photocraft-0.9.0-windows-x64-portable.zip
- SHA256 e87bbe26f84d3c359765b61d128b9cc59f016a995956fe7909b328a97650fc97
Static task
static1
General
- Target photocraft-0.9.0-windows-x64-portable.zip
- Size 79.3MB
- Sample261015-vjb6fsdd45
- SHA256 e87bbe26f84d3c359765b61d128b9cc59f016a995956fe7909b328a97650fc97
- MD5 f2d42b267e6d554985a2a3500577e039
- SHA1 6a6ae68a5cf85e125da79f4b5dff0b06cc3d6620
- SHA512 7544b4908698fe535f5d73b2d8b88c0a10db16b8c932451cad7cd172249aa5a26d98ed8a0ad71e326975c34067c3431fe5a4f0939a9d8c954cac9097c2169c41
- SSDEEP 1572864:f6mdjkBMOYWm2oMhNajLubAP+0Sz+bDwbsI12B7so3:LmBzYWm2oBjLWz+/wbs42d3
- TLSH T1FF0833D921B09BC5E0FE18EF14A07AA193A7573CC85F367F0A19FA601443A6E9037DD9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
photocraft-0.9.0-windows-x64-portable.zip.zip 79.3MB
-
photocraft-0.9.0-windows-x64-portable/LICENSE-APACHE10KB
-
photocraft-0.9.0-windows-x64-portable/LICENSE-MIT1KB
-
photocraft-0.9.0-windows-x64-portable/OFL-biz-ud-mincho.txt4KB
-
photocraft-0.9.0-windows-x64-portable/OFL-biz-ud-pgothic.txt4KB
-
photocraft-0.9.0-windows-x64-portable/OFL-shippori-mincho.txt4KB
-
photocraft-0.9.0-windows-x64-portable/README.md31KB
-
photocraft-0.9.0-windows-x64-portable/photocraft-cli.exe.exe 70.9MB
-
photocraft-0.9.0-windows-x64-portable/photocraft.exe.exe 97.9MB
-
photocraft-0.9.0-windows-x64-portable/portable.txt527B
photocraft-0.9.0-windows-x64-portable/LICENSE-APACHE
- SHA256 eb3d7b5485466acbd81f2b496f595ab637d2792e268206b27d99e793bdb67549
- MD5 29256199be2a609aac596980ffc11996
- SHA1 bd0b945d001aebc12dd7cdbf100427f1bc8d6957
- SHA512 2504a54fc7c2c0e2b32efc2bd7b3b8d65b15d78869740195b39ebe4073f8a2cd3ea3a3febcc7cc4e38121a62c6a8364a90764fa595c50313c51129e5890d479c
- SSDEEP 192:qf9qG4QSAVOSbwF1wOFXuFJyQtxmG3ep/7rlzKfHbxc+Xq0rhR:kOu9b01DY/rGBt+dc+acR
- TLSH T1E922626BB60903771AF20162AB4764CAF31EA03F3B591529315CC1281F7B96093FB69E
- MD5 SHA1 SHA512 SSDEEP TLSH
photocraft-0.9.0-windows-x64-portable/LICENSE-MIT
- SHA256 77c414bd870a0cc1a5ec06e7aeae0d379713d1d5d2d38e8d0903002e4d572537
- MD5 c8ec71daec17a54501bc2016ddef9daf
- SHA1 13736c130674704ac9dca755885878a4842405a2
- SHA512 54faac9a8bdebc40cb2cf46d35bcd3813e08b65e0b89bd7ff6a7c420db2651926ab0e7ce59fc6bc89a06274dae31ffdf433ca9a69037e9fcd62f8346dfe2a5d4
- TLSH T14321961E72560373189257A04579E8C5F227B14A7E6B1A85346DF209132A018CAFF854
- MD5 SHA1 SHA512 TLSH
photocraft-0.9.0-windows-x64-portable/OFL-biz-ud-mincho.txt
- SHA256 9c244a5edd2525aa4aa43dd714d7de00f3b3591a522d82d724db3644b5a95568
- MD5 4f45171cade1bbbc9888036ba68abf05
- SHA1 ed85715fce465107d2142072fd3319f6af3b7763
- SHA512 653ea12ea69d05dadef6c942b38f4a1635ee29130601580190c3cc5bb22dba1a85697bad828e9cee9daf9e630d9c00bb26e958501a08b603d153e4f54331a51f
- SSDEEP 96:wW+0HiilxwnEOWOKajy4vyviXQaGYBC23zCdZuKy0iQHZoG:tzl7hqyvaQ1+3zCdyQHZV
- TLSH T11391B72A7F4913B109C0D241F776E9DEF21B416D37AB69C9705AC16C23A6C6803FE2A4
- MD5 SHA1 SHA512 SSDEEP TLSH
photocraft-0.9.0-windows-x64-portable/OFL-biz-ud-pgothic.txt
- SHA256 062c81ae55b5ddd56c08331c8fe86598c1ef7f4453560c74706427a008b68534
- MD5 651dc730adf0bb066e6f26e5209359e0
- SHA1 d71e232e3d34ed4176c3a7498b8688cfe3cdced2
- SHA512 fa0352c12e3d1ffd1e0d41ac4c915b70098ae9647a6dddabba4f8aa889feb7d8871575821edc343b795e50bf6b94dda731e9433d55dcb8368f6c811e0d555bd2
- SSDEEP 96:GW+0HiilxwnEOWOKajy4vyviXQaGYBC23zCdZuKy0iQHZoG:rzl7hqyvaQ1+3zCdyQHZV
- TLSH T1FF91B72A7F4913B109C0D241F766E9DEF21B416D37AB69C9705AC16C23A6C6803FE2A4
- MD5 SHA1 SHA512 SSDEEP TLSH
photocraft-0.9.0-windows-x64-portable/OFL-shippori-mincho.txt
- SHA256 0aef534f5885c2f30b360ed5fb09ea4661a40ec62845c35f8354e26d7977d87d
- MD5 59d3f89354f92f50650f5f06399589ee
- SHA1 4e7c92e5d8a3ef097c1c2fc8747db89b5ec01c38
- SHA512 a631fcdfd8a787c1a032f2997bc04611457e9ee33c80e87dff0bfac7fb6f2ce3d7e143274902c28581447280167bb453defe7d57996e65d5332a5e5dc332dcea
- SSDEEP 96:qW+bHiilxwnEOWOKajy4vyviXQaGYBC23zCdZuKy0iQHZoG:Czl7hqyvaQ1+3zCdyQHZV
- TLSH T16691C71A7F4513B109C0D242F776E9DAF21B416D37AB69C9705BC1AC23E6C6803FE2A4
- MD5 SHA1 SHA512 SSDEEP TLSH
photocraft-0.9.0-windows-x64-portable/README.md
- SHA256 212928af7a8a0c45f43050c2b87ed864efacb6b73d59a098822945fc391bfc7a
- MD5 d12f963f361d3a873235076e5d7024e2
- SHA1 2ee560e3ab83bd6394a0b6681ecc1959e794b9e1
- SHA512 d08ec8a15628de3a024cb5fe8d35aaab12993e3446b80df754ddd55053031f4b5dee30bca415ae6b9d94d50dc46ba416cc47e06ea98bb577ade10cdbfce9b075
- SSDEEP 768:f3oDBY1hzykS2nSwU+pwXXtUiDHxq+ufHZRV:gDB2NyP2nSwUSuRq+ufHZRV
- TLSH T11BE2F873F382336B1FB28252A71939D4E717863AA3455C48B49E611F37EA52A437338D
- MD5 SHA1 SHA512 SSDEEP TLSH
photocraft-0.9.0-windows-x64-portable/photocraft-cli.exe
- IMPHASH 71062a31656f39ac21ff40b7554d2a00
- SHA256 a594cddcb462334576b9561afe37b86afb37b07f9e1c29b9a90b4b0c8f0b4ee2
- MD5 17477e3b5276808db2a6b961c6bae411
- SHA1 d1ca90fbd40eeff071f451d2aefcbb07e6c7c0b8
- SHA512 b94ce7bc40abcde07c880526b3f38a76deb6051b525c4d745dbc52352a152b2607c1f3fb8fbef037326eebf0d0310bda95318631436c1967a170b09db1618765
- SSDEEP 393216:ZAyUGbALZVEbCobal0aywe//TYAonS69/xAvlnSLvf+2L5ig3W/wO:ZAykXWbpXTYBSI/Ovlnym2liCWP
- TLSH T181F78E46F19F787DD096CCB0D20586236E2530CB1B2A69EB0AC582797F7DBD09B2C716
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5a:e8:c4:e6:3d:80:62:c4:e3:96:6d:83:6d:9f:4d:8f:be:c0:80:02:3d:02:56:73:45:c0:bf:ba:ea:d0:26:4b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Learning Machines Inc,O=Learning Machines Inc,L=Atlanta,ST=Georgia,C=US
Chains
Oct 14, 2026
CN=Learning Machines Inc,O=Learning Machines Inc,L=Atlanta,ST=Georgia,C=US
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Learning Machines Inc,O=Learning Machines Inc,L=Atlanta,ST=Georgia,C=US
Serial Number
33:00:08:68:55:e5:a5:2d:71:7c:1b:92:62:00:00:00:08:68:55
Issuer
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 13, 2026 - Oct 16, 2026
Subject
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:16:31:92:8d:92:02:65:7b:9a:00:00:00:00:00:16
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 26, 2026 - Mar 26, 2031
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:5f:2a:e4:f8:23:45:bc:1a:49:00:00:00:00:00:5f
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 17, 2026 - Sep 14, 2027
Minor OS version
0
Major OS version
6
Entry point
35653296
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
photocraft_cli.pdb
bcryptprimitives
ProcessPrng
kernel32
GetFileType
GetStringTypeW
CreateEventW
SetEvent
SetFilePointerEx
WriteFile
GetSystemTimeAsFileTime
GetCommandLineA
SetEnvironmentVariableW
FindClose
SwitchToThread
GetCurrentProcess
DuplicateHandle
SetFileCompletionNotificationModes
FlushFileBuffers
CreateThread
GetCurrentProcessId
CompareStringOrdinal
SleepEx
GetFullPathNameW
GetCurrentThreadId
QueryPerformanceCounter
SetHandleInformation
SetFileTime
GetFileInformationByHandleEx
CreateProcessW
WaitForMultipleObjects
GetExitCodeProcess
CreateDirectoryW
AddVectoredExceptionHandler
WaitForSingleObject
GetCurrentThread
lstrlenW
SetFileAttributesW
MoveFileExW
FindFirstFileExW
ExitProcess
GetProcAddress
WideCharToMultiByte
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
ReleaseMutex
GetFinalPathNameByHandleW
DeleteFileW
GetModuleFileNameW
MultiByteToWideChar
CreateWaitableTimerExW
SetWaitableTimer
Sleep
GetFileAttributesW
FlsFree
FlsAlloc
GetModuleHandleExW
GetModuleHandleW
IsThreadAFiber
FlsSetValue
FormatMessageW
GetModuleHandleA
GetTempPathW
QueryPerformanceFrequency
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
FindNextFileW
LoadLibraryExA
FreeLibrary
SetStdHandle
LCMapStringW
CompareStringW
SetFileInformationByHandle
CreateFileW
LoadLibraryExW
GetCPInfo
GetOEMCP
GetACP
SetLastError
HeapSize
GetLastError
IsValidCodePage
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetFileInformationByHandle
CloseHandle
GetProcessHeap
HeapFree
HeapAlloc
DeleteCriticalSection
SetThreadStackGuarantee
InitializeCriticalSectionEx
LeaveCriticalSection
CreateIoCompletionPort
PostQueuedCompletionStatus
EnterCriticalSection
EncodePointer
FlsGetValue
GetQueuedCompletionStatusEx
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetStartupInfoW
SetUnhandledExceptionFilter
GetConsoleOutputCP
ReadFileEx
WriteFileEx
GetConsoleMode
WriteConsoleW
ReadFile
GetOverlappedResult
ReadConsoleW
GetEnvironmentVariableW
GetCommandLineW
GetCurrentDirectoryW
DeviceIoControl
GetWindowsDirectoryW
GetSystemDirectoryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
CancelIo
GetStdHandle
HeapReAlloc
GetSystemInfo
UnmapViewOfFile
VirtualProtect
CreateFileMappingW
MapViewOfFile
GetSystemTimePreciseAsFileTime
ntdll
RtlNtStatusToDosError
NtCreateFile
NtCancelIoFileEx
NtReadFile
NtOpenFile
NtCreateNamedPipeFile
NtDeviceIoControlFile
NtWriteFile
oleaut32
SysStringLen
VariantClear
GetErrorInfo
SysFreeString
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
combase
CoIncrementMTAUsage
CoCreateFreeThreadedMarshaler
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
WakeByAddressSingle
WaitOnAddress
prntvpt
PTConvertPrintTicketToDevMode
PTGetPrintCapabilities
PTOpenProvider
PTMergeAndValidatePrintTicket
PTCloseProvider
PTReleaseMemory
ole32
CoUninitialize
CoCreateInstance
CoInitializeEx
windows.data.pdf
PdfCreateRenderer
shlwapi
SHCreateMemStream
gdi32
EndDoc
DeleteObject
AbortDoc
SetICMMode
LineTo
MoveToEx
Ellipse
SelectObject
GetStockObject
DeleteDC
CreatePen
GetDeviceCaps
CreateDCW
StretchDIBits
StartPage
EndPage
StartDocW
SetStretchBltMode
SetBrushOrgEx
winspool.drv
EnumPrintersW
OpenPrinterW
DocumentPropertiesW
ClosePrinter
GetDefaultPrinterW
d3d11
D3D11CreateDevice
d2d1
D2D1CreateFactory
ws2_32
WSASocketW
ioctlsocket
recv
send
setsockopt
getaddrinfo
shutdown
connect
WSAGetLastError
getsockopt
closesocket
WSADuplicateSocketW
accept
getsockname
WSAIoctl
WSAStartup
bind
listen
freeaddrinfo
Name
.text
Size
34.8MB
Virtual Size
34.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
34.7MB
Virtual Size
34.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
282KB
Virtual Size
284KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
978KB
Virtual Size
978KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
67KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=143, id=261, version=33145,
count=71, id=260, version=33145,
count=31, id=259, version=33145,
count=9, id=259, version=35721,
count=16, id=260, version=35721,
count=40, id=261, version=35721,
count=218, id=1, productName=Unmarked objects,
count=297, productName=Unmarked objects (old),
count=1, id=255, version=36260,
count=1, id=258, version=36260,
photocraft-0.9.0-windows-x64-portable/photocraft.exe
- IMPHASH c34c4fe1b35b147c6b67fc4b91fc840d
- SHA256 93793417f43b66dd0ee39b36a99aa4a71183e5d1c4331ea828eb8655f3a1bcfc
- MD5 b9cb7092640b6cb6e69b43a8ea903a40
- SHA1 27325f9ee2ec6c2f499c3e22404772b4561f3e8b
- SHA512 f50f70baab6b2f1f35234827a875b6df13542872ed66fa2b3eb144708105d6b65ca637c956683df288a1ff87ad62119aa91ed59f313cc2c8739c80a734c416b2
- SSDEEP 786432:NJ0fGXR9j6pJgG1vbpXTYBSI/Ovlnym2lSKR6QnI61:NJ0fM67gevbpDL+sQ3
- TLSH T128386E45F69FB86CE096CCB0D30686236E2530CB172A69FB45D481793F7DBE09B28716
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
26:bb:24:27:91:b6:18:5f:2b:7f:44:76:b6:01:e4:22:96:82:d3:9e:93:de:33:6f:d5:de:ff:fe:06:88:dc:0a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Learning Machines Inc,O=Learning Machines Inc,L=Atlanta,ST=Georgia,C=US
Chains
Oct 14, 2026
CN=Learning Machines Inc,O=Learning Machines Inc,L=Atlanta,ST=Georgia,C=US
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Learning Machines Inc,O=Learning Machines Inc,L=Atlanta,ST=Georgia,C=US
Serial Number
33:00:08:68:55:e5:a5:2d:71:7c:1b:92:62:00:00:00:08:68:55
Issuer
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 13, 2026 - Oct 16, 2026
Subject
CN=Microsoft ID Verified CS AOC CA 04,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:16:31:92:8d:92:02:65:7b:9a:00:00:00:00:00:16
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 26, 2026 - Mar 26, 2031
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7D00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:5f:2a:e4:f8:23:45:bc:1a:49:00:00:00:00:00:5f
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 17, 2026 - Sep 14, 2027
Minor OS version
0
Major OS version
6
Entry point
57089008
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
photocraft.pdb
kernel32
GetFileInformationByHandle
FlushFileBuffers
IsValidCodePage
SetFileInformationByHandle
CreateFileW
WriteFileEx
GetFullPathNameW
SetLastError
SetHandleInformation
ReadFile
GetOverlappedResult
LockFileEx
CloseHandle
GlobalFree
SetFileTime
CreateDirectoryW
SetFileAttributesW
MoveFileExW
FindFirstFileExW
GetFinalPathNameByHandleW
DeleteFileW
DeviceIoControl
GetFileAttributesW
GetStringTypeW
CompareStringW
LCMapStringW
SetFilePointerEx
CancelIo
FindNextFileW
FindClose
GetModuleHandleExW
GetModuleFileNameW
FreeLibrary
HeapAlloc
HeapFree
GetCPInfo
GetProcessHeap
DuplicateHandle
GetACP
GetFileInformationByHandleEx
WriteFile
GetFileType
GetProcAddress
LoadLibraryW
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
RtlUnwindEx
LoadLibraryExA
RemoveVectoredExceptionHandler
RtlPcToFileHeader
RaiseException
FlsGetValue
CreateEventA
EncodePointer
GetUserPreferredUILanguages
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceFrequency
FlsSetValue
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
IsThreadAFiber
GetModuleHandleW
FlsAlloc
FlsFree
DeleteCriticalSection
SetWaitableTimer
CreateWaitableTimerExW
ReleaseMutex
CreateMutexA
LoadLibraryA
LocalFree
WaitForSingleObjectEx
ExitProcess
lstrlenW
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
SetThreadStackGuarantee
AddVectoredExceptionHandler
LoadLibraryExW
GetOEMCP
WaitForMultipleObjects
UnhandledExceptionFilter
GetExitCodeProcess
CreateProcessW
QueryPerformanceCounter
SleepEx
CompareStringOrdinal
GetCurrentProcessId
GetModuleHandleA
Sleep
GetCurrentProcess
LocaleNameToLCID
SetThreadErrorMode
FormatMessageW
CreateThread
GetCurrentThreadId
CreateEventW
GetCurrentThread
MultiByteToWideChar
WideCharToMultiByte
GetTempPathW
WaitForSingleObject
ReadFileEx
SwitchToThread
SetEvent
GetLastError
GlobalMemoryStatusEx
GetConsoleOutputCP
GetConsoleMode
WriteConsoleW
HeapReAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalSize
HeapSize
SetStdHandle
SetEnvironmentVariableW
GetCommandLineA
GetSystemTimeAsFileTime
GetSystemInfo
UnmapViewOfFile
VirtualProtect
GetEnvironmentVariableW
GetCommandLineW
CreateFileMappingW
MapViewOfFile
GetSystemTimePreciseAsFileTime
GetCurrentDirectoryW
GetStdHandle
GetEnvironmentStringsW
GetWindowsDirectoryW
FreeEnvironmentStringsW
GetSystemDirectoryW
bcryptprimitives
ProcessPrng
oleaut32
SysFreeString
GetErrorInfo
SafeArrayCreateVector
SetErrorInfo
SafeArrayPutElement
VariantClear
SysAllocStringLen
SysStringLen
user32
EnableMenuItem
GetSystemMenu
ShowWindow
GetClipCursor
GetWindowTextW
ClipCursor
ShowCursor
GetWindowTextLengthW
CreateIconIndirect
DestroyCursor
CreateWindowExW
RegisterClassExW
SetWindowDisplayAffinity
RegisterWindowMessageA
GetAsyncKeyState
TrackMouseEvent
DestroyIcon
SetCapture
MonitorFromRect
IsProcessDPIAware
GetPropW
MsgWaitForMultipleObjectsEx
ScreenToClient
GetRawInputData
GetMenu
ReleaseCapture
ValidateRect
EnumDisplaySettingsW
DefWindowProcA
RegisterClassExA
GetClassInfoExA
CreateIcon
GetDC
CreateWindowExA
SetPropW
SetWindowLongPtrW
CallWindowProcW
DefWindowProcW
GetDesktopWindow
ClientToScreen
GetWindowDC
RemovePropW
GetKeyboardState
MapVirtualKeyExW
MessageBeep
GetDisplayConfigBufferSizes
QueryDisplayConfig
SetWindowLongW
IsZoomed
GetWindowLongW
GetKeyState
GetCursorPos
EnumWindows
AdjustWindowRectEx
ToUnicodeEx
DestroyWindow
SetForegroundWindow
SendInput
MapVirtualKeyW
GetForegroundWindow
SetCursorPos
SetWindowTextW
GetWindowRect
FlashWindowEx
MonitorFromWindow
SetWindowPlacement
GetWindowPlacement
DisplayConfigGetDeviceInfo
ChangeDisplaySettingsExW
SetCursor
LoadCursorW
PostMessageW
InvalidateRgn
RedrawWindow
ReleaseDC
SetWindowPos
MonitorFromPoint
SendMessageW
GetSystemMetrics
GetActiveWindow
CreateIconFromResourceEx
RegisterRawInputDevices
IsIconic
GetMonitorInfoW
GetKeyboardLayout
GetClientRect
EnumDisplayMonitors
GetWindowLongPtrW
DispatchMessageW
TranslateMessage
PeekMessageW
IsWindowVisible
SystemParametersInfoA
GetClipboardData
RegisterClipboardFormatW
GetTouchInputInfo
CloseTouchInputHandle
RegisterTouchWindow
CloseClipboard
IsClipboardFormatAvailable
EmptyClipboard
SetClipboardData
OpenClipboard
advapi32
RevertToSelf
ImpersonateAnonymousToken
RegGetValueW
gdi32
GetPixelFormat
SetPixelFormat
AbortDoc
DescribePixelFormat
ChoosePixelFormat
EndDoc
SetBitmapBits
CreateBitmap
CreateRectRgn
CreateCompatibleDC
MoveToEx
SwapBuffers
CreateCompatibleBitmap
BitBlt
GetDIBits
Ellipse
SelectObject
GetStockObject
CreatePen
StretchDIBits
StartPage
EndPage
StartDocW
SetBrushOrgEx
SetStretchBltMode
SetICMMode
DeleteObject
LineTo
DeleteDC
GetDeviceCaps
CreateDCW
ntdll
NtWriteFile
NtCreateNamedPipeFile
NtCreateFile
RtlNtStatusToDosError
NtReadFile
NtOpenFile
shell32
SHCreateItemFromParsingName
DragFinish
DragQueryFileW
SHGetKnownFolderPath
combase
CoCreateFreeThreadedMarshaler
CoIncrementMTAUsage
CoTaskMemFree
ole32
RegisterDragDrop
OleInitialize
CoInitializeEx
CoCreateInstance
CoUninitialize
RevokeDragDrop
shlwapi
SHCreateMemStream
winspool.drv
OpenPrinterW
EnumPrintersW
DocumentPropertiesW
GetDefaultPrinterW
ClosePrinter
ws2_32
send
recv
WSAGetLastError
WSADuplicateSocketW
accept
WSAStartup
bind
listen
freeaddrinfo
setsockopt
closesocket
WSASocketW
getaddrinfo
uiautomationcore
UiaGetReservedMixedAttributeValue
UiaRaiseAutomationEvent
UiaLookupId
UiaReturnRawElementProvider
UiaRaiseAutomationPropertyChangedEvent
UiaHostProviderFromHwnd
UiaGetReservedNotSupportedValue
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
WaitOnAddress
WakeByAddressSingle
prntvpt
PTConvertPrintTicketToDevMode
PTGetPrintCapabilities
PTOpenProvider
PTReleaseMemory
PTCloseProvider
PTMergeAndValidatePrintTicket
windows.data.pdf
PdfCreateRenderer
opengl32
wglCreateContext
wglGetProcAddress
wglGetCurrentContext
wglMakeCurrent
wglDeleteContext
dxgi
CreateDXGIFactory1
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
dwmapi
DwmEnableBlurBehindWindow
DwmSetWindowAttribute
d3d11
D3D11CreateDevice
d2d1
D2D1CreateFactory
imm32
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmAssociateContextEx
ImmGetCompositionStringW
uxtheme
SetWindowTheme
Name
.text
Size
55.7MB
Virtual Size
55.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
40.3MB
Virtual Size
40.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
289KB
Virtual Size
292KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
113KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=145, id=261, version=33145,
count=87, id=260, version=33145,
count=32, id=259, version=33145,
count=9, id=259, version=35721,
count=16, id=260, version=35721,
count=40, id=261, version=35721,
count=5, id=257, version=33145,
count=375, id=1, productName=Unmarked objects,
count=407, productName=Unmarked objects (old),
count=1, id=255, version=36260,
count=1, id=258, version=36260,
photocraft-0.9.0-windows-x64-portable/portable.txt
- SHA256 765cf8f8ffc8ee57f83f31e5eb2d453183e2e96ba97417ab9238717ccb27183b
- MD5 ff60eb6452864dbc39f09ca84189b7ea
- SHA1 b0cdd4cf5278cbe3f089e1ffa2b6011517c92276
- SHA512 7a03cb5de9688cc0f0f267bc0b23f6df7054d59333b48d5d53089fdc606b0d56e6335b903a15f1fdba4c3b48c72a30613b1416754a2b9d27e069dc15850b81ab
- TLSH T10CF0C0B6330731D607C0C0E0AD3EC7C1870FC02F929A3F2E241500C032899AA245D6E0
- MD5 SHA1 SHA512 TLSH