Microsoft Office 2007 With _[.]rar

Sharing

Copy URL Twitter E-mail

Reason

too many matches

General

Target

Microsoft Office 2007 With _.rar
Size

499.7MB
MD5

e85fc23942f70e379ef585b42462780d
SHA1

112f217c3f47a8685386600d62c7648965982de9
SHA256

96a26e2040907986546f986bf805e39ff61b1dd85429efe9350b743a1b6e5da9
SHA512

15ae14bc177ad93829adfa54a3e7f16c874abac173a5a08cbd5a6391ce19fbedac5c1002c42bfa437784fe4b8037fe37827c777d0d3b41eeaa58c83b68df6a83
SSDEEP

12582912:d7y8O0XXYKsrsIenfsGNOEOraMRLaPHjIVVzgaep:d7yL+Iez5VvjIDzNS

Score

N/A

Malware Config

Signatures

Files

Microsoft Office 2007 With _.rar
.rar
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Access.en-us/Access.en-us/AccLR.cab
.cab
ACCDDSUI.DLL_1033
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8e:fc:8b:82:f0:8f:7b:12:09:1f:e7:29:65:22:8c:b0:38:f0:33:a7
Signer

Actual PE Digest

8e:fc:8b:82:f0:8f:7b:12:09:1f:e7:29:65:22:8c:b0:38:f0:33:a7

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 153B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ACCESS12.ACC_1033
ACCESS_FIELDTEMPLATE_0_CORE.ACCFL_1033
.xml
ACCESS_FIELDTEMPLATE_ASSETS.ACCFL_1033
.xml
ACCESS_FIELDTEMPLATE_CONTACTS.ACCFL_1033
.xml
ACCESS_FIELDTEMPLATE_EVENTS.ACCFL_1033
.xml
ACCESS_FIELDTEMPLATE_ISSUES.ACCFL_1033
.xml
ACCESS_FIELDTEMPLATE_PROJECTS.ACCFL_1033
.xml
ACCESS_FIELDTEMPLATE_TASKS.ACCFL_1033
.xml
ACCESS_TABLETEMPLATES.ACCTB_1033
.xml
ACCESS_TEMPLATE_ASSETS.ACCDT_1033
.zip
ACCESS_TEMPLATE_CONTACTS.ACCDT_1033
.zip
ACCESS_TEMPLATE_EVENTS.ACCDT_1033
.zip
ACCESS_TEMPLATE_FACULTY.ACCDT_1033
.zip
ACCESS_TEMPLATE_ISSUES.ACCDT_1033
.zip
ACCESS_TEMPLATE_MARKETINGCAMPAIGNS.ACCDT_1033
.zip
ACCESS_TEMPLATE_PROJECTTRACKING.ACCDT_1033
.zip
ACCESS_TEMPLATE_SALESPIPELINE.ACCDT_1033
.zip
ACCESS_TEMPLATE_STUDENTS.ACCDT_1033
.zip
ACCESS_TEMPLATE_TASKS.ACCDT_1033
.zip
ACCESS_WSSTEMPLATE_105.ACCDT_1033
.zip
ACCESS_WSSTEMPLATE_107.ACCDT_1033
.zip
ACCESS_WSSTEMPLATE_1100.ACCDT_1033
.zip
ACCOLKI.DLL_1033
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

9a:e8:d6:0e:a7:e3:48:d2:70:3b:cf:97:8d:16:27:77:9d:66:20:d7
Signer

Actual PE Digest

9a:e8:d6:0e:a7:e3:48:d2:70:3b:cf:97:8d:16:27:77:9d:66:20:d7

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ACCVDTUI.DLL_1033
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

49:54:b7:a0:fe:3d:c4:72:7c:20:3b:c4:16:b9:a7:b2:7c:91:25:70
Signer

Actual PE Digest

49:54:b7:a0:fe:3d:c4:72:7c:20:3b:c4:16:b9:a7:b2:7c:91:25:70

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 153B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ACTIP10.HLP_1033
ACWIZRC.DLL_1033
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

62:e1:4b:42:b3:c4:52:9e:6c:0c:0f:a8:d5:20:fc:90:b9:1e:48:d8
Signer

Actual PE Digest

62:e1:4b:42:b3:c4:52:9e:6c:0c:0f:a8:d5:20:fc:90:b9:1e:48:d8

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.rsrc
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ADO210.CHM_0001_1033
.chm
MSACCESS.DEV.HXS_1033
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

Sections

.rsrc
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.its
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MSACCESS.DEV_COL.HXC_1033
MSACCESS.DEV_COL.HXT_1033
MSACCESS.DEV_F_COL.HXK_1033
MSACCESS.DEV_K_COL.HXK_1033
MSACCESS.HXS_1033
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

Sections

.rsrc
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.its
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MSACCESS_COL.HXC_1033
MSACCESS_COL.HXT_1033
MSACCESS_F_COL.HXK_1033
MSACCESS_K_COL.HXK_1033
MSAIN.DLL_1033
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c3:2f:4c:ef:a1:98:6f:99:c7:7f:32:25:7c:64:7f:d0:b7:6a:60:f6
Signer

Actual PE Digest

c3:2f:4c:ef:a1:98:6f:99:c7:7f:32:25:7c:64:7f:d0:b7:6a:60:f6

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MSCAL.CNT_1033
MSCAL.DEP_1033
MSCAL.HLP_1033
MSCAL.OCX_1033
.dll regsvr32 windows x86

0c07a7025d4dd224535689b26558a4fd

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

70:8e:de:74:65:7e:48:11:f1:53:27:d2:90:c9:e1:99:59:0f:14:e0
Signer

Actual PE Digest

70:8e:de:74:65:7e:48:11:f1:53:27:d2:90:c9:e1:99:59:0f:14:e0

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocStringLen
LoadRegTypeLi
LoadTypeLi
VariantChangeTypeEx
VariantChangeType
VariantCopy
VarDateFromStr
VariantInit
SysFreeString
VariantClear
SysAllocString

kernel32

DisableThreadLibraryCalls
InitializeCriticalSection
GetVersion
DeleteCriticalSection
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetModuleHandleW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
VirtualProtect
FreeLibrary
GetProcAddress
IsDebuggerPresent
GlobalAlloc
GlobalLock
GlobalUnlock
LoadLibraryW
GetWindowsDirectoryW
MultiByteToWideChar
GetProcessHeap
CreateFileW
GetLastError
CloseHandle
HeapFree
HeapReAlloc
HeapAlloc
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
GetLocaleInfoA
MulDiv
GetVersionExW
GetUserDefaultLangID
GetUserDefaultLCID
GetLocaleInfoW
lstrlenW
GetLocalTime

user32

LoadStringW
EndDialog
RegisterClassW
LoadCursorW
SetWindowPos
SetParent
GetParent
GetSysColor
IntersectRect
CopyRect
ReleaseCapture
UnregisterClassW
CreateDialogParamW
IsChild
IsWindowEnabled
GetNextDlgTabItem
IsDialogMessageW
GetWindow
MessageBeep
SetWindowRgn
EqualRect
GetWindowRect
MapWindowPoints
IsWindowVisible
BeginPaint
EndPaint
DefWindowProcW
SetWindowLongW
DestroyWindow
GetWindowLongW
WinHelpW
GetDlgItemTextW
IsDlgButtonChecked
CheckDlgButton
SendDlgItemMessageW
GetDlgItem
MoveWindow
OffsetRect
GetSystemMetrics
GetDC
UpdateWindow
ShowWindow
CreateWindowExW
InvalidateRect
SetCapture
GetClientRect
PtInRect
InflateRect
FrameRect
DrawFocusRect
GetWindowDC
ReleaseDC
FillRect
SystemParametersInfoW
CharNextW
IsWindow
GetActiveWindow
DialogBoxParamW
GetKeyState
SetFocus
SendMessageW
GetFocus
LoadAcceleratorsW
TranslateAcceleratorW

ole32

StringFromGUID2
OleSetAutoConvert
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
StringFromCLSID
CoCreateInstance
CreateDataAdviseHolder
CreateOleAdviseHolder

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyW
RegEnumKeyExW
RegSetValueExW
RegCloseKey

gdi32

SelectObject
DeleteObject
GetStockObject
LineTo
CreateDCW
RestoreDC
SetMapMode
LPtoDP
SetViewportOrgEx
SaveDC
CreateEnhMetaFileW
CreateMetaFileW
SetWindowOrgEx
SetWindowExtEx
CloseEnhMetaFile
CloseMetaFile
TranslateCharsetInfo
DPtoLP
SetBkMode
CreateFontIndirectW
CreateSolidBrush
SetTextAlign
SetTextColor
Polygon
CreateCompatibleDC
GetDeviceCaps
DeleteDC
ExtTextOutW
GetTextExtentPoint32W
CreatePen
MoveToEx
CreateRectRgnIndirect

shlwapi

wnsprintfW

msvcr80

memset
memcpy
_encode_pointer
_malloc_crt
_encoded_null
free
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_onexit
_lock

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllRegisterServerEx
DllUnregisterServer

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
NORTHWIND_SAMPLE.ACCDT_1033
.zip
RPLBRF35.CHM_1033
.chm
STSLIST.CHM_1033
.chm
STSLISTI.DLL_1033
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

cb:db:7b:50:93:3d:07:8d:75:82:bc:f6:60:c7:28:ea:d9:94:c9:4e
Signer

Actual PE Digest

cb:db:7b:50:93:3d:07:8d:75:82:bc:f6:60:c7:28:ea:d9:94:c9:4e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.rsrc
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VBAAC10.CHM_1033
VBAOF11.CHM_1033
VBCN6.CHM_1033
.chm
VBENDF98.CHM_1033
.chm
VBHW6.CHM_1033
.chm
VBLR6.CHM_1033
.chm
VBOB6.CHM_1033
.chm
VBUI6.CHM_1033
.chm
WZCNFLCT.CHM_1033
.chm
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Access.en-us/Access.en-us/AccessMUI.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Access.en-us/Access.en-us/AccessMUI.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Access.en-us/AccessMUISet.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Access.en-us/AccessMUISet.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Access.en-us/setup.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/access12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/cpao12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/excel12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/groove12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/ic12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/inf12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/oct.chm
.chm
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/octres.dll
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

3f:5f:43:41:5f:73:7d:be:ef:5b:06:90:ad:08:cb:ce:a9:90:27:3f
Signer

Actual PE Digest

3f:5f:43:41:5f:73:7d:be:ef:5b:06:90:ad:08:cb:ce:a9:90:27:3f

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 419KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/office12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/onent12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/outlk12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/ppt12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/proj12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/pub12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/spd12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/visio12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/de-de/word12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/access12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/cpao12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/excel12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/groove12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/ic12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/inf12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/oct.chm
.chm
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/octres.dll
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

cf:b1:a0:30:5d:10:9d:a7:c4:e5:03:1c:55:5a:55:ae:bd:81:21:3a
Signer

Actual PE Digest

cf:b1:a0:30:5d:10:9d:a7:c4:e5:03:1c:55:5a:55:ae:bd:81:21:3a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 403KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/office12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/onent12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/outlk12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/ppt12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/proj12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/pub12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/spd12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/visio12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/en-us/word12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/access12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/cpao12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/excel12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/groove12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/ic12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/inf12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/oct.chm
.chm
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/octres.dll
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

82:69:04:a0:50:81:6d:5f:70:12:31:69:72:d5:dd:a5:fc:da:a0:01
Signer

Actual PE Digest

82:69:04:a0:50:81:6d:5f:70:12:31:69:72:d5:dd:a5:fc:da:a0:01

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 420KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/office12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/onent12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/outlk12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/ppt12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/proj12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/pub12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/spd12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/visio12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/es-es/word12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/access12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/cpao12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/excel12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/groove12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/ic12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/inf12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/oct.chm
.chm
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/octres.dll
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

e4:54:d4:ed:94:d1:21:37:19:a3:2f:f8:bd:fc:b5:75:d7:c2:6a:35
Signer

Actual PE Digest

e4:54:d4:ed:94:d1:21:37:19:a3:2f:f8:bd:fc:b5:75:d7:c2:6a:35

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 421KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/office12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/onent12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/outlk12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/ppt12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/proj12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/pub12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/spd12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/visio12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/fr-fr/word12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/access12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/cpao12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/excel12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/groove12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/ic12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/inf12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/oct.chm
.chm
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/octres.dll
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

83:51:48:08:1e:d9:47:b1:3f:55:f1:fb:eb:ed:ad:53:5b:19:8c:d0
Signer

Actual PE Digest

83:51:48:08:1e:d9:47:b1:3f:55:f1:fb:eb:ed:ad:53:5b:19:8c:d0

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 417KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/office12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/onent12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/outlk12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/ppt12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/proj12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/pub12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/spd12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/visio12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/it-it/word12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/access12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/cpao12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/excel12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/groove12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/ic12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/inf12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/oct.chm
.chm
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/octres.dll
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

ef:ec:fb:78:ee:0f:b1:53:be:cd:93:01:29:b5:a2:96:8d:5e:33:e9
Signer

Actual PE Digest

ef:ec:fb:78:ee:0f:b1:53:be:cd:93:01:29:b5:a2:96:8d:5e:33:e9

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/office12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/onent12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/outlk12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/ppt12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/proj12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/pub12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/spd12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/visio12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ja-jp/word12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/access12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/cpao12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/excel12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/groove12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/ic12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/inf12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/oct.chm
.chm
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/octres.dll
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d7:26:2f:82:1c:3a:0b:50:0e:3e:2d:7c:35:00:ef:b8:10:2f:b8:c1
Signer

Actual PE Digest

d7:26:2f:82:1c:3a:0b:50:0e:3e:2d:7c:35:00:ef:b8:10:2f:b8:c1

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/office12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/onent12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/outlk12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/ppt12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/proj12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/pub12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/spd12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/visio12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/ko-kr/word12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/oct.dll
.dll windows x86

c52ea4673f052388e9eb920c559135ce

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

f1:ed:2f:26:e2:f1:e1:74:6d:34:cd:c7:4a:18:c2:04:9a:62:d4:f9
Signer

Actual PE Digest

f1:ed:2f:26:e2:f1:e1:74:6d:34:cd:c7:4a:18:c2:04:9a:62:d4:f9

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

secur32

GetUserNameExW

user32

CharLowerW
CharLowerA
CharUpperA
EnumDisplayMonitors
GetMonitorInfoA
GetMenuCheckMarkDimensions
SetFocus
GetWindowTextW
CheckDlgButton
GetDlgItem
UpdateWindow
InvalidateRect
SetWindowLongW
GetWindowLongW
GetWindowTextLengthW
SetWindowTextW
LoadBitmapA
SystemParametersInfoA
MapDialogRect
GetSysColor
SetDlgItemTextW
EndDialog
CharNextA
CreateDialogIndirectParamA
CreateWindowExA
GetDlgCtrlID
IsWindowVisible
SetRectEmpty
DrawTextA
GetWindowLongA
IsWindowUnicode
GetClassNameA
IsWindow
SetParent
IsChild
SendMessageW
UnregisterClassW
GetMenuItemInfoW
PostQuitMessage
SetMenuInfo
SetMenuItemInfoW
GetClientRect
InsertMenuItemW
GetActiveWindow
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
CheckMenuItem
ReleaseCapture
SetCapture
PtInRect
RedrawWindow
EnableMenuItem
DrawMenuBar
GetMenu
GetWindowInfo
CheckRadioButton
SendMessageA
LoadStringW
PeekMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
SetCursor
GetDesktopWindow
ClientToScreen
GetKeyboardLayout
DialogBoxIndirectParamW
CreateDialogIndirectParamW
CreateDialogParamW
DrawEdge
InflateRect
DrawFocusRect
LoadBitmapW
LoadIconW
DestroyIcon
LoadCursorW
DefWindowProcW
SetScrollPos
SetScrollRange
ShowWindow
UnregisterClassA
RegisterClassA
GetScrollInfo
DrawTextW
MessageBoxW
MoveWindow
IsWindowEnabled
IsDlgButtonChecked
ScreenToClient
DestroyWindow
CreateWindowExW
PostMessageW
GetDC
ReleaseDC
DialogBoxParamW
CreateIconFromResourceEx
GetWindowRect
SystemParametersInfoW
SetWindowPos
GetWindow
MessageBeep
GetSystemMetrics
EndPaint
BeginPaint
AppendMenuW
CreateMenu
GetFocus
GetAncestor
EnableWindow
SendDlgItemMessageW
CharUpperW
GetDlgItemTextW
CharNextW
GetKeyState
CallWindowProcW
CreatePopupMenu
MapWindowPoints
TrackPopupMenu
DestroyMenu
GetParent
LoadImageW

gdi32

TextOutW
EnumFontFamiliesExW
ExtFloodFill
SetBkMode
GetObjectW
CreateCompatibleDC
SetStretchBltMode
StretchBlt
DeleteDC
GetDeviceCaps
CreateFontIndirectW
GetStockObject
CreateSolidBrush
CreatePen
Rectangle
DeleteObject
SetTextColor
SetBkColor
GetTextMetricsW
ExtTextOutW
SelectObject
GetTextExtentPoint32W
CreateFontIndirectA
GetObjectA
GetTextFaceW
GetTextMetricsA
GetOutlineTextMetricsA
CreateDCA
CreateFontW

kernel32

FreeEnvironmentStringsA
GetStartupInfoA
SetHandleCount
InterlockedDecrement
InterlockedIncrement
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
GetCommandLineA
GetStdHandle
GetEnvironmentStrings
GetTempPathA
GetFileAttributesExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetThreadLocale
VerifyVersionInfoW
VerSetConditionMask
DeleteFileA
GetTempFileNameA
FileTimeToDosDateTime
SetErrorMode
SetEndOfFile
InterlockedExchange
GetModuleFileNameW
lstrcmpW
LoadLibraryA
GetModuleHandleA
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
lstrlenW
GetLastError
SetLastError
OutputDebugStringA
GetTickCount
LocalAlloc
LocalFree
lstrcmpiW
GetDateFormatW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileW
CloseHandle
SetFilePointer
HeapFree
GetProcessHeap
ReadFile
CreateFileW
FindNextFileW
DeleteFileW
SetFileAttributesW
SizeofResource
FindResourceW
WriteFile
LockResource
LoadResource
FreeLibrary
FindResourceA
EnumResourceNamesA
LoadLibraryExW
CopyFileW
SearchPathW
GetFileSize
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
DeleteAtom
FindAtomA
AddAtomA
MultiByteToWideChar
IsDBCSLeadByte
GetSystemDefaultLangID
GetVersionExW
GetLocaleInfoW
GlobalAlloc
GlobalFree
lstrlenA
GetVersionExA
CreateDirectoryW
RemoveDirectoryW
GetTempPathW
CompareStringW
WideCharToMultiByte
FlushInstructionCache
GetCurrentProcess
HeapAlloc
GetCurrentThreadId
GetACP
MulDiv
InitializeCriticalSectionAndSpinCount
TlsAlloc
GetSystemDefaultLCID
TlsSetValue
VirtualFree
TlsGetValue
TlsFree
GetFileType
ExpandEnvironmentStringsW
GetProcessTimes
CreateMutexA
OpenMutexA
CreateSemaphoreA
GetShortPathNameA
GetModuleFileNameA
RaiseException
IsValidLocale
HeapSize
HeapValidate
HeapReAlloc
VirtualAlloc
WaitForSingleObject
ReleaseMutex
GetSystemTimeAsFileTime
FlushFileBuffers
GetSystemDirectoryW
GetTimeZoneInformation
GetDiskFreeSpaceExW
GetSystemInfo
GetUserDefaultLCID
Sleep
TerminateProcess
GetCurrentProcessId
CompareStringA
GetStringTypeExW
IsValidCodePage
SystemTimeToFileTime
GetSystemTime
CreateFileA
GetCurrentThread
GlobalMemoryStatus
ReleaseSemaphore
IsProcessorFeaturePresent
EnumUILanguagesW
EnumSystemLocalesW
SystemTimeToTzSpecificLocalTime
FormatMessageW

oleaut32

VarI4FromStr
VarBstrFromI4
SysAllocStringByteLen
VariantClear
VariantInit
SysFreeString
SysAllocString
GetErrorInfo
VariantChangeType
SysStringLen
SysStringByteLen

ole32

StgOpenStorage
CoCreateGuid
StringFromGUID2
CoInitialize
StgCreateDocfile
CoCreateInstance
OleRun
CLSIDFromProgID
CLSIDFromString

shell32

SHGetSpecialFolderPathW
SHGetFolderPathW
SHCreateDirectoryExW

shlwapi

wnsprintfA
PathGetCharTypeW
PathGetDriveNumberW

msimg32

TransparentBlt

rpcrt4

RpcStringFreeW
UuidCreate
RpcBindingFree
NdrClientCall2

advapi32

RegEnumKeyExW
RegEnumKeyW
RegQueryInfoKeyW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
LookupAccountNameW
ConvertSidToStringSidW
GetLengthSid
AddAccessAllowedAce
AddAccessDeniedAce
InitializeAcl
AllocateAndInitializeSid
CopySid
GetTokenInformation
OpenProcessToken
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidA
CheckTokenMembership
IsValidSid
RegQueryValueExA
RegFlushKey
OpenThreadToken

imm32

ImmAssociateContext

msi

ord7
ord141
ord110
ord8
ord78
ord117
ord160
ord159
ord121
ord17
ord32
ord91
ord67
ord172
ord180
ord95
ord31
ord65
ord71
ord115
ord113
ord111
ord219
ord195
ord179
ord92
ord20
ord26
ord151
ord153
ord150
ord125
ord123
ord118
ord120
ord163
ord166
ord215
ord70
ord45
ord181

dbghelp

SymGetSymFromAddr64
SymGetLineFromAddr64
SymInitialize

mpr

WNetGetConnectionW

setupapi

SetupIterateCabinetW

Exports

Exports

ShowCustomizationUI

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/octca.dll
.dll windows x86

208fd49cb8cd6f8c375e296be9cf0669

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

27:27:21:23:df:3d:4b:46:ef:7a:21:96:49:f5:a7:0d:97:06:19:1a
Signer

Actual PE Digest

27:27:21:23:df:3d:4b:46:ef:7a:21:96:49:f5:a7:0d:97:06:19:1a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryInfoKeyW
RegOpenKeyExW
RegQueryValueExW
StartServiceW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
QueryServiceStatus

kernel32

GetTickCount
HeapFree
FindFirstFileW
FindClose
GetProcessHeap
HeapReAlloc
HeapAlloc
lstrlenA
lstrcmpW
SetLastError
lstrlenW
GetLastError
LocalAlloc
CreateProcessW
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
GetStdHandle
WriteFile
HeapSize
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
RaiseException
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
WaitForSingleObject
OpenEventW

msi

ord74
ord160
ord159
ord32
ord26
ord125
ord73
ord49
ord103
ord145
ord17
ord8
ord124
ord120

rpcrt4

RpcStringFreeW
RpcBindingFree
RpcBindingFromStringBindingW
RpcStringBindingComposeW
NdrClientCall2
NdrServerCall2

Exports

Exports

AddLISSources
CACertificatesAdd
CACertificatesScheduleCommit
EnablePerUserInstall

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/access12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/cpao12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/excel12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/groove12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/ic12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/inf12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/oct.chm
.chm
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/octres.dll
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

66:1c:4f:a2:02:cd:4c:98:66:37:76:a9:e6:53:89:6c:b5:dc:ca:60
Signer

Actual PE Digest

66:1c:4f:a2:02:cd:4c:98:66:37:76:a9:e6:53:89:6c:b5:dc:ca:60

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/office12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/onent12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/outlk12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/ppt12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/proj12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/pub12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/spd12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/visio12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-cn/word12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/access12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/cpao12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/excel12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/groove12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/ic12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/inf12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/oct.chm
.chm
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/octres.dll
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5e:5b:65:69:82:d5:a4:ba:28:7a:8a:a0:c0:87:b2:6d:fa:25:2d:d6
Signer

Actual PE Digest

5e:5b:65:69:82:d5:a4:ba:28:7a:8a:a0:c0:87:b2:6d:fa:25:2d:d6

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/office12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/onent12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/outlk12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/ppt12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/proj12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/pub12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/spd12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/visio12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Admin/zh-tw/word12.opa
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Catalog/files12.cat
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Enterprise.WW/EnterWW.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Enterprise.WW/EnterpriseWW.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Enterprise.WW/EnterpriseWW.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Enterprise.WW/ID_00030.DPC
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Enterprise.WW/OWOW64WW.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Enterprise.WW/Office64WW.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Enterprise.WW/Office64WW.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Enterprise.WW/config.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Enterprise.WW/ose.exe
.exe windows x86

e5a1bfe9d29ff6e7cdf0de13098a43c2

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

db:bc:55:06:3b:2e:d1:37:6e:87:ec:99:a5:52:64:b8:f6:26:b6:80
Signer

Actual PE Digest

db:bc:55:06:3b:2e:d1:37:6e:87:ec:99:a5:52:64:b8:f6:26:b6:80

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

advapi32

RegCloseKey
RegEnumKeyExW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
SetThreadToken
RegEnumValueW
RegQueryValueExW
RegNotifyChangeKeyValue
SetServiceStatus
StartServiceCtrlDispatcherW
DuplicateToken
RegDeleteValueW
RegisterServiceCtrlHandlerW
CryptDestroyHash
CryptCreateHash
CryptGetHashParam
CryptHashData
FreeSid
AllocateAndInitializeSid
LookupAccountNameW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CheckTokenMembership
OpenThreadToken
RegDeleteKeyW
SetFileSecurityW
CryptAcquireContextW
CryptReleaseContext

kernel32

GetLastError
GetModuleFileNameW
CloseHandle
SetEvent
lstrlenW
GetDriveTypeW
GetLogicalDrives
lstrcmpW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
Sleep
ExitProcess
InitializeCriticalSection
GetCommandLineW
GetTickCount
ReleaseMutex
ResetEvent
WaitForMultipleObjectsEx
SetErrorMode
CreateEventW
CreateMutexW
CreateProcessW
MoveFileExW
GetSystemInfo
CreateFileA
ReadFile
SetFilePointer
DosDateTimeToFileTime
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryW
WideCharToMultiByte
CreateFileW
ReleaseSemaphore
WaitForSingleObject
WaitForMultipleObjects
CreateThread
CreateSemaphoreW
VirtualFree
VirtualAlloc
SetFilePointerEx
GetSystemTimeAsFileTime
CompareStringW
ExpandEnvironmentStringsW
SystemTimeToFileTime
GetSystemTime
SetFileTime
SetEndOfFile
WriteFile
LocalFree
lstrlenA
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetFileSizeEx
FindClose
FindFirstFileW
GetFileAttributesW
CreateDirectoryW
GetTempPathW
GlobalFree
GlobalAlloc
GetFileAttributesExW
CopyFileW
CreateHardLinkW
SetFileAttributesW
DeleteFileW
GetTempPathA
GetFileTime
FindNextFileW
GetStdHandle
GetCurrentThread
RemoveDirectoryW
FormatMessageA
GetComputerNameW
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
LoadLibraryA
HeapReAlloc
RtlUnwind
GetLocaleInfoA
HeapSize
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers

rpcrt4

RpcServerRegisterIfEx
RpcServerUseProtseqEpW
RpcServerUnregisterIf
RpcRevertToSelf
RpcImpersonateClient
NdrServerCall2

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

wininet

InternetSetFilePointer
InternetOpenUrlW
InternetCloseHandle
InternetReadFile
InternetOpenW
InternetGetConnectedState
InternetCanonicalizeUrlW
HttpQueryInfoW

wintrust

WinVerifyTrust

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Enterprise.WW/osetup.dll
.dll windows x86

93ffcb11e00042f780ec00944ba0db03

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

b4:c2:69:5c:57:f9:03:fc:e7:87:92:51:2b:c8:d9:2e:e7:84:f6:f5
Signer

Actual PE Digest

b4:c2:69:5c:57:f9:03:fc:e7:87:92:51:2b:c8:d9:2e:e7:84:f6:f5

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

advapi32

RegCloseKey
RegSetValueExW
RegCreateKeyExW
CloseServiceHandle
ChangeServiceConfigW
OpenServiceW
OpenSCManagerW
QueryServiceConfigW
RegFlushKey
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegQueryValueExW
OpenProcessToken
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueW
CreateProcessAsUserW
FreeSid
AllocateAndInitializeSid
ConvertSidToStringSidW
LookupAccountNameW
EqualSid
IsValidSid
CheckTokenMembership
ConvertSidToStringSidA
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetTokenInformation
CopySid
InitializeAcl
AddAccessDeniedAce
AddAccessAllowedAce
GetLengthSid
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegEnumKeyW
IsTextUnicode
StartServiceW
QueryServiceStatus
RegOpenKeyExA
RegQueryValueExA
CreateWellKnownSid
OpenThreadToken

kernel32

SetErrorMode
CloseHandle
lstrlenW
GetVolumeInformationW
VerSetConditionMask
VerifyVersionInfoW
GetCurrentThread
WaitForSingleObject
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
DeleteCriticalSection
HeapReAlloc
HeapAlloc
GetProcessHeap
HeapFree
lstrcmpW
FindNextFileW
RemoveDirectoryW
OpenMutexW
CreateThread
GetExitCodeThread
SetEvent
CreateEventW
GlobalFree
SetEnvironmentVariableW
GetCurrentDirectoryW
GetComputerNameW
IsValidLocale
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
GetTempPathW
GetVersionExW
GetPriorityClass
CreateProcessW
OpenProcess
GetExitCodeProcess
CopyFileW
DeleteFileW
SetFileAttributesW
GetTempFileNameW
GetFileAttributesExW
ReadFile
lstrlenA
WriteFile
CreateFileW
SetFilePointer
GetThreadLocale
GetSystemDirectoryA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InterlockedExchange
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
SetHandleCount
InterlockedDecrement
InterlockedIncrement
ExitProcess
VirtualQuery
VirtualProtect
GetConsoleMode
GetConsoleCP
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
ReleaseSemaphore
GetSystemInfo
GetOEMCP
GetUserDefaultLangID
MapViewOfFile
DuplicateHandle
UnmapViewOfFile
CreateProcessA
TerminateProcess
HeapValidate
HeapSize
GetSystemDefaultLangID
GetModuleFileNameA
FindFirstFileW
LoadLibraryExW
FreeLibrary
GetCurrentProcess
CompareStringW
CompareStringA
FormatMessageW
LocalFree
ExpandEnvironmentStringsW
GetTimeZoneInformation
GetSystemTime
SystemTimeToTzSpecificLocalTime
MultiByteToWideChar
WideCharToMultiByte
SystemTimeToFileTime
GetDriveTypeW
GetSystemDirectoryW
GetDiskFreeSpaceExW
GetUserDefaultLCID
GetCurrentThreadId
GetTickCount
Sleep
OutputDebugStringA
GetModuleFileNameW
SetLastError
LoadLibraryW
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetCurrentProcessId
GetLastError
FindClose
LocalAlloc
GetFileSize
FreeResource
LockResource
LoadResource
FindResourceW
SizeofResource
lstrcpyA
GetLocalTime
GetVolumeInformationA
GlobalMemoryStatus
DeviceIoControl
QueryDosDeviceW
QueryPerformanceCounter
InitializeCriticalSection
GetSystemDefaultLCID
IsDBCSLeadByte
FindResourceA
GetStringTypeExW
GetACP
IsValidCodePage
EnumUILanguagesW
EnumSystemLocalesW
GetLocaleInfoW
GetCalendarInfoW
GlobalAlloc
GetUserDefaultUILanguage
LoadLibraryA
MulDiv
OpenEventW
CreateDirectoryW
CreateFileA
GetStdHandle
FindAtomW
RaiseException
GetAtomNameW
GlobalLock
AddAtomW
DeleteAtom
SetProcessWorkingSetSize
GlobalDeleteAtom
GlobalAddAtomW
HeapCreate
HeapDestroy
FlushInstructionCache
VirtualAlloc
GetVersionExA
IsProcessorFeaturePresent
VirtualFree
ReleaseMutex
GetSystemTimeAsFileTime
FlushFileBuffers
GetFileType
GetProcessTimes
CreateMutexA
OpenMutexA
CreateSemaphoreA
CreateFileMappingA
CreateEventA
GetShortPathNameA

ole32

CoTaskMemFree
OleUninitialize
CreateStreamOnHGlobal
RevokeDragDrop
OleDraw
CoLockObjectExternal
CLSIDFromString
CoDisconnectObject
CoRegisterClassObject
CoRevokeClassObject
CoCreateInstance
CoInitializeEx
CoUninitialize
OleRun
CLSIDFromProgID

oleaut32

SysStringLen
VariantCopy
VariantChangeType
VariantChangeTypeEx
VarDecAdd
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
VarDecSu
VarDecMul
VarDecCmp
VarDecInt
OleCreateFontIndirect
VariantClear
VariantInit
SysFreeString
SysAllocString
VarDecRound
VarDecDiv
VarCmp
VarDecFromR8
VarDecFromI4
SysAllocStringLen

shell32

SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHBindToParent
SHGetFolderLocation
SHBrowseForFolderW
ShellExecuteW
SHChangeNotify
SHGetFolderPathW

user32

LoadImageW
EnableMenuItem
GetSystemMenu
MoveWindow
GetClientRect
PostMessageW
TranslateMessage
UnregisterClassW
RegisterClassExW
CreateWindowExW
DestroyMenu
TrackPopupMenu
GetSubMenu
LoadMenuW
DestroyWindow
DefWindowProcW
IsChild
SetActiveWindow
LoadCursorW
LoadIconW
FindWindowW
ReleaseDC
GetDC
GetSysColor
CopyRect
SetRect
SetCursor
GetFocus
SetTimer
KillTimer
GetCursorPos
GetKeyState
GetCapture
VkKeyScanExW
GetKeyboardLayout
GetSysColorBrush
CreateIconIndirect
GetIconInfo
DestroyIcon
EqualRect
FillRect
IntersectRect
GetWindowPlacement
OffsetRect
DrawIconEx
DrawFocusRect
MapWindowPoints
DrawFrameControl
ScreenToClient
GetDoubleClickTime
GetAsyncKeyState
WindowFromPoint
ClientToScreen
GetParent
NotifyWinEvent
AdjustWindowRectEx
SetWindowPos
GetClassInfoExW
GetWindowRect
RegisterWindowMessageW
TrackPopupMenuEx
InvalidateRect
PtInRect
SetCapture
ReleaseCapture
IsZoomed
wsprintfW
InflateRect
GetSystemMetrics
InvertRect
SetRectEmpty
CallWindowProcW
UpdateWindow
DeferWindowPos
SetWindowRgn
IsRectEmpty
TrackMouseEvent
GetMessageTime
SetParent
FrameRect
AppendMenuW
CreatePopupMenu
GetWindow
EndPaint
BeginPaint
RegisterClassW
GetClassLongW
SetLayeredWindowAttributes
GetPropW
SetPropW
RemovePropW
UnionRect
PeekMessageW
PeekMessageA
MonitorFromWindow
MonitorFromRect
MonitorFromPoint
GetMonitorInfoW
GetMessagePos
DrawEdge
EndDeferWindowPos
BeginDeferWindowPos
FindWindowExW
GetKeyboardState
MsgWaitForMultipleObjects
DrawTextW
SystemParametersInfoA
GetClassNameW
GetMonitorInfoA
EnumDisplayMonitors
LoadBitmapA
GetKeyboardLayoutNameW
GetMenuCheckMarkDimensions
GetWindowThreadProcessId
CharNextA
IsWindowVisible
EnumWindows
GetAncestor
CharNextW
wsprintfA
GetWindowTextLengthW
GetWindowTextW
LoadStringW
ExitWindowsEx
PostThreadMessageW
CharLowerW
CharLowerA
CharUpperW
CharUpperA
ShowWindow
GetDlgItem
SendMessageW
DialogBoxParamW
SetForegroundWindow
GetMessageW
DispatchMessageW
IsWindow
PostQuitMessage
MessageBoxW
SystemParametersInfoW
GetDesktopWindow
EndDialog
SetFocus
SetWindowTextW
SetDlgItemTextW
GetWindowLongW
SetWindowLongW
MessageBeep
DispatchMessageA
EnableWindow

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

shlwapi

StrRetToBufW
wnsprintfA
PathFileExistsW
PathGetDriveNumberW
PathGetCharTypeW
wnsprintfW
wvnsprintfW

wintrust

WinVerifyTrust

msi

ord116
ord141
ord113
ord111
ord179
ord92
ord78
ord150
ord17
ord160
ord125
ord121
ord118
ord120
ord148
ord65
ord31
ord95
ord180
ord172
ord67
ord91
ord117
ord189
ord174
ord77
ord110
ord194
ord168
ord136
ord181
ord45
ord137
ord70
ord215
ord129
ord14
ord211
ord169
ord190
ord88
ord159
ord32
ord71
ord8

secur32

GetUserNameExW

dbghelp

SymGetSymFromAddr64
SymGetLineFromAddr64
SymInitialize

psapi

EnumProcesses
GetModuleFileNameExW
GetModuleBaseNameW
EnumProcessModules

gdi32

SelectObject
DeleteDC
CreateCompatibleDC
CreateDIBSection
SetDIBColorTable
StretchBlt
BitBlt
GetObjectW
CreateFontIndirectW
SetBrushOrgEx
GetBrushOrgEx
RealizePalette
SelectPalette
CreateCompatibleBitmap
GetDeviceCaps
GetDIBits
CreateSolidBrush
CreatePatternBrush
GetPixel
GetEnhMetaFileHeader
GetObjectType
DeleteEnhMetaFile
SetBkColor
StretchDIBits
GetClipRgn
CreateRectRgn
CreateDCW
PlayEnhMetaFile
IntersectClipRect
SetTextColor
RestoreDC
SaveDC
DPtoLP
LPtoDP
ExcludeClipRect
LineTo
MoveToEx
CreatePen
ExtTextOutW
EqualRgn
OffsetRgn
CombineRgn
SetRectRgn
Ellipse
CreateDIBPatternBrushPt
PatBlt
GetTextExtentPoint32W
GetTextMetricsW
SetMapMode
SelectClipRgn
GetClipBox
CreateBitmap
GetTextColor
GetBkColor
GetCurrentObject
SetWindowOrgEx
GetWindowOrgEx
CreatePolygonRgn
GetSystemPaletteEntries
SetBkMode
SetStretchBltMode
DeleteObject
TranslateCharsetInfo
SetTextAlign
ExtSelectClipRgn
GetObjectA
CreateDCA
RectVisible
GetDIBColorTable
GetStockObject
GetPaletteEntries

rpcrt4

RpcStringBindingComposeW
UuidCreate
UuidToStringW
NdrClientCall2
RpcBindingFree
RpcStringFreeW
RpcBindingFromStringBindingW

oleacc

AccessibleObjectFromWindow
LresultFromObject

msimg32

AlphaBlend
GradientFill
TransparentBlt

gdiplus

GdipCreateBitmapFromStream
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectRect
GdipDrawImagePointRectI
GdipFillRectangle
GdipDeleteRegion
GdipSetClipRect
GdipSetClipRegion
GdipGetClip
GdipIsClipEmpty
GdipCreateRegion
GdipSetPixelOffsetMode
GdipCreateFromHDC
GdipDeleteMatrix
GdipTranslateRegionI
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromScan0
GdipCreateMatrix
GdipGetDC
GdipReleaseDC
GdipSetCompositingMode
GdipCreateBitmapFromHBITMAP
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipGetCompositingMode
GdipSetCompositingQuality
GdipGetCompositingQuality
GdipDrawImageRectRectI
GdipCloneImage
GdipImageRotateFlip
GdipSetTextRenderingHint
GdipGetTextRenderingHint
GdipSetTextContrast
GdipGetTextContrast
GdipGetInterpolationMode
GdipSetInterpolationMode
GdipGetSmoothingMode
GdipSetWorldTransform
GdipGetWorldTransform
GdipCreateMatrix2
GdipResetWorldTransform
GdipSaveGraphics
GdipRestoreGraphics
GdipBitmapGetPixel
GdipCloneBitmapAreaI
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetSmoothingMode
GdipGetPixelOffsetMode
GdipDeletePen
GdipSetImageAttributesColorKeys

comctl32

ImageList_DrawEx

imm32

ImmAssociateContext

hlink

ord8

Exports

Exports

??2@YAPAXI@Z
??3@YAXPAX@Z
?AddRef@BaseValue@NetUI@@QAEXXZ
?AutomateDataSource@FlexUI@@YGXPAUIDataSource@1@@Z
?CreateAtom@FlexValue@FlexUI@@SG_NPB_WAAVFlexValueSP@2@@Z
?CreateBoolean@FlexValue@FlexUI@@SG_N_NAAVFlexValueSP@2@@Z
?CreateByte@FlexValue@FlexUI@@SG_NEAAVFlexValueSP@2@@Z
?CreateChar@FlexValue@FlexUI@@SG_NDAAVFlexValueSP@2@@Z
?CreateDataSource@FlexValue@FlexUI@@SG_NPAUIDataSource@2@AAVFlexValueSP@2@@Z
?CreateDataSourceProxy@FlexUI@@YGPAUIFlexUIDataSourceProxy@@PAUIDataSource@1@@Z
?CreateDecimal@FlexValue@FlexUI@@SG_NPBUtagDEC@@AAVFlexValueSP@2@@Z
?CreateDouble@FlexValue@FlexUI@@SG_NNAAVFlexValueSP@2@@Z
?CreateFlexEvent@FlexValue@FlexUI@@SG_NAAVFlexValueSP@2@@Z
?CreateFlexListProxy@FlexUI@@YGPAUIFlexListProxy@@PAUIFlexList@1@@Z
?CreateInt16@FlexValue@FlexUI@@SG_NFAAVFlexValueSP@2@@Z
?CreateInt32@FlexValue@FlexUI@@SG_NHAAVFlexValueSP@2@@Z
?CreateInt64@FlexValue@FlexUI@@SG_N_JAAVFlexValueSP@2@@Z
?CreateLength@FlexValue@FlexUI@@SG_NPBUtagDEC@@W4FlexLengthType@2@AAVFlexValueSP@2@@Z
?CreateSByte@FlexValue@FlexUI@@SG_NCAAVFlexValueSP@2@@Z
?CreateSingle@FlexValue@FlexUI@@SG_NMAAVFlexValueSP@2@@Z
?CreateString@FlexValue@FlexUI@@SG_NPB_WAAVFlexValueSP@2@@Z
?CreateUInt16@FlexValue@FlexUI@@SG_NGAAVFlexValueSP@2@@Z
?CreateUInt32@FlexValue@FlexUI@@SG_NIAAVFlexValueSP@2@@Z
?CreateUInt64@FlexValue@FlexUI@@SG_N_KAAVFlexValueSP@2@@Z
?EnsureDataSourceState@@YGXPAUIDataSource@FlexUI@@@Z
?GetAtom@FlexValue@FlexUI@@QBEGXZ
?GetBoolean@FlexValue@FlexUI@@QBE_NXZ
?GetByte@FlexValue@FlexUI@@QBEEXZ
?GetChar@FlexValue@FlexUI@@QBE_WXZ
?GetDataSource@FlexValue@FlexUI@@QBEPAUIDataSource@2@XZ
?GetDecimal@FlexValue@FlexUI@@QBE?AUtagDEC@@XZ
?GetDouble@FlexValue@FlexUI@@QBENXZ
?GetInt16@FlexValue@FlexUI@@QBEFXZ
?GetInt32@FlexValue@FlexUI@@QBEHXZ
?GetInt64@FlexValue@FlexUI@@QBE_JXZ
?GetLength@FlexValue@FlexUI@@QBE?AUFlexLength@2@XZ
?GetList@FlexValue@FlexUI@@QBEPAUIFlexList@2@XZ
?GetSByte@FlexValue@FlexUI@@QBECXZ
?GetSingle@FlexValue@FlexUI@@QBEMXZ
?GetString@FlexValue@FlexUI@@QBEPB_WXZ
?GetType@FlexValue@FlexUI@@QBE?AW4FlexValueType@2@XZ
?GetUInt16@FlexValue@FlexUI@@QBEGXZ
?GetUInt32@FlexValue@FlexUI@@QBEIXZ
?GetUInt64@FlexValue@FlexUI@@QBE_KXZ
?HAlloc@NetUI@@YGPAXK@Z
?HFree@NetUI@@YGXPAX@Z
?IsDataSourceSubclassOf@FlexUI@@YG_NPAUIDataSourceDescription@1@I@Z
?Release@BaseValue@NetUI@@QAEXXZ
?ReleaseDataSource@FlexUI@@YGXPAUIFlexUIDataSourceProxy@@@Z
?ReleaseFlexList@FlexUI@@YGXPAUIFlexListProxy@@@Z
RunDevSetup
RunSetup

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 290KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Enterprise.WW/setup.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Excel.en-us/ExcelLR.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Excel.en-us/ExcelMUI.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Excel.en-us/ExcelMUI.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Excel.en-us/setup.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Groove.en-us/Groove.en-us/GrooveLR.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Groove.en-us/Groove.en-us/GrooveMUI.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Groove.en-us/Groove.en-us/GrooveMUI.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Groove.en-us/GrooveMUISet.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Groove.en-us/GrooveMUISet.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Groove.en-us/setup.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/InfoPath.en-us/InfLR.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/InfoPath.en-us/InfoPathMUI.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/InfoPath.en-us/InfoPathMUI.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/InfoPath.en-us/setup.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/1033/dwintl20.dll
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

3b:3a:dd:2a:82:10:c2:ab:be:bd:e7:f5:e9:df:ac:11:69:1a:4e:9a
Signer

Actual PE Digest

3b:3a:dd:2a:82:10:c2:ab:be:bd:e7:f5:e9:df:ac:11:69:1a:4e:9a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/DW20.EXE
.exe windows x86

5eb440625c49d1fc181879d5ddcfbd20

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

a8:43:7e:4e:bc:81:e3:0d:bd:bc:0e:7a:af:26:8c:78:7e:05:f5:1e
Signer

Actual PE Digest

a8:43:7e:4e:bc:81:e3:0d:bd:bc:0e:7a:af:26:8c:78:7e:05:f5:1e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoW

secur32

GetUserNameExW

msvcr80

?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_controlfp_s
_invoke_watson
_crt_debugger_hook
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
_vsnprintf_s
_except_handler4_common
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
fopen_s
fwprintf_s
fclose
vsprintf_s
wcscpy_s
vswprintf_s
wcsrchr
_wtoi
_CxxThrowException
_vsnprintf
__CxxFrameHandler3
_CIsqrt
memmove
_wcsnicmp
tolower
strncmp
ceil
strchr
strncpy_s
_strnicmp
wcsncmp
_stricmp
wcstok_s
swprintf_s
_wcsicmp
memset
memcpy
wcschr
_time32

advapi32

GetSecurityDescriptorDacl
RegQueryInfoKeyW
ReportEventW
RegisterEventSourceW
ReportEventA
DeregisterEventSource
GetUserNameA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
SetNamedSecurityInfoW
ConvertSidToStringSidA
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegCreateKeyExA
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegOpenKeyExW
RegCreateKeyExW
RegEnumKeyW
RegEnumValueW
GetLengthSid
AddAccessAllowedAce
AddAccessDeniedAce
InitializeAcl
AllocateAndInitializeSid
CopySid
OpenThreadToken
IsValidSid
CheckTokenMembership
ConvertStringSecurityDescriptorToSecurityDescriptorW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
OpenProcessToken
GetTokenInformation

comctl32

ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
ord17

gdi32

DeleteDC
RestoreDC
DeleteObject
GetTextFaceA
SelectObject
CreateFontA
GetDeviceCaps
SetMapMode
SaveDC
CreateFontIndirectW
GetObjectW
GetTextExtentPoint32W
SetTextAlign
GetTextMetricsA
GetObjectA
ExtTextOutW
SetBkMode
SetTextColor
GetTextFaceW
GetOutlineTextMetricsA
CreateDCA
CreateSolidBrush
TranslateCharsetInfo
CreateFontIndirectA

kernel32

OpenSemaphoreA
CreateEventA
OpenEventA
GetShortPathNameA
LoadLibraryW
OutputDebugStringA
LoadLibraryExW
LocalAlloc
GlobalFree
GetCurrentThreadId
CreateProcessA
GlobalAlloc
DuplicateHandle
GetSystemDirectoryW
GetTimeZoneInformation
GetDiskFreeSpaceExW
GetUserDefaultLCID
IsValidLocale
GetStringTypeExW
IsValidCodePage
CompareStringW
GetShortPathNameW
GetLongPathNameW
CreateFileA
GetCurrentThread
GlobalMemoryStatus
ReleaseSemaphore
IsProcessorFeaturePresent
EnumUILanguagesW
EnumSystemLocalesW
GetCalendarInfoW
GetUserDefaultUILanguage
VirtualProtect
QueryPerformanceCounter
GetTempFileNameA
GetTempPathA
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoA
UnhandledExceptionFilter
IsDebuggerPresent
lstrcmpiW
GetThreadContext
GetThreadTimes
GetPriorityClass
HeapDestroy
HeapCreate
TerminateThread
GetThreadSelectorEntry
GetLastError
GetLocalTime
LeaveCriticalSection
EnterCriticalSection
GetCommandLineW
MapViewOfFile
ReleaseMutex
WaitForSingleObject
WaitForMultipleObjects
SetProcessWorkingSetSize
GetCurrentProcess
Sleep
TerminateProcess
DeleteFileW
CreateThread
CloseHandle
GetCurrentProcessId
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
GetVersionExW
GetVersionExA
GetModuleFileNameW
FreeLibrary
InitializeCriticalSection
GetProcessHeap
DeleteCriticalSection
MultiByteToWideChar
GetSystemTimeAsFileTime
GetTimeFormatW
GetDateFormatW
GetTickCount
SetLastError
LocalFree
WriteFile
FindNextFileW
FindClose
FindFirstFileW
GetSystemWindowsDirectoryW
MoveFileW
SetFilePointer
GetComputerNameA
SetPriorityClass
UnmapViewOfFile
GetFileSize
CreateFileMappingA
SuspendThread
ExitThread
MulDiv
GetModuleFileNameA
LoadLibraryA
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetUserDefaultLangID
GetACP
GetSystemDefaultLCID
SetEvent
CreateProcessW
ExpandEnvironmentStringsW
WideCharToMultiByte
GetTempPathW
GetFileAttributesW
SetEndOfFile
IsDBCSLeadByte
GetSystemDirectoryA
SetThreadPriority
CreateRemoteThread
OpenProcess
LoadLibraryExA
SetEnvironmentVariableA
CreateDirectoryW
ReadProcessMemory
VirtualQueryEx
GetSystemInfo
HeapFree
HeapSize
HeapValidate
HeapAlloc
HeapReAlloc
VirtualAlloc
RaiseException
TlsSetValue
SetFileAttributesW
CreateSemaphoreA
FlushFileBuffers
ResumeThread
InitializeCriticalSectionAndSpinCount
TlsAlloc
VirtualFree
TlsGetValue
TlsFree
GetModuleHandleW
GetVersion
GetFileType
CreateFileW
GetLocaleInfoW
GetProcessTimes
CreateMutexA
OpenMutexA
GetThreadPriority

ole32

StringFromIID
CoTaskMemFree
CoUninitialize
CoInitializeEx
CoCreateInstance

oleacc

CreateStdAccessibleObject
LresultFromObject

oleaut32

SysFreeString
SystemTimeToVariantTime
VariantTimeToDosDateTime
SysAllocString
SysStringLen

rpcrt4

UuidCreate

shell32

ExtractIconExA
SHGetSpecialFolderPathW
ShellExecuteExA

shlwapi

AssocQueryStringW
UrlGetPartA
wnsprintfA

urlmon

CreateURLMoniker

user32

GetDlgCtrlID
IsWindow
CreateDialogIndirectParamA
DrawTextA
DrawTextW
MapDialogRect
CallWindowProcA
MoveWindow
GetKeyboardLayout
GetMenuCheckMarkDimensions
LoadBitmapA
GetMonitorInfoA
CallWindowProcW
SetRectEmpty
IsWindowVisible
PostMessageA
SendMessageA
DefWindowProcA
SetTimer
KillTimer
PostQuitMessage
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetMessageA
CreateWindowExA
RegisterClassExA
DialogBoxParamA
SystemParametersInfoA
DestroyIcon
LoadStringW
DestroyWindow
SetWindowPos
GetWindowRect
GetWindowLongA
SetForegroundWindow
GetSystemMetrics
LoadIconA
SetWindowLongA
ReleaseDC
FillRect
GetSysColorBrush
MapWindowPoints
GetDC
SetWindowTextA
CreateDialogParamW
DialogBoxParamW
EnumDisplayMonitors
GetDlgItem
DrawIconEx
ShowWindow
LoadCursorA
GetClientRect
SetCursor
DrawFocusRect
SetWindowTextW
GetWindow
InvalidateRect
EnableWindow
GetSysColor
SendDlgItemMessageA
EndDialog
CheckDlgButton
SetFocus
LoadStringA
IsDlgButtonChecked
SetDlgItemTextA
GetScrollInfo
SetScrollInfo
GetFocus
FlashWindowEx
GetForegroundWindow
GetWindowPlacement
IsIconic
GetWindowThreadProcessId
EnumWindows
SendMessageTimeoutA
GetParent
UpdateWindow
IsWindowUnicode
GetClassNameA
SendMessageW
GetWindowLongW

wininet

InternetGetConnectedState
InternetCloseHandle
HttpQueryInfoA
InternetReadFileExA
HttpEndRequestA
InternetWriteFile
HttpSendRequestExA
InternetCanonicalizeUrlA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetSetStatusCallback
InternetCrackUrlA

Sections

.text
Size: 551KB - Virtual size: 551KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 199KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/Microsoft.VC80.CRT.manifest
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/OfficeLR.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/OfficeMUI.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/OfficeMUI.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/OfficeMUISet.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/OfficeMUISet.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/ShellUI.MST
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/branding.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/dwdcw20.dll
.dll regsvr32 windows x86

d70be5dd96607efc600b5f11cfd9c01f

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

a0:ee:b8:d2:14:87:18:95:3b:25:ec:20:3d:0c:6b:c0:e0:6c:a9:d0
Signer

Actual PE Digest

a0:ee:b8:d2:14:87:18:95:3b:25:ec:20:3d:0c:6b:c0:e0:6c:a9:d0

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

secur32

GetUserNameExW

msvcr80

?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__clean_type_info_names_internal
_crt_debugger_hook
_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
free
_encoded_null
_malloc_crt
_encode_pointer
wcscpy_s
_CxxThrowException
_vsnprintf
__CxxFrameHandler3
memmove
_CIsqrt
swprintf_s
memcpy
memset

advapi32

RegEnumValueW
RegEnumKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegOpenKeyExA
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
AddAccessAllowedAce
AddAccessDeniedAce
InitializeAcl
OpenThreadToken
IsValidSid
CheckTokenMembership
ConvertSidToStringSidA
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
OpenProcessToken
GetTokenInformation
CopySid
AllocateAndInitializeSid
GetLengthSid

gdi32

DeleteDC
DeleteObject
CreateDCA
CreateSolidBrush
GetDeviceCaps

kernel32

IsDBCSLeadByte
GetStringTypeExW
MultiByteToWideChar
IsValidCodePage
WideCharToMultiByte
CompareStringW
InitializeCriticalSection
CreateDirectoryW
GetShortPathNameW
GetLongPathNameW
GetCurrentThread
GlobalMemoryStatus
ReleaseSemaphore
IsProcessorFeaturePresent
VirtualProtect
QueryPerformanceCounter
InterlockedExchange
InterlockedCompareExchange
UnhandledExceptionFilter
IsDebuggerPresent
lstrcmpiW
CreateProcessW
GetModuleFileNameW
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
GetUserDefaultLangID
GetSystemDefaultUILanguage
GetSystemDefaultLCID
FreeLibrary
FindClose
FindNextFileW
FindFirstFileW
RemoveDirectoryW
DeleteFileW
GetSystemWindowsDirectoryW
GetProcAddress
LoadLibraryW
ExpandEnvironmentStringsW
GetLastError
GetProcessHeap
HeapFree
HeapSize
HeapValidate
HeapAlloc
HeapReAlloc
VirtualAlloc
RaiseException
TlsSetValue
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
VirtualFree
TlsGetValue
TlsFree
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
IsValidLocale
WaitForSingleObject
ReleaseMutex
CloseHandle
GetSystemTimeAsFileTime
GetTickCount
WriteFile
SetFileAttributesW
FlushFileBuffers
GetModuleHandleW
GetFileAttributesW
GetVersion
GetFileType
CreateFileW
GetProcessTimes
GetCurrentProcess
CreateMutexA
OpenMutexA
CreateSemaphoreA
GetShortPathNameA
OutputDebugStringA
LoadLibraryExW
GetSystemDirectoryW
GetVersionExW
GetTimeZoneInformation
GetDiskFreeSpaceExW
GetSystemInfo
GetUserDefaultLCID
LocalFree
LocalAlloc
GlobalFree
Sleep
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GlobalAlloc
SetUnhandledExceptionFilter

ole32

CoTaskMemAlloc
CoTaskMemFree

rpcrt4

UuidCreate

shell32

SHGetSpecialFolderPathW

shlwapi

wnsprintfA
SHDeleteKeyW

user32

GetKeyboardLayout
LoadStringW
GetSystemMetrics
GetMenuCheckMarkDimensions
ReleaseDC
GetDC
SystemParametersInfoA
GetMonitorInfoA
EnumDisplayMonitors
GetSysColor

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 197KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/dwtrig20.exe
.exe windows x86

c1298c589348389876de18cbe7fd398a

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

81:0b:e2:10:74:d7:68:63:0e:e0:4a:44:e8:ba:67:6a:8e:d4:53:28
Signer

Actual PE Digest

81:0b:e2:10:74:d7:68:63:0e:e0:4a:44:e8:ba:67:6a:8e:d4:53:28

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

secur32

GetUserNameExW

msvcr80

?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_controlfp_s
_invoke_watson
_crt_debugger_hook
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__winitenv
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
fopen_s
fwprintf_s
fclose
vsprintf_s
wcscpy_s
vswprintf_s
wcsrchr
_CxxThrowException
_vsnprintf
__CxxFrameHandler3
memmove
_CIsqrt
memcpy
_wtol
memset
swprintf_s
strncmp

advapi32

RegEnumKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyW
RegEnumValueW
GetLengthSid
AddAccessAllowedAce
AddAccessDeniedAce
InitializeAcl
OpenThreadToken
RegQueryValueExA
IsValidSid
CheckTokenMembership
ConvertSidToStringSidA
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
OpenProcessToken
GetTokenInformation
CopySid
AllocateAndInitializeSid
RegQueryValueExW

gdi32

DeleteDC
DeleteObject
CreateDCA
CreateSolidBrush
GetDeviceCaps

kernel32

Sleep
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GlobalAlloc
InitializeCriticalSection
IsDBCSLeadByte
GetStringTypeExW
MultiByteToWideChar
IsValidCodePage
WideCharToMultiByte
CompareStringW
CreateDirectoryW
GetShortPathNameW
GetLongPathNameW
GetCurrentThread
GlobalMemoryStatus
ReleaseSemaphore
IsProcessorFeaturePresent
VirtualProtect
QueryPerformanceCounter
GetTempFileNameA
GetTempPathA
InterlockedExchange
InterlockedCompareExchange
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemWindowsDirectoryW
lstrcmpiW
CreateProcessW
SetEvent
lstrlenW
GetModuleFileNameW
CreateEventW
WaitForSingleObject
GetProcessHeap
HeapFree
HeapSize
HeapValidate
HeapAlloc
HeapReAlloc
GetModuleHandleA
VirtualAlloc
RaiseException
TlsSetValue
SetLastError
GetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
GetSystemDefaultLCID
VirtualFree
TlsGetValue
TlsFree
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
IsValidLocale
GetProcAddress
LoadLibraryW
FreeLibrary
LoadLibraryA
ReleaseMutex
CloseHandle
GetSystemTimeAsFileTime
GetTickCount
WriteFile
SetFileAttributesW
FlushFileBuffers
DeleteFileW
GetModuleHandleW
GetFileAttributesW
GetVersion
GetFileType
CreateFileW
ExpandEnvironmentStringsW
GetProcessTimes
GetCurrentProcess
CreateMutexA
OpenMutexA
CreateSemaphoreA
GetShortPathNameA
GetModuleFileNameA
OutputDebugStringA
LoadLibraryExW
GetSystemDirectoryW
GetVersionExW
GetTimeZoneInformation
GetDiskFreeSpaceExW
GetSystemInfo
GetUserDefaultLCID
LocalFree
LocalAlloc
GlobalFree
CreateProcessA
SetUnhandledExceptionFilter

ole32

CoCreateInstance
CoInitializeEx
CoRegisterClassObject
StringFromCLSID
CoTaskMemFree
CoRevokeClassObject
CoUninitialize
StringFromIID

oleaut32

LoadRegTypeLi
SysAllocString
LoadTypeLi
SysFreeString

rpcrt4

UuidCreate

shell32

SHGetSpecialFolderPathW

user32

GetKeyboardLayout
GetSystemMetrics
GetMenuCheckMarkDimensions
ReleaseDC
GetDC
SystemParametersInfoA
GetMonitorInfoA
EnumDisplayMonitors
GetSysColor

Sections

.text
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 196KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/msvcr80.dll
.dll windows x86

8eb98c77a1ada89df5027bd5bf01c2f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_getdrives

kernel32

LoadLibraryW
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetSystemDirectoryW
GetLongPathNameW
GetCurrentThreadId
TlsGetValue
DebugBreak
OutputDebugStringA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
Sleep
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
VirtualAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
WriteConsoleW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
MultiByteToWideChar
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetLocalTime
GetLocaleInfoA
GetLocaleInfoW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
RtlUnwind
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
SetStdHandle
CreateFileA
CompareStringA
CompareStringW
Beep
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
RaiseException
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
VirtualProtect
GetSystemInfo
VirtualQuery
IsDBCSLeadByteEx
ReadConsoleA
ReadConsoleW
SetConsoleMode
SetEndOfFile
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
LockFile
UnlockFile
CreatePipe
ReadFile
CreateFileW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1exception@std@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4exception@std@@QAEAAV01@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
??9type_info@@QBE_NABV0@@Z
??_7__non_rtti_object@std@@6B@
??_7bad_cast@std@@6B@
??_7bad_typeid@std@@6B@
??_7exception@@6B@
??_7exception@std@@6B@
??_Fbad_cast@std@@QAEXXZ
??_Fbad_typeid@std@@QAEXXZ
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Type_info_dtor@type_info@@CAXPAV1@@Z
?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z
?_ValidateExecute@@YAHP6GHXZ@Z
?_ValidateRead@@YAHPBXI@Z
?_ValidateWrite@@YAHPAXI@Z
?_inconsistency@@YAXXZ
?_invalid_parameter@@YAXPBG00II@Z
?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
?_open@@YAHPBDHH@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_sopen@@YAHPBDHHH@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?_wopen@@YAHPB_WHH@Z
?_wsopen@@YAHPB_WHHH@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZH@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZH@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?unexpected@@YAXXZ
?vswprintf@@YAHPA_WIPB_WPAD@Z
?what@exception@std@@UBEPBDXZ
@_calloc_crt@8
@_malloc_crt@4
@_realloc_crt@8
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CRT_RTC_INITW
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_Getdays
_Getmonths
_Gettnames
_HUGE
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_Strftime
_XcptFilter
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CppXcptFilter
__CxxCallUnwindDelDtor
__CxxCallUnwindDtor
__CxxCallUnwindStdDelDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__STRINGTOLD_L
__TypeMatch
___fls_getvalue@4
___fls_setvalue@8
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___mb_cur_max_l_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__clean_type_info_names_internal
__control87_2
__create_locale
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__daylight
__dllonexit
__doserrno
__dstbias
__fpecode
__free_locale
__get_app_type
__get_current_locale
__get_flsindex
__get_tlsindex
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv
__lconv_init
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osplatform
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__set_app_type
__set_flsgetvalue
__setlc_active
__setusermatherr
__strncnt
__swprintf_l
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__unDNameHelper
__uncaught_exception
__unguarded_readlc_active
__vswprintf_l
__wargv
__wcserror
__wcserror_s
__wcsncnt
__wgetmainargs
__winitenv
_abnormal_termination
_abs64
_access
_access_s
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_realloc
_amsg_exit
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_crt
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_commode
_configthreadlocale
_control87
_controlfp
_controlfp_s
_copysign
_cprintf
_cprintf_l
_cprintf_p
_cprintf_p_l
_cprintf_s
_cprintf_s_l
_cputs
_cputws
_creat
_create_locale
_crt_debugger_hook
_cscanf
_cscanf_l
_cscanf_s
_cscanf_s_l
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_cwprintf
_cwprintf_l
_cwprintf_p
_cwprintf_p_l
_cwprintf_s
_cwprintf_s_l
_cwscanf
_cwscanf_l
_cwscanf_s
_cwscanf_s_l
_daylight
_decode_pointer
_difftime32
_difftime64
_dosmaperr
_dstbias
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_encode_pointer
_encoded_null
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_except_handler4_common
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fdopen
_fflush_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filbuf
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_free_locale
_freea
_freea_s
_freefls
_fscanf_l
_fscanf_s_l
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_ftol
_fullpath
_futime32
_futime64
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwrite_nolock
_fwscanf_l
_fwscanf_s_l
_gcvt
_gcvt_s
_get_amblksiz
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_invalid_parameter_handler
_get_osfhandle
_get_osplatform
_get_osver
_get_output_format
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_sbh_threshold
_get_terminate
_get_timezone
_get_tzname
_get_unexpected
_get_winmajor
_get_winminor
_get_winver
_get_wpgmptr
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdcwd_nolock
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getptd
_getsystime
_getw
_getwch
_getwch_nolock

Sections

.text
Size: 396KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/osetupui.dll
.dll windows x86

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

a8:88:40:19:af:30:5a:8c:ed:0c:66:40:d7:92:4f:b3:92:40:3e:13
Signer

Actual PE Digest

a8:88:40:19:af:30:5a:8c:ed:0c:66:40:d7:92:4f:b3:92:40:3e:13

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 512B - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/pss10r.chm
.chm
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/setup.chm
.chm
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office.en-us/setup.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office64.en-us/OWOW64LR.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office64.en-us/Office64MUI.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office64.en-us/Office64MUI.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office64.en-us/Office64MUISet.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office64.en-us/Office64MUISet.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Office64.en-us/setup.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/OneNote.en-us/OneNoteMUI.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/OneNote.en-us/OneNoteMUI.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/OneNote.en-us/OnoteLR.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/OneNote.en-us/setup.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Outlook.en-us/OutlkLR.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Outlook.en-us/OutlookMUI.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Outlook.en-us/OutlookMUI.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Outlook.en-us/setup.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/PowerPoint.en-us/PowerPointMUI.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/PowerPoint.en-us/PowerPointMUI.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/PowerPoint.en-us/PptLR.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/PowerPoint.en-us/setup.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Proofing.en-us/Proof.en/Proof.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Proofing.en-us/Proof.en/Proof.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Proofing.en-us/Proof.en/Proof.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Proofing.en-us/Proof.es/Proof.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Proofing.en-us/Proof.es/Proof.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Proofing.en-us/Proof.es/Proof.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Proofing.en-us/Proof.fr/Proof.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Proofing.en-us/Proof.fr/Proof.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Proofing.en-us/Proof.fr/Proof.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Proofing.en-us/Proofing.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Proofing.en-us/Proofing.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Proofing.en-us/setup.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Publisher.en-us/PubLR.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Publisher.en-us/PublisherMUI.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Publisher.en-us/PublisherMUI.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Publisher.en-us/setup.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Rosebud.en-us/RbudLR.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Rosebud.en-us/RosebudMUI.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Rosebud.en-us/RosebudMUI.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Rosebud.en-us/setup.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Serial.txt
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Updates/README.TXT
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Word.en-us/WordLR.cab
.cab
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Word.en-us/WordMUI.msi
.msi
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Word.en-us/WordMUI.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/Word.en-us/setup.xml
.xml
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/autorun.inf
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/office2007.jpg
.jpg
Microsoft Office 2007 With Key/MicroSoft Office 2007 With Key/setup.exe
.exe windows x86

2dfc2c74864b84f5530ab40a343c56d8

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

39:f2:7f:ed:5c:b4:b5:a3:57:09:98:70:a5:67:dc:58:d4:69:a2:43
Signer

Actual PE Digest

39:f2:7f:ed:5c:b4:b5:a3:57:09:98:70:a5:67:dc:58:d4:69:a2:43

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/10/2022, 18:32
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

advapi32

RegQueryValueExA
RegFlushKey
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyExA

kernel32

lstrcmpW
GetCommandLineW
SetCurrentDirectoryW
GlobalFree
GetModuleFileNameW
TlsFree
LoadLibraryExW
TlsSetValue
TlsGetValue
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
VerifyVersionInfoW
VerSetConditionMask
RemoveDirectoryW
GetTempPathW
GetFullPathNameW
CopyFileW
DeleteFileW
SetFileAttributesW
GetFileAttributesW
lstrlenW
GetThreadLocale
FreeLibrary
GetModuleHandleW
GetProcAddress
lstrlenA
WriteFile
CreateFileW
SetFilePointer
FindFirstFileW
FindClose
IsProcessorFeaturePresent
GlobalMemoryStatus
GetCurrentProcess
CompareStringW
CompareStringA
FormatMessageW
ExpandEnvironmentStringsW
MultiByteToWideChar
WideCharToMultiByte
GetVersion
CloseHandle
LocalFree
GetTimeZoneInformation
GetSystemTime
SystemTimeToTzSpecificLocalTime
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
SetErrorMode
GetVersionExW
GetLastError
FindNextFileW
SetLastError
TlsAlloc
GetCommandLineA
GetVersionExA
GetStartupInfoA
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetSystemTimeAsFileTime
GetModuleHandleA
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
InterlockedIncrement
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
Sleep
HeapSize
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CreateFileA
OutputDebugStringA
GetSystemInfo

ole32

CoUninitialize
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleRun
CoInitializeEx

shell32

CommandLineToArgvW
SHCreateDirectoryExW

user32

CharNextA
MessageBoxW
CharUpperA
CharUpperW
CharLowerA
CharLowerW

shlwapi

PathGetCharTypeW

wintrust

WinVerifyTrust

dbghelp

SymGetSymFromAddr64
SymInitialize
SymGetLineFromAddr64

oleaut32

GetErrorInfo
VariantChangeType
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysFreeString
VariantInit
VariantClear

msi

ord8
ord159
ord160
ord110
ord117
ord91
ord67
ord172
ord180
ord95
ord31
ord65
ord71
ord141

Sections

.text
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

Errors

General

Malware Config

Signatures

Files

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate

Extended Key Usages

Key Usages

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate

Extended Key Usages

Key Usages

61:46:9e:cb:00:04:00:00:00:65Certificate

Extended Key Usages

Key Usages

8e:fc:8b:82:f0:8f:7b:12:09:1f:e7:29:65:22:8c:b0:38:f0:33:a7Signer

Signature Validations

Verification

06/10/2022, 18:32 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 512B - Virtual size: 153B

.rsrc Size: 13KB - Virtual size: 13KB

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate

Extended Key Usages

Key Usages

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate

Extended Key Usages

Key Usages

61:46:9e:cb:00:04:00:00:00:65Certificate

Extended Key Usages

Key Usages

9a:e8:d6:0e:a7:e3:48:d2:70:3b:cf:97:8d:16:27:77:9d:66:20:d7Signer

Signature Validations

Verification

06/10/2022, 18:32 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 512B - Virtual size: 148B

.rsrc Size: 8KB - Virtual size: 7KB

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate

Extended Key Usages

Key Usages

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:baCertificate

Extended Key Usages

Key Usages

61:46:9e:cb:00:04:00:00:00:65Certificate

Extended Key Usages

Key Usages

49:54:b7:a0:fe:3d:c4:72:7c:20:3b:c4:16:b9:a7:b2:7c:91:25:70Signer

Signature Validations

Verification

06/10/2022, 18:32 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 512B - Virtual size: 153B

.rsrc Size: 152KB - Virtual size: 151KB

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

61:46:9e:cb:00:04:00:00:00:65
Certificate

8e:fc:8b:82:f0:8f:7b:12:09:1f:e7:29:65:22:8c:b0:38:f0:33:a7
Signer

06/10/2022, 18:32
Valid: false

.text
Size: 512B - Virtual size: 153B

.rsrc
Size: 13KB - Virtual size: 13KB

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

61:46:9e:cb:00:04:00:00:00:65
Certificate

9a:e8:d6:0e:a7:e3:48:d2:70:3b:cf:97:8d:16:27:77:9d:66:20:d7
Signer

06/10/2022, 18:32
Valid: false

.text
Size: 512B - Virtual size: 148B

.rsrc
Size: 8KB - Virtual size: 7KB

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

61:46:9e:cb:00:04:00:00:00:65
Certificate

49:54:b7:a0:fe:3d:c4:72:7c:20:3b:c4:16:b9:a7:b2:7c:91:25:70
Signer

06/10/2022, 18:32
Valid: false

.text
Size: 512B - Virtual size: 153B

.rsrc
Size: 152KB - Virtual size: 151KB

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

61:46:9e:cb:00:04:00:00:00:65
Certificate

62:e1:4b:42:b3:c4:52:9e:6c:0c:0f:a8:d5:20:fc:90:b9:1e:48:d8
Signer

06/10/2022, 18:32
Valid: false

.rsrc
Size: 296KB - Virtual size: 295KB

.reloc
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 892B

.its
Size: 512B - Virtual size: 24B

.rsrc
Size: 1024B - Virtual size: 892B

.its
Size: 512B - Virtual size: 24B

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

61:46:9e:cb:00:04:00:00:00:65
Certificate

c3:2f:4c:ef:a1:98:6f:99:c7:7f:32:25:7c:64:7f:d0:b7:6a:60:f6
Signer

06/10/2022, 18:32
Valid: false

.text
Size: 512B - Virtual size: 90B

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 512B - Virtual size: 8B

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate