SaimoTV-Windows[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
SaimoTV-Windows.zip
Size 50.3MB
Sample261029-1nsa5ace68
SHA256 350d436e30c3a6aa5b1f80be738267ca630e8079c2c6f8a8434b3aeec68702ea
MD5 bbf9f110e1261846352e88d9c9f8d063
SHA1 8f964cdc86d6ef74a423361024b87dd99e901155
SHA512 5ea846fe252c90dc40a062d0c11b7586f5c62c3e76925d1a75a042b42c51236ac5039fe1a598a89044aabf680179d3f26dcf8a562cb8c56f0f277e852a2e8034
SSDEEP 1572864:gleNUQKYGwwXqgbobwhrC4LkAXI2u5hh4MSvOT8lnDrHBS1:+tQlG1aEoIrC4LvXLulPSvOsn3h6
TLSH
T1A7C73318C7F97FAF9667E87BB242AF4C51F5D9A08D850C630782B303365192E998DDC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SaimoTV/Saimo TV.exe
unpack001/SaimoTV/libmpv-2.dll

File Explorer

SaimoTV-Windows.zip

.zip 50.3MB
SaimoTV/LEIAME.txt

1KB
SaimoTV/Saimo TV.exe

.exe 9.0MB
SaimoTV/libmpv-2.dll

.dll 115.2MB
SaimoTV/vulkan-1.dll

.dll 1.6MB

SaimoTV-Windows.zip

SHA256 350d436e30c3a6aa5b1f80be738267ca630e8079c2c6f8a8434b3aeec68702ea
MD5 bbf9f110e1261846352e88d9c9f8d063
SHA1 8f964cdc86d6ef74a423361024b87dd99e901155
SHA512 5ea846fe252c90dc40a062d0c11b7586f5c62c3e76925d1a75a042b42c51236ac5039fe1a598a89044aabf680179d3f26dcf8a562cb8c56f0f277e852a2e8034
SSDEEP 1572864:gleNUQKYGwwXqgbobwhrC4LkAXI2u5hh4MSvOT8lnDrHBS1:+tQlG1aEoIrC4LvXLulPSvOsn3h6
TLSH
T1A7C73318C7F97FAF9667E87BB242AF4C51F5D9A08D850C630782B303365192E998DDC8
MD5 SHA1 SHA512 SSDEEP TLSH

SaimoTV/Saimo TV.exe

IMPHASH 0edd788288ee194c2e193fd6d2f6174b
SHA256 e6a3cae6979791e84daa2d54606f7ad39a799ef1d0bea03648fae6f087f639bc
MD5 923396c1b025fa2a2be3debd37ff5836
SHA1 5d591d5948b8dfa961fbf7a7f4e43463ea6e9aa6
SHA512 312fd99b2f1c43e6f3da6c1a9aa9199e3a561517e7d8e8d21864b92a317f4961235a2cd02c56356b003b3e1d7c55b7da55d5e68dd77ca78d0c276b4300ed9ede
SSDEEP 98304:xKA9ByaVHNvp8V+iy/q7wGPP7AUMioBdwxX2KBxM0P61jcSycbj+sQUM:tz6wcK0X/BPuj1y2f
TLSH
T1A4969E83F2A681EEC05AC474935AB633F632B88F4A3472BB67D44A212F55F509F0D719
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

ImpersonateAnonymousToken RevertToSelf SystemFunction036

gdi32

ChoosePixelFormat CreateBitmap CreateCompatibleBitmap CreateRectRgn DeleteObject DescribePixelFormat GetDeviceCaps SetBitmapBits SetPixelFormat SwapBuffers

kernel32

AddVectoredExceptionHandler CopyFileExW CreateDirectoryW CreateFileMappingA CreateFileW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DeleteCriticalSection DeleteFileW EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetEnvironmentVariableW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetModuleHandleW GetStdHandle GetSystemTimePreciseAsFileTime GetTempPathW GlobalAlloc GlobalLock GlobalSize GlobalUnlock HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadLibraryW MapViewOfFile Module32FirstW Module32NextW MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetFileInformationByHandle SetFileTime SetThreadStackGuarantee SetUnhandledExceptionFilter SetWaitableTimer SwitchToThread TlsAlloc TlsFree TlsGetValue TlsSetValue UnmapViewOfFile VirtualProtect VirtualQuery WideCharToMultiByte WriteConsoleW __C_specific_handler GetTimeZoneInformationForYear FreeLibrary GetLastError GetModuleFileNameW GetModuleHandleExW GetProcAddress LoadLibraryExW SetThreadErrorMode GetModuleHandleA Sleep LoadLibraryExA WaitForSingleObject FormatMessageW GetProcessHeap HeapAlloc HeapFree CloseHandle DuplicateHandle GlobalFree SetHandleInformation SetLastError GetCurrentThreadId

api-ms-win-crt-environment-l1-1-0

__p__environ

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr _hypot acosf atan2 atan2f cbrt cbrtf ceil ceilf cos cosf exp2f expf floor floorf fma fmod hypot log log10 log2 pow powf round roundf sin sinf tan tanf trunc truncf

api-ms-win-crt-private-l1-1-0

memcmp memcpy memmove

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _configure_narrow_argv _crt_atexit _exit _fpreset _initialize_narrow_environment _initterm _initterm_e _set_app_type _set_invalid_parameter_handler abort exit signal strerror

