canon_crw.zip
- SHA256 0f4c4acf09c118e84309a9eec479998d5887417ebf9d09e6153c376b8bce7df4
General
- Target canon_crw.zip
- Size 7.3MB
- Sample261027-b8dk2axw6p
- SHA256 0f4c4acf09c118e84309a9eec479998d5887417ebf9d09e6153c376b8bce7df4
- MD5 7d56f8b209148f17f981df4796f463a7
- SHA1 21edaa6db11d1eaef4187026934da4fff2c53a4f
- SHA512 1ee7fd119816a90291ddab40320838774e0594adf976f110113ca30372ba30f6c617601100c48af19ab7f78d7a88258ce0e2a469eeaa4c437da279e22528a077
- SSDEEP 196608:V1IKDxIFiCEAk9CsoY78lnxXkcAq4vNt3RgPBE:V1vNIFxEAk9PollFUz3RgPBE
- TLSH T16D7633A86FFFF67E44B0DA35F9CA89E6294245B2970984B84C395E4FC2315F4A71F009
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- ACProtect 1.3x - 1.4x DLL software 38 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack001/DPPDLL.dll acprotect static1/unpack001/DPPLibCom.dll acprotect static1/unpack001/DPPRSC.dll acprotect static1/unpack001/DeImgT31.dll acprotect static1/unpack001/EDSDK.dll acprotect static1/unpack001/EdsImage.dll acprotect static1/unpack001/Mlib.dll acprotect static1/unpack001/Plugins/Crw/RDSDK.dll acprotect static1/unpack001/Plugins/Crw/RdCamDat.dll acprotect static1/unpack001/Plugins/Crw/deImg110.dll acprotect static1/unpack001/Plugins/Crw/deImg121.dll acprotect static1/unpack001/Plugins/Crw/deImg129.dll acprotect static1/unpack001/Plugins/Crw/deImg131.dll acprotect static1/unpack001/Plugins/Crw/deImg137.dll acprotect static1/unpack001/Plugins/Crw/deImg139.dll acprotect static1/unpack001/Plugins/Crw/deImg140.dll acprotect static1/unpack001/Plugins/Crw/deImg404.dll acprotect static1/unpack001/Plugins/Crw/pscDevUI.dll acprotect static1/unpack001/Plugins/Crw/pscParse.dll acprotect static1/unpack001/Plugins/Crw/rdDcd.dll acprotect static1/unpack001/Plugins/Crw/rdDvlp.dll acprotect static1/unpack001/Plugins/Crw/rdParse.dll acprotect static1/unpack001/Ucs32P.dll acprotect static1/unpack001/deImgJ10.dll acprotect static1/unpack001/deImgJ11.dll acprotect static1/unpack001/deImgJ12.dll acprotect static1/unpack001/deImgJ13.dll acprotect static1/unpack001/deImgJ14.dll acprotect static1/unpack001/deImgT10.dll acprotect static1/unpack001/deImgT2X.dll acprotect static1/unpack001/deImgT32.dll acprotect static1/unpack001/deImgT40.dll acprotect static1/unpack001/deImgT41.dll acprotect static1/unpack001/deImgT50.dll acprotect static1/unpack001/deImgT60.dll acprotect static1/unpack001/deImgT70.dll acprotect static1/unpack001/deImgT71.dll acprotect static1/unpack001/deImgT72.dll acprotect -
resource yara_rule static1/unpack001/DPPDLL.dll upx static1/unpack001/DPPLibCom.dll upx static1/unpack001/DPPRSC.dll upx static1/unpack001/DeImgT31.dll upx static1/unpack001/EDSDK.dll upx static1/unpack001/EdsImage.dll upx static1/unpack001/Mlib.dll upx static1/unpack001/Plugins/Crw/RDSDK.dll upx static1/unpack001/Plugins/Crw/RdCamDat.dll upx static1/unpack001/Plugins/Crw/deImg110.dll upx static1/unpack001/Plugins/Crw/deImg121.dll upx static1/unpack001/Plugins/Crw/deImg129.dll upx static1/unpack001/Plugins/Crw/deImg131.dll upx static1/unpack001/Plugins/Crw/deImg137.dll upx static1/unpack001/Plugins/Crw/deImg139.dll upx static1/unpack001/Plugins/Crw/deImg140.dll upx static1/unpack001/Plugins/Crw/deImg404.dll upx static1/unpack001/Plugins/Crw/pscDevUI.dll upx static1/unpack001/Plugins/Crw/pscParse.dll upx static1/unpack001/Plugins/Crw/rdDcd.dll upx static1/unpack001/Plugins/Crw/rdDvlp.dll upx static1/unpack001/Plugins/Crw/rdParse.dll upx static1/unpack001/Ucs32P.dll upx static1/unpack001/deImgJ10.dll upx static1/unpack001/deImgJ11.dll upx static1/unpack001/deImgJ12.dll upx static1/unpack001/deImgJ13.dll upx static1/unpack001/deImgJ14.dll upx static1/unpack001/deImgT10.dll upx static1/unpack001/deImgT2X.dll upx static1/unpack001/deImgT32.dll upx static1/unpack001/deImgT40.dll upx static1/unpack001/deImgT41.dll upx static1/unpack001/deImgT50.dll upx static1/unpack001/deImgT60.dll upx static1/unpack001/deImgT70.dll upx static1/unpack001/deImgT71.dll upx static1/unpack001/deImgT72.dll upx - Unsigned PE 47 IoCs
Checks for missing Authenticode signature.
resource unpack001/DPPDLL.dll unpack002/out.upx unpack001/DPPLibCom.dll unpack003/out.upx unpack001/DPPRSC.dll unpack004/out.upx unpack001/DeImgT31.dll unpack005/out.upx unpack001/EDSDK.dll unpack006/out.upx unpack001/EdsImage.dll unpack007/out.upx unpack001/Mlib.dll unpack008/out.upx unpack001/Plugins/Crw.dll unpack001/Plugins/Crw/RDSDK.dll unpack009/out.upx unpack001/Plugins/Crw/RdCamDat.dll unpack001/Plugins/Crw/deImg110.dll unpack001/Plugins/Crw/deImg121.dll unpack001/Plugins/Crw/deImg129.dll unpack001/Plugins/Crw/deImg131.dll unpack001/Plugins/Crw/deImg137.dll unpack001/Plugins/Crw/deImg139.dll unpack001/Plugins/Crw/deImg140.dll unpack001/Plugins/Crw/deImg404.dll unpack001/Plugins/Crw/pscDevUI.dll unpack001/Plugins/Crw/pscParse.dll unpack001/Plugins/Crw/rdDcd.dll unpack001/Plugins/Crw/rdDvlp.dll unpack001/Plugins/Crw/rdParse.dll unpack001/Ucs32P.dll unpack001/deImgJ10.dll unpack001/deImgJ11.dll unpack001/deImgJ12.dll unpack001/deImgJ13.dll unpack001/deImgJ14.dll unpack001/deImgT10.dll unpack001/deImgT2X.dll unpack001/deImgT32.dll unpack001/deImgT40.dll unpack001/deImgT41.dll unpack001/deImgT50.dll unpack001/deImgT60.dll unpack001/deImgT70.dll unpack001/deImgT71.dll unpack001/deImgT72.dll
File Explorer
-
canon_crw.zip.zip 7.3MB
-
DPPDLL.dll.dll 1.6MB
-
out.upx.dll 7.4MB
-
DPPLibCom.dll.dll 62KB
-
out.upx.dll 130KB
-
DPPRSC.dll.dll 511KB
-
out.upx.dll 2.5MB
-
DeImgT31.dll.dll 99KB
-
out.upx.dll 260KB
-
EDSDK.dll.dll 155KB
-
out.upx.dll 472KB
-
EdsImage.dll.dll .ps1 580KB
-
out.upx.dll 2.2MB
-
Mlib.dll.dll 76KB
-
out.upx.dll 172KB
-
Plugins/Crw.dll.dll 152KB
-
Plugins/Crw/RDSDK.dll.dll 104KB
-
out.upx.dll 348KB
-
Plugins/Crw/RdCamDat.dll.dll 99KB
-
Plugins/Crw/deImg110.dll.dll 70KB
-
Plugins/Crw/deImg121.dll.dll 74KB
-
Plugins/Crw/deImg129.dll.dll 80KB
-
Plugins/Crw/deImg131.dll.dll 82KB
-
Plugins/Crw/deImg137.dll.dll 106KB
-
Plugins/Crw/deImg139.dll.dll 107KB
-
Plugins/Crw/deImg140.dll.dll 108KB
-
Plugins/Crw/deImg404.dll.dll 126KB
-
Plugins/Crw/pscDevUI.dll.dll 70KB
-
Plugins/Crw/pscParse.dll.dll 90KB
-
Plugins/Crw/rdDcd.dll.dll 129KB
-
Plugins/Crw/rdDvlp.dll.dll 80KB
-
Plugins/Crw/rdParse.dll.dll 94KB
-
Readme_Canon.txt2KB
-
Ucs32P.dll.dll 276KB
-
deImgJ10.dll.dll 239KB
-
deImgJ11.dll.dll 239KB
-
deImgJ12.dll.dll 239KB
-
deImgJ13.dll.dll 247KB
-
deImgJ14.dll.dll 247KB
-
deImgT10.dll.dll 74KB
-
deImgT2X.dll.dll 108KB
-
deImgT32.dll.dll 93KB
-
deImgT40.dll.dll 192KB
-
deImgT41.dll.dll 194KB
-
deImgT50.dll.dll 180KB
-
deImgT60.dll.dll 180KB
-
deImgT70.dll.dll 182KB
-
deImgT71.dll.dll 196KB
-
deImgT72.dll.dll 196KB
DPPDLL.dll
- SHA256 014d693d56eb8b09c69e573ea994b0dc74f19e9476152af2b711e2492e26b846
- MD5 706260c95beae2a796c76fee69ee5fad
- SHA1 e338f6547a19b504588706a76351977357d2dfa0
- SHA512 0f28f9f6dab0260e4eb31b0946039f128737b2f806098ec2808cae9a0127679aadd9ba25fce50174b7d3fd229c7daaea835e84402d1bb0605d0e662879577e29
- SSDEEP 49152:yf7Fd4P8KSHul8KoXJ1tW58J4LD39z9UC/872:mFiSHz51458i/19UT
- TLSH T1547533EFCBF75D12D752603933255A0C32A6D92DE61FE54B0EF5A162C12982227E0B4F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7892496
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
BiCubic
BiLinear
BiLinear2
BiLinearL
ConvertColorSpace
ConvertColorSpace2
ConvertVif
ConvertVifP
CopyVifRgn
DIBToVif0
DIBToVif2
DuplicateVif
FreeVif
GNZPSE_applyRawRecipe
GNZPSE_createCameraOutProfile
GNZPSE_createCameraProfile
GNZPSE_decode
GNZPSE_decodeEx
GNZPSE_getCameraProfileName
GNZPSE_getCameraProfileNameOut
GNZPSE_getExifInfo
GNZPSE_getPictureStyle
GNZPSE_getPictureStyleEx
GNZPSE_getRawEvBiasValue
GNZPSE_getWhiteBalance
GNZPSE_getWorkColorSpace
GNZPSE_releaseProfile
GNZPSE_release_dec
GNZPSE_setClickWhiteBalance
GNZPSE_setPictureStyle
GNZPSE_setPictureStyleEx
GNZPSE_setRawEvBiasValue
GNZPSE_setWhiteBalance
GNZPSE_setWorkColorSpace
GNZPlugin_GetRecipeTagValue
GNZPlugin_GetVifEx
GNZPlugin_GetVifEx_
GNZPlugin_SaveVif
GNZPlugin_initDecodeParam
GNZPlugin_initEncodeParam
GNZSIM_applyRecipe
GNZSIM_decode
GNZSIM_decodeMem
GNZSIM_endDecode
GNZSIM_freeBayer
GNZSIM_releaseResult
GNZSIM_startDecode
GNZZB_decode
GNZZB_decodeMem
GNZ_ColorMatching
GNZ_ColorMatchingLite
GNZ_ColorMatchingLite2
GNZ_ColorMatchingLiteEx
GNZ_ColorMatchingLiteEx2
GNZ_CompositeVif
GNZ_CompositeVif_
GNZ_CompositeVif_preview
GNZ_IsDefaultDistortionModel
GNZ_IsNecessaryALOConversion
GNZ_IsNecessaryDefaultDistortion
GNZ_IsNecessaryShootingDistanceSlider
GNZ_IsPictureStyleAutoSupported
GNZ_abortDecode
GNZ_addFile2Batch
GNZ_addStampList
GNZ_allocRawCache
GNZ_allocRecipe
GNZ_allocRgbCache
GNZ_allowHalfDecode
GNZ_applyALO_forThumbnail
GNZ_applyBlueBlot
GNZ_applyBlueBlotEx
GNZ_applyColorAberrationCorrection
GNZ_applyDefaultDistortionCorrection
GNZ_applyDefaultDistortionCorrectionWithOffset
GNZ_applyDistortionCorrection
GNZ_applyDistortionCorrectionEx
GNZ_applyGeometricCorrection
GNZ_applyPSParam
GNZ_applyRawRGBRecipe
GNZ_applyRoundCrop
GNZ_applyStamp
GNZ_applyStampList
GNZ_applyToneMapping
GNZ_applyVignettingCorrection
GNZ_applyVignettingCorrectionEx
GNZ_applyVignettingCorrection_in
GNZ_applyWhiteBalance_forThumbnail
GNZ_applyWhiteBalance_forThumbnail_
GNZ_applyWhiteBalance_toNonInterporatedVif
GNZ_calcClickWhiteBalance_RAW
GNZ_calcClickWhiteBalance_RGB
GNZ_calcCropParameter
GNZ_calcImageSize_pixels
GNZ_calcImageSize_pixels2
GNZ_calcUnsharpValue
GNZ_calcUnsharpValueFromRecipe
GNZ_calcUnsharpValueFromRecipeEx
GNZ_calcUnsharpValueFromRecipeExWithVif
GNZ_calcUnsharpValueFromRecipeWithVif
GNZ_calcWhiteBalance_fromRawPixelValue
GNZ_canExpComposite
GNZ_canUseEmbeddedJPEG
GNZ_changePictureStyle
GNZ_checkAbortState
GNZ_checkModified_RAW
GNZ_checkModified_RGB
GNZ_checkPerseusLensDataEnable
GNZ_checkStampList
GNZ_checkUpdatedThumbnailImage
GNZ_combineStampList
GNZ_compareRecipe
GNZ_compositeNextVif
GNZ_compositeVif
GNZ_compositeVif_preview
GNZ_constructBatch
GNZ_convertCropSettings
GNZ_convertRawCache
GNZ_convertRecipeVersion
GNZ_copyLensCorrectionSetting
GNZ_copyLensParamInRawCache
GNZ_copyRawCache
GNZ_copyRawCacheToMemory
GNZ_copyRecipe
GNZ_copyRecipeParam
GNZ_copyRecipeParameter
GNZ_copyRecipeToMemory
GNZ_copyRgbCache
GNZ_copyStampList
GNZ_createALOXForm
GNZ_createALOXForm2
GNZ_createALOXForm3
GNZ_createColorMatchingXForm
GNZ_createColorMatchingXForm2
GNZ_createDPPXForm
GNZ_createDPPXForm2
GNZ_createDPPXForm3
GNZ_createHdri
GNZ_createMatchingXForm
GNZ_createMetadataForSAPP
GNZ_createMetadataForSAPPEX
GNZ_createModifiedMetadataForSAPP
GNZ_createPartialImage
GNZ_createPerseusLensListCacheByXML
GNZ_createProfileFromFile
GNZ_createProfileFromMem
GNZ_createProofMatchingXForm
GNZ_createProofMatchingXForm2
GNZ_createProofMatchingXForm3
GNZ_createRawCache
GNZ_createRawGamma
GNZ_createRecipeFile
GNZ_createRgbCache
GNZ_createScriptFile
GNZ_createStampListPacket
GNZ_createThumbnailData
GNZ_createUserSettingXForm
GNZ_createUserSettingXForm2
GNZ_createUserXForm
GNZ_decode
GNZ_decode16
GNZ_decode16WithDefaultDistortion
GNZ_decode16_
GNZ_decode8
GNZ_decode8_
GNZ_decodeCompositeVif
GNZ_decodePerseusBayerCache
GNZ_decode_
GNZ_deleteStampLlist
GNZ_destructBatch
GNZ_disposeLensCacheFromRawCache
GNZ_disposePerseusColorAbeCache
GNZ_disposePerseusFilterCache
GNZ_duplicateStampList
GNZ_dustRemoval
GNZ_dustRemoval_DDD
GNZ_encode
GNZ_endDecode
GNZ_endEncode
GNZ_endICCCache
GNZ_eraseStampListDiffImage
GNZ_execColorMatchingXform
GNZ_execColorMatchingXform2
GNZ_execColorMatchingXformEx
GNZ_execColorMatchingXformEx2
GNZ_execColorNoiseReduction
GNZ_execColorNoiseReduction_
GNZ_execLuminanceNoiseReduction
GNZ_execLuminanceNoiseReduction_
GNZ_execRAWRecipe12
GNZ_execRAWRecipe12_
GNZ_execRAWRecipe12_EX
GNZ_execRAWRecipe12_EX_
GNZ_execRAWRecipe_BW
GNZ_execRAWRecipe_BW_
GNZ_execRAWRecipe_forEnc
GNZ_execRAWRecipe_forEnc_
GNZ_execRAWRecipe_forEnc_EX
GNZ_execRAWRecipe_forEnc_EX_
GNZ_execRGBRecipe12
GNZ_execRGBRecipe12_
GNZ_execRGBRecipe16
GNZ_execRGBRecipe16_
GNZ_execRGBRecipe16_preview
GNZ_execRGBRecipe16_preview_
GNZ_execStampRecipe
GNZ_execStampRecipeEx
GNZ_free
GNZ_freeBList
GNZ_freeBatchTarget
GNZ_freeBayer
GNZ_freeDDDParam
GNZ_freeFRECIPE
GNZ_freeHdri
GNZ_freePerseusLensListCache
GNZ_freeRawCache
GNZ_freeRecipe
GNZ_freeRgbCache
GNZ_freeSFile
GNZ_freeStampMask
GNZ_getAFFrame
GNZ_getAFFrame_forQCT
GNZ_getALOParam
GNZ_getApplicationTransferFlag
GNZ_getArbitraryRotateAngle
GNZ_getArbitraryRotatedImageSize
GNZ_getArbitraryRotatedVif
GNZ_getAutoNRValue
GNZ_getBatchEntryCount
GNZ_getBatchEntryFilename
GNZ_getBatchFileList
GNZ_getBatchJPEGColorNRValue
GNZ_getBatchJPEGColorNRValuePx
GNZ_getBatchNRValue
GNZ_getCache_bayer
GNZ_getCache_exif
GNZ_getCameraID
GNZ_getCameraProfileName
GNZ_getCameraProfileNameOut
GNZ_getClickWBParam_RGBValue
GNZ_getClickWBParam_RawCache
GNZ_getColorBalance
GNZ_getColorControl_RAW
GNZ_getColorSpace
GNZ_getColorSpace_fromExif
GNZ_getColorSpace_fromExif_ignICC
GNZ_getCropSettings
GNZ_getCropSize
GNZ_getCropSize_Original
GNZ_getCustomData
GNZ_getCustomDataFromFile
GNZ_getCustomICCProfile
GNZ_getCustomProfileName
GNZ_getCustomProfileName2
GNZ_getDataFormatType
GNZ_getDefaultAndSelectedExtType
GNZ_getDefaultWhiteBalance_RAW
GNZ_getDevelopParam
GNZ_getDevelopParamPx
GNZ_getDevelopParam_fromDec
GNZ_getDevelopParam_fromDecPx
GNZ_getDistortionCorrectedImageMaxSize
GNZ_getDistortionCorrectedImageSize
GNZ_getDustCount
GNZ_getEV
GNZ_getExposureBiasValue
GNZ_getExtenderMagnification
GNZ_getFNumberValue
GNZ_getFileProperty
GNZ_getFileType
GNZ_getFilenameFromScriptFile
GNZ_getFirstPositionFromDDD
GNZ_getFocalLengthInfo
GNZ_getFullImageSize
GNZ_getGainControl_RAW
GNZ_getHdrAutoAlignStatus
GNZ_getHdrParam
GNZ_getHdriImageSize
GNZ_getHistgramPosition
GNZ_getICCProfileName
GNZ_getICCProfileName2
GNZ_getICCProfiles
GNZ_getImageInfoForPartialImage
GNZ_getInitialLensCorrectionSetting
GNZ_getLensCorrectedVif
GNZ_getLensCorrectedVifEx
GNZ_getLensCorrectionSetting
GNZ_getLensSliderInfo
GNZ_getMarkState
GNZ_getNextPositionFromDDD
GNZ_getOptionalBatchString
GNZ_getOrientation
GNZ_getOutputFileName
GNZ_getPerseusGain
GNZ_getPerseusLensDataFileId
GNZ_getPerseusMaxGain
GNZ_getPerseusMode
GNZ_getPictureStyle
GNZ_getProcessingMode
GNZ_getProjectionResizeRatio
GNZ_getRatingState
GNZ_getRawCache
GNZ_getRawCacheFromMemory
GNZ_getRawCacheSize
GNZ_getRawGamma
GNZ_getRawOnlyFlag
GNZ_getRawPixelValue
GNZ_getRecipe
GNZ_getRecipeFromMemory
GNZ_getRecipeSize
GNZ_getResizeParameter
GNZ_getRgbGamma
GNZ_getRgbSharpness
GNZ_getRoundCropSize
GNZ_getRoundCropSize_Original
GNZ_getRoundCroppedVif
GNZ_getScriptFilename
GNZ_getSharpnessMode
GNZ_getSharpnessValue
GNZ_getSharpnessValueEx
GNZ_getSharpnessValueExWithVif
GNZ_getShutterSpeedValue
GNZ_getStampDiffImage
GNZ_getStampEntry
GNZ_getStampList
GNZ_getStampListCount
GNZ_getStampListTail
GNZ_getStampList_original
GNZ_getStampNext
GNZ_getStampPrevious
GNZ_getStampTable
GNZ_getThumbnailData
GNZ_getTone
GNZ_getWBData
GNZ_getWBFromRawCache
GNZ_getWhiteBalance_RAW
GNZ_getWhiteBalance_RGB
GNZ_hasCopyStampEntry
GNZ_hasDDD
GNZ_initBatchTarget
GNZ_initDDDParam
GNZ_initExifInfo
GNZ_initFRECIPE
GNZ_initGnzGamma
GNZ_initHdrParam
GNZ_initHdriCreationSettings
GNZ_initHdriEntry
GNZ_initLensCorrectionSetting
GNZ_initPStyle
GNZ_initPictureStyle
GNZ_initRawCache
GNZ_initRawGamma
GNZ_initRecipe
GNZ_initRecipe_RAW
GNZ_initRecipe_RGB
GNZ_initRgbCache
GNZ_initSFile
GNZ_initSaveSettings
GNZ_isAvailableHdrAutoAlign
GNZ_isAvailablePerseus
GNZ_isConvertCropSettings
GNZ_isDPPJPEG
GNZ_isFisheye
GNZ_isLensCorrectionParamEnabled
GNZ_isMonochrome
GNZ_isMultipleExposureRaw
GNZ_isUsedCustomRawCurve
GNZ_lineStamp
GNZ_makeStampMask
GNZ_malloc
GNZ_modifyTimeInfoFormat
GNZ_parseAPP1Data
GNZ_parseXMP_Mini
GNZ_readCustomWBFile
GNZ_realloc
GNZ_reconstructStampList
GNZ_releaseColorMatchingXForm
GNZ_releaseExifInfo
GNZ_releaseProfile
GNZ_releaseStampList
GNZ_resetCropSettings
GNZ_retrieveLensTable
GNZ_rotateByRecipe
GNZ_saveFile
GNZ_saveFile2
GNZ_saveFileEx
GNZ_saveVif
GNZ_setALOParam
GNZ_setApplicationTransferFlag
GNZ_setArbitraryRotateAngle
GNZ_setBatchDefaultRecipe
GNZ_setBatchJPEGColorNRValue
GNZ_setBatchJPEGColorNRValuePx
GNZ_setBatchJPEGCompressionNR
GNZ_setBatchNRValue
GNZ_setCache_bayer
GNZ_setCache_exif
GNZ_setCalcuratedWhiteBalance_RAW
GNZ_setClickWhiteBalanceParam_RGB
GNZ_setClickWhiteBalance_RAW
GNZ_setClickWhiteBalance_RGB
GNZ_setClippingRegion
GNZ_setColorBalance
GNZ_setColorSpace
GNZ_setCriticalSection_forEC137
GNZ_setCropSettings
GNZ_setCropSize
GNZ_setCustomData
GNZ_setDecodeMode_forEnc
GNZ_setDecodeNRValue
GNZ_setDecodeTarget
GNZ_setDefaultNRValue
GNZ_setDefaultNRValuePx
GNZ_setDevelopParam
GNZ_setDevelopParamPx
GNZ_setExifInfo_forEnc
GNZ_setFalseColorFilter
GNZ_setFileType
GNZ_setFileType_forEnc
GNZ_setFileimage
GNZ_setFilename
GNZ_setGainControl_RAW
GNZ_setGammaCurve_RGB
GNZ_setHistgramPosition
GNZ_setICCProfile_forEnc
GNZ_setICCProfiles
GNZ_setJPEGCompressionNR
GNZ_setLensAberrationCorrection
GNZ_setLensCorrectionSettingEx
GNZ_setLensTable2RawCache
GNZ_setMarkState
GNZ_setOptionalBatchString
GNZ_setOrientation
GNZ_setOriginalMethod
GNZ_setOutputFileName
GNZ_setPerseusGain
GNZ_setPerseusLensListCache
GNZ_setPerseusMode
GNZ_setPictureStyle
GNZ_setProcessingMode
GNZ_setProjectionResizeRatio
GNZ_setQFactor_forEnc
GNZ_setRatingState
GNZ_setRawDecodeRegion
GNZ_setRawOnlyFlag
GNZ_setRecipe
GNZ_setRecipeFromFRECIPE
GNZ_setRecipe_forEnc
GNZ_setResizeParameter
GNZ_setRgbSharpness
GNZ_setRoundCropSize
GNZ_setSharpnessMode
GNZ_setStampDiffImage
GNZ_setStampListPacketToRecipe
GNZ_setStampListToRecipe
GNZ_setStampParameter
GNZ_setTone
GNZ_setUpdatedThumbnailFlag
GNZ_setUseAppendedThumbnail
GNZ_setWB2RawCache
GNZ_setWBData
GNZ_setWhiteBalance_RAW
GNZ_startDecode
GNZ_startEncode
GNZ_startICCCache
GNZ_syncRawCache
GNZ_terminateStampList
GNZ_terminateStampList2
GNZ_updateRecipeByDDD
GNZ_updateRecipeData
GNZ_validUserSettingStyle
GNZ_writeCustomWBFile
GNZ_writeRecipeFile
GaussianBlurVif
GetButtonID_WB
GetMenuID_Trim
GetMenuID_WB
GetMenuIDinv_Trim
GetMenuIDinv_WB
HalfVifRgn
Laplacian
LoadVif
Nearest
OverlapVif
PartOfVif
PrepareVif
PrepareVif0
PrepareVif2
PrepareVifP
PrepareVifP_bpl
ReducedSizeVif
ReducedSizeVif2
ResizeVif
Rotate
Rotate_byExif
SaveVif
ShapeThumbnail
TwiceVif
TwiceVifRgn
UCSCloseProfile
UCSCreateColorMatchingXform
UCSCreateXform
UCSDisableCache
UCSDisposeMapping
UCSDisposeXform
UCSEnableCache
UCSGetMappingFromProfile
UCSInitialize
UCSMatchPixmap
UCSOpenProfile
UCSTerminate
Unsharp
UnsharpL
UnsharpOriginal
UnsharpST
VifGetPixelSize
VifLPF
VifToDIB
VifToDIB_rev
Name
UPX0
Size
Virtual Size
6.0MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
19KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=126, version=50327,
count=152, id=42, version=9030,
count=30, id=125, version=41204,
count=1, id=64, productName=VS2002 (.NET) build 9466, version=9466,
count=2, id=42, version=8803,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=145, id=1, productName=Unmarked objects,
count=3, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=10, version=8966,
count=8, id=132, productName=VS2008 build 21022, version=21022,
count=319, id=125, productName=VS2005 build 50727, version=50727,
count=77, id=110, productName=VS2005 build 50727, version=50727,
count=203, id=109, productName=VS2005 build 50727, version=50727,
count=1778, productName=Unmarked objects (old),
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
out.upx
- SHA256 c7042a1aded1e242379bc6cb91ffc12f0217b8e8c366746839a0737defe98ff1
- MD5 64709d45ea352cf96a265464b208927e
- SHA1 d159b4f4c6cb0c371d07b1e799b331c23aefa919
- SHA512 fbee41fc0f4907d4a5013473bdda920b589c794bb75b6703f09542b2afe4449cdfc3115b0de0d06ecf03e25ed6aa27540fcaa891e4a4d13f0c23f281c6ac2d45
- SSDEEP 98304:NQsD2f4R35FSdwyKEJkJlDDkHd4Psfe8p:nK4rnyKEJkJjnK
- TLSH T1FD766C91FAD78AE6C5920831202BB23B9635DF06472CDB93FB917F25FC727509D66208
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5983
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
5.1MB
Virtual Size
5.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
388KB
Virtual Size
386KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data1
Size
4KB
Virtual Size
320B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
4KB
Virtual Size
193B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
4KB
Virtual Size
344B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
DATA
Size
312KB
Virtual Size
310KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
120KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=126, version=50327,
count=152, id=42, version=9030,
count=30, id=125, version=41204,
count=1, id=64, productName=VS2002 (.NET) build 9466, version=9466,
count=2, id=42, version=8803,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=145, id=1, productName=Unmarked objects,
count=3, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=10, version=8966,
count=8, id=132, productName=VS2008 build 21022, version=21022,
count=319, id=125, productName=VS2005 build 50727, version=50727,
count=77, id=110, productName=VS2005 build 50727, version=50727,
count=203, id=109, productName=VS2005 build 50727, version=50727,
count=1778, productName=Unmarked objects (old),
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
DPPLibCom.dll
- SHA256 a97533b810dbafe1bf1dea580ebeeb037e5c018b40ecded7c2ce42f42beb5f98
- MD5 8897369cbb0472f2b5ca2746681433ed
- SHA1 92c8356bf3c30734f11cc6d1ebcd11544d25a294
- SHA512 ea060d3aadfbce663f7312fd0d5f3582fca0f612352519201bf98bb4e3c0f0e5745ffbf711197855b5a21bfc62efa6918b67b847866377783ac8e9f1005cc789
- SSDEEP 1536:pC+/9pR5cnehIQJUjmhrv1LJQvwmATiOuMKKTPHeH+M:th5NKQ6jODkvV0ioKSHu+M
- TLSH T1835301AEA949F28BCE87C67167EBCF58663F0144AFAD175CF45082191624A14322733A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
161744
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DppCacheImage
DppCreateFileStream
DppCreateFileStreamEx
DppCreateImageRef
DppCreateMemoryStream
DppCreateMemoryStreamFromPointer
DppGetImage
DppGetImageInfo
DppGetPointer
DppGetPropertyData
DppGetPropertySize
DppInitializeSDK
DppNotifyClientType
DppReflectImageProperty
DppRelease
DppSetProgressCallback
DppSetPropertyData
DppTerminateSDK
Name
UPX0
Size
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
58KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=32, id=149, productName=VS2008 build 21022, version=21022,
count=131, id=131, productName=VS2008 build 21022, version=21022,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=94, id=1, productName=Unmarked objects,
count=48, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
out.upx
- SHA256 f3075a8ae849d8e1ac0ee6619d9f2ec5c22ec272e27b083ca1b7e047e4dc97f5
- MD5 20f59d372ab3bd586ccb4696f60c7166
- SHA1 5f2ba4e71026dead8eef250b8de5a05cb0d922e5
- SHA512 30d9bb83384cf067df1a9bf90d6ff1b0b0be7a54222353316711ef28e262c622ab59a26d1d24ec65e24f4012b57c6b394bbc2a9bfe26a58caef1e5b3c416fd79
- SSDEEP 1536:SPGNuVDm/vbn+LHhoO7EiCiYUbvPq4e6rbkfu0kaOlXYf96Ax:yGNMm/T+7h9HH1tefKXYf96Ax
- TLSH T1CFD39E12B691C0B2C08B5878012AC7358F7A75758BF885C77F641B7F9F603D1AB32A99
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
37952
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
95KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=32, id=149, productName=VS2008 build 21022, version=21022,
count=131, id=131, productName=VS2008 build 21022, version=21022,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=94, id=1, productName=Unmarked objects,
count=48, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=146, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
DPPRSC.dll
- SHA256 f2ae41a84c67190ae184f84c00befdace10cd0087f42e578576664e21a658e85
- MD5 cf0c7239bbc0b8e5bc900438f3b98887
- SHA1 1ef492d2512d449ad6699f38347d50fec2b12e5f
- SHA512 4d7cedbfa89a56a2740958ca7629a9135bf18aa3334bb966d27269d422ab93d1106bfe5bc51f6b42f6bffbdda8a051e58d6af17788d86cd733fb5b046d7f7ae9
- SSDEEP 12288:WE5wmPsWBm2O1srH8pcuV6OCt3jdruYJW79t4sPqPc2:WEOSswO1UzPOW3jdrbJUbV2
- TLSH T1F2B41228D215075AF237C6FDB168AD99828E15D2E6C5011B7B78C7C398FEFE46889307
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
2603984
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
UPX0
Size
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
508KB
Virtual Size
508KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=16, id=149, productName=VS2008 build 21022, version=21022,
count=72, id=131, productName=VS2008 build 21022, version=21022,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=73, id=1, productName=Unmarked objects,
count=27, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
out.upx
- SHA256 d60e4beda921ad75578e4129c65fecc62ba3c29bec6f0997bd9eb23c5836a9e2
- MD5 812fad50fe14193014d49474d34d3670
- SHA1 b99ac376c940bf267efa025aaa63ff69ce50798a
- SHA512 33bacbb15239e90452d8358bb53bc1066e26d5aa27e95391a53d4034586d250a25eb25f6510b5f370af831b94315919aefb9570cdc4e6e9f2aabc8b050b5a384
- SSDEEP 12288:c6Vy+alUiSLEf84SAit8Jcj/w2b7ExKaREpOXnOXE0lyyywAyyywAyyywyyyDwt8:5BalUakAc8O42b7cEIyJU9
- TLSH T1CAC5F786699149C2D051A0769FB2E9F04BE33C26CD784DE636E80FDB7F96D1078CA760
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
4659
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=149, productName=VS2008 build 21022, version=21022,
count=72, id=131, productName=VS2008 build 21022, version=21022,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=73, id=1, productName=Unmarked objects,
count=27, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
DeImgT31.dll
- SHA256 22a7c950d60003b004495076c792eaf0ee166036f9b576cf7eed1687a5ef38dd
- MD5 8a3f1f91adaedbbd0073b712294bdd09
- SHA1 f023a813fb54017335e0b0e05118cfb283db3e5d
- SHA512 72345c8dbb98fa84b871a72203b220ef17337be98a31df595d63159b12edee087c4fe2a60655e2a54b9abbdf8b5e2c540fc94156f9444fa3069007eebbbbf683
- SSDEEP 1536:vd+t4qvfannw3EgLbUPrdVYd6C8fv4BeUTGToJAZ/o9kTjFajWWLNCp:F+6qun5g3Jd634BITos/o9kTjFa1RCp
- TLSH T147A3025773EE9F1CF8D3CE7122BEE94B241DA02402A7245A86F586C71CB7618963DCC5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
319936
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DEImg_CreateT31RawObject
DEImg_DevelopT31
DEImg_DisposeT31RawObject
DEImg_ReplaceStreamOfT31Raw
DEImg_UnFocusT31RawObject
Name
UPX0
Size
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
97KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=30, id=125, productName=VS2005 build 50727, version=50727,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=87, id=1, productName=Unmarked objects,
count=70, id=110, productName=VS2005 build 50727, version=50727,
count=101, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
out.upx
- SHA256 c9c20590073b1ad31fac4a8e611999ded408f38bd4fc1a04b5f657cc8c05fc0c
- MD5 4d48c69ddb4933319b09d904f8d7932d
- SHA1 fb81b171b4aca408d4277640f04510888a43d051
- SHA512 02224c19a84340ddb2dedac38ee9608e020cbbc5a10b4032d72af7e0d579ce9dbe8f0ea370cbababdc12a588243724b8fc2b03de490a5060bc225c3b50615b5d
- SSDEEP 6144:5LbuT11KGtf2RhgipLouzYGSjx0kDggpAOu:VCT11KGtf2RhgipL7UZd0kDggp
- TLSH T1F8445B00E282F632D8F751B6D9F792582E74BB61570981EF23EC19AE8F35AD02E31157
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
144809
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
192KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
32KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=30, id=125, productName=VS2005 build 50727, version=50727,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=87, id=1, productName=Unmarked objects,
count=70, id=110, productName=VS2005 build 50727, version=50727,
count=101, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
EDSDK.dll
- SHA256 5de3ced24d61d358acc9f5eaa5a38fa7bceb819d44c51fc4bd7877d611ca6990
- MD5 2626c4c04ba7e01d5dd26b176ef77ddb
- SHA1 fdff02e3c5d7c5b07f093070cd33281f31375864
- SHA512 8d104f6ee96f93eaa2650a4a3ace375626b58d7bc06dfd9cb85cd34c86eec64b11e137daf2a65433b2390c589d7ef2f2a931915ef9a1ec4c749834b8962870b1
- SSDEEP 3072:+ObWGJAHPvAE6VF+5R+glwn0iyN2JhCeia8VQv1jwFGJHjzNW/:+SVaIEA+r+8wn7zJhCXQv1jjp5
- TLSH T164F31250B328936ECC99243EC541C5F18CF6D979978A83B8DB60D8819CB4DEC4958FDB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
508880
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
EdsCacheImage
EdsCloseSession
EdsCopyData
EdsCreateEvfImageRef
EdsCreateFileStream
EdsCreateFileStreamEx
EdsCreateImageRef
EdsCreateMemoryStream
EdsCreateMemoryStreamFromPointer
EdsDeleteDirectoryItem
EdsDownload
EdsDownloadCancel
EdsDownloadComplete
EdsDownloadEvfImage
EdsDownloadThumbnail
EdsFormatVolume
EdsGetAttribute
EdsGetCameraList
EdsGetChildAtIndex
EdsGetChildCount
EdsGetDeviceInfo
EdsGetDirectoryItemInfo
EdsGetEvent
EdsGetImage
EdsGetImageInfo
EdsGetLength
EdsGetParent
EdsGetPointer
EdsGetPosition
EdsGetPropertyData
EdsGetPropertyDesc
EdsGetPropertySize
EdsGetVolumeInfo
EdsInitializeSDK
EdsOpenSession
EdsRead
EdsReflectImageProperty
EdsRelease
EdsRetain
EdsSaveImage
EdsSeek
EdsSendCommand
EdsSendStatusCommand
EdsSetAttribute
EdsSetCameraAddedHandler
EdsSetCameraStateEventHandler
EdsSetCapacity
EdsSetObjectEventHandler
EdsSetProgressCallback
EdsSetPropertyData
EdsSetPropertyEventHandler
EdsTerminateSDK
EdsWrite
_EdsCreateCtgInfoRef@4
_EdsCreateDirectoryItemRef@20
_EdsCreatePsfRef@4
_EdsCreatePsfRefWithStream@8
_EdsCreateStream@8
_EdsDownloadCtgInfo@12
_EdsGetCameraSupport@24
_EdsGetDispInfoData@20
_EdsGetDispInfoSize@16
_EdsGetGpsLogCurrentHandle@8
_EdsGetInnerDevelopParamData@16
_EdsGetInnerDevelopParamSize@12
_EdsGetMusicInfo@16
_EdsIsSupportCamera@8
_EdsRequestInnerDevelopArtFilterStart@24
_EdsRequestInnerDevelopEnd@8
_EdsRequestInnerDevelopParamChange@8
_EdsRequestInnerDevelopRawStart@8
_EdsRequestInnerDevelopResizeStart@16
_EdsSavePsfRef@12
_EdsSetFramePoint@12
_EdsSetInnerDevelopParamData@16
_EdsSetLvPcFlavoreditMode@12
_EdsSetLvPcFlavoreditParam@16
_EdsSetRating@8
_EdsUpload@20
Name
UPX0
Size
Virtual Size
344KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
150KB
Virtual Size
152KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=126, version=50327,
count=25, id=125, productName=VS2005 build 50727, version=50727,
count=127, id=109, productName=VS2005 build 50727, version=50727,
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=110, version=41204,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=172, id=1, productName=Unmarked objects,
count=1, id=109, version=41204,
count=93, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
out.upx
- SHA256 98c7bf6e6699fc735fb4c53be9e334d7924694f415d9378481577755aa7bdfdd
- MD5 ff8c0cb3d8bcd49b3fc9418ed487ca00
- SHA1 5dd6c0427900ac1cbd858841658b19128ad1bfcd
- SHA512 cb98dd5763f7645e8704e1e0b7f4c2ac6f25143b4be3f684567616f87ee19e61180c6eee430039d2b957ff7123719034ba2cc103210869736ba24ed2c5d4dc40
- SSDEEP 6144:P3jzpLRs3CLzqNws7jxyRsnrYAyulw991XYOoP81:PzzpLRwCLzE3/xyUcuoXYR
- TLSH T1D4A46C423BC5C0B4D90F1171282AD35EE67FD2A957E827C39AE47E2A8D502D12D3729F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
266320
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
336KB
Virtual Size
333KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
88KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=126, version=50327,
count=25, id=125, productName=VS2005 build 50727, version=50727,
count=127, id=109, productName=VS2005 build 50727, version=50727,
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=110, version=41204,
count=15, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=172, id=1, productName=Unmarked objects,
count=1, id=109, version=41204,
count=93, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
EdsImage.dll
- SHA256 01e08a5954ffaa4ddd4d8125240c238e053c67c66426564da33f1dd19c9f187b
- MD5 46dc435f2be669d3ddfac6e2c32f10b0
- SHA1 f6e5e6f557aef01f49a0914b72b08eb36d34cfee
- SHA512 b900e5fc7a480a85aae21d7b279eb4b446ebde2d5e1ea74f125fdd277d37d0409de39b864b5f369c5a5fed6d36a37c7b3f7c78097cbaea5c259a2d1795b75b32
- SSDEEP 12288:grleXUTYp5udxiDjtVoxyvxkTMrLyQs+bPyhpSkVfuAbi:yBsztDvQMPM+b6hpjVn
- TLSH T17FC423793E754567C2B609BDA3CD85EFE4F950028EC544B8AA34B26E44C6903A0EF637
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2370896
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?PSParseSetDeveloped@@YGKPAUpslStream@@GG@Z
?_covnertColorSpacePropertiesWithColorSpaceEx@@YGKPAUpslStream@@PAPAUpsRuntimeTypeProperty@@G@Z
?_cropStream@@YGKPAUpslStream@@KK0@Z
EdsImgCacheImage
EdsImgCreateImageRef
EdsImgGetImage
EdsImgGetImageInfo
EdsImgInitialize
EdsImgReflectImageProperty
EdsImgSaveImage
EdsImgTerminate
_PSCode_Close@4
_PSCode_CloseQuantizer@4
_PSCode_CreateExifTiffInfoObject@12
_PSCode_CreateExifTiffInfoObjectFromPwrProps@28
_PSCode_CreateExifTiffInfoObjectFromPwrPropsEx@32
_PSCode_DecodeView@20
_PSCode_EncodeView@12
_PSCode_EncodeViewEx@16
_PSCode_EncodeView_WithJFIFOutput@16
_PSCode_EncodeView_with_Q@16
_PSCode_ExifTiffWriterOpen@24
_PSCode_FreeExifTiffInfoObject@4
_PSCode_GetExifTiffThumbnailRaw@16
_PSCode_Open@28
_PSCode_OpenQuantizer@20
_PSCode_Open_with_Q@32
_PSCode_QuantizeRows@16
_PSCode_RotateJPEG@16
_PSCode_TransferData@12
_PSDevelopCompareParamValues@12
_PSDevelopConvertToCIFFJPEG@40
_PSDevelopConvertToDCF@48
_PSDevelopConvertToDCFForZB@60
_PSDevelopConvertToDCFeX2@56
_PSDevelopConvertToDCFeX3@56
_PSDevelopConvertToDCFeX@52
_PSDevelopConvertToExifTiff@32
_PSDevelopConvertToExifTiffeX2@52
_PSDevelopConvertToExifTiffeX@48
_PSDevelopCopyClickWBCoefs@8
_PSDevelopCopyRawObjPrmToStrm@8
_PSDevelopCopyStrmPrmToRawObj@8
_PSDevelopCreatePluralRAWObject@8
_PSDevelopCreateRAWObject@8
_PSDevelopDisposeRAWObject@4
_PSDevelopEncodeJFIF@32
_PSDevelopEx@20
_PSDevelopGetAtCaptureThumbnail@20
_PSDevelopGetExtractJpegSize@12
_PSDevelopGetExtractJpegSize_ByModelName@12
_PSDevelopGetParamValue@16
_PSDevelopGetSplineArray@8
_PSDevelopGetSplineArrayEx@20
_PSDevelopGetSupportParamItemHead@8
_PSDevelopGetSupportParamItemNext@8
_PSDevelopGetSupportParamValueHead@12
_PSDevelopGetSupportParamValueNext@12
_PSDevelopGetThinImageSize@12
_PSDevelopGetThinImageSizeOfRAW_ByModelName@12
_PSDevelopGetThumbnailFromExifTiff@16
_PSDevelopIsSupportParamItem@12
_PSDevelopIsSupportParamValue@16
_PSDevelopLogPosToNormalPos@8
_PSDevelopNomalPosToLogPos@8
_PSDevelopNormalTblToLogTbl@8
_PSDevelopReadParamValueFile@12
_PSDevelopReduction@104
_PSDevelopReflectParamValues@8
_PSDevelopReplaceStreamOfRAW@8
_PSDevelopRotateBMP@12
_PSDevelopRotateJPEG@12
_PSDevelopRotatePropertiesWithRttArray@20
_PSDevelopSetAllParamValueToAtCapture@4
_PSDevelopSetParamValue@12
_PSDevelopUnFocusRAWObject@4
_PSDevelopWriteDevParamToRawEx@8
_PSDevelopWriteParamValueFile@12
_PSEstimateSoundProperties@20
_PSParseCreateAppMarkerData@24
_PSParseCreateAppMarkerDataEx@28
_PSParseCreateTiffTagData@24
_PSParseFreeAppMarkerData@4
_PSParseFreeTiffTagData@4
_PSParseFullViewFileStream@28
_PSParseFullViewFileStreamEx@32
_PSParseGetDCFThumbnail@8
_PSParseGetFileStream2@44
_PSParseGetFileStream@40
_PSParseGetICCProfileData@12
_PSParseGetIIMInfo@8
_PSParseGetJPEGInfo@8
_PSParseGetJPEGInfoEx@8
_PSParseGetRttIDLatest@4
_PSParseGetSOFData@8
_PSParseGetWAVEInfo@8
_PSParseHasCanonOptionalData@8
_PSParseMakePreserveIIMInfo@12
_PSParseReadPreserveIIMInfo@8
_PSParseReplaceIIMInfo@8
_PSParseReplaceOffsetOfOptionalData@8
_PSParseReplaceProperties2@24
_PSParseReplaceProperties@20
_PSParseSetIIMInfo@12
_PSParseSoundProperties@12
_PSParseStream2@28
_PSParseStream@24
_PSParseThumbnailFileStream@36
_PSParseThumbnailFileStreamEx2@44
_PSParseThumbnailFileStreamEx@40
__GetHeapRecordEntryPtr@32
_psParseCreateExifPropBuffer@20
_psParseCreateExifPropBufferEx@20
_psParseCreateExifProperty@12
_psParseCreateHeapObject@24
_psParseCreateHeapObjectEx2@28
_psParseCreateHeapObjectEx@24
_psParseCreateLossLessPropBuffer@20
_psParseCreateMakerNote@20
_psParseCreatePropertyBlock@36
_psParseExifProperty@8
_psParseFreeExifBuffer@4
_psParseFreeHeapObject@28
_psParseFreeMakerNoteBuffer@4
_psParseGetDCFMakerNote@12
_psParseGetExifPropBufferWithReplace@24
_psParseGetFileType@16
_psParseGetHeapObjectDeveloped@20
_psParseGetJpegDataFromPsRAW@12
_psParseGetLCDDataFromTiffRAW@16
_psParseGetMainImageFromCR2@12
_psParseGetOptionAreaData@12
_psParseGetPropHeapObject@24
_psParseGetPropertyData@16
_psParseGetTWAINThumbnailDataFromCR2@20
_psParseGetTWAINThumbnailDataFromTiffRAW@16
_psParseGetTagData@24
_psParseHeapObject@32
_psParseMergePropertiesIntoHeapObject@12
Name
UPX0
Size
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
572KB
Virtual Size
572KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
7KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=45, id=125, productName=VS2005 build 50727, version=50727,
count=18, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=286, id=109, productName=VS2005 build 50727, version=50727,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=137, id=1, productName=Unmarked objects,
count=128, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
out.upx
- SHA256 d89f2accdc908e4d269ae03eb5c0eb2f3465f5ac5643eb35e4ad9df9f859d17f
- MD5 a7d35a84c2f3f5573b3bf5913f8378f3
- SHA1 42d74e7493af2778c60ddb4d195130060126aa42
- SHA512 3b5e8a27db6b3b7e3e51e8872c4db4d14c40d78e7f24d49a944de9e89f0d0d1572f5099be88325accf4973dddf9d46dd7a1b4b0f66682a6bbae2c94ea177ae5d
- SSDEEP 49152:lprd5VCuC2YqOLACDksTSxnGX9+Egt9e4ucXS1N:nd5VDC2YqOLACDn2RGMEUYD
- TLSH T105B52A10E340D01AF88700736BB996F9787479715B8850D7B3C86FAA773A7E16A3178B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1525888
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
272KB
Virtual Size
269KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
64KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=45, id=125, productName=VS2005 build 50727, version=50727,
count=18, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=286, id=109, productName=VS2005 build 50727, version=50727,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=137, id=1, productName=Unmarked objects,
count=128, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Mlib.dll
- SHA256 68dd7e30c9586cb2342731f1097d8f80b0abc033b62b95afef345769689da7e7
- MD5 8fca3e7a2ced58117e4a54c5ab907ddf
- SHA1 cfc91581d767d69c0a75495a47d5d786258cab0d
- SHA512 9ab0fa9168a630078f4378ca53a7e20dd63ae98bb6ce8561dc80a472fc7fbff5fb0534ee25208b8bdff5e44f4ec0b08b3b86b9c7843284cea646b4d432512385
- SSDEEP 1536:qrUfqnZfYy724sWnu1P6ydOdwEof2aGydw2Uh/7zfbSHA/ONYLet:qgynOy7r3nsdiDJSl+/7zfbSIONMI
- TLSH T10A730203BBF8E811F0F286B6DABADD5B7E55BA748FE00206C51DA26DC46F714C845AC1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
181136
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
MLIBcalcLuckyEx
MLIBcalcLuckyExForPF3
MLIBcalcLuckyFromFileLUT
MLIBcalcLuckyFromLUT
MLIBcalcSplineArray
MLIBcalcSplineArrayforDotNet
MLIBconvertLABtoRGB
MLIBconvertLABtoRGBforDotNet
MLIBconvertRGBtoLAB
MLIBconvertRGBtoLABforDotNet
MLIBcreateCustomMLDataEX
MLIBcreateCustomMLDataEXForPF3forDotNet
MLIBcreateCustomMLDataEXforDotNet
MLIBcreateCustomMLDataFromComposing3DMLDatas
MLIBcreateCustomMLDataFromLUTforDotNet
MLIBcreateFileLUT
MLIBcreateRGBLUTforDotNet
MLIBreleaseCustomMLData
MLIBreleaseFileLUT
MLIBreleaseLUT
Name
UPX0
Size
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
73KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=27, id=110, productName=VS2005 build 50727, version=50727,
count=31, id=125, productName=VS2005 build 50727, version=50727,
count=94, id=109, productName=VS2005 build 50727, version=50727,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=76, id=1, productName=Unmarked objects,
count=14, id=113, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
out.upx
- SHA256 0c234ba3556a48e1943bb0eeb5018bca45a2d364ade289d4cd17dd9f0d3ceee4
- MD5 3d435618fb52c7fe0d639e1c1b9ae8ac
- SHA1 2305112bc143111e4ed88d8675fe6e27d054f65c
- SHA512 b639aa4b7ceeec290c12cd6185454c1d7301c3973d3f8aa37847a2a174715db5bc3555fcd27b13f70dba7f226e73cb72aeb3ae91da266a3bc876bf53d37688e0
- SSDEEP 3072:8p1gl9NkBJXiL2XZ1sU/DbwP5teFCMrvSnTFpC62yDjeAg0FubD:HkTtsUHwP5tLMWh3wAOb
- TLSH T19D048E10E4E1D0F0D95E43BC007143ABB6353B108392C6EBA7A86F979EB1791F67E619
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
75440
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
120KB
Virtual Size
119KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
900B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=27, id=110, productName=VS2005 build 50727, version=50727,
count=31, id=125, productName=VS2005 build 50727, version=50727,
count=94, id=109, productName=VS2005 build 50727, version=50727,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=76, id=1, productName=Unmarked objects,
count=14, id=113, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Plugins/Crw.dll
- IMPHASH ade76eb6b064dbb39a578d8f1bdf04fa
- SHA256 8f0458af85d4b560220b06041f8649226be7c43f458bc82896c354628da5a46e
- MD5 2c1dc47b90d730e38488d07010e6ce39
- SHA1 82f37b439efd19af13f817e0e7e22c353e9a19d6
- SHA512 53d41d7938a217057ef888cfe31e6a5e324a7ebca49c469a0e07717d7c9aaf991b33b5a427d22c9731c25de9b58325a6e26186ea4d51a66f5edfe0c7a9ee2a43
- SSDEEP 3072:9eomvu+DmBZiOprFMUjjT+RdY36eIzLoF4b9ldZPC:9eomG+yBTppkeIzLLJZ6
- TLSH T12FE38C91B692C0F5E54A09780856AB7F6F3B1B150079DF93EF10CEA3EC216B0E5253A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
79049
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalUnlock
GlobalLock
GlobalAlloc
FreeLibrary
GetTempPathA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
SetCurrentDirectoryW
SetCurrentDirectoryA
GetCurrentDirectoryW
GlobalFree
GlobalHandle
ReadFile
WriteFile
SetFilePointer
CloseHandle
GetFileSize
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
CreateFileA
GlobalSize
HeapAlloc
HeapFree
GetLastError
DeleteFileA
GetCommandLineA
GetVersion
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RaiseException
SetStdHandle
FlushFileBuffers
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
user32
LoadStringA
GetPlugInInfo
ReadCRW
Name
.text
Size
112KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=1, id=11, version=8047,
count=27, id=14, version=7299,
count=117, id=10, version=8047,
count=18, id=10, version=8966,
count=5, id=93, version=2179,
count=91, id=1, productName=Unmarked objects,
count=5, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Plugins/Crw/RDSDK.dll
- SHA256 9f0f6d5384e9fca519cd589f41d4f4662f2e5324fa5c36d344619f1da0d464a8
- MD5 9067665bcd96333d0a86f3d262be68d7
- SHA1 a25f6e64ede814db3fec053b52f8f8640b334ce5
- SHA512 a31bd7bda538465d9ccfb8a48116fcac5af32bf3525fb4e19ae31ba2581cbf19bde415faf204631069c8b87a2d85e49a837429f67d3db01f8f95bcd2bc7d1013
- SSDEEP 3072:zxt3ln/cCGcA8xi6k4tq95GW8+uufnN6I7a:r1UCGcNof/GF+PfN6
- TLSH T12CA31256E4C21AF7C4D95A31066E48582A73E83E70B565CBCB4C05CF370AE0AB69CB77
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
387184
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?RDApplyMyColorData@rdCRawSDK@@QAGKPAUcdStgMedium@@0PAUcdSize@@0P6GKKKK@ZKK@Z
RDApplyMyColorData
RDCloseRAWData
RDCopyClickWBCoefs
RDCopyRawObjPrmToStgMedium
RDCopyStgMediumPrmToRawObj
RDCreatePluralRAWObject
RDCreateRAWObject
RDDevelop
RDDisposeRAWObject
RDExtractMyColorDataFromPrm
RDFinishSDK
RDFlashDevParam
RDGetDevParam_WBCoefficient
RDGetDevThinSize
RDGetDevelopedImageData
RDGetFunctions
RDGetFunctions_i
RDGetFunctions_o
RDGetLibrarysVersion
RDGetMyColorDataInfo
RDGetMyColorDataProps
RDGetParamValue
RDGetRAWDevFaculty
RDGetRAWDevType
RDGetRAWDevelopParameterInfo
RDGetSDKVersion
RDGetSupportParamItemHead
RDGetSupportParamItemNext
RDGetSupportParamValueHead
RDGetSupportParamValueNext
RDIsSupportParamItem
RDIsSupportParamValue
RDMakeMyColorData
RDOpenRAWData
RDReflectParamValues
RDReplaceStgMediumOfRAW
RDSetAllParamValueToAtCapture
RDSetDevParam_ColorDepth
RDSetDevParam_ColorMatrix
RDSetDevParam_ColorSpace
RDSetDevParam_Contrast
RDSetDevParam_DigitalGain
RDSetDevParam_Edge
RDSetDevParam_Enhance
RDSetDevParam_FalseColorFilter
RDSetDevParam_FalseResolutionFilter
RDSetDevParam_Gamma
RDSetDevParam_Hue
RDSetDevParam_Linear
RDSetDevParam_PhotoEffect
RDSetDevParam_WB
RDSetMyColorDataProps
RDSetParamValue
RDStartSDK
RDUnFocusRAWObject
RDWriteDevParamToRAW
Name
UPX0
Size
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
99KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=6, productName=Unmarked objects (old),
count=10, id=11, version=8047,
count=26, id=14, version=7299,
count=119, id=10, version=8047,
count=44, id=11, version=8569,
count=357, id=1, productName=Unmarked objects,
count=17, id=19, version=8034,
count=12, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
out.upx
- SHA256 51f27f694a5637221c78c676bab1ef02120021b38107d538a028a4bcc10adda5
- MD5 de8e4e358ef94486ce712227c64aa9d8
- SHA1 80a82345e013b0fbeccf3f6563d981cef316b81a
- SHA512 78a4b8463e0796ba8148dcd075f2482e37d4cee2b68b0f30f1a3a2f270f4775ce225b75cb39f6be963845dc313e9f069aa0ee8c86ac7a0cd9df5eaba35a50e4d
- SSDEEP 3072:Hoq8Uu7xLKQ5gkLlEwHDT3A30h7o/HBxLDv0H2awCeghb3w6QNuP/sp/Xi/a:Hoq8xuQySlE4Akh2HBxIhxQuEs
- TLSH T1AE747C12B2E3C07ED2BB55B119591BB7BBF5EA405B22E5CBDBD0CD1C8D324C2863A211
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
60042
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
248KB
Virtual Size
247KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, productName=Unmarked objects (old),
count=10, id=11, version=8047,
count=26, id=14, version=7299,
count=119, id=10, version=8047,
count=44, id=11, version=8569,
count=357, id=1, productName=Unmarked objects,
count=17, id=19, version=8034,
count=12, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Plugins/Crw/RdCamDat.dll
- SHA256 8395062961bfea9979698ca07d720cc2f9f4aeb69f7a0de058f682ecb70a00c7
- MD5 5809a89897af1e2cb75cb36d4dbc8019
- SHA1 4faaa86211f9b33ac60b0cecd6f902749078aca4
- SHA512 2f94099b24b7930a4a7f2f4d247aff984dfff3d01d96bff2b9fb434784f5eedf5bc983e97b2db040733d3d0da9ab8a1a2a366cadc7a55f8c779912d5ebcf2110
- SSDEEP 3072:1/2pVk5Brb6W7zr9+OiwBaeXK+zK5GVqee:h2p0BF7s57ejuIV
- TLSH T129A312F931ED8C17C7339FBA039D29A3B554361D03B5068C0AA414BFB8C5B571AA6BE4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
633328
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
CDEnumCamModelName
CDGetDevicePropDesc
CDGetDevicePropValue
PSCamDataRelease
PSCamDataResetByConnection
PSCamDataResetByID
PSCamDataResetByModelName
PSEnumCamModelID
PSGetCamData
Name
UPX0
Size
Virtual Size
520KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
95KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=3, id=28, version=9178,
count=353, id=1, productName=Unmarked objects,
count=17, id=25, version=9210,
count=10, id=11, version=8047,
count=26, id=14, version=7299,
count=115, id=10, version=8047,
count=41, id=11, version=8569,
count=3, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Plugins/Crw/deImg110.dll
- SHA256 b6c74dfb743b6224b631f3d75f1ef6a412f9afe97629f1a658d749d54912dfb1
- MD5 6707654c637bd289e2ba9c16a44d518a
- SHA1 cab5a6971f07ee250eef7ab2981d05476a11a779
- SHA512 0a66bae57a404c19402f367b7028a55d7c6948b71febc2b0051fba52586f74b7049d474790e755b6146fcbed95667b8e6b148628c927bfc977ab0b01cc9744dd
- SSDEEP 1536:mnm4u7EaKthX4eKI9YLdH4GcSHdFjcBcSjBLfVBjRC0:mnmh7TKhXTKJBYGcS9KBc4pVBj40
- TLSH T14A63011D9FF81A89EC030D312A988690C2552D94D3D3DADEA9A16DE3FCF70702F86647
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
240752
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DEImg_DevelopEC110
_psGetCRWdevelopInfo@8
Name
UPX0
Size
Virtual Size
164KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
68KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=5, id=12, version=7291,
count=8, id=11, version=8047,
count=23, id=14, version=7299,
count=99, id=10, version=8047,
count=5, id=19, version=8034,
count=87, id=1, productName=Unmarked objects,
count=15, id=10, version=8966,
count=34, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=5, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Plugins/Crw/deImg121.dll
- SHA256 b843b49f534bad96bba99900feaab88ff822d3244761be8943222762faa5be5a
- MD5 e7c50293b78becfd9712d6b2ecff3714
- SHA1 93ea4a140f6bbfa37a26d1163a424b58d016fb67
- SHA512 fe805fda289569fcbce5be98913cb0d7c6368a5aad72cc1068e0b20d162f7603b62ecbf7155dbbe9d9edb508f84c23cc88f7775424df213f74a3abcb83fdba42
- SSDEEP 1536:3B+M3SgCifnMlOEJz98sOVStm3kDdtQ+KGmhDkyYeL:3B+M3JoHJqsJBhtQ+L0DkyYeL
- TLSH T10273F10D7D5069D6F97213331E8ACB54A9C2718894E9FD4BAC8ACDEC88F7670CB71062
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
257200
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DEImg_DevelopEC121
_psGetCRWdevelopInfo@8
Name
UPX0
Size
Virtual Size
176KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=12, version=7291,
count=8, id=11, version=8047,
count=22, id=14, version=7299,
count=75, id=10, version=8047,
count=5, id=19, version=8034,
count=84, id=1, productName=Unmarked objects,
count=16, id=10, version=8966,
count=36, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Plugins/Crw/deImg129.dll
- SHA256 0e171dbd441010f72c4b5ddae6dd92563a16b814d7d7536a588cfd6ea7bb1e52
- MD5 9e879b8c5d25b299492dbd7208bf2f8e
- SHA1 2342946217708274384c2f7cad01048b957a01c8
- SHA512 63e8b5fe21774b7b4f482c731595d98f52e3a5db717660475431803d29695e074bd359fcae4a1bce7b8eba0b7bf9599bc800b8178e7f8057e27d6b3282a001ff
- SSDEEP 1536:vcrzJz1r6FSSRdiA7GnTUjrzYFfYEBJ+V9jD1QyS/wVrHTQRGQ:U11rISSRdZ2TUKfYES6oVrHTQI
- TLSH T146830229718443B1D0F61A3C6CBE09C114A4A814BFB85E85E5CCCB7EFB94B615E05BD7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
271520
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DEImg_DevelopEC129
_psGetCRWdevelopInfo@8
Name
UPX0
Size
Virtual Size
184KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
78KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=12, version=7291,
count=8, id=11, version=8047,
count=23, id=14, version=7299,
count=94, id=10, version=8047,
count=3, id=19, version=8034,
count=84, id=1, productName=Unmarked objects,
count=16, id=10, version=8966,
count=36, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Plugins/Crw/deImg131.dll
- SHA256 88e3eef99bc09b0406d4102364a667933b9a26fe1bc42a8049bc6207cbb13b42
- MD5 e7f79f1a91d71395edf1a16902ae9f2b
- SHA1 f19bd0ceb2b8be3ca0f6b728aa5e631fe1092988
- SHA512 d4094bbf4a2f80a42915897523542497b046fd0f4ec209d465ad62ef62b9ad5320ef6fc1f264f79da24eda3492d4222128a0b672fbf9f1b9c2f56319d57b26e2
- SSDEEP 1536:6MHv4pud76hezP2nH+q6Ag0FmKkkfEXGs+QDM6dFSoBex:hkcs4Oeq6j0FRkkE+gdAoBe
- TLSH T1F183020462E6A5BBEE155E3E11D59ED3A8CDACD30F7BCA8D4C6B4A7C7440B68562030F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
273568
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DEImg_DevelopEC131
_psGetCRWdevelopInfo@8
Name
UPX0
Size
Virtual Size
184KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
80KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=12, version=7291,
count=8, id=11, version=8047,
count=23, id=14, version=7299,
count=105, id=10, version=8047,
count=3, id=19, version=8034,
count=86, id=1, productName=Unmarked objects,
count=16, id=10, version=8966,
count=36, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Plugins/Crw/deImg137.dll
- SHA256 7349a61b1ad797cd556a4b243cf2b3c2feefcf861c5697f1b57048e7749f107f
- MD5 eaa2b947b4e044a8b3231c643e7a4751
- SHA1 260e30722efb09648dd09b0de13b32cec5f9388a
- SHA512 7e5541f5434330b6585246bbdf7fb78900ac7dfce478a0860c12d921555c9ac50899e382bf85baa84b63d0e8c4ccce72afef137c0d8cd8e3c2f7f59bcf592202
- SSDEEP 1536:E5gRySfRSBXwecc/h8Obqu05zsRGjBqZR57SLhN0CndX932C551:E54fodf3/hzbqu05zJgZR1SIIv3/
- TLSH T1ECB3126755EE82C5E40500F20A181B026B7EBD400C5EF79EFEFBE49A2A7938C457887D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
326912
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DEImg_CreateEC137RawObject
DEImg_DevelopEC137
DEImg_DisposeEC137RawObject
DEImg_ReplaceStreamOfEC137Raw
DEImg_UnFocusEC137RawObject
_psGetCRWdevelopInfo@8
Name
UPX0
Size
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
104KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=12, version=7291,
count=30, id=14, version=7299,
count=2, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=3, id=19, version=8034,
count=87, id=1, productName=Unmarked objects,
count=117, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=51, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Plugins/Crw/deImg139.dll
- SHA256 bd3f2b881803b62d4a59d357aa2669ba8176c8b70aefee0f9d434f53cfdab91d
- MD5 2a96ee20aa11931ae4c5243b1b4564a7
- SHA1 561cf1a125ffd54480ac904f6eb5138a377acf11
- SHA512 8a72ea35de6612cf30cd9b8dcaff2ad6c7df082c0dda2e77e106f2136f525fbf86b068d52588dfe03dc614fb30db9701c892260322f19bad32922625378dd8f7
- SSDEEP 1536:cAEXFq1W87BzrbmnfhpjDC3C0f70JCt6JA84JCVi/zrOb0MYGjOqf2ka9xyG7R/:DEVq1W81cPj8HH8WQQMfWxyG7
- TLSH T156B31295F8F662A8E48E343E7B495581A07B3E49D33EFA543FBE5105003B2646972E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
323680
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DEImg_CreateEC139RawObject
DEImg_DevelopEC139
DEImg_DisposeEC139RawObject
DEImg_ReplaceStreamOfEC139Raw
DEImg_UnFocusEC139RawObject
_psGetCRWdevelopInfo@8
Name
UPX0
Size
Virtual Size
208KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
105KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=12, version=7291,
