archive-1[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

archive-1.zip
Size

25.5MB
MD5

b53cd93181951772aac70f76d0f42942
SHA1

a34003a102fc18771baad85dedbfeaefc985dea8
SHA256

a586902577d6776bb72ea270c46d556cdb461fcb81d00ed5009b783d789b3d7a
SHA512

a80e2755f77cb3ac262c06c209fb4775c70f1b37824edf9eb173d30139c479caeff726fe426494bb8bfa742e475392ee5b1700c916f73e14c7f7a8e13cb5c33d
SSDEEP

786432:K55Z2nxD0p+UUzrV53d1KYe9FeMCaUqsA:K5b2x0pLcr3d1KYemx7A

Score

N/A

Malware Config

Signatures

Files

archive-1.zip
.zip
Automation\Simatic OAM\CP1612A2\RtNicprop.DLL
.dll windows x64

285e1ce9d547b7c52b79b5f9da3ebf38

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

94:48:4a:2f:31:36:73:0f:fd:30:a6:0a:76:fd:51:6c:06:66:75:79:34:15:98:76:21:92:8e:d0:4c:8d:53:33
Signer

Actual PE Digest

94:48:4a:2f:31:36:73:0f:fd:30:a6:0a:76:fd:51:6c:06:66:75:79:34:15:98:76:21:92:8e:d0:4c:8d:53:33

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comctl32

CreatePropertySheetPageW
DestroyPropertySheetPage

kernel32

GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleA
ExitProcess
FlsGetValue
TlsFree
FlsFree
SetLastError
GetLastError
TlsSetValue
FlsAlloc
Sleep
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
RtlUnwindEx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

RTNicPropPageProvider

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\CP1612A2\cp1612a2_v64.cat
Automation\Simatic OAM\CP1612A2\cp1612a2_v64.inf
Automation\Simatic OAM\CP1612A2\cp1612a2_v64.sys
.exe windows x64

2d473476fa449dadd96b2cc00a664f39

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 1,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a1:c5:34:0e:57:a9:d7:ee:73:96:05:69:3e:60:5e:5b:6b:d0:94:85:83:58:7c:51:8e:28:6a:b7:9b:1c:34:e4
Signer

Actual PE Digest

a1:c5:34:0e:57:a9:d7:ee:73:96:05:69:3e:60:5e:5b:6b:d0:94:85:83:58:7c:51:8e:28:6a:b7:9b:1c:34:e4

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

25/07/2016, 12:05
Valid: false

a5:6b:2c:b0:3d:bd:5d:a9:1a:ca:f4:1b:f6:7d:b5:52:7d:34:ff:6a
Signer

Actual PE Digest

a5:6b:2c:b0:3d:bd:5d:a9:1a:ca:f4:1b:f6:7d:b5:52:7d:34:ff:6a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

25/07/2016, 12:05
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeBugCheckEx
KeSetEvent
MmMapLockedPagesSpecifyCache
ExInterlockedInsertHeadList
ExEventObjectType
ObReferenceObjectByHandle
ExpInterlockedPopEntrySList
ExInitializeNPagedLookasideList
RtlEqualUnicodeString
ExDeleteNPagedLookasideList
ExQueryDepthSList
ExpInterlockedPushEntrySList
ObfDereferenceObject
KeReleaseSpinLockFromDpcLevel
KeReleaseSpinLock
KeAcquireSpinLockAtDpcLevel
KeAcquireSpinLockRaiseToDpc

hal

KeStallExecutionProcessor

ndis.sys

NdisMIndicateReceiveNetBufferLists
NdisMAllocateNetBufferSGList
NdisMFreeNetBufferSGList
NdisMIndicateStatusEx
NdisFreeNetBufferList
NdisAllocateNetBufferAndNetBufferList
NdisAllocateNetBufferListPool
NdisMResetComplete
NdisMAllocateSharedMemory
NdisMGetDmaAlignment
NdisMRegisterScatterGatherDma
NdisGroupMaxProcessorCount
NdisGetProcessorInformation
NdisCloseConfiguration
NdisReadNetworkAddress
NdisReadConfiguration
NdisAllocateMdl
NdisMRemoveMiniport
NdisMRegisterMiniportDriver
NdisSetOptionalHandlers
NdisWriteErrorLogEntry
NdisMSetMiniportAttributes
NdisMRegisterIoPortRange
NdisMMapIoSpace
NdisMGetBusData
NdisMRegisterInterruptEx
NdisAllocateTimerObject
NdisSetTimerObject
NdisCancelTimerObject
NdisWaitEvent
NdisFreeTimerObject
NdisMDeregisterInterruptEx
NdisMOidRequestComplete
NdisMPauseComplete
NdisMSendNetBufferListsComplete
NdisMSetBusData
NdisMQueueDpcEx
NdisMSynchronizeWithInterruptEx
NdisSetEvent
NdisMDeregisterMiniportDriver
NdisAllocateMemoryWithTagPriority
NdisInitializeEvent
NdisMUnmapIoSpace
NdisMDeregisterIoPortRange
NdisMFreeSharedMemory
NdisFreeNetBufferListPool
NdisFreeMdl
NdisMDeregisterScatterGatherDma
NdisFreeMemory
NdisOpenConfigurationEx

Sections

.text
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\CP1612A2\inst_cp1612a2.exe
.exe windows x64

17cc317552ea8a8e72e72c3bcffecbbf

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

59:71:5b:14:86:68:e8:a3:9d:dd:b3:41:cd:af:a5:ec:46:c5:24:e8:a5:d5:c2:bb:96:9d:5c:74:8b:31:b9:12
Signer

Actual PE Digest

59:71:5b:14:86:68:e8:a3:9d:dd:b3:41:cd:af:a5:ec:46:c5:24:e8:a5:d5:c2:bb:96:9d:5c:74:8b:31:b9:12

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:50
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

newdev

UpdateDriverForPlugAndPlayDevicesA

setupapi

SetupCopyOEMInfA

kernel32

GetProcAddress
GetModuleFileNameA
GetLastError
OutputDebugStringA
GetVersionExA
GetCurrentThreadId
GetSystemTimeAsFileTime
DecodePointer
GetModuleHandleA
GetCurrentProcessId
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter

advapi32

RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCloseKey

msvcr110

__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
_XcptFilter
strstr
_amsg_exit
memset
__set_app_type
exit
_exit
_cexit
_ismbblead
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
__C_specific_handler
_acmdln
_fmode
_commode
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
sprintf
_stricmp
??3@YAXPEAX@Z
__crtGetShowWindowMode
__getmainargs

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\Cp5613_wdm.sys
.exe windows x64

af0b082c14444a5aa38d59b05eb62df5

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

39:9d:cc:ba:df:3c:2c:fe:42:e1:f9:79:c6:a2:d4:f1
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

01/02/2018, 00:00

Not After

01/04/2020, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden-Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:9d:cc:ba:df:3c:2c:fe:42:e1:f9:79:c6:a2:d4:f1
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

01/02/2018, 00:00

Not After

01/04/2020, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden-Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cb:ea:a3:3d:14:f4:d2:58:80:21:8d:25:24:fb:5d:43:5d:d1:74:4d:e0:fb:93:f9:09:91:1d:83:89:f8:bf:01
Signer

Actual PE Digest

cb:ea:a3:3d:14:f4:d2:58:80:21:8d:25:24:fb:5d:43:5d:d1:74:4d:e0:fb:93:f9:09:91:1d:83:89:f8:bf:01

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden-Württemberg,C=DE

12/09/2019, 06:28
Valid: false

93:20:1b:1a:88:ae:49:8e:80:dd:76:32:26:9b:52:2e:b4:ea:27:dd
Signer

Actual PE Digest

93:20:1b:1a:88:ae:49:8e:80:dd:76:32:26:9b:52:2e:b4:ea:27:dd

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden-Württemberg,C=DE

12/09/2019, 06:28
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeInitializeDpc
KeInitializeSemaphore
KeReleaseSemaphore
KeInitializeTimer
KeCancelTimer
KeSetTimerEx
KeWaitForSingleObject
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
MmGetSystemRoutineAddress
MmUnmapLockedPages
IofCallDriver
IofCompleteRequest
IoCreateDevice
IoDeleteDevice
IoFreeMdl
IoInitializeTimer
IoStartTimer
IoStopTimer
IoWMIRegistrationControl
ObReferenceObjectByHandle
ObfDereferenceObject
_stricmp
MmBuildMdlForNonPagedPool
MmMapLockedPagesSpecifyCache
IoAllocateMdl
PoRegisterSystemState
PoUnregisterSystemState
ZwClose
__C_specific_handler
KeInsertQueueDpc
RtlCompareMemory
KeRemoveQueueDpc
KeSetEvent
KeDelayExecutionThread
IoConnectInterruptEx
IoDisconnectInterruptEx
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
KeInitializeEvent
ExAllocatePoolWithTagPriority
ExFreePool
MmMapIoSpace
MmUnmapIoSpace
IoAttachDeviceToDeviceStack
IoDetachDevice
IoGetDeviceProperty
IoRegisterDeviceInterface
IoOpenDeviceInterfaceRegistryKey
IoSetDeviceInterfaceState
PoSetPowerState
ZwSetValueKey
RtlWriteRegistryValue
ZwCreateKey
RtlIsNtDdiVersionAvailable
PoRequestPowerIrp
PoCallDriver
PoStartNextPowerIrp
IoAllocateErrorLogEntry
IoWriteErrorLogEntry
_vsnprintf
KeBugCheckEx
KeReadStateSemaphore
RtlInitUnicodeString

hal

KeQueryPerformanceCounter

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\EPROM\s7otmcd4x64.cat
Automation\Simatic OAM\Drivers\EPROM\s7otmcd4x64.inf
Automation\Simatic OAM\Drivers\EPROM\s7otmcd4x64.sys
.dll windows x64

f0ca69916141f9e35b5c73eb5943e9ec

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:ca:31:9b:ee:84:92:08:4c:9c:a2:73:74:8b:f3:5f
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06/06/2013, 00:00

Not After

05/07/2016, 23:59

Subject

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

57:fb:c1:fe:e7:49:aa:2b:ae:62:6f:52:14:75:9e:ad:2e:9a:d4:10
Signer

Actual PE Digest

57:fb:c1:fe:e7:49:aa:2b:ae:62:6f:52:14:75:9e:ad:2e:9a:d4:10

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

11/09/2014, 08:18
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

RtlInitUnicodeString
RtlFreeUnicodeString
DbgPrint
KeInitializeEvent
KeClearEvent
KeSetEvent
KeInitializeMutex
KeReleaseMutex
KeInitializeSemaphore
KeReadStateSemaphore
KeReleaseSemaphore
KeWaitForSingleObject
ExAllocatePoolWithTag
ExFreePool
ExInterlockedInsertHeadList
ExInterlockedInsertTailList
ExInterlockedRemoveHeadList
PsCreateSystemThread
PsTerminateSystemThread
IoAcquireCancelSpinLock
IoAttachDeviceToDeviceStack
IofCallDriver
IofCompleteRequest
IoCreateDevice
IoDeleteDevice
IoDetachDevice
IoReleaseCancelSpinLock
IoRegisterDeviceInterface
IoOpenDeviceInterfaceRegistryKey
IoSetDeviceInterfaceState
IoGetDeviceInterfaces
PoRequestPowerIrp
PoSetPowerState
PoCallDriver
PoStartNextPowerIrp
ObReferenceObjectByHandle
ObfDereferenceObject
ZwClose
ZwSetValueKey
KeBugCheckEx
RtlQueryRegistryValues
RtlUnicodeStringToInteger
RtlAppendUnicodeToString
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
ExAllocatePool
vsprintf

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\EPROM\s7otmcd64x.cat
Automation\Simatic OAM\Drivers\EPROM\s7otmcd64x.inf
Automation\Simatic OAM\Drivers\EPROM\s7otmcd64x.sys
.dll windows x64

e0eb71f4e262809fcbd70c4660c31660

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:ca:31:9b:ee:84:92:08:4c:9c:a2:73:74:8b:f3:5f
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06/06/2013, 00:00

Not After

05/07/2016, 23:59

Subject

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1f:68:d6:ee:86:3e:77:a4:9b:da:4c:c1:5e:87:3c:5b:77:48:7d:fc
Signer

Actual PE Digest

1f:68:d6:ee:86:3e:77:a4:9b:da:4c:c1:5e:87:3c:5b:77:48:7d:fc

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

27/08/2014, 11:05
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

RtlInitUnicodeString
RtlFreeUnicodeString
KeInitializeEvent
KeClearEvent
KeSetEvent
KeInitializeMutex
KeReleaseMutex
KeInitializeSemaphore
KeReadStateSemaphore
KeReleaseSemaphore
KeWaitForSingleObject
ExAllocatePoolWithTag
ExFreePool
ExInterlockedInsertHeadList
ExInterlockedInsertTailList
ExInterlockedRemoveHeadList
PsCreateSystemThread
PsTerminateSystemThread
IoAcquireCancelSpinLock
IoAttachDeviceToDeviceStack
IoBuildDeviceIoControlRequest
IofCallDriver
IofCompleteRequest
IoCreateDevice
IoDeleteDevice
IoDetachDevice
IoGetDeviceObjectPointer
IoReleaseCancelSpinLock
IoRegisterDeviceInterface
IoOpenDeviceInterfaceRegistryKey
IoSetDeviceInterfaceState
IoGetDeviceInterfaces
PoRequestPowerIrp
PoSetPowerState
PoCallDriver
PoStartNextPowerIrp
ObReferenceObjectByHandle
ObfDereferenceObject
ZwClose
ZwSetValueKey
KeBugCheckEx
RtlQueryRegistryValues
RtlUnicodeStringToInteger
RtlAppendUnicodeToString
DbgPrint
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
ExAllocatePool
vsprintf

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\S7Inst64.exe
.exe windows x64

c1a9a2b3ba26f8019743d23b0dbf2556

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

57:78:0f:a7:33:aa:20:fc:91:c3:63:b5:a4:d3:03:24:6a:5d:05:5a:56:f5:db:74:23:8f:69:42:d6:8f:bc:7c
Signer

Actual PE Digest

57:78:0f:a7:33:aa:20:fc:91:c3:63:b5:a4:d3:03:24:6a:5d:05:5a:56:f5:db:74:23:8f:69:42:d6:8f:bc:7c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

setupapi

SetupCopyOEMInfW
SetupDiSetDeviceRegistryPropertyA
SetupOpenInfFileW
SetupDiCallClassInstaller
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstallParamsW
CM_Locate_DevNodeW
SetupDiGetClassDevsW
SetupDiOpenDevRegKey
SetupFindFirstLineW
SetupDiGetINFClassW
SetupGetStringFieldW
SetupUninstallOEMInfW
SetupDiRemoveDevice
CM_Reenumerate_DevNode

newdev

DiInstallDriverW
UpdateDriverForPlugAndPlayDevicesW

kernel32

LocalFree
CreateFileA
CloseHandle
UnmapViewOfFile
QueryPerformanceCounter
WaitForSingleObject
WideCharToMultiByte
GetLastError
GetProcAddress
CreateMutexExA
LoadLibraryA
CreateFileMappingA
DeviceIoControl
QueryPerformanceFrequency
GetCurrentThreadId
ReleaseMutex
GetCurrentProcessId
OpenFileMappingA
FindFirstFileW
LoadLibraryExW
FindNextFileW
OutputDebugStringW
OutputDebugStringA
LocalAlloc
GetCurrentProcess
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
MapViewOfFile

user32

CharLowerW

advapi32

AdjustTokenPrivileges
RegSetKeySecurity
AllocateAndInitializeSid
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetSecurityDescriptorGroup
RegOpenKeyExA
LookupPrivilegeValueW
RegEnumKeyExA
RegDeleteTreeA
RegSetValueExW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegOpenKeyA
ReportEventA
DeregisterEventSource
RegQueryValueExA
RegisterEventSourceW
OpenProcessToken
FreeSid
CreateWellKnownSid
SetEntriesInAclW

shell32

CommandLineToArgvW
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA

msvcr110

?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
_initterm_e
_commode
_fmode
_wcmdln
_initterm
__crtSetUnhandledExceptionFilter
_CxxThrowException
__CxxFrameHandler3
memcpy
_strlwr_s
__setusermatherr
_configthreadlocale
_cexit
_exit
_stricmp
sprintf_s
memset
_fstat64i32
_localtime64_s
strchr
atoi
_errno
remove
fopen_s
vsprintf_s
strcpy_s
_ftime64
strftime
memcpy_s
_sopen_s
fwrite
strrchr
ftell
atol
strtoul
strcat_s
fseek
fclose
_difftime64
strncpy_s
_time64
_close
free
_wcsnicmp
_wcslwr_s
wcsstr
wcstok_s
_wcsnset_s
wcscat_s
wcscpy_s
_wcsdup
memmove
_purecall
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
_lock
_unlock
_calloc_crt
__dllonexit
__C_specific_handler
_onexit
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__wgetmainargs
__set_app_type
exit

msvcp110

?_Syserror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Winerror_map@std@@YAPEBDH@Z

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\WdfCoInstaller01007.dll
.dll windows x64

cc5018e235a4bdab3c3d361ebe86307a

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:79:3a:05:5f:a9:73:6d:40:4d:15:47:6c:d6:82:13:cd:da:1c:de:03:bb:32:81:ca:ac:79:16:52:c5:1b:12
Signer

Actual PE Digest

dc:79:3a:05:5f:a9:73:6d:40:4d:15:47:6c:d6:82:13:cd:da:1c:de:03:bb:32:81:ca:ac:79:16:52:c5:1b:12

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

memset
memcpy
__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
_ultow
malloc
_wcsnicmp
free
_wtoi
_wcsicmp
_stricmp
_vsnwprintf

setupapi

SetupCloseInfFile
CM_Set_DevNode_Problem_Ex
SetupDiGetDeviceInstallParamsW
SetupLogErrorW
SetupOpenInfFileW
SetupCloseLog
SetupDiSetDeviceInstallParamsW
SetupOpenLog
SetupFindNextMatchLineW
SetupDiGetActualSectionToInstallW
SetupDiGetSelectedDriverW
SetupGetStringFieldW
SetupPromptReboot
SetupFindFirstLineW
SetupGetLineCountW
SetupDiGetDriverInfoDetailW

kernel32

GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
Sleep
LoadLibraryExW
ExpandEnvironmentStringsW
GetFileInformationByHandle
DeleteFileW
CloseHandle
FindNextFileW
RemoveDirectoryW
LockResource
GetLocalTime
FindClose
SetLastError
CreateFileW
FileTimeToSystemTime
TerminateProcess
GetExitCodeProcess
FormatMessageW
SizeofResource
WriteFile
OutputDebugStringW
WaitForSingleObject
CreateDirectoryW
CreateProcessW
LoadResource
FindResourceW
FindFirstFileW
LoadLibraryW
WideCharToMultiByte
FreeLibrary
lstrlenA
LocalFree
GetWindowsDirectoryW
LocalAlloc
GlobalFree
GetProcAddress
VerifyVersionInfoW
GetModuleFileNameW
GetModuleHandleW
VerSetConditionMask

advapi32

RegCloseKey
DeleteService
OpenSCManagerW
QueryServiceLockStatusW
QueryServiceConfigW
UnlockServiceDatabase
ChangeServiceConfigW
LockServiceDatabase
RegSetValueExW
RegFlushKey
RegCreateKeyExW
CloseServiceHandle
RegOpenKeyExW
QueryServiceStatusEx
RegQueryValueExW
OpenServiceW

crypt32

CertGetCertificateContextProperty

wintrust

WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
WinVerifyTrust
WTHelperProvDataFromStateData

shell32

CommandLineToArgvW

user32

LoadStringW
IsCharAlphaNumericW
IsCharAlphaW

ole32

CoTaskMemFree

Exports

Exports

WdfCoInstaller
WdfPostDeviceInstall
WdfPostDeviceRemove
WdfPreDeviceInstall
WdfPreDeviceRemove

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\WdfCoInstaller01009.dll
.dll windows x64

70497fec79daa5f71de3b34faee686a5

Code Sign

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:53

Not After

16/09/2011, 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1b:ab:11:da:3a:a1:b6:df:ec:88
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

11/10/2005, 21:55

Not After

26/04/2010, 07:00

Subject

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:02:a4:e9:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Windows Verification Intermediate PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/04/2009, 05:58

Not After

26/04/2010, 07:00

Subject

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:63:99:fa:ac:b9:fc:49:f3:cf:78:bf:c3:d9:f2:f4:63:e5:01:2e
Signer

Actual PE Digest

05:63:99:fa:ac:b9:fc:49:f3:cf:78:bf:c3:d9:f2:f4:63:e5:01:2e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Component Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

14/07/2009, 21:21
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

memset
memcpy
__C_specific_handler
_amsg_exit
_initterm
_XcptFilter
_ultow
malloc
_wcsnicmp
free
_wtoi
_wcsicmp
_stricmp
_vsnwprintf

setupapi

SetupDiSetDeviceInstallParamsW
SetupCloseLog
SetupOpenInfFileW
SetupCloseInfFile
CM_Set_DevNode_Problem_Ex
SetupDiGetDeviceInstallParamsW
SetupLogErrorW
SetupOpenLog
SetupDiGetActualSectionToInstallW
SetupFindNextMatchLineW
SetupDiGetSelectedDriverW
SetupGetStringFieldW
SetupPromptReboot
SetupFindFirstLineW
SetupGetLineCountW
SetupDiGetDriverInfoDetailW

kernel32

GetModuleFileNameW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
Sleep
LoadLibraryExW
ExpandEnvironmentStringsW
GetFileInformationByHandle
DeleteFileW
CloseHandle
FindNextFileW
RemoveDirectoryW
LockResource
GetLocalTime
FindClose
SetLastError
CreateFileW
FileTimeToSystemTime
TerminateProcess
GetExitCodeProcess
FormatMessageW
SizeofResource
WriteFile
OutputDebugStringW
WaitForSingleObject
CreateDirectoryW
CreateProcessW
LoadResource
FindResourceW
FindFirstFileW
LoadLibraryW
WideCharToMultiByte
FreeLibrary
lstrlenA
LocalFree
GetWindowsDirectoryW
LocalAlloc
GlobalFree
GetProcAddress
GetLastError
VerifyVersionInfoW
GetModuleHandleW
VerSetConditionMask

advapi32

DeleteService
OpenSCManagerW
QueryServiceConfigW
ChangeServiceConfigW
RegFlushKey
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
CloseServiceHandle
QueryServiceStatusEx
RegQueryValueExW
OpenServiceW

crypt32

CertGetCertificateContextProperty

wintrust

WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
WinVerifyTrust
WTHelperProvDataFromStateData

shell32

CommandLineToArgvW

user32

LoadStringW
IsCharAlphaNumericW
IsCharAlphaW

ole32

CoTaskMemFree

Exports

Exports

WdfCoInstaller
WdfPostDeviceInstall
WdfPostDeviceRemove
WdfPreDeviceInstall
WdfPreDeviceInstallEx
WdfPreDeviceRemove

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\cp5612.cat
Automation\Simatic OAM\Drivers\cp5612.inf
Automation\Simatic OAM\Drivers\cp5612_x64.sys
.exe windows x64

57b93bf979aa7d8169ed19fb81102752

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:ab:12:f2:32:4b:4e:4a:15:0d:89:8c:e3:0d:f5:9b:37:fc:6a:38:d8:37:9e:3f:e7:46:b5:ca:97:21:ed:75
Signer

Actual PE Digest

4c:ab:12:f2:32:4b:4e:4a:15:0d:89:8c:e3:0d:f5:9b:37:fc:6a:38:d8:37:9e:3f:e7:46:b5:ca:97:21:ed:75

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

15/12/2022, 14:00
Valid: false

14:05:d0:45:fa:ac:d1:b5:e8:13:fd:fd:94:b9:3f:53:0a:81:27:ae
Signer

Actual PE Digest

14:05:d0:45:fa:ac:d1:b5:e8:13:fd:fd:94:b9:3f:53:0a:81:27:ae

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

22/08/2017, 13:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeInitializeDpc
KeInitializeSemaphore
KeReleaseSemaphore
KeInitializeTimer
KeCancelTimer
KeSetTimerEx
KeWaitForSingleObject
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
MmGetSystemRoutineAddress
MmUnmapLockedPages
IofCallDriver
IofCompleteRequest
IoCreateDevice
IoDeleteDevice
IoFreeMdl
IoInitializeTimer
IoStartTimer
IoStopTimer
IoWMIRegistrationControl
ObReferenceObjectByHandle
ObfDereferenceObject
KeRemoveQueueDpc
MmBuildMdlForNonPagedPool
MmMapLockedPagesSpecifyCache
IoAllocateMdl
PoRegisterSystemState
PoUnregisterSystemState
__C_specific_handler
KeInsertQueueDpc
KeReadStateSemaphore
KeAcquireSpinLockAtDpcLevel
KeReleaseSpinLockFromDpcLevel
IoAllocateErrorLogEntry
IoWriteErrorLogEntry
RtlCompareMemory
KeSetEvent
ZwClose
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
ExFreePool
IoConnectInterruptEx
IoDisconnectInterruptEx
IoOpenDeviceInterfaceRegistryKey
IoGetDeviceInterfaces
strcpy_s
_stricmp
ExAllocatePoolWithTagPriority
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
KeInitializeEvent
MmMapIoSpace
MmUnmapIoSpace
IoAttachDeviceToDeviceStack
IoDetachDevice
IoRegisterShutdownNotification
IoGetDeviceProperty
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
PoSetPowerState
ZwSetValueKey
strcat_s
RtlWriteRegistryValue
ZwCreateKey
RtlIsNtDdiVersionAvailable
PoRequestPowerIrp
PoCallDriver
PoStartNextPowerIrp
KeDelayExecutionThread
KeBugCheckEx
sprintf_s
RtlInitUnicodeString

hal

KeQueryPerformanceCounter

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\cp5613.cat
Automation\Simatic OAM\Drivers\cp5613_64.inf
Automation\Simatic OAM\Drivers\cp5711.cat
Automation\Simatic OAM\Drivers\cp5711.inf
Automation\Simatic OAM\Drivers\cp5711_x64.sys
.exe windows x64

615dce37cba14d8fdfd320a7fa9e17e2

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

39:9d:cc:ba:df:3c:2c:fe:42:e1:f9:79:c6:a2:d4:f1
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

01/02/2018, 00:00

Not After

01/04/2020, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden-Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:9d:cc:ba:df:3c:2c:fe:42:e1:f9:79:c6:a2:d4:f1
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

01/02/2018, 00:00

Not After

01/04/2020, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden-Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:00:01:69:e8:d4:68:d4:ee:f3:3b:d9:ac:9b:de:ab:0a:d5:b4:1a:82:0b:ff:dc:51:32:88:b7:41:e0:e4:62
Signer

Actual PE Digest

5a:00:01:69:e8:d4:68:d4:ee:f3:3b:d9:ac:9b:de:ab:0a:d5:b4:1a:82:0b:ff:dc:51:32:88:b7:41:e0:e4:62

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden-Württemberg,C=DE

16/08/2019, 06:55
Valid: false

9b:05:33:01:b6:71:27:83:fb:92:86:7b:91:b9:d3:ee:41:69:bf:18
Signer

Actual PE Digest

9b:05:33:01:b6:71:27:83:fb:92:86:7b:91:b9:d3:ee:41:69:bf:18

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden-Württemberg,C=DE

16/08/2019, 06:55
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
MmGetSystemRoutineAddress
IofCallDriver
IofCompleteRequest
IoWMIRegistrationControl
IoAllocateErrorLogEntry
IoWriteErrorLogEntry
sprintf_s
_vsnprintf
KeSetEvent
ObfDereferenceObject
ZwClose
KeReadStateSemaphore
_stricmp
ObReferenceObjectByHandle
RtlInitAnsiString
RtlWriteRegistryValue
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
ZwCreateKey
ZwDeleteKey
ZwSetValueKey
strcmp
KeInitializeEvent
IoAttachDeviceToDeviceStack
IoCancelIrp
IoCreateDevice
IoDeleteDevice
IoDetachDevice
KeWaitForSingleObject
IoRegisterShutdownNotification
IoSetCompletionRoutineEx
IoStartTimer
IoStopTimer
IoRegisterDeviceInterface
IoOpenDeviceInterfaceRegistryKey
IoSetDeviceInterfaceState
PoSetPowerState
IoAllocateWorkItem
IoFreeWorkItem
IoQueueWorkItem
PoRequestPowerIrp
PoCallDriver
PoStartNextPowerIrp
KeQueryPriorityThread
PsCreateSystemThread
PsTerminateSystemThread
KeDelayExecutionThread
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
ExAllocatePoolWithTag
ExFreePool
ExFreePoolWithTag
KeClearEvent
IoAllocateIrp
IoBuildDeviceIoControlRequest
IoBuildSynchronousFsdRequest
IoFreeIrp
KeBugCheckEx
KeReleaseSemaphore
KeInitializeSemaphore
RtlCompareMemory
RtlIsNtDdiVersionAvailable
IoInitializeTimer
RtlInitUnicodeString

hal

KeQueryPerformanceCounter

usbd.sys

USBD_ParseDescriptors
USBD_ParseConfigurationDescriptorEx
USBD_CreateConfigurationRequestEx

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 453KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\dpmconv.cat
Automation\Simatic OAM\Drivers\dpmconv.inf
Automation\Simatic OAM\Drivers\dpmconv.sys
.exe windows x64

7859a90b31c65c852cb1fb0f683af91e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 1,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c3:87:70:25:07:1b:10:3b:8e:0d:b6:7d:db:bf:3f:3e:12:cd:42:cb:9a:ed:89:4e:ef:2e:c0:7d:f9:ae:f7:b6
Signer

Actual PE Digest

c3:87:70:25:07:1b:10:3b:8e:0d:b6:7d:db:bf:3f:3e:12:cd:42:cb:9a:ed:89:4e:ef:2e:c0:7d:f9:ae:f7:b6

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

25/07/2016, 12:05
Valid: false

f3:18:84:84:8c:f5:71:c8:a4:c9:17:fd:8d:95:ab:44:c6:c7:93:c8
Signer

Actual PE Digest

f3:18:84:84:8c:f5:71:c8:a4:c9:17:fd:8d:95:ab:44:c6:c7:93:c8

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

25/07/2016, 12:05
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ZwClose
RtlCompareMemory
RtlCopyUnicodeString
ZwMapViewOfSection
KeSetEvent
KeInitializeEvent
KeReleaseSpinLock
IoFreeMdl
IoCreateSynchronizationEvent
PsCreateSystemThread
MmMapLockedPagesSpecifyCache
ZwQueryValueKey
ZwUnmapViewOfSection
PsTerminateSystemThread
ObReferenceObjectByHandle
KeWaitForSingleObject
MmProbeAndLockPages
MmUnlockPages
ObfDereferenceObject
ZwOpenSection
IoAllocateMdl
ZwOpenKey
KeAcquireSpinLockRaiseToDpc
KeInitializeSemaphore
KeReleaseSemaphore
ExAllocatePoolWithTag
ExFreePoolWithTag
KeSetPriorityThread
KeInitializeDpc
KeReleaseSpinLockFromDpcLevel
KeInitializeTimer
KeSetTimerEx
KeDelayExecutionThread
KeQueryTimeIncrement
KeReadStateSemaphore
KeCancelTimer
KeAcquireSpinLockAtDpcLevel
vsprintf
KeReadStateEvent
IoCreateNotificationEvent
KeInitializeMutex
ZwSetValueKey
RtlInitAnsiString
RtlUnicodeStringToAnsiString
KeReleaseMutex
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
IoWriteErrorLogEntry
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
RtlQueryRegistryValues
IoAllocateErrorLogEntry
RtlAppendUnicodeStringToString
ZwReadFile
RtlFreeUnicodeString
ZwCreateFile
ZwQueryInformationFile
ZwWriteFile
sprintf
KeClearEvent
RtlAppendStringToString
RtlCheckRegistryKey
RtlInitString
MmFreeContiguousMemory
RtlFreeAnsiString
RtlWriteRegistryValue
ZwCreateSection
ZwDeleteKey
RtlDeleteRegistryValue
RtlCreateRegistryKey
DbgPrint
MmAllocateContiguousMemory
wcsstr
IoBuildDeviceIoControlRequest
IoGetDeviceObjectPointer
ExInterlockedInsertTailList
RtlCompareUnicodeString
ExInterlockedRemoveHeadList
IoGetDeviceInterfaces
IofCallDriver
KeBugCheckEx
IoOpenDeviceInterfaceRegistryKey
RtlAnsiStringToUnicodeString
RtlInitUnicodeString

wdfldr.sys

WdfVersionUnbind
WdfVersionBind

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

page
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\install.exe
.exe windows x64

374666d0c9f79a9ed378d171b3632bd6

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

50:59:a3:8f:2e:b5:0b:4e:3b:c0:84:fc:8f:f5:51:54:df:54:63:21:67:11:4d:30:81:6f:82:df:14:f4:d5:39
Signer

Actual PE Digest

50:59:a3:8f:2e:b5:0b:4e:3b:c0:84:fc:8f:f5:51:54:df:54:63:21:67:11:4d:30:81:6f:82:df:14:f4:d5:39

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:50
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

setupapi

SetupCopyOEMInfW
SetupFindFirstLineW
SetupDiCreateDeviceInfoW
CM_Get_DevNode_Status
SetupDiCreateDeviceInfoList
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInfoListDetailW
SetupDiSetClassInstallParamsW
SetupGetStringFieldW
SetupCloseInfFile
SetupDiCallClassInstaller
SetupOpenInfFileW
SetupDiSetDeviceRegistryPropertyW

newdev

UpdateDriverForPlugAndPlayDevicesW

kernel32

DeleteFileW
GetFullPathNameW
GetSystemDirectoryW
GetModuleFileNameW
GetWindowsDirectoryW
FindFirstFileW
FreeLibrary
LoadLibraryW
GetVersionExW
GetProcAddress
GetLastError
LocalFree
GetLocalTime
WideCharToMultiByte
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
CopyFileW
GetCurrentThreadId
GetSystemTimeAsFileTime
LocalAlloc

user32

FindWindowW
MessageBeep
MessageBoxW

advapi32

RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegCloseKey

shell32

SHGetFolderPathW

ole32

CLSIDFromString

msvcp110

??0id@locale@std@@QEAA@_K@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAPEBDH@Z

msvcr110

__wgetmainargs
__set_app_type
exit
_exit
memcmp
_cexit
_configthreadlocale
__setusermatherr
__C_specific_handler
__crtSetUnhandledExceptionFilter
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__dllonexit
_amsg_exit
_fmode
_wcmdln
_initterm
_calloc_crt
_unlock
_lock
_CxxThrowException
wcsstr
memset
__CxxFrameHandler3
_wfopen_s
__crtGetShowWindowMode
_XcptFilter
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
_commode
_onexit
memmove
_purecall
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
memcpy_s
wcscat_s
wcscpy_s
_wcsicmp
fclose
fwrite
swprintf_s
vswprintf_s
_initterm_e

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\pcadpa2.cat
Automation\Simatic OAM\Drivers\pcadpa2.inf
Automation\Simatic OAM\Drivers\pcadpa2.sys
.exe windows x64

14863ebe3890626b92442a0113abe4bb

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2d:4e:86:50:85:be:e0:0e:13:72:28:b3:d0:b1:32:e9
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 2,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5e:42:72:ea:45:f3:c0:f7:f7:74:25:ea:88:a2:d4:da:23:7c:59:6b:76:09:13:61:a6:54:36:ce:ad:2d:d9:f3
Signer

Actual PE Digest

5e:42:72:ea:45:f3:c0:f7:f7:74:25:ea:88:a2:d4:da:23:7c:59:6b:76:09:13:61:a6:54:36:ce:ad:2d:d9:f3

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

07/10/2016, 11:58
Valid: false

fd:27:51:13:5f:f9:26:08:50:66:0a:83:06:66:28:9a:f5:cc:58:48
Signer

Actual PE Digest

fd:27:51:13:5f:f9:26:08:50:66:0a:83:06:66:28:9a:f5:cc:58:48

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

07/10/2016, 11:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeWaitForSingleObject
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
MmGetSystemRoutineAddress
IofCallDriver
IofCompleteRequest
IoWMIRegistrationControl
IoAllocateErrorLogEntry
IoWriteErrorLogEntry
sprintf_s
_vsnprintf
KeSetEvent
ObfDereferenceObject
ZwClose
KeReadStateSemaphore
_stricmp
ObReferenceObjectByHandle
RtlInitAnsiString
RtlWriteRegistryValue
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
ZwCreateKey
ZwDeleteKey
ZwSetValueKey
strcmp
KeInitializeEvent
IoAttachDeviceToDeviceStack
IoCancelIrp
IoCreateDevice
IoDeleteDevice
KeReleaseSemaphore
IoInitializeTimer
IoRegisterShutdownNotification
IoSetCompletionRoutineEx
IoStartTimer
IoStopTimer
IoRegisterDeviceInterface
IoOpenDeviceInterfaceRegistryKey
IoSetDeviceInterfaceState
PoSetPowerState
IoAllocateWorkItem
IoFreeWorkItem
IoQueueWorkItem
PoRequestPowerIrp
PoCallDriver
PoStartNextPowerIrp
KeQueryPriorityThread
PsCreateSystemThread
PsTerminateSystemThread
KeDelayExecutionThread
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
ExAllocatePoolWithTag
ExFreePool
ExFreePoolWithTag
KeClearEvent
IoAllocateIrp
IoBuildDeviceIoControlRequest
IoBuildSynchronousFsdRequest
IoFreeIrp
KeBugCheckEx
KeInitializeSemaphore
RtlCompareMemory
RtlIsNtDdiVersionAvailable
RtlGetVersion
IoDetachDevice
RtlInitUnicodeString

hal

KeQueryPerformanceCounter

usbd.sys

USBD_ParseDescriptors
USBD_ParseConfigurationDescriptorEx
USBD_CreateConfigurationRequestEx

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 701KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\s7oci5612x.dll
.dll windows x86

d3a6805fb3b4f3b70fc2ad960cc293d6

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4f:dc:a5:e6:5a:11:96:e9:a5:3e:af:65:12:67:a2:38:5b:de:9a:85:ba:e5:06:db:a0:31:68:20:1e:68:69:49
Signer

Actual PE Digest

4f:dc:a5:e6:5a:11:96:e9:a5:3e:af:65:12:67:a2:38:5b:de:9a:85:ba:e5:06:db:a0:31:68:20:1e:68:69:49

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter
memset
_vsnprintf

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemDirectoryA
GetLastError
CreateProcessA
WaitForSingleObject
CloseHandle
GetLocalTime
GetCurrentThreadId
OutputDebugStringA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Exports

Exports

CP5612CoInstallEntryPoint

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\s7odpx2x64.cat
Automation\Simatic OAM\Drivers\s7odpx2x64.inf
Automation\Simatic OAM\Drivers\s7odpx2x64.sys
.dll windows x64

cf87a1aad7620afc0cc55b45bb99e957

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:ca:31:9b:ee:84:92:08:4c:9c:a2:73:74:8b:f3:5f
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06/06/2013, 00:00

Not After

05/07/2016, 23:59

Subject

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:8e:b1:59:fd:5c:19:9c:aa:2a:57:54:8a:73:4f:e0:db:ec:8c:d2
Signer

Actual PE Digest

69:8e:b1:59:fd:5c:19:9c:aa:2a:57:54:8a:73:4f:e0:db:ec:8c:d2

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

27/08/2014, 11:05
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

RtlCompareMemory
KeInitializeDpc
KeInitializeEvent
KeInitializeMutex
KeReleaseMutex
KeReadStateSemaphore
KeSetPriorityThread
KeInitializeTimer
KeCancelTimer
KeSetTimer
KeWaitForSingleObject
ExInterlockedInsertTailList
ExInterlockedRemoveHeadList
PsCreateSystemThread
PsTerminateSystemThread
IoAcquireCancelSpinLock
IoAllocateIrp
IoBuildDeviceIoControlRequest
RtlInitUnicodeString
IoFreeIrp
IoGetDeviceObjectPointer
IoReleaseCancelSpinLock
IoGetDeviceInterfaces
ObReferenceObjectByHandle
ObfDereferenceObject
ZwClose
RtlCopyUnicodeString
RtlQueryRegistryValues
RtlUnicodeStringToInteger
RtlAppendUnicodeToString
DbgPrint
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
ExAllocatePool
ExFreePool
vsprintf
ExFreePoolWithTag
ExAllocatePoolWithTag
KeReleaseSemaphore
IofCallDriver
KeInitializeSemaphore
KeBugCheckEx

wdfldr.sys

WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\s7opciax64.cat
Automation\Simatic OAM\Drivers\s7opciax64.inf
Automation\Simatic OAM\Drivers\s7opciax64.sys
.dll windows x64

9ef04a41a62caf3b65f123d59f0e8fe8

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:31:95:c0:80:ed:98:57:32:dc:69:4b:dd:af:61:ba
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2015, 00:00

Not After

21/07/2018, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Wuerttemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/01/2016, 19:41

Not After

06/04/2017, 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fb:44:f6:47:8d:cc:70:c5:ca:87:27:ab:36:11:1b:02:74:1e:5f:d0:8e:83:42:38:08:f3:ad:34:85:ab:40:e3
Signer

Actual PE Digest

fb:44:f6:47:8d:cc:70:c5:ca:87:27:ab:36:11:1b:02:74:1e:5f:d0:8e:83:42:38:08:f3:ad:34:85:ab:40:e3

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/12/2022, 14:00
Valid: false

3b:31:78:27:80:9f:b5:f4:07:96:a3:4d:72:05:b9:82:bc:cd:b9:d6
Signer

Actual PE Digest

3b:31:78:27:80:9f:b5:f4:07:96:a3:4d:72:05:b9:82:bc:cd:b9:d6

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Wuerttemberg,C=DE

11/02/2016, 10:02
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

hal

HalGetBusDataByOffset

ntoskrnl.exe

ExAllocatePoolWithTag
ExFreePoolWithTag
RtlAppendUnicodeToString
RtlCompareMemory
KeInitializeEvent
KeSetEvent
KeWaitForSingleObject
IoAllocateErrorLogEntry
IoWriteErrorLogEntry
MmBuildMdlForNonPagedPool
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
MmMapIoSpace
MmUnmapIoSpace
KeDelayExecutionThread
IoFreeMdl
KeBugCheckEx
RtlCopyUnicodeString
RtlQueryRegistryValues
RtlUnicodeStringToInteger
DbgPrint
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
ExAllocatePool
ExFreePool
vsprintf
_setjmp
longjmp
wcslen
KeClearEvent
RtlAppendUnicodeStringToString
RtlInitUnicodeString
RtlCheckRegistryKey
IoAllocateMdl

wdfldr.sys

WdfVersionUnbindClass
WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind

Sections

.text
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\s7oppilx64.cat
Automation\Simatic OAM\Drivers\s7oppilx64.inf
Automation\Simatic OAM\Drivers\s7oppilx64.sys
.dll windows x64

a6a05aad21e43b0ca0e614de4648d6a5

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:31:95:c0:80:ed:98:57:32:dc:69:4b:dd:af:61:ba
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2015, 00:00

Not After

21/07/2018, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Wuerttemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/01/2016, 19:41

Not After

06/04/2017, 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c4:e1:c4:76:82:46:e3:df:9a:80:18:1e:b0:60:3c:4c:5e:95:44:d1:3d:c5:dc:94:d9:a9:df:20:64:64:9a:9f
Signer

Actual PE Digest

c4:e1:c4:76:82:46:e3:df:9a:80:18:1e:b0:60:3c:4c:5e:95:44:d1:3d:c5:dc:94:d9:a9:df:20:64:64:9a:9f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/12/2022, 14:00
Valid: false

44:b7:3f:35:ae:1e:be:22:0c:80:08:3c:0e:bd:18:14:40:44:f5:b9
Signer

Actual PE Digest

44:b7:3f:35:ae:1e:be:22:0c:80:08:3c:0e:bd:18:14:40:44:f5:b9

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Wuerttemberg,C=DE

11/02/2016, 10:02
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeDelayExecutionThread
KeBugCheckEx
RtlCopyUnicodeString
RtlQueryRegistryValues
RtlUnicodeStringToInteger
KeClearEvent
DbgPrint
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
ExAllocatePool
ExFreePool
vsprintf
RtlAppendUnicodeStringToString
ExFreePoolWithTag
ExAllocatePoolWithTag
RtlAppendUnicodeToString
RtlInitUnicodeString

wdfldr.sys

WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 874B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\s7oppinx64.cat
Automation\Simatic OAM\Drivers\s7oppinx64.inf
Automation\Simatic OAM\Drivers\s7oppinx64.sys
.dll windows x64

ffb9bb9058ddf8c735a19f795053f602

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:ca:31:9b:ee:84:92:08:4c:9c:a2:73:74:8b:f3:5f
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06/06/2013, 00:00

Not After

05/07/2016, 23:59

Subject

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

be:a7:f4:bb:05:d1:2b:0d:c3:ce:58:7d:a9:2a:19:6a:24:48:32:6d
Signer

Actual PE Digest

be:a7:f4:bb:05:d1:2b:0d:c3:ce:58:7d:a9:2a:19:6a:24:48:32:6d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

27/08/2014, 11:05
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

RtlCompareMemory
KeInitializeEvent
KeClearEvent
KeSetEvent
KeInitializeMutex
KeReleaseMutex
KeReadStateSemaphore
KeDelayExecutionThread
KeSetPriorityThread
KeWaitForSingleObject
ExInterlockedInsertTailList
ExInterlockedRemoveHeadList
PsCreateSystemThread
PsTerminateSystemThread
IoAcquireCancelSpinLock
IoBuildDeviceIoControlRequest
IofCallDriver
RtlInitUnicodeString
IoReleaseCancelSpinLock
IoGetDeviceInterfaces
ObReferenceObjectByHandle
ObfDereferenceObject
ZwClose
KeBugCheckEx
RtlCopyUnicodeString
RtlQueryRegistryValues
RtlUnicodeStringToInteger
RtlAppendUnicodeToString
DbgPrint
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
ExAllocatePool
ExFreePool
vsprintf
ExFreePoolWithTag
ExAllocatePoolWithTag
KeReleaseSemaphore
IoGetDeviceObjectPointer
KeInitializeSemaphore

wdfldr.sys

WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\s7opusbx64.cat
Automation\Simatic OAM\Drivers\s7opusbx64.inf
Automation\Simatic OAM\Drivers\s7opusbx64.sys
.dll windows x64

97e059e605769773ef754b0a1524ffad

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:31:95:c0:80:ed:98:57:32:dc:69:4b:dd:af:61:ba
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2015, 00:00

Not After

21/07/2018, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Wuerttemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/01/2016, 19:41

Not After

06/04/2017, 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:e2:e2:c0:2a:76:24:68:6d:a3:5b:8a:35:42:5b:bf:16:67:74:ae:09:e5:05:2c:d3:42:31:14:a8:46:86:eb
Signer

Actual PE Digest

79:e2:e2:c0:2a:76:24:68:6d:a3:5b:8a:35:42:5b:bf:16:67:74:ae:09:e5:05:2c:d3:42:31:14:a8:46:86:eb

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/12/2022, 14:00
Valid: false

50:53:90:c6:20:b8:f7:ac:bc:74:d8:73:e5:45:d7:05:f2:d8:d3:be
Signer

Actual PE Digest

50:53:90:c6:20:b8:f7:ac:bc:74:d8:73:e5:45:d7:05:f2:d8:d3:be

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Wuerttemberg,C=DE

10/03/2016, 12:10
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ExFreePoolWithTag
IoCreateSymbolicLink
ExAllocatePoolWithTag
KeBugCheckEx
RtlCopyUnicodeString
RtlEqualUnicodeString
RtlQueryRegistryValues
KeDelayExecutionThread
IoDeleteSymbolicLink
RtlInitUnicodeString

wdfldr.sys

WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\s7oserix64.cat
Automation\Simatic OAM\Drivers\s7oserix64.inf
Automation\Simatic OAM\Drivers\s7oserix64.sys
.dll windows x64

a9a07965f7bc234d2352bdc218a474ec

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

39:9d:cc:ba:df:3c:2c:fe:42:e1:f9:79:c6:a2:d4:f1
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

01/02/2018, 00:00

Not After

01/04/2020, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden-Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:85:7f:83:dc:2a:6c:a9:79:b8:00:00:00:00:00:85
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/06/2019, 18:06

Not After

03/06/2020, 18:06

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a3:f6:f7:cb:bc:88:d7:32:94:f1:ff:4e:5a:2b:87:37:c8:23:f3:16:e0:25:fc:a9:0b:12:68:46:8e:e9:4d:df
Signer

Actual PE Digest

a3:f6:f7:cb:bc:88:d7:32:94:f1:ff:4e:5a:2b:87:37:c8:23:f3:16:e0:25:fc:a9:0b:12:68:46:8e:e9:4d:df

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/12/2022, 14:00
Valid: false

35:f8:f0:49:0e:66:af:96:f9:24:a1:59:e5:52:29:4e:05:ce:70:ba
Signer

Actual PE Digest

35:f8:f0:49:0e:66:af:96:f9:24:a1:59:e5:52:29:4e:05:ce:70:ba

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden-Württemberg,C=DE

23/01/2020, 11:53
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ExFreePoolWithTag
RtlGetVersion
RtlAppendUnicodeToString
RtlCompareMemory
KeInitializeEvent
KeSetEvent
KeWaitForSingleObject
KeQueryTimeIncrement
RtlQueryRegistryValues
RtlCompareUnicodeString
KeReleaseSemaphore
KeSetPriorityThread
KeWaitForMultipleObjects
ExFreePool
PsCreateSystemThread
PsTerminateSystemThread
IoBuildAsynchronousFsdRequest
IoBuildDeviceIoControlRequest
ExAllocatePoolWithTag
IofCallDriver
IoCancelIrp
IofCompleteRequest
IoGetDeviceObjectPointer
ObReferenceObjectByHandle
ObfDereferenceObject
ZwClose
KeInitializeSemaphore
IoFreeIrp
KeBugCheckEx
RtlCopyUnicodeString
RtlUnicodeStringToInteger
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
ExAllocatePool
vsprintf
wcslen
KeDelayExecutionThread
KeClearEvent
RtlAppendUnicodeStringToString
IoBuildSynchronousFsdRequest
RtlInitUnicodeString

wdfldr.sys

WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\s7osmcax64.cat
Automation\Simatic OAM\Drivers\s7osmcax64.inf
Automation\Simatic OAM\Drivers\s7osmcax64.sys
.dll windows x64

41e4188763c80a381c621d01e6fc1427

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:ca:31:9b:ee:84:92:08:4c:9c:a2:73:74:8b:f3:5f
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06/06/2013, 00:00

Not After

05/07/2016, 23:59

Subject

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

89:0c:b8:31:87:08:2d:2d:a1:b4:24:96:7a:20:93:b3:35:41:99:f4
Signer

Actual PE Digest

89:0c:b8:31:87:08:2d:2d:a1:b4:24:96:7a:20:93:b3:35:41:99:f4

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

27/08/2014, 11:05
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeSetEvent
KeInitializeSemaphore
KeReleaseSemaphore
KeDelayExecutionThread
KeSetPriorityThread
KeWaitForSingleObject
ExFreePool
PsCreateSystemThread
PsTerminateSystemThread
IoBuildAsynchronousFsdRequest
IoBuildDeviceIoControlRequest
IofCallDriver
IoCancelIrp
IoFreeIrp
IoGetDeviceObjectPointer
IoGetRelatedDeviceObject
ObReferenceObjectByHandle
ObfDereferenceObject
KeInitializeEvent
_vsnwprintf
PsGetCurrentProcessId
PsGetCurrentThreadId
ExAllocatePoolWithTag
ExFreePoolWithTag
RtlCompareUnicodeString
RtlCompareMemory
KeBugCheckEx
RtlCopyUnicodeString
RtlQueryRegistryValues
RtlUnicodeStringToInteger
RtlAppendUnicodeToString
DbgPrint
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
ExAllocatePool
vsprintf
RtlUnicodeStringToAnsiString
RtlInitUnicodeString
RtlAssert
ZwClose
wcslen

wdfldr.sys

WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\s7osobux64.cat
Automation\Simatic OAM\Drivers\s7osobux64.inf
Automation\Simatic OAM\Drivers\s7osobux64.sys
.dll windows x64

ba9b6111700b7d3b23cfd9b8043cf142

Code Sign

33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:31:7c:61:d4:61:15:ce:ba:6a:00:01:00:00:00:31
Certificate

Issuer

CN=Microsoft Windows Hardware Compatibility PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/06/2018, 17:24

Not After

29/05/2019, 17:24

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:38:2e:50:e8:6a:98:9d:95:7f:00:00:00:00:00:38
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

04/06/2012, 21:05

Not After

04/06/2020, 21:15

Subject

CN=Microsoft Windows Hardware Compatibility PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:58:4c:08:4c:80:a1:c8:d5:61:00:00:00:00:00:58
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/11/2017, 19:18

Not After

01/11/2018, 19:18

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c3:0e:58:11:cd:3a:e4:e0:01:ed:4b:7c:f4:fa:f2:5b:01:b8:51:6a:f7:a7:e0:01:ee:15:c6:6f:26:e7:f7:d3
Signer

Actual PE Digest

c3:0e:58:11:cd:3a:e4:e0:01:ed:4b:7c:f4:fa:f2:5b:01:b8:51:6a:f7:a7:e0:01:ee:15:c6:6f:26:e7:f7:d3

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/12/2022, 14:00
Valid: false

49:f2:7a:a6:0a:36:a6:75:bd:48:26:e4:5c:f6:57:04:02:67:10:19
Signer

Actual PE Digest

49:f2:7a:a6:0a:36:a6:75:bd:48:26:e4:5c:f6:57:04:02:67:10:19

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

30/07/2018, 10:41
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

RtlAppendUnicodeToString
RtlFreeUnicodeString
IoOpenDeviceInterfaceRegistryKey
ZwClose
ExFreePoolWithTag
KeInitializeEvent
KeClearEvent
RtlCopyUnicodeString
ExAllocatePoolWithTag
RtlAppendUnicodeStringToString
RtlInitUnicodeString
ZwSetValueKey
wcslen
KeBugCheckEx
RtlQueryRegistryValues
RtlUnicodeStringToInteger
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
ExAllocatePool
ExFreePool
vsprintf

wdfldr.sys

WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\s7otranx64.cat
Automation\Simatic OAM\Drivers\s7otranx64.inf
Automation\Simatic OAM\Drivers\s7otranx64.sys
.dll windows x64

08897c9c5797964656a43fde5a7588cb

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:43:9b:d4:99:23:01:cb:6d:34:00:00:00:00:00:43
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

01/03/2017, 19:05

Not After

01/06/2018, 19:05

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

12:44:a3:d7:ef:b7:47:d5:69:a8:52:f5:42:b1:db:8f:c0:3a:5e:bd:87:0e:54:4c:bf:6e:e4:9e:67:b7:85:a2
Signer

Actual PE Digest

12:44:a3:d7:ef:b7:47:d5:69:a8:52:f5:42:b1:db:8f:c0:3a:5e:bd:87:0e:54:4c:bf:6e:e4:9e:67:b7:85:a2

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/12/2022, 14:00
Valid: false

34:b4:2c:5e:8c:c3:f9:5a:5d:f8:5d:85:f6:55:d2:bb:b7:93:ba:6b
Signer

Actual PE Digest

34:b4:2c:5e:8c:c3:f9:5a:5d:f8:5d:85:f6:55:d2:bb:b7:93:ba:6b

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

05/07/2017, 13:00
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

DbgPrint
KeInitializeEvent
KeClearEvent
KeSetEvent
KeInitializeMutex
KeReleaseMutex
KeInitializeSemaphore
KeReadStateSemaphore
KeReleaseSemaphore
KeDelayExecutionThread
KeSetPriorityThread
KeInitializeTimerEx
KeCancelTimer
KeSetTimerEx
KeWaitForMultipleObjects
KeWaitForSingleObject
KeQueryTimeIncrement
ExAllocatePoolWithTag
ExFreePoolWithTag
ExInterlockedInsertTailList
ExInterlockedRemoveHeadList
PsCreateSystemThread
PsTerminateSystemThread
RtlAnsiStringToUnicodeString
IoAllocateIrp
IoBuildDeviceIoControlRequest
IofCallDriver
IoFreeIrp
IoGetDeviceObjectPointer
IoReleaseCancelSpinLock
IoGetDeviceInterfaces
ObReferenceObjectByHandle
ObfDereferenceObject
ZwClose
longjmp
_setjmp
KeBugCheckEx
RtlCopyUnicodeString
RtlQueryRegistryValues
RtlUnicodeStringToInteger
RtlAppendUnicodeToString
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
ExAllocatePool
ExFreePool
vsprintf
RtlInitUnicodeString
RtlInitAnsiString
wcsncmp
IoAcquireCancelSpinLock
strncpy

wdfldr.sys

WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass

Sections

.text
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 443KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\s7otsadx64.cat
Automation\Simatic OAM\Drivers\s7otsadx64.inf
Automation\Simatic OAM\Drivers\s7otsadx64.sys
.dll windows x64

f45e2db9cec1c39d35a12c65ba23ab9c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:ca:31:9b:ee:84:92:08:4c:9c:a2:73:74:8b:f3:5f
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06/06/2013, 00:00

Not After

05/07/2016, 23:59

Subject

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

24:5c:63:d1:0e:79:50:44:76:b8:2b:33:e0:db:ca:5d:46:c6:9d:e4
Signer

Actual PE Digest

24:5c:63:d1:0e:79:50:44:76:b8:2b:33:e0:db:ca:5d:46:c6:9d:e4

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

23/03/2015, 08:50
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeInitializeSemaphore
KeReleaseSemaphore
KeDelayExecutionThread
KeSetPriorityThread
KeWaitForSingleObject
ExFreePool
PsCreateSystemThread
PsTerminateSystemThread
IoBuildAsynchronousFsdRequest
IoBuildDeviceIoControlRequest
IofCallDriver
IoCancelIrp
IoFreeIrp
IoGetDeviceObjectPointer
IoGetRelatedDeviceObject
ObReferenceObjectByHandle
ObfDereferenceObject
KeSetEvent
_vsnwprintf
PsGetCurrentProcessId
PsGetCurrentThreadId
ExAllocatePoolWithTag
ExFreePoolWithTag
RtlCompareUnicodeString
RtlCompareMemory
KeBugCheckEx
RtlCopyUnicodeString
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
RtlQueryRegistryValues
RtlUnicodeStringToInteger
RtlAppendUnicodeToString
DbgPrint
ExAllocatePool
vsprintf
KeInitializeEvent
RtlUnicodeStringToAnsiString
RtlInitUnicodeString
ZwClose
wcslen

wdfldr.sys

WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass

Sections

.text
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\s7oupc2x64.cat
Automation\Simatic OAM\Drivers\s7oupc2x64.inf
Automation\Simatic OAM\Drivers\s7oupc2x64.sys
.dll windows x64

f428b8e072a95abc15471a30e5c28d8e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:ca:31:9b:ee:84:92:08:4c:9c:a2:73:74:8b:f3:5f
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06/06/2013, 00:00

Not After

05/07/2016, 23:59

Subject

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c0:4f:f8:85:46:8d:30:6d:d9:4b:67:66:27:ad:4b:a1:d3:1b:80:70
Signer

Actual PE Digest

c0:4f:f8:85:46:8d:30:6d:d9:4b:67:66:27:ad:4b:a1:d3:1b:80:70

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

27/08/2014, 11:05
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoCreateSymbolicLink
IoDeleteSymbolicLink
ExFreePoolWithTag
RtlCopyUnicodeString
ExAllocatePoolWithTag
RtlEqualUnicodeString
RtlQueryRegistryValues
KeBugCheckEx
RtlInitUnicodeString

wdfldr.sys

WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\s7ousbm64x.cat
Automation\Simatic OAM\Drivers\s7ousbm64x.inf
Automation\Simatic OAM\Drivers\s7ousbm64x.sys
.dll windows x64

01e9a2ccc99bea0ea05c8ece73d24430

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:ca:31:9b:ee:84:92:08:4c:9c:a2:73:74:8b:f3:5f
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06/06/2013, 00:00

Not After

05/07/2016, 23:59

Subject

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

76:24:df:9b:a3:9f:30:07:17:cf:94:b7:5e:6d:9a:91:8a:6a:cb:6d
Signer

Actual PE Digest

76:24:df:9b:a3:9f:30:07:17:cf:94:b7:5e:6d:9a:91:8a:6a:cb:6d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

27/08/2014, 11:05
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ExFreePoolWithTag
KeBugCheckEx
RtlCopyUnicodeString
RtlQueryRegistryValues
ExAllocatePoolWithTag
RtlAppendUnicodeToString
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
ExAllocatePool
ExFreePool
vsprintf
DbgPrint
RtlInitUnicodeString
RtlAssert
RtlUnicodeStringToInteger
sprintf

wdfldr.sys

WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\s7ousbu64x.cat
Automation\Simatic OAM\Drivers\s7ousbu64x.inf
Automation\Simatic OAM\Drivers\s7ousbu64x.sys
.dll windows x64

c6a806a90dcc0edc1dc37dc981325b83

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:31:95:c0:80:ed:98:57:32:dc:69:4b:dd:af:61:ba
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2015, 00:00

Not After

21/07/2018, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Wuerttemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/01/2016, 19:41

Not After

06/04/2017, 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a3:f2:fc:74:e4:dd:a3:20:ee:20:b8:ea:6d:da:a0:e9:7e:fa:af:c1:d1:5a:81:8b:cb:22:d2:1e:0b:73:9e:fe
Signer

Actual PE Digest

a3:f2:fc:74:e4:dd:a3:20:ee:20:b8:ea:6d:da:a0:e9:7e:fa:af:c1:d1:5a:81:8b:cb:22:d2:1e:0b:73:9e:fe

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/12/2022, 14:00
Valid: false

89:1e:4f:d8:cd:9f:35:c9:59:2e:19:bf:29:bc:b5:bd:80:3b:1c:b0
Signer

Actual PE Digest

89:1e:4f:d8:cd:9f:35:c9:59:2e:19:bf:29:bc:b5:bd:80:3b:1c:b0

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Wuerttemberg,C=DE

11/02/2016, 10:02
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

RtlCompareUnicodeString
RtlCopyUnicodeString
RtlAppendUnicodeToString
RtlFreeUnicodeString
RtlCompareMemory
IoOpenDeviceInterfaceRegistryKey
IoRegisterPlugPlayNotification
IoUnregisterPlugPlayNotification
ZwClose
ZwSetValueKey
RtlCheckRegistryKey
KeBugCheckEx
RtlQueryRegistryValues
RtlUnicodeStringToInteger
DbgPrint
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
ExAllocatePool
ExFreePool
vsprintf
ExFreePoolWithTag
ExAllocatePoolWithTag
RtlAppendUnicodeStringToString
RtlUnicodeStringToAnsiString
RtlInitUnicodeString

wdfldr.sys

WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass

Sections

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\s7outs2x64.cat
Automation\Simatic OAM\Drivers\s7outs2x64.inf
Automation\Simatic OAM\Drivers\s7outs2x64.sys
.dll windows x64

f428b8e072a95abc15471a30e5c28d8e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:ca:31:9b:ee:84:92:08:4c:9c:a2:73:74:8b:f3:5f
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

06/06/2013, 00:00

Not After

05/07/2016, 23:59

Subject

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e3:94:43:eb:48:a7:3f:d8:b8:05:2a:12:65:c1:d8:88:f6:81:38:63
Signer

Actual PE Digest

e3:94:43:eb:48:a7:3f:d8:b8:05:2a:12:65:c1:d8:88:f6:81:38:63

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=I IA AS CTO SYT\ ,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

27/08/2014, 11:05
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoCreateSymbolicLink
IoDeleteSymbolicLink
ExFreePoolWithTag
RtlCopyUnicodeString
ExAllocatePoolWithTag
RtlEqualUnicodeString
RtlQueryRegistryValues
KeBugCheckEx
RtlInitUnicodeString

wdfldr.sys

WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Drivers\vsnl2ada.cat
Automation\Simatic OAM\Drivers\vsnl2ada.inf
Automation\Simatic OAM\Drivers\vsnl2ada.sys
.exe windows x64

05c3707e0eb56a6dc3ea1ca465ed96d4

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 1,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

20:72:f0:03:90:cf:d8:84:83:f3:33:76:2d:e9:30:11:7e:bb:80:95:7b:ff:c2:e4:98:11:85:38:70:2c:8f:4a
Signer

Actual PE Digest

20:72:f0:03:90:cf:d8:84:83:f3:33:76:2d:e9:30:11:7e:bb:80:95:7b:ff:c2:e4:98:11:85:38:70:2c:8f:4a

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

25/07/2016, 12:05
Valid: false

91:43:3b:0e:99:91:78:b5:9b:ae:86:b7:08:bb:79:3b:e0:75:db:f7
Signer

Actual PE Digest

91:43:3b:0e:99:91:78:b5:9b:ae:86:b7:08:bb:79:3b:e0:75:db:f7

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

25/07/2016, 12:05
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ZwClose
RtlCompareMemory
RtlCopyUnicodeString
_strnicmp
ExAllocatePoolWithTag
vsprintf
IoBuildDeviceIoControlRequest
ExFreePoolWithTag
KeInitializeMutex
RtlAnsiStringToUnicodeString
RtlAppendUnicodeToString
KeInitializeEvent
RtlQueryRegistryValues
RtlInitAnsiString
RtlUnicodeStringToAnsiString
KeReleaseMutex
KeDelayExecutionThread
RtlFreeUnicodeString
PsCreateSystemThread
IoGetDeviceObjectPointer
ExInterlockedInsertTailList
PsTerminateSystemThread
KeInitializeSemaphore
ObReferenceObjectByHandle
KeWaitForSingleObject
KeReleaseSemaphore
RtlCompareUnicodeString
KeReadStateSemaphore
ZwSetValueKey
IoGetDeviceInterfaces
ObfDereferenceObject
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
ObReferenceObjectByPointer
IofCallDriver
sprintf
KeClearEvent
RtlAppendStringToString
RtlIntegerToUnicodeString
KeSetEvent
RtlCheckRegistryKey
RtlInitString
KeReleaseSpinLock
MmFreeContiguousMemory
RtlFreeAnsiString
RtlWriteRegistryValue
ZwCreateSection
ZwDeleteKey
RtlDeleteRegistryValue
RtlCreateRegistryKey
DbgPrint
MmAllocateContiguousMemory
ZwOpenKey
KeAcquireSpinLockRaiseToDpc
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
KeBugCheckEx
IoOpenDeviceInterfaceRegistryKey
ExInterlockedRemoveHeadList
RtlInitUnicodeString

wdfldr.sys

WdfVersionUnbind
WdfVersionBind

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

page
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-MSTCP.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIE4D34.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIE9020.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIE9022.xml
.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIE9023.xml
.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIE9042.xml
.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIE9043.xml
.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIE9045.xml
.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIE9046.xml
.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIE9047.xml
.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIE9048.xml
.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIEA010.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIEA011.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIEA013.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIEA018.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIEA028.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIEA042.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIEA080.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIEA093.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIEA094.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SIEA205.xml
Automation\Simatic OAM\Install\Boards\Automation-OnlineAccess-BT-SNTIE.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-#2a_#2fTSA_TS_local.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-#2a_#2fTSA_TS_remote.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-#2a_#2fTSA_local.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-#2a_#2fTSA_remote.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-#2a_#2fTSC_TS_local.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-#2a_#2fTSC_TS_remote.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-#2a_#2fmcdusbmc7.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-#2a_#2fmcdusbmmc.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP.ISO.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP1613.ISO.xml
.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP1613.RFC1006.xml
.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP1623.ISO.xml
.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP1623.RFC1006.xml
.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP1628.ISO.xml
.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP1628.RFC1006.xml
.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5611.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5611.MPI.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5611.Profibus.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5612.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5612.FWL.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5612.FWL_FAST_LOAD.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5612.MPI.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5612.Profibus.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5613A2.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5613A2.FWL.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5613A2.FWL_FAST_LOAD.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5613A2.MPI.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5613A2.PROFIBUS.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5613A3.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5613A3.FWL.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5613A3.FWL_FAST_LOAD.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5613A3.MPI.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5613A3.PROFIBUS.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5613_5614.FWL.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5613_5614.FWL_FAST_LOAD.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5614A2.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5614A2.FWL.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5614A2.FWL_FAST_LOAD.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5614A2.MPI.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5614A2.PROFIBUS.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5614A3.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5614A3.FWL.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5614A3.FWL_FAST_LOAD.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5614A3.MPI.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5614A3.PROFIBUS.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5622.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5622.FWL.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5622.FWL_FAST_LOAD.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5622.MPI.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5622.Profibus.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5623.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5623.FWL.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5623.FWL_FAST_LOAD.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5623.MPI.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5623.PROFIBUS.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5624.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5624.FWL.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5624.FWL_FAST_LOAD.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5624.MPI.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5624.PROFIBUS.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5711.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5711.FWL.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5711.FWL_FAST_LOAD.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5711.MPI.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-CP5711.Profibus.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-MCDPG.EPROM.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-MCDPG4.EPROM.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-PC Adapter USB A2.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-PC Adapter USB A2.FWL.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-PC Adapter USB A2.FWL_FAST_LOAD.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-PC Adapter USB A2.MPI.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-PC Adapter USB A2.PROFIBUS.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-PC Adapter.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-PC Adapter.MPI.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-PC Adapter.PROFIBUS.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-PC internal.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-Softnet.TCPIP.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-Softnet.TCPIP.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-TS Adapter IE.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-TS Adapter.Auto.xml
Automation\Simatic OAM\Install\DefaultLogdevices\Automation-OnlineAccess-LDT-USB.S7USB.xml
Automation\Simatic OAM\Install\LogNames\CP_L2_1#3a.xml
.xml
Automation\Simatic OAM\Install\LogNames\MPI.xml
Automation\Simatic OAM\Install\LogNames\S7EPR_0.xml
Automation\Simatic OAM\Install\LogNames\S7ONLINE.xml
Automation\Simatic OAM\Install\Protocols\Automation-OnlineAccess-PT-AUTO_PRO.xml
Automation\Simatic OAM\Install\Protocols\Automation-OnlineAccess-PT-EPROM.xml
Automation\Simatic OAM\Install\Protocols\Automation-OnlineAccess-PT-H1.xml
Automation\Simatic OAM\Install\Protocols\Automation-OnlineAccess-PT-KBUS.xml
Automation\Simatic OAM\Install\Protocols\Automation-OnlineAccess-PT-L2.xml
Automation\Simatic OAM\Install\Protocols\Automation-OnlineAccess-PT-MPI.xml
Automation\Simatic OAM\Install\Protocols\Automation-OnlineAccess-PT-PPI.xml
Automation\Simatic OAM\Install\Protocols\Automation-OnlineAccess-PT-S7USB.xml
Automation\Simatic OAM\NetTrans\oemnxpsn_64.inf
Automation\Simatic OAM\NetTrans\s7PnDiscoveryDriver.cat
Automation\Simatic OAM\NetTrans\s7PnDiscoveryDriver.inf
Automation\Simatic OAM\NetTrans\s7PnDiscoveryDriver.sys
.dll windows x64

9590e1083f513580e3f78c6b7b968682

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/01/2016, 19:41

Not After

06/04/2017, 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1a:f8:e8:27:68:5c:fb:7e:a4:fb:b4:1c:7a:2d:2f:67:43:2c:2b:84:fd:31:bb:ad:50:cb:ed:36:80:50:27:1d
Signer

Actual PE Digest

1a:f8:e8:27:68:5c:fb:7e:a4:fb:b4:1c:7a:2d:2f:67:43:2c:2b:84:fd:31:bb:ad:50:cb:ed:36:80:50:27:1d

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/12/2022, 14:00
Valid: false

59:02:1f:e7:46:9c:ba:29:eb:7d:1c:c7:85:0a:8f:9b:df:f7:ac:37
Signer

Actual PE Digest

59:02:1f:e7:46:9c:ba:29:eb:7d:1c:c7:85:0a:8f:9b:df:f7:ac:37

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

29/08/2016, 11:44
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ndis.sys

NdisInitializeEvent
NdisSetEvent
NdisWaitEvent
NdisAllocateMemoryWithTag
NdisFreeMemory
NdisAllocateNetBufferListPool
NdisFreeNetBufferListPool
NdisDeregisterProtocolDriver
NdisQueryAdapterInstanceName
NdisOidRequest
NdisOpenAdapterEx
NdisCloseAdapterEx
NdisGeneratePartialCancelId
NdisRegisterProtocolDriver
NdisFreeNetBufferList
NdisAllocateNetBufferAndNetBufferList
NdisCopyFromNetBufferToNetBuffer
NdisAllocateMdl
NdisFreeMdl
NdisReturnNetBufferLists
NdisSendNetBufferLists
NdisCancelSendNetBufferLists

ntoskrnl.exe

RtlInitUnicodeString
KeAcquireSpinLockAtDpcLevel
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
KeReleaseSpinLockFromDpcLevel
KeEnterCriticalRegion
KeLeaveCriticalRegion
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
MmMapLockedPagesSpecifyCache
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1024B - Virtual size: 1001B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\NetTrans\siem_isotrans.cat
Automation\Simatic OAM\NetTrans\snpnio.cat
Automation\Simatic OAM\NetTrans\snpnio.inf
Automation\Simatic OAM\NetTrans\snpnio.sys
.exe windows x64

37b822fec64debfe87a98e86059dba63

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 1,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:5a:e1:91:a1:86:1c:eb:ee:7d:04:29:06:c0:8e:cf:22:51:97:40:5d:be:10:36:9c:30:1d:88:4d:40:9e:e2
Signer

Actual PE Digest

2b:5a:e1:91:a1:86:1c:eb:ee:7d:04:29:06:c0:8e:cf:22:51:97:40:5d:be:10:36:9c:30:1d:88:4d:40:9e:e2

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

25/07/2016, 12:05
Valid: false

67:e9:c9:97:46:eb:8f:ad:29:08:42:0c:ba:38:ed:13:5f:11:fd:d1
Signer

Actual PE Digest

67:e9:c9:97:46:eb:8f:ad:29:08:42:0c:ba:38:ed:13:5f:11:fd:d1

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

25/07/2016, 12:05
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeWaitForSingleObject
ObfDereferenceObject
IoCsqInitializeEx
IoCsqInsertIrp
MmMapLockedPagesSpecifyCache
IoCsqRemoveIrp
IoIs32bitProcess
KeCancelTimer
KeSetTimer
KeInitializeTimer
KeInitializeDpc
KeSetImportanceDpc
KeClearEvent
IoAllocateMdl
IoBuildPartialMdl
IoFreeMdl
KeBugCheckEx
ExEventObjectType
ObReferenceObjectByHandle
KeInitializeTimerEx
IoDeleteDevice
IoDeleteSymbolicLink
IoCreateSymbolicLink
IoCreateDevice
IofCompleteRequest
RtlAssert
IoWMIRegistrationControl
RtlCompareMemory
MmGetSystemRoutineAddress
ExFreePoolWithTag
IoWMIWriteEvent
ExAllocatePoolWithTag
RtlInitUnicodeString
KeSetEvent
KeReleaseSpinLock
KeReleaseSpinLockFromDpcLevel
KeAcquireSpinLockRaiseToDpc
KeAcquireSpinLockAtDpcLevel
KeInitializeEvent
DbgPrint

hal

KeQueryPerformanceCounter

ndis.sys

NdisFreeNetBufferListPool
NdisAllocateNetBufferListPool
NdisResetEvent
NdisReturnNetBufferLists
NdisFOidRequestComplete
NdisFreeCloneOidRequest
NdisOidRequest
NdisSendNetBufferLists
NdisWaitEvent
NdisAllocateNetBufferAndNetBufferList
NdisInitializeEvent
NdisCancelSendNetBufferLists
NdisFreeMemory
NdisAllocateMemoryWithTagPriority
NdisDeregisterProtocolDriver
NdisGeneratePartialCancelId
NdisRegisterProtocolDriver
NdisSetEvent
NdisOpenAdapterEx
NdisCloseAdapterEx
NdisFreeNetBufferList

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\NetTrans\sntie.sys
.exe windows x64

14eff6bea6bd38fa99bf21aacd21a423

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4f:94:b0:2f:9b:02:65:a7:e8:8c:e3:de:bc:50:63:43
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

18/04/2019, 00:00

Not After

16/06/2021, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22/07/2014, 00:00

Not After

21/07/2024, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:2d:23:cb:00:00:00:00:00:21
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:46

Not After

22/02/2021, 19:56

Subject

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4f:94:b0:2f:9b:02:65:a7:e8:8c:e3:de:bc:50:63:43
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

18/04/2019, 00:00

Not After

16/06/2021, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22/07/2014, 00:00

Not After

21/07/2024, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:2d:23:cb:00:00:00:00:00:21
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:46

Not After

22/02/2021, 19:56

Subject

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

43:d9:d5:8c:74:d1:9c:e6:17:52:87:a0:5c:ca:e3:ee:5c:61:ee:92:02:58:5d:c6:d3:2f:99:bc:12:ee:6a:f7
Signer

Actual PE Digest

43:d9:d5:8c:74:d1:9c:e6:17:52:87:a0:5c:ca:e3:ee:5c:61:ee:92:02:58:5d:c6:d3:2f:99:bc:12:ee:6a:f7

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

28/11/2019, 12:59
Valid: false

c6:5b:59:30:46:e9:79:21:4d:99:43:d0:27:b8:c2:a7:31:9b:1a:71
Signer

Actual PE Digest

c6:5b:59:30:46:e9:79:21:4d:99:43:d0:27:b8:c2:a7:31:9b:1a:71

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

28/11/2019, 12:59
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

MmFreeContiguousMemory
PsCreateSystemThread
PsTerminateSystemThread
ZwClose
ObReferenceObjectByHandle
KeWaitForSingleObject
RtlFreeAnsiString
RtlWriteRegistryValue
RtlCopyUnicodeString
ObfDereferenceObject
ZwCreateSection
ZwDeleteKey
RtlDeleteRegistryValue
RtlCreateRegistryKey
DbgPrint
MmAllocateContiguousMemory
ZwOpenKey
KeAcquireSpinLockRaiseToDpc
ZwMapViewOfSection
IoFreeMdl
IoCreateSynchronizationEvent
MmMapLockedPagesSpecifyCache
ZwQueryValueKey
ZwUnmapViewOfSection
KeReleaseSpinLock
RtlCompareMemory
MmUnlockPages
ZwOpenSection
IoAllocateMdl
KeQueryTimeIncrement
KeReleaseSemaphore
KeReadStateSemaphore
IoWriteErrorLogEntry
IoDeleteSymbolicLink
KeInitializeMutex
KeSetPriorityThread
IoDeleteDevice
IoAllocateErrorLogEntry
KeReleaseMutex
KeDelayExecutionThread
IofCompleteRequest
KeInitializeSemaphore
RtlCompareUnicodeString
IoCreateSymbolicLink
IoCreateDevice
IoReleaseCancelSpinLock
IoAcquireCancelSpinLock
ZwEnumerateKey
KeBugCheckEx
RtlInitString
RtlUnicodeStringToAnsiString
RtlInitAnsiString
RtlQueryRegistryValues
KeInitializeEvent
RtlAppendUnicodeToString
RtlCheckRegistryKey
KeSetEvent
RtlIntegerToUnicodeString
RtlInitUnicodeString
RtlAppendStringToString
ExFreePoolWithTag
KeClearEvent
vsprintf
ExAllocatePoolWithTag
MmProbeAndLockPages
sprintf

ndis.sys

NdisSendNetBufferLists
NdisOidRequest
NdisGetDataBuffer
NdisDeregisterProtocolDriver
NdisReturnNetBufferLists
NdisCloseAdapterEx
NdisAllocateNetBufferListPool
NdisAllocateNetBufferList
NdisRegisterProtocolDriver
NdisOpenAdapterEx
NdisFreeNetBufferList
NdisAllocateMemoryWithTag
NdisFreeMemory
NdisAllocateMemoryWithTagPriority
NdisWriteEventLogEntry
NdisFreeNetBufferListPool

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_LTEXT
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 390KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_LDATA
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\OMSP\IOMS_09.dll
.dll windows x64

03981d334d1e569f990d6d38683b6b9d

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

58:9f:07:24:f6:72:f7:15:a0:53:a9:07:86:c1:3a:a9:e4:04:47:64:1b:b5:ef:9e:bc:79:b9:63:7d:34:cd:cb
Signer

Actual PE Digest

58:9f:07:24:f6:72:f7:15:a0:53:a9:07:86:c1:3a:a9:e4:04:47:64:1b:b5:ef:9e:bc:79:b9:63:7d:34:cd:cb

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

05/05/2020, 18:35
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

SetLastError
GetSystemTime
SystemTimeToFileTime
GetStdHandle
GetFileType
WriteFile
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
FindClose
FindFirstFileW
FindNextFileW
FreeLibrary
LoadLibraryW
GlobalMemoryStatus
FlushConsoleInputBuffer
LoadLibraryA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
ReleaseMutex
WaitForSingleObject
CreateMutexW
CreateEventA
CreateEventW
GetCurrentProcess
GetCurrentThread
SetThreadPriority
GetExitCodeThread
SuspendThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateSemaphoreW
GetACP
GetSystemTimeAsFileTime
ReadFile
SetFilePointer
DuplicateHandle
GetSystemInfo
GetComputerNameA
TerminateProcess
GetVersionExW
CreateFileW
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetVolumeInformationW
CancelIo
GetEnvironmentVariableW
WaitForMultipleObjectsEx
WaitForMultipleObjects
GetModuleFileNameW
RtlCaptureContext
GetFileAttributesW
WaitForSingleObjectEx
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
WideCharToMultiByte
QueryPerformanceCounter
QueryPerformanceFrequency
CloseHandle
GetCurrentProcessId
CreateMutexA
RaiseException
Sleep
IsDebuggerPresent
GetLastError
GetTickCount
OutputDebugStringA
GetCurrentThreadId
MoveFileExW
OutputDebugStringW
DisableThreadLibraryCalls

user32

GetUserObjectInformationW
MessageBoxW
GetProcessWindowStation
wsprintfW

advapi32

RegCreateKeyW
RegCloseKey
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegSetValueExW

ws2_32

WSAEventSelect
WSAEnumNetworkEvents
ioctlsocket
getservbyname
gethostbyname
gethostbyaddr
inet_addr
select
__WSAFDIsSet
WSASendTo
WSASend
WSARecvFrom
WSACleanup
WSAStartup
socket
setsockopt
listen
getsockopt
getsockname
getpeername
connect
bind
accept
gethostname
ntohs
htons
htonl
closesocket
recv
send
shutdown
WSASetLastError
WSAGetLastError

mswsock

AcceptEx
GetAcceptExSockaddrs
TransmitFile

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memset
strrchr
memcpy
memmove
__std_terminate
_purecall
strchr
wcsstr
memchr
strstr
__CxxFrameHandler3
__C_specific_handler
__RTDynamicCast
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__vcrt_InitializeCriticalSectionEx
__std_type_info_destroy_list
memcmp
__RTCastToVoid

api-ms-win-crt-runtime-l1-1-0

_endthreadex
_beginthreadex
_invalid_parameter_noinfo
terminate
perror
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_errno
_initterm
_initterm_e
strerror
raise
_exit
abort
_invalid_parameter_noinfo_noreturn
exit
signal

api-ms-win-crt-heap-l1-1-0

_heapwalk
malloc
_callnewh
free
realloc

api-ms-win-crt-string-l1-1-0

isupper
strncmp
strcpy_s
wcscat_s
wcscpy_s
_strnicmp
wcsncpy
tolower
isdigit
strcmp
strncpy
wcsncat
isxdigit
iscntrl
_strdup
isspace
_wcsdup
strcat_s

api-ms-win-crt-stdio-l1-1-0

fread
__stdio_common_vswprintf
__stdio_common_vsprintf
__stdio_common_vfprintf
_wfopen
fclose
feof
ferror
fflush
fgets
_fileno
fopen
fseek
ftell
fputs
__stdio_common_vsscanf
fwrite
_setmode
__acrt_iob_func

api-ms-win-crt-time-l1-1-0

clock
_localtime64_s
_gmtime64_s
_time64
_difftime64

api-ms-win-crt-utility-l1-1-0

srand
qsort

api-ms-win-crt-filesystem-l1-1-0

_wstat64
_stat64
_wmkdir
_wrmdir
_stat64i32
_wunlink

api-ms-win-crt-convert-l1-1-0

strtol
strtoul
atoi
_strtoui64
_itoa

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-conio-l1-1-0

_getch

Exports

Exports

get_IDLL

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 344KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\OMSP\IOMS_1000.dll
.dll windows x64

0f5502647ec83ab11e6656976c23984e

Code Sign

39:9d:cc:ba:df:3c:2c:fe:42:e1:f9:79:c6:a2:d4:f1
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

01/02/2018, 00:00

Not After

01/04/2020, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden-Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bc:99:90:b0:81:fc:3b:82:e2:27:e5:7d:31:42:ea:de:6e:fb:5d:8f:d3:ec:e7:86:1e:cb:50:36:78:da:ab:3b
Signer

Actual PE Digest

bc:99:90:b0:81:fc:3b:82:e2:27:e5:7d:31:42:ea:de:6e:fb:5d:8f:d3:ec:e7:86:1e:cb:50:36:78:da:ab:3b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden-Württemberg,C=DE

15/12/2022, 14:00
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
QueryPerformanceFrequency
QueryPerformanceCounter
WideCharToMultiByte
GetACP
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
ReleaseMutex
WaitForSingleObject
CreateMutexW
CreateEventA
CreateEventW
GetCurrentProcess
GetCurrentThread
SetThreadPriority
GetExitCodeThread
SuspendThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateSemaphoreW
MultiByteToWideChar
MoveFileExW
GetSystemTimeAsFileTime
ReadFile
SetFilePointer
LoadLibraryA
DuplicateHandle
GetSystemInfo
GetComputerNameA
TerminateProcess
SetLastError
GetVersionExW
CreateFileW
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetVolumeInformationW
CancelIo
GetEnvironmentVariableW
FreeLibrary
LoadLibraryW
WaitForMultipleObjectsEx
WaitForMultipleObjects
GetModuleFileNameW
RtlCaptureContext
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
WaitForSingleObjectEx
GetModuleHandleW
CloseHandle
CreateMutexA
GetCurrentProcessId
RaiseException
Sleep
IsDebuggerPresent
GetLastError
GetCurrentThreadId
OutputDebugStringW
WriteFile
OutputDebugStringA
DisableThreadLibraryCalls
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry

user32

wsprintfW

advapi32

RegCreateKeyW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW

ws2_32

WSAEventSelect
WSAEnumNetworkEvents
ioctlsocket
getservbyname
gethostbyname
gethostbyaddr
inet_addr
select
__WSAFDIsSet
WSASendTo
WSASend
WSARecvFrom
WSACleanup
WSAStartup
socket
shutdown
setsockopt
send
recv
listen
getsockopt
getsockname
ntohs
htons
htonl
gethostname
WSAGetLastError
accept
bind
closesocket
connect
getpeername

mswsock

TransmitFile
AcceptEx
GetAcceptExSockaddrs

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__C_specific_handler
__CxxFrameHandler3
memset
__RTDynamicCast
memcpy
memmove
__std_terminate
_purecall
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memcmp
__vcrt_InitializeCriticalSectionEx
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__std_type_info_destroy_list
strrchr
__RTCastToVoid

api-ms-win-crt-runtime-l1-1-0

terminate
_initialize_onexit_table
_register_onexit_function
signal
_initialize_narrow_environment
_seh_filter_dll
_execute_onexit_table
exit
_crt_atexit
_invalid_parameter_noinfo_noreturn
_cexit
_initterm
_beginthreadex
_endthreadex
_initterm_e
perror
_errno
_invalid_parameter_noinfo

api-ms-win-crt-heap-l1-1-0

_heapwalk
malloc
free
_callnewh

api-ms-win-crt-string-l1-1-0

strcat_s
wcscat_s
wcscpy_s
strcpy_s
strncmp
_wcsdup
wcsncat
isspace
iscntrl
wcsncpy
strcspn
_strdup

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-time-l1-1-0

_difftime64
clock
_time64
_localtime64_s

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-filesystem-l1-1-0

_wstat64
_stat64
_wrmdir
_wmkdir
_wunlink

api-ms-win-crt-convert-l1-1-0

_itoa
_strtoui64
strtoul
strtol

api-ms-win-crt-utility-l1-1-0

srand

Exports

Exports

get_IDLL

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\OpenSSL\1.0\libeay32.dll
.dll windows x64

82f1f3c2301e9cd076f91f75410000f1

Code Sign

5d:8b:ea:78:7a:c0:86:77:bc:5d:bf:ce:57:ef:02:7d
Certificate

Issuer

CN=Siemens GS IT

Not Before

21/08/2018, 22:00

Not After

22/08/2055, 22:00

Subject

CN=Siemens GS IT

fa:e0:d2:5d:fd:33:7d:20:01:ff:0c:4e:52:78:71:1d:e0:6b:39:01:e8:6c:ad:4c:f0:9f:23:8e:61:bd:d5:b5
Signer

Actual PE Digest

fa:e0:d2:5d:fd:33:7d:20:01:ff:0c:4e:52:78:71:1d:e0:6b:39:01:e8:6c:ad:4c:f0:9f:23:8e:61:bd:d5:b5

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens GS IT

15/12/2022, 14:00
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

sendto
recvfrom
WSACleanup
WSAStartup
getservbyname
gethostbyname
ntohs
ntohl
listen
getsockopt
ioctlsocket
bind
accept
socket
setsockopt
htons
htonl
connect
closesocket
WSAGetLastError
WSASetLastError
shutdown
send
recv

gdi32

GetDIBits
GetDeviceCaps
DeleteObject
CreateCompatibleBitmap
GetObjectW

advapi32

RegisterEventSourceW
ReportEventW
DeregisterEventSource

user32

ReleaseDC
GetDC
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation

kernel32

CloseHandle
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
FreeLibrary
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
FlushConsoleInputBuffer
LoadLibraryA
LoadLibraryW
SetLastError
GetSystemTime
QueryPerformanceCounter
SystemTimeToFileTime
GetCurrentProcessId
GetFileType
GetTickCount
TerminateProcess
WideCharToMultiByte
FindNextFileW
FindFirstFileW
FindClose
MultiByteToWideChar
GetCurrentThreadId
ExitProcess
GetModuleHandleW
GetProcAddress
GetStdHandle
GetLastError
WriteFile
GlobalMemoryStatus

vcruntime140

wcsstr
memcmp
memcpy
memset
memmove
strchr
strrchr
memchr
__C_specific_handler
__std_type_info_destroy_list
strstr

api-ms-win-crt-stdio-l1-1-0

_setmode
fwrite
ftell
setvbuf
fseek
_open
fread
_fileno
fgets
fflush
ferror
feof
fclose
_wfopen
__stdio_common_vsscanf
__stdio_common_vfprintf
fputs
_write
_read
__stdio_common_vsprintf
__acrt_iob_func
fopen
__stdio_common_vswprintf

api-ms-win-crt-runtime-l1-1-0

_exit
signal
_initterm
_errno
raise
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
strerror
_configure_narrow_argv
_initterm_e
_seh_filter_dll
_cexit
perror

api-ms-win-crt-heap-l1-1-0

realloc
free
malloc

api-ms-win-crt-time-l1-1-0

_gmtime64_s
_localtime64
_time64

api-ms-win-crt-string-l1-1-0

strncmp
tolower
isalnum
isspace
strcmp
_stricmp
strncpy
isxdigit
isdigit
_strnicmp
isupper

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-convert-l1-1-0

atoi
strtol
strtoul

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

_fdopen

api-ms-win-crt-filesystem-l1-1-0

_chmod
_stat64i32

api-ms-win-crt-conio-l1-1-0

_getch

Exports

Exports

ACCESS_DESCRIPTION_free
ACCESS_DESCRIPTION_it
ACCESS_DESCRIPTION_new
AES_bi_ige_encrypt
AES_cbc_encrypt
AES_cfb128_encrypt
AES_cfb1_encrypt
AES_cfb8_encrypt
AES_ctr128_encrypt
AES_decrypt
AES_ecb_encrypt
AES_encrypt
AES_ige_encrypt
AES_ofb128_encrypt
AES_options
AES_set_decrypt_key
AES_set_encrypt_key
AES_unwrap_key
AES_wrap_key
ASN1_ANY_it
ASN1_BIT_STRING_check
ASN1_BIT_STRING_free
ASN1_BIT_STRING_get_bit
ASN1_BIT_STRING_it
ASN1_BIT_STRING_name_print
ASN1_BIT_STRING_new
ASN1_BIT_STRING_num_asc
ASN1_BIT_STRING_set
ASN1_BIT_STRING_set_asc
ASN1_BIT_STRING_set_bit
ASN1_BMPSTRING_free
ASN1_BMPSTRING_it
ASN1_BMPSTRING_new
ASN1_BOOLEAN_it
ASN1_ENUMERATED_free
ASN1_ENUMERATED_get
ASN1_ENUMERATED_it
ASN1_ENUMERATED_new
ASN1_ENUMERATED_set
ASN1_ENUMERATED_to_BN
ASN1_FBOOLEAN_it
ASN1_GENERALIZEDTIME_adj
ASN1_GENERALIZEDTIME_check
ASN1_GENERALIZEDTIME_free
ASN1_GENERALIZEDTIME_it
ASN1_GENERALIZEDTIME_new
ASN1_GENERALIZEDTIME_print
ASN1_GENERALIZEDTIME_set
ASN1_GENERALIZEDTIME_set_string
ASN1_GENERALSTRING_free
ASN1_GENERALSTRING_it
ASN1_GENERALSTRING_new
ASN1_IA5STRING_free
ASN1_IA5STRING_it
ASN1_IA5STRING_new
ASN1_INTEGER_cmp
ASN1_INTEGER_dup
ASN1_INTEGER_free
ASN1_INTEGER_get
ASN1_INTEGER_it
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_INTEGER_to_BN
ASN1_NULL_free
ASN1_NULL_it
ASN1_NULL_new
ASN1_OBJECT_create
ASN1_OBJECT_free
ASN1_OBJECT_it
ASN1_OBJECT_new
ASN1_OCTET_STRING_NDEF_it
ASN1_OCTET_STRING_cmp
ASN1_OCTET_STRING_dup
ASN1_OCTET_STRING_free
ASN1_OCTET_STRING_it
ASN1_OCTET_STRING_new
ASN1_OCTET_STRING_set
ASN1_PCTX_free
ASN1_PCTX_get_cert_flags
ASN1_PCTX_get_flags
ASN1_PCTX_get_nm_flags
ASN1_PCTX_get_oid_flags
ASN1_PCTX_get_str_flags
ASN1_PCTX_new
ASN1_PCTX_set_cert_flags
ASN1_PCTX_set_flags
ASN1_PCTX_set_nm_flags
ASN1_PCTX_set_oid_flags
ASN1_PCTX_set_str_flags
ASN1_PRINTABLESTRING_free
ASN1_PRINTABLESTRING_it
ASN1_PRINTABLESTRING_new
ASN1_PRINTABLE_free
ASN1_PRINTABLE_it
ASN1_PRINTABLE_new
ASN1_PRINTABLE_type
ASN1_SEQUENCE_ANY_it
ASN1_SEQUENCE_it
ASN1_SET_ANY_it
ASN1_STRING_TABLE_add
ASN1_STRING_TABLE_cleanup
ASN1_STRING_TABLE_get
ASN1_STRING_clear_free
ASN1_STRING_cmp
ASN1_STRING_copy
ASN1_STRING_data
ASN1_STRING_dup
ASN1_STRING_free
ASN1_STRING_get_default_mask
ASN1_STRING_length
ASN1_STRING_length_set
ASN1_STRING_new
ASN1_STRING_print
ASN1_STRING_print_ex
ASN1_STRING_print_ex_fp
ASN1_STRING_set
ASN1_STRING_set0
ASN1_STRING_set_by_NID
ASN1_STRING_set_default_mask
ASN1_STRING_set_default_mask_asc
ASN1_STRING_to_UTF8
ASN1_STRING_type
ASN1_STRING_type_new
ASN1_T61STRING_free
ASN1_T61STRING_it
ASN1_T61STRING_new
ASN1_TBOOLEAN_it
ASN1_TIME_adj
ASN1_TIME_check
ASN1_TIME_diff
ASN1_TIME_free
ASN1_TIME_it
ASN1_TIME_new
ASN1_TIME_print
ASN1_TIME_set
ASN1_TIME_set_string
ASN1_TIME_to_generalizedtime
ASN1_TYPE_cmp
ASN1_TYPE_free
ASN1_TYPE_get
ASN1_TYPE_get_int_octetstring
ASN1_TYPE_get_octetstring
ASN1_TYPE_new
ASN1_TYPE_set
ASN1_TYPE_set1
ASN1_TYPE_set_int_octetstring
ASN1_TYPE_set_octetstring
ASN1_UNIVERSALSTRING_free
ASN1_UNIVERSALSTRING_it
ASN1_UNIVERSALSTRING_new
ASN1_UNIVERSALSTRING_to_string
ASN1_UTCTIME_adj
ASN1_UTCTIME_check
ASN1_UTCTIME_cmp_time_t
ASN1_UTCTIME_free
ASN1_UTCTIME_it
ASN1_UTCTIME_new
ASN1_UTCTIME_print
ASN1_UTCTIME_set
ASN1_UTCTIME_set_string
ASN1_UTF8STRING_free
ASN1_UTF8STRING_it
ASN1_UTF8STRING_new
ASN1_VISIBLESTRING_free
ASN1_VISIBLESTRING_it
ASN1_VISIBLESTRING_new
ASN1_add_oid_module
ASN1_bn_print
ASN1_check_infinite_end
ASN1_const_check_infinite_end
ASN1_d2i_bio
ASN1_d2i_fp
ASN1_digest
ASN1_dup
ASN1_generate_nconf
ASN1_generate_v3
ASN1_get_object
ASN1_i2d_bio
ASN1_i2d_fp
ASN1_item_d2i
ASN1_item_d2i_bio
ASN1_item_d2i_fp
ASN1_item_digest
ASN1_item_dup
ASN1_item_ex_d2i
ASN1_item_ex_free
ASN1_item_ex_i2d
ASN1_item_ex_new
ASN1_item_free
ASN1_item_i2d
ASN1_item_i2d_bio
ASN1_item_i2d_fp
ASN1_item_ndef_i2d
ASN1_item_new
ASN1_item_pack
ASN1_item_print
ASN1_item_sign
ASN1_item_sign_ctx
ASN1_item_unpack
ASN1_item_verify
ASN1_mbstring_copy
ASN1_mbstring_ncopy
ASN1_object_size
ASN1_pack_string
ASN1_parse
ASN1_parse_dump
ASN1_primitive_free
ASN1_primitive_new
ASN1_put_eoc
ASN1_put_object
ASN1_seq_pack
ASN1_seq_unpack
ASN1_sign
ASN1_tag2bit
ASN1_tag2str
ASN1_template_d2i
ASN1_template_free
ASN1_template_i2d
ASN1_template_new
ASN1_unpack_string
ASN1_verify
AUTHORITY_INFO_ACCESS_free
AUTHORITY_INFO_ACCESS_it
AUTHORITY_INFO_ACCESS_new
AUTHORITY_KEYID_free
AUTHORITY_KEYID_it
AUTHORITY_KEYID_new
BASIC_CONSTRAINTS_free
BASIC_CONSTRAINTS_it
BASIC_CONSTRAINTS_new
BF_cbc_encrypt
BF_cfb64_encrypt
BF_decrypt
BF_ecb_encrypt
BF_encrypt
BF_ofb64_encrypt
BF_options
BF_set_key
BIGNUM_it
BIO_accept
BIO_asn1_get_prefix
BIO_asn1_get_suffix
BIO_asn1_set_prefix
BIO_asn1_set_suffix
BIO_callback_ctrl
BIO_clear_flags
BIO_copy_next_retry
BIO_ctrl
BIO_ctrl_get_read_request
BIO_ctrl_get_write_guarantee
BIO_ctrl_pending
BIO_ctrl_reset_read_request
BIO_ctrl_wpending
BIO_debug_callback
BIO_dgram_non_fatal_error
BIO_dump
BIO_dump_cb
BIO_dump_fp
BIO_dump_indent
BIO_dump_indent_cb
BIO_dump_indent_fp
BIO_dup_chain
BIO_f_asn1
BIO_f_base64
BIO_f_buffer
BIO_f_cipher
BIO_f_md
BIO_f_nbio_test
BIO_f_null
BIO_f_reliable
BIO_fd_non_fatal_error
BIO_fd_should_retry
BIO_find_type
BIO_free
BIO_free_all
BIO_get_accept_socket
BIO_get_callback
BIO_get_callback_arg
BIO_get_ex_data
BIO_get_ex_new_index
BIO_get_host_ip
BIO_get_port
BIO_get_retry_BIO
BIO_get_retry_reason
BIO_gethostbyname
BIO_gets
BIO_hex_string
BIO_indent
BIO_int_ctrl
BIO_method_name
BIO_method_type
BIO_new
BIO_new_CMS
BIO_new_NDEF
BIO_new_PKCS7
BIO_new_accept
BIO_new_bio_pair
BIO_new_connect
BIO_new_dgram
BIO_new_fd
BIO_new_file
BIO_new_fp
BIO_new_mem_buf
BIO_new_socket
BIO_next
BIO_nread
BIO_nread0
BIO_number_read
BIO_number_written
BIO_nwrite
BIO_nwrite0
BIO_pop
BIO_printf
BIO_ptr_ctrl
BIO_push
BIO_puts
BIO_read
BIO_s_accept
BIO_s_bio
BIO_s_connect
BIO_s_datagram
BIO_s_fd
BIO_s_file
BIO_s_mem
BIO_s_null
BIO_s_socket
BIO_set
BIO_set_callback
BIO_set_callback_arg
BIO_set_cipher
BIO_set_ex_data
BIO_set_flags
BIO_set_tcp_ndelay
BIO_snprintf
BIO_sock_cleanup
BIO_sock_error
BIO_sock_init
BIO_sock_non_fatal_error
BIO_sock_should_retry
BIO_socket_ioctl
BIO_socket_nbio
BIO_test_flags
BIO_vfree
BIO_vprintf
BIO_vsnprintf
BIO_write
BN_BLINDING_convert
BN_BLINDING_convert_ex
BN_BLINDING_create_param
BN_BLINDING_free
BN_BLINDING_get_flags
BN_BLINDING_get_thread_id
BN_BLINDING_invert
BN_BLINDING_invert_ex
BN_BLINDING_new
BN_BLINDING_set_flags
BN_BLINDING_set_thread_id
BN_BLINDING_thread_id
BN_BLINDING_update
BN_CTX_end
BN_CTX_free
BN_CTX_get
BN_CTX_init
BN_CTX_new
BN_CTX_start
BN_GENCB_call
BN_GF2m_add
BN_GF2m_arr2poly
BN_GF2m_mod
BN_GF2m_mod_arr
BN_GF2m_mod_div
BN_GF2m_mod_div_arr
BN_GF2m_mod_exp
BN_GF2m_mod_exp_arr
BN_GF2m_mod_inv
BN_GF2m_mod_inv_arr
BN_GF2m_mod_mul
BN_GF2m_mod_mul_arr
BN_GF2m_mod_solve_quad
BN_GF2m_mod_solve_quad_arr
BN_GF2m_mod_sqr
BN_GF2m_mod_sqr_arr
BN_GF2m_mod_sqrt
BN_GF2m_mod_sqrt_arr
BN_GF2m_poly2arr
BN_MONT_CTX_copy
BN_MONT_CTX_free
BN_MONT_CTX_init
BN_MONT_CTX_new
BN_MONT_CTX_set
BN_MONT_CTX_set_locked
BN_RECP_CTX_free
BN_RECP_CTX_init
BN_RECP_CTX_new
BN_RECP_CTX_set
BN_X931_derive_prime_ex
BN_X931_generate_Xpq
BN_X931_generate_prime_ex
BN_add
BN_add_word
BN_asc2bn
BN_bin2bn
BN_bn2bin
BN_bn2dec
BN_bn2hex
BN_bn2mpi
BN_bntest_rand
BN_clear
BN_clear_bit
BN_clear_free
BN_cmp
BN_consttime_swap
BN_copy
BN_dec2bn
BN_div
BN_div_recp
BN_div_word
BN_dup
BN_exp
BN_free
BN_from_montgomery
BN_gcd
BN_generate_prime
BN_generate_prime_ex
BN_get0_nist_prime_192
BN_get0_nist_prime_224
BN_get0_nist_prime_256
BN_get0_nist_prime_384
BN_get0_nist_prime_521
BN_get_params
BN_get_word
BN_hex2bn
BN_init
BN_is_bit_set
BN_is_prime
BN_is_prime_ex
BN_is_prime_fasttest
BN_is_prime_fasttest_ex
BN_kronecker
BN_lshift
BN_lshift1
BN_mask_bits
BN_mod_add
BN_mod_add_quick
BN_mod_exp
BN_mod_exp2_mont
BN_mod_exp_mont
BN_mod_exp_mont_consttime
BN_mod_exp_mont_word
BN_mod_exp_recp
BN_mod_exp_simple
BN_mod_inverse
BN_mod_lshift
BN_mod_lshift1
BN_mod_lshift1_quick
BN_mod_lshift_quick
BN_mod_mul
BN_mod_mul_montgomery
BN_mod_mul_reciprocal
BN_mod_sqr
BN_mod_sqrt
BN_mod_sub
BN_mod_sub_quick
BN_mod_word
BN_mpi2bn
BN_mul
BN_mul_word
BN_new
BN_nist_mod_192
BN_nist_mod_224
BN_nist_mod_256
BN_nist_mod_384
BN_nist_mod_521
BN_nnmod
BN_num_bits
BN_num_bits_word
BN_options
BN_print
BN_print_fp
BN_pseudo_rand
BN_pseudo_rand_range
BN_rand
BN_rand_range
BN_reciprocal
BN_rshift
BN_rshift1
BN_set_bit
BN_set_negative
BN_set_params
BN_set_word
BN_sqr
BN_sub
BN_sub_word
BN_swap
BN_to_ASN1_ENUMERATED
BN_to_ASN1_INTEGER
BN_uadd
BN_ucmp
BN_usub
BN_value_one

Sections

.text
Size: 952KB - Virtual size: 951KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 352KB - Virtual size: 351KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 247KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\OpenSSL\1.0\ssleay32.dll
.dll windows x64

7a48559d31c56f8cb5b2dd2d5d4dd226

Code Sign

5d:8b:ea:78:7a:c0:86:77:bc:5d:bf:ce:57:ef:02:7d
Certificate

Issuer

CN=Siemens GS IT

Not Before

21/08/2018, 22:00

Not After

22/08/2055, 22:00

Subject

CN=Siemens GS IT

41:f1:a7:67:7c:c1:89:88:c7:38:1a:c0:7d:db:36:a1:0b:6d:1f:02:6a:35:ab:43:db:5d:77:18:8f:4f:d3:ed
Signer

Actual PE Digest

41:f1:a7:67:7c:c1:89:88:c7:38:1a:c0:7d:db:36:a1:0b:6d:1f:02:6a:35:ab:43:db:5d:77:18:8f:4f:d3:ed

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens GS IT

15/12/2022, 14:00
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libeay32

ord123
ord118
ord120
ord165
ord32
ord490
ord2760
ord495
ord498
ord4540
ord202
ord203
ord201
ord219
ord252
ord222
ord3837
ord3844
ord3896
ord3899
ord2630
ord2821
ord3883
ord3109
ord269
ord2936
ord2894
ord276
ord274
ord289
ord290
ord961
ord256
ord3315
ord2927
ord285
ord2128
ord281
ord967
ord4119
ord4430
ord4233
ord4474
ord4369
ord4245
ord1070
ord4488
ord3695
ord3570
ord2924
ord2929
ord3010
ord3178
ord2578
ord3663
ord3353
ord3422
ord3729
ord3575
ord3512
ord3608
ord3459
ord3480
ord3550
ord3666
ord3644
ord866
ord641
ord754
ord654
ord635
ord2747
ord2784
ord2572
ord964
ord965
ord464
ord2201
ord3489
ord907
ord904
ord176
ord87
ord150
ord125
ord1000
ord124
ord129
ord486
ord493
ord484
ord205
ord216
ord363
ord2712
ord2925
ord3165
ord268
ord333
ord316
ord4470
ord1010
ord282
ord4125
ord4262
ord4164
ord1071
ord2877
ord3711
ord3682
ord3719
ord577
ord763
ord572
ord4046
ord481
ord2063
ord2107
ord3450
ord283
ord3418
ord3244
ord1096
ord1097
ord78
ord109
ord95
ord3816
ord3873
ord3836
ord3888
ord3891
ord3874
ord2589
ord2915
ord323
ord3906
ord1144
ord1145
ord3823
ord3846
ord89
ord2292
ord1081
ord187
ord3857
ord267
ord503
ord1012
ord3631
ord3479
ord3664
ord3737
ord3633
ord3675
ord341
ord1011
ord359
ord365
ord4210
ord3067
ord266
ord264
ord3314
ord3312
ord3313
ord4188
ord2568
ord3528
ord4684
ord3388
ord541
ord3925
ord3922
ord4701
ord653
ord151
ord3192
ord3124
ord2702
ord2898
ord3332
ord3566
ord1202
ord4144
ord4372
ord3782
ord2400
ord4174
ord193
ord3866
ord3767
ord3758
ord3704
ord3647
ord3365
ord3766
ord3460
ord4114
ord3783
ord3454
ord3394
ord3754
ord1655
ord914
ord1041
ord1027
ord1025
ord1004
ord1007
ord1005
ord3826
ord53
ord85
ord67
ord65
ord74
ord98
ord58
ord497
ord206
ord892
ord890
ord897
ord2257
ord248
ord364
ord4331
ord4513
ord629
ord626
ord628
ord630
ord3437
ord3527
ord3378
ord3610
ord3414
ord3495
ord3399
ord3559
ord575
ord636
ord2051
ord2478
ord246
ord3657
ord3396
ord908
ord911
ord93
ord128
ord623
ord622
ord624
ord1100
ord1023
ord1016
ord2204
ord2451
ord2524
ord3505
ord3595
ord680
ord857
ord657
ord4693
ord2135
ord679
ord401
ord3205
ord891
ord887
ord889
ord4045
ord2475
ord368
ord370
ord367
ord369
ord1671
ord189
ord1147
ord314
ord315
ord4383
ord4320
ord956
ord750
ord279
ord748
ord280
ord774
ord751
ord2181
ord394
ord1959
ord400
ord399
ord716
ord822
ord718
ord824
ord8
ord7
ord3700
ord3623
ord37
ord35
ord703
ord1091
ord88
ord2426
ord86
ord1101
ord313
ord3724
ord299
ord304
ord329
ord318
ord325
ord959
ord4601
ord3155
ord2996
ord4615
ord4637
ord4656
ord4731
ord4740
ord3795
ord3807
ord3914
ord292
ord293
ord395
ord2252
ord91
ord955
ord225
ord247
ord4572
ord4580
ord4576
ord4570
ord4578
ord4582
ord4573
ord4577
ord4581
ord4575
ord4584
ord110
ord111
ord52
ord66
ord3245
ord181
ord188
ord903
ord912
ord910
ord909
ord905
ord2411
ord1653
ord1654
ord3513
ord170
ord3239
ord168
ord167
ord4692
ord169

kernel32

IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetLastError
SystemTimeToFileTime
GetSystemTime
SetLastError

vcruntime140

memcmp
memcpy
memset
strchr
__C_specific_handler
__std_type_info_destroy_list
memmove

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-string-l1-1-0

_strnicmp
strncmp
_stricmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_errno
abort
_execute_onexit_table
_register_onexit_function
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table

Exports

Exports

BIO_f_ssl
BIO_new_buffer_ssl_connect
BIO_new_ssl
BIO_new_ssl_connect
BIO_ssl_copy_session_id
BIO_ssl_shutdown
DTLS_client_method
DTLS_method
DTLS_server_method
DTLSv1_2_client_method
DTLSv1_2_method
DTLSv1_2_server_method
DTLSv1_client_method
DTLSv1_method
DTLSv1_server_method
ERR_load_SSL_strings
PEM_read_SSL_SESSION
PEM_read_bio_SSL_SESSION
PEM_write_SSL_SESSION
PEM_write_bio_SSL_SESSION
SRP_Calc_A_param
SRP_generate_client_master_secret
SRP_generate_server_master_secret
SSL_CIPHER_description
SSL_CIPHER_find
SSL_CIPHER_get_bits
SSL_CIPHER_get_id
SSL_CIPHER_get_name
SSL_CIPHER_get_version
SSL_COMP_add_compression_method
SSL_COMP_free_compression_methods
SSL_COMP_get_compression_methods
SSL_COMP_get_name
SSL_COMP_set0_compression_methods
SSL_CONF_CTX_clear_flags
SSL_CONF_CTX_finish
SSL_CONF_CTX_free
SSL_CONF_CTX_new
SSL_CONF_CTX_set1_prefix
SSL_CONF_CTX_set_flags
SSL_CONF_CTX_set_ssl
SSL_CONF_CTX_set_ssl_ctx
SSL_CONF_cmd
SSL_CONF_cmd_argv
SSL_CONF_cmd_value_type
SSL_CTX_SRP_CTX_free
SSL_CTX_SRP_CTX_init
SSL_CTX_add_client_CA
SSL_CTX_add_client_custom_ext
SSL_CTX_add_server_custom_ext
SSL_CTX_add_session
SSL_CTX_callback_ctrl
SSL_CTX_check_private_key
SSL_CTX_ctrl
SSL_CTX_flush_sessions
SSL_CTX_free
SSL_CTX_get0_certificate
SSL_CTX_get0_param
SSL_CTX_get0_privatekey
SSL_CTX_get_cert_store
SSL_CTX_get_client_CA_list
SSL_CTX_get_client_cert_cb
SSL_CTX_get_ex_data
SSL_CTX_get_ex_new_index
SSL_CTX_get_info_callback
SSL_CTX_get_quiet_shutdown
SSL_CTX_get_ssl_method
SSL_CTX_get_timeout
SSL_CTX_get_verify_callback
SSL_CTX_get_verify_depth
SSL_CTX_get_verify_mode
SSL_CTX_load_verify_locations
SSL_CTX_new
SSL_CTX_remove_session
SSL_CTX_sess_get_get_cb
SSL_CTX_sess_get_new_cb
SSL_CTX_sess_get_remove_cb
SSL_CTX_sess_set_get_cb
SSL_CTX_sess_set_new_cb
SSL_CTX_sess_set_remove_cb
SSL_CTX_sessions
SSL_CTX_set1_param
SSL_CTX_set_alpn_protos
SSL_CTX_set_alpn_select_cb
SSL_CTX_set_cert_cb
SSL_CTX_set_cert_store
SSL_CTX_set_cert_verify_callback
SSL_CTX_set_cipher_list
SSL_CTX_set_client_CA_list
SSL_CTX_set_client_cert_cb
SSL_CTX_set_client_cert_engine
SSL_CTX_set_cookie_generate_cb
SSL_CTX_set_cookie_verify_cb
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_verify_paths
SSL_CTX_set_ex_data
SSL_CTX_set_generate_session_id
SSL_CTX_set_info_callback
SSL_CTX_set_msg_callback
SSL_CTX_set_next_proto_select_cb
SSL_CTX_set_next_protos_advertised_cb
SSL_CTX_set_psk_client_callback
SSL_CTX_set_psk_server_callback
SSL_CTX_set_purpose
SSL_CTX_set_quiet_shutdown
SSL_CTX_set_session_id_context
SSL_CTX_set_srp_cb_arg
SSL_CTX_set_srp_client_pwd_callback
SSL_CTX_set_srp_password
SSL_CTX_set_srp_strength
SSL_CTX_set_srp_username
SSL_CTX_set_srp_username_callback
SSL_CTX_set_srp_verify_param_callback
SSL_CTX_set_ssl_version
SSL_CTX_set_timeout
SSL_CTX_set_tlsext_use_srtp
SSL_CTX_set_tmp_dh_callback
SSL_CTX_set_tmp_ecdh_callback
SSL_CTX_set_tmp_rsa_callback
SSL_CTX_set_trust
SSL_CTX_set_verify
SSL_CTX_set_verify_depth
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_certificate
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_file
SSL_CTX_use_psk_identity_hint
SSL_CTX_use_serverinfo
SSL_CTX_use_serverinfo_file
SSL_SESSION_free
SSL_SESSION_get0_peer
SSL_SESSION_get_compress_id
SSL_SESSION_get_ex_data
SSL_SESSION_get_ex_new_index
SSL_SESSION_get_id
SSL_SESSION_get_time
SSL_SESSION_get_timeout
SSL_SESSION_new
SSL_SESSION_print
SSL_SESSION_print_fp
SSL_SESSION_set1_id_context
SSL_SESSION_set_ex_data
SSL_SESSION_set_time
SSL_SESSION_set_timeout
SSL_SRP_CTX_free
SSL_SRP_CTX_init
SSL_accept
SSL_add_client_CA
SSL_add_dir_cert_subjects_to_stack
SSL_add_file_cert_subjects_to_stack
SSL_alert_desc_string
SSL_alert_desc_string_long
SSL_alert_type_string
SSL_alert_type_string_long
SSL_cache_hit
SSL_callback_ctrl
SSL_certs_clear
SSL_check_chain
SSL_check_private_key
SSL_clear
SSL_connect
SSL_copy_session_id
SSL_ctrl
SSL_do_handshake
SSL_dup
SSL_dup_CA_list
SSL_export_keying_material
SSL_extension_supported
SSL_free
SSL_get0_alpn_selected
SSL_get0_next_proto_negotiated
SSL_get0_param
SSL_get1_session
SSL_get_SSL_CTX
SSL_get_certificate
SSL_get_cipher_list
SSL_get_ciphers
SSL_get_client_CA_list
SSL_get_current_cipher
SSL_get_current_compression
SSL_get_current_expansion
SSL_get_default_timeout
SSL_get_error
SSL_get_ex_data
SSL_get_ex_data_X509_STORE_CTX_idx
SSL_get_ex_new_index
SSL_get_fd
SSL_get_finished
SSL_get_info_callback
SSL_get_peer_cert_chain
SSL_get_peer_certificate
SSL_get_peer_finished
SSL_get_privatekey
SSL_get_psk_identity
SSL_get_psk_identity_hint
SSL_get_quiet_shutdown
SSL_get_rbio
SSL_get_read_ahead
SSL_get_rfd
SSL_get_selected_srtp_profile
SSL_get_servername
SSL_get_servername_type
SSL_get_session
SSL_get_shared_ciphers
SSL_get_shared_sigalgs
SSL_get_shutdown
SSL_get_sigalgs
SSL_get_srp_N
SSL_get_srp_g
SSL_get_srp_userinfo
SSL_get_srp_username
SSL_get_srtp_profiles
SSL_get_ssl_method
SSL_get_verify_callback
SSL_get_verify_depth
SSL_get_verify_mode
SSL_get_verify_result
SSL_get_version
SSL_get_wbio
SSL_get_wfd
SSL_has_matching_session_id
SSL_is_server
SSL_library_init
SSL_load_client_CA_file
SSL_load_error_strings
SSL_new
SSL_peek
SSL_pending
SSL_read
SSL_renegotiate
SSL_renegotiate_abbreviated
SSL_renegotiate_pending
SSL_rstate_string
SSL_rstate_string_long
SSL_select_next_proto
SSL_set1_param
SSL_set_SSL_CTX
SSL_set_accept_state
SSL_set_alpn_protos
SSL_set_bio
SSL_set_cert_cb
SSL_set_cipher_list
SSL_set_client_CA_list
SSL_set_connect_state
SSL_set_debug
SSL_set_ex_data
SSL_set_fd
SSL_set_generate_session_id
SSL_set_info_callback
SSL_set_msg_callback
SSL_set_psk_client_callback
SSL_set_psk_server_callback
SSL_set_purpose
SSL_set_quiet_shutdown
SSL_set_read_ahead
SSL_set_rfd
SSL_set_session
SSL_set_session_id_context
SSL_set_session_secret_cb
SSL_set_session_ticket_ext
SSL_set_session_ticket_ext_cb
SSL_set_shutdown
SSL_set_srp_server_param
SSL_set_srp_server_param_pw
SSL_set_ssl_method
SSL_set_state
SSL_set_tlsext_use_srtp
SSL_set_tmp_dh_callback
SSL_set_tmp_ecdh_callback
SSL_set_tmp_rsa_callback
SSL_set_trust
SSL_set_verify
SSL_set_verify_depth
SSL_set_verify_result
SSL_set_wfd
SSL_shutdown
SSL_srp_server_param_with_username
SSL_state
SSL_state_string
SSL_state_string_long
SSL_use_PrivateKey
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_file
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_file
SSL_use_certificate
SSL_use_certificate_ASN1
SSL_use_certificate_file
SSL_use_psk_identity_hint
SSL_version
SSL_want
SSL_write
SSLv23_client_method
SSLv23_method
SSLv23_server_method
SSLv2_client_method
SSLv2_method
SSLv2_server_method
SSLv3_client_method
SSLv3_method
SSLv3_server_method
TLSv1_1_client_method
TLSv1_1_method
TLSv1_1_server_method
TLSv1_2_client_method
TLSv1_2_method
TLSv1_2_server_method
TLSv1_client_method
TLSv1_method
TLSv1_server_method
d2i_SSL_SESSION
i2d_SSL_SESSION
ssl3_ciphers

Sections

.text
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\OpenSSL\1.1\libcrypto-1_1-x64.dll
.dll windows x64

eb9cfc22836094167bd699fc0a51bab6

Code Sign

4f:94:b0:2f:9b:02:65:a7:e8:8c:e3:de:bc:50:63:43
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

18/04/2019, 00:00

Not After

16/06/2021, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22/07/2014, 00:00

Not After

21/07/2024, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:2d:23:cb:00:00:00:00:00:21
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:46

Not After

22/02/2021, 19:56

Subject

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b9:a0:04:d6:33:42:ce:fc:3b:3f:12:3a:46:23:0b:64:44:d2:c2:46:51:60:50:bf:48:c2:8e:db:a2:b9:fa:de
Signer

Actual PE Digest

b9:a0:04:d6:33:42:ce:fc:3b:3f:12:3a:46:23:0b:64:44:d2:c2:46:51:60:50:bf:48:c2:8e:db:a2:b9:fa:de

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

27/03/2020, 17:05
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

closesocket
bind
accept
listen
WSACleanup
WSAStartup
gethostbyname
getsockopt
getsockname
ioctlsocket
getnameinfo
ntohs
freeaddrinfo
getaddrinfo
setsockopt
socket
shutdown
recv
send
WSASetLastError
recvfrom
sendto
connect
WSAGetLastError

advapi32

RegisterEventSourceW
DeregisterEventSource
ReportEventW

user32

GetUserObjectInformationW
MessageBoxW
GetProcessWindowStation

bcrypt

BCryptGenRandom

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
ReadConsoleW
ReadConsoleA
SetConsoleMode
IsProcessorFeaturePresent
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableW
GetSystemTimeAsFileTime
GetStartupInfoW
InitializeSListHead
GetConsoleMode
IsDebuggerPresent
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
FindNextFileW
FindFirstFileW
ConvertFiberToThread
ConvertThreadToFiber
SwitchToFiber
DeleteFiber
CreateFiber
FormatMessageW
GetSystemTime
SystemTimeToFileTime
GetLastError
SetLastError
GetStdHandle
GetFileType
WriteFile
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
CloseHandle
FreeLibrary
LoadLibraryA
LoadLibraryW
GetModuleHandleExW
FindClose

vcruntime140

__std_type_info_destroy_list
strstr
wcsstr
memmove
strchr
strrchr
memcmp
memset
memcpy
__C_specific_handler
memchr

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
_setmode
ftell
__stdio_common_vfprintf
fwrite
fseek
fread
fopen
_fileno
fgets
fflush
ferror
clearerr
setbuf
feof
fclose
fputs
__stdio_common_vsscanf
__acrt_iob_func
__stdio_common_vsprintf
_wfopen

api-ms-win-crt-convert-l1-1-0

strtoul
atoi
strtol

api-ms-win-crt-string-l1-1-0

_strnicmp
strcspn
strncmp
strncpy
strcmp
isspace
_strdup
_stricmp
strspn

api-ms-win-crt-time-l1-1-0

_gmtime64_s
_time64

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_initialize_onexit_table
signal
strerror_s
_execute_onexit_table
_seh_filter_dll
_crt_atexit
_errno
_crt_at_quick_exit
terminate
perror
_register_onexit_function
_exit
_initterm_e
_initterm
_configure_narrow_argv
_cexit
raise

api-ms-win-crt-filesystem-l1-1-0

_fstat64i32
_stat64i32
_chmod

api-ms-win-crt-heap-l1-1-0

free
realloc
malloc

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ACCESS_DESCRIPTION_free
ACCESS_DESCRIPTION_it
ACCESS_DESCRIPTION_new
ADMISSIONS_free
ADMISSIONS_get0_admissionAuthority
ADMISSIONS_get0_namingAuthority
ADMISSIONS_get0_professionInfos
ADMISSIONS_it
ADMISSIONS_new
ADMISSIONS_set0_admissionAuthority
ADMISSIONS_set0_namingAuthority
ADMISSIONS_set0_professionInfos
ADMISSION_SYNTAX_free
ADMISSION_SYNTAX_get0_admissionAuthority
ADMISSION_SYNTAX_get0_contentsOfAdmissions
ADMISSION_SYNTAX_it
ADMISSION_SYNTAX_new
ADMISSION_SYNTAX_set0_admissionAuthority
ADMISSION_SYNTAX_set0_contentsOfAdmissions
AES_bi_ige_encrypt
AES_cbc_encrypt
AES_cfb128_encrypt
AES_cfb1_encrypt
AES_cfb8_encrypt
AES_decrypt
AES_ecb_encrypt
AES_encrypt
AES_ige_encrypt
AES_ofb128_encrypt
AES_options
AES_set_decrypt_key
AES_set_encrypt_key
AES_unwrap_key
AES_wrap_key
ASIdOrRange_free
ASIdOrRange_it
ASIdOrRange_new
ASIdentifierChoice_free
ASIdentifierChoice_it
ASIdentifierChoice_new
ASIdentifiers_free
ASIdentifiers_it
ASIdentifiers_new
ASN1_ANY_it
ASN1_BIT_STRING_check
ASN1_BIT_STRING_free
ASN1_BIT_STRING_get_bit
ASN1_BIT_STRING_it
ASN1_BIT_STRING_name_print
ASN1_BIT_STRING_new
ASN1_BIT_STRING_num_asc
ASN1_BIT_STRING_set
ASN1_BIT_STRING_set_asc
ASN1_BIT_STRING_set_bit
ASN1_BMPSTRING_free
ASN1_BMPSTRING_it
ASN1_BMPSTRING_new
ASN1_BOOLEAN_it
ASN1_ENUMERATED_free
ASN1_ENUMERATED_get
ASN1_ENUMERATED_get_int64
ASN1_ENUMERATED_it
ASN1_ENUMERATED_new
ASN1_ENUMERATED_set
ASN1_ENUMERATED_set_int64
ASN1_ENUMERATED_to_BN
ASN1_FBOOLEAN_it
ASN1_GENERALIZEDTIME_adj
ASN1_GENERALIZEDTIME_check
ASN1_GENERALIZEDTIME_free
ASN1_GENERALIZEDTIME_it
ASN1_GENERALIZEDTIME_new
ASN1_GENERALIZEDTIME_print
ASN1_GENERALIZEDTIME_set
ASN1_GENERALIZEDTIME_set_string
ASN1_GENERALSTRING_free
ASN1_GENERALSTRING_it
ASN1_GENERALSTRING_new
ASN1_IA5STRING_free
ASN1_IA5STRING_it
ASN1_IA5STRING_new
ASN1_INTEGER_cmp
ASN1_INTEGER_dup
ASN1_INTEGER_free
ASN1_INTEGER_get
ASN1_INTEGER_get_int64
ASN1_INTEGER_get_uint64
ASN1_INTEGER_it
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_INTEGER_set_int64
ASN1_INTEGER_set_uint64
ASN1_INTEGER_to_BN
ASN1_ITEM_get
ASN1_ITEM_lookup
ASN1_NULL_free
ASN1_NULL_it
ASN1_NULL_new
ASN1_OBJECT_create
ASN1_OBJECT_free
ASN1_OBJECT_it
ASN1_OBJECT_new
ASN1_OCTET_STRING_NDEF_it
ASN1_OCTET_STRING_cmp
ASN1_OCTET_STRING_dup
ASN1_OCTET_STRING_free
ASN1_OCTET_STRING_it
ASN1_OCTET_STRING_new
ASN1_OCTET_STRING_set
ASN1_PCTX_free
ASN1_PCTX_get_cert_flags
ASN1_PCTX_get_flags
ASN1_PCTX_get_nm_flags
ASN1_PCTX_get_oid_flags
ASN1_PCTX_get_str_flags
ASN1_PCTX_new
ASN1_PCTX_set_cert_flags
ASN1_PCTX_set_flags
ASN1_PCTX_set_nm_flags
ASN1_PCTX_set_oid_flags
ASN1_PCTX_set_str_flags
ASN1_PRINTABLESTRING_free
ASN1_PRINTABLESTRING_it
ASN1_PRINTABLESTRING_new
ASN1_PRINTABLE_free
ASN1_PRINTABLE_it
ASN1_PRINTABLE_new
ASN1_PRINTABLE_type
ASN1_SCTX_free
ASN1_SCTX_get_app_data
ASN1_SCTX_get_flags
ASN1_SCTX_get_item
ASN1_SCTX_get_template
ASN1_SCTX_new
ASN1_SCTX_set_app_data
ASN1_SEQUENCE_ANY_it
ASN1_SEQUENCE_it
ASN1_SET_ANY_it
ASN1_STRING_TABLE_add
ASN1_STRING_TABLE_cleanup
ASN1_STRING_TABLE_get
ASN1_STRING_clear_free
ASN1_STRING_cmp
ASN1_STRING_copy
ASN1_STRING_data
ASN1_STRING_dup
ASN1_STRING_free
ASN1_STRING_get0_data
ASN1_STRING_get_default_mask
ASN1_STRING_length
ASN1_STRING_length_set
ASN1_STRING_new
ASN1_STRING_print
ASN1_STRING_print_ex
ASN1_STRING_print_ex_fp
ASN1_STRING_set
ASN1_STRING_set0
ASN1_STRING_set_by_NID
ASN1_STRING_set_default_mask
ASN1_STRING_set_default_mask_asc
ASN1_STRING_to_UTF8
ASN1_STRING_type
ASN1_STRING_type_new
ASN1_T61STRING_free
ASN1_T61STRING_it
ASN1_T61STRING_new
ASN1_TBOOLEAN_it
ASN1_TIME_adj
ASN1_TIME_check
ASN1_TIME_cmp_time_t
ASN1_TIME_compare
ASN1_TIME_diff
ASN1_TIME_free
ASN1_TIME_it
ASN1_TIME_new
ASN1_TIME_normalize
ASN1_TIME_print
ASN1_TIME_set
ASN1_TIME_set_string
ASN1_TIME_set_string_X509
ASN1_TIME_to_generalizedtime
ASN1_TIME_to_tm
ASN1_TYPE_cmp
ASN1_TYPE_free
ASN1_TYPE_get
ASN1_TYPE_get_int_octetstring
ASN1_TYPE_get_octetstring
ASN1_TYPE_new
ASN1_TYPE_pack_sequence
ASN1_TYPE_set
ASN1_TYPE_set1
ASN1_TYPE_set_int_octetstring
ASN1_TYPE_set_octetstring
ASN1_TYPE_unpack_sequence
ASN1_UNIVERSALSTRING_free
ASN1_UNIVERSALSTRING_it
ASN1_UNIVERSALSTRING_new
ASN1_UNIVERSALSTRING_to_string
ASN1_UTCTIME_adj
ASN1_UTCTIME_check
ASN1_UTCTIME_cmp_time_t
ASN1_UTCTIME_free
ASN1_UTCTIME_it
ASN1_UTCTIME_new
ASN1_UTCTIME_print
ASN1_UTCTIME_set
ASN1_UTCTIME_set_string
ASN1_UTF8STRING_free
ASN1_UTF8STRING_it
ASN1_UTF8STRING_new
ASN1_VISIBLESTRING_free
ASN1_VISIBLESTRING_it
ASN1_VISIBLESTRING_new
ASN1_add_oid_module
ASN1_add_stable_module
ASN1_bn_print
ASN1_buf_print
ASN1_check_infinite_end
ASN1_const_check_infinite_end
ASN1_d2i_bio
ASN1_d2i_fp
ASN1_digest
ASN1_dup
ASN1_generate_nconf
ASN1_generate_v3
ASN1_get_object
ASN1_i2d_bio
ASN1_i2d_fp
ASN1_item_d2i
ASN1_item_d2i_bio
ASN1_item_d2i_fp
ASN1_item_digest
ASN1_item_dup
ASN1_item_ex_d2i
ASN1_item_ex_free
ASN1_item_ex_i2d
ASN1_item_ex_new
ASN1_item_free
ASN1_item_i2d
ASN1_item_i2d_bio
ASN1_item_i2d_fp
ASN1_item_ndef_i2d
ASN1_item_new
ASN1_item_pack
ASN1_item_print
ASN1_item_sign
ASN1_item_sign_ctx
ASN1_item_unpack
ASN1_item_verify
ASN1_mbstring_copy
ASN1_mbstring_ncopy
ASN1_object_size
ASN1_parse
ASN1_parse_dump
ASN1_put_eoc
ASN1_put_object
ASN1_sign
ASN1_str2mask
ASN1_tag2bit
ASN1_tag2str
ASN1_verify
ASRange_free
ASRange_it
ASRange_new
ASYNC_WAIT_CTX_clear_fd
ASYNC_WAIT_CTX_free
ASYNC_WAIT_CTX_get_all_fds
ASYNC_WAIT_CTX_get_changed_fds
ASYNC_WAIT_CTX_get_fd
ASYNC_WAIT_CTX_new
ASYNC_WAIT_CTX_set_wait_fd
ASYNC_block_pause
ASYNC_cleanup_thread
ASYNC_get_current_job
ASYNC_get_wait_ctx
ASYNC_init_thread
ASYNC_is_capable
ASYNC_pause_job
ASYNC_start_job
ASYNC_unblock_pause
AUTHORITY_INFO_ACCESS_free
AUTHORITY_INFO_ACCESS_it
AUTHORITY_INFO_ACCESS_new
AUTHORITY_KEYID_free
AUTHORITY_KEYID_it
AUTHORITY_KEYID_new
BASIC_CONSTRAINTS_free
BASIC_CONSTRAINTS_it
BASIC_CONSTRAINTS_new
BF_cbc_encrypt
BF_cfb64_encrypt
BF_decrypt
BF_ecb_encrypt
BF_encrypt
BF_ofb64_encrypt
BF_options
BF_set_key
BIGNUM_it
BIO_ADDRINFO_address
BIO_ADDRINFO_family
BIO_ADDRINFO_free
BIO_ADDRINFO_next
BIO_ADDRINFO_protocol
BIO_ADDRINFO_socktype
BIO_ADDR_clear
BIO_ADDR_family
BIO_ADDR_free
BIO_ADDR_hostname_string
BIO_ADDR_new
BIO_ADDR_path_string
BIO_ADDR_rawaddress
BIO_ADDR_rawmake
BIO_ADDR_rawport
BIO_ADDR_service_string
BIO_accept
BIO_accept_ex
BIO_asn1_get_prefix
BIO_asn1_get_suffix
BIO_asn1_set_prefix
BIO_asn1_set_suffix
BIO_bind
BIO_callback_ctrl
BIO_clear_flags
BIO_closesocket
BIO_connect
BIO_copy_next_retry
BIO_ctrl
BIO_ctrl_get_read_request
BIO_ctrl_get_write_guarantee
BIO_ctrl_pending
BIO_ctrl_reset_read_request
BIO_ctrl_wpending
BIO_debug_callback
BIO_dgram_non_fatal_error
BIO_dump
BIO_dump_cb
BIO_dump_fp
BIO_dump_indent
BIO_dump_indent_cb
BIO_dump_indent_fp
BIO_dup_chain
BIO_f_asn1
BIO_f_base64
BIO_f_buffer
BIO_f_cipher
BIO_f_linebuffer
BIO_f_md
BIO_f_nbio_test
BIO_f_null
BIO_f_reliable
BIO_fd_non_fatal_error
BIO_fd_should_retry
BIO_find_type
BIO_free
BIO_free_all
BIO_get_accept_socket
BIO_get_callback
BIO_get_callback_arg
BIO_get_callback_ex
BIO_get_data
BIO_get_ex_data
BIO_get_host_ip
BIO_get_init
BIO_get_new_index
BIO_get_port
BIO_get_retry_BIO
BIO_get_retry_reason
BIO_get_shutdown
BIO_gethostbyname
BIO_gets
BIO_hex_string
BIO_indent
BIO_int_ctrl
BIO_listen
BIO_lookup
BIO_lookup_ex
BIO_meth_free
BIO_meth_get_callback_ctrl
BIO_meth_get_create
BIO_meth_get_ctrl
BIO_meth_get_destroy
BIO_meth_get_gets
BIO_meth_get_puts
BIO_meth_get_read
BIO_meth_get_read_ex
BIO_meth_get_write
BIO_meth_get_write_ex
BIO_meth_new
BIO_meth_set_callback_ctrl
BIO_meth_set_create
BIO_meth_set_ctrl
BIO_meth_set_destroy
BIO_meth_set_gets
BIO_meth_set_puts
BIO_meth_set_read
BIO_meth_set_read_ex
BIO_meth_set_write
BIO_meth_set_write_ex
BIO_method_name
BIO_method_type
BIO_new
BIO_new_CMS
BIO_new_NDEF
BIO_new_PKCS7
BIO_new_accept
BIO_new_bio_pair
BIO_new_connect
BIO_new_dgram
BIO_new_fd
BIO_new_file
BIO_new_fp
BIO_new_mem_buf
BIO_new_socket
BIO_next
BIO_nread
BIO_nread0
BIO_number_read
BIO_number_written
BIO_nwrite
BIO_nwrite0
BIO_parse_hostserv
BIO_pop
BIO_printf
BIO_ptr_ctrl
BIO_push
BIO_puts
BIO_read
BIO_read_ex
BIO_s_accept
BIO_s_bio
BIO_s_connect
BIO_s_datagram
BIO_s_fd
BIO_s_file
BIO_s_log
BIO_s_mem
BIO_s_null
BIO_s_secmem
BIO_s_socket
BIO_set_callback
BIO_set_callback_arg
BIO_set_callback_ex
BIO_set_cipher
BIO_set_data
BIO_set_ex_data
BIO_set_flags
BIO_set_init
BIO_set_next
BIO_set_retry_reason
BIO_set_shutdown
BIO_set_tcp_ndelay
BIO_snprintf
BIO_sock_error
BIO_sock_info
BIO_sock_init
BIO_sock_non_fatal_error
BIO_sock_should_retry
BIO_socket
BIO_socket_ioctl
BIO_socket_nbio
BIO_test_flags
BIO_up_ref
BIO_vfree
BIO_vprintf
BIO_vsnprintf
BIO_write
BIO_write_ex
BN_BLINDING_convert
BN_BLINDING_convert_ex
BN_BLINDING_create_param
BN_BLINDING_free
BN_BLINDING_get_flags
BN_BLINDING_invert
BN_BLINDING_invert_ex
BN_BLINDING_is_current_thread
BN_BLINDING_lock
BN_BLINDING_new
BN_BLINDING_set_current_thread
BN_BLINDING_set_flags
BN_BLINDING_unlock
BN_BLINDING_update
BN_CTX_end
BN_CTX_free
BN_CTX_get
BN_CTX_new
BN_CTX_secure_new
BN_CTX_start
BN_GENCB_call
BN_GENCB_free
BN_GENCB_get_arg
BN_GENCB_new
BN_GENCB_set
BN_GENCB_set_old
BN_GF2m_add
BN_GF2m_arr2poly
BN_GF2m_mod
BN_GF2m_mod_arr
BN_GF2m_mod_div
BN_GF2m_mod_div_arr
BN_GF2m_mod_exp

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 823KB - Virtual size: 823KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 283B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\OpenSSL\1.1\libssl-1_1-x64.dll
.dll windows x64

1bc979382b95c302d65b249ddb484dfe

Code Sign

4f:94:b0:2f:9b:02:65:a7:e8:8c:e3:de:bc:50:63:43
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

18/04/2019, 00:00

Not After

16/06/2021, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22/07/2014, 00:00

Not After

21/07/2024, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:2d:23:cb:00:00:00:00:00:21
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:46

Not After

22/02/2021, 19:56

Subject

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ae:c0:af:e5:3c:32:5a:15:9b:b4:83:8d:27:12:17:11:8c:b2:07:05:20:f7:48:c0:3d:56:f6:4b:33:de:4f:e9
Signer

Actual PE Digest

ae:c0:af:e5:3c:32:5a:15:9b:b4:83:8d:27:12:17:11:8c:b2:07:05:20:f7:48:c0:3d:56:f6:4b:33:de:4f:e9

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

27/03/2020, 17:05
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libcrypto-1_1-x64

EVP_DigestFinal_ex
EVP_MD_CTX_copy
EVP_DigestSignFinal
EVP_CIPHER_CTX_ctrl
RAND_bytes
EVP_CipherInit_ex
EVP_CipherUpdate
EVP_CipherFinal_ex
EVP_MD_type
EVP_DigestInit_ex
EVP_DigestFinal
SHA1_Init
SHA1_Transform
SHA224_Init
SHA256_Init
SHA256_Transform
SHA384_Init
SHA512_Init
SHA512_Transform
MD5_Init
MD5_Transform
CRYPTO_clear_free
OPENSSL_cleanse
COMP_CTX_new
COMP_CTX_free
BIO_s_mem
EVP_CIPHER_key_length
EVP_MD_CTX_ctrl
EVP_MD_CTX_set_flags
EVP_CIPHER_CTX_new
EVP_CIPHER_CTX_reset
EVP_md5
EVP_sha1
OPENSSL_sk_num
OPENSSL_sk_value
OPENSSL_sk_new_reserve
OPENSSL_sk_pop_free
CRYPTO_memdup
CRYPTO_strdup
EVP_sha256
EVP_PKEY_security_bits
EVP_PKEY_set_type
EVP_PKEY_set1_DH
EVP_PKEY_new
EVP_PKEY_up_ref
EVP_PKEY_free
EVP_PKEY_CTX_new
EVP_PKEY_CTX_new_id
EVP_PKEY_CTX_free
EVP_PKEY_CTX_ctrl
EVP_PKEY_derive_init
EVP_PKEY_derive_set_peer
EVP_PKEY_derive
EVP_PKEY_paramgen_init
EVP_PKEY_paramgen
EVP_PKEY_keygen_init
EVP_PKEY_keygen
EC_GROUP_get_curve_name
EC_KEY_get0_group
X509_NAME_free
X509_free
X509_it
ASN1_OCTET_STRING_it
INT32_it
ZINT32_it
UINT32_it
ZUINT32_it
ZINT64_it
ZUINT64_it
CRYPTO_strndup
ASN1_item_free
ASN1_item_d2i
ASN1_item_i2d
OPENSSL_DIR_read
OPENSSL_DIR_end
OPENSSL_sk_shift
OPENSSL_sk_pop
OPENSSL_sk_set_cmp_func
CRYPTO_THREAD_lock_new
CRYPTO_THREAD_lock_free
CRYPTO_get_ex_new_index
CRYPTO_THREAD_run_once
BIO_s_file
EVP_PKEY_id
OPENSSL_LH_new
OPENSSL_LH_free
OPENSSL_LH_insert
OPENSSL_LH_retrieve
X509_STORE_new
X509_STORE_free
X509_STORE_up_ref
X509_STORE_CTX_new
X509_STORE_CTX_free
X509_STORE_CTX_init
X509_STORE_CTX_set_verify_cb
X509_STORE_add_cert
X509_STORE_CTX_set_ex_data
X509_STORE_CTX_get_error
X509_STORE_CTX_get0_chain
X509_STORE_CTX_get1_chain
X509_STORE_CTX_set_flags
X509_STORE_CTX_get0_param
X509_STORE_CTX_set_default
X509_STORE_CTX_set0_dane
X509_VERIFY_PARAM_set1
X509_VERIFY_PARAM_set_auth_level
X509_VERIFY_PARAM_move_peername
X509_verify_cert_error_string
X509_NAME_dup
i2d_X509_NAME
X509_get_subject_name
X509_up_ref
X509_chain_up_ref
X509_cmp
X509_NAME_hash
X509_verify_cert
PEM_read_bio_X509
X509_get_extension_flags
OPENSSL_sk_new
OPENSSL_sk_insert
OPENSSL_sk_delete
OPENSSL_sk_dup
OPENSSL_sk_sort
CRYPTO_mem_ctrl
OBJ_nid2sn
COMP_get_type
COMP_get_name
COMP_zlib
EVP_enc_null
EVP_get_cipherbyname
EVP_get_digestbyname
EVP_PKEY_asn1_find_str
EVP_PKEY_asn1_get0_info
ENGINE_finish
CONF_parse_list
DH_free
OBJ_sn2nid
EC_curve_nist2nid
EC_KEY_new_by_curve_name
EC_KEY_free
X509_STORE_load_locations
PEM_read_bio_DHparams
ERR_func_error_string
ERR_load_strings_const
OPENSSL_init_crypto
OPENSSL_atexit
err_free_strings_int
OBJ_NAME_add
EVP_md5_sha1
EVP_sha224
EVP_sha384
EVP_sha512
EVP_des_cbc
EVP_des_ede3_cbc
EVP_rc4
EVP_rc4_hmac_md5
EVP_idea_cbc
EVP_rc2_cbc
EVP_rc2_40_cbc
EVP_aes_128_cbc
EVP_aes_128_ccm
EVP_aes_128_gcm
EVP_aes_192_cbc
EVP_aes_256_cbc
EVP_aes_256_ccm
EVP_aes_256_gcm
EVP_aes_128_cbc_hmac_sha1
EVP_aes_256_cbc_hmac_sha1
EVP_aes_128_cbc_hmac_sha256
EVP_aes_256_cbc_hmac_sha256
EVP_aria_128_gcm
EVP_aria_256_gcm
EVP_camellia_128_cbc
EVP_camellia_256_cbc
EVP_chacha20_poly1305
EVP_seed_cbc
EVP_add_cipher
EVP_add_digest
CRYPTO_THREAD_read_lock
CRYPTO_THREAD_write_lock
CRYPTO_THREAD_unlock
CRYPTO_new_ex_data
CRYPTO_dup_ex_data
CRYPTO_free_ex_data
CRYPTO_set_ex_data
CRYPTO_get_ex_data
CRYPTO_realloc
CRYPTO_secure_zalloc
CRYPTO_secure_free
COMP_expand_block
COMP_CTX_get_method
BIO_int_ctrl
BIO_pop
BIO_free_all
BIO_s_socket
OPENSSL_LH_num_items
ERR_peek_error
OBJ_bsearch_
EVP_CIPHER_CTX_free
X509_STORE_add_lookup
X509_LOOKUP_hash_dir
X509_LOOKUP_file
X509_LOOKUP_ctrl
X509_STORE_set_default_paths
X509_VERIFY_PARAM_new
X509_VERIFY_PARAM_free
X509_VERIFY_PARAM_inherit
X509_VERIFY_PARAM_set_purpose
X509_VERIFY_PARAM_set_trust
X509_VERIFY_PARAM_set_depth
X509_VERIFY_PARAM_set1_host
X509_VERIFY_PARAM_add1_host
X509_VERIFY_PARAM_set_hostflags
EVP_DigestUpdate
X509_VERIFY_PARAM_get_depth
d2i_PUBKEY
X509_EXTENSION_free
d2i_X509
X509_get0_pubkey
X509_check_private_key
X509_get_ext_d2i
ASYNC_WAIT_CTX_new
ASYNC_WAIT_CTX_free
ASYNC_WAIT_CTX_get_all_fds
ASYNC_WAIT_CTX_get_changed_fds
ASYNC_start_job
ASYNC_get_current_job
CT_POLICY_EVAL_CTX_new
CT_POLICY_EVAL_CTX_free
CT_POLICY_EVAL_CTX_set1_cert
CT_POLICY_EVAL_CTX_set1_issuer
CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE
CT_POLICY_EVAL_CTX_set_time
SCT_LIST_free
SCT_set_source
SCT_get_validation_status
SCT_LIST_validate
o2i_SCT_LIST
CTLOG_STORE_new
CTLOG_STORE_free
CTLOG_STORE_load_file
CTLOG_STORE_load_default_file
X509_get_key_usage
RAND_priv_bytes
OCSP_response_get1_basic
OCSP_resp_count
OCSP_resp_get0
OCSP_SINGLERESP_get1_ext_d2i
OCSP_BASICRESP_free
OCSP_RESPID_free
OCSP_RESPONSE_free
d2i_OCSP_RESPONSE
conf_ssl_get
conf_ssl_name_find
conf_ssl_get_cmd
RSA_free
RSA_up_ref
RSA_flags
d2i_RSAPrivateKey
ERR_peek_last_error
EVP_PKEY_assign
EVP_PKEY_get0_RSA
EVP_PKEY_get0_EC_KEY
d2i_PrivateKey
EVP_PKEY_copy_parameters
EVP_PKEY_missing_parameters
EVP_PKEY_cmp
EC_KEY_can_sign
d2i_X509_bio
d2i_RSAPrivateKey_bio
d2i_PrivateKey_bio
X509_get_pubkey
PEM_read_bio
PEM_read_bio_X509_AUX
PEM_read_bio_RSAPrivateKey
PEM_read_bio_PrivateKey
OPENSSL_LH_delete
OPENSSL_LH_doall_arg
OPENSSL_LH_get_down_load
OPENSSL_LH_set_down_load
PEM_ASN1_read_bio
PEM_ASN1_write_bio
PEM_ASN1_read
PEM_ASN1_write
ENGINE_get_ssl_client_cert_function
ENGINE_init
BIO_puts
BIO_dump_indent
BIO_printf
EVP_DigestSignInit
EVP_PKEY_new_raw_private_key
EVP_PKEY_set1_tls_encodedpoint
EVP_PKEY_get1_tls_encodedpoint
i2d_X509_EXTENSIONS
i2d_OCSP_RESPID
EVP_DigestSign
d2i_X509_EXTENSIONS
d2i_OCSP_RESPID
BUF_MEM_new
BUF_MEM_grow_clean
BN_is_zero
BN_num_bits
BN_bin2bn
BN_bn2bin
BN_free
RSA_pkey_ctx_ctrl
DH_new
DH_security_bits
DH_check_params
DH_set0_pqg
DH_get0_key
DH_set0_key
EVP_Digest
EVP_DigestInit
EVP_DigestVerify
EVP_DigestVerifyInit
EVP_PKEY_size
EVP_PKEY_get0_DH
EVP_PKEY_encrypt_init
EVP_PKEY_encrypt
ENGINE_load_ssl_client_cert
BUF_reverse
EVP_DigestVerifyFinal
d2i_X509_NAME
i2d_X509
X509_NAME_cmp
ASN1_ANY_it
BN_ucmp
ASN1_TYPE_get
ASN1_item_new
RSA_size
RSA_private_decrypt
DH_get0_pqg
EVP_EncryptInit_ex
EVP_EncryptUpdate
EVP_EncryptFinal
EVP_PKEY_decrypt_init
EVP_PKEY_decrypt
HMAC_CTX_new
HMAC_CTX_free
HMAC_Init_ex
HMAC_Update
HMAC_Final
EVP_PKEY_new_mac_key
BN_new
BN_set_word
BN_get_rfc3526_prime_3072
BN_get_rfc3526_prime_8192
OBJ_ln2nid
EVP_DecryptInit_ex
EVP_DecryptUpdate
EVP_DecryptFinal
EVP_PKEY_get0
EVP_PKEY_get_default_digest_nid
HMAC_size
EC_GROUP_method_of
EC_METHOD_get_field_type
EC_KEY_get_conv_form
DH_get_1024_160
DH_get_2048_224
X509_get_signature_info
X509_get_signature_nid
X509_get_issuer_name
X509_chain_check_suiteb
ERR_set_mark
ERR_pop_to_mark
BN_clear_free
BN_copy
BN_dup
SRP_create_verifier_BN
SRP_check_known_gN_param
SRP_get_default_gN
SRP_Calc_server_key
SRP_Calc_B
SRP_Verify_A_mod_N
SRP_Calc_u
SRP_Calc_x
SRP_Calc_A
SRP_Calc_client_key
SRP_Verify_B_mod_N
COMP_compress_block
CRYPTO_memcmp
EVP_CIPHER_CTX_iv_length
EVP_CIPHER_CTX_cipher
EVP_CIPHER_flags
EVP_MD_CTX_md
EVP_MD_size
ERR_add_error_data
BIO_snprintf
CRYPTO_malloc
BUF_MEM_grow
OPENSSL_sk_push
OPENSSL_sk_find
OPENSSL_sk_free
OPENSSL_sk_new_null
ERR_clear_error
BIO_ADDR_clear
BIO_ADDR_free
BIO_ADDR_new
BIO_read
BIO_test_flags
ERR_put_error
BIO_copy_next_retry
BIO_f_buffer
BIO_s_connect
BIO_set_retry_reason
BIO_get_retry_reason
BIO_set_next
BIO_next
BIO_find_type
BIO_push
BIO_callback_ctrl
EVP_MD_CTX_copy_ex
EVP_MD_CTX_free
EVP_MD_CTX_new
BIO_ctrl
BIO_write
EVP_Cipher
EVP_CIPHER_CTX_block_size
BIO_up_ref
BIO_get_shutdown
BIO_set_shutdown
BIO_get_init
BIO_set_init
BIO_get_data
BIO_set_data
BIO_free
BIO_new
BIO_method_type
BIO_clear_flags
BIO_set_flags
CRYPTO_free
EVP_CIPHER_iv_length
X509_VERIFY_PARAM_get0_peername
EVP_CIPHER_block_size
BUF_MEM_free
CRYPTO_zalloc

kernel32

GetCurrentThreadId
SetLastError
GetSystemTime
SystemTimeToFileTime
GetLastError
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
DisableThreadLibraryCalls
InitializeSListHead

vcruntime140

memset
memchr
memcmp
__C_specific_handler
__std_type_info_destroy_list
memcpy
memmove
strchr

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-string-l1-1-0

strncmp
_strnicmp
_stricmp

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

_errno
terminate
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

Exports

Exports

BIO_f_ssl
BIO_new_buffer_ssl_connect
BIO_new_ssl
BIO_new_ssl_connect
BIO_ssl_copy_session_id
BIO_ssl_shutdown
DTLS_client_method
DTLS_get_data_mtu
DTLS_method
DTLS_server_method
DTLS_set_timer_cb
DTLSv1_2_client_method
DTLSv1_2_method
DTLSv1_2_server_method
DTLSv1_client_method
DTLSv1_listen
DTLSv1_method
DTLSv1_server_method
ERR_load_SSL_strings
OPENSSL_cipher_name
OPENSSL_init_ssl
PEM_read_SSL_SESSION
PEM_read_bio_SSL_SESSION
PEM_write_SSL_SESSION
PEM_write_bio_SSL_SESSION
SRP_Calc_A_param
SSL_CIPHER_description
SSL_CIPHER_find
SSL_CIPHER_get_auth_nid
SSL_CIPHER_get_bits
SSL_CIPHER_get_cipher_nid
SSL_CIPHER_get_digest_nid
SSL_CIPHER_get_handshake_digest
SSL_CIPHER_get_id
SSL_CIPHER_get_kx_nid
SSL_CIPHER_get_name
SSL_CIPHER_get_protocol_id
SSL_CIPHER_get_version
SSL_CIPHER_is_aead
SSL_CIPHER_standard_name
SSL_COMP_add_compression_method
SSL_COMP_get0_name
SSL_COMP_get_compression_methods
SSL_COMP_get_id
SSL_COMP_get_name
SSL_COMP_set0_compression_methods
SSL_CONF_CTX_clear_flags
SSL_CONF_CTX_finish
SSL_CONF_CTX_free
SSL_CONF_CTX_new
SSL_CONF_CTX_set1_prefix
SSL_CONF_CTX_set_flags
SSL_CONF_CTX_set_ssl
SSL_CONF_CTX_set_ssl_ctx
SSL_CONF_cmd
SSL_CONF_cmd_argv
SSL_CONF_cmd_value_type
SSL_CTX_SRP_CTX_free
SSL_CTX_SRP_CTX_init
SSL_CTX_add1_to_CA_list
SSL_CTX_add_client_CA
SSL_CTX_add_client_custom_ext
SSL_CTX_add_custom_ext
SSL_CTX_add_server_custom_ext
SSL_CTX_add_session
SSL_CTX_callback_ctrl
SSL_CTX_check_private_key
SSL_CTX_clear_options
SSL_CTX_config
SSL_CTX_ct_is_enabled
SSL_CTX_ctrl
SSL_CTX_dane_clear_flags
SSL_CTX_dane_enable
SSL_CTX_dane_mtype_set
SSL_CTX_dane_set_flags
SSL_CTX_enable_ct
SSL_CTX_flush_sessions
SSL_CTX_free
SSL_CTX_get0_CA_list
SSL_CTX_get0_certificate
SSL_CTX_get0_ctlog_store
SSL_CTX_get0_param
SSL_CTX_get0_privatekey
SSL_CTX_get0_security_ex_data
SSL_CTX_get_cert_store
SSL_CTX_get_ciphers
SSL_CTX_get_client_CA_list
SSL_CTX_get_client_cert_cb
SSL_CTX_get_default_passwd_cb
SSL_CTX_get_default_passwd_cb_userdata
SSL_CTX_get_ex_data
SSL_CTX_get_info_callback
SSL_CTX_get_keylog_callback
SSL_CTX_get_max_early_data
SSL_CTX_get_num_tickets
SSL_CTX_get_options
SSL_CTX_get_quiet_shutdown
SSL_CTX_get_record_padding_callback_arg
SSL_CTX_get_recv_max_early_data
SSL_CTX_get_security_callback
SSL_CTX_get_security_level
SSL_CTX_get_ssl_method
SSL_CTX_get_timeout
SSL_CTX_get_verify_callback
SSL_CTX_get_verify_depth
SSL_CTX_get_verify_mode
SSL_CTX_has_client_custom_ext
SSL_CTX_load_verify_locations
SSL_CTX_new
SSL_CTX_remove_session
SSL_CTX_sess_get_get_cb
SSL_CTX_sess_get_new_cb
SSL_CTX_sess_get_remove_cb
SSL_CTX_sess_set_get_cb
SSL_CTX_sess_set_new_cb
SSL_CTX_sess_set_remove_cb
SSL_CTX_sessions
SSL_CTX_set0_CA_list
SSL_CTX_set0_ctlog_store
SSL_CTX_set0_security_ex_data
SSL_CTX_set1_cert_store
SSL_CTX_set1_param
SSL_CTX_set_allow_early_data_cb
SSL_CTX_set_alpn_protos
SSL_CTX_set_alpn_select_cb
SSL_CTX_set_block_padding
SSL_CTX_set_cert_cb
SSL_CTX_set_cert_store
SSL_CTX_set_cert_verify_callback
SSL_CTX_set_cipher_list
SSL_CTX_set_ciphersuites
SSL_CTX_set_client_CA_list
SSL_CTX_set_client_cert_cb
SSL_CTX_set_client_cert_engine
SSL_CTX_set_client_hello_cb
SSL_CTX_set_cookie_generate_cb
SSL_CTX_set_cookie_verify_cb
SSL_CTX_set_ct_validation_callback
SSL_CTX_set_ctlog_list_file
SSL_CTX_set_default_ctlog_list_file
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_read_buffer_len
SSL_CTX_set_default_verify_dir
SSL_CTX_set_default_verify_file
SSL_CTX_set_default_verify_paths
SSL_CTX_set_ex_data
SSL_CTX_set_generate_session_id
SSL_CTX_set_info_callback
SSL_CTX_set_keylog_callback
SSL_CTX_set_max_early_data
SSL_CTX_set_msg_callback
SSL_CTX_set_next_proto_select_cb
SSL_CTX_set_next_protos_advertised_cb
SSL_CTX_set_not_resumable_session_callback
SSL_CTX_set_num_tickets
SSL_CTX_set_options
SSL_CTX_set_post_handshake_auth
SSL_CTX_set_psk_client_callback
SSL_CTX_set_psk_find_session_callback
SSL_CTX_set_psk_server_callback
SSL_CTX_set_psk_use_session_callback
SSL_CTX_set_purpose
SSL_CTX_set_quiet_shutdown
SSL_CTX_set_record_padding_callback
SSL_CTX_set_record_padding_callback_arg
SSL_CTX_set_recv_max_early_data
SSL_CTX_set_security_callback
SSL_CTX_set_security_level
SSL_CTX_set_session_id_context
SSL_CTX_set_session_ticket_cb
SSL_CTX_set_srp_cb_arg
SSL_CTX_set_srp_client_pwd_callback
SSL_CTX_set_srp_password
SSL_CTX_set_srp_strength
SSL_CTX_set_srp_username
SSL_CTX_set_srp_username_callback
SSL_CTX_set_srp_verify_param_callback
SSL_CTX_set_ssl_version
SSL_CTX_set_stateless_cookie_generate_cb
SSL_CTX_set_stateless_cookie_verify_cb
SSL_CTX_set_timeout
SSL_CTX_set_tlsext_max_fragment_length
SSL_CTX_set_tlsext_use_srtp
SSL_CTX_set_tmp_dh_callback
SSL_CTX_set_trust
SSL_CTX_set_verify
SSL_CTX_set_verify_depth
SSL_CTX_up_ref
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_cert_and_key
SSL_CTX_use_certificate
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_file
SSL_CTX_use_psk_identity_hint
SSL_CTX_use_serverinfo
SSL_CTX_use_serverinfo_ex
SSL_CTX_use_serverinfo_file
SSL_SESSION_dup
SSL_SESSION_free
SSL_SESSION_get0_alpn_selected
SSL_SESSION_get0_cipher
SSL_SESSION_get0_hostname
SSL_SESSION_get0_id_context
SSL_SESSION_get0_peer
SSL_SESSION_get0_ticket
SSL_SESSION_get0_ticket_appdata
SSL_SESSION_get_compress_id
SSL_SESSION_get_ex_data
SSL_SESSION_get_id
SSL_SESSION_get_master_key
SSL_SESSION_get_max_early_data
SSL_SESSION_get_max_fragment_length
SSL_SESSION_get_protocol_version
SSL_SESSION_get_ticket_lifetime_hint
SSL_SESSION_get_time
SSL_SESSION_get_timeout
SSL_SESSION_has_ticket
SSL_SESSION_is_resumable
SSL_SESSION_new
SSL_SESSION_print
SSL_SESSION_print_fp
SSL_SESSION_print_keylog
SSL_SESSION_set1_alpn_selected
SSL_SESSION_set1_hostname
SSL_SESSION_set1_id
SSL_SESSION_set1_id_context
SSL_SESSION_set1_master_key
SSL_SESSION_set1_ticket_appdata
SSL_SESSION_set_cipher
SSL_SESSION_set_ex_data
SSL_SESSION_set_max_early_data
SSL_SESSION_set_protocol_version
SSL_SESSION_set_time
SSL_SESSION_set_timeout
SSL_SESSION_up_ref
SSL_SRP_CTX_free
SSL_SRP_CTX_init
SSL_accept
SSL_add1_host
SSL_add1_to_CA_list
SSL_add_client_CA
SSL_add_dir_cert_subjects_to_stack
SSL_add_file_cert_subjects_to_stack
SSL_add_ssl_module
SSL_alert_desc_string
SSL_alert_desc_string_long
SSL_alert_type_string
SSL_alert_type_string_long
SSL_alloc_buffers
SSL_bytes_to_cipher_list
SSL_callback_ctrl
SSL_certs_clear
SSL_check_chain
SSL_check_private_key
SSL_clear
SSL_clear_options
SSL_client_hello_get0_ciphers
SSL_client_hello_get0_compression_methods
SSL_client_hello_get0_ext
SSL_client_hello_get0_legacy_version
SSL_client_hello_get0_random
SSL_client_hello_get0_session_id
SSL_client_hello_get1_extensions_present
SSL_client_hello_isv2
SSL_client_version
SSL_config
SSL_connect
SSL_copy_session_id
SSL_ct_is_enabled
SSL_ctrl
SSL_dane_clear_flags
SSL_dane_enable
SSL_dane_set_flags
SSL_dane_tlsa_add
SSL_do_handshake
SSL_dup
SSL_dup_CA_list
SSL_enable_ct
SSL_export_keying_material
SSL_export_keying_material_early
SSL_extension_supported
SSL_free
SSL_free_buffers
SSL_get0_CA_list
SSL_get0_alpn_selected
SSL_get0_dane
SSL_get0_dane_authority
SSL_get0_dane_tlsa
SSL_get0_next_proto_negotiated
SSL_get0_param
SSL_get0_peer_CA_list
SSL_get0_peer_scts
SSL_get0_peername
SSL_get0_security_ex_data
SSL_get0_verified_chain
SSL_get1_session
SSL_get1_supported_ciphers
SSL_get_SSL_CTX
SSL_get_all_async_fds
SSL_get_certificate
SSL_get_changed_async_fds
SSL_get_cipher_list
SSL_get_ciphers
SSL_get_client_CA_list
SSL_get_client_ciphers
SSL_get_client_random
SSL_get_current_cipher
SSL_get_current_compression
SSL_get_current_expansion
SSL_get_default_passwd_cb
SSL_get_default_passwd_cb_userdata
SSL_get_default_timeout
SSL_get_early_data_status
SSL_get_error
SSL_get_ex_data
SSL_get_ex_data_X509_STORE_CTX_idx
SSL_get_fd
SSL_get_finished
SSL_get_info_callback
SSL_get_key_update_type
SSL_get_max_early_data
SSL_get_num_tickets
SSL_get_options
SSL_get_peer_cert_chain
SSL_get_peer_certificate
SSL_get_peer_finished
SSL_get_peer_signature_type_nid
SSL_get_pending_cipher
SSL_get_privatekey
SSL_get_psk_identity
SSL_get_psk_identity_hint
SSL_get_quiet_shutdown
SSL_get_rbio
SSL_get_read_ahead
SSL_get_record_padding_callback_arg
SSL_get_recv_max_early_data
SSL_get_rfd
SSL_get_security_callback
SSL_get_security_level
SSL_get_selected_srtp_profile
SSL_get_server_random
SSL_get_servername
SSL_get_servername_type
SSL_get_session
SSL_get_shared_ciphers
SSL_get_shared_sigalgs
SSL_get_shutdown
SSL_get_sigalgs
SSL_get_signature_type_nid
SSL_get_srp_N
SSL_get_srp_g
SSL_get_srp_userinfo
SSL_get_srp_username
SSL_get_srtp_profiles
SSL_get_ssl_method
SSL_get_state
SSL_get_verify_callback
SSL_get_verify_depth
SSL_get_verify_mode
SSL_get_verify_result
SSL_get_version
SSL_get_wbio
SSL_get_wfd
SSL_has_matching_session_id
SSL_has_pending
SSL_in_before
SSL_in_init
SSL_is_dtls
SSL_is_init_finished
SSL_is_server
SSL_key_update
SSL_load_client_CA_file
SSL_new
SSL_peek
SSL_peek_ex
SSL_pending
SSL_read
SSL_read_early_data
SSL_read_ex
SSL_renegotiate
SSL_renegotiate_abbreviated
SSL_renegotiate_pending
SSL_rstate_string
SSL_rstate_string_long
SSL_select_next_proto
SSL_session_reused
SSL_set0_CA_list
SSL_set0_rbio
SSL_set0_security_ex_data
SSL_set0_wbio
SSL_set1_host
SSL_set1_param
SSL_set_SSL_CTX
SSL_set_accept_state
SSL_set_allow_early_data_cb
SSL_set_alpn_protos
SSL_set_bio
SSL_set_block_padding
SSL_set_cert_cb
SSL_set_cipher_list
SSL_set_ciphersuites
SSL_set_client_CA_list
SSL_set_connect_state
SSL_set_ct_validation_callback
SSL_set_debug
SSL_set_default_passwd_cb
SSL_set_default_passwd_cb_userdata
SSL_set_default_read_buffer_len
SSL_set_ex_data
SSL_set_fd
SSL_set_generate_session_id
SSL_set_hostflags
SSL_set_info_callback
SSL_set_max_early_data
SSL_set_msg_callback
SSL_set_not_resumable_session_callback
SSL_set_num_tickets
SSL_set_options
SSL_set_post_handshake_auth
SSL_set_psk_client_callback
SSL_set_psk_find_session_callback
SSL_set_psk_server_callback
SSL_set_psk_use_session_callback
SSL_set_purpose
SSL_set_quiet_shutdown
SSL_set_read_ahead
SSL_set_record_padding_callback
SSL_set_record_padding_callback_arg
SSL_set_recv_max_early_data
SSL_set_rfd
SSL_set_security_callback
SSL_set_security_level
SSL_set_session
SSL_set_session_id_context
SSL_set_session_secret_cb
SSL_set_session_ticket_ext
SSL_set_session_ticket_ext_cb
SSL_set_shutdown
SSL_set_srp_server_param
SSL_set_srp_server_param_pw
SSL_set_ssl_method
SSL_set_tlsext_max_fragment_length
SSL_set_tlsext_use_srtp
SSL_set_tmp_dh_callback
SSL_set_trust
SSL_set_verify
SSL_set_verify_depth
SSL_set_verify_result
SSL_set_wfd
SSL_shutdown
SSL_srp_server_param_with_username
SSL_state_string
SSL_state_string_long
SSL_stateless
SSL_up_ref
SSL_use_PrivateKey
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_file
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_file
SSL_use_cert_and_key
SSL_use_certificate
SSL_use_certificate_ASN1
SSL_use_certificate_chain_file
SSL_use_certificate_file
SSL_use_psk_identity_hint
SSL_verify_client_post_handshake
SSL_version
SSL_waiting_for_async
SSL_want
SSL_write
SSL_write_early_data
SSL_write_ex
SSLv3_client_method
SSLv3_method
SSLv3_server_method
TLS_client_method
TLS_method
TLS_server_method
TLSv1_1_client_method
TLSv1_1_method
TLSv1_1_server_method
TLSv1_2_client_method
TLSv1_2_method
TLSv1_2_server_method
TLSv1_client_method
TLSv1_method
TLSv1_server_method
d2i_SSL_SESSION
i2d_SSL_SESSION

Sections

.text
Size: 457KB - Virtual size: 456KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 283B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\Schemes\Boards.Schema.xsd
.xml
Automation\Simatic OAM\Schemes\DefaultLogDevices.Schema.xsd
.xml
Automation\Simatic OAM\Schemes\DriverInfo.Schema.xsd
Automation\Simatic OAM\Schemes\Protocols.Schema.xsd
.xml
Automation\Simatic OAM\Schemes\Simatic.Device.Driver.Logdevice.xsd
.xml
Automation\Simatic OAM\Schemes\Simatic.Device.Driver.Logname.xsd
Automation\Simatic OAM\bin\DPDx2CnvPcadpa2.dll
.dll windows x64

dce5cff46041685b84a49fb0e313fd06

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c4:39:c5:67:24:2b:35:fe:13:09:d3:f3:3b:81:6b:05:ad:e2:2a:6f:3e:85:6d:28:c7:6a:78:d7:61:88:b3:9c
Signer

Actual PE Digest

c4:39:c5:67:24:2b:35:fe:13:09:d3:f3:3b:81:6b:05:ad:e2:2a:6f:3e:85:6d:28:c7:6a:78:d7:61:88:b3:9c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

s7epaapi64x

LogDeviceGetValue

kernel32

GetSystemTime
FormatMessageA
GetCurrentProcess
GetModuleHandleW
GetModuleFileNameW
GetCurrentProcessorNumber
CreateMutexW
MapViewOfFile
UnmapViewOfFile
OpenMutexW
CreateFileMappingW
CreateEventW
OpenFileMappingW
OpenEventW
DebugBreak
FreeLibrary
CreateProcessW
CreateDirectoryW
GetSystemDirectoryW
LoadLibraryW
GetTempPathW
WideCharToMultiByte
LoadLibraryA
IsWow64Process
OutputDebugStringW
GetCurrentProcessId
FlushFileBuffers
WriteConsoleW
SetStdHandle
UnregisterWait
GetThreadPriority
SetFilePointerEx
GetConsoleMode
GetConsoleCP
CreateTimerQueue
RegisterWaitForSingleObject
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
UnregisterWaitEx
QueryDepthSList
MultiByteToWideChar
OutputDebugStringA
GetLocalTime
TerminateThread
GetCurrentThreadId
GetModuleFileNameA
WaitForSingleObject
SetEvent
GetModuleHandleA
GetProcAddress
WriteFile
CreateFileA
CreateDirectoryA
GetFileAttributesA
ExitThread
WaitForMultipleObjects
GlobalFree
CreateThread
GlobalAlloc
CreateSemaphoreA
ReadFile
GetFileSize
GetSystemDirectoryA
CreateEventA
CloseHandle
CreateFileW
DeviceIoControl
ReleaseMutex
TlsSetValue
LocalAlloc
TlsAlloc
TlsFree
GetLastError
LocalFree
TlsGetValue
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
SignalObjectAndWait
ResetEvent
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
DuplicateHandle
VirtualProtect
GetStringTypeW
Sleep
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
HeapAlloc
GetCommandLineA
HeapReAlloc
InitializeCriticalSectionAndSpinCount
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
CreateTimerQueueTimer
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
GetStartupInfoW
CreateSemaphoreW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetCurrentThread
ExitProcess
GetModuleHandleExW
HeapSize
GetStdHandle
IsValidCodePage
GetACP
GetOEMCP
GetFileType
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask
SwitchToThread
GetThreadTimes
FreeLibraryAndExitThread
LoadLibraryExW
SetThreadPriority
GetTickCount
GetVersionExW
VirtualAlloc
VirtualFree

user32

DestroyWindow
PostQuitMessage
UnregisterDeviceNotification
RegisterDeviceNotificationA
UnregisterClassA
DefWindowProcA
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
PostMessageA

advapi32

CreateWellKnownSid
FreeSid
SetEntriesInAclW
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegCloseKey
RegQueryValueExA
UnregisterTraceGuids
RegisterTraceGuidsA
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
TraceMessage

shell32

SHGetFolderPathA
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA

ole32

StringFromGUID2

Exports

Exports

CI_N_Aspc2Event
CI_N_Get_AUTO_Baudrate
CI_N_Get_AUTO_Buspara
CI_N_Get_Baudrate
CI_N_Get_InfoWatch
CI_N_Reset_Counter
CI_N_cancel_receive
CI_N_close
CI_N_delete_sema
CI_N_get_cp_cfg
CI_N_get_cp_trace
CI_N_get_err_txt
CI_N_get_info
CI_N_init_sema
CI_N_led_blink
CI_N_led_blink_async
CI_N_open
CI_N_open_direct
CI_N_receive
CI_N_reset_cp
CI_N_reset_cp_direct
CI_N_send
CI_N_set_device_info
CI_N_start_cp
CI_N_start_cp_direct
CI_N_test_excp
SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 537KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\EpDiagEx.dll
.dll windows x64

05ecbbe8dec75eca94aa42449c0ff0fb

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

eb:86:5a:92:7c:4b:1a:97:63:31:45:ed:8a:0c:c8:ee:75:2c:8f:8e:aa:fc:b2:ef:5d:0a:7c:83:6b:22:f4:1f
Signer

Actual PE Digest

eb:86:5a:92:7c:4b:1a:97:63:31:45:ed:8a:0c:c8:ee:75:2c:8f:8e:aa:fc:b2:ef:5d:0a:7c:83:6b:22:f4:1f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mfc110u

ord7245
ord1441
ord7928
ord11767
ord9969
ord12438
ord12376
ord4384
ord7563
ord7868
ord5059
ord2385
ord12056
ord12055
ord14030
ord7498
ord14036
ord8939
ord3952
ord3890
ord12457
ord7516
ord1962
ord11503
ord11502
ord13909
ord12045
ord7566
ord14108
ord5991
ord14110
ord5993
ord14109
ord5992
ord977
ord6477
ord3673
ord5577
ord11759
ord8011
ord11771
ord11739
ord2263
ord1445
ord3782
ord2433
ord984
ord4959
ord1661
ord2292
ord2296
ord8304
ord8305
ord7902
ord4829
ord1662
ord2377
ord5239
ord5427
ord8891
ord5215
ord5430
ord4962
ord5105
ord4943
ord7310
ord7311
ord7301
ord5103
ord7767
ord9786
ord8750
ord1032
ord322
ord290
ord12073
ord4828
ord266
ord265
ord2170
ord8005
ord4595
ord12432
ord4450
ord4449
ord2854
ord2848
ord5580
ord1480
ord4524
ord2160
ord4608
ord7765
ord1658
ord1495
ord1494
ord1492
ord1027
ord286
ord280
ord285
ord296
ord2866
ord13770
ord7738
ord5545
ord4122
ord3670
ord1483
ord323
ord1033
ord2273
ord2315
ord2318
ord2284
ord2317
ord472
ord2182
ord2282
ord2111
ord2214
ord2306
ord473
ord1632
ord1482

msvcr110

wcsnlen
wcsncmp
wcsncpy
_wcsicmp
_vsnwprintf
sprintf_s
_vsnprintf
vsprintf_s
mbstowcs
free
wcstombs
malloc
strcpy
wcstol
__C_specific_handler
wcsncat
_wcsnicmp
swscanf
_purecall
memmove
strstr
_strupr_s
_vswprintf
_CxxThrowException
memcpy_s
strcmp
strrchr
wcsstr
_snprintf_s
swprintf_s
wcscspn
_beginthreadex
_endthreadex
_findclose
_findfirst64i32
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_vsnprintf_s
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__clean_type_info_names_internal
_snwprintf_s
wcslen
wcscpy
wcscpy_s
wcscmp
wcscat_s
wcscat
strlen
strcat_s
strcpy_s
memset
memcpy
memcmp
_vsnwprintf_s
__CxxFrameHandler3

kernel32

CloseHandle
GetLastError
GetCurrentProcess
GetSystemDirectoryW
GetVersionExW
IsWow64Process
LoadLibraryExW
GetFileSize
RaiseException
LoadLibraryExA
GetSystemTimeAsFileTime
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
OpenFile
GetCurrentDirectoryA
WideCharToMultiByte
LoadLibraryA
OpenFileMappingA
CreateFileMappingA
OpenMutexA
lstrlenA
WaitForMultipleObjects
LocalFree
LocalAlloc
GetModuleHandleA
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
GetVersionExA
GetCurrentProcessId
OpenEventA
CreateEventA
CreateMutexA
ReleaseMutex
SetEvent
WriteFile
GetDiskFreeSpaceExA
DeleteFileA
CreateFileA
CreateDirectoryA
GetEnvironmentVariableA
GetTimeFormatW
GetDateFormatW
GetVersion
MultiByteToWideChar
lstrcpyW
FormatMessageW
InitializeCriticalSectionEx
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
lstrlenW
GetModuleHandleW
DeviceIoControl
WinExec
GetTickCount
GetStartupInfoW
GetProcAddress
FreeLibrary
GetSystemDirectoryA
GetLocalTime
CreateProcessW
GetCurrentThreadId
GetExitCodeProcess
Sleep
WaitForSingleObject
SetLastError
OutputDebugStringW
SetFilePointer
ReadFile
FindFirstFileW
FindClose
CreateFileW
GetCurrentDirectoryW
OutputDebugStringA

user32

MessageBoxIndirectW
DestroyWindow
CreateWindowExW
UnregisterClassW
PeekMessageW
GetParent
MessageBoxW
PostMessageW
wsprintfW

advapi32

CryptReleaseContext
RegOpenKeyExW
RegQueryValueExW
CloseServiceHandle
OpenSCManagerW
OpenServiceW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
QueryServiceStatus
StartServiceW
CreateWellKnownSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
SetEntriesInAclA
CryptEncrypt
CryptImportKey
CryptExportKey
CryptDestroyKey
CryptGenKey
RegCloseKey
CryptAcquireContextA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA

shell32

SHGetFolderPathW
SHGetSpecialFolderPathW

oleaut32

SysFreeString

crypt32

CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore

msvcp110

?_Winerror_map@std@@YAPEBDH@Z
?_Syserror_map@std@@YAPEBDH@Z
??0id@locale@std@@QEAA@_K@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Orphan_all@_Container_base0@std@@QEAAXXZ

Exports

Exports

?DecodeMMSTimeW@@YAHPEB_WHPEA_W@Z
?EpGet1613TimeStampW@@YAKPEB_WPEA_WPEAK@Z
?EpGetCEVersion1613FromFileW@@YAHPEB_WPEA_W@Z
?EpGetCEVersion1613W@@YAKPEB_WPEA_WPEAK@Z
?EpGetFwVersion1613FromFileW@@YAHPEB_WPEA_W@Z
?EpGetFwVersion1613W@@YAKPEB_WPEA_WPEAK@Z
?EpGetFwVersion1628W@@YAKPEB_WPEA_WPEAK@Z
?EpGetHwVersion1613W@@YAKPEB_WPEA_WPEAK@Z
AKGetLogDevice
AKGetLogDeviceW
DecodeMMSTime
EpGet1613TimeStamp
EpGetCEVersion1613
EpGetCEVersion1613FromFile
EpGetCp
EpGetCpDatabaseEx
EpGetCpDatabaseExW
EpGetCpMode
EpGetCpModeW
EpGetCpW
EpGetDatabase
EpGetDatabaseEx
EpGetDatabaseExW
EpGetDatabaseW
EpGetDrvVersion1613
EpGetErrorText
EpGetErrorText1613
EpGetErrorText1613W
EpGetErrorText5612W
EpGetErrorText561x
EpGetErrorText561xW
EpGetErrorText5622W
EpGetErrorText5711W
EpGetErrorTextPcAdapA2W
EpGetErrorTextW
EpGetFwVersion
EpGetFwVersion1413
EpGetFwVersion1413W
EpGetFwVersion1613
EpGetFwVersion1613FromFile
EpGetFwVersion1628
EpGetFwVersion5412
EpGetFwVersion5412W
EpGetFwVersionW
EpGetHwVersion1613
EpGetInfo
EpGetInfoW
EpGetLastError5612
EpGetLastError561x
EpGetLastError5622
EpGetLastError5711
EpGetLastErrorPcAdapA2
EpGetMode
EpGetModeW
EpIsCp5612W
EpIsCp561x
EpIsCp561xW
EpIsCp5622W
EpIsCp5711W
EpIsCp5x11
EpIsCp5x11W
EpIsCpInRing
EpIsCpInRingW
EpIsNDIS1613active
EpIsPcAdapA2W
EpLink
EpLinkCp
EpLinkCpW
EpLinkW
EpReset
EpResetCp
EpResetCp5612W
EpResetCp5622W
EpResetCp5711W
EpResetCpTime
EpResetCpTimeW
EpResetCpW
EpResetPcAdapA2W
EpResetW
EpRestart
EpRestartCp
EpRestartCpTime
EpRestartCpTimeW
EpRestartCpW
EpRestartW
EpSetCpMode
EpSetCpModeW
EpSetDatabase
EpSetDatabaseW
EpSetLogDeviceActive
EpSetMode
EpSetModeW
EpStart1628
EpStart1628W
EpStartPartDL1628
EpStartPartDL1628W
EpStop1628
EpStop1628W
EpTestServiceStartAccess
OPC_EpResetCp
OPC_EpRestartCp
OPC_GetErrorString
OPC_SetLogDeviceActive
OPC_TrcWrite2File

Sections

.text
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 851KB - Virtual size: 851KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 325KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\Microsoft.ServiceBus.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:76:c2:ce:62:e9:0e:5d:85:3e:00:00:00:00:00:76
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/06/2015, 17:40

Not After

04/09/2016, 17:40

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7AFA-E41C-E142,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/06/2015, 17:42

Not After

04/09/2016, 17:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:d1:9e:cb:a8:04:c7:a3:3a:66:c9:8c:f1:ed:ed:cc:02:be:d6:51
Signer

Actual PE Digest

39:d1:9e:cb:a8:04:c7:a3:3a:66:c9:8c:f1:ed:ed:cc:02:be:d6:51

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/10/2015, 23:52
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\Microsoft.WindowsAzure.Configuration.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:59:d6:73:cd:51:8e:f0:22:c5:00:00:00:00:00:59
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2014, 17:13

Not After

23/08/2015, 17:13

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/04/2014, 17:39

Not After

22/07/2015, 17:39

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cd:e5:62:3f:df:2c:bf:fa:fa:17:86:04:56:a6:85:d5:ca:7c:17:86
Signer

Actual PE Digest

cd:e5:62:3f:df:2c:bf:fa:fa:17:86:04:56:a6:85:d5:ca:7c:17:86

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

20/03/2015, 00:03
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7EPTCPA.DLL
.dll windows x86

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:14:68:27:85:c9:b7:bb:7a:80:47:87:d7:50:64:40:7a:be:fd:54:4f:1d:5b:01:47:ac:7b:86:d5:7f:14:fa
Signer

Actual PE Digest

49:14:68:27:85:c9:b7:bb:7a:80:47:87:d7:50:64:40:7a:be:fd:54:4f:1d:5b:01:47:ac:7b:86:d5:7f:14:fa

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7EPTCPB.DLL
.dll windows x86

46039de89f8560750f5a6dacd1c7a453

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:1c:e4:d0:dd:33:0e:ea:4d:17:34:14:b1:ef:fb:18:4e:e3:d9:c4:9a:7d:9a:a5:6c:4f:b9:0e:8e:ce:02:a3
Signer

Actual PE Digest

03:1c:e4:d0:dd:33:0e:ea:4d:17:34:14:b1:ef:fb:18:4e:e3:d9:c4:9a:7d:9a:a5:6c:4f:b9:0e:8e:ce:02:a3

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
GetCommandLineA
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7EPTCPC.DLL
.dll windows x86

46039de89f8560750f5a6dacd1c7a453

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a5:24:04:a6:ab:1b:fb:f3:02:fa:ea:73:a5:fc:dc:3c:3b:21:0f:e3:06:30:93:14:fb:83:e3:fa:c8:03:dc:f2
Signer

Actual PE Digest

a5:24:04:a6:ab:1b:fb:f3:02:fa:ea:73:a5:fc:dc:3c:3b:21:0f:e3:06:30:93:14:fb:83:e3:fa:c8:03:dc:f2

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
GetCommandLineA
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7EPTCPD.DLL
.dll windows x86

46039de89f8560750f5a6dacd1c7a453

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:20:cd:05:12:2f:b2:f3:93:e8:41:9a:dc:a6:ef:b6:ae:d8:ff:b1:ce:5b:d3:ce:10:0d:d4:c1:2a:25:76:87
Signer

Actual PE Digest

39:20:cd:05:12:2f:b2:f3:93:e8:41:9a:dc:a6:ef:b6:ae:d8:ff:b1:ce:5b:d3:ce:10:0d:d4:c1:2a:25:76:87

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
GetCommandLineA
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7EPTCPE.DLL
.dll windows x86

46039de89f8560750f5a6dacd1c7a453

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ec:fe:6b:90:2a:97:46:3c:bf:0d:82:a8:c0:b7:9c:36:a1:a5:c0:34:21:99:40:66:67:29:3e:c3:4d:be:e9:3f
Signer

Actual PE Digest

ec:fe:6b:90:2a:97:46:3c:bf:0d:82:a8:c0:b7:9c:36:a1:a5:c0:34:21:99:40:66:67:29:3e:c3:4d:be:e9:3f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
GetCommandLineA
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7EPTCPJ.DLL
.dll windows x86

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:1c:79:71:7e:5f:e6:bc:7d:3b:be:75:d8:66:b6:c2:27:c7:c8:97:1c:fc:42:60:bb:be:bb:a1:42:7c:2d:fa
Signer

Actual PE Digest

98:1c:79:71:7e:5f:e6:bc:7d:3b:be:75:d8:66:b6:c2:27:c7:c8:97:1c:fc:42:60:bb:be:bb:a1:42:7c:2d:fa

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7EPTCPK.DLL
.dll windows x86

46039de89f8560750f5a6dacd1c7a453

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:75:d6:d8:19:2c:dc:69:3d:0d:d4:17:c7:0d:68:c7:65:d6:41:55:8e:cd:f9:18:b9:fb:a7:63:e7:3f:be:46
Signer

Actual PE Digest

33:75:d6:d8:19:2c:dc:69:3d:0d:d4:17:c7:0d:68:c7:65:d6:41:55:8e:cd:f9:18:b9:fb:a7:63:e7:3f:be:46

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
GetCommandLineA
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7EPTCPX.DLL
.dll windows x64

439d16ad953dbd080afe8ad113d0b38e

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:a4:3b:80:30:cc:3d:39:52:ac:a6:00:60:4d:cf:16:0e:26:20:5d:44:5b:c6:62:8d:11:28:63:7c:af:45:31
Signer

Actual PE Digest

04:a4:3b:80:30:cc:3d:39:52:ac:a6:00:60:4d:cf:16:0e:26:20:5d:44:5b:c6:62:8d:11:28:63:7c:af:45:31

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mfc110u

ord11759
ord5577
ord3673
ord6477
ord977
ord5992
ord14109
ord5993
ord14110
ord5991
ord14108
ord7566
ord12045
ord13909
ord11502
ord11503
ord1962
ord7516
ord12457
ord3890
ord3952
ord8939
ord14036
ord7498
ord14030
ord12055
ord12056
ord2385
ord5059
ord7868
ord7563
ord4384
ord12376
ord12438
ord9969
ord11767
ord7928
ord1441
ord7245
ord8011
ord3908
ord4828
ord8304
ord7902
ord4594
ord13588
ord11740
ord13020
ord8302
ord6173
ord1104
ord1661
ord4524
ord12073
ord290
ord293
ord8360
ord12538
ord13685
ord9009
ord3655
ord6976
ord906
ord3090
ord5900
ord4757
ord12719
ord1856
ord10034
ord1380
ord11737
ord2489
ord8794
ord2911
ord8766
ord7219
ord265
ord957
ord2290
ord266
ord7246
ord5116
ord1411
ord3215
ord3106
ord6450
ord7218
ord11736
ord10534
ord1377
ord14126
ord8507
ord11461
ord11460
ord11462
ord11459
ord10702
ord10105
ord10860
ord7765
ord10555
ord10768
ord8519
ord896
ord6975
ord2217
ord2138
ord8668
ord1046
ord4019
ord3003
ord6121
ord11651
ord5871
ord13218
ord2643
ord8751
ord10922
ord10008
ord3892
ord3252
ord3253
ord3016
ord5787
ord5873
ord13222
ord3157
ord3154
ord9791
ord7758
ord2644
ord9821
ord9823
ord9822
ord9820
ord9824
ord5327
ord11252
ord6591
ord10536
ord8797
ord3118
ord13334
ord11779
ord11777
ord1685
ord1694
ord1702
ord1698
ord1707
ord4698
ord4735
ord4706
ord4718
ord4714
ord4710
ord4741
ord4731
ord4702
ord4745
ord4723
ord4687
ord4693
ord4726
ord4299
ord5456
ord9232
ord4291
ord2912
ord14031
ord7499
ord14037
ord13949
ord6493
ord12957
ord5121
ord4274
ord11244
ord13175
ord5594
ord2575
ord11644
ord3753
ord3223
ord3224
ord3117
ord11688
ord4665
ord984
ord4959
ord5239
ord5427
ord8891
ord5215
ord4962
ord5105
ord4943
ord7310
ord7311
ord7301
ord11771
ord11739
ord5430
ord9786
ord1032
ord322
ord2160
ord8670
ord1050
ord3688
ord2851
ord8292
ord8584
ord4022
ord5103
ord7767
ord8750
ord3541
ord1480
ord2170
ord8005
ord4595
ord12432
ord4450
ord4449
ord2854
ord2848
ord5580
ord1658
ord1495
ord1494
ord1492
ord1027
ord286
ord280
ord285
ord296
ord6128
ord1420
ord12126
ord4509
ord1938
ord3001
ord2866
ord13770
ord7738
ord5545
ord4122
ord1632
ord11253
ord8681
ord11609
ord3660
ord11463
ord14029
ord1939
ord3670
ord1483
ord323
ord1033
ord2273
ord2315
ord2318
ord2284
ord2317
ord472
ord2182
ord2282
ord2111
ord2214
ord2306
ord7398
ord1482

msvcr110

__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_vsnprintf_s
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
strcpy
_findfirst64i32
_findclose
_endthreadex
_beginthreadex
free
_vsnwprintf_s
swprintf_s
vsprintf_s
sprintf_s
_snprintf_s
wcsstr
strstr
strrchr
strcat_s
strcpy_s
memset
memcpy_s
memcmp
malloc
wcstombs
atof
_wtol
_wtoi
_ltow
_CxxThrowException
strlen
memcpy
_purecall
__C_specific_handler
swscanf
strcmp
__CxxFrameHandler3
_snwprintf_s
wcslen
wcscpy
wcscpy_s
wcscmp
wcscat
wcscat_s
memmove

kernel32

LoadLibraryExA
GetSystemTimeAsFileTime
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsA
MultiByteToWideChar
OpenFile
GetCurrentDirectoryA
WideCharToMultiByte
LoadLibraryA
OpenFileMappingA
CreateFileMappingA
OpenMutexA
lstrlenA
WaitForMultipleObjects
LocalFree
LocalAlloc
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
GetVersionExA
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
OpenEventA
CreateEventA
CreateMutexA
WaitForSingleObject
ReleaseMutex
SetEvent
SetLastError
OutputDebugStringA
WriteFile
GetDiskFreeSpaceExA
DeleteFileA
CreateFileA
CreateDirectoryA
GetEnvironmentVariableA
InitializeCriticalSectionEx
OutputDebugStringW
LoadLibraryW
lstrcpyW
FreeLibrary
LoadLibraryExW
IsWow64Process
GetVersionExW
GetSystemDirectoryW
GetCurrentProcess
GetLastError
CloseHandle
SetFilePointer
ReadFile
FindFirstFileW
FindClose
CreateFileW
GetCurrentDirectoryW
RaiseException

user32

GetClassNameW
GetWindowLongW
OffsetRect
GetWindowRect
MessageBoxIndirectW
IsWindow
SendMessageW
SetForegroundWindow
EnableWindow
GetParent
MessageBoxW
PostMessageW
GetWindow

advapi32

CryptAcquireContextA
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
CreateWellKnownSid
FreeSid
InitializeSecurityDescriptor
SetEntriesInAclA
CryptEncrypt
CryptImportKey
CryptExportKey
CryptDestroyKey
CryptGenKey
CryptReleaseContext
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
SetSecurityDescriptorDacl

shell32

SHGetSpecialFolderPathW

shlwapi

SHGetValueA

oleaut32

SysFreeString

crypt32

CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore

msvcp110

?_Winerror_map@std@@YAPEBDH@Z
?_Syserror_map@std@@YAPEBDH@Z
??0id@locale@std@@QEAA@_K@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ

Exports

Exports

DllEntryFkt

Sections

.text
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 390KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7O.CommonInterfaces.dll
.dll windows x64

Code Sign

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

9a:0f:c6:7c:4e:dd:dd:da:34:fb:76:a6:24:0d:e9:91:93:fe:43:bc:b9:6b:ab:0e:ac:12:83:6b:75:b4:0f:e2
Signer

Actual PE Digest

9a:0f:c6:7c:4e:dd:dd:da:34:fb:76:a6:24:0d:e9:91:93:fe:43:bc:b9:6b:ab:0e:ac:12:83:6b:75:b4:0f:e2

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

13/06/2017, 08:39
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7O.CommonServices.dll
.dll windows x64

Code Sign

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

22:45:e2:39:ae:19:11:db:17:e7:ef:fe:91:96:03:8f:48:0a:54:86:fa:93:77:25:0c:95:30:c0:5e:18:c8:cf
Signer

Actual PE Digest

22:45:e2:39:ae:19:11:db:17:e7:ef:fe:91:96:03:8f:48:0a:54:86:fa:93:77:25:0c:95:30:c0:5e:18:c8:cf

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

13/06/2017, 08:39
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7O.ServiceAgents.dll
.dll windows x64

Code Sign

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ba:6c:40:60:0b:8e:ee:1e:40:5d:42:cc:ae:6e:fa:06:e9:b8:0b:08:52:f9:6a:18:e2:6a:15:94:38:86:0d:28
Signer

Actual PE Digest

ba:6c:40:60:0b:8e:ee:1e:40:5d:42:cc:ae:6e:fa:06:e9:b8:0b:08:52:f9:6a:18:e2:6a:15:94:38:86:0d:28

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

13/06/2017, 08:39
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7O.TunnelBasics.dll
.dll windows x64

Code Sign

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

12:ed:42:aa:98:56:7b:a7:02:07:82:5f:d8:4f:81:94:d1:c6:70:f2:de:d9:a8:6b:2f:a7:05:d8:bb:75:db:29
Signer

Actual PE Digest

12:ed:42:aa:98:56:7b:a7:02:07:82:5f:d8:4f:81:94:d1:c6:70:f2:de:d9:a8:6b:2f:a7:05:d8:bb:75:db:29

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

13/06/2017, 08:39
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7O.TunnelServiceHost.exe
.exe windows x64

Code Sign

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

1f:69:21:80:a8:3c:6a:41:80:9c:f8:8f:19:a7:ca:ae:a4:3f:b9:ec:cf:3b:5d:98:7a:4e:d4:01:33:f3:63:21
Signer

Actual PE Digest

1f:69:21:80:a8:3c:6a:41:80:9c:f8:8f:19:a7:ca:ae:a4:3f:b9:ec:cf:3b:5d:98:7a:4e:d4:01:33:f3:63:21

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

13/06/2017, 08:39
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7O.TunnelServices.dll
.dll windows x64

Code Sign

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:6e:31:cb:81:ab:0e:48:cb:81:9f:0b:31:e5:e4:97:80:a2:92:5d:ce:72:5c:71:1a:e3:ca:af:e8:a4:62:3f
Signer

Actual PE Digest

e7:6e:31:cb:81:ab:0e:48:cb:81:9f:0b:31:e5:e4:97:80:a2:92:5d:ce:72:5c:71:1a:e3:ca:af:e8:a4:62:3f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

13/06/2017, 08:39
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7OSCPT.dll
.dll windows x64

c3794f7c3e0d998549aec58dbe6f0ab4

Code Sign

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

d5:db:62:88:98:03:21:8d:87:71:0d:b9:16:47:72:d9:9d:22:a2:f9:10:22:59:a5:24:98:70:dd:ce:fb:1d:ba
Signer

Actual PE Digest

d5:db:62:88:98:03:21:8d:87:71:0d:b9:16:47:72:d9:9d:22:a2:f9:10:22:59:a5:24:98:70:dd:ce:fb:1d:ba

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

13/06/2017, 08:39
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcr110

_unlock
_calloc_crt
_lock
_onexit
__clean_type_info_names_internal
__C_specific_handler
_initterm_e
_initterm
_malloc_crt
free
_amsg_exit
__dllonexit
__CppXcptFilter
printf_s
_cexit
__FrameUnwindFilter

kernel32

Sleep
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DecodePointer
EncodePointer

mscoree

_CorDllMain

Exports

Exports

??0A@@QEAA@XZ
??1A@@QEAA@XZ
??4A@@QEAAAEAU0@AEBU0@@Z
?Test@A@@QEAAXXZ
SCPTunnel_Close
SCPTunnel_Get_Errno
SCPTunnel_OnlDll_CheckDevOpen
SCPTunnel_OnlDll_CheckForOpenS7DOSConnections
SCPTunnel_OpenW
SCPTunnel_Open_Async
SCPTunnel_Receive
SCPTunnel_Send
SCPTunnel_Send_Receive
SCPTunnel_SetSinecHWnd
SCPTunnel_SetSinecHWndMsg

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nep
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7OTRCT.dll
.dll windows x64

f4095611ef0aa6d914d2e9bf005bd3eb

Code Sign

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

28/01/2016, 00:00

Not After

28/04/2019, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

c9:3e:d5:e1:0c:d2:58:13:8e:16:5e:61:a1:6e:20:db:07:d3:8c:95:22:d4:ca:64:ee:e8:20:f3:5a:c1:76:46
Signer

Actual PE Digest

c9:3e:d5:e1:0c:d2:58:13:8e:16:5e:61:a1:6e:20:db:07:d3:8c:95:22:d4:ca:64:ee:e8:20:f3:5a:c1:76:46

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden Württemberg,C=DE

13/06/2017, 08:39
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

UnmapViewOfFile
GetProcAddress
CreateFileMappingA
MapViewOfFile
LoadLibraryA
WideCharToMultiByte
GetCurrentThreadId
GetCurrentProcessId
CreateMutexExA
WaitForSingleObject
ReleaseMutex
DeviceIoControl
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
CreateFileA
LocalFree
LocalAlloc
GetCurrentProcess
CloseHandle
OpenFileMappingA
OutputDebugStringA
DisableThreadLibraryCalls
GetTickCount64
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
Sleep

advapi32

RegOpenKeyA
RegCloseKey
ReportEventA
RegisterEventSourceW
DeregisterEventSource
SetEntriesInAclW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetTokenInformation
FreeSid
CreateWellKnownSid
OpenProcessToken
RegQueryValueExA

shell32

SHGetSpecialFolderPathA

msvcr110

_stricmp
_strlwr_s
strchr
strrchr
_errno
atoi
atol
strtoul
fclose
fopen_s
fseek
ftell
fwrite
remove
sprintf_s
vsprintf_s
strftime
_difftime64
_localtime64_s
_time64
_ftime64
_fstat64i32
_close
_sopen_s
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
__C_specific_handler
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
strlen
strcat_s
strcpy_s
memcpy_s
memset
_cexit
__FrameUnwindFilter
strncpy_s
wcslen

mscoree

_CorDllMain

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nep
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7epaBl64x.dll
.dll windows x64

29801da85874b73622847b7cb0f3f137

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9c:68:23:7b:ca:f7:1d:8f:51:b3:77:3c:6d:e8:0b:07:3a:f2:98:79:39:f4:13:b6:cc:94:c7:57:e7:f0:42:83
Signer

Actual PE Digest

9c:68:23:7b:ca:f7:1d:8f:51:b3:77:3c:6d:e8:0b:07:3a:f2:98:79:39:f4:13:b6:cc:94:c7:57:e7:f0:42:83

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:46
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcr110

wcsrchr
wmemcpy_s
memmove_s
wcsnlen
wprintf
wcstok_s
memset
_CxxThrowException
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_onexit
__C_specific_handler
__dllonexit
_calloc_crt
_unlock
_lock
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
__CxxFrameHandler3
_wrename
fgetwc
_wremove
ungetwc
fputwc
_wstat64
wcstol
wcstoul
_ultow_s
wcscpy_s
wcsncmp
_waccess_s
_lock_file
setvbuf
fmod
fsetpos
fgetc
fflush
_fseeki64
fgetpos
ungetc
_unlock_file
??0exception@std@@QEAA@AEBV01@@Z
??0bad_cast@std@@QEAA@AEBV01@@Z
??0bad_cast@std@@QEAA@PEBD@Z
??1bad_cast@std@@UEAA@XZ
fputc
??_V@YAXPEAX@Z
tolower
??_U@YAPEAX_K@Z
?terminate@@YAXXZ
wcsstr
_wcsnicmp
realloc
calloc
free
_wtoi
wcsncpy_s
??2@YAPEAX_K@Z
_purecall
memmove
??3@YAXPEAX@Z
_close
_time64
strncpy_s
_difftime64
fclose
fseek
strcat_s
strtoul
atol
ftell
strrchr
fwrite
_sopen_s
memcpy_s
strftime
_ftime64
strcpy_s
vsprintf_s
fopen_s
remove
_errno
atoi
strchr
_localtime64_s
_fstat64i32
_strlwr_s
sprintf_s
_stricmp

xmllite

CreateXmlReader

mfc110u

ord2273
ord2160
ord322
ord1032
ord323
ord1033
ord2315
ord2318
ord2284
ord2317
ord472
ord2282
ord2111
ord2214
ord2306
ord1483
ord3670
ord4829
ord293
ord13807
ord6579
ord287
ord1495
ord8006
ord13770
ord2170
ord12158
ord4457
ord4828
ord4795
ord2854
ord3668
ord4449
ord8262
ord12432
ord1939
ord4595
ord11739
ord11771
ord7765
ord11759
ord5577
ord3673
ord6477
ord977
ord5992
ord14109
ord5993
ord14110
ord5991
ord14108
ord7566
ord12045
ord13909
ord11503
ord11502
ord1962
ord7516
ord12457
ord3890
ord3952
ord8939
ord14036
ord7498
ord14030
ord12056
ord12055
ord2385
ord5059
ord7868
ord7563
ord12376
ord12438
ord9969
ord11767
ord7928
ord1441
ord7245
ord8011
ord8750
ord9786
ord7767
ord5103
ord7301
ord7311
ord7310
ord4943
ord5105
ord4962
ord5430
ord5215
ord8891
ord5427
ord5239
ord4959
ord1622
ord2361
ord2360
ord7738
ord296
ord286
ord12275
ord4450
ord2290
ord2296
ord2292
ord957
ord1938
ord1420
ord278
ord1632
ord5545
ord280
ord1027
ord1492
ord1494
ord1661
ord4524
ord7902
ord2866
ord285
ord5580
ord2848
ord2182

kernel32

IsDebuggerPresent
GetFileAttributesExW
CopyFileW
lstrcmpiW
ExpandEnvironmentStringsW
GetLocaleInfoW
LoadLibraryExW
FreeLibrary
CreateDirectoryW
OpenEventW
OutputDebugStringW
SetEvent
GlobalAlloc
LocalFree
OpenFileMappingA
GetCurrentProcessId
CloseHandle
ReleaseMutex
IsProcessorFeaturePresent
OutputDebugStringA
QueryPerformanceFrequency
DeviceIoControl
LocalAlloc
CreateFileMappingA
LoadLibraryA
CreateMutexExA
GetProcAddress
GetLastError
WideCharToMultiByte
WaitForSingleObject
QueryPerformanceCounter
UnmapViewOfFile
MapViewOfFile
CreateFileA
FindNextFileW
FindClose
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetTickCount64
LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceExW
FindFirstChangeNotificationW
FindCloseChangeNotification
WaitForMultipleObjects
FindNextChangeNotification
GetCurrentThreadId
FindFirstFileExW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException

advapi32

RegGetValueW
AllocateAndInitializeSid
CreateWellKnownSid
RegCloseKey
RegOpenKeyA
FreeSid
SetEntriesInAclW
ReportEventA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
DeregisterEventSource
RegQueryValueExA
RegisterEventSourceW
RegOpenKeyExW

shell32

SHGetSpecialFolderPathW
SHGetSpecialFolderPathA

shlwapi

SHCreateStreamOnFileW

ole32

CoInitialize
CoUninitialize
CoCreateInstance
OleRun

oleaut32

VarBstrCmp
VarBstrCat
SysFreeString
SysStringByteLen
SysAllocStringLen
SysAllocStringByteLen
SysStringLen
SysAllocString
VariantInit
VariantClear

msvcp110

_Thrd_detach
_Mtx_destroy
_Mtx_unlock
_Mtx_lock
_Mtx_init
?_BADOFF@std@@3_JB
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
??1_Pad@std@@QEAA@XZ
?_Launch@_Pad@std@@QEAAXPEAU_Thrd_imp_t@@@Z
?_Release@_Pad@std@@QEAAXXZ
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
??0id@locale@std@@QEAA@_K@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAPEBDH@Z
??0_Pad@std@@QEAA@XZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDH@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?unshift@?$codecvt@DDH@std@@QEBAHAEAHPEAD1AEAPEAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Swap_all@_Container_base0@std@@QEAAXAEAU12@@Z
?_Orphan_all@_Container_base0@std@@QEAAXXZ
?in@?$codecvt@_WDH@std@@QEBAHAEAHPEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDH@std@@QEBAHAEAHPEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?unshift@?$codecvt@_WDH@std@@QEBAHAEAHPEAD1AEAPEAD@Z
?_Getcat@?$codecvt@_WDH@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??7ios_base@std@@QEBA_NXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEAPEA_W0PEAH001@Z
?id@?$codecvt@_WDH@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bios_base@std@@QEBAPEAXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Add_vtordisp2@?$basic_ios@DU?$char_traits@D@std@@@std@@UEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UEAAXXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@H@2@XZ
?in@?$codecvt@DDH@std@@QEBAHAEAHPEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDH@std@@QEBAHAEAHPEBD1AEAPEBDPEAD3AEAPEAD@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

Exports

Exports

?RegisterNotification@@YAJPEB_W00@Z
?S7epaBl64x_deinit@@YAXXZ
?UnRegisterNotification@@YAJPEB_W00@Z
GetValueInPGSP_BL
LogDeviceCopyBL
LogDeviceCreateFromDefBL
LogDeviceCreateTempBL
LogDeviceCreateTempFromDefBL
LogDeviceDelBL
LogDeviceDelTempBL
LogDeviceDelValueBL
LogDeviceDelVmdIdBL
LogDeviceExistBL
LogDeviceGetAsicTypeBL
LogDeviceGetEnumBL
LogDeviceGetEnumByDeviceIdBL
LogDeviceGetEnumValueBL
LogDeviceGetParamDescBL
LogDeviceGetValueBL
LogDeviceGetValueExBL
LogDeviceGetValueListBL
LogDeviceGetXmlBL
LogDeviceSetBusparamsBL
LogDeviceSetValueBL
LogDeviceUpdateWithTempBL
LogNameCreateBL
LogNameDelValueBL
LogNameDeleteBL
LogNameExistBL
LogNameGetEnumBL
LogNameGetEnumValueBL
LogNameGetLogDeviceBL
LogNameGetValueBL
LogNameGetValueListBL
LogNameSetLogDeviceBL
LogNameSetValueBL
PGSP_BoardGetEnumValueBL
PGSP_BoardGetNotSupportedBL
PGSP_BoardGetResourceStringBL
PGSP_BoardGetValueBL
PGSP_BoardGetValueCollectionBL
PGSP_BoardGetValueListBL
PGSP_BoardGetValueRawBL
PGSP_DefDeviceGetEnumValueBL
PGSP_DefDeviceGetValueBL
PGSP_DefDeviceGetValueRawBL
PGSP_DelParameterDataBL
PGSP_EnumParameterMetaDataBL
PGSP_GetLogDeviceListBL
PGSP_GetLogDeviceListExBL
PGSP_GetLogNameListBL
PGSP_GetParamDescBL
PGSP_GetParameterMetaDataBL
PGSP_LogDeviceDelNdiBL
PGSP_LogDeviceEnumNdiValueBL
PGSP_LogDeviceGetAverageEnumListBL
PGSP_LogDeviceGetMostSpecializedEnumListBL
PGSP_LogDeviceGetNdiBL
PGSP_LogDeviceGetResourceStringBL
PGSP_LogDeviceSetNdiBL
PGSP_LogDeviceSetProfileRBL
PGSP_LogNameGetResourceStringBL
PGSP_ProfileCollectionExistsBL
PGSP_ProtocolGetEnumBaudrateBL
PGSP_ProtocolGetEnumBusprofilesBL
PGSP_ProtocolGetEnumValueBL
PGSP_ProtocolGetValueBL
PGSP_ProtocolGetValueRawBL
PGSP_SetParameterDataBL
PGSP_TemplateExistBL
PGSP_TemplateGetConstraintBL
PGSP_TemplateGetEnumBL
PGSP_TemplateGetEnumNoPrefixBL
PGSP_TemplateGetEnumValueRawBL
PGSP_TemplateGetListBL
PGSP_TemplateGetResourceStringBL
PGSP_TemplateKeyExistsBL
PGSP_TemplateSetValueBL
SetValueInPGSP_BL
s7DriverReadLogDevice

Sections

.text
Size: 641KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7otbxdx64.dll
.dll windows x64

e35257fa050d19922092821e57db3755

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

80:4d:51:b3:33:54:11:a0:67:33:1d:c4:63:01:fd:27:df:8a:36:78:57:b4:47:bf:73:52:66:c6:26:21:0c:f4
Signer

Actual PE Digest

80:4d:51:b3:33:54:11:a0:67:33:1d:c4:63:01:fd:27:df:8a:36:78:57:b4:47:bf:73:52:66:c6:26:21:0c:f4

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:46
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

CreateFileMappingA
OpenFileMappingA
LoadLibraryA
WideCharToMultiByte
OutputDebugStringW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
OpenMutexW
CreateEventW
CreateMutexExW
Sleep
TlsAlloc
TlsGetValue
TlsFree
CreateProcessW
MapViewOfFile
GetVersionExW
FreeLibrary
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
uaw_wcscpy
CreateThread
GetProcAddress
SetEvent
OpenEventW
TlsSetValue
VirtualAlloc
CreateFileMappingW
OpenFileMappingW
LoadLibraryW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
CreateMutexExA
WaitForSingleObject
ReleaseMutex
DeviceIoControl
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringA
CreateFileA
LocalFree
LocalAlloc
GetCurrentProcess
GetLastError
CloseHandle
DecodePointer
GetTempPathA
UnmapViewOfFile
EncodePointer
IsProcessorFeaturePresent
GetTickCount
GetTickCount64
IsDebuggerPresent

user32

MessageBoxA
LoadIconW
ValidateRect
ShowWindow
DestroyWindow
GetProcessWindowStation
UnregisterClassW
RegisterClassW
PostQuitMessage
DefWindowProcW
DispatchMessageW
GetMessageW
MessageBoxW
PostMessageW
GetUserObjectInformationW
CreateWindowExW

gdi32

GetStockObject

advapi32

GetTokenInformation
GetSidSubAuthority
OpenProcessToken
CreateWellKnownSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
DeregisterEventSource
RegisterEventSourceW
ReportEventA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
SetEntriesInAclW
IsValidSecurityDescriptor
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
GetSidSubAuthorityCount

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderPathW

s7epaapi64x

PGSP_SetOpenTCPConnections
LogNameGetLogDevice
LogDeviceSetValue
LogNameGetValue
LogDeviceGetValue

s7onlinx64

SCP_get_errno
SCP_send
SCP_receive
SCP_close
SCP_openW

msvcr110

wcsrchr
wcsncat_s
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
__C_specific_handler
_lock
__clean_type_info_names_internal
sscanf_s
_fileno
ferror
_unlock
_calloc_crt
__dllonexit
_onexit
memcmp
_filelength
_itoa_s
_wremove
_wfopen_s
wcslen
fread
wcscpy_s
wcsncpy_s
free
malloc
vswprintf_s
memcpy_s
memset
strcpy_s
strcat_s
strlen
strchr
_stricmp
_strlwr_s
strncpy_s
strrchr
_errno
atoi
atol
strtoul
fclose
fopen_s
fseek
ftell
fwrite
remove
sprintf_s
vsprintf_s
strftime
_difftime64
_localtime64_s
_time64
_ftime64
_fstat64i32
_close
_sopen_s
memcpy
_wcsicmp
calloc
swprintf_s
wcscat_s
wcstoul
strcmp
memmove
strncmp
strstr
_strupr_s
wcscmp
_wcsupr_s
realloc
feof

Exports

Exports

s7H_start_cpu
s7H_stop_cpu
s7H_switch_master_reserve
s7_Simulation_SetMsg
s7_UsePrivateSession
s7_clear_password
s7_conv_errno
s7_conv_ret
s7_event
s7_event_cancel
s7_event_info
s7_get_password
s7_set_password
s7ag_besy_update
s7ag_brcv_create
s7ag_brcv_delete
s7ag_bsnd
s7ag_bub_cycl_read_create
s7ag_bub_cycl_read_delete
s7ag_bub_cycl_read_start
s7ag_bub_cycl_read_stop
s7ag_bub_read_var
s7ag_bub_read_var_seg
s7ag_bub_write_var
s7ag_bub_write_var_seg
s7ag_compress
s7ag_link_in
s7ag_mem_mode
s7ag_msg_mode
s7ag_password
s7ag_pmc_msg_ack
s7ag_pmc_msg_mode
s7ag_pmc_msg_on_off
s7ag_pmc_update
s7ag_read_szl
s7ag_read_time
s7ag_read_time_ex
s7ag_resume
s7ag_start
s7ag_stop
s7ag_test
s7ag_test_delete
s7ag_write_time
s7ag_write_time_ex
s7blk_delete
s7blk_dir1
s7blk_dir2
s7blk_findfirst
s7blk_findnext
s7blk_read
s7blk_write
s7db_close
s7db_copy
s7db_create
s7db_delete
s7db_open
s7dos_get_server_pid
s7dos_release
s7dos_trace
s7dos_version
s7dp_set_slave_address
s7dp_slave_diagnose
s7dpt_read
s7dpt_write
s7epr_image_read
s7epr_image_write
s7epr_kb_memory
s7epr_kennbit
s7epr_physical_rd
s7epr_physical_wr
s7epr_property
s7epr_service
s7ie_CheckIsIPAddressFree
s7ie_CloseServer
s7ie_DeletePGIPAddress
s7ie_GetAdapterInfo
s7ie_GetDataset
s7ie_GetIeParam
s7ie_GetMacAddress
s7ie_GetNetworkParamExt
s7ie_GetPGIPAddressList
s7ie_GetPbParam
s7ie_Identify
s7ie_IdentifyName
s7ie_Identify_Cancel
s7ie_IsReachable
s7ie_RegisterHello
s7ie_SearchAndSetPGIPAddress
s7ie_SearchForFreeIPAddress
s7ie_SetDataset
s7ie_SetIeParam
s7ie_SetNameOfStation
s7ie_SetNetworkParam
s7ie_SetNetworkParamExt
s7ie_SetOpenTCPConnections
s7ie_SetPbParam
s7ie_ShowLocation
s7ie_UnregisterHello
s7l7_dataexchange2
s7l7_download_domain
s7l7_pi_service
s7l7_pi_service_ex
s7l7_upload_domain
s7net_get_baudrate
s7net_get_bus_params
s7net_get_diagnose
s7net_get_direct_plc
s7net_get_life_list
s7net_get_report
s7net_start_diagnose
s7net_stop_diagnose
s7pnio_check_is_IPAddress_free
s7pnio_close_cd7
s7pnio_epmap_end
s7pnio_epmap_first
s7pnio_epmap_next
s7pnio_open_cd7
s7pnio_read_record
s7pnio_read_record_api
s7pnio_read_record_targetaruuid
s7pnio_write_record
s7pnio_write_record_api
s7prog_blk_laden
s7prog_laden_ende
s7prog_laden_init
s7sim_get_life_list
s7usb_get_detailed_info
s7usb_get_device_address
s7usb_reset_device
s7usb_show_location

Sections

.text
Size: 536KB - Virtual size: 536KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7otbxsx64.exe
.exe windows x64

d207bd82a1e2539cbfb7c040c900a671

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9d:36:4f:07:76:08:3a:96:59:97:74:08:4d:6f:51:12:73:ec:17:98:f0:8e:8a:dc:de:4f:da:83:35:97:48:83
Signer

Actual PE Digest

9d:36:4f:07:76:08:3a:96:59:97:74:08:4d:6f:51:12:73:ec:17:98:f0:8e:8a:dc:de:4f:da:83:35:97:48:83

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:46
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

FreeLibrary
LoadLibraryW
OpenMutexW
CreateMutexExW
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
ExpandEnvironmentStringsW
OutputDebugStringW
CreateProcessW
UnmapViewOfFile
GetVersionExW
GetModuleFileNameW
GetModuleHandleW
lstrcmpiW
GetProcessShutdownParameters
uaw_wcscpy
K32EnumProcesses
OpenEventW
VirtualAlloc
GetProcAddress
SetEvent
Sleep
WideCharToMultiByte
LoadLibraryA
OpenFileMappingA
CreateFileMappingA
EncodePointer
GetSystemTimeAsFileTime
GetTickCount64
MapViewOfFile
GetCurrentThreadId
GetCurrentProcessId
CreateMutexExA
WaitForSingleObject
ReleaseMutex
DeviceIoControl
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringA
TlsSetValue
CreateEventW
CreateFileA
GetCurrentProcess
GetLastError
CloseHandle
lstrcpynW
LocalFree
LocalAlloc
TlsGetValue
IsProcessorFeaturePresent
IsDebuggerPresent
SetProcessShutdownParameters
DecodePointer

user32

GetUserObjectInformationW
SetTimer
KillTimer
PostMessageW
PostThreadMessageW
GetMessageW
GetProcessWindowStation
LoadIconW
ShowWindow
DispatchMessageW
SetMessageQueue
PostQuitMessage
MessageBoxW
ValidateRect
MessageBoxA
CharNextW
DefWindowProcW
RegisterClassW
UnregisterClassW
CreateWindowExW
DestroyWindow

gdi32

GetStockObject

advapi32

FreeSid
RegQueryValueExA
RegOpenKeyA
RegCloseKey
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
ReportEventW
RegisterEventSourceW
DeregisterEventSource
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ReportEventA
SetEntriesInAclW
RegOpenKeyW
RegOpenKeyExW
RegQueryValueExW
IsValidSecurityDescriptor
GetUserNameW
CreateWellKnownSid

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderPathW

s7epaapi64x

LogDeviceGetValue
LogNameGetLogDevice
PGSP_SetOpenTCPConnections

s7onlinx64

SCP_send
SCP_send_receive
SCP_get_errno
SCP_receive
SCP_openW
SCP_close
SetSinecHWndMsg

crypt32

CryptQueryObject
CryptMsgClose
CryptMsgGetParam
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertCompareCertificate
CertGetCertificateChain
CertFreeCertificateChain

imagehlp

MapFileAndCheckSumW

msvcr110

strftime
__dllonexit
_calloc_crt
_unlock
_lock
__crtSetUnhandledExceptionFilter
?terminate@@YAXXZ
_commode
_fmode
_wcmdln
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
wcsstr
_wgetcwd
wcstoul
wcscmp
memcmp
__C_specific_handler
strncmp
strcmp
wcsrchr
swprintf_s
wcscpy_s
wcsncpy_s
free
malloc
vswprintf_s
memcpy
calloc
memset
fclose
fopen_s
fseek
ftell
fwrite
remove
sprintf_s
vsprintf_s
_errno
atoi
atol
strtoul
_onexit
_difftime64
_localtime64_s
_time64
strcpy_s
strcat_s
strlen
strchr
_stricmp
_strlwr_s
strncpy_s
strrchr
_ftime64
_fstat64i32
_close
_sopen_s
_getcwd
_mkdir
memcpy_s
_beginthreadex
wcscat_s

Sections

.text
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\S7scpcomm64.dll
.dll windows x64

ea85c261f2093a12310bce17ce1165e9

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

37:f2:e0:9d:9d:53:62:e0:3b:f8:3e:71:a6:ef:33:36:41:5f:01:7e:1c:b5:08:c5:72:66:9b:e8:91:84:fe:e8
Signer

Actual PE Digest

37:f2:e0:9d:9d:53:62:e0:3b:f8:3e:71:a6:ef:33:36:41:5f:01:7e:1c:b5:08:c5:72:66:9b:e8:91:84:fe:e8

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:46
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateEventW
Sleep
GetCurrentProcessId
GetCurrentThreadId
SetThreadPriority
ProcessIdToSessionId
GetVersionExW
MultiByteToWideChar
GetOverlappedResult
GetQueuedCompletionStatus
CreateFileA
QueryPerformanceCounter
QueryPerformanceFrequency
DeviceIoControl
CreateMutexW
MapViewOfFile
UnmapViewOfFile
GetProcAddress
LocalAlloc
LocalFree
CreateFileMappingA
OpenFileMappingA
LoadLibraryA
WideCharToMultiByte
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
WaitForSingleObject
ReleaseMutex
SetEvent
PostQueuedCompletionStatus
CreateIoCompletionPort
HeapFree
HeapAlloc
HeapDestroy
HeapCreate
SetLastError
GetLastError
CloseHandle
CreateMutexExA
OutputDebugStringA

user32

PostMessageW
DefWindowProcW
PostQuitMessage
UnregisterClassW
RegisterClassExW
CreateWindowExW
IsWindow
SetTimer
KillTimer
LoadIconW
MessageBoxW
DispatchMessageW
GetMessageW
GetUserObjectInformationW
GetProcessWindowStation

gdi32

GetStockObject

advapi32

InitializeSecurityDescriptor
SetEntriesInAclW
SetSecurityDescriptorDacl
CreateWellKnownSid
FreeSid
DeregisterEventSource
RegisterEventSourceW
ReportEventA
RegCloseKey
RegOpenKeyA
RegQueryValueExA

shell32

SHGetSpecialFolderPathA

s7onlinx64

SCP_get_errno
SCP_close
SCP_openW
SetSinecHWndMsg
SCP_send
SCP_receive

msvcp110

_Mtx_init
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ

msvcr110

__CppXcptFilter
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
_amsg_exit
_onexit
__C_specific_handler
__dllonexit
_calloc_crt
_unlock
_malloc_crt
_initterm
_initterm_e
_lock
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__clean_type_info_names_internal
__crt_debugger_hook
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
free
_CxxThrowException
__CxxFrameHandler3
memcpy
memcpy_s
memset
strcmp
strlen
wcscmp
calloc
malloc
_beginthreadex
_endthreadex
sprintf
swprintf_s
wmemcpy_s
_setjmp
_errno
wcsncpy
vprintf
strcpy_s
strcat_s
strchr
_stricmp
_strlwr_s
strncpy_s
strrchr
atoi
atol
strtoul
fclose
fopen_s
fseek
ftell
fwrite
remove
sprintf_s
vsprintf_s
strftime
_difftime64
_localtime64_s
_time64
_ftime64
_fstat64i32
_close
_sopen_s
wcslen
wcsncmp

Exports

Exports

accept_s
await_disconnect
cleanup_open_channels
close_connection
connect_s
event_handle
get_errno
get_loc_addr
get_rem_addr
open_connection
post_event
read_data
register_handle
write_data

Sections

.text
Size: 195KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 16.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\TC.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

72:61:f6:96:ae:40:97:a1:d2:b9:32:70:e9:31:05:f1:ac:f0:1a:1e:a3:75:d1:42:c4:b0:f1:15:5c:7b:d0:30
Signer

Actual PE Digest

72:61:f6:96:ae:40:97:a1:d2:b9:32:70:e9:31:05:f1:ac:f0:1a:1e:a3:75:d1:42:c4:b0:f1:15:5c:7b:d0:30

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:50
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\TC.exe.config
Automation\Simatic OAM\bin\TraceConcept.chm
.chm
Automation\Simatic OAM\bin\ci_5612.dll
.dll windows x64

60da40c0fa17b94b72b381cc81047bf7

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4b:f5:bf:f1:c1:17:7a:6d:18:89:ec:47:24:3e:4f:55:df:b0:83:f1:8f:77:fa:f1:31:f3:c9:ac:d5:af:ef:1b
Signer

Actual PE Digest

4b:f5:bf:f1:c1:17:7a:6d:18:89:ec:47:24:3e:4f:55:df:b0:83:f1:8f:77:fa:f1:31:f3:c9:ac:d5:af:ef:1b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

setupapi

SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA

s7epaapi64x

LogDeviceGetNdiValue
LogDeviceGetValue

kernel32

WaitForSingleObject
TlsSetValue
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LocalAlloc
DeviceIoControl
CreateMutexA
ReleaseMutex
TlsAlloc
CloseHandle
LocalFree
TlsFree
CreateFileA
CreateEventA
GetVersionExA
GetFileSize
TlsGetValue
GetSystemDirectoryA
GlobalAlloc
CreateSemaphoreA
ExitThread
GlobalFree
WaitForMultipleObjects
CreateThread
WriteFile
GetFileAttributesA
CreateDirectoryA
GetModuleFileNameA
GetLocalTime
OutputDebugStringA
GetCurrentThreadId
IsDebuggerPresent
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
EncodePointer
DecodePointer
QueryPerformanceCounter
GetCurrentProcessId
ReadFile

user32

PostMessageA

advapi32

UnregisterTraceGuids
GetTraceEnableLevel
RegisterTraceGuidsA
SetSecurityDescriptorDacl
GetTraceLoggerHandle
InitializeSecurityDescriptor
GetTraceEnableFlags
TraceMessage

shell32

SHGetSpecialFolderPathA
SHGetFolderPathA

msvcr110

memcpy
memset
__clean_type_info_names_internal
_onexit
__dllonexit
_calloc_crt
free
malloc
_mbschr
strcpy_s
_stricmp
sprintf_s
strcat_s
strchr
_errno
wcstombs_s
sscanf_s
strtok_s
strtol
_wassert
strncpy
sprintf
strnlen
_vsnprintf
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
__C_specific_handler
_lock
_unlock

Exports

Exports

CI_N_Aspc2Event
CI_N_Get_AUTO_Baudrate
CI_N_Get_AUTO_Buspara
CI_N_Get_Baudrate
CI_N_Get_InfoWatch
CI_N_Get_InfoWatch_Select
CI_N_Reset_Counter
CI_N_SetHWndMsg
CI_N_Slave_Read_Diag
CI_N_Slave_Read_In
CI_N_Slave_Read_Out
CI_N_Slave_Write
CI_N_Slv_Set
CI_N_cancel_receive
CI_N_close
CI_N_delete_sema
CI_N_get_cp_cfg
CI_N_get_cp_trace
CI_N_get_err_txt
CI_N_get_flash_ptr
CI_N_get_info
CI_N_init_sema
CI_N_led_blink
CI_N_open
CI_N_open_direct
CI_N_receive
CI_N_release_flash_ptr
CI_N_reset_cp
CI_N_reset_cp_direct
CI_N_send
CI_N_start_cp
CI_N_start_cp_direct
SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\ci_5711.dll
.dll windows x64

d33898346018e6cf234c8d8a1a80a7ad

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:a7:c8:77:94:af:90:da:40:97:87:d6:33:41:9c:fe:6a:f8:d1:24:38:00:8b:b6:a5:38:1b:a0:10:4f:1a:5d
Signer

Actual PE Digest

cc:a7:c8:77:94:af:90:da:40:97:87:d6:33:41:9c:fe:6a:f8:d1:24:38:00:8b:b6:a5:38:1b:a0:10:4f:1a:5d

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiOpenDeviceInterfaceRegKey
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA

s7epaapi64x

LogDeviceGetNdiValue
LogDeviceGetValue

kernel32

ReadFile
GetSystemDirectoryA
MultiByteToWideChar
WideCharToMultiByte
CreateThread
ExitThread
GlobalAlloc
GlobalFree
WaitForMultipleObjects
CreateSemaphoreA
CreateDirectoryA
CreateFileA
GetFileAttributesA
WriteFile
OutputDebugStringA
SetEvent
WaitForSingleObject
GetFileSize
GetLocalTime
GetModuleFileNameA
TerminateThread
CreateMutexW
OpenMutexW
CreateEventW
OpenEventW
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
FormatMessageA
CreateEventA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ReleaseMutex
DeviceIoControl
GetLastError
LocalFree
LocalAlloc
GetCurrentProcess
CloseHandle
OutputDebugStringW
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime

user32

CreateWindowExA
RegisterClassExA
UnregisterClassA
DefWindowProcA
DestroyWindow
RegisterDeviceNotificationA
DispatchMessageA
TranslateMessage
GetMessageA
PostMessageA
LoadCursorA
UnregisterDeviceNotification
LoadIconA
PostQuitMessage

advapi32

InitializeSecurityDescriptor
GetTokenInformation
FreeSid
CreateWellKnownSid
OpenProcessToken
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetEntriesInAclA
RegisterTraceGuidsA
UnregisterTraceGuids
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
TraceMessage
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetSecurityDescriptorDacl

shell32

SHGetSpecialFolderPathA
SHGetFolderPathA

msvcr110

__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
_onexit
__C_specific_handler
__dllonexit
_calloc_crt
_unlock
_lock
strnlen
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
??1bad_cast@std@@UEAA@XZ
??0bad_cast@std@@QEAA@AEBV01@@Z
??0bad_cast@std@@QEAA@PEBD@Z
?what@exception@std@@UEBAPEBDXZ
??0exception@std@@QEAA@AEBV01@@Z
??0exception@std@@QEAA@AEBQEBD@Z
sprintf_s
??1exception@std@@UEAA@XZ
??0exception@std@@QEAA@XZ
strncpy
_vsnprintf
strtol
sscanf_s
sscanf
strtok
_stricmp
_errno
sprintf
wcslen
strcat
strcpy
memcmp
malloc
atoi
strchr
strcmp
strcpy_s
__CxxFrameHandler3
_CxxThrowException
free
_wassert
memmove
strlen
memcpy
??2@YAPEAX_K@Z
_purecall
??3@YAXPEAX@Z
memset
wcstombs_s

msvcp110

?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?endl@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@AEAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??0id@locale@std@@QEAA@_K@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAPEBDH@Z
?_Orphan_all@_Container_base0@std@@QEAAXXZ
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?setf@ios_base@std@@QEAAHHH@Z
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

Exports

Exports

CI_N_Aspc2Event
CI_N_Get_AUTO_Baudrate
CI_N_Get_AUTO_Buspara
CI_N_Get_InfoWatch
CI_N_Reset_Counter
CI_N_Set_Serial
CI_N_Slave_Read_Diag
CI_N_Slave_Read_In
CI_N_Slave_Read_Out
CI_N_Slave_Write
CI_N_Slv_Set
CI_N_cancel_receive
CI_N_close
CI_N_delete_sema
CI_N_get_cp_cfg
CI_N_get_cp_trace
CI_N_get_err_txt
CI_N_get_info
CI_N_init_sema
CI_N_led_blink
CI_N_led_blink_async
CI_N_open
CI_N_open_direct
CI_N_receive
CI_N_reset_cp
CI_N_reset_cp_direct
CI_N_send
CI_N_start_cp
CI_N_start_cp_direct
CI_N_test_excp
SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\ci_dll.dll
.dll windows x64

d4a6b8971625ba458387c54328d779e3

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b6:ef:e1:54:b7:a7:8a:f2:a2:43:4d:18:4e:34:36:4c:fc:d1:09:93:ae:b5:e7:03:48:62:25:4a:63:a4:20:da
Signer

Actual PE Digest

b6:ef:e1:54:b7:a7:8a:f2:a2:43:4d:18:4e:34:36:4c:fc:d1:09:93:ae:b5:e7:03:48:62:25:4a:63:a4:20:da

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

setupapi

SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA

s7epaapi64x

LogDeviceGetNdiValue
LogDeviceGetValue

kernel32

WriteFile
TlsSetValue
WideCharToMultiByte
MultiByteToWideChar
GetLastError
GetLocalTime
CreateFileMappingA
DeviceIoControl
GetModuleFileNameA
CreateMutexA
OutputDebugStringA
GetCurrentThreadId
ReleaseMutex
TlsAlloc
OpenFileMappingA
TlsFree
DeleteFileA
WaitForSingleObject
GetVersionExA
GetFileSize
GetWindowsDirectoryA
Sleep
ReadFile
GlobalAlloc
CreateSemaphoreA
ExitThread
GlobalFree
WaitForMultipleObjects
CreateThread
GetFileAttributesA
CreateDirectoryA
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
UnmapViewOfFile
MapViewOfFile
TlsGetValue
CreateFileA
LocalFree
CloseHandle
LocalAlloc
OutputDebugStringW
GetCurrentProcessId
EncodePointer
DecodePointer
QueryPerformanceCounter
CreateEventA

user32

PostMessageA
MessageBoxA

advapi32

TraceMessage
RegCloseKey
GetTraceEnableLevel
UnregisterTraceGuids
RegisterTraceGuidsA
RegOpenKeyExA
GetTraceLoggerHandle
RegQueryValueExA
GetTraceEnableFlags
CreateWellKnownSid
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclA

shell32

SHGetFolderPathA
SHGetSpecialFolderPathA

msvcr110

memcmp
memcpy
__clean_type_info_names_internal
memset
_onexit
__dllonexit
_calloc_crt
sprintf
free
malloc
vsprintf_s
fopen
strcpy_s
_vsnprintf
fwrite
fclose
strncpy_s
_mbschr
_stricmp
sprintf_s
strncmp
strnlen
strcat_s
strchr
_errno
wcstombs_s
sscanf_s
sscanf
strtok_s
strtol
_wassert
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
__C_specific_handler
_lock
_unlock

Exports

Exports

CI_Aspc2Event
CI_Get_AUTO_Baudrate
CI_Get_AUTO_Buspara
CI_Get_Baudrate
CI_MBox
CI_N_get_flash_ptr
CI_N_release_flash_ptr
CI_SetHWndMsg
CI_cancel_event
CI_cancel_receive
CI_check_for_driver
CI_close
CI_connect_cp
CI_delete_sema
CI_disconnect_cp
CI_dpr_dump
CI_enable_start_cp
CI_fast_logic_off
CI_fast_logic_on
CI_get_cp_cfg
CI_get_cp_short_trace
CI_get_cp_trace
CI_get_dp_access
CI_get_err_txt
CI_get_info
CI_get_pointer
CI_init_sema
CI_led_blink
CI_open
CI_open_direct
CI_receive
CI_receive_event
CI_release_dp_access
CI_reserve_send
CI_reset_cp
CI_reset_cp_direct
CI_send
CI_start_cp
CI_start_cp_direct
SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 847KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\ci_pcadpa2.dll
.dll windows x64

dce5cff46041685b84a49fb0e313fd06

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c4:39:c5:67:24:2b:35:fe:13:09:d3:f3:3b:81:6b:05:ad:e2:2a:6f:3e:85:6d:28:c7:6a:78:d7:61:88:b3:9c
Signer

Actual PE Digest

c4:39:c5:67:24:2b:35:fe:13:09:d3:f3:3b:81:6b:05:ad:e2:2a:6f:3e:85:6d:28:c7:6a:78:d7:61:88:b3:9c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

s7epaapi64x

LogDeviceGetValue

kernel32

GetSystemTime
FormatMessageA
GetCurrentProcess
GetModuleHandleW
GetModuleFileNameW
GetCurrentProcessorNumber
CreateMutexW
MapViewOfFile
UnmapViewOfFile
OpenMutexW
CreateFileMappingW
CreateEventW
OpenFileMappingW
OpenEventW
DebugBreak
FreeLibrary
CreateProcessW
CreateDirectoryW
GetSystemDirectoryW
LoadLibraryW
GetTempPathW
WideCharToMultiByte
LoadLibraryA
IsWow64Process
OutputDebugStringW
GetCurrentProcessId
FlushFileBuffers
WriteConsoleW
SetStdHandle
UnregisterWait
GetThreadPriority
SetFilePointerEx
GetConsoleMode
GetConsoleCP
CreateTimerQueue
RegisterWaitForSingleObject
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
UnregisterWaitEx
QueryDepthSList
MultiByteToWideChar
OutputDebugStringA
GetLocalTime
TerminateThread
GetCurrentThreadId
GetModuleFileNameA
WaitForSingleObject
SetEvent
GetModuleHandleA
GetProcAddress
WriteFile
CreateFileA
CreateDirectoryA
GetFileAttributesA
ExitThread
WaitForMultipleObjects
GlobalFree
CreateThread
GlobalAlloc
CreateSemaphoreA
ReadFile
GetFileSize
GetSystemDirectoryA
CreateEventA
CloseHandle
CreateFileW
DeviceIoControl
ReleaseMutex
TlsSetValue
LocalAlloc
TlsAlloc
TlsFree
GetLastError
LocalFree
TlsGetValue
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
SignalObjectAndWait
ResetEvent
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
DuplicateHandle
VirtualProtect
GetStringTypeW
Sleep
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
HeapAlloc
GetCommandLineA
HeapReAlloc
InitializeCriticalSectionAndSpinCount
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
CreateTimerQueueTimer
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
GetStartupInfoW
CreateSemaphoreW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetCurrentThread
ExitProcess
GetModuleHandleExW
HeapSize
GetStdHandle
IsValidCodePage
GetACP
GetOEMCP
GetFileType
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask
SwitchToThread
GetThreadTimes
FreeLibraryAndExitThread
LoadLibraryExW
SetThreadPriority
GetTickCount
GetVersionExW
VirtualAlloc
VirtualFree

user32

DestroyWindow
PostQuitMessage
UnregisterDeviceNotification
RegisterDeviceNotificationA
UnregisterClassA
DefWindowProcA
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
PostMessageA

advapi32

CreateWellKnownSid
FreeSid
SetEntriesInAclW
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegCloseKey
RegQueryValueExA
UnregisterTraceGuids
RegisterTraceGuidsA
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
TraceMessage

shell32

SHGetFolderPathA
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA

ole32

StringFromGUID2

Exports

Exports

CI_N_Aspc2Event
CI_N_Get_AUTO_Baudrate
CI_N_Get_AUTO_Buspara
CI_N_Get_Baudrate
CI_N_Get_InfoWatch
CI_N_Reset_Counter
CI_N_cancel_receive
CI_N_close
CI_N_delete_sema
CI_N_get_cp_cfg
CI_N_get_cp_trace
CI_N_get_err_txt
CI_N_get_info
CI_N_init_sema
CI_N_led_blink
CI_N_led_blink_async
CI_N_open
CI_N_open_direct
CI_N_receive
CI_N_reset_cp
CI_N_reset_cp_direct
CI_N_send
CI_N_set_device_info
CI_N_start_cp
CI_N_start_cp_direct
CI_N_test_excp
SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 537KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\de\s7epatd64.resources.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2e:33:c4:70:5f:d2:89:f2:f3:19:68:e4:ca:9d:64:7b:7e:ef:bd:68:de:52:58:bf:88:fc:04:6c:00:53:63:23
Signer

Actual PE Digest

2e:33:c4:70:5f:d2:89:f2:f3:19:68:e4:ca:9d:64:7b:7e:ef:bd:68:de:52:58:bf:88:fc:04:6c:00:53:63:23

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:49
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rdata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\de\simaticnet.resources.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4a:f3:50:06:4e:7d:26:c3:1a:2b:bf:fc:b4:48:61:cc:5f:6c:50:dc:f1:e1:3c:9f:42:f2:81:cc:df:1f:af:be
Signer

Actual PE Digest

4a:f3:50:06:4e:7d:26:c3:1a:2b:bf:fc:b4:48:61:cc:5f:6c:50:dc:f1:e1:3c:9f:42:f2:81:cc:df:1f:af:be

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\diag1613.dll
.dll windows x64

67cd8e3ae59446b123e46aece23a81b1

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f8:ab:fa:df:e6:0e:a7:fe:3f:01:10:9e:ea:ea:4d:fd:b0:c4:84:2e:a9:ae:6d:d8:60:0c:20:50:04:0a:06:b9
Signer

Actual PE Digest

f8:ab:fa:df:e6:0e:a7:fe:3f:01:10:9e:ea:ea:4d:fd:b0:c4:84:2e:a9:ae:6d:d8:60:0c:20:50:04:0a:06:b9

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mfc110u

ord10555
ord8584
ord10860
ord10105
ord10702
ord11459
ord11462
ord11460
ord11461
ord14126
ord1377
ord10534
ord11736
ord7218
ord12073
ord5116
ord4274
ord8302
ord3655
ord4608
ord6212
ord3041
ord4024
ord8293
ord2852
ord3690
ord14014
ord2635
ord1150
ord8673
ord2217
ord6450
ord3106
ord3215
ord1411
ord4607
ord2460
ord4296
ord2138
ord265
ord266
ord490
ord1115
ord4714
ord2290
ord8360
ord12538
ord13685
ord9009
ord6976
ord906
ord3090
ord5900
ord4758
ord4757
ord12719
ord3908
ord1856
ord10034
ord1380
ord11737
ord2489
ord8794
ord2911
ord8766
ord7219
ord2105
ord6924
ord11935
ord1661
ord4524
ord7398
ord12432
ord4450
ord4449
ord2854
ord5580
ord1658
ord1492
ord280
ord285
ord2866
ord13770
ord7738
ord5545
ord4122
ord8668
ord1046
ord4019
ord3001
ord6121
ord7085
ord11651
ord5871
ord13218
ord2643
ord8751
ord4718
ord11692
ord1082
ord8582
ord10549
ord10922
ord10008
ord4282
ord3892
ord445
ord3252
ord3253
ord3016
ord6155
ord5787
ord10768
ord13222
ord3157
ord3154
ord9791
ord7758
ord2644
ord9821
ord9823
ord9822
ord9820
ord9824
ord5327
ord290
ord11253
ord8681
ord11609
ord3660
ord11463
ord14029
ord8507
ord11740
ord6591
ord10536
ord8797
ord3118
ord13334
ord11779
ord11777
ord1685
ord1694
ord1702
ord1698
ord1707
ord4698
ord4735
ord4706
ord4710
ord4741
ord4731
ord4702
ord4745
ord4723
ord4687
ord4693
ord4726
ord4299
ord5456
ord9232
ord4291
ord2912
ord14031
ord7499
ord14037
ord9916
ord13949
ord6493
ord12957
ord11244
ord13175
ord5594
ord13588
ord2575
ord11644
ord3753
ord3223
ord3224
ord3117
ord11688
ord984
ord3541
ord8011
ord7245
ord1441
ord7928
ord11767
ord9969
ord12438
ord12376
ord4384
ord7563
ord7868
ord5059
ord9915
ord2385
ord12056
ord12055
ord14030
ord7498
ord14036
ord8939
ord3952
ord3890
ord12457
ord7516
ord1962
ord11503
ord11502
ord13909
ord12045
ord7566
ord14108
ord5991
ord14110
ord5993
ord14109
ord5992
ord977
ord6477
ord2170
ord3673
ord5577
ord11759
ord7765
ord11771
ord8519
ord13191
ord896
ord6975
ord2216
ord4665
ord1113
ord2747
ord14047
ord11482
ord487
ord5204
ord6179
ord2342
ord7902
ord8304
ord8269
ord5873
ord12395
ord11739
ord4959
ord5239
ord5427
ord8891
ord5215
ord5430
ord4962
ord5105
ord4943
ord7310
ord7311
ord7301
ord5103
ord7767
ord9786
ord8750
ord1032
ord322
ord2160
ord8005
ord2848
ord1495
ord1494
ord4828
ord4829
ord12296
ord5202
ord1104
ord481
ord6173
ord11252
ord13020
ord1480
ord4595
ord1027
ord286
ord296
ord1632
ord3670
ord1483
ord323
ord1033
ord2273
ord2315
ord2318
ord2284
ord2317
ord472
ord2182
ord2282
ord2111
ord2214
ord2306
ord4500
ord1482

msvcr110

_wcsicmp
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_vsnprintf_s
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
_findfirst64i32
_findclose
_endthreadex
_beginthreadex
_vsnwprintf_s
swprintf_s
vsprintf_s
_snprintf_s
strstr
strrchr
strcat_s
strcpy_s
memcpy_s
memcmp
sprintf
fwrite
fprintf
fopen
fflush
fclose
perror
_itoa
strncpy
strlen
strcat
_wcsdup
__C_specific_handler
mbstowcs
_vsnprintf
sprintf_s
_vsnwprintf
wcsnlen
wcsncmp
_swprintf
wcsncpy
memmove
malloc
free
_wtoi
wcstok
iswdigit
_wgetenv
_wmkdir
_snwprintf_s
wcscpy_s
wcscmp
wcscat_s
_wtol
strcpy
__CxxFrameHandler3
wcsstr
wcslen
wcscpy
wcscat
strcmp
memset
memcpy

kernel32

LoadLibraryExA
GetSystemTimeAsFileTime
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsA
OpenFile
GetCurrentDirectoryA
WideCharToMultiByte
LoadLibraryA
OpenFileMappingA
CreateFileMappingA
OpenMutexA
lstrlenA
WaitForMultipleObjects
LocalFree
LocalAlloc
GetModuleHandleA
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
GetVersionExA
OpenEventA
CreateEventA
CreateMutexA
SetEvent
SetLastError
WriteFile
GetDiskFreeSpaceExA
DeleteFileA
CreateFileA
CreateDirectoryA
GetEnvironmentVariableA
InitializeCriticalSectionEx
MultiByteToWideChar
GetLocalTime
GetCurrentThreadId
OutputDebugStringA
lstrlenW
lstrcpyW
GetTickCount
ExitProcess
GetCurrentProcessId
lstrcatW
lstrcpynW
lstrcmpW
GlobalFree
GlobalAlloc
Sleep
DeviceIoControl
GetProcessHeap
HeapFree
HeapAlloc
GetFileAttributesW
LoadLibraryExW
IsWow64Process
GetVersionExW
GetSystemDirectoryW
GetLastError
SetFilePointer
ReadFile
FindFirstFileW
FindClose
CreateFileW
GetCurrentDirectoryW
LoadLibraryW
CloseHandle
OutputDebugStringW
GetProcAddress
GetModuleHandleW
FreeLibrary
GetCurrentProcess
CreateMutexW
WaitForSingleObject
ReleaseMutex
RaiseException

user32

OffsetRect
GetWindowRect
KillTimer
SetTimer
WinHelpW
GetWindowContextHelpId
GetFocus
IsChild
CharUpperW
wsprintfW
GetParent
MessageBoxW
PostMessageW
SendMessageW
LoadStringW
EnableWindow
BringWindowToTop
MessageBoxIndirectW

comdlg32

GetOpenFileNameW

advapi32

RegSetValueExA
SetSecurityDescriptorDacl
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
CreateWellKnownSid
FreeSid
SetEntriesInAclA
CryptEncrypt
CryptImportKey
CryptExportKey
CryptDestroyKey
CryptGenKey
CryptReleaseContext
CryptAcquireContextA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
InitializeSecurityDescriptor

shell32

SHGetFolderPathW
SHGetSpecialFolderPathW

shlwapi

SHGetValueW

oleaut32

SysAllocString
SysFreeString

crypt32

CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore

Exports

Exports

DllEntryFkt
GetVersionsOfCP16xx
IE_CP1613_NDIS_IPAddr
IE_CP1628_Flashed_MACAddresses
IE_CP1628_Ring
OPC_CP1613_Drv_Version
OPC_CP1613_FW_MACAddr
OPC_CP1613_FW_NetParams
OPC_CP1613_FW_ReadTrace
OPC_CP1613_FW_TimeDate
OPC_CP1613_FW_Version
OPC_CP1613_File_Version
OPC_CP1613_HW_Version
OPC_CP1613_NDIS_IPAddr
OPC_CP1613_PowerOnTime
OPC_CP1613_Temperature
OPC_CP1613_Test
OPC_CP1613_TraceFile
OPC_CP1613_TraceFlags
OPC_CP1613_TraceLen
OPC_CP1628_Flashed_MACAddresses
OPC_StartBlinkCp
OPC_StopBlinkCp
SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\diagdisb.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e5:bc:aa:8d:fe:3c:d5:37:d4:f9:fe:e3:db:e5:96:6c:53:a8:06:2c:28:f0:df:0c:c5:1d:c7:07:82:86:5f:5e
Signer

Actual PE Digest

e5:bc:aa:8d:fe:3c:d5:37:d4:f9:fe:e3:db:e5:96:6c:53:a8:06:2c:28:f0:df:0c:c5:1d:c7:07:82:86:5f:5e

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rdata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\diagdisj.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

26:80:3f:bf:70:09:f7:ab:88:40:94:26:c4:c6:72:fc:af:4e:2b:d1:96:b6:98:88:f2:e7:1a:91:2e:c1:37:ac
Signer

Actual PE Digest

26:80:3f:bf:70:09:f7:ab:88:40:94:26:c4:c6:72:fc:af:4e:2b:d1:96:b6:98:88:f2:e7:1a:91:2e:c1:37:ac

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rdata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\diagdisk.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

13:7a:c8:ee:23:4f:97:60:d4:28:61:41:3c:8e:63:cc:c1:57:1f:e4:cd:91:b2:e2:ba:53:a4:8c:04:ed:ee:94
Signer

Actual PE Digest

13:7a:c8:ee:23:4f:97:60:d4:28:61:41:3c:8e:63:cc:c1:57:1f:e4:cd:91:b2:e2:ba:53:a4:8c:04:ed:ee:94

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rdata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\diagdisp.dll
.dll windows x64

311ae7b2567dfbc76cadaab8fc4b4be0

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d7:ae:85:08:2f:e4:32:82:71:5d:fe:eb:90:92:ea:33:59:ec:e0:e9:79:20:40:e4:18:ae:e3:0b:71:43:05:89
Signer

Actual PE Digest

d7:ae:85:08:2f:e4:32:82:71:5d:fe:eb:90:92:ea:33:59:ec:e0:e9:79:20:40:e4:18:ae:e3:0b:71:43:05:89

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

iphlpapi

GetAdaptersInfo

mfc110u

ord11462
ord11460
ord11461
ord14126
ord1377
ord10534
ord11736
ord7218
ord12432
ord4665
ord4274
ord8302
ord3655
ord6121
ord3001
ord4019
ord1046
ord8668
ord5116
ord7738
ord527
ord1142
ord6213
ord4025
ord1151
ord8674
ord5642
ord2290
ord8360
ord12538
ord13685
ord9930
ord6976
ord2217
ord3090
ord4758
ord3908
ord1856
ord10034
ord1380
ord11737
ord2489
ord8794
ord2911
ord8766
ord8730
ord7219
ord2105
ord6924
ord11935
ord4524
ord4122
ord4449
ord9916
ord13949
ord12957
ord13020
ord7398
ord13588
ord4296
ord2460
ord3541
ord8673
ord1150
ord2635
ord14014
ord3690
ord2852
ord8293
ord4024
ord3041
ord6212
ord5787
ord5873
ord13222
ord3157
ord3154
ord9791
ord7758
ord2644
ord1445
ord9821
ord9823
ord9822
ord5900
ord9820
ord9824
ord5327
ord11252
ord11253
ord11609
ord3660
ord11463
ord14029
ord8507
ord11740
ord6591
ord10536
ord8797
ord3118
ord13334
ord11779
ord11777
ord1685
ord11459
ord1702
ord1698
ord1707
ord4698
ord4735
ord4706
ord4718
ord4714
ord4710
ord4741
ord4731
ord4702
ord1104
ord4723
ord4687
ord4693
ord4726
ord4299
ord5456
ord9232
ord4291
ord2912
ord14031
ord7499
ord14037
ord6493
ord11244
ord13175
ord5594
ord2575
ord11644
ord3753
ord3223
ord3224
ord3117
ord11688
ord984
ord8011
ord7245
ord1441
ord7928
ord11767
ord9969
ord12438
ord12376
ord4384
ord7563
ord7868
ord5059
ord2385
ord12056
ord12055
ord14030
ord7498
ord14036
ord8939
ord3952
ord3890
ord12457
ord7516
ord1962
ord11503
ord11502
ord13909
ord12045
ord7566
ord14108
ord5991
ord14110
ord5993
ord14109
ord5992
ord977
ord6477
ord2170
ord3673
ord5577
ord11759
ord7765
ord11771
ord11739
ord4959
ord5239
ord5427
ord8891
ord5215
ord5430
ord4962
ord5105
ord4943
ord7310
ord7311
ord7301
ord5103
ord7767
ord9786
ord8750
ord1032
ord322
ord2160
ord4500
ord4594
ord7902
ord12395
ord1662
ord1494
ord10702
ord10105
ord10860
ord8584
ord10555
ord10768
ord8519
ord6023
ord896
ord1694
ord6975
ord13770
ord12073
ord4828
ord2216
ord1115
ord490
ord8005
ord4607
ord4608
ord1658
ord1028
ord316
ord4830
ord266
ord1480
ord2854
ord4595
ord5580
ord1661
ord1495
ord1492
ord1027
ord290
ord286
ord280
ord6173
ord5871
ord11651
ord13218
ord2643
ord8751
ord10922
ord10008
ord3892
ord3252
ord3253
ord3016
ord4745
ord285
ord296
ord2866
ord5545
ord1632
ord265
ord8305
ord8304
ord4450
ord2848
ord4836
ord4829
ord2342
ord8681
ord3670
ord1483
ord323
ord1033
ord2273
ord2315
ord2318
ord2284
ord2317
ord472
ord2182
ord2282
ord2111
ord2214
ord2306
ord1482
ord906

msvcr110

__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_vsnprintf_s
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
_findfirst64i32
_findclose
_endthreadex
_beginthreadex
_vsnwprintf_s
_snwprintf_s
swprintf_s
_snprintf_s
wcsstr
strrchr
strcat_s
memcpy_s
_strdup
__C_specific_handler
_ltow_s
strcpy_s
mbstowcs
_vsnprintf
sprintf_s
_wsplitpath
_wmakepath
_vsnwprintf
wcsnlen
wcscat_s
wcstol
wcscpy_s
memcmp
wcstoul
strchr
_wtol
wcsrchr
towlower
_CxxThrowException
ldiv
vsprintf_s
wcsncmp
wcslen
strstr
strncpy
strncmp
strncat
memmove
strcmp
strcat
_purecall
malloc
free
sprintf
strlen
memcpy
__CxxFrameHandler3
fwrite
_wfopen
_wcsicmp
wcsncpy
wcscpy
wcschr
wcscat
_strlwr
_stricmp
strcpy
printf
ftell
fseek
fread
fopen
fclose
memset
wcscmp

kernel32

RaiseException
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsA
LoadLibraryExW
IsWow64Process
ReadFile
CreateFileW
GetCurrentDirectoryW
OpenFile
WideCharToMultiByte
OpenFileMappingA
CreateFileMappingA
OpenMutexA
lstrlenA
WaitForMultipleObjects
LocalFree
LocalAlloc
GetModuleHandleA
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
GetVersionExA
GetCurrentProcessId
GetCurrentProcess
OpenEventA
CreateEventA
CreateMutexA
WaitForSingleObject
ReleaseMutex
SetEvent
SetLastError
WriteFile
SetFilePointer
GetDiskFreeSpaceExA
DeleteFileA
CreateDirectoryA
GetEnvironmentVariableA
MultiByteToWideChar
InitializeCriticalSectionEx
GetSystemDirectoryW
lstrlenW
lstrcpyW
GetLocalTime
GetCurrentThreadId
OutputDebugStringA
OutputDebugStringW
FindFirstFileW
FindClose
GetCurrentDirectoryA
ExpandEnvironmentStringsW
FileTimeToSystemTime
LoadLibraryA
GetVersionExW
GetSystemDirectoryA
GetVersion
Sleep
DeviceIoControl
GetLastError
CloseHandle
GetFileTime
CreateFileA
GetProcAddress
FreeLibrary
LoadLibraryExA

user32

MessageBoxIndirectW
OffsetRect
GetWindowRect
GetParent
SendMessageW
MessageBoxW
EnableWindow
BringWindowToTop
SendMessageTimeoutW
PostMessageW

comdlg32

GetOpenFileNameW

advapi32

CryptReleaseContext
RegEnumKeyExA
CreateWellKnownSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExW
SetEntriesInAclA
CryptEncrypt
CryptImportKey
CryptExportKey
CryptDestroyKey
CryptGenKey
RegOpenKeyExA
CryptAcquireContextA
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegDeleteValueA

shell32

SHGetFolderPathW
SHGetSpecialFolderPathW

oleaut32

CreateErrorInfo
SetErrorInfo
GetErrorInfo
VariantChangeType
VariantCopy
VariantClear
VariantInit
SysFreeString
SysAllocString

crypt32

CertOpenStore
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty

msvcp110

?_Winerror_map@std@@YAPEBDH@Z
?_Syserror_map@std@@YAPEBDH@Z
??0id@locale@std@@QEAA@_K@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Orphan_all@_Container_base0@std@@QEAAXXZ

Exports

Exports

?CreateDPRAM@@YAJPEBD0H@Z
?GetDescription@@YAJKPEAKPEBD@Z
?GetDiagnoseNetPBLifeList@@YAJPEBDPEAULIFE_LIST@@@Z
?GetDiagnoseNetPara@@YAJPEBDPEAUnetpara@@@Z
?GetDiagnoseProtDP@@YAJPEBDPEAUSLAVE_LIST@@@Z
?GetDiagnoseProtDPFile@@YAJPEBDPEAUSLAVE_LIST@@@Z
?StoreSNDPBuspars@@YAKPEBD0@Z
DllEntryFkt
DllEntryStatManagerPage
GetUpdateInterface
IECNV_SNISO_MACAddr
IsCP5611A2
IsCP5621
OPC_BusParam
OPC_GetErrorString
OPC_GetHWResources
OPC_GetProfileBaudrateList
OPC_GetSerial
OPC_LifeList
OPC_ReadDpDatabase
OPC_SNTIE_FW_Version
OPC_SNTIE_MACAddr
OPC_SNTIE_MaxConnect
OPC_SNTIE_NDIS_Active
OPC_SNTIE_Test
OPC_SetBusparamForBaudrate
OPC_StartBlinkCp
OPC_StopBlinkCp
SetLEDFlags

Sections

.text
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\dnsservices.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

89:c3:d0:f1:90:17:6a:2f:94:f4:21:7e:47:b5:6f:82:7e:df:28:bd:ec:f8:a2:95:56:ea:fa:97:67:21:fe:10
Signer

Actual PE Digest

89:c3:d0:f1:90:17:6a:2f:94:f4:21:7e:47:b5:6f:82:7e:df:28:bd:ec:f8:a2:95:56:ea:fa:97:67:21:fe:10

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\dp5612.dll
.dll windows x64

685ab1c020c1cb60eba05dede36a9daa

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d2:07:85:f0:13:df:3a:4b:37:d0:39:6f:93:a2:57:ed:1c:7f:51:88:69:9d:06:65:f7:79:9c:26:c2:d4:93:d3
Signer

Actual PE Digest

d2:07:85:f0:13:df:3a:4b:37:d0:39:6f:93:a2:57:ed:1c:7f:51:88:69:9d:06:65:f7:79:9c:26:c2:d4:93:d3

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

dps5612

X_Trc_write_txt
X_Trc_init
X_Trc_close
ord14
X_Trc_write

ci_5612

ord7
ord9
ord10
ord15
ord27
ord34
ord13
ord11
ord8

kernel32

LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetLastError
HeapFree
HeapAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
EncodePointer
DecodePointer
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThread
MultiByteToWideChar
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
GetStdHandle
WriteFile
GetModuleFileNameW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
Sleep
RtlUnwindEx
FatalAppExitA
GetStringTypeW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
FreeLibrary
LoadLibraryExW
SetConsoleCtrlHandler
OutputDebugStringW
LoadLibraryW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
HeapReAlloc
HeapSize
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle

advapi32

TraceMessage
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
UnregisterTraceGuids
RegOpenKeyExA
RegQueryValueExA
RegisterTraceGuidsA
RegCloseKey

Exports

Exports

DPMC2_act_para_brct_mst
DPMC2_act_para_mst
DPMC2_download_mst
DPMC2_end_seq_mst
DPMC2_get_mst_diag
DPMC2_get_slv_cfg
DPMC2_get_slv_diag
DPMC2_get_slv_in
DPMC2_get_slv_out
DPMC2_set_slv_address
DPMC2_start_seq_mst
DPMC2_upload_mst
DP_alarm_ack
DP_close
DP_delete_sema_object
DP_disable_event
DP_ds_read
DP_ds_write
DP_enable_event
DP_fetch_alarm
DP_fetch_alarm_cvrt
DP_get_actual_cfg
DP_get_cref
DP_get_err_txt
DP_get_result
DP_global_ctrl
DP_init_sema_object
DP_open
DP_open_cvrt
DP_read_alarm
DP_read_slv_par
DP_register_slv_cvrt
DP_reset_cp
DP_set_mode
DP_slv_state
DP_start_cp
DP_write_slv_par_cvrt
DP_write_trc
InitTrace
UnInitTrace
x_DP_watchdog

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\dpcnv5612.dll
.dll windows x64

aa5e023844c975d0df4c63d8cb4fe08d

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

20:f1:82:44:d4:42:94:e1:33:33:a9:1d:ff:f9:9c:1d:7f:82:81:bc:fe:1c:be:b2:b9:24:96:f2:f5:39:2d:8c
Signer

Actual PE Digest

20:f1:82:44:d4:42:94:e1:33:33:a9:1d:ff:f9:9c:1d:7f:82:81:bc:fe:1c:be:b2:b9:24:96:f2:f5:39:2d:8c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcr90

_encoded_null
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
memset
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
??3@YAXPEAX@Z
vsprintf
_endthreadex
?terminate@@YAXXZ
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
__CxxFrameHandler3
_initterm_e
_initterm
_malloc_crt
_encode_pointer
memcpy
strncpy
??2@YAPEAX_K@Z
wcstombs
malloc
free
_vsnprintf
strstr
_beginthreadex

dp5612

ord9
ord13
ord12
ord17
ord18
ord1
ord41
ord40
ord10
ord14
ord15
ord6
ord25
ord5
ord8
ord46
ord7
ord45
ord26
ord2
ord4
ord11

ci_5612

ord8
ord69
ord64
ord9
ord63
ord10
ord62
ord7
ord66
ord65

sn_regbase

SNRegBaseRegQueryValueExA
SNRegBaseRegOpenKeyExA
SNRegBaseRegCloseKey

kernel32

RtlCaptureContext
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetNamedPipeHandleState
WaitNamedPipeA
GetLastError
CreateFileA
ReleaseMutex
InitializeCriticalSection
CreateEventA
LeaveCriticalSection
OutputDebugStringA
GetCurrentThreadId
GetLocalTime
ReleaseSemaphore
ReadFile
GetFileSize
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteFileA
WaitForMultipleObjects
SetThreadPriority
CreateThread
CreateSemaphoreA
TerminateProcess
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WriteFile
SetEvent
EnterCriticalSection
DeleteCriticalSection
CloseHandle
Sleep
WaitForSingleObject
GetCurrentProcess

user32

IsWindow
PostMessageA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

msvcp90

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1strstreambuf@std@@UEAA@XZ
?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
?_Lock@_Mutex@std@@QEAAXXZ
?_Unlock@_Mutex@std@@QEAAXXZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@H@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?ends@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@AEAV21@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0strstreambuf@std@@QEAA@PEAD_J0@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

Exports

Exports

SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\dpcnv5711.dll
.dll windows x64

39babe2ac27965c313c8fdc8226f1d05

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

57:2e:42:0f:a2:2c:83:9b:68:8a:c5:ea:c5:1a:20:a8:8d:58:2d:63:02:82:aa:5d:02:e5:25:af:44:fa:06:ab
Signer

Actual PE Digest

57:2e:42:0f:a2:2c:83:9b:68:8a:c5:ea:c5:1a:20:a8:8d:58:2d:63:02:82:aa:5d:02:e5:25:af:44:fa:06:ab

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcr90

_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
_initterm_e
_initterm
_malloc_crt
_encode_pointer
??2@YAPEAX_K@Z
memcpy
wcstombs
malloc
free
strncpy
strstr
_beginthreadex
_endthreadex
vsprintf_s
strcpy_s
??3@YAXPEAX@Z
memset
??_V@YAXPEAX@Z
??_U@YAPEAX_K@Z
__CxxFrameHandler3

dpusb5711

ord15
ord14
ord9
ord10
ord11
ord13
ord12
ord17
ord18
ord1
ord41
ord40
ord6
ord25
ord5
ord8
ord46
ord7
ord26
ord4
ord2
ord45

ci_5711

ord2
ord4
ord40
ord3
ord44
ord42
ord41
ord1
ord46
ord43

sn_regbase

SNRegBaseRegQueryValueExA
SNRegBaseRegCloseKey
SNRegBaseRegOpenKeyExA

kernel32

SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
CreateSemaphoreA
CreateThread
SetThreadPriority
WaitForMultipleObjects
DeleteFileA
GetFileSize
ReadFile
ReleaseSemaphore
LoadLibraryA
GetProcAddress
FreeLibrary
CreateEventA
InitializeCriticalSection
ReleaseMutex
CreateFileA
GetLastError
WaitNamedPipeA
SetNamedPipeHandleState
WriteFile
GetCurrentProcess
WaitForSingleObject
UnhandledExceptionFilter
LeaveCriticalSection
SetEvent
EnterCriticalSection
DeleteCriticalSection
CloseHandle
Sleep

user32

IsWindow
PostMessageA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

msvcp90

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?ends@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@AEAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@H@2@@Z
?_Unlock@_Mutex@std@@QEAAXXZ
?_Lock@_Mutex@std@@QEAAXXZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z
??1strstreambuf@std@@UEAA@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0strstreambuf@std@@QEAA@PEAD_J0@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

Exports

Exports

SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\dpcnvpcadpa2.dll
.dll windows x64

dce5cff46041685b84a49fb0e313fd06

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c4:39:c5:67:24:2b:35:fe:13:09:d3:f3:3b:81:6b:05:ad:e2:2a:6f:3e:85:6d:28:c7:6a:78:d7:61:88:b3:9c
Signer

Actual PE Digest

c4:39:c5:67:24:2b:35:fe:13:09:d3:f3:3b:81:6b:05:ad:e2:2a:6f:3e:85:6d:28:c7:6a:78:d7:61:88:b3:9c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

s7epaapi64x

LogDeviceGetValue

kernel32

GetSystemTime
FormatMessageA
GetCurrentProcess
GetModuleHandleW
GetModuleFileNameW
GetCurrentProcessorNumber
CreateMutexW
MapViewOfFile
UnmapViewOfFile
OpenMutexW
CreateFileMappingW
CreateEventW
OpenFileMappingW
OpenEventW
DebugBreak
FreeLibrary
CreateProcessW
CreateDirectoryW
GetSystemDirectoryW
LoadLibraryW
GetTempPathW
WideCharToMultiByte
LoadLibraryA
IsWow64Process
OutputDebugStringW
GetCurrentProcessId
FlushFileBuffers
WriteConsoleW
SetStdHandle
UnregisterWait
GetThreadPriority
SetFilePointerEx
GetConsoleMode
GetConsoleCP
CreateTimerQueue
RegisterWaitForSingleObject
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
UnregisterWaitEx
QueryDepthSList
MultiByteToWideChar
OutputDebugStringA
GetLocalTime
TerminateThread
GetCurrentThreadId
GetModuleFileNameA
WaitForSingleObject
SetEvent
GetModuleHandleA
GetProcAddress
WriteFile
CreateFileA
CreateDirectoryA
GetFileAttributesA
ExitThread
WaitForMultipleObjects
GlobalFree
CreateThread
GlobalAlloc
CreateSemaphoreA
ReadFile
GetFileSize
GetSystemDirectoryA
CreateEventA
CloseHandle
CreateFileW
DeviceIoControl
ReleaseMutex
TlsSetValue
LocalAlloc
TlsAlloc
TlsFree
GetLastError
LocalFree
TlsGetValue
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
SignalObjectAndWait
ResetEvent
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
DuplicateHandle
VirtualProtect
GetStringTypeW
Sleep
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
HeapAlloc
GetCommandLineA
HeapReAlloc
InitializeCriticalSectionAndSpinCount
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
CreateTimerQueueTimer
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
GetStartupInfoW
CreateSemaphoreW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetCurrentThread
ExitProcess
GetModuleHandleExW
HeapSize
GetStdHandle
IsValidCodePage
GetACP
GetOEMCP
GetFileType
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask
SwitchToThread
GetThreadTimes
FreeLibraryAndExitThread
LoadLibraryExW
SetThreadPriority
GetTickCount
GetVersionExW
VirtualAlloc
VirtualFree

user32

DestroyWindow
PostQuitMessage
UnregisterDeviceNotification
RegisterDeviceNotificationA
UnregisterClassA
DefWindowProcA
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
PostMessageA

advapi32

CreateWellKnownSid
FreeSid
SetEntriesInAclW
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegCloseKey
RegQueryValueExA
UnregisterTraceGuids
RegisterTraceGuidsA
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
TraceMessage

shell32

SHGetFolderPathA
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA

ole32

StringFromGUID2

Exports

Exports

CI_N_Aspc2Event
CI_N_Get_AUTO_Baudrate
CI_N_Get_AUTO_Buspara
CI_N_Get_Baudrate
CI_N_Get_InfoWatch
CI_N_Reset_Counter
CI_N_cancel_receive
CI_N_close
CI_N_delete_sema
CI_N_get_cp_cfg
CI_N_get_cp_trace
CI_N_get_err_txt
CI_N_get_info
CI_N_init_sema
CI_N_led_blink
CI_N_led_blink_async
CI_N_open
CI_N_open_direct
CI_N_receive
CI_N_reset_cp
CI_N_reset_cp_direct
CI_N_send
CI_N_set_device_info
CI_N_start_cp
CI_N_start_cp_direct
CI_N_test_excp
SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 537KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\dpdx2cnv5612.dll
.dll windows x64

60da40c0fa17b94b72b381cc81047bf7

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:4b:2b:ba:db:2f:15:aa:e6:f8:77:6e:62:84:28:f2:f6:27:ea:bc:0a:15:e2:d9:45:4a:f9:f5:49:4e:e3:e2
Signer

Actual PE Digest

62:4b:2b:ba:db:2f:15:aa:e6:f8:77:6e:62:84:28:f2:f6:27:ea:bc:0a:15:e2:d9:45:4a:f9:f5:49:4e:e3:e2

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

setupapi

SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA

s7epaapi64x

LogDeviceGetNdiValue
LogDeviceGetValue

kernel32

WaitForSingleObject
TlsSetValue
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LocalAlloc
DeviceIoControl
CreateMutexA
ReleaseMutex
TlsAlloc
CloseHandle
LocalFree
TlsFree
CreateFileA
CreateEventA
GetVersionExA
GetFileSize
TlsGetValue
GetSystemDirectoryA
GlobalAlloc
CreateSemaphoreA
ExitThread
GlobalFree
WaitForMultipleObjects
CreateThread
WriteFile
GetFileAttributesA
CreateDirectoryA
GetModuleFileNameA
GetLocalTime
OutputDebugStringA
GetCurrentThreadId
IsDebuggerPresent
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
EncodePointer
DecodePointer
QueryPerformanceCounter
GetCurrentProcessId
ReadFile

user32

PostMessageA

advapi32

UnregisterTraceGuids
GetTraceEnableLevel
RegisterTraceGuidsA
SetSecurityDescriptorDacl
GetTraceLoggerHandle
InitializeSecurityDescriptor
GetTraceEnableFlags
TraceMessage

shell32

SHGetSpecialFolderPathA
SHGetFolderPathA

msvcr110

memcpy
memset
__clean_type_info_names_internal
_onexit
__dllonexit
_calloc_crt
free
malloc
_mbschr
strcpy_s
_stricmp
sprintf_s
strcat_s
strchr
_errno
wcstombs_s
sscanf_s
strtok_s
strtol
_wassert
strncpy
sprintf
strnlen
_vsnprintf
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
__C_specific_handler
_lock
_unlock

Exports

Exports

CI_N_Aspc2Event
CI_N_Get_AUTO_Baudrate
CI_N_Get_AUTO_Buspara
CI_N_Get_Baudrate
CI_N_Get_InfoWatch
CI_N_Get_InfoWatch_Select
CI_N_Reset_Counter
CI_N_SetHWndMsg
CI_N_Slave_Read_Diag
CI_N_Slave_Read_In
CI_N_Slave_Read_Out
CI_N_Slave_Write
CI_N_Slv_Set
CI_N_cancel_receive
CI_N_close
CI_N_delete_sema
CI_N_get_cp_cfg
CI_N_get_cp_trace
CI_N_get_err_txt
CI_N_get_flash_ptr
CI_N_get_info
CI_N_init_sema
CI_N_led_blink
CI_N_open
CI_N_open_direct
CI_N_receive
CI_N_release_flash_ptr
CI_N_reset_cp
CI_N_reset_cp_direct
CI_N_send
CI_N_start_cp
CI_N_start_cp_direct
SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\dpdx2cnv5711.dll
.dll windows x64

d33898346018e6cf234c8d8a1a80a7ad

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fe:1f:24:45:05:ee:cc:81:4e:7a:7f:5b:5e:f0:5d:17:9e:43:26:25:b0:66:3c:3f:ec:d4:44:af:40:bd:2c:67
Signer

Actual PE Digest

fe:1f:24:45:05:ee:cc:81:4e:7a:7f:5b:5e:f0:5d:17:9e:43:26:25:b0:66:3c:3f:ec:d4:44:af:40:bd:2c:67

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiOpenDeviceInterfaceRegKey
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA

s7epaapi64x

LogDeviceGetNdiValue
LogDeviceGetValue

kernel32

ReadFile
GetSystemDirectoryA
MultiByteToWideChar
WideCharToMultiByte
CreateThread
ExitThread
GlobalAlloc
GlobalFree
WaitForMultipleObjects
CreateSemaphoreA
CreateDirectoryA
CreateFileA
GetFileAttributesA
WriteFile
OutputDebugStringA
SetEvent
WaitForSingleObject
GetFileSize
GetLocalTime
GetModuleFileNameA
TerminateThread
CreateMutexW
OpenMutexW
CreateEventW
OpenEventW
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
FormatMessageA
CreateEventA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ReleaseMutex
DeviceIoControl
GetLastError
LocalFree
LocalAlloc
GetCurrentProcess
CloseHandle
OutputDebugStringW
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime

user32

CreateWindowExA
RegisterClassExA
UnregisterClassA
DefWindowProcA
DestroyWindow
RegisterDeviceNotificationA
DispatchMessageA
TranslateMessage
GetMessageA
PostMessageA
LoadCursorA
UnregisterDeviceNotification
LoadIconA
PostQuitMessage

advapi32

InitializeSecurityDescriptor
GetTokenInformation
FreeSid
CreateWellKnownSid
OpenProcessToken
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetEntriesInAclA
RegisterTraceGuidsA
UnregisterTraceGuids
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
TraceMessage
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetSecurityDescriptorDacl

shell32

SHGetSpecialFolderPathA
SHGetFolderPathA

msvcr110

__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
_onexit
__C_specific_handler
__dllonexit
_calloc_crt
_unlock
_lock
strnlen
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
??1bad_cast@std@@UEAA@XZ
??0bad_cast@std@@QEAA@AEBV01@@Z
??0bad_cast@std@@QEAA@PEBD@Z
?what@exception@std@@UEBAPEBDXZ
??0exception@std@@QEAA@AEBV01@@Z
??0exception@std@@QEAA@AEBQEBD@Z
sprintf_s
??1exception@std@@UEAA@XZ
??0exception@std@@QEAA@XZ
strncpy
_vsnprintf
strtol
sscanf_s
sscanf
strtok
_stricmp
_errno
sprintf
wcslen
strcat
strcpy
memcmp
malloc
atoi
strchr
strcmp
strcpy_s
__CxxFrameHandler3
_CxxThrowException
free
_wassert
memmove
strlen
memcpy
??2@YAPEAX_K@Z
_purecall
??3@YAXPEAX@Z
memset
wcstombs_s

msvcp110

?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?endl@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@AEAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??0id@locale@std@@QEAA@_K@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAPEBDH@Z
?_Orphan_all@_Container_base0@std@@QEAAXXZ
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?setf@ios_base@std@@QEAAHHH@Z
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

Exports

Exports

CI_N_Aspc2Event
CI_N_Get_AUTO_Baudrate
CI_N_Get_AUTO_Buspara
CI_N_Get_InfoWatch
CI_N_Reset_Counter
CI_N_Set_Serial
CI_N_Slave_Read_Diag
CI_N_Slave_Read_In
CI_N_Slave_Read_Out
CI_N_Slave_Write
CI_N_Slv_Set
CI_N_cancel_receive
CI_N_close
CI_N_delete_sema
CI_N_get_cp_cfg
CI_N_get_cp_trace
CI_N_get_err_txt
CI_N_get_info
CI_N_init_sema
CI_N_led_blink
CI_N_led_blink_async
CI_N_open
CI_N_open_direct
CI_N_receive
CI_N_reset_cp
CI_N_reset_cp_direct
CI_N_send
CI_N_start_cp
CI_N_start_cp_direct
CI_N_test_excp
SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\dpmc2cnv5612.dll
.dll windows x64

3d170a925fde4c39fb63d61421f8b8bb

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7c:c1:26:02:5b:9c:a1:73:97:68:19:ba:f3:bb:70:08:40:3b:c0:2d:c2:3a:06:f0:3f:5d:f4:07:d9:7d:a4:56
Signer

Actual PE Digest

7c:c1:26:02:5b:9c:a1:73:97:68:19:ba:f3:bb:70:08:40:3b:c0:2d:c2:3a:06:f0:3f:5d:f4:07:d9:7d:a4:56

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcr90

__clean_type_info_names_internal
__crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
_encoded_null
_initterm_e
_initterm
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__C_specific_handler
strstr
memcpy
memset
wcstombs
malloc
free
??0exception@std@@QEAA@AEBV01@@Z
_CxxThrowException
??2@YAPEAX_K@Z
_invalid_parameter_noinfo
??0exception@std@@QEAA@XZ
__CxxFrameHandler3
??3@YAXPEAX@Z
??1exception@std@@UEAA@XZ
?what@exception@std@@UEBAPEBDXZ
??0exception@std@@QEAA@AEBQEBD@Z

dp5612

ord57
ord59
ord58
ord14
ord15
ord2
ord41
ord60
ord54
ord51
ord55
ord50
ord52
ord53
ord4
ord56

kernel32

TerminateProcess
Sleep
CreateFileA
GetCurrentProcess
CloseHandle
WriteFile
ReadFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetFileInformationByHandle

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z

Exports

Exports

SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\dpmc2cnv5711.dll
.dll windows x64

f098ae8f7577733da8798f83a7ce484d

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

35:a2:a5:0b:67:09:28:8f:5b:40:9b:67:0d:f0:ed:f9:e5:34:5e:db:46:c2:e9:91:b6:c9:44:af:60:1e:9a:2f
Signer

Actual PE Digest

35:a2:a5:0b:67:09:28:8f:5b:40:9b:67:0d:f0:ed:f9:e5:34:5e:db:46:c2:e9:91:b6:c9:44:af:60:1e:9a:2f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcr90

__clean_type_info_names_internal
__crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
_encoded_null
_initterm_e
_initterm
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__C_specific_handler
strstr
memcpy
memset
wcstombs
malloc
free
??0exception@std@@QEAA@AEBV01@@Z
_CxxThrowException
??2@YAPEAX_K@Z
_invalid_parameter_noinfo
??0exception@std@@QEAA@XZ
__CxxFrameHandler3
??3@YAXPEAX@Z
??1exception@std@@UEAA@XZ
?what@exception@std@@UEBAPEBDXZ
??0exception@std@@QEAA@AEBQEBD@Z

dpusb5711

ord57
ord59
ord58
ord14
ord15
ord2
ord41
ord60
ord54
ord51
ord55
ord50
ord52
ord53
ord4
ord56

kernel32

TerminateProcess
Sleep
CreateFileA
GetCurrentProcess
CloseHandle
WriteFile
ReadFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetFileInformationByHandle

msvcp90

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z

Exports

Exports

SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\dpmc2cnvpcadpa2.dll
.dll windows x64

dce5cff46041685b84a49fb0e313fd06

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c4:39:c5:67:24:2b:35:fe:13:09:d3:f3:3b:81:6b:05:ad:e2:2a:6f:3e:85:6d:28:c7:6a:78:d7:61:88:b3:9c
Signer

Actual PE Digest

c4:39:c5:67:24:2b:35:fe:13:09:d3:f3:3b:81:6b:05:ad:e2:2a:6f:3e:85:6d:28:c7:6a:78:d7:61:88:b3:9c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

s7epaapi64x

LogDeviceGetValue

kernel32

GetSystemTime
FormatMessageA
GetCurrentProcess
GetModuleHandleW
GetModuleFileNameW
GetCurrentProcessorNumber
CreateMutexW
MapViewOfFile
UnmapViewOfFile
OpenMutexW
CreateFileMappingW
CreateEventW
OpenFileMappingW
OpenEventW
DebugBreak
FreeLibrary
CreateProcessW
CreateDirectoryW
GetSystemDirectoryW
LoadLibraryW
GetTempPathW
WideCharToMultiByte
LoadLibraryA
IsWow64Process
OutputDebugStringW
GetCurrentProcessId
FlushFileBuffers
WriteConsoleW
SetStdHandle
UnregisterWait
GetThreadPriority
SetFilePointerEx
GetConsoleMode
GetConsoleCP
CreateTimerQueue
RegisterWaitForSingleObject
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
UnregisterWaitEx
QueryDepthSList
MultiByteToWideChar
OutputDebugStringA
GetLocalTime
TerminateThread
GetCurrentThreadId
GetModuleFileNameA
WaitForSingleObject
SetEvent
GetModuleHandleA
GetProcAddress
WriteFile
CreateFileA
CreateDirectoryA
GetFileAttributesA
ExitThread
WaitForMultipleObjects
GlobalFree
CreateThread
GlobalAlloc
CreateSemaphoreA
ReadFile
GetFileSize
GetSystemDirectoryA
CreateEventA
CloseHandle
CreateFileW
DeviceIoControl
ReleaseMutex
TlsSetValue
LocalAlloc
TlsAlloc
TlsFree
GetLastError
LocalFree
TlsGetValue
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
SignalObjectAndWait
ResetEvent
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
DuplicateHandle
VirtualProtect
GetStringTypeW
Sleep
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
HeapAlloc
GetCommandLineA
HeapReAlloc
InitializeCriticalSectionAndSpinCount
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
CreateTimerQueueTimer
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
GetStartupInfoW
CreateSemaphoreW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetCurrentThread
ExitProcess
GetModuleHandleExW
HeapSize
GetStdHandle
IsValidCodePage
GetACP
GetOEMCP
GetFileType
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask
SwitchToThread
GetThreadTimes
FreeLibraryAndExitThread
LoadLibraryExW
SetThreadPriority
GetTickCount
GetVersionExW
VirtualAlloc
VirtualFree

user32

DestroyWindow
PostQuitMessage
UnregisterDeviceNotification
RegisterDeviceNotificationA
UnregisterClassA
DefWindowProcA
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
PostMessageA

advapi32

CreateWellKnownSid
FreeSid
SetEntriesInAclW
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegCloseKey
RegQueryValueExA
UnregisterTraceGuids
RegisterTraceGuidsA
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
TraceMessage

shell32

SHGetFolderPathA
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA

ole32

StringFromGUID2

Exports

Exports

CI_N_Aspc2Event
CI_N_Get_AUTO_Baudrate
CI_N_Get_AUTO_Buspara
CI_N_Get_Baudrate
CI_N_Get_InfoWatch
CI_N_Reset_Counter
CI_N_cancel_receive
CI_N_close
CI_N_delete_sema
CI_N_get_cp_cfg
CI_N_get_cp_trace
CI_N_get_err_txt
CI_N_get_info
CI_N_init_sema
CI_N_led_blink
CI_N_led_blink_async
CI_N_open
CI_N_open_direct
CI_N_receive
CI_N_reset_cp
CI_N_reset_cp_direct
CI_N_send
CI_N_set_device_info
CI_N_start_cp
CI_N_start_cp_direct
CI_N_test_excp
SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 537KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\dps5612.dll
.dll windows x64

1bda58cf68f7ea54e8cf846f7995615d

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2a:a4:7c:b9:2c:47:a2:a1:5f:f8:63:a6:3b:5c:5f:18:2e:07:d0:d0:1a:2b:21:56:13:1f:06:07:b8:16:03:7a
Signer

Actual PE Digest

2a:a4:7c:b9:2c:47:a2:a1:5f:f8:63:a6:3b:5c:5f:18:2e:07:d0:d0:1a:2b:21:56:13:1f:06:07:b8:16:03:7a

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ci_5612

ord10
ord11
ord9
ord13
ord62

kernel32

InitializeCriticalSection
LoadLibraryA
GetProcAddress
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
EncodePointer
DecodePointer
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
GetLastError
GetCurrentThread
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
GetProcessHeap
GetStdHandle
GetFileType
GetModuleFileNameA
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
Sleep
RtlUnwindEx
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FatalAppExitA
GetModuleFileNameW
LoadLibraryExW
SetConsoleCtrlHandler
HeapAlloc
HeapReAlloc
SetStdHandle
WriteConsoleW
GetStringTypeW
OutputDebugStringW
LoadLibraryW
HeapSize
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
CreateFileW
CloseHandle

advapi32

TraceMessage
RegOpenKeyExA
RegQueryValueExA
RegisterTraceGuidsA
UnregisterTraceGuids
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegCloseKey

Exports

Exports

DPS_calc_io_data_len
DPS_close
DPS_get_ci_hdl
DPS_get_ind
DPS_get_state
DPS_open
DPS_start
DPS_stop
X_Trc_close
X_Trc_init
X_Trc_write
X_Trc_write_txt

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\dpscnv5612.dll
.dll windows x64

5be88d37ff0300a6abddfbb8a3363b7f

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c2:02:6c:97:f0:25:ba:2d:f4:f7:e5:13:36:63:2c:4a:2c:24:e7:e7:b3:29:76:c5:0f:ff:94:71:ce:3c:55:66
Signer

Actual PE Digest

c2:02:6c:97:f0:25:ba:2d:f4:f7:e5:13:36:63:2c:4a:2c:24:e7:e7:b3:29:76:c5:0f:ff:94:71:ce:3c:55:66

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

dp5612

ord26
ord47
ord2
ord1
ord48

dps5612

ord4
ord1
ord8
ord3
ord2

ci_5612

ord64
ord62
ord66
ord69

kernel32

DeleteCriticalSection
InitializeCriticalSection
Sleep
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

advapi32

TraceMessage
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
UnregisterTraceGuids
RegisterTraceGuidsA

msvcp110

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@H@2@@Z
?ends@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@AEAV21@@Z
?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_BADOFF@std@@3_JB
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAPEBDH@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z

msvcr110

memset
strcpy_s
strncpy
wcstombs
free
malloc
_lock
_unlock
_calloc_crt
__dllonexit
__C_specific_handler
_onexit
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__clean_type_info_names_internal
memcpy
_CxxThrowException
??_V@YAXPEAX@Z
memmove
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
_purecall
__CxxFrameHandler3

Exports

Exports

SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\dpscnv5711.dll
.dll windows x64

52f56f3325a079e44da35fc16e68437e

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ab:76:41:d5:af:ab:f5:bf:03:a1:ad:44:e1:f5:75:3c:e9:a3:c2:f3:ad:09:02:fb:8e:0c:1a:d9:3d:24:06:02
Signer

Actual PE Digest

ab:76:41:d5:af:ab:f5:bf:03:a1:ad:44:e1:f5:75:3c:e9:a3:c2:f3:ad:09:02:fb:8e:0c:1a:d9:3d:24:06:02

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcr90

_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__CppXcptFilter
__C_specific_handler
_amsg_exit
_decode_pointer
_encoded_null
_initterm_e
_initterm
_malloc_crt
_encode_pointer
memcpy
??2@YAPEAX_K@Z
wcstombs
malloc
free
strncpy
??3@YAXPEAX@Z
memset
__CxxFrameHandler3

dpusb5711

ord2
ord26
ord1

dpsusb5711

ord4
ord8
ord2
ord1
ord3

ci_5711

ord40
ord43
ord41
ord46

kernel32

GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InitializeCriticalSection
DeleteCriticalSection
RtlLookupFunctionEntry
Sleep
RtlCaptureContext

msvcp90

??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1strstreambuf@std@@UEAA@XZ
?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
?_Lock@_Mutex@std@@QEAAXXZ
?_Unlock@_Mutex@std@@QEAAXXZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@H@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?ends@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@AEAV21@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0strstreambuf@std@@QEAA@PEAD_J0@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

Exports

Exports

SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\dpsusb5711.dll
.dll windows x64

8332ad4d6089603d2a3756a4659e535b

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6c:b4:15:cc:57:4a:12:f7:62:de:cb:6c:1f:5b:e7:7a:27:91:48:8e:be:d8:57:1c:ce:32:71:27:4b:83:4a:39
Signer

Actual PE Digest

6c:b4:15:cc:57:4a:12:f7:62:de:cb:6c:1f:5b:e7:7a:27:91:48:8e:be:d8:57:1c:ce:32:71:27:4b:83:4a:39

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ci_5711

ord4
ord5
ord3
ord41
ord7

kernel32

DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryA
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
DecodePointer
TlsAlloc
FlsGetValue
FlsFree
SetLastError
GetLastError
GetCurrentThread
FlsAlloc
HeapFree
Sleep
GetModuleHandleW
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
RtlUnwindEx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WriteFile
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FatalAppExitA
HeapAlloc
HeapReAlloc
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDateFormatA
GetTimeFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapSize
GetLocaleInfoW
CreateFileA
CloseHandle
FlushFileBuffers
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

DPS_calc_io_data_len
DPS_close
DPS_get_ci_hdl
DPS_get_ind
DPS_get_state
DPS_open
DPS_start
DPS_stop
X_Trc_close
X_Trc_init
X_Trc_write
X_Trc_write_txt

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\dpusb5711.dll
.dll windows x64

5a125ec19bf43cbe631e164b2990c30b

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:4d:44:99:5e:af:3a:96:b4:f6:a1:9f:f0:c2:ad:ea:00:31:aa:34:04:31:6c:5b:0e:08:c4:3d:73:1d:63:dd
Signer

Actual PE Digest

a0:4d:44:99:5e:af:3a:96:b4:f6:a1:9f:f0:c2:ad:ea:00:31:aa:34:04:31:6c:5b:0e:08:c4:3d:73:1d:63:dd

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

dpsusb5711

ord14
X_Trc_write
X_Trc_close
X_Trc_init
X_Trc_write_txt

ci_5711

ord10
ord7
ord5
ord13
ord1
ord2
ord4
ord3
ord9

kernel32

DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
TlsAlloc
FlsGetValue
FlsFree
SetLastError
GetCurrentThread
FlsAlloc
HeapSetInformation
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
RtlUnwindEx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
FatalAppExitA
GetDateFormatA
GetTimeFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapReAlloc
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetTimeZoneInformation
HeapSize
GetLocaleInfoW
CreateFileA
CloseHandle
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

DPMC2_act_para_brct_mst
DPMC2_act_para_mst
DPMC2_download_mst
DPMC2_end_seq_mst
DPMC2_get_mst_diag
DPMC2_get_slv_cfg
DPMC2_get_slv_diag
DPMC2_get_slv_in
DPMC2_get_slv_out
DPMC2_set_slv_address
DPMC2_start_seq_mst
DPMC2_upload_mst
DP_alarm_ack
DP_close
DP_delete_sema_object
DP_disable_event
DP_ds_read
DP_ds_write
DP_enable_event
DP_fetch_alarm
DP_fetch_alarm_cvrt
DP_get_actual_cfg
DP_get_cref
DP_get_err_txt
DP_get_result
DP_global_ctrl
DP_init_sema_object
DP_open
DP_open_cvrt
DP_read_alarm
DP_read_slv_par
DP_register_slv_cvrt
DP_reset_cp
DP_set_mode
DP_slv_state
DP_start_cp
DP_write_slv_par_cvrt
DP_write_trc
x_DP_watchdog

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\en\s7epatd64.resources.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fe:70:fd:84:b7:24:aa:a2:3d:0e:3e:33:c8:b2:33:f2:f5:2f:1f:bf:13:55:68:ec:c5:0d:f5:30:58:f9:55:c5
Signer

Actual PE Digest

fe:70:fd:84:b7:24:aa:a2:3d:0e:3e:33:c8:b2:33:f2:f5:2f:1f:bf:13:55:68:ec:c5:0d:f5:30:58:f9:55:c5

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:49
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rdata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\en\simaticnet.resources.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

de:64:b5:7c:b2:76:74:65:16:51:86:dd:07:34:b7:3c:da:c9:b8:71:9b:c7:40:46:9e:71:a2:d6:73:47:0e:66
Signer

Actual PE Digest

de:64:b5:7c:b2:76:74:65:16:51:86:dd:07:34:b7:3c:da:c9:b8:71:9b:c7:40:46:9e:71:a2:d6:73:47:0e:66

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\ep1613.dll
.dll windows x64

b31e4af11b8ac2edbbdbf03646662b6a

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a6:59:57:3b:e7:5b:a2:55:c2:d2:39:e9:81:a8:51:a9:a6:17:9c:f9:5f:da:a9:1c:e7:a1:5f:6f:d3:87:23:ee
Signer

Actual PE Digest

a6:59:57:3b:e7:5b:a2:55:c2:d2:39:e9:81:a8:51:a9:a6:17:9c:f9:5f:da:a9:1c:e7:a1:5f:6f:d3:87:23:ee

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

iphlpapi

GetAdaptersInfo

mfc110u

ord3673
ord6477
ord977
ord5992
ord14109
ord5993
ord14110
ord5991
ord14108
ord7566
ord12045
ord13909
ord11502
ord11503
ord1962
ord7516
ord12457
ord3890
ord8939
ord14036
ord7498
ord14030
ord12055
ord12056
ord2385
ord9915
ord5059
ord5787
ord7563
ord4384
ord12376
ord12438
ord9969
ord11767
ord7928
ord1441
ord7245
ord8011
ord1661
ord4524
ord8304
ord7888
ord12538
ord8360
ord3639
ord8302
ord5121
ord5122
ord7902
ord7218
ord11736
ord10534
ord1377
ord14126
ord11461
ord11460
ord11462
ord11459
ord10702
ord10105
ord10860
ord8584
ord10555
ord10768
ord8519
ord896
ord6975
ord3952
ord8668
ord1046
ord4019
ord3001
ord6121
ord8677
ord1415
ord4036
ord3109
ord6454
ord11651
ord5871
ord13218
ord2643
ord8751
ord6173
ord10922
ord10008
ord3892
ord3252
ord3253
ord3016
ord13949
ord5577
ord4274
ord13685
ord5116
ord4665
ord3541
ord2160
ord1480
ord1032
ord322
ord290
ord7397
ord12275
ord9009
ord265
ord1104
ord5873
ord13222
ord3157
ord3154
ord9791
ord7758
ord2644
ord9821
ord9823
ord9822
ord9820
ord9824
ord5327
ord11252
ord11253
ord8681
ord11609
ord3660
ord11463
ord14029
ord8507
ord11740
ord6591
ord10536
ord8797
ord3118
ord13334
ord11779
ord11777
ord1685
ord1694
ord1702
ord1698
ord1707
ord4698
ord4735
ord4706
ord4718
ord4714
ord4710
ord4741
ord4731
ord4702
ord4745
ord4723
ord4687
ord4693
ord4726
ord4299
ord5456
ord9232
ord4291
ord2912
ord14031
ord7499
ord14037
ord6493
ord13020
ord11244
ord13175
ord5594
ord7398
ord13588
ord2575
ord11644
ord3753
ord3223
ord3224
ord3117
ord11688
ord984
ord4959
ord5239
ord5427
ord8891
ord5215
ord4962
ord11759
ord7765
ord11771
ord11739
ord5430
ord9786
ord1662
ord7219
ord8766
ord2911
ord2489
ord11737
ord1380
ord10034
ord1856
ord3908
ord12720
ord12719
ord4757
ord4758
ord5900
ord3090
ord906
ord6976
ord12957
ord2217
ord5105
ord4943
ord7310
ord7311
ord7301
ord5103
ord7767
ord8750
ord4828
ord2170
ord8005
ord4595
ord12432
ord4450
ord4449
ord2854
ord2848
ord5580
ord1658
ord1495
ord1494
ord1492
ord1027
ord286
ord280
ord285
ord296
ord4296
ord2460
ord4594
ord2290
ord12073
ord3655
ord266
ord3620
ord2866
ord13770
ord7738
ord5545
ord4122
ord1632
ord3670
ord1483
ord323
ord1033
ord2273
ord2315
ord2318
ord2284
ord2317
ord472
ord2182
ord2282
ord2111
ord2214
ord2306
ord1482
ord7868

msvcr110

_beginthreadex
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_vsnprintf_s
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
_findfirst64i32
_findclose
_endthreadex
malloc
_vsnwprintf_s
vsprintf_s
sprintf_s
_snprintf_s
strstr
strrchr
strcat_s
strcpy_s
memcpy_s
free
_wcsdup
strncpy_s
__C_specific_handler
_CxxThrowException
_vswprintf
_itow
wcsncmp
wcstombs
_wcsnicmp
strlen
strcpy
memcmp
_swprintf
swprintf_s
_wcsicmp
wcsncpy
_wtoi
wcstok
iswdigit
wcsstr
strcmp
memset
memcpy
__CxxFrameHandler3
_snwprintf_s
wcslen
wcscpy
wcscpy_s
wcscmp
wcscat
wcscat_s

kernel32

RaiseException
GetSystemTimeAsFileTime
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsA
OpenFile
GetCurrentDirectoryA
WideCharToMultiByte
LoadLibraryA
OpenFileMappingA
CreateFileMappingA
OpenMutexA
WaitForMultipleObjects
UnmapViewOfFile
MapViewOfFile
GetVersionExA
GetCurrentThreadId
GetCurrentProcessId
OpenEventA
CreateEventA
CreateMutexA
SetEvent
SetLastError
OutputDebugStringA
WriteFile
GetDiskFreeSpaceExA
DeleteFileA
CreateFileA
CreateDirectoryA
GetEnvironmentVariableA
LoadLibraryW
GetModuleHandleA
GetModuleFileNameA
OutputDebugStringW
GetWindowsDirectoryW
DeviceIoControl
WriteConsoleW
AllocConsole
SetConsoleScreenBufferSize
lstrcpyW
lstrcpynW
lstrcmpW
GetLocalTime
GetStdHandle
MultiByteToWideChar
lstrlenW
lstrlenA
FormatMessageW
LocalFree
LocalAlloc
GetProcessHeap
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleW
FreeLibrary
CreateMutexW
WaitForSingleObject
ReleaseMutex
LoadLibraryExW
IsWow64Process
GetVersionExW
GetSystemDirectoryW
GetCurrentProcess
InitializeCriticalSectionEx
GetLastError
CloseHandle
SetFilePointer
ReadFile
FindFirstFileW
FindClose
CreateFileW
GetCurrentDirectoryW
LoadLibraryExA

user32

SetForegroundWindow
GetWindow
GetClassNameW
GetWindowLongW
MessageBeep
IsWindow
KillTimer
SetTimer
OffsetRect
GetWindowRect
WinHelpW
LoadIconW
GetWindowContextHelpId
GetFocus
IsChild
LoadStringW
CharUpperW
wsprintfW
wvsprintfW
SendMessageW
EnableWindow
GetParent
MessageBoxW
PostMessageW
MessageBoxIndirectW

comdlg32

GetOpenFileNameW

advapi32

RegSetValueExA
SetSecurityDescriptorDacl
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
OpenProcessToken
GetTokenInformation
CreateWellKnownSid
FreeSid
SetEntriesInAclA
CryptEncrypt
CryptImportKey
CryptExportKey
CryptDestroyKey
CryptGenKey
CryptReleaseContext
CryptAcquireContextA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
InitializeSecurityDescriptor

shell32

ord680
SHGetSpecialFolderPathW

shlwapi

SHGetValueW

oleaut32

SysAllocString
SysFreeString

crypt32

CertOpenStore
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty

Exports

Exports

DllEntryFkt
IE_CP1613_AdjustClock
IE_CP1613_DefGateway
IE_CP1613_IMData
IE_CP1613_IPAddr
IE_CP1613_KeepAliveOn
IE_CP1613_MACAddr
IE_CP1613_Restart
IE_CP1613_SubNetMask
IE_CP1613_UsedByRtm
IE_CP1628_Start
IE_CP1628_StartPartDL
IE_CP1628_Stop
OPC_CP1613_AdjustClock
OPC_CP1613_DefaultGateway
OPC_CP1613_IPAddr
OPC_CP1613_IsConnOpen
OPC_CP1613_KeepAliveOn
OPC_CP1613_MACAddr
OPC_CP1613_NetParams
OPC_CP1613_Reboot
OPC_CP1613_SubnetMask
OPC_CP1613_UsedByRtm
OPC_GetErrorString
SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\ep5612.dll
.dll windows x64

6ddc91d32648d955f044ea2e66ba5dc7

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

40:43:e4:ea:94:63:92:86:56:c5:4b:e2:3a:ad:7c:89:d5:a7:10:07:4d:93:0e:7a:4f:88:c5:a8:0b:a5:bc:db
Signer

Actual PE Digest

40:43:e4:ea:94:63:92:86:56:c5:4b:e2:3a:ad:7c:89:d5:a7:10:07:4d:93:0e:7a:4f:88:c5:a8:0b:a5:bc:db

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mfc110u

ord1939
ord1938
ord12126
ord1420
ord6128
ord3003
ord5543
ord4022
ord8292
ord2851
ord3688
ord1050
ord8670
ord4457
ord6212
ord3041
ord4024
ord8293
ord2852
ord3690
ord14014
ord2635
ord8673
ord1150
ord4828
ord7902
ord1661
ord4524
ord12073
ord293
ord8360
ord13582
ord12538
ord7888
ord6976
ord906
ord3090
ord5900
ord4758
ord4757
ord12719
ord12720
ord3908
ord1856
ord10034
ord1380
ord11737
ord2489
ord8794
ord2911
ord8766
ord7219
ord9786
ord5430
ord11739
ord11771
ord7765
ord10536
ord5577
ord3673
ord6477
ord977
ord5992
ord14109
ord5993
ord14110
ord5991
ord14108
ord7566
ord12045
ord13909
ord11502
ord11503
ord1962
ord7516
ord12457
ord3890
ord8939
ord14036
ord7498
ord14030
ord12055
ord12056
ord2385
ord9915
ord5059
ord7868
ord7563
ord4384
ord12376
ord12438
ord9969
ord11767
ord7928
ord1441
ord10008
ord8011
ord904
ord265
ord445
ord6155
ord9009
ord4665
ord6591
ord1495
ord3952
ord6173
ord3639
ord1032
ord322
ord1035
ord3189
ord2998
ord6101
ord1374
ord3211
ord3089
ord6421
ord1411
ord3215
ord957
ord6450
ord11736
ord10534
ord14126
ord11461
ord11460
ord11462
ord11459
ord10702
ord10105
ord4122
ord8584
ord10555
ord10768
ord8519
ord2217
ord2136
ord2099
ord1104
ord8668
ord1046
ord4019
ord3001
ord6121
ord8677
ord1415
ord4036
ord3109
ord6454
ord11651
ord5871
ord13218
ord2643
ord8751
ord1082
ord10922
ord3892
ord3252
ord3253
ord3016
ord5787
ord5873
ord13222
ord3157
ord3154
ord9791
ord7758
ord2644
ord1445
ord9821
ord9823
ord9822
ord9820
ord9824
ord5327
ord11252
ord11253
ord8681
ord11609
ord8797
ord3118
ord13334
ord11779
ord11777
ord1685
ord1694
ord1702
ord1698
ord1707
ord4698
ord4735
ord4706
ord4718
ord4714
ord4710
ord4741
ord4731
ord4702
ord4745
ord4723
ord4687
ord4693
ord4726
ord4299
ord5456
ord9232
ord4291
ord2912
ord14031
ord7499
ord14037
ord13949
ord8302
ord6493
ord12957
ord13020
ord4274
ord11244
ord13685
ord13175
ord5594
ord7398
ord13588
ord5116
ord2575
ord11644
ord3753
ord3223
ord3224
ord3117
ord11688
ord984
ord4959
ord5239
ord5427
ord8891
ord5215
ord4962
ord5105
ord4943
ord7310
ord266
ord7246
ord6635
ord3540
ord4509
ord2290
ord7218
ord1377
ord896
ord6975
ord2342
ord4608
ord8305
ord8304
ord2170
ord12432
ord4450
ord4449
ord3106
ord7738
ord7311
ord7301
ord5103
ord7767
ord8750
ord4296
ord2460
ord3541
ord2160
ord8005
ord4594
ord2848
ord1480
ord4595
ord5580
ord1492
ord290
ord280
ord285
ord2866
ord13770
ord5545
ord2854
ord7085
ord8582
ord11692
ord10860
ord10549
ord1658
ord1494
ord1027
ord286
ord296
ord1632
ord3660
ord3655
ord11463
ord14029
ord8507
ord11740
ord7245
ord3670
ord1483
ord323
ord1033
ord2273
ord2315
ord2318
ord2284
ord2317
ord472
ord2182
ord2282
ord2111
ord2214
ord2306
ord473
ord11759
ord1482

msvcr110

__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_vsnprintf_s
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
wcstombs
atof
_findfirst64i32
_findclose
_endthreadex
_beginthreadex
malloc
_vsnwprintf_s
swprintf_s
vsprintf_s
_snprintf_s
wcsstr
strstr
strrchr
strcmp
strcat_s
memcpy_s
memcmp
_wcsdup
free
_CxxThrowException
memmove
_purecall
setlocale
_ltow
wcstol
wcsnlen
_snwprintf_s
wcscpy_s
wcscmp
__C_specific_handler
mbstowcs
_vsnprintf
sprintf_s
_vsnwprintf
wcscat_s
_itow
_swprintf
wcstombs_s
_wtol
strtoul
sprintf
fwrite
fclose
_wtoi
_wfopen
_wcslwr
_wcsicmp
wcsncpy
wcslen
wcscat
strncpy
_stricmp
strlen
strcpy
strcpy_s
__CxxFrameHandler3
wcscpy
wcschr
memset
memcpy

kernel32

LoadLibraryExA
GetSystemTimeAsFileTime
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsA
OpenFile
WideCharToMultiByte
LoadLibraryA
OpenFileMappingA
CreateFileMappingA
OpenMutexA
lstrlenA
WaitForMultipleObjects
LocalFree
LocalAlloc
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
GetVersionExA
GetCurrentProcessId
OpenEventA
CreateEventA
CreateMutexA
WaitForSingleObject
ReleaseMutex
SetEvent
SetLastError
WriteFile
GetDiskFreeSpaceExA
DeleteFileA
CreateFileA
CreateDirectoryA
GetEnvironmentVariableA
FreeLibrary
GetCurrentDirectoryA
MultiByteToWideChar
LoadLibraryExW
IsWow64Process
GetVersionExW
GetSystemDirectoryW
GetCurrentProcess
GetLastError
CloseHandle
SetFilePointer
ReadFile
FindFirstFileW
FindClose
CreateFileW
GetCurrentDirectoryW
InitializeCriticalSectionEx
GetLocalTime
GetCurrentThreadId
OutputDebugStringW
OutputDebugStringA
ExitProcess
Sleep
RaiseException

user32

GetWindow
GetClassNameW
GetWindowLongW
OffsetRect
GetWindowRect
MessageBoxIndirectW
IsWindow
MessageBoxW
GetParent
LoadIconW
SetWindowContextHelpId
GetClientRect
UpdateWindow
EnableWindow
KillTimer
SetTimer
PostMessageW
SendMessageW
SetForegroundWindow

advapi32

CryptAcquireContextA
RegOpenKeyExW
RegQueryValueExW
CreateWellKnownSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetEntriesInAclA
CryptEncrypt
CryptImportKey
CryptExportKey
CryptDestroyKey
CryptGenKey
CryptReleaseContext
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA

shell32

SHGetSpecialFolderPathW
SHGetFolderPathW

oleaut32

SysFreeString

crypt32

CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore

msvcp110

?_Winerror_map@std@@YAPEBDH@Z
?_Syserror_map@std@@YAPEBDH@Z
??0id@locale@std@@QEAA@_K@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ

Exports

Exports

DllEntryFkt
OPC_CP5612_Busstat
OPC_CP5612_BusstatReset
OPC_CP5612_GetBootloaderVersion
OPC_CP5612_GetFPGAVersion
OPC_CP5612_GetFWVersion
OPC_CP5612_GetHWVersion
OPC_CP5612_GetLSAPList
OPC_CP5612_GetMLFBNumber
OPC_CP5612_GetSWVersion
OPC_CP5612_ResetLSAPConflictCnt
OPC_CP5612_SaveDPR
OPC_CP5612_StartNetworkDetection
OPC_GetErrorString
OPC_GetErrorStringW
OPC_GetSerial

Sections

.text
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\ep5612j.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c6:38:71:6d:17:b2:59:7d:51:06:41:8c:e6:ae:e9:8d:4e:17:39:dc:1e:22:a6:57:37:33:c0:0e:e4:b2:07:f8
Signer

Actual PE Digest

c6:38:71:6d:17:b2:59:7d:51:06:41:8c:e6:ae:e9:8d:4e:17:39:dc:1e:22:a6:57:37:33:c0:0e:e4:b2:07:f8

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\ep5612k.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bd:1d:b9:d4:95:37:a3:b1:60:d6:ae:6b:8a:d9:7a:6a:78:c7:30:f5:a3:2c:aa:ae:c6:4d:a8:b3:09:e5:32:fc
Signer

Actual PE Digest

bd:1d:b9:d4:95:37:a3:b1:60:d6:ae:6b:8a:d9:7a:6a:78:c7:30:f5:a3:2c:aa:ae:c6:4d:a8:b3:09:e5:32:fc

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\ep5613.dll
.dll windows x64

a040b12a70add14bb1bac757d6d5f3e0

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

64:ed:94:da:7f:2b:39:de:a8:cc:c4:be:75:c8:f8:c8:62:3b:87:18:87:6c:cc:8a:d9:93:1e:50:14:61:61:2a
Signer

Actual PE Digest

64:ed:94:da:7f:2b:39:de:a8:cc:c4:be:75:c8:f8:c8:62:3b:87:18:87:6c:cc:8a:d9:93:1e:50:14:61:61:2a

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

s7onlinx64

SCP_get_errno
SCP_send
SCP_receive
SCP_close
SCP_openW

mfc110u

ord12126
ord1420
ord6128
ord3003
ord5543
ord4022
ord8292
ord2851
ord3688
ord1050
ord8670
ord4457
ord6212
ord3041
ord4024
ord8293
ord2852
ord3690
ord14014
ord2635
ord8673
ord1150
ord7902
ord1661
ord4524
ord293
ord8360
ord13582
ord12538
ord7888
ord6976
ord906
ord3090
ord5900
ord4758
ord4757
ord12719
ord12720
ord3908
ord1856
ord10034
ord1380
ord11737
ord2489
ord8794
ord2911
ord8766
ord7219
ord9786
ord5430
ord11739
ord11771
ord4665
ord11759
ord5577
ord3673
ord6477
ord977
ord5992
ord14109
ord5993
ord14110
ord5991
ord14108
ord7566
ord12045
ord13909
ord11502
ord11503
ord1962
ord7516
ord12457
ord3890
ord8939
ord14036
ord7498
ord14030
ord12055
ord12056
ord2385
ord9915
ord5059
ord7868
ord7563
ord4384
ord12376
ord12438
ord9969
ord11767
ord7928
ord1441
ord7245
ord8011
ord904
ord4509
ord2290
ord7397
ord3540
ord12432
ord4450
ord7738
ord6173
ord8302
ord266
ord265
ord3952
ord3620
ord3639
ord1032
ord322
ord1035
ord3189
ord2998
ord6101
ord1374
ord3211
ord3089
ord6421
ord1411
ord3215
ord1938
ord6450
ord11736
ord10534
ord14126
ord11461
ord11460
ord11462
ord11459
ord10702
ord10105
ord10860
ord8584
ord6155
ord10768
ord8519
ord2217
ord2099
ord1104
ord8668
ord1046
ord4019
ord3001
ord6121
ord8677
ord1415
ord4036
ord3109
ord6454
ord11651
ord5871
ord13218
ord2643
ord8751
ord1082
ord10922
ord3892
ord3252
ord3253
ord3016
ord5787
ord5873
ord13222
ord3157
ord3154
ord9791
ord7758
ord2644
ord9821
ord9823
ord9822
ord9820
ord9824
ord5327
ord11252
ord11253
ord8681
ord11609
ord3660
ord3655
ord11463
ord14029
ord8507
ord11740
ord6591
ord10536
ord8797
ord3118
ord13334
ord11779
ord11777
ord1685
ord1694
ord1702
ord1698
ord1707
ord4698
ord4735
ord4706
ord4718
ord4714
ord4710
ord4741
ord4731
ord4702
ord4745
ord4723
ord4687
ord4693
ord4726
ord4299
ord5456
ord9232
ord4291
ord2912
ord14031
ord7499
ord14037
ord13949
ord6493
ord12957
ord13020
ord4274
ord11244
ord13685
ord13175
ord5594
ord7398
ord13588
ord5116
ord2575
ord11644
ord3753
ord3223
ord3224
ord3117
ord11688
ord984
ord4959
ord5239
ord5427
ord8891
ord5215
ord1939
ord957
ord7246
ord7218
ord1377
ord896
ord6975
ord2342
ord4608
ord8304
ord2170
ord4122
ord7085
ord11692
ord8582
ord10549
ord10008
ord3106
ord445
ord4962
ord5105
ord4943
ord7310
ord7311
ord7301
ord5103
ord7767
ord8750
ord4296
ord2460
ord3541
ord2160
ord8005
ord4594
ord2848
ord1480
ord4595
ord8305
ord4449
ord2854
ord5580
ord1658
ord1495
ord1494
ord9009
ord10555
ord6635
ord1492
ord1027
ord290
ord286
ord280
ord285
ord296
ord2866
ord13770
ord12073
ord5545
ord4828
ord1632
ord2296
ord2292
ord3670
ord1483
ord323
ord1033
ord2273
ord2315
ord2318
ord2284
ord2317
ord472
ord2182
ord2282
ord2111
ord2214
ord2306
ord473
ord1482
ord7765

msvcr110

memcpy_s
memset
strcpy_s
wcscat_s
wcschr
wcscpy_s
wcscpy
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_vsnprintf_s
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
strcpy
wcstombs
atof
_findfirst64i32
_findclose
_endthreadex
_beginthreadex
_vsnwprintf_s
swprintf_s
_snprintf_s
wcsstr
strstr
strrchr
strcmp
strcat_s
memcpy
memcmp
_wcsdup
_ltow
towlower
_CxxThrowException
memmove
_purecall
__C_specific_handler
setlocale
wcstol
strncpy
strlen
_snwprintf_s
wcscmp
_ltow_s
_itow_s
_snwprintf
vswprintf_s
_wcsnicmp
wcscat
wcstombs_s
_wtol
__CxxFrameHandler3
malloc
free
strtoul
mbstowcs
vsprintf_s
_vsnprintf
sprintf_s
fwrite
fclose
_wtoi
_wfopen
_vsnwprintf
_wcslwr
_wcsicmp
wcsncpy
wcsncmp
wcsnlen
wcslen
wcscspn

kernel32

lstrlenW
FindClose
lstrcpyW
GetVersionExW
CloseHandle
ReadFile
CreateFileW
GetCurrentDirectoryW
ExitProcess
RaiseException
GetLocalTime
GetCurrentThreadId
Sleep
OutputDebugStringW
OutputDebugStringA
LoadLibraryExA
GetSystemTimeAsFileTime
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsA
MultiByteToWideChar
OpenFile
WideCharToMultiByte
LoadLibraryA
OpenFileMappingA
CreateFileMappingA
OpenMutexA
lstrlenA
WaitForMultipleObjects
LocalFree
LocalAlloc
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
GetVersionExA
GetCurrentProcessId
OpenEventA
CreateEventA
CreateMutexA
WaitForSingleObject
ReleaseMutex
SetEvent
SetLastError
WriteFile
GetDiskFreeSpaceExA
DeleteFileA
CreateFileA
CreateDirectoryA
GetEnvironmentVariableA
FreeLibrary
GetCurrentDirectoryA
LoadLibraryExW
IsWow64Process
GetSystemDirectoryW
GetCurrentProcess
InitializeCriticalSectionEx
GetLastError
SetFilePointer
FindFirstFileW

user32

GetWindow
GetClassNameW
GetWindowLongW
OffsetRect
GetWindowRect
MessageBoxIndirectW
IsWindow
GetParent
MessageBoxW
IsWindowVisible
LoadIconW
SetWindowContextHelpId
EnableWindow
KillTimer
SetTimer
PostMessageW
SendMessageW
SetForegroundWindow

comdlg32

GetOpenFileNameW

advapi32

SetEntriesInAclA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
CreateWellKnownSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
CryptAcquireContextA
CryptReleaseContext
CryptGenKey
CryptDestroyKey
CryptExportKey
CryptImportKey
CryptEncrypt

shell32

SHGetFolderPathW
SHGetSpecialFolderPathW

oleaut32

SysFreeString

crypt32

CertGetCertificateContextProperty
CertOpenStore
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext

msvcp110

?_Xout_of_range@std@@YAXPEBD@Z
?_Winerror_map@std@@YAPEBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
??0id@locale@std@@QEAA@_K@Z
?_Syserror_map@std@@YAPEBDH@Z

Exports

Exports

DllEntryFkt
OPC_CP5613_Busstat
OPC_CP5613_BusstatReset
OPC_CP5613_GetFPGAVersion
OPC_CP5613_GetFWVersion
OPC_CP5613_GetHWVersion
OPC_CP5613_GetLSAPList
OPC_CP5613_GetPowerOn
OPC_CP5613_GetSWVersion
OPC_CP5613_ResetLSAPConflictCnt
OPC_CP5613_SaveDPR
OPC_CP5613_StartNetworkDetection
OPC_CP5623_PowerOnTime
OPC_CP5623_Temperature
OPC_GetErrorString
OPC_GetErrorStringW
OPC_GetSerial

Sections

.text
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\ep5613j.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

99:fc:94:b5:9a:cf:e9:85:d7:a2:8e:15:d2:fe:f5:e0:cc:be:9a:fc:79:a2:e3:03:2d:ca:51:3a:78:bb:0c:11
Signer

Actual PE Digest

99:fc:94:b5:9a:cf:e9:85:d7:a2:8e:15:d2:fe:f5:e0:cc:be:9a:fc:79:a2:e3:03:2d:ca:51:3a:78:bb:0c:11

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\ep5613k.dll
.dll windows x64

d2e703a8c2fa7ad925dc655f971f09c3

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:8f:d4:9e:9e:3b:a6:7c:81:71:3d:c7:91:14:c6:2f:3f:46:f7:1a:fa:f5:c7:42:d8:65:80:55:2a:39:cf:d0
Signer

Actual PE Digest

0c:8f:d4:9e:9e:3b:a6:7c:81:71:3d:c7:91:14:c6:2f:3f:46:f7:1a:fa:f5:c7:42:d8:65:80:55:2a:39:cf:d0

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

s7onlinx64

SCP_get_errno
SCP_send
SCP_receive
SCP_close
SCP_openW

mfc110u

ord1938
ord12126
ord1420
ord6128
ord3003
ord5543
ord4022
ord8292
ord2851
ord3688
ord1050
ord8670
ord4457
ord6212
ord3041
ord4024
ord8293
ord2852
ord3690
ord14014
ord2635
ord8673
ord1150
ord7902
ord1661
ord4524
ord293
ord8360
ord13582
ord12538
ord7888
ord6976
ord906
ord3090
ord5900
ord4758
ord4757
ord12719
ord12720
ord3908
ord1856
ord10034
ord1380
ord11737
ord2489
ord8794
ord2911
ord8766
ord7219
ord9786
ord5430
ord11739
ord11771
ord4509
ord11759
ord5577
ord3673
ord6477
ord977
ord5992
ord14109
ord5993
ord14110
ord5991
ord14108
ord7566
ord12045
ord13909
ord11502
ord11503
ord1962
ord7516
ord12457
ord3890
ord8939
ord14036
ord7498
ord14030
ord12055
ord12056
ord2385
ord9915
ord5059
ord7868
ord7563
ord4384
ord12376
ord12438
ord9969
ord11767
ord7928
ord1441
ord7245
ord8011
ord904
ord2290
ord7397
ord3540
ord12432
ord4450
ord7738
ord6173
ord8302
ord266
ord265
ord3952
ord3620
ord3639
ord1032
ord322
ord1035
ord3189
ord2998
ord6101
ord1374
ord3211
ord3089
ord6421
ord1411
ord3215
ord1939
ord6450
ord11736
ord10534
ord14126
ord11461
ord11460
ord11462
ord11459
ord10702
ord10105
ord10860
ord8584
ord9009
ord10768
ord8519
ord2217
ord2099
ord1104
ord8668
ord1046
ord4019
ord3001
ord6121
ord8677
ord1415
ord4036
ord3109
ord6454
ord11651
ord5871
ord13218
ord2643
ord8751
ord1082
ord10922
ord3892
ord3252
ord3253
ord3016
ord5787
ord5873
ord13222
ord3157
ord3154
ord9791
ord7758
ord2644
ord9821
ord9823
ord9822
ord9820
ord9824
ord5327
ord11252
ord11253
ord8681
ord11609
ord3660
ord3655
ord11463
ord14029
ord8507
ord11740
ord6591
ord10536
ord8797
ord3118
ord13334
ord11779
ord11777
ord1685
ord1694
ord1702
ord1698
ord1707
ord4698
ord4735
ord4706
ord4718
ord4714
ord4710
ord4741
ord4731
ord4702
ord4745
ord4723
ord4687
ord4693
ord4726
ord4299
ord5456
ord9232
ord4291
ord2912
ord14031
ord7499
ord14037
ord13949
ord6493
ord12957
ord13020
ord4274
ord11244
ord13685
ord13175
ord5594
ord7398
ord13588
ord5116
ord2575
ord11644
ord3753
ord3223
ord3224
ord3117
ord11688
ord984
ord4959
ord5239
ord5427
ord8891
ord5215
ord957
ord7246
ord7218
ord1377
ord896
ord6975
ord2342
ord4608
ord8304
ord2170
ord4122
ord7085
ord11692
ord8582
ord10549
ord10008
ord445
ord3106
ord6155
ord4962
ord5105
ord4943
ord7310
ord7311
ord7301
ord5103
ord7767
ord8750
ord4296
ord2460
ord3541
ord2160
ord8005
ord4594
ord2848
ord1480
ord4595
ord8305
ord4449
ord2854
ord5580
ord1658
ord1495
ord1494
ord6635
ord10555
ord4665
ord1492
ord1027
ord290
ord286
ord280
ord285
ord296
ord2866
ord13770
ord12073
ord5545
ord4828
ord1632
ord2296
ord2292
ord3670
ord1483
ord323
ord1033
ord2273
ord2315
ord2318
ord2284
ord2317
ord472
ord2182
ord2282
ord2111
ord2214
ord2306
ord473
ord1482
ord7765

msvcr110

memcpy_s
memset
strcpy_s
wcscat_s
wcschr
wcscpy_s
wcscpy
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_vsnprintf_s
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
strcpy
wcstombs
atof
_findfirst64i32
_findclose
_endthreadex
_beginthreadex
_vsnwprintf_s
swprintf_s
_snprintf_s
wcsstr
strstr
strrchr
strcmp
strcat_s
memcpy
memcmp
_wcsdup
_ltow
towlower
_CxxThrowException
memmove
_purecall
__C_specific_handler
setlocale
wcstol
strncpy
strlen
_snwprintf_s
wcscmp
_ltow_s
_itow_s
_snwprintf
vswprintf_s
_wcsnicmp
wcscat
wcstombs_s
_wtol
__CxxFrameHandler3
malloc
free
strtoul
mbstowcs
vsprintf_s
_vsnprintf
sprintf_s
fwrite
fclose
_wtoi
_wfopen
_vsnwprintf
_wcslwr
_wcsicmp
wcsncpy
wcsncmp
wcsnlen
wcslen
wcscspn

kernel32

lstrlenW
FindClose
lstrcpyW
GetVersionExW
CloseHandle
ReadFile
CreateFileW
GetCurrentDirectoryW
ExitProcess
RaiseException
GetLocalTime
GetCurrentThreadId
Sleep
OutputDebugStringW
OutputDebugStringA
LoadLibraryExA
GetSystemTimeAsFileTime
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsA
MultiByteToWideChar
OpenFile
WideCharToMultiByte
LoadLibraryA
OpenFileMappingA
CreateFileMappingA
OpenMutexA
lstrlenA
WaitForMultipleObjects
LocalFree
LocalAlloc
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
GetVersionExA
GetCurrentProcessId
GetCurrentProcess
OpenEventA
CreateEventA
CreateMutexA
WaitForSingleObject
ReleaseMutex
SetEvent
SetLastError
WriteFile
GetDiskFreeSpaceExA
DeleteFileA
CreateFileA
CreateDirectoryA
GetEnvironmentVariableA
FreeLibrary
GetCurrentDirectoryA
LoadLibraryExW
GetSystemDirectoryW
InitializeCriticalSectionEx
GetLastError
SetFilePointer
FindFirstFileW

user32

GetWindow
GetClassNameW
GetWindowLongW
OffsetRect
GetWindowRect
MessageBoxIndirectW
IsWindow
GetParent
MessageBoxW
IsWindowVisible
LoadIconW
SetWindowContextHelpId
EnableWindow
KillTimer
SetTimer
PostMessageW
SendMessageW
SetForegroundWindow

comdlg32

GetOpenFileNameW

advapi32

SetEntriesInAclA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
CreateWellKnownSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
CryptAcquireContextA
CryptReleaseContext
CryptGenKey
CryptDestroyKey
CryptExportKey
CryptImportKey
CryptEncrypt

shell32

SHGetFolderPathW
SHGetSpecialFolderPathW

oleaut32

SysFreeString

crypt32

CertGetCertificateContextProperty
CertOpenStore
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext

msvcp110

?_Xout_of_range@std@@YAXPEBD@Z
?_Winerror_map@std@@YAPEBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
??0id@locale@std@@QEAA@_K@Z
?_Syserror_map@std@@YAPEBDH@Z

Exports

Exports

DllEntryFkt
OPC_CP5613_Busstat
OPC_CP5613_BusstatReset
OPC_CP5613_GetFPGAVersion
OPC_CP5613_GetFWVersion
OPC_CP5613_GetHWVersion
OPC_CP5613_GetLSAPList
OPC_CP5613_GetPowerOn
OPC_CP5613_GetSWVersion
OPC_CP5613_ResetLSAPConflictCnt
OPC_CP5613_SaveDPR
OPC_CP5613_StartNetworkDetection
OPC_CP5623_PowerOnTime
OPC_CP5623_Temperature
OPC_GetErrorString
OPC_GetErrorStringW
OPC_GetSerial

Sections

.text
Size: 301KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\ep5711.dll
.dll windows x64

7f927a79b4403646dac51aaea7aaa0cf

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

35:a7:d0:c2:64:6b:ad:e4:47:34:2e:91:ba:fd:b0:26:7b:f1:63:5a:41:48:2b:c8:54:33:fc:d2:ba:7d:c7:ad
Signer

Actual PE Digest

35:a7:d0:c2:64:6b:ad:e4:47:34:2e:91:ba:fd:b0:26:7b:f1:63:5a:41:48:2b:c8:54:33:fc:d2:ba:7d:c7:ad

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mfc110u

ord12126
ord1420
ord6128
ord3003
ord5543
ord4022
ord8292
ord2851
ord3688
ord1050
ord8670
ord4457
ord6212
ord3041
ord4024
ord8293
ord2852
ord3690
ord14014
ord2635
ord8673
ord1150
ord4828
ord7902
ord1661
ord4524
ord12073
ord293
ord8360
ord13582
ord12538
ord7888
ord6976
ord906
ord3090
ord5900
ord4758
ord4757
ord12719
ord12720
ord3908
ord1856
ord10034
ord1380
ord11737
ord2489
ord8794
ord2911
ord8766
ord7219
ord9786
ord5430
ord11739
ord11771
ord7765
ord11759
ord6591
ord3673
ord6477
ord977
ord5992
ord14109
ord5993
ord14110
ord5991
ord14108
ord7566
ord12045
ord13909
ord11502
ord11503
ord1962
ord7516
ord12457
ord3890
ord8939
ord14036
ord7498
ord14030
ord12055
ord12056
ord2385
ord9915
ord5059
ord7868
ord7563
ord4384
ord12376
ord12438
ord9969
ord11767
ord7928
ord1441
ord12432
ord8011
ord904
ord265
ord4450
ord4449
ord7738
ord4122
ord11740
ord7085
ord11692
ord8582
ord10549
ord10008
ord445
ord6155
ord9009
ord13685
ord4665
ord1495
ord3952
ord6173
ord13020
ord13588
ord3639
ord1938
ord322
ord1411
ord3215
ord3106
ord6450
ord11736
ord10534
ord14126
ord11461
ord11460
ord8305
ord11459
ord10702
ord10105
ord10860
ord8584
ord10768
ord8519
ord2217
ord1104
ord8668
ord1046
ord4019
ord3001
ord6121
ord8677
ord1415
ord4036
ord3109
ord6454
ord11651
ord5871
ord13218
ord2643
ord8751
ord1082
ord10922
ord3892
ord3252
ord3253
ord3016
ord5787
ord5873
ord13222
ord3157
ord3154
ord9791
ord7758
ord2644
ord1445
ord9821
ord9823
ord9822
ord9820
ord9824
ord5327
ord11252
ord11253
ord8681
ord10536
ord8797
ord3118
ord13334
ord11779
ord11777
ord1685
ord1694
ord1702
ord1698
ord1707
ord4698
ord4735
ord4706
ord4718
ord4714
ord4710
ord4741
ord4731
ord4702
ord4745
ord4723
ord4687
ord4693
ord4726
ord4299
ord5456
ord9232
ord4291
ord2912
ord14031
ord7499
ord14037
ord13949
ord8302
ord6493
ord12957
ord4274
ord11244
ord13175
ord5594
ord7398
ord5116
ord2575
ord11644
ord3753
ord3223
ord3224
ord3117
ord11688
ord984
ord4959
ord5239
ord5427
ord8891
ord5215
ord4962
ord5105
ord4943
ord7310
ord1939
ord957
ord266
ord7246
ord6635
ord3540
ord4509
ord2290
ord7218
ord1377
ord10555
ord896
ord6975
ord2342
ord1032
ord4608
ord7311
ord7301
ord5103
ord7767
ord8750
ord4296
ord2460
ord3541
ord2160
ord8005
ord4594
ord2848
ord1480
ord4595
ord5580
ord1492
ord290
ord280
ord285
ord2866
ord13770
ord5545
ord2854
ord8304
ord2292
ord2296
ord11462
ord2170
ord1658
ord1494
ord1027
ord286
ord296
ord1632
ord11609
ord3660
ord3655
ord11463
ord14029
ord8507
ord7245
ord3670
ord1483
ord323
ord1033
ord2273
ord2315
ord2318
ord2284
ord2317
ord472
ord2182
ord2282
ord2111
ord2214
ord2306
ord473
ord5577
ord1482

msvcr110

__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_vsnprintf_s
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
wcstombs
atof
_findfirst64i32
_findclose
_endthreadex
_beginthreadex
malloc
_vsnwprintf_s
swprintf_s
vsprintf_s
_snprintf_s
wcsstr
strstr
strrchr
strcmp
strcat_s
memcpy_s
memcmp
_wcsdup
free
_CxxThrowException
memmove
_purecall
setlocale
_ltow
wcstol
wcsnlen
_snwprintf_s
wcscpy_s
wcscmp
__C_specific_handler
mbstowcs
_vsnprintf
sprintf_s
_vsnwprintf
wcscat_s
_itow
_swprintf
wcstombs_s
_wtol
strtoul
sprintf
fwrite
fclose
_wtoi
_wfopen
_wcslwr
_wcsicmp
wcsncpy
wcslen
wcscat
strncpy
_stricmp
strlen
strcpy
strcpy_s
__CxxFrameHandler3
wcscpy
wcschr
memset
memcpy

kernel32

LoadLibraryExA
GetSystemTimeAsFileTime
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsA
OpenFile
WideCharToMultiByte
LoadLibraryA
OpenFileMappingA
CreateFileMappingA
OpenMutexA
lstrlenA
WaitForMultipleObjects
LocalFree
LocalAlloc
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
GetVersionExA
GetCurrentProcessId
OpenEventA
CreateEventA
CreateMutexA
WaitForSingleObject
ReleaseMutex
SetEvent
SetLastError
WriteFile
GetDiskFreeSpaceExA
DeleteFileA
CreateFileA
CreateDirectoryA
GetEnvironmentVariableA
FreeLibrary
GetCurrentDirectoryA
MultiByteToWideChar
LoadLibraryExW
IsWow64Process
GetVersionExW
GetSystemDirectoryW
GetCurrentProcess
InitializeCriticalSectionEx
GetLastError
CloseHandle
SetFilePointer
ReadFile
FindFirstFileW
FindClose
CreateFileW
GetCurrentDirectoryW
GetLocalTime
GetCurrentThreadId
OutputDebugStringW
OutputDebugStringA
RaiseException

user32

GetWindow
GetClassNameW
GetWindowLongW
OffsetRect
GetWindowRect
MessageBoxIndirectW
IsWindow
MessageBoxW
PostMessageW
GetParent
LoadIconW
SetWindowContextHelpId
EnableWindow
SendMessageW
SetForegroundWindow

advapi32

CryptAcquireContextA
RegOpenKeyExW
RegQueryValueExW
CreateWellKnownSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetEntriesInAclA
CryptEncrypt
CryptImportKey
CryptExportKey
CryptDestroyKey
CryptGenKey
CryptReleaseContext
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA

shell32

SHGetSpecialFolderPathW
SHGetFolderPathW

oleaut32

SysFreeString

crypt32

CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore

msvcp110

?_Winerror_map@std@@YAPEBDH@Z
?_Syserror_map@std@@YAPEBDH@Z
??0id@locale@std@@QEAA@_K@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ

Exports

Exports

DllEntryFkt
OPC_CP5611_StartNetworkDetection
OPC_CP5711_Busstat
OPC_CP5711_BusstatReset
OPC_CP5711_ExtPower
OPC_CP5711_GetBootloaderMaxiVersion
OPC_CP5711_GetBootloaderMiniVersion
OPC_CP5711_GetFWVersion
OPC_CP5711_GetFpgaVersion
OPC_CP5711_GetHWVersion
OPC_CP5711_GetLSAPList
OPC_CP5711_GetSWVersion
OPC_CP5711_ResetLSAPConflictCnt
OPC_CP5711_SaveDPR
OPC_CP5711_StartNetworkDetection
OPC_CP5711_USBStatus
OPC_CP5711_USBType
OPC_CP5711_USBVersion
OPC_GetErrorString
OPC_GetErrorStringW
OPC_GetSerial

Sections

.text
Size: 267KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\ep5711a.chm
.chm
Automation\Simatic OAM\bin\ep5711b.chm
.chm
Automation\Simatic OAM\bin\ep5711j.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

12:e7:55:e5:64:61:19:8b:e5:b0:13:04:93:64:1e:38:29:03:40:99:b5:93:20:f3:cf:3a:cb:79:f2:7d:69:86
Signer

Actual PE Digest

12:e7:55:e5:64:61:19:8b:e5:b0:13:04:93:64:1e:38:29:03:40:99:b5:93:20:f3:cf:3a:cb:79:f2:7d:69:86

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\ep5711k.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:44:0d:0b:86:5d:27:5c:08:19:9b:5f:40:8b:90:57:aa:d6:44:f4:7c:61:be:96:c9:a9:0b:ed:ef:c6:15:6b
Signer

Actual PE Digest

0a:44:0d:0b:86:5d:27:5c:08:19:9b:5f:40:8b:90:57:aa:d6:44:f4:7c:61:be:96:c9:a9:0b:ed:ef:c6:15:6b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\epPcAdapA2.dll
.dll windows x64

922fc69286e43229d1227e6dac4f8378

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e6:48:25:cf:ac:97:0f:f3:30:3f:7c:09:78:02:f8:ee:54:da:d9:60:91:7a:56:98:80:b0:0c:88:87:db:e5:6a
Signer

Actual PE Digest

e6:48:25:cf:ac:97:0f:f3:30:3f:7c:09:78:02:f8:ee:54:da:d9:60:91:7a:56:98:80:b0:0c:88:87:db:e5:6a

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mfc110u

ord8302
ord6635
ord7246
ord266
ord957
ord1939
ord1938
ord12126
ord1420
ord6128
ord3003
ord5543
ord4022
ord8292
ord2851
ord3688
ord1050
ord8670
ord4457
ord6212
ord3041
ord4024
ord8293
ord2852
ord3690
ord14014
ord2635
ord8673
ord1150
ord4828
ord7902
ord1661
ord4524
ord12073
ord293
ord8360
ord13582
ord12538
ord7888
ord6976
ord906
ord3090
ord5900
ord4758
ord4757
ord12719
ord12720
ord3908
ord1856
ord10034
ord1380
ord11737
ord2489
ord8794
ord2911
ord8766
ord7219
ord9786
ord5430
ord11739
ord6591
ord7765
ord11759
ord5577
ord3673
ord6477
ord977
ord5992
ord14109
ord5993
ord14110
ord5991
ord14108
ord7566
ord12045
ord13909
ord11502
ord11503
ord1962
ord7516
ord12457
ord3890
ord8939
ord14036
ord7498
ord14030
ord12055
ord12056
ord2385
ord9915
ord5059
ord7868
ord7563
ord4384
ord12376
ord12438
ord9969
ord11767
ord445
ord1441
ord7245
ord8011
ord12611
ord904
ord265
ord6155
ord11740
ord9009
ord4665
ord1495
ord3952
ord3639
ord1032
ord322
ord1035
ord3189
ord2998
ord6101
ord1374
ord3211
ord3089
ord3540
ord1411
ord3215
ord3106
ord6450
ord11736
ord10534
ord14126
ord11461
ord11460
ord11462
ord11459
ord7085
ord10105
ord10860
ord8584
ord10555
ord10768
ord8519
ord2217
ord2136
ord2099
ord1104
ord8668
ord1046
ord4019
ord3001
ord6121
ord8677
ord1415
ord4036
ord3109
ord6454
ord11651
ord5871
ord13218
ord2643
ord8751
ord1082
ord10922
ord3892
ord3252
ord3253
ord3016
ord5787
ord5873
ord13222
ord3157
ord3154
ord9791
ord7758
ord2644
ord1445
ord9821
ord9823
ord9822
ord9820
ord9824
ord5327
ord11252
ord11253
ord8681
ord10536
ord8797
ord3118
ord13334
ord11779
ord11777
ord1685
ord1694
ord1702
ord1698
ord1707
ord4698
ord4735
ord4706
ord4718
ord4714
ord4710
ord4741
ord4731
ord4702
ord4745
ord4723
ord4687
ord4693
ord4726
ord4299
ord5456
ord9232
ord4291
ord2912
ord14031
ord7499
ord14037
ord13949
ord6493
ord12957
ord13020
ord4274
ord11244
ord13685
ord13175
ord5594
ord7398
ord13588
ord5116
ord2575
ord11644
ord3753
ord3223
ord3224
ord3117
ord11688
ord984
ord4959
ord5239
ord5427
ord8891
ord5215
ord4962
ord5105
ord4943
ord7310
ord4509
ord2290
ord7218
ord1377
ord896
ord6975
ord2342
ord4608
ord8305
ord8304
ord2296
ord2292
ord2170
ord12432
ord4450
ord4449
ord7738
ord4122
ord6421
ord6173
ord7311
ord7301
ord5103
ord7767
ord8750
ord4296
ord2460
ord3541
ord2160
ord8005
ord4594
ord2848
ord1480
ord4595
ord5580
ord1492
ord290
ord280
ord285
ord2866
ord13770
ord5545
ord2854
ord11692
ord10549
ord8582
ord10702
ord10008
ord1658
ord1494
ord1027
ord286
ord296
ord1632
ord11609
ord3660
ord3655
ord11463
ord14029
ord8507
ord7928
ord3670
ord1483
ord323
ord1033
ord2273
ord2315
ord2318
ord2284
ord2317
ord472
ord2182
ord2282
ord2111
ord2214
ord2306
ord473
ord11771
ord1482

msvcr110

__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_vsnprintf_s
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
wcstombs
atof
_findfirst64i32
_findclose
_endthreadex
_beginthreadex
malloc
_vsnwprintf_s
swprintf_s
vsprintf_s
_snprintf_s
wcsstr
strstr
strrchr
strcmp
strcat_s
memcpy_s
memcmp
_wcsdup
free
_CxxThrowException
memmove
_purecall
setlocale
_ltow
wcstol
wcsnlen
_snwprintf_s
wcscpy_s
wcscmp
__C_specific_handler
mbstowcs
_vsnprintf
sprintf_s
_vsnwprintf
wcscat_s
wcstombs_s
_wtol
strtoul
sprintf
fwrite
fclose
_wtoi
_wfopen
_wcslwr
_wcsicmp
wcsncpy
wcslen
wcscat
strncpy
strlen
strcpy
strcpy_s
memcpy
__CxxFrameHandler3
wcscpy
memset
wcschr

kernel32

LoadLibraryExA
GetSystemTimeAsFileTime
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
ExpandEnvironmentStringsA
OpenFile
WideCharToMultiByte
LoadLibraryA
OpenFileMappingA
CreateFileMappingA
OpenMutexA
lstrlenA
WaitForMultipleObjects
LocalFree
LocalAlloc
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
GetVersionExA
GetCurrentProcessId
OpenEventA
CreateEventA
CreateMutexA
WaitForSingleObject
ReleaseMutex
SetEvent
SetLastError
WriteFile
GetDiskFreeSpaceExA
DeleteFileA
CreateFileA
CreateDirectoryA
GetEnvironmentVariableA
FreeLibrary
GetCurrentDirectoryA
MultiByteToWideChar
LoadLibraryExW
IsWow64Process
GetVersionExW
GetSystemDirectoryW
GetCurrentProcess
GetLastError
CloseHandle
SetFilePointer
ReadFile
FindFirstFileW
FindClose
CreateFileW
GetCurrentDirectoryW
InitializeCriticalSectionEx
GetLocalTime
GetCurrentThreadId
OutputDebugStringW
OutputDebugStringA
ExitProcess
Sleep
RaiseException

user32

GetWindow
GetClassNameW
GetWindowLongW
OffsetRect
GetWindowRect
MessageBoxIndirectW
IsWindow
IsWindowVisible
MessageBoxW
GetParent
SetWindowContextHelpId
GetClientRect
UpdateWindow
EnableWindow
KillTimer
SetTimer
PostMessageW
SendMessageW
SetForegroundWindow

advapi32

CryptAcquireContextA
RegOpenKeyExW
RegQueryValueExW
CreateWellKnownSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetEntriesInAclA
CryptEncrypt
CryptImportKey
CryptExportKey
CryptDestroyKey
CryptGenKey
CryptReleaseContext
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA

shell32

SHGetSpecialFolderPathW
SHGetFolderPathW

oleaut32

SysFreeString

crypt32

CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore

msvcp110

?_Winerror_map@std@@YAPEBDH@Z
?_Syserror_map@std@@YAPEBDH@Z
??0id@locale@std@@QEAA@_K@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ

Exports

Exports

DllEntryFkt
OPC_GetErrorString
OPC_GetErrorStringW
OPC_GetSerial
OPC_PC_ADAPTER_A2_Busstat
OPC_PC_ADAPTER_A2_BusstatReset
OPC_PC_ADAPTER_A2_GetBootloaderVersion
OPC_PC_ADAPTER_A2_GetFWVersion
OPC_PC_ADAPTER_A2_GetHWVersion
OPC_PC_ADAPTER_A2_GetLSAPList
OPC_PC_ADAPTER_A2_GetSWVersion
OPC_PC_ADAPTER_A2_ResetLSAPConflictCnt
OPC_PC_ADAPTER_A2_SaveDPR
OPC_PC_ADAPTER_A2_StartNetworkDetection
OPC_PC_ADAPTER_A2_USBStatus
OPC_PC_ADAPTER_A2_USBType
OPC_PC_ADAPTER_A2_USBVersion

Sections

.text
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\epPcAdapA2j.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

86:24:f1:b5:83:d1:2b:71:a6:e8:e9:a7:ac:42:85:bc:4e:38:78:81:28:00:c2:11:83:05:3d:db:43:d3:60:86
Signer

Actual PE Digest

86:24:f1:b5:83:d1:2b:71:a6:e8:e9:a7:ac:42:85:bc:4e:38:78:81:28:00:c2:11:83:05:3d:db:43:d3:60:86

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\epPcAdapA2k.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

10:83:ef:59:37:61:73:14:42:cd:80:89:26:e7:0e:a6:cb:e6:2f:bd:1b:5c:ad:d8:6e:17:2f:f3:84:c8:d1:b4
Signer

Actual PE Digest

10:83:ef:59:37:61:73:14:42:cd:80:89:26:e7:0e:a6:cb:e6:2f:bd:1b:5c:ad:d8:6e:17:2f:f3:84:c8:d1:b4

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\epokaut9.dll
.dll windows x64

c28d042d2b7627c72d96fd350357e911

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:a0:af:07:72:0b:1f:53:df:15:59:13:22:2b:4e:44:63:58:1f:2c:4f:0e:76:da:66:fa:b5:4b:4a:34:c6:b7
Signer

Actual PE Digest

7f:a0:af:07:72:0b:1f:53:df:15:59:13:22:2b:4e:44:63:58:1f:2c:4f:0e:76:da:66:fa:b5:4b:4a:34:c6:b7

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

s7onlinx64

OnlDll_CheckDevOpen

mfc110u

ord322
ord1032
ord265
ord266
ord1480
ord4829
ord290
ord911
ord1817
ord1936
ord12125
ord1382
ord806
ord12191
ord1934
ord1324
ord12193
ord1820
ord9786
ord5430
ord11739
ord11771
ord7765
ord11759
ord5577
ord3673
ord6477
ord977
ord5992
ord14109
ord5993
ord14110
ord5991
ord14108
ord7566
ord12045
ord13909
ord11502
ord11503
ord8005
ord7516
ord12457
ord3890
ord3952
ord8939
ord14036
ord7498
ord14030
ord12055
ord12056
ord2385
ord5059
ord7868
ord7563
ord4384
ord12376
ord12438
ord9969
ord11767
ord7928
ord1441
ord7245
ord8011
ord4595
ord12432
ord4450
ord4449
ord1495
ord1492
ord7738
ord4122
ord1104
ord6173
ord8582
ord8302
ord7888
ord7398
ord2854
ord296
ord8673
ord1150
ord2635
ord14014
ord3690
ord2852
ord8293
ord2160
ord6635
ord3041
ord6212
ord7085
ord11651
ord5871
ord13218
ord2643
ord8751
ord11692
ord1082
ord10549
ord10922
ord6371
ord3892
ord445
ord3252
ord3253
ord3016
ord6155
ord5787
ord5873
ord13222
ord3157
ord3154
ord9791
ord7758
ord2644
ord9821
ord9823
ord9822
ord9820
ord9824
ord5327
ord11252
ord11253
ord8681
ord11609
ord3660
ord11463
ord14029
ord8507
ord11740
ord6591
ord10536
ord8797
ord3118
ord13334
ord11779
ord11777
ord1685
ord1694
ord1702
ord1698
ord1707
ord4698
ord4735
ord4706
ord4718
ord4714
ord4710
ord4741
ord4731
ord4702
ord4745
ord4723
ord4687
ord4693
ord4726
ord4299
ord5456
ord9232
ord4291
ord2912
ord14031
ord7499
ord14037
ord13949
ord6493
ord12957
ord4274
ord11244
ord13175
ord5594
ord13588
ord5116
ord2575
ord11644
ord7902
ord8304
ord4524
ord14040
ord13582
ord13020
ord12746
ord1622
ord1420
ord12158
ord12126
ord1938
ord4024
ord957
ord3753
ord3223
ord3224
ord3117
ord11688
ord984
ord4959
ord5239
ord5427
ord8891
ord5215
ord4962
ord5105
ord4943
ord7310
ord7311
ord7301
ord5103
ord7767
ord8750
ord3541
ord2848
ord5580
ord1661
ord1658
ord1494
ord1027
ord10008
ord2170
ord286
ord280
ord285
ord2866
ord13770
ord5545
ord1632
ord2290
ord3670
ord1483
ord323
ord1033
ord2273
ord2315
ord2318
ord2284
ord2317
ord472
ord2182
ord2282
ord2111
ord2214
ord2306
ord473
ord1482
ord1962

msvcr110

_beginthreadex
__C_specific_handler
wcscat_s
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_vsnprintf_s
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
vswprintf_s
strcpy
_findfirst64i32
_findclose
_endthreadex
__CxxFrameHandler3
malloc
free
_vsnwprintf_s
swprintf_s
vsprintf_s
sprintf_s
_snprintf_s
wcsstr
strstr
strrchr
strlen
strcmp
strcat_s
strcpy_s
memset
memcpy_s
memcpy
memcmp
_itow_s
_snwprintf_s
wcslen
wcscpy
wcscpy_s
wcscmp

kernel32

GetCurrentDirectoryW
InitializeCriticalSectionAndSpinCount
RaiseException
OutputDebugStringW
LoadLibraryExA
GetSystemTimeAsFileTime
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
lstrcatW
MultiByteToWideChar
OpenFile
GetCurrentDirectoryA
WideCharToMultiByte
LoadLibraryA
OpenFileMappingA
CreateFileMappingA
OpenMutexA
lstrlenA
WaitForMultipleObjects
LocalFree
LocalAlloc
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
UnmapViewOfFile
MapViewOfFile
GetVersionExA
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
OpenEventA
CreateEventA
CreateMutexA
WaitForSingleObject
ReleaseMutex
SetEvent
SetLastError
OutputDebugStringA
WriteFile
GetDiskFreeSpaceExA
DeleteFileA
CreateFileA
CreateDirectoryA
GetEnvironmentVariableA
LoadLibraryExW
IsWow64Process
GetVersionExW
GetSystemDirectoryW
GetCurrentProcess
GetLastError
CloseHandle
SetFilePointer
ReadFile
FindFirstFileW
FindClose
CreateFileW

user32

BringWindowToTop
IsWindowVisible
IsWindow
MessageBoxIndirectW
GetWindowRect
ExitWindowsEx
GetParent
MessageBoxW
PostMessageW
EnableWindow
SendMessageW
LoadStringW
IsWindowEnabled

advapi32

CryptExportKey
RegOpenKeyExW
RegQueryValueExW
CreateWellKnownSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
InitiateSystemShutdownW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
SetEntriesInAclA
CryptEncrypt
CryptImportKey
RegCloseKey
CryptDestroyKey
CryptGenKey
CryptReleaseContext
CryptAcquireContextA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA

shell32

SHGetSpecialFolderPathW

oleaut32

SysFreeString

crypt32

CertOpenStore
CertCloseStore
CertFindCertificateInStore
CertGetCertificateContextProperty
CertFreeCertificateContext

Exports

Exports

DllEntryFkt
DllEntryFktSilent
SetLogDeviceActive

Sections

.text
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 374KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\epokaut9j.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5c:a1:98:a0:30:68:5a:13:22:d7:19:d7:2d:4b:ed:83:a4:aa:af:b6:83:a6:c0:8b:2d:40:62:2c:4a:c3:3b:0b
Signer

Actual PE Digest

5c:a1:98:a0:30:68:5a:13:22:d7:19:d7:2d:4b:ed:83:a4:aa:af:b6:83:a6:c0:8b:2d:40:62:2c:4a:c3:3b:0b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\epokaut9k.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f8:0b:ab:b3:0a:26:70:1f:3d:f4:ed:26:ee:50:46:ae:d3:95:3c:f5:4b:55:64:78:ef:4d:77:4c:07:4f:13:03
Signer

Actual PE Digest

f8:0b:ab:b3:0a:26:70:1f:3d:f4:ed:26:ee:50:46:ae:d3:95:3c:f5:4b:55:64:78:ef:4d:77:4c:07:4f:13:03

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\es\s7epatd64.resources.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ce:d0:0d:80:a2:94:44:3c:cc:1b:05:50:fe:55:43:33:d2:4d:4a:14:97:86:61:50:24:16:e6:2d:12:d7:72:5d
Signer

Actual PE Digest

ce:d0:0d:80:a2:94:44:3c:cc:1b:05:50:fe:55:43:33:d2:4d:4a:14:97:86:61:50:24:16:e6:2d:12:d7:72:5d

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:49
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rdata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\es\simaticnet.resources.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9b:12:00:b2:76:e9:41:eb:eb:7b:95:66:41:c7:2c:fa:37:0b:1e:9e:2c:c3:0c:d0:bf:df:12:f3:46:7f:19:e2
Signer

Actual PE Digest

9b:12:00:b2:76:e9:41:eb:eb:7b:95:66:41:c7:2c:fa:37:0b:1e:9e:2c:c3:0c:d0:bf:df:12:f3:46:7f:19:e2

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\fr\s7epatd64.resources.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

29:f4:d8:39:e5:2e:89:d2:27:02:b1:6e:76:33:72:27:95:bf:93:ad:1b:b5:76:95:b8:10:fb:a2:08:7d:a4:a8
Signer

Actual PE Digest

29:f4:d8:39:e5:2e:89:d2:27:02:b1:6e:76:33:72:27:95:bf:93:ad:1b:b5:76:95:b8:10:fb:a2:08:7d:a4:a8

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:49
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rdata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\fr\simaticnet.resources.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2b:26:16:e7:09:fd:91:e9:86:88:da:7c:d0:6f:f1:7b:4c:fa:bb:00:90:43:09:64:f1:46:ae:b4:80:84:d1:62
Signer

Actual PE Digest

2b:26:16:e7:09:fd:91:e9:86:88:da:7c:d0:6f:f1:7b:4c:fa:bb:00:90:43:09:64:f1:46:ae:b4:80:84:d1:62

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\it\s7epatd64.resources.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

43:3c:1f:28:11:e6:45:e6:ec:bd:20:4b:76:9c:4e:96:86:23:77:8b:c4:6e:a2:a2:5e:7c:b2:ee:e5:9e:a3:c6
Signer

Actual PE Digest

43:3c:1f:28:11:e6:45:e6:ec:bd:20:4b:76:9c:4e:96:86:23:77:8b:c4:6e:a2:a2:5e:7c:b2:ee:e5:9e:a3:c6

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:49
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rdata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\it\simaticnet.resources.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

65:7b:40:5b:ed:42:3a:7b:9c:92:cc:00:44:c2:14:74:e2:2d:24:3c:88:3d:a4:cb:a1:2a:0b:00:a4:ce:12:a8
Signer

Actual PE Digest

65:7b:40:5b:ed:42:3a:7b:9c:92:cc:00:44:c2:14:74:e2:2d:24:3c:88:3d:a4:cb:a1:2a:0b:00:a4:ce:12:a8

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\ja\s7epatd64.resources.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ea:79:03:95:8c:cb:e6:79:a8:81:67:9d:d2:1b:ce:9a:d5:e3:9f:c9:3e:74:ce:09:15:31:f5:de:df:b3:28:a5
Signer

Actual PE Digest

ea:79:03:95:8c:cb:e6:79:a8:81:67:9d:d2:1b:ce:9a:d5:e3:9f:c9:3e:74:ce:09:15:31:f5:de:df:b3:28:a5

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:49
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rdata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\ja\simaticnet.resources.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f9:a3:95:38:8f:f7:c1:34:08:67:25:2d:23:03:c2:85:dc:81:34:6d:67:86:9e:cb:d2:77:80:b5:ad:30:97:32
Signer

Actual PE Digest

f9:a3:95:38:8f:f7:c1:34:08:67:25:2d:23:03:c2:85:dc:81:34:6d:67:86:9e:cb:d2:77:80:b5:ad:30:97:32

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\pniomgr.exe
.exe windows x64

28aebec7e96399213873dcf0f54df412

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a8:d7:38:2d:30:e5:e2:f6:21:0a:7d:f2:64:0f:08:97:f2:1f:81:ce:63:43:3e:6f:e0:90:26:d6:7c:2c:a4:10
Signer

Actual PE Digest

a8:d7:38:2d:30:e5:e2:f6:21:0a:7d:f2:64:0f:08:97:f2:1f:81:ce:63:43:3e:6f:e0:90:26:d6:7c:2c:a4:10

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:50
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

s7epaapi64x

LogDeviceGetValue

kernel32

SizeofResource
WaitForMultipleObjects
lstrcmpiA
OpenMutexA
FindResourceA
WideCharToMultiByte
IsDBCSLeadByte
LocalFree
GetEnvironmentVariableA
CreateDirectoryA
CreateFileA
DeleteFileA
GetDiskFreeSpaceExA
SetFilePointer
WriteFile
OutputDebugStringA
LoadResource
GetCurrentProcessId
GetLocalTime
GetVersionExA
MapViewOfFile
UnmapViewOfFile
LocalAlloc
lstrlenA
CreateFileMappingA
OpenFileMappingA
LoadLibraryA
LoadLibraryExA
GetProcAddress
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
GetModuleHandleA
FreeLibrary
CreateProcessA
GetCurrentProcess
OpenEventA
CreateMutexA
WaitForSingleObject
ReleaseMutex
SetEvent
DeleteCriticalSection
RaiseException
ExpandEnvironmentStringsA
Process32Next
Process32First
CreateToolhelp32Snapshot
MultiByteToWideChar
GetModuleFileNameA
OpenProcess
GetCurrentThreadId
GetExitCodeProcess
Sleep
CreateEventA
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
IsDebuggerPresent
DecodePointer
EncodePointer
CloseHandle
SetLastError

user32

PostThreadMessageA
DispatchMessageA
CharNextA
GetMessageA

advapi32

FreeSid
RegCreateKeyExA
RegDeleteKeyA
SetEntriesInAclA
CryptEncrypt
CryptImportKey
CryptExportKey
CryptDestroyKey
CryptGenKey
CryptReleaseContext
CryptAcquireContextA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
CreateWellKnownSid
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegEnumKeyA
RegDeleteValueA

ole32

CoTaskMemAlloc
CoInitializeEx
CoTaskMemRealloc
CoTaskMemFree
OleRun
CoCreateInstance
CLSIDFromProgID

oleaut32

VariantClear
VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
VarUI4FromStr
LoadRegTypeLi
LoadTypeLi
SysStringLen
SysFreeString
SafeArrayDestroy

msvcp110

?_Winerror_map@std@@YAPEBDH@Z
?_Syserror_map@std@@YAPEBDH@Z
??0id@locale@std@@QEAA@_K@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Orphan_all@_Container_base0@std@@QEAAXXZ

crypt32

CertGetCertificateContextProperty
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertOpenStore

msvcr110

__getmainargs
_amsg_exit
_XcptFilter
__set_app_type
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_commode
_vsnprintf_s
_fmode
__crtSetUnhandledExceptionFilter
_initterm_e
_initterm
__initenv
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
??3@YAXPEAX@Z
_purecall
??2@YAPEAX_K@Z
free
malloc
_resetstkoflw
??_V@YAXPEAX@Z
memcmp
memcpy
strlen
memmove
_stricmp
wcslen
_CxxThrowException
__CxxFrameHandler3
_recalloc
memchr
memcpy_s
memset
strcpy_s
strcpy
_mbsnbcpy_s
_mbsstr
swscanf_s
strcat_s
strcmp
strrchr
strstr
wcscpy_s
wcsstr
_snprintf_s
sprintf_s
vsprintf_s
_findclose
_findfirst64i32
__C_specific_handler
?terminate@@YAXXZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__crt_debugger_hook
__crtUnhandledException

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\pnioshls.dll
.dll windows x64

1fd1288bc98316e0fd9dd1217f993030

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:84:41:df:ac:cb:7b:df:0b:ad:9a:2d:1a:54:a9:73:90:d9:d9:36:3a:72:07:31:e3:f9:e2:47:48:11:56:07
Signer

Actual PE Digest

dc:84:41:df:ac:cb:7b:df:0b:ad:9a:2d:1a:54:a9:73:90:d9:d9:36:3a:72:07:31:e3:f9:e2:47:48:11:56:07

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLocalTime
WriteFile
SetFilePointer
CreateFileA
DeleteFileA
GetModuleFileNameA
MapViewOfFile
GetCurrentProcess
GetProcAddress
GetModuleHandleA
OpenMutexA
OpenEventA
OpenFileMappingA
SetLastError
CreateFileMappingA
CreateMutexA
GetDiskFreeSpaceExA
CreateDirectoryA
lstrlenA
GetCurrentThreadId
OutputDebugStringW
WideCharToMultiByte
UnmapViewOfFile
CreateFileW
DeviceIoControl
ReleaseMutex
InitializeCriticalSection
DeleteCriticalSection
Sleep
EnterCriticalSection
GetCurrentProcessId
DeleteTimerQueueTimer
GetTickCount
VirtualQuery
CreateFileMappingW
MapViewOfFileEx
CreateTimerQueueTimer
GetModuleHandleExW
GetModuleHandleW
GetSystemInfo
VerifyVersionInfoW
VerSetConditionMask
GetModuleFileNameW
QueryPerformanceCounter
QueryPerformanceFrequency
CreateDirectoryW
GetTempPathW
FreeLibrary
LoadLibraryW
SetNamedPipeHandleState
WaitNamedPipeA
FormatMessageA
LoadLibraryA
HeapFree
GetProcessHeap
GetSystemTimeAsFileTime
HeapAlloc
CreateMutexW
OpenMutexW
OpenEventW
OpenFileMappingW
LeaveCriticalSection
RtlUnwindEx
RaiseException
RtlPcToFileHeader
WriteConsoleW
GetFileType
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
HeapSize
HeapValidate
IsBadReadPtr
ExitThread
FlsSetValue
GetCommandLineA
EncodePointer
DecodePointer
TlsAlloc
FlsGetValue
FlsAlloc
FlsFree
GetCurrentThread
FatalAppExitA
MultiByteToWideChar
ExitProcess
SetConsoleCtrlHandler
HeapSetInformation
HeapCreate
HeapDestroy
HeapReAlloc
HeapQueryInformation
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
GetLocaleInfoA
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetTimeFormatA
GetDateFormatA
GetStringTypeA
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsFree
TlsGetValue
TlsSetValue
ResumeThread
SystemTimeToFileTime
ResetEvent
SetWaitableTimer
CreateWaitableTimerA
DebugBreak
OutputDebugStringA
CreateThread
CreateEventW
WaitForMultipleObjects
WaitForSingleObject
GetLastError
TerminateThread
CreateEventA
CloseHandle
RtlLookupFunctionEntry
SetEvent

advapi32

StartServiceW
OpenSCManagerW
QueryServiceStatusEx
CloseServiceHandle
ControlService
RegSetValueExW
RegCreateKeyExW
ReportEventW
DeregisterEventSource
RegisterEventSourceW
IsValidSecurityDescriptor
OpenServiceW
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExW
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl

user32

MessageBoxW
PostMessageW
GetMessageW
DestroyWindow
CreateWindowExW
UnregisterClassW
RegisterClassExW

winmm

timeGetDevCaps
timeEndPeriod
timeBeginPeriod

Exports

Exports

shmlsys_client_alloc
shmlsys_client_connect_server
shmlsys_client_create_mempool
shmlsys_client_disconnect_server
shmlsys_client_free
shmlsys_close_channel_lower
shmlsys_get_last_error
shmlsys_open_channel_lower
shmlsys_release_sys_path_info
shmlsys_request_lower
shmlsys_set_sys_path_info
shmlsys_set_sys_path_info_default

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 790KB - Virtual size: 789KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 514B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\pniousrx.dll
.dll windows x64

24e3c20a770d1e7798eea5344289a398

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

64:89:91:e4:57:fc:4d:0b:72:ea:44:9c:ce:30:9e:63:0b:1d:20:87:00:8a:e7:7e:da:dc:97:d0:f1:fe:af:a5
Signer

Actual PE Digest

64:89:91:e4:57:fc:4d:0b:72:ea:44:9c:ce:30:9e:63:0b:1d:20:87:00:8a:e7:7e:da:dc:97:d0:f1:fe:af:a5

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

OpenFileMappingA
CreateFileMappingA
SetLastError
CreateMutexA
GetDiskFreeSpaceExA
CreateDirectoryA
lstrlenA
GetVersionExA
LocalFree
LocalAlloc
SetNamedPipeHandleState
WaitNamedPipeA
GetModuleFileNameA
DeleteFileA
CreateFileA
SetFilePointer
WriteFile
LoadLibraryA
OpenEventA
FreeLibrary
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
OutputDebugStringW
WideCharToMultiByte
UnmapViewOfFile
DeleteCriticalSection
DebugBreak
OutputDebugStringA
CreateEventW
WaitForMultipleObjects
ReleaseMutex
CreateThread
WaitForSingleObject
GetLastError
TerminateThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
OpenMutexA
GetModuleHandleA
GetCurrentProcess
Sleep
GetProcAddress
MapViewOfFile
DeleteTimerQueueTimer
GetTickCount
VirtualQuery
CreateFileMappingW
MapViewOfFileEx
CreateTimerQueueTimer
GetModuleHandleExW
GetModuleHandleW
GetSystemInfo
VerifyVersionInfoW
CreateEventA
CheckRemoteDebuggerPresent
IsDebuggerPresent
QueryPerformanceCounter
QueryPerformanceFrequency
CreateDirectoryW
GetTempPathW
LoadLibraryW
CreateFileW
FormatMessageA
CreateMutexW
OpenMutexW
OpenEventW
OpenFileMappingW
GetStringTypeW
MultiByteToWideChar
EncodePointer
DecodePointer
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
GetModuleFileNameW
WriteConsoleW
GetFileType
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
HeapSize
HeapValidate
IsBadReadPtr
ExitThread
FindFirstFileExA
FindNextFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FlsSetValue
GetCommandLineA
GetSystemTimeAsFileTime
LCMapStringW
GetCPInfo
InitializeCriticalSectionAndSpinCount
FatalAppExitA
FlsGetValue
FlsAlloc
FlsFree
GetCurrentThread
ExitProcess
SetConsoleCtrlHandler
GetLocaleInfoW
HeapFree
HeapAlloc
GetProcessHeap
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
HeapReAlloc
HeapQueryInformation
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetTimeZoneInformation
SetStdHandle
CompareStringW
SetEnvironmentVariableA
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
ResumeThread
SystemTimeToFileTime
ResetEvent
SetWaitableTimer
CreateWaitableTimerA
CloseHandle
VerSetConditionMask
SetEvent

advapi32

QueryServiceStatusEx
OpenServiceW
OpenSCManagerW
StartServiceW
CloseServiceHandle
ControlService
RegOpenKeyExW
IsValidSecurityDescriptor
CreateWellKnownSid
SetEntriesInAclA
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CryptEncrypt
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextA
CryptImportKey
CryptGenKey
CryptExportKey
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExW
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

sn_regbase

SNRegBaseRegEnumKeyExA
SNRegBaseRegOpenKeyExA
SNRegBaseRegQueryValueExA
SNRegBaseRegCloseKey

crypt32

CertFindCertificateInStore
CertGetCertificateContextProperty
CertFreeCertificateContext
CertCloseStore
CertOpenStore

user32

GetMessageW
PostMessageW
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassExW
DestroyWindow

winmm

timeEndPeriod
timeGetDevCaps
timeBeginPeriod

Exports

Exports

PNIO_alarm_resp
PNIO_close
PNIO_controller_open
PNIO_data_read
PNIO_data_write
PNIO_device_activate
PNIO_pe_cmd_req
PNIO_rec_read_req
PNIO_rec_write_req
PNIO_register_cbf
PNIO_register_pe_cbf
PNIO_set_mode

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 694KB - Virtual size: 693KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 462KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 514B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7BrdCtl64x.dll
.dll windows x64

5492bacf99b1f93191af934973d6a458

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

69:30:05:d4:68:1e:bd:88:c3:d6:fc:12:ae:42:8f:02:0e:74:b5:84:62:b8:0d:91:c7:22:5a:2b:ca:a2:72:67
Signer

Actual PE Digest

69:30:05:d4:68:1e:bd:88:c3:d6:fc:12:ae:42:8f:02:0e:74:b5:84:62:b8:0d:91:c7:22:5a:2b:ca:a2:72:67

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:46
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInstanceIdA

iphlpapi

ConvertLengthToIpv4Mask
GetAdaptersInfo
GetAdaptersAddresses

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

shlwapi

StrToIntW
PathRemoveFileSpecW

kernel32

GetModuleFileNameW
OpenEventW
CloseHandle
CreateFileA
MapViewOfFile
UnmapViewOfFile
QueryPerformanceCounter
WaitForSingleObject
GetProcAddress
CreateMutexExA
LoadLibraryA
CreateFileMappingA
LocalAlloc
Sleep
MultiByteToWideChar
IsDebuggerPresent
GetCurrentThreadId
ReleaseMutex
GetCurrentProcessId
OpenFileMappingA
LocalFree
TerminateThread
CreateEventW
lstrlenW
DecodePointer
EncodePointer
OutputDebugStringW
SetEvent
DeviceIoControl
GetLastError
lstrlenA
DisableThreadLibraryCalls
QueryPerformanceFrequency
WideCharToMultiByte
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetTickCount64
OutputDebugStringA

user32

RegisterDeviceNotificationW
CreateWindowExW
DestroyWindow
GetMessageW
ValidateRect
DefWindowProcW
DispatchMessageW
UnregisterClassW
UnregisterDeviceNotification
PostQuitMessage
RegisterClassW
PostMessageW

gdi32

GetStockObject

advapi32

RegOpenKeyExW
ReportEventA
DeregisterEventSource
RegQueryValueExA
RegisterEventSourceW
SetEntriesInAclW
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetKeyValueW
RegOpenKeyW
RegEnumKeyExW
RegQueryValueExW
RegCloseKey
RegGetValueW
RegOpenKeyA
CreateWellKnownSid
FreeSid

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderPathW

ole32

CoCreateInstance
CoSetProxyBlanket
CoUninitialize
CoInitializeSecurity
CoInitializeEx

oleaut32

VariantClear
SysAllocString
SysStringLen
SysAllocStringByteLen
SysFreeString

s7epabl64x

PGSP_GetLogDeviceListBL
PGSP_BoardGetNotSupportedBL
?S7epaBl64x_deinit@@YAXXZ
PGSP_LogDeviceSetProfileRBL
LogDeviceSetValueBL
LogDeviceCreateFromDefBL
PGSP_TemplateGetEnumBL
PGSP_DefDeviceGetValueBL
LogDeviceDelBL
PGSP_BoardGetValueCollectionBL
LogDeviceGetValueBL
PGSP_BoardGetValueBL

msvcp110

?_Syserror_map@std@@YAPEBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Release@_Pad@std@@QEAAXXZ
?_Xlength_error@std@@YAXPEBD@Z
??0id@locale@std@@QEAA@_K@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
?_Launch@_Pad@std@@QEAAXPEAU_Thrd_imp_t@@@Z
??1_Pad@std@@QEAA@XZ
??0_Pad@std@@QEAA@XZ
_Thrd_detach
_Mtx_destroy
_Mtx_unlock
_Mtx_lock
_Mtx_init
?_Winerror_map@std@@YAPEBDH@Z

msvcr110

__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__crtUnhandledException
__crt_debugger_hook
_onexit
__C_specific_handler
__dllonexit
_calloc_crt
_unlock
_lock
_beginthreadex
strtoul
atol
ftell
strrchr
fwrite
_sopen_s
strftime
_ftime64
strcpy_s
vsprintf_s
fopen_s
remove
_errno
atoi
strchr
_localtime64_s
_fstat64i32
_strlwr_s
sprintf_s
_stricmp
?terminate@@YAXXZ
_vsnwprintf_s
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__clean_type_info_names_internal
strcat_s
fseek
_difftime64
strncpy_s
_time64
malloc
__CxxFrameHandler3
_CxxThrowException
memcmp
swprintf_s
_wcsicmp
memmove
_wstat64i32
tolower
_wstat64
_purecall
??3@YAXPEAX@Z
toupper
??2@YAPEAX_K@Z
_wfopen_s
free
calloc
memcpy_s
fclose
_wtoi
??_V@YAXPEAX@Z
_itow_s
wcstok_s
wcscpy_s
wcsncpy_s
_close

Exports

Exports

?PGSP_DeleteTempLogDevices@@YAXXZ
?PGSP_GetDeviceInstanceBL@@YAJPEA_WHPEAK@Z
?PGSP_GetDeviceInstanceBL@@YAJPEA_WPEAK@Z
?PGSP_UpdateRoute@@YAJXZ
PGSP_BoardGetMapBL
PGSP_CreateAllLogdevicesBL
PGSP_EnumAdaptersBL
PGSP_EnumAvailableBoardsBL
PGSP_EnumBoardBL
PGSP_EnumBoardExBL
PGSP_EnumConfigurationBL
PGSP_EnumInstBoardBL
PGSP_GetBoardInfoBL
PGSP_GetBoardInfoExBL
PGSP_GetBoardInformation
PGSP_GetDeviceChange
PGSP_HasUninitializedInstancesBL
PGSP_RegisterForDeviceChangeNotifications
PGSP_RemoveAbandonLogDevices
PGSP_ScanBL
PGSP_UnregisterForDeviceChangeNotifications
PGSP_UpdateLogdevicesForDeviceBL
StartHardwareDetection

Sections

.text
Size: 305KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7_sr.dll
.dll windows x64

e1d73eab27bb6ec94c8f610927f8fdb7

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:af:1f:1f:23:10:83:5e:cd:10:53:90:f6:9c:45:b3:43:06:ab:c3:54:93:99:6f:b7:83:bf:04:2b:60:c2:d1
Signer

Actual PE Digest

45:af:1f:1f:23:10:83:5e:cd:10:53:90:f6:9c:45:b3:43:06:ab:c3:54:93:99:6f:b7:83:bf:04:2b:60:c2:d1

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

s7onlinx64

SCP_send
SCP_receive
SCP_close
SetSinecHWndMsg
SCP_openW
SCP_get_errno

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

oleaut32

SysAllocStringLen

kernel32

WaitForSingleObject
CreateMutexA
CreateEventA
Sleep
CreateThread
GetCurrentThread
TerminateThread
GetVersionExA
MapViewOfFile
UnmapViewOfFile
CreateSemaphoreA
CreateFileMappingA
OpenFileMappingA
GlobalAlloc
GlobalFree
MultiByteToWideChar
FormatMessageA
GetEnvironmentVariableA
CreateDirectoryA
DeleteFileA
GetDiskFreeSpaceExA
ReleaseMutex
OutputDebugStringA
OpenEventA
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
WaitForMultipleObjects
lstrlenA
OpenMutexA
WideCharToMultiByte
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
GetStringTypeW
HeapReAlloc
SetConsoleCtrlHandler
FatalAppExitA
SetFilePointerEx
GetConsoleMode
ReleaseSemaphore
SetEvent
LoadLibraryA
GetProcAddress
FreeLibrary
GetThreadPriority
SetThreadPriority
SetLastError
WaitNamedPipeA
SetNamedPipeHandleState
GetLastError
WriteFile
CreateFileA
LocalFree
SetEnvironmentVariableA
LocalAlloc
GetCurrentProcess
CloseHandle
OutputDebugStringW
EnumSystemLocalesW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
LoadLibraryW
GetTimeZoneInformation
SetStdHandle
WriteConsoleW
HeapSize
FlushFileBuffers
CreateFileW
SetFilePointer
RtlUnwindEx
ExitThread
ResumeThread
HeapFree
HeapAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
LoadLibraryExW
FindClose
FindFirstFileExA
FindNextFileA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetCommandLineA
ExitProcess
GetModuleHandleExW
AreFileApisANSI
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
GetStdHandle
GetModuleFileNameW
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
GetConsoleCP

user32

PostMessageA
CreateWindowExA
wsprintfA
DispatchMessageA
PeekMessageA
SetForegroundWindow
MessageBoxA
GetMessageA

advapi32

RegDeleteKeyA
CreateWellKnownSid
FreeSid
GetTokenInformation
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CryptEncrypt
CryptImportKey
CryptExportKey
CryptDestroyKey
CryptGenKey
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExW
RegEnumKeyExA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
SetEntriesInAclA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
OpenProcessToken

crypt32

CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertCloseStore
CertOpenStore

Exports

Exports

Call_Ina
ResetSR
SRMD_Request
SRMD_Reset
SRMD_Set
SRMD_SetW
SR_CfgDiag
SR_CfgDiagW
SR_Trace
SR_TraceW
SetSR
SetSRW

Sections

.text
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 845KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7epaImp64x.exe
.exe windows x64

95d53201cdb118ae73f6608f53ae355b

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d4:5c:a7:b7:7c:e0:1d:a2:81:b4:09:d1:b1:55:08:3e:e7:10:5a:84:d4:5a:42:37:ca:18:49:fb:f5:a0:d1:c2
Signer

Actual PE Digest

d4:5c:a7:b7:7c:e0:1d:a2:81:b4:09:d1:b1:55:08:3e:e7:10:5a:84:d4:5a:42:37:ca:18:49:fb:f5:a0:d1:c2

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:47
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

xmllite

CreateXmlReader

s7brdctl64x

PGSP_ScanBL
PGSP_CreateAllLogdevicesBL

msvcr110

?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_commode
_fmode
__winitenv
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
?terminate@@YAXXZ
_onexit
__C_specific_handler
__dllonexit
__CxxFrameHandler3
_calloc_crt
_unlock
_lock
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
wcstol
_wstat64
_wtol
fgetwc
wcsftime
_lock_file
setvbuf
fsetpos
fgetc
fflush
_fseeki64
fgetpos
ungetc
ungetwc
_unlock_file
fputwc
??0exception@std@@QEAA@AEBV01@@Z
??0bad_cast@std@@QEAA@AEBV01@@Z
??0bad_cast@std@@QEAA@PEBD@Z
??1bad_cast@std@@UEAA@XZ
??2@YAPEAX_K@Z
_purecall
_wcsnicmp
memmove
swprintf_s
??3@YAXPEAX@Z
_close
_time64
strncpy_s
_difftime64
fclose
fseek
strcat_s
strtoul
atol
ftell
strrchr
fwrite
_sopen_s
memcpy_s
strftime
_ftime64
strcpy_s
vsprintf_s
fopen_s
remove
_errno
atoi
strchr
_localtime64_s
_fstat64i32
_strlwr_s
sprintf_s
_stricmp
_CxxThrowException
__crtSetUnhandledExceptionFilter

mfc110u

ord2361
ord293
ord2296
ord2292
ord278
ord4829
ord7738
ord3668
ord13807
ord4450
ord1027
ord2290
ord957
ord1938
ord12126
ord4457
ord4509
ord1420
ord296
ord286
ord2854
ord1661
ord4524
ord7902
ord2866
ord285
ord5580
ord2848
ord1492
ord5545
ord1494
ord1632
ord280
ord13770

kernel32

GetCurrentThreadId
QueryPerformanceFrequency
GetCurrentProcessId
OpenFileMappingA
DeviceIoControl
CreateFileMappingA
LoadLibraryA
CreateMutexExA
GetProcAddress
GetLastError
WideCharToMultiByte
QueryPerformanceCounter
UnmapViewOfFile
MapViewOfFile
CreateFileA
LocalFree
CloseHandle
OutputDebugStringA
LocalAlloc
ReleaseMutex
WaitForSingleObject
GetTickCount64
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
GetFileAttributesExW
GetEnvironmentVariableW
SetFileAttributesW
DeleteFileW
FindNextFileW
RemoveDirectoryW
FindClose
CopyFileW
CreateDirectoryW
FindFirstFileW
GetCurrentProcess

advapi32

OpenProcessToken
GetTokenInformation
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
SetEntriesInAclW
FreeSid
CreateWellKnownSid
RegisterEventSourceW
RegQueryValueExA
DeregisterEventSource
ReportEventA
RegOpenKeyA
RegCloseKey
RegGetValueW
RegOpenKeyExW
SetSecurityDescriptorGroup

shell32

SHCreateItemFromParsingName
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA

shlwapi

StrCmpW
SHCreateStreamOnFileW

ole32

OleRun
CoUninitialize
CoInitializeEx
CoCreateInstance

oleaut32

SysFreeString
SysStringByteLen
SysAllocStringLen
SysAllocStringByteLen
SysStringLen
SysAllocString
VariantClear
VariantInit

msvcp110

?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEAPEA_W0PEAH001@Z
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?id@?$codecvt@_WDH@std@@2V0locale@2@A
?_BADOFF@std@@3_JB
??0id@locale@std@@QEAA@_K@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?_Orphan_all@_Container_base0@std@@QEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@_WDH@std@@QEBAHAEAHPEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDH@std@@QEBAHAEAHPEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?unshift@?$codecvt@_WDH@std@@QEBAHAEAHPEAD1AEAPEAD@Z
?_Getcat@?$codecvt@_WDH@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?_Winerror_map@std@@YAPEBDH@Z

Sections

.text
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7epaapi64x.dll
.dll windows x64

c058aeb2592a550dc4e7d5aca5f69087

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2b:c3:7c:43:83:2d:8b:44:c1:f2:bb:32:5a:e7:e2:7b:dd:1e:c0:e5:44:8a:ca:ef:78:87:50:6e:a6:27:18:fa
Signer

Actual PE Digest

2b:c3:7c:43:83:2d:8b:44:c1:f2:bb:32:5a:e7:e2:7b:dd:1e:c0:e5:44:8a:ca:ef:78:87:50:6e:a6:27:18:fa

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:46
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle
GetCurrentProcessId
OpenFileMappingA
LocalFree
OutputDebugStringW
CreateMutexExW
WriteFile
CreateEventA
ReadFile
CreateFileW
DisconnectNamedPipe
OpenMutexW
SetLastError
SetNamedPipeHandleState
GetCommandLineW
GetModuleHandleW
GetLocaleInfoW
GetModuleFileNameW
ProcessIdToSessionId
ReleaseMutex
GetUserDefaultUILanguage
SetEvent
Sleep
ResetEvent
lstrlenW
LockResource
SizeofResource
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetTickCount64
OutputDebugStringA
GetCurrentThreadId
QueryPerformanceFrequency
DeviceIoControl
LocalAlloc
CreateFileMappingA
LoadLibraryA
CreateMutexExA
GetProcAddress
GetLastError
WideCharToMultiByte
WaitForSingleObject
QueryPerformanceCounter
UnmapViewOfFile
MapViewOfFile
CreateEventW
CreateFileA
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
FindClose
FindNextFileW
FindFirstFileExW
FindNextChangeNotification
WaitForMultipleObjects
FindCloseChangeNotification
FindFirstChangeNotificationW
FindResourceW
FindResourceExW
LoadResource

user32

GetUserObjectInformationW
ValidateRect
DefWindowProcW
DispatchMessageW
DestroyWindow
GetMessageW
PostQuitMessage
UnregisterClassW
PostMessageW
GetProcessWindowStation
PeekMessageW
CreateWindowExW
RegisterClassW

gdi32

GetStockObject

advapi32

RegOpenKeyW
AllocateAndInitializeSid
CreateWellKnownSid
RegCloseKey
RegOpenKeyA
FreeSid
SetEntriesInAclW
ReportEventA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
DeregisterEventSource
RegQueryValueExA
RegisterEventSourceW
RegGetValueW

shell32

SHGetSpecialFolderPathA

s7epromapi64x

IsInternalPrommerActive
IsPgWithInternalPrommer

s7onlinx64

SCP_openW
SCP_close
OnlDll_CheckDevOpen
SCP_get_errno
SetSinecHWndMsg
SCP_send_receive

msvcr110

??_V@YAXPEAX@Z
memcmp
_endthreadex
_beginthreadex
wcstok_s
_wcsnicmp
wprintf
wcsrchr
wmemcpy_s
memmove_s
wcsnlen
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
wcsstr
_lock
_unlock
_calloc_crt
__dllonexit
__C_specific_handler
_onexit
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__clean_type_info_names_internal
tolower
vswprintf_s
_wsplitpath_s
_wtof
_wtoi
??_U@YAPEAX_K@Z
_wcsicmp
wcscpy_s
wcscmp
swscanf
wcslen
calloc
free
wcsncpy_s
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
_purecall
memmove
memcpy
_close
_time64
strncpy_s
_difftime64
fclose
fseek
_strlwr_s
strtoul
atol
ftell
strrchr
fwrite
_sopen_s
memcpy_s
strftime
_ftime64
strcpy_s
memset
vsprintf_s
fopen_s
remove
_errno
atoi
strchr
strlen
_localtime64_s
__crtCapturePreviousContext
_fstat64i32
sprintf_s
_stricmp
_recalloc
_CxxThrowException
strcat_s
__CxxFrameHandler3

msvcp110

?_Swap_all@_Container_base0@std@@QEAAXAEAU12@@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_BADOFF@std@@3_JB
_Call_onceEx
_Do_call
??0id@locale@std@@QEAA@_K@Z
_Mtx_init
_Mtx_lock
_Mtx_unlock
_Mtx_destroy
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Throw_C_error@std@@YAXH@Z
?_Winerror_map@std@@YAPEBDH@Z
?_Orphan_all@_Container_base0@std@@QEAAXXZ

xmllite

CreateXmlReader

shlwapi

ord12
SHCreateStreamOnFileW

Exports

Exports

ConvertOsToSTEP7Lang
ConvertSTEP7ToOsLang
EpaGetHardwareChanges
EpaRegisterHardwareChanges
EpaSetMessageTypeForHardwareChanges
EpaUnregisterHardwareChanges
GetCurrentLogName
GetDefaultL7Timeout
GetS7DOSVersion
GetS7OpusbxVid
GetTunnelStatus
InstDeviceGetEnum
LogDeviceCopy
LogDeviceCreateFromDef
LogDeviceCreateTemp
LogDeviceDel
LogDeviceDelNdiValue
LogDeviceDelTemp
LogDeviceDelValue
LogDeviceExists
LogDeviceFlush
LogDeviceFromDeviceIDEnum
LogDeviceGetAsicType
LogDeviceGetEnum
LogDeviceGetEnumNdiValue
LogDeviceGetEnumValue
LogDeviceGetNdiValue
LogDeviceGetParamDesc
LogDeviceGetValue
LogDeviceLock
LogDeviceNotifyChange
LogDeviceSetBusparams
LogDeviceSetNdiValue
LogDeviceSetValue
LogDeviceUnlock
LogDeviceUnregisterNotifyChange
LogDeviceUpdateWithTemp
LogNameCreate
LogNameDelValue
LogNameDelete
LogNameExists
LogNameGetEnum
LogNameGetEnumValue
LogNameGetLogDevice
LogNameGetValue
LogNameLock
LogNameNotifyChange
LogNameSetLogDevice
LogNameSetValue
LogNameUnlock
LogNameUnregisterNotifyChange
PGMSP_IsInternalPrommerActive
PGMSP_IsPgWithInternalPrommer
PGSP_BoardGetMapEx
PGSP_BoardGetNotSupported
PGSP_BoardGetValueCollection
PGSP_CanSaveParameters
PGSP_CheckDevOpen
PGSP_CreateAllLogdevices
PGSP_EnumAdapters
PGSP_EnumConfiguration
PGSP_EnumInstBoard
PGSP_EnumInstBoardEx
PGSP_GetBoardAttribute
PGSP_GetBoardAttributeLang
PGSP_GetBoardInfo
PGSP_GetBoardInfoEx
PGSP_GetBoardInformation
PGSP_GetLanguage
PGSP_GetParameterMetaData
PGSP_LldpDelValue
PGSP_LldpGetEnumValue
PGSP_LldpGetValue
PGSP_LldpSetValue
PGSP_LogDeviceEnumSetProfile
PGSP_LogDeviceGetAverageEnumList
PGSP_LogDeviceGetEnum
PGSP_LogDeviceGetEnumStringLang
PGSP_LogDeviceGetMostSpecializedEnumList
PGSP_LogDeviceGetValue
PGSP_LogNameGetEnum
PGSP_ProtocolGetEnumBaudrate
PGSP_ProtocolGetEnumBusprofiles
PGSP_ProtocolGetEnumBusprofilesLang
PGSP_RegGetEnumKey
PGSP_RegGetEnumValue
PGSP_RegGetValue
PGSP_Scan
PGSP_SetOpenTCPConnections
PGSP_SetParameterMetaData
PGSP_SilentRestart
PGSP_SpezielleBerechnungen
PGSP_StartServer
PGSP_StopServer
PGSP_TemplateExists
PGSP_TemplateGetEnumNoPrefix
PGSP_TemplateGetEnumValueRaw
PGSP_TemplateKeyExists
PGSP_UpdateLogdevicesForDevice
TemplateExists
TemplateGetEnum
TemplateGetEnumValue
TemplateGetValue

Sections

.text
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7epascp64x.dll
.dll windows x64

1fadd279e3dc5de33e640cd70e08d712

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

13:d7:f7:f1:46:6c:a0:c2:68:1a:96:fb:ec:d9:bf:81:d0:bd:e4:d6:8f:57:9d:88:97:2c:0a:93:90:c3:1a:f8
Signer

Actual PE Digest

13:d7:f7:f1:46:6c:a0:c2:68:1a:96:fb:ec:d9:bf:81:d0:bd:e4:d6:8f:57:9d:88:97:2c:0a:93:90:c3:1a:f8

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

QueryPerformanceFrequency
OutputDebugStringA
GetCurrentThreadId
ReleaseMutex
CloseHandle
GetCurrentProcessId
OpenFileMappingA
LocalFree
WriteFile
CreateEventA
ReadFile
CreateFileW
DisconnectNamedPipe
SetLastError
DeviceIoControl
SetNamedPipeHandleState
UnregisterWait
CreateMutexW
OutputDebugStringW
DisableThreadLibraryCalls
ProcessIdToSessionId
RegisterWaitForSingleObject
CreateEventW
IsProcessorFeaturePresent
GetTickCount64
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
LocalAlloc
CreateFileMappingA
LoadLibraryA
CreateMutexExA
GetProcAddress
GetLastError
WideCharToMultiByte
WaitForSingleObject
QueryPerformanceCounter
UnmapViewOfFile
MapViewOfFile
CreateMutexExW
CreateFileA
IsDebuggerPresent

user32

GetProcessWindowStation
GetUserObjectInformationW
wsprintfW
PostMessageW

advapi32

CreateWellKnownSid
RegCloseKey
RegOpenKeyA
FreeSid
SetEntriesInAclW
ReportEventA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
DeregisterEventSource
RegQueryValueExA
RegisterEventSourceW
AllocateAndInitializeSid

shell32

SHGetSpecialFolderPathA

msvcr110

strcpy_s
_ftime64
strftime
memcpy_s
_sopen_s
fwrite
strrchr
ftell
atol
strtoul
strcat_s
fseek
fclose
_difftime64
strncpy_s
_time64
_close
memcpy
free
calloc
wcslen
wcscpy_s
swprintf_s
memmove
memcmp
vswprintf_s
_purecall
??3@YAXPEAX@Z
?terminate@@YAXXZ
wcscmp
??2@YAPEAX_K@Z
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
_lock
_unlock
_calloc_crt
__dllonexit
__C_specific_handler
_onexit
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__clean_type_info_names_internal
memset
vsprintf_s
remove
_errno
atoi
strchr
strlen
_localtime64_s
_fstat64i32
_strlwr_s
sprintf_s
_stricmp
_CxxThrowException
fopen_s
__CxxFrameHandler3

msvcp110

??0id@locale@std@@QEAA@_K@Z
_Thrd_detach
?_Xlength_error@std@@YAXPEBD@Z
??0_Pad@std@@QEAA@XZ
??1_Pad@std@@QEAA@XZ
?_Launch@_Pad@std@@QEAAXPEAU_Thrd_imp_t@@@Z
?_Release@_Pad@std@@QEAAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Winerror_map@std@@YAPEBDH@Z

Exports

Exports

SCP_close
SCP_get_errno
SCP_openW
SCP_receive
SCP_send
SCP_send_receive
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7epasrv64x.exe
.exe windows x64

9c4a3e5415a97bed8d2507005a293b30

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:8e:b7:ae:e0:b5:ce:2d:e1:7a:93:2c:0a:ef:e5:00:35:dd:e7:9d:da:4a:a5:57:b7:d0:09:1d:62:f0:9d:29
Signer

Actual PE Digest

27:8e:b7:ae:e0:b5:ce:2d:e1:7a:93:2c:0a:ef:e5:00:35:dd:e7:9d:da:4a:a5:57:b7:d0:09:1d:62:f0:9d:29

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:48
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

s7brdctl64x

PGSP_GetBoardInfoExBL
StartHardwareDetection
?PGSP_GetDeviceInstanceBL@@YAJPEA_WPEAK@Z
?PGSP_GetDeviceInstanceBL@@YAJPEA_WHPEAK@Z
PGSP_UnregisterForDeviceChangeNotifications
PGSP_CreateAllLogdevicesBL
PGSP_EnumBoardExBL
?PGSP_UpdateRoute@@YAJXZ
PGSP_RemoveAbandonLogDevices
PGSP_RegisterForDeviceChangeNotifications
PGSP_EnumAdaptersBL
?PGSP_DeleteTempLogDevices@@YAXXZ
PGSP_GetDeviceChange
PGSP_HasUninitializedInstancesBL
PGSP_BoardGetMapBL
PGSP_EnumConfigurationBL
PGSP_GetBoardInfoBL
PGSP_EnumAvailableBoardsBL
PGSP_ScanBL
PGSP_GetBoardInformation
PGSP_EnumInstBoardBL
PGSP_UpdateLogdevicesForDeviceBL

s7epabl64x

PGSP_LogDeviceSetNdiBL
LogDeviceCreateTempBL
LogNameGetLogDeviceBL
LogNameGetValueListBL
PGSP_LogNameGetResourceStringBL
PGSP_BoardGetValueCollectionBL
PGSP_BoardGetResourceStringBL
LogDeviceDelBL
PGSP_BoardGetEnumValueBL
LogDeviceSetBusparamsBL
PGSP_GetParameterMetaDataBL
LogNameDelValueBL
LogDeviceUpdateWithTempBL
LogNameSetValueBL
LogDeviceCopyBL
LogDeviceGetXmlBL
LogDeviceGetValueExBL
LogNameCreateBL
PGSP_ProtocolGetValueRawBL
LogDeviceGetAsicTypeBL
LogDeviceDelVmdIdBL
PGSP_LogDeviceEnumNdiValueBL
LogDeviceGetParamDescBL
?RegisterNotification@@YAJPEB_W00@Z
PGSP_GetLogDeviceListExBL
LogNameSetLogDeviceBL
PGSP_DelParameterDataBL
LogDeviceCreateFromDefBL
PGSP_EnumParameterMetaDataBL
LogDeviceGetEnumValueBL
GetValueInPGSP_BL
LogNameExistBL
PGSP_LogDeviceGetMostSpecializedEnumListBL
LogDeviceExistBL
?S7epaBl64x_deinit@@YAXXZ
PGSP_BoardGetNotSupportedBL
PGSP_TemplateGetEnumNoPrefixBL
PGSP_BoardGetValueRawBL
PGSP_ProtocolGetEnumBaudrateBL
PGSP_GetLogDeviceListBL
PGSP_TemplateGetEnumValueRawBL
PGSP_LogDeviceGetNdiBL
LogDeviceDelTempBL
LogNameGetEnumValueBL
LogNameGetEnumBL
PGSP_ProtocolGetEnumBusprofilesBL
LogDeviceGetEnumByDeviceIdBL
PGSP_ProtocolGetValueBL
PGSP_ProfileCollectionExistsBL
LogNameDeleteBL
LogNameGetValueBL
PGSP_LogDeviceGetAverageEnumListBL
LogDeviceDelValueBL
s7DriverReadLogDevice
LogDeviceGetValueListBL
PGSP_SetParameterDataBL
PGSP_TemplateKeyExistsBL
PGSP_GetLogNameListBL
PGSP_DefDeviceGetEnumValueBL
PGSP_TemplateGetResourceStringBL
PGSP_LogDeviceGetResourceStringBL
?UnRegisterNotification@@YAJPEB_W00@Z
PGSP_DefDeviceGetValueRawBL
PGSP_ProtocolGetEnumValueBL
PGSP_TemplateGetListBL
PGSP_TemplateExistBL
PGSP_LogDeviceDelNdiBL
SetValueInPGSP_BL
LogDeviceGetValueBL
PGSP_DefDeviceGetValueBL
PGSP_LogDeviceSetProfileRBL
PGSP_TemplateSetValueBL
PGSP_TemplateGetEnumBL
LogDeviceGetEnumBL
LogDeviceSetValueBL
PGSP_BoardGetValueBL

msvcr110

_strlwr_s
_fstat64i32
sprintf_s
strchr
atoi
_errno
remove
fopen_s
vsprintf_s
strcpy_s
_ftime64
strftime
memcpy_s
_sopen_s
fwrite
strrchr
ftell
atol
strtoul
strcat_s
fseek
fclose
_difftime64
strncpy_s
_time64
_close
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?what@exception@std@@UEBAPEBDXZ
??1exception@std@@UEAA@XZ
??0exception@std@@QEAA@AEBV01@@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?Alloc@Concurrency@@YAPEAX_K@Z
??1scoped_lock@critical_section@Concurrency@@QEAA@XZ
??0scoped_lock@critical_section@Concurrency@@QEAA@AEAV12@@Z
??1critical_section@Concurrency@@QEAA@XZ
??0critical_section@Concurrency@@QEAA@XZ
?wait@Concurrency@@YAXI@Z
??0invalid_operation@Concurrency@@QEAA@PEBD@Z
?set@event@Concurrency@@QEAAXXZ
?wait@event@Concurrency@@QEAA_KI@Z
??1event@Concurrency@@QEAA@XZ
??0event@Concurrency@@QEAA@XZ
?Free@Concurrency@@YAXPEAX@Z
?_RunAndWait@_TaskCollection@details@Concurrency@@QEAA?AW4_TaskCollectionStatus@23@PEAV_UnrealizedChore@23@@Z
?_Cancel@_TaskCollection@details@Concurrency@@QEAAXXZ
?_Schedule@_TaskCollection@details@Concurrency@@QEAAXPEAV_UnrealizedChore@23@@Z
?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAEA_KXZ
?_DeregisterCallback@_CancellationTokenState@details@Concurrency@@QEAAXPEAV_CancellationTokenRegistration@23@@Z
?_RegisterCallback@_CancellationTokenState@details@Concurrency@@QEAAPEAV_CancellationTokenRegistration@23@P6AXPEAX@Z0H@Z
?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z
__CxxFrameHandler3
?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPEAX@Z0@Z
?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPEAV123@PEAV_CancellationTokenState@23@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
_wcsnicmp
wcscat_s
wcscpy_s
wcschr
wcsncpy_s
free
calloc
malloc
wcsstr
wcstombs_s
?terminate@@YAXXZ
_lock
_unlock
_calloc_crt
__dllonexit
__C_specific_handler
_onexit
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_wcmdln
_fmode
_commode
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__crtSetUnhandledExceptionFilter
_stricmp
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
_purecall
memmove
_wcsicmp
swprintf_s
_CxxThrowException
_localtime64_s
?_Id@_CurrentScheduler@details@Concurrency@@SAIXZ

msvcp110

_Xtime_get_ticks
?_Future_error_map@std@@YAPEBDH@Z
_Thrd_detach
??0_Pad@std@@QEAA@XZ
??1_Pad@std@@QEAA@XZ
?_Launch@_Pad@std@@QEAAXPEAU_Thrd_imp_t@@@Z
?_Release@_Pad@std@@QEAAXXZ
_Mtx_init
_Cnd_timedwait
_Mtx_current_owns
_Mtx_lock
_Cnd_wait
_Cnd_broadcast
xtime_get
_Mtx_unlock
_Xtime_diff_to_millis2
_Thrd_sleep
_Mtx_destroy
_Cnd_unregister_at_thread_exit
_Cnd_register_at_thread_exit
_Cnd_destroy
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
_Cnd_init
??0id@locale@std@@QEAA@_K@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAPEBDH@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z

kernel32

FlushFileBuffers
LocalAlloc
GetTickCount64
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
OpenEventW
WaitForMultipleObjects
CreateEventW
GlobalFree
GetCurrentProcess
DisconnectNamedPipe
GetOverlappedResult
ReadFile
Sleep
LoadLibraryW
GetSystemDirectoryW
WriteFile
CreateNamedPipeW
ConnectNamedPipe
SetEvent
FreeLibrary
CreateMutexW
GetNativeSystemInfo
GetVersionExW
CreateMutexExW
OpenFileMappingA
GetCurrentProcessId
ReleaseMutex
GetCurrentThreadId
QueryPerformanceFrequency
DeviceIoControl
CreateFileMappingA
LoadLibraryA
CreateMutexExA
GetProcAddress
GetLastError
WaitForSingleObject
QueryPerformanceCounter
UnmapViewOfFile
MapViewOfFile
CreateFileA
WideCharToMultiByte
LocalFree
CloseHandle
OutputDebugStringA

user32

MessageBoxW
GetSystemMetrics

advapi32

RegQueryValueExA
SetSecurityDescriptorGroup
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
ReportEventW
RegEnumValueW
RegDeleteTreeW
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyA
ReportEventA
DeregisterEventSource
OpenProcessToken
RegisterEventSourceW
RegCloseKey
RegOpenKeyExW
RegGetValueW
CreateWellKnownSid
FreeSid
SetEntriesInAclW
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetTokenInformation

shell32

SHGetSpecialFolderPathA
SHGetKnownFolderPath
SHGetSpecialFolderPathW

shlwapi

PathCanonicalizeW
SHGetValueW

ole32

CoTaskMemFree

Sections

.text
Size: 301KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7epromapi64x.dll
.dll windows x64

e7fadbacaa5156c687f6c509739116d1

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:c6:ad:27:4f:d2:01:74:33:1b:c9:80:34:ad:43:a1:a8:17:5e:ce:fa:f6:ad:76:a2:46:a9:51:0c:c1:ba:31
Signer

Actual PE Digest

98:c6:ad:27:4f:d2:01:74:33:1b:c9:80:34:ad:43:a1:a8:17:5e:ce:fa:f6:ad:76:a2:46:a9:51:0c:c1:ba:31

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW

mfc110u

ord7902
ord8304
ord4524
ord2848
ord5580
ord1661
ord1492
ord280
ord285
ord2866
ord1632
ord8011
ord7245
ord1441
ord7928
ord11767
ord9969
ord12438
ord12376
ord4384
ord7563
ord7868
ord5059
ord2385
ord12056
ord12055
ord14030
ord7498
ord14036
ord8939
ord3952
ord3890
ord12457
ord7516
ord1962
ord11503
ord1480
ord13909
ord12045
ord7566
ord14108
ord5991
ord14110
ord5993
ord14109
ord5992
ord977
ord6477
ord3673
ord5577
ord11759
ord7765
ord11771
ord11739
ord4959
ord5239
ord5427
ord8891
ord5215
ord5430
ord4962
ord5105
ord4943
ord7310
ord7311
ord7301
ord5103
ord7767
ord9786
ord8750
ord2854
ord1495
ord1494
ord11502
ord1027
ord286
ord5545
ord1482
ord3670
ord1483
ord323
ord1033
ord2273
ord2160
ord322
ord1032
ord2315
ord2318
ord2284
ord2317
ord472
ord2182
ord2282
ord2111
ord2214
ord2306
ord473

msvcr110

atol
strtoul
fclose
fopen_s
fseek
ftell
remove
sprintf_s
vsprintf_s
fwrite
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
_initterm_e
_initterm
_malloc_crt
free
_amsg_exit
__CppXcptFilter
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
_onexit
__C_specific_handler
__dllonexit
_calloc_crt
_unlock
_lock
strncmp
memcpy
__CxxFrameHandler3
_sopen_s
_close
_fstat64i32
_ftime64
_time64
_localtime64_s
_difftime64
memset
strlen
_strnicmp
wcsstr
memcpy_s
strcpy_s
strcat_s
strchr
_stricmp
_strlwr_s
strncpy_s
strrchr
_errno
atoi
strftime

kernel32

ReleaseMutex
DeviceIoControl
QueryPerformanceFrequency
QueryPerformanceCounter
CloseHandle
OutputDebugStringA
CreateFileA
LocalFree
LocalAlloc
IsProcessorFeaturePresent
GetTickCount64
GetSystemTimeAsFileTime
GetLastError
IsDebuggerPresent
DecodePointer
EncodePointer
GetModuleHandleW
GetVersionExW
WideCharToMultiByte
LoadLibraryA
OpenFileMappingA
CreateFileMappingA
GetProcAddress
UnmapViewOfFile
MapViewOfFile
GetCurrentThreadId
GetCurrentProcessId
CreateMutexExA
WaitForSingleObject

advapi32

RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
CreateWellKnownSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
DeregisterEventSource
RegisterEventSourceW
ReportEventA
SetEntriesInAclW
RegCloseKey
RegOpenKeyA

shell32

SHGetSpecialFolderPathA

oleaut32

VariantClear
SysFreeString
VariantInit

Exports

Exports

IsInternalPrommerActive
IsPGM4
IsPgWithInternalPrommer

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7eptcpa.chm
.chm
Automation\Simatic OAM\bin\s7eptcpb.chm
.chm
Automation\Simatic OAM\bin\s7eptcpc.chm
.chm
Automation\Simatic OAM\bin\s7eptcpd.chm
.chm
Automation\Simatic OAM\bin\s7eptcpe.chm
.chm
Automation\Simatic OAM\bin\s7eptcpj.chm
.chm
Automation\Simatic OAM\bin\s7eptcpk.chm
.chm
Automation\Simatic OAM\bin\s7oClrpcProxy64.dll
.dll windows x64

0a73da9fa5fb1fae015ac39d7f38bd73

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d2:d4:90:e6:f0:88:44:28:75:ba:e2:58:c2:05:c4:ce:bb:3f:36:70:d3:ea:f9:6a:79:e6:b6:ac:5c:b9:0c:7b
Signer

Actual PE Digest

d2:d4:90:e6:f0:88:44:28:75:ba:e2:58:c2:05:c4:ce:bb:3f:36:70:d3:ea:f9:6a:79:e6:b6:ac:5c:b9:0c:7b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:46
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shell32

SHGetSpecialFolderPathA

advapi32

RegOpenKeyA
SetEntriesInAclW
CreateWellKnownSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
DeregisterEventSource
RegisterEventSourceW
ReportEventA
RegCloseKey
RegQueryValueExA

ws2_32

WSAStartup
socket
shutdown
setsockopt
sendto
send
select
recvfrom
recv
listen
WSAGetLastError
getsockname
getpeername
ioctlsocket
connect
closesocket
bind
accept
htons
ntohs
__WSAFDIsSet
getsockopt

kernel32

EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
GetTickCount64
DecodePointer
DeleteTimerQueueTimer
CreateTimerQueueTimer
CreateEventW
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
Sleep
GlobalFree
GlobalAlloc
WideCharToMultiByte
LoadLibraryA
OpenFileMappingA
CreateFileMappingA
LocalFree
CreateFileA
OutputDebugStringA
CloseHandle
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
DeviceIoControl
ReleaseMutex
WaitForSingleObject
CreateMutexExA
GetCurrentProcessId
GetCurrentThreadId
MapViewOfFile
UnmapViewOfFile
GetProcAddress
LocalAlloc

msvcr110

_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
__C_specific_handler
__clean_type_info_names_internal
_onexit
memcpy_s
memset
strcpy_s
strcat_s
strlen
strchr
_stricmp
_strlwr_s
strncpy_s
strrchr
_errno
atoi
atol
strtoul
fclose
fopen_s
fseek
ftell
fwrite
remove
sprintf_s
vsprintf_s
strftime
_difftime64
_localtime64_s
_time64
_ftime64
_fstat64i32
_close
_sopen_s
strcpy
memmove
vsprintf
sscanf
memcpy
memcmp
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
??_V@YAXPEAX@Z
??_U@YAPEAX_K@Z
__CxxFrameHandler3
free
malloc
_endthread
_beginthreadex
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
_lock
_unlock
_calloc_crt
__dllonexit

msvcp110

??0_Lockit@std@@QEAA@H@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Orphan_all@_Container_base12@std@@QEAAXXZ
??1_Container_base12@std@@QEAA@XZ
??0_Container_base12@std@@QEAA@XZ
??1_Lockit@std@@QEAA@XZ

iphlpapi

GetAdaptersInfo

Exports

Exports

PnBaseRpcClBind
PnBaseRpcClCall
PnBaseRpcClCancel
PnBaseRpcClClose
PnBaseRpcClOpen
PnBaseRpcClQueryEpmBind
PnBaseRpcClQueryEpmNext
PnBaseRpcClQueryEpmUnbind
PnBaseRpcClUnbind

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7oPNDiscoveryx64.exe
.exe windows x64

cd608bff0880cda1452b3535ba54451c

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f7:82:0f:f4:00:3c:c6:24:82:02:56:46:05:a7:2d:e9:33:0c:f1:0e:2e:5d:c9:5a:5a:70:18:63:87:74:c2:77
Signer

Actual PE Digest

f7:82:0f:f4:00:3c:c6:24:82:02:56:46:05:a7:2d:e9:33:0c:f1:0e:2e:5d:c9:5a:5a:70:18:63:87:74:c2:77

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetSystemTimeAsFileTime
GetTickCount64
InitializeCriticalSectionEx
lstrlenA
MultiByteToWideChar
RaiseException
GetProcAddress
GetModuleHandleW
GetCurrentThreadId
CreateThread
Sleep
CreateMutexExW
CreateEventW
SetEvent
DecodePointer
GetCommandLineW
GetModuleFileNameW
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLastError
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
OpenFileMappingA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetCurrentProcessId
CreateMutexExA
QueryPerformanceFrequency
QueryPerformanceCounter
CreateFileA
SetNamedPipeHandleState
DisconnectNamedPipe
SetLastError
GetVersionExW
SetThreadPriority
GetCurrentThread
CancelWaitableTimer
WaitForSingleObjectEx
GlobalFree
GlobalAlloc
TryEnterCriticalSection
CreateMutexW
LoadLibraryA
FreeLibrary
ResetEvent
CancelIoEx
DeviceIoControl
GetOverlappedResult
WriteFile
ReadFile
CreateFileW
CreateWaitableTimerW
WaitForMultipleObjects
TerminateThread
SetWaitableTimer
CreateEventA
LocalFree
LocalAlloc
GetCurrentProcess
CloseHandle
OutputDebugStringA

user32

LoadStringW
GetMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
CharUpperW
CharNextW
MessageBoxW

advapi32

RegOpenKeyExW
FreeSid
CreateWellKnownSid
OpenProcessToken
InitializeSecurityDescriptor
StartServiceW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
ChangeServiceConfig2W
ChangeServiceConfigW
RegSetValueExW
RegQueryValueExW
SetSecurityDescriptorDacl
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
ReportEventW
RegisterEventSourceW
SetEntriesInAclA
RegisterEventSourceA
RegGetValueW
RegDeleteKeyValueW
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyW
ReportEventA
DeregisterEventSource
IsValidSecurityDescriptor
SetEntriesInAclW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
GetTokenInformation

ole32

StringFromGUID2
CoUninitialize
CoSetProxyBlanket
CLSIDFromString
CoTaskMemFree
CoInitializeEx
CoResumeClassObjects
CoAddRefServerProcess
CoInitializeSecurity
CoCreateInstance
CoReleaseServerProcess

oleaut32

SafeArrayAccessData
UnRegisterTypeLi
RegisterTypeLi
CreateErrorInfo
SetErrorInfo
SysAllocString
SysAllocStringByteLen
VariantClear
SysFreeString
SysStringLen
LoadRegTypeLi
SafeArrayUnaccessData
LoadTypeLi

msvcr110

memset
??3@YAXPEAX@Z
_purecall
??2@YAPEAX_K@Z
free
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
memcmp
memcpy
memcpy_s
strlen
__crtSetUnhandledExceptionFilter
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_commode
_fmode
_wcmdln
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
__C_specific_handler
_sopen_s
_close
_fstat64i32
_ftime64
_time64
_localtime64_s
_difftime64
strftime
vsprintf_s
remove
fwrite
ftell
fseek
fopen_s
fclose
atol
_errno
strrchr
strncpy_s
_strlwr_s
_stricmp
strchr
strcat_s
strcpy_s
calloc
wcscat_s
?what@exception@std@@UEBAPEBDXZ
_wassert
_endthreadex
??1exception@std@@UEAA@XZ
??1bad_cast@std@@UEAA@XZ
??0bad_cast@std@@QEAA@AEBV01@@Z
??0bad_cast@std@@QEAA@PEBD@Z
??0exception@std@@QEAA@AEBV01@@Z
??0exception@std@@QEAA@AEBQEBD@Z
tolower
mbstowcs_s
atoi
malloc
strtoul
_beginthreadex
_wcsicmp
sprintf_s
_vsnwprintf_s
memmove
wcslen
_CxxThrowException
__CxxFrameHandler3
wcscpy_s
wcsncpy_s
_putws

atl110

ord31
ord32
ord23
ord58
ord61
ord17
ord20
ord49
ord68
ord56
ord64

msvcp110

?id@?$ctype@_W@std@@2V0locale@2@A
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?_Add_vtordisp1@?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?setf@ios_base@std@@QEAAHH@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?endl@std@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@1@AEAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy
_Mtx_init
?_Swap_all@_Container_base12@std@@QEAAXAEAU12@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Orphan_all@_Container_base12@std@@QEAAXXZ
??1_Container_base12@std@@QEAA@XZ
??0_Container_base12@std@@QEAA@XZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Swap_all@_Container_base0@std@@QEAAXAEAU12@@Z
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Add_vtordisp1@?$basic_istream@DU?$char_traits@D@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??0id@locale@std@@QEAA@_K@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAPEBDH@Z
?uncaught_exception@std@@YA_NXZ
?_Orphan_all@_Container_base0@std@@QEAAXXZ
??Bios_base@std@@QEBAPEAXXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?setf@ios_base@std@@QEAAHHH@Z
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAAXXZ

iphlpapi

GetAdaptersInfo
CancelIPChangeNotify
NotifyRouteChange
NotifyAddrChange

ws2_32

ntohs
htons
htonl
WSAResetEvent
WSACloseEvent
WSAStartup
WSACreateEvent

winmm

timeBeginPeriod
timeEndPeriod

shell32

SHGetSpecialFolderPathA
SHGetKnownFolderPath
ShellExecuteExW
SHGetSpecialFolderPathW

Sections

.text
Size: 529KB - Virtual size: 528KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7oiehsx64.exe
.exe windows x64

4b12d650abe412ea18338cad6034658b

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b7:65:27:f2:a7:d8:02:7e:ff:a7:2c:48:da:89:c3:51:ac:db:79:14:c4:4f:27:7b:d9:b9:bd:13:99:fa:7e:79
Signer

Actual PE Digest

b7:65:27:f2:a7:d8:02:7e:ff:a7:2c:48:da:89:c3:51:ac:db:79:14:c4:4f:27:7b:d9:b9:bd:13:99:fa:7e:79

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

setupapi

SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

iphlpapi

GetAdaptersInfo

psapi

EnumProcesses

kernel32

CreateFileMappingA
OpenFileMappingA
LoadLibraryA
WideCharToMultiByte
QueryPerformanceFrequency
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
GetVersionExW
QueryPerformanceCounter
CreateFileA
MultiByteToWideChar
GetComputerNameA
CopyFileW
FindResourceW
QueryFullProcessImageNameW
LoadLibraryW
lstrcmpiW
SizeofResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
OpenProcess
GetCurrentThreadId
GetCurrentThread
CreateMutexExA
GetCurrentProcessId
Sleep
CreateMutexExW
OpenEventW
CreateEventW
CreateMutexW
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
RaiseException
OutputDebugStringW
GetCommandLineW
CreateEventA
WaitForSingleObject
ReleaseMutex
SetNamedPipeHandleState
DisconnectNamedPipe
SetLastError
GetLastError
WriteFile
ReadFile
CreateFileW
lstrcpynW
LocalFree
LocalAlloc
GetCurrentProcess
CloseHandle
OutputDebugStringA
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
GetTickCount64
TerminateProcess
DeviceIoControl
EnterCriticalSection
LeaveCriticalSection

user32

LoadStringW
wsprintfW
MessageBoxW
CharNextW
DispatchMessageW
PostThreadMessageW
GetMessageW

advapi32

ReportEventA
CreateWellKnownSid
FreeSid
GetTokenInformation
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
RegOpenKeyA
StartServiceW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerExW
QueryServiceStatus
QueryServiceConfig2W
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
ChangeServiceConfig2W
RegCopyTreeW
RegGetValueW
RegDeleteTreeW
RegSetKeyValueW
RegSetValueExW
RegQueryValueExA
RegQueryInfoKeyW
RegOpenKeyExA
RegEnumValueW
RegEnumKeyExW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
IsValidSid
GetSidSubAuthorityCount
GetSidSubAuthority
GetLengthSid
CopySid
OpenThreadToken
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
ReportEventW
RegisterEventSourceW
DeregisterEventSource
SetEntriesInAclW
SetSecurityDescriptorOwner
OpenProcessToken

shell32

SHGetSpecialFolderPathW
SHGetSpecialFolderPathA
ShellExecuteA
ShellExecuteExW

ole32

CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitializeEx
CoInitializeSecurity

oleaut32

VarUI4FromStr
SysFreeString

msvcr110

memmove_s
__crtSetUnhandledExceptionFilter
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_commode
_fmode
_wcmdln
_initterm
_initterm_e
__setusermatherr
memset
swprintf_s
wcscat_s
wcscpy_s
wcslen
memcpy
calloc
free
??3@YAXPEAX@Z
malloc
_recalloc
??_V@YAXPEAX@Z
memcpy_s
strcpy_s
strcat_s
strlen
wcscmp
wcsncpy_s
wcsrchr
wcsstr
_wcsicmp
vswprintf_s
_beginthreadex
_CxxThrowException
__CxxFrameHandler3
fclose
fopen_s
fseek
ftell
fwrite
remove
sprintf_s
vsprintf_s
_errno
atoi
atol
strtoul
strftime
_difftime64
_localtime64_s
_time64
strchr
_stricmp
_strlwr_s
strncpy_s
strrchr
_ftime64
_fstat64i32
_close
_sopen_s
_getcwd
_mkdir
??2@YAPEAX_K@Z
strncmp
?terminate@@YAXXZ
__C_specific_handler
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale

crypt32

CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CryptMsgGetParam
CertCompareCertificate
CryptQueryObject
CertGetCertificateChain
CertFreeCertificateChain
CryptMsgClose

imagehlp

MapFileAndCheckSumW

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7oniepg64x.dll
.dll windows x64

dbd3636e9b813139c96ff040b92e729d

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ec:10:c6:f5:50:c3:35:6c:25:28:f2:ab:18:43:53:6b:0b:9d:98:21:94:15:7d:53:5c:49:ef:c1:6a:00:8b:40
Signer

Actual PE Digest

ec:10:c6:f5:50:c3:35:6c:25:28:f2:ab:18:43:53:6b:0b:9d:98:21:94:15:7d:53:5c:49:ef:c1:6a:00:8b:40

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

iphlpapi

GetAdaptersInfo
SendARP
DeleteIPAddress
AddIPAddress
GetIpAddrTable
FlushIpNetTable

ws2_32

ntohl
inet_ntoa
htonl
inet_addr

kernel32

ReleaseMutex
WaitForSingleObject
CreateEventA
GetCurrentProcessId
ProcessIdToSessionId
CreateMutexExW
GetCurrentThreadId
CreateFileMappingW
SetNamedPipeHandleState
MapViewOfFile
UnmapViewOfFile
FreeLibrary
GetProcAddress
LoadLibraryW
WideCharToMultiByte
CreateFileA
QueryPerformanceCounter
QueryPerformanceFrequency
DeviceIoControl
CreateMutexExA
CreateFileMappingA
OpenFileMappingA
LoadLibraryA
DisconnectNamedPipe
SetLastError
GetLastError
WriteFile
ReadFile
CreateFileW
Sleep
LocalFree
LocalAlloc
GetCurrentProcess
CloseHandle
OutputDebugStringA
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
OpenFileMappingW
GetTickCount64

advapi32

CreateWellKnownSid
FreeSid
GetTokenInformation
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
RegQueryValueExA
RegOpenKeyA
ReportEventA
RegisterEventSourceW
DeregisterEventSource
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetEntriesInAclW
SetSecurityDescriptorOwner
OpenProcessToken

shell32

ShellExecuteExW
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA

msvcr110

remove
_onexit
__dllonexit
memset
memcpy
strncpy_s
strcmp
wcslen
calloc
free
wcscat_s
wcscpy_s
_beginthreadex
memcmp
wcsncat_s
wcsncpy_s
_wcsicmp
malloc
memcpy_s
strcpy_s
strcat_s
strlen
strchr
_stricmp
_strlwr_s
strrchr
_errno
atoi
atol
strtoul
fclose
fopen_s
fseek
ftell
fwrite
_calloc_crt
sprintf_s
vsprintf_s
strftime
_difftime64
_localtime64_s
_time64
_ftime64
_fstat64i32
_close
_sopen_s
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
__C_specific_handler
_lock
_unlock
__clean_type_info_names_internal

Exports

Exports

?IE_SendArpEx@@YAKKKKPEAEPEAK@Z
CheckIPAddressAndSubnetMask
CheckIfIPAddressIsAuto
CheckIsIPAddressFree
CloseServer
DeletePGIPAddress
GetAdapterInfo
GetMacAddress
GetMacAddressSubnet
GetPGIPAddressList
IE_AddIPAddressEx
IE_DeleteIPAddressEx
IsReachable
SCI_time
SCP_close
SCP_get_errno
SCP_openW
SCP_receive
SCP_send
SearchAndSetPGIPAddress
SearchForFreeIPAddress
SetNetworkIPAddress
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7onlinx64.dll
.dll windows x64

d8ecc00d6bb2c7383a8a8849b8df1bf8

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

68:94:93:3f:16:a9:fa:6d:a7:6c:c2:66:3c:58:9c:cb:c0:7e:b3:a9:88:54:b7:e9:8a:46:68:16:a2:79:1b:13
Signer

Actual PE Digest

68:94:93:3f:16:a9:fa:6d:a7:6c:c2:66:3c:58:9c:cb:c0:7e:b3:a9:88:54:b7:e9:8a:46:68:16:a2:79:1b:13

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

setupapi

SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

kernel32

DisconnectNamedPipe
SetNamedPipeHandleState
CreateEventA
ProcessIdToSessionId
CreateMutexW
CreateTimerQueueTimer
FreeLibrary
GetProcAddress
LoadLibraryW
CreateMutexExW
Sleep
ExitProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateFileMappingW
OpenFileMappingW
WriteFile
UnmapViewOfFile
GetModuleFileNameA
GetModuleHandleW
lstrcmpiA
lstrcmpiW
CreateSemaphoreW
K32EnumProcesses
CreateFileA
QueryPerformanceCounter
QueryPerformanceFrequency
CreateMutexExA
CreateFileMappingA
OpenFileMappingA
LoadLibraryA
WideCharToMultiByte
EncodePointer
ReadFile
WaitForMultipleObjects
GetCurrentThreadId
GetCurrentProcessId
GetTickCount64
CreateEventW
WaitForSingleObject
ReleaseMutex
ReleaseSemaphore
SetEvent
CancelIo
DeviceIoControl
GetOverlappedResult
SetLastError
GetLastError
CreateFileW
LocalFree
LocalAlloc
GetCurrentProcess
CloseHandle
OutputDebugStringA
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
MapViewOfFile

user32

wsprintfA
TranslateMessage
DispatchMessageW
PeekMessageW
DefWindowProcW
PostQuitMessage
RegisterClassW
UnregisterClassW
CreateWindowExW
PostMessageW
IsWindow
DestroyWindow
MsgWaitForMultipleObjects
MessageBoxW

advapi32

RegisterEventSourceW
ControlService
CloseServiceHandle
SetEntriesInAclW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetTokenInformation
FreeSid
CreateWellKnownSid
OpenProcessToken
OpenServiceW
QueryServiceConfigW
QueryServiceStatus
StartServiceW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
GetUserNameA
DeregisterEventSource
ReportEventA
RegOpenKeyA
RegQueryValueExA
OpenSCManagerW

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
ShellExecuteExW

msvcr110

__crtCapturePreviousContext
__CppXcptFilter
_amsg_exit
strchr
__crtCaptureCurrentContext
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
_initterm_e
_initterm
memset
_purecall
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
memcpy
strlen
memmove
_CxxThrowException
__CxxFrameHandler3
wcscat_s
wcscpy_s
wcslen
_wcsicmp
free
malloc
calloc
memcmp
wcsncpy_s
wcstoul
__C_specific_handler
towlower
memcpy_s
strcpy_s
strncpy_s
strrchr
wcschr
wcscmp
wcsstr
wcstok_s
_wcsnicmp
_errno
_vswprintf_c_l
_beginthreadex
_endthreadex
strcat_s
__crtTerminateProcess
_stricmp
_strlwr_s
atoi
atol
strtoul
fclose
fopen_s
fseek
ftell
fwrite
remove
sprintf_s
vsprintf_s
strftime
_difftime64
_localtime64_s
_time64
_ftime64
_fstat64i32
_close
_sopen_s
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__crt_debugger_hook
__crtUnhandledException
_malloc_crt

msvcp110

?_Winerror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??0id@locale@std@@QEAA@_K@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Xbad_alloc@std@@YAXXZ

Exports

Exports

OnlDll_CheckDevOpen
OnlDll_IsSimulationOn
OnlDll_SimulationOnOff
OnlDll_SimulationOnOffCheck
OnlDll_SimulationOnOffSetMsg
OnlDll_TunnelSwitchCheck
OnlDll_TunnelSwitchOnOff
SCP_close
SCP_get_errno
SCP_openW
SCP_open_async
SCP_receive
SCP_send
SCP_send_receive
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7ontcp.dll
.dll windows x64

60f393e45ddfac9d83fa4fd710e052d2

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7f:68:1a:02:92:c0:18:15:0a:5e:22:f1:12:e9:68:5a:cd:1c:1e:e3:51:8a:c7:0f:17:dd:65:f0:99:a2:22:05
Signer

Actual PE Digest

7f:68:1a:02:92:c0:18:15:0a:5e:22:f1:12:e9:68:5a:cd:1c:1e:e3:51:8a:c7:0f:17:dd:65:f0:99:a2:22:05

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

04/05/2020, 07:30
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

s7epaapi64x

LogDeviceGetValue

ws2_32

WSAIoctl
getpeername
setsockopt
recv
getsockname
accept
WSACancelBlockingCall
WSAIsBlocking
gethostbyname
sendto
select
recvfrom
ntohl
htonl
WSASocketA
socket
send
ntohs
listen
inet_ntoa
inet_addr
htons
getsockopt
connect
bind
WSACleanup
WSAStartup
closesocket
WSAAsyncSelect
WSAGetLastError
shutdown

iphlpapi

GetAdaptersAddresses
GetAdaptersInfo

kernel32

GetStdHandle
GetFileType
CloseHandle
GetLastError
VerSetConditionMask
OutputDebugStringA
DuplicateHandle
SetLastError
SetEvent
ReleaseMutex
WaitForSingleObject
CreateMutexA
CreateEventA
OpenEventA
Sleep
GetCurrentProcessId
GetCurrentThreadId
SetThreadPriority
OpenProcess
GetTickCount
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
LocalAlloc
LocalFree
CreateFileMappingA
OpenFileMappingA
VerifyVersionInfoW
MultiByteToWideChar
CreateFileA
WriteFile
SetNamedPipeHandleState
WaitNamedPipeA
InitializeCriticalSection
GetDateFormatW
LeaveCriticalSection
DeleteCriticalSection
HeapAlloc
HeapFree
GetProcessHeap
FreeLibrary
GetProcAddress
OpenMutexA
LoadLibraryA
WideCharToMultiByte
GetEnvironmentVariableA
CreateDirectoryA
DeleteFileA
GetDiskFreeSpaceExA
SetFilePointer
OutputDebugStringW
GetCurrentProcess
GetLocalTime
GetVersionExA
GetModuleHandleA
WaitForMultipleObjects
lstrlenA
GetACP
GetCurrentThread
GetModuleFileNameW
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileExW
FindClose
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetConsoleCtrlHandler
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
WaitForSingleObjectEx
CreateFileW
EnterCriticalSection
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetStringTypeW

user32

SetTimer
DestroyWindow
IsWindow
CreateWindowExA
UnregisterClassA
RegisterClassA
PostQuitMessage
DefWindowProcA
PostMessageA
DispatchMessageA
TranslateMessage
GetMessageA
KillTimer

advapi32

RegDeleteValueA
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
DeregisterEventSource
CryptEncrypt
CryptImportKey
CryptExportKey
CryptDestroyKey
CryptGenKey
CryptReleaseContext
CryptAcquireContextA
RegSetValueExA
RegEnumKeyExA
CreateWellKnownSid
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExW
RegOpenKeyW
SetEntriesInAclA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ReportEventA
RegisterEventSourceA

crypt32

CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertOpenStore
CertGetCertificateContextProperty

Exports

Exports

CloseThreads
GetLicenseCounters
SCI_time
SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg
StartThreads

Sections

.text
Size: 437KB - Virtual size: 437KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7opnio64x.dll
.dll windows x64

47e0a544760cf5a9675a3ff6ff081fde

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

87:fc:bb:9a:b3:61:83:5f:b0:f0:78:c7:dd:68:2d:2b:b5:a7:17:87:d4:6e:3e:fc:66:33:88:17:58:46:b4:d4
Signer

Actual PE Digest

87:fc:bb:9a:b3:61:83:5f:b0:f0:78:c7:dd:68:2d:2b:b5:a7:17:87:d4:6e:3e:fc:66:33:88:17:58:46:b4:d4

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:46
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

rpcrt4

UuidCreate

kernel32

DeleteCriticalSection
SetEvent
GetCurrentProcessId
GetModuleFileNameA
WideCharToMultiByte
CreateFileA
QueryPerformanceCounter
QueryPerformanceFrequency
DeviceIoControl
ReleaseMutex
CreateMutexExA
InitializeCriticalSection
MapViewOfFile
UnmapViewOfFile
GetProcAddress
LocalAlloc
LocalFree
CreateFileMappingA
OpenFileMappingA
LoadLibraryA
GetSystemTimeAsFileTime
DecodePointer
OutputDebugStringA
Sleep
CreateEventW
WaitForSingleObject
ResetEvent
LeaveCriticalSection
EnterCriticalSection
GetLastError
CloseHandle
IsProcessorFeaturePresent
GetCurrentThreadId
GetTickCount64
EncodePointer
IsDebuggerPresent

user32

wsprintfA

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey
ReportEventA
RegisterEventSourceW
DeregisterEventSource
FreeSid
CreateWellKnownSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW

shell32

SHGetSpecialFolderPathA

s7oclrpcproxy64

PnBaseRpcClCancel
PnBaseRpcClQueryEpmUnbind
PnBaseRpcClUnbind
PnBaseRpcClBind
PnBaseRpcClQueryEpmNext
PnBaseRpcClOpen
PnBaseRpcClCall
PnBaseRpcClQueryEpmBind
PnBaseRpcClClose

msvcr110

_initterm
__clean_type_info_names_internal
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
__C_specific_handler
_malloc_crt
memcpy
memset
strlen
calloc
free
sscanf_s
_stricmp
memcpy_s
strcpy_s
strcat_s
strchr
_strlwr_s
strncpy_s
strrchr
_errno
atoi
atol
strtoul
fclose
fopen_s
fseek
ftell
fwrite
remove
sprintf_s
vsprintf_s
strftime
_difftime64
_localtime64_s
_time64
_ftime64
_fstat64i32
_close
_sopen_s
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__CppXcptFilter
_amsg_exit
_initterm_e

Exports

Exports

SCP_close
SCP_get_errno
SCP_openW
SCP_receive
SCP_send
SCP_send_receive
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7osoinx64.dll
.dll windows x64

16d77e13eaba174174f5ac3531643acf

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8a:39:74:0b:63:85:b9:7d:d5:99:c2:18:02:cb:cd:cb:87:a9:16:d1:e5:ea:b6:69:c0:80:46:2b:9c:1b:4c:d6
Signer

Actual PE Digest

8a:39:74:0b:63:85:b9:7d:d5:99:c2:18:02:cb:cd:cb:87:a9:16:d1:e5:ea:b6:69:c0:80:46:2b:9c:1b:4c:d6

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:46
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

LocalFree
GetModuleHandleW
OpenFileMappingA
GetModuleFileNameA
GetCurrentProcessId
CloseHandle
ReleaseMutex
GetCurrentThreadId
OutputDebugStringA
QueryPerformanceFrequency
DeviceIoControl
LocalAlloc
CreateFileMappingA
LoadLibraryA
CreateMutexExA
GetProcAddress
GetLastError
WaitForSingleObject
QueryPerformanceCounter
UnmapViewOfFile
MapViewOfFile
CreateMutexExW
CreateFileA
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime

advapi32

RegOpenKeyExW
QueryServiceStatusEx
RegDeleteKeyW
RegOpenKeyW
RegQueryValueExW
OpenServiceW
OpenSCManagerW
CreateWellKnownSid
RegCloseKey
RegOpenKeyA
FreeSid
SetEntriesInAclW
ReportEventA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
DeregisterEventSource
RegQueryValueExA
RegisterEventSourceW
RegEnumKeyExW

shell32

SHGetSpecialFolderPathA

s7epaapi64x

LogDeviceGetValue
PGSP_CheckDevOpen
LogDeviceCreateFromDef
LogDeviceExists
LogDeviceDel
LogDeviceSetValue

s7onlinx64

SCP_openW
SCP_send
SCP_get_errno
SCP_receive
SCP_close

msvcr110

fclose
__clean_type_info_names_internal
_onexit
__dllonexit
_lock
__C_specific_handler
_initterm_e
_calloc_crt
_initterm
_stricmp
sprintf_s
_strlwr_s
_fstat64i32
_localtime64_s
strchr
atoi
_errno
remove
fopen_s
vsprintf_s
strcpy_s
_ftime64
strftime
memcpy_s
_sopen_s
fwrite
strrchr
ftell
atol
strtoul
strcat_s
fseek
_malloc_crt
_difftime64
strncpy_s
_time64
_close
_wcsnicmp
vswprintf_s
wcstol
wcscpy_s
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__CppXcptFilter
_amsg_exit
free
_unlock

Exports

Exports

SoinChangeDriverConfig
SoinCleanupSoftbus
SoinCreateSoftDevice
SoinDeleteSoftDevice
SoinGetDriverState
SoinGetOpenState
SoinGetStaticBindings
SoinGetVmdidList

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7osuas64x.exe
.exe windows x64

800b2d4e13f747954e7e4639b86f26f7

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

da:bd:3f:73:28:0f:cf:4b:99:e8:24:63:9f:34:82:6d:47:73:14:bf:a6:e9:86:9b:05:ff:da:8f:a2:e8:c1:c9
Signer

Actual PE Digest

da:bd:3f:73:28:0f:cf:4b:99:e8:24:63:9f:34:82:6d:47:73:14:bf:a6:e9:86:9b:05:ff:da:8f:a2:e8:c1:c9

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

LocalAlloc
LocalFree
CreateFileMappingA
GetProcAddress
LoadLibraryA
WideCharToMultiByte
UnmapViewOfFile
MapViewOfFile
GetCurrentThreadId
GetCurrentProcessId
CreateMutexExA
WaitForSingleObject
ReleaseMutex
DeviceIoControl
QueryPerformanceFrequency
QueryPerformanceCounter
CloseHandle
OutputDebugStringA
CreateFileA
Sleep
GetLastError
OpenFileMappingA
ExpandEnvironmentStringsA
GetSystemTimeAsFileTime
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey
ReportEventA
RegisterEventSourceW
DeregisterEventSource
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
FreeSid
CreateWellKnownSid
QueryServiceStatus
OpenServiceA
OpenSCManagerW
ControlService
CloseServiceHandle
SetEntriesInAclW

shell32

SHGetSpecialFolderPathA

msvcr110

fopen_s
fprintf
sprintf_s
vsprintf_s
strftime
_localtime64_s
_ftime64
memcpy_s
memset
fflush
strlen
strchr
_stricmp
_strlwr_s
strncpy_s
strrchr
_errno
atoi
atol
strtoul
fseek
ftell
fwrite
remove
_difftime64
_time64
_fstat64i32
_close
_sopen_s
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__getmainargs
__set_app_type
exit
_exit
_cexit
_ismbblead
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
__C_specific_handler
_acmdln
_fmode
_commode
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
fclose
strcat_s
strcpy_s

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7otsclx64.dll
.dll windows x64

a543bfcc984f549cf2e7606735b522c3

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:ce:0f:c4:9b:81:90:f3:73:ce:e9:51:f4:ec:de:78:9a:ec:10:8f:83:c2:7c:8f:e6:60:2f:bc:ee:23:69:ee
Signer

Actual PE Digest

45:ce:0f:c4:9b:81:90:f3:73:ce:e9:51:f4:ec:de:78:9a:ec:10:8f:83:c2:7c:8f:e6:60:2f:bc:ee:23:69:ee

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

wsock32

WSAGetLastError
WSACleanup
WSAStartup
gethostbyname
socket
setsockopt
send
recv
inet_addr
ioctlsocket
htons
getsockopt
connect
closesocket

kernel32

EncodePointer
DecodePointer
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
CreateFileA
OutputDebugStringA
CloseHandle
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
DeviceIoControl
ReleaseMutex
WaitForSingleObject
CreateMutexExA
GetCurrentProcessId
GetCurrentThreadId
MapViewOfFile
UnmapViewOfFile
GetProcAddress
CreateFileMappingA
LoadLibraryA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateMutexA
CreateEventA
Sleep
CreateThread
PulseEvent
GetTickCount64

user32

PostMessageA

advapi32

RegisterEventSourceA
ReportEventA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
DeregisterEventSource

shell32

SHGetSpecialFolderPathA

msvcr110

_initterm
_malloc_crt
__C_specific_handler
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
_initterm_e
_amsg_exit
__CppXcptFilter
memcpy
memcpy_s
memset
strcpy_s
strcat_s
strlen
strchr
_stricmp
_strlwr_s
strncpy_s
strrchr
_errno
atoi
atol
strtoul
fclose
fopen_s
fseek
ftell
fwrite
remove
sprintf_s
vsprintf_s
strftime
_difftime64
_localtime64_s
_time64
_ftime64
_fstat64i32
_close
_sopen_s
wcscpy_s
free
malloc
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext

Exports

Exports

SCI_conv_time
SCI_time
SCP_close
SCP_get_dev_list
SCP_get_errno
SCP_openW
SCP_open_params
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.shdata
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7otsiex64.dll
.dll windows x64

3601cd345741fa43dbeb3e6f7780ee27

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

18:d4:37:3a:71:72:09:86:97:31:e5:2d:c7:9f:b9:c6:49:21:aa:d5:1b:f3:b3:09:6f:56:18:78:d9:2c:a9:73
Signer

Actual PE Digest

18:d4:37:3a:71:72:09:86:97:31:e5:2d:c7:9f:b9:c6:49:21:aa:d5:1b:f3:b3:09:6f:56:18:78:d9:2c:a9:73

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
CreateFileMappingA
LoadLibraryA
CreateMutexA
UnmapViewOfFile
FreeLibrary
OpenFileMappingA
GetSystemTimeAsFileTime
DecodePointer
MapViewOfFile
GetCurrentThreadId
GetCurrentProcessId
CreateMutexExA
WaitForSingleObject
ReleaseMutex
DeviceIoControl
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
CreateFileA
LocalFree
LocalAlloc
GetCurrentProcess
CloseHandle
OpenProcess
OutputDebugStringA
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
GetTickCount64

user32

PostMessageA

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey
ReportEventA
RegisterEventSourceA
DeregisterEventSource
SetEntriesInAclA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetTokenInformation
FreeSid
CreateWellKnownSid
OpenProcessToken
RegOpenKeyExA

shell32

SHGetSpecialFolderPathA

msvcr110

memcpy_s
strcpy_s
strcat_s
strlen
memcpy
_stricmp
_strlwr_s
strncpy_s
strrchr
_errno
atoi
atol
strtoul
fclose
fopen_s
fseek
ftell
fwrite
remove
sprintf_s
vsprintf_s
strftime
_difftime64
_localtime64_s
_time64
_ftime64
_fstat64i32
_close
_sopen_s
wcscpy_s
free
malloc
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
__C_specific_handler
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
memset
strchr

Exports

Exports

SCI_time
SCP_close
SCP_get_errno
SCP_openW
SCP_open_ext
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7otspsx64.dll
.dll windows x64

387a1690d1fbb277e23e09f0766c04bb

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

78:58:8c:91:73:27:45:08:70:ff:39:0d:43:3b:30:03:6b:e6:89:3b:f2:91:19:ee:90:62:98:44:b0:f4:3e:ef
Signer

Actual PE Digest

78:58:8c:91:73:27:45:08:70:ff:39:0d:43:3b:30:03:6b:e6:89:3b:f2:91:19:ee:90:62:98:44:b0:f4:3e:ef

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCurrentProcessId
GetCurrentThreadId
MapViewOfFile
UnmapViewOfFile
CreateMutexExA
CreateFileMappingA
LoadLibraryA
FreeLibrary
WaitForSingleObject
ReleaseMutex
DeviceIoControl
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
CloseHandle
OutputDebugStringA
GetProcAddress
CreateFileA
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
GetTickCount64

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA
RegOpenKeyA
RegCloseKey
ReportEventA
RegisterEventSourceA
DeregisterEventSource
RegOpenKeyExA

shell32

SHGetSpecialFolderPathA

msvcr110

strcat_s
strlen
strchr
_stricmp
_strlwr_s
strncpy_s
strrchr
_errno
strcpy_s
atol
strtoul
fclose
fopen_s
fseek
ftell
fwrite
remove
sprintf_s
vsprintf_s
strftime
_difftime64
_localtime64_s
_time64
_ftime64
_fstat64i32
_close
_sopen_s
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
__C_specific_handler
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
memset
memcpy_s
memcpy
atoi

Exports

Exports

SCI_time
SCP_close
SCP_get_errno
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7otstsx64.dll
.dll windows x64

387a1690d1fbb277e23e09f0766c04bb

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c2:f6:0f:ac:eb:44:cf:14:3b:77:d1:20:1b:10:81:99:b4:aa:a5:69:9a:36:36:75:33:a0:5e:41:dc:91:22:ae
Signer

Actual PE Digest

c2:f6:0f:ac:eb:44:cf:14:3b:77:d1:20:1b:10:81:99:b4:aa:a5:69:9a:36:36:75:33:a0:5e:41:dc:91:22:ae

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCurrentProcessId
GetCurrentThreadId
MapViewOfFile
UnmapViewOfFile
CreateMutexExA
CreateFileMappingA
LoadLibraryA
FreeLibrary
WaitForSingleObject
ReleaseMutex
DeviceIoControl
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
CloseHandle
OutputDebugStringA
GetProcAddress
CreateFileA
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
GetTickCount64

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA
RegOpenKeyA
RegCloseKey
ReportEventA
RegisterEventSourceA
DeregisterEventSource
RegOpenKeyExA

shell32

SHGetSpecialFolderPathA

msvcr110

strcat_s
strlen
strchr
_stricmp
_strlwr_s
strncpy_s
strrchr
_errno
strcpy_s
atol
strtoul
fclose
fopen_s
fseek
ftell
fwrite
remove
sprintf_s
vsprintf_s
strftime
_difftime64
_localtime64_s
_time64
_ftime64
_fstat64i32
_close
_sopen_s
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
__C_specific_handler
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
memset
memcpy_s
memcpy
atoi

Exports

Exports

SCI_time
SCP_close
SCP_get_errno
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7ousbpx64.dll
.dll windows x64

407b7928ca4f5ae554d8295cda29bc7b

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9a:9a:b2:78:ce:4c:39:c0:72:f1:cc:1b:f7:4c:39:3e:b8:41:90:5f:b3:68:69:da:70:59:d2:51:eb:b6:80:05
Signer

Actual PE Digest

9a:9a:b2:78:ce:4c:39:c0:72:f1:cc:1b:f7:4c:39:3e:b8:41:90:5f:b3:68:69:da:70:59:d2:51:eb:b6:80:05

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCurrentThreadId
MapViewOfFile
UnmapViewOfFile
GetProcAddress
CreateFileMappingA
LoadLibraryA
ReadFile
WriteFile
CreateEventA
GetCurrentProcessId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetVersionExA
LocalAlloc
LocalFree
GetSystemTimeAsFileTime
DecodePointer
CreateMutexExA
WaitForSingleObject
ReleaseMutex
DeviceIoControl
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
CloseHandle
OutputDebugStringA
ExitProcess
CreateFileA
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
GetTickCount64

user32

MessageBoxA

advapi32

RegSetValueExA
RegOpenKeyExA
RegEnumValueA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
ReportEventA
RegisterEventSourceA
DeregisterEventSource
CloseServiceHandle

shell32

SHGetSpecialFolderPathA

msvcr110

memset
strcpy_s
strcat_s
strlen
strchr
_stricmp
_strlwr_s
memcpy_s
strrchr
_errno
atoi
atol
strtoul
fclose
fopen_s
fseek
ftell
fwrite
remove
sprintf_s
vsprintf_s
strftime
_difftime64
_localtime64_s
_time64
_ftime64
_fstat64i32
_close
_sopen_s
wcscmp
wcslen
wcsncmp
strtol
free
malloc
sprintf
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
__C_specific_handler
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
memcpy
strncpy_s

Exports

Exports

SCI_time
SCP_close
SCP_get_errno
SCP_openW
SCP_receive
SCP_receive_S5
SCP_send
SCP_send_S5
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7owpstx.dll
.dll windows x64

3311e082695fdfd193481a0c144a9fcd

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:64:fd:9a:5c:33:30:3e:ba:f6:9c:4f:3d:9c:d4:ef:e8:45:bd:f5:cc:ce:6c:8d:92:a2:e1:42:fd:d6:6b:17
Signer

Actual PE Digest

30:64:fd:9a:5c:33:30:3e:ba:f6:9c:4f:3d:9c:d4:ef:e8:45:bd:f5:cc:ce:6c:8d:92:a2:e1:42:fd:d6:6b:17

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:47
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

s7epaapi64x

LogDeviceGetValue

kernel32

UnmapViewOfFile
GetProcAddress
CreateFileMappingA
OpenFileMappingA
LoadLibraryA
WideCharToMultiByte
SetEvent
ResetEvent
CreateEventW
Sleep
ProcessIdToSessionId
GetSystemInfo
DisableThreadLibraryCalls
FreeLibrary
GetModuleFileNameW
lstrlenA
LoadLibraryW
MultiByteToWideChar
WaitForMultipleObjects
MapViewOfFile
OutputDebugStringA
CloseHandle
GetCurrentProcess
LocalAlloc
lstrlenW
GetTickCount64
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
LocalFree
ReleaseMutex
WaitForSingleObject
CreateMutexExW
GetTickCount
CreateFileA
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentProcessId
GetCurrentThreadId
CreateMutexExA
DeviceIoControl

user32

GetUserObjectInformationW
PeekMessageW
PostMessageW
GetProcessWindowStation
DispatchMessageW
GetMessageW
TranslateMessage
SetWindowLongPtrW
GetWindowLongPtrW
UpdateWindow
ShowWindow
SendMessageW
DefWindowProcW
ValidateRect
DestroyWindow
CreateWindowExW
UnregisterClassW
RegisterClassW
PostQuitMessage
wsprintfA

gdi32

GetStockObject

advapi32

RegOpenKeyExW
RegQueryValueExA
RegOpenKeyA
RegCloseKey
ReportEventA
RegisterEventSourceW
DeregisterEventSource
SetEntriesInAclW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetTokenInformation
FreeSid
CreateWellKnownSid
OpenProcessToken
RegQueryValueExW

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderPathW

ole32

CoInitializeEx
CLSIDFromString
CoCreateInstance
CLSIDFromProgID
OleRun
CoUninitialize

oleaut32

SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayRedim
SafeArrayCreate
GetErrorInfo
VariantInit
VariantClear
VariantChangeType
SetErrorInfo
SysFreeString
CreateErrorInfo

msvcr110

strncpy_s
strrchr
_errno
atoi
atol
strtoul
fclose
fopen_s
fseek
ftell
fwrite
remove
vsprintf_s
strftime
_difftime64
_localtime64_s
_time64
_ftime64
_fstat64i32
_close
_sopen_s
_purecall
memmove
wcsncpy_s
wcsstr
vswprintf_s
_beginthreadex
_endthreadex
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
__C_specific_handler
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__clean_type_info_names_internal
_stricmp
strcat_s
strcpy_s
swprintf_s
_wcsnicmp
wcslen
strlen
sprintf_s
wcscpy_s
wcscmp
wcscat_s
_strlwr_s
__CxxFrameHandler3
??_V@YAXPEAX@Z
??_U@YAPEAX_K@Z
?terminate@@YAXXZ
malloc
free
calloc
memcpy_s
memcpy
memcmp
??2@YAPEAX_K@Z
_CxxThrowException
??3@YAXPEAX@Z
memset
strchr

msvcp110

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_BADOFF@std@@3_JB
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Winerror_map@std@@YAPEBDH@Z
?_Syserror_map@std@@YAPEBDH@Z
_Cnd_signal
_Cnd_broadcast
_Cnd_timedwait
_Cnd_wait
_Cnd_destroy
_Cnd_init
_Mtx_timedlock
_Mtx_current_owns
_Thrd_lt
_Xtime_get_ticks
?_Xout_of_range@std@@YAXPEBD@Z
?_Release@_Pad@std@@QEAAXXZ
?_Launch@_Pad@std@@QEAAXPEAU_Thrd_imp_t@@@Z
??1_Pad@std@@QEAA@XZ
??0_Pad@std@@QEAA@XZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy
_Mtx_init
_Thrd_current
_Thrd_equal
_Thrd_join
?_Xlength_error@std@@YAXPEBD@Z
??0id@locale@std@@QEAA@_K@Z
?_Xbad_alloc@std@@YAXXZ

Exports

Exports

SCP_close
SCP_get_errno
SCP_open
SCP_openW
SCP_receive
SCP_send
SetSinecHWnd
SetSinecHWndMsg

Sections

.text
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\s7pcadpsrv.dll
.dll windows x64

0bb8161c3df767341517be649d3e54cf

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:9c:a0:54:ae:7b:19:bd:20:ad:08:82:31:a8:8b:54:15:df:c6:4e:d5:2c:fb:2b:18:b7:91:06:8e:0c:36:2b
Signer

Actual PE Digest

dc:9c:a0:54:ae:7b:19:bd:20:ad:08:82:31:a8:8b:54:15:df:c6:4e:d5:2c:fb:2b:18:b7:91:06:8e:0c:36:2b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

OpenFileMappingW
OpenEventW
GetLocalTime
GetCurrentProcessId
LocalAlloc
LoadLibraryA
CreateFileMappingW
lstrlenW
RegisterWaitForSingleObject
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
OpenMutexW
UnmapViewOfFile
MapViewOfFile
CreateMutexW
DebugBreak
OutputDebugStringA
OutputDebugStringW
WaitForMultipleObjects
ResetEvent
GetTempPathW
CreateFileW
LoadLibraryW
GetSystemDirectoryW
CreateDirectoryW
CreateProcessW
GetCurrentProcessorNumber
GetProcAddress
GetModuleFileNameW
GetModuleHandleW
GetCurrentProcess
WideCharToMultiByte
FormatMessageA
GetSystemTime
GetCurrentThreadId
CreateEventW
Sleep
SetEvent
WaitForSingleObject
CloseHandle
LocalFree
FileTimeToLocalFileTime
GetLastError
FileTimeToSystemTime
FormatMessageW
LoadLibraryExW
FreeLibrary
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsWow64Process
InitializeCriticalSection
SignalObjectAndWait
WriteConsoleW
SetStdHandle
UnregisterWait
GetThreadPriority
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
MultiByteToWideChar
GetStringTypeW
DuplicateHandle
GetCurrentThread
GetExitCodeThread
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
HeapFree
GetCommandLineA
HeapReAlloc
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
HeapAlloc
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
CreateThread
ExitThread
TlsGetValue
CreateTimerQueueTimer
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
TlsAlloc
TlsSetValue
TlsFree
GetStartupInfoW
CreateSemaphoreW
CreateTimerQueue
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
ExitProcess
GetModuleHandleExW
HeapSize
GetStdHandle
WriteFile
GetProcessHeap
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask
SwitchToThread
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
SetThreadPriority
GetTickCount
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect
GetConsoleCP

user32

UnregisterDeviceNotification
RegisterDeviceNotificationW
MessageBoxW

advapi32

FreeSid
SetEntriesInAclW
CloseEventLog
ControlService
ReportEventW
RegisterServiceCtrlHandlerW
QueryServiceStatusEx
ReadEventLogW
StartServiceW
GetNumberOfEventLogRecords
GetOldestEventLogRecord
NotifyChangeEventLog
DeregisterEventSource
RegCreateKeyExW
OpenServiceW
OpenEventLogW
OpenSCManagerW
DeleteService
CloseServiceHandle
RegisterEventSourceW
CreateServiceW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegisterTraceGuidsW
GetTraceEnableLevel
UnregisterTraceGuids
GetTraceLoggerHandle
GetTraceEnableFlags
TraceMessage
CreateWellKnownSid

shell32

SHGetKnownFolderPath
SHGetSpecialFolderPathW

ole32

OleRun
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoUninitialize

oleaut32

VariantClear
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayDestroy
GetErrorInfo

Exports

Exports

s7pcadpsrv_cleanup
s7pcadpsrv_init
s7pcadpsrv_service_ctrl_handler

Sections

.text
Size: 585KB - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\sn_netcfg.dll
.dll windows x64

174e9a19042a551aa1638902d21e14b1

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ab:74:cd:48:6a:62:40:7b:cf:b8:a9:53:88:f2:d8:ba:13:d7:41:71:33:c5:46:ad:85:36:49:18:fc:8a:62:26
Signer

Actual PE Digest

ab:74:cd:48:6a:62:40:7b:cf:b8:a9:53:88:f2:d8:ba:13:d7:41:71:33:c5:46:ad:85:36:49:18:fc:8a:62:26

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

WSASocketA
ntohl
closesocket
inet_addr
WSAStartup
WSACleanup
inet_ntoa
WSAIoctl

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

iphlpapi

GetAdaptersAddresses
GetAdaptersInfo
ConvertLengthToIpv4Mask

crypt32

CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CertOpenStore
CertGetCertificateContextProperty

s7epaapi64x

TemplateGetValue
TemplateExists
LogDeviceSetValue
LogDeviceExists
LogDeviceGetValue

kernel32

MultiByteToWideChar
GetCurrentProcess
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA
WideCharToMultiByte
GetEnvironmentVariableA
CreateDirectoryA
CreateFileA
DeleteFileA
GetDiskFreeSpaceExA
SetFilePointer
WriteFile
OutputDebugStringA
GlobalFree
CloseHandle
SetLastError
SetEvent
GlobalAlloc
WaitForSingleObject
CreateMutexA
CreateEventA
OpenEventA
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
GetVersionExA
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
LocalAlloc
LocalFree
WaitForMultipleObjects
lstrlenA
OpenMutexA
CreateFileMappingA
OpenFileMappingA
IsValidLocale
GetLocaleInfoW
GetLastError
GetUserDefaultLCID
EnumSystemLocalesW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
ReleaseMutex
SetConsoleCtrlHandler
LoadLibraryW
GetConsoleCP
GetConsoleMode
SetEnvironmentVariableA
SetFilePointerEx
HeapReAlloc
GetTimeZoneInformation
HeapSize
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
OutputDebugStringW
FatalAppExitA
LeaveCriticalSection
HeapFree
IsDebuggerPresent
IsProcessorFeaturePresent
HeapAlloc
EncodePointer
DecodePointer
CreateThread
ExitThread
LoadLibraryExW
FindClose
FindFirstFileExA
FindNextFileA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetCommandLineA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThread
GetProcessHeap
GetStringTypeW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
GetStdHandle
GetModuleFileNameW
Sleep
RtlUnwindEx
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection

user32

wsprintfA

advapi32

RegQueryValueExW
SetEntriesInAclA
CryptEncrypt
CryptImportKey
CryptExportKey
CryptDestroyKey
CryptGenKey
CryptReleaseContext
CryptAcquireContextA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
FreeSid
CreateWellKnownSid
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey

oleaut32

SysAllocStringLen

Exports

Exports

IECNV_SNTCP_CnRqTimeout
IECNV_SNTCP_DefaultGateway
IECNV_SNTCP_FastAck
IECNV_SNTCP_IpAddress
IECNV_SNTCP_IpAddressWithIndex
IECNV_SNTCP_KeepAliveOn
IECNV_SNTCP_KeepAliveTime
IECNV_SNTCP_SubnetMask
IECNV_SNTCP_SubnetMaskWithIndex
IECNV_SN_IMData
SNIETcpCfg
SNIETcpCfgDiag

Sections

.text
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 323KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\sn_regbase.dll
.dll windows x64

de75ab31fb10c179babf028361c69147

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c0:a2:5f:ac:ee:2d:62:25:9d:12:9a:93:77:12:fe:24:0c:cd:a3:e1:e2:6f:cd:93:ac:84:bd:96:14:28:2e:fb
Signer

Actual PE Digest

c0:a2:5f:ac:ee:2d:62:25:9d:12:9a:93:77:12:fe:24:0c:cd:a3:e1:e2:6f:cd:93:ac:84:bd:96:14:28:2e:fb

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:58
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mfc110u

ord7928
ord12376
ord7868
ord5059
ord2385
ord12055
ord12056
ord14030
ord7498
ord14036
ord8939
ord3952
ord3890
ord12457
ord7516
ord1962
ord11502
ord11503
ord13909
ord12045
ord8011
ord14108
ord5991
ord14110
ord5993
ord14109
ord5992
ord3673
ord5577
ord11759
ord11767
ord7765
ord9969
ord11771
ord11739
ord12438
ord4959
ord5239
ord5427
ord8891
ord5215
ord5430
ord7566
ord4962
ord5105
ord4943
ord7310
ord7311
ord7301
ord5103
ord7767
ord9786
ord8750
ord6477
ord4384
ord7563
ord1032
ord322
ord1441
ord977
ord7245
ord316
ord4830
ord310
ord1028
ord1501
ord1622
ord1492
ord1420
ord957
ord1480
ord4828
ord286
ord296
ord1027
ord3670
ord1483
ord323
ord1033
ord2273
ord2160
ord2315
ord2318
ord2284
ord2317
ord472
ord2182
ord2282
ord2111
ord2214
ord2306
ord1494
ord266
ord265
ord1482

msvcr110

__clean_type_info_names_internal
_wcsnicmp
strncpy
_wgetenv
_wcsupr
_strupr
wcschr
wcstok
_wcsicmp
memmove
wcscpy_s
memset
strcat_s
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
strrchr
_findfirst64i32
memcpy_s
strcpy_s
wcsstr
_findclose
vsprintf_s
strstr
malloc
free
_snprintf_s
sprintf_s
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
__C_specific_handler
_vsnprintf_s
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
__CxxFrameHandler3
_purecall
realloc
strchr
??0bad_cast@std@@QEAA@PEBD@Z
??1bad_cast@std@@UEAA@XZ
??0bad_cast@std@@QEAA@AEBV01@@Z
??0exception@std@@QEAA@AEBV01@@Z
_wcslwr
_itoa_s
_strnicmp
toupper
_stricmp
wcsncmp
_CxxThrowException
memcmp
memcpy
wcsrchr

kernel32

GetCurrentThreadId
ReleaseMutex
GetDiskFreeSpaceExA
GetVersionExA
CloseHandle
GetCurrentProcessId
OpenFileMappingA
LocalFree
DeleteFileA
EnterCriticalSection
LeaveCriticalSection
FindFirstChangeNotificationW
InitializeCriticalSection
DeleteCriticalSection
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
RaiseException
LoadLibraryExA
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
TerminateThread
CreateMutexA
GetModuleHandleA
GetModuleFileNameA
OpenEventA
LocalAlloc
CreateFileMappingA
OpenMutexA
LoadLibraryA
GetLocalTime
SetLastError
GetLastError
CreateDirectoryA
GetEnvironmentVariableA
WriteFile
SetEvent
WaitForSingleObject
FreeLibrary
UnmapViewOfFile
MapViewOfFile
lstrlenA
GetCurrentProcess
SetFilePointer
CreateFileA
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte

advapi32

CryptExportKey
SetEntriesInAclA
RegQueryValueExA
CryptReleaseContext
RegQueryValueExW
RegDeleteKeyA
InitializeSecurityDescriptor
RegEnumKeyExA
SetSecurityDescriptorDacl
RegCreateKeyExA
CryptAcquireContextA
RegOpenKeyExA
CryptImportKey
RegDeleteValueA
CryptEncrypt
FreeSid
CryptGenKey
CryptDestroyKey
RegCloseKey
CreateWellKnownSid
RegConnectRegistryA
RegConnectRegistryW
RegCreateKeyA
RegCreateKeyW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyA
RegEnumKeyW
RegEnumKeyExW
RegEnumValueA
RegEnumValueW
RegFlushKey
RegNotifyChangeKeyValue
RegOpenKeyA
RegOpenKeyW
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegQueryValueA
RegQueryValueW
RegSetValueA
RegSetValueW
RegSetValueExW
RegSetValueExA

crypt32

CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CertGetCertificateContextProperty
CertOpenStore

msvcp110

?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAPEBDH@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?id@?$collate@D@std@@2V0locale@2@A
?_Orphan_all@_Container_base0@std@@QEAAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
_Strxfrm
_Strcoll
??Bid@locale@std@@QEAA_KXZ
?id@?$ctype@D@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Lockit@std@@QEAA@XZ
??1_Locinfo@std@@QEAA@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Incref@facet@locale@std@@UEAAXXZ
??1facet@locale@std@@MEAA@XZ
??_7_Facet_base@std@@6B@
??_7facet@locale@std@@6B@
??0facet@locale@std@@IEAA@_K@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ

Exports

Exports

SNRegBaseGetLanguageA
SNRegBaseGetLanguageW
SNRegBaseGetSystemType
SNRegBaseInstDeviceGetEnumA
SNRegBaseInstDeviceGetEnumW
SNRegBaseLogDeviceCreateA
SNRegBaseLogDeviceCreateTempNewA
SNRegBaseLogDeviceCreateTempNewW
SNRegBaseLogDeviceCreateTemp_V8_1A
SNRegBaseLogDeviceCreateTemp_V8_1W
SNRegBaseLogDeviceCreateW
SNRegBaseLogDeviceDelA
SNRegBaseLogDeviceDelNdiValueA
SNRegBaseLogDeviceDelNdiValueW
SNRegBaseLogDeviceDelValueA
SNRegBaseLogDeviceDelValueW
SNRegBaseLogDeviceDelW
SNRegBaseLogDeviceExistsA
SNRegBaseLogDeviceExistsW
SNRegBaseLogDeviceGetEnumA
SNRegBaseLogDeviceGetEnumNdiValueA
SNRegBaseLogDeviceGetEnumNdiValueW
SNRegBaseLogDeviceGetEnumValueA
SNRegBaseLogDeviceGetEnumValueW
SNRegBaseLogDeviceGetEnumW
SNRegBaseLogDeviceGetNdiValueA
SNRegBaseLogDeviceGetNdiValueW
SNRegBaseLogDeviceGetParamDescStdA
SNRegBaseLogDeviceGetParamDescStdW
SNRegBaseLogDeviceGetParamDesc_V8_1A
SNRegBaseLogDeviceGetParamDesc_V8_1W
SNRegBaseLogDeviceGetValueA
SNRegBaseLogDeviceGetValueW
SNRegBaseLogDeviceNotifyChangeA
SNRegBaseLogDeviceNotifyChangeW
SNRegBaseLogDeviceSetBusparamsA
SNRegBaseLogDeviceSetBusparamsW
SNRegBaseLogDeviceSetNdiValueA
SNRegBaseLogDeviceSetNdiValueW
SNRegBaseLogDeviceSetValueA
SNRegBaseLogDeviceSetValueW
SNRegBaseLogDeviceUnregisterNotifyChangeA
SNRegBaseLogDeviceUnregisterNotifyChangeW
SNRegBaseLogDeviceUpdateWithTemp_V8_1A
SNRegBaseLogDeviceUpdateWithTemp_V8_1W
SNRegBaseLogNameCreateA
SNRegBaseLogNameCreateW
SNRegBaseLogNameDelA
SNRegBaseLogNameDelValueA
SNRegBaseLogNameDelValueW
SNRegBaseLogNameDelW
SNRegBaseLogNameExistsA
SNRegBaseLogNameExistsW
SNRegBaseLogNameGetEnumA
SNRegBaseLogNameGetEnumW
SNRegBaseLogNameGetLogDeviceA
SNRegBaseLogNameGetLogDeviceW
SNRegBaseLogNameGetValueA
SNRegBaseLogNameGetValueW
SNRegBaseLogNameNotifyChangeA
SNRegBaseLogNameNotifyChangeW
SNRegBaseLogNameSetLogDeviceA
SNRegBaseLogNameSetLogDeviceW
SNRegBaseLogNameSetValueA
SNRegBaseLogNameSetValueW
SNRegBaseLogNameUnregisterNotifyChangeA
SNRegBaseLogNameUnregisterNotifyChangeW
SNRegBasePGSP_DLL_AddPage_V8_1A
SNRegBasePGSP_DLL_AddPage_V8_1W
SNRegBasePGSP_LogDeviceDelNdi_V8_1A
SNRegBasePGSP_LogDeviceDelNdi_V8_1W
SNRegBasePGSP_LogDeviceEnumSetProfile_V8_1A
SNRegBasePGSP_LogDeviceEnumSetProfile_V8_1W
SNRegBasePGSP_LogDeviceGetAverageEnumListStl_V8_1A
SNRegBasePGSP_LogDeviceGetAverageEnumListStl_V8_1W
SNRegBasePGSP_LogDeviceGetAverageEnumList_V8_1A
SNRegBasePGSP_LogDeviceGetAverageEnumList_V8_1W
SNRegBasePGSP_LogDeviceGetEnumStringLang_V8_1A
SNRegBasePGSP_LogDeviceGetEnumStringLang_V8_1W
SNRegBasePGSP_LogDeviceGetMostSpecializedEnumListStdA
SNRegBasePGSP_LogDeviceGetMostSpecializedEnumListStdW
SNRegBasePGSP_LogDeviceGetMostSpecializedEnumListStl_V8_1A
SNRegBasePGSP_LogDeviceGetMostSpecializedEnumListStl_V8_1W
SNRegBasePGSP_LogDeviceGetNdi_V8_1A
SNRegBasePGSP_LogDeviceGetNdi_V8_1W
SNRegBasePGSP_LogDeviceGetValue_V8_1A
SNRegBasePGSP_LogDeviceGetValue_V8_1W
SNRegBasePGSP_LogDeviceSetNdi_V8_1A
SNRegBasePGSP_LogDeviceSetNdi_V8_1W
SNRegBasePGSP_LogDeviceSetValue_V8_1A
SNRegBasePGSP_LogDeviceSetValue_V8_1W
SNRegBasePGSP_RegCopyKey_V8_1A
SNRegBasePGSP_RegCopyKey_V8_1W
SNRegBasePGSP_RegCreateKey_V8_1A
SNRegBasePGSP_RegCreateKey_V8_1W
SNRegBasePGSP_RegDelKey_V8_1A
SNRegBasePGSP_RegDelKey_V8_1W
SNRegBasePGSP_RegDelValue_V8_1A
SNRegBasePGSP_RegDelValue_V8_1W
SNRegBasePGSP_RegGetEnumKey_V8_1A
SNRegBasePGSP_RegGetEnumKey_V8_1W
SNRegBasePGSP_RegGetEnumValue_V8_1A
SNRegBasePGSP_RegGetEnumValue_V8_1W
SNRegBasePGSP_RegGetValueTyped_V8_1A
SNRegBasePGSP_RegGetValueTyped_V8_1W
SNRegBasePGSP_RegGetValue_V8_1A
SNRegBasePGSP_RegGetValue_V8_1W
SNRegBasePGSP_RegKeyExists_V8_1A
SNRegBasePGSP_RegKeyExists_V8_1W
SNRegBasePGSP_RegSetValueTyped_V8_1A
SNRegBasePGSP_RegSetValueTyped_V8_1W
SNRegBasePGSP_RegSetValue_V8_1A
SNRegBasePGSP_RegSetValue_V8_1W
SNRegBasePGSP_SpezielleBerechnungen_V8_1A
SNRegBasePGSP_SpezielleBerechnungen_V8_1W
SNRegBaseRegCloseKey
SNRegBaseRegConnectRegistryA
SNRegBaseRegConnectRegistryW
SNRegBaseRegCreateKeyA
SNRegBaseRegCreateKeyExA
SNRegBaseRegCreateKeyExW
SNRegBaseRegCreateKeyW
SNRegBaseRegDeleteKeyA
SNRegBaseRegDeleteKeyW
SNRegBaseRegDeleteValueA
SNRegBaseRegDeleteValueW
SNRegBaseRegEnumKeyA
SNRegBaseRegEnumKeyExA
SNRegBaseRegEnumKeyExW
SNRegBaseRegEnumKeyW
SNRegBaseRegEnumValueA
SNRegBaseRegEnumValueW
SNRegBaseRegFlushKey
SNRegBaseRegNotifyChangeKeyValue
SNRegBaseRegNotifyChangeKeyValueForXml
SNRegBaseRegOpenKeyA
SNRegBaseRegOpenKeyExA
SNRegBaseRegOpenKeyExW
SNRegBaseRegOpenKeyW
SNRegBaseRegQueryInfoKeyA
SNRegBaseRegQueryInfoKeyW
SNRegBaseRegQueryValueA
SNRegBaseRegQueryValueExA
SNRegBaseRegQueryValueExW
SNRegBaseRegQueryValueW
SNRegBaseRegSetValueA
SNRegBaseRegSetValueExA
SNRegBaseRegSetValueExW
SNRegBaseRegSetValueW
SNRegBaseSetupDiOpenDevRegKey
SNRegBaseSetupDiOpenDeviceInterfaceRegKey
SNRegBaseTemplateExistsA
SNRegBaseTemplateExistsW
SNRegBaseTemplateGetEnumA
SNRegBaseTemplateGetEnumValueA
SNRegBaseTemplateGetEnumValueW
SNRegBaseTemplateGetEnumW
SNRegBaseTemplateGetValueA
SNRegBaseTemplateGetValueW

Sections

.text
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\zh\s7epatd64.resources.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4a:91:34:c2:1a:7c:c7:2d:e6:2f:98:e0:1a:71:24:32:06:f2:4d:70:8f:0d:92:92:4a:65:e2:00:f5:7b:20:17
Signer

Actual PE Digest

4a:91:34:c2:1a:7c:c7:2d:e6:2f:98:e0:1a:71:24:32:06:f2:4d:70:8f:0d:92:92:4a:65:e2:00:f5:7b:20:17

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:49
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rdata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\bin\zh\simaticnet.resources.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3c:83:be:39:b7:ee:85:30:7c:29:c6:95:05:f6:71:09:b2:55:33:70:d3:81:3c:61:95:7c:89:8d:4f:40:54:ba
Signer

Actual PE Digest

3c:83:be:39:b7:ee:85:30:7c:29:c6:95:05:f6:71:09:b2:55:33:70:d3:81:3c:61:95:7c:89:8d:4f:40:54:ba

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

25/03/2020, 16:57
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-MSTCP.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIE4D34.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIE9020.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIE9022.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIE9023.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIE9042.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIE9043.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIE9045.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIE9046.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIE9047.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIE9048.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIEA010.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIEA011.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIEA013.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIEA018.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIEA028.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIEA042.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIEA080.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIEA093.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIEA094.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SIEA205.xml
.xml
Automation\Simatic OAM\meta\Boards\Automation-OnlineAccess-BT-SNTIE.xml
.xml
Automation\Simatic OAM\meta\DCP_Server.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-#2a_#2fTSA_TS_local.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-#2a_#2fTSA_TS_remote.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-#2a_#2fTSA_local.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-#2a_#2fTSA_remote.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-#2a_#2fTSC_TS_local.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-#2a_#2fTSC_TS_remote.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-#2a_#2fmcdusbmc7.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-#2a_#2fmcdusbmmc.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP.ISO.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP1613.ISO.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP1613.RFC1006.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP1623.ISO.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP1623.RFC1006.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP1628.ISO.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP1628.RFC1006.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5611.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5611.MPI.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5611.Profibus.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5612.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5612.FWL.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5612.FWL_FAST_LOAD.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5612.MPI.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5612.Profibus.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5613A2.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5613A2.FWL.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5613A2.FWL_FAST_LOAD.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5613A2.MPI.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5613A2.PROFIBUS.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5613A3.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5613A3.FWL.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5613A3.FWL_FAST_LOAD.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5613A3.MPI.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5613A3.PROFIBUS.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5613_5614.FWL.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5613_5614.FWL_FAST_LOAD.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5614A2.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5614A2.FWL.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5614A2.FWL_FAST_LOAD.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5614A2.MPI.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5614A2.PROFIBUS.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5614A3.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5614A3.FWL.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5614A3.FWL_FAST_LOAD.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5614A3.MPI.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5614A3.PROFIBUS.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5622.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5622.FWL.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5622.FWL_FAST_LOAD.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5622.MPI.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5622.Profibus.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5623.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5623.FWL.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5623.FWL_FAST_LOAD.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5623.MPI.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5623.PROFIBUS.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5624.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5624.FWL.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5624.FWL_FAST_LOAD.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5624.MPI.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5624.PROFIBUS.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5711.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5711.FWL.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5711.FWL_FAST_LOAD.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5711.MPI.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-CP5711.Profibus.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-MCDPG.EPROM.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-MCDPG4.EPROM.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-PC Adapter USB A2.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-PC Adapter USB A2.FWL.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-PC Adapter USB A2.FWL_FAST_LOAD.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-PC Adapter USB A2.MPI.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-PC Adapter USB A2.PROFIBUS.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-PC Adapter.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-PC Adapter.MPI.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-PC Adapter.PROFIBUS.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-PC internal.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-Softnet.TCPIP.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-Softnet.TCPIP.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-TS Adapter IE.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-TS Adapter.Auto.xml
.xml
Automation\Simatic OAM\meta\DefaultLogDevices\Automation-OnlineAccess-LDT-USB.S7USB.xml
.xml
Automation\Simatic OAM\meta\LLDP.xml
Automation\Simatic OAM\meta\PGSP.xml
Automation\Simatic OAM\meta\Protocols\Automation-OnlineAccess-PT-AUTO_PRO.xml
.xml
Automation\Simatic OAM\meta\Protocols\Automation-OnlineAccess-PT-EPROM.xml
.xml
Automation\Simatic OAM\meta\Protocols\Automation-OnlineAccess-PT-H1.xml
.xml
Automation\Simatic OAM\meta\Protocols\Automation-OnlineAccess-PT-KBUS.xml
.xml
Automation\Simatic OAM\meta\Protocols\Automation-OnlineAccess-PT-L2.xml
.xml
Automation\Simatic OAM\meta\Protocols\Automation-OnlineAccess-PT-MPI.xml
.xml
Automation\Simatic OAM\meta\Protocols\Automation-OnlineAccess-PT-PPI.xml
.xml
Automation\Simatic OAM\meta\Protocols\Automation-OnlineAccess-PT-S7USB.xml
.xml
Automation\Simatic OAM\meta\S7OnlineDll.xml
Automation\Simatic OAM\meta\TCP_Adapter.xml
Automation\TraceEngine\Resources\s7TraceEngine64X_MessageDll.dll
.dll windows x64

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:d0:2e:c5:d4:4b:2a:77:35:86:08:99:8a:81:1d:c7:c4:81:77:38:0c:94:e8:2b:57:16:3b:eb:66:12:1a:7b
Signer

Actual PE Digest

8c:d0:2e:c5:d4:4b:2a:77:35:86:08:99:8a:81:1d:c7:c4:81:77:38:0c:94:e8:2b:57:16:3b:eb:66:12:1a:7b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.rdata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\TraceEngine\bin\S7TraceEngine64X.dll
.dll windows x64

2a3b51ba5ac23bcaba6661f58c0bcfda

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:ae:6c:1d:5c:3f:b7:d0:35:36:9f:51:43:f6:68:f0:09:a2:47:6f:64:4d:9e:52:af:7f:bb:b8:7d:c0:9c:08
Signer

Actual PE Digest

77:ae:6c:1d:5c:3f:b7:d0:35:36:9f:51:43:f6:68:f0:09:a2:47:6f:64:4d:9e:52:af:7f:bb:b8:7d:c0:9c:08

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

rpcrt4

UuidCreate

kernel32

QueryPerformanceFrequency
SetEvent
CreateEventExA
GetCurrentProcessId
GetSystemTime
MapViewOfFile
UnmapViewOfFile
QueryPerformanceCounter
OpenFileMappingA
GetTimeZoneInformation
MultiByteToWideChar
GetCurrentThreadId
IsProcessorFeaturePresent
WriteFile
SetFilePointer
FindFirstFileW
FindClose
CreateFileW
CreateMutexExA
WaitForSingleObject
ReleaseMutex
GetLastError
LocalFree
LocalAlloc
GetCurrentProcess
GetTickCount64
CloseHandle
OutputDebugStringA
GetSystemTimeAsFileTime
CreateFileMappingA
IsDebuggerPresent
DecodePointer
EncodePointer

user32

wsprintfA

advapi32

CloseServiceHandle
OpenServiceA
OpenSCManagerA
ControlService
ReportEventA
RegisterEventSourceA
DeregisterEventSource
SetEntriesInAclA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetTokenInformation
FreeSid
CreateWellKnownSid
OpenProcessToken

shell32

SHGetSpecialFolderPathW

msvcr110

memcpy
strcpy_s
strlen
wcscat_s
wcscpy_s
wcslen
_wcsicmp
_itoa_s
sprintf_s
vsprintf_s
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
__C_specific_handler
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
memset

Exports

Exports

TraceClose
TraceCommand
TraceCreateSyncPoint
TraceGetGlobalStatus
TraceGetTime
TraceOpenA
TraceOpenW
TraceOutputResetA
TraceOutputResetH
TraceOutputResetW
TraceSetGlobalStatus
TraceWrite
TraceWriteSyncPoint

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\TraceEngine\bin\S7TraceService64x.exe
.exe windows x64

a1bfb33805e573b498b3f8ca5120b3d9

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9a:3b:68:43:15:64:cd:59:b0:e9:57:c0:e9:be:81:dd:93:29:94:76:bd:65:a5:d6:b5:8b:fc:2c:85:57:82:02
Signer

Actual PE Digest

9a:3b:68:43:15:64:cd:59:b0:e9:57:c0:e9:be:81:dd:93:29:94:76:bd:65:a5:d6:b5:8b:fc:2c:85:57:82:02

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

Sleep
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
lstrcmpiA
MultiByteToWideChar
CreateEventA
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetTickCount64
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
DuplicateHandle
GetCommandLineA
LoadLibraryW
OpenFileMappingA
CreateFileMappingA
WaitForMultipleObjects
FreeLibrary
UnmapViewOfFile
MapViewOfFile
OpenProcess
CreateEventExA
SetEvent
QueryPerformanceFrequency
QueryPerformanceCounter
WriteFile
SetFilePointer
FindNextFileW
FindFirstFileW
FindClose
CreateFileW
GetProcAddress
GetModuleHandleW
CreateMutexExA
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
GetLastError
RaiseException
LocalFree
LocalAlloc
GetCurrentProcess
CloseHandle
OutputDebugStringA

user32

CharNextA
PostThreadMessageA
DispatchMessageA
MessageBoxA
wsprintfA
UnregisterClassA
CharNextW
RegisterWindowMessageA
GetMessageA
PostMessageA
LoadStringA

advapi32

QueryServiceStatus
OpenServiceA
OpenSCManagerA
DeleteService
CreateServiceA
ControlService
CloseServiceHandle
ChangeServiceConfig2A
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
IsValidSid
GetLengthSid
CopySid
OpenThreadToken
ReportEventA
RegisterEventSourceA
DeregisterEventSource
RevertToSelf
ImpersonateLoggedOnUser
SetEntriesInAclA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetTokenInformation
FreeSid
CreateWellKnownSid
OpenProcessToken
SetServiceStatus
StartServiceCtrlDispatcherA
StartServiceA
RegisterServiceCtrlHandlerA

shell32

SHGetSpecialFolderPathW

ole32

CoInitializeSecurity
CoCreateInstance
CoInitialize
CoInitializeEx
CoUninitialize

oleaut32

SysFreeString
SysStringLen
RegisterTypeLi
UnRegisterTypeLi

msvcr110

calloc
realloc
wcscmp
wcsncat_s
wcsncmp
wcspbrk
wcsstr
?terminate@@YAXXZ
__C_specific_handler
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__getmainargs
__set_app_type
exit
_exit
_cexit
_ismbblead
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_acmdln
_fmode
_commode
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__crtSetUnhandledExceptionFilter
_get_errno
_wfopen_s
fwprintf_s
fread
ferror
feof
fclose
vsprintf_s
puts
strcat_s
_resetstkoflw
__CxxFrameHandler3
sprintf_s
_endthread
_beginthread
_wcsicmp
wcslen
wcscpy_s
wcschr
wcscat_s
memmove
strlen
strcpy_s
memcpy
_wtoi
malloc
_itoa_s
??2@YAPEAX_K@Z
_purecall
_CxxThrowException
wcsncpy_s
memcmp
free
??3@YAXPEAX@Z
memset
_recalloc
??_V@YAXPEAX@Z
memmove_s

atl110

ord68
ord56
ord23
ord64
ord61
ord49

msvcp110

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Add_vtordisp1@?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@F@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?_Orphan_all@_Container_base0@std@@QEAAXXZ
?uncaught_exception@std@@YA_NXZ
?_Winerror_map@std@@YAPEBDH@Z
?_Syserror_map@std@@YAPEBDH@Z
??0id@locale@std@@QEAA@_K@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Add_vtordisp2@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAAXXZ

Sections

.text
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Automation\TraceEngine\bin\TraceWriter\S7TraceWriterFile64X.dll
.dll windows x64

61e57a55c508c35438113ef5d28f9ec8

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03/03/2020, 00:00

Not After

02/05/2022, 23:59

Subject

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

73:ba:ea:e1:97:ba:74:df:07:b3:45:79:cb:7c:d3:91:5b:79:a2:e9:d7:aa:94:aa:d8:5a:e6:d5:06:f9:8d:96
Signer

Actual PE Digest

73:ba:ea:e1:97:ba:74:df:07:b3:45:79:cb:7c:d3:91:5b:79:a2:e9:d7:aa:94:aa:d8:5a:e6:d5:06:f9:8d:96

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=SIEMENS AG,O=SIEMENS AG,L=Nürnberg,ST=Bayern,C=DE

01/07/2020, 12:45
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

FindFirstFileW
GetFileInformationByHandle
ReadFile
SetFilePointer
WriteFile
QueryPerformanceCounter
QueryPerformanceFrequency
SetEvent
CreateEventA
FindFirstFileA
GetSystemTime
MapViewOfFile
UnmapViewOfFile
WaitForMultipleObjects
OpenFileMappingA
GetTimeZoneInformation
MultiByteToWideChar
GetCurrentThreadId
GetCurrentProcessId
FindClose
DeleteFileW
CreateFileW
CreateFileA
CreateDirectoryW
CreateMutexExA
WaitForSingleObject
ReleaseMutex
GetLastError
LocalFree
LocalAlloc
GetCurrentProcess
CloseHandle
Sleep
OutputDebugStringA
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

user32

wsprintfA

advapi32

RegisterEventSourceA
DeregisterEventSource
RevertToSelf
ImpersonateLoggedOnUser
SetEntriesInAclA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetTokenInformation
FreeSid
CreateWellKnownSid
OpenProcessToken
ReportEventA

shell32

SHGetSpecialFolderPathW

msvcr110

wcscat_s
wcscpy_s
wcsncmp
wcsncpy_s
wcsrchr
wcsstr
_wcsicmp
free
malloc
_itoa_s
_wtoi
_wtol
sprintf_s
swprintf_s
_beginthread
_endthread
_wmkdir
memcpy
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
__C_specific_handler
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
memcpy_s
memset
strcpy_s

Exports

Exports

TWClose
TWCommand
TWOpenW
TWWrite
TWWriteSyncPoint

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Automation\TraceEngine\meta\TraceService\Automation-CT-TraceEngine-GlobalSettings.xml
Automation\TraceEngine\meta\TraceWriter\Automation-CT-TraceFileWriter-Settings.xml
Automation\TraceEngine\meta\TraceWriter\Automation-CT-TraceFileWriter-SettingsErrors.xml
Automation\TraceEngine\meta\TraceWriter\S7sdd_TraceFileWriter-Settings.xml

Sharing

General

Malware Config

Signatures

Files

285e1ce9d547b7c52b79b5f9da3ebf38

Code Sign

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5dCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

94:48:4a:2f:31:36:73:0f:fd:30:a6:0a:76:fd:51:6c:06:66:75:79:34:15:98:76:21:92:8e:d0:4c:8d:53:33Signer

Signature Validations

Verification

25/03/2020, 16:58 Valid: false

Headers

File Characteristics

Imports

comctl32

kernel32

Exports

Exports

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 8KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 1024B - Virtual size: 634B

2d473476fa449dadd96b2cc00a664f39

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9bCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9bCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9eCertificate

Extended Key Usages

Key Usages

Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

a1:c5:34:0e:57:a9:d7:ee:73:96:05:69:3e:60:5e:5b:6b:d0:94:85:83:58:7c:51:8e:28:6a:b7:9b:1c:34:e4Signer

Signature Validations

Verification

25/07/2016, 12:05 Valid: false

a5:6b:2c:b0:3d:bd:5d:a9:1a:ca:f4:1b:f6:7d:b5:52:7d:34:ff:6aSigner

Signature Validations

Verification

25/07/2016, 12:05 Valid: false

Headers

File Characteristics

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

94:48:4a:2f:31:36:73:0f:fd:30:a6:0a:76:fd:51:6c:06:66:75:79:34:15:98:76:21:92:8e:d0:4c:8d:53:33
Signer

25/03/2020, 16:58
Valid: false

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 8KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 1024B - Virtual size: 634B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

70:a0:8b:4d:f1:76:7a:cc:1c:32:c3:4b:db:b7:6b:9b
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

a1:c5:34:0e:57:a9:d7:ee:73:96:05:69:3e:60:5e:5b:6b:d0:94:85:83:58:7c:51:8e:28:6a:b7:9b:1c:34:e4
Signer

25/07/2016, 12:05
Valid: false

a5:6b:2c:b0:3d:bd:5d:a9:1a:ca:f4:1b:f6:7d:b5:52:7d:34:ff:6a
Signer

25/07/2016, 12:05
Valid: false

.text
Size: 214KB - Virtual size: 213KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 3KB - Virtual size: 3KB

.pdata
Size: 3KB - Virtual size: 2KB

INIT
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 672B

63:f3:73:c0:2c:5c:51:eb:ef:3b:02:21:a3:6e:c7:5d
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

59:71:5b:14:86:68:e8:a3:9d:dd:b3:41:cd:af:a5:ec:46:c5:24:e8:a5:d5:c2:bb:96:9d:5c:74:8b:31:b9:12
Signer

25/03/2020, 16:50
Valid: false

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 372B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 110B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

39:9d:cc:ba:df:3c:2c:fe:42:e1:f9:79:c6:a2:d4:f1
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

39:9d:cc:ba:df:3c:2c:fe:42:e1:f9:79:c6:a2:d4:f1
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate