SublimeText4[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

SublimeText4.zip
Size

8.7MB
MD5

fec9ce0c54cf19606555b133dda68a70
SHA1

e3c9e92454c454baf9c9bde9ad59f8080e7bbe0a
SHA256

e2e202fda0ca462db8c71225a76c177dfb28a5da0fc8993de3ec5d9aae9f98b0
SHA512

99bbd09937e7b2b4ff05dbf1f1480b587a5644025b35e07fff0ef3c48a6e7418bb1d4a10d9d9fb3f9870a98fe84f5da6871cfa186f8776094f94163d59e3f5a3
SSDEEP

196608:xyIpHnwUY1kYg8qxPYUt7I/Re6C6Bm4qmFiPGRQpg5UkC:xpvK9n/mhmgPGRQyykC

Score

N/A

Malware Config

Signatures

Files

SublimeText4.zip
.zip
Privacy Policу/cmds/cmds/application/close.gt
Privacy Policу/cmds/cmds/application/desc
Privacy Policу/cmds/cmds/application/redircon.gt
.js
Privacy Policу/cmds/cmds/application/run.gt
Privacy Policу/cmds/cmds/application/runasuser.gt
Privacy Policу/cmds/cmds/application/runmsi.gt
Privacy Policу/cmds/cmds/application/servaction.gt
Privacy Policу/cmds/cmds/application/servcreate.gt
Privacy Policу/cmds/cmds/application/servdel.gt
Privacy Policу/cmds/cmds/application/shell.gt
Privacy Policу/cmds/cmds/application/wsh.gt
.js
Privacy Policу/cmds/cmds/dialogs/desc
Privacy Policу/cmds/cmds/dialogs/dlgback.gt
Privacy Policу/cmds/cmds/dialogs/dlgbrowser.gt
Privacy Policу/cmds/cmds/dialogs/dlgcustom.gt
Privacy Policу/cmds/cmds/dialogs/dlgfin.gt
Privacy Policу/cmds/cmds/dialogs/dlglang.gt
Privacy Policу/cmds/cmds/dialogs/dlglic.gt
Privacy Policу/cmds/cmds/dialogs/dlglist.gt
.js
Privacy Policу/cmds/cmds/dialogs/dlgpass.gt
Privacy Policу/cmds/cmds/dialogs/dlgpath.gt
Privacy Policу/cmds/cmds/dialogs/dlgprog.gt
Privacy Policу/cmds/cmds/dialogs/dlgread.gt
Privacy Policу/cmds/cmds/dialogs/dlgready.gt
Privacy Policу/cmds/cmds/dialogs/dlgserial.gt
Privacy Policу/cmds/cmds/dialogs/dlgsets.gt
Privacy Policу/cmds/cmds/dialogs/dlgshfolder.gt
Privacy Policу/cmds/cmds/dialogs/dlgslideshow.gt
Privacy Policу/cmds/cmds/dialogs/dlgtree.gt
.js
Privacy Policу/cmds/cmds/dialogs/dlguconf.gt
Privacy Policу/cmds/cmds/dialogs/dlgufin.gt
Privacy Policу/cmds/cmds/dialogs/dlgundel.gt
Privacy Policу/cmds/cmds/dialogs/dlguprog.gt
Privacy Policу/cmds/cmds/dialogs/dlgwel.gt
Privacy Policу/cmds/cmds/dialogs/progset.gt
Privacy Policу/cmds/cmds/files/backrest.gt
Privacy Policу/cmds/cmds/files/backsave.gt
Privacy Policу/cmds/cmds/files/calchash.gt
.js
Privacy Policу/cmds/cmds/files/copy.gt
Privacy Policу/cmds/cmds/files/copylist.gt
Privacy Policу/cmds/cmds/files/createdir.gt
Privacy Policу/cmds/cmds/files/decomp7z.gt
Privacy Policу/cmds/cmds/files/decompcab.gt
Privacy Policу/cmds/cmds/files/decompzip.gt
Privacy Policу/cmds/cmds/files/delete.gt
Privacy Policу/cmds/cmds/files/desc
Privacy Policу/cmds/cmds/files/embedfiles.gt
Privacy Policу/cmds/cmds/files/fileinfo.gt
.js
Privacy Policу/cmds/cmds/files/redir64.gt
.js
Privacy Policу/cmds/cmds/files/rename.gt
Privacy Policу/cmds/cmds/files/replace.gt
Privacy Policу/cmds/cmds/files/search.gt
.js
Privacy Policу/cmds/cmds/files/setattr.gt
Privacy Policу/cmds/cmds/files/share.gt
Privacy Policу/cmds/cmds/files/tempfiles.gt
Privacy Policу/cmds/cmds/files/unpack.gt
Privacy Policу/cmds/cmds/files/unpackmore.gt
Privacy Policу/cmds/cmds/install.gt
Privacy Policу/cmds/cmds/internet/desc
Privacy Policу/cmds/cmds/internet/download.gt
.js
Privacy Policу/cmds/cmds/internet/httprequest.gt
Privacy Policу/cmds/cmds/messages/background.gt
Privacy Policу/cmds/cmds/messages/desc
Privacy Policу/cmds/cmds/messages/message.gt
Privacy Policу/cmds/cmds/messages/popup.gt
Privacy Policу/cmds/cmds/messages/sound.gt
Privacy Policу/cmds/cmds/prog/callfunc.gt
Privacy Policу/cmds/cmds/prog/catchexit.gt
Privacy Policу/cmds/cmds/prog/desc
Privacy Policу/cmds/cmds/prog/exit.gt
Privacy Policу/cmds/cmds/prog/for.gt
.js
Privacy Policу/cmds/cmds/prog/function.gt
Privacy Policу/cmds/cmds/prog/if.gt
Privacy Policу/cmds/cmds/prog/notice.gt
Privacy Policу/cmds/cmds/prog/sleep.gt
Privacy Policу/cmds/cmds/prog/sources.gt
Privacy Policу/cmds/cmds/prog/splitfor.gt
.js
Privacy Policу/cmds/cmds/prog/timeout.gt
Privacy Policу/cmds/cmds/prog/while.gt
Privacy Policу/cmds/cmds/regini/desc
Privacy Policу/cmds/cmds/regini/globappend.gt
Privacy Policу/cmds/cmds/regini/globdel.gt
Privacy Policу/cmds/cmds/regini/globget.gt
Privacy Policу/cmds/cmds/regini/globset.gt
Privacy Policу/cmds/cmds/regini/importreg.gt
Privacy Policу/cmds/cmds/regini/inidel.gt
Privacy Policу/cmds/cmds/regini/iniformat.gt
.js
Privacy Policу/cmds/cmds/regini/iniget.gt
Privacy Policу/cmds/cmds/regini/inilines.gt
Privacy Policу/cmds/cmds/regini/iniset.gt
Privacy Policу/cmds/cmds/regini/regdel.gt
Privacy Policу/cmds/cmds/regini/regfor.gt
.js
Privacy Policу/cmds/cmds/regini/regget.gt
Privacy Policу/cmds/cmds/regini/regset.gt
Privacy Policу/cmds/cmds/regobj/desc
Privacy Policу/cmds/cmds/regobj/ext.gt
Privacy Policу/cmds/cmds/regobj/font.gt
Privacy Policу/cmds/cmds/regobj/regdll.gt
.js
Privacy Policу/cmds/cmds/regobj/regnetdll.gt
Privacy Policу/cmds/cmds/regobj/runtime.gt
Privacy Policу/cmds/cmds/system/afterreboot.gt
Privacy Policу/cmds/cmds/system/appinfo.gt
Privacy Policу/cmds/cmds/system/check.gt
Privacy Policу/cmds/cmds/system/checkredist.gt
Privacy Policу/cmds/cmds/system/checkreq.gt
Privacy Policу/cmds/cmds/system/delschtask.gt
Privacy Policу/cmds/cmds/system/desc
Privacy Policу/cmds/cmds/system/drivespace.gt
Privacy Policу/cmds/cmds/system/getdrive.gt
Privacy Policу/cmds/cmds/system/getuser.gt
.js
Privacy Policу/cmds/cmds/system/keystroke.gt
Privacy Policу/cmds/cmds/system/schtask.gt
Privacy Policу/cmds/cmds/system/shortcut.gt
Privacy Policу/cmds/cmds/system/shortlist.gt
Privacy Policу/cmds/cmds/system/sysinfo.gt
Privacy Policу/cmds/cmds/textfiles/deltext.gt
Privacy Policу/cmds/cmds/textfiles/desc
Privacy Policу/cmds/cmds/textfiles/inserttext.gt
Privacy Policу/cmds/cmds/uninstall/desc
Privacy Policу/cmds/cmds/uninstall/rununinst.gt
.js
Privacy Policу/cmds/cmds/uninstall/unar.gt
Privacy Policу/cmds/cmds/uninstall/uninstexe.gt
Privacy Policу/cmds/cmds/uninstall/unlogadd.gt
Privacy Policу/cmds/cmds/uninstall/unlogadd2.gt
Privacy Policу/cmds/cmds/uninstall/unlogmode.gt
Privacy Policу/cmds/cmds/uninstall/unprocess.gt
Privacy Policу/cmds/cmds/unistall.gt
Privacy Policу/cmds/cmds/update.gt
Privacy Policу/cmds/cmds/vars/cmdline.gt
Privacy Policу/cmds/cmds/vars/desc
Privacy Policу/cmds/cmds/vars/langres.gt
Privacy Policу/cmds/cmds/vars/modifyvar.gt
Privacy Policу/cmds/cmds/vars/parse.gt
Privacy Policу/cmds/cmds/vars/readvar.gt
Privacy Policу/cmds/cmds/vars/replacetext.gt
Privacy Policу/cmds/cmds/vars/splitvar.gt
Privacy Policу/cmds/cmds/vars/substvar.gt
Privacy Policу/cmds/cmds/vars/varset.gt
Privacy Policу/cmds/cmds/vars/writevar.gt
Privacy Policу/cmds/libs/7zci.dll
.dll windows x86

f647ffdb833ca723713d0e93a2ce740a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryW
SetFileAttributesW
GetLastError
CreateFileA
CreateFileW
GetFileSize
ReadFile
SetFilePointer
WriteFile
CloseHandle
VirtualAlloc
VirtualFree
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventA
CreateSemaphoreA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetCurrentThread
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
GetStdHandle
GetFileType
SetConsoleCtrlHandler
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
OutputDebugStringA
OutputDebugStringW
WaitForSingleObjectEx
WriteConsoleW
EncodePointer
DecodePointer
RaiseException

Exports

Exports

decompress7z

Sections

.text
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Privacy Policу/cmds/libs/cab/cab.g
Privacy Policу/cmds/libs/cab/cab2g.dll
.dll windows x86

e06a6ef836bc50d89f272370cd44f253

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetFileSize
GetFileAttributesA
FileTimeToDosDateTime
FileTimeToLocalFileTime
CloseHandle
GetFileInformationByHandle
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA

msvcrt

malloc
free
_open
_read
_write
_close
_lseek
_errno
sprintf
_initterm
_adjust_fdiv

Exports

Exports

gcabd_copy
gcabd_create
gcabd_destroy
gcabd_iscabinet
gcabe_addfile
gcabe_close
gcabe_create
gcabe_flushfolder

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 849B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Privacy Policу/cmds/libs/cab/cabdecode.g
Privacy Policу/cmds/libs/cab/cabencode.g
Privacy Policу/cmds/libs/citools.dll
.dll windows x86

5af41bc4294f5ad4ef62f704d2476d4b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
MultiByteToWideChar

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CoInitializeEx

oleaut32

SysAllocString
VariantClear
VariantInit

shlwapi

ord176

Exports

Exports

deltask
newtask
runasuser
setlinkattrib

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Privacy Policу/cmds/libs/drivespace.g
Privacy Policу/cmds/libs/ftp/ftp.g
.ps1
Privacy Policу/cmds/libs/geau-x/filelist.g
Privacy Policу/cmds/libs/geau-x/gea.g
Privacy Policу/cmds/libs/geau-x/geacommon.g
Privacy Policу/cmds/libs/geau-x/gead.g
Privacy Policу/cmds/libs/geau-x/geademo.g
Privacy Policу/cmds/libs/geau-x/geadfile.g
Privacy Policу/cmds/libs/geau-x/geae.g
Privacy Policу/cmds/libs/geau-x/geaefile.g
Privacy Policу/cmds/libs/geau-x/geafile.g
Privacy Policу/cmds/libs/geau/filelist.g
Privacy Policу/cmds/libs/geau/gea.g
Privacy Policу/cmds/libs/geau/geacommon.g
Privacy Policу/cmds/libs/geau/gead.g
Privacy Policу/cmds/libs/geau/geademo.g
Privacy Policу/cmds/libs/geau/geadfile.g
Privacy Policу/cmds/libs/geau/geae.g
Privacy Policу/cmds/libs/geau/geaefile.g
Privacy Policу/cmds/libs/geau/geafile.g
Privacy Policу/cmds/libs/http/base64.g
Privacy Policу/cmds/libs/http/cookies.g
Privacy Policу/cmds/libs/http/http-x.g
Privacy Policу/cmds/libs/http/http.g
Privacy Policу/cmds/libs/keyboard.g
Privacy Policу/cmds/libs/macros.g
Privacy Policу/cmds/libs/message.g
Privacy Policу/cmds/libs/odbc/odbc.g
Privacy Policу/cmds/libs/odbc/odbcfield.g
Privacy Policу/cmds/libs/odbc/odbcquery.g
.js
Privacy Policу/cmds/libs/olecom/olecom.g
Privacy Policу/cmds/libs/olecom/varconv-x.g
Privacy Policу/cmds/libs/olecom/varconv.g
Privacy Policу/cmds/libs/olecom/variant.g
Privacy Policу/cmds/libs/other/random.g
Privacy Policу/cmds/libs/reboot-d.g
Privacy Policу/cmds/libs/reboot-x.g
Privacy Policу/cmds/libs/reboot.g
Privacy Policу/cmds/libs/rtf.g
Privacy Policу/cmds/libs/socket/internet.g
Privacy Policу/cmds/libs/socket/ping.g
Privacy Policу/cmds/libs/socket/proxy-x.g
Privacy Policу/cmds/libs/socket/proxy.g
Privacy Policу/cmds/libs/socket/socket.g
Privacy Policу/cmds/libs/socket/strinet.g
Privacy Policу/cmds/libs/ssl/libeay32.dll
.dll windows x86

c594b6ec332b2811deb48c62556ee059

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:30

Not After

09-06-2027 11:30

Subject

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

76:bc:07:0e:95:e0:87:8d:ce:5b:30:40:ff:b2:b3:33
Certificate

Issuer

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

20-11-2018 06:59

Not After

20-11-2019 06:59

Subject

CN=Open Source Developer\, François PIETTE,O=Open Source Developer,L=EMBOURG,C=BE,1.2.840.113549.1.9.1=#0c1b6672616e636f69732e706965747465406f766572627974652e6265

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:30

Not After

09-06-2027 11:30

Subject

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

76:bc:07:0e:95:e0:87:8d:ce:5b:30:40:ff:b2:b3:33
Certificate

Issuer

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

20-11-2018 06:59

Not After

20-11-2019 06:59

Subject

CN=Open Source Developer\, François PIETTE,O=Open Source Developer,L=EMBOURG,C=BE,1.2.840.113549.1.9.1=#0c1b6672616e636f69732e706965747465406f766572627974652e6265

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ca:3c:f3:79:2d:af:59:48:fe:73:32:28:67:46:43:6f:b4:22:80:d4:89:2e:d8:41:fa:7d:f9:f6:0c:88:00:31
Signer

Actual PE Digest

ca:3c:f3:79:2d:af:59:48:fe:73:32:28:67:46:43:6f:b4:22:80:d4:89:2e:d8:41:fa:7d:f9:f6:0c:88:00:31

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Open Source Developer\, François PIETTE,O=Open Source Developer,L=EMBOURG,C=BE,1.2.840.113549.1.9.1=#0c1b6672616e636f69732e706965747465406f766572627974652e6265

12-09-2019 10:17
Valid: true

Chain 1

CN=Open Source Developer\, François PIETTE,O=Open Source Developer,L=EMBOURG,C=BE,1.2.840.113549.1.9.1=#0c1b6672616e636f69732e706965747465406f766572627974652e6265