count=30, id=14, version=7299,
count=2, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=3, id=19, version=8034,
count=87, id=1, productName=Unmarked objects,
count=117, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=51, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Plugins/Crw/deImg140.dll
- SHA256 8f5bedaacff0e9facc13b315d9bd050056d1e2dc6c1e6a3067daedb30ecfad89
- MD5 f22b4bb6034a888ec1d1fb706e04498c
- SHA1 67f3109bc320b3e0930b0e8f08c23be2fb40965a
- SHA512 d1cf5df852ec8e0835cbb82dc6ce8cf0d600d1360298b9e64e7b222899bb69500d8a2afa8660bf867d15c2c9d72181a77eb959dd5f373942eda0a47519d74bdf
- SSDEEP 1536:ARGSOFvSvV/w0ub5q8yfl8+wJAVj9rm17AMI7pjXpXValu3x4YM0gRvaKRYoO292:vxSvu35Efl8vAVhrvbAlnu8aKRTnG31
- TLSH T121B30289737432EEF01851781AC613D5D2493BA9016AD398F8DBBB17B8F47E04C3B926
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
328752
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DEImg_CreateEC140RawObject
DEImg_DevelopEC140
DEImg_DisposeEC140RawObject
DEImg_ReplaceStreamOfEC140Raw
DEImg_UnFocusEC140RawObject
_psGetCRWdevelopInfo@8
Name
UPX0
Size
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
106KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=12, version=7291,
count=30, id=14, version=7299,
count=2, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=3, id=19, version=8034,
count=87, id=1, productName=Unmarked objects,
count=117, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=51, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Plugins/Crw/deImg404.dll
- SHA256 8c8ad6f884949905fabcd7229d332c21455feab50ba9ffafa12084f6a985e8dd
- MD5 82c839979b6a6c2aa4a4ad5772481882
- SHA1 28ff17c68b284a3ffb38c2bf5402a79ae6261744
- SHA512 6c3b6b92f8993e54a519b0610d725b63bfd4d648b8b76653779700e020875912ca085d474a59656111037eab316688d316c48b044364f2f66455e251de5d9256
- SSDEEP 3072:D7/0x0VLJxw9FFqSNb5lTdHCsNz28FN71c2cFuKtSXNxl6AyG:DdxXjsBisNzV371c2kw3lxy
- TLSH T186C312082EBC1FE1EE629F323D306E0C79E68808EB7ED59D7469D6596493C9700D1BB4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
458016
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DEImg_DevelopE010
DEImg_EnhanceGray
DEImg_EnhanceGray_Init
DEImg_EnhanceGray_Term
DEImg_Init
DEImg_PARcorrectRGB
DEImg_PARcorrectRGB_Init
DEImg_PARcorrectRGB_Term
DEImg_Term
_psGetCRWdevelopInfo@8
Name
UPX0
Size
Virtual Size
320KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
124KB
Virtual Size
124KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=11, version=8047,
count=22, id=14, version=7299,
count=92, id=10, version=8047,
count=5, id=19, version=8034,
count=110, id=1, productName=Unmarked objects,
count=83, id=10, version=8966,
count=20, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=5, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Plugins/Crw/pscDevUI.dll
- SHA256 05e238f115fc1a98d7c75e3b574e41e7fb05a2255b348337a1a8ef19c43cca5c
- MD5 642e6b2c2833fcec872d2e26f39bfe2e
- SHA1 b871739835744087ebecf5a1dcccb0ea7edc616d
- SHA512 1b0e84dc3c24b0f8f422f8a56aa82b9964bfc0cacbb00a29c287bab643a34f51527bb995602e5d9f38ecb0f3b697fe065b06f25d0c3fcf5c473292a50359ab43
- SSDEEP 1536:6MU4uceBKuBq7dScqHn3AM9k8vwKG8jyxkjwi:6M8cenBqIcqH3A2hPyxNi
- TLSH T1E963F15A73E7ED40F7B5D1B282938E4A5171DED812B1CF0B46F8386E2C35E112DC8A86
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
201056
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ShowDevParamsSettingUI
Name
UPX0
Size
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
65KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=395, id=1, productName=Unmarked objects,
count=15, id=19, version=8034,
count=17, productName=Unmarked objects (old),
count=10, id=11, version=8047,
count=26, id=14, version=7299,
count=92, id=10, version=8047,
count=54, id=11, version=8569,
count=1, id=10, version=8966,
count=13, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Plugins/Crw/pscParse.dll
- SHA256 b80f5cec4a8f4d4edb59c40924aef154cf4fd9e040eb959c0ea3ba63d496e068
- MD5 3f192b59869633bf79ce3f992a6baf44
- SHA1 c6ee26698a0ee804ba7076242ad5c6c4bf29144c
- SHA512 63d0171710d4b08cf822cb0f42cbe6aec96b749ae43d072eaa9ea46682677f4e4be5961eb9e923427281f9f748a84f2327b1134f7810906b493969e48dd27402
- SSDEEP 1536:GA5n3+ELDJq1A+n3CZj0qWTof7Wx5Pj+EfG5BusLsJc/YhLmweaWz7:rOEfkToj0qmPaEfPsuc2VWz
- TLSH T1EB93122B69BC5FE7CAD60B3472D7DA987B14B235029C2CE98D32350F285119FE8E8245
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
227264
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?PSParseSetDeveloped@@YGKPAUpslStream@@GG@Z
?_cropStream@@YGKPAUpslStream@@KK0@Z
_PSEstimateSoundProperties@20
_PSParseFullViewFileStream@28
_PSParseFullViewFileStreamEx@32
_PSParseGetDCFThumbnail@8
_PSParseGetFileStream2@44
_PSParseGetFileStream@40
_PSParseGetIIMInfo@8
_PSParseGetJPEGInfo@8
_PSParseGetRttIDLatest@4
_PSParseGetSOFData@8
_PSParseGetWAVEInfo@8
_PSParseMakePreserveIIMInfo@12
_PSParseReadPreserveIIMInfo@8
_PSParseReplaceIIMInfo@8
_PSParseReplaceProperties2@24
_PSParseReplaceProperties@20
_PSParseSoundProperties@12
_PSParseStream2@28
_PSParseStream@24
_PSParseThumbnailFileStream@36
_PSParseThumbnailFileStreamEx2@44
_PSParseThumbnailFileStreamEx@40
__GetHeapRecordEntryPtr@32
_psParseCreateExifPropBuffer@20
_psParseCreateExifPropBufferEx@20
_psParseCreateExifProperty@12
_psParseCreateHeapObject@24
_psParseCreateHeapObjectEx2@28
_psParseCreateHeapObjectEx@24
_psParseCreateLossLessPropBuffer@20
_psParseCreateMakerNote@20
_psParseExifProperty@8
_psParseFreeExifBuffer@4
_psParseFreeHeapObject@28
_psParseFreeMakerNoteBuffer@4
_psParseGetDCFMakerNote@12
_psParseGetExifPropBufferWithReplace@24
_psParseGetFileType@16
_psParseGetHeapObjectDeveloped@20
_psParseGetJpegDataFromPsRAW@12
_psParseGetLCDDataFromTiffRAW@16
_psParseGetPropHeapObject@24
_psParseGetTWAINThumbnailDataFromTiffRAW@16
_psParseHeapObject@32
_psParseMergePropertiesIntoHeapObject@12
Name
UPX0
Size
Virtual Size
132KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
86KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=12, version=7291,
count=1, id=11, version=8047,
count=28, id=14, version=7299,
count=88, id=10, version=8047,
count=69, id=1, productName=Unmarked objects,
count=3, id=19, version=8034,
count=15, id=10, version=8966,
count=3, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Plugins/Crw/rdDcd.dll
- SHA256 73f86b49a1e5bb2337656fbcb00e6d9d604eed7b299179ab122a98e063c07d81
- MD5 41be93e3efc472ef8edf81383695bb59
- SHA1 dcece317add50d43b15e763fc1e61bba22b6a14d
- SHA512 18442c0f71bd521951e94420773660891bf0c9cf72090521a552f6751482fb00e7a33da648153f90f8937c782f86f880c6375ba08b7e4cf4e07c62bdee08bc83
- SSDEEP 3072:SPPqhzD6L0II9lH4euSyC2XxT54lZzNWQakv:SXq5Dhp4SyCM4TJWQ
- TLSH T15ED31270CC9C8D69F0E605F508B1CBC5C396F945C75ACD9E9239E70690E2AB409ED678
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
374512
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
_PSCode_Close@4
_PSCode_CloseQuantizer@4
_PSCode_CreateExifTiffInfoObject@12
_PSCode_CreateExifTiffInfoObjectFromPwrProps@28
_PSCode_CreateExifTiffInfoObjectFromPwrPropsEx@32
_PSCode_DecodeView@20
_PSCode_EncodeView@12
_PSCode_EncodeViewEx@16
_PSCode_EncodeView_with_Q@16
_PSCode_ExifTiffWriterOpen@24
_PSCode_FreeExifTiffInfoObject@4
_PSCode_GetExifTiffThumbnailRaw@16
_PSCode_Open@28
_PSCode_OpenQuantizer@20
_PSCode_Open_with_Q@32
_PSCode_QuantizeRows@16
_PSCode_RotateJPEG@16
_PSCode_TransferData@12
Name
UPX0
Size
Virtual Size
236KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
126KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=11, version=8047,
count=25, id=14, version=7299,
count=118, id=10, version=8047,
count=5, id=19, version=8034,
count=98, id=1, productName=Unmarked objects,
count=1, id=11, version=8966,
count=81, id=10, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Plugins/Crw/rdDvlp.dll
- SHA256 f9abc6c6154ca14774bb4f01317ee893dcb0e48079b43fae7d09b75f4899b11e
- MD5 d96016fc6186ee2551d6339a0363120e
- SHA1 ddbd68eb3128d6910251ac5e1396dd1e87e88ddb
- SHA512 c3bfb63658f9fe7418b2db58ac9112d8408266a0645c10941be5d20e25ef417bb5e4dd49e2a837507ddc182848ad7e66eedd5ba8fc45a1575e5b2b932aa30841
- SSDEEP 1536:Bl1AJF8kvPsorz/496hhvHmQdn0/73tInyOQTizSdS756kb7WMUZ:Bl+J3Psoo9WvHm6G7dIn9jzSdS9Tb7
- TLSH T1E583023A702EAECAF68937B1255548C78675EB7B3027C9BB7950C3279442A097D1EF03
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
204288
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
PSDevelop
PSDevelopApplyMyColorData
PSDevelopConvertToCIFFJPEG
PSDevelopConvertToDCF
PSDevelopConvertToDCFeX
PSDevelopConvertToDCFeX2
PSDevelopConvertToExifTiff
PSDevelopConvertToExifTiffeX
PSDevelopConvertToExifTiffeX2
PSDevelopCopyClickWBCoefs
PSDevelopCopyRawObjPrmToStrm
PSDevelopCopyStrmPrmToRawObj
PSDevelopCreatePluralRAWObject
PSDevelopCreateRAWObject
PSDevelopDisposeRAWObject
PSDevelopEncodeJFIF
PSDevelopEx
PSDevelopExtractMyColorDataFromPrmStrm
PSDevelopFullView
PSDevelopFullViewE010
PSDevelopGetDllsVersion
PSDevelopGetExtractJpegSize
PSDevelopGetExtractJpegSize_ByModelName
PSDevelopGetMyColorDataProps
PSDevelopGetMyColorInfo
PSDevelopGetParamValue
PSDevelopGetRAWDevelopFaculties
PSDevelopGetRAWDevelopParameterInfo
PSDevelopGetSplineArray
PSDevelopGetSplineArrayEx
PSDevelopGetSupportParamItemHead
PSDevelopGetSupportParamItemNext
PSDevelopGetSupportParamValueHead
PSDevelopGetSupportParamValueNext
PSDevelopGetThinImageSize
PSDevelopGetThinImageSizeOfRAW_ByModelName
PSDevelopGetThumbnailFromExifTiff
PSDevelopIsSupportParamItem
PSDevelopIsSupportParamValue
PSDevelopLogPosToNormalPos
PSDevelopMakeMyColorData
PSDevelopMakeMyColorDataFromBinary
PSDevelopNomalPosToLogPos
PSDevelopNormalTblToLogTbl
PSDevelopReadAtCapDevParamFromRAW
PSDevelopReadDevParamFromRAW
PSDevelopReduction
PSDevelopReflectParamValues
PSDevelopReplaceStreamOfRAW
PSDevelopRotateBMP
PSDevelopRotateJPEG
PSDevelopSetAllParamValueToAtCapture
PSDevelopSetMyColorDataProps
PSDevelopSetParamValue
PSDevelopUnFocusRAWObject
PSDevelopWriteDevParamToRAW
PSDevelopWriteDevParamToRawEx
Name
UPX0
Size
Virtual Size
120KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
76KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=3, id=11, version=8047,
count=28, id=14, version=7299,
count=84, id=10, version=8047,
count=9, id=19, version=8034,
count=120, id=1, productName=Unmarked objects,
count=2, id=10, version=8966,
count=24, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=5, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Plugins/Crw/rdParse.dll
- SHA256 ed13227746db0a312f0d4747e9183da76bba4bc85d519c121fb79ab52048115f
- MD5 e9efacd213a8a68c7e1856ed40b0537c
- SHA1 a8e79ebb076e66996246625eeecc5805a492cdbe
- SHA512 76f5d2c222eaf8eb8b44b158ff3d4e322b8cd0128c2013147de324e4a2303ffab937228078527e12d9e616a23bd733e83eecddca3a7d8c6cfa030e7467acf6ef
- SSDEEP 1536:dLDoFN8mYBlCNYJKk4S3wrE9nXrr3Ywzv2zUEqpzmEh07LT7EB7MrcvCt2a:loYlCNCeSgr6XHYNWwEGLXE4MCQ
- TLSH T1D09312FA0F980DD7FDF0567C9D0C2C6ADB7AD54094A45B720F9A9A3134AD0C89A60D72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
234720
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?PSParseSetDeveloped@@YGKPAUpslStream@@GG@Z
?_cropStream@@YGKPAUpslStream@@KK0@Z
_PSEstimateSoundProperties@20
_PSParseFullViewFileStream@28
_PSParseFullViewFileStreamEx@32
_PSParseGetDCFThumbnail@8
_PSParseGetFileStream2@44
_PSParseGetFileStream@40
_PSParseGetIIMInfo@8
_PSParseGetJPEGInfo@8
_PSParseGetRttIDLatest@4
_PSParseGetSOFData@8
_PSParseGetSingleProperty@16
_PSParseGetWAVEInfo@8
_PSParseMakePreserveIIMInfo@12
_PSParseReadPreserveIIMInfo@8
_PSParseReplaceIIMInfo@8
_PSParseReplaceProperties2@24
_PSParseReplaceProperties@20
_PSParseReplaceSingleProperty@16
_PSParseSoundProperties@12
_PSParseStream2@28
_PSParseStream@24
_PSParseThumbnailFileStream@36
_PSParseThumbnailFileStreamEx2@44
_PSParseThumbnailFileStreamEx@40
__GetHeapRecordEntryPtr@32
_psParseCreateExifPropBuffer@20
_psParseCreateExifPropBufferEx@20
_psParseCreateExifProperty@12
_psParseCreateHeapObject@24
_psParseCreateHeapObjectEx2@28
_psParseCreateHeapObjectEx@24
_psParseCreateLossLessPropBuffer@20
_psParseCreateMakerNote@20
_psParseExifProperty@8
_psParseFreeExifBuffer@4
_psParseFreeHeapObject@28
_psParseFreeMakerNoteBuffer@4
_psParseGetDCFMakerNote@12
_psParseGetExifPropBufferWithReplace@24
_psParseGetFileType@16
_psParseGetHeapObjectDeveloped@20
_psParseGetJpegDataFromPsRAW@12
_psParseGetLCDDataFromTiffRAW@16
_psParseGetPropHeapObject@24
_psParseGetTWAINThumbnailDataFromTiffRAW@16
_psParseHeapObject@32
_psParseMergePropertiesIntoHeapObject@12
Name
UPX0
Size
Virtual Size
136KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
90KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=12, version=7291,
count=1, id=11, version=8047,
count=28, id=14, version=7299,
count=88, id=10, version=8047,
count=69, id=1, productName=Unmarked objects,
count=3, id=19, version=8034,
count=15, id=10, version=8966,
count=3, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Readme_Canon.txt
- SHA256 a07855bcf2b40ab5008bddbfb965ff2b53e8df35905da156b7f597ba6a01cf42
- MD5 ddf5eb7c7bdf61ff92bde6700be1d031
- SHA1 bcf7e991ea617df05cc6e2ebbfe8f32e91fda997
- SHA512 92214552e9ed3b46e7f5e0e9e3e4ad5cdb814db68e44eced5f5a827e71fd247dd445057e11b7750c9be9e75343a5630838c2e1206c1fc1c814403a986df72bbc
