Errors

General

Malware Config

Signatures

Files

• @!ⱾetUp_11755__#PaŜṨW0rd!$!$.zip

  .zip

  Password: 11755

• files___here/!@SetUp__#K?yPa?$!!$--11755.rar

  .rar

  Password: 11755

• Engine.js
• Setup.exe

  .exe windows:6 windows x86 arch:x86

  Password: 11755

  e30b6006fb6f4fe4fb6e0a3e6913226a

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  d3dx9_43

  D3DXMatrixTranspose

  D3DXMatrixRotationAxis

  D3DXMatrixScaling

  D3DXVec3TransformCoord

  D3DXCreateTextureFromFileInMemoryEx

  D3DXComputeNormals

  D3DXMatrixRotationY

  D3DXMatrixRotationZ

  D3DXVec3Normalize

  D3DXVec3TransformNormal

  D3DXCreateMeshFVF

  D3DXMatrixRotationX

  D3DXVec4Transform

  D3DXLoadMeshFromXW

  D3DXLoadSurfaceFromSurface

  D3DXComputeBoundingSphere

  D3DXGetFVFVertexSize

  D3DXLoadMeshFromXInMemory

  D3DXCreateTextureFromFileExW

  D3DXMatrixTranslation

  D3DXMatrixOrthoOffCenterLH

  D3DXMatrixOrthoOffCenterRH

  D3DXComputeNormalMap

  D3DXMatrixInverse

  D3DXCreateTexture

  D3DXMatrixPerspectiveFovLH

  D3DXMatrixLookAtLH

  D3DXCreateEffect

  D3DXMatrixMultiply

  winmm

  mmioDescend

  mmioOpenW

  mmioSeek

  mmioRead

  mmioStringToFOURCCW

  dsound

  ord11

  kernel32

  GetTimeZoneInformation

  lstrcpynW

  LockResource

  FindResourceExW

  LoadResource

  GetModuleHandleW

  SizeofResource

  HeapFree

  GetModuleFileNameW

  InitializeCriticalSectionEx

  HeapSize

  MultiByteToWideChar

  GetLastError

  HeapReAlloc

  RaiseException

  FindResourceW

  HeapAlloc

  DecodePointer

  HeapDestroy

  DeleteCriticalSection

  GetProcessHeap

  WriteProcessMemory

  OpenProcess

  CloseHandle

  VirtualAllocEx

  ReadProcessMemory

  VirtualFreeEx

  GetTempPathW

  LoadLibraryW

  WriteFile

  DeleteFileW

  CopyFileW

  GetCurrentProcess

  GetProcAddress

  VerSetConditionMask

  VerifyVersionInfoW

  lstrcpyW

  WaitForSingleObject

  Sleep

  TerminateThread

  CreateThread

  CreateProcessW

  TlsSetValue

  TlsGetValue

  LoadLibraryExW

  TlsAlloc

  TlsFree

  EnterCriticalSection

  GetCommandLineW

  GetDateFormatW

  LeaveCriticalSection

  GetVersionExW

  LocalFree

  SetThreadExecutionState

  FreeLibrary

  lstrlenW

  ExpandEnvironmentStringsW

  GetFileAttributesW

  GetVersionExA

  QueryPerformanceFrequency

  QueryPerformanceCounter

  LCMapStringW

  CompareStringW

  EncodePointer

  GetSystemTimeAsFileTime

  SwitchToThread

  CreateEventW

  SetLastError

  GetStringTypeW

  WideCharToMultiByte

  GetCPInfo

  SetEvent

  ResetEvent

  WaitForSingleObjectEx

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  TerminateProcess

  IsProcessorFeaturePresent

  IsDebuggerPresent

  GetStartupInfoW

  GetCurrentProcessId

  GetCurrentThreadId

  InitializeSListHead

  OutputDebugStringW

  RtlUnwind

  GetTimeFormatW

  IsValidLocale

  GetLocaleInfoW

  CreateFileW

  GetDriveTypeW

  GetFileInformationByHandle

  GetFileType

  PeekNamedPipe

  SystemTimeToTzSpecificLocalTime

  FileTimeToSystemTime

  ExitProcess

  GetUserDefaultLCID

  EnumSystemLocalesW

  GetFileSizeEx

  SetFilePointerEx

  FlushFileBuffers

  GetConsoleCP

  GetConsoleMode

  ReadFile

  ReadConsoleW

  GetStdHandle

  GetCurrentDirectoryW

  GetFullPathNameW

  SetStdHandle

  FindClose

  FindFirstFileExW

  FindNextFileW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCommandLineA

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetEnvironmentVariableW

  WriteConsoleW

  InitializeCriticalSectionAndSpinCount

  SetEndOfFile

  GetModuleHandleExW

  user32

  SetMenu

  UnhookWindowsHookEx

  DestroyMenu

  ClipCursor

  SetWindowsHookExW

  GetClientRect

  IsZoomed

  GetClassLongW

  SetRect

  IsIconic

  ReleaseDC

  GetWindowTextW

  CreateWindowExW

  DispatchMessageW

  PeekMessageW

  AdjustWindowRect

  DestroyWindow

  EndDialog

  SetWindowTextW

  DefWindowProcW

  MessageBoxW

  GetMenuItemCount

  SetWindowPlacement

  RegisterClassW

  GetMonitorInfoW

  SystemParametersInfoA

  TrackPopupMenu

  LoadStringW

  GetSubMenu

  SetTimer

  CheckMenuItem

  PostQuitMessage

  GetParent

  BeginPaint

  EndPaint

  InvalidateRect

  EnumDisplaySettingsW

  GetMenu

  GetIconInfo

  CallNextHookEx

  GetSystemMetrics

  TranslateMessage

  GetCursorPos

  EnumDisplayMonitors

  GetWindow

  IsWindow

  FindWindowW

  RegisterClassExW

  LoadIconW

  LoadCursorW

  SetCursor

  GetWindowLongW

  GetWindowThreadProcessId

  PostMessageW

  FindWindowExW

  GetDC

  IsWindowVisible

  ShowWindow

  SetWindowLongW

  SystemParametersInfoW

  GetWindowRect

  SetWindowPos

  ScreenToClient

  SendMessageW

  UnregisterClassW

  GetDlgItem

  CreateDialogParamW

  LoadMenuIndirectW

  GetWindowPlacement

  gdi32

  GetObjectW

  GetStockObject

  BitBlt

  SelectObject

  CreateCompatibleDC

  DeleteDC

  GetDIBits

  DeleteObject

  advapi32

  RegSetValueExW

  RegCreateKeyExW

  RegCloseKey

  RegDeleteValueW

  RegQueryValueExW

  RegOpenKeyExW

  shell32

  CommandLineToArgvW

  Shell_NotifyIconW

  ShellExecuteW

  ExtractIconW

  ole32

  CoInitialize

  CoCreateGuid

  CLSIDFromString

  CoCreateInstance

  StringFromGUID2

  OleUninitialize

  oleaut32

  SysFreeString

  SysAllocString

  shlwapi

  PathFindFileNameW

  PathFileExistsW

  comctl32

  ord17

  uxtheme

  EnableThemeDialogTexture

  Sections

  .text

  Size: 1.9MB - Virtual size: 1.9MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 445KB - Virtual size: 445KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 48KB - Virtual size: 61KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 200KB - Virtual size: 199KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 141KB - Virtual size: 141KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• bin/UbuilderB.dll

  .exe windows:4 windows x86 arch:x86

  Password: 11755

  6011984d7c1f1b97a34d7517a498bff8

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  advapi32

  RegCloseKey

  RegEnumKeyExA

  RegOpenKeyExA

  RegQueryValueExA

  kernel32

  CloseHandle

  CreateMutexA

  CreateProcessA

  ExitProcess

  FindResourceExA

  FormatMessageA

  GetCommandLineA

  GetCurrentDirectoryA

  GetCurrentProcess

  GetEnvironmentVariableA

  GetExitCodeProcess

  GetLastError

  GetModuleFileNameA

  GetModuleHandleA

  GetProcAddress

  GetStartupInfoA

  GlobalMemoryStatusEx

  LoadResource

  LocalFree

  LockResource

  SetEnvironmentVariableA

  SetLastError

  SetUnhandledExceptionFilter

  WaitForSingleObject

  msvcrt

  __getmainargs

  __p__environ

  __p__fmode

  __set_app_type

  _cexit

  _chdir

  _close

  _findclose

  _findfirst

  _findnext

  _iob

  _itoa

  _onexit

  _open

  _read

  _setmode

  _stat

  atexit

  atoi

  fclose

  fopen

  fprintf

  fwrite

  memset

  printf

  puts

  signal

  strcat

  strchr

  strcmp

  strcpy

  strlen

  strncat

  strncpy

  strpbrk

  strrchr

  strstr

  strtok

  shell32

  ShellExecuteA

  user32

  CreateWindowExA

  DispatchMessageA

  EnumWindows

  FindWindowExA

  GetMessageA

  GetSystemMetrics

  GetWindowLongA

  GetWindowRect

  GetWindowTextA

  GetWindowThreadProcessId

  KillTimer

  LoadImageA

  MessageBoxA

  PostQuitMessage

  SendMessageA

  SetForegroundWindow

  SetTimer

  SetWindowPos

  ShowWindow

  TranslateMessage

  UpdateWindow

  Sections

  .text

  Size: 24KB - Virtual size: 24KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 64B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .bss

  Size: - Virtual size: 35KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• bin/scv.jar
• cutline.ppt
• d3dx9_43.dll

  .dll windows:6 windows x86 arch:x86

  Password: 11755

  5fb75b2a87c1fa7cc3d7904a0b97084a

  
  

  Code Sign

  2e:ab:11:dc:50:ff:5c:9d:cb:c0

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  22-08-2007 22:31

  Not After

  25-08-2012 07:00

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:01:cf:3e:00:00:00:00:00:0f

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07-12-2009 22:40

  Not After

  07-03-2011 22:40

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  16-09-2006 01:04

  Not After

  15-09-2019 07:00

  Subject

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:06:94:2d:00:00:00:00:00:09

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  25-07-2008 19:02

  Not After

  25-07-2013 19:12

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  75:99:38:c2:85:31:63:be:ee:8f:f0:27:22:54:76:fa:01:08:27:6d

  Signer

  Actual PE Digest

  75:99:38:c2:85:31:63:be:ee:8f:f0:27:22:54:76:fa:01:08:27:6d

  Digest Algorithm

  sha1

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d3dx9_43.pdb

  Imports

  msvcrt

  _isatty

  _write

  _lseeki64

  __pioinfo

  __badioinfo

  wctomb

  _itoa

  _snprintf

  _fileno

  isleadbyte

  ?terminate@@YAXXZ

  _onexit

  _lock

  __dllonexit

  _unlock

  _amsg_exit

  _initterm

  _XcptFilter

  srand

  strtod

  fread

  fflush

  fwrite

  abort

  _tempnam

  exit

  isalpha

  atof

  atol

  isxdigit

  _ultoa

  wcstombs

  _CIexp

  _isnan

  rand

  atoi

  isalnum

  floor

  _strtime

  _strdate

  sscanf

  isspace

  isdigit

  _setjmp3

  longjmp

  ldexp

  frexp

  calloc

  realloc

  _CIlog

  setlocale

  _strdup

  free

  _clearfp

  ceil

  _controlfp

  malloc

  _CIatan

  _CIcos

  _CIasin

  _finite

  _CIsin

  _CIatan2

  _CIacos

  memmove

  qsort

  _CIfmod

  _purecall

  _stricmp

  modf

  iswspace

  iswalpha

  iswdigit

  iswpunct

  _CIsqrt

  memcpy

  memset

  _CIpow

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  _iob

  _vsnprintf

  _vsnwprintf

  _errno

  __CxxFrameHandler

  gdi32

  GetTextMetricsA

  GetObjectA

  GetGlyphOutlineA

  CreateDIBSection

  DeleteDC

  DeleteObject

  SelectObject

  GetCharacterPlacementW

  GetCharacterPlacementA

  SetTextColor

  SetBkColor

  SetBkMode

  GetTextMetricsW

  GetFontLanguageInfo

  CreateFontIndirectA

  CreateFontIndirectW

  SetTextAlign

  SetMapMode

  CreateCompatibleDC

  ExtTextOutA

  MoveToEx

  ExtTextOutW

  TranslateCharsetInfo

  GetCurrentObject

  GetOutlineTextMetricsA

  GetGlyphOutlineW

  GetObjectW

  kernel32

  DeleteFileW

  SetFilePointer

  GetFileSize

  CreateFileMappingA

  MapViewOfFile

  UnmapViewOfFile

  FindResourceA

  LoadResource

  LockResource

  SizeofResource

  FreeResource

  CompareStringA

  LeaveCriticalSection

  EnterCriticalSection

  DeleteCriticalSection

  InitializeCriticalSection

  FormatMessageA

  LocalFree

  CreateFileW

  GetFileSizeEx

  GetFullPathNameW

  GetLastError

  IsDBCSLeadByte

  WriteFile

  GetTempPathA

  MoveFileA

  CreateFileA

  ReadFile

  CloseHandle

  DeleteFileA

  InterlockedDecrement

  InterlockedIncrement

  IsProcessorFeaturePresent

  VirtualFree

  GetACP

  WideCharToMultiByte

  MultiByteToWideChar

  OutputDebugStringA

  GetModuleHandleA

  FreeLibrary

  LoadLibraryA

  GetVersionExA

  GetSystemInfo

  GetProcAddress

  VirtualAlloc

  GetProcessHeap

  HeapFree

  HeapAlloc

  DisableThreadLibraryCalls

  MoveFileW

  GetTempFileNameW

  GlobalMemoryStatus

  SetEndOfFile

  ExpandEnvironmentStringsA

  IsBadCodePtr

  IsBadReadPtr

  IsBadWritePtr

  WaitForSingleObject

  ReleaseMutex

  CreateMutexA

  Sleep

  InterlockedExchange

  InterlockedCompareExchange

  RtlUnwind

  QueryPerformanceCounter

  GetTickCount

  GetCurrentThreadId

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetVersion

  GetTempFileNameA

  FindResourceW

  advapi32

  RegOpenKeyA

  RegQueryValueExA

  RegCloseKey

  Exports

  Exports

  D3DXAssembleShader

  D3DXAssembleShaderFromFileA

  D3DXAssembleShaderFromFileW

  D3DXAssembleShaderFromResourceA

  D3DXAssembleShaderFromResourceW

  D3DXBoxBoundProbe

  D3DXCheckCubeTextureRequirements

  D3DXCheckTextureRequirements

  D3DXCheckVersion

  D3DXCheckVolumeTextureRequirements

  D3DXCleanMesh

  D3DXColorAdjustContrast

  D3DXColorAdjustSaturation

  D3DXCompileShader

  D3DXCompileShaderFromFileA

  D3DXCompileShaderFromFileW

  D3DXCompileShaderFromResourceA

  D3DXCompileShaderFromResourceW

  D3DXComputeBoundingBox

  D3DXComputeBoundingSphere

  D3DXComputeIMTFromPerTexelSignal

  D3DXComputeIMTFromPerVertexSignal

  D3DXComputeIMTFromSignal

  D3DXComputeIMTFromTexture

  D3DXComputeNormalMap

  D3DXComputeNormals

  D3DXComputeTangent

  D3DXComputeTangentFrame

  D3DXComputeTangentFrameEx

  D3DXConcatenateMeshes

  D3DXConvertMeshSubsetToSingleStrip

  D3DXConvertMeshSubsetToStrips

  D3DXCreateAnimationController

  D3DXCreateBox

  D3DXCreateBuffer

  D3DXCreateCompressedAnimationSet

  D3DXCreateCubeTexture

  D3DXCreateCubeTextureFromFileA

  D3DXCreateCubeTextureFromFileExA

  D3DXCreateCubeTextureFromFileExW

  D3DXCreateCubeTextureFromFileInMemory

  D3DXCreateCubeTextureFromFileInMemoryEx

  D3DXCreateCubeTextureFromFileW

  D3DXCreateCubeTextureFromResourceA

  D3DXCreateCubeTextureFromResourceExA

  D3DXCreateCubeTextureFromResourceExW

  D3DXCreateCubeTextureFromResourceW

  D3DXCreateCylinder

  D3DXCreateEffect

  D3DXCreateEffectCompiler

  D3DXCreateEffectCompilerFromFileA

  D3DXCreateEffectCompilerFromFileW

  D3DXCreateEffectCompilerFromResourceA

  D3DXCreateEffectCompilerFromResourceW

  D3DXCreateEffectEx

  D3DXCreateEffectFromFileA

  D3DXCreateEffectFromFileExA

  D3DXCreateEffectFromFileExW

  D3DXCreateEffectFromFileW

  D3DXCreateEffectFromResourceA

  D3DXCreateEffectFromResourceExA

  D3DXCreateEffectFromResourceExW

  D3DXCreateEffectFromResourceW

  D3DXCreateEffectPool

  D3DXCreateFontA

  D3DXCreateFontIndirectA

  D3DXCreateFontIndirectW

  D3DXCreateFontW

  D3DXCreateKeyframedAnimationSet

  D3DXCreateLine

  D3DXCreateMatrixStack

  D3DXCreateMesh

  D3DXCreateMeshFVF

  D3DXCreateNPatchMesh

  D3DXCreatePMeshFromStream

  D3DXCreatePRTBuffer

  D3DXCreatePRTBufferTex

  D3DXCreatePRTCompBuffer

  D3DXCreatePRTEngine

  D3DXCreatePatchMesh

  D3DXCreatePolygon

  D3DXCreateRenderToEnvMap

  D3DXCreateRenderToSurface

  D3DXCreateSPMesh

  D3DXCreateSkinInfo

  D3DXCreateSkinInfoFVF

  D3DXCreateSkinInfoFromBlendedMesh

  D3DXCreateSphere

  D3DXCreateSprite

  D3DXCreateTeapot

  D3DXCreateTextA

  D3DXCreateTextW

  D3DXCreateTexture

  D3DXCreateTextureFromFileA

  D3DXCreateTextureFromFileExA

  D3DXCreateTextureFromFileExW

  D3DXCreateTextureFromFileInMemory

  D3DXCreateTextureFromFileInMemoryEx

  D3DXCreateTextureFromFileW

  D3DXCreateTextureFromResourceA

  D3DXCreateTextureFromResourceExA

  D3DXCreateTextureFromResourceExW

  D3DXCreateTextureFromResourceW

  D3DXCreateTextureGutterHelper

  D3DXCreateTextureShader

  D3DXCreateTorus

  D3DXCreateVolumeTexture

  D3DXCreateVolumeTextureFromFileA

  D3DXCreateVolumeTextureFromFileExA

  D3DXCreateVolumeTextureFromFileExW

  D3DXCreateVolumeTextureFromFileInMemory

  D3DXCreateVolumeTextureFromFileInMemoryEx

  D3DXCreateVolumeTextureFromFileW

  D3DXCreateVolumeTextureFromResourceA

  D3DXCreateVolumeTextureFromResourceExA

  D3DXCreateVolumeTextureFromResourceExW

  D3DXCreateVolumeTextureFromResourceW

  D3DXDebugMute

  D3DXDeclaratorFromFVF

  D3DXDisassembleEffect

  D3DXDisassembleShader

  D3DXFVFFromDeclarator

  D3DXFileCreate

  D3DXFillCubeTexture

  D3DXFillCubeTextureTX

  D3DXFillTexture

  D3DXFillTextureTX

  D3DXFillVolumeTexture

  D3DXFillVolumeTextureTX

  D3DXFilterTexture

  D3DXFindShaderComment

  D3DXFloat16To32Array

  D3DXFloat32To16Array

  D3DXFrameAppendChild

  D3DXFrameCalculateBoundingSphere

  D3DXFrameDestroy

  D3DXFrameFind

  D3DXFrameNumNamedMatrices

  D3DXFrameRegisterNamedMatrices

  D3DXFresnelTerm

  D3DXGenerateOutputDecl

  D3DXGeneratePMesh

  D3DXGetDeclLength

  D3DXGetDeclVertexSize

  D3DXGetDriverLevel

  D3DXGetFVFVertexSize

  D3DXGetImageInfoFromFileA

  D3DXGetImageInfoFromFileInMemory

  D3DXGetImageInfoFromFileW

  D3DXGetImageInfoFromResourceA

  D3DXGetImageInfoFromResourceW

  D3DXGetPixelShaderProfile

  D3DXGetShaderConstantTable

  D3DXGetShaderConstantTableEx

  D3DXGetShaderInputSemantics

  D3DXGetShaderOutputSemantics

  D3DXGetShaderSamplers

  D3DXGetShaderSize

  D3DXGetShaderVersion

  D3DXGetVertexShaderProfile

  D3DXIntersect

  D3DXIntersectSubset

  D3DXIntersectTri

  D3DXLoadMeshFromXA

  D3DXLoadMeshFromXInMemory

  D3DXLoadMeshFromXResource

  D3DXLoadMeshFromXW

  D3DXLoadMeshFromXof

  D3DXLoadMeshHierarchyFromXA

  D3DXLoadMeshHierarchyFromXInMemory

  D3DXLoadMeshHierarchyFromXW

  D3DXLoadPRTBufferFromFileA

  D3DXLoadPRTBufferFromFileW

  D3DXLoadPRTCompBufferFromFileA

  D3DXLoadPRTCompBufferFromFileW

  D3DXLoadPatchMeshFromXof

  D3DXLoadSkinMeshFromXof

  D3DXLoadSurfaceFromFileA

  D3DXLoadSurfaceFromFileInMemory

  D3DXLoadSurfaceFromFileW

  D3DXLoadSurfaceFromMemory

  D3DXLoadSurfaceFromResourceA

  D3DXLoadSurfaceFromResourceW

  D3DXLoadSurfaceFromSurface

  D3DXLoadVolumeFromFileA

  D3DXLoadVolumeFromFileInMemory

  D3DXLoadVolumeFromFileW

  D3DXLoadVolumeFromMemory

  D3DXLoadVolumeFromResourceA

  D3DXLoadVolumeFromResourceW

  D3DXLoadVolumeFromVolume

  D3DXMatrixAffineTransformation

  D3DXMatrixAffineTransformation2D

  D3DXMatrixDecompose

  D3DXMatrixDeterminant

  D3DXMatrixInverse

  D3DXMatrixLookAtLH

  D3DXMatrixLookAtRH

  D3DXMatrixMultiply

  D3DXMatrixMultiplyTranspose

  D3DXMatrixOrthoLH

  D3DXMatrixOrthoOffCenterLH

  D3DXMatrixOrthoOffCenterRH

  D3DXMatrixOrthoRH

  D3DXMatrixPerspectiveFovLH

  D3DXMatrixPerspectiveFovRH

  D3DXMatrixPerspectiveLH

  D3DXMatrixPerspectiveOffCenterLH

  D3DXMatrixPerspectiveOffCenterRH

  D3DXMatrixPerspectiveRH

  D3DXMatrixReflect

  D3DXMatrixRotationAxis

  D3DXMatrixRotationQuaternion

  D3DXMatrixRotationX

  D3DXMatrixRotationY

  D3DXMatrixRotationYawPitchRoll

  D3DXMatrixRotationZ

  D3DXMatrixScaling

  D3DXMatrixShadow

  D3DXMatrixTransformation

  D3DXMatrixTransformation2D

  D3DXMatrixTranslation

  D3DXMatrixTranspose

  D3DXOptimizeFaces

  D3DXOptimizeVertices

  D3DXPlaneFromPointNormal

  D3DXPlaneFromPoints

  D3DXPlaneIntersectLine

  D3DXPlaneNormalize

  D3DXPlaneTransform

  D3DXPlaneTransformArray

  D3DXPreprocessShader

  D3DXPreprocessShaderFromFileA

  D3DXPreprocessShaderFromFileW

  D3DXPreprocessShaderFromResourceA

  D3DXPreprocessShaderFromResourceW

  D3DXQuaternionBaryCentric

  D3DXQuaternionExp

  D3DXQuaternionInverse

  D3DXQuaternionLn

  D3DXQuaternionMultiply

  D3DXQuaternionNormalize

  D3DXQuaternionRotationAxis

  D3DXQuaternionRotationMatrix

  D3DXQuaternionRotationYawPitchRoll

  D3DXQuaternionSlerp

  D3DXQuaternionSquad

  D3DXQuaternionSquadSetup

  D3DXQuaternionToAxisAngle

  D3DXRectPatchSize

  D3DXSHAdd

  D3DXSHDot

  D3DXSHEvalConeLight

  D3DXSHEvalDirection

  D3DXSHEvalDirectionalLight

  D3DXSHEvalHemisphereLight

  D3DXSHEvalSphericalLight

  D3DXSHMultiply2

  D3DXSHMultiply3

  D3DXSHMultiply4

  D3DXSHMultiply5

  D3DXSHMultiply6

  D3DXSHPRTCompSplitMeshSC

  D3DXSHPRTCompSuperCluster

  D3DXSHProjectCubeMap

  D3DXSHRotate

  D3DXSHRotateZ

  D3DXSHScale

  D3DXSaveMeshHierarchyToFileA

  D3DXSaveMeshHierarchyToFileW

  D3DXSaveMeshToXA

  D3DXSaveMeshToXW

  D3DXSavePRTBufferToFileA

  D3DXSavePRTBufferToFileW

  D3DXSavePRTCompBufferToFileA

  D3DXSavePRTCompBufferToFileW

  D3DXSaveSurfaceToFileA

  D3DXSaveSurfaceToFileInMemory

  D3DXSaveSurfaceToFileW

  D3DXSaveTextureToFileA

  D3DXSaveTextureToFileInMemory

  D3DXSaveTextureToFileW

  D3DXSaveVolumeToFileA

  D3DXSaveVolumeToFileInMemory

  D3DXSaveVolumeToFileW

  D3DXSimplifyMesh

  D3DXSphereBoundProbe

  D3DXSplitMesh

  D3DXTessellateNPatches

  D3DXTessellateRectPatch

  D3DXTessellateTriPatch

  D3DXTriPatchSize

  D3DXUVAtlasCreate

  D3DXUVAtlasPack

  D3DXUVAtlasPartition

  D3DXValidMesh

  D3DXValidPatchMesh

  D3DXVec2BaryCentric

  D3DXVec2CatmullRom

  D3DXVec2Hermite

  D3DXVec2Normalize

  D3DXVec2Transform

  D3DXVec2TransformArray

  D3DXVec2TransformCoord

  D3DXVec2TransformCoordArray

  D3DXVec2TransformNormal

  D3DXVec2TransformNormalArray

  D3DXVec3BaryCentric

  D3DXVec3CatmullRom

  D3DXVec3Hermite

  D3DXVec3Normalize

  D3DXVec3Project

  D3DXVec3ProjectArray

  D3DXVec3Transform

  D3DXVec3TransformArray

  D3DXVec3TransformCoord

  D3DXVec3TransformCoordArray

  D3DXVec3TransformNormal

  D3DXVec3TransformNormalArray

  D3DXVec3Unproject

  D3DXVec3UnprojectArray

  D3DXVec4BaryCentric

  D3DXVec4CatmullRom

  D3DXVec4Cross

  D3DXVec4Hermite

  D3DXVec4Normalize

  D3DXVec4Transform

  D3DXVec4TransformArray

  D3DXWeldVertices

  Sections

  .text

  Size: 1.8MB - Virtual size: 1.8MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 62KB - Virtual size: 148KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 928B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 55KB - Virtual size: 55KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• packages/DirectoryMonitor_[1MB]_[1].exe

  .exe windows:4 windows x86 arch:x86

  Password: 11755

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Code Sign

  48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

  Certificate

  Issuer

  CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  25-05-2021 00:00

  Not After

  31-12-2028 23:59

  Subject

  CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

  Certificate

  Issuer

  CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

  Not Before

  22-03-2021 00:00

  Not After

  21-03-2036 23:59

  Subject

  CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  5e:4f:4d:ea:a5:0c:13:c8:84:b8:12:e2:21:c6:bc:29

  Certificate

  Issuer

  CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

  Not Before

  30-11-2022 00:00

  Not After

  29-11-2025 23:59

  Subject

  CN=DevEnterprise Software,O=DevEnterprise Software,ST=KwaZulu-Natal,C=ZA

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-05-2019 00:00

  Not After

  18-01-2038 23:59

  Subject

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

  Certificate

  Issuer

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  03-05-2023 00:00

  Not After

  02-08-2034 23:59

  Subject

  CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16

  Certificate

  Issuer

  CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  25-05-2021 00:00

  Not After

  31-12-2028 23:59

  Subject

  CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a

  Certificate

  Issuer

  CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

  Not Before

  22-03-2021 00:00

  Not After

  21-03-2036 23:59

  Subject

  CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  5e:4f:4d:ea:a5:0c:13:c8:84:b8:12:e2:21:c6:bc:29

  Certificate

  Issuer

  CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

  Not Before

  30-11-2022 00:00

  Not After

  29-11-2025 23:59

  Subject

  CN=DevEnterprise Software,O=DevEnterprise Software,ST=KwaZulu-Natal,C=ZA

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

  Certificate

  Issuer

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  03-05-2023 00:00

  Not After

  02-08-2034 23:59

  Subject

  CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-05-2019 00:00

  Not After

  18-01-2038 23:59

  Subject

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  dd:a1:cc:af:a3:94:b6:e7:63:9f:e9:f3:f5:be:a6:2b:31:09:ad:7f:cb:3e:b3:bf:64:29:00:4d:8c:82:a5:b7

  Signer

  Actual PE Digest

  dd:a1:cc:af:a3:94:b6:e7:63:9f:e9:f3:f5:be:a6:2b:31:09:ad:7f:cb:3e:b3:bf:64:29:00:4d:8c:82:a5:b7

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  70:21:a3:4a:09:25:e5:34:a7:21:5f:ee:df:f4:a1:60:41:4f:ed:00

  Signer

  Actual PE Digest

  70:21:a3:4a:09:25:e5:34:a7:21:5f:ee:df:f4:a1:60:41:4f:ed:00

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Dev\dirmon\src\DevEnterprise.DirectoryMonitor.UI\obj\Release\DirectoryMonitor.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 1.6MB - Virtual size: 1.6MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 366KB - Virtual size: 366KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• packages/key_datas
• packages/prefix
• packages/settingss
• parabrake.rpm
• user_data/cache/version
• user_data/media_cache/version
• xNet.dll