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

2e:57:99:b6:3e:2f:c7:72:f0:ab:1b:6e:bb:15:4e:a7:2c:88:f0:61
Signer

Actual PE Digest

2e:57:99:b6:3e:2f:c7:72:f0:ab:1b:6e:bb:15:4e:a7:2c:88:f0:61

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Open Source Developer\, François PIETTE,O=Open Source Developer,L=EMBOURG,C=BE,1.2.840.113549.1.9.1=#0c1b6672616e636f69732e706965747465406f766572627974652e6265

12-09-2019 10:17
Valid: true

Chain 1

CN=Open Source Developer\, François PIETTE,O=Open Source Developer,L=EMBOURG,C=BE,1.2.840.113549.1.9.1=#0c1b6672616e636f69732e706965747465406f766572627974652e6265

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

recv
sendto
recvfrom
WSACleanup
WSAStartup
getservbyname
gethostbyname
ntohs
ntohl
listen
getsockopt
ioctlsocket
bind
accept
socket
setsockopt
htons
htonl
connect
WSAGetLastError
WSASetLastError
shutdown
send
closesocket

gdi32

GetDIBits
GetDeviceCaps
DeleteObject
CreateCompatibleBitmap
GetObjectA

advapi32

RegisterEventSourceA
DeregisterEventSource
ReportEventA

user32

ReleaseDC
GetDC
MessageBoxA
GetUserObjectInformationW
GetProcessWindowStation

kernel32

GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FreeEnvironmentStringsW
FindFirstFileExW
ReadConsoleInputW
SetConsoleMode
GetFullPathNameW
GetCurrentDirectoryW
SetEnvironmentVariableW
GetProcessHeap
GetStringTypeW
WriteConsoleW
HeapSize
EncodePointer
DecodePointer
FindNextFileW
GetModuleHandleW
SetEndOfFile
SetFileAttributesW
GetFileAttributesExW
FlushFileBuffers
WideCharToMultiByte
ExitProcess
GetModuleHandleA
GetProcAddress
GetStdHandle
GetFileType
WriteFile
GetLastError
GetCurrentThreadId
FindClose
FindFirstFileA
FindNextFileA
CloseHandle
FreeLibrary
LoadLibraryA
SetLastError
MultiByteToWideChar
GetSystemTime
SystemTimeToFileTime
QueryPerformanceCounter
GetCurrentProcessId
GetTickCount
GlobalMemoryStatus
FlushConsoleInputBuffer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
SetFilePointerEx
InterlockedFlushSList
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
SetConsoleCtrlHandler
ReadFile
GetConsoleMode
ReadConsoleW
GetConsoleCP
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleFileNameW
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
HeapReAlloc
GetTimeZoneInformation
SetStdHandle

Exports

Exports

ACCESS_DESCRIPTION_free
ACCESS_DESCRIPTION_it
ACCESS_DESCRIPTION_new
AES_bi_ige_encrypt
AES_cbc_encrypt
AES_cfb128_encrypt
AES_cfb1_encrypt
AES_cfb8_encrypt
AES_ctr128_encrypt
AES_decrypt
AES_ecb_encrypt
AES_encrypt
AES_ige_encrypt
AES_ofb128_encrypt
AES_options
AES_set_decrypt_key
AES_set_encrypt_key
AES_unwrap_key
AES_wrap_key
ASN1_ANY_it
ASN1_BIT_STRING_check
ASN1_BIT_STRING_free
ASN1_BIT_STRING_get_bit
ASN1_BIT_STRING_it
ASN1_BIT_STRING_name_print
ASN1_BIT_STRING_new
ASN1_BIT_STRING_num_asc
ASN1_BIT_STRING_set
ASN1_BIT_STRING_set_asc
ASN1_BIT_STRING_set_bit
ASN1_BMPSTRING_free
ASN1_BMPSTRING_it
ASN1_BMPSTRING_new
ASN1_BOOLEAN_it
ASN1_ENUMERATED_free
ASN1_ENUMERATED_get
ASN1_ENUMERATED_it
ASN1_ENUMERATED_new
ASN1_ENUMERATED_set
ASN1_ENUMERATED_to_BN
ASN1_FBOOLEAN_it
ASN1_GENERALIZEDTIME_adj
ASN1_GENERALIZEDTIME_check
ASN1_GENERALIZEDTIME_free
ASN1_GENERALIZEDTIME_it
ASN1_GENERALIZEDTIME_new
ASN1_GENERALIZEDTIME_print
ASN1_GENERALIZEDTIME_set
ASN1_GENERALIZEDTIME_set_string
ASN1_GENERALSTRING_free
ASN1_GENERALSTRING_it
ASN1_GENERALSTRING_new
ASN1_IA5STRING_free
ASN1_IA5STRING_it
ASN1_IA5STRING_new
ASN1_INTEGER_cmp
ASN1_INTEGER_dup
ASN1_INTEGER_free
ASN1_INTEGER_get
ASN1_INTEGER_it
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_INTEGER_to_BN
ASN1_NULL_free
ASN1_NULL_it
ASN1_NULL_new
ASN1_OBJECT_create
ASN1_OBJECT_free
ASN1_OBJECT_it
ASN1_OBJECT_new
ASN1_OCTET_STRING_NDEF_it
ASN1_OCTET_STRING_cmp
ASN1_OCTET_STRING_dup
ASN1_OCTET_STRING_free
ASN1_OCTET_STRING_it
ASN1_OCTET_STRING_new
ASN1_OCTET_STRING_set
ASN1_PCTX_free
ASN1_PCTX_get_cert_flags
ASN1_PCTX_get_flags
ASN1_PCTX_get_nm_flags
ASN1_PCTX_get_oid_flags
ASN1_PCTX_get_str_flags
ASN1_PCTX_new
ASN1_PCTX_set_cert_flags
ASN1_PCTX_set_flags
ASN1_PCTX_set_nm_flags
ASN1_PCTX_set_oid_flags
ASN1_PCTX_set_str_flags
ASN1_PRINTABLESTRING_free
ASN1_PRINTABLESTRING_it
ASN1_PRINTABLESTRING_new
ASN1_PRINTABLE_free
ASN1_PRINTABLE_it
ASN1_PRINTABLE_new
ASN1_PRINTABLE_type
ASN1_SEQUENCE_ANY_it
ASN1_SEQUENCE_it
ASN1_SET_ANY_it
ASN1_STRING_TABLE_add
ASN1_STRING_TABLE_cleanup
ASN1_STRING_TABLE_get
ASN1_STRING_clear_free
ASN1_STRING_cmp
ASN1_STRING_copy
ASN1_STRING_data
ASN1_STRING_dup
ASN1_STRING_free
ASN1_STRING_get_default_mask
ASN1_STRING_length
ASN1_STRING_length_set
ASN1_STRING_new
ASN1_STRING_print
ASN1_STRING_print_ex
ASN1_STRING_print_ex_fp
ASN1_STRING_set
ASN1_STRING_set0
ASN1_STRING_set_by_NID
ASN1_STRING_set_default_mask
ASN1_STRING_set_default_mask_asc
ASN1_STRING_to_UTF8
ASN1_STRING_type
ASN1_STRING_type_new
ASN1_T61STRING_free
ASN1_T61STRING_it
ASN1_T61STRING_new
ASN1_TBOOLEAN_it
ASN1_TIME_adj
ASN1_TIME_check
ASN1_TIME_diff
ASN1_TIME_free
ASN1_TIME_it
ASN1_TIME_new
ASN1_TIME_print
ASN1_TIME_set
ASN1_TIME_set_string
ASN1_TIME_to_generalizedtime
ASN1_TYPE_cmp
ASN1_TYPE_free
ASN1_TYPE_get
ASN1_TYPE_get_int_octetstring
ASN1_TYPE_get_octetstring
ASN1_TYPE_new
ASN1_TYPE_set
ASN1_TYPE_set1
ASN1_TYPE_set_int_octetstring
ASN1_TYPE_set_octetstring
ASN1_UNIVERSALSTRING_free
ASN1_UNIVERSALSTRING_it
ASN1_UNIVERSALSTRING_new
ASN1_UNIVERSALSTRING_to_string
ASN1_UTCTIME_adj
ASN1_UTCTIME_check
ASN1_UTCTIME_cmp_time_t
ASN1_UTCTIME_free
ASN1_UTCTIME_it
ASN1_UTCTIME_new
ASN1_UTCTIME_print
ASN1_UTCTIME_set
ASN1_UTCTIME_set_string
ASN1_UTF8STRING_free
ASN1_UTF8STRING_it
ASN1_UTF8STRING_new
ASN1_VISIBLESTRING_free
ASN1_VISIBLESTRING_it
ASN1_VISIBLESTRING_new
ASN1_add_oid_module
ASN1_bn_print
ASN1_check_infinite_end
ASN1_const_check_infinite_end
ASN1_d2i_bio
ASN1_d2i_fp
ASN1_digest
ASN1_dup
ASN1_generate_nconf
ASN1_generate_v3
ASN1_get_object
ASN1_i2d_bio
ASN1_i2d_fp
ASN1_item_d2i
ASN1_item_d2i_bio
ASN1_item_d2i_fp
ASN1_item_digest
ASN1_item_dup
ASN1_item_ex_d2i
ASN1_item_ex_free
ASN1_item_ex_i2d
ASN1_item_ex_new
ASN1_item_free
ASN1_item_i2d
ASN1_item_i2d_bio
ASN1_item_i2d_fp
ASN1_item_ndef_i2d
ASN1_item_new
ASN1_item_pack
ASN1_item_print
ASN1_item_sign
ASN1_item_sign_ctx
ASN1_item_unpack
ASN1_item_verify
ASN1_mbstring_copy
ASN1_mbstring_ncopy
ASN1_object_size
ASN1_pack_string
ASN1_parse
ASN1_parse_dump
ASN1_primitive_free
ASN1_primitive_new
ASN1_put_eoc
ASN1_put_object
ASN1_seq_pack
ASN1_seq_unpack
ASN1_sign
ASN1_tag2bit
ASN1_tag2str
ASN1_template_d2i
ASN1_template_free
ASN1_template_i2d
ASN1_template_new
ASN1_unpack_string
ASN1_verify
AUTHORITY_INFO_ACCESS_free
AUTHORITY_INFO_ACCESS_it
AUTHORITY_INFO_ACCESS_new
AUTHORITY_KEYID_free
AUTHORITY_KEYID_it
AUTHORITY_KEYID_new
BASIC_CONSTRAINTS_free
BASIC_CONSTRAINTS_it
BASIC_CONSTRAINTS_new
BF_cbc_encrypt
BF_cfb64_encrypt
BF_decrypt
BF_ecb_encrypt
BF_encrypt
BF_ofb64_encrypt
BF_options
BF_set_key
BIGNUM_it
BIO_accept
BIO_asn1_get_prefix
BIO_asn1_get_suffix
BIO_asn1_set_prefix
BIO_asn1_set_suffix
BIO_callback_ctrl
BIO_clear_flags
BIO_copy_next_retry
BIO_ctrl
BIO_ctrl_get_read_request
BIO_ctrl_get_write_guarantee
BIO_ctrl_pending
BIO_ctrl_reset_read_request
BIO_ctrl_wpending
BIO_debug_callback
BIO_dgram_non_fatal_error
BIO_dump
BIO_dump_cb
BIO_dump_fp
BIO_dump_indent
BIO_dump_indent_cb
BIO_dump_indent_fp
BIO_dup_chain
BIO_f_asn1
BIO_f_base64
BIO_f_buffer
BIO_f_cipher
BIO_f_md
BIO_f_nbio_test
BIO_f_null
BIO_f_reliable
BIO_fd_non_fatal_error
BIO_fd_should_retry
BIO_find_type
BIO_free
BIO_free_all
BIO_get_accept_socket
BIO_get_callback
BIO_get_callback_arg
BIO_get_ex_data
BIO_get_ex_new_index
BIO_get_host_ip
BIO_get_port
BIO_get_retry_BIO
BIO_get_retry_reason
BIO_gethostbyname
BIO_gets
BIO_hex_string
BIO_indent
BIO_int_ctrl
BIO_method_name
BIO_method_type
BIO_new
BIO_new_CMS
BIO_new_NDEF
BIO_new_PKCS7
BIO_new_accept
BIO_new_bio_pair
BIO_new_connect
BIO_new_dgram
BIO_new_fd
BIO_new_file
BIO_new_fp
BIO_new_mem_buf
BIO_new_socket
BIO_next
BIO_nread
BIO_nread0
BIO_number_read
BIO_number_written
BIO_nwrite
BIO_nwrite0
BIO_pop
BIO_printf
BIO_ptr_ctrl
BIO_push
BIO_puts
BIO_read
BIO_s_accept
BIO_s_bio
BIO_s_connect
BIO_s_datagram
BIO_s_fd
BIO_s_file
BIO_s_mem
BIO_s_null
BIO_s_socket
BIO_set
BIO_set_callback
BIO_set_callback_arg
BIO_set_cipher
BIO_set_ex_data
BIO_set_flags
BIO_set_tcp_ndelay
BIO_snprintf
BIO_sock_cleanup
BIO_sock_error
BIO_sock_init
BIO_sock_non_fatal_error
BIO_sock_should_retry
BIO_socket_ioctl
BIO_socket_nbio
BIO_test_flags
BIO_vfree
BIO_vprintf
BIO_vsnprintf
BIO_write
BN_BLINDING_convert
BN_BLINDING_convert_ex
BN_BLINDING_create_param
BN_BLINDING_free
BN_BLINDING_get_flags
BN_BLINDING_get_thread_id
BN_BLINDING_invert
BN_BLINDING_invert_ex
BN_BLINDING_new
BN_BLINDING_set_flags
BN_BLINDING_set_thread_id
BN_BLINDING_thread_id
BN_BLINDING_update
BN_CTX_end
BN_CTX_free
BN_CTX_get
BN_CTX_init
BN_CTX_new
BN_CTX_start
BN_GENCB_call
BN_GF2m_add
BN_GF2m_arr2poly
BN_GF2m_mod
BN_GF2m_mod_arr
BN_GF2m_mod_div
BN_GF2m_mod_div_arr
BN_GF2m_mod_exp
BN_GF2m_mod_exp_arr
BN_GF2m_mod_inv
BN_GF2m_mod_inv_arr
BN_GF2m_mod_mul
BN_GF2m_mod_mul_arr
BN_GF2m_mod_solve_quad
BN_GF2m_mod_solve_quad_arr
BN_GF2m_mod_sqr
BN_GF2m_mod_sqr_arr
BN_GF2m_mod_sqrt
BN_GF2m_mod_sqrt_arr
BN_GF2m_poly2arr
BN_MONT_CTX_copy
BN_MONT_CTX_free
BN_MONT_CTX_init
BN_MONT_CTX_new
BN_MONT_CTX_set
BN_MONT_CTX_set_locked
BN_RECP_CTX_free
BN_RECP_CTX_init
BN_RECP_CTX_new
BN_RECP_CTX_set
BN_X931_derive_prime_ex
BN_X931_generate_Xpq
BN_X931_generate_prime_ex
BN_add
BN_add_word
BN_asc2bn
BN_bin2bn
BN_bn2bin
BN_bn2dec
BN_bn2hex
BN_bn2mpi
BN_bntest_rand
BN_clear
BN_clear_bit
BN_clear_free
BN_cmp
BN_consttime_swap
BN_copy
BN_dec2bn
BN_div
BN_div_recp
BN_div_word
BN_dup
BN_exp
BN_free
BN_from_montgomery
BN_gcd
BN_generate_prime
BN_generate_prime_ex
BN_get0_nist_prime_192
BN_get0_nist_prime_224
BN_get0_nist_prime_256
BN_get0_nist_prime_384
BN_get0_nist_prime_521
BN_get_params
BN_get_word
BN_hex2bn
BN_init
BN_is_bit_set
BN_is_prime
BN_is_prime_ex
BN_is_prime_fasttest
BN_is_prime_fasttest_ex
BN_kronecker
BN_lshift
BN_lshift1
BN_mask_bits
BN_mod_add
BN_mod_add_quick
BN_mod_exp
BN_mod_exp2_mont
BN_mod_exp_mont
BN_mod_exp_mont_consttime
BN_mod_exp_mont_word
BN_mod_exp_recp
BN_mod_exp_simple
BN_mod_inverse
BN_mod_lshift
BN_mod_lshift1
BN_mod_lshift1_quick
BN_mod_lshift_quick
BN_mod_mul
BN_mod_mul_montgomery
BN_mod_mul_reciprocal
BN_mod_sqr
BN_mod_sqrt
BN_mod_sub
BN_mod_sub_quick
BN_mod_word
BN_mpi2bn
BN_mul
BN_mul_word
BN_new
BN_nist_mod_192
BN_nist_mod_224
BN_nist_mod_256
BN_nist_mod_384
BN_nist_mod_521
BN_nnmod
BN_num_bits
BN_num_bits_word
BN_options
BN_print
BN_print_fp
BN_pseudo_rand
BN_pseudo_rand_range
BN_rand
BN_rand_range
BN_reciprocal
BN_rshift
BN_rshift1
BN_set_bit
BN_set_negative
BN_set_params
BN_set_word
BN_sqr
BN_sub
BN_sub_word
BN_swap
BN_to_ASN1_ENUMERATED
BN_to_ASN1_INTEGER
BN_uadd
BN_ucmp
BN_usub
BN_value_one

Sections

.text
Size: 989KB - Virtual size: 989KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 361KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Privacy Policу/cmds/libs/ssl/ssl.g
Privacy Policу/cmds/libs/ssl/ssleay32.dll
.dll windows x86

aa99444adc2adf039aff8e4a216202af

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:30

Not After

09-06-2027 11:30

Subject

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

76:bc:07:0e:95:e0:87:8d:ce:5b:30:40:ff:b2:b3:33
Certificate

Issuer

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

20-11-2018 06:59

Not After

20-11-2019 06:59

Subject

CN=Open Source Developer\, François PIETTE,O=Open Source Developer,L=EMBOURG,C=BE,1.2.840.113549.1.9.1=#0c1b6672616e636f69732e706965747465406f766572627974652e6265

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:30

Not After

09-06-2027 11:30

Subject

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

76:bc:07:0e:95:e0:87:8d:ce:5b:30:40:ff:b2:b3:33
Certificate

Issuer

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

20-11-2018 06:59

Not After

20-11-2019 06:59

Subject

CN=Open Source Developer\, François PIETTE,O=Open Source Developer,L=EMBOURG,C=BE,1.2.840.113549.1.9.1=#0c1b6672616e636f69732e706965747465406f766572627974652e6265

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:ac:f1:d9:71:c4:18:22:1b:d8:c7:ac:ac:aa:27:41:29:c7:a1:44:08:e9:0b:9b:96:8b:6c:c4:75:80:ce:28
Signer

Actual PE Digest

0f:ac:f1:d9:71:c4:18:22:1b:d8:c7:ac:ac:aa:27:41:29:c7:a1:44:08:e9:0b:9b:96:8b:6c:c4:75:80:ce:28

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Open Source Developer\, François PIETTE,O=Open Source Developer,L=EMBOURG,C=BE,1.2.840.113549.1.9.1=#0c1b6672616e636f69732e706965747465406f766572627974652e6265

12-09-2019 10:18
Valid: true

Chain 1

CN=Open Source Developer\, François PIETTE,O=Open Source Developer,L=EMBOURG,C=BE,1.2.840.113549.1.9.1=#0c1b6672616e636f69732e706965747465406f766572627974652e6265

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

59:47:7c:ae:9b:28:d9:1a:07:81:0b:41:dc:c0:bb:98:84:5c:0f:61
Signer

Actual PE Digest

59:47:7c:ae:9b:28:d9:1a:07:81:0b:41:dc:c0:bb:98:84:5c:0f:61

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Open Source Developer\, François PIETTE,O=Open Source Developer,L=EMBOURG,C=BE,1.2.840.113549.1.9.1=#0c1b6672616e636f69732e706965747465406f766572627974652e6265

12-09-2019 10:17
Valid: true

Chain 1

CN=Open Source Developer\, François PIETTE,O=Open Source Developer,L=EMBOURG,C=BE,1.2.840.113549.1.9.1=#0c1b6672616e636f69732e706965747465406f766572627974652e6265

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

libeay32

ord3575
ord3512
ord3608
ord3459
ord3480
ord3550
ord3666
ord3644
ord866
ord641
ord754
ord654
ord635
ord2747
ord2784
ord2572
ord964
ord965
ord464
ord2201
ord3489
ord907
ord904
ord176
ord87
ord150
ord125
ord1000
ord124
ord129
ord486
ord493
ord484
ord205
ord216
ord363
ord2712
ord2925
ord3165
ord268
ord333
ord316
ord4470
ord1010
ord282
ord4125
ord4262
ord4164
ord1071
ord2877
ord3711
ord3682
ord3719
ord577
ord763
ord572
ord4046
ord481
ord2063
ord2107
ord3450
ord283
ord3418
ord3244
ord1096
ord1097
ord78
ord109
ord95
ord3816
ord3873
ord3836
ord3888
ord3891
ord3874
ord2589
ord2915
ord323
ord3906
ord1144
ord1145
ord3823
ord3846
ord89
ord2292
ord1081
ord187
ord3857
ord267
ord503
ord1012
ord3631
ord3479
ord3664
ord3737
ord3633
ord3675
ord341
ord1011
ord359
ord365
ord4210
ord3067
ord266
ord264
ord3314
ord3312
ord3313
ord4188
ord2568
ord3528
ord4684
ord3388
ord541
ord3925
ord3922
ord4701
ord653
ord4692
ord3192
ord3124
ord2702
ord2898
ord3332
ord3566
ord1202
ord4144
ord4372
ord3782
ord2400
ord4174
ord193
ord3866
ord3767
ord3758
ord3704
ord3647
ord3365
ord3766
ord3460
ord4114
ord3783
ord3454
ord3394
ord3754
ord1655
ord914
ord3422
ord1027
ord1025
ord1004
ord1007
ord1005
ord3826
ord53
ord85
ord67
ord65
ord74
ord98
ord58
ord497
ord206
ord892
ord890
ord897
ord2257
ord248
ord364
ord4331
ord4513
ord629
ord626
ord628
ord630
ord3437
ord3527
ord3378
ord3610
ord3414
ord3495
ord3399
ord3559
ord575
ord636
ord2051
ord2478
ord246
ord3657
ord3396
ord908
ord911
ord93
ord128
ord623
ord622
ord624
ord1100
ord1023
ord1016
ord2204
ord2451
ord2524
ord3505
ord3595
ord680
ord857
ord657
ord4693
ord2135
ord679
ord401
ord3205
ord891
ord887
ord889
ord4045
ord2475
ord368
ord370
ord367
ord369
ord1671
ord189
ord1147
ord314
ord315
ord4383
ord4320
ord956
ord750
ord279
ord748
ord280
ord774
ord751
ord2181
ord394
ord1959
ord400
ord399
ord716
ord822
ord718
ord824
ord8
ord7
ord3700
ord3623
ord37
ord35
ord703
ord1091
ord88
ord2426
ord86
ord1101
ord313
ord3724
ord299
ord304
ord329
ord318
ord325
ord959
ord4601
ord3155
ord2996
ord4615
ord4637
ord4656
ord4731
ord4740
ord3795
ord3807
ord3914
ord292
ord293
ord395
ord2252
ord91
ord955
ord225
ord247
ord4572
ord4580
ord4576
ord4570
ord4578
ord4582
ord4573
ord4577
ord4581
ord4575
ord4584
ord3353
ord3663
ord2578
ord3178
ord3010
ord2929
ord2924
ord3570
ord3695
ord4488
ord1070
ord4245
ord4369
ord4474
ord4233
ord4430
ord4119
ord967
ord3729
ord281
ord2128
ord285
ord2927
ord3315
ord256
ord961
ord290
ord289
ord274
ord276
ord2894
ord2936
ord269
ord3109
ord3883
ord2821
ord2630
ord3899
ord3896
ord3844
ord3837
ord222
ord252
ord219
ord201
ord203
ord202
ord4540
ord498
ord495
ord2760
ord490
ord32
ord165
ord120
ord118
ord123
ord151
ord110
ord111
ord52
ord66
ord3245
ord181
ord188
ord903
ord912
ord910
ord909
ord905
ord2411
ord1653
ord1654
ord3513
ord170
ord3239
ord168
ord167
ord1041
ord169

kernel32

RaiseException
WriteConsoleW
CreateFileW
SetFilePointerEx
CloseHandle
HeapReAlloc
HeapSize
GetStringTypeW
SetStdHandle
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
GetStdHandle
LCMapStringW
HeapAlloc
HeapFree
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
InterlockedFlushSList
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
SystemTimeToFileTime
GetSystemTime
SetLastError
DecodePointer
EncodePointer

Exports

Exports

BIO_f_ssl
BIO_new_buffer_ssl_connect
BIO_new_ssl
BIO_new_ssl_connect
BIO_ssl_copy_session_id
BIO_ssl_shutdown
DTLS_client_method
DTLS_method
DTLS_server_method
DTLSv1_2_client_method
DTLSv1_2_method
DTLSv1_2_server_method
DTLSv1_client_method
DTLSv1_method
DTLSv1_server_method
ERR_load_SSL_strings
PEM_read_SSL_SESSION
PEM_read_bio_SSL_SESSION
PEM_write_SSL_SESSION
PEM_write_bio_SSL_SESSION
SRP_Calc_A_param
SRP_generate_client_master_secret
SRP_generate_server_master_secret
SSL_CIPHER_description
SSL_CIPHER_find
SSL_CIPHER_get_bits
SSL_CIPHER_get_id
SSL_CIPHER_get_name
SSL_CIPHER_get_version
SSL_COMP_add_compression_method
SSL_COMP_free_compression_methods
SSL_COMP_get_compression_methods
SSL_COMP_get_name
SSL_COMP_set0_compression_methods
SSL_CONF_CTX_clear_flags
SSL_CONF_CTX_finish
SSL_CONF_CTX_free
SSL_CONF_CTX_new
SSL_CONF_CTX_set1_prefix
SSL_CONF_CTX_set_flags
SSL_CONF_CTX_set_ssl
SSL_CONF_CTX_set_ssl_ctx
SSL_CONF_cmd
SSL_CONF_cmd_argv
SSL_CONF_cmd_value_type
SSL_CTX_SRP_CTX_free
SSL_CTX_SRP_CTX_init
SSL_CTX_add_client_CA
SSL_CTX_add_client_custom_ext
SSL_CTX_add_server_custom_ext
SSL_CTX_add_session
SSL_CTX_callback_ctrl
SSL_CTX_check_private_key
SSL_CTX_ctrl
SSL_CTX_flush_sessions
SSL_CTX_free
SSL_CTX_get0_certificate
SSL_CTX_get0_param
SSL_CTX_get0_privatekey
SSL_CTX_get_cert_store
SSL_CTX_get_client_CA_list
SSL_CTX_get_client_cert_cb
SSL_CTX_get_ex_data
SSL_CTX_get_ex_new_index
SSL_CTX_get_info_callback
SSL_CTX_get_quiet_shutdown
SSL_CTX_get_ssl_method
SSL_CTX_get_timeout
SSL_CTX_get_verify_callback
SSL_CTX_get_verify_depth
SSL_CTX_get_verify_mode
SSL_CTX_load_verify_locations
SSL_CTX_new
SSL_CTX_remove_session
SSL_CTX_sess_get_get_cb
SSL_CTX_sess_get_new_cb
SSL_CTX_sess_get_remove_cb
SSL_CTX_sess_set_get_cb
SSL_CTX_sess_set_new_cb
SSL_CTX_sess_set_remove_cb
SSL_CTX_sessions
SSL_CTX_set1_param
SSL_CTX_set_alpn_protos
SSL_CTX_set_alpn_select_cb
SSL_CTX_set_cert_cb
SSL_CTX_set_cert_store
SSL_CTX_set_cert_verify_callback
SSL_CTX_set_cipher_list
SSL_CTX_set_client_CA_list
SSL_CTX_set_client_cert_cb
SSL_CTX_set_client_cert_engine
SSL_CTX_set_cookie_generate_cb
SSL_CTX_set_cookie_verify_cb
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_verify_paths
SSL_CTX_set_ex_data
SSL_CTX_set_generate_session_id
SSL_CTX_set_info_callback
SSL_CTX_set_msg_callback
SSL_CTX_set_next_proto_select_cb
SSL_CTX_set_next_protos_advertised_cb
SSL_CTX_set_psk_client_callback
SSL_CTX_set_psk_server_callback
SSL_CTX_set_purpose
SSL_CTX_set_quiet_shutdown
SSL_CTX_set_session_id_context
SSL_CTX_set_srp_cb_arg
SSL_CTX_set_srp_client_pwd_callback
SSL_CTX_set_srp_password
SSL_CTX_set_srp_strength
SSL_CTX_set_srp_username
SSL_CTX_set_srp_username_callback
SSL_CTX_set_srp_verify_param_callback
SSL_CTX_set_ssl_version
SSL_CTX_set_timeout
SSL_CTX_set_tlsext_use_srtp
SSL_CTX_set_tmp_dh_callback
SSL_CTX_set_tmp_ecdh_callback
SSL_CTX_set_tmp_rsa_callback
SSL_CTX_set_trust
SSL_CTX_set_verify
SSL_CTX_set_verify_depth
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_certificate
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_file
SSL_CTX_use_psk_identity_hint
SSL_CTX_use_serverinfo
SSL_CTX_use_serverinfo_file
SSL_SESSION_free
SSL_SESSION_get0_peer
SSL_SESSION_get_compress_id
SSL_SESSION_get_ex_data
SSL_SESSION_get_ex_new_index
SSL_SESSION_get_id
SSL_SESSION_get_time
SSL_SESSION_get_timeout
SSL_SESSION_new
SSL_SESSION_print
SSL_SESSION_print_fp
SSL_SESSION_set1_id_context
SSL_SESSION_set_ex_data
SSL_SESSION_set_time
SSL_SESSION_set_timeout
SSL_SRP_CTX_free
SSL_SRP_CTX_init
SSL_accept
SSL_add_client_CA
SSL_add_dir_cert_subjects_to_stack
SSL_add_file_cert_subjects_to_stack
SSL_alert_desc_string
SSL_alert_desc_string_long
SSL_alert_type_string
SSL_alert_type_string_long
SSL_cache_hit
SSL_callback_ctrl
SSL_certs_clear
SSL_check_chain
SSL_check_private_key
SSL_clear
SSL_connect
SSL_copy_session_id
SSL_ctrl
SSL_do_handshake
SSL_dup
SSL_dup_CA_list
SSL_export_keying_material
SSL_extension_supported
SSL_free
SSL_get0_alpn_selected
SSL_get0_next_proto_negotiated
SSL_get0_param
SSL_get1_session
SSL_get_SSL_CTX
SSL_get_certificate
SSL_get_cipher_list
SSL_get_ciphers
SSL_get_client_CA_list
SSL_get_current_cipher
SSL_get_current_compression
SSL_get_current_expansion
SSL_get_default_timeout
SSL_get_error
SSL_get_ex_data
SSL_get_ex_data_X509_STORE_CTX_idx
SSL_get_ex_new_index
SSL_get_fd
SSL_get_finished
SSL_get_info_callback
SSL_get_peer_cert_chain
SSL_get_peer_certificate
SSL_get_peer_finished
SSL_get_privatekey
SSL_get_psk_identity
SSL_get_psk_identity_hint
SSL_get_quiet_shutdown
SSL_get_rbio
SSL_get_read_ahead
SSL_get_rfd
SSL_get_selected_srtp_profile
SSL_get_servername
SSL_get_servername_type
SSL_get_session
SSL_get_shared_ciphers
SSL_get_shared_sigalgs
SSL_get_shutdown
SSL_get_sigalgs
SSL_get_srp_N
SSL_get_srp_g
SSL_get_srp_userinfo
SSL_get_srp_username
SSL_get_srtp_profiles
SSL_get_ssl_method
SSL_get_verify_callback
SSL_get_verify_depth
SSL_get_verify_mode
SSL_get_verify_result
SSL_get_version
SSL_get_wbio
SSL_get_wfd
SSL_has_matching_session_id
SSL_is_server
SSL_library_init
SSL_load_client_CA_file
SSL_load_error_strings
SSL_new
SSL_peek
SSL_pending
SSL_read
SSL_renegotiate
SSL_renegotiate_abbreviated
SSL_renegotiate_pending
SSL_rstate_string
SSL_rstate_string_long
SSL_select_next_proto
SSL_set1_param
SSL_set_SSL_CTX
SSL_set_accept_state
SSL_set_alpn_protos
SSL_set_bio
SSL_set_cert_cb
SSL_set_cipher_list
SSL_set_client_CA_list
SSL_set_connect_state
SSL_set_debug
SSL_set_ex_data
SSL_set_fd
SSL_set_generate_session_id
SSL_set_info_callback
SSL_set_msg_callback
SSL_set_psk_client_callback
SSL_set_psk_server_callback
SSL_set_purpose
SSL_set_quiet_shutdown
SSL_set_read_ahead
SSL_set_rfd
SSL_set_session
SSL_set_session_id_context
SSL_set_session_secret_cb
SSL_set_session_ticket_ext
SSL_set_session_ticket_ext_cb
SSL_set_shutdown
SSL_set_srp_server_param
SSL_set_srp_server_param_pw
SSL_set_ssl_method
SSL_set_state
SSL_set_tlsext_use_srtp
SSL_set_tmp_dh_callback
SSL_set_tmp_ecdh_callback
SSL_set_tmp_rsa_callback
SSL_set_trust
SSL_set_verify
SSL_set_verify_depth
SSL_set_verify_result
SSL_set_wfd
SSL_shutdown
SSL_srp_server_param_with_username
SSL_state
SSL_state_string
SSL_state_string_long
SSL_use_PrivateKey
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_file
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_file
SSL_use_certificate
SSL_use_certificate_ASN1
SSL_use_certificate_file
SSL_use_psk_identity_hint
SSL_version
SSL_want
SSL_write
SSLv23_client_method
SSLv23_method
SSLv23_server_method
SSLv3_client_method
SSLv3_method
SSLv3_server_method
TLSv1_1_client_method
TLSv1_1_method
TLSv1_1_server_method
TLSv1_2_client_method
TLSv1_2_method
TLSv1_2_server_method
TLSv1_client_method
TLSv1_method
TLSv1_server_method
d2i_SSL_SESSION
i2d_SSL_SESSION
ssl3_ciphers

Sections

.text
Size: 270KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Privacy Policу/cmds/libs/tree/tree.g
Privacy Policу/cmds/libs/utf.g
Privacy Policу/cmds/libs/vislib.ge
Privacy Policу/cmds/libs/winproc-src.g
Privacy Policу/cmds/libs/winproc.g
Privacy Policу/cmds/libs/xmacros.g
Privacy Policу/cmds/sources/7zdecode.g
Privacy Policу/cmds/sources/activex.g
Privacy Policу/cmds/sources/afterreboot.g
Privacy Policу/cmds/sources/appinfo.g
Privacy Policу/cmds/sources/background.g
Privacy Policу/cmds/sources/backup.g
Privacy Policу/cmds/sources/cabdecode.g
Privacy Policу/cmds/sources/check.g
Privacy Policу/cmds/sources/checkredist.g
Privacy Policу/cmds/sources/checkreq.g
Privacy Policу/cmds/sources/close.g
Privacy Policу/cmds/sources/cmdline.g
Privacy Policу/cmds/sources/cmntree.g
Privacy Policу/cmds/sources/common.g
.vbs
Privacy Policу/cmds/sources/copy.g
Privacy Policу/cmds/sources/createdir.g
Privacy Policу/cmds/sources/default.g
Privacy Policу/cmds/sources/delete.g
Privacy Policу/cmds/sources/deltext.g
Privacy Policу/cmds/sources/dlgask.g
Privacy Policу/cmds/sources/dlgautosize.g
Privacy Policу/cmds/sources/dlgback.g
Privacy Policу/cmds/sources/dlgbrowser.g
Privacy Policу/cmds/sources/dlgfin.g
Privacy Policу/cmds/sources/dlglang.g
Privacy Policу/cmds/sources/dlglic.g
Privacy Policу/cmds/sources/dlglist.g
Privacy Policу/cmds/sources/dlgmain.g
.vbs
Privacy Policу/cmds/sources/dlgpass.g
Privacy Policу/cmds/sources/dlgpath.g
Privacy Policу/cmds/sources/dlgprog.g
Privacy Policу/cmds/sources/dlgpsw.g
Privacy Policу/cmds/sources/dlgread.g
Privacy Policу/cmds/sources/dlgready.g
Privacy Policу/cmds/sources/dlgserial.g
Privacy Policу/cmds/sources/dlgsets.g
.js
Privacy Policу/cmds/sources/dlgshfolder.g
Privacy Policу/cmds/sources/dlgslideshow.g
Privacy Policу/cmds/sources/dlgtree.g
Privacy Policу/cmds/sources/dlguconf.g
Privacy Policу/cmds/sources/dlgufin.g
Privacy Policу/cmds/sources/dlgundel-x.g
Privacy Policу/cmds/sources/dlgundel.g
Privacy Policу/cmds/sources/dlguprog.g
Privacy Policу/cmds/sources/dlgwel.g
Privacy Policу/cmds/sources/download.g
Privacy Policу/cmds/sources/embedfiles.g
Privacy Policу/cmds/sources/ext.g
Privacy Policу/cmds/sources/fileinfo.g
Privacy Policу/cmds/sources/geacommon.g
Privacy Policу/cmds/sources/getuser.g
Privacy Policу/cmds/sources/globenv.g
Privacy Policу/cmds/sources/hash.g
Privacy Policу/cmds/sources/httprequest.g
Privacy Policу/cmds/sources/ifwhile.g
Privacy Policу/cmds/sources/importreg.g
Privacy Policу/cmds/sources/ini.g
Privacy Policу/cmds/sources/inidel.g
Privacy Policу/cmds/sources/iniext.g
Privacy Policу/cmds/sources/inserttext.g
Privacy Policу/cmds/sources/install.g
Privacy Policу/cmds/sources/keystroke.g
Privacy Policу/cmds/sources/message.g
Privacy Policу/cmds/sources/modifyvar.g
Privacy Policу/cmds/sources/parse.g
Privacy Policу/cmds/sources/popup.g
Privacy Policу/cmds/sources/progset.g
Privacy Policу/cmds/sources/redir64.g
Privacy Policу/cmds/sources/redircon.g
Privacy Policу/cmds/sources/regfont.g
Privacy Policу/cmds/sources/registry.g
Privacy Policу/cmds/sources/regnetdll.g
Privacy Policу/cmds/sources/rename.g
Privacy Policу/cmds/sources/replace.g
Privacy Policу/cmds/sources/run.g
Privacy Policу/cmds/sources/runasuser.g
Privacy Policу/cmds/sources/runmsi.g
Privacy Policу/cmds/sources/runtime.g
Privacy Policу/cmds/sources/rununinst.g
Privacy Policу/cmds/sources/schtask.g
Privacy Policу/cmds/sources/search.g
Privacy Policу/cmds/sources/service.g
Privacy Policу/cmds/sources/setattr.g
Privacy Policу/cmds/sources/shadmin.g
Privacy Policу/cmds/sources/share.g
Privacy Policу/cmds/sources/shell.g
Privacy Policу/cmds/sources/shlist.g
Privacy Policу/cmds/sources/shortcut.g
Privacy Policу/cmds/sources/sleep.g
Privacy Policу/cmds/sources/sound.g
Privacy Policу/cmds/sources/splitvar.g
Privacy Policу/cmds/sources/substvar.g
Privacy Policу/cmds/sources/sysinfo.g
Privacy Policу/cmds/sources/tempfiles.g
Privacy Policу/cmds/sources/uninstall.g
Privacy Policу/cmds/sources/unlog.g
Privacy Policу/cmds/sources/unpackfile-x.g
Privacy Policу/cmds/sources/unpackfile-y.g
Privacy Policу/cmds/sources/unpackfile.g
.js
Privacy Policу/cmds/sources/unppmd.dll
.dll windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

ppmd_decode
ppmd_start
ppmd_stop
unppmd_init

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Privacy Policу/cmds/sources/unppmd.g
Privacy Policу/cmds/sources/unprocess.g
Privacy Policу/cmds/sources/update.g
Privacy Policу/cmds/sources/usystem.g
Privacy Policу/cmds/sources/varset.g
Privacy Policу/cmds/sources/varsrw.g
Privacy Policу/cmds/sources/zipdecode.g
.vbs
Privacy Policу/language/Chinese_Simplified.lng
Privacy Policу/language/Chinese_Traditional.lng
Privacy Policу/language/arabic.lng
Privacy Policу/language/armenian.lng
Privacy Policу/language/basque.lng
Privacy Policу/language/bulgarian.lng
Privacy Policу/language/catalan.lng
Privacy Policу/language/croatian.lng
Privacy Policу/language/czech.lng
Privacy Policу/language/danish.lng
Privacy Policу/language/dutch.lng
Privacy Policу/language/english.lng
Privacy Policу/language/filipino.lng
Privacy Policу/language/finnish.lng
Privacy Policу/language/french.lng
Privacy Policу/language/german.lng
Privacy Policу/language/greek.lng
Privacy Policу/language/hebrew.lng
Privacy Policу/language/hungarian.lng
Privacy Policу/language/indonesian.lng
Privacy Policу/language/italian.lng
Privacy Policу/language/japanese.lng
Privacy Policу/language/lithuanian.lng
Privacy Policу/language/polish.lng
Privacy Policу/language/portuguese_br.lng
Privacy Policу/language/portuguese_pt.lng
Privacy Policу/language/romanian.lng
Privacy Policу/language/russian.lng
Privacy Policу/language/serbian.lng
Privacy Policу/language/serbian_lat.lng
Privacy Policу/language/slovak.lng
Privacy Policу/language/slovenian.lng
Privacy Policу/language/spanish.lng
Privacy Policу/language/swedish.lng
Privacy Policу/language/turkish.lng
Privacy Policу/language/ukrainian.lng
Privacy Policу/language/uzbek.lng
Privacy Policу/language/valencian.lng
Privacy Policу/libsqlite3-0.dll
.dll windows x64

6a76a05db4ed2607d1661c8c35006ba5

Code Sign

31:83:0c:37:0a:d7:e4:97:63:3b:6e:b3:a0:2d:69:e6
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

18-02-2022 00:00

Not After

17-02-2025 23:59

Subject

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01-01-2004 00:00

Not After

31-12-2028 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:cb:34:fd:3d:ff:12:11:33:9f:f0:7c:4b:21:57:c7
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

30-08-2022 00:00

Not After

29-08-2023 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ed:34:3e:b8:ff:c3:52:22:c4:8e:65:da:d9:29:70:f4:aa:18:30:3d:63:72:94:f0:64:14:52:d0:be:44:a0:77
Signer

Actual PE Digest

ed:34:3e:b8:ff:c3:52:22:c4:8e:65:da:d9:29:70:f4:aa:18:30:3d:63:72:94:f0:64:14:52:d0:be:44:a0:77

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

19-09-2022 09:20
Valid: true

Chain 1

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AreFileApisANSI
CloseHandle
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexW
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetProcessHeap
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetVersionExA
GetVersionExW
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
InitializeCriticalSection
LeaveCriticalSection
LocalFree
LockFile
LockFileEx
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
ReadFile
SetEndOfFile
SetFilePointer
Sleep
SystemTimeToFileTime
TlsGetValue
TryEnterCriticalSection
UnlockFile
UnlockFileEx
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile

msvcrt

__iob_func
__setusermatherr
_amsg_exit
_beginthreadex
_endthreadex
_errno
_initterm
_localtime64
_lock
_unlock
abort
acos
asin
atan
calloc
cosh
free
fwrite
malloc
memcmp
memcpy
memmove
memset
qsort
realloc
sinh
strcmp
strcspn
strlen
strncmp
strrchr
tan
tanh
vfprintf

Exports

Exports

sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_drop_modules
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_fts3_may_be_corrupt
sqlite3_fts5_may_be_corrupt
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_last_insert_rowid
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Privacy Policу/libstdc++-6.dll
.dll windows x64

6b086daa303d47b394d11cce9a702fb3

Code Sign

31:83:0c:37:0a:d7:e4:97:63:3b:6e:b3:a0:2d:69:e6
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

18-02-2022 00:00

Not After

17-02-2025 23:59

Subject

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01-01-2004 00:00

Not After

31-12-2028 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:cb:34:fd:3d:ff:12:11:33:9f:f0:7c:4b:21:57:c7
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

30-08-2022 00:00

Not After

29-08-2023 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

1b:54:87:d6:22:a5:af:a4:4d:87:63:d7:64:97:3d:1e:96:42:84:b1:cf:92:be:52:44:23:cc:ad:2e:67:9b:7d
Signer

Actual PE Digest

1b:54:87:d6:22:a5:af:a4:4d:87:63:d7:64:97:3d:1e:96:42:84:b1:cf:92:be:52:44:23:cc:ad:2e:67:9b:7d

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

19-09-2022 09:20
Valid: true

Chain 1

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libgcc_s_seh-1

_GCC_specific_handler
_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__popcountdi2

kernel32

CloseHandle
CreateFileW
CreateHardLinkW
CreateSemaphoreW
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
FreeLibrary
GetCurrentThreadId
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetFullPathNameW
GetLastError
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTempPathW
GetTimeZoneInformation
GetVolumeInformationW
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryW
MultiByteToWideChar
ReleaseSemaphore
RemoveDirectoryW
SetEndOfFile
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_aligned_free
_aligned_malloc
_amsg_exit
_assert
_close
_errno
_filelengthi64
_fileno
_findclose
_fstat64
_get_osfhandle
_initterm
_lock
_lseeki64
_strnicmp
_telli64
_unlock
_wchdir
_wchmod
_wfindfirst64
_wfindnext64
_wfopen
_wfullpath
_wgetcwd
_wmkdir
_wopen
_wrename
_wstat64
_wutime64
abort
calloc
fclose
fflush
fgetpos
fopen
fputc
fputs
fread
free
fsetpos
fwrite
getc
getenv
getwc
isspace
iswctype
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
putc
putwc
realloc
setlocale
setvbuf
sprintf
strchr
strcmp
strcoll
strerror
strftime
strlen
strncmp
strtoul
strxfrm
towlower
towupper
ungetc
ungetwc
vfprintf
wcscat
wcscmp
wcscoll
wcscpy
wcsftime
wcslen
wcsxfrm
_write
_read
_fileno
_fdopen
_close

Exports

Exports

_ZGTtNKSt13bad_exception4whatEv
_ZGTtNKSt13bad_exceptionD1Ev
_ZGTtNKSt9exception4whatEv
_ZGTtNKSt9exceptionD1Ev
_ZGVNSt10moneypunctIcLb0EE2idE
_ZGVNSt10moneypunctIcLb1EE2idE
_ZGVNSt10moneypunctIwLb0EE2idE
_ZGVNSt10moneypunctIwLb1EE2idE
_ZGVNSt11__timepunctIcE2idE
_ZGVNSt11__timepunctIwE2idE
_ZGVNSt7__cxx1110moneypunctIcLb0EE2idE
_ZGVNSt7__cxx1110moneypunctIcLb1EE2idE
_ZGVNSt7__cxx1110moneypunctIwLb0EE2idE
_ZGVNSt7__cxx1110moneypunctIwLb1EE2idE
_ZGVNSt7__cxx117collateIcE2idE
_ZGVNSt7__cxx117collateIwE2idE
_ZGVNSt7__cxx118messagesIcE2idE
_ZGVNSt7__cxx118messagesIwE2idE
_ZGVNSt7__cxx118numpunctIcE2idE
_ZGVNSt7__cxx118numpunctIwE2idE
_ZGVNSt7__cxx118time_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt7__cxx118time_getIwSt19istreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt7__cxx119money_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt7__cxx119money_getIwSt19istreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt7__cxx119money_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt7__cxx119money_putIwSt19ostreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt7collateIcE2idE
_ZGVNSt7collateIwE2idE
_ZGVNSt7num_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt7num_getIwSt19istreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt7num_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt7num_putIwSt19ostreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt8messagesIcE2idE
_ZGVNSt8messagesIwE2idE
_ZGVNSt8numpunctIcE2idE
_ZGVNSt8numpunctIwE2idE
_ZGVNSt8time_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt8time_getIwSt19istreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt8time_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt8time_putIwSt19ostreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt9money_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt9money_getIwSt19istreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt9money_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt9money_putIwSt19ostreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZN10__cxxabiv116__enum_type_infoD0Ev
_ZN10__cxxabiv116__enum_type_infoD1Ev
_ZN10__cxxabiv116__enum_type_infoD2Ev
_ZN10__cxxabiv117__array_type_infoD0Ev
_ZN10__cxxabiv117__array_type_infoD1Ev
_ZN10__cxxabiv117__array_type_infoD2Ev
_ZN10__cxxabiv117__class_type_infoD0Ev
_ZN10__cxxabiv117__class_type_infoD1Ev
_ZN10__cxxabiv117__class_type_infoD2Ev
_ZN10__cxxabiv117__pbase_type_infoD0Ev
_ZN10__cxxabiv117__pbase_type_infoD1Ev
_ZN10__cxxabiv117__pbase_type_infoD2Ev
_ZN10__cxxabiv119__pointer_type_infoD0Ev
_ZN10__cxxabiv119__pointer_type_infoD1Ev
_ZN10__cxxabiv119__pointer_type_infoD2Ev
_ZN10__cxxabiv120__function_type_infoD0Ev
_ZN10__cxxabiv120__function_type_infoD1Ev
_ZN10__cxxabiv120__function_type_infoD2Ev
_ZN10__cxxabiv120__si_class_type_infoD0Ev
_ZN10__cxxabiv120__si_class_type_infoD1Ev
_ZN10__cxxabiv120__si_class_type_infoD2Ev
_ZN10__cxxabiv121__vmi_class_type_infoD0Ev
_ZN10__cxxabiv121__vmi_class_type_infoD1Ev
_ZN10__cxxabiv121__vmi_class_type_infoD2Ev
_ZN10__cxxabiv123__fundamental_type_infoD0Ev
_ZN10__cxxabiv123__fundamental_type_infoD1Ev
_ZN10__cxxabiv123__fundamental_type_infoD2Ev
_ZN10__cxxabiv129__pointer_to_member_type_infoD0Ev
_ZN10__cxxabiv129__pointer_to_member_type_infoD1Ev
_ZN10__cxxabiv129__pointer_to_member_type_infoD2Ev
_ZN11__gnu_debug19_Safe_iterator_base12_M_get_mutexEv
_ZN11__gnu_debug19_Safe_iterator_base16_M_attach_singleEPNS_19_Safe_sequence_baseEb
_ZN11__gnu_debug19_Safe_iterator_base16_M_detach_singleEv
_ZN11__gnu_debug19_Safe_iterator_base9_M_attachEPNS_19_Safe_sequence_baseEb
_ZN11__gnu_debug19_Safe_iterator_base9_M_detachEv
_ZN11__gnu_debug19_Safe_sequence_base12_M_get_mutexEv
_ZN11__gnu_debug19_Safe_sequence_base13_M_detach_allEv
_ZN11__gnu_debug19_Safe_sequence_base18_M_detach_singularEv
_ZN11__gnu_debug19_Safe_sequence_base22_M_revalidate_singularEv
_ZN11__gnu_debug19_Safe_sequence_base7_M_swapERS0_
_ZN11__gnu_debug25_Safe_local_iterator_base16_M_attach_singleEPNS_19_Safe_sequence_baseEb
_ZN11__gnu_debug25_Safe_local_iterator_base9_M_attachEPNS_19_Safe_sequence_baseEb
_ZN11__gnu_debug25_Safe_local_iterator_base9_M_detachEv
_ZN11__gnu_debug30_Safe_unordered_container_base13_M_detach_allEv
_ZN11__gnu_debug30_Safe_unordered_container_base7_M_swapERS0_
_ZN14__gnu_parallel9_Settings3getEv
_ZN14__gnu_parallel9_Settings3setERS0_
_ZN9__gnu_cxx12__atomic_addEPVii
_ZN9__gnu_cxx17__pool_alloc_base12_M_get_mutexEv
_ZN9__gnu_cxx17__pool_alloc_base16_M_get_free_listEy
_ZN9__gnu_cxx17__pool_alloc_base9_M_refillEy
_ZN9__gnu_cxx18__exchange_and_addEPVii
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE4fileEv
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE4syncEv
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE5uflowEv
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE6xsgetnEPcx
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE6xsputnEPKcx
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE7seekoffExSt12_Ios_SeekdirSt13_Ios_Openmode
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE7seekposESt4fposIiESt13_Ios_Openmode
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE8overflowEi
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE9pbackfailEi
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE9underflowEv
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEEC1EOS3_
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEEC1EP6_iobuf
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEEC2EOS3_
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEEC2EP6_iobuf
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEED0Ev
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEED1Ev
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEEaSEOS3_
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE4fileEv
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE4syncEv
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE5uflowEv
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE6xsgetnEPwx
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE6xsputnEPKwx
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE7seekoffExSt12_Ios_SeekdirSt13_Ios_Openmode
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE7seekposESt4fposIiESt13_Ios_Openmode
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE8overflowEt
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE9pbackfailEt
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE9underflowEv
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEEC1EOS3_
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEEC1EP6_iobuf
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEEC2EOS3_
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEEC2EP6_iobuf
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEED0Ev
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEED1Ev
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEEaSEOS3_
_ZN9__gnu_cxx27__verbose_terminate_handlerEv
_ZN9__gnu_cxx6__poolILb0EE10_M_destroyEv
_ZN9__gnu_cxx6__poolILb0EE13_M_initializeEv
_ZN9__gnu_cxx6__poolILb0EE16_M_reclaim_blockEPcy
_ZN9__gnu_cxx6__poolILb0EE16_M_reserve_blockEyy
_ZN9__gnu_cxx6__poolILb1EE10_M_destroyEv
_ZN9__gnu_cxx6__poolILb1EE13_M_initializeEPFvPvE
_ZN9__gnu_cxx6__poolILb1EE13_M_initializeEv
_ZN9__gnu_cxx6__poolILb1EE16_M_get_thread_idEv
_ZN9__gnu_cxx6__poolILb1EE16_M_reclaim_blockEPcy
_ZN9__gnu_cxx6__poolILb1EE16_M_reserve_blockEyy
_ZN9__gnu_cxx6__poolILb1EE21_M_destroy_thread_keyEPv
_ZN9__gnu_cxx9__freeresEv
_ZN9__gnu_cxx9free_list6_M_getEy
_ZN9__gnu_cxx9free_list8_M_clearEv
_ZNK10__cxxabiv117__class_type_info10__do_catchEPKSt9type_infoPPvj
_ZNK10__cxxabiv117__class_type_info11__do_upcastEPKS0_PKvRNS0_15__upcast_resultE
_ZNK10__cxxabiv117__class_type_info11__do_upcastEPKS0_PPv
_ZNK10__cxxabiv117__class_type_info12__do_dyncastExNS0_10__sub_kindEPKS0_PKvS3_S5_RNS0_16__dyncast_resultE
_ZNK10__cxxabiv117__class_type_info20__do_find_public_srcExPKvPKS0_S2_
_ZNK10__cxxabiv117__pbase_type_info10__do_catchEPKSt9type_infoPPvj
_ZNK10__cxxabiv117__pbase_type_info15__pointer_catchEPKS0_PPvj
_ZNK10__cxxabiv119__pointer_type_info14__is_pointer_pEv
_ZNK10__cxxabiv119__pointer_type_info15__pointer_catchEPKNS_17__pbase_type_infoEPPvj
_ZNK10__cxxabiv120__function_type_info15__is_function_pEv
_ZNK10__cxxabiv120__si_class_type_info11__do_upcastEPKNS_17__class_type_infoEPKvRNS1_15__upcast_resultE
_ZNK10__cxxabiv120__si_class_type_info12__do_dyncastExNS_17__class_type_info10__sub_kindEPKS1_PKvS4_S6_RNS1_16__dyncast_resultE
_ZNK10__cxxabiv120__si_class_type_info20__do_find_public_srcExPKvPKNS_17__class_type_infoES2_
_ZNK10__cxxabiv121__vmi_class_type_info11__do_upcastEPKNS_17__class_type_infoEPKvRNS1_15__upcast_resultE
_ZNK10__cxxabiv121__vmi_class_type_info12__do_dyncastExNS_17__class_type_info10__sub_kindEPKS1_PKvS4_S6_RNS1_16__dyncast_resultE
_ZNK10__cxxabiv121__vmi_class_type_info20__do_find_public_srcExPKvPKNS_17__class_type_infoES2_
_ZNK10__cxxabiv129__pointer_to_member_type_info15__pointer_catchEPKNS_17__pbase_type_infoEPPvj
_ZNK11__gnu_debug16_Error_formatter10_M_messageENS_13_Debug_msg_idE
_ZNK11__gnu_debug16_Error_formatter10_Parameter14_M_print_fieldEPKS0_PKc
_ZNK11__gnu_debug16_Error_formatter10_Parameter20_M_print_descriptionEPKS0_
_ZNK11__gnu_debug16_Error_formatter13_M_print_wordEPKc
_ZNK11__gnu_debug16_Error_formatter15_M_print_stringEPKc
_ZNK11__gnu_debug16_Error_formatter17_M_get_max_lengthEv
_ZNK11__gnu_debug16_Error_formatter8_M_errorEv
_ZNK11__gnu_debug19_Safe_iterator_base11_M_singularEv
_ZNK11__gnu_debug19_Safe_iterator_base14_M_can_compareERKS0_
_ZNKSbIwSt11char_traitsIwESaIwEE11_M_disjunctEPKw
_ZNKSbIwSt11char_traitsIwESaIwEE12find_last_ofEPKwy
_ZNKSbIwSt11char_traitsIwESaIwEE12find_last_ofEPKwyy
_ZNKSbIwSt11char_traitsIwESaIwEE12find_last_ofERKS2_y
_ZNKSbIwSt11char_traitsIwESaIwEE12find_last_ofEwy
_ZNKSbIwSt11char_traitsIwESaIwEE13find_first_ofEPKwy
_ZNKSbIwSt11char_traitsIwESaIwEE13find_first_ofEPKwyy
_ZNKSbIwSt11char_traitsIwESaIwEE13find_first_ofERKS2_y
_ZNKSbIwSt11char_traitsIwESaIwEE13find_first_ofEwy
_ZNKSbIwSt11char_traitsIwESaIwEE13get_allocatorEv
_ZNKSbIwSt11char_traitsIwESaIwEE15_M_check_lengthEyyPKc
_ZNKSbIwSt11char_traitsIwESaIwEE16find_last_not_ofEPKwy
_ZNKSbIwSt11char_traitsIwESaIwEE16find_last_not_ofEPKwyy
_ZNKSbIwSt11char_traitsIwESaIwEE16find_last_not_ofERKS2_y
_ZNKSbIwSt11char_traitsIwESaIwEE16find_last_not_ofEwy
_ZNKSbIwSt11char_traitsIwESaIwEE17find_first_not_ofEPKwy
_ZNKSbIwSt11char_traitsIwESaIwEE17find_first_not_ofEPKwyy
_ZNKSbIwSt11char_traitsIwESaIwEE17find_first_not_ofERKS2_y
_ZNKSbIwSt11char_traitsIwESaIwEE17find_first_not_ofEwy
_ZNKSbIwSt11char_traitsIwESaIwEE2atEy
_ZNKSbIwSt11char_traitsIwESaIwEE3endEv
_ZNKSbIwSt11char_traitsIwESaIwEE4_Rep12_M_is_leakedEv
_ZNKSbIwSt11char_traitsIwESaIwEE4_Rep12_M_is_sharedEv
_ZNKSbIwSt11char_traitsIwESaIwEE4backEv
_ZNKSbIwSt11char_traitsIwESaIwEE4cendEv
_ZNKSbIwSt11char_traitsIwESaIwEE4copyEPwyy
_ZNKSbIwSt11char_traitsIwESaIwEE4dataEv
_ZNKSbIwSt11char_traitsIwESaIwEE4findEPKwy
_ZNKSbIwSt11char_traitsIwESaIwEE4findEPKwyy
_ZNKSbIwSt11char_traitsIwESaIwEE4findERKS2_y
_ZNKSbIwSt11char_traitsIwESaIwEE4findEwy
_ZNKSbIwSt11char_traitsIwESaIwEE4rendEv
_ZNKSbIwSt11char_traitsIwESaIwEE4sizeEv
_ZNKSbIwSt11char_traitsIwESaIwEE5beginEv
_ZNKSbIwSt11char_traitsIwESaIwEE5c_strEv
_ZNKSbIwSt11char_traitsIwESaIwEE5crendEv
_ZNKSbIwSt11char_traitsIwESaIwEE5emptyEv
_ZNKSbIwSt11char_traitsIwESaIwEE5frontEv
_ZNKSbIwSt11char_traitsIwESaIwEE5rfindEPKwy
_ZNKSbIwSt11char_traitsIwESaIwEE5rfindEPKwyy
_ZNKSbIwSt11char_traitsIwESaIwEE5rfindERKS2_y
_ZNKSbIwSt11char_traitsIwESaIwEE5rfindEwy
_ZNKSbIwSt11char_traitsIwESaIwEE6_M_repEv
_ZNKSbIwSt11char_traitsIwESaIwEE6cbeginEv
_ZNKSbIwSt11char_traitsIwESaIwEE6lengthEv
_ZNKSbIwSt11char_traitsIwESaIwEE6rbeginEv
_ZNKSbIwSt11char_traitsIwESaIwEE6substrEyy
_ZNKSbIwSt11char_traitsIwESaIwEE7_M_dataEv
_ZNKSbIwSt11char_traitsIwESaIwEE7_M_iendEv
_ZNKSbIwSt11char_traitsIwESaIwEE7compareEPKw
_ZNKSbIwSt11char_traitsIwESaIwEE7compareERKS2_
_ZNKSbIwSt11char_traitsIwESaIwEE7compareEyyPKw
_ZNKSbIwSt11char_traitsIwESaIwEE7compareEyyPKwy
_ZNKSbIwSt11char_traitsIwESaIwEE7compareEyyRKS2_
_ZNKSbIwSt11char_traitsIwESaIwEE7compareEyyRKS2_yy
_ZNKSbIwSt11char_traitsIwESaIwEE7crbeginEv
_ZNKSbIwSt11char_traitsIwESaIwEE8_M_checkEyPKc
_ZNKSbIwSt11char_traitsIwESaIwEE8_M_limitEyy
_ZNKSbIwSt11char_traitsIwESaIwEE8capacityEv
_ZNKSbIwSt11char_traitsIwESaIwEE8max_sizeEv
_ZNKSbIwSt11char_traitsIwESaIwEE9_M_ibeginEv
_ZNKSbIwSt11char_traitsIwESaIwEEcvSt17basic_string_viewIwS0_EEv
_ZNKSbIwSt11char_traitsIwESaIwEEixEy
_ZNKSi6gcountEv
_ZNKSi6sentrycvbEv
_ZNKSo6sentrycvbEv
_ZNKSs11_M_disjunctEPKc
_ZNKSs12find_last_ofEPKcy
_ZNKSs12find_last_ofEPKcyy
_ZNKSs12find_last_ofERKSsy
_ZNKSs12find_last_ofEcy
_ZNKSs13find_first_ofEPKcy
_ZNKSs13find_first_ofEPKcyy
_ZNKSs13find_first_ofERKSsy
_ZNKSs13find_first_ofEcy
_ZNKSs13get_allocatorEv
_ZNKSs15_M_check_lengthEyyPKc
_ZNKSs16find_last_not_ofEPKcy
_ZNKSs16find_last_not_ofEPKcyy
_ZNKSs16find_last_not_ofERKSsy
_ZNKSs16find_last_not_ofEcy
_ZNKSs17find_first_not_ofEPKcy
_ZNKSs17find_first_not_ofEPKcyy
_ZNKSs17find_first_not_ofERKSsy
_ZNKSs17find_first_not_ofEcy
_ZNKSs2atEy
_ZNKSs3endEv
_ZNKSs4_Rep12_M_is_leakedEv
_ZNKSs4_Rep12_M_is_sharedEv
_ZNKSs4backEv
_ZNKSs4cendEv
_ZNKSs4copyEPcyy
_ZNKSs4dataEv
_ZNKSs4findEPKcy
_ZNKSs4findEPKcyy
_ZNKSs4findERKSsy
_ZNKSs4findEcy
_ZNKSs4rendEv
_ZNKSs4sizeEv
_ZNKSs5beginEv
_ZNKSs5c_strEv
_ZNKSs5crendEv
_ZNKSs5emptyEv
_ZNKSs5frontEv
_ZNKSs5rfindEPKcy
_ZNKSs5rfindEPKcyy
_ZNKSs5rfindERKSsy
_ZNKSs5rfindEcy
_ZNKSs6_M_repEv
_ZNKSs6cbeginEv
_ZNKSs6lengthEv
_ZNKSs6rbeginEv
_ZNKSs6substrEyy
_ZNKSs7_M_dataEv
_ZNKSs7_M_iendEv
_ZNKSs7compareEPKc
_ZNKSs7compareERKSs
_ZNKSs7compareEyyPKc
_ZNKSs7compareEyyPKcy
_ZNKSs7compareEyyRKSs
_ZNKSs7compareEyyRKSsyy
_ZNKSs7crbeginEv
_ZNKSs8_M_checkEyPKc
_ZNKSs8_M_limitEyy
_ZNKSs8capacityEv
_ZNKSs8max_sizeEv
_ZNKSs9_M_ibeginEv
_ZNKSscvSt17basic_string_viewIcSt11char_traitsIcEEEv
_ZNKSsixEy
_ZNKSt10bad_typeid4whatEv
_ZNKSt10error_code23default_error_conditionEv
_ZNKSt10filesystem16filesystem_error4whatEv
_ZNKSt10filesystem16filesystem_error5path1Ev
_ZNKSt10filesystem16filesystem_error5path2Ev
_ZNKSt10filesystem18directory_iteratordeEv
_ZNKSt10filesystem28recursive_directory_iterator17recursion_pendingEv
_ZNKSt10filesystem28recursive_directory_iterator5depthEv
_ZNKSt10filesystem28recursive_directory_iterator7optionsEv
_ZNKSt10filesystem28recursive_directory_iteratordeEv
_ZNKSt10filesystem4path11parent_pathEv
_ZNKSt10filesystem4path12has_filenameEv
_ZNKSt10filesystem4path13has_root_nameEv
_ZNKSt10filesystem4path13has_root_pathEv
_ZNKSt10filesystem4path13relative_pathEv
_ZNKSt10filesystem4path14root_directoryEv
_ZNKSt10filesystem4path15has_parent_pathEv
_ZNKSt10filesystem4path16lexically_normalEv
_ZNKSt10filesystem4path17_M_find_extensionEv
_ZNKSt10filesystem4path17has_relative_pathEv
_ZNKSt10filesystem4path18has_root_directoryEv
_ZNKSt10filesystem4path18lexically_relativeERKS0_
_ZNKSt10filesystem4path19lexically_proximateERKS0_
_ZNKSt10filesystem4path5_List13_Impl_deleterclEPNS1_5_ImplE
_ZNKSt10filesystem4path5_List3endEv
_ZNKSt10filesystem4path5_List5beginEv
_ZNKSt10filesystem4path7compareERKS0_
_ZNKSt10filesystem4path7compareESt17basic_string_viewIwSt11char_traitsIwEE
_ZNKSt10filesystem4path9root_nameEv
_ZNKSt10filesystem4path9root_pathEv
_ZNKSt10filesystem7__cxx1116filesystem_error4whatEv
_ZNKSt10filesystem7__cxx1116filesystem_error5path1Ev
_ZNKSt10filesystem7__cxx1116filesystem_error5path2Ev
_ZNKSt10filesystem7__cxx1118directory_iteratordeEv
_ZNKSt10filesystem7__cxx1128recursive_directory_iterator17recursion_pendingEv
_ZNKSt10filesystem7__cxx1128recursive_directory_iterator5depthEv
_ZNKSt10filesystem7__cxx1128recursive_directory_iterator7optionsEv
_ZNKSt10filesystem7__cxx1128recursive_directory_iteratordeEv
_ZNKSt10filesystem7__cxx114path11parent_pathEv
_ZNKSt10filesystem7__cxx114path12has_filenameEv
_ZNKSt10filesystem7__cxx114path13has_root_nameEv
_ZNKSt10filesystem7__cxx114path13has_root_pathEv
_ZNKSt10filesystem7__cxx114path13relative_pathEv
_ZNKSt10filesystem7__cxx114path14root_directoryEv
_ZNKSt10filesystem7__cxx114path15has_parent_pathEv
_ZNKSt10filesystem7__cxx114path16lexically_normalEv
_ZNKSt10filesystem7__cxx114path17_M_find_extensionEv
_ZNKSt10filesystem7__cxx114path17has_relative_pathEv
_ZNKSt10filesystem7__cxx114path18has_root_directoryEv
_ZNKSt10filesystem7__cxx114path18lexically_relativeERKS1_
_ZNKSt10filesystem7__cxx114path19lexically_proximateERKS1_
_ZNKSt10filesystem7__cxx114path5_List13_Impl_deleterclEPNS2_5_ImplE
_ZNKSt10filesystem7__cxx114path5_List3endEv
_ZNKSt10filesystem7__cxx114path5_List5beginEv
_ZNKSt10filesystem7__cxx114path7compareERKS1_
_ZNKSt10filesystem7__cxx114path7compareESt17basic_string_viewIwSt11char_traitsIwEE
_ZNKSt10filesystem7__cxx114path9root_nameEv
_ZNKSt10filesystem7__cxx114path9root_pathEv
_ZNKSt10istrstream5rdbufEv
_ZNKSt10moneypunctIcLb0EE10neg_formatEv
_ZNKSt10moneypunctIcLb0EE10pos_formatEv
_ZNKSt10moneypunctIcLb0EE11curr_symbolEv
_ZNKSt10moneypunctIcLb0EE11do_groupingEv
_ZNKSt10moneypunctIcLb0EE11frac_digitsEv
_ZNKSt10moneypunctIcLb0EE13decimal_pointEv
_ZNKSt10moneypunctIcLb0EE13do_neg_formatEv
_ZNKSt10moneypunctIcLb0EE13do_pos_formatEv
_ZNKSt10moneypunctIcLb0EE13negative_signEv
_ZNKSt10moneypunctIcLb0EE13positive_signEv
_ZNKSt10moneypunctIcLb0EE13thousands_sepEv
_ZNKSt10moneypunctIcLb0EE14do_curr_symbolEv
_ZNKSt10moneypunctIcLb0EE14do_frac_digitsEv
_ZNKSt10moneypunctIcLb0EE16do_decimal_pointEv
_ZNKSt10moneypunctIcLb0EE16do_negative_signEv
_ZNKSt10moneypunctIcLb0EE16do_positive_signEv
_ZNKSt10moneypunctIcLb0EE16do_thousands_sepEv
_ZNKSt10moneypunctIcLb0EE8groupingEv
_ZNKSt10moneypunctIcLb1EE10neg_formatEv
_ZNKSt10moneypunctIcLb1EE10pos_formatEv
_ZNKSt10moneypunctIcLb1EE11curr_symbolEv
_ZNKSt10moneypunctIcLb1EE11do_groupingEv
_ZNKSt10moneypunctIcLb1EE11frac_digitsEv
_ZNKSt10moneypunctIcLb1EE13decimal_pointEv
_ZNKSt10moneypunctIcLb1EE13do_neg_formatEv
_ZNKSt10moneypunctIcLb1EE13do_pos_formatEv
_ZNKSt10moneypunctIcLb1EE13negative_signEv
_ZNKSt10moneypunctIcLb1EE13positive_signEv
_ZNKSt10moneypunctIcLb1EE13thousands_sepEv
_ZNKSt10moneypunctIcLb1EE14do_curr_symbolEv
_ZNKSt10moneypunctIcLb1EE14do_frac_digitsEv
_ZNKSt10moneypunctIcLb1EE16do_decimal_pointEv
_ZNKSt10moneypunctIcLb1EE16do_negative_signEv
_ZNKSt10moneypunctIcLb1EE16do_positive_signEv
_ZNKSt10moneypunctIcLb1EE16do_thousands_sepEv
_ZNKSt10moneypunctIcLb1EE8groupingEv
_ZNKSt10moneypunctIwLb0EE10neg_formatEv
_ZNKSt10moneypunctIwLb0EE10pos_formatEv
_ZNKSt10moneypunctIwLb0EE11curr_symbolEv
_ZNKSt10moneypunctIwLb0EE11do_groupingEv
_ZNKSt10moneypunctIwLb0EE11frac_digitsEv
_ZNKSt10moneypunctIwLb0EE13decimal_pointEv
_ZNKSt10moneypunctIwLb0EE13do_neg_formatEv
_ZNKSt10moneypunctIwLb0EE13do_pos_formatEv
_ZNKSt10moneypunctIwLb0EE13negative_signEv
_ZNKSt10moneypunctIwLb0EE13positive_signEv
_ZNKSt10moneypunctIwLb0EE13thousands_sepEv
_ZNKSt10moneypunctIwLb0EE14do_curr_symbolEv
_ZNKSt10moneypunctIwLb0EE14do_frac_digitsEv
_ZNKSt10moneypunctIwLb0EE16do_decimal_pointEv
_ZNKSt10moneypunctIwLb0EE16do_negative_signEv
_ZNKSt10moneypunctIwLb0EE16do_positive_signEv
_ZNKSt10moneypunctIwLb0EE16do_thousands_sepEv
_ZNKSt10moneypunctIwLb0EE8groupingEv
_ZNKSt10moneypunctIwLb1EE10neg_formatEv
_ZNKSt10moneypunctIwLb1EE10pos_formatEv
_ZNKSt10moneypunctIwLb1EE11curr_symbolEv
_ZNKSt10moneypunctIwLb1EE11do_groupingEv
_ZNKSt10moneypunctIwLb1EE11frac_digitsEv
_ZNKSt10moneypunctIwLb1EE13decimal_pointEv
_ZNKSt10moneypunctIwLb1EE13do_neg_formatEv
_ZNKSt10moneypunctIwLb1EE13do_pos_formatEv
_ZNKSt10moneypunctIwLb1EE13negative_signEv
_ZNKSt10moneypunctIwLb1EE13positive_signEv
_ZNKSt10moneypunctIwLb1EE13thousands_sepEv
_ZNKSt10moneypunctIwLb1EE14do_curr_symbolEv
_ZNKSt10moneypunctIwLb1EE14do_frac_digitsEv
_ZNKSt10moneypunctIwLb1EE16do_decimal_pointEv
_ZNKSt10moneypunctIwLb1EE16do_negative_signEv
_ZNKSt10moneypunctIwLb1EE16do_positive_signEv
_ZNKSt10moneypunctIwLb1EE16do_thousands_sepEv
_ZNKSt10moneypunctIwLb1EE8groupingEv
_ZNKSt10ostrstream5rdbufEv
_ZNKSt10ostrstream6pcountEv
_ZNKSt11__timepunctIcE15_M_am_pm_formatEPKc
_ZNKSt11__timepunctIcE15_M_date_formatsEPPKc
_ZNKSt11__timepunctIcE15_M_time_formatsEPPKc
_ZNKSt11__timepunctIcE19_M_days_abbreviatedEPPKc
_ZNKSt11__timepunctIcE20_M_date_time_formatsEPPKc
_ZNKSt11__timepunctIcE21_M_months_abbreviatedEPPKc
_ZNKSt11__timepunctIcE6_M_putEPcyPKcPK2tm
_ZNKSt11__timepunctIcE7_M_daysEPPKc
_ZNKSt11__timepunctIcE8_M_am_pmEPPKc
_ZNKSt11__timepunctIcE9_M_monthsEPPKc
_ZNKSt11__timepunctIwE15_M_am_pm_formatEPKw
_ZNKSt11__timepunctIwE15_M_date_formatsEPPKw
_ZNKSt11__timepunctIwE15_M_time_formatsEPPKw
_ZNKSt11__timepunctIwE19_M_days_abbreviatedEPPKw
_ZNKSt11__timepunctIwE20_M_date_time_formatsEPPKw
_ZNKSt11__timepunctIwE21_M_months_abbreviatedEPPKw
_ZNKSt11__timepunctIwE6_M_putEPwyPKwPK2tm
_ZNKSt11__timepunctIwE7_M_daysEPPKw
_ZNKSt11__timepunctIwE8_M_am_pmEPPKw
_ZNKSt11__timepunctIwE9_M_monthsEPPKw
_ZNKSt11logic_error4whatEv
_ZNKSt12__basic_fileIcE7is_openEv
_ZNKSt12bad_weak_ptr4whatEv
_ZNKSt12future_error4whatEv
_ZNKSt12strstreambuf6pcountEv
_ZNKSt13bad_exception4whatEv
_ZNKSt13basic_filebufIcSt11char_traitsIcEE7is_openEv
_ZNKSt13basic_filebufIwSt11char_traitsIwEE7is_openEv
_ZNKSt13basic_fstreamIcSt11char_traitsIcEE5rdbufEv
_ZNKSt13basic_fstreamIcSt11char_traitsIcEE7is_openEv
_ZNKSt13basic_fstreamIwSt11char_traitsIwEE5rdbufEv
_ZNKSt13basic_fstreamIwSt11char_traitsIwEE7is_openEv
_ZNKSt13basic_istreamIwSt11char_traitsIwEE6gcountEv
_ZNKSt13basic_istreamIwSt11char_traitsIwEE6sentrycvbEv
_ZNKSt13basic_ostreamIwSt11char_traitsIwEE6sentrycvbEv
_ZNKSt13random_device13_M_getentropyEv
_ZNKSt13runtime_error4whatEv
_ZNKSt14basic_ifstreamIcSt11char_traitsIcEE5rdbufEv
_ZNKSt14basic_ifstreamIcSt11char_traitsIcEE7is_openEv
_ZNKSt14basic_ifstreamIwSt11char_traitsIwEE5rdbufEv
_ZNKSt14basic_ifstreamIwSt11char_traitsIwEE7is_openEv
_ZNKSt14basic_ofstreamIcSt11char_traitsIcEE5rdbufEv
_ZNKSt14basic_ofstreamIcSt11char_traitsIcEE7is_openEv
_ZNKSt14basic_ofstreamIwSt11char_traitsIwEE5rdbufEv
_ZNKSt14basic_ofstreamIwSt11char_traitsIwEE7is_openEv
_ZNKSt14error_category10equivalentERKSt10error_codei
_ZNKSt14error_category10equivalentEiRKSt15error_condition
_ZNKSt14error_category23default_error_conditionEi
_ZNKSt15__exception_ptr13exception_ptr20__cxa_exception_typeEv
_ZNKSt15__exception_ptr13exception_ptrcvMS0_FvvEEv
_ZNKSt15__exception_ptr13exception_ptrntEv
_ZNKSt15basic_streambufIcSt11char_traitsIcEE4gptrEv
_ZNKSt15basic_streambufIcSt11char_traitsIcEE4pptrEv
_ZNKSt15basic_streambufIcSt11char_traitsIcEE5ebackEv
_ZNKSt15basic_streambufIcSt11char_traitsIcEE5egptrEv
_ZNKSt15basic_streambufIcSt11char_traitsIcEE5epptrEv
_ZNKSt15basic_streambufIcSt11char_traitsIcEE5pbaseEv
_ZNKSt15basic_streambufIcSt11char_traitsIcEE6getlocEv
_ZNKSt15basic_streambufIwSt11char_traitsIwEE4gptrEv
_ZNKSt15basic_streambufIwSt11char_traitsIwEE4pptrEv
_ZNKSt15basic_streambufIwSt11char_traitsIwEE5ebackEv
_ZNKSt15basic_streambufIwSt11char_traitsIwEE5egptrEv
_ZNKSt15basic_streambufIwSt11char_traitsIwEE5epptrEv
_ZNKSt15basic_streambufIwSt11char_traitsIwEE5pbaseEv
_ZNKSt15basic_streambufIwSt11char_traitsIwEE6getlocEv
_ZNKSt15basic_stringbufIcSt11char_traitsIcESaIcEE3strEv
_ZNKSt15basic_stringbufIwSt11char_traitsIwESaIwEE3strEv

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Privacy Policу/res/Dependencies/dotnet30x64.xml
Privacy Policу/res/Dependencies/dotnet30x86.xml
Privacy Policу/res/Dependencies/dotnet35.xml
Privacy Policу/res/Dependencies/dotnet35sp1.xml
Privacy Policу/res/Dependencies/dotnet4.xml
Privacy Policу/res/Dependencies/msi31v2.xml
Privacy Policу/res/Dependencies/msi45x64.xml
Privacy Policу/res/Dependencies/msi45x86.xml
Privacy Policу/res/Dependencies/sqlexpress2005.xml
Privacy Policу/res/Dependencies/sqlexpress2005/template.ini
Privacy Policу/res/Dependencies/vb5sp3.xml
Privacy Policу/res/Dependencies/vb6sp6.xml
Privacy Policу/res/Dependencies/vc2008sp1x64.xml
Privacy Policу/res/Dependencies/vc2008sp1x86.xml
Privacy Policу/res/Dependencies/vc2008x64.xml
Privacy Policу/res/Dependencies/vc2008x86.xml
Privacy Policу/res/Dependencies/vc2010x64.xml
Privacy Policу/res/Dependencies/vc2010x86.xml
Privacy Policу/res/dialogs/chboff.ico
Privacy Policу/res/dialogs/chboffgr.ico
Privacy Policу/res/dialogs/chbon.ico
Privacy Policу/res/dialogs/chbongr.ico
Privacy Policу/res/dialogs/dlgask.rc
Privacy Policу/res/dialogs/dlgask.res
Privacy Policу/res/dialogs/dlgback.rc
Privacy Policу/res/dialogs/dlgback.res
Privacy Policу/res/dialogs/dlgbrowser.rc
Privacy Policу/res/dialogs/dlgbrowser.res
Privacy Policу/res/dialogs/dlgbrowser2-a.rc
Privacy Policу/res/dialogs/dlgbrowser2-a.res
Privacy Policу/res/dialogs/dlgbrowser2.rc
Privacy Policу/res/dialogs/dlgbrowser2.res
Privacy Policу/res/dialogs/dlgfin.rc
Privacy Policу/res/dialogs/dlgfin.res
Privacy Policу/res/dialogs/dlgfin2.rc
Privacy Policу/res/dialogs/dlgfin2.res
Privacy Policу/res/dialogs/dlglang.rc
Privacy Policу/res/dialogs/dlglang.res
Privacy Policу/res/dialogs/dlglic.rc
Privacy Policу/res/dialogs/dlglic.res
Privacy Policу/res/dialogs/dlglic2.rc
Privacy Policу/res/dialogs/dlglic2.res
Privacy Policу/res/dialogs/dlglist.rc
Privacy Policу/res/dialogs/dlglist.res
Privacy Policу/res/dialogs/dlgmain.rc
Privacy Policу/res/dialogs/dlgmain.res
Privacy Policу/res/dialogs/dlgpass.rc
Privacy Policу/res/dialogs/dlgpass.res
Privacy Policу/res/dialogs/dlgpath.rc
Privacy Policу/res/dialogs/dlgpath.res
Privacy Policу/res/dialogs/dlgpopimg.rc
Privacy Policу/res/dialogs/dlgpopimg.res
Privacy Policу/res/dialogs/dlgpopup.rc
Privacy Policу/res/dialogs/dlgpopup.res
Privacy Policу/res/dialogs/dlgprog.rc
Privacy Policу/res/dialogs/dlgprog.res
Privacy Policу/res/dialogs/dlgpsw.rc
Privacy Policу/res/dialogs/dlgpsw.res
Privacy Policу/res/dialogs/dlgrcres.g
Privacy Policу/res/dialogs/dlgread.rc
Privacy Policу/res/dialogs/dlgread.res
Privacy Policу/res/dialogs/dlgready.rc
Privacy Policу/res/dialogs/dlgready.res
Privacy Policу/res/dialogs/dlgserial.rc
Privacy Policу/res/dialogs/dlgserial.res
Privacy Policу/res/dialogs/dlgsets.rc
Privacy Policу/res/dialogs/dlgsets.res
Privacy Policу/res/dialogs/dlgshfolder.rc
Privacy Policу/res/dialogs/dlgshfolder.res
Privacy Policу/res/dialogs/dlgslideshow.rc
Privacy Policу/res/dialogs/dlgslideshow.res
Privacy Policу/res/dialogs/dlgtree.rc
Privacy Policу/res/dialogs/dlgtree.res
Privacy Policу/res/dialogs/dlguconf.rc
Privacy Policу/res/dialogs/dlguconf.res
Privacy Policу/res/dialogs/dlguconf2.rc
Privacy Policу/res/dialogs/dlguconf2.res
Privacy Policу/res/dialogs/dlgufin.rc
Privacy Policу/res/dialogs/dlgufin.res
Privacy Policу/res/dialogs/dlgufin2.rc
Privacy Policу/res/dialogs/dlgufin2.res
Privacy Policу/res/dialogs/dlgundel.rc
Privacy Policу/res/dialogs/dlgundel.res
Privacy Policу/res/dialogs/dlguprog.rc
Privacy Policу/res/dialogs/dlguprog.res
Privacy Policу/res/dialogs/dlgwel.rc
Privacy Policу/res/dialogs/dlgwel.res
Privacy Policу/res/dialogs/dlgwel2.rc
Privacy Policу/res/dialogs/dlgwel2.res
Privacy Policу/res/dialogs/empty.ico
Privacy Policу/res/dialogs/fldclose.ico
Privacy Policу/res/dialogs/fldopen.ico
Privacy Policу/res/dialogs/rboff.ico
Privacy Policу/res/dialogs/rboffgr.ico
Privacy Policу/res/dialogs/rbon.ico
Privacy Policу/res/dialogs/rbongr.ico
Privacy Policу/res/html/viewheader.html
.js
Privacy Policу/res/icons/install/default - 1.ico
Privacy Policу/res/icons/install/default - 2.ico
Privacy Policу/res/icons/install/default.ico
Privacy Policу/res/icons/uninstall/uninstall - 1.ico
Privacy Policу/res/icons/uninstall/uninstall - 2.ico
Privacy Policу/res/icons/uninstall/uninstall.ico
Privacy Policу/res/icons/update/update - 2.ico
Privacy Policу/res/icons/update/update.ico
Privacy Policу/res/leftimg/install/disk-install.bmp
Privacy Policу/res/leftimg/install/green-install.bmp
Privacy Policу/res/leftimg/install/install - 1.bmp
Privacy Policу/res/leftimg/install/install - 2.bmp
Privacy Policу/res/leftimg/install/install.bmp
Privacy Policу/res/leftimg/uninstall/disk-uninstall.bmp
Privacy Policу/res/leftimg/uninstall/green-uninstall.bmp
Privacy Policу/res/leftimg/uninstall/uninstall - 1.bmp
Privacy Policу/res/leftimg/uninstall/uninstall - 2.bmp
Privacy Policу/res/leftimg/uninstall/uninstall.bmp
Privacy Policу/res/leftimg/update/disk-update.bmp
Privacy Policу/res/leftimg/update/green-update.bmp
Privacy Policу/res/leftimg/update/update - 1.bmp
Privacy Policу/res/leftimg/update/update - 2.bmp
Privacy Policу/res/leftimg/update/update.bmp
Privacy Policу/res/linker/EXELink.dll
.dll windows x86

2e758e9858c29d3a882bec71419f46e8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegOpenKeyExA
RegCloseKey

gdi32

MoveToEx

kernel32

CloseHandle
CopyFileA
CreateFileA
ExitProcess
FlushFileBuffers
FreeEnvironmentStringsA
GetCommandLineA
GetEnvironmentStringsA
GetFileSize
GetFileType
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemInfo
GetVersionExA
GlobalAlloc
GlobalFree
GlobalReAlloc
LoadLibraryA
MultiByteToWideChar
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
BeginUpdateResourceA
EndUpdateResourceA
GetACP
UpdateResourceA
RtlMoveMemory

ole32

CoInitialize
CoUninitialize

oleaut32

SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy

user32

CreateDialogIndirectParamA
CreateDialogParamA
CreateWindowExA
DialogBoxIndirectParamA
DialogBoxParamA
GetWindow

Exports

Exports

Add_Data_Section
Add_Res_Section
Set_OS_Version
Set_Sub_System

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rloc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Privacy Policу/res/linker/genteert.bin
Privacy Policу/res/linker/launcher.exe
.exe windows x86

9ff8bcfcaa2c629107d841f86f5b526c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetModuleHandleA
CloseHandle
GetFileSize
CreateFileA
GetLastError
CreateMutexA
lstrcpyA
ExitProcess
GetModuleFileNameA
ExitThread
GetProcAddress
LoadLibraryA
FreeLibrary
IsDBCSLeadByte
CompareStringW
CompareStringA
GetConsoleMode
SetConsoleMode
ReadConsoleA
WriteConsoleA
AllocConsole
GetCPInfo
GetStdHandle
GetTickCount
GetTempPathA
GetFileAttributesA
WriteFile
GetStartupInfoA
GetCommandLineA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryA
RemoveDirectoryA
SetCurrentDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetFullPathNameA
DeleteFileA
ReadFile

user32

MessageBoxA
wsprintfA
CharLowerA
CharToOemA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
cos
tan
asin
acos
atan
malloc
free
vsprintf
_ftol
_putenv
getenv
_atoi64
atof
strtoul
strtol
floor
ceil
modf
fabs
labs
sqrt
pow
log10
log
exp
sin

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Privacy Policу/res/linker/launchera.exe
.exe windows x86

9ff8bcfcaa2c629107d841f86f5b526c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetModuleHandleA
CloseHandle
GetFileSize
CreateFileA
GetLastError
CreateMutexA
lstrcpyA
ExitProcess
GetModuleFileNameA
ExitThread
GetProcAddress
LoadLibraryA
FreeLibrary
IsDBCSLeadByte
CompareStringW
CompareStringA
GetConsoleMode
SetConsoleMode
ReadConsoleA
WriteConsoleA
AllocConsole
GetCPInfo
GetStdHandle
GetTickCount
GetTempPathA
GetFileAttributesA
WriteFile
GetStartupInfoA
GetCommandLineA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryA
RemoveDirectoryA
SetCurrentDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetFullPathNameA
DeleteFileA
ReadFile

user32

MessageBoxA
wsprintfA
CharLowerA
CharToOemA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
cos
tan
asin
acos
atan
malloc
free
vsprintf
_ftol
_putenv
getenv
_atoi64
atof
strtoul
strtol
floor
ceil
modf
fabs
labs
sqrt
pow
log10
log
exp
sin

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Privacy Policу/res/linker/launcherart.exe
.exe windows x86

9ff8bcfcaa2c629107d841f86f5b526c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetModuleHandleA
CloseHandle
GetFileSize
CreateFileA
GetLastError
CreateMutexA
lstrcpyA
ExitProcess
GetModuleFileNameA
ExitThread
GetProcAddress
LoadLibraryA
FreeLibrary
IsDBCSLeadByte
CompareStringW
CompareStringA
GetConsoleMode
SetConsoleMode
ReadConsoleA
WriteConsoleA
AllocConsole
GetCPInfo
GetStdHandle
GetTickCount
GetTempPathA
GetFileAttributesA
WriteFile
GetStartupInfoA
GetCommandLineA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryA
RemoveDirectoryA
SetCurrentDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetFullPathNameA
DeleteFileA
ReadFile

user32

MessageBoxA
wsprintfA
CharLowerA
CharToOemA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
cos
tan
asin
acos
atan
malloc
free
vsprintf
_ftol
_putenv
getenv
_atoi64
atof
strtoul
strtol
floor
ceil
modf
fabs
labs
sqrt
pow
log10
log
exp
sin

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Privacy Policу/res/linker/launcherd.exe
.exe windows x86

86da79773c1e9255964608ae77f529d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetModuleHandleA
CloseHandle
GetFileSize
CreateFileA
GetLastError
CreateMutexA
lstrcpyA
ExitProcess
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

gentee

ord5
ord3
ord2

Sections

.text
Size: 4KB - Virtual size: 370B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 239B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Privacy Policу/res/linker/launcherda.exe
.exe windows x86

86da79773c1e9255964608ae77f529d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetModuleHandleA
CloseHandle
GetFileSize
CreateFileA
GetLastError
CreateMutexA
lstrcpyA
ExitProcess
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

gentee

ord5
ord3
ord2

Sections

.text
Size: 4KB - Virtual size: 370B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 239B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Privacy Policу/res/linker/minilauncher.exe
.exe windows x86

d221b1dc8c3a08622f6512e7876527c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateDirectoryA
lstrcpyA
CreateFileA
GetFileAttributesA
lstrlenA
GetTempPathA
lstrcmpA
lstrcatA
ExitProcess
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetFileSize
GetLastError
CreateMutexA
GetModuleFileNameA
VirtualAlloc
VirtualFree
GetStartupInfoA

user32

MessageBoxA
wsprintfA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Privacy Policу/res/logo/default - 1.bmp
Privacy Policу/res/logo/default - 2.bmp
Privacy Policу/res/logo/default.bmp
Privacy Policу/res/logo/disk-logo.bmp
Privacy Policу/res/logo/green-logo.bmp
Privacy Policу/res/unnspack.dll
.dll windows x86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9f:17:30:a3:74:ef:ea:42:ed:0d:1b:50:4d:a8:f9:81
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

25-10-2007 00:00

Not After

24-10-2009 23:59

Subject

CN=Heaventools Software,O=Heaventools Software,POSTALCODE=V6H4E4,STREET=101-1001 West Broadway Dept. 381,L=Vancouver,ST=BC,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

95:e6:cc:5c:67:01:0b:3d:61:cb:a7:c1:f6:11:d5:e5:52:62:50:a5
Signer

Actual PE Digest

95:e6:cc:5c:67:01:0b:3d:61:cb:a7:c1:f6:11:d5:e5:52:62:50:a5

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Heaventools Software,O=Heaventools Software,POSTALCODE=V6H4E4,STREET=101-1001 West Broadway Dept. 381,L=Vancouver,ST=BC,C=CA

14-10-2009 13:31
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

PexAboutPlugIn
PexPreloadImage
PexRegisterPlugInEx

Sections

CODE
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Privacy Policу/res/unupack.dll
.dll windows x86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9f:17:30:a3:74:ef:ea:42:ed:0d:1b:50:4d:a8:f9:81
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

25-10-2007 00:00

Not After

24-10-2009 23:59

Subject

CN=Heaventools Software,O=Heaventools Software,POSTALCODE=V6H4E4,STREET=101-1001 West Broadway Dept. 381,L=Vancouver,ST=BC,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f7:ce:77:d6:75:c7:a9:af:a8:4f:00:fd:22:58:63:cd:4e:91:e8:a7
Signer

Actual PE Digest

f7:ce:77:d6:75:c7:a9:af:a8:4f:00:fd:22:58:63:cd:4e:91:e8:a7

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Heaventools Software,O=Heaventools Software,POSTALCODE=V6H4E4,STREET=101-1001 West Broadway Dept. 381,L=Vancouver,ST=BC,C=CA

14-10-2009 13:31
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

PexAboutPlugIn
PexPreloadImage
PexRegisterPlugInEx

Sections

CODE
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 133B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Privacy Policу/res/unupx.dll
.dll windows x86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9f:17:30:a3:74:ef:ea:42:ed:0d:1b:50:4d:a8:f9:81
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

25-10-2007 00:00

Not After

24-10-2009 23:59

Subject

CN=Heaventools Software,O=Heaventools Software,POSTALCODE=V6H4E4,STREET=101-1001 West Broadway Dept. 381,L=Vancouver,ST=BC,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7d:73:23:ed:f6:2b:1a:5f:57:a2:a6:09:22:37:bd:ef:0d:da:9d:c5
Signer

Actual PE Digest

7d:73:23:ed:f6:2b:1a:5f:57:a2:a6:09:22:37:bd:ef:0d:da:9d:c5

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Heaventools Software,O=Heaventools Software,POSTALCODE=V6H4E4,STREET=101-1001 West Broadway Dept. 381,L=Vancouver,ST=BC,C=CA

14-10-2009 13:31
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

PexAboutPlugIn
PexPreloadImage
PexRegisterPlugInEx

Sections

CODE
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 131B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Privacy Policу/src/Includes/Plugins/Clipboard/Clipboard.lic
Privacy Policу/src/Includes/Plugins/Clipboard/Clipboard.lmd
.dll windows x86

ea80f0add0910462e33c754b7d9dcfc2

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

83:be:82:48:d6:37:ee:d3:5d:ad:4d:bf:af:36:63:15
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-01-2016 00:00

Not After

02-06-2019 23:59

Subject

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

83:be:82:48:d6:37:ee:d3:5d:ad:4d:bf:af:36:63:15
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-01-2016 00:00

Not After

02-06-2019 23:59

Subject

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

88:72:ab:42:c6:85:cf:8a:c9:79:44:98:fb:39:77:fd:7e:68:35:75:26:dc:16:9c:05:0c:d4:5d:e0:23:f3:cc
Signer

Actual PE Digest

88:72:ab:42:c6:85:cf:8a:c9:79:44:98:fb:39:77:fd:7e:68:35:75:26:dc:16:9c:05:0c:d4:5d:e0:23:f3:cc

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

31-07-2018 13:34
Valid: true

Chain 1

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

ee:d5:a9:1f:bc:25:e4:6d:f0:d2:ea:18:96:94:2e:ed:9e:7a:ab:05
Signer

Actual PE Digest

ee:d5:a9:1f:bc:25:e4:6d:f0:d2:ea:18:96:94:2e:ed:9e:7a:ab:05

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

31-07-2018 13:34
Valid: true

Chain 1

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

lua5.1

lua_pushboolean
lua_getfield
lua_gettable
lua_remove
lua_type
lua_pushnumber
lua_pcall
lua_settable
lua_settop
lua_tolstring
lua_gettop
lua_error
luaL_openlib
lua_pushstring

kernel32

GetConsoleMode
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
GetConsoleCP
GetTimeZoneInformation
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpyA
lstrlenA
GetFileAttributesA
MulDiv
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
SizeofResource
LockResource
LoadResource
FindResourceW
LocalFree
FormatMessageA
GetStringTypeW
GlobalSize
CopyFileA
GlobalFree
SetLastError
GetLastError
InterlockedExchange
FreeLibrary
GetProcAddress
GetModuleHandleW
lstrcmpA
LCMapStringW
LoadLibraryA
ActivateActCtx
CompareStringA
LoadLibraryExA
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetModuleFileNameA
GetCurrentThreadId
IsValidCodePage
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
GetStdHandle
SetHandleCount
IsProcessorFeaturePresent
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
HeapQueryInformation
HeapSize
CreateThread
ExitThread
ExitProcess
HeapReAlloc
GetCurrentThread
GlobalDeleteAtom
CloseHandle
DeactivateActCtx
CompareStringW
VirtualQuery
GetSystemInfo
SetThreadPriority
ResumeThread
WaitForSingleObject
VirtualAlloc
RaiseException
HeapFree
HeapAlloc
GetCommandLineA
DecodePointer
EncodePointer
RtlUnwind
FindResourceExW
VirtualProtect
GetNumberFormatA
GetWindowsDirectoryA
SearchPathA
Sleep
GetProfileIntA
GetTickCount
GetACP
GetOEMCP
GetCPInfo
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExA
GetTempPathA
GetTempFileNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
lstrcmpiA
FindResourceA
FreeResource
GlobalFindAtomA
InitializeCriticalSectionAndSpinCount
lstrcmpW
DeleteFileA
GlobalFlags
GetVersionExA
GetSystemDirectoryW
LoadLibraryW
GetCurrentDirectoryA
FileTimeToSystemTime
GlobalGetAtomNameA
InterlockedIncrement
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetCurrentProcessId
GlobalAddAtomA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleA

user32

CopyIcon
RegisterClipboardFormatA
wsprintfA
GetMenuDefaultItem
GetUpdateRect
FrameRect
SetMenuDefaultItem
WaitMessage
PostThreadMessageA
CreateMenu
IsMenu
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadImageA
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
CopyImage
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyA
ToAsciiEx
CopyAcceleratorTableA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateA
MessageBeep
ReleaseCapture
SetCapture
GetSystemMenu
LoadMenuW
IntersectRect
SetClassLongA
GetAsyncKeyState
NotifyWinEvent
WindowFromPoint
CreatePopupMenu
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
OffsetRect
IsRectEmpty
DestroyMenu
GetMenuItemInfoA
CharUpperA
DestroyIcon
IsIconic
ShowWindow
MoveWindow
IsDialogMessageA
CheckDlgButton
RegisterWindowMessageA
LoadIconW
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
CharUpperBuffA
GetClassLongA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
KillTimer
SetTimer
InvalidateRect
UpdateWindow
GetDesktopWindow
RealChildWindowFromPoint
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetClassInfoA
DefWindowProcA
MapWindowPoints
GetClientRect
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoA
GetMonitorInfoA
SetRectEmpty
CopyRect
DeleteMenu
GetWindowTextLengthA
GetWindowTextA
LoadCursorA
GetDoubleClickTime
GetWindowRgn
DestroyCursor
DrawIcon
MapDialogRect
GetNextDlgGroupItem
HideCaret
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnregisterClassA
UnhookWindowsHookEx
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
InvertRect
SubtractRect
MapVirtualKeyExA
GetKeyNameTextA
IsCharLowerA
GetCapture
GetIconInfo
IsWindowEnabled
EnableWindow
MessageBoxA
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
SendMessageA
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
InflateRect
LoadImageW

gdi32

SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
SelectPalette
GetObjectType
CreateHatchBrush
GetTextExtentPoint32A
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
CombineRgn
GetBkColor
GetTextColor
PatBlt
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetRectRgn
DPtoLP
OffsetRgn
GetRgnBox
SetDIBColorTable
RealizePalette
StretchBlt
SetPixel
Rectangle
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExA
GetTextFaceA
SetPixelV
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
DeleteObject
GetTextCharsetInfo
EnumFontFamiliesA
GetTextMetricsA
BitBlt
CreateCompatibleDC
CreateRectRgnIndirect
CreateCompatibleBitmap
GetObjectA
CreateFontIndirectA
CreatePatternBrush
CreateSolidBrush
CreatePen
GetStockObject
CreateDIBitmap
CreateBitmap
CreateDCA
GetDeviceCaps
CopyMetaFileA

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegEnumValueA
RegQueryValueA

shell32

SHGetSpecialFolderLocation
SHGetFileInfoA
DragFinish
DragQueryFileA
SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListA
SHGetDesktopFolder
SHAppBarMessage

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance
OleCreateMenuDescriptor
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
CreateStreamOnHGlobal
DoDragDrop
CoTaskMemFree
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoCreateGuid

oleaut32

SysAllocString
VariantInit
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeType
VariantClear
SysStringLen
SysAllocStringLen
SysFreeString

gdiplus

GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdiplusShutdown
GdipGetImageWidth
GdipGetImageHeight
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipCloneImage
GdipGetImageGraphicsContext
GdipDrawImageI
GdipFree
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Exports

Exports

irPlg_Action_RegisterActions
irPlg_GetAuthorInfo
irPlg_GetLuaVersion
irPlg_GetPluginActionXML
irPlg_GetPluginName
irPlg_GetPluginVersion
irPlg_GetSDKVersion
irPlg_ShowHelpForAction
irPlg_ShowHelpForPlugin
irPlg_ValidateLicense

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Privacy Policу/src/Includes/Plugins/Clipboard/Clipboard_Help.htm
Privacy Policу/src/Includes/Plugins/Clipboard/Clipboardx64.lmd
.dll windows x64

aefe13b1761bab7da42a88d535cb7ded

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

83:be:82:48:d6:37:ee:d3:5d:ad:4d:bf:af:36:63:15
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-01-2016 00:00

Not After

02-06-2019 23:59

Subject

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

83:be:82:48:d6:37:ee:d3:5d:ad:4d:bf:af:36:63:15
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-01-2016 00:00

Not After

02-06-2019 23:59

Subject

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

fb:0e:ec:88:bf:02:44:fe:be:0c:3e:10:02:de:d8:c6:aa:55:f0:5b:1b:34:6a:38:26:b4:6b:88:14:ce:ec:b6
Signer

Actual PE Digest

fb:0e:ec:88:bf:02:44:fe:be:0c:3e:10:02:de:d8:c6:aa:55:f0:5b:1b:34:6a:38:26:b4:6b:88:14:ce:ec:b6

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

31-07-2018 13:34
Valid: true

Chain 1

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

76:7d:f4:ed:75:da:82:ae:16:20:44:b5:75:a2:17:ca:af:b2:c2:f1
Signer

Actual PE Digest

76:7d:f4:ed:75:da:82:ae:16:20:44:b5:75:a2:17:ca:af:b2:c2:f1

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

31-07-2018 13:34
Valid: true

Chain 1

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

lua5.1

lua_pushboolean
lua_getfield
lua_gettable
lua_remove
lua_type
lua_pushnumber
lua_pcall
lua_settable
lua_settop
lua_tolstring
lua_gettop
lua_error
luaL_openlib
lua_pushstring

kernel32

IsValidCodePage
GetStringTypeW
CompareStringW
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpyA
lstrlenA
GetFileAttributesA
MulDiv
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
SizeofResource
LockResource
HeapCreate
LoadResource
FindResourceW
LocalFree
FormatMessageA
GlobalSize
CopyFileA
GlobalFree
SetLastError
GetLastError
FreeLibrary
QueryPerformanceCounter
GetModuleHandleW
lstrcmpA
DeactivateActCtx
LoadLibraryA
ActivateActCtx
CompareStringA
LoadLibraryExA
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetModuleFileNameA
GetCurrentThreadId
GetCurrentThread
GetVersion
HeapSetInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
GetStdHandle
SetHandleCount
FlsAlloc
FlsFree
FlsGetValue
TerminateProcess
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
HeapQueryInformation
HeapSize
CreateThread
ExitThread
ExitProcess
HeapReAlloc
VirtualQuery
GlobalDeleteAtom
CloseHandle
SetThreadPriority
GetProcAddress
HeapDestroy
GetSystemInfo
SetThreadStackGuarantee
ResumeThread
WaitForSingleObject
VirtualAlloc
RtlPcToFileHeader
RaiseException
HeapFree
HeapAlloc
GetCommandLineA
FlsSetValue
DecodePointer
EncodePointer
RtlUnwindEx
RtlLookupFunctionEntry
FindResourceExW
VirtualProtect
GetNumberFormatA
GetWindowsDirectoryA
SearchPathA
Sleep
GetProfileIntA
GetTickCount
GetACP
GetOEMCP
GetCPInfo
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExA
GetTempPathA
GetTempFileNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
lstrcmpiA
FindResourceA
FreeResource
GlobalFindAtomA
InitializeCriticalSectionAndSpinCount
lstrcmpW
DeleteFileA
GlobalFlags
GetVersionExA
GetSystemDirectoryW
LoadLibraryW
GetCurrentDirectoryA
FileTimeToSystemTime
GlobalGetAtomNameA
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetCurrentProcessId
GlobalAddAtomA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleA

user32

RegisterClipboardFormatA
LoadImageW
GetMenuDefaultItem
GetUpdateRect
FrameRect
wsprintfA
WaitMessage
PostThreadMessageA
CreateMenu
IsMenu
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadImageA
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
CopyImage
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyA
ToAsciiEx
CopyAcceleratorTableA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateA
MessageBeep
ReleaseCapture
SetCapture
GetSystemMenu
LoadMenuW
IntersectRect
SetClassLongPtrA
GetAsyncKeyState
NotifyWinEvent
WindowFromPoint
CreatePopupMenu
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
OffsetRect
IsRectEmpty
DestroyMenu
GetMenuItemInfoA
InflateRect
CharUpperA
DestroyIcon
IsIconic
MoveWindow
IsDialogMessageA
CheckDlgButton
RegisterWindowMessageA
LoadIconW
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrA
SetWindowLongPtrA
GetMessageTime
GetMessagePos
MonitorFromWindow
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
KillTimer
SetTimer
InvalidateRect
UpdateWindow
GetDesktopWindow
RealChildWindowFromPoint
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetClassInfoA
DefWindowProcA
MapWindowPoints
GetClientRect
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoA
GetMonitorInfoA
SetRectEmpty
CopyRect
DeleteMenu
GetWindowTextLengthA
GetWindowTextA
LoadCursorA
GetWindowRgn
DestroyCursor
DrawIcon
MapDialogRect
GetNextDlgGroupItem
HideCaret
InvertRect
SubtractRect
MapVirtualKeyExA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnregisterClassA
UnhookWindowsHookEx
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
GetKeyNameTextA
IsCharLowerA
GetIconInfo
GetDoubleClickTime
CharUpperBuffA
GetClassLongA
CopyIcon
IsWindowEnabled
EnableWindow
MessageBoxA
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
SendMessageA
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
ShowWindow
SetMenuDefaultItem

gdi32

SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
SelectPalette
GetObjectType
CreateHatchBrush
GetTextExtentPoint32A
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
CombineRgn
GetBkColor
GetTextColor
PatBlt
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetRectRgn
DPtoLP
OffsetRgn
GetRgnBox
SetDIBColorTable
RealizePalette
StretchBlt
SetPixel
Rectangle
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExA
GetTextFaceA
SetPixelV
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
DeleteObject
GetTextCharsetInfo
EnumFontFamiliesA
GetTextMetricsA
BitBlt
CreateCompatibleDC
CreateRectRgnIndirect
CreateCompatibleBitmap
GetObjectA
CreateFontIndirectA
CreatePatternBrush
CreateSolidBrush
CreatePen
GetStockObject
CreateDIBitmap
CreateBitmap
CreateDCA
GetDeviceCaps
CopyMetaFileA

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegEnumValueA
RegQueryValueA

shell32

SHGetSpecialFolderLocation
SHGetFileInfoA
DragFinish
DragQueryFileA
SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListA
SHGetDesktopFolder
SHAppBarMessage

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance
OleCreateMenuDescriptor
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
CreateStreamOnHGlobal
DoDragDrop
CoTaskMemFree
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoCreateGuid

oleaut32

SysAllocString
VariantInit
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
SysStringLen
SysAllocStringLen
VariantChangeType
SysFreeString

gdiplus

GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdiplusShutdown
GdipGetImageWidth
GdipGetImageHeight
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipCloneImage
GdipGetImageGraphicsContext
GdipDrawImageI
GdipFree
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Exports

Exports

irPlg_Action_RegisterActions
irPlg_GetAuthorInfo
irPlg_GetLuaVersion
irPlg_GetPluginActionXML
irPlg_GetPluginName
irPlg_GetPluginVersion
irPlg_GetSDKVersion
irPlg_ShowHelpForAction
irPlg_ShowHelpForPlugin
irPlg_ValidateLicense

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 513KB - Virtual size: 513KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Privacy Policу/src/Includes/Plugins/Clipboard/_plugin_template.xml
.xml
Privacy Policу/src/Includes/Plugins/FTP/FTP.htm
Privacy Policу/src/Includes/Plugins/FTP/FTP.lic
Privacy Policу/src/Includes/Plugins/FTP/FTP.lmd
.dll windows x86

bb89fb53a85dd0a1ae3244c8f323d12e

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

83:be:82:48:d6:37:ee:d3:5d:ad:4d:bf:af:36:63:15
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-01-2016 00:00

Not After

02-06-2019 23:59

Subject

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

83:be:82:48:d6:37:ee:d3:5d:ad:4d:bf:af:36:63:15
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-01-2016 00:00

Not After

02-06-2019 23:59

Subject

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

62:38:58:63:e8:14:73:28:2c:1b:73:73:bb:2e:38:0b:91:8c:2e:a6:f5:c3:3d:5f:f5:49:d2:27:8b:30:c0:e0
Signer

Actual PE Digest

62:38:58:63:e8:14:73:28:2c:1b:73:73:bb:2e:38:0b:91:8c:2e:a6:f5:c3:3d:5f:f5:49:d2:27:8b:30:c0:e0

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

31-07-2018 13:35
Valid: true

Chain 1

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

14:9a:94:c8:6e:56:94:ca:48:76:a9:68:cd:b3:5b:b1:30:d0:3b:8a
Signer

Actual PE Digest

14:9a:94:c8:6e:56:94:ca:48:76:a9:68:cd:b3:5b:b1:30:d0:3b:8a

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

31-07-2018 13:35
Valid: true

Chain 1

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

lua5.1

lua_gettop
lua_pushboolean
lua_error
lua_tonumber
luaL_openlib
lua_isnumber
lua_toboolean
lua_type
lua_tolstring
lua_isstring
lua_remove
lua_pcall
lua_pushvalue
lua_gettable
lua_pushlstring
lua_pushstring
lua_settable
lua_settop
lua_pushnumber
lua_pushnil
lua_createtable
lua_getfield

kernel32

HeapSize
HeapQueryInformation
SetStdHandle
GetFileType
IsValidCodePage
VirtualQuery
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetTimeZoneInformation
IsProcessorFeaturePresent
LCMapStringW
GetStdHandle
SetHandleCount
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetStringTypeW
CompareStringW
GetConsoleCP
GetConsoleMode
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
GetSystemInfo
VirtualAlloc
RaiseException
HeapFree
HeapAlloc
GetCommandLineA
GetDateFormatA
GetTimeFormatA
DecodePointer
EncodePointer
RtlUnwind
GetSystemTimeAsFileTime
FindResourceExW
VirtualProtect
SearchPathA
Sleep
GetProfileIntA
InitializeCriticalSectionAndSpinCount
GetNumberFormatA
GetWindowsDirectoryA
GetACP
GetOEMCP
GetCPInfo