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf fflush setvbuf

api-ms-win-crt-string-l1-1-0

memset strlen strncmp

opengl32

wglCreateContext wglDeleteContext wglGetCurrentContext wglGetCurrentDC wglGetProcAddress wglMakeCurrent wglShareLists

shell32

DragFinish DragQueryFileW ShellExecuteW

user32

ChangeDisplaySettingsExW ClientToScreen CloseClipboard CloseTouchInputHandle CreateIconIndirect EmptyClipboard EnumDisplayMonitors GetClassInfoExW GetClipboardData GetDC GetMonitorInfoW GetTouchInputInfo InvalidateRgn IsClipboardFormatAvailable MonitorFromPoint MonitorFromRect MonitorFromWindow OpenClipboard RedrawWindow RegisterClassExW RegisterClipboardFormatW RegisterTouchWindow ReleaseDC ScreenToClient SetClipboardData ValidateRect AdjustWindowRectEx ClipCursor CreateIcon CreateIconFromResourceEx CreateWindowExW DefWindowProcW DestroyCursor DestroyIcon DestroyWindow DispatchMessageW EnableMenuItem FlashWindowEx GetActiveWindow GetAsyncKeyState GetClassNameW GetClientRect GetClipCursor GetCursorPos GetForegroundWindow GetKeyState GetKeyboardLayout GetKeyboardState GetMenu GetRawInputData GetSystemMenu GetSystemMetrics GetWindowLongPtrW GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW IsIconic IsProcessDPIAware IsWindowVisible LoadCursorW MapVirtualKeyExW MapVirtualKeyW MessageBoxW MsgWaitForMultipleObjectsEx PeekMessageW PostMessageW RegisterRawInputDevices RegisterWindowMessageA ReleaseCapture SendInput SendMessageW SetCapture SetCursor SetCursorPos SetForegroundWindow SetWindowDisplayAffinity SetWindowLongPtrW SetWindowLongW SetWindowPlacement SetWindowPos SetWindowTextW ShowCursor ShowWindow SystemParametersInfoA ToUnicodeEx TrackMouseEvent TranslateMessage

bcrypt

BCryptGenRandom

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute

imm32

ImmAssociateContextEx ImmGetCompositionStringW ImmGetContext ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionWindow

ntdll

NtOpenFile NtReadFile NtWriteFile RtlNtStatusToDosError

ole32

OleInitialize RegisterDragDrop RevokeDragDrop CoCreateInstance CoInitializeEx CoUninitialize

ws2_32

WSACleanup WSADuplicateSocketW WSAGetLastError WSASocketW WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt ioctlsocket listen recv select send setsockopt shutdown

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

comdlg32

GetOpenFileNameW

uxtheme

SetWindowTheme

combase

CoCreateFreeThreadedMarshaler CoIncrementMTAUsage

oleaut32

GetErrorInfo SetErrorInfo

Name

.text

Size

5.4MB

Virtual Size

5.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

87KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

296KB

Virtual Size

295KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

120KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

SaimoTV/libmpv-2.dll

IMPHASH 1a3c54e6f085de1fcc71eec81680c67d
SHA256 d2d081547efea8a1530f4ba0bf58a0d72069b25c40d8b2a7071cea5aa82381c6
MD5 ab0fadc9880c07719efc1b874f921113
SHA1 26bc3fe2d3af50e891838e21dcd74491425f4336
SHA512 18fa31a41c20ccac77e2cd4d39ea9c77295b584978e87490ff034f3fa1216b928d82a1bab3ad6d6c32ba8d1183e8586dc4d3a138615f8b2146cd15e6060bc30c
SSDEEP 786432:bIL66VXOK/PuW68m0tWnB0UwNyrebvZmSSRzv/gyyV:U6IXO4ZERrejsvW
TLSH
T1BD489E4BF19790ACD41BC5B4436AB722FA34785D43245AEB32D896343E76BC06B7AF40
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

/__w/mpv-winbuild-cmake/mpv-winbuild-cmake/build_x86_64/packages/mpv-prefix/src/mpv-build/libmpv-2.pdb

gdi32

BitBlt ChoosePixelFormat CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateFontIndirectW CreateICW CreateRectRgn CreateSolidBrush DeleteDC DeleteObject DescribePixelFormat EnumFontFamiliesExW EnumFontFamiliesW GetDIBColorTable GetDIBits GetDeviceCaps GetDeviceGammaRamp GetICMProfileW GetObjectA GetPixelFormat GetStockObject GetTextExtentPoint32A GetTextFaceW GetTextMetricsW SelectObject SetDeviceGammaRamp SetPixelFormat SwapBuffers

ole32

CLSIDFromString CoCreateFreeThreadedMarshaler CoCreateInstance CoGetMalloc CoInitialize CoInitializeEx CoTaskMemAlloc CoTaskMemFree CoUninitialize CreateBindCtx GetErrorInfo OleInitialize OleLoadFromStream OleSaveToStream OleUninitialize PropVariantClear RegisterDragDrop ReleaseStgMedium RevokeDragDrop SetErrorInfo StringFromCLSID StringFromGUID2

user32

AdjustWindowRectEx AdjustWindowRectExForDpi AttachThreadInput BeginPaint BringWindowToTop CallNextHookEx CallWindowProcW ChangeDisplaySettingsExW ClientToScreen ClipCursor CloseClipboard CloseTouchInputHandle CopyIcon CopyImage CreateIconFromResource CreateIconIndirect CreatePopupMenu CreateWindowExA CreateWindowExW DefWindowProcA DefWindowProcW DeleteMenu DestroyCursor DestroyIcon DestroyMenu DestroyWindow DialogBoxIndirectParamW DispatchMessageA DispatchMessageW DisplayConfigGetDeviceInfo DrawIcon DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint EnumDisplayDevicesW EnumDisplayMonitors EnumDisplaySettingsW EnumWindows EqualRect FillRect FindWindowExW FindWindowW FlashWindowEx FrameRect GetAsyncKeyState GetClassInfoExW GetClassNameW GetClientRect GetClipCursor GetClipboardData GetClipboardSequenceNumber GetCursorInfo GetCursorPos GetDC GetDesktopWindow GetDisplayConfigBufferSizes GetDlgItem GetDoubleClickTime GetFocus GetForegroundWindow GetIconInfo GetKeyState GetKeyboardLayout GetKeyboardState GetMenu GetMenuItemCount GetMenuItemInfoW GetMessageA GetMessageExtraInfo GetMessageTime GetMessageW GetMonitorInfoW GetParent GetProcessWindowStation GetPropW GetRawInputData GetRawInputDeviceInfoA GetRawInputDeviceList GetShellWindow GetSystemMenu GetSystemMetrics GetSystemMetricsForDpi GetTouchInputInfo GetUpdateRect GetUserObjectInformationW GetWindowLongPtrA GetWindowLongPtrW GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InflateRect InsertMenuItemW IntersectRect InvalidateRect IsClipboardFormatAvailable IsIconic IsWindowVisible IsZoomed KillTimer LoadCursorA LoadCursorW LoadIconW MapVirtualKeyW MapWindowPoints MessageBoxA MessageBoxW MonitorFromPoint MonitorFromRect MonitorFromWindow MsgWaitForMultipleObjects OffsetRect OpenClipboard PeekMessageA PeekMessageW PostMessageW PostQuitMessage PostThreadMessageA PostThreadMessageW PtInRect QueryDisplayConfig RegisterClassExA RegisterClassExW RegisterClassW RegisterClipboardFormatW RegisterDeviceNotificationW RegisterRawInputDevices RegisterTouchWindow RegisterWindowMessageA RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ScreenToClient SendMessageA SendMessageTimeoutW SendMessageW SendNotifyMessageW SetActiveWindow SetCapture SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetLayeredWindowAttributes SetPropW SetRect SetTimer SetWinEventHook SetWindowDisplayAffinity SetWindowLongPtrA SetWindowLongPtrW SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowTextW SetWindowsHookExW ShowWindow SystemParametersInfoA SystemParametersInfoW ToUnicode TrackMouseEvent TrackPopupMenuEx TranslateMessage UnhookWinEvent UnhookWindowsHookEx UnregisterClassA UnregisterClassW UnregisterDeviceNotification UnregisterTouchWindow ValidateRect wsprintfA

version

GetFileVersionInfoA GetFileVersionInfoSizeA GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueA VerQueryValueW

vulkan-1

vkCreateDisplayPlaneSurfaceKHR vkCreateWin32SurfaceKHR vkDestroySurfaceKHR vkEnumeratePhysicalDevices vkGetDisplayModePropertiesKHR vkGetDisplayPlaneSupportedDisplaysKHR vkGetInstanceProcAddr vkGetPhysicalDeviceDisplayPlanePropertiesKHR vkGetPhysicalDeviceDisplayPropertiesKHR vkGetPhysicalDeviceProperties vkGetPhysicalDeviceProperties2 vkGetPhysicalDeviceQueueFamilyProperties2

advapi32

AllocateAndInitializeSid CheckTokenMembership ConvertSidToStringSidA ConvertStringSecurityDescriptorToSecurityDescriptorA DeregisterEventSource FreeSid GetTokenInformation GetUserNameA OpenProcessToken RegCloseKey RegCreateKeyExW RegDeleteKeyValueW RegDeleteTreeW RegEnumKeyExA RegEnumKeyExW RegEnumValueW RegGetValueW RegNotifyChangeKeyValue RegOpenKeyExA RegOpenKeyExW RegQueryValueExA RegQueryValueExW RegSetValueExW RegisterEventSourceW ReportEventW SystemFunction036

shell32

DragAcceptFiles DragFinish DragQueryFileW SHGetFolderPathA SHGetFolderPathW SHGetKnownFolderPath SHGetSpecialFolderPathA ShellExecuteW

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared AreFileApisANSI CancelIo CancelIoEx CloseHandle CompareFileTime CompareStringA ConnectNamedPipe ConvertFiberToThread ConvertThreadToFiberEx CreateDirectoryW CreateEventA CreateEventW CreateFiberEx CreateFile2 CreateFileA CreateFileMappingA CreateFileW CreateIoCompletionPort CreateMutexA CreateNamedPipeA CreateNamedPipeW CreateProcessW CreateSemaphoreA CreateSemaphoreW CreateThread CreateToolhelp32Snapshot CreateWaitableTimerExW DebugBreak DeleteCriticalSection DeleteFiber DeleteFileW DeleteProcThreadAttributeList DeviceIoControl DuplicateHandle EnterCriticalSection EnumResourceNamesW ExitProcess FillConsoleOutputCharacterW FindClose FindFirstFileExA FindFirstFileExW FindFirstFileW FindNextFileA FindNextFileW FindResourceW FlsAlloc FlsFree FlsGetValue FlsSetValue FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetActiveProcessorCount GetConsoleCP GetConsoleCursorInfo GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentConsoleFont GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDriveTypeA GetEnvironmentStringsW GetEnvironmentVariableA GetEnvironmentVariableW GetExitCodeProcess GetExitCodeThread GetFileAttributesA GetFileAttributesExA GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSizeEx GetFileTime GetFileType GetFullPathNameA GetFullPathNameW GetLastError GetLocaleInfoA GetLogicalDrives GetLongPathNameA GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleExA GetModuleHandleExW GetModuleHandleW GetNumaHighestNodeNumber GetNumaNodeProcessorMaskEx GetNumberOfConsoleInputEvents GetOEMCP GetOverlappedResult GetProcAddress GetProcessAffinityMask GetProcessHeap GetQueuedCompletionStatusEx GetStdHandle GetSystemDirectoryA GetSystemInfo GetSystemPowerStatus GetSystemTime GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetTempPathA GetThreadContext GetThreadGroupAffinity GetThreadId GetThreadPriority GetThreadTimes GetTickCount GetTickCount64 GetTimeZoneInformation GetUserDefaultLocaleName GetUserPreferredUILanguages GetVersion GetWindowsDirectoryA GetWindowsDirectoryW GlobalAlloc GlobalLock GlobalMemoryStatusEx GlobalUnlock HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeProcThreadAttributeList InitializeSRWLock InterlockedPushEntrySList IsDebuggerPresent IsThreadAFiber IsValidCodePage LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW LoadLibraryW LoadResource LocalFree LockFileEx LockResource MapViewOfFile Module32FirstW Module32NextW MoveFileExA MoveFileExW MulDiv MultiByteToWideChar OpenFileMappingA OpenProcess OpenThread OutputDebugStringA OutputDebugStringW PeekNamedPipe PostQueuedCompletionStatus QueryFullProcessImageNameW QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleA ReadConsoleInputW ReadConsoleW ReadFile RegisterWaitForSingleObject ReleaseMutex ReleaseSRWLockExclusive ReleaseSRWLockShared ReleaseSemaphore ResetEvent ResumeThread RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlRestoreContext RtlUnwindEx RtlVirtualUnwind SetConsoleCursorInfo SetConsoleCursorPosition SetConsoleMode SetConsoleOutputCP SetConsoleTextAttribute SetConsoleTitleW SetDllDirectoryW SetEnvironmentVariableA SetErrorMode SetEvent SetFileCompletionNotificationModes SetFileInformationByHandle SetFilePointer SetFilePointerEx SetFileTime SetLastError SetNamedPipeHandleState SetPriorityClass SetProcessAffinityMask SetThreadAffinityMask SetThreadContext SetThreadErrorMode SetThreadExecutionState SetThreadGroupAffinity SetThreadPriority SetWaitableTimer SignalObjectAndWait SizeofResource Sleep SleepConditionVariableCS SleepConditionVariableSRW SleepEx SuspendThread SwitchToFiber SwitchToThread SystemTimeToFileTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive TryEnterCriticalSection UnlockFileEx UnmapViewOfFile UnregisterWait UnregisterWaitEx UpdateProcThreadAttribute VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleA WriteConsoleW WriteFile lstrcmpiW lstrcpyA lstrcpynA

oleaut32

OleCreatePropertyFrame SysFreeString SysStringLen

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

ntdll

NtQueryTimerResolution NtSetTimerResolution NtWriteFile RtlNtStatusToDosError

avrt

AvRevertMmThreadCharacteristics AvSetMmThreadCharacteristicsW

dwmapi

DwmEnableBlurBehindWindow DwmEnableMMCSS DwmFlush DwmGetCompositionTimingInfo DwmGetWindowAttribute DwmIsCompositionEnabled DwmSetWindowAttribute

imm32

ImmAssociateContext ImmGetCandidateListW ImmGetCompositionStringW ImmGetContext ImmGetConversionStatus ImmGetIMEFileNameA ImmNotifyIME ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionStringW ImmSetCompositionWindow ImmSetConversionStatus

api-ms-win-core-path-l1-1-0

PathAllocCombine PathCchCanonicalizeEx PathCchRemoveFileSpec

shcore

GetDpiForMonitor

uxtheme

SetWindowTheme

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

opengl32

wglCreateContext wglDeleteContext wglGetProcAddress wglMakeCurrent

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__fmode __stdio_common_vfprintf __stdio_common_vfscanf __stdio_common_vfwprintf __stdio_common_vsprintf __stdio_common_vsscanf __stdio_common_vswprintf _chsize_s _close _dup _fileno _fseeki64 _ftelli64 _get_osfhandle _isatty _lseeki64 _open _open_osfhandle _pclose _popen _read _setmode _sopen _wfopen _wfsopen _wopen _write _wsopen _wsopen_s clearerr fclose feof ferror fflush fgetc fgets fgetwc fopen fopen_s fputc fputs fputwc fread fseek ftell fwrite getc putchar puts rewind setbuf setvbuf tmpfile tmpnam ungetc ungetwc

api-ms-win-crt-environment-l1-1-0

__p__environ _putenv _wgetenv getenv getenv_s

api-ms-win-crt-runtime-l1-1-0

_assert __sys_nerr _beginthreadex _endthreadex _errno _execute_onexit_table _exit _initialize_onexit_table _initterm _initterm_e _register_onexit_function _register_thread_local_exe_atexit_callback _wassert abort exit perror raise signal strerror strerror_s system

api-ms-win-crt-filesystem-l1-1-0

_access _chmod _findclose _findfirst64i32 _findnext64i32 _fstat64 _fstat64i32 _fullpath _lock_file _mkdir _rmdir _stat64 _stat64i32 _unlink _unlock_file _waccess _wfindfirst64i32 _wfindnext64i32 _wfullpath _wmkdir _wremove _wrename _wrmdir _wstat64 _wstat64i32 _wunlink remove rename

api-ms-win-crt-string-l1-1-0

_strdup _stricmp _strlwr _strnicmp _strrev _strupr _wcsdup _wcsicmp _wcsnicmp isalnum isalpha isblank iscntrl isdigit isgraph islower isprint ispunct isspace isupper iswspace isxdigit mbrlen memset strcat strcmp strcpy strcspn strlen strncat strncmp strncpy strncpy_s strnlen strpbrk strspn strtok strtok_s tolower toupper towupper wcscat wcscat_s wcscmp wcscoll wcscpy wcscpy_s wcslen wcsncmp wcsncpy wcsncpy_s wcsnlen

api-ms-win-crt-private-l1-1-0

__DestructExceptionObject __intrinsic_setjmp longjmp memchr memcmp memcpy memmove strchr strrchr strstr wcschr wcsrchr wcsstr

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func ___mb_cur_max_func __pctype_func _configthreadlocale _create_locale _free_locale localeconv setlocale

api-ms-win-crt-time-l1-1-0

_difftime64 _ftime64 _ftime64_s _gmtime64 _gmtime64_s _localtime64 _localtime64_s _mkgmtime64 _mktime64 _strftime_l _time32 _time64 _utime64 clock strftime

api-ms-win-crt-convert-l1-1-0

_i64toa _itoa _ltoa _strtod_l _ui64toa _ultoa atof atoi mbrtowc mbsrtowcs strtod strtof strtol strtoll strtoul strtoull strtoumax wcrtomb wcrtomb_s wcstol wcstombs wcstombs_s wcstoul

api-ms-win-crt-utility-l1-1-0

bsearch div ldiv lldiv qsort rand rand_s srand

api-ms-win-crt-heap-l1-1-0

_aligned_free _aligned_malloc _aligned_realloc calloc free malloc realloc

api-ms-win-crt-math-l1-1-0

_fdopen _hypot _j1 acos acosf acosh asin asinf asinh asinhf atan atan2 atan2f atanf atanh cbrt cbrtf ceil ceilf cos cosf cosh erf erff exp exp2 exp2f expf expm1 fabs floor floorf fmod fmodf frexp hypot llrint llroundf log log10 log10f log1p log1pf log2 log2f logf lrint lrintf lround lroundf modf modff nextafter pow powf remainder rint rintf round roundf sin sinf sinh sinhf sqrt sqrtf tan tanf tanh tanhf trunc truncf

api-ms-win-crt-multibyte-l1-1-0

_mbsrchr _mbtowc_l

bcrypt

BCryptCloseAlgorithmProvider BCryptCreateHash BCryptDeriveKeyPBKDF2 BCryptDestroyKey BCryptEncrypt BCryptFinishHash BCryptGenRandom BCryptGenerateSymmetricKey BCryptGetProperty BCryptHashData BCryptOpenAlgorithmProvider BCryptSetProperty

shlwapi

PathRemoveFileSpecW SHCreateStreamOnFileA

ws2_32

WSACleanup WSACloseEvent WSACreateEvent WSAEnumNetworkEvents WSAEventSelect WSAGetLastError WSAGetOverlappedResult WSAIoctl WSARecvFrom WSAResetEvent WSASendTo WSASetEvent WSASetLastError WSASocketA WSAStartup WSAStringToAddressA WSAWaitForMultipleEvents __WSAFDIsSet accept bind closesocket connect freeaddrinfo getaddrinfo gethostbyaddr gethostbyname gethostname getnameinfo getpeername getservbyname getservbyport getsockname getsockopt htonl htons inet_addr inet_ntoa inet_ntop ioctlsocket listen ntohl ntohs recv recvfrom select send sendto setsockopt shutdown socket

dwrite

DWriteCreateFactory

wldap32

ber_free ldap_bind_sW ldap_err2stringA ldap_first_attributeW ldap_first_entry ldap_get_dnW ldap_get_values_lenW ldap_initW ldap_memfreeW ldap_msgfree ldap_next_attributeW ldap_next_entry ldap_search_sW ldap_set_optionW ldap_simple_bind_sW ldap_sslinitW ldap_unbind_s ldap_value_free_len

crypt32

CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext CertGetEnhancedKeyUsage CertGetIntendedKeyUsage CertOpenSystemStoreA CertOpenSystemStoreW

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

bcryptprimitives

ProcessPrng

avicap32

capCreateCaptureWindowA capGetDriverDescriptionA

winmm

timeBeginPeriod timeEndPeriod waveInAddBuffer waveInClose waveInGetDevCapsW waveInGetNumDevs waveInOpen waveInPrepareHeader waveInReset waveInStart waveInStop waveInUnprepareHeader waveOutClose waveOutGetDevCapsW waveOutGetErrorTextW waveOutGetNumDevs waveOutOpen waveOutPrepareHeader waveOutReset waveOutUnprepareHeader waveOutWrite

setupapi

CM_Get_Device_IDA CM_Get_Parent CM_Locate_DevNodeA SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiEnumDeviceInterfaces SetupDiGetClassDevsA SetupDiGetDeviceInterfaceDetailA SetupDiGetDeviceRegistryPropertyA

iphlpapi

CancelMibChangeNotify2 GetAdaptersAddresses GetBestRoute2 NotifyIpInterfaceChange if_indextoname if_nametoindex

secur32

InitSecurityInterfaceW

normaliz

IdnToAscii IdnToUnicode

d2d1

D2D1CreateFactory

Java_java_awt_BDFontMetrics_charWidthN Java_java_awt_BDFontMetrics_charsWidthN Java_java_awt_BDFontMetrics_destroyFontN Java_java_awt_BDFontMetrics_destroyN Java_java_awt_BDFontMetrics_getFontFamilyAndStyleN Java_java_awt_BDFontMetrics_initN Java_java_awt_BDFontMetrics_loadFontN Java_java_awt_BDFontMetrics_resolveFontN Java_java_awt_BDFontMetrics_stringWidthN Java_java_awt_BDFontMetrics_unloadFontConfigN Java_java_awt_BDGraphics_drawStringN Java_org_videolan_Libbluray_cacheBdRomFileN Java_org_videolan_Libbluray_getAacsDataN Java_org_videolan_Libbluray_getBdjoN Java_org_videolan_Libbluray_getPlaylistInfoN Java_org_videolan_Libbluray_getTitleInfosN Java_org_videolan_Libbluray_getUOMaskN Java_org_videolan_Libbluray_listBdFilesN Java_org_videolan_Libbluray_readRegN Java_org_videolan_Libbluray_seekN Java_org_videolan_Libbluray_selectAngleN Java_org_videolan_Libbluray_selectPlaylistN Java_org_videolan_Libbluray_selectRateN Java_org_videolan_Libbluray_selectTitleN Java_org_videolan_Libbluray_setKeyInterestN Java_org_videolan_Libbluray_setUOMaskN Java_org_videolan_Libbluray_setVirtualPackageN Java_org_videolan_Libbluray_soundEffectN Java_org_videolan_Libbluray_tellTimeN Java_org_videolan_Libbluray_updateGraphicN Java_org_videolan_Libbluray_writeRegN Java_org_videolan_Logger_logN mpv_abort_async_command mpv_client_api_version mpv_client_id mpv_client_name mpv_command mpv_command_async mpv_command_node mpv_command_node_async mpv_command_ret mpv_command_string mpv_create mpv_create_client mpv_create_weak_client mpv_del_property mpv_destroy mpv_error_string mpv_event_name mpv_event_to_node mpv_free mpv_free_node_contents mpv_get_property mpv_get_property_async mpv_get_property_osd_string mpv_get_property_string mpv_get_time_ns mpv_get_time_us mpv_get_wakeup_pipe mpv_hook_add mpv_hook_continue mpv_initialize mpv_load_config_file mpv_observe_property mpv_render_context_create mpv_render_context_free mpv_render_context_get_info mpv_render_context_render mpv_render_context_report_swap mpv_render_context_set_parameter mpv_render_context_set_update_callback mpv_render_context_update mpv_request_event mpv_request_log_messages mpv_set_option mpv_set_option_string mpv_set_property mpv_set_property_async mpv_set_property_string mpv_set_wakeup_callback mpv_stream_cb_add_ro mpv_terminate_destroy mpv_unobserve_property mpv_wait_async_requests mpv_wait_event mpv_wakeup opus_decode opus_decode24 opus_decode_float opus_decoder_create opus_decoder_ctl opus_decoder_destroy opus_decoder_dred_decode opus_decoder_dred_decode24 opus_decoder_dred_decode_float opus_decoder_get_nb_samples opus_decoder_get_size opus_decoder_init opus_dred_alloc opus_dred_decoder_create opus_dred_decoder_ctl opus_dred_decoder_destroy opus_dred_decoder_get_size opus_dred_decoder_init opus_dred_free opus_dred_get_size opus_dred_parse opus_dred_process opus_encode opus_encode24 opus_encode_float opus_encoder_create opus_encoder_ctl opus_encoder_destroy opus_encoder_get_size opus_encoder_init opus_get_version_string opus_multistream_decode opus_multistream_decode24 opus_multistream_decode_float opus_multistream_decoder_create opus_multistream_decoder_ctl opus_multistream_decoder_destroy opus_multistream_decoder_get_size opus_multistream_decoder_init opus_multistream_encode opus_multistream_encode24 opus_multistream_encode_float opus_multistream_encoder_create opus_multistream_encoder_ctl opus_multistream_encoder_destroy opus_multistream_encoder_get_size opus_multistream_encoder_init opus_multistream_packet_pad opus_multistream_packet_unpad opus_multistream_surround_encoder_create opus_multistream_surround_encoder_get_size opus_multistream_surround_encoder_init opus_packet_get_bandwidth opus_packet_get_nb_channels opus_packet_get_nb_frames opus_packet_get_nb_samples opus_packet_get_samples_per_frame opus_packet_has_lbrr opus_packet_pad opus_packet_parse opus_packet_unpad opus_pcm_soft_clip opus_repacketizer_cat opus_repacketizer_create opus_repacketizer_destroy opus_repacketizer_get_nb_frames opus_repacketizer_get_size opus_repacketizer_init opus_repacketizer_out opus_repacketizer_out_range opus_strerror sixel_allocator_calloc sixel_allocator_free sixel_allocator_malloc sixel_allocator_new sixel_allocator_realloc sixel_allocator_ref sixel_allocator_tests_main sixel_allocator_unref sixel_dither_apply_palette sixel_dither_create sixel_dither_destroy sixel_dither_get sixel_dither_get_num_of_histgram_colors sixel_dither_get_num_of_histogram_colors sixel_dither_get_num_of_palette_colors sixel_dither_get_palette sixel_dither_initialize sixel_dither_new sixel_dither_ref sixel_dither_set_body_only sixel_dither_set_complexion_score sixel_dither_set_diffusion_type sixel_dither_set_optimize_palette sixel_dither_set_palette sixel_dither_set_pixelformat sixel_dither_set_transparent sixel_dither_tests_main sixel_dither_unref sixel_encode sixel_helper_compute_depth sixel_helper_format_error sixel_helper_get_additional_message sixel_helper_normalize_pixelformat sixel_helper_set_additional_message sixel_output_create sixel_output_destroy sixel_output_get_8bit_availability sixel_output_new sixel_output_ref sixel_output_set_8bit_availability sixel_output_set_encode_policy sixel_output_set_gri_arg_limit sixel_output_set_palette_type sixel_output_set_penetrate_multiplexer sixel_output_set_skip_dcs_envelope sixel_output_unref sixel_pixelformat_tests_main sixel_quant_tests_main sixel_status_tests_main

Name

.text

Size

93.2MB

Virtual Size

93.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

20.2MB

Virtual Size

20.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

155B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

245KB

Virtual Size

12.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

778KB

Virtual Size

778KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

512B

Virtual Size

464B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rodata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rodata

Size

176KB

Virtual Size

176KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

268KB

Virtual Size

267KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

312KB

Virtual Size

312KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

SaimoTV/vulkan-1.dll

IMPHASH 58ee5777c2450ed77edc5d36b5dc33ed
SHA256 e1fcfc9489beefa6a6d9d11d6c7517f6a2b7f16e0d3fb8f4103bee0210f314a3
MD5 d4ea41e406808d362d05e1d70810533e
SHA1 0d584e57dd0215a78734c52ef53d1527457a02d9
SHA512 d95d5e44cf146fe4b27f0aaaa36bc133eb9243d2b4732165dea815cee91b64ec689797ec4aa16eef1f6d7f6a661f6c1df806aac69aa30a25c53171b5d3647ee6
SSDEEP 49152:wWeNfNaoczDDr3FTKNlC1k+Dkw7ejv6g3v0TAE7yoeH9EO:PdO
TLSH
T179857D66DBA81654C2BB823CC8518B4FC6B3F85113249BCF01B907E55F53BE46ABEB50
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

21:13:15:51:32:91:8f:60:1d:d9:22:a4:90:54:63:c7:ac:fd:9f:de:f2:51:4f:86:58:d7:0d:e1:8c:c1:b6:cb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=20091538863,CN=LunarG\, Inc.,O=LunarG\, Inc.,L=Fort Collins,ST=Colorado,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#1308436f6c6f7261646f,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Sep 27, 2026

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

05:a9:52:4c:ff:13:72:ee:76:82:de:80:36:7a:ea:51

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 1, 2024 - Jun 12, 2027

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

5184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\SDKBuild\build-X64-1.4.363.0\Vulkan-Loader\build\loader\RelWithDebInfo\vulkan-1.pdb

cfgmgr32

CM_Get_Sibling CM_Get_DevNode_Status CM_Get_DevNode_Registry_PropertyW CM_Get_Device_ID_List_SizeW CM_Get_Device_ID_ListW CM_Get_Device_IDW CM_Open_DevNode_Key CM_Locate_DevNodeW CM_Get_Child

kernel32

DeleteCriticalSection InitOnceExecuteOnce FreeLibrary GetModuleFileNameW GetFullPathNameA LoadLibraryExW LoadLibraryW OutputDebugStringA CreateFileW GetFileSize ReadFile InitializeCriticalSection GetSystemDirectoryW IsWow64Process GetModuleFileNameA GetModuleHandleA GetModuleHandleExA LoadLibraryExA WriteConsoleW WideCharToMultiByte MultiByteToWideChar GetCurrentProcess CloseHandle GetEnvironmentVariableW LeaveCriticalSection EnterCriticalSection GetLastError GetProcAddress RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx InterlockedPushEntrySList InterlockedFlushSList SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer RaiseException RtlPcToFileHeader GetFileAttributesExW FindClose FindFirstFileExW FindNextFileW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime ExitProcess GetModuleHandleExW HeapAlloc HeapFree HeapReAlloc GetCurrentThread GetStdHandle GetFileType SetConsoleCtrlHandler GetTempPathW FlsAlloc FlsGetValue FlsSetValue FlsFree IsThreadAFiber InitializeCriticalSectionEx VirtualProtect GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileSizeEx SetFilePointerEx IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap GetStringTypeW SetStdHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode GetTimeZoneInformation HeapSize ReadConsoleW OutputDebugStringW RtlUnwind

advapi32

GetSidSubAuthority GetSidSubAuthorityCount GetTokenInformation RegCloseKey RegEnumValueA RegOpenKeyExA RegQueryValueExA OpenProcessToken

vkAcquireNextImage2KHR vkAcquireNextImageKHR vkAllocateCommandBuffers vkAllocateDescriptorSets vkAllocateMemory vkBeginCommandBuffer vkBindBufferMemory vkBindBufferMemory2 vkBindImageMemory vkBindImageMemory2 vkCmdBeginQuery vkCmdBeginRenderPass vkCmdBeginRenderPass2 vkCmdBeginRendering vkCmdBindDescriptorSets vkCmdBindDescriptorSets2 vkCmdBindIndexBuffer vkCmdBindIndexBuffer2 vkCmdBindPipeline vkCmdBindVertexBuffers vkCmdBindVertexBuffers2 vkCmdBlitImage vkCmdBlitImage2 vkCmdClearAttachments vkCmdClearColorImage vkCmdClearDepthStencilImage vkCmdCopyBuffer vkCmdCopyBuffer2 vkCmdCopyBufferToImage vkCmdCopyBufferToImage2 vkCmdCopyImage vkCmdCopyImage2 vkCmdCopyImageToBuffer vkCmdCopyImageToBuffer2 vkCmdCopyQueryPoolResults vkCmdDispatch vkCmdDispatchBase vkCmdDispatchIndirect vkCmdDraw vkCmdDrawIndexed vkCmdDrawIndexedIndirect vkCmdDrawIndexedIndirectCount vkCmdDrawIndirect vkCmdDrawIndirectCount vkCmdEndQuery vkCmdEndRenderPass vkCmdEndRenderPass2 vkCmdEndRendering vkCmdExecuteCommands vkCmdFillBuffer vkCmdNextSubpass vkCmdNextSubpass2 vkCmdPipelineBarrier vkCmdPipelineBarrier2 vkCmdPushConstants vkCmdPushConstants2 vkCmdPushDescriptorSet vkCmdPushDescriptorSet2 vkCmdPushDescriptorSetWithTemplate vkCmdPushDescriptorSetWithTemplate2 vkCmdResetEvent vkCmdResetEvent2 vkCmdResetQueryPool vkCmdResolveImage vkCmdResolveImage2 vkCmdSetBlendConstants vkCmdSetCullMode vkCmdSetDepthBias vkCmdSetDepthBiasEnable vkCmdSetDepthBounds vkCmdSetDepthBoundsTestEnable vkCmdSetDepthCompareOp vkCmdSetDepthTestEnable vkCmdSetDepthWriteEnable vkCmdSetDeviceMask vkCmdSetEvent vkCmdSetEvent2 vkCmdSetFrontFace vkCmdSetLineStipple vkCmdSetLineWidth vkCmdSetPrimitiveRestartEnable vkCmdSetPrimitiveTopology vkCmdSetRasterizerDiscardEnable vkCmdSetRenderingAttachmentLocations vkCmdSetRenderingInputAttachmentIndices vkCmdSetScissor vkCmdSetScissorWithCount vkCmdSetStencilCompareMask vkCmdSetStencilOp vkCmdSetStencilReference vkCmdSetStencilTestEnable vkCmdSetStencilWriteMask vkCmdSetViewport vkCmdSetViewportWithCount vkCmdUpdateBuffer vkCmdWaitEvents vkCmdWaitEvents2 vkCmdWriteTimestamp vkCmdWriteTimestamp2 vkCopyImageToImage vkCopyImageToMemory vkCopyMemoryToImage vkCreateBuffer vkCreateBufferView vkCreateCommandPool vkCreateComputePipelines vkCreateDescriptorPool vkCreateDescriptorSetLayout vkCreateDescriptorUpdateTemplate vkCreateDevice vkCreateDisplayModeKHR vkCreateDisplayPlaneSurfaceKHR vkCreateEvent vkCreateFence vkCreateFramebuffer vkCreateGraphicsPipelines vkCreateHeadlessSurfaceEXT vkCreateImage vkCreateImageView vkCreateInstance vkCreatePipelineCache vkCreatePipelineLayout vkCreatePrivateDataSlot vkCreateQueryPool vkCreateRenderPass vkCreateRenderPass2 vkCreateSampler vkCreateSamplerYcbcrConversion vkCreateSemaphore vkCreateShaderModule vkCreateSharedSwapchainsKHR vkCreateSwapchainKHR vkCreateWin32SurfaceKHR vkDestroyBuffer vkDestroyBufferView vkDestroyCommandPool vkDestroyDescriptorPool vkDestroyDescriptorSetLayout vkDestroyDescriptorUpdateTemplate vkDestroyDevice vkDestroyEvent vkDestroyFence vkDestroyFramebuffer vkDestroyImage vkDestroyImageView vkDestroyInstance vkDestroyPipeline vkDestroyPipelineCache vkDestroyPipelineLayout vkDestroyPrivateDataSlot vkDestroyQueryPool vkDestroyRenderPass vkDestroySampler vkDestroySamplerYcbcrConversion vkDestroySemaphore vkDestroyShaderModule vkDestroySurfaceKHR vkDestroySwapchainKHR vkDeviceWaitIdle vkEndCommandBuffer vkEnumerateDeviceExtensionProperties vkEnumerateDeviceLayerProperties vkEnumerateInstanceExtensionProperties vkEnumerateInstanceLayerProperties vkEnumerateInstanceVersion vkEnumeratePhysicalDeviceGroups vkEnumeratePhysicalDevices vkFlushMappedMemoryRanges vkFreeCommandBuffers vkFreeDescriptorSets vkFreeMemory vkGetBufferDeviceAddress vkGetBufferMemoryRequirements vkGetBufferMemoryRequirements2 vkGetBufferOpaqueCaptureAddress vkGetDescriptorSetLayoutSupport vkGetDeviceBufferMemoryRequirements vkGetDeviceGroupPeerMemoryFeatures vkGetDeviceGroupPresentCapabilitiesKHR vkGetDeviceGroupSurfacePresentModesKHR vkGetDeviceImageMemoryRequirements vkGetDeviceImageSparseMemoryRequirements vkGetDeviceImageSubresourceLayout vkGetDeviceMemoryCommitment vkGetDeviceMemoryOpaqueCaptureAddress vkGetDeviceProcAddr vkGetDeviceQueue vkGetDeviceQueue2 vkGetDisplayModeProperties2KHR vkGetDisplayModePropertiesKHR vkGetDisplayPlaneCapabilities2KHR vkGetDisplayPlaneCapabilitiesKHR vkGetDisplayPlaneSupportedDisplaysKHR vkGetEventStatus vkGetFenceStatus vkGetImageMemoryRequirements vkGetImageMemoryRequirements2 vkGetImageSparseMemoryRequirements vkGetImageSparseMemoryRequirements2 vkGetImageSubresourceLayout vkGetImageSubresourceLayout2 vkGetInstanceProcAddr vkGetPhysicalDeviceDisplayPlaneProperties2KHR vkGetPhysicalDeviceDisplayPlanePropertiesKHR vkGetPhysicalDeviceDisplayProperties2KHR vkGetPhysicalDeviceDisplayPropertiesKHR vkGetPhysicalDeviceExternalBufferProperties vkGetPhysicalDeviceExternalFenceProperties vkGetPhysicalDeviceExternalSemaphoreProperties vkGetPhysicalDeviceFeatures vkGetPhysicalDeviceFeatures2 vkGetPhysicalDeviceFormatProperties vkGetPhysicalDeviceFormatProperties2 vkGetPhysicalDeviceImageFormatProperties vkGetPhysicalDeviceImageFormatProperties2 vkGetPhysicalDeviceMemoryProperties vkGetPhysicalDeviceMemoryProperties2 vkGetPhysicalDevicePresentRectanglesKHR vkGetPhysicalDeviceProperties vkGetPhysicalDeviceProperties2 vkGetPhysicalDeviceQueueFamilyProperties vkGetPhysicalDeviceQueueFamilyProperties2 vkGetPhysicalDeviceSparseImageFormatProperties vkGetPhysicalDeviceSparseImageFormatProperties2 vkGetPhysicalDeviceSurfaceCapabilities2KHR vkGetPhysicalDeviceSurfaceCapabilitiesKHR vkGetPhysicalDeviceSurfaceFormats2KHR vkGetPhysicalDeviceSurfaceFormatsKHR vkGetPhysicalDeviceSurfacePresentModesKHR vkGetPhysicalDeviceSurfaceSupportKHR vkGetPhysicalDeviceToolProperties vkGetPhysicalDeviceWin32PresentationSupportKHR vkGetPipelineCacheData vkGetPrivateData vkGetQueryPoolResults vkGetRenderAreaGranularity vkGetRenderingAreaGranularity vkGetSemaphoreCounterValue vkGetSwapchainImagesKHR vkInvalidateMappedMemoryRanges vkMapMemory vkMapMemory2 vkMergePipelineCaches vkQueueBindSparse vkQueuePresentKHR vkQueueSubmit vkQueueSubmit2 vkQueueWaitIdle vkResetCommandBuffer vkResetCommandPool vkResetDescriptorPool vkResetEvent vkResetFences vkResetQueryPool vkSetEvent vkSetPrivateData vkSignalSemaphore vkTransitionImageLayout vkTrimCommandPool vkUnmapMemory vkUnmapMemory2 vkUpdateDescriptorSetWithTemplate vkUpdateDescriptorSets vkWaitForFences vkWaitSemaphores

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

363KB

Virtual Size

362KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

388B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

1024B

Virtual Size

563B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

SaimoTV-Windows.zip

SaimoTV/LEIAME.txt

SaimoTV/Saimo TV.exe

advapi32

gdi32

kernel32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

opengl32

shell32

user32

bcrypt

dwmapi

imm32

ntdll

ole32

ws2_32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

api-ms-win-core-winrt-l1-1-0

comdlg32

uxtheme

combase

oleaut32

generic

SaimoTV/libmpv-2.dll

gdi32

ole32

user32

version

vulkan-1

advapi32

shell32

kernel32

oleaut32

api-ms-win-core-winrt-l1-1-0

ntdll

avrt

dwmapi

imm32

api-ms-win-core-path-l1-1-0

shcore

uxtheme

api-ms-win-core-winrt-error-l1-1-1

opengl32

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

bcrypt

shlwapi

ws2_32

dwrite

wldap32

crypt32

api-ms-win-core-synch-l1-2-0

bcryptprimitives

avicap32

winmm

setupapi