- TLSH T1184128AECE5E49721123E2AA988C0D9CF55B42C3334487A1B27704DF5F735EB985D938
- MD5 SHA1 SHA512 TLSH
Ucs32P.dll
- SHA256 5593021dc98fd6af0d13de056b09ea1484fb8399a1c26ec6546fbd3cc5be8584
- MD5 eff01277f915eb8a40bc4c5a96920b1e
- SHA1 50f2604507cbc20f71d83f64deb374568a176f74
- SHA512 45f6fbfca8493b28e8e3c19aa8586c34cf7425a3af9ceceeba3ffd8f4deddf4a4a1c46bbfdbed227bf66e8534a6efb329f16d8fdd35db7e00768aafe1f5b1d11
- SSDEEP 6144:QGgj7/4f1jVbjXgd2QzxjQazcwDaHDX6FXQqT33EGJNFHuLrZEzyFLzGrYo6HezQ:r2/W9jQdrNMtjX6JDT1PF8uyMYo
- TLSH T156541305771DDC31C8EF4AFD7D46C947902BA24359A3CA04CB241AA8BD9574C4AFE9F2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
796768
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
UCSActivateDeviceCache
UCSActivatePartialAdaptedViewingConditions
UCSActivatePredictedMeasurements
UCSAdjustBlackPoint
UCSCheckColors
UCSCheckColorsExt
UCSCheckExColors
UCSCheckPixmap
UCSCheckPixmapExt
UCSCloseProfile
UCSConvertColorNameToIndex
UCSConvertIndexToColorName
UCSCreateColorMatchingXform
UCSCreateColorMatchingXformFromProfileHandles
UCSCreateColorimetricToDeviceColorsXform
UCSCreateColorimetricToDeviceGamutCheckingXform
UCSCreateDeviceToColorimetricColorsXform
UCSCreateGamutCheckingXform
UCSCreateGamutCheckingXformFromProfileHandles
UCSCreateLinkProfile
UCSCreateLinkProfileHandle
UCSCreateTemplateProfile
UCSCreateVirtualRGBBasedICCProfile
UCSCreateXform
UCSCreateXformExt
UCSDecryptPrivateData
UCSDeleteProfile
UCSDisableCache
UCSDisposeGamutBoundaryDescription
UCSDisposeMapping
UCSDisposeProfileEnumerator
UCSDisposeSystemProfileDescriptor
UCSDisposeXform
UCSEnableCache
UCSEncryptPrivateData
UCSGetGamutBoundaryDescription
UCSGetGenericMonitorProfileDescriptor
UCSGetIndexNamedColorValue
UCSGetIndexNamedColorValueExt
UCSGetIndexProfileTag
UCSGetMS00CAMInfo
UCSGetMS00DeviceInfo
UCSGetMS00GMAInfo
UCSGetMappingFromProfile
UCSGetNamedColorValue
UCSGetNamedColorValueExt
UCSGetNamedProfileInfo
UCSGetOperationInfo
UCSGetOperationParms
UCSGetPITable
UCSGetPS2ColorRendering
UCSGetPS2ColorRenderingIntent
UCSGetPS2ColorSpace
UCSGetPartialProfileTag
UCSGetPrivateCAMInfo
UCSGetPrivateData
UCSGetPrivateDeviceInfo
UCSGetPrivateGMAInfo
UCSGetPrivateInfo
UCSGetPrivateSequence
UCSGetPrivateSequenceInfo
UCSGetProfileDescriptor
UCSGetProfileEnumerator
UCSGetProfileInfo
UCSGetProfileSpecificDescriptor
UCSGetProfileSpecificDescriptorExt
UCSGetProfileTag
UCSGetSysProfilePath
UCSGetSystemProfileDescriptor
UCSGetTagText
UCSGetUCCMSInfo
UCSGetXformInfo
UCSInitialize
UCSMatchColors
UCSMatchColorsExt
UCSMatchExColors
UCSMatchPixmap
UCSMatchPixmapExt
UCSOpenProfile
UCSOpenWCSProfiles
UCSOpenWCSProfilesExt
UCSOverridePlugIns
UCSOverridePlugInsExt
UCSRemoveProfileTag
UCSSaveProfile
UCSSaveProfileAs
UCSSetBlackPoint
UCSSetMS00CAMInfo
UCSSetMS00DeviceInfo
UCSSetMS00GMAInfo
UCSSetPITable
UCSSetPartialProfileTag
UCSSetPrivateCAMInfo
UCSSetPrivateData
UCSSetPrivateDeviceInfo
UCSSetPrivateGMAInfo
UCSSetPrivateIlluminantInfo
UCSSetPrivateIlluminantInfoWithColorTemp
UCSSetPrivateInfo
UCSSetPrivateSequence
UCSSetProfileInfo
UCSSetProfileTag
UCSSetProfileTagReference
UCSSetSystemProfileDescriptor
UCSTerminate
UCSValidateProfile
UCSXformToProfile
UCS_ActivateDeviceCache
UCS_ActivatePartialAdaptedViewingConditions
UCS_ActivatePredictedMeasurements
UCS_AdjustBlackPoint
UCS_CheckColors
UCS_CheckColorsExt
UCS_CheckExColors
UCS_CheckPixmap
UCS_CheckPixmapExt
UCS_CloseProfile
UCS_ConvertColorNameToIndex
UCS_ConvertIndexToColorName
UCS_CreateColorMatchingXform
UCS_CreateColorMatchingXformFromProfileHandles
UCS_CreateColorimetricToDeviceColorsXform
UCS_CreateColorimetricToDeviceGamutCheckingXform
UCS_CreateDeviceToColorimetricColorsXform
UCS_CreateGamutCheckingXform
UCS_CreateGamutCheckingXformFromProfileHandles
UCS_CreateLinkProfile
UCS_CreateLinkProfileHandle
UCS_CreateTemplateProfile
UCS_CreateVirtualRGBBasedICCProfile
UCS_CreateXform
UCS_CreateXformExt
UCS_DecryptPrivateData
UCS_DeleteProfile
UCS_DisableCache
UCS_DisposeGamutBoundaryDescription
UCS_DisposeMapping
UCS_DisposeProfileEnumerator
UCS_DisposeSystemProfileDescriptor
UCS_DisposeXform
UCS_EnableCache
UCS_EncryptPrivateData
UCS_GetGamutBoundaryDescription
UCS_GetGenericMonitorProfileDescriptor
UCS_GetIndexNamedColorValue
UCS_GetIndexNamedColorValueExt
UCS_GetIndexProfileTag
UCS_GetMS00CAMInfo
UCS_GetMS00DeviceInfo
UCS_GetMS00GMAInfo
UCS_GetMappingFromProfile
UCS_GetNamedColorValue
UCS_GetNamedColorValueExt
UCS_GetNamedProfileInfo
UCS_GetOperationInfo
UCS_GetOperationParms
UCS_GetPITable
UCS_GetPS2ColorRendering
UCS_GetPS2ColorRenderingIntent
UCS_GetPS2ColorSpace
UCS_GetPartialProfileTag
UCS_GetPrivateCAMInfo
UCS_GetPrivateData
UCS_GetPrivateDeviceInfo
UCS_GetPrivateGMAInfo
UCS_GetPrivateInfo
UCS_GetPrivateSequence
UCS_GetPrivateSequenceInfo
UCS_GetProfileDescriptor
UCS_GetProfileEnumerator
UCS_GetProfileInfo
UCS_GetProfileSpecificDescriptor
UCS_GetProfileSpecificDescriptorExt
UCS_GetProfileTag
UCS_GetSysProfilePath
UCS_GetSystemProfileDescriptor
UCS_GetTagText
UCS_GetUCCMSInfo
UCS_GetXformInfo
UCS_Initialize
UCS_MatchColors
UCS_MatchColorsExt
UCS_MatchExColors
UCS_MatchPixmap
UCS_MatchPixmapExt
UCS_OpenProfile
UCS_OpenWCSProfiles
UCS_OpenWCSProfilesExt
UCS_OverridePlugIns
UCS_OverridePlugInsExt
UCS_RemoveProfileTag
UCS_SaveProfile
UCS_SaveProfileAs
UCS_SetBlackPoint
UCS_SetMS00CAMInfo
UCS_SetMS00DeviceInfo
UCS_SetMS00GMAInfo
UCS_SetPITable
UCS_SetPartialProfileTag
UCS_SetPrivateCAMInfo
UCS_SetPrivateData
UCS_SetPrivateDeviceInfo
UCS_SetPrivateGMAInfo
UCS_SetPrivateIlluminantInfo
UCS_SetPrivateIlluminantInfoWithColorTemp
UCS_SetPrivateInfo
UCS_SetPrivateSequence
UCS_SetProfileInfo
UCS_SetProfileTag
UCS_SetProfileTagReference
UCS_SetSystemProfileDescriptor
UCS_Terminate
UCS_ValidateProfile
UCS_XformToProfile
Name
UPX0
Size
Virtual Size
508KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
267KB
Virtual Size
268KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=39, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=130, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=3, id=93, version=2179,
count=90, id=1, productName=Unmarked objects,
count=80, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
deImgJ10.dll
- SHA256 98ea9b1f056b905bedd6b05ffb948cbd12ee04cfc0bc68087e50c39f68089148
- MD5 27798a4e3ff3b83eb3b916697a6a4d27
- SHA1 b664a8896deffd6b213ee4e0eafdd80114dfbadf
- SHA512 e86e5c0334b872a6cb0dd6c61fe7a7fb03e3f0ad5fb8923e54a7c412da48f0c9428882d4dc18e16b67d857e0344796f73d193ff5a4dc7880958c15e5ecb43e20
- SSDEEP 6144:wMYHPqgMDavjY3gBk/ydEnFYzpXANu5ZxkHkRX4n0:wMJgMDavEMk/ydEFY1AXER7
- TLSH T1DF3423616F5CA731CC538FB6FCD9A9309936120322ED325D9E6D5B6CE026EC6E931344
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
616272
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?PSParseSetDeveloped@@YGKPAUpslStream@@GG@Z
?_cropStream@@YGKPAUpslStream@@KK0@Z
DEImg_CreateJ10RawObject
DEImg_DevelopJ10
DEImg_DisposeJ10RawObject
DEImg_ReplaceStreamOfJ10Raw
DEImg_UnFocusJ10RawObject
_PSEstimateSoundProperties@20
_PSParseCreateAppMarkerData@24
_PSParseCreateTiffTagData@24
_PSParseFreeAppMarkerData@4
_PSParseFreeTiffTagData@4
_PSParseFullViewFileStream@28
_PSParseFullViewFileStreamEx@32
_PSParseGetDCFThumbnail@8
_PSParseGetFileStream2@44
_PSParseGetFileStream@40
_PSParseGetICCProfileData@12
_PSParseGetIIMInfo@8
_PSParseGetJPEGInfo@8
_PSParseGetRttIDLatest@4
_PSParseGetSOFData@8
_PSParseGetWAVEInfo@8
_PSParseHasCanonOptionalData@8
_PSParseMakePreserveIIMInfo@12
_PSParseReadPreserveIIMInfo@8
_PSParseReplaceIIMInfo@8
_PSParseReplaceOffsetOfOptionalData@8
_PSParseReplaceProperties2@24
_PSParseReplaceProperties@20
_PSParseSetIIMInfo@12
_PSParseSoundProperties@12
_PSParseStream2@28
_PSParseStream@24
_PSParseThumbnailFileStream@36
_PSParseThumbnailFileStreamEx2@44
_PSParseThumbnailFileStreamEx@40
__GetHeapRecordEntryPtr@32
_psParseCreateExifPropBuffer@20
_psParseCreateExifPropBufferEx@20
_psParseCreateExifProperty@12
_psParseCreateHeapObject@24
_psParseCreateHeapObjectEx2@28
_psParseCreateHeapObjectEx@24
_psParseCreateLossLessPropBuffer@20
_psParseCreateMakerNote@20
_psParseExifProperty@8
_psParseFreeExifBuffer@4
_psParseFreeHeapObject@28
_psParseFreeMakerNoteBuffer@4
_psParseGetDCFMakerNote@12
_psParseGetExifPropBufferWithReplace@24
_psParseGetFileType@16
_psParseGetHeapObjectDeveloped@20
_psParseGetJpegDataFromPsRAW@12
_psParseGetLCDDataFromTiffRAW@16
_psParseGetMainImageFromCR2@12
_psParseGetOptionAreaData@12
_psParseGetPropHeapObject@24
_psParseGetTWAINThumbnailDataFromCR2@20
_psParseGetTWAINThumbnailDataFromTiffRAW@16
_psParseGetTagData@24
_psParseHeapObject@32
_psParseMergePropertiesIntoHeapObject@12
Name
UPX0
Size
Virtual Size
364KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
234KB
Virtual Size
236KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=33, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=96, id=1, productName=Unmarked objects,
count=143, id=109, productName=VS2005 build 50727, version=50727,
count=103, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
deImgJ11.dll
- SHA256 ba22eac338c294cae3f9b13f5b80b789b81184883c7c320e94b2edbe50ef84a8
- MD5 821e425f2d7868bd10fd153b015e6dbd
- SHA1 44819c5316647c22fe62d8b8bd9f27f15c252b5d
- SHA512 47b8fff0a12ad4684348e1cde680686226db8c4ef86b76afcab31d169a3351d3eafa6737609cf5469873e007f62d1fe00c6759eb1df52e436ee9bef9d71c267a
- SSDEEP 6144:lsr/DmTibXGbd5SJOuR8xz8RPENprbtZcPUjbDj4FklM:nTijmEouR8R8R8Nprbt1j4F0M
- TLSH T14D342321A89D8237E1B69B3F7C9CDCF154A919264FC9CB5AAD09D739B036270E504337
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
616336
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?PSParseSetDeveloped@@YGKPAUpslStream@@GG@Z
?_cropStream@@YGKPAUpslStream@@KK0@Z
DEImg_CreateJ11RawObject
DEImg_DevelopJ11
DEImg_DisposeJ11RawObject
DEImg_ReplaceStreamOfJ11Raw
DEImg_UnFocusJ11RawObject
_PSEstimateSoundProperties@20
_PSParseCreateAppMarkerData@24
_PSParseCreateTiffTagData@24
_PSParseFreeAppMarkerData@4
_PSParseFreeTiffTagData@4
_PSParseFullViewFileStream@28
_PSParseFullViewFileStreamEx@32
_PSParseGetDCFThumbnail@8
_PSParseGetFileStream2@44
_PSParseGetFileStream@40
_PSParseGetICCProfileData@12
_PSParseGetIIMInfo@8
_PSParseGetJPEGInfo@8
_PSParseGetRttIDLatest@4
_PSParseGetSOFData@8
_PSParseGetWAVEInfo@8
_PSParseHasCanonOptionalData@8
_PSParseMakePreserveIIMInfo@12
_PSParseReadPreserveIIMInfo@8
_PSParseReplaceIIMInfo@8
_PSParseReplaceOffsetOfOptionalData@8
_PSParseReplaceProperties2@24
_PSParseReplaceProperties@20
_PSParseSetIIMInfo@12
_PSParseSoundProperties@12
_PSParseStream2@28
_PSParseStream@24
_PSParseThumbnailFileStream@36
_PSParseThumbnailFileStreamEx2@44
_PSParseThumbnailFileStreamEx@40
__GetHeapRecordEntryPtr@32
_psParseCreateExifPropBuffer@20
_psParseCreateExifPropBufferEx@20
_psParseCreateExifProperty@12
_psParseCreateHeapObject@24
_psParseCreateHeapObjectEx2@28
_psParseCreateHeapObjectEx@24
_psParseCreateLossLessPropBuffer@20
_psParseCreateMakerNote@20
_psParseExifProperty@8
_psParseFreeExifBuffer@4
_psParseFreeHeapObject@28
_psParseFreeMakerNoteBuffer@4
_psParseGetDCFMakerNote@12
_psParseGetExifPropBufferWithReplace@24
_psParseGetFileType@16
_psParseGetHeapObjectDeveloped@20
_psParseGetJpegDataFromPsRAW@12
_psParseGetLCDDataFromTiffRAW@16
_psParseGetMainImageFromCR2@12
_psParseGetOptionAreaData@12
_psParseGetPropHeapObject@24
_psParseGetTWAINThumbnailDataFromCR2@20
_psParseGetTWAINThumbnailDataFromTiffRAW@16
_psParseGetTagData@24
_psParseHeapObject@32
_psParseMergePropertiesIntoHeapObject@12
Name
UPX0
Size
Virtual Size
364KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
234KB
Virtual Size
236KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=33, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=96, id=1, productName=Unmarked objects,
count=143, id=109, productName=VS2005 build 50727, version=50727,
count=103, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
deImgJ12.dll
- SHA256 d553fdb113adbd853a279e665bccfca1ad946927fd419dfd8d2203e5683f4138
- MD5 e16251786dd2de2717afad14d31df817
- SHA1 0891f657e59ae3af1e944a33db858dbbb43cae1d
- SHA512 7e9c86e7698b48e86f241afb27296a52299cf4a0c0bcf6187f8dbd79af305b1a9075c7ce7566cc2d27d1ef72573d3ba7da1878744e4757e744aaacf54213a49f
- SSDEEP 6144:MYGYqjMZ9+ilSEgFHRMDOip+lQajd86eLVVA/Ne3Qdv:MYhq0lfqReOKnVVAFekv
- TLSH T1B13412ECFCAEDE37D1C7DBF2AD4DCFBAED0F5012A24D8A1C5D44E956681491A3600621
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
615952
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?PSParseSetDeveloped@@YGKPAUpslStream@@GG@Z
?_cropStream@@YGKPAUpslStream@@KK0@Z
DEImg_CreateJ12RawObject
DEImg_DevelopJ12
DEImg_DisposeJ12RawObject
DEImg_ReplaceStreamOfJ12Raw
DEImg_UnFocusJ12RawObject
_PSEstimateSoundProperties@20
_PSParseCreateAppMarkerData@24
_PSParseCreateTiffTagData@24
_PSParseFreeAppMarkerData@4
_PSParseFreeTiffTagData@4
_PSParseFullViewFileStream@28
_PSParseFullViewFileStreamEx@32
_PSParseGetDCFThumbnail@8
_PSParseGetFileStream2@44
_PSParseGetFileStream@40
_PSParseGetICCProfileData@12
_PSParseGetIIMInfo@8
_PSParseGetJPEGInfo@8
_PSParseGetRttIDLatest@4
_PSParseGetSOFData@8
_PSParseGetWAVEInfo@8
_PSParseHasCanonOptionalData@8
_PSParseMakePreserveIIMInfo@12
_PSParseReadPreserveIIMInfo@8
_PSParseReplaceIIMInfo@8
_PSParseReplaceOffsetOfOptionalData@8
_PSParseReplaceProperties2@24
_PSParseReplaceProperties@20
_PSParseSetIIMInfo@12
_PSParseSoundProperties@12
_PSParseStream2@28
_PSParseStream@24
_PSParseThumbnailFileStream@36
_PSParseThumbnailFileStreamEx2@44
_PSParseThumbnailFileStreamEx@40
__GetHeapRecordEntryPtr@32
_psParseCreateExifPropBuffer@20
_psParseCreateExifPropBufferEx@20
_psParseCreateExifProperty@12
_psParseCreateHeapObject@24
_psParseCreateHeapObjectEx2@28
_psParseCreateHeapObjectEx@24
_psParseCreateLossLessPropBuffer@20
_psParseCreateMakerNote@20
_psParseExifProperty@8
_psParseFreeExifBuffer@4
_psParseFreeHeapObject@28
_psParseFreeMakerNoteBuffer@4
_psParseGetDCFMakerNote@12
_psParseGetExifPropBufferWithReplace@24
_psParseGetFileType@16
_psParseGetHeapObjectDeveloped@20
_psParseGetJpegDataFromPsRAW@12
_psParseGetLCDDataFromTiffRAW@16
_psParseGetMainImageFromCR2@12
_psParseGetOptionAreaData@12
_psParseGetPropHeapObject@24
_psParseGetTWAINThumbnailDataFromCR2@20
_psParseGetTWAINThumbnailDataFromTiffRAW@16
_psParseGetTagData@24
_psParseHeapObject@32
_psParseMergePropertiesIntoHeapObject@12
Name
UPX0
Size
Virtual Size
364KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
234KB
Virtual Size
236KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=33, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=96, id=1, productName=Unmarked objects,
count=143, id=109, productName=VS2005 build 50727, version=50727,
count=103, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
deImgJ13.dll
- SHA256 6b445b367fbae778689c2ff969dd4786f1fdef32b426e5c14546bfd1704496f2
- MD5 3fa013117fa8f4b4ad7490033b9e2a2e
- SHA1 3f73d3f6776b673529af971fbe2b09aabcfa87ba
- SHA512 c0556bece444e6856ba1c615383e3c802e56457993efebc0b35e4d6f91ec1b60ea172beff7f52ce26355cc571f91cc4d29765302a4fece1b18b1f63af87543ef
- SSDEEP 6144:iFGA7VF+C2ICD9QTfzaHvhmo0UBaH7SqEtr6Xuaeh1DDM:wG/LDGTAvd0lSqEAeh9DM
- TLSH T1D03423B27E9DB63BF047D636D57E1974AD0B4E5A07F62A5C4FC1B82214600E324B3B26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
644352
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?PSParseSetDeveloped@@YGKPAUpslStream@@GG@Z
?_cropStream@@YGKPAUpslStream@@KK0@Z
DEImg_CreateJ13RawObject
DEImg_DevelopJ13
DEImg_DisposeJ13RawObject
DEImg_ReplaceStreamOfJ13Raw
DEImg_UnFocusJ13RawObject
_PSEstimateSoundProperties@20
_PSParseCreateAppMarkerData@24
_PSParseCreateTiffTagData@24
_PSParseFreeAppMarkerData@4
_PSParseFreeTiffTagData@4
_PSParseFullViewFileStream@28
_PSParseFullViewFileStreamEx@32
_PSParseGetDCFThumbnail@8
_PSParseGetFileStream2@44
_PSParseGetFileStream@40
_PSParseGetICCProfileData@12
_PSParseGetIIMInfo@8
_PSParseGetJPEGInfo@8
_PSParseGetRttIDLatest@4
_PSParseGetSOFData@8
_PSParseGetWAVEInfo@8
_PSParseHasCanonOptionalData@8
_PSParseMakePreserveIIMInfo@12
_PSParseReadPreserveIIMInfo@8
_PSParseReplaceIIMInfo@8
_PSParseReplaceOffsetOfOptionalData@8
_PSParseReplaceProperties2@24
_PSParseReplaceProperties@20
_PSParseSetIIMInfo@12
_PSParseSoundProperties@12
_PSParseStream2@28
_PSParseStream@24
_PSParseThumbnailFileStream@36
_PSParseThumbnailFileStreamEx2@44
_PSParseThumbnailFileStreamEx@40
__GetHeapRecordEntryPtr@32
_psParseCreateExifPropBuffer@20
_psParseCreateExifPropBufferEx@20
_psParseCreateExifProperty@12
_psParseCreateHeapObject@24
_psParseCreateHeapObjectEx2@28
_psParseCreateHeapObjectEx@24
_psParseCreateLossLessPropBuffer@20
_psParseCreateMakerNote@20
_psParseExifProperty@8
_psParseFreeExifBuffer@4
_psParseFreeHeapObject@28
_psParseFreeMakerNoteBuffer@4
_psParseGetDCFMakerNote@12
_psParseGetExifPropBufferWithReplace@24
_psParseGetFileType@16
_psParseGetHeapObjectDeveloped@20
_psParseGetJpegDataFromPsRAW@12
_psParseGetLCDDataFromTiffRAW@16
_psParseGetMainImageFromCR2@12
_psParseGetOptionAreaData@12
_psParseGetPropHeapObject@24
_psParseGetTWAINThumbnailDataFromCR2@20
_psParseGetTWAINThumbnailDataFromTiffRAW@16
_psParseGetTagData@24
_psParseHeapObject@32
_psParseMergePropertiesIntoHeapObject@12
Name
UPX0
Size
Virtual Size
384KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
242KB
Virtual Size
244KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=33, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=102, id=1, productName=Unmarked objects,
count=157, id=109, productName=VS2005 build 50727, version=50727,
count=111, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
deImgJ14.dll
- SHA256 7ec1604903868ed1a6f3d822c251b402f668304febeff550ca584981519b9719
- MD5 e50dc19265a605320d04cac05a449b3f
- SHA1 b1c568edeb680670e24d0a4da6f8ee222a53c9ed
- SHA512 ce90a3fdb02ed4ccc9cff1f0a03472e52a5c865a7b4a429720510a1036f237b192b48e315b8d5f3f3d13f1b69e0a1d17c7f1d396e17e773d2499465d9947626d
- SSDEEP 6144:kJyGP366YrW4nEPyxqUBCw0kFIZH8me+oVHDzGN:Q366YrPnqSqU83kF/me+ADa
- TLSH T1683423B2DD2DE23BF8DB2838B577877CB476C01A623D9AC8CDF59042613689F9548643
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
644368
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?PSParseSetDeveloped@@YGKPAUpslStream@@GG@Z
?_cropStream@@YGKPAUpslStream@@KK0@Z
DEImg_CreateJ14RawObject
DEImg_DevelopJ14
DEImg_DisposeJ14RawObject
DEImg_ReplaceStreamOfJ14Raw
DEImg_UnFocusJ14RawObject
_PSEstimateSoundProperties@20
_PSParseCreateAppMarkerData@24
_PSParseCreateTiffTagData@24
_PSParseFreeAppMarkerData@4
_PSParseFreeTiffTagData@4
_PSParseFullViewFileStream@28
_PSParseFullViewFileStreamEx@32
_PSParseGetDCFThumbnail@8
_PSParseGetFileStream2@44
_PSParseGetFileStream@40
_PSParseGetICCProfileData@12
_PSParseGetIIMInfo@8
_PSParseGetJPEGInfo@8
_PSParseGetRttIDLatest@4
_PSParseGetSOFData@8
_PSParseGetWAVEInfo@8
_PSParseHasCanonOptionalData@8
_PSParseMakePreserveIIMInfo@12
_PSParseReadPreserveIIMInfo@8
_PSParseReplaceIIMInfo@8
_PSParseReplaceOffsetOfOptionalData@8
_PSParseReplaceProperties2@24
_PSParseReplaceProperties@20
_PSParseSetIIMInfo@12
_PSParseSoundProperties@12
_PSParseStream2@28
_PSParseStream@24
_PSParseThumbnailFileStream@36
_PSParseThumbnailFileStreamEx2@44
_PSParseThumbnailFileStreamEx@40
__GetHeapRecordEntryPtr@32
_psParseCreateExifPropBuffer@20
_psParseCreateExifPropBufferEx@20
_psParseCreateExifProperty@12
_psParseCreateHeapObject@24
_psParseCreateHeapObjectEx2@28
_psParseCreateHeapObjectEx@24
_psParseCreateLossLessPropBuffer@20
_psParseCreateMakerNote@20
_psParseExifProperty@8
_psParseFreeExifBuffer@4
_psParseFreeHeapObject@28
_psParseFreeMakerNoteBuffer@4
_psParseGetDCFMakerNote@12
_psParseGetExifPropBufferWithReplace@24
_psParseGetFileType@16
_psParseGetHeapObjectDeveloped@20
_psParseGetJpegDataFromPsRAW@12
_psParseGetLCDDataFromTiffRAW@16
_psParseGetMainImageFromCR2@12
_psParseGetOptionAreaData@12
_psParseGetPropHeapObject@24
_psParseGetTWAINThumbnailDataFromCR2@20
_psParseGetTWAINThumbnailDataFromTiffRAW@16
_psParseGetTagData@24
_psParseHeapObject@32
_psParseMergePropertiesIntoHeapObject@12
Name
UPX0
Size
Virtual Size
384KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
242KB
Virtual Size
244KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=33, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=102, id=1, productName=Unmarked objects,
count=157, id=109, productName=VS2005 build 50727, version=50727,
count=111, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
deImgT10.dll
- SHA256 0ac70c5950b36938bf16f5685f05e11b8b55389dc600579136b99d288c5cd5c1
- MD5 08d3ef03974d81d324dafbff385b9f84
- SHA1 018b370e3eb1cdd381fa8b473b2ea216e1710032
- SHA512 2d3d7f7c8410e638b17be36a4c6192a05a3b3b362723369a9f58c825ad8f8b78b55e5352bb5fb699564011fffec28f5479f4c65d62cc9a2d84c0733ff368bc0c
- SSDEEP 1536:ci7FHq6rHOF90T0kKR0sE9vbVttL/ofY0ZLvTn/5ddLi:31iGw0vxHLAfYK3hd5i
- TLSH T150730251179BCC19E4743E35373B898832B885A61A33DF896634F2EDED93345507E328
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
240944
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DEImg_CreateT10RawObject
DEImg_DevelopT10
DEImg_DisposeT10RawObject
DEImg_ReplaceStreamOfT10Raw
DEImg_UnFocusT10RawObject
Name
UPX0
Size
Virtual Size
160KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=23, id=125, productName=VS2005 build 50727, version=50727,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=109, id=1, productName=Unmarked objects,
count=54, id=110, productName=VS2005 build 50727, version=50727,
count=181, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
deImgT2X.dll
- SHA256 7e076ef4782d9aacf09ab8bfe07853fce4a242633ddcc2df331a7499e0c008cd
- MD5 4f8abfc8de53c8932e9a06d062d2ea30
- SHA1 b12f2c669bd0a5f923d70ee68b9c7b153b1ba4ac
- SHA512 1adc1bb88727715ee562bd61dd6e96d58b0b9f20b0eeef4e204e4983dc8676145e31f260d0140d25f09bb839d8aeb5f3a7922d7f505d488968434c21d2d52f25
- SSDEEP 3072:B/B5apkT3qsNimvXz2UuLVCaizpNm1vlmy9hGDXU:3X6sNiucFggJ9heU
- TLSH T140B30227F9B8801BF86985BDE6729E65BC739B2340A5036D9B44D61D3C3962CB3E1807
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
295472
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DEImg_CreateT2XRawObject
DEImg_DevelopT2X
DEImg_DisposeT2XRawObject
DEImg_ReplaceStreamOfT2XRaw
DEImg_UnFocusT2XRawObject
_psParseFreeExifBuffer@4
Name
UPX0
Size
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
105KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=40, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=88, id=1, productName=Unmarked objects,
count=141, id=109, productName=VS2005 build 50727, version=50727,
count=60, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
deImgT32.dll
- SHA256 311330ce814bd3231810251a226fa45980f8005a705c012818d78b374919a030
- MD5 11cee5d226df12d68f663962e5cfb584
- SHA1 b5f4761fcd5af73a07e30aab4f5e4b9a8be5295b
- SHA512 948a8f84cc8b8557145827aa1204056e80efe97362493d0a478bae176dd44cf2c6dcf2b13a6e237c77fce7a2df58b27c94b5571145b3764cf883dd550ae446a2
- SSDEEP 1536:YLp2R+T+euQk4Vib/DP80aivoqu1ABoTXAvZCe2y6B6t+h7exdfwiRHFV8SRQrR:MogTdHrS4+vocWTXyZCWA6Uh7EdfwiRI
- TLSH T1479312623B5FAC28E09206F0B16FECCB98F3229542253B7919F5C4BB2429B05057A7F4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
264064
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DEImg_CreateT32RawObject
DEImg_DevelopT32
DEImg_DisposeT32RawObject
DEImg_ReplaceStreamOfT32Raw
DEImg_UnFocusT32RawObject
Name
UPX0
Size
Virtual Size
164KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
90KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=1, id=126, version=50327,
count=30, id=125, productName=VS2005 build 50727, version=50727,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=87, id=1, productName=Unmarked objects,
count=100, id=109, productName=VS2005 build 50727, version=50727,
count=72, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
deImgT40.dll
- SHA256 d201b8a6ba86f2f7ed7e029667870a66d491f9fa918a2e678444ecd2af779a94
- MD5 c6727dfdeefd5512e130d368eeabe25a
- SHA1 65a07bd7ec4d515feeaf55ed47dd631527acb4b0
- SHA512 8dcc1d5be677ce65301668f601e7e28a319490a0030377353327856629d0601b606a0c52dddc62e04a308d05ef5dd8165250db60505008a4f61be6b81723b0ab
- SSDEEP 3072:z15z5lkbaWYFehSih1WegIzb5tEBNdQ5NR7FUQ3lso7BHuxLpkLdyKPdWco9Rurn:Tz5lkbaWrMiWegVBNA7h2o7BikJ1IslB
- TLSH T12D1412F60BDCBA78E68A77360E34FDD1DB257A9C1E3F0E88D97164A63C0D18184C525A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
478624
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?PSParseSetDeveloped@@YGKPAUpslStream@@GG@Z
?_cropStream@@YGKPAUpslStream@@KK0@Z
DEImg_CreateT40RawObject
DEImg_DevelopT40
DEImg_DisposeT40RawObject
DEImg_ReplaceStreamOfT40Raw
DEImg_UnFocusT40RawObject
_PSEstimateSoundProperties@20
_PSParseCreateAppMarkerData@24
_PSParseCreateTiffTagData@24
_PSParseFreeAppMarkerData@4
_PSParseFreeTiffTagData@4
_PSParseFullViewFileStream@28
_PSParseFullViewFileStreamEx@32
_PSParseGetDCFThumbnail@8
_PSParseGetFileStream2@44
_PSParseGetFileStream@40
_PSParseGetICCProfileData@12
_PSParseGetJPEGInfo@8
_PSParseGetRttIDLatest@4
_PSParseGetSOFData@8
_PSParseGetWAVEInfo@8
_PSParseHasCanonOptionalData@8
_PSParseSoundProperties@12
_PSParseStream2@28
_PSParseStream@24
_PSParseThumbnailFileStream@36
_PSParseThumbnailFileStreamEx2@44
_PSParseThumbnailFileStreamEx@40
_psParseCreateExifProperty@12
_psParseExifProperty@8
_psParseFreeExifBuffer@4
_psParseFreeHeapObject@28
_psParseGetDCFMakerNote@12
_psParseGetFileType@16
_psParseGetJpegDataFromPsRAW@12
_psParseGetLCDDataFromTiffRAW@16
_psParseGetMainImageFromCR2@12
_psParseGetOptionAreaData@12
_psParseGetPropHeapObject@24
_psParseGetTWAINThumbnailDataFromTiffRAW@16
_psParseGetTagData@24
_psParseHeapObject@32
_psParseMergePropertiesIntoHeapObject@12
Name
UPX0
Size
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
188KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=35, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=97, id=1, productName=Unmarked objects,
count=157, id=109, productName=VS2005 build 50727, version=50727,
count=98, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
deImgT41.dll
- SHA256 a79d19e4b37a7f30a7fdfb87c3d5e2bac2b268f06eb1bb98696b70470a3bd31c
- MD5 cbd19035eee61c3466788055439e3023
- SHA1 7c510cf0a30d168bba91b73a039d4b125e4c5000
- SHA512 347557019f36baff6a6a0c4ed1914c82f3e1cf905cdcbe644ade8421df9a64cfe2c7e5f83db83e730a682eb5b69574e0a934e2a45ff7528b988104dfc878af87
- SSDEEP 6144:BEce1OSJgxbkN37SLG7vs8SFhzc5rHH6Kd2GOqV5L:Bu3XN379DB+x46c2GOqV
- TLSH T162142374017C36A2D8CA557B1F38ED791761E03A972145DC9AED83CCB87ECA908229FC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
480864
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?PSParseSetDeveloped@@YGKPAUpslStream@@GG@Z
?_cropStream@@YGKPAUpslStream@@KK0@Z
DEImg_CreateT41RawObject
DEImg_DevelopT41
DEImg_DisposeT41RawObject
DEImg_ReplaceStreamOfT41Raw
DEImg_UnFocusT41RawObject
_PSEstimateSoundProperties@20
_PSParseCreateAppMarkerData@24
_PSParseCreateTiffTagData@24
_PSParseFreeAppMarkerData@4
_PSParseFreeTiffTagData@4
_PSParseFullViewFileStream@28
_PSParseFullViewFileStreamEx@32
_PSParseGetDCFThumbnail@8
_PSParseGetFileStream2@44
_PSParseGetFileStream@40
_PSParseGetICCProfileData@12
_PSParseGetJPEGInfo@8
_PSParseGetRttIDLatest@4
_PSParseGetSOFData@8
_PSParseGetWAVEInfo@8
_PSParseHasCanonOptionalData@8
_PSParseSoundProperties@12
_PSParseStream2@28
_PSParseStream@24
_PSParseThumbnailFileStream@36
_PSParseThumbnailFileStreamEx2@44
_PSParseThumbnailFileStreamEx@40
_psParseCreateExifProperty@12
_psParseExifProperty@8
_psParseFreeExifBuffer@4
_psParseFreeHeapObject@28
_psParseGetDCFMakerNote@12
_psParseGetFileType@16
_psParseGetJpegDataFromPsRAW@12
_psParseGetLCDDataFromTiffRAW@16
_psParseGetMainImageFromCR2@12
_psParseGetOptionAreaData@12
_psParseGetPropHeapObject@24
_psParseGetTWAINThumbnailDataFromTiffRAW@16
_psParseGetTagData@24
_psParseHeapObject@32
_psParseMergePropertiesIntoHeapObject@12
Name
UPX0
Size
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
190KB
Virtual Size
192KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=33, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=97, id=1, productName=Unmarked objects,
count=156, id=109, productName=VS2005 build 50727, version=50727,
count=98, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
deImgT50.dll
- SHA256 056dc57c8bf079a59145d3d164ac0990eb79bddbc5479fbea07b1aa85015c106
- MD5 c5d3eb8562ccf51cf1253364d16e3a03
- SHA1 d2786a68eaf10500d3659f8f6f81e9f0ea66913b
- SHA512 ac4e201b29db47353c5a267189e525fa4c7a44e422bf8a82bda5c067b4901f47fcea0caabfda69d149fdaf92afa60e6e4a01ba25e9faac81c7b8afbd2109edbf
- SSDEEP 3072:YHYy+qgGADA+WJI3vG6ICA9hQkgaUFxcqT7ZtjRjj2tWuIkbdIeL:dDA+EI3ePCi1gTdTJvLuDB
- TLSH T1F00412F0D5DC092DD5DF8276DCADADE08C3A062BF55A1E4ADC952089E83C9E109235BA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
454192
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?PSParseSetDeveloped@@YGKPAUpslStream@@GG@Z
?_cropStream@@YGKPAUpslStream@@KK0@Z
DEImg_CreateT50RawObject
DEImg_DevelopT50
DEImg_DisposeT50RawObject
DEImg_ReplaceStreamOfT50Raw
DEImg_UnFocusT50RawObject
_PSEstimateSoundProperties@20
_PSParseCreateAppMarkerData@24
_PSParseCreateTiffTagData@24
_PSParseFreeAppMarkerData@4
_PSParseFreeTiffTagData@4
_PSParseFullViewFileStream@28
_PSParseFullViewFileStreamEx@32
_PSParseGetDCFThumbnail@8
_PSParseGetFileStream2@44
_PSParseGetFileStream@40
_PSParseGetICCProfileData@12
_PSParseGetJPEGInfo@8
_PSParseGetRttIDLatest@4
_PSParseGetSOFData@8
_PSParseGetWAVEInfo@8
_PSParseHasCanonOptionalData@8
_PSParseSoundProperties@12
_PSParseStream2@28
_PSParseStream@24
_PSParseThumbnailFileStream@36
_PSParseThumbnailFileStreamEx2@44
_PSParseThumbnailFileStreamEx@40
_psParseCreateExifProperty@12
_psParseExifProperty@8
_psParseFreeExifBuffer@4
_psParseFreeHeapObject@28
_psParseGetDCFMakerNote@12
_psParseGetFileType@16
_psParseGetJpegDataFromPsRAW@12
_psParseGetLCDDataFromTiffRAW@16
_psParseGetMainImageFromCR2@12
_psParseGetOptionAreaData@12
_psParseGetPropHeapObject@24
_psParseGetTWAINThumbnailDataFromTiffRAW@16
_psParseGetTagData@24
_psParseHeapObject@32
_psParseMergePropertiesIntoHeapObject@12
Name
UPX0
Size
Virtual Size
264KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
176KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=35, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=88, id=1, productName=Unmarked objects,
count=121, id=109, productName=VS2005 build 50727, version=50727,
count=83, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
deImgT60.dll
- SHA256 ad0f9251937c637478d48958fb581327dac36af850ee0edeca5b3a57248058df
- MD5 d2cffb5d95fd05a02b177531c0b27bc2
- SHA1 896c4a348918ccba4de87aba5218e5202bef7c6b
- SHA512 ab51b06be03eeb02fcd3815c056f1be49de8320467395b8ed3bacd3bf12ee04e929146a8511034bd3fc850921660879a749eedfc1571bfbd316bd51a9d3ff1c7
- SSDEEP 3072:d97X6KQMot7uoJ1Gm/4DEp7zGr6A3BqHhdjY2P8A5at+hLvUw17P08IxcmPZqzA:uMotiuEkqEpNhHhdjPU/01BPoc8Zqz
- TLSH T1F30412122B5C4F3CE0CF47B135699DF03FE922196F8E938E08A8D12E6F385D6152D558
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
454256
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?PSParseSetDeveloped@@YGKPAUpslStream@@GG@Z
?_cropStream@@YGKPAUpslStream@@KK0@Z
DEImg_CreateT60RawObject
DEImg_DevelopT60
DEImg_DisposeT60RawObject
DEImg_ReplaceStreamOfT60Raw
DEImg_UnFocusT60RawObject
_PSEstimateSoundProperties@20
_PSParseCreateAppMarkerData@24
_PSParseCreateTiffTagData@24
_PSParseFreeAppMarkerData@4
_PSParseFreeTiffTagData@4
_PSParseFullViewFileStream@28
_PSParseFullViewFileStreamEx@32
_PSParseGetDCFThumbnail@8
_PSParseGetFileStream2@44
_PSParseGetFileStream@40
_PSParseGetICCProfileData@12
_PSParseGetJPEGInfo@8
_PSParseGetRttIDLatest@4
_PSParseGetSOFData@8
_PSParseGetWAVEInfo@8
_PSParseHasCanonOptionalData@8
_PSParseSoundProperties@12
_PSParseStream2@28
_PSParseStream@24
_PSParseThumbnailFileStream@36
_PSParseThumbnailFileStreamEx2@44
_PSParseThumbnailFileStreamEx@40
_psParseCreateExifProperty@12
_psParseExifProperty@8
_psParseFreeExifBuffer@4
_psParseFreeHeapObject@28
_psParseGetDCFMakerNote@12
_psParseGetFileType@16
_psParseGetJpegDataFromPsRAW@12
_psParseGetLCDDataFromTiffRAW@16
_psParseGetMainImageFromCR2@12
_psParseGetOptionAreaData@12
_psParseGetPropHeapObject@24
_psParseGetTWAINThumbnailDataFromTiffRAW@16
_psParseGetTagData@24
_psParseHeapObject@32
_psParseMergePropertiesIntoHeapObject@12
Name
UPX0
Size
Virtual Size
264KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
176KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=35, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=88, id=1, productName=Unmarked objects,
count=121, id=109, productName=VS2005 build 50727, version=50727,
count=83, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
deImgT70.dll
- SHA256 6edcf25a18eb6d857c1dd2353f2cc67d14fc74aa55f3aaa5417b44a1c1ea0cac
- MD5 89b15bae3e539634057fd14b58a3d873
- SHA1 f7396b372b859b625df71f7818c79d43e78ba48f
- SHA512 ab17bf5756f76bada19263eac129af85a768ae749c9c02b388ebdb05c21a39d435acb47e0c331884708fe6e3870983f01fba1d5417b0aad490c176b644138d58
- SSDEEP 3072:q0TVXOaEttqAfWQ/QG39VQjHQ+30btTlC/MCZmW43UIlXf7l6LksE7slPjLR7Dlg:NxXOTtcAfNH3Ex0b9skCZj6lRjoLR7Dl
- TLSH T1FD0413B6A4548EF8F45FE231CC3B8E659608E11552BFC90E4E1EC57B9427B0A90718EE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
456576
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?PSParseSetDeveloped@@YGKPAUpslStream@@GG@Z
?_cropStream@@YGKPAUpslStream@@KK0@Z
DEImg_CreateT70RawObject
DEImg_DevelopT70
DEImg_DisposeT70RawObject
DEImg_ReplaceStreamOfT70Raw
DEImg_UnFocusT70RawObject
_PSEstimateSoundProperties@20
_PSParseCreateAppMarkerData@24
_PSParseCreateTiffTagData@24
_PSParseFreeAppMarkerData@4
_PSParseFreeTiffTagData@4
_PSParseFullViewFileStream@28
_PSParseFullViewFileStreamEx@32
_PSParseGetDCFThumbnail@8
_PSParseGetFileStream2@44
_PSParseGetFileStream@40
_PSParseGetICCProfileData@12
_PSParseGetJPEGInfo@8
_PSParseGetRttIDLatest@4
_PSParseGetSOFData@8
_PSParseGetWAVEInfo@8
_PSParseHasCanonOptionalData@8
_PSParseSoundProperties@12
_PSParseStream2@28
_PSParseStream@24
_PSParseThumbnailFileStream@36
_PSParseThumbnailFileStreamEx2@44
_PSParseThumbnailFileStreamEx@40
_psParseCreateExifProperty@12
_psParseExifProperty@8
_psParseFreeExifBuffer@4
_psParseFreeHeapObject@28
_psParseGetDCFMakerNote@12
_psParseGetFileType@16
_psParseGetJpegDataFromPsRAW@12
_psParseGetLCDDataFromTiffRAW@16
_psParseGetMainImageFromCR2@12
_psParseGetOptionAreaData@12
_psParseGetPropHeapObject@24
_psParseGetTWAINThumbnailDataFromCR2@20
_psParseGetTWAINThumbnailDataFromTiffRAW@16
_psParseGetTagData@24
_psParseHeapObject@32
_psParseMergePropertiesIntoHeapObject@12
Name
UPX0
Size
Virtual Size
264KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
178KB
Virtual Size
180KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=32, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=88, id=1, productName=Unmarked objects,
count=116, id=109, productName=VS2005 build 50727, version=50727,
count=82, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
deImgT71.dll
- SHA256 0033d5bf7f594f8bdc8532430b8a8d3b67ee4846f6132a9eb1ab608b14bf85b9
- MD5 fa6b772e8e2d0564c8e7e617e57cac31
- SHA1 a183667696b54798d040351625ac36dbd90901d5
- SHA512 0089e30a2dff7a763457df2344767a1becb17dcc2668a08fe589d37ca3ab184a90a0a2422bdfaf1178d3647a637f2db980d33ab96ed815379ab3ad6a38737428
- SSDEEP 3072:HlZ/zg/c7Ogc3Gfx8Z7/CPguoCLeikJWBqey02iYVPdPpR7fowc+Azvr3Oo6l7h:HlZ/k/xRCPgoQAyr9PdPptfhAza9x
- TLSH T19C1412C3311E63FFD691B974E51F2F414623380EC29E7316ACB475432C1694BA6B3A9A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
490816
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?PSParseSetDeveloped@@YGKPAUpslStream@@GG@Z
?_cropStream@@YGKPAUpslStream@@KK0@Z
DEImg_CreateT71RawObject
DEImg_DevelopT71
DEImg_DisposeT71RawObject
DEImg_ReplaceStreamOfT71Raw
DEImg_UnFocusT71RawObject
_PSEstimateSoundProperties@20
_PSParseCreateAppMarkerData@24
_PSParseCreateTiffTagData@24
_PSParseFreeAppMarkerData@4
_PSParseFreeTiffTagData@4
_PSParseFullViewFileStream@28
_PSParseFullViewFileStreamEx@32
_PSParseGetDCFThumbnail@8
_PSParseGetFileStream2@44
_PSParseGetFileStream@40
_PSParseGetICCProfileData@12
_PSParseGetIIMInfo@8
_PSParseGetJPEGInfo@8
_PSParseGetRttIDLatest@4
_PSParseGetSOFData@8
_PSParseGetWAVEInfo@8
_PSParseHasCanonOptionalData@8
_PSParseMakePreserveIIMInfo@12
_PSParseReadPreserveIIMInfo@8
_PSParseReplaceIIMInfo@8
_PSParseSetIIMInfo@12
_PSParseSoundProperties@12
_PSParseStream2@28
_PSParseStream@24
_PSParseThumbnailFileStream@36
_PSParseThumbnailFileStreamEx2@44
_PSParseThumbnailFileStreamEx@40
_psParseCreateExifProperty@12
_psParseExifProperty@8
_psParseFreeExifBuffer@4
_psParseFreeHeapObject@28
_psParseGetDCFMakerNote@12
_psParseGetFileType@16
_psParseGetJpegDataFromPsRAW@12
_psParseGetLCDDataFromTiffRAW@16
_psParseGetMainImageFromCR2@12
_psParseGetOptionAreaData@12
_psParseGetPropHeapObject@24
_psParseGetTWAINThumbnailDataFromCR2@20
_psParseGetTWAINThumbnailDataFromTiffRAW@16
_psParseGetTagData@24
_psParseHeapObject@32
_psParseMergePropertiesIntoHeapObject@12
Name
UPX0
Size
Virtual Size
284KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
192KB
Virtual Size
192KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=33, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=95, id=1, productName=Unmarked objects,
count=140, id=109, productName=VS2005 build 50727, version=50727,
count=88, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
deImgT72.dll
- SHA256 593d87d44a79a5a21f507099f800b79ef75d0472fa0ae2a8e7d0f573237af758
- MD5 2d44dca3163f7c70f0f438e93df1bf2b
- SHA1 7ba3c08e7f402215f2c37d52bcfe99ab771ba35c
- SHA512 60cbbcb81654f2bb4f8d47832fd681fa39ac609cfda8650643854a89428756d87b73617ef7203a147e62e9de474232f52b12d76c86d61bfc0e7cd16289f57152
- SSDEEP 6144:u1ov9l5KDtEUTTPJuag96tcaPOgt7EIC+k4ppzPKj:u1+8BTl26SGO8e+k4pprg
- TLSH T1861422F162A47966DE4B783C67B829D2851672033A97FF7E0DB0B5011CED303AF810A6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
490736
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
?PSParseSetDeveloped@@YGKPAUpslStream@@GG@Z
?_cropStream@@YGKPAUpslStream@@KK0@Z
DEImg_CreateT72RawObject
DEImg_DevelopT72
DEImg_DisposeT72RawObject
DEImg_ReplaceStreamOfT72Raw
DEImg_UnFocusT72RawObject
_PSEstimateSoundProperties@20
_PSParseCreateAppMarkerData@24
_PSParseCreateTiffTagData@24
_PSParseFreeAppMarkerData@4
_PSParseFreeTiffTagData@4
_PSParseFullViewFileStream@28
_PSParseFullViewFileStreamEx@32
_PSParseGetDCFThumbnail@8
_PSParseGetFileStream2@44
_PSParseGetFileStream@40
_PSParseGetICCProfileData@12
_PSParseGetIIMInfo@8
_PSParseGetJPEGInfo@8
_PSParseGetRttIDLatest@4
_PSParseGetSOFData@8
_PSParseGetWAVEInfo@8
_PSParseHasCanonOptionalData@8
_PSParseMakePreserveIIMInfo@12
_PSParseReadPreserveIIMInfo@8
_PSParseReplaceIIMInfo@8
_PSParseSetIIMInfo@12
_PSParseSoundProperties@12
_PSParseStream2@28
_PSParseStream@24
_PSParseThumbnailFileStream@36
_PSParseThumbnailFileStreamEx2@44
_PSParseThumbnailFileStreamEx@40
_psParseCreateExifProperty@12
_psParseExifProperty@8
_psParseFreeExifBuffer@4
_psParseFreeHeapObject@32
_psParseGetDCFMakerNote@12
_psParseGetFileType@16
_psParseGetJpegDataFromPsRAW@12
_psParseGetLCDDataFromTiffRAW@16
_psParseGetMainImageFromCR2@12
_psParseGetOptionAreaData@12
_psParseGetPropHeapObject@24
_psParseGetTWAINThumbnailDataFromCR2@20
_psParseGetTWAINThumbnailDataFromTiffRAW@16
_psParseGetTagData@24
_psParseHeapObject@36
_psParseMergePropertiesIntoHeapObject@12
Name
UPX0
Size
Virtual Size
284KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
192KB
Virtual Size
192KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=33, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=95, id=1, productName=Unmarked objects,
count=140, id=109, productName=VS2005 build 50727, version=50727,
count=88, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,