General

Malware Config

Signatures

Files

• IDM Portable.zip

  .zip
• App/IDM/IDMEdgeExt.crx

  .zip
• _locales/ar/messages.json
• _locales/de/messages.json
• _locales/en/messages.json
• _locales/es/messages.json
• _locales/fa/messages.json
• _locales/fr/messages.json
• _locales/he/messages.json
• _locales/it/messages.json
• _locales/nl/messages.json
• _locales/pl/messages.json
• _locales/pt/messages.json
• _locales/ru/messages.json
• _locales/th/messages.json
• _locales/tr/messages.json
• _locales/vn/messages.json
• _locales/zh_cn/messages.json
• _locales/zh_tw/messages.json
• _metadata/verified_contents.json
• background.js

  .js
• captured.html

  .js
• content.js

  .js
• debug.js

  .js
• document.js

  .js
• images/headBkgd.gif

  .gif
• images/headTitle.gif

  .gif
• images/logo128.png

  .png
• images/logo16.png

  .png
• images/logo16x.png

  .png
• images/logo32.png

  .png
• images/logo32x.png

  .png
• images/logo48.png

  .png
• images/logoTonec.gif

  .gif
• manifest.json
• welcome.html
• welcome.js

  .js
• App/IDM/IDMFType.dat
• App/IDM/IDMFType64.dll

  .dll windows x64

  f811252742cee99958ced610cdfd96ef

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

  Certificate

  Issuer

  OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2009 00:00

  Not After

  20-05-2019 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  61:0c:12:06:00:00:00:00:00:1b

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  23-05-2006 17:01

  Not After

  23-05-2016 17:11

  Subject

  OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  46:60:fc:32:bd:52:1d:77:f2:11:c1:33:6a:a9:8b:9e

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

  Not Before

  02-06-2010 00:00

  Not After

  01-06-2013 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Secure Application Development,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  3b:17:36:10:d3:f1:9e:b0:b4:cd:13:9f:ed:8e:66:47:32:f8:61:32

  Signer

  Actual PE Digest

  3b:17:36:10:d3:f1:9e:b0:b4:cd:13:9f:ed:8e:66:47:32:f8:61:32

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Secure Application Development,O=Tonec Inc.,L=New York,ST=New York,C=US

  21-03-2013 15:05

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  msvcrt

  realloc

  islower

  isupper

  toupper

  isspace

  asctime

  _strnicmp

  strncmp

  memcpy

  __C_specific_handler

  _CxxThrowException

  _snprintf

  ?terminate@@YAXXZ

  ??1type_info@@UEAA@XZ

  _XcptFilter

  _initterm

  _amsg_exit

  _vsnprintf

  strchr

  strcspn

  _stricmp

  tolower

  malloc

  strncpy

  _gmtime64

  _ctime64

  ??2@YAPEAX_K@Z

  ??3@YAXPEAX@Z

  fclose

  fseek

  fread

  fopen

  free

  __CxxFrameHandler

  kernel32

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  MultiByteToWideChar

  WideCharToMultiByte

  InitializeCriticalSection

  GetModuleFileNameA

  LeaveCriticalSection

  EnterCriticalSection

  Sleep

  VirtualProtect

  GetSystemTimeAsFileTime

  advapi32

  RegQueryValueExA

  RegOpenKeyExA

  RegCloseKey

  Exports

  Exports

  IDMExtensionForMimeType

  IDMFileType

  Sections

  .text

  Size: 29KB - Virtual size: 28KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 182B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/IDMGCExt.crx

  .zip
• App/IDM/IDMGCExt59.crx

  .zip
• App/IDM/IDMGetAll.dll

  .dll regsvr32 windows x86

  44de3c890bc6860cd0fac57fb1bd1c86

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0c:4a:5b:49:b4:ab:8d:52:e8:3f:26:2f:37:bb:66:09:1c:4d:c1:10:47:7e:89:7f:e2:00:eb:58:fd:a1:1b:e6

  Signer

  Actual PE Digest

  0c:4a:5b:49:b4:ab:8d:52:e8:3f:26:2f:37:bb:66:09:1c:4d:c1:10:47:7e:89:7f:e2:00:eb:58:fd:a1:1b:e6

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 04:24

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  46:93:71:35:d5:7e:46:d1:47:4b:d9:c2:3b:de:4f:9f:99:98:be:9e

  Signer

  Actual PE Digest

  46:93:71:35:d5:7e:46:d1:47:4b:d9:c2:3b:de:4f:9f:99:98:be:9e

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 04:24

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wininet

  InternetCombineUrlA

  InternetGetCookieA

  msvcrt

  _amsg_exit

  _initterm

  _XcptFilter

  _onexit

  _lock

  __dllonexit

  _unlock

  realloc

  ?terminate@@YAXXZ

  ??1type_info@@UAE@XZ

  _ismbblead

  isalpha

  _memicmp

  _purecall

  malloc

  memcmp

  _wcsicmp

  sprintf

  strlen

  strcpy

  wcscpy

  wcsncpy

  wcscat

  wcsncat

  _CxxThrowException

  free

  ??2@YAPAXI@Z

  wcsstr

  strstr

  strrchr

  strpbrk

  atoi

  _ismbcdigit

  wcslen

  vsprintf

  memset

  memcpy

  ??_U@YAPAXI@Z

  _mbclen

  _mbsinc

  _mbsstr

  _mbschr

  ??_V@YAXPAX@Z

  ??3@YAXPAX@Z

  __CxxFrameHandler

  _errno

  strchr

  wcschr

  kernel32

  GetModuleHandleW

  GetSystemInfo

  VirtualQuery

  GetVersion

  lstrlenA

  InterlockedDecrement

  GetProcAddress

  MultiByteToWideChar

  InterlockedIncrement

  GetLastError

  GetModuleHandleA

  GetCurrentThreadId

  lstrlenW

  VirtualAlloc

  VirtualProtect

  GetProcessHeap

  HeapFree

  WideCharToMultiByte

  InterlockedCompareExchange

  RaiseException

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  Sleep

  InterlockedExchange

  RtlUnwind

  OutputDebugStringA

  LoadLibraryExA

  FindResourceA

  LoadResource

  SizeofResource

  FreeLibrary

  IsDBCSLeadByte

  GetModuleFileNameA

  DisableThreadLibraryCalls

  lstrcmpiA

  DeleteCriticalSection

  user32

  CharNextW

  CharNextA

  MessageBoxA

  advapi32

  RegDeleteKeyA

  RegCloseKey

  RegCreateKeyExA

  RegOpenKeyExA

  RegSetValueExA

  RegQueryInfoKeyA

  RegEnumKeyExA

  RegDeleteValueA

  ole32

  StringFromGUID2

  CoTaskMemFree

  CoTaskMemRealloc

  CoTaskMemAlloc

  CoInitialize

  CoCreateInstance

  CoUninitialize

  oleaut32

  SafeArrayDestroy

  SysAllocString

  SysFreeString

  VariantInit

  VariantChangeType

  VariantClear

  SysStringLen

  VarBstrCat

  SafeArrayPutElement

  SysAllocStringLen

  SafeArrayCreate

  LoadTypeLi

  UnRegisterTypeLi

  RegisterTypeLi

  VarUI4FromStr

  LoadRegTypeLi

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 36KB - Virtual size: 36KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 10KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/IDMGetAll64.dll

  .dll regsvr32 windows x64

  381ecb1e5320448e597c487d572438dc

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  78:28:c7:31:58:08:bc:87:17:71:0e:13:fa:3c:0b:24

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  18-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  14:b9:55:fb:88:8e:2d:d6:c8:31:92:d7:e7:88:28:62

  Certificate

  Issuer

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  16-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  10-12-2013 00:00

  Not After

  09-12-2023 23:59

  Subject

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

  Certificate

  Issuer

  CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  12-01-2016 00:00

  Not After

  11-01-2031 23:59

  Subject

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

  Certificate

  Issuer

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  23-12-2017 00:00

  Not After

  22-03-2029 23:59

  Subject

  CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  62:3f:42:45:4f:ab:11:b3:ba:01:fa:b7:22:90:8a:57:5f:fe:54:a3:f1:5a:8e:18:88:38:60:b8:4d:a2:b6:a3

  Signer

  Actual PE Digest

  62:3f:42:45:4f:ab:11:b3:ba:01:fa:b7:22:90:8a:57:5f:fe:54:a3:f1:5a:8e:18:88:38:60:b8:4d:a2:b6:a3

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  28-05-2019 12:27

  Valid: false

  d2:da:d6:b5:63:29:47:97:d6:06:eb:9b:c9:8e:16:af:17:70:c5:31

  Signer

  Actual PE Digest

  d2:da:d6:b5:63:29:47:97:d6:06:eb:9b:c9:8e:16:af:17:70:c5:31

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  28-05-2019 12:27

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  wininet

  InternetGetCookieA

  InternetCombineUrlA

  kernel32

  GetCurrentThreadId

  lstrlenW

  RaiseException

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  lstrcmpiA

  DisableThreadLibraryCalls

  GetModuleFileNameA

  GetModuleHandleW

  IsDBCSLeadByte

  GetModuleHandleA

  SizeofResource

  LoadResource

  FindResourceA

  LoadLibraryExA

  GetProcessHeap

  HeapFree

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetProcAddress

  GetLastError

  MultiByteToWideChar

  WideCharToMultiByte

  lstrlenA

  Sleep

  TerminateProcess

  FreeLibrary

  GetCurrentProcess

  GetTickCount

  QueryPerformanceCounter

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  user32

  CharNextW

  MessageBoxA

  CharNextA

  advapi32

  RegQueryInfoKeyA

  RegSetValueExA

  RegOpenKeyExA

  RegCreateKeyExA

  RegCloseKey

  RegDeleteValueA

  RegDeleteKeyA

  RegEnumKeyExA

  ole32

  CoInitialize

  CoTaskMemAlloc

  CoTaskMemRealloc

  CoTaskMemFree

  StringFromGUID2

  CoUninitialize

  CoCreateInstance

  oleaut32

  LoadRegTypeLi

  VarUI4FromStr

  RegisterTypeLi

  UnRegisterTypeLi

  LoadTypeLi

  SafeArrayCreate

  SafeArrayDestroy

  SysAllocStringLen

  SafeArrayPutElement

  VarBstrCat

  SysStringLen

  VariantClear

  VariantChangeType

  VariantInit

  SysFreeString

  SysAllocString

  msvcr90

  __clean_type_info_names_internal

  __crt_debugger_hook

  ?_type_info_dtor_internal_method@type_info@@QEAAXXZ

  __CppXcptFilter

  _amsg_exit

  _encoded_null

  _initterm_e

  _initterm

  _malloc_crt

  _decode_pointer

  _onexit

  _lock

  _encode_pointer

  __dllonexit

  _unlock

  ?terminate@@YAXXZ

  ??3@YAXPEAX@Z

  ??_V@YAXPEAX@Z

  _mbschr

  _mbsstr

  _mbsinc

  _mbclen

  ??_U@YAPEAX_K@Z

  memcpy

  memset

  vsprintf

  wcslen

  _ismbcdigit

  atoi

  __CxxFrameHandler3

  strpbrk

  strrchr

  strstr

  wcschr

  wcsstr

  ??2@YAPEAX_K@Z

  free

  _CxxThrowException

  wcsncat

  wcscat

  wcsncpy

  wcscpy

  strcpy

  strlen

  sprintf

  _wcsicmp

  memcmp

  _mbsnbcpy_s

  malloc

  memcpy_s

  strcpy_s

  wcsncpy_s

  strcat_s

  __C_specific_handler

  _resetstkoflw

  _purecall

  _recalloc

  strchr

  _memicmp

  isalpha

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 49KB - Virtual size: 49KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 19KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 542B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/IDMGrHlp.exe

  .exe windows x86

  055720b1d71187bd221e80b79d690573

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  29:15:e5:d3:46:78:b2:d0:d5:a8:a7:4c:f7:18:8d:1a:b8:e4:12:f7:e5:e1:43:07:ed:e1:9b:ae:a3:dd:46:72

  Signer

  Actual PE Digest

  29:15:e5:d3:46:78:b2:d0:d5:a8:a7:4c:f7:18:8d:1a:b8:e4:12:f7:e5:e1:43:07:ed:e1:9b:ae:a3:dd:46:72

  Digest Algorithm

  sha256

  PE Digest Matches

  false

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 04:34

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  69:b7:26:81:da:38:c9:8f:9e:6c:a2:63:63:9e:2d:9c:cc:34:14:cb

  Signer

  Actual PE Digest

  69:b7:26:81:da:38:c9:8f:9e:6c:a2:63:63:9e:2d:9c:cc:34:14:cb

  Digest Algorithm

  sha1

  PE Digest Matches

  false

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 04:34

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wininet

  InternetCombineUrlA

  shell32

  ShellExecuteA

  kernel32

  GetFileAttributesA

  GetFileSizeEx

  GetFileTime

  HeapFree

  RtlUnwind

  RaiseException

  HeapAlloc

  GetCommandLineA

  GetStartupInfoA

  VirtualProtect

  VirtualAlloc

  GetSystemInfo

  VirtualQuery

  HeapReAlloc

  Sleep

  HeapSize

  HeapCreate

  VirtualFree

  TerminateProcess

  UnhandledExceptionFilter

  IsDebuggerPresent

  GetACP

  FileTimeToLocalFileTime

  LCMapStringA

  LCMapStringW

  GetStdHandle

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  SetHandleCount

  GetFileType

  QueryPerformanceCounter

  GetSystemTimeAsFileTime

  InitializeCriticalSectionAndSpinCount

  GetStringTypeA

  GetStringTypeW

  GetTimeZoneInformation

  GetConsoleCP

  GetConsoleMode

  SetStdHandle

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  CompareStringW

  SetEnvironmentVariableA

  GetTickCount

  SetErrorMode

  CreateFileA

  GetFullPathNameA

  GetVolumeInformationA

  FindFirstFileA

  FindClose

  GetCurrentProcess

  DuplicateHandle

  SetEndOfFile

  UnlockFile

  LockFile

  FlushFileBuffers

  GetOEMCP

  GetCPInfo

  GlobalFlags

  WritePrivateProfileStringA

  FileTimeToSystemTime

  GetModuleHandleW

  TlsFree

  DeleteCriticalSection

  LocalReAlloc

  TlsSetValue

  TlsAlloc

  InitializeCriticalSection

  GlobalHandle

  GlobalReAlloc

  EnterCriticalSection

  TlsGetValue

  LeaveCriticalSection

  LocalAlloc

  GetCurrentProcessId

  GetModuleFileNameW

  GetThreadLocale

  InterlockedIncrement

  FreeResource

  GlobalGetAtomNameA

  GlobalAddAtomA

  GetProcessHeap

  GlobalFindAtomA

  lstrcmpW

  GlobalDeleteAtom

  GetCurrentThread

  ConvertDefaultLocale

  EnumResourceLanguagesA

  GetModuleFileNameA

  GetLocaleInfoA

  CompareStringA

  InterlockedExchange

  FreeLibrary

  lstrcmpA

  FormatMessageA

  MulDiv

  lstrlenA

  SetLastError

  LocalFree

  LoadLibraryA

  GetProcAddress

  InterlockedDecrement

  GetVersionExA

  GetModuleHandleA

  CreateThread

  SleepEx

  WideCharToMultiByte

  FindResourceA

  LoadResource

  LockResource

  SizeofResource

  SetUnhandledExceptionFilter

  GetCurrentThreadId

  ExitProcess

  CreateFileW

  GetFileSize

  WriteFile

  SetFilePointer

  GlobalAlloc

  GlobalLock

  ReadFile

  GlobalUnlock

  CloseHandle

  GetLastError

  GlobalFree

  MultiByteToWideChar

  lstrlenW

  IsValidCodePage

  user32

  InvalidateRgn

  InvalidateRect

  SetRect

  IsRectEmpty

  CopyAcceleratorTableA

  DestroyMenu

  GetSysColorBrush

  SetWindowContextHelpId

  MapDialogRect

  GetWindowThreadProcessId

  SetCursor

  GetCursorPos

  ValidateRect

  EndPaint

  BeginPaint

  GetWindowDC

  ReleaseDC

  GetDC

  ClientToScreen

  GrayStringA

  DrawTextExA

  DrawTextA

  TabbedTextOutA

  GetActiveWindow

  CreateDialogIndirectParamA

  GetNextDlgTabItem

  EndDialog

  CharNextA

  IsWindowEnabled

  ShowWindow

  MoveWindow

  SetWindowTextA

  IsDialogMessageA

  SetMenuItemBitmaps

  LoadBitmapA

  ModifyMenuA

  EnableMenuItem

  CheckMenuItem

  RegisterWindowMessageA

  SendDlgItemMessageA

  WinHelpA

  IsChild

  GetCapture

  GetClassLongA

  SetPropA

  GetPropA

  RemovePropA

  GetFocus

  GetForegroundWindow

  GetLastActivePopup

  SetActiveWindow

  GetDlgItem

  GetTopWindow

  DestroyWindow

  GetMessageTime

  GetMessagePos

  PeekMessageA

  MapWindowPoints

  GetKeyState

  SetMenu

  SetForegroundWindow

  IsWindowVisible

  GetClassInfoExA

  GetClassInfoA

  GetSysColor

  AdjustWindowRectEx

  GetParent

  ScreenToClient

  EqualRect

  CopyRect

  PtInRect

  GetDlgCtrlID

  CallWindowProcA

  GetMenu

  GetWindowLongA

  SetWindowLongA

  SetWindowPos

  OffsetRect

  IntersectRect

  RegisterClipboardFormatA

  MessageBeep

  GetNextDlgGroupItem

  GetMenuCheckMarkDimensions

  CharUpperA

  ReleaseCapture

  SystemParametersInfoA

  GetWindowPlacement

  GetWindow

  GetMenuState

  GetMenuItemID

  GetMenuItemCount

  GetSubMenu

  KillTimer

  SetTimer

  IsWindow

  UnregisterClassA

  LoadCursorA

  RegisterClassA

  CreateWindowExA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  DefWindowProcA

  MessageBoxA

  PostQuitMessage

  GetDesktopWindow

  SetWindowsHookExA

  GetClassNameA

  GetWindowTextA

  PostMessageA

  CallNextHookEx

  GetSystemMetrics

  LoadIconA

  EnableWindow

  UpdateWindow

  GetClientRect

  GetWindowRect

  IsIconic

  SendMessageA

  DrawIcon

  PostThreadMessageA

  UnhookWindowsHookEx

  SetCapture

  SetFocus

  gdi32

  ExtTextOutA

  ExtSelectClipRgn

  DeleteDC

  CreateRectRgnIndirect

  GetRgnBox

  GetMapMode

  ScaleWindowExtEx

  TextOutA

  SetWindowExtEx

  ScaleViewportExtEx

  SetViewportExtEx

  OffsetViewportOrgEx

  SetViewportOrgEx

  SelectObject

  GetDeviceCaps

  GetStockObject

  RectVisible

  PtVisible

  GetWindowExtEx

  GetViewportExtEx

  DeleteObject

  SetMapMode

  RestoreDC

  SaveDC

  GetTextColor

  GetBkColor

  CreateBitmap

  GetObjectA

  SetBkColor

  SetTextColor

  GetClipBox

  Escape

  comdlg32

  GetFileTitleA

  winspool.drv

  ClosePrinter

  DocumentPropertiesA

  OpenPrinterA

  advapi32

  RegSetValueExA

  RegQueryValueA

  RegOpenKeyA

  RegEnumKeyA

  RegDeleteKeyA

  RegOpenKeyExA

  RegQueryValueExA

  RegCloseKey

  RegCreateKeyExA

  shlwapi

  PathIsUNCA

  PathStripToRootA

  PathFindFileNameA

  PathFindExtensionA

  oledlg

  ord8

  ole32

  OleInitialize

  CoFreeUnusedLibraries

  OleUninitialize

  CreateILockBytesOnHGlobal

  StgCreateDocfileOnILockBytes

  StgOpenStorageOnILockBytes

  CoGetClassObject

  CLSIDFromString

  CLSIDFromProgID

  CoRevokeClassObject

  CoTaskMemAlloc

  CreateBindCtx

  CoInitialize

  CoUninitialize

  CoTaskMemFree

  CreateStreamOnHGlobal

  OleIsCurrentClipboard

  OleFlushClipboard

  CoRegisterMessageFilter

  oleaut32

  SysStringByteLen

  SystemTimeToVariantTime

  VariantTimeToSystemTime

  SafeArrayDestroy

  VariantCopy

  OleCreateFontIndirect

  VariantChangeType

  VariantClear

  VariantInit

  SysStringLen

  SysFreeString

  SysAllocStringLen

  VarBstrCmp

  SysAllocString

  SysAllocStringByteLen

  urlmon

  CoInternetGetSession

  CreateURLMoniker

  Sections

  .text

  Size: 264KB - Virtual size: 263KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 64KB - Virtual size: 64KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 11KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 37KB - Virtual size: 37KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/IDMIECC.dll

  .dll regsvr32 windows x86

  9ad6800ca980a94ee8d0defa7db6be51

  
  

  Code Sign

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  9a:88:12:c4:2a:2b:60:a5:e2:5c:cf:24:4c:08:df:40:54:d1:33:dc:55:eb:bd:6e:04:74:aa:67:64:c0:bf:28

  Signer

  Actual PE Digest

  9a:88:12:c4:2a:2b:60:a5:e2:5c:cf:24:4c:08:df:40:54:d1:33:dc:55:eb:bd:6e:04:74:aa:67:64:c0:bf:28

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  08-11-2021 23:21

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  66:e4:22:58:87:5e:e1:be:3b:04:93:fb:39:7e:c0:d4:37:bb:4e:74

  Signer

  Actual PE Digest

  66:e4:22:58:87:5e:e1:be:3b:04:93:fb:39:7e:c0:d4:37:bb:4e:74

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  08-11-2021 23:21

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wininet

  InternetCanonicalizeUrlA

  InternetCanonicalizeUrlW

  InternetCrackUrlA

  InternetGetCookieA

  InternetCombineUrlW

  GetUrlCacheEntryInfoA

  InternetCombineUrlA

  ws2_32

  ntohl

  kernel32

  LoadLibraryA

  LoadLibraryW

  InterlockedDecrement

  GetLocaleInfoA

  GetProcAddress

  GetStringTypeW

  GetModuleHandleA

  GetCurrentProcessId

  SetEvent

  GetCurrentThreadId

  CreateThread

  GetModuleFileNameA

  RaiseException

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  InterlockedIncrement

  lstrcmpiA

  TlsGetValue

  GetModuleHandleW

  TlsSetValue

  CloseHandle

  TlsFree

  CreateMutexA

  GetModuleFileNameW

  TlsAlloc

  IsDBCSLeadByte

  GlobalUnlock

  GlobalLock

  FreeLibrary

  SizeofResource

  LoadResource

  FindResourceA

  LoadLibraryExA

  GetWindowsDirectoryA

  GetCurrentProcess

  lstrcpynA

  ResetEvent

  CreateEventA

  WaitForMultipleObjects

  Sleep

  GetVersionExA

  ReadFile

  FlushFileBuffers

  SetStdHandle

  SetFilePointer

  InitializeCriticalSectionAndSpinCount

  GetStringTypeA

  GetTickCount

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  GetConsoleMode

  GetConsoleCP

  LCMapStringW

  LCMapStringA

  GetStartupInfoA

  GetFileType

  SetHandleCount

  GetStdHandle

  WriteFile

  HeapReAlloc

  VirtualFree

  HeapDestroy

  HeapCreate

  ExitProcess

  HeapSize

  IsValidCodePage

  GetOEMCP

  GetACP

  GetCPInfo

  IsDebuggerPresent

  FindFirstFileA

  FindNextFileA

  MulDiv

  FindClose

  MultiByteToWideChar

  GetFileAttributesA

  GetLastError

  lstrlenA

  WaitForSingleObject

  ReleaseMutex

  GetSystemTimeAsFileTime

  lstrlenW

  WideCharToMultiByte

  CreateFileA

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  SetEndOfFile

  CompareStringA

  CompareStringW

  HeapAlloc

  HeapFree

  GetProcessHeap

  SetEnvironmentVariableA

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  SetLastError

  GetCommandLineA

  GetTimeZoneInformation

  VirtualQuery

  GetSystemInfo

  VirtualProtect

  VirtualAlloc

  RtlUnwind

  user32

  PostMessageA

  PostQuitMessage

  ScreenToClient

  GetWindowRect

  IntersectRect

  GetSystemMetrics

  GetClientRect

  CharLowerBuffA

  SendMessageA

  IsWindow

  ReleaseDC

  GetParent

  GetCursorPos

  GetAsyncKeyState

  GetKeyboardState

  SetWindowsHookExA

  UnhookWindowsHookEx

  CallNextHookEx

  GetKeyState

  MessageBoxW

  MessageBoxA

  CharNextW

  CharNextA

  SetPropA

  LoadIconA

  LoadCursorA

  RegisterClassA

  GetPropA

  RemovePropA

  PtInRect

  DefWindowProcA

  CreateWindowExA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  GetWindowTextLengthW

  GetWindowTextW

  GetClassNameA

  FindWindowExA

  GetDC

  gdi32

  TranslateCharsetInfo

  GetDeviceCaps

  GetStockObject

  advapi32

  RegDeleteKeyA

  RegOpenKeyExW

  RegNotifyChangeKeyValue

  OpenProcessToken

  LookupPrivilegeValueA

  AdjustTokenPrivileges

  GetUserNameA

  RegRestoreKeyA

  RegLoadKeyA

  RegEnumKeyExA

  RegSetValueExA

  RegCreateKeyExA

  RegDeleteValueA

  RegOpenKeyExA

  RegQueryInfoKeyA

  RegEnumKeyA

  RegCloseKey

  RegQueryValueExW

  RegQueryValueExA

  ole32

  CoInitialize

  CoUninitialize

  CoCreateInstance

  CoTaskMemAlloc

  CoTaskMemRealloc

  CoTaskMemFree

  StringFromGUID2

  CoGetClassObject

  oleaut32

  SysAllocString

  SysAllocStringByteLen

  SysStringByteLen

  VarBstrCat

  VariantClear

  VarBstrCmp

  SafeArrayDestroy

  SafeArrayGetElement

  SafeArrayGetLBound

  SafeArrayGetUBound

  VariantInit

  LoadTypeLi

  UnRegisterTypeLi

  RegisterTypeLi

  VarUI4FromStr

  LoadRegTypeLi

  SafeArrayPutElement

  SafeArrayCreate

  SafeArrayUnaccessData

  SafeArrayAccessData

  SafeArrayCreateVector

  SysFreeString

  SysStringLen

  GetErrorInfo

  SysAllocStringLen

  shlwapi

  UrlUnescapeA

  urlmon

  CoInternetGetSession

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  GetListenerState

  InstallNSH

  Sections

  .text

  Size: 335KB - Virtual size: 335KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 72KB - Virtual size: 71KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 10KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 26KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/IDMIECC64.dll

  .dll regsvr32 windows x64

  47f341eea0690e7ecba148b5cff3304d

  
  

  Code Sign

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  cd:8e:f3:41:b2:e6:38:49:5f:cb:5c:b8:cf:fc:4e:42:31:41:79:54:1f:1b:cc:bc:c1:dd:5b:03:62:45:28:59

  Signer

  Actual PE Digest

  cd:8e:f3:41:b2:e6:38:49:5f:cb:5c:b8:cf:fc:4e:42:31:41:79:54:1f:1b:cc:bc:c1:dd:5b:03:62:45:28:59

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  08-11-2021 23:21

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  bc:76:3f:bd:4a:8b:51:24:5d:3f:d1:40:48:05:de:12:37:b6:cc:5c

  Signer

  Actual PE Digest

  bc:76:3f:bd:4a:8b:51:24:5d:3f:d1:40:48:05:de:12:37:b6:cc:5c

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  08-11-2021 23:21

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  wininet

  InternetCanonicalizeUrlA

  InternetCanonicalizeUrlW

  InternetCrackUrlA

  InternetGetCookieA

  InternetCombineUrlW

  GetUrlCacheEntryInfoA

  InternetCombineUrlA

  ws2_32

  ntohl

  kernel32

  GetVersionExA

  GetProcAddress

  GetLocaleInfoA

  GetStringTypeW

  GetModuleHandleA

  GetCurrentProcessId

  SetEvent

  GetCurrentThreadId

  CreateThread

  GetModuleFileNameA

  RaiseException

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  lstrcmpiA

  TlsGetValue

  GetModuleHandleW

  TlsSetValue

  CloseHandle

  TlsFree

  CreateMutexA

  GetModuleFileNameW

  TlsAlloc

  IsDBCSLeadByte

  GlobalUnlock

  GlobalLock

  FreeLibrary

  SizeofResource

  LoadResource

  FindResourceA

  LoadLibraryExA

  LoadLibraryA

  GetWindowsDirectoryA

  GetCurrentProcess

  lstrcpynA

  ResetEvent

  CreateEventA

  WaitForMultipleObjects

  Sleep

  SetEnvironmentVariableA

  FindFirstFileA

  ReadFile

  FlushFileBuffers

  SetStdHandle

  SetFilePointer

  InitializeCriticalSectionAndSpinCount

  GetStringTypeA

  GetTickCount

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  GetConsoleMode

  GetConsoleCP

  HeapReAlloc

  LCMapStringW

  LCMapStringA

  GetStartupInfoA

  GetFileType

  SetHandleCount

  GetStdHandle

  WriteFile

  HeapDestroy

  HeapCreate

  HeapSetInformation

  ExitProcess

  HeapSize

  RtlCaptureContext

  RtlVirtualUnwind

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  FindNextFileA

  FindClose

  MulDiv

  LoadLibraryW

  lstrlenA

  MultiByteToWideChar

  GetFileAttributesA

  GetLastError

  WaitForSingleObject

  ReleaseMutex

  lstrlenW

  WideCharToMultiByte

  CreateFileA

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  VirtualProtect

  SetEndOfFile

  CompareStringA

  CompareStringW

  VirtualAlloc

  GetSystemInfo

  VirtualQuery

  IsValidCodePage

  GetOEMCP

  GetACP

  GetCPInfo

  FlsAlloc

  SetLastError

  FlsFree

  FlsGetValue

  GetSystemTimeAsFileTime

  HeapAlloc

  RtlPcToFileHeader

  RtlUnwindEx

  RtlLookupFunctionEntry

  GetProcessHeap

  HeapFree

  FlsSetValue

  GetCommandLineA

  EncodePointer

  DecodePointer

  GetTimeZoneInformation

  user32

  PostMessageA

  PostQuitMessage

  ScreenToClient

  GetWindowRect

  IntersectRect

  GetSystemMetrics

  GetClientRect

  CharLowerBuffA

  SendMessageA

  IsWindow

  ReleaseDC

  GetParent

  GetCursorPos

  GetAsyncKeyState

  GetKeyboardState

  SetWindowsHookExA

  UnhookWindowsHookEx

  CallNextHookEx

  GetKeyState

  MessageBoxW

  MessageBoxA

  CharNextW

  CharNextA

  SetPropA

  LoadIconA

  LoadCursorA

  RegisterClassA

  GetPropA

  RemovePropA

  PtInRect

  DefWindowProcA

  CreateWindowExA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  GetWindowTextLengthW

  GetWindowTextW

  GetClassNameA

  FindWindowExA

  GetDC

  gdi32

  TranslateCharsetInfo

  GetDeviceCaps

  GetStockObject

  advapi32

  RegRestoreKeyA

  RegOpenKeyExW

  RegNotifyChangeKeyValue

  OpenProcessToken

  LookupPrivilegeValueA

  AdjustTokenPrivileges

  GetUserNameA

  RegLoadKeyA

  RegEnumKeyExA

  RegSetValueExA

  RegCreateKeyExA

  RegDeleteValueA

  RegDeleteKeyA

  RegOpenKeyExA

  RegQueryInfoKeyA

  RegEnumKeyA

  RegCloseKey

  RegQueryValueExA

  RegQueryValueExW

  ole32

  CoInitialize

  CoUninitialize

  CoCreateInstance

  CoTaskMemAlloc

  CoTaskMemRealloc

  CoTaskMemFree

  StringFromGUID2

  CoGetClassObject

  oleaut32

  SafeArrayGetUBound

  VariantInit

  LoadTypeLi

  UnRegisterTypeLi

  RegisterTypeLi

  VarUI4FromStr

  LoadRegTypeLi

  SafeArrayPutElement

  SafeArrayCreate

  SafeArrayUnaccessData

  SafeArrayAccessData

  SafeArrayCreateVector

  SafeArrayGetElement

  SafeArrayDestroy

  VarBstrCmp

  VarBstrCat

  VariantClear

  SysStringByteLen

  SysAllocStringByteLen

  SysAllocString

  SysAllocStringLen

  SysFreeString

  SysStringLen

  GetErrorInfo

  SafeArrayGetLBound

  shlwapi

  UrlUnescapeA

  urlmon

  CoInternetGetSession

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  GetListenerState

  InstallNSH

  Sections

  .text

  Size: 471KB - Virtual size: 470KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 123KB - Virtual size: 122KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 13KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 26KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/IDMIntegrator64.exe

  .exe windows x64

  1655926ba0713665e9265c19c8bd261a

  
  

  Code Sign

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  5a:6c:e5:64:9c:38:f1:1c:bc:e1:85:bd:45:e0:1c:4c:50:23:2d:3e:c0:12:a6:ef:19:0b:b9:f9:d3:ce:b2:8d

  Signer

  Actual PE Digest

  5a:6c:e5:64:9c:38:f1:1c:bc:e1:85:bd:45:e0:1c:4c:50:23:2d:3e:c0:12:a6:ef:19:0b:b9:f9:d3:ce:b2:8d

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  30-04-2021 10:26

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  3c:31:a7:27:e4:2d:be:7a:03:c5:c8:c8:c8:07:76:7f:82:59:04:d0

  Signer

  Actual PE Digest

  3c:31:a7:27:e4:2d:be:7a:03:c5:c8:c8:c8:07:76:7f:82:59:04:d0

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  30-04-2021 10:26

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  kernel32

  CreateEventA

  CreateThread

  FreeLibrary

  GetProcAddress

  LoadLibraryA

  CreateMutexA

  ResetEvent

  HeapSize

  HeapReAlloc

  HeapAlloc

  LCMapStringW

  LCMapStringA

  GetStringTypeW

  MultiByteToWideChar

  GetStringTypeA

  GetVersionExA

  CloseHandle

  GetModuleFileNameA

  GetFileAttributesA

  GetLastError

  WaitForSingleObject

  GetLocaleInfoA

  RtlLookupFunctionEntry

  RtlUnwindEx

  GetCommandLineA

  GetStartupInfoA

  EncodePointer

  DecodePointer

  FlsGetValue

  FlsSetValue

  FlsFree

  SetLastError

  GetCurrentThreadId

  FlsAlloc

  RaiseException

  RtlPcToFileHeader

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RtlVirtualUnwind

  RtlCaptureContext

  GetModuleHandleW

  Sleep

  ExitProcess

  WriteFile

  GetStdHandle

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  SetHandleCount

  GetFileType

  DeleteCriticalSection

  HeapSetInformation

  HeapCreate

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  LeaveCriticalSection

  EnterCriticalSection

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  HeapFree

  InitializeCriticalSectionAndSpinCount

  user32

  wsprintfA

  GetForegroundWindow

  LoadIconA

  LoadCursorA

  RegisterClassA

  CreateWindowExA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  PostQuitMessage

  DefWindowProcA

  PostMessageA

  gdi32

  GetStockObject

  advapi32

  RegNotifyChangeKeyValue

  RegQueryValueExA

  RegCloseKey

  RegOpenKeyExA

  shell32

  ShellExecuteExA

  ole32

  CoInitialize

  CoUninitialize

  Sections

  .text

  Size: 34KB - Virtual size: 33KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 14KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 900B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/IDMMsgHost.exe

  .exe windows x86

  3a6cc6f7d4eacbe32971343a675d95e9

  
  

  Code Sign

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  59:9d:6a:bb:6a:66:2b:c1:9e:34:54:41:78:cc:a4:65:8a:7d:78:64:10:e6:36:ac:84:a3:23:8d:6d:25:6b:cd

  Signer

  Actual PE Digest

  59:9d:6a:bb:6a:66:2b:c1:9e:34:54:41:78:cc:a4:65:8a:7d:78:64:10:e6:36:ac:84:a3:23:8d:6d:25:6b:cd

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  16-04-2021 11:16

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  6f:5d:d5:6a:b9:db:af:c6:56:66:48:a3:ad:55:b2:61:a9:33:56:1d

  Signer

  Actual PE Digest

  6f:5d:d5:6a:b9:db:af:c6:56:66:48:a3:ad:55:b2:61:a9:33:56:1d

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  16-04-2021 11:16

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  _lock

  _onexit

  ??1type_info@@UAE@XZ

  __wgetmainargs

  _cexit

  _exit

  _XcptFilter

  exit

  _wcmdln

  _initterm

  _amsg_exit

  __setusermatherr

  __p__commode

  __p__fmode

  __set_app_type

  _controlfp

  memcpy

  memset

  _itoa

  _itow

  wcsncmp

  _wcsnicmp

  _unlock

  _wcsicmp

  malloc

  free

  realloc

  _iob

  __CxxFrameHandler

  _fstat

  _wstat

  _stat

  ?terminate@@YAXXZ

  __dllonexit

  _CxxThrowException

  kernel32

  GetLastError

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  GetModuleHandleA

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  GetStartupInfoW

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  OpenMutexW

  CreateSemaphoreW

  GetCurrentProcessId

  GetOverlappedResult

  ResetEvent

  CreateThread

  LoadLibraryW

  TerminateThread

  SetEvent

  ProcessIdToSessionId

  CreateEventW

  CreateFileW

  WaitForSingleObject

  WaitForMultipleObjects

  WriteFile

  ReleaseSemaphore

  GetStdHandle

  SetLastError

  CancelIo

  ReadFile

  GetProcessTimes

  CloseHandle

  OpenProcess

  GetVersionExW

  GetCurrentProcess

  MultiByteToWideChar

  GetModuleHandleW

  GetProcAddress

  advapi32

  RegOpenKeyExW

  RegCloseKey

  RegQueryValueExW

  ole32

  CoCreateInstance

  CoInitialize

  CoUninitialize

  oleaut32

  VariantInit

  Exports

  Exports

  __acrt_iob_func

  _fstat32

  _stat32

  _wstat32

  Sections

  .text

  Size: 10KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 784B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/IDMMsgHost.json
• App/IDM/IDMMsgHostMoz.json
• App/IDM/IDMNetMon.dll

  .dll windows x86

  1d62e8d26e560e06fa2808ada3b34f33

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  28:d7:32:da:d9:33:6d:9f:fd:e9:57:d4:b8:4d:30:5e:67:d9:d4:88:79:6c:1f:dd:ac:83:94:df:af:63:0b:5f

  Signer

  Actual PE Digest

  28:d7:32:da:d9:33:6d:9f:fd:e9:57:d4:b8:4d:30:5e:67:d9:d4:88:79:6c:1f:dd:ac:83:94:df:af:63:0b:5f

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  25-05-2022 14:13

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  82:0b:25:2f:9b:f9:00:f4:a6:de:2b:b8:78:5e:2c:ed:fb:14:66:ff

  Signer

  Actual PE Digest

  82:0b:25:2f:9b:f9:00:f4:a6:de:2b:b8:78:5e:2c:ed:fb:14:66:ff

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  25-05-2022 14:13

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  version

  GetFileVersionInfoW

  VerQueryValueW

  GetFileVersionInfoSizeW

  psapi

  EnumProcesses

  GetModuleBaseNameW

  ws2_32

  getsockname

  WSAEventSelect

  listen

  ntohs

  closesocket

  WSAEnumNetworkEvents

  accept

  shutdown

  WSAStartup

  WSACreateEvent

  socket

  WSACloseEvent

  WSACleanup

  ntohl

  getpeername

  recv

  WSAGetLastError

  send

  htons

  bind

  msvcrt

  _onexit

  _lock

  __dllonexit

  _unlock

  memmove

  memcpy

  memset

  _itow

  _i64toa

  _itoa

  _memicmp

  isalnum

  isalpha

  isspace

  fwrite

  fprintf

  _fileno

  _fstat64

  _wstat64

  _time64

  _purecall

  tolower

  _stricmp

  _wcsnicmp

  wcsncmp

  _wcsicmp

  _snwprintf

  strcpy

  strncpy

  strstr

  sscanf

  fgets

  _XcptFilter

  wcsrchr

  wcsncpy

  _strnicmp

  strncmp

  wcsspn

  wcspbrk

  strspn

  strpbrk

  malloc

  strlen

  fclose

  fread

  _wfopen

  free

  realloc

  _iob

  strchr

  wcschr

  _vsnwprintf

  _wcslwr

  _strupr

  _strlwr

  _errno

  _fstat

  _wstat

  _stat

  _vsnprintf

  ??1type_info@@UAE@XZ

  _initterm

  _amsg_exit

  floor

  isdigit

  _except_handler3

  _CxxThrowException

  isprint

  sprintf

  wcsncat

  isupper

  islower

  toupper

  printf

  memchr

  kernel32

  GetVersionExW

  CloseHandle

  FindClose

  FindNextFileW

  FindFirstFileW

  HeapAlloc

  HeapFree

  GetProcessHeap

  VirtualProtect

  VirtualAlloc

  GetProcAddress

  GetModuleHandleW

  GetSystemInfo

  VirtualQuery

  MultiByteToWideChar

  WideCharToMultiByte

  GetCurrentProcess

  OpenProcess

  GetVersion

  GetCurrentProcessId

  GetModuleFileNameW

  GetLastError

  GetLogicalDriveStringsW

  QueryDosDeviceW

  GetProcessTimes

  LoadLibraryW

  DisableThreadLibraryCalls

  GetTickCount

  DeviceIoControl

  CreateThread

  SetEvent

  WaitForSingleObject

  GetCurrentThreadId

  CreateMutexW

  ResumeThread

  GetExitCodeThread

  TerminateThread

  ExitThread

  CreateNamedPipeW

  ConnectNamedPipe

  GetOverlappedResult

  ResetEvent

  ProcessIdToSessionId

  CreateEventW

  GetLocalTime

  FileTimeToLocalFileTime

  FileTimeToSystemTime

  CreateFileW

  LoadLibraryExW

  GetSystemTimeAsFileTime

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  GetSystemTime

  ReadProcessMemory

  OutputDebugStringA

  GetLocaleInfoW

  WriteFile

  ReadFile

  FreeLibrary

  GetSystemDefaultLangID

  user32

  GetDC

  ReleaseDC

  GetAncestor

  GetWindowInfo

  ClientToScreen

  GetWindowTextLengthW

  DispatchMessageW

  EnumChildWindows

  EnumWindows

  GetParent

  FindWindowW

  GetWindowRect

  ShowWindow

  PostMessageW

  GetClientRect

  SendMessageW

  FindWindowExW

  GetClassNameW

  MessageBoxW

  CallNextHookEx

  GetForegroundWindow

  GetWindowThreadProcessId

  UnhookWindowsHookEx

  SetWindowsHookExW

  MsgWaitForMultipleObjects

  PostThreadMessageW

  TranslateMessage

  OffsetRect

  IsRectEmpty

  PeekMessageW

  GetWindowTextW

  gdi32

  TranslateCharsetInfo

  GetDeviceCaps

  advapi32

  RegEnumValueW

  RegQueryValueExW

  RegOpenKeyExW

  RegCreateKeyExW

  RegCloseKey

  RegSetValueExW

  RegEnumKeyExW

  RegNotifyChangeKeyValue

  RegQueryInfoKeyW

  CryptReleaseContext

  CryptAcquireContextW

  CryptCreateHash

  CryptHashData

  CryptGetHashParam

  CryptDestroyHash

  RegDeleteValueW

  ole32

  CoCreateInstance

  CoInitialize

  CoUninitialize

  oleaut32

  SafeArrayDestroy

  SafeArrayGetDim

  VarBstrCat

  VarBstrFromUI4

  SysAllocString

  SafeArrayLock

  SafeArrayUnlock

  SafeArrayCreate

  SysAllocStringLen

  SafeArrayGetLBound

  SafeArrayGetUBound

  VariantClear

  VariantInit

  SysFreeString

  SysStringLen

  Exports

  Exports

  ControlMonitoring

  __acrt_iob_func

  _fstat32

  _stat32

  _wstat32

  llroundf

  lroundf

  Sections

  .text

  Size: 296KB - Virtual size: 295KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 46KB - Virtual size: 45KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/IDMNetMon64.dll

  .dll windows x64

  3161b66c6340ae307edf395d45585e84

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  50:8e:54:e4:41:55:73:f9:53:9e:15:4d:3e:79:14:b7:78:31:0a:61:2c:9e:4e:48:e6:4f:35:f9:41:d5:d1:e6

  Signer

  Actual PE Digest

  50:8e:54:e4:41:55:73:f9:53:9e:15:4d:3e:79:14:b7:78:31:0a:61:2c:9e:4e:48:e6:4f:35:f9:41:d5:d1:e6

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  25-05-2022 14:13

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  fc:23:9a:bf:4e:d3:ee:81:24:7e:46:75:2f:0d:d1:94:7e:ec:5c:a1

  Signer

  Actual PE Digest

  fc:23:9a:bf:4e:d3:ee:81:24:7e:46:75:2f:0d:d1:94:7e:ec:5c:a1

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  25-05-2022 14:13

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  version

  GetFileVersionInfoW

  VerQueryValueW

  GetFileVersionInfoSizeW

  psapi

  GetModuleBaseNameW

  EnumProcesses

  ws2_32

  getsockname

  WSAEventSelect

  listen

  ntohs

  closesocket

  WSAEnumNetworkEvents

  accept

  shutdown

  WSAStartup

  WSACreateEvent

  socket

  WSACloseEvent

  WSACleanup

  ntohl

  getpeername

  recv

  WSAGetLastError

  send

  htons

  bind

  msvcrt

  _initterm

  _XcptFilter

  ??1type_info@@UEAA@XZ

  _onexit

  _lock

  __dllonexit

  _unlock

  _CxxThrowException

  memmove

  memset

  memcpy

  _itow

  _i64toa

  _resetstkoflw

  __C_specific_handler

  _itoa

  _memicmp

  isalnum

  isalpha

  isspace

  fwrite

  fprintf

  _fileno

  _fstat64

  _wstat64

  _time64

  _purecall

  tolower

  _stricmp

  memchr

  wcsncmp

  _wcsicmp

  _snwprintf

  strcpy

  strncpy

  strstr

  strchr

  sscanf

  fgets

  wcsncat

  wcsrchr

  wcsncpy

  _strnicmp

  strncmp

  wcsspn

  wcspbrk

  _vsnwprintf

  _vscwprintf

  strspn

  strpbrk

  _vscprintf

  malloc

  strlen

  fclose

  fread

  _wfopen

  free

  realloc

  _wcslwr

  _strupr

  _strlwr

  _errno

  _fstat

  _wstat

  _stat

  __iob_func

  _vsnprintf

  _amsg_exit

  isdigit

  memcmp

  isprint

  sprintf

  printf

  _wcsnicmp

  isupper

  islower

  toupper

  strcmp

  kernel32

  GetCurrentProcess

  LoadLibraryW

  GetProcAddress

  GetModuleHandleW

  QueryDosDeviceW

  GetLogicalDriveStringsW

  GetLastError

  GetModuleFileNameW

  GetCurrentProcessId

  CloseHandle

  IsWow64Process

  OpenProcess

  GetVersionExW

  FindClose

  FindNextFileW

  FindFirstFileW

  WideCharToMultiByte

  MultiByteToWideChar

  Sleep

  GetProcessTimes

  GetSystemDefaultLangID

  DisableThreadLibraryCalls

  GetTickCount

  DeviceIoControl

  CreateThread

  SetEvent

  WaitForSingleObject

  GetCurrentThreadId

  CreateMutexW

  ResumeThread

  GetExitCodeThread

  TerminateThread

  ExitThread

  CreateNamedPipeW

  ConnectNamedPipe

  GetOverlappedResult

  ResetEvent

  ProcessIdToSessionId

  CreateEventW

  GetLocalTime

  FileTimeToLocalFileTime

  FileTimeToSystemTime

  CreateFileW

  LoadLibraryExW

  FreeLibrary

  ReadFile

  WriteFile

  GetLocaleInfoW

  OutputDebugStringA

  GetSystemTimeAsFileTime

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  GetSystemTime

  ReadProcessMemory

  user32

  GetDC

  ReleaseDC

  GetAncestor

  GetWindowInfo

  ClientToScreen

  GetWindowTextLengthW

  GetWindowTextW

  EnumChildWindows

  EnumWindows

  GetParent

  FindWindowW

  GetWindowRect

  ShowWindow

  PostMessageW

  GetClientRect

  SendMessageW

  FindWindowExW

  GetClassNameW

  MessageBoxW

  CallNextHookEx

  GetForegroundWindow

  GetWindowThreadProcessId

  UnhookWindowsHookEx

  SetWindowsHookExW

  MsgWaitForMultipleObjects

  PostThreadMessageW

  TranslateMessage

  OffsetRect

  PeekMessageW

  IsRectEmpty

  DispatchMessageW

  gdi32

  TranslateCharsetInfo

  GetDeviceCaps

  advapi32

  RegEnumValueW

  RegQueryValueExW

  RegOpenKeyExW

  RegCreateKeyExW

  RegCloseKey

  RegSetValueExW

  RegEnumKeyExW

  RegNotifyChangeKeyValue

  RegQueryInfoKeyW

  CryptReleaseContext

  CryptAcquireContextW

  CryptCreateHash

  CryptHashData

  CryptGetHashParam

  CryptDestroyHash

  RegDeleteValueW

  ole32

  CoCreateInstance

  CoInitialize

  CoUninitialize

  oleaut32

  SysAllocStringLen

  SafeArrayGetDim

  VarBstrCat

  VarBstrFromUI4

  SysAllocString

  SafeArrayLock

  SafeArrayUnlock

  SafeArrayCreate

  SafeArrayDestroy

  SafeArrayGetLBound

  SafeArrayGetUBound

  VariantClear

  VariantInit

  SysFreeString

  SysStringLen

  Exports

  Exports

  ControlMonitoring

  __acrt_iob_func

  _fstat64i32

  _stat64i32

  _wstat64i32

  llroundf

  lroundf

  Sections

  .text

  Size: 327KB - Virtual size: 326KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 68KB - Virtual size: 67KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 13KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/IDMOpExt.nex

  .zip
• App/IDM/IDMShellExt.dll

  .dll regsvr32 windows x86

  c5566aa576dfd045a7e2b834464f1a2e

  
  

  Code Sign

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:52:d1:14:e9:05:be:66:55:76:ca:99:11:86:36:8e:b1:af:e7:52:c1:ab:d3:16:1c:9a:f9:30:b8:a4:dd:9f

  Signer

  Actual PE Digest

  7b:52:d1:14:e9:05:be:66:55:76:ca:99:11:86:36:8e:b1:af:e7:52:c1:ab:d3:16:1c:9a:f9:30:b8:a4:dd:9f

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  02-03-2021 16:15

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  99:8c:a7:ab:ac:b1:fd:c3:ea:90:db:60:43:68:85:bb:20:f0:e9:72

  Signer

  Actual PE Digest

  99:8c:a7:ab:ac:b1:fd:c3:ea:90:db:60:43:68:85:bb:20:f0:e9:72

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  02-03-2021 16:15

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  shell32

  ord526

  SHLoadNonloadedIconOverlayIdentifiers

  SHChangeNotify

  shlwapi

  ord219

  msvcrt

  _onexit

  _XcptFilter

  _initterm

  _amsg_exit

  _lock

  wcsrchr

  __dllonexit

  _wcsicmp

  malloc

  free

  _iob

  _fstat

  _wstat

  _stat

  _unlock

  kernel32

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  InterlockedCompareExchange

  InterlockedExchange

  RtlUnwind

  GetTickCount

  FreeLibrary

  CreateThread

  LoadLibraryW

  Sleep

  CreateEventW

  LeaveCriticalSection

  WaitForMultipleObjects

  EnterCriticalSection

  CloseHandle

  DisableThreadLibraryCalls

  GetLastError

  GetVersionExW

  InitializeCriticalSection

  GetModuleFileNameW

  GetCurrentProcess

  GetModuleHandleW

  GetProcAddress

  advapi32

  RegQueryValueExW

  RegDeleteValueW

  RegOpenKeyExW

  OpenProcessToken

  RegSetValueExW

  RegCreateKeyExW

  RegQueryValueW

  RegDeleteKeyW

  RegNotifyChangeKeyValue

  CreateWellKnownSid

  CheckTokenMembership

  GetTokenInformation

  RegCloseKey

  RegEnumKeyW

  Exports

  Exports

  ControlMonitoring

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  __acrt_iob_func

  _fstat32

  _stat32

  _wstat32

  Sections

  .text

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 676B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/IDMShellExt64.dll

  .dll regsvr32 windows x64

  495afcb36243e48f15e2b44773b40caf

  
  

  Code Sign

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  4e:e8:8f:3b:c6:eb:ad:c9:1c:7c:b0:ae:96:35:33:a6:54:bf:13:2c:0d:4a:91:6f:ad:4b:8a:d6:54:b1:68:19

  Signer

  Actual PE Digest

  4e:e8:8f:3b:c6:eb:ad:c9:1c:7c:b0:ae:96:35:33:a6:54:bf:13:2c:0d:4a:91:6f:ad:4b:8a:d6:54:b1:68:19

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  02-03-2021 16:15

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  a2:16:27:46:07:ce:de:91:6f:27:e8:6e:1f:92:18:78:85:74:74:db

  Signer

  Actual PE Digest

  a2:16:27:46:07:ce:de:91:6f:27:e8:6e:1f:92:18:78:85:74:74:db

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  02-03-2021 16:15

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  shell32

  ord526

  SHLoadNonloadedIconOverlayIdentifiers

  SHChangeNotify

  shlwapi

  ord219

  msvcrt

  _unlock

  __dllonexit

  _lock

  _onexit

  _XcptFilter

  _initterm

  _amsg_exit

  __C_specific_handler

  wcsrchr

  _wcsicmp

  malloc

  free

  _fstat

  _wstat

  _stat

  __iob_func

  kernel32

  GetModuleFileNameW

  GetCurrentProcess

  Sleep

  TerminateProcess

  InitializeCriticalSection

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  GetTickCount

  FreeLibrary

  GetModuleHandleW

  GetProcAddress

  CreateThread

  LoadLibraryW

  CreateEventW

  LeaveCriticalSection

  WaitForMultipleObjects

  EnterCriticalSection

  CloseHandle

  DisableThreadLibraryCalls

  GetLastError

  GetVersionExW

  advapi32

  RegQueryValueExW

  RegDeleteValueW

  RegOpenKeyExW

  OpenProcessToken

  RegSetValueExW

  RegCreateKeyExW

  RegQueryValueW

  RegDeleteKeyW

  RegNotifyChangeKeyValue

  CreateWellKnownSid

  CheckTokenMembership

  GetTokenInformation

  RegCloseKey

  RegEnumKeyW

  Exports

  Exports

  ControlMonitoring

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  __acrt_iob_func

  _fstat64i32

  _stat64i32

  _wstat64i32

  Sections

  .text

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 1024B - Virtual size: 684B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 80B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/IDMVMPrs.dll

  .dll windows x86

  6ff9c16c35134c829949207aa7fe35df

  
  

  Code Sign

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  f2:f3:f3:f5:dc:e5:d3:b0:ba:96:02:60:17:6d:95:76:de:01:a7:93:86:ac:49:aa:88:6b:35:bb:a6:67:c7:d0

  Signer

  Actual PE Digest

  f2:f3:f3:f5:dc:e5:d3:b0:ba:96:02:60:17:6d:95:76:de:01:a7:93:86:ac:49:aa:88:6b:35:bb:a6:67:c7:d0

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  24-03-2022 19:55

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  ac:be:13:29:82:f8:d9:60:25:88:3f:8b:ef:36:8d:5c:5a:0e:fa:08

  Signer

  Actual PE Digest

  ac:be:13:29:82:f8:d9:60:25:88:3f:8b:ef:36:8d:5c:5a:0e:fa:08

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  24-03-2022 19:55

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  fwrite

  fprintf

  fopen

  _wfopen

  fread

  toupper

  getenv

  _strnicmp

  _read

  _getcwd

  _close

  memset

  memcpy

  _XcptFilter

  _initterm

  _amsg_exit

  fclose

  fflush

  vfprintf

  isdigit

  _snprintf

  atoi

  vsprintf

  sscanf

  strncpy

  realloc

  strncmp

  strcspn

  malloc

  free

  _iob

  strchr

  _errno

  _fstat

  _wstat

  _stat

  memmove

  _vsnprintf

  kernel32

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  InterlockedCompareExchange

  InterlockedExchange

  RtlUnwind

  DeleteCriticalSection

  CloseHandle

  Sleep

  ReleaseMutex

  GetCurrentThreadId

  WaitForSingleObject

  CreateMutexA

  InitializeCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  MultiByteToWideChar

  lstrlenA

  GetVersion

  GetSystemTimeAsFileTime

  Exports

  Exports

  GetMPDParserInfo

  Parse1

  UTF8ToHtml

  __acrt_iob_func

  __htmlDefaultSAXHandler

  __oldXMLWDcompatibility

  __xmlBufferAllocScheme

  __xmlDefaultBufferSize

  __xmlDefaultSAXLocator

  __xmlDeregisterNodeDefaultValue

  __xmlDoValidityCheckingDefaultValue

  __xmlErrEncoding

  __xmlGenericError

  __xmlGenericErrorContext

  __xmlGetWarningsDefaultValue

  __xmlIndentTreeOutput

  __xmlKeepBlanksDefaultValue

  __xmlLastError

  __xmlLineNumbersDefaultValue

  __xmlLoadExtDtdDefaultValue

  __xmlOutputBufferCreateFilenameValue

  __xmlParserDebugEntities

  __xmlParserInputBufferCreateFilenameValue

  __xmlParserVersion

  __xmlPedanticParserDefaultValue

  __xmlRaiseError

  __xmlRegisterNodeDefaultValue

  __xmlSaveNoEmptyTags

  __xmlSimpleError

  __xmlStructuredError

  __xmlStructuredErrorContext

  __xmlSubstituteEntitiesDefaultValue

  __xmlTreeIndentString

  _fstat32

  _stat32

  _wstat32

  htmlAttrAllowed

  htmlAutoCloseTag

  htmlCreateFileParserCtxt

  htmlCreateMemoryParserCtxt

  htmlCtxtReadDoc

  htmlCtxtReadFd

  htmlCtxtReadFile

  htmlCtxtReadIO

  htmlCtxtReadMemory

  htmlCtxtReset

  htmlCtxtUseOptions

  htmlDefaultSAXHandlerInit

  htmlElementAllowedHere

  htmlElementStatusHere

  htmlEncodeEntities

  htmlEntityLookup

  htmlEntityValueLookup

  htmlFreeParserCtxt

  htmlGetMetaEncoding

  htmlHandleOmittedElem

  htmlInitAutoClose

  htmlIsAutoClosed

  htmlIsBooleanAttr

  htmlIsScriptAttribute

  htmlNewDoc

  htmlNewDocNoDtD

  htmlNewParserCtxt

  htmlNodeStatus

  htmlParseCharRef

  htmlParseDoc

  htmlParseDocument

  htmlParseElement

  htmlParseEntityRef

  htmlParseFile

  htmlReadDoc

  htmlReadFd

  htmlReadFile

  htmlReadIO

  htmlReadMemory

  htmlSAXParseDoc

  htmlSAXParseFile

  htmlSetMetaEncoding

  htmlTagLookup

  initGenericErrorDefaultFunc

  inputPop

  inputPush

  isolat1ToUTF8

  namePop

  namePush

  nodePop

  nodePush

  xmlAddAttributeDecl

  xmlAddChild

  xmlAddChildList

  xmlAddDocEntity

  xmlAddDtdEntity

  xmlAddElementDecl

  xmlAddEncodingAlias

  xmlAddID

  xmlAddNextSibling

  xmlAddNotationDecl

  xmlAddPrevSibling

  xmlAddRef

  xmlAddSibling

  xmlAllocParserInputBuffer

  xmlBufContent

  xmlBufEnd

  xmlBufGetNodeContent

  xmlBufShrink

  xmlBufUse

  xmlBufferAdd

  xmlBufferAddHead

  xmlBufferCCat

  xmlBufferCat

  xmlBufferContent

  xmlBufferCreate

  xmlBufferCreateSize

  xmlBufferCreateStatic

  xmlBufferDetach

  xmlBufferDump

  xmlBufferEmpty

  xmlBufferFree

  xmlBufferGrow

  xmlBufferLength

  xmlBufferResize

  xmlBufferSetAllocationScheme

  xmlBufferShrink

  xmlBufferWriteCHAR

  xmlBufferWriteChar

  xmlBufferWriteQuotedString

  xmlBuildQName

  xmlBuildRelativeURI

  xmlBuildURI

  xmlByteConsumed

  xmlCanonicPath

  xmlCharEncCloseFunc

  xmlCharEncFirstLine

  xmlCharEncInFunc

  xmlCharEncOutFunc

  xmlCharInRange

  xmlCharStrdup

  xmlCharStrndup

  xmlCheckFilename

  xmlCheckHTTPInput

  xmlCheckLanguageID

  xmlCheckUTF8

  xmlCheckVersion

  xmlCleanupCharEncodingHandlers

  xmlCleanupEncodingAliases

  xmlCleanupGlobals

  xmlCleanupInputCallbacks

  xmlCleanupMemory

  xmlCleanupParser

  xmlCleanupThreads

  xmlClearNodeInfoSeq

  xmlClearParserCtxt

  xmlCopyChar

  xmlCopyCharMultiByte

  xmlCopyDocElementContent

  xmlCopyElementContent

  xmlCopyError

  xmlCopyNamespace

  xmlCopyNamespaceList

  xmlCopyNode

  xmlCopyNodeList

  xmlCopyProp

  xmlCopyPropList

  xmlCreateDocParserCtxt

  xmlCreateEntitiesTable

  xmlCreateEntityParserCtxt

  xmlCreateEnumeration

  xmlCreateFileParserCtxt

  xmlCreateIOParserCtxt

  xmlCreateIntSubset

  xmlCreateMemoryParserCtxt

  xmlCreateURI

  xmlCreateURLParserCtxt

  xmlCtxtGetLastError

  xmlCtxtReadDoc

  xmlCtxtReadFd

  xmlCtxtReadFile

  xmlCtxtReadIO

  xmlCtxtReadMemory

  xmlCtxtReset

  xmlCtxtResetLastError

  xmlCtxtResetPush

  xmlCtxtUseOptions

  xmlCurrentChar

  xmlDOMWrapAdoptNode

  xmlDOMWrapCloneNode

  xmlDOMWrapFreeCtxt

  xmlDOMWrapNewCtxt

  xmlDOMWrapReconcileNamespaces

  xmlDOMWrapRemoveNode

  xmlDefaultSAXHandlerInit

  xmlDelEncodingAlias

  xmlDeregisterNodeDefault

  xmlDetectCharEncoding

  xmlDictCleanup

  xmlDictCreate

  xmlDictCreateSub

  xmlDictExists

  xmlDictFree

  xmlDictGetUsage

  xmlDictLookup

  xmlDictOwns

  xmlDictQLookup

  xmlDictReference

  xmlDictSetLimit

  xmlDictSize

  xmlDocCopyNode

  xmlDocCopyNodeList

  xmlDocGetRootElement

  xmlEncodeEntitiesReentrant

  xmlEncodeSpecialChars

  xmlErrMemory

  xmlEscapeFormatString

  xmlFileClose

  xmlFileMatch

  xmlFileOpen

  xmlFileRead

  xmlFindCharEncodingHandler

  xmlFree

  xmlFreeAttributeTable

  xmlFreeDoc

  xmlFreeDocElementContent

  xmlFreeDtd

  xmlFreeElementContent

  xmlFreeElementTable

  xmlFreeEntitiesTable

  xmlFreeEnumeration

  xmlFreeIDTable

  xmlFreeInputStream

  xmlFreeMutex

  xmlFreeNode

  xmlFreeNodeList

  xmlFreeNotationTable

  xmlFreeNs

  xmlFreeNsList

  xmlFreeParserCtxt

  xmlFreeParserInputBuffer

  xmlFreeProp

  xmlFreePropList

  xmlFreeRMutex

  xmlFreeRefTable

  xmlFreeURI

  xmlGcMemGet

  xmlGcMemSetup

  xmlGetBufferAllocationScheme

  xmlGetCharEncodingHandler

  xmlGetCharEncodingName

  xmlGetCompressMode

  xmlGetDocCompressMode

  xmlGetDocEntity

  xmlGetDtdAttrDesc

  xmlGetDtdElementDesc

  xmlGetDtdEntity

  xmlGetDtdNotationDesc

  xmlGetDtdQAttrDesc

  xmlGetDtdQElementDesc

  xmlGetEncodingAlias

  xmlGetExternalEntityLoader

  xmlGetGlobalState

  xmlGetID

  xmlGetIntSubset

  xmlGetLastChild

  xmlGetLastError

  xmlGetLineNo

  xmlGetNoNsProp

  xmlGetNsProp

  xmlGetParameterEntity

  xmlGetPredefinedEntity

  xmlGetProp

  xmlGetRefs

  xmlGetThreadId

  xmlGetUTF8Char

  xmlHasFeature

  xmlHasNsProp

  xmlHasProp

  xmlHashAddEntry

  xmlHashAddEntry2

  xmlHashAddEntry3

  xmlHashCopy

  xmlHashCreate

  xmlHashCreateDict

  xmlHashDefaultDeallocator

  xmlHashFree

  xmlHashLookup

  xmlHashLookup2

  xmlHashLookup3

  xmlHashQLookup

  xmlHashQLookup2

  xmlHashQLookup3

  xmlHashRemoveEntry

  xmlHashRemoveEntry2

  xmlHashRemoveEntry3

  xmlHashScan

  xmlHashScan3

  xmlHashScanFull

  xmlHashScanFull3

  xmlHashSize

  xmlHashUpdateEntry

  xmlHashUpdateEntry2

  xmlHashUpdateEntry3

  xmlInitCharEncodingHandlers

  xmlInitGlobals

  xmlInitMemory

  xmlInitNodeInfoSeq

  xmlInitParser

  xmlInitParserCtxt

  xmlInitThreads

  xmlInitializeDict

  xmlInitializeGlobalState

  xmlIsBaseChar

  xmlIsBaseCharGroup

  xmlIsBlank

  xmlIsBlankNode

  xmlIsChar

  xmlIsCharGroup

  xmlIsCombining

  xmlIsCombiningGroup

  xmlIsDigit

  xmlIsDigitGroup

  xmlIsExtender

  xmlIsExtenderGroup

  xmlIsID

  xmlIsIdeographic

  xmlIsIdeographicGroup

  xmlIsLetter

  xmlIsMainThread

  xmlIsMixedElement

  xmlIsPubidChar

  xmlIsPubidChar_tab

  xmlIsRef

  xmlKeepBlanksDefault

  xmlLineNumbersDefault

  xmlLinkGetData

  xmlListAppend

  xmlListClear

  xmlListCopy

  xmlListCreate

  xmlListDelete

  xmlListDup

  xmlListEmpty

  xmlListEnd

  xmlListFront

  xmlListInsert

  xmlListMerge

  xmlListPopBack

  xmlListPopFront

  xmlListPushBack

  xmlListPushFront

  xmlListRemoveAll

  xmlListRemoveFirst

  xmlListRemoveLast

  xmlListReverse

  xmlListReverseSearch

  xmlListReverseWalk

  xmlListSearch

  xmlListSize

  xmlListSort

  xmlListWalk

  xmlLoadExternalEntity

  xmlLockLibrary

  xmlMalloc

  xmlMallocAtomic

  xmlMallocAtomicLoc

  xmlMallocLoc

  xmlMemBlocks

  xmlMemDisplay

  xmlMemDisplayLast

  xmlMemFree

  xmlMemGet

  xmlMemMalloc

  xmlMemRealloc

  xmlMemSetup

  xmlMemShow

  xmlMemStrdup

  xmlMemStrdupLoc

  xmlMemUsed

  xmlMemoryDump

  xmlMemoryStrdup

  xmlMutexLock

  xmlMutexUnlock

  xmlNewCDataBlock

  xmlNewCharEncodingHandler

  xmlNewCharRef

  xmlNewComment

  xmlNewDoc

  xmlNewDocComment

  xmlNewDocElementContent

  xmlNewDocNode

  xmlNewDocNodeEatName

  xmlNewDocPI

  xmlNewDocProp

  xmlNewDocText

  xmlNewDocTextLen

  xmlNewDtd

  xmlNewElementContent

  xmlNewEntity

  xmlNewEntityInputStream

  xmlNewIOInputStream

  xmlNewInputFromFile

  xmlNewInputStream

  xmlNewMutex

  xmlNewNode

  xmlNewNodeEatName

  xmlNewNs

  xmlNewNsProp

  xmlNewNsPropEatName

  xmlNewPI

  xmlNewParserCtxt

  xmlNewProp

  xmlNewRMutex

  xmlNewReference

  xmlNewStringInputStream

  xmlNewText

  xmlNewTextLen

  xmlNextChar

  xmlNoNetExternalEntityLoader

  xmlNodeAddContent

  xmlNodeAddContentLen

  xmlNodeBufGetContent

  xmlNodeGetBase

  xmlNodeGetContent

  xmlNodeGetLang

  xmlNodeGetSpacePreserve

  xmlNodeIsText

  xmlNodeListGetString

  xmlNodeSetContent

  xmlNormalizeURIPath

  xmlNormalizeWindowsPath

  xmlOutputBufferCreateFilenameDefault

  xmlParseAttValue

  xmlParseAttributeListDecl

  xmlParseAttributeType

  xmlParseCDSect

  xmlParseCharData

  xmlParseCharEncoding

  xmlParseCharRef

  xmlParseComment

  xmlParseContent

  xmlParseCtxtExternalEntity

  xmlParseDefaultDecl

  xmlParseDocTypeDecl

  xmlParseDocument

  xmlParseElement

  xmlParseElementChildrenContentDecl

  xmlParseElementContentDecl

  xmlParseElementDecl

  xmlParseElementMixedContentDecl

  xmlParseEncName

  xmlParseEncodingDecl

  xmlParseEntityDecl

  xmlParseEntityRef

  xmlParseEntityValue

  xmlParseEnumeratedType

  xmlParseEnumerationType

  xmlParseExtParsedEnt

  xmlParseExternalID

  xmlParseExternalSubset

  xmlParseInNodeContext

  xmlParseMarkupDecl

  xmlParseMisc

  xmlParseName

  xmlParseNmtoken

  xmlParseNotationDecl

  xmlParseNotationType

  xmlParsePEReference

  xmlParsePI

  xmlParsePITarget

  xmlParsePubidLiteral

  xmlParseReference

  xmlParseSDDecl

  xmlParseSystemLiteral

  xmlParseTextDecl

  xmlParseURI

  xmlParseURIRaw

  xmlParseURIReference

  xmlParseVersionInfo

  xmlParseVersionNum

  xmlParseXMLDecl

  xmlParserAddNodeInfo

  xmlParserError

  xmlParserFindNodeInfo

  xmlParserFindNodeInfoIndex

  xmlParserGetDirectory

  xmlParserHandlePEReference

  xmlParserInputBufferCreateFd

  xmlParserInputBufferCreateFile

  xmlParserInputBufferCreateFilename

  xmlParserInputBufferCreateFilenameDefault

  xmlParserInputBufferCreateIO

  xmlParserInputBufferCreateMem

  xmlParserInputBufferCreateStatic

  xmlParserInputBufferGrow

  xmlParserInputBufferPush

  xmlParserInputBufferRead

  xmlParserInputGrow

  xmlParserInputRead

  xmlParserInputShrink

  xmlParserMaxDepth

  xmlParserPrintFileContext

  xmlParserPrintFileInfo

  Sections

  .text

  Size: 215KB - Virtual size: 214KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 84KB - Virtual size: 84KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/IDMVMPrs64.dll

  .dll windows x64

  05bf0b69dc15362fd9b2d46a68a46b2e

  
  

  Code Sign

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  3f:bf:cc:76:df:95:d5:79:a4:80:05:ed:a6:72:50:07:58:ac:64:51:6c:b3:aa:a2:9c:4d:eb:a3:31:2f:07:ba

  Signer

  Actual PE Digest

  3f:bf:cc:76:df:95:d5:79:a4:80:05:ed:a6:72:50:07:58:ac:64:51:6c:b3:aa:a2:9c:4d:eb:a3:31:2f:07:ba

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  24-03-2022 19:55

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  d3:08:35:16:eb:96:b7:f4:5c:31:f3:ec:7f:dc:48:91:35:93:a1:95

  Signer

  Actual PE Digest

  d3:08:35:16:eb:96:b7:f4:5c:31:f3:ec:7f:dc:48:91:35:93:a1:95

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  24-03-2022 19:55

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  msvcrt

  fclose

  fwrite

  fprintf

  fopen

  _wfopen

  fread

  toupper

  getenv

  _strnicmp

  _read

  _getcwd

  _close

  memcpy

  memset

  memmove

  __C_specific_handler

  vfprintf

  _XcptFilter

  _initterm

  _amsg_exit

  fflush

  isdigit

  _snprintf

  atoi

  vsprintf

  sscanf

  strncpy

  realloc

  strchr

  strncmp

  strcspn

  malloc

  free

  _errno

  _fstat

  _wstat

  _stat

  __iob_func

  _vsnprintf

  strcmp

  kernel32

  GetSystemTimeAsFileTime

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  DeleteCriticalSection

  CloseHandle

  ReleaseMutex

  GetCurrentThreadId

  WaitForSingleObject

  CreateMutexA

  InitializeCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  MultiByteToWideChar

  lstrlenA

  Sleep

  GetCurrentProcessId

  Exports

  Exports

  GetMPDParserInfo

  Parse1

  UTF8ToHtml

  __acrt_iob_func

  __htmlDefaultSAXHandler

  __oldXMLWDcompatibility

  __xmlBufferAllocScheme

  __xmlDefaultBufferSize

  __xmlDefaultSAXLocator

  __xmlDeregisterNodeDefaultValue

  __xmlDoValidityCheckingDefaultValue

  __xmlErrEncoding

  __xmlGenericError

  __xmlGenericErrorContext

  __xmlGetWarningsDefaultValue

  __xmlIndentTreeOutput

  __xmlKeepBlanksDefaultValue

  __xmlLastError

  __xmlLineNumbersDefaultValue

  __xmlLoadExtDtdDefaultValue

  __xmlOutputBufferCreateFilenameValue

  __xmlParserDebugEntities

  __xmlParserInputBufferCreateFilenameValue

  __xmlParserVersion

  __xmlPedanticParserDefaultValue

  __xmlRaiseError

  __xmlRegisterNodeDefaultValue

  __xmlSaveNoEmptyTags

  __xmlSimpleError

  __xmlStructuredError

  __xmlStructuredErrorContext

  __xmlSubstituteEntitiesDefaultValue

  __xmlTreeIndentString

  _fstat64i32

  _stat64i32

  _wstat64i32

  htmlAttrAllowed

  htmlAutoCloseTag

  htmlCreateFileParserCtxt

  htmlCreateMemoryParserCtxt

  htmlCtxtReadDoc

  htmlCtxtReadFd

  htmlCtxtReadFile

  htmlCtxtReadIO

  htmlCtxtReadMemory

  htmlCtxtReset

  htmlCtxtUseOptions

  htmlDefaultSAXHandlerInit

  htmlElementAllowedHere

  htmlElementStatusHere

  htmlEncodeEntities

  htmlEntityLookup

  htmlEntityValueLookup

  htmlFreeParserCtxt

  htmlGetMetaEncoding

  htmlHandleOmittedElem

  htmlInitAutoClose

  htmlIsAutoClosed

  htmlIsBooleanAttr

  htmlIsScriptAttribute

  htmlNewDoc

  htmlNewDocNoDtD

  htmlNewParserCtxt

  htmlNodeStatus

  htmlParseCharRef

  htmlParseDoc

  htmlParseDocument

  htmlParseElement

  htmlParseEntityRef

  htmlParseFile

  htmlReadDoc

  htmlReadFd

  htmlReadFile

  htmlReadIO

  htmlReadMemory

  htmlSAXParseDoc

  htmlSAXParseFile

  htmlSetMetaEncoding

  htmlTagLookup

  initGenericErrorDefaultFunc

  inputPop

  inputPush

  isolat1ToUTF8

  namePop

  namePush

  nodePop

  nodePush

  xmlAddAttributeDecl

  xmlAddChild

  xmlAddChildList

  xmlAddDocEntity

  xmlAddDtdEntity

  xmlAddElementDecl

  xmlAddEncodingAlias

  xmlAddID

  xmlAddNextSibling

  xmlAddNotationDecl

  xmlAddPrevSibling

  xmlAddRef

  xmlAddSibling

  xmlAllocParserInputBuffer

  xmlBufContent

  xmlBufEnd

  xmlBufGetNodeContent

  xmlBufShrink

  xmlBufUse

  xmlBufferAdd

  xmlBufferAddHead

  xmlBufferCCat

  xmlBufferCat

  xmlBufferContent

  xmlBufferCreate

  xmlBufferCreateSize

  xmlBufferCreateStatic

  xmlBufferDetach

  xmlBufferDump

  xmlBufferEmpty

  xmlBufferFree

  xmlBufferGrow

  xmlBufferLength

  xmlBufferResize

  xmlBufferSetAllocationScheme

  xmlBufferShrink

  xmlBufferWriteCHAR

  xmlBufferWriteChar

  xmlBufferWriteQuotedString

  xmlBuildQName

  xmlBuildRelativeURI

  xmlBuildURI

  xmlByteConsumed

  xmlCanonicPath

  xmlCharEncCloseFunc

  xmlCharEncFirstLine

  xmlCharEncInFunc

  xmlCharEncOutFunc

  xmlCharInRange

  xmlCharStrdup

  xmlCharStrndup

  xmlCheckFilename

  xmlCheckHTTPInput

  xmlCheckLanguageID

  xmlCheckUTF8

  xmlCheckVersion

  xmlCleanupCharEncodingHandlers

  xmlCleanupEncodingAliases

  xmlCleanupGlobals

  xmlCleanupInputCallbacks

  xmlCleanupMemory

  xmlCleanupParser

  xmlCleanupThreads

  xmlClearNodeInfoSeq

  xmlClearParserCtxt

  xmlCopyChar

  xmlCopyCharMultiByte

  xmlCopyDocElementContent

  xmlCopyElementContent

  xmlCopyError

  xmlCopyNamespace

  xmlCopyNamespaceList

  xmlCopyNode

  xmlCopyNodeList

  xmlCopyProp

  xmlCopyPropList

  xmlCreateDocParserCtxt

  xmlCreateEntitiesTable

  xmlCreateEntityParserCtxt

  xmlCreateEnumeration

  xmlCreateFileParserCtxt

  xmlCreateIOParserCtxt

  xmlCreateIntSubset

  xmlCreateMemoryParserCtxt

  xmlCreateURI

  xmlCreateURLParserCtxt

  xmlCtxtGetLastError

  xmlCtxtReadDoc

  xmlCtxtReadFd

  xmlCtxtReadFile

  xmlCtxtReadIO

  xmlCtxtReadMemory

  xmlCtxtReset

  xmlCtxtResetLastError

  xmlCtxtResetPush

  xmlCtxtUseOptions

  xmlCurrentChar

  xmlDOMWrapAdoptNode

  xmlDOMWrapCloneNode

  xmlDOMWrapFreeCtxt

  xmlDOMWrapNewCtxt

  xmlDOMWrapReconcileNamespaces

  xmlDOMWrapRemoveNode

  xmlDefaultSAXHandlerInit

  xmlDelEncodingAlias

  xmlDeregisterNodeDefault

  xmlDetectCharEncoding

  xmlDictCleanup

  xmlDictCreate

  xmlDictCreateSub

  xmlDictExists

  xmlDictFree

  xmlDictGetUsage

  xmlDictLookup

  xmlDictOwns

  xmlDictQLookup

  xmlDictReference

  xmlDictSetLimit

  xmlDictSize

  xmlDocCopyNode

  xmlDocCopyNodeList

  xmlDocGetRootElement

  xmlEncodeEntitiesReentrant

  xmlEncodeSpecialChars

  xmlErrMemory

  xmlEscapeFormatString

  xmlFileClose

  xmlFileMatch

  xmlFileOpen

  xmlFileRead

  xmlFindCharEncodingHandler

  xmlFree

  xmlFreeAttributeTable

  xmlFreeDoc

  xmlFreeDocElementContent

  xmlFreeDtd

  xmlFreeElementContent

  xmlFreeElementTable

  xmlFreeEntitiesTable

  xmlFreeEnumeration

  xmlFreeIDTable

  xmlFreeInputStream

  xmlFreeMutex

  xmlFreeNode

  xmlFreeNodeList

  xmlFreeNotationTable

  xmlFreeNs

  xmlFreeNsList

  xmlFreeParserCtxt

  xmlFreeParserInputBuffer

  xmlFreeProp

  xmlFreePropList

  xmlFreeRMutex

  xmlFreeRefTable

  xmlFreeURI

  xmlGcMemGet

  xmlGcMemSetup

  xmlGetBufferAllocationScheme

  xmlGetCharEncodingHandler

  xmlGetCharEncodingName

  xmlGetCompressMode

  xmlGetDocCompressMode

  xmlGetDocEntity

  xmlGetDtdAttrDesc

  xmlGetDtdElementDesc

  xmlGetDtdEntity

  xmlGetDtdNotationDesc

  xmlGetDtdQAttrDesc

  xmlGetDtdQElementDesc

  xmlGetEncodingAlias

  xmlGetExternalEntityLoader

  xmlGetGlobalState

  xmlGetID

  xmlGetIntSubset

  xmlGetLastChild

  xmlGetLastError

  xmlGetLineNo

  xmlGetNoNsProp

  xmlGetNsProp

  xmlGetParameterEntity

  xmlGetPredefinedEntity

  xmlGetProp

  xmlGetRefs

  xmlGetThreadId

  xmlGetUTF8Char

  xmlHasFeature

  xmlHasNsProp

  xmlHasProp

  xmlHashAddEntry

  xmlHashAddEntry2

  xmlHashAddEntry3

  xmlHashCopy

  xmlHashCreate

  xmlHashCreateDict

  xmlHashDefaultDeallocator

  xmlHashFree

  xmlHashLookup

  xmlHashLookup2

  xmlHashLookup3

  xmlHashQLookup

  xmlHashQLookup2

  xmlHashQLookup3

  xmlHashRemoveEntry

  xmlHashRemoveEntry2

  xmlHashRemoveEntry3

  xmlHashScan

  xmlHashScan3

  xmlHashScanFull

  xmlHashScanFull3

  xmlHashSize

  xmlHashUpdateEntry

  xmlHashUpdateEntry2

  xmlHashUpdateEntry3

  xmlInitCharEncodingHandlers

  xmlInitGlobals

  xmlInitMemory

  xmlInitNodeInfoSeq

  xmlInitParser

  xmlInitParserCtxt

  xmlInitThreads

  xmlInitializeDict

  xmlInitializeGlobalState

  xmlIsBaseChar

  xmlIsBaseCharGroup

  xmlIsBlank

  xmlIsBlankNode

  xmlIsChar

  xmlIsCharGroup

  xmlIsCombining

  xmlIsCombiningGroup

  xmlIsDigit

  xmlIsDigitGroup

  xmlIsExtender

  xmlIsExtenderGroup

  xmlIsID

  xmlIsIdeographic

  xmlIsIdeographicGroup

  xmlIsLetter

  xmlIsMainThread

  xmlIsMixedElement

  xmlIsPubidChar

  xmlIsPubidChar_tab

  xmlIsRef

  xmlKeepBlanksDefault

  xmlLineNumbersDefault

  xmlLinkGetData

  xmlListAppend

  xmlListClear

  xmlListCopy

  xmlListCreate

  xmlListDelete

  xmlListDup

  xmlListEmpty

  xmlListEnd

  xmlListFront

  xmlListInsert

  xmlListMerge

  xmlListPopBack

  xmlListPopFront

  xmlListPushBack

  xmlListPushFront

  xmlListRemoveAll

  xmlListRemoveFirst

  xmlListRemoveLast

  xmlListReverse

  xmlListReverseSearch

  xmlListReverseWalk

  xmlListSearch

  xmlListSize

  xmlListSort

  xmlListWalk

  xmlLoadExternalEntity

  xmlLockLibrary

  xmlMalloc

  xmlMallocAtomic

  xmlMallocAtomicLoc

  xmlMallocLoc

  xmlMemBlocks

  xmlMemDisplay

  xmlMemDisplayLast

  xmlMemFree

  xmlMemGet

  xmlMemMalloc

  xmlMemRealloc

  xmlMemSetup

  xmlMemShow

  xmlMemStrdup

  xmlMemStrdupLoc

  xmlMemUsed

  xmlMemoryDump

  xmlMemoryStrdup

  xmlMutexLock

  xmlMutexUnlock

  xmlNewCDataBlock

  xmlNewCharEncodingHandler

  xmlNewCharRef

  xmlNewComment

  xmlNewDoc

  xmlNewDocComment

  xmlNewDocElementContent

  xmlNewDocNode

  xmlNewDocNodeEatName

  xmlNewDocPI

  xmlNewDocProp

  xmlNewDocText

  xmlNewDocTextLen

  xmlNewDtd

  xmlNewElementContent

  xmlNewEntity

  xmlNewEntityInputStream

  xmlNewIOInputStream

  xmlNewInputFromFile

  xmlNewInputStream

  xmlNewMutex

  xmlNewNode

  xmlNewNodeEatName

  xmlNewNs

  xmlNewNsProp

  xmlNewNsPropEatName

  xmlNewPI

  xmlNewParserCtxt

  xmlNewProp

  xmlNewRMutex

  xmlNewReference

  xmlNewStringInputStream

  xmlNewText

  xmlNewTextLen

  xmlNextChar

  xmlNoNetExternalEntityLoader

  xmlNodeAddContent

  xmlNodeAddContentLen

  xmlNodeBufGetContent

  xmlNodeGetBase

  xmlNodeGetContent

  xmlNodeGetLang

  xmlNodeGetSpacePreserve

  xmlNodeIsText

  xmlNodeListGetString

  xmlNodeSetContent

  xmlNormalizeURIPath

  xmlNormalizeWindowsPath

  xmlOutputBufferCreateFilenameDefault

  xmlParseAttValue

  xmlParseAttributeListDecl

  xmlParseAttributeType

  xmlParseCDSect

  xmlParseCharData

  xmlParseCharEncoding

  xmlParseCharRef

  xmlParseComment

  xmlParseContent

  xmlParseCtxtExternalEntity

  xmlParseDefaultDecl

  xmlParseDocTypeDecl

  xmlParseDocument

  xmlParseElement

  xmlParseElementChildrenContentDecl

  xmlParseElementContentDecl

  xmlParseElementDecl

  xmlParseElementMixedContentDecl

  xmlParseEncName

  xmlParseEncodingDecl

  xmlParseEntityDecl

  xmlParseEntityRef

  xmlParseEntityValue

  xmlParseEnumeratedType

  xmlParseEnumerationType

  xmlParseExtParsedEnt

  xmlParseExternalID

  xmlParseExternalSubset

  xmlParseInNodeContext

  xmlParseMarkupDecl

  xmlParseMisc

  xmlParseName

  xmlParseNmtoken

  xmlParseNotationDecl

  xmlParseNotationType

  xmlParsePEReference

  xmlParsePI

  xmlParsePITarget

  xmlParsePubidLiteral

  xmlParseReference

  xmlParseSDDecl

  xmlParseSystemLiteral

  xmlParseTextDecl

  xmlParseURI

  xmlParseURIRaw

  xmlParseURIReference

  xmlParseVersionInfo

  xmlParseVersionNum

  xmlParseXMLDecl

  xmlParserAddNodeInfo

  xmlParserError

  xmlParserFindNodeInfo

  xmlParserFindNodeInfoIndex

  xmlParserGetDirectory

  xmlParserHandlePEReference

  xmlParserInputBufferCreateFd

  xmlParserInputBufferCreateFile

  xmlParserInputBufferCreateFilename

  xmlParserInputBufferCreateFilenameDefault

  xmlParserInputBufferCreateIO

  xmlParserInputBufferCreateMem

  xmlParserInputBufferCreateStatic

  xmlParserInputBufferGrow

  xmlParserInputBufferPush

  xmlParserInputBufferRead

  xmlParserInputGrow

  xmlParserInputRead

  xmlParserInputShrink

  xmlParserMaxDepth

  xmlParserPrintFileContext

  xmlParserPrintFileInfo

  Sections

  .text

  Size: 257KB - Virtual size: 256KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 11KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/IDMan.exe

  .exe windows x86

  c28176cb04dbc16dda2b97aa5a5f0977

  
  

  Code Sign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0b:59:29:2a:8c:f6:59:10:78:c9:29:d5:ba:55:a7:f6

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  28-07-2022 00:00

  Not After

  06-08-2025 23:59

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  21-09-2022 00:00

  Not After

  21-11-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  2f:30:1c:1f:a7:81:94:17:6f:61:99:0e:5f:2b:35:e4:5c:86:8f:23:b9:99:62:49:44:c2:70:09:67:61:5b:fd

  Signer

  Actual PE Digest

  2f:30:1c:1f:a7:81:94:17:6f:61:99:0e:5f:2b:35:e4:5c:86:8f:23:b9:99:62:49:44:c2:70:09:67:61:5b:fd

  Digest Algorithm

  sha256

  PE Digest Matches

  false

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  03-10-2022 22:42

  Valid: true

  Chain 1

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Chain 2

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GlobalFlags

  GetCPInfo

  GetOEMCP

  FileTimeToLocalFileTime

  GetFileSizeEx

  GetFileTime

  SetErrorMode

  WritePrivateProfileStringA

  FindResourceExA

  RtlUnwind

  GetTimeFormatA

  GetDateFormatA

  SetEnvironmentVariableW

  GetCurrentDirectoryW

  SetCurrentDirectoryW

  GetSystemTimeAsFileTime

  GetTimeZoneInformation

  HeapReAlloc

  GetLocalTime

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  RemoveDirectoryA

  SetEnvironmentVariableA

  SetCurrentDirectoryA

  GetFileInformationByHandle

  PeekNamedPipe

  GetFileType

  GetCommandLineA

  InterlockedIncrement

  VirtualAlloc

  VirtualQuery

  ExitThread

  HeapSize

  IsDebuggerPresent

  IsValidCodePage

  HeapCreate

  VirtualFree

  LCMapStringA

  LCMapStringW

  GetStdHandle

  GetConsoleCP

  GetConsoleMode

  SetHandleCount

  InitializeCriticalSectionAndSpinCount

  SetStdHandle

  GetStringTypeA

  GetStringTypeW

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  QueryPerformanceCounter

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  CompareStringW

  LocalReAlloc

  GlobalHandle

  GlobalReAlloc

  GetCurrentThread

  ConvertDefaultLocale

  EnumResourceLanguagesA

  GetProfileIntA

  GetTickCount

  GetFullPathNameA

  FindFirstFileA

  DuplicateHandle

  UnlockFile

  LockFile

  GetThreadLocale

  lstrcmpA

  SuspendThread

  ResumeThread

  SetThreadPriority

  GlobalGetAtomNameA

  GlobalAddAtomA

  GlobalFindAtomA

  GlobalDeleteAtom

  CompareStringA

  lstrcmpW

  RaiseException

  InterlockedExchange

  GetDiskFreeSpaceW

  GetVolumeInformationW

  SetThreadExecutionState

  CreateProcessA

  GetSystemInfo

  InterlockedDecrement

  GetComputerNameA

  FreeResource

  GetCurrentDirectoryA

  GetACP

  GetSystemDefaultLangID

  GetUserDefaultLangID

  EnterCriticalSection

  LeaveCriticalSection

  CreateThread

  SleepEx

  lstrcpynA

  ReadFile

  CreateDirectoryA

  CopyFileA

  MoveFileA

  LocalAlloc

  FormatMessageA

  CreateDirectoryW

  CopyFileW

  TlsAlloc

  TlsSetValue

  GetCurrentThreadId

  GetVolumeInformationA

  GetModuleFileNameA

  TlsFree

  TlsGetValue

  GetFileAttributesExW

  FileTimeToSystemTime

  CreateWaitableTimerA

  SetWaitableTimer

  CancelWaitableTimer

  DeviceIoControl

  SetFileAttributesW

  FlushFileBuffers

  InitializeCriticalSection

  DeleteCriticalSection

  GetCommandLineW

  GetWindowsDirectoryW

  SetFileAttributesA

  DeleteFileA

  SetEvent

  TerminateProcess

  lstrlenA

  LoadLibraryW

  VirtualProtect

  lstrcmpiA

  GetDriveTypeW

  GetLocaleInfoA

  GetVersion

  SetLastError

  LoadLibraryA

  GetCurrentProcessId

  lstrlenW

  GetSystemDirectoryA

  GetSystemDirectoryW

  lstrcatA

  SetFilePointer

  SetEndOfFile

  GetFileAttributesA

  GetWindowsDirectoryA

  GetModuleFileNameW

  GetExitCodeProcess

  MoveFileW

  RemoveDirectoryW

  GetFileSize

  CreateFileMappingA

  MapViewOfFile

  UnmapViewOfFile

  GetModuleHandleA

  WriteFile

  DeleteFileW

  CreateProcessW

  CompareFileTime

  FindFirstFileW

  FindNextFileW

  FindClose

  CreateEventA

  WaitForMultipleObjects

  ResetEvent

  GetCurrentProcess

  GetSystemTime

  SystemTimeToFileTime

  SetFileTime

  GlobalAlloc

  GlobalFree

  MoveFileExW

  GetProcessHeap

  HeapFree

  HeapAlloc

  OpenProcess

  GetVersionExA

  CreateFileA

  CreateFileW

  FreeLibrary

  Sleep

  CreateMutexA

  OpenMutexA

  WaitForSingleObject

  ReleaseMutex

  CloseHandle

  GetModuleHandleW

  GetProcAddress

  GlobalSize

  GlobalLock

  GlobalUnlock

  GetFileAttributesW

  GetLastError

  FormatMessageW

  LocalFree

  MulDiv

  ExitProcess

  MultiByteToWideChar

  WideCharToMultiByte

  FindResourceA

  LoadResource

  LockResource

  GetStartupInfoA

  SizeofResource

  user32

  DeferWindowPos

  AdjustWindowRectEx

  GetClassInfoA

  GetClassInfoExA

  GetScrollPos

  SetMenu

  MapWindowPoints

  GetMessageTime

  GetTopWindow

  EndDeferWindowPos

  BeginDeferWindowPos

  GetLastActivePopup

  GetClassLongA

  IsChild

  WinHelpA

  TabbedTextOutA

  DrawTextA

  DrawTextExA

  GrayStringA

  GetMenuCheckMarkDimensions

  SetMenuItemBitmaps

  ValidateRect

  IsClipboardFormatAvailable

  CharUpperA

  InflateRect

  IsRectEmpty

  MapDialogRect

  SetWindowContextHelpId

  SetRectEmpty

  GetAsyncKeyState

  IsZoomed

  UnregisterClassA

  PostThreadMessageA

  CharNextA

  CopyAcceleratorTableA

  InvalidateRgn

  GetNextDlgGroupItem

  GetWindowPlacement

  GetActiveWindow

  CreateDialogIndirectParamA

  GetNextDlgTabItem

  EndDialog

  IsDialogMessageA

  SendDlgItemMessageA

  GetDlgItemTextA

  GetMenuState

  DrawFrameControl

  SetRect

  DrawStateA

  DeleteMenu

  DrawIconEx

  IntersectRect

  GetSysColorBrush

  FrameRect

  PeekMessageA

  SetActiveWindow

  WindowFromPoint

  ClientToScreen

  UnionRect

  SetClassLongA

  SetDlgItemTextA

  ModifyMenuA

  GetMenuItemInfoW

  FillRect

  CopyIcon

  GetKeyboardLayoutList

  SetPropA

  GetPropA

  RemovePropA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  DefWindowProcA

  PostQuitMessage

  DestroyIcon

  GetDlgItemTextW

  GetClassNameA

  SetCursorPos

  SetLayeredWindowAttributes

  UpdateWindow

  CloseWindow

  CreateWindowExA

  RegisterClassA

  DefDlgProcA

  DestroyWindow

  GetWindowLongA

  BeginPaint

  EndPaint

  GetWindowDC

  GetMenu

  RegisterWindowMessageA

  GetKeyState

  RegisterClipboardFormatA

  GetDlgCtrlID

  LoadImageW

  LoadImageA

  SetWindowsHookExA

  DestroyMenu

  CreatePopupMenu

  TrackPopupMenu

  GetMessagePos

  LoadCursorA

  SetCursor

  ReleaseCapture

  GetSystemMetrics

  AppendMenuW

  ModifyMenuW

  CallNextHookEx

  UnhookWindowsHookEx

  SetWindowLongA

  CallWindowProcA

  SystemParametersInfoA

  CheckMenuItem

  SetClipboardViewer

  ChangeClipboardChain

  SetCapture

  GetCapture

  ScreenToClient

  IsIconic

  DrawMenuBar

  RemoveMenu

  EnableMenuItem

  DrawFocusRect

  DrawIcon

  EqualRect

  OffsetRect

  CharUpperBuffW

  GetWindow

  EnumWindows

  SetForegroundWindow

  IsWindowVisible

  wsprintfW

  MessageBoxA

  GetComboBoxInfo

  MessageBoxW

  LoadBitmapA

  SetPropW

  SystemParametersInfoW

  CheckMenuRadioItem

  GetSubMenu

  GetMenuItemID

  GetMenuItemCount

  AppendMenuA

  GetCursorPos

  GetClientRect

  CopyRect

  PtInRect

  FindWindowA

  GetWindowThreadProcessId

  MsgWaitForMultipleObjects

  GetParent

  SetParent

  KillTimer

  SetTimer

  InvalidateRect

  GetFocus

  SetFocus

  SendMessageW

  GetForegroundWindow

  ExitWindowsEx

  wsprintfA

  ReleaseDC

  MessageBeep

  MoveWindow

  GetWindowTextLengthA

  ShowWindow

  SetDlgItemTextW

  GetWindowTextLengthW

  PostMessageA

  IsWindowEnabled

  GetWindowTextA

  IsWindow

  CreateWindowExW

  SetWindowPos

  SetWindowTextA

  GetWindowRect

  SetWindowTextW

  GetWindowTextW

  LoadStringA

  DefWindowProcW

  GetDesktopWindow

  LoadIconA

  GetDC

  SendMessageA

  GetDlgItem

  GetSysColor

  EnableWindow

  DrawTextW

  gdi32

  PtVisible

  RectVisible

  TextOutA

  ExtTextOutA

  Escape

  SetViewportOrgEx

  OffsetViewportOrgEx

  SetViewportExtEx

  ScaleViewportExtEx

  SetWindowExtEx

  ScaleWindowExtEx

  ExtSelectClipRgn

  CreateBitmap

  GetBkColor

  GetCharWidthA

  StretchDIBits

  GetTextColor

  GetRgnBox

  EnumFontFamiliesExA

  GetWindowExtEx

  GetViewportExtEx

  SelectClipRgn

  MoveToEx

  LineTo

  IntersectClipRect

  ExcludeClipRect

  SetBkMode

  RestoreDC

  SaveDC

  GetClipBox

  CopyMetaFileA

  SetStretchBltMode

  GetMapMode

  SetMapMode

  LPtoDP

  DPtoLP

  ExtTextOutW

  CreateRectRgnIndirect

  CreateFontIndirectA

  GetTextMetricsA

  GetStockObject

  CreateCompatibleBitmap

  DeleteObject

  SelectObject

  StretchBlt

  BitBlt

  DeleteDC

  TranslateCharsetInfo

  GetDIBits

  CreateDIBSection

  GetObjectW

  CreateFontIndirectW

  GetObjectA

  GetDeviceCaps

  CreatePen

  SetTextColor

  SetBkColor

  CreateSolidBrush

  GetTextExtentPoint32W

  GetTextExtentPoint32A

  CreateFontA

  CreateCompatibleDC

  comdlg32

  ChooseFontW

  GetFileTitleA

  GetSaveFileNameA

  GetOpenFileNameW

  GetSaveFileNameW

  advapi32

  RegRestoreKeyA

  RegQueryValueExA

  RegQueryValueA

  RegOpenKeyA

  OpenSCManagerA

  OpenServiceA

  CloseServiceHandle

  RegEnumKeyW

  RegDeleteKeyW

  DuplicateTokenEx

  GetLengthSid

  SetTokenInformation

  CreateProcessAsUserW

  GetTokenInformation

  GetSidSubAuthorityCount

  GetSidSubAuthority

  GetUserNameW

  GetUserNameA

  RegCloseKey

  RegLoadKeyA

  RegSaveKeyA

  RegEnumValueA

  RegCreateKeyExW

  RegFlushKey

  RegDeleteValueW

  RegSetValueExW

  RegNotifyChangeKeyValue

  OpenProcessToken

  LookupPrivilegeValueA

  AdjustTokenPrivileges

  RegQueryValueExW

  RegEnumKeyExA

  RegDeleteKeyA

  RegQueryInfoKeyA

  RegEnumKeyA

  RegCreateKeyExA

  RegSetValueExA

  RegDeleteValueA

  RegOpenKeyExA

  comctl32

  ord17

  ImageList_GetIcon

  shlwapi

  StrCmpLogicalW

  PathStripToRootA

  PathIsUNCA

  PathFindExtensionA

  PathFindFileNameA

  Sections

  .text

  Size: 2.4MB - Virtual size: 2.4MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 871KB - Virtual size: 871KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 32KB - Virtual size: 68KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2.1MB - Virtual size: 2.1MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 211KB - Virtual size: 211KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/IEExt.htm

  .vbs
• App/IDM/IEGetAll.htm

  .vbs
• App/IDM/IEGetVL.htm

  .vbs
• App/IDM/IEGetVL2.htm

  .vbs
• App/IDM/IEMonitor.exe

  .exe windows x86

  cc50bc11c112d01154ce3385b76d7d36

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e9:41:7a:04:69:39:31:f3:f2:9a:fd:f7:12:24:b5:38:4c:6b:da:e1:1d:81:b0:2d:48:1e:8d:5f:8a:d1:e0:2d

  Signer

  Actual PE Digest

  e9:41:7a:04:69:39:31:f3:f2:9a:fd:f7:12:24:b5:38:4c:6b:da:e1:1d:81:b0:2d:48:1e:8d:5f:8a:d1:e0:2d

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  13-03-2020 22:24

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  1b:c3:5a:aa:22:41:5d:65:04:94:38:1b:0c:c2:d4:33:a8:94:45:5b

  Signer

  Actual PE Digest

  1b:c3:5a:aa:22:41:5d:65:04:94:38:1b:0c:c2:d4:33:a8:94:45:5b

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  13-03-2020 22:24

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetFileSizeEx

  GetFileTime

  RtlUnwind

  GetTimeZoneInformation

  GetSystemTimeAsFileTime

  Sleep

  HeapFree

  GetCommandLineA

  GetStartupInfoA

  HeapAlloc

  VirtualProtect

  VirtualAlloc

  GetSystemInfo

  VirtualQuery

  HeapReAlloc

  HeapSize

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetConsoleCP

  GetConsoleMode

  GetStdHandle

  InitializeCriticalSectionAndSpinCount

  GetFileAttributesA

  VirtualFree

  GetACP

  IsValidCodePage

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  SetHandleCount

  GetFileType

  QueryPerformanceCounter

  GetStringTypeA

  GetStringTypeW

  SetStdHandle

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  LCMapStringA

  LCMapStringW

  GetProcessHeap

  CompareStringW

  SetEnvironmentVariableA

  FileTimeToLocalFileTime

  SetErrorMode

  FileTimeToSystemTime

  GetOEMCP

  GetCPInfo

  GetModuleHandleW

  CreateFileA

  GetFullPathNameA

  GetVolumeInformationA

  FindFirstFileA

  FindClose

  GetCurrentProcess

  DuplicateHandle

  GetFileSize

  SetEndOfFile

  UnlockFile

  LockFile

  FlushFileBuffers

  SetFilePointer

  WriteFile

  ReadFile

  GetThreadLocale

  InterlockedIncrement

  TlsFree

  DeleteCriticalSection

  LocalReAlloc

  TlsSetValue

  TlsAlloc

  InitializeCriticalSection

  GlobalHandle

  GlobalReAlloc

  EnterCriticalSection

  TlsGetValue

  LeaveCriticalSection

  GlobalFlags

  WritePrivateProfileStringA

  GlobalGetAtomNameA

  GlobalFindAtomA

  lstrcmpW

  GetModuleFileNameW

  FormatMessageA

  MulDiv

  lstrlenA

  GetTickCount

  GlobalUnlock

  GlobalFree

  FreeResource

  GetCurrentProcessId

  SetLastError

  GlobalAddAtomA

  GlobalDeleteAtom

  GetCurrentThread

  GetCurrentThreadId

  ConvertDefaultLocale

  EnumResourceLanguagesA

  GetLocaleInfoA

  CompareStringA

  GlobalLock

  lstrcmpA

  GlobalAlloc

  RaiseException

  InterlockedExchange

  LocalFree

  LocalAlloc

  ExitProcess

  lstrcpynA

  FreeLibrary

  InterlockedDecrement

  GetVersionExA

  LoadLibraryW

  LoadLibraryA

  MultiByteToWideChar

  WideCharToMultiByte

  FindResourceA

  LoadResource

  LockResource

  SizeofResource

  ReleaseMutex

  CloseHandle

  CreateMutexA

  GetLastError

  GetProcAddress

  GetModuleHandleA

  HeapCreate

  GetModuleFileNameA

  user32

  SetRect

  IsRectEmpty

  CopyAcceleratorTableA

  CharNextA

  PostThreadMessageA

  CharUpperA

  GetSysColorBrush

  ReleaseCapture

  LoadCursorA

  SetCapture

  EndPaint

  BeginPaint

  GetWindowDC

  ReleaseDC

  GetDC

  ClientToScreen

  GrayStringA

  DrawTextExA

  DrawTextA

  TabbedTextOutA

  ShowWindow

  MoveWindow

  SetWindowTextA

  IsDialogMessageA

  RegisterWindowMessageA

  SendDlgItemMessageA

  WinHelpA

  GetCapture

  GetClassLongA

  SetPropA

  GetPropA

  RemovePropA

  SetFocus

  GetForegroundWindow

  GetTopWindow

  GetMessageTime

  GetMessagePos

  MapWindowPoints

  SetMenu

  SetForegroundWindow

  UpdateWindow

  CreateWindowExA

  GetClassInfoExA

  GetClassInfoA

  RegisterClassA

  GetSysColor

  AdjustWindowRectEx

  EqualRect

  CopyRect

  PtInRect

  GetDlgCtrlID

  DefWindowProcA

  CallWindowProcA

  GetMenu

  SetWindowLongA

  OffsetRect

  IntersectRect

  SystemParametersInfoA

  GetWindowPlacement

  GetWindowRect

  UnhookWindowsHookEx

  DrawIcon

  SendMessageA

  PostMessageA

  IsIconic

  GetMenuItemID

  GetMenuItemCount

  GetSubMenu

  GetWindow

  SetWindowContextHelpId

  MapDialogRect

  SetWindowPos

  RegisterClipboardFormatA

  GetDesktopWindow

  SetActiveWindow

  CreateDialogIndirectParamA

  DestroyMenu

  UnregisterClassA

  MessageBeep

  GetNextDlgGroupItem

  InvalidateRgn

  GetWindowTextA

  InvalidateRect

  GetClientRect

  SetTimer

  KillTimer

  LoadIconA

  GetSystemMetrics

  EnableWindow

  GetKeyboardState

  GetKeyState

  GetClassNameA

  PostQuitMessage

  CheckMenuItem

  EnableMenuItem

  GetMenuState

  ModifyMenuA

  GetParent

  GetFocus

  LoadBitmapA

  GetMenuCheckMarkDimensions

  SetMenuItemBitmaps

  ValidateRect

  GetCursorPos

  PeekMessageA

  IsWindowVisible

  GetActiveWindow

  DispatchMessageA

  TranslateMessage

  GetMessageA

  CallNextHookEx

  SetWindowsHookExA

  SetCursor

  MessageBoxA

  IsWindowEnabled

  GetLastActivePopup

  GetWindowLongA

  GetWindowThreadProcessId

  EndDialog

  GetNextDlgTabItem

  GetDlgItem

  DestroyWindow

  IsWindow

  IsChild

  gdi32

  GetStockObject

  GetBkColor

  GetTextColor

  CreateRectRgnIndirect

  GetRgnBox

  GetMapMode

  ExtSelectClipRgn

  DeleteDC

  ScaleWindowExtEx

  SetWindowExtEx

  ScaleViewportExtEx

  SetViewportExtEx

  OffsetViewportOrgEx

  CreateBitmap

  SelectObject

  Escape

  ExtTextOutA

  TextOutA

  RectVisible

  PtVisible

  GetWindowExtEx

  GetViewportExtEx

  DeleteObject

  SetMapMode

  RestoreDC

  SaveDC

  GetObjectA

  SetBkColor

  SetTextColor

  GetClipBox

  GetDeviceCaps

  SetViewportOrgEx

  comdlg32

  GetFileTitleA

  winspool.drv

  DocumentPropertiesA

  ClosePrinter

  OpenPrinterA

  advapi32

  RegCreateKeyExA

  RegQueryValueA

  RegOpenKeyA

  RegEnumKeyA

  RegDeleteKeyA

  RegSetValueExA

  RegQueryValueExW

  RegOpenKeyExA

  RegCloseKey

  RegQueryValueExA

  shlwapi

  PathFindFileNameA

  PathStripToRootA

  PathIsUNCA

  PathFindExtensionA

  oledlg

  ord8

  ole32

  CreateILockBytesOnHGlobal

  StgCreateDocfileOnILockBytes

  StgOpenStorageOnILockBytes

  CoRegisterMessageFilter

  OleFlushClipboard

  OleIsCurrentClipboard

  CoRevokeClassObject

  CoGetClassObject

  CoTaskMemAlloc

  CoTaskMemFree

  CLSIDFromString

  CLSIDFromProgID

  OleInitialize

  CoFreeUnusedLibraries

  OleUninitialize

  CoInitialize

  CoUninitialize

  CoCreateInstance

  oleaut32

  SysFreeString

  SysAllocStringByteLen

  SysStringByteLen

  VariantClear

  SysAllocStringLen

  SysAllocString

  VariantInit

  SafeArrayUnaccessData

  SafeArrayGetUBound

  SafeArrayGetLBound

  SafeArrayAccessData

  VariantChangeType

  VariantCopy

  OleCreateFontIndirect

  VariantTimeToSystemTime

  SystemTimeToVariantTime

  SafeArrayDestroy

  GetErrorInfo

  SysStringLen

  Sections

  .text

  Size: 227KB - Virtual size: 227KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 55KB - Virtual size: 55KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 10KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 31KB - Virtual size: 31KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 34KB - Virtual size: 34KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/KGIDM.dll

  .dll windows x86

  6817cb01530476e094866e58d0ebf092

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  user32

  wsprintfA

  kernel32

  RtlZeroMemory

  lstrlenA

  advapi32

  RegCreateKeyExA

  RegSetValueExA

  RegCloseKey

  Exports

  Exports

  GEN

  Sections

  .text

  Size: 1024B - Virtual size: 644B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 516B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• App/IDM/Languages/idm_am.lng
• App/IDM/Languages/idm_ar.lng
• App/IDM/Languages/idm_ba.lng
• App/IDM/Languages/idm_be.lng
• App/IDM/Languages/idm_bg.lng
• App/IDM/Languages/idm_chn2.lng
• App/IDM/Languages/idm_cht.lng
• App/IDM/Languages/idm_cz.lng
• App/IDM/Languages/idm_de.lng
• App/IDM/Languages/idm_dk.lng
• App/IDM/Languages/idm_es.lng
• App/IDM/Languages/idm_fa.lng
• App/IDM/Languages/idm_fi.lng
• App/IDM/Languages/idm_fr.lng
• App/IDM/Languages/idm_ge.lng
• App/IDM/Languages/idm_gr.lng
• App/IDM/Languages/idm_hi.lng
• App/IDM/Languages/idm_hu.lng
• App/IDM/Languages/idm_id.lng
• App/IDM/Languages/idm_it.lng
• App/IDM/Languages/idm_iw.lng
• App/IDM/Languages/idm_jp.lng
• App/IDM/Languages/idm_kr.lng
• App/IDM/Languages/idm_mn.lng
• App/IDM/Languages/idm_my.lng
• App/IDM/Languages/idm_nl.lng
• App/IDM/Languages/idm_no.lng
• App/IDM/Languages/idm_pl.lng
• App/IDM/Languages/idm_pt.lng
• App/IDM/Languages/idm_ptbr.lng
• App/IDM/Languages/idm_ro.lng
• App/IDM/Languages/idm_ru.lng
• App/IDM/Languages/idm_sk.lng
• App/IDM/Languages/idm_sr.lng
• App/IDM/Languages/idm_sw.lng
• App/IDM/Languages/idm_th.lng
• App/IDM/Languages/idm_tr.lng
• App/IDM/Languages/idm_vn.lng
• App/IDM/Languages/template.lng
• App/IDM/Languages/tips_am.txt
• App/IDM/Languages/tips_ar.txt
• App/IDM/Languages/tips_chn.txt
• App/IDM/Languages/tips_cht.txt
• App/IDM/Languages/tips_cz.txt
• App/IDM/Languages/tips_de.txt
• App/IDM/Languages/tips_es.txt
• App/IDM/Languages/tips_fa.txt
• App/IDM/Languages/tips_fr.txt
• App/IDM/Languages/tips_ge.txt
• App/IDM/Languages/tips_gr.txt
• App/IDM/Languages/tips_hu.txt
• App/IDM/Languages/tips_id.txt
• App/IDM/Languages/tips_it.txt
• App/IDM/Languages/tips_jp.txt
• App/IDM/Languages/tips_kr.txt
• App/IDM/Languages/tips_nl.txt
• App/IDM/Languages/tips_pl.txt
• App/IDM/Languages/tips_ptbr.txt
• App/IDM/Languages/tips_ru.txt
• App/IDM/Languages/tips_sk.txt
• App/IDM/Languages/tips_th.txt
• App/IDM/Languages/tips_tr.txt
• App/IDM/Languages/tips_vn.txt
• App/IDM/MediumILStart.exe

  .exe windows x86

  8b9e8171fedea437adc3b4da24139da4

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  b9:aa:c8:a0:5c:05:82:04:97:93:2f:0a:88:16:7d:6a:68:61:45:a8:49:df:17:b8:13:c3:f9:d0:34:76:8d:b1

  Signer

  Actual PE Digest

  b9:aa:c8:a0:5c:05:82:04:97:93:2f:0a:88:16:7d:6a:68:61:45:a8:49:df:17:b8:13:c3:f9:d0:34:76:8d:b1

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 04:03

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  4a:ac:1a:c8:1d:c2:fe:39:68:e9:21:77:29:f0:9a:ce:ce:20:f4:5d

  Signer

  Actual PE Digest

  4a:ac:1a:c8:1d:c2:fe:39:68:e9:21:77:29:f0:9a:ce:ce:20:f4:5d

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 04:03

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ole32

  CoUninitialize

  CoCreateInstance

  CoInitialize

  kernel32

  TerminateProcess

  Sleep

  GetStartupInfoW

  SetUnhandledExceptionFilter

  GetModuleHandleW

  GetProcAddress

  ExitProcess

  WriteFile

  GetStdHandle

  GetModuleFileNameA

  GetModuleFileNameW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetCommandLineW

  SetHandleCount

  GetFileType

  GetStartupInfoA

  DeleteCriticalSection

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  InterlockedIncrement

  SetLastError

  GetCurrentThreadId

  GetLastError

  InterlockedDecrement

  HeapCreate

  VirtualFree

  HeapFree

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetCurrentProcess

  UnhandledExceptionFilter

  IsDebuggerPresent

  LeaveCriticalSection

  EnterCriticalSection

  LoadLibraryA

  InitializeCriticalSectionAndSpinCount

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  HeapAlloc

  VirtualAlloc

  HeapReAlloc

  RtlUnwind

  HeapSize

  GetLocaleInfoA

  WideCharToMultiByte

  GetStringTypeA

  MultiByteToWideChar

  GetStringTypeW

  LCMapStringA

  LCMapStringW

  Sections

  .text

  Size: 24KB - Virtual size: 24KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/Toolbar/3d_largeHot_3.bmp
• App/IDM/Toolbar/3d_largeHot_3_hdpi15.bmp
• App/IDM/Toolbar/3d_large_3.bmp
• App/IDM/Toolbar/3d_large_3_hdpi15.bmp
• App/IDM/Toolbar/3d_smallHot_3.bmp
• App/IDM/Toolbar/3d_small_3.bmp
• App/IDM/Toolbar/3d_style_3.tbi
• App/IDM/Toolbar/8.bmp
• App/IDM/Toolbar/8.tbi
• App/IDM/Toolbar/8_hot.bmp
• App/IDM/Toolbar/Blue Arrow Author/I.R.Iran.gif

  .gif
• App/IDM/Toolbar/Blue Arrow Author/Larg-Preview.bmp
• App/IDM/Toolbar/Blue Arrow Author/Mini-Preview.bmp
• App/IDM/Toolbar/Blue Arrow Author/Read-Me.htm

  .html
• App/IDM/Toolbar/Blue Arrow Author/Thumbs.db
• App/IDM/Toolbar/Blue_Arrow.tbi
• App/IDM/Toolbar/Blue_Arrow_Disable.bmp
• App/IDM/Toolbar/Blue_Arrow_Hot.bmp
• App/IDM/Toolbar/Blue_Arrow_Mini_Disable.bmp
• App/IDM/Toolbar/Blue_Arrow_Mini_Hot.bmp
• App/IDM/Toolbar/Blue_Arrow_Mini_Normal.bmp
• App/IDM/Toolbar/Blue_Arrow_Normal.bmp
• App/IDM/Toolbar/Globe.bmp
• App/IDM/Toolbar/Globe.tbi
• App/IDM/Toolbar/GlobeHot.bmp
• App/IDM/Toolbar/H3M_BlueSky_Shapes.tbi
• App/IDM/Toolbar/H3M_BlueSky_Shapes_Toolbar/H3M_BSS_Large_Hot.bmp
• App/IDM/Toolbar/H3M_BlueSky_Shapes_Toolbar/H3M_BSS_Large_Normal.bmp
• App/IDM/Toolbar/H3M_BlueSky_Shapes_Toolbar/H3M_BSS_Small_Hot.bmp
• App/IDM/Toolbar/H3M_BlueSky_Shapes_Toolbar/H3M_BSS_Small_Normal.bmp
• App/IDM/Toolbar/H3M_Bronze_Shapes.tbi
• App/IDM/Toolbar/H3M_Bronze_Shapes_Toolbar/H3M_BS_Large_Hot.bmp
• App/IDM/Toolbar/H3M_Bronze_Shapes_Toolbar/H3M_BS_Large_Normal.bmp
• App/IDM/Toolbar/H3M_Bronze_Shapes_Toolbar/H3M_BS_Small_Hot.bmp
• App/IDM/Toolbar/H3M_Bronze_Shapes_Toolbar/H3M_BS_Small_Normal.bmp
• App/IDM/Toolbar/H3M_Buttons.tbi
• App/IDM/Toolbar/H3M_Buttons_Toolbar/H3M_Buttons_Large_Hot.bmp
• App/IDM/Toolbar/H3M_Buttons_Toolbar/H3M_Buttons_Large_Normal.bmp
• App/IDM/Toolbar/H3M_Buttons_Toolbar/H3M_Buttons_Small_Hot.bmp
• App/IDM/Toolbar/H3M_Buttons_Toolbar/H3M_Buttons_Small_Normal.bmp
• App/IDM/Toolbar/H3M_Cubic3D.tbi
• App/IDM/Toolbar/H3M_Cubic3D_Toolbar/H3M_Cubic3D_Large_Hot.bmp
• App/IDM/Toolbar/H3M_Cubic3D_Toolbar/H3M_Cubic3D_Large_Normal.bmp
• App/IDM/Toolbar/H3M_Cubic3D_Toolbar/H3M_Cubic3D_Small_Hot.bmp
• App/IDM/Toolbar/H3M_Cubic3D_Toolbar/H3M_Cubic3D_Small_Normal.bmp
• App/IDM/Toolbar/H3M_Glossy.tbi
• App/IDM/Toolbar/H3M_Glossy_Toolbar/H3M_Glossy_Large_Hot.bmp
• App/IDM/Toolbar/H3M_Glossy_Toolbar/H3M_Glossy_Large_Normal.bmp
• App/IDM/Toolbar/H3M_Glossy_Toolbar/H3M_Glossy_Small_Hot.bmp
• App/IDM/Toolbar/H3M_Glossy_Toolbar/H3M_Glossy_Small_Normal.bmp
• App/IDM/Toolbar/H3M_Olive_Shapes.tbi
• App/IDM/Toolbar/H3M_Olive_Shapes_Toolbar/H3M_OS_Large_Hot.bmp
• App/IDM/Toolbar/H3M_Olive_Shapes_Toolbar/H3M_OS_Large_Normal.bmp
• App/IDM/Toolbar/H3M_Olive_Shapes_Toolbar/H3M_OS_Small_Hot.bmp
• App/IDM/Toolbar/H3M_Olive_Shapes_Toolbar/H3M_OS_Small_Normal.bmp
• App/IDM/Toolbar/H3M_Painted_Stickers.tbi
• App/IDM/Toolbar/H3M_Painted_Stickers_Toolbar/H3M_PS_Large_Hot.bmp
• App/IDM/Toolbar/H3M_Painted_Stickers_Toolbar/H3M_PS_Large_Normal.bmp
• App/IDM/Toolbar/H3M_Painted_Stickers_Toolbar/H3M_PS_Small_Hot.bmp
• App/IDM/Toolbar/H3M_Painted_Stickers_Toolbar/H3M_PS_Small_Normal.bmp
• App/IDM/Toolbar/Kavian.tbi
• App/IDM/Toolbar/Kavian/Kavian_Larg.bmp
• App/IDM/Toolbar/Kavian/Kavian_Larg_Hot.bmp
• App/IDM/Toolbar/Koushik Halder.tbi
• App/IDM/Toolbar/Koushik_Halder_Large_Disable.bmp
• App/IDM/Toolbar/Koushik_Halder_Large_Hot.bmp
• App/IDM/Toolbar/Koushik_Halder_Large_Normal.bmp
• App/IDM/Toolbar/Koushik_Halder_Small_Disable.bmp
• App/IDM/Toolbar/Koushik_Halder_Small_Hot.bmp
• App/IDM/Toolbar/Koushik_Halder_Small_Normal.bmp
• App/IDM/Toolbar/MosI3D_1.tbi
• App/IDM/Toolbar/MosI3D_largeHot_1.bmp
• App/IDM/Toolbar/MosI3D_large_1.bmp
• App/IDM/Toolbar/MosI3D_smallHot_1.bmp
• App/IDM/Toolbar/MosI3D_small_1.bmp
• App/IDM/Toolbar/Mosi_Modern_XP.bmp
• App/IDM/Toolbar/Mosi_Modern_XP.tbi
• App/IDM/Toolbar/Mosi_Modern_XPHot.bmp
• App/IDM/Toolbar/Skin2/3d_largeHot_3.bmp
• App/IDM/Toolbar/Skin2/3d_large_3.bmp
• App/IDM/Toolbar/Skin2/3d_smallHot_3.bmp
• App/IDM/Toolbar/Skin2/3d_small_3.bmp
• App/IDM/Toolbar/ThL-Toolbar.tbi
• App/IDM/Toolbar/ThL-Toolbar_bmps/ThL-Hot.bmp
• App/IDM/Toolbar/ThL-Toolbar_bmps/ThL-Normal.bmp
• App/IDM/Toolbar/kiti.bmp
• App/IDM/Toolbar/kiti.tbi
• App/IDM/Toolbar/kitiHot.bmp
• App/IDM/Toolbar/luckyToolbar2.bmp
• App/IDM/Toolbar/luckyToolbar2.tbi
• App/IDM/Toolbar/luckyToolbarH2.bmp
• App/IDM/Toolbar/luckyToolbarS2.bmp
• App/IDM/Toolbar/luckyToolbarSH2.bmp
• App/IDM/Toolbar/round.bmp
• App/IDM/Toolbar/round.tbi
• App/IDM/Toolbar/roundHot.bmp
• App/IDM/Toolbar/skin2.tbi
• App/IDM/Uninstall.exe

  .exe windows x86

  e1c74a3e7b794dea2c40762b17a8ef75

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  09-06-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  09-06-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  f0:c0:0e:45:4d:e7:b5:41:d6:2b:b0:cc:6f:98:93:0d:eb:4b:67:39:f9:80:7c:d7:8e:b3:7b:63:d7:04:7d:28

  Signer

  Actual PE Digest

  f0:c0:0e:45:4d:e7:b5:41:d6:2b:b0:cc:6f:98:93:0d:eb:4b:67:39:f9:80:7c:d7:8e:b3:7b:63:d7:04:7d:28

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  17-06-2022 06:27

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  f5:c1:4d:24:5d:5c:e6:94:b8:a5:90:88:dd:c1:2c:37:19:54:e4:88

  Signer

  Actual PE Digest

  f5:c1:4d:24:5d:5c:e6:94:b8:a5:90:88:dd:c1:2c:37:19:54:e4:88

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  17-06-2022 06:27

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  comctl32

  InitCommonControlsEx

  shlwapi

  SHDeleteKeyW

  kernel32

  CopyFileW

  GlobalFree

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  ExitThread

  DeleteFileW

  ExitProcess

  lstrcpyW

  lstrcmpW

  UnmapViewOfFile

  MultiByteToWideChar

  GetSystemTime

  CreateEventW

  MapViewOfFile

  SetFileTime

  GetFileTime

  CreateFileMappingW

  GetFileSize

  MoveFileExW

  TerminateProcess

  OpenProcess

  CreateDirectoryW

  RemoveDirectoryW

  FindClose

  GetLastError

  FindFirstFileW

  SetEndOfFile

  SetFilePointer

  GetShortPathNameW

  WriteFile

  LocalFree

  FormatMessageW

  GetUserDefaultLangID

  GetSystemDefaultLangID

  SetCurrentDirectoryW

  LocalAlloc

  GetExitCodeThread

  FreeResource

  LockResource

  LoadResource

  SizeofResource

  FindResourceW

  MulDiv

  CreateThread

  HeapAlloc

  HeapFree

  GetProcessHeap

  GetDiskFreeSpaceW

  ResumeThread

  SuspendThread

  WideCharToMultiByte

  CompareFileTime

  CreateProcessW

  GetExitCodeProcess

  CreateFileW

  GetModuleFileNameW

  GetModuleHandleW

  GetCurrentProcess

  GetVersionExW

  lstrlenW

  GetWindowsDirectoryW

  Sleep

  GetSystemDirectoryW

  CreateMutexW

  OpenMutexW

  WaitForSingleObject

  ReleaseMutex

  CloseHandle

  lstrcmpiW

  LoadLibraryW

  GetProcAddress

  FreeLibrary

  GetFileAttributesW

  lstrcatW

  FindNextFileW

  GetStartupInfoW

  user32

  GetWindowThreadProcessId

  MessageBoxW

  wsprintfW

  GetForegroundWindow

  SendMessageW

  SetDlgItemTextW

  SendDlgItemMessageW

  wsprintfA

  EnableWindow

  GetDlgItem

  DispatchMessageW

  TranslateMessage

  PeekMessageW

  MsgWaitForMultipleObjects

  PostQuitMessage

  GetKeyboardLayoutList

  DestroyWindow

  GetDlgCtrlID

  GetFocus

  DialogBoxParamW

  GetDesktopWindow

  GetWindow

  SetWindowTextW

  IsDialogMessageW

  ExitWindowsEx

  GetDC

  ReleaseDC

  CreateWindowExW

  CallWindowProcW

  GetParent

  SetFocus

  IsIconic

  BeginPaint

  GetSystemMetrics

  DrawIcon

  GetWindowRect

  ScreenToClient

  EndPaint

  CharUpperW

  FindWindowW

  EnumWindows

  GetMessageW

  GetWindowTextW

  GetClientRect

  SetWindowPos

  GetWindowLongW

  SetWindowLongW

  SetForegroundWindow

  PostMessageW

  GetWindowDC

  CreateDialogParamW

  LoadIconW

  ShowWindow

  gdi32

  LPtoDP

  GetDeviceCaps

  DPtoLP

  SetMapMode

  GetMapMode

  TranslateCharsetInfo

  advapi32

  RegQueryInfoKeyW

  AllocateAndInitializeSid

  RegSetValueExA

  FreeSid

  LookupPrivilegeValueW

  AdjustTokenPrivileges

  GetUserNameW

  RegEnumKeyExW

  RegSetValueExW

  RegQueryValueExW

  RegOpenKeyExW

  RegEnumKeyW

  OpenProcessToken

  RegCloseKey

  RegCreateKeyExW

  RegDeleteKeyW

  RegDeleteValueW

  shell32

  ShellExecuteW

  ShellExecuteExW

  SHGetSpecialFolderLocation

  SHGetMalloc

  SHBrowseForFolderW

  SHGetPathFromIDListW

  ole32

  CreateStreamOnHGlobal

  CoTaskMemFree

  CoUninitialize

  CoCreateInstance

  CoInitialize

  oleaut32

  OleLoadPicture

  LoadTypeLibEx

  msvcrt

  _adjust_fdiv

  __setusermatherr

  _initterm

  __wgetmainargs

  _wcmdln

  exit

  _XcptFilter

  _exit

  ??1type_info@@UAE@XZ

  _onexit

  __dllonexit

  ?terminate@@YAXXZ

  _except_handler3

  _wcsnicmp

  strcpy

  strrchr

  time

  _snwprintf

  _wfopen

  fgets

  sscanf

  fclose

  _CxxThrowException

  _itow

  strstr

  strchr

  memmove

  wcschr

  wcsncpy

  _ftime

  _ftol

  memcpy

  _stricmp

  strncpy

  _wcsupr

  wcscmp

  _wsplitpath

  strlen

  wcsncmp

  free

  malloc

  memcmp

  ??2@YAPAXI@Z

  wcsstr

  memset

  wcsrchr

  wcslen

  wcscat

  wcscpy

  ??3@YAXPAX@Z

  __CxxFrameHandler

  __p__fmode

  _controlfp

  __p__commode

  __set_app_type

  Sections

  .text

  Size: 63KB - Virtual size: 63KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 28KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 47KB - Virtual size: 47KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• App/IDM/defexclist.txt
• App/IDM/downlWithIDM.dll

  .dll regsvr32 windows x86

  e9c835d9e0fff1797698bab84f6a63cd

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  55:66:90:8d:85:50:21:0d:ee:1d:11:c9:8c:f7:0f:16:35:4b:c4:d2:e8:7b:c3:d4:f1:52:c5:c8:71:d6:e7:16

  Signer

  Actual PE Digest

  55:66:90:8d:85:50:21:0d:ee:1d:11:c9:8c:f7:0f:16:35:4b:c4:d2:e8:7b:c3:d4:f1:52:c5:c8:71:d6:e7:16

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 02:05

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  87:7a:44:8f:75:02:58:4e:98:e0:a9:99:43:ac:8c:6c:c0:56:02:72

  Signer

  Actual PE Digest

  87:7a:44:8f:75:02:58:4e:98:e0:a9:99:43:ac:8c:6c:c0:56:02:72

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 02:05

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wininet

  InternetGetCookieA

  InternetCombineUrlA

  kernel32

  FindFirstFileA

  GlobalUnlock

  GlobalLock

  GetModuleFileNameA

  GetCurrentThreadId

  InterlockedDecrement

  InterlockedIncrement

  RaiseException

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  lstrcmpiA

  FindNextFileA

  GetModuleHandleW

  IsDBCSLeadByte

  FreeLibrary

  SizeofResource

  LoadResource

  FindResourceA

  LoadLibraryExA

  GetProcessHeap

  SetEndOfFile

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  GetModuleHandleA

  FindClose

  GetProcAddress

  GetLastError

  MultiByteToWideChar

  lstrlenA

  lstrlenW

  WideCharToMultiByte

  DisableThreadLibraryCalls

  LoadLibraryA

  SetFilePointer

  CreateFileA

  ReadFile

  FlushFileBuffers

  GetConsoleMode

  GetConsoleCP

  SetStdHandle

  GetLocaleInfoA

  InitializeCriticalSectionAndSpinCount

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  WriteFile

  GetStringTypeW

  GetStringTypeA

  HeapFree

  RtlUnwind

  HeapAlloc

  VirtualProtect

  VirtualAlloc

  GetSystemInfo

  VirtualQuery

  GetCommandLineA

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  SetLastError

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  HeapCreate

  HeapDestroy

  VirtualFree

  HeapReAlloc

  CloseHandle

  SetHandleCount

  GetStdHandle

  GetFileType

  GetStartupInfoA

  Sleep

  HeapSize

  ExitProcess

  LCMapStringA

  LCMapStringW

  user32

  CharNextW

  GetKeyState

  MessageBoxW

  MessageBoxA

  CharNextA

  gdi32

  TranslateCharsetInfo

  advapi32

  RegQueryInfoKeyA

  RegSetValueExA

  RegCreateKeyExA

  RegDeleteValueA

  RegDeleteKeyA

  RegQueryValueExA

  RegCloseKey

  RegOpenKeyExA

  RegEnumKeyExA

  ole32

  CoTaskMemFree

  CoCreateInstance

  CoGetMalloc

  CoInitialize

  GetHGlobalFromStream

  CreateStreamOnHGlobal

  CoTaskMemAlloc

  CoTaskMemRealloc

  StringFromGUID2

  CoUninitialize

  oleaut32

  LoadRegTypeLi

  VarUI4FromStr

  RegisterTypeLi

  UnRegisterTypeLi

  LoadTypeLi

  SafeArrayCreate

  SafeArrayDestroy

  SafeArrayPutElement

  SysStringByteLen

  SysAllocStringByteLen

  SysAllocString

  VarBstrCat

  SysFreeString

  SysStringLen

  VariantClear

  VariantInit

  SysAllocStringLen

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 111KB - Virtual size: 111KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 26KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 26KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 10KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/downlWithIDM64.dll

  .dll regsvr32 windows x64

  9eeba2f8f5a7367a86f73cef94d7d6e1

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  78:28:c7:31:58:08:bc:87:17:71:0e:13:fa:3c:0b:24

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  18-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  14:b9:55:fb:88:8e:2d:d6:c8:31:92:d7:e7:88:28:62

  Certificate

  Issuer

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  16-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  10-12-2013 00:00

  Not After

  09-12-2023 23:59

  Subject

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

  Certificate

  Issuer

  CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  12-01-2016 00:00

  Not After

  11-01-2031 23:59

  Subject

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

  Certificate

  Issuer

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  23-12-2017 00:00

  Not After

  22-03-2029 23:59

  Subject

  CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  2e:9a:7f:9b:95:09:15:2b:81:b7:f2:5f:09:93:95:59:3c:a4:8a:2e:e2:dc:d1:dc:0e:46:b9:2b:ea:ef:0b:cb

  Signer

  Actual PE Digest

  2e:9a:7f:9b:95:09:15:2b:81:b7:f2:5f:09:93:95:59:3c:a4:8a:2e:e2:dc:d1:dc:0e:46:b9:2b:ea:ef:0b:cb

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  05-05-2019 17:29

  Valid: false

  6a:e0:f1:e8:6d:9e:a5:4f:31:52:ca:76:8f:c4:8b:87:d9:9a:e1:11

  Signer

  Actual PE Digest

  6a:e0:f1:e8:6d:9e:a5:4f:31:52:ca:76:8f:c4:8b:87:d9:9a:e1:11

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  05-05-2019 17:29

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  wininet

  InternetGetCookieA

  InternetCombineUrlA

  kernel32

  FindFirstFileA

  GlobalUnlock

  GlobalLock

  GetModuleFileNameA

  GetCurrentThreadId

  RaiseException

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  lstrcmpiA

  DisableThreadLibraryCalls

  FindNextFileA

  IsDBCSLeadByte

  FreeLibrary

  SizeofResource

  LoadResource

  FindResourceA

  LoadLibraryExA

  QueryPerformanceCounter

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  GetModuleHandleA

  FindClose

  GetProcAddress

  GetLastError

  MultiByteToWideChar

  lstrlenA

  lstrlenW

  WideCharToMultiByte

  GetTickCount

  GetCurrentProcessId

  GetModuleHandleW

  GetSystemTimeAsFileTime

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  Sleep

  user32

  MessageBoxW

  CharNextW

  CharNextA

  GetKeyState

  MessageBoxA

  gdi32

  TranslateCharsetInfo

  advapi32

  RegQueryInfoKeyA

  RegSetValueExA

  RegCreateKeyExA

  RegDeleteValueA

  RegDeleteKeyA

  RegQueryValueExA

  RegCloseKey

  RegOpenKeyExA

  RegEnumKeyExA

  ole32

  CoUninitialize

  CoCreateInstance

  CoTaskMemFree

  CoGetMalloc

  CoInitialize

  GetHGlobalFromStream

  CreateStreamOnHGlobal

  CoTaskMemAlloc

  CoTaskMemRealloc

  StringFromGUID2

  oleaut32

  LoadRegTypeLi

  VarUI4FromStr

  RegisterTypeLi

  UnRegisterTypeLi

  LoadTypeLi

  SafeArrayCreate

  SafeArrayDestroy

  SafeArrayPutElement

  SysStringByteLen

  SysAllocStringByteLen

  SysAllocString

  SysAllocStringLen

  VarBstrCat

  SysFreeString

  SysStringLen

  VariantClear

  VariantInit

  msvcr90

  __clean_type_info_names_internal

  __crt_debugger_hook

  ?_type_info_dtor_internal_method@type_info@@QEAAXXZ

  __CppXcptFilter

  _amsg_exit

  _encoded_null

  _initterm_e

  _initterm

  _malloc_crt

  ?terminate@@YAXXZ

  _decode_pointer

  _onexit

  _lock

  _encode_pointer

  __dllonexit

  _unlock

  isdigit

  _strnicmp

  ??2@YAPEAX_K@Z

  _recalloc

  _purecall

  _resetstkoflw

  __C_specific_handler

  ??3@YAXPEAX@Z

  strchr

  strpbrk

  strrchr

  strstr

  memchr

  wcschr

  wcsstr

  _mbsstr

  free

  _CxxThrowException

  memcpy_s

  memset

  __CxxFrameHandler3

  ??_V@YAXPEAX@Z

  strcmp

  strcpy

  ??_U@YAPEAX_K@Z

  strlen

  memcpy

  memmove

  _stricmp

  _memicmp

  wcsncat

  wcscat

  wcsncpy

  wcslen

  wcscpy

  wcscmp

  isalpha

  fclose

  sscanf

  memcmp

  fgets

  fopen

  sprintf

  _splitpath

  _wcsicmp

  _mbsinc

  _mbclen

  vsprintf

  _ismbcdigit

  atoi

  _mbsnbcpy_s

  malloc

  strcpy_s

  wcsncpy_s

  strcat_s

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 72KB - Virtual size: 72KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 32KB - Virtual size: 31KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 27KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 1022B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/grabber.chm

  .chm
• App/IDM/idm.chm

  .chm
• App/IDM/idmBroker.exe

  .exe windows x86

  e9bdfa0eca9121a8a6ea497367a8bd98

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  6d:0b:83:ab:e3:4e:b6:33:24:91:95:a6:22:22:0a:6c:7d:26:0b:32:19:c9:16:5b:be:3b:f2:ce:9f:c9:b8:64

  Signer

  Actual PE Digest

  6d:0b:83:ab:e3:4e:b6:33:24:91:95:a6:22:22:0a:6c:7d:26:0b:32:19:c9:16:5b:be:3b:f2:ce:9f:c9:b8:64

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 02:06

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  d0:84:ef:60:6e:a1:d9:04:89:d7:54:5d:c0:62:b8:5e:ea:2b:a8:70

  Signer

  Actual PE Digest

  d0:84:ef:60:6e:a1:d9:04:89:d7:54:5d:c0:62:b8:5e:ea:2b:a8:70

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 02:06

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  CreateEventW

  GetCurrentThreadId

  InterlockedIncrement

  InterlockedDecrement

  SetEvent

  FreeLibrary

  MultiByteToWideChar

  SizeofResource

  LoadResource

  FindResourceW

  LoadLibraryExW

  GetCommandLineW

  SetUnhandledExceptionFilter

  FindClose

  FindNextFileW

  FindFirstFileW

  GetVersionExW

  CreateThread

  GetACP

  UnmapViewOfFile

  MapViewOfFile

  CreateFileMappingW

  GetFileSize

  CreateFileW

  GetFileAttributesW

  EnterCriticalSection

  LeaveCriticalSection

  CreateFileA

  GetProcessHeap

  SetEndOfFile

  WriteConsoleW

  GetConsoleOutputCP

  GetModuleFileNameW

  Sleep

  lstrcmpiW

  GetModuleHandleW

  GetProcAddress

  GetLastError

  DeleteCriticalSection

  InitializeCriticalSection

  RaiseException

  lstrlenW

  WaitForSingleObject

  LoadLibraryW

  CloseHandle

  WriteConsoleA

  ReadFile

  FlushFileBuffers

  SetStdHandle

  GetLocaleInfoA

  GetStringTypeW

  GetStringTypeA

  LCMapStringA

  GetConsoleMode

  GetConsoleCP

  WideCharToMultiByte

  SetFilePointer

  LoadLibraryA

  InitializeCriticalSectionAndSpinCount

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  GetEnvironmentStringsW

  HeapAlloc

  HeapFree

  RtlUnwind

  GetStartupInfoW

  VirtualFree

  VirtualAlloc

  HeapReAlloc

  HeapCreate

  ExitProcess

  WriteFile

  GetStdHandle

  GetModuleFileNameA

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  IsDebuggerPresent

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  SetLastError

  HeapSize

  GetCPInfo

  GetOEMCP

  IsValidCodePage

  LCMapStringW

  SetHandleCount

  GetFileType

  GetStartupInfoA

  FreeEnvironmentStringsW

  user32

  CharUpperW

  TranslateMessage

  DispatchMessageW

  GetMessageW

  PostThreadMessageW

  GetAsyncKeyState

  CharNextW

  gdi32

  TranslateCharsetInfo

  advapi32

  RegQueryValueExW

  RegEnumKeyExW

  RegQueryInfoKeyW

  RegSetValueExW

  RegOpenKeyExW

  RegCreateKeyExW

  RegCloseKey

  RegDeleteValueW

  RegDeleteKeyW

  RegEnumKeyW

  ole32

  CoUninitialize

  CoTaskMemAlloc

  CoTaskMemRealloc

  CoRevokeClassObject

  CoRegisterClassObject

  CoTaskMemFree

  StringFromGUID2

  CoInitialize

  CoCreateInstance

  oleaut32

  LoadRegTypeLi

  SafeArrayGetLBound

  SafeArrayGetUBound

  SafeArrayGetElement

  SafeArrayDestroy

  SafeArrayAccessData

  SafeArrayUnaccessData

  SafeArrayCreate

  SafeArrayPutElement

  VarUI4FromStr

  RegisterTypeLi

  UnRegisterTypeLi

  LoadTypeLi

  SysAllocString

  SysFreeString

  SysStringLen

  SysAllocStringLen

  Sections

  .text

  Size: 94KB - Virtual size: 94KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 21KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idman.chm

  .chm
• App/IDM/idmantypeinfo.tlb
• App/IDM/idmbrbtn.dll

  .dll windows x86

  52461ccc2d694c3cee77deef19931133

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  cc:22:7b:f9:65:06:29:11:8e:bb:9c:b7:56:df:41:e4:b2:99:e2:6d:28:fd:eb:90:40:db:6c:70:22:10:ca:c5

  Signer

  Actual PE Digest

  cc:22:7b:f9:65:06:29:11:8e:bb:9c:b7:56:df:41:e4:b2:99:e2:6d:28:fd:eb:90:40:db:6c:70:22:10:ca:c5

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  25-05-2022 14:10

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  36:7c:62:77:72:2d:86:58:60:d2:67:c3:cb:43:92:dc:48:ec:ef:dc

  Signer

  Actual PE Digest

  36:7c:62:77:72:2d:86:58:60:d2:67:c3:cb:43:92:dc:48:ec:ef:dc

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  25-05-2022 14:10

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  advapi32

  RegDeleteValueW

  RegOpenKeyExW

  RegSetValueExW

  RegCreateKeyExW

  RegCloseKey

  RegQueryValueExW

  gdi32

  TranslateCharsetInfo

  CreateFontIndirectW

  DeleteObject

  GetObjectW

  SetBkMode

  SetTextColor

  GetTextExtentPoint32W

  DeleteDC

  GetTextMetricsW

  GetDeviceCaps

  GetStockObject

  StretchBlt

  CreateCompatibleDC

  CreateDIBSection

  SelectObject

  CreateCompatibleBitmap

  BitBlt

  EnumFontFamiliesExW

  msimg32

  AlphaBlend

  msvcrt

  wcsrchr

  strstr

  strspn

  sscanf

  strncmp

  fgets

  strncpy

  wcsncpy

  wcsncat

  malloc

  free

  _wfopen

  realloc

  fclose

  _iob

  strchr

  wcschr

  wcscspn

  _wcsicmp

  _snwprintf

  _i64tow

  wcsstr

  wcsncmp

  wcsspn

  iswalnum

  _wcsnicmp

  memset

  _amsg_exit

  _initterm

  _XcptFilter

  _onexit

  _lock

  __dllonexit

  _unlock

  memmove

  memcpy

  _stat

  _wstat

  _fstat

  kernel32

  GetProcAddress

  GetModuleHandleW

  GetVersion

  FindFirstFileW

  FindNextFileW

  FindClose

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  GetCurrentProcessId

  LoadLibraryW

  OpenProcess

  GetACP

  GetSystemDirectoryW

  GetVersionExW

  GetLocaleInfoW

  GetModuleFileNameW

  MulDiv

  GetTickCount

  lstrcmpiW

  GetFileSize

  CreateThread

  CloseHandle

  TerminateThread

  DuplicateHandle

  CreateFileW

  CreateMutexW

  lstrlenW

  GetCurrentProcess

  WideCharToMultiByte

  GetLastError

  MultiByteToWideChar

  GetSystemDefaultLangID

  user32

  CharUpperW

  CharLowerW

  GetWindowDC

  GetWindowThreadProcessId

  GetWindowTextLengthW

  DefWindowProcW

  PostMessageW

  GetWindowRect

  DestroyWindow

  GetDC

  SetWindowPos

  MessageBoxW

  CopyImage

  CreateWindowExW

  GetCursor

  UnregisterClassW

  CreatePopupMenu

  RealGetWindowClassW

  TrackPopupMenu

  ShowWindow

  InvalidateRgn

  OffsetRect

  SetTimer

  ClientToScreen

  DefDlgProcW

  RegisterClassW

  TrackMouseEvent

  MoveWindow

  DestroyMenu

  SetLayeredWindowAttributes

  IntersectRect

  LoadIconW

  LoadCursorW

  SetCapture

  SetCursor

  SetWindowLongW

  GetClientRect

  AppendMenuW

  DrawTextW

  KillTimer

  PtInRect

  ReleaseCapture

  LoadImageW

  ShowCursor

  InvalidateRect

  ReleaseDC

  GetWindowTextW

  GetWindowLongW

  FindWindowExW

  SendMessageW

  IsRectEmpty

  ole32

  CoInitialize

  CoUninitialize

  CoCreateInstance

  oleaut32

  SafeArrayGetLBound

  SafeArrayGetElement

  VariantInit

  SafeArrayDestroy

  SysStringByteLen

  SysFreeString

  SafeArrayCreate

  SysAllocString

  SysStringLen

  SafeArrayCreateVector

  SafeArrayPutElement

  SysAllocStringLen

  Exports

  Exports

  CreateDownlSelWtIDMButton

  CreateIDMButton

  CreateIDMButton2

  CreateIDMButton3

  GetVersionInfo

  SetIDMButtonValue3

  __acrt_iob_func

  _fstat32

  _stat32

  _wstat32

  Sections

  .text

  Size: 38KB - Virtual size: 37KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 13KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 158KB - Virtual size: 157KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmbrbtn64.dll

  .dll windows x64

  eeff9ca362ccb13bee914cdf2b55210a

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  29-03-2022 00:00

  Not After

  14-03-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  15:b5:63:a0:4d:c2:4b:aa:e0:c5:92:48:d1:a3:16:83:95:a3:5d:36:35:72:06:3f:2d:24:f3:28:1f:5a:9c:fa

  Signer

  Actual PE Digest

  15:b5:63:a0:4d:c2:4b:aa:e0:c5:92:48:d1:a3:16:83:95:a3:5d:36:35:72:06:3f:2d:24:f3:28:1f:5a:9c:fa

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  25-05-2022 14:10

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  d7:4a:6d:f0:63:7b:31:d3:2b:45:6c:75:85:60:1e:07:0f:09:af:6f

  Signer

  Actual PE Digest

  d7:4a:6d:f0:63:7b:31:d3:2b:45:6c:75:85:60:1e:07:0f:09:af:6f

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  25-05-2022 14:10

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  advapi32

  RegDeleteValueW

  RegOpenKeyExW

  RegSetValueExW

  RegCreateKeyExW

  RegCloseKey

  RegQueryValueExW

  gdi32

  TranslateCharsetInfo

  CreateFontIndirectW

  DeleteObject

  GetObjectW

  SetBkMode

  SetTextColor

  GetTextExtentPoint32W

  DeleteDC

  GetTextMetricsW

  GetDeviceCaps

  GetStockObject

  StretchBlt

  CreateCompatibleDC

  CreateDIBSection

  SelectObject

  CreateCompatibleBitmap

  BitBlt

  EnumFontFamiliesExW

  msimg32

  AlphaBlend

  msvcrt

  _wcsicmp

  wcscspn

  wcsrchr

  strchr

  _snwprintf

  strspn

  sscanf

  strncmp

  fgets

  strncpy

  wcsncpy

  wcsncat

  malloc

  free

  _wfopen

  realloc

  fclose

  _i64tow

  wcsstr

  wcsncmp

  wcschr

  wcsspn

  iswalnum

  _wcsnicmp

  _amsg_exit

  _initterm

  _XcptFilter

  _onexit

  _lock

  __dllonexit

  _unlock

  __C_specific_handler

  memmove

  memset

  strstr

  memcpy

  __iob_func

  _stat

  _wstat

  _fstat

  kernel32

  Sleep

  FindFirstFileW

  FindNextFileW

  FindClose

  GetSystemDefaultLangID

  MultiByteToWideChar

  GetLastError

  GetProcAddress

  GetModuleHandleW

  WideCharToMultiByte

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  GetCurrentProcessId

  LoadLibraryW

  OpenProcess

  GetACP

  GetSystemDirectoryW

  GetVersionExW

  GetLocaleInfoW

  GetModuleFileNameW

  MulDiv

  GetTickCount

  lstrcmpiW

  GetFileSize

  CreateThread

  CloseHandle

  TerminateThread

  DuplicateHandle

  CreateFileW

  CreateMutexW

  lstrlenW

  GetCurrentProcess

  user32

  CharUpperW

  CharLowerW

  GetWindowDC

  GetWindowLongW

  GetWindowThreadProcessId

  GetWindowTextLengthW

  DefWindowProcW

  PostMessageW

  GetWindowRect

  DestroyWindow

  GetDC

  SetWindowPos

  MessageBoxW

  CopyImage

  SetWindowLongPtrW

  CreateWindowExW

  GetCursor

  UnregisterClassW

  CreatePopupMenu

  RealGetWindowClassW

  TrackPopupMenu

  ShowWindow

  InvalidateRgn

  OffsetRect

  SetTimer

  ClientToScreen

  DefDlgProcW

  RegisterClassW

  TrackMouseEvent

  MoveWindow

  DestroyMenu

  SetLayeredWindowAttributes

  IntersectRect

  LoadIconW

  LoadCursorW

  SetCapture

  SetCursor

  GetClientRect

  AppendMenuW

  DrawTextW

  KillTimer

  PtInRect

  ReleaseCapture

  LoadImageW

  ShowCursor

  InvalidateRect

  ReleaseDC

  GetWindowTextW

  FindWindowExW

  SendMessageW

  GetWindowLongPtrW

  IsRectEmpty

  ole32

  CoInitialize

  CoUninitialize

  CoCreateInstance

  oleaut32

  SafeArrayGetLBound

  SafeArrayGetElement

  VariantInit

  SafeArrayDestroy

  SysStringByteLen

  SysFreeString

  SafeArrayCreate

  SysAllocString

  SysStringLen

  SafeArrayCreateVector

  SafeArrayPutElement

  SysAllocStringLen

  Exports

  Exports

  CreateDownlSelWtIDMButton

  CreateIDMButton

  CreateIDMButton2

  CreateIDMButton3

  GetVersionInfo

  SetIDMButtonValue3

  __acrt_iob_func

  _fstat64i32

  _stat64i32

  _wstat64i32

  Sections

  .text

  Size: 43KB - Virtual size: 42KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 18KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 158KB - Virtual size: 157KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 160B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmcchandler2.dll

  .dll windows x86

  50c293ae2379fe31404837ffcbeef2ad

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-11-2006 00:00

  Not After

  16-07-2036 23:59

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  03:4f:32:8f:3e:ff:4f:b9:8f:53:43:81:17:88:f7:8a

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2013 00:00

  Not After

  19-06-2016 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wininet

  InternetCombineUrlA

  msvcrt

  _i64toa

  isdigit

  _i64tow

  strncmp

  sprintf

  wcsncmp

  atoi

  memchr

  _itoa

  _strnicmp

  isalpha

  isalnum

  isspace

  strncpy

  strpbrk

  wcsncpy

  iswdigit

  _wcsnicmp

  strstr

  _wcsicmp

  _snprintf

  _wsplitpath

  fgets

  _wfopen

  sscanf

  fclose

  _mbsstr

  strrchr

  memset

  swscanf

  memmove

  _stricmp

  _CxxThrowException

  wcsstr

  _snwprintf

  wcsrchr

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  ??1type_info@@UAE@XZ

  _unlock

  __dllonexit

  _lock

  _onexit

  ?terminate@@YAXXZ

  _XcptFilter

  _initterm

  _amsg_exit

  _memicmp

  memcpy

  malloc

  free

  strchr

  wcschr

  _wcslwr

  _strupr

  __CxxFrameHandler

  _strlwr

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueA

  kernel32

  GetProcAddress

  GetStringTypeW

  GetModuleHandleW

  GetSystemTimeAsFileTime

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  GetCurrentThreadId

  ReadFile

  SetEnvironmentVariableA

  CreateMutexA

  CreateFileA

  GetFileSize

  GetCurrentProcess

  GetFileAttributesA

  GetWindowsDirectoryA

  FreeLibrary

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GlobalFree

  GetSystemDirectoryA

  CreateThread

  GetLastError

  GetCurrentProcessId

  GetLocaleInfoA

  WaitForSingleObject

  ReleaseMutex

  GetVersionExA

  LoadLibraryA

  FindFirstFileW

  FindNextFileW

  FindClose

  MulDiv

  WideCharToMultiByte

  MultiByteToWideChar

  lstrlenA

  CloseHandle

  GetModuleHandleA

  GetModuleFileNameW

  LoadLibraryW

  GetVersion

  user32

  LoadCursorA

  GetCursorPos

  IsWindow

  GetClassNameA

  GetParent

  GetKeyboardState

  GetKeyState

  ReleaseDC

  GetDC

  SendMessageA

  PostMessageA

  MessageBoxA

  LoadIconA

  ShowWindow

  RegisterClassA

  DefWindowProcA

  CreateWindowExA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  ScreenToClient

  PtInRect

  GetClientRect

  GetSystemMetrics

  IntersectRect

  gdi32

  GetStockObject

  GetDeviceCaps

  advapi32

  AdjustTokenPrivileges

  RegLoadKeyA

  RegRestoreKeyA

  RegQueryValueExW

  RegQueryValueExA

  RegCloseKey

  RegEnumKeyA

  RegQueryInfoKeyA

  RegOpenKeyExA

  RegSetValueExA

  RegCreateKeyExA

  OpenProcessToken

  LookupPrivilegeValueA

  GetUserNameA

  RegDeleteKeyA

  shell32

  ShellExecuteA

  ole32

  CoTaskMemFree

  CoInitialize

  CoUninitialize

  CoCreateInstance

  oleaut32

  SysAllocString

  SysFreeString

  SysStringLen

  SysAllocStringLen

  SafeArrayPutElement

  SafeArrayDestroy

  SafeArrayCreate

  VariantInit

  Exports

  Exports

  IDMMzCC_DownloadAllWithIDM

  IDMMzCC_DownloadLast10FLVwithIDM

  IDMMzCC_DownloadLastFLVwithIDM

  IDMMzCC_DownloadLinkWithIDM

  IDMMzCC_GetListenerState

  IDMMzCC_Observe

  IDMMzCC_ShouldLoad

  IDMMzCC_ShouldLoad_old1

  Sections

  .text

  Size: 244KB - Virtual size: 244KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 48KB - Virtual size: 48KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 19KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmcchandler2_64.dll

  .dll windows x64

  e58a7880d9f120a9074aef6c3b26c186

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-11-2006 00:00

  Not After

  16-07-2036 23:59

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  03:4f:32:8f:3e:ff:4f:b9:8f:53:43:81:17:88:f7:8a

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2013 00:00

  Not After

  19-06-2016 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  wininet

  InternetCombineUrlA

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueA

  kernel32

  ReleaseMutex

  WaitForSingleObject

  GetLocaleInfoA

  GetStringTypeW

  GetCurrentProcessId

  GetLastError

  CreateThread

  LoadLibraryA

  GetSystemDirectoryA

  GlobalFree

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  FreeLibrary

  FindFirstFileW

  GetFileAttributesA

  GetVersionExA

  GetCurrentProcess

  GetFileSize

  CreateFileA

  CreateMutexA

  SetEnvironmentVariableA

  ReadFile

  GetCurrentThreadId

  RtlLookupFunctionEntry

  RtlCaptureContext

  QueryPerformanceCounter

  GetTickCount

  RtlVirtualUnwind

  FindNextFileW

  FindClose

  MulDiv

  WideCharToMultiByte

  MultiByteToWideChar

  lstrlenA

  CloseHandle

  GetModuleHandleW

  GetModuleHandleA

  GetModuleFileNameW

  LoadLibraryW

  GetProcAddress

  Sleep

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetWindowsDirectoryA

  GetSystemTimeAsFileTime

  user32

  ShowWindow

  ReleaseDC

  GetDC

  SendMessageA

  PostMessageA

  IntersectRect

  GetSystemMetrics

  GetClientRect

  PtInRect

  ScreenToClient

  DispatchMessageA

  TranslateMessage

  GetMessageA

  CreateWindowExA

  DefWindowProcA

  RegisterClassA

  LoadCursorA

  LoadIconA

  MessageBoxA

  GetKeyState

  GetKeyboardState

  GetParent

  GetClassNameA

  IsWindow

  GetCursorPos

  gdi32

  GetDeviceCaps

  GetStockObject

  advapi32

  RegLoadKeyA

  RegSetValueExA

  RegQueryValueExW

  RegQueryValueExA

  RegCloseKey

  RegEnumKeyA

  RegQueryInfoKeyA

  RegOpenKeyExA

  RegDeleteKeyA

  RegRestoreKeyA

  GetUserNameA

  AdjustTokenPrivileges

  LookupPrivilegeValueA

  OpenProcessToken

  RegCreateKeyExA

  shell32

  ShellExecuteA

  ole32

  CoCreateInstance

  CoTaskMemFree

  CoUninitialize

  CoInitialize

  oleaut32

  VariantInit

  SafeArrayCreate

  SafeArrayDestroy

  SafeArrayPutElement

  SysAllocStringLen

  SysStringLen

  SysFreeString

  SysAllocString

  msvcr90

  _mbsstr

  __clean_type_info_names_internal

  ?_type_info_dtor_internal_method@type_info@@QEAAXXZ

  __crt_debugger_hook

  __CppXcptFilter

  _amsg_exit

  _encoded_null

  _initterm_e

  _initterm

  _malloc_crt

  ?terminate@@YAXXZ

  _decode_pointer

  _onexit

  _lock

  _encode_pointer

  __dllonexit

  _unlock

  __C_specific_handler

  _i64toa

  memcmp

  isdigit

  memchr

  _i64tow

  strncmp

  sprintf

  wcsncmp

  _strlwr

  _itoa

  _strnicmp

  isalpha

  isalnum

  isspace

  strncpy

  strpbrk

  wcsncpy

  _wcslwr

  strchr

  free

  malloc

  memcpy

  _memicmp

  ??3@YAXPEAX@Z

  ??2@YAPEAX_K@Z

  wcsrchr

  _snwprintf

  wcsstr

  __CxxFrameHandler3

  _CxxThrowException

  _stricmp

  memmove

  swscanf

  memset

  strrchr

  wcschr

  iswdigit

  fclose

  sscanf

  fgets

  _wfopen

  _wsplitpath

  _wcsicmp

  _snprintf

  strstr

  _wcsnicmp

  _strupr

  atoi

  Exports

  Exports

  IDMMzCC_DownloadAllWithIDM

  IDMMzCC_DownloadLast10FLVwithIDM

  IDMMzCC_DownloadLastFLVwithIDM

  IDMMzCC_DownloadLinkWithIDM

  IDMMzCC_GetListenerState

  IDMMzCC_Observe

  IDMMzCC_ShouldLoad

  IDMMzCC_ShouldLoad_old1

  Sections

  .text

  Size: 322KB - Virtual size: 322KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 91KB - Virtual size: 91KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 21KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmcchandler3.dll

  .dll windows x86

  9295cc853ac0133ac8b1a728ba2f7d6a

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-11-2006 00:00

  Not After

  16-07-2036 23:59

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  03:4f:32:8f:3e:ff:4f:b9:8f:53:43:81:17:88:f7:8a

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2013 00:00

  Not After

  19-06-2016 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wininet

  InternetCombineUrlA

  msvcrt

  _i64toa

  isdigit

  _i64tow

  strncmp

  _wtoi64

  sprintf

  wcsncmp

  atoi

  memchr

  _itoa

  _strnicmp

  isalpha

  isalnum

  isspace

  strncpy

  strpbrk

  wcsncpy

  iswdigit

  _wcsnicmp

  strstr

  _wcsicmp

  _snprintf

  _wsplitpath

  fgets

  _wfopen

  sscanf

  fclose

  _mbsstr

  strrchr

  memset

  swscanf

  memmove

  _stricmp

  _CxxThrowException

  wcsstr

  _snwprintf

  wcsrchr

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  ??1type_info@@UAE@XZ

  _unlock

  __dllonexit

  _lock

  _onexit

  ?terminate@@YAXXZ

  _XcptFilter

  _initterm

  _amsg_exit

  _memicmp

  memcpy

  malloc

  free

  strchr

  wcschr

  _wcslwr

  _strupr

  __CxxFrameHandler

  _strlwr

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueA

  kernel32

  GetProcAddress

  GetStringTypeW

  GetModuleHandleW

  GetSystemTimeAsFileTime

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  GetCurrentThreadId

  ReadFile

  SetEnvironmentVariableA

  OutputDebugStringA

  OutputDebugStringW

  CreateMutexA

  CreateFileA

  GetFileSize

  GetCurrentProcess

  GetFileAttributesA

  GetWindowsDirectoryA

  FreeLibrary

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GlobalFree

  GetSystemDirectoryA

  CreateThread

  GetLastError

  GetCurrentProcessId

  GetLocaleInfoA

  WaitForSingleObject

  ReleaseMutex

  GetVersionExA

  LoadLibraryA

  FindFirstFileW

  FindNextFileW

  FindClose

  MulDiv

  WideCharToMultiByte

  MultiByteToWideChar

  lstrlenA

  CloseHandle

  GetModuleHandleA

  GetModuleFileNameW

  LoadLibraryW

  GetVersion

  user32

  LoadCursorA

  GetCursorPos

  GetClassNameA

  GetParent

  IsWindow

  GetKeyboardState

  GetKeyState

  ReleaseDC

  GetDC

  SendMessageA

  PostMessageA

  MessageBoxA

  LoadIconA

  ShowWindow

  RegisterClassA

  DefWindowProcA

  CreateWindowExA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  ScreenToClient

  PtInRect

  GetClientRect

  GetSystemMetrics

  IntersectRect

  gdi32

  GetStockObject

  GetDeviceCaps

  advapi32

  AdjustTokenPrivileges

  RegLoadKeyA

  RegRestoreKeyA

  RegQueryValueExW

  RegQueryValueExA

  RegCloseKey

  RegEnumKeyA

  RegQueryInfoKeyA

  RegOpenKeyExA

  RegSetValueExA

  RegCreateKeyExA

  OpenProcessToken

  LookupPrivilegeValueA

  GetUserNameA

  RegDeleteKeyA

  shell32

  ShellExecuteA

  ole32

  CoTaskMemFree

  CoInitialize

  CoUninitialize

  CoCreateInstance

  oleaut32

  SysAllocString

  SysFreeString

  SysStringLen

  SysAllocStringLen

  SafeArrayPutElement

  SafeArrayDestroy

  SafeArrayCreate

  VariantInit

  Exports

  Exports

  IDMMzCC_DownloadAllWithIDM

  IDMMzCC_DownloadLast10FLVwithIDM

  IDMMzCC_DownloadLastFLVwithIDM

  IDMMzCC_DownloadLinkWithIDM

  IDMMzCC_GetListenerState

  IDMMzCC_InitCC

  IDMMzCC_Observe

  IDMMzCC_OnGetSelectedTabID

  IDMMzCC_OnME

  IDMMzCC_OnTabSelect

  IDMMzCC_ShouldLoad

  IDMMzCC_ShouldLoad2

  IDMMzCC_ShouldLoad_old1

  Sections

  .text

  Size: 244KB - Virtual size: 243KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 48KB - Virtual size: 47KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 19KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmcchandler3_64.dll

  .dll windows x64

  0730480043e9e4bf30446b2107de263b

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-11-2006 00:00

  Not After

  16-07-2036 23:59

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  03:4f:32:8f:3e:ff:4f:b9:8f:53:43:81:17:88:f7:8a

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2013 00:00

  Not After

  19-06-2016 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  wininet

  InternetCombineUrlA

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueA

  kernel32

  ReleaseMutex

  WaitForSingleObject

  GetLocaleInfoA

  GetStringTypeW

  GetCurrentProcessId

  GetLastError

  CreateThread

  LoadLibraryA

  GetSystemDirectoryA

  GlobalFree

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  FreeLibrary

  GetWindowsDirectoryA

  FindFirstFileW

  GetVersionExA

  GetCurrentProcess

  GetFileSize

  CreateFileA

  CreateMutexA

  OutputDebugStringW

  OutputDebugStringA

  SetEnvironmentVariableA

  ReadFile

  GetCurrentThreadId

  RtlLookupFunctionEntry

  RtlCaptureContext

  QueryPerformanceCounter

  GetTickCount

  RtlVirtualUnwind

  FindNextFileW

  FindClose

  MulDiv

  WideCharToMultiByte

  MultiByteToWideChar

  lstrlenA

  CloseHandle

  GetModuleHandleW

  GetModuleHandleA

  GetModuleFileNameW

  LoadLibraryW

  GetProcAddress

  Sleep

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetFileAttributesA

  GetSystemTimeAsFileTime

  user32

  ShowWindow

  ReleaseDC

  GetDC

  SendMessageA

  PostMessageA

  IntersectRect

  GetSystemMetrics

  GetClientRect

  PtInRect

  ScreenToClient

  DispatchMessageA

  TranslateMessage

  GetMessageA

  CreateWindowExA

  DefWindowProcA

  RegisterClassA

  LoadCursorA

  LoadIconA

  MessageBoxA

  GetKeyState

  GetKeyboardState

  IsWindow

  GetParent

  GetClassNameA

  GetCursorPos

  gdi32

  GetDeviceCaps

  GetStockObject

  advapi32

  RegLoadKeyA

  RegSetValueExA

  RegQueryValueExW

  RegQueryValueExA

  RegCloseKey

  RegEnumKeyA

  RegQueryInfoKeyA

  RegOpenKeyExA

  RegDeleteKeyA

  RegRestoreKeyA

  GetUserNameA

  AdjustTokenPrivileges

  LookupPrivilegeValueA

  OpenProcessToken

  RegCreateKeyExA

  shell32

  ShellExecuteA

  ole32

  CoCreateInstance

  CoTaskMemFree

  CoInitialize

  CoUninitialize

  oleaut32

  VariantInit

  SafeArrayCreate

  SafeArrayDestroy

  SafeArrayPutElement

  SysAllocStringLen

  SysStringLen

  SysFreeString

  SysAllocString

  msvcr90

  __clean_type_info_names_internal

  ?_type_info_dtor_internal_method@type_info@@QEAAXXZ

  __crt_debugger_hook

  __CppXcptFilter

  _amsg_exit

  _encoded_null

  _initterm_e

  _initterm

  _malloc_crt

  ?terminate@@YAXXZ

  _decode_pointer

  _onexit

  _lock

  _encode_pointer

  __dllonexit

  _unlock

  __C_specific_handler

  _i64toa

  memcmp

  isdigit

  atoi

  _i64tow

  strncmp

  _wtoi64

  sprintf

  wcsncmp

  memchr

  _itoa

  _strnicmp

  isalpha

  isalnum

  isspace

  strncpy

  strpbrk

  wcsncpy

  strchr

  free

  malloc

  memcpy

  _memicmp

  ??3@YAXPEAX@Z

  ??2@YAPEAX_K@Z

  wcsrchr

  _snwprintf

  wcsstr

  __CxxFrameHandler3

  _CxxThrowException

  _stricmp

  memmove

  swscanf

  memset

  strrchr

  wcschr

  _mbsstr

  _wcslwr

  fclose

  sscanf

  fgets

  _wfopen

  _wsplitpath

  _wcsicmp

  _snprintf

  strstr

  _wcsnicmp

  _strupr

  iswdigit

  _strlwr

  Exports

  Exports

  IDMMzCC_DownloadAllWithIDM

  IDMMzCC_DownloadLast10FLVwithIDM

  IDMMzCC_DownloadLastFLVwithIDM

  IDMMzCC_DownloadLinkWithIDM

  IDMMzCC_GetListenerState

  IDMMzCC_InitCC

  IDMMzCC_Observe

  IDMMzCC_OnGetSelectedTabID

  IDMMzCC_OnME

  IDMMzCC_OnTabSelect

  IDMMzCC_ShouldLoad

  IDMMzCC_ShouldLoad2

  IDMMzCC_ShouldLoad_old1

  Sections

  .text

  Size: 322KB - Virtual size: 321KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 90KB - Virtual size: 90KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 21KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmcchandler5.dll

  .dll windows x86

  9295cc853ac0133ac8b1a728ba2f7d6a

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-11-2006 00:00

  Not After

  16-07-2036 23:59

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  03:4f:32:8f:3e:ff:4f:b9:8f:53:43:81:17:88:f7:8a

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2013 00:00

  Not After

  19-06-2016 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wininet

  InternetCombineUrlA

  msvcrt

  _i64toa

  isdigit

  _i64tow

  strncmp

  _wtoi64

  sprintf

  wcsncmp

  atoi

  memchr

  _itoa

  _strnicmp

  isalpha

  isalnum

  isspace

  strncpy

  strpbrk

  wcsncpy

  iswdigit

  _wcsnicmp

  strstr

  _wcsicmp

  _snprintf

  _wsplitpath

  fgets

  _wfopen

  sscanf

  fclose

  _mbsstr

  strrchr

  memset

  swscanf

  memmove

  _stricmp

  _CxxThrowException

  wcsstr

  _snwprintf

  wcsrchr

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  ??1type_info@@UAE@XZ

  _unlock

  __dllonexit

  _lock

  _onexit

  ?terminate@@YAXXZ

  _XcptFilter

  _initterm

  _amsg_exit

  _memicmp

  memcpy

  malloc

  free

  strchr

  wcschr

  _wcslwr

  _strupr

  __CxxFrameHandler

  _strlwr

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueA

  kernel32

  GetProcAddress

  GetStringTypeW

  GetModuleHandleW

  GetSystemTimeAsFileTime

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  GetCurrentThreadId

  ReadFile

  SetEnvironmentVariableA

  OutputDebugStringA

  OutputDebugStringW

  CreateMutexA

  CreateFileA

  GetFileSize

  GetCurrentProcess

  GetFileAttributesA

  GetWindowsDirectoryA

  FreeLibrary

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GlobalFree

  GetSystemDirectoryA

  CreateThread

  GetLastError

  GetCurrentProcessId

  GetLocaleInfoA

  WaitForSingleObject

  ReleaseMutex

  GetVersionExA

  LoadLibraryA

  FindFirstFileW

  FindNextFileW

  FindClose

  MulDiv

  WideCharToMultiByte

  MultiByteToWideChar

  lstrlenA

  CloseHandle

  GetModuleHandleA

  GetModuleFileNameW

  LoadLibraryW

  GetVersion

  user32

  LoadCursorA

  GetCursorPos

  GetClassNameA

  GetParent

  IsWindow

  GetKeyboardState

  GetKeyState

  ReleaseDC

  GetDC

  SendMessageA

  PostMessageA

  MessageBoxA

  LoadIconA

  ShowWindow

  RegisterClassA

  DefWindowProcA

  CreateWindowExA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  ScreenToClient

  PtInRect

  GetClientRect

  GetSystemMetrics

  IntersectRect

  gdi32

  GetStockObject

  GetDeviceCaps

  advapi32

  AdjustTokenPrivileges

  RegLoadKeyA

  RegRestoreKeyA

  RegQueryValueExW

  RegQueryValueExA

  RegCloseKey

  RegEnumKeyA

  RegQueryInfoKeyA

  RegOpenKeyExA

  RegSetValueExA

  RegCreateKeyExA

  OpenProcessToken

  LookupPrivilegeValueA

  GetUserNameA

  RegDeleteKeyA

  shell32

  ShellExecuteA

  ole32

  CoTaskMemFree

  CoInitialize

  CoUninitialize

  CoCreateInstance

  oleaut32

  SysAllocString

  SysFreeString

  SysStringLen

  SysAllocStringLen

  SafeArrayPutElement

  SafeArrayDestroy

  SafeArrayCreate

  VariantInit

  Exports

  Exports

  IDMMzCC_DownloadAllWithIDM

  IDMMzCC_DownloadLast10FLVwithIDM

  IDMMzCC_DownloadLastFLVwithIDM

  IDMMzCC_DownloadLinkWithIDM

  IDMMzCC_GetListenerState

  IDMMzCC_InitCC

  IDMMzCC_Observe

  IDMMzCC_OnGetSelectedTabID

  IDMMzCC_OnME

  IDMMzCC_OnTabSelect

  IDMMzCC_ShouldLoad

  IDMMzCC_ShouldLoad2

  IDMMzCC_ShouldLoad_old1

  Sections

  .text

  Size: 243KB - Virtual size: 243KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 48KB - Virtual size: 47KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 19KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmcchandler5_64.dll

  .dll windows x64

  0730480043e9e4bf30446b2107de263b

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-11-2006 00:00

  Not After

  16-07-2036 23:59

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  03:4f:32:8f:3e:ff:4f:b9:8f:53:43:81:17:88:f7:8a

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2013 00:00

  Not After

  19-06-2016 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  wininet

  InternetCombineUrlA

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueA

  kernel32

  ReleaseMutex

  WaitForSingleObject

  GetLocaleInfoA

  GetStringTypeW

  GetCurrentProcessId

  GetLastError

  CreateThread

  LoadLibraryA

  GetSystemDirectoryA

  GlobalFree

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  FreeLibrary

  GetWindowsDirectoryA

  FindFirstFileW

  GetVersionExA

  GetCurrentProcess

  GetFileSize

  CreateFileA

  CreateMutexA

  OutputDebugStringW

  OutputDebugStringA

  SetEnvironmentVariableA

  ReadFile

  GetCurrentThreadId

  RtlLookupFunctionEntry

  RtlCaptureContext

  QueryPerformanceCounter

  GetTickCount

  RtlVirtualUnwind

  FindNextFileW

  FindClose

  MulDiv

  WideCharToMultiByte

  MultiByteToWideChar

  lstrlenA

  CloseHandle

  GetModuleHandleW

  GetModuleHandleA

  GetModuleFileNameW

  LoadLibraryW

  GetProcAddress

  Sleep

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetFileAttributesA

  GetSystemTimeAsFileTime

  user32

  ShowWindow

  ReleaseDC

  GetDC

  SendMessageA

  PostMessageA

  IntersectRect

  GetSystemMetrics

  GetClientRect

  PtInRect

  ScreenToClient

  DispatchMessageA

  TranslateMessage

  GetMessageA

  CreateWindowExA

  DefWindowProcA

  RegisterClassA

  LoadCursorA

  LoadIconA

  MessageBoxA

  GetKeyState

  GetKeyboardState

  IsWindow

  GetParent

  GetClassNameA

  GetCursorPos

  gdi32

  GetDeviceCaps

  GetStockObject

  advapi32

  RegLoadKeyA

  RegSetValueExA

  RegQueryValueExW

  RegQueryValueExA

  RegCloseKey

  RegEnumKeyA

  RegQueryInfoKeyA

  RegOpenKeyExA

  RegDeleteKeyA

  RegRestoreKeyA

  GetUserNameA

  AdjustTokenPrivileges

  LookupPrivilegeValueA

  OpenProcessToken

  RegCreateKeyExA

  shell32

  ShellExecuteA

  ole32

  CoCreateInstance

  CoTaskMemFree

  CoInitialize

  CoUninitialize

  oleaut32

  VariantInit

  SafeArrayCreate

  SafeArrayDestroy

  SafeArrayPutElement

  SysAllocStringLen

  SysStringLen

  SysFreeString

  SysAllocString

  msvcr90

  __clean_type_info_names_internal

  ?_type_info_dtor_internal_method@type_info@@QEAAXXZ

  __crt_debugger_hook

  __CppXcptFilter

  _amsg_exit

  _encoded_null

  _initterm_e

  _initterm

  _malloc_crt

  ?terminate@@YAXXZ

  _decode_pointer

  _onexit

  _lock

  _encode_pointer

  __dllonexit

  _unlock

  __C_specific_handler

  _i64toa

  memcmp

  isdigit

  atoi

  _i64tow

  strncmp

  _wtoi64

  sprintf

  wcsncmp

  memchr

  _itoa

  _strnicmp

  isalpha

  isalnum

  isspace

  strncpy

  strpbrk

  wcsncpy

  strchr

  free

  malloc

  memcpy

  _memicmp

  ??3@YAXPEAX@Z

  ??2@YAPEAX_K@Z

  wcsrchr

  _snwprintf

  wcsstr

  __CxxFrameHandler3

  _CxxThrowException

  _stricmp

  memmove

  swscanf

  memset

  strrchr

  wcschr

  _mbsstr

  _wcslwr

  fclose

  sscanf

  fgets

  _wfopen

  _wsplitpath

  _wcsicmp

  _snprintf

  strstr

  _wcsnicmp

  _strupr

  iswdigit

  _strlwr

  Exports

  Exports

  IDMMzCC_DownloadAllWithIDM

  IDMMzCC_DownloadLast10FLVwithIDM

  IDMMzCC_DownloadLastFLVwithIDM

  IDMMzCC_DownloadLinkWithIDM

  IDMMzCC_GetListenerState

  IDMMzCC_InitCC

  IDMMzCC_Observe

  IDMMzCC_OnGetSelectedTabID

  IDMMzCC_OnME

  IDMMzCC_OnTabSelect

  IDMMzCC_ShouldLoad

  IDMMzCC_ShouldLoad2

  IDMMzCC_ShouldLoad_old1

  Sections

  .text

  Size: 322KB - Virtual size: 321KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 90KB - Virtual size: 90KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 21KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmcchandler7.dll

  .dll windows x86

  1d300db3e2591ff8fc38f7079d57a478

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  a9:3c:9a:11:47:2a:6b:83:5a:e6:7c:90:82:83:81:ea:35:e0:9a:03:e7:56:4b:c5:cf:d7:a7:34:93:e4:4c:fd

  Signer

  Actual PE Digest

  a9:3c:9a:11:47:2a:6b:83:5a:e6:7c:90:82:83:81:ea:35:e0:9a:03:e7:56:4b:c5:cf:d7:a7:34:93:e4:4c:fd

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  12-12-2020 16:30

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  62:f2:23:74:c8:b2:22:34:39:f8:76:73:4e:a9:db:57:f4:7c:61:25

  Signer

  Actual PE Digest

  62:f2:23:74:c8:b2:22:34:39:f8:76:73:4e:a9:db:57:f4:7c:61:25

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  12-12-2020 16:30

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wininet

  InternetCombineUrlA

  msvcrt

  wcscspn

  iswspace

  _i64toa

  _i64tow

  _wtoi64

  strncmp

  sprintf

  isdigit

  memchr

  _itoa

  atoi

  _strnicmp

  isalpha

  isalnum

  isspace

  strncpy

  strpbrk

  wcsncpy

  iswdigit

  wcsncmp

  _wcsicmp

  _snprintf

  _wsplitpath

  _wfopen

  fgets

  sscanf

  fclose

  _wcsnicmp

  wcstoul

  _mbsstr

  wcspbrk

  strstr

  strrchr

  memset

  swscanf

  memmove

  _stricmp

  _CxxThrowException

  wcsstr

  _snwprintf

  ??1type_info@@UAE@XZ

  _unlock

  __dllonexit

  _lock

  _onexit

  ?terminate@@YAXXZ

  _XcptFilter

  _initterm

  _amsg_exit

  wcsrchr

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  _memicmp

  memcpy

  malloc

  free

  strchr

  wcschr

  _wcslwr

  _strupr

  __CxxFrameHandler

  _strlwr

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueA

  kernel32

  GetProcAddress

  GetStringTypeW

  LoadLibraryW

  GetSystemTimeAsFileTime

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  GetFileAttributesW

  CreateFileW

  CreateFileMappingA

  MapViewOfFile

  UnmapViewOfFile

  CreateEventA

  ResetEvent

  GetCurrentThreadId

  ReadFile

  SetEnvironmentVariableA

  OutputDebugStringA

  OutputDebugStringW

  CreateMutexA

  CreateFileA

  GetFileSize

  GetCurrentProcess

  GetFileAttributesA

  GetWindowsDirectoryA

  FreeLibrary

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GlobalFree

  GetSystemDirectoryA

  CreateThread

  GetLastError

  GetCurrentProcessId

  GetLocaleInfoA

  WaitForSingleObject

  ReleaseMutex

  LoadLibraryA

  GetVersionExA

  FindFirstFileW

  FindNextFileW

  FindClose

  MulDiv

  lstrlenA

  MultiByteToWideChar

  WideCharToMultiByte

  CloseHandle

  GetModuleHandleA

  GetModuleFileNameW

  GetModuleHandleW

  GetVersion

  user32

  LoadCursorA

  ShowWindow

  ReleaseDC

  GetDC

  IntersectRect

  GetCursorPos

  GetClassNameA

  GetParent

  IsWindow

  GetKeyboardState

  GetKeyState

  MessageBoxW

  MessageBoxA

  LoadIconA

  PostMessageA

  RegisterClassA

  DefWindowProcA

  CreateWindowExA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  ScreenToClient

  PtInRect

  SendMessageA

  GetClientRect

  GetSystemMetrics

  gdi32

  GetStockObject

  TranslateCharsetInfo

  GetDeviceCaps

  advapi32

  LookupPrivilegeValueA

  RegDeleteKeyA

  RegLoadKeyA

  RegRestoreKeyA

  RegQueryValueExW

  RegQueryValueExA

  RegCloseKey

  RegEnumKeyA

  RegQueryInfoKeyA

  RegOpenKeyExW

  RegNotifyChangeKeyValue

  RegSetValueExA

  RegCreateKeyExA

  OpenProcessToken

  GetUserNameA

  AdjustTokenPrivileges

  RegOpenKeyExA

  shell32

  ShellExecuteA

  ole32

  CoTaskMemFree

  CoInitialize

  CoUninitialize

  CoCreateInstance

  oleaut32

  SysAllocString

  SysFreeString

  SysStringLen

  SysAllocStringLen

  SafeArrayPutElement

  SafeArrayDestroy

  SafeArrayCreate

  VariantInit

  Exports

  Exports

  IDMMzCC_DownloadAllWithIDM

  IDMMzCC_DownloadLast10FLVwithIDM

  IDMMzCC_DownloadLastFLVwithIDM

  IDMMzCC_DownloadLinkWithIDM

  IDMMzCC_GetListenerState

  IDMMzCC_InitCC

  IDMMzCC_Observe

  IDMMzCC_OnGetSelectedTabID

  IDMMzCC_OnME

  IDMMzCC_OnTabSelect

  IDMMzCC_OnUnload

  IDMMzCC_ShouldLoad

  IDMMzCC_ShouldLoad2

  IDMMzCC_ShouldLoad_old1

  Sections

  .text

  Size: 297KB - Virtual size: 297KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 55KB - Virtual size: 54KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 22KB - Virtual size: 22KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmcchandler7_64.dll

  .dll windows x64

  7ac0eda9d6d9ff6c6cff5e90f8c35ca2

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  81:89:0b:5d:e2:b6:64:67:ea:97:a5:5a:b2:6b:c9:0f:e5:0c:96:46:5a:4b:36:74:20:c9:db:1c:3a:5c:c1:43

  Signer

  Actual PE Digest

  81:89:0b:5d:e2:b6:64:67:ea:97:a5:5a:b2:6b:c9:0f:e5:0c:96:46:5a:4b:36:74:20:c9:db:1c:3a:5c:c1:43

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  12-12-2020 16:30

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  aa:02:73:05:63:6c:5e:62:5d:8f:2f:79:6d:40:ff:19:ee:5d:09:0c

  Signer

  Actual PE Digest

  aa:02:73:05:63:6c:5e:62:5d:8f:2f:79:6d:40:ff:19:ee:5d:09:0c

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  12-12-2020 16:30

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  wininet

  InternetCombineUrlA

  version

  GetFileVersionInfoSizeW

  VerQueryValueA

  GetFileVersionInfoW

  kernel32

  GetLocaleInfoA

  GetStringTypeW

  GetCurrentProcessId

  GetLastError

  CreateThread

  LoadLibraryA

  GetSystemDirectoryA

  GlobalFree

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  FreeLibrary

  GetWindowsDirectoryA

  GetFileAttributesA

  GetCurrentProcess

  GetFileSize

  CreateFileA

  CreateMutexA

  OutputDebugStringW

  OutputDebugStringA

  SetEnvironmentVariableA

  ReadFile

  GetCurrentThreadId

  ResetEvent

  CreateEventA

  UnmapViewOfFile

  MapViewOfFile

  CreateFileMappingA

  WaitForSingleObject

  FindNextFileW

  WriteConsoleA

  FlushFileBuffers

  SetStdHandle

  HeapReAlloc

  GetConsoleMode

  GetConsoleCP

  SetFilePointer

  GetStringTypeA

  InitializeCriticalSectionAndSpinCount

  GetSystemTimeAsFileTime

  GetTickCount

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  LCMapStringW

  LCMapStringA

  ReleaseMutex

  GetVersionExA

  CreateFileW

  FindFirstFileW

  FindClose

  MulDiv

  lstrlenA

  MultiByteToWideChar

  WideCharToMultiByte

  CloseHandle

  GetModuleHandleW

  GetModuleHandleA

  GetModuleFileNameW

  LoadLibraryW

  GetProcAddress

  GetConsoleOutputCP

  WriteConsoleW

  SetEndOfFile

  GetProcessHeap

  GetFileAttributesW

  DeleteCriticalSection

  GetStartupInfoA

  GetFileType

  SetHandleCount

  LeaveCriticalSection

  EnterCriticalSection

  HeapSize

  RtlCaptureContext

  RtlVirtualUnwind

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  TerminateProcess

  FlsAlloc

  SetLastError

  HeapFree

  HeapAlloc

  RtlLookupFunctionEntry

  RtlUnwindEx

  RaiseException

  RtlPcToFileHeader

  FlsSetValue

  GetCommandLineA

  HeapSetInformation

  HeapCreate

  HeapDestroy

  Sleep

  ExitProcess

  WriteFile

  GetStdHandle

  GetModuleFileNameA

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  EncodePointer

  DecodePointer

  FlsGetValue

  FlsFree

  user32

  GetDC

  IntersectRect

  ReleaseDC

  ShowWindow

  PostMessageA

  GetCursorPos

  GetClassNameA

  GetParent

  IsWindow

  GetKeyboardState

  GetKeyState

  MessageBoxW

  MessageBoxA

  LoadIconA

  LoadCursorA

  RegisterClassA

  DefWindowProcA

  CreateWindowExA

  GetMessageA

  TranslateMessage

  DispatchMessageA

  ScreenToClient

  PtInRect

  SendMessageA

  GetClientRect

  GetSystemMetrics

  gdi32

  TranslateCharsetInfo

  GetDeviceCaps

  GetStockObject

  advapi32

  OpenProcessToken

  RegOpenKeyExW

  RegNotifyChangeKeyValue

  RegSetValueExA

  RegCreateKeyExA

  LookupPrivilegeValueA

  AdjustTokenPrivileges

  GetUserNameA

  RegRestoreKeyA

  RegLoadKeyA

  RegDeleteKeyA

  RegOpenKeyExA

  RegQueryInfoKeyA

  RegEnumKeyA

  RegCloseKey

  RegQueryValueExA

  RegQueryValueExW

  shell32

  ShellExecuteA

  ole32

  CoCreateInstance

  CoTaskMemFree

  CoInitialize

  CoUninitialize

  oleaut32

  VariantInit

  SafeArrayCreate

  SafeArrayDestroy

  SafeArrayPutElement

  SysAllocStringLen

  SysStringLen

  SysFreeString

  SysAllocString

  Exports

  Exports

  IDMMzCC_DownloadAllWithIDM

  IDMMzCC_DownloadLast10FLVwithIDM

  IDMMzCC_DownloadLastFLVwithIDM

  IDMMzCC_DownloadLinkWithIDM

  IDMMzCC_GetListenerState

  IDMMzCC_InitCC

  IDMMzCC_Observe

  IDMMzCC_OnGetSelectedTabID

  IDMMzCC_OnME

  IDMMzCC_OnTabSelect

  IDMMzCC_OnUnload

  IDMMzCC_ShouldLoad

  IDMMzCC_ShouldLoad2

  IDMMzCC_ShouldLoad_old1

  Sections

  .text

  Size: 532KB - Virtual size: 531KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 129KB - Virtual size: 129KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 9KB - Virtual size: 24KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 44KB - Virtual size: 44KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmfc.dat
• App/IDM/idmfsa.dll

  .dll regsvr32 windows x86

  6dd8e34e93a2e5e32c852e32b49f970d

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  ac:7c:d2:61:5c:3c:d3:a8:3f:8b:b4:be:56:ca:7c:d0:00:79:4f:de:c6:10:fc:4a:0c:7a:bc:1c:9d:1c:7a:b7

  Signer

  Actual PE Digest

  ac:7c:d2:61:5c:3c:d3:a8:3f:8b:b4:be:56:ca:7c:d0:00:79:4f:de:c6:10:fc:4a:0c:7a:bc:1c:9d:1c:7a:b7

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  15-11-2019 12:56

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  cb:2b:0a:4e:af:2a:dc:33:97:cb:67:9d:8c:ea:2c:76:3e:77:d6:4b

  Signer

  Actual PE Digest

  cb:2b:0a:4e:af:2a:dc:33:97:cb:67:9d:8c:ea:2c:76:3e:77:d6:4b

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  15-11-2019 12:56

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetSystemTime

  FlushFileBuffers

  UnmapViewOfFile

  MapViewOfFile

  CreateFileMappingA

  GetFileSize

  FreeLibrary

  CreateFileW

  SetFileAttributesW

  GetProcAddress

  LoadLibraryA

  GetModuleHandleA

  DisableThreadLibraryCalls

  InitializeCriticalSection

  DeleteCriticalSection

  LeaveCriticalSection

  InterlockedIncrement

  SystemTimeToFileTime

  InterlockedDecrement

  lstrlenW

  MultiByteToWideChar

  lstrlenA

  GetShortPathNameA

  SizeofResource

  LoadResource

  FindResourceA

  LoadLibraryExA

  lstrcmpiA

  lstrcpynA

  IsDBCSLeadByte

  HeapDestroy

  lstrcpyA

  lstrcatA

  SetFileTime

  WideCharToMultiByte

  GetFileAttributesW

  CopyFileW

  DeleteFileW

  CreateDirectoryW

  MoveFileW

  GetModuleFileNameA

  GetVersionExA

  GetCurrentProcess

  GetLastError

  LocalAlloc

  LocalFree

  EnterCriticalSection

  CloseHandle

  GetStringTypeW

  GetStringTypeA

  GetOEMCP

  GetACP

  GetCPInfo

  WriteFile

  GetEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  FreeEnvironmentStringsA

  GetStartupInfoA

  GetFileType

  GetStdHandle

  SetHandleCount

  TlsGetValue

  SetLastError

  TlsFree

  TlsAlloc

  TlsSetValue

  GetCurrentThreadId

  TerminateProcess

  RtlUnwind

  HeapFree

  HeapAlloc

  HeapReAlloc

  GetCommandLineA

  GetVersion

  LCMapStringA

  LCMapStringW

  ExitProcess

  GetEnvironmentVariableA

  HeapCreate

  VirtualFree

  VirtualAlloc

  user32

  CharNextA

  advapi32

  RegQueryInfoKeyA

  RegEnumKeyExA

  RegDeleteValueA

  RegDeleteKeyA

  RegCreateKeyExA

  RegSetValueExA

  OpenProcessToken

  GetTokenInformation

  GetSidSubAuthorityCount

  GetSidSubAuthority

  RegOpenKeyExA

  RegQueryValueExA

  RegCloseKey

  RegEnumValueA

  ole32

  CoTaskMemRealloc

  CoInitialize

  CoUninitialize

  CoCreateInstance

  CoTaskMemFree

  CoTaskMemAlloc

  oleaut32

  RegisterTypeLi

  BSTR_UserFree

  BSTR_UserMarshal

  BSTR_UserSize

  SysFreeString

  VarUI4FromStr

  SysAllocString

  LoadTypeLi

  BSTR_UserUnmarshal

  LoadRegTypeLi

  SysStringLen

  rpcrt4

  NdrStubForwardingFunction

  NdrStubCall2

  IUnknown_Release_Proxy

  IUnknown_AddRef_Proxy

  IUnknown_QueryInterface_Proxy

  NdrOleFree

  NdrOleAllocate

  NdrDllGetClassObject

  NdrDllCanUnloadNow

  NdrCStdStubBuffer2_Release

  NdrDllRegisterProxy

  NdrDllUnregisterProxy

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 32KB - Virtual size: 30KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .orpc

  Size: 4KB - Virtual size: 152B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 8KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 16KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 8KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 8KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmftype.dll

  .dll windows x86

  37434fe31c525527aa4fd9f7c992e050

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

  Certificate

  Issuer

  OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2009 00:00

  Not After

  20-05-2019 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  61:0c:12:06:00:00:00:00:00:1b

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  23-05-2006 17:01

  Not After

  23-05-2016 17:11

  Subject

  OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  46:60:fc:32:bd:52:1d:77:f2:11:c1:33:6a:a9:8b:9e

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

  Not Before

  02-06-2010 00:00

  Not After

  01-06-2013 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Secure Application Development,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  7a:a2:2b:0f:0b:ed:c5:8d:27:91:b2:04:76:91:cd:38:08:fb:85:e2

  Signer

  Actual PE Digest

  7a:a2:2b:0f:0b:ed:c5:8d:27:91:b2:04:76:91:cd:38:08:fb:85:e2

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Secure Application Development,O=Tonec Inc.,L=New York,ST=New York,C=US

  21-03-2013 15:05

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  toupper

  isspace

  ctime

  gmtime

  asctime

  _strnicmp

  strncmp

  memcpy

  ?terminate@@YAXXZ

  ??1type_info@@UAE@XZ

  isupper

  _initterm

  _amsg_exit

  _adjust_fdiv

  islower

  realloc

  _snprintf

  strcspn

  _stricmp

  tolower

  malloc

  strncpy

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  fclose

  fseek

  fread

  fopen

  free

  strchr

  _vsnprintf

  _XcptFilter

  __CxxFrameHandler

  _CxxThrowException

  kernel32

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  MultiByteToWideChar

  WideCharToMultiByte

  InitializeCriticalSection

  GetModuleFileNameA

  LeaveCriticalSection

  EnterCriticalSection

  GetVersion

  GetSystemTimeAsFileTime

  advapi32

  RegQueryValueExA

  RegOpenKeyExA

  RegCloseKey

  Exports

  Exports

  IDMExtensionForMimeType

  IDMFileType

  Sections

  .text

  Size: 23KB - Virtual size: 23KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmindex.dll

  .dll windows x86

  1ed5468e84d27b94a9ff70787d506d89

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-11-2006 00:00

  Not After

  16-07-2036 23:59

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  03:4f:32:8f:3e:ff:4f:b9:8f:53:43:81:17:88:f7:8a

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2013 00:00

  Not After

  19-06-2016 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  _amsg_exit

  _initterm

  _XcptFilter

  realloc

  malloc

  memmove

  _beginthreadex

  strncmp

  memset

  memcpy

  _endthreadex

  _msize

  free

  _localtime64_s

  kernel32

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  InterlockedExchange

  RtlUnwind

  GetCurrentThreadId

  TryEnterCriticalSection

  InitializeCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  DeleteCriticalSection

  AreFileApisANSI

  CloseHandle

  CreateFileA

  CreateFileW

  CreateFileMappingA

  CreateFileMappingW

  CreateMutexW

  DeleteFileA

  DeleteFileW

  FlushFileBuffers

  FormatMessageA

  FormatMessageW

  FreeLibrary

  GetCurrentProcessId

  GetDiskFreeSpaceA

  GetDiskFreeSpaceW

  GetFileAttributesA

  GetFileAttributesW

  GetFileAttributesExW

  GetFileSize

  GetFullPathNameA

  GetFullPathNameW

  GetLastError

  GetSystemTime

  GetSystemTimeAsFileTime

  GetTempPathA

  GetTempPathW

  GetTickCount

  GetVersionExA

  GetVersionExW

  HeapCreate

  HeapDestroy

  HeapReAlloc

  HeapSize

  HeapValidate

  HeapCompact

  LoadLibraryA

  LoadLibraryW

  LocalFree

  LockFile

  LockFileEx

  MapViewOfFile

  MultiByteToWideChar

  QueryPerformanceCounter

  ReadFile

  SetEndOfFile

  SetFilePointer

  Sleep

  SystemTimeToFileTime

  UnlockFile

  UnlockFileEx

  HeapAlloc

  HeapFree

  GetProcessHeap

  GetProcAddress

  GetSystemInfo

  GetVersion

  FlushViewOfFile

  InterlockedCompareExchange

  OutputDebugStringW

  OutputDebugStringA

  WaitForSingleObjectEx

  WaitForSingleObject

  WriteFile

  WideCharToMultiByte

  UnmapViewOfFile

  Exports

  Exports

  sqlite3_aggregate_context

  sqlite3_aggregate_count

  sqlite3_auto_extension

  sqlite3_backup_finish

  sqlite3_backup_init

  sqlite3_backup_pagecount

  sqlite3_backup_remaining

  sqlite3_backup_step

  sqlite3_bind_blob

  sqlite3_bind_double

  sqlite3_bind_int

  sqlite3_bind_int64

  sqlite3_bind_null

  sqlite3_bind_parameter_count

  sqlite3_bind_parameter_index

  sqlite3_bind_parameter_name

  sqlite3_bind_text

  sqlite3_bind_text16

  sqlite3_bind_value

  sqlite3_bind_zeroblob

  sqlite3_blob_bytes

  sqlite3_blob_close

  sqlite3_blob_open

  sqlite3_blob_read

  sqlite3_blob_reopen

  sqlite3_blob_write

  sqlite3_busy_handler

  sqlite3_busy_timeout

  sqlite3_changes

  sqlite3_clear_bindings

  sqlite3_close

  sqlite3_close_v2

  sqlite3_collation_needed

  sqlite3_collation_needed16

  sqlite3_column_blob

  sqlite3_column_bytes

  sqlite3_column_bytes16

  sqlite3_column_count

  sqlite3_column_decltype

  sqlite3_column_decltype16

  sqlite3_column_double

  sqlite3_column_int

  sqlite3_column_int64

  sqlite3_column_name

  sqlite3_column_name16

  sqlite3_column_text

  sqlite3_column_text16

  sqlite3_column_type

  sqlite3_column_value

  sqlite3_commit_hook

  sqlite3_compileoption_get

  sqlite3_compileoption_used

  sqlite3_complete

  sqlite3_complete16

  sqlite3_config

  sqlite3_context_db_handle

  sqlite3_create_collation

  sqlite3_create_collation16

  sqlite3_create_collation_v2

  sqlite3_create_function

  sqlite3_create_function16

  sqlite3_create_function_v2

  sqlite3_create_module

  sqlite3_create_module_v2

  sqlite3_data_count

  sqlite3_db_config

  sqlite3_db_filename

  sqlite3_db_handle

  sqlite3_db_mutex

  sqlite3_db_readonly

  sqlite3_db_release_memory

  sqlite3_db_status

  sqlite3_declare_vtab

  sqlite3_enable_load_extension

  sqlite3_enable_shared_cache

  sqlite3_errcode

  sqlite3_errmsg

  sqlite3_errmsg16

  sqlite3_errstr

  sqlite3_exec

  sqlite3_expired

  sqlite3_extended_errcode

  sqlite3_extended_result_codes

  sqlite3_file_control

  sqlite3_finalize

  sqlite3_free

  sqlite3_free_table

  sqlite3_get_autocommit

  sqlite3_get_auxdata

  sqlite3_get_table

  sqlite3_global_recover

  sqlite3_initialize

  sqlite3_interrupt

  sqlite3_last_insert_rowid

  sqlite3_libversion

  sqlite3_libversion_number

  sqlite3_limit

  sqlite3_load_extension

  sqlite3_log

  sqlite3_malloc

  sqlite3_memory_alarm

  sqlite3_memory_highwater

  sqlite3_memory_used

  sqlite3_mprintf

  sqlite3_mutex_alloc

  sqlite3_mutex_enter

  sqlite3_mutex_free

  sqlite3_mutex_leave

  sqlite3_mutex_try

  sqlite3_next_stmt

  sqlite3_open

  sqlite3_open16

  sqlite3_open_v2

  sqlite3_os_end

  sqlite3_os_init

  sqlite3_overload_function

  sqlite3_prepare

  sqlite3_prepare16

  sqlite3_prepare16_v2

  sqlite3_prepare_v2

  sqlite3_profile

  sqlite3_progress_handler

  sqlite3_randomness

  sqlite3_realloc

  sqlite3_release_memory

  sqlite3_reset

  sqlite3_reset_auto_extension

  sqlite3_result_blob

  sqlite3_result_double

  sqlite3_result_error

  sqlite3_result_error16

  sqlite3_result_error_code

  sqlite3_result_error_nomem

  sqlite3_result_error_toobig

  sqlite3_result_int

  sqlite3_result_int64

  sqlite3_result_null

  sqlite3_result_text

  sqlite3_result_text16

  sqlite3_result_text16be

  sqlite3_result_text16le

  sqlite3_result_value

  sqlite3_result_zeroblob

  sqlite3_rollback_hook

  sqlite3_set_authorizer

  sqlite3_set_auxdata

  sqlite3_shutdown

  sqlite3_sleep

  sqlite3_snprintf

  sqlite3_soft_heap_limit

  sqlite3_soft_heap_limit64

  sqlite3_sourceid

  sqlite3_sql

  sqlite3_status

  sqlite3_step

  sqlite3_stmt_busy

  sqlite3_stmt_readonly

  sqlite3_stmt_status

  sqlite3_strglob

  sqlite3_stricmp

  sqlite3_strnicmp

  sqlite3_test_control

  sqlite3_thread_cleanup

  sqlite3_threadsafe

  sqlite3_total_changes

  sqlite3_trace

  sqlite3_transfer_bindings

  sqlite3_update_hook

  sqlite3_uri_boolean

  sqlite3_uri_int64

  sqlite3_uri_parameter

  sqlite3_user_data

  sqlite3_value_blob

  sqlite3_value_bytes

  sqlite3_value_bytes16

  sqlite3_value_double

  sqlite3_value_int

  sqlite3_value_int64

  sqlite3_value_numeric_type

  sqlite3_value_text

  sqlite3_value_text16

  sqlite3_value_text16be

  sqlite3_value_text16le

  sqlite3_value_type

  sqlite3_vfs_find

  sqlite3_vfs_register

  sqlite3_vfs_unregister

  sqlite3_vmprintf

  sqlite3_vsnprintf

  sqlite3_vtab_config

  sqlite3_vtab_on_conflict

  sqlite3_wal_autocheckpoint

  sqlite3_wal_checkpoint

  sqlite3_wal_checkpoint_v2

  sqlite3_wal_hook

  sqlite3_win32_mbcs_to_utf8

  sqlite3_win32_set_directory

  sqlite3_win32_sleep

  sqlite3_win32_utf8_to_mbcs

  sqlite3_win32_write_debug

  Sections

  .text

  Size: 358KB - Virtual size: 357KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 44KB - Virtual size: 43KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmmkb.dll

  .dll windows x86

  ecb2a17bae899c60da67ae714f804805

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  ff:5e:5c:0d:cc:be:43:8e:21:d5:de:89:5e:55:3a:b4:f0:be:49:7a:f1:22:ab:9d:f4:ac:49:91:d3:e8:e8:68

  Signer

  Actual PE Digest

  ff:5e:5c:0d:cc:be:43:8e:21:d5:de:89:5e:55:3a:b4:f0:be:49:7a:f1:22:ab:9d:f4:ac:49:91:d3:e8:e8:68

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  13-03-2020 22:01

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  de:a6:12:2b:ce:e7:97:fa:99:23:b7:63:fe:31:cb:8a:80:8f:ce:35

  Signer

  Actual PE Digest

  de:a6:12:2b:ce:e7:97:fa:99:23:b7:63:fe:31:cb:8a:80:8f:ce:35

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  13-03-2020 22:01

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  _amsg_exit

  _initterm

  _XcptFilter

  free

  memset

  _wsplitpath

  _wcsicmp

  _snprintf

  strncpy

  atoi

  _vswprintf

  _time64

  wcsrchr

  strchr

  wcschr

  malloc

  __CxxFrameHandler

  kernel32

  LocalAlloc

  RaiseException

  GetLastError

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  DisableThreadLibraryCalls

  GetModuleFileNameW

  GetVersionExA

  GetModuleHandleA

  LoadLibraryA

  FreeLibrary

  GetSystemDirectoryW

  LoadLibraryW

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GlobalFree

  GetProcAddress

  user32

  UnhookWindowsHookEx

  SetWindowsHookExA

  CallNextHookEx

  GetKeyState

  advapi32

  RegOpenKeyExA

  RegCloseKey

  RegQueryValueExA

  RegOpenKeyExW

  RegQueryValueExW

  ole32

  CoCreateInstance

  CoUninitialize

  CoInitialize

  oleaut32

  SysFreeString

  Exports

  Exports

  GetAltState

  GetCtrlState

  InstallHook

  InstallMouseHook

  NeedForce

  NeedPrevent

  RemoveHook

  RemoveMouseHook

  Sections

  .text

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmmzcc.xpi

  .zip .ps1
• App/IDM/idmmzcc2.dll

  .dll windows x86

  c64e342b89227a7d4cd3463ca8e1ebee

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-11-2006 00:00

  Not After

  16-07-2036 23:59

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  03:4f:32:8f:3e:ff:4f:b9:8f:53:43:81:17:88:f7:8a

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2013 00:00

  Not After

  19-06-2016 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  _initterm

  _amsg_exit

  _XcptFilter

  free

  malloc

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  _wcsicmp

  _snwprintf

  _snprintf

  strncpy

  atoi

  wcsrchr

  strchr

  __CxxFrameHandler

  version

  GetFileVersionInfoW

  VerQueryValueA

  GetFileVersionInfoSizeW

  kernel32

  LoadLibraryW

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  GetModuleHandleA

  GetModuleFileNameW

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GlobalFree

  GetProcAddress

  user32

  MessageBoxA

  advapi32

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExA

  Exports

  Exports

  GetListenerState

  InitCC

  NSModule

  OnStartup

  Sections

  .text

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmmzcc2.xpi

  .zip
• App/IDM/idmmzcc2_64.dll

  .dll windows x64

  a2c1e36c591eb85bc753627370e54536

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-11-2006 00:00

  Not After

  16-07-2036 23:59

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  03:4f:32:8f:3e:ff:4f:b9:8f:53:43:81:17:88:f7:8a

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2013 00:00

  Not After

  19-06-2016 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueA

  kernel32

  GlobalFree

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  GetProcAddress

  GetTickCount

  GetModuleFileNameW

  GetModuleHandleA

  QueryPerformanceCounter

  DisableThreadLibraryCalls

  GetCurrentThreadId

  GetCurrentProcessId

  LoadLibraryW

  GetSystemTimeAsFileTime

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  Sleep

  RtlCaptureContext

  user32

  MessageBoxA

  advapi32

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExA

  msvcr90

  ??3@YAXPEAX@Z

  _encode_pointer

  _malloc_crt

  _initterm

  _initterm_e

  free

  _encoded_null

  _decode_pointer

  _amsg_exit

  __C_specific_handler

  __CppXcptFilter

  __crt_debugger_hook

  ?terminate@@YAXXZ

  ?_type_info_dtor_internal_method@type_info@@QEAAXXZ

  __clean_type_info_names_internal

  _unlock

  __dllonexit

  _lock

  _onexit

  _wcsicmp

  _snwprintf

  _snprintf

  strncpy

  atoi

  __CxxFrameHandler3

  wcsrchr

  strchr

  ??2@YAPEAX_K@Z

  Exports

  Exports

  GetListenerState

  InitCC

  NSModule

  OnStartup

  Sections

  .text

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 1024B - Virtual size: 756B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 334B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmmzcc3.dll

  .dll windows x86

  c64e342b89227a7d4cd3463ca8e1ebee

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-11-2006 00:00

  Not After

  16-07-2036 23:59

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  03:4f:32:8f:3e:ff:4f:b9:8f:53:43:81:17:88:f7:8a

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2013 00:00

  Not After

  19-06-2016 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  _initterm

  _amsg_exit

  _XcptFilter

  free

  malloc

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  _wcsicmp

  _snwprintf

  _snprintf

  strncpy

  atoi

  wcsrchr

  strchr

  __CxxFrameHandler

  version

  GetFileVersionInfoW

  VerQueryValueA

  GetFileVersionInfoSizeW

  kernel32

  LoadLibraryW

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  GetModuleHandleA

  GetModuleFileNameW

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GlobalFree

  GetProcAddress

  user32

  MessageBoxA

  advapi32

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExA

  Exports

  Exports

  GetListenerState

  InitCC

  NSModule

  OnStartup

  Sections

  .text

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmmzcc3.xpi

  .zip
• App/IDM/idmmzcc3_64.dll

  .dll windows x64

  a2c1e36c591eb85bc753627370e54536

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-11-2006 00:00

  Not After

  16-07-2036 23:59

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  03:4f:32:8f:3e:ff:4f:b9:8f:53:43:81:17:88:f7:8a

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2013 00:00

  Not After

  19-06-2016 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueA

  kernel32

  GlobalFree

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  GetProcAddress

  GetTickCount

  GetModuleFileNameW

  GetModuleHandleA

  QueryPerformanceCounter

  DisableThreadLibraryCalls

  GetCurrentThreadId

  GetCurrentProcessId

  LoadLibraryW

  GetSystemTimeAsFileTime

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  Sleep

  RtlCaptureContext

  user32

  MessageBoxA

  advapi32

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExA

  msvcr90

  ??3@YAXPEAX@Z

  _encode_pointer

  _malloc_crt

  _initterm

  _initterm_e

  free

  _encoded_null

  _decode_pointer

  _amsg_exit

  __C_specific_handler

  __CppXcptFilter

  __crt_debugger_hook

  ?terminate@@YAXXZ

  ?_type_info_dtor_internal_method@type_info@@QEAAXXZ

  __clean_type_info_names_internal

  _unlock

  __dllonexit

  _lock

  _onexit

  _wcsicmp

  _snwprintf

  _snprintf

  strncpy

  atoi

  __CxxFrameHandler3

  wcsrchr

  strchr

  ??2@YAPEAX_K@Z

  Exports

  Exports

  GetListenerState

  InitCC

  NSModule

  OnStartup

  Sections

  .text

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 1024B - Virtual size: 756B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 334B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmmzcc7.dll

  .dll windows x86

  c64e342b89227a7d4cd3463ca8e1ebee

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-11-2006 00:00

  Not After

  16-07-2036 23:59

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  03:4f:32:8f:3e:ff:4f:b9:8f:53:43:81:17:88:f7:8a

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  21-05-2013 00:00

  Not After

  19-06-2016 23:59

  Subject

  CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  Signer

  Actual PE Digest

  Digest Algorithm

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  _initterm

  _amsg_exit

  _XcptFilter

  free

  malloc

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  _wcsicmp

  _snwprintf

  _snprintf

  strncpy

  atoi

  wcsrchr

  strchr

  __CxxFrameHandler

  version

  GetFileVersionInfoW

  VerQueryValueA

  GetFileVersionInfoSizeW

  kernel32

  LoadLibraryW

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  GetModuleHandleA

  GetModuleFileNameW

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GlobalFree

  GetProcAddress

  user32

  MessageBoxA

  advapi32

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExA

  Exports

  Exports

  GetListenerState

  InitCC

  NSModule

  OnStartup

  Sections

  .text

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmmzcc7_64.dll

  .dll windows x64

  03099183afcecf68a376fb309c7bc95d

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  be:b1:1a:a9:0d:1e:e9:8e:f3:ee:98:65:e1:02:78:df:60:e9:48:39:a6:11:83:53:8e:12:2a:43:7c:74:af:80

  Signer

  Actual PE Digest

  be:b1:1a:a9:0d:1e:e9:8e:f3:ee:98:65:e1:02:78:df:60:e9:48:39:a6:11:83:53:8e:12:2a:43:7c:74:af:80

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 04:13

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  fd:13:01:27:83:e4:92:62:37:13:f1:50:1a:30:5b:20:47:94:c2:19

  Signer

  Actual PE Digest

  fd:13:01:27:83:e4:92:62:37:13:f1:50:1a:30:5b:20:47:94:c2:19

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  10-11-2019 04:13

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueA

  kernel32

  GlobalFree

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  GetProcAddress

  FlushFileBuffers

  GetModuleFileNameW

  GetModuleHandleA

  CloseHandle

  CreateFileA

  LoadLibraryW

  GetStdHandle

  RtlLookupFunctionEntry

  RtlUnwindEx

  GetCurrentThreadId

  FlsSetValue

  GetCommandLineA

  EncodePointer

  DecodePointer

  FlsGetValue

  FlsFree

  SetLastError

  GetLastError

  FlsAlloc

  RaiseException

  RtlPcToFileHeader

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RtlVirtualUnwind

  RtlCaptureContext

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  HeapFree

  HeapAlloc

  Sleep

  GetModuleHandleW

  ExitProcess

  SetHandleCount

  GetFileType

  GetStartupInfoA

  DeleteCriticalSection

  GetModuleFileNameA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  HeapSetInformation

  HeapCreate

  HeapDestroy

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  LeaveCriticalSection

  EnterCriticalSection

  SetFilePointer

  WriteFile

  GetConsoleCP

  GetConsoleMode

  LCMapStringA

  MultiByteToWideChar

  LCMapStringW

  GetStringTypeA

  GetStringTypeW

  GetLocaleInfoA

  HeapSize

  HeapReAlloc

  LoadLibraryA

  InitializeCriticalSectionAndSpinCount

  SetStdHandle

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  user32

  MessageBoxA

  advapi32

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExA

  Exports

  Exports

  GetListenerState

  InitCC

  InitObs

  NSModule

  OnStartup

  Sections

  .text

  Size: 54KB - Virtual size: 53KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 21KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 6KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmtdi.cat
• App/IDM/idmtdi.inf
• App/IDM/idmtdi32.sys

  .exe windows x86

  3f4b3bf14451d8b5595ce146faeda6eb

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  78:28:c7:31:58:08:bc:87:17:71:0e:13:fa:3c:0b:24

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  18-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  14:b9:55:fb:88:8e:2d:d6:c8:31:92:d7:e7:88:28:62

  Certificate

  Issuer

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  16-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  10-12-2013 00:00

  Not After

  09-12-2023 23:59

  Subject

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

  Certificate

  Issuer

  CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  12-01-2016 00:00

  Not After

  11-01-2031 23:59

  Subject

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

  Certificate

  Issuer

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  23-12-2017 00:00

  Not After

  22-03-2029 23:59

  Subject

  CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  d4:10:0e:c4:d5:79:a8:8e:b2:33:3a:14:f4:58:37:d4:56:e7:af:b8:71:eb:cc:a5:f7:b4:ad:1f:dd:7e:32:9f

  Signer

  Actual PE Digest

  d4:10:0e:c4:d5:79:a8:8e:b2:33:3a:14:f4:58:37:d4:56:e7:af:b8:71:eb:cc:a5:f7:b4:ad:1f:dd:7e:32:9f

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  19-12-2018 14:52

  Valid: false

  63:e1:e8:5d:bb:ec:08:00:56:a0:20:db:a9:ac:21:c3:d8:d4:67:38

  Signer

  Actual PE Digest

  63:e1:e8:5d:bb:ec:08:00:56:a0:20:db:a9:ac:21:c3:d8:d4:67:38

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  19-12-2018 14:52

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ntoskrnl.exe

  ZwQueryValueKey

  ZwOpenKey

  IoDeleteDevice

  ObfDereferenceObject

  ObfReferenceObject

  IoCreateDriver

  RtlAppendUnicodeToString

  RtlCopyUnicodeString

  IoDetachDevice

  IoReleaseRemoveLockAndWaitEx

  KeDelayExecutionThread

  ZwYieldExecution

  IoDeleteSymbolicLink

  PsSetCreateProcessNotifyRoutine

  PsSetLoadImageNotifyRoutine

  IoCreateSymbolicLink

  PsGetVersion

  MmGetSystemRoutineAddress

  InitSafeBootMode

  ExAllocatePoolWithTag

  InterlockedIncrement

  InterlockedDecrement

  ZwQuerySystemInformation

  IofCompleteRequest

  KeLeaveCriticalRegion

  KeUnstackDetachProcess

  KeStackAttachProcess

  KeEnterCriticalRegion

  _except_handler3

  PsLookupProcessByProcessId

  IoGetRequestorProcessId

  memset

  KeRestoreFloatingPointState

  KeSaveFloatingPointState

  IoQueueWorkItem

  IoAllocateWorkItem

  ZwDeleteValueKey

  _strnicmp

  ZwWriteFile

  memmove

  ZwReadFile

  ZwQueryInformationFile

  ZwCreateFile

  _purecall

  IoFreeMdl

  InterlockedCompareExchange

  MmBuildMdlForNonPagedPool

  IoAllocateMdl

  memcpy

  IoFreeWorkItem

  KeResetEvent

  KeSetEvent

  ObReferenceObjectByHandle

  ExEventObjectType

  ZwClose

  _strlwr

  _wcslwr

  strspn

  towlower

  InterlockedExchange

  IofCallDriver

  InterlockedExchangeAdd

  KeGetCurrentThread

  IoFreeIrp

  IoAllocateIrp

  IoCancelIrp

  KeWaitForSingleObject

  IoBuildDeviceIoControlRequest

  KeInitializeEvent

  KeClearEvent

  IoReleaseRemoveLockEx

  IoGetRelatedDeviceObject

  RtlCompareMemory

  wcschr

  wcsspn

  tolower

  _wcsnicmp

  strncmp

  _stricmp

  wcsncmp

  _wcsicmp

  strstr

  wcsstr

  strchr

  wcscspn

  strncpy

  _allmul

  IoCreateDevice

  RtlInitUnicodeString

  IoAttachDevice

  IoInitializeRemoveLockEx

  ZwSetSecurityObject

  ObOpenObjectByPointer

  IoDeviceObjectType

  RtlGetDaclSecurityDescriptor

  RtlGetSaclSecurityDescriptor

  RtlGetGroupSecurityDescriptor

  RtlGetOwnerSecurityDescriptor

  _snwprintf

  RtlLengthSecurityDescriptor

  SeCaptureSecurityDescriptor

  SeExports

  IoIsWdmVersionAvailable

  RtlAddAccessAllowedAce

  RtlLengthSid

  RtlAbsoluteToSelfRelativeSD

  RtlSetDaclSecurityDescriptor

  RtlCreateSecurityDescriptor

  ZwCreateKey

  ZwSetValueKey

  RtlFreeUnicodeString

  IoAcquireRemoveLockEx

  KeInitializeSpinLock

  KeQuerySystemTime

  ExFreePoolWithTag

  KeBugCheckEx

  hal

  KfReleaseSpinLock

  KeGetCurrentIrql

  KfAcquireSpinLock

  tdi.sys

  TdiCopyMdlToBuffer

  TdiCopyBufferToMdl

  TdiMapUserRequest

  Sections

  .text

  Size: 99KB - Virtual size: 99KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  PAGE

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  INIT

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 912B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmtdi64.sys

  .exe windows x64

  cf8c00ceafea78b3d6615d4325255b36

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  78:28:c7:31:58:08:bc:87:17:71:0e:13:fa:3c:0b:24

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  18-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  14:b9:55:fb:88:8e:2d:d6:c8:31:92:d7:e7:88:28:62

  Certificate

  Issuer

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  16-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  10-12-2013 00:00

  Not After

  09-12-2023 23:59

  Subject

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

  Certificate

  Issuer

  CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  12-01-2016 00:00

  Not After

  11-01-2031 23:59

  Subject

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

  Certificate

  Issuer

  CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  23-12-2017 00:00

  Not After

  22-03-2029 23:59

  Subject

  CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  c6:91:35:9c:66:c7:5b:b1:0c:19:90:20:7b:2f:bd:93:9a:0f:37:f5:e8:84:6c:69:fd:f4:06:18:ff:e7:7a:45

  Signer

  Actual PE Digest

  c6:91:35:9c:66:c7:5b:b1:0c:19:90:20:7b:2f:bd:93:9a:0f:37:f5:e8:84:6c:69:fd:f4:06:18:ff:e7:7a:45

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  19-12-2018 14:52

  Valid: false

  ad:fd:7f:31:9d:d1:4e:2f:7b:a0:27:75:9e:ff:dc:dc:95:c1:3b:7a

  Signer

  Actual PE Digest

  ad:fd:7f:31:9d:d1:4e:2f:7b:a0:27:75:9e:ff:dc:dc:95:c1:3b:7a

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  19-12-2018 14:52

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  ntoskrnl.exe

  KeReleaseInStackQueuedSpinLock

  ZwYieldExecution

  RtlInitUnicodeString

  IoDeleteDevice

  MmGetSystemRoutineAddress

  RtlAppendUnicodeToString

  RtlGetVersion

  KeAcquireInStackQueuedSpinLock

  IoDetachDevice

  PsSetCreateProcessNotifyRoutine

  KeDelayExecutionThread

  ZwQueryValueKey

  InitSafeBootMode

  ZwClose

  IoReleaseRemoveLockAndWaitEx

  PsRemoveLoadImageNotifyRoutine

  IoAttachDevice

  ObfReferenceObject

  IoCreateSymbolicLink

  RtlCopyUnicodeString

  ObfDereferenceObject

  IoCreateDriver

  IoInitializeRemoveLockEx

  IoCreateDevice

  ZwOpenKey

  ExAllocatePoolWithTag

  ZwQuerySystemInformation

  PsGetProcessPeb

  KeLeaveCriticalRegion

  PsLookupProcessByProcessId

  KeUnstackDetachProcess

  KeEnterCriticalRegion

  IofCompleteRequest

  IoGetRequestorProcessId

  KeStackAttachProcess

  _strnicmp

  ZwReadFile

  ZwDeleteValueKey

  ZwCreateFile

  IoAllocateWorkItem

  IoQueueWorkItem

  ZwQueryInformationFile

  ZwWriteFile

  MmBuildMdlForNonPagedPool

  IoFreeMdl

  _purecall

  IoAllocateMdl

  KeResetEvent

  KeSetEvent

  IoFreeWorkItem

  PsSetLoadImageNotifyRoutine

  ObReferenceObjectByHandle

  _strlwr

  _wcslwr

  strspn

  towlower

  IofCallDriver

  KeClearEvent

  IoBuildDeviceIoControlRequest

  IoGetRelatedDeviceObject

  KeInitializeEvent

  IoReleaseRemoveLockEx

  IoCancelIrp

  KeWaitForSingleObject

  IoFreeIrp

  IoAllocateIrp

  RtlCompareMemory

  wcschr

  _stricmp

  _wcsicmp

  strncmp

  _wcsnicmp

  strstr

  strchr

  tolower

  strncpy

  wcsstr

  wcsspn

  wcscspn

  wcsncmp

  ObOpenObjectByPointer

  ZwSetSecurityObject

  IoDeviceObjectType

  _snwprintf

  RtlLengthSecurityDescriptor

  SeCaptureSecurityDescriptor

  RtlCreateSecurityDescriptor

  RtlSetDaclSecurityDescriptor

  RtlAbsoluteToSelfRelativeSD

  IoIsWdmVersionAvailable

  SeExports

  RtlLengthSid

  RtlAddAccessAllowedAce

  RtlGetSaclSecurityDescriptor

  RtlGetDaclSecurityDescriptor

  RtlGetGroupSecurityDescriptor

  RtlGetOwnerSecurityDescriptor

  ZwCreateKey

  ZwSetValueKey

  RtlFreeUnicodeString

  ExFreePoolWithTag

  IoDeleteSymbolicLink

  ExEventObjectType

  IoAcquireRemoveLockEx

  KeBugCheckEx

  __C_specific_handler

  tdi.sys

  TdiCopyMdlToBuffer

  TdiCopyBufferToMdl

  TdiMapUserRequest

  Sections

  .text

  Size: 163KB - Virtual size: 163KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  PAGE

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  INIT

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 912B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmvconv.dll

  .dll windows x86

  3e5f2ab695320ee450d90595595cfe6c

  
  

  Code Sign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0b:59:29:2a:8c:f6:59:10:78:c9:29:d5:ba:55:a7:f6

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  28-07-2022 00:00

  Not After

  06-08-2025 23:59

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  21-09-2022 00:00

  Not After

  21-11-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  a7:90:ec:c6:de:97:07:3d:69:11:5c:b6:a4:5e:cc:e7:c9:3b:d2:31:17:98:e5:eb:78:e6:35:48:dc:75:ef:da

  Signer

  Actual PE Digest

  a7:90:ec:c6:de:97:07:3d:69:11:5c:b6:a4:5e:cc:e7:c9:3b:d2:31:17:98:e5:eb:78:e6:35:48:dc:75:ef:da

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  03-10-2022 23:13

  Valid: true

  Chain 1

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Chain 2

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  SetFilePointer

  ReadFile

  GetLastError

  CloseHandle

  GetFileSize

  WriteFile

  CreateFileW

  WideCharToMultiByte

  InterlockedIncrement

  InterlockedDecrement

  InterlockedExchange

  MultiByteToWideChar

  Sleep

  InitializeCriticalSection

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  HeapFree

  SetStdHandle

  GetFileType

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  GetCommandLineA

  RaiseException

  RtlUnwind

  GetCPInfo

  LCMapStringA

  LCMapStringW

  HeapAlloc

  GetModuleHandleW

  GetProcAddress

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  SetLastError

  GetStdHandle

  GetModuleFileNameA

  HeapCreate

  HeapDestroy

  VirtualFree

  VirtualAlloc

  HeapReAlloc

  SetHandleCount

  GetStartupInfoA

  ExitProcess

  HeapSize

  InitializeCriticalSectionAndSpinCount

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetStringTypeA

  GetStringTypeW

  GetACP

  GetOEMCP

  IsValidCodePage

  GetUserDefaultLCID

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  LoadLibraryA

  GetLocaleInfoW

  GetConsoleCP

  GetConsoleMode

  FlushFileBuffers

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  CreateFileA

  GetModuleHandleA

  user32

  SendMessageW

  Exports

  Exports

  ConvertAACtoTS2

  ConvertFlvToMp4

  ConvertTsToMp4

  IsFormatSupported

  IsFormatSupported2

  MuxMKVAndMKVToMKV

  MuxMKVAndMKVToMKV_withProgress

  MuxMP4AndMKVToMKV

  MuxMP4AndMKVToMKV_withProgress

  MuxTSAndAACToTS

  MuxTSandTStoMKV

  MuxTSandTStoMP4

  Sections

  .text

  Size: 563KB - Virtual size: 563KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 62KB - Virtual size: 61KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 8KB - Virtual size: 19.1MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 79KB - Virtual size: 79KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmvs.dll

  .dll windows x86

  e07e00e45407ff0dd6abc9eaa981fa7b

  
  

  Code Sign

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-01-2021 00:00

  Not After

  06-01-2031 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07-01-2016 12:00

  Not After

  07-01-2031 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  23:af:2d:93:8f:28:6e:27:d4:49:ca:6b:11:54:19:b4:f9:62:e6:d9:cb:b0:be:a1:36:36:d3:fe:d8:f0:cd:b0

  Signer

  Actual PE Digest

  23:af:2d:93:8f:28:6e:27:d4:49:ca:6b:11:54:19:b4:f9:62:e6:d9:cb:b0:be:a1:36:36:d3:fe:d8:f0:cd:b0

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  17-04-2021 05:50

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  4f:de:6b:eb:7c:68:6e:a7:ef:73:8d:7c:50:c3:d2:18:94:32:3e:39

  Signer

  Actual PE Digest

  4f:de:6b:eb:7c:68:6e:a7:ef:73:8d:7c:50:c3:d2:18:94:32:3e:39

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  17-04-2021 05:50

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  _initterm

  malloc

  _adjust_fdiv

  free

  Exports

  Exports

  GetBaseBuild

  GetChrExtV

  GetFullVersion

  GetLKFFAV

  GetMzCCExtV

  GetMzCCV

  GetVBuild

  GetVDate

  GetVersion1

  GetVersion2

  Sections

  .text

  Size: 4KB - Virtual size: 510B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 407B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 112B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 106B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmwfp.cat
• App/IDM/idmwfp.inf
• App/IDM/idmwfp32.sys

  .exe windows x86

  e2943a873b21620c1a031fbcf5a5d463

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  78:28:c7:31:58:08:bc:87:17:71:0e:13:fa:3c:0b:24

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  18-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:25:3a:27:38:69:0a:34:51:c1:00:00:00:00:00:25

  Certificate

  Issuer

  CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-09-2018 21:30

  Not After

  06-09-2019 21:30

  Subject

  CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-10-2014 20:31

  Not After

  15-10-2029 20:41

  Subject

  CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8e:f4:16:0c:da:89:a2:7c:1b:1e:2b:3a:82:4f:e9:8c:c3:34:fd:de:bd:fb:05:b5:b0:b3:64:1e:41:60:81:3e

  Signer

  Actual PE Digest

  8e:f4:16:0c:da:89:a2:7c:1b:1e:2b:3a:82:4f:e9:8c:c3:34:fd:de:bd:fb:05:b5:b0:b3:64:1e:41:60:81:3e

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  28-11-2022 11:52

  Valid: false

  bf:ac:8a:93:fa:c2:0a:dc:ec:45:61:44:34:26:f6:60:8f:2e:f2:d0

  Signer

  Actual PE Digest

  bf:ac:8a:93:fa:c2:0a:dc:ec:45:61:44:34:26:f6:60:8f:2e:f2:d0

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  19-12-2018 14:52

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ntoskrnl.exe

  IoFreeMdl

  InterlockedCompareExchange

  MmBuildMdlForNonPagedPool

  IoAllocateMdl

  memcpy

  IoFreeWorkItem

  KeResetEvent

  KeSetEvent

  ObfReferenceObject

  ObReferenceObjectByHandle

  ExEventObjectType

  KeQuerySystemTime

  _strlwr

  _wcslwr

  strspn

  towlower

  KeDelayExecutionThread

  IoFreeIrp

  KeWaitForSingleObject

  KeInitializeEvent

  IoAllocateIrp

  IoReuseIrp

  wcschr

  wcsspn

  tolower

  _wcsnicmp

  strncmp

  wcsncmp

  RtlGetVersion

  strstr

  wcsstr

  strchr

  wcscspn

  _purecall

  _allmul

  IoCreateSymbolicLink

  PsSetLoadImageNotifyRoutine

  PsRemoveLoadImageNotifyRoutine

  PsSetCreateProcessNotifyRoutine

  IoDeleteSymbolicLink

  IoDeleteDevice

  ZwOpenKey

  RtlInitUnicodeString

  ZwQueryValueKey

  ZwClose

  ObOpenObjectByPointer

  IoDeviceObjectType

  IoCreateDevice

  ZwSetSecurityObject

  RtlGetOwnerSecurityDescriptor

  RtlGetDaclSecurityDescriptor

  RtlGetGroupSecurityDescriptor

  RtlGetSaclSecurityDescriptor

  SeCaptureSecurityDescriptor

  RtlLengthSecurityDescriptor

  _snwprintf

  RtlCreateSecurityDescriptor

  RtlLengthSid

  SeExports

  IoIsWdmVersionAvailable

  RtlAbsoluteToSelfRelativeSD

  RtlAddAccessAllowedAce

  RtlSetDaclSecurityDescriptor

  RtlFreeUnicodeString

  ZwSetValueKey

  ZwCreateKey

  ZwCreateFile

  ZwQueryInformationFile

  ZwReadFile

  memmove

  ZwWriteFile

  _strnicmp

  ZwDeleteValueKey

  IoAllocateWorkItem

  IoQueueWorkItem

  KeSaveFloatingPointState

  KeRestoreFloatingPointState

  IoGetRequestorProcessId

  PsLookupProcessByProcessId

  ObfDereferenceObject

  _except_handler3

  PsGetProcessPeb

  KeEnterCriticalRegion

  KeStackAttachProcess

  KeUnstackDetachProcess

  KeLeaveCriticalRegion

  IofCompleteRequest

  ZwQuerySystemInformation

  InterlockedDecrement

  InterlockedIncrement

  _stricmp

  ExAllocatePoolWithTag

  InitSafeBootMode

  strncpy

  MmGetSystemRoutineAddress

  memset

  KeInitializeSpinLock

  PsGetVersion

  _wcsicmp

  ExFreePoolWithTag

  ExAllocatePoolWithQuotaTag

  RtlImageDirectoryEntryToData

  RtlUnwind

  KeBugCheckEx

  hal

  KeReleaseInStackQueuedSpinLock

  KeGetCurrentIrql

  KeAcquireInStackQueuedSpinLock

  ndis.sys

  NdisGetDataBuffer

  NdisAllocateGenericObject

  NdisAllocateNetBufferListPool

  NdisFreeNetBufferListPool

  NdisFreeGenericObject

  fwpkclnt.sys

  FwpsAllocateCloneNetBufferList0

  FwpsInjectTransportSendAsync0

  FwpmFilterCreateEnumHandle0

  FwpmFilterEnum0

  FwpmFilterDeleteByKey0

  FwpmFreeMemory0

  FwpmFilterDestroyEnumHandle0

  FwpmCalloutAdd0

  FwpmFilterAdd0

  FwpsCalloutUnregisterById0

  FwpsCalloutRegister0

  FwpsFreeCloneNetBufferList0

  FwpsAllocateNetBufferAndNetBufferList0

  FwpsCopyStreamDataToBuffer0

  FwpsStreamInjectAsync0

  FwpsFlowRemoveContext0

  FwpsFlowAssociateContext0

  FwpsFreeNetBufferList0

  FwpsInjectionHandleCreate0

  FwpsInjectionHandleDestroy0

  FwpmEngineOpen0

  FwpmTransactionBegin0

  FwpmProviderAdd0

  FwpmSubLayerAdd0

  FwpmTransactionCommit0

  FwpmTransactionAbort0

  FwpmEngineClose0

  FwpsQueryPacketInjectionState0

  netio.sys

  WskReleaseProviderNPI

  WskCaptureProviderNPI

  WskDeregister

  WskRegister

  Sections

  .text

  Size: 94KB - Virtual size: 94KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  PAGE

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  INIT

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 912B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/idmwfp64.sys

  .exe windows x64

  b73b7280d2bc34c808de9d56d8043512

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  78:28:c7:31:58:08:bc:87:17:71:0e:13:fa:3c:0b:24

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  18-05-2016 00:00

  Not After

  15-07-2019 23:59

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:25:3a:27:38:69:0a:34:51:c1:00:00:00:00:00:25

  Certificate

  Issuer

  CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06-09-2018 21:30

  Not After

  06-09-2019 21:30

  Subject

  CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-10-2014 20:31

  Not After

  15-10-2029 20:41

  Subject

  CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  12:b7:ce:1d:9f:05:e3:8d:a3:64:83:4b:9f:fc:9c:e4:4b:60:04:10:3d:6a:6b:b2:8a:01:1e:c9:0a:ab:ab:f5

  Signer

  Actual PE Digest

  12:b7:ce:1d:9f:05:e3:8d:a3:64:83:4b:9f:fc:9c:e4:4b:60:04:10:3d:6a:6b:b2:8a:01:1e:c9:0a:ab:ab:f5

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  28-11-2022 11:52

  Valid: false

  31:05:28:7d:10:c2:47:a3:cc:75:c9:2b:88:64:06:39:c4:52:d4:d0

  Signer

  Actual PE Digest

  31:05:28:7d:10:c2:47:a3:cc:75:c9:2b:88:64:06:39:c4:52:d4:d0

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  19-12-2018 14:52

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  ntoskrnl.exe

  IoAllocateMdl

  KeResetEvent

  KeSetEvent

  IoFreeWorkItem

  ExEventObjectType

  ObReferenceObjectByHandle

  ObfReferenceObject

  _strlwr

  _wcslwr

  strspn

  towlower

  IoReuseIrp

  KeInitializeEvent

  KeDelayExecutionThread

  KeWaitForSingleObject

  IoFreeIrp

  IoAllocateIrp

  wcschr

  _wcsicmp

  strncmp

  _wcsnicmp

  strstr

  strchr

  tolower

  ZwQueryValueKey

  wcsstr

  wcsspn

  _purecall

  wcsncmp

  PsSetCreateProcessNotifyRoutine

  KeAcquireInStackQueuedSpinLock

  RtlGetVersion

  MmGetSystemRoutineAddress

  IoDeleteDevice

  RtlInitUnicodeString

  ObOpenObjectByPointer

  IoDeviceObjectType

  IoCreateDevice

  ZwSetSecurityObject

  RtlGetOwnerSecurityDescriptor

  RtlGetDaclSecurityDescriptor

  RtlGetGroupSecurityDescriptor

  RtlGetSaclSecurityDescriptor

  SeCaptureSecurityDescriptor

  RtlLengthSecurityDescriptor

  _snwprintf

  RtlCreateSecurityDescriptor

  RtlLengthSid

  SeExports

  IoIsWdmVersionAvailable

  RtlAbsoluteToSelfRelativeSD

  RtlAddAccessAllowedAce

  RtlSetDaclSecurityDescriptor

  RtlFreeUnicodeString

  ZwSetValueKey

  ZwCreateKey

  IoFreeMdl

  MmBuildMdlForNonPagedPool

  ZwWriteFile

  ZwQueryInformationFile

  IoQueueWorkItem

  IoAllocateWorkItem

  ZwCreateFile

  ZwDeleteValueKey

  ZwReadFile

  _strnicmp

  KeStackAttachProcess

  ObfDereferenceObject

  IoGetRequestorProcessId

  IofCompleteRequest

  KeEnterCriticalRegion

  KeUnstackDetachProcess

  PsLookupProcessByProcessId

  KeLeaveCriticalRegion

  PsGetProcessPeb

  ZwQuerySystemInformation

  ExAllocatePoolWithTag

  _stricmp

  ZwOpenKey

  IoCreateSymbolicLink

  PsGetVersion

  PsRemoveLoadImageNotifyRoutine

  ZwClose

  wcscspn

  InitSafeBootMode

  KeReleaseInStackQueuedSpinLock

  PsSetLoadImageNotifyRoutine

  ExFreePoolWithTag

  strncpy

  IoDeleteSymbolicLink

  ExAllocatePoolWithQuotaTag

  RtlImageDirectoryEntryToData

  __C_specific_handler

  KeBugCheckEx

  ndis.sys

  NdisGetDataBuffer

  NdisFreeGenericObject

  NdisAllocateNetBufferListPool

  NdisAllocateGenericObject

  NdisFreeNetBufferListPool

  fwpkclnt.sys

  FwpsCalloutUnregisterById0

  FwpsFreeCloneNetBufferList0

  FwpsQueryPacketInjectionState0

  FwpmCalloutAdd0

  FwpmFilterDeleteByKey0

  FwpsAllocateCloneNetBufferList0

  FwpmFilterEnum0

  FwpsCalloutRegister0

  FwpmFilterDestroyEnumHandle0

  FwpmFilterAdd0

  FwpsInjectTransportSendAsync0

  FwpmFreeMemory0

  FwpsAllocateNetBufferAndNetBufferList0

  FwpsCopyStreamDataToBuffer0

  FwpsStreamInjectAsync0

  FwpsFlowAssociateContext0

  FwpsFlowRemoveContext0

  FwpsFreeNetBufferList0

  FwpmSubLayerAdd0

  FwpsInjectionHandleDestroy0

  FwpsInjectionHandleCreate0

  FwpmTransactionCommit0

  FwpmProviderAdd0

  FwpmTransactionAbort0

  FwpmEngineOpen0

  FwpmTransactionBegin0

  FwpmEngineClose0

  FwpmFilterCreateEnumHandle0

  netio.sys

  WskCaptureProviderNPI

  WskDeregister

  WskRegister

  WskReleaseProviderNPI

  Sections

  .text

  Size: 152KB - Virtual size: 152KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 19KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  PAGE

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  INIT

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 912B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/libcrypto.dll

  .dll windows x86

  199b6fab16e0400a4b8a5fb07ed8d3f5

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:8b:d2:70:75:52:6a:89:ef:95:89:82:c4:bc:cc:48:e3:57:77:9d:72:92:92:82:8b:c3:46:42:7b:26:34:96

  Signer

  Actual PE Digest

  03:8b:d2:70:75:52:6a:89:ef:95:89:82:c4:bc:cc:48:e3:57:77:9d:72:92:92:82:8b:c3:46:42:7b:26:34:96

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  01-05-2020 10:01

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  c8:2e:5c:49:1d:c2:8e:32:66:f9:47:b3:90:8f:4b:8c:ed:97:db:8f

  Signer

  Actual PE Digest

  c8:2e:5c:49:1d:c2:8e:32:66:f9:47:b3:90:8f:4b:8c:ed:97:db:8f

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  01-05-2020 10:01

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ws2_32

  recvfrom

  send

  recv

  shutdown

  socket

  setsockopt

  listen

  connect

  closesocket

  bind

  accept

  sendto

  WSAStartup

  getsockopt

  getsockname

  ioctlsocket

  WSAGetLastError

  WSASetLastError

  getservbyname

  getservbyport

  gethostbyname

  gethostbyaddr

  ntohs

  inet_ntoa

  inet_addr

  htons

  WSACleanup

  htonl

  advapi32

  CryptReleaseContext

  CryptAcquireContextW

  ReportEventW

  RegisterEventSourceW

  DeregisterEventSource

  CryptGenRandom

  user32

  GetUserObjectInformationW

  GetProcessWindowStation

  MessageBoxW

  msvcrt

  _stat

  _iob

  _unlock

  __dllonexit

  _lock

  _onexit

  _XcptFilter

  _initterm

  _amsg_exit

  _wstat

  _fstat

  _snwprintf

  sscanf

  _chmod

  setbuf

  clearerr

  strspn

  strcspn

  memchr

  gmtime

  strerror

  fopen

  _wfopen

  realloc

  strcmp

  getenv

  strtol

  strstr

  atoi

  raise

  wcsstr

  _vsnprintf

  _vsnwprintf

  _exit

  isspace

  _strdup

  malloc

  _stricmp

  _setmode

  _errno

  ftell

  fseek

  fread

  _fileno

  fgets

  fflush

  ferror

  feof

  fclose

  perror

  memmove

  sprintf

  free

  calloc

  strncpy

  strchr

  qsort

  strrchr

  _strnicmp

  time

  strncmp

  strtoul

  fwrite

  memset

  memcpy

  kernel32

  LoadLibraryA

  FormatMessageW

  GetSystemTime

  SystemTimeToFileTime

  GetLastError

  SetLastError

  GetStdHandle

  GetEnvironmentVariableW

  GetFileType

  WriteFile

  FreeLibrary

  CloseHandle

  LoadLibraryW

  FindClose

  FindFirstFileW

  FindNextFileW

  WideCharToMultiByte

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  GetSystemTimeAsFileTime

  GetTickCount

  GetSystemDirectoryA

  CreateFiber

  DeleteFiber

  SwitchToFiber

  GetProcAddress

  MultiByteToWideChar

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  RtlUnwind

  GetVersion

  GetModuleHandleW

  TerminateProcess

  GetCurrentProcess

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  Exports

  Exports

  ACCESS_DESCRIPTION_free

  ACCESS_DESCRIPTION_it

  ACCESS_DESCRIPTION_new

  ADMISSIONS_free

  ADMISSIONS_get0_admissionAuthority

  ADMISSIONS_get0_namingAuthority

  ADMISSIONS_get0_professionInfos

  ADMISSIONS_it

  ADMISSIONS_new

  ADMISSIONS_set0_admissionAuthority

  ADMISSIONS_set0_namingAuthority

  ADMISSIONS_set0_professionInfos

  ADMISSION_SYNTAX_free

  ADMISSION_SYNTAX_get0_admissionAuthority

  ADMISSION_SYNTAX_get0_contentsOfAdmissions

  ADMISSION_SYNTAX_it

  ADMISSION_SYNTAX_new

  ADMISSION_SYNTAX_set0_admissionAuthority

  ADMISSION_SYNTAX_set0_contentsOfAdmissions

  AES_bi_ige_encrypt

  AES_cbc_encrypt

  AES_cfb128_encrypt

  AES_cfb1_encrypt

  AES_cfb8_encrypt

  AES_decrypt

  AES_ecb_encrypt

  AES_encrypt

  AES_ige_encrypt

  AES_ofb128_encrypt

  AES_options

  AES_set_decrypt_key

  AES_set_encrypt_key

  AES_unwrap_key

  AES_wrap_key

  ASIdOrRange_free

  ASIdOrRange_it

  ASIdOrRange_new

  ASIdentifierChoice_free

  ASIdentifierChoice_it

  ASIdentifierChoice_new

  ASIdentifiers_free

  ASIdentifiers_it

  ASIdentifiers_new

  ASN1_ANY_it

  ASN1_BIT_STRING_check

  ASN1_BIT_STRING_free

  ASN1_BIT_STRING_get_bit

  ASN1_BIT_STRING_it

  ASN1_BIT_STRING_name_print

  ASN1_BIT_STRING_new

  ASN1_BIT_STRING_num_asc

  ASN1_BIT_STRING_set

  ASN1_BIT_STRING_set_asc

  ASN1_BIT_STRING_set_bit

  ASN1_BMPSTRING_free

  ASN1_BMPSTRING_it

  ASN1_BMPSTRING_new

  ASN1_BOOLEAN_it

  ASN1_ENUMERATED_free

  ASN1_ENUMERATED_get

  ASN1_ENUMERATED_get_int64

  ASN1_ENUMERATED_it

  ASN1_ENUMERATED_new

  ASN1_ENUMERATED_set

  ASN1_ENUMERATED_set_int64

  ASN1_ENUMERATED_to_BN

  ASN1_FBOOLEAN_it

  ASN1_GENERALIZEDTIME_adj

  ASN1_GENERALIZEDTIME_check

  ASN1_GENERALIZEDTIME_free

  ASN1_GENERALIZEDTIME_it

  ASN1_GENERALIZEDTIME_new

  ASN1_GENERALIZEDTIME_print

  ASN1_GENERALIZEDTIME_set

  ASN1_GENERALIZEDTIME_set_string

  ASN1_GENERALSTRING_free

  ASN1_GENERALSTRING_it

  ASN1_GENERALSTRING_new

  ASN1_IA5STRING_free

  ASN1_IA5STRING_it

  ASN1_IA5STRING_new

  ASN1_INTEGER_cmp

  ASN1_INTEGER_dup

  ASN1_INTEGER_free

  ASN1_INTEGER_get

  ASN1_INTEGER_get_int64

  ASN1_INTEGER_get_uint64

  ASN1_INTEGER_it

  ASN1_INTEGER_new

  ASN1_INTEGER_set

  ASN1_INTEGER_set_int64

  ASN1_INTEGER_set_uint64

  ASN1_INTEGER_to_BN

  ASN1_ITEM_get

  ASN1_ITEM_lookup

  ASN1_NULL_free

  ASN1_NULL_it

  ASN1_NULL_new

  ASN1_OBJECT_create

  ASN1_OBJECT_free

  ASN1_OBJECT_it

  ASN1_OBJECT_new

  ASN1_OCTET_STRING_NDEF_it

  ASN1_OCTET_STRING_cmp

  ASN1_OCTET_STRING_dup

  ASN1_OCTET_STRING_free

  ASN1_OCTET_STRING_it

  ASN1_OCTET_STRING_new

  ASN1_OCTET_STRING_set

  ASN1_PCTX_free

  ASN1_PCTX_get_cert_flags

  ASN1_PCTX_get_flags

  ASN1_PCTX_get_nm_flags

  ASN1_PCTX_get_oid_flags

  ASN1_PCTX_get_str_flags

  ASN1_PCTX_new

  ASN1_PCTX_set_cert_flags

  ASN1_PCTX_set_flags

  ASN1_PCTX_set_nm_flags

  ASN1_PCTX_set_oid_flags

  ASN1_PCTX_set_str_flags

  ASN1_PRINTABLESTRING_free

  ASN1_PRINTABLESTRING_it

  ASN1_PRINTABLESTRING_new

  ASN1_PRINTABLE_free

  ASN1_PRINTABLE_it

  ASN1_PRINTABLE_new

  ASN1_PRINTABLE_type

  ASN1_SCTX_free

  ASN1_SCTX_get_app_data

  ASN1_SCTX_get_flags

  ASN1_SCTX_get_item

  ASN1_SCTX_get_template

  ASN1_SCTX_new

  ASN1_SCTX_set_app_data

  ASN1_SEQUENCE_ANY_it

  ASN1_SEQUENCE_it

  ASN1_SET_ANY_it

  ASN1_STRING_TABLE_add

  ASN1_STRING_TABLE_cleanup

  ASN1_STRING_TABLE_get

  ASN1_STRING_clear_free

  ASN1_STRING_cmp

  ASN1_STRING_copy

  ASN1_STRING_data

  ASN1_STRING_dup

  ASN1_STRING_free

  ASN1_STRING_get0_data

  ASN1_STRING_get_default_mask

  ASN1_STRING_length

  ASN1_STRING_length_set

  ASN1_STRING_new

  ASN1_STRING_print

  ASN1_STRING_print_ex

  ASN1_STRING_print_ex_fp

  ASN1_STRING_set

  ASN1_STRING_set0

  ASN1_STRING_set_by_NID

  ASN1_STRING_set_default_mask

  ASN1_STRING_set_default_mask_asc

  ASN1_STRING_to_UTF8

  ASN1_STRING_type

  ASN1_STRING_type_new

  ASN1_T61STRING_free

  ASN1_T61STRING_it

  ASN1_T61STRING_new

  ASN1_TBOOLEAN_it

  ASN1_TIME_adj

  ASN1_TIME_check

  ASN1_TIME_cmp_time_t

  ASN1_TIME_compare

  ASN1_TIME_diff

  ASN1_TIME_free

  ASN1_TIME_it

  ASN1_TIME_new

  ASN1_TIME_normalize

  ASN1_TIME_print

  ASN1_TIME_set

  ASN1_TIME_set_string

  ASN1_TIME_set_string_X509

  ASN1_TIME_to_generalizedtime

  ASN1_TIME_to_tm

  ASN1_TYPE_cmp

  ASN1_TYPE_free

  ASN1_TYPE_get

  ASN1_TYPE_get_int_octetstring

  ASN1_TYPE_get_octetstring

  ASN1_TYPE_new

  ASN1_TYPE_pack_sequence

  ASN1_TYPE_set

  ASN1_TYPE_set1

  ASN1_TYPE_set_int_octetstring

  ASN1_TYPE_set_octetstring

  ASN1_TYPE_unpack_sequence

  ASN1_UNIVERSALSTRING_free

  ASN1_UNIVERSALSTRING_it

  ASN1_UNIVERSALSTRING_new

  ASN1_UNIVERSALSTRING_to_string

  ASN1_UTCTIME_adj

  ASN1_UTCTIME_check

  ASN1_UTCTIME_cmp_time_t

  ASN1_UTCTIME_free

  ASN1_UTCTIME_it

  ASN1_UTCTIME_new

  ASN1_UTCTIME_print

  ASN1_UTCTIME_set

  ASN1_UTCTIME_set_string

  ASN1_UTF8STRING_free

  ASN1_UTF8STRING_it

  ASN1_UTF8STRING_new

  ASN1_VISIBLESTRING_free

  ASN1_VISIBLESTRING_it

  ASN1_VISIBLESTRING_new

  ASN1_add_oid_module

  ASN1_add_stable_module

  ASN1_bn_print

  ASN1_buf_print

  ASN1_check_infinite_end

  ASN1_const_check_infinite_end

  ASN1_d2i_bio

  ASN1_d2i_fp

  ASN1_digest

  ASN1_dup

  ASN1_generate_nconf

  ASN1_generate_v3

  ASN1_get_object

  ASN1_i2d_bio

  ASN1_i2d_fp

  ASN1_item_d2i

  ASN1_item_d2i_bio

  ASN1_item_d2i_fp

  ASN1_item_digest

  ASN1_item_dup

  ASN1_item_ex_d2i

  ASN1_item_ex_free

  ASN1_item_ex_i2d

  ASN1_item_ex_new

  ASN1_item_free

  ASN1_item_i2d

  ASN1_item_i2d_bio

  ASN1_item_i2d_fp

  ASN1_item_ndef_i2d

  ASN1_item_new

  ASN1_item_pack

  ASN1_item_print

  ASN1_item_sign

  ASN1_item_sign_ctx

  ASN1_item_unpack

  ASN1_item_verify

  ASN1_mbstring_copy

  ASN1_mbstring_ncopy

  ASN1_object_size

  ASN1_parse

  ASN1_parse_dump

  ASN1_put_eoc

  ASN1_put_object

  ASN1_sign

  ASN1_str2mask

  ASN1_tag2bit

  ASN1_tag2str

  ASN1_verify

  ASRange_free

  ASRange_it

  ASRange_new

  ASYNC_WAIT_CTX_clear_fd

  ASYNC_WAIT_CTX_free

  ASYNC_WAIT_CTX_get_all_fds

  ASYNC_WAIT_CTX_get_changed_fds

  ASYNC_WAIT_CTX_get_fd

  ASYNC_WAIT_CTX_new

  ASYNC_WAIT_CTX_set_wait_fd

  ASYNC_block_pause

  ASYNC_cleanup_thread

  ASYNC_get_current_job

  ASYNC_get_wait_ctx

  ASYNC_init_thread

  ASYNC_is_capable

  ASYNC_pause_job

  ASYNC_start_job

  ASYNC_unblock_pause

  AUTHORITY_INFO_ACCESS_free

  AUTHORITY_INFO_ACCESS_it

  AUTHORITY_INFO_ACCESS_new

  AUTHORITY_KEYID_free

  AUTHORITY_KEYID_it

  AUTHORITY_KEYID_new

  BASIC_CONSTRAINTS_free

  BASIC_CONSTRAINTS_it

  BASIC_CONSTRAINTS_new

  BF_cbc_encrypt

  BF_cfb64_encrypt

  BF_decrypt

  BF_ecb_encrypt

  BF_encrypt

  BF_ofb64_encrypt

  BF_options

  BF_set_key

  BIGNUM_it

  BIO_ADDRINFO_address

  BIO_ADDRINFO_family

  BIO_ADDRINFO_free

  BIO_ADDRINFO_next

  BIO_ADDRINFO_protocol

  BIO_ADDRINFO_socktype

  BIO_ADDR_clear

  BIO_ADDR_family

  BIO_ADDR_free

  BIO_ADDR_hostname_string

  BIO_ADDR_new

  BIO_ADDR_path_string

  BIO_ADDR_rawaddress

  BIO_ADDR_rawmake

  BIO_ADDR_rawport

  BIO_ADDR_service_string

  BIO_accept

  BIO_accept_ex

  BIO_asn1_get_prefix

  BIO_asn1_get_suffix

  BIO_asn1_set_prefix

  BIO_asn1_set_suffix

  BIO_bind

  BIO_callback_ctrl

  BIO_clear_flags

  BIO_closesocket

  BIO_connect

  BIO_copy_next_retry

  BIO_ctrl

  BIO_ctrl_get_read_request

  BIO_ctrl_get_write_guarantee

  BIO_ctrl_pending

  BIO_ctrl_reset_read_request

  BIO_ctrl_wpending

  BIO_debug_callback

  BIO_dgram_non_fatal_error

  BIO_dump

  BIO_dump_cb

  BIO_dump_fp

  BIO_dump_indent

  BIO_dump_indent_cb

  BIO_dump_indent_fp

  BIO_dup_chain

  BIO_f_asn1

  BIO_f_base64

  BIO_f_buffer

  BIO_f_cipher

  BIO_f_linebuffer

  BIO_f_md

  BIO_f_nbio_test

  BIO_f_null

  BIO_f_reliable

  BIO_fd_non_fatal_error

  BIO_fd_should_retry

  BIO_find_type

  BIO_free

  BIO_free_all

  BIO_get_accept_socket

  BIO_get_callback

  BIO_get_callback_arg

  BIO_get_callback_ex

  BIO_get_data

  BIO_get_ex_data

  BIO_get_host_ip

  BIO_get_init

  BIO_get_new_index

  BIO_get_port

  BIO_get_retry_BIO

  BIO_get_retry_reason

  BIO_get_shutdown

  BIO_gethostbyname

  BIO_gets

  BIO_hex_string

  BIO_indent

  BIO_int_ctrl

  BIO_listen

  BIO_lookup

  BIO_lookup_ex

  BIO_meth_free

  BIO_meth_get_callback_ctrl

  BIO_meth_get_create

  BIO_meth_get_ctrl

  BIO_meth_get_destroy

  BIO_meth_get_gets

  BIO_meth_get_puts

  BIO_meth_get_read

  BIO_meth_get_read_ex

  BIO_meth_get_write

  BIO_meth_get_write_ex

  BIO_meth_new

  BIO_meth_set_callback_ctrl

  BIO_meth_set_create

  BIO_meth_set_ctrl

  BIO_meth_set_destroy

  BIO_meth_set_gets

  BIO_meth_set_puts

  BIO_meth_set_read

  BIO_meth_set_read_ex

  BIO_meth_set_write

  BIO_meth_set_write_ex

  BIO_method_name

  BIO_method_type

  BIO_new

  BIO_new_CMS

  BIO_new_NDEF

  BIO_new_PKCS7

  BIO_new_accept

  BIO_new_bio_pair

  BIO_new_connect

  BIO_new_dgram

  BIO_new_fd

  BIO_new_file

  BIO_new_fp

  BIO_new_mem_buf

  BIO_new_socket

  BIO_next

  BIO_nread

  BIO_nread0

  BIO_number_read

  BIO_number_written

  BIO_nwrite

  BIO_nwrite0

  BIO_parse_hostserv

  BIO_pop

  BIO_printf

  BIO_ptr_ctrl

  BIO_push

  BIO_puts

  BIO_read

  BIO_read_ex

  BIO_s_accept

  BIO_s_bio

  BIO_s_connect

  BIO_s_datagram

  BIO_s_fd

  BIO_s_file

  BIO_s_log

  BIO_s_mem

  BIO_s_null

  BIO_s_secmem

  BIO_s_socket

  BIO_set_callback

  BIO_set_callback_arg

  BIO_set_callback_ex

  BIO_set_cipher

  BIO_set_data

  BIO_set_ex_data

  BIO_set_flags

  BIO_set_init

  BIO_set_next

  BIO_set_retry_reason

  BIO_set_shutdown

  BIO_set_tcp_ndelay

  BIO_snprintf

  BIO_sock_error

  BIO_sock_info

  BIO_sock_init

  BIO_sock_non_fatal_error

  BIO_sock_should_retry

  BIO_socket

  BIO_socket_ioctl

  BIO_socket_nbio

  BIO_test_flags

  BIO_up_ref

  BIO_vfree

  BIO_vprintf

  BIO_vsnprintf

  BIO_write

  BIO_write_ex

  BN_BLINDING_convert

  BN_BLINDING_convert_ex

  BN_BLINDING_create_param

  BN_BLINDING_free

  BN_BLINDING_get_flags

  BN_BLINDING_invert

  BN_BLINDING_invert_ex

  BN_BLINDING_is_current_thread

  BN_BLINDING_lock

  BN_BLINDING_new

  BN_BLINDING_set_current_thread

  BN_BLINDING_set_flags

  BN_BLINDING_unlock

  BN_BLINDING_update

  BN_CTX_end

  BN_CTX_free

  BN_CTX_get

  BN_CTX_new

  BN_CTX_secure_new

  BN_CTX_start

  BN_GENCB_call

  BN_GENCB_free

  BN_GENCB_get_arg

  BN_GENCB_new

  BN_GENCB_set

  BN_GENCB_set_old

  BN_GF2m_add

  BN_GF2m_arr2poly

  BN_GF2m_mod

  BN_GF2m_mod_arr

  BN_GF2m_mod_div

  BN_GF2m_mod_div_arr

  BN_GF2m_mod_exp

  Sections

  .text

  Size: 1.2MB - Virtual size: 1.2MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 470KB - Virtual size: 469KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 960B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 48KB - Virtual size: 47KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/libssl.dll

  .dll windows x86

  5403574a05cdc348d4a9b7d69c04b61d

  
  

  Code Sign

  06:c5:07:8a:a5:28:bb:d3:b8:66:8a:b1:0b:03:5f:94

  Certificate

  Issuer

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  11-02-2011 12:00

  Not After

  10-02-2026 12:00

  Subject

  CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2013 12:00

  Not After

  22-10-2028 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:1c:b2:8a:00:00:00:00:00:26

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15-04-2011 19:41

  Not After

  15-04-2021 19:51

  Subject

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  09:96:cb:38:36:ac:ef:b7:37:c2:12:d1:55:41:7e:f1

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  30-07-2019 00:00

  Not After

  03-08-2022 12:00

  Subject

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22-10-2014 00:00

  Not After

  22-10-2024 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10-11-2006 00:00

  Not After

  10-11-2021 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  aa:a2:51:92:bf:61:21:eb:f5:af:56:c2:18:0a:99:66:21:a7:3d:cf:7a:0f:8d:05:2b:35:ee:79:48:2d:73:57

  Signer

  Actual PE Digest

  aa:a2:51:92:bf:61:21:eb:f5:af:56:c2:18:0a:99:66:21:a7:3d:cf:7a:0f:8d:05:2b:35:ee:79:48:2d:73:57

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  01-05-2020 10:01

  Valid: true

  Chain 1

  CN=Tonec Inc.,OU=Internet Download Manager,O=Tonec Inc.,L=New York,ST=New York,C=US

  CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  63:7f:69:7d:16:e0:ee:8b:67:74:e8:c8:25:62:d0:3f:ce:5e:45:4a

  Signer

  Actual PE Digest

  63:7f:69:7d:16:e0:ee:8b:67:74:e8:c8:25:62:d0:3f:ce:5e:45:4a

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Tonec Inc.,O=Tonec Inc.,L=New York,ST=New York,C=US

  01-05-2020 10:01

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  libcrypto

  ERR_clear_error

  OPENSSL_sk_new_null

  OPENSSL_sk_free

  OPENSSL_sk_find

  OPENSSL_sk_push

  BUF_MEM_grow

  CRYPTO_malloc

  BIO_snprintf

  ERR_add_error_data

  EVP_MD_size

  EVP_MD_CTX_md

  EVP_CIPHER_flags

  EVP_CIPHER_CTX_cipher

  EVP_CIPHER_CTX_iv_length

  CRYPTO_memcmp

  COMP_compress_block

  COMP_expand_block

  EVP_CIPHER_block_size

  EVP_CIPHER_iv_length

  EVP_CIPHER_CTX_block_size

  EVP_Cipher

  EVP_MD_CTX_new

  EVP_MD_CTX_free

  EVP_MD_CTX_copy_ex

  EVP_DigestUpdate

  EVP_DigestFinal_ex

  EVP_MD_CTX_copy

  EVP_DigestSignFinal

  EVP_CIPHER_CTX_ctrl

  RAND_bytes

  EVP_CipherInit_ex

  EVP_CipherUpdate

  EVP_CipherFinal_ex

  EVP_MD_type

  EVP_DigestInit_ex

  EVP_DigestFinal

  SHA1_Init

  SHA1_Transform

  SHA224_Init

  SHA256_Init

  SHA256_Transform

  SHA384_Init

  SHA512_Init

  SHA512_Transform

  MD5_Init

  MD5_Transform

  CRYPTO_clear_free

  OPENSSL_cleanse

  COMP_CTX_new

  COMP_CTX_free

  BIO_s_mem

  EVP_CIPHER_key_length

  EVP_MD_CTX_ctrl

  EVP_MD_CTX_set_flags

  EVP_CIPHER_CTX_new

  EVP_CIPHER_CTX_reset

  EVP_md5

  EVP_sha1

  OPENSSL_sk_num

  OPENSSL_sk_value

  OPENSSL_sk_new_reserve

  OPENSSL_sk_pop_free

  CRYPTO_memdup

  CRYPTO_strdup

  EVP_sha256

  EVP_PKEY_security_bits

  EVP_PKEY_set_type

  EVP_PKEY_set1_DH

  EVP_PKEY_new

  EVP_PKEY_up_ref

  EVP_PKEY_free

  EVP_PKEY_CTX_new

  EVP_PKEY_CTX_new_id

  EVP_PKEY_CTX_free

  EVP_PKEY_CTX_ctrl

  EVP_PKEY_derive_init

  EVP_PKEY_derive_set_peer

  EVP_PKEY_derive

  EVP_PKEY_paramgen_init

  EVP_PKEY_paramgen

  EVP_PKEY_keygen_init

  EVP_PKEY_keygen

  EC_GROUP_get_curve_name

  EC_KEY_get0_group

  X509_NAME_free

  X509_free

  X509_it

  ASN1_OCTET_STRING_it

  INT32_it

  ZINT32_it

  UINT32_it

  ZUINT32_it

  ZINT64_it

  ZUINT64_it

  CRYPTO_strndup

  ASN1_item_free

  ASN1_item_d2i

  ASN1_item_i2d

  OPENSSL_DIR_read

  OPENSSL_DIR_end

  OPENSSL_sk_shift

  OPENSSL_sk_pop

  OPENSSL_sk_set_cmp_func

  CRYPTO_THREAD_lock_new

  CRYPTO_THREAD_lock_free

  CRYPTO_get_ex_new_index

  CRYPTO_THREAD_run_once

  BIO_s_file

  EVP_PKEY_id

  OPENSSL_LH_new

  OPENSSL_LH_free

  OPENSSL_LH_insert

  OPENSSL_LH_retrieve

  X509_STORE_new

  X509_STORE_free

  X509_STORE_up_ref

  X509_STORE_CTX_new

  X509_STORE_CTX_free

  X509_STORE_CTX_init

  X509_STORE_CTX_set_verify_cb

  X509_STORE_add_cert

  X509_STORE_CTX_set_ex_data

  X509_STORE_CTX_get_error

  X509_STORE_CTX_get0_chain

  X509_STORE_CTX_get1_chain

  X509_STORE_CTX_set_flags

  X509_STORE_CTX_get0_param

  X509_STORE_CTX_set_default

  X509_STORE_CTX_set0_dane

  X509_VERIFY_PARAM_set1

  X509_VERIFY_PARAM_set_auth_level

  X509_VERIFY_PARAM_move_peername

  X509_verify_cert_error_string

  X509_NAME_dup

  i2d_X509_NAME

  X509_get_subject_name

  X509_up_ref

  X509_chain_up_ref

  X509_cmp

  X509_NAME_hash

  X509_verify_cert

  PEM_read_bio_X509

  X509_get_extension_flags

  OPENSSL_sk_new

  OPENSSL_sk_insert

  OPENSSL_sk_delete

  OPENSSL_sk_dup

  OPENSSL_sk_sort

  CRYPTO_mem_ctrl

  OBJ_nid2sn

  COMP_get_type

  COMP_get_name

  COMP_zlib

  EVP_enc_null

  EVP_get_cipherbyname

  EVP_get_digestbyname

  EVP_PKEY_asn1_find_str

  EVP_PKEY_asn1_get0_info

  ENGINE_finish

  CONF_parse_list

  DH_free

  OBJ_sn2nid

  EC_curve_nist2nid

  EC_KEY_new_by_curve_name

  EC_KEY_free

  X509_STORE_load_locations

  PEM_read_bio_DHparams

  ERR_func_error_string

  ERR_load_strings_const

  OPENSSL_init_crypto

  OPENSSL_atexit

  err_free_strings_int

  OBJ_NAME_add

  EVP_md5_sha1

  EVP_sha224

  EVP_sha384

  EVP_sha512

  EVP_des_cbc

  EVP_des_ede3_cbc

  EVP_rc4

  EVP_rc4_hmac_md5

  EVP_idea_cbc

  EVP_rc2_cbc

  EVP_rc2_40_cbc

  EVP_aes_128_cbc

  EVP_aes_128_ccm

  EVP_aes_128_gcm

  EVP_aes_192_cbc

  EVP_aes_256_cbc

  EVP_aes_256_ccm

  EVP_aes_256_gcm

  EVP_aes_128_cbc_hmac_sha1

  EVP_aes_256_cbc_hmac_sha1

  EVP_aes_128_cbc_hmac_sha256

  EVP_aes_256_cbc_hmac_sha256

  EVP_aria_128_gcm

  EVP_aria_256_gcm

  EVP_camellia_128_cbc

  EVP_camellia_256_cbc

  EVP_chacha20_poly1305

  EVP_seed_cbc

  EVP_add_cipher

  BIO_ADDR_clear

  CRYPTO_THREAD_read_lock

  CRYPTO_THREAD_write_lock

  CRYPTO_THREAD_unlock

  CRYPTO_new_ex_data

  CRYPTO_dup_ex_data

  CRYPTO_free_ex_data

  CRYPTO_set_ex_data

  CRYPTO_get_ex_data

  CRYPTO_realloc

  CRYPTO_secure_zalloc

  CRYPTO_secure_free

  BUF_MEM_free

  COMP_CTX_get_method

  BIO_int_ctrl

  BIO_pop

  BIO_free_all

  BIO_s_socket

  OPENSSL_LH_num_items

  ERR_peek_error

  OBJ_bsearch_

  EVP_CIPHER_CTX_free

  X509_STORE_add_lookup

  X509_LOOKUP_hash_dir

  X509_LOOKUP_file

  X509_LOOKUP_ctrl

  X509_STORE_set_default_paths

  X509_VERIFY_PARAM_new

  X509_VERIFY_PARAM_free

  X509_VERIFY_PARAM_inherit

  X509_VERIFY_PARAM_set_purpose

  X509_VERIFY_PARAM_set_trust

  X509_VERIFY_PARAM_set_depth

  X509_VERIFY_PARAM_set1_host

  X509_VERIFY_PARAM_add1_host

  X509_VERIFY_PARAM_set_hostflags

  X509_VERIFY_PARAM_get0_peername

  X509_VERIFY_PARAM_get_depth

  d2i_PUBKEY

  X509_EXTENSION_free

  d2i_X509

  X509_get0_pubkey

  X509_check_private_key

  X509_get_ext_d2i

  ASYNC_WAIT_CTX_new

  ASYNC_WAIT_CTX_free

  ASYNC_WAIT_CTX_get_all_fds

  ASYNC_WAIT_CTX_get_changed_fds

  ASYNC_start_job

  ASYNC_get_current_job

  CT_POLICY_EVAL_CTX_new

  CT_POLICY_EVAL_CTX_free

  CT_POLICY_EVAL_CTX_set1_cert

  CT_POLICY_EVAL_CTX_set1_issuer

  CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE

  CT_POLICY_EVAL_CTX_set_time

  SCT_LIST_free

  SCT_set_source

  SCT_get_validation_status

  SCT_LIST_validate

  o2i_SCT_LIST

  CTLOG_STORE_new

  CTLOG_STORE_free

  CTLOG_STORE_load_file

  CTLOG_STORE_load_default_file

  X509_get_key_usage

  RAND_priv_bytes

  OCSP_response_get1_basic

  OCSP_resp_count

  OCSP_resp_get0

  OCSP_SINGLERESP_get1_ext_d2i

  OCSP_BASICRESP_free

  OCSP_RESPID_free

  OCSP_RESPONSE_free

  d2i_OCSP_RESPONSE

  conf_ssl_get

  conf_ssl_name_find

  conf_ssl_get_cmd

  RSA_free

  RSA_up_ref

  RSA_flags

  d2i_RSAPrivateKey

  ERR_peek_last_error

  EVP_PKEY_assign

  EVP_PKEY_get0_RSA

  EVP_PKEY_get0_EC_KEY

  d2i_PrivateKey

  EVP_PKEY_copy_parameters

  EVP_PKEY_missing_parameters

  EVP_PKEY_cmp

  EC_KEY_can_sign

  d2i_X509_bio

  d2i_RSAPrivateKey_bio

  d2i_PrivateKey_bio

  X509_get_pubkey

  PEM_read_bio

  PEM_read_bio_X509_AUX

  PEM_read_bio_RSAPrivateKey

  PEM_read_bio_PrivateKey

  OPENSSL_LH_delete

  OPENSSL_LH_doall_arg

  OPENSSL_LH_get_down_load

  OPENSSL_LH_set_down_load

  PEM_ASN1_read_bio

  PEM_ASN1_write_bio

  PEM_ASN1_read

  PEM_ASN1_write

  ENGINE_get_ssl_client_cert_function

  ENGINE_init

  BIO_puts

  BIO_dump_indent

  BIO_printf

  EVP_DigestSignInit

  EVP_PKEY_new_raw_private_key

  EVP_PKEY_set1_tls_encodedpoint

  EVP_PKEY_get1_tls_encodedpoint

  i2d_X509_EXTENSIONS

  i2d_OCSP_RESPID

  EVP_DigestSign

  d2i_X509_EXTENSIONS

  d2i_OCSP_RESPID

  BUF_MEM_new

  BUF_MEM_grow_clean

  BN_is_zero

  BN_num_bits

  BN_bin2bn

  BN_bn2bin

  BN_free

  RSA_pkey_ctx_ctrl

  DH_new

  DH_security_bits

  DH_check_params

  DH_set0_pqg

  DH_get0_key

  DH_set0_key

  EVP_Digest

  EVP_DigestInit

  EVP_DigestVerify

  EVP_DigestVerifyInit

  EVP_PKEY_size

  EVP_PKEY_get0_DH

  EVP_PKEY_encrypt_init

  EVP_PKEY_encrypt

  ENGINE_load_ssl_client_cert

  BUF_reverse

  EVP_DigestVerifyFinal

  d2i_X509_NAME

  i2d_X509

  X509_NAME_cmp

  ASN1_ANY_it

  BN_ucmp

  ASN1_TYPE_get

  RSA_size

  RSA_private_decrypt

  DH_get0_pqg

  EVP_EncryptInit_ex

  EVP_EncryptUpdate

  EVP_EncryptFinal

  EVP_PKEY_decrypt_init

  EVP_PKEY_decrypt

  HMAC_CTX_new

  HMAC_CTX_free

  HMAC_Init_ex

  HMAC_Update

  HMAC_Final

  EVP_PKEY_new_mac_key

  BN_new

  BN_set_word

  BN_get_rfc3526_prime_3072

  BN_get_rfc3526_prime_8192

  OBJ_ln2nid

  EVP_DecryptInit_ex

  EVP_DecryptUpdate

  EVP_DecryptFinal

  EVP_PKEY_get0

  EVP_PKEY_get_default_digest_nid

  HMAC_size

  EC_GROUP_method_of

  EC_METHOD_get_field_type

  EC_KEY_get_conv_form

  DH_get_1024_160

  DH_get_2048_224

  X509_get_signature_info

  X509_get_signature_nid

  X509_get_issuer_name

  X509_chain_check_suiteb

  ERR_set_mark

  ERR_pop_to_mark

  BN_clear_free

  BN_copy

  BN_dup

  SRP_create_verifier_BN

  SRP_check_known_gN_param

  SRP_get_default_gN

  SRP_Calc_server_key

  SRP_Calc_B

  SRP_Verify_A_mod_N

  SRP_Calc_u

  SRP_Calc_x

  SRP_Calc_A

  SRP_Calc_client_key

  SRP_Verify_B_mod_N

  BIO_ADDR_free

  BIO_ADDR_new

  BIO_read

  BIO_test_flags

  ERR_put_error

  BIO_copy_next_retry

  BIO_f_buffer

  BIO_s_connect

  BIO_set_retry_reason

  BIO_get_retry_reason

  BIO_set_next

  BIO_next

  BIO_find_type

  BIO_push

  BIO_callback_ctrl

  BIO_ctrl

  BIO_write

  BIO_up_ref

  BIO_get_shutdown

  BIO_set_shutdown

  BIO_get_init

  BIO_set_init

  BIO_get_data

  BIO_set_data

  BIO_free

  BIO_new

  BIO_method_type

  BIO_clear_flags

  BIO_set_flags

  CRYPTO_free

  EVP_add_digest

  CRYPTO_zalloc

  msvcrt

  _iob

  malloc

  free

  _XcptFilter

  _initterm

  _amsg_exit

  _wstat

  _stat

  _fstat

  memchr

  sprintf

  _strnicmp

  _stricmp

  atoi

  _errno

  qsort

  memmove

  strncmp

  strchr

  memset

  memcpy

  time

  kernel32

  SetLastError

  GetSystemTime

  SystemTimeToFileTime

  GetLastError

  RtlUnwind

  InterlockedExchange

  Sleep

  InterlockedCompareExchange

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  QueryPerformanceCounter

  GetTickCount

  GetCurrentThreadId

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  Exports

  Exports

  BIO_f_ssl

  BIO_new_buffer_ssl_connect

  BIO_new_ssl

  BIO_new_ssl_connect

  BIO_ssl_copy_session_id

  BIO_ssl_shutdown

  DTLS_client_method

  DTLS_get_data_mtu

  DTLS_method

  DTLS_server_method

  DTLS_set_timer_cb

  DTLSv1_2_client_method

  DTLSv1_2_method

  DTLSv1_2_server_method

  DTLSv1_client_method

  DTLSv1_listen

  DTLSv1_method

  DTLSv1_server_method

  ERR_load_SSL_strings

  OPENSSL_cipher_name

  OPENSSL_init_ssl

  PEM_read_SSL_SESSION

  PEM_read_bio_SSL_SESSION

  PEM_write_SSL_SESSION

  PEM_write_bio_SSL_SESSION

  SRP_Calc_A_param

  SSL_CIPHER_description

  SSL_CIPHER_find

  SSL_CIPHER_get_auth_nid

  SSL_CIPHER_get_bits

  SSL_CIPHER_get_cipher_nid

  SSL_CIPHER_get_digest_nid

  SSL_CIPHER_get_handshake_digest

  SSL_CIPHER_get_id

  SSL_CIPHER_get_kx_nid

  SSL_CIPHER_get_name

  SSL_CIPHER_get_protocol_id

  SSL_CIPHER_get_version

  SSL_CIPHER_is_aead

  SSL_CIPHER_standard_name

  SSL_COMP_add_compression_method

  SSL_COMP_get0_name

  SSL_COMP_get_compression_methods

  SSL_COMP_get_id

  SSL_COMP_get_name

  SSL_COMP_set0_compression_methods

  SSL_CONF_CTX_clear_flags

  SSL_CONF_CTX_finish

  SSL_CONF_CTX_free

  SSL_CONF_CTX_new

  SSL_CONF_CTX_set1_prefix

  SSL_CONF_CTX_set_flags

  SSL_CONF_CTX_set_ssl

  SSL_CONF_CTX_set_ssl_ctx

  SSL_CONF_cmd

  SSL_CONF_cmd_argv

  SSL_CONF_cmd_value_type

  SSL_CTX_SRP_CTX_free

  SSL_CTX_SRP_CTX_init

  SSL_CTX_add1_to_CA_list

  SSL_CTX_add_client_CA

  SSL_CTX_add_client_custom_ext

  SSL_CTX_add_custom_ext

  SSL_CTX_add_server_custom_ext

  SSL_CTX_add_session

  SSL_CTX_callback_ctrl

  SSL_CTX_check_private_key

  SSL_CTX_clear_options

  SSL_CTX_config

  SSL_CTX_ct_is_enabled

  SSL_CTX_ctrl

  SSL_CTX_dane_clear_flags

  SSL_CTX_dane_enable

  SSL_CTX_dane_mtype_set

  SSL_CTX_dane_set_flags

  SSL_CTX_enable_ct

  SSL_CTX_flush_sessions

  SSL_CTX_free

  SSL_CTX_get0_CA_list

  SSL_CTX_get0_certificate

  SSL_CTX_get0_ctlog_store

  SSL_CTX_get0_param

  SSL_CTX_get0_privatekey

  SSL_CTX_get0_security_ex_data

  SSL_CTX_get_cert_store

  SSL_CTX_get_ciphers

  SSL_CTX_get_client_CA_list

  SSL_CTX_get_client_cert_cb

  SSL_CTX_get_default_passwd_cb

  SSL_CTX_get_default_passwd_cb_userdata

  SSL_CTX_get_ex_data

  SSL_CTX_get_info_callback

  SSL_CTX_get_keylog_callback

  SSL_CTX_get_max_early_data

  SSL_CTX_get_num_tickets

  SSL_CTX_get_options

  SSL_CTX_get_quiet_shutdown

  SSL_CTX_get_record_padding_callback_arg

  SSL_CTX_get_recv_max_early_data

  SSL_CTX_get_security_callback

  SSL_CTX_get_security_level

  SSL_CTX_get_ssl_method

  SSL_CTX_get_timeout

  SSL_CTX_get_verify_callback

  SSL_CTX_get_verify_depth

  SSL_CTX_get_verify_mode

  SSL_CTX_has_client_custom_ext

  SSL_CTX_load_verify_locations

  SSL_CTX_new

  SSL_CTX_remove_session

  SSL_CTX_sess_get_get_cb

  SSL_CTX_sess_get_new_cb

  SSL_CTX_sess_get_remove_cb

  SSL_CTX_sess_set_get_cb

  SSL_CTX_sess_set_new_cb

  SSL_CTX_sess_set_remove_cb

  SSL_CTX_sessions

  SSL_CTX_set0_CA_list

  SSL_CTX_set0_ctlog_store

  SSL_CTX_set0_security_ex_data

  SSL_CTX_set1_cert_store

  SSL_CTX_set1_param

  SSL_CTX_set_allow_early_data_cb

  SSL_CTX_set_alpn_protos

  SSL_CTX_set_alpn_select_cb

  SSL_CTX_set_block_padding

  SSL_CTX_set_cert_cb

  SSL_CTX_set_cert_store

  SSL_CTX_set_cert_verify_callback

  SSL_CTX_set_cipher_list

  SSL_CTX_set_ciphersuites

  SSL_CTX_set_client_CA_list

  SSL_CTX_set_client_cert_cb

  SSL_CTX_set_client_cert_engine

  SSL_CTX_set_client_hello_cb

  SSL_CTX_set_cookie_generate_cb

  SSL_CTX_set_cookie_verify_cb

  SSL_CTX_set_ct_validation_callback

  SSL_CTX_set_ctlog_list_file

  SSL_CTX_set_default_ctlog_list_file

  SSL_CTX_set_default_passwd_cb

  SSL_CTX_set_default_passwd_cb_userdata

  SSL_CTX_set_default_read_buffer_len

  SSL_CTX_set_default_verify_dir

  SSL_CTX_set_default_verify_file

  SSL_CTX_set_default_verify_paths

  SSL_CTX_set_ex_data

  SSL_CTX_set_generate_session_id

  SSL_CTX_set_info_callback

  SSL_CTX_set_keylog_callback

  SSL_CTX_set_max_early_data

  SSL_CTX_set_msg_callback

  SSL_CTX_set_next_proto_select_cb

  SSL_CTX_set_next_protos_advertised_cb

  SSL_CTX_set_not_resumable_session_callback

  SSL_CTX_set_num_tickets

  SSL_CTX_set_options

  SSL_CTX_set_post_handshake_auth

  SSL_CTX_set_psk_client_callback

  SSL_CTX_set_psk_find_session_callback

  SSL_CTX_set_psk_server_callback

  SSL_CTX_set_psk_use_session_callback

  SSL_CTX_set_purpose

  SSL_CTX_set_quiet_shutdown

  SSL_CTX_set_record_padding_callback

  SSL_CTX_set_record_padding_callback_arg

  SSL_CTX_set_recv_max_early_data

  SSL_CTX_set_security_callback

  SSL_CTX_set_security_level

  SSL_CTX_set_session_id_context

  SSL_CTX_set_session_ticket_cb

  SSL_CTX_set_srp_cb_arg

  SSL_CTX_set_srp_client_pwd_callback

  SSL_CTX_set_srp_password

  SSL_CTX_set_srp_strength

  SSL_CTX_set_srp_username

  SSL_CTX_set_srp_username_callback

  SSL_CTX_set_srp_verify_param_callback

  SSL_CTX_set_ssl_version

  SSL_CTX_set_stateless_cookie_generate_cb

  SSL_CTX_set_stateless_cookie_verify_cb

  SSL_CTX_set_timeout

  SSL_CTX_set_tlsext_max_fragment_length

  SSL_CTX_set_tlsext_use_srtp

  SSL_CTX_set_tmp_dh_callback

  SSL_CTX_set_trust

  SSL_CTX_set_verify

  SSL_CTX_set_verify_depth

  SSL_CTX_up_ref

  SSL_CTX_use_PrivateKey

  SSL_CTX_use_PrivateKey_ASN1

  SSL_CTX_use_PrivateKey_file

  SSL_CTX_use_RSAPrivateKey

  SSL_CTX_use_RSAPrivateKey_ASN1

  SSL_CTX_use_RSAPrivateKey_file

  SSL_CTX_use_cert_and_key

  SSL_CTX_use_certificate

  SSL_CTX_use_certificate_ASN1

  SSL_CTX_use_certificate_chain_file

  SSL_CTX_use_certificate_file

  SSL_CTX_use_psk_identity_hint

  SSL_CTX_use_serverinfo

  SSL_CTX_use_serverinfo_ex

  SSL_CTX_use_serverinfo_file

  SSL_SESSION_dup

  SSL_SESSION_free

  SSL_SESSION_get0_alpn_selected

  SSL_SESSION_get0_cipher

  SSL_SESSION_get0_hostname

  SSL_SESSION_get0_id_context

  SSL_SESSION_get0_peer

  SSL_SESSION_get0_ticket

  SSL_SESSION_get0_ticket_appdata

  SSL_SESSION_get_compress_id

  SSL_SESSION_get_ex_data

  SSL_SESSION_get_id

  SSL_SESSION_get_master_key

  SSL_SESSION_get_max_early_data

  SSL_SESSION_get_max_fragment_length

  SSL_SESSION_get_protocol_version

  SSL_SESSION_get_ticket_lifetime_hint

  SSL_SESSION_get_time

  SSL_SESSION_get_timeout

  SSL_SESSION_has_ticket

  SSL_SESSION_is_resumable

  SSL_SESSION_new

  SSL_SESSION_print

  SSL_SESSION_print_fp

  SSL_SESSION_print_keylog

  SSL_SESSION_set1_alpn_selected

  SSL_SESSION_set1_hostname

  SSL_SESSION_set1_id

  SSL_SESSION_set1_id_context

  SSL_SESSION_set1_master_key

  SSL_SESSION_set1_ticket_appdata

  SSL_SESSION_set_cipher

  SSL_SESSION_set_ex_data

  SSL_SESSION_set_max_early_data

  SSL_SESSION_set_protocol_version

  SSL_SESSION_set_time

  SSL_SESSION_set_timeout

  SSL_SESSION_up_ref

  SSL_SRP_CTX_free

  SSL_SRP_CTX_init

  SSL_accept

  SSL_add1_host

  SSL_add1_to_CA_list

  SSL_add_client_CA

  SSL_add_dir_cert_subjects_to_stack

  SSL_add_file_cert_subjects_to_stack

  SSL_add_ssl_module

  SSL_alert_desc_string

  SSL_alert_desc_string_long

  SSL_alert_type_string

  SSL_alert_type_string_long

  SSL_alloc_buffers

  SSL_bytes_to_cipher_list

  SSL_callback_ctrl

  SSL_certs_clear

  SSL_check_chain

  SSL_check_private_key

  SSL_clear

  SSL_clear_options

  SSL_client_hello_get0_ciphers

  SSL_client_hello_get0_compression_methods

  SSL_client_hello_get0_ext

  SSL_client_hello_get0_legacy_version

  SSL_client_hello_get0_random

  SSL_client_hello_get0_session_id

  SSL_client_hello_get1_extensions_present

  SSL_client_hello_isv2

  SSL_client_version

  SSL_config

  SSL_connect

  SSL_copy_session_id

  SSL_ct_is_enabled

  SSL_ctrl

  SSL_dane_clear_flags

  SSL_dane_enable

  SSL_dane_set_flags

  SSL_dane_tlsa_add

  SSL_do_handshake

  SSL_dup

  SSL_dup_CA_list

  SSL_enable_ct

  SSL_export_keying_material

  SSL_export_keying_material_early

  SSL_extension_supported

  SSL_free

  SSL_free_buffers

  SSL_get0_CA_list

  SSL_get0_alpn_selected

  SSL_get0_dane

  SSL_get0_dane_authority

  SSL_get0_dane_tlsa

  SSL_get0_next_proto_negotiated

  SSL_get0_param

  SSL_get0_peer_CA_list

  SSL_get0_peer_scts

  SSL_get0_peername

  SSL_get0_security_ex_data

  SSL_get0_verified_chain

  SSL_get1_session

  SSL_get1_supported_ciphers

  SSL_get_SSL_CTX

  SSL_get_all_async_fds

  SSL_get_certificate

  SSL_get_changed_async_fds

  SSL_get_cipher_list

  SSL_get_ciphers

  SSL_get_client_CA_list

  SSL_get_client_ciphers

  SSL_get_client_random

  SSL_get_current_cipher

  SSL_get_current_compression

  SSL_get_current_expansion

  SSL_get_default_passwd_cb

  SSL_get_default_passwd_cb_userdata

  SSL_get_default_timeout

  SSL_get_early_data_status

  SSL_get_error

  SSL_get_ex_data

  SSL_get_ex_data_X509_STORE_CTX_idx

  SSL_get_fd

  SSL_get_finished

  SSL_get_info_callback

  SSL_get_key_update_type

  SSL_get_max_early_data

  SSL_get_num_tickets

  SSL_get_options

  SSL_get_peer_cert_chain

  SSL_get_peer_certificate

  SSL_get_peer_finished

  SSL_get_peer_signature_type_nid

  SSL_get_pending_cipher

  SSL_get_privatekey

  SSL_get_psk_identity

  SSL_get_psk_identity_hint

  SSL_get_quiet_shutdown

  SSL_get_rbio

  SSL_get_read_ahead

  SSL_get_record_padding_callback_arg

  SSL_get_recv_max_early_data

  SSL_get_rfd

  SSL_get_security_callback

  SSL_get_security_level

  SSL_get_selected_srtp_profile

  SSL_get_server_random

  SSL_get_servername

  SSL_get_servername_type

  SSL_get_session

  SSL_get_shared_ciphers

  SSL_get_shared_sigalgs

  SSL_get_shutdown

  SSL_get_sigalgs

  SSL_get_signature_type_nid

  SSL_get_srp_N

  SSL_get_srp_g

  SSL_get_srp_userinfo

  SSL_get_srp_username

  SSL_get_srtp_profiles

  SSL_get_ssl_method

  SSL_get_state

  SSL_get_verify_callback

  SSL_get_verify_depth

  SSL_get_verify_mode

  SSL_get_verify_result

  SSL_get_version

  SSL_get_wbio

  SSL_get_wfd

  SSL_has_matching_session_id

  SSL_has_pending

  SSL_in_before

  SSL_in_init

  SSL_is_dtls

  SSL_is_init_finished

  SSL_is_server

  SSL_key_update

  SSL_load_client_CA_file

  SSL_new

  SSL_peek

  SSL_peek_ex

  SSL_pending

  SSL_read

  SSL_read_early_data

  SSL_read_ex

  SSL_renegotiate

  SSL_renegotiate_abbreviated

  SSL_renegotiate_pending

  SSL_rstate_string

  SSL_rstate_string_long

  SSL_select_next_proto

  SSL_session_reused

  SSL_set0_CA_list

  SSL_set0_rbio

  SSL_set0_security_ex_data

  SSL_set0_wbio

  SSL_set1_host

  SSL_set1_param

  SSL_set_SSL_CTX

  SSL_set_accept_state

  SSL_set_allow_early_data_cb

  SSL_set_alpn_protos

  SSL_set_bio

  SSL_set_block_padding

  SSL_set_cert_cb

  SSL_set_cipher_list

  SSL_set_ciphersuites

  SSL_set_client_CA_list

  SSL_set_connect_state

  SSL_set_ct_validation_callback

  SSL_set_debug

  SSL_set_default_passwd_cb

  SSL_set_default_passwd_cb_userdata

  SSL_set_default_read_buffer_len

  SSL_set_ex_data

  SSL_set_fd

  SSL_set_generate_session_id

  SSL_set_hostflags

  SSL_set_info_callback

  SSL_set_max_early_data

  SSL_set_msg_callback

  SSL_set_not_resumable_session_callback

  SSL_set_num_tickets

  SSL_set_options

  SSL_set_post_handshake_auth

  SSL_set_psk_client_callback

  SSL_set_psk_find_session_callback

  SSL_set_psk_server_callback

  SSL_set_psk_use_session_callback

  SSL_set_purpose

  SSL_set_quiet_shutdown

  SSL_set_read_ahead

  SSL_set_record_padding_callback

  SSL_set_record_padding_callback_arg

  SSL_set_recv_max_early_data

  SSL_set_rfd

  SSL_set_security_callback

  SSL_set_security_level

  SSL_set_session

  SSL_set_session_id_context

  SSL_set_session_secret_cb

  SSL_set_session_ticket_ext

  SSL_set_session_ticket_ext_cb

  SSL_set_shutdown

  SSL_set_srp_server_param

  SSL_set_srp_server_param_pw

  SSL_set_ssl_method

  SSL_set_tlsext_max_fragment_length

  SSL_set_tlsext_use_srtp

  SSL_set_tmp_dh_callback

  SSL_set_trust

  SSL_set_verify

  SSL_set_verify_depth

  SSL_set_verify_result

  SSL_set_wfd

  SSL_shutdown

  SSL_srp_server_param_with_username

  SSL_state_string

  SSL_state_string_long

  SSL_stateless

  SSL_up_ref

  SSL_use_PrivateKey

  SSL_use_PrivateKey_ASN1

  SSL_use_PrivateKey_file

  SSL_use_RSAPrivateKey

  SSL_use_RSAPrivateKey_ASN1

  SSL_use_RSAPrivateKey_file

  SSL_use_cert_and_key

  SSL_use_certificate

  SSL_use_certificate_ASN1

  SSL_use_certificate_chain_file

  SSL_use_certificate_file

  SSL_use_psk_identity_hint

  SSL_verify_client_post_handshake

  SSL_version

  SSL_waiting_for_async

  SSL_want

  SSL_write

  SSL_write_early_data

  SSL_write_ex

  TLS_client_method

  TLS_method

  TLS_server_method

  TLSv1_1_client_method

  TLSv1_1_method

  TLSv1_1_server_method

  TLSv1_2_client_method

  TLSv1_2_method

  TLSv1_2_server_method

  TLSv1_client_method

  TLSv1_method

  TLSv1_server_method

  __acrt_iob_func

  _fstat32

  _stat32

  _wstat32

  d2i_SSL_SESSION

  i2d_SSL_SESSION

  Sections

  .text

  Size: 248KB - Virtual size: 248KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 84KB - Virtual size: 84KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 952B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• App/IDM/scheduler.chm

  .chm
• App/IDM/tut.chm

  .chm
• App/IDM/tutor.chm

  .chm
• App/Version.ini
• Download Latest Cracks and Apps from CracksHash.com.url

  .url
• Downloaded from CracksHash.com.txt
• InternetDownloadManagerPortable.exe

  .exe windows x86

  57e98d9a5a72c8d7ad8fb7a6a58b3daf

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  SetEnvironmentVariableA

  CreateFileA

  GetFileSize

  GetModuleFileNameA

  ReadFile

  GetCurrentProcess

  CopyFileA

  Sleep

  GetTickCount

  GetWindowsDirectoryA

  GetTempPathA

  GetCommandLineA

  lstrlenA

  GetVersion

  SetErrorMode

  lstrcpynA

  ExitProcess

  SetCurrentDirectoryA

  GlobalLock

  CreateThread

  GetLastError

  CreateDirectoryA

  CreateProcessA

  RemoveDirectoryA

  GetTempFileNameA

  WriteFile

  lstrcpyA

  MoveFileExA

  lstrcatA

  GetSystemDirectoryA

  GetProcAddress

  GetExitCodeProcess

  WaitForSingleObject

  CompareFileTime

  SetFileAttributesA

  GetFileAttributesA

  GetShortPathNameA

  MoveFileA

  GetFullPathNameA

  SetFileTime

  SearchPathA

  CloseHandle

  lstrcmpiA

  GlobalUnlock

  GetDiskFreeSpaceA

  lstrcmpA

  FindFirstFileA

  FindNextFileA

  DeleteFileA

  SetFilePointer

  GetPrivateProfileStringA

  FindClose

  MultiByteToWideChar

  FreeLibrary

  MulDiv

  WritePrivateProfileStringA

  LoadLibraryExA

  GetModuleHandleA

  GlobalAlloc

  GlobalFree

  ExpandEnvironmentStringsA

  user32

  ScreenToClient

  GetSystemMenu

  SetClassLongA

  IsWindowEnabled

  SetWindowPos

  GetSysColor

  GetWindowLongA

  SetCursor

  LoadCursorA

  CheckDlgButton

  GetMessagePos

  LoadBitmapA

  CallWindowProcA

  IsWindowVisible

  CloseClipboard

  SetClipboardData

  EmptyClipboard

  PostQuitMessage

  GetWindowRect

  EnableMenuItem

  CreatePopupMenu

  GetSystemMetrics

  SetDlgItemTextA

  GetDlgItemTextA

  MessageBoxIndirectA

  CharPrevA

  DispatchMessageA

  PeekMessageA

  ReleaseDC

  EnableWindow

  InvalidateRect

  SendMessageA

  DefWindowProcA

  BeginPaint

  GetClientRect

  FillRect

  DrawTextA

  EndDialog

  RegisterClassA

  SystemParametersInfoA

  CreateWindowExA

  GetClassInfoA

  DialogBoxParamA

  CharNextA

  ExitWindowsEx

  GetDC

  CreateDialogParamA

  SetTimer

  GetDlgItem

  SetWindowLongA

  SetForegroundWindow

  LoadImageA

  IsWindow

  SendMessageTimeoutA

  FindWindowExA

  OpenClipboard

  TrackPopupMenu

  AppendMenuA

  EndPaint

  DestroyWindow

  wsprintfA

  ShowWindow

  SetWindowTextA

  gdi32

  SelectObject

  SetBkMode

  CreateFontIndirectA

  SetTextColor

  DeleteObject

  GetDeviceCaps

  CreateBrushIndirect

  SetBkColor

  shell32

  SHGetSpecialFolderLocation

  ShellExecuteExA

  SHGetPathFromIDListA

  SHBrowseForFolderA

  SHGetFileInfoA

  SHFileOperationA

  advapi32

  AdjustTokenPrivileges

  RegCreateKeyExA

  RegOpenKeyExA

  SetFileSecurityA

  OpenProcessToken

  LookupPrivilegeValueA

  RegEnumValueA

  RegDeleteKeyA

  RegDeleteValueA

  RegCloseKey

  RegSetValueExA

  RegQueryValueExA

  RegEnumKeyA

  comctl32

  ImageList_Create

  ImageList_AddMasked

  ImageList_Destroy

  ord17

  ole32

  OleUninitialize

  OleInitialize

  CoTaskMemFree

  CoCreateInstance

  Sections

  .text

  Size: 24KB - Virtual size: 24KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 106KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .ndata

  Size: - Virtual size: 36KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 18KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