e887c9de4f48b4ca4d633cc96db0fcbff537d
- TLSH T147A02200CA382C08082FC0200C000E0888AA080200AC8C2A8C20380AAC00CC002C32F2
- MD5 SHA1 SHA512 TLSH
sgmempool.dll
- IMPHASH 7e9bfd446e07e59bc0e26a19a0d443fd
- SHA256 8a74b4df0737f43a01beb55522677d9991ea4c63dc3733286e1ed7ef30f38d03
- MD5 8532465c59638cb93ace075e01cb8f3b
- SHA1 e7413904ab9d0bac9745f8a3bc5b917dcaa622e4
- SHA512 7d2d87c36ac360507dfe8c561b4ef2616f3276d4c0c9301a91c4bf29726c58edf58e93a4279f719798061320558c169ffde1526adb57bbb63d4a17654033d09f
- SSDEEP 384:aWVGxmLanqnL7unPeg188R3sZUT2eHFP1ng6bM3U7JQ:NVGxjILyMHZUT2elP1n4U7JQ
- TLSH T14FE29309EDE50EB3C248527CECF76B39347D5EE02B4343838B51F99619123E266E64D9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
13799
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedExchangeAdd
lstrlenA
GetModuleFileNameA
CreateDirectoryA
InterlockedDecrement
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
winmm
timeGetTime
msvcrt
_except_handler3
__dllonexit
?terminate@@YAXXZ
_initterm
malloc
_adjust_fdiv
atoi
isdigit
vsprintf
_timezone
_tzset
free
strrchr
time
wcslen
fopen
fputs
fclose
_vsnprintf
sprintf
??2@YAPAXI@Z
_assert
??3@YAXPAX@Z
__CxxFrameHandler
_onexit
ws2_32
send
closesocket
inet_addr
user32
CharNextA
__kk_free
__kk_freeall
__kk_malloc
__kk_realloc
Name
.text
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=2, id=11, version=8047,
count=5, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=9, id=93, version=2179,
count=107, id=1, productName=Unmarked objects,
count=8, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
sgupdate.dll
- IMPHASH 5fd0dfdb5b99babb7fb087349a761f89
- SHA256 2994e1109ff0050d4ea7ed2d8c0b821eac0f3cdc0cdcbd6ae4db636aecbb677a
- MD5 f29b5e71f36fed306ecb729aa5bf88ea
- SHA1 c0d282929bb080b782a6e396ad61a172e1035795
- SHA512 32eaaab0db7f680ce088dd61d5c77a54c9b2bb94d0f1f10bb9ab2ba25265b8633e3b2a1959319c1a609ec58e945ca1b38bcfc53ecb4325b1445866f92f3df39c
- SSDEEP 3072:H7nvsh0EwmMr+SQJbhCUJPTBfbIz7r0DDhlaw/pu:zc0EpXSQJdZPTBD2
- TLSH T18AE35B45A9C205F6D69C423C4CFF7739B27A17D58B069B83E304EED808661C1AA762DE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
95674
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedDecrement
InterlockedIncrement
lstrlenA
lstrlenW
SetCurrentDirectoryW
GetModuleFileNameW
WideCharToMultiByte
Sleep
MultiByteToWideChar
CreateDirectoryW
GetFileAttributesW
DisableThreadLibraryCalls
DeleteFileW
GetFileSize
GetCurrentProcess
DuplicateHandle
CloseHandle
CreateThread
CreateEventW
ResumeThread
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
TerminateThread
ExitThread
GetCurrentProcessId
OutputDebugStringA
CreateDirectoryA
GetModuleFileNameA
WriteFile
ReadFile
CreateFileW
GetFileAttributesA
SetEvent
user32
CharNextA
CharNextW
CharLowerW
wininet
InternetCloseHandle
InternetSetOptionW
HttpQueryInfoW
InternetOpenUrlW
HttpSendRequestW
InternetReadFile
InternetOpenW
winmm
timeGetTime
msvcrt
strrchr
time
printf
_fdopen
free
fread
ftell
fwrite
fseek
_access
malloc
strstr
_ultow
_ltow
_tzset
fprintf
_errno
fputc
__dllonexit
_onexit
_initterm
_adjust_fdiv
fopen
fputs
fclose
_vsnprintf
srand
wcsstr
wcsncpy
wcscmp
iswspace
_wtol
_wtoi
iswdigit
swprintf
vswprintf
wcschr
isdigit
sprintf
vsprintf
wcscpy
wcslen
_wcsicmp
wcsrchr
_purecall
isspace
memmove
strchr
atoi
_assert
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
_timezone
ws2_32
inet_addr
send
closesocket
ole32
CoInitialize
CoUninitialize
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
96KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=10, id=48, version=9044,
count=13, id=93, version=2179,
count=159, id=1, productName=Unmarked objects,
count=14, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
sgupdateapp.exe
- IMPHASH fe5d3dda69d0e6f77524423b14289bd7
- SHA256 ebb8ce8a31ff4f217e254e70ebb880ef8e7704c5d86bc5d68f5f7e39e463b3b4
- MD5 c2d68b0f618df00f72e72ce63e6a39cc
- SHA1 5f553396155b619c758b18f2db1325d1debe1881
- SHA512 6c7aa495bfc78cd11d12bfc9fdff6671f9016bf79f4d7c8214d8e3ef646ed170e7c6a8aca4e3fc7d6c924c21b42103bc191a9204e74fd09699961f14fb116a57
- SSDEEP 1536:IG/eRjYYnKuD5AWnxJ0ypLe2cIr/Wp6Th7P8U21t6l4BqNmF:IYeZtNblpLNcICp6heWrIF
- TLSH T13AD35C06BEC845F4F90452355DB76B32A174BF780B1AAF8BCB11FE61C9323C192A51E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
76124
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
GetModuleHandleW
LoadLibraryW
CreateMutexW
FreeLibrary
GetVersionExW
lstrcpynA
lstrcpynW
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
CreateProcessW
GetFullPathNameW
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
CloseHandle
OpenProcess
GetLastError
ExitProcess
lstrlenA
GetCurrentThreadId
GetStartupInfoW
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
GetFullPathNameA
GetPrivateProfileStringW
GetPrivateProfileSectionNamesW
SetUnhandledExceptionFilter
RaiseException
GetModuleHandleA
OutputDebugStringA
GetCommandLineW
WideCharToMultiByte
MultiByteToWideChar
InterlockedIncrement
LoadLibraryA
lstrlenW
InterlockedDecrement
GetProcAddress
GetModuleFileNameA
GetModuleFileNameW
CreateFileA
CreateDirectoryW
SetFileAttributesW
GetFileAttributesW
user32
CharUpperA
IsDialogMessageW
IsWindow
SendMessageW
LoadImageW
GetSystemMetrics
MapWindowPoints
SystemParametersInfoW
GetWindow
GetParent
GetWindowLongW
MoveWindow
SetWindowPos
GetClientRect
GetWindowRect
CreateDialogParamW
SetWindowLongW
MessageBoxW
PostMessageW
PostQuitMessage
DestroyWindow
CharNextW
CharUpperW
WaitForInputIdle
DefWindowProcW
CallWindowProcW
LoadStringA
SetFocus
IsWindowVisible
MessageBeep
GetMenuItemCount
CreatePopupMenu
TrackPopupMenuEx
PtInRect
PeekMessageW
DestroyMenu
RemoveMenu
GetMenuItemInfoW
AppendMenuW
GetDlgItem
ShowWindow
SetTimer
SetWindowTextW
InvalidateRect
KillTimer
SetDlgItemTextW
EndDialog
CheckDlgButton
IsDlgButtonChecked
GetTopWindow
RegisterClassExW
wsprintfW
LoadCursorW
GetClassInfoExW
CreateWindowExW
DispatchMessageW
TranslateMessage
GetMessageW
DialogBoxParamW
GetActiveWindow
EnableWindow
ExitWindowsEx
LoadStringW
advapi32
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
shell32
ShellExecuteW
ord165
CommandLineToArgvW
ole32
CoInitialize
CoUninitialize
psapi
GetModuleFileNameExW
EnumProcessModules
EnumProcesses
comctl32
InitCommonControlsEx
msvcrt
wcslen
iswdigit
__CxxFrameHandler
strrchr
wcsrchr
wcschr
_wcsicmp
_tzset
sprintf
time
_vsnprintf
localtime
rand
_except_handler3
__dllonexit
_onexit
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_waccess
vswprintf
printf
_ftol
free
realloc
wcsstr
memmove
_wtoi
wcscmp
_assert
_purecall
wprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
swprintf
ws2_32
closesocket
inet_addr
dbghelp
MakeSureDirectoryPathExists
MiniDumpWriteDump
Name
.text
Size
72KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
36KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=96, version=2190,
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=1, id=11, version=8047,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=31, id=93, version=2179,
count=375, id=1, productName=Unmarked objects,
count=24, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
sgupdateapp.exe.manifest
- SHA256 7fea100b60064dc8670c62c13b90881f0b069c34e081da1928d9d46c9514a508
- MD5 0202dcb5864d092e44d013572ad95260
- SHA1 b6f9e87373510278202dfb39d79287d6f9ecb9f5
- SHA512 4b345dbe7232de4349bbeb4a728e3e5319af0d9fcd0303d334776f3a7e4b3053d51ea02b3b2f7703ead31ffb9ceb77eef5fe6b5acb916c2dd0f9de0ad8eec8d7
- TLSH T1E6F0DCC1D20EAE39831026F12973D508A2B9231619AD06AC5CD076BFEE06A9ACDC21F1
- MD5 SHA1 SHA512 TLSH
smvxplay.dll
- IMPHASH be89e3c8db215d4e407b1ec0f6236fb3
- SHA256 13094236799f209db5d9ea3e657eb0da74b7c83ac2d2efd100ddfb3613058d3f
- MD5 a76e4f4b08ab02b0d53c73422b75e572
- SHA1 8da0d713c2e4432c30b24f2394a450c10fe5d969
- SHA512 2d7a89ff1300306679f8e2d89c0c751f557299d132bf48d9571fd49548a69b7bca2fbd663d7abf0696cf835e980ebf6120cda3416db8a476f50484591b557e9a
- SSDEEP 3072:X8MJ3LXuyAlTbo7JEQQE7W/6qffwjP+WcjxIyppuAn6:X/J3Ld+TbodWzgjP+W/yb6
- TLSH T12CF36C01ADE605F9E74D6378583FBB3226BA0BDE8F060FD38329FD5445361C165362AA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
114664
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrlenW
Sleep
MultiByteToWideChar
WideCharToMultiByte
CopyFileW
CloseHandle
CreateSemaphoreW
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReleaseSemaphore
ResumeThread
CreateEventW
CreateThread
DuplicateHandle
GetCurrentProcess
SetEvent
TerminateThread
ExitThread
GetLastError
LoadLibraryA
FreeLibrary
GetProcAddress
OutputDebugStringA
OutputDebugStringW
GetModuleFileNameA
WaitForSingleObject
user32
SetWindowLongW
DestroyWindow
CreateWindowExW
PostMessageW
CharNextW
SendMessageTimeoutW
GetClientRect
CharNextA
DefWindowProcW
UnregisterClassW
GetWindowLongW
RegisterClassExW
winmm
timeEndPeriod
timeGetTime
timeBeginPeriod
timeGetDevCaps
timeSetEvent
timeKillEvent
sgmempool
ord1
ord2
msvcrt
free
_tzset
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
strrchr
_vsnwprintf
_vsnprintf
srand
time
atoi
isdigit
sprintf
vsprintf
printf
strchr
memmove
wcscmp
_wtoi
iswdigit
wcslen
swprintf
vswprintf
_CxxThrowException
_assert
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_purecall
ws2_32
closesocket
inet_addr
send
ole32
CoInitialize
CoUninitialize
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
120KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=5, id=14, version=7299,
count=4, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=11, id=93, version=2179,
count=145, id=1, productName=Unmarked objects,
count=27, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=5, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
sqlite3.dll
- IMPHASH af961c99b930b06c81c1f18b28c62ac8
- SHA256 4c66a31d31296a89db11320f6324160beca6c6a4a6c564c685fba49ca547d60b
- MD5 8675473b5cfe5ea5fed7abc2ba5bddad
- SHA1 69551b193952b8a7c060099cb9bba3e25723bef5
- SHA512 a3ecef44cc904b3a5dde5cff055cb6f52c4c41ac9d92ecb3df8aa0122217a0e4c9121e4d1f3a2c7ab44faa38263636365ce34b914637372da527b13f2d3b2399
- SSDEEP 12288:nN5xhkGEwKULwne9ejgnBwKQjLe9jLS33qE9tvqnuOdwSznd1a:rkjUKUnhQ/e9jI9tv+umm
- TLSH T1B4C42902C651D03AF1E300FB8333017DFEA86F71504165DB97D5BD9AAB36864BA2366B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
479153
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
Sleep
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
WideCharToMultiByte
MultiByteToWideChar
AreFileApisANSI
CloseHandle
ReadFile
GetLastError
SetFilePointer
WriteFile
SetEndOfFile
FlushFileBuffers
GetFileSize
UnlockFile
LockFile
LockFileEx
GetVersionExA
GetProcAddress
FreeLibrary
GetSystemTimeAsFileTime
CreateFileA
CreateFileW
GetTempPathA
GetTempPathW
GetFileAttributesA
DeleteFileA
GetFileAttributesW
DeleteFileW
GetFullPathNameA
GetFullPathNameW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
LoadLibraryA
LoadLibraryW
FormatMessageA
LocalFree
FormatMessageW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTime
DisableThreadLibraryCalls
msvcrt
memcpy
_ftol
strncmp
strcmp
localtime
malloc
free
realloc
memcmp
memmove
atoi
strlen
_pctype
_isctype
__mb_cur_max
tolower
qsort
_initterm
_adjust_fdiv
memset
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_data_count
sqlite3_db_config
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_exec
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_finalize
sqlite3_free
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_initialize
sqlite3_interrupt
sqlite3_key
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare_v2
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_rekey
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_rollback_hook
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_step
sqlite3_stmt_status
sqlite3_strnicmp
sqlite3_table_column_metadata
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_trace
sqlite3_transfer_bindings
sqlite3_update_hook
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_numeric_type
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_win32_mbcs_to_utf8
Name
.text
Size
468KB
Virtual Size
464KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
44KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=19, version=8034,
count=69, id=1, productName=Unmarked objects,
count=1, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
sysvideo.ini
- SHA256 741867018461822d69942800a96f7bcc18998dae59d052a270418232cfe3f541
- MD5 dfd26ad778b29f624abc4c928c1a992b
- SHA1 4c6ef9123615c9ce03428689fe715466868b7576
- SHA512 aa79cd620dc7dd024a8eea1dba4c89f477cf3d870023ba8a880fbdcf1739a88ce776abfb2650a09f6e1140a8e47db22931956441b92028753f8df20608283909
- MD5 SHA1 SHA512
updateres.dll
- IMPHASH 5c54715227e960c5019e7a45d4b9d02a
- SHA256 c43a146286be55ece8bc75b790d7b4dbc0997d491443de1788b447b9a2e3dd74
- MD5 b0161e9c51289e1002c4d558bb4fa2f6
- SHA1 0e027742073007477c8dfeb22563ea80bcb12f4b
- SHA512 c838cf9405628601a6e0f0275d0be467e538b71a202c0a1ac4b738cf8db6d86e9a99e0e760248f8d2e474c45b3825dcc53ea8789cf829bf6577f882a0ceef11f
- SSDEEP 1536:Z2TVmkUbDXSWChlqP8U21t8PmqNmcOTqQf5555QFNgh0ooooooooooooooooooou:ZfJChlNM7IzTqQf55558NgevDVyE
- TLSH T171F35CF149E44825E22BBBB0F73E9B4B0213DD58678F6D4E1E93B8076B35990631750B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4329
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Name
.text
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
116KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=20, id=14, version=7299,
count=56, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=65, id=1, productName=Unmarked objects,
count=3, id=93, version=2179,
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
virtualmem.dll
- IMPHASH 1f9461915a5079fd2b0f0dccabfee603
- SHA256 bffd8939839ab7677bcc7202b982781869087e0c8d121bc289828c2617c15b2b
- MD5 4f65e8593fe3089024fdd715c3476573
- SHA1 026357ee5f47e7d6f6b0fb68a357487086c0fd47
- SHA512 2eba99824e3a08a0a873492b3e8811db0e285e397af0e5e976692e81e779f1dc36947a1c691af1a1dc10307c5d152ccbebc72a88437ba53f939e204a90d2d1ee
- SSDEEP 768:aRISX6tqKuYuh49+AVv/v94jwJnITKtxiONQWAbPEP0YJEez:aFsTOh49+AVv/v94XaI7ez
- TLSH T1D743F809EDE50CF2E2858B3CEDBB6735207D56C51B43ABC38776FDA548212D061E22DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
26922
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
CreateDirectoryW
SetFileAttributesW
GetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
InitializeCriticalSection
DeleteFileW
WriteFile
ReadFile
GetLastError
SetFilePointer
GetFullPathNameW
SetEndOfFile
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
GetModuleFileNameA
CloseHandle
GetDiskFreeSpaceExW
CreateFileW
lstrlenA
GetDriveTypeW
InterlockedIncrement
GetLogicalDriveStringsW
lstrlenW
InterlockedDecrement
RemoveDirectoryW
DisableThreadLibraryCalls
CreateDirectoryA
user32
CharNextW
winmm
timeGetTime
msvcrt
_adjust_fdiv
_initterm
_onexit
__dllonexit
time
fopen
fputs
fclose
_vsnprintf
malloc
free
_timezone
wcscmp
strrchr
sprintf
_wtoi
iswdigit
wcslen
swprintf
vswprintf
wcsstr
printf
_purecall
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
wcschr
_assert
_tzset
ws2_32
closesocket
send
inet_addr
sgCreateInstance
sgDestroyInstance
sgGetInterfaceName
sgInitialize
sgUninitialize
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=96, version=2190,
count=2, id=12, version=7291,
count=5, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=21, id=93, version=2179,
count=245, id=1, productName=Unmarked objects,
count=13, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
ûʹֲ.chm
- SHA256 99776cb6d8e482bf3befccc16f036c4bece17ffae1aff70e63b2a7c3cff0917e
- MD5 4740ea02244836e2b6e7a01bb0c31ac6
- SHA1 89385856453bd30dedc3595bc009e2477a330125
- SHA512 9e3d7239574cdf1b1959a0c4aee0ea5a52d9514c51719ec6ea86edf033580323610928d402734f8f7a2747b66c4f3fb5e0a89fce9c857c1703f61efd1dfe3f67
- SSDEEP 6144:hA9OV3+0LnlROJvacF0AZ6Ug+mkzecbxero6+2p3IXJxRu9k:KMVrivJFFE1o32pG7h
- TLSH T191442335B9B03878C3A276F6CE37B7233D9966341125921B19311A2A71F3C9DA3E509B
- MD5 SHA1 SHA512 SSDEEP TLSH