| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2025-Nov-03 09:37:36 |
| Detected languages |
English - United States
|
| Debug artifacts |
D:\RDBuildPool\20251103-19571\startup\Src\main\Release\PowerDVD.pdb
|
| CompanyName | CyberLink Corp. |
| FileDescription | PowerDVD |
| FileVersion | 24.0.0.1103 |
| InternalName | CyberLink PowerDVD |
| LegalCopyright | Copyright (c) CyberLink Corporation. All rights reserved. |
| LegalTrademarks | CyberLink PowerDVD |
| OriginalFilename | PowerDVD.exe |
| ProductName | CyberLink PowerDVD |
| ProductVersion | 24.0.0.1103 |
| Info | The PE contains common functions which appear in legitimate applications. |
[!] The program may be hiding some of its imports:
|
| Suspicious | The PE is possibly a dropper. | Resources amount for 82.3032% of the executable. |
| Info | The PE is digitally signed. |
Signer: CyberLink Corp.
Issuer: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 |
| Safe | VirusTotal score: 0/72 (Scanned on 2025-12-15 19:49:52) | All the AVs think this file is safe. |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x100 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 6 |
| TimeDateStamp | 2025-Nov-03 09:37:36 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 11.0 |
| SizeOfCode | 0xd000 |
| SizeOfInitializedData | 0x8f000 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x000000000000CEEC (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0xa0000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0xa9011 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| SHLWAPI.dll |
PathIsDirectoryW
PathStripPathA PathRemoveFileSpecA PathStripPathW PathFindExtensionW PathRemoveFileSpecW PathFileExistsW |
|---|---|
| KERNEL32.dll |
GetModuleFileNameW
QueryPerformanceCounter QueryPerformanceFrequency SearchPathW GetCurrentProcess GetProcAddress HeapAlloc HeapFree GetProcessHeap RaiseException GetFileAttributesW GetLastError CompareFileTime DeleteFileW FindClose FindFirstFileW FindNextFileW OutputDebugStringA OutputDebugStringW WaitForSingleObject LoadLibraryA CreateProcessW GetCommandLineW GetEnvironmentVariableA SetEnvironmentVariableA SetEnvironmentVariableW SetCurrentDirectoryW CreateDirectoryW SetEvent ResetEvent CreateMutexW CreateEventW GetCurrentThreadId FreeLibrary GetModuleFileNameA LoadLibraryExA LoadLibraryExW LocalFree SetDllDirectoryW MultiByteToWideChar CreateFileW GetTempPathW GetDriveTypeW CloseHandle EncodePointer DecodePointer IsDebuggerPresent LoadLibraryW GetExitCodeProcess IsProcessorFeaturePresent GetCurrentProcessId GetSystemTimeAsFileTime |
| USER32.dll |
EnumDisplayDevicesW
|
| ADVAPI32.dll |
RegCloseKey
RegOpenKeyExW RegQueryValueExW RegSetValueExW RegCreateKeyExW |
| SHELL32.dll |
CommandLineToArgvW
SHCreateDirectoryExW SHGetSpecialFolderPathW |
| MSVCP110.dll |
??0_Pad@std@@QEAA@XZ
??1_Pad@std@@QEAA@XZ ?_Launch@_Pad@std@@QEAAXPEAU_Thrd_imp_t@@@Z ?_Release@_Pad@std@@QEAAXXZ ?_Throw_Cpp_error@std@@YAXH@Z _Thrd_current _Thrd_equal _Thrd_join ?_Orphan_all@_Container_base0@std@@QEAAXXZ ??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@ ??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@ ??_7ios_base@std@@6B@ ?id@?$ctype@_W@std@@2V0locale@2@A ??_7?$codecvt@_WDH@std@@6B@ ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Winerror_map@std@@YAPEBDH@Z ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ ?uncaught_exception@std@@YA_NXZ ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z ??Bid@locale@std@@QEAA_KXZ ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z ?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?in@?$codecvt@_WDH@std@@QEBAHAEAHPEBD1AEAPEBDPEA_W3AEAPEA_W@Z ?out@?$codecvt@_WDH@std@@QEBAHAEAHPEB_W1AEAPEB_WPEAD3AEAPEAD@Z ?unshift@?$codecvt@_WDH@std@@QEBAHAEAHPEAD1AEAPEAD@Z ??0?$codecvt@_WDH@std@@QEAA@_K@Z ?_Getcat@?$codecvt@_WDH@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??1?$codecvt@_WDH@std@@MEAA@XZ ?widen@?$ctype@_W@std@@QEBA_WD@Z ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z ?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z ?_BADOFF@std@@3_JB ??_7_Facet_base@std@@6B@ ??_7facet@locale@std@@6B@ ??_7codecvt_base@std@@6B@ ?id@?$codecvt@_WDH@std@@2V0locale@2@A |
| MSVCR110.dll |
_unlock_file
__crtUnhandledException __crt_debugger_hook _commode _fmode _acmdln _initterm _initterm_e __setusermatherr __crtSetUnhandledExceptionFilter ?_type_info_dtor_internal_method@type_info@@QEAAXXZ _configthreadlocale _ismbblead _cexit __crtCapturePreviousContext _purecall ??2@YAPEAX_K@Z ??3@YAXPEAX@Z memmove wcsnlen swprintf_s _CxxThrowException __CxxFrameHandler3 memcpy memset strnlen sprintf_s _set_purecall_handler _set_invalid_parameter_handler ?set_terminate@@YAP6AXXZP6AXXZ@Z ?set_unexpected@@YAP6AXXZP6AXXZ@Z signal __C_specific_handler memcpy_s strcat_s wcscat_s _wsplitpath_s fclose fflush fgetc fgetpos fsetpos _fseeki64 fwrite setvbuf ungetc _vsnprintf_s fgetwc fputwc ungetwc _vsnwprintf_s _lock_file _exit ??0exception@std@@QEAA@AEBQEBD@Z ??0exception@std@@QEAA@AEBV01@@Z ??1exception@std@@UEAA@XZ ??0bad_cast@std@@QEAA@PEBD@Z strftime _localtime64_s _time64 ??0bad_cast@std@@QEAA@AEBV01@@Z ??1bad_cast@std@@UEAA@XZ ?what@exception@std@@UEBAPEBDXZ _stricmp wcscpy_s wcstok_s _wcsicmp vswprintf_s _beginthreadex _endthreadex __argc __argv tolower strcpy_s _strlwr_s _wputenv_s ?terminate@@YAXXZ memcmp _lock _unlock _calloc_crt __dllonexit _onexit _XcptFilter __crtGetShowWindowMode _amsg_exit __getmainargs __set_app_type exit __crtTerminateProcess |
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 24.0.0.1103 |
| ProductVersion | 24.0.0.1103 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| CompanyName | CyberLink Corp. |
| FileDescription | PowerDVD |
| FileVersion (#2) | 24.0.0.1103 |
| InternalName | CyberLink PowerDVD |
| LegalCopyright | Copyright (c) CyberLink Corporation. All rights reserved. |
| LegalTrademarks | CyberLink PowerDVD |
| OriginalFilename | PowerDVD.exe |
| ProductName | CyberLink PowerDVD |
| ProductVersion (#2) | 24.0.0.1103 |
| Resource LangID | English - United States |
|---|
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2025-Nov-03 09:37:36 |
| Version | 0.0 |
| SizeofData | 92 |
| AddressOfRawData | 0x12c80 |
| PointerToRawData | 0x12080 |
| Referenced File | D:\RDBuildPool\20251103-19571\startup\Src\main\Release\PowerDVD.pdb |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2025-Nov-03 09:37:36 |
| Version | 0.0 |
| SizeofData | 16 |
| AddressOfRawData | 0x12cdc |
| PointerToRawData | 0x120dc |
| Size | 0x70 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x140018bd0 |
| XOR Key | 0xd37935a6 |
|---|---|
| Unmarked objects | 0 |
| 199 (41118) | 1 |
| ASM objects (50929) | 2 |
| C objects (50929) | 20 |
| Imports (VS2008 SP1 build 30729) | 2 |
| Imports (50929) | 4 |
| C++ objects (50929) | 5 |
| Total imports | 257 |
| 185 (30716) | 15 |
| C++ objects (61219) | 16 |
| Resource objects (VS2012 build 50727 / VS2005 build 50727) | 1 |
| Linker (VS2012 UPD4 build 61030) | 1 |
No comments yet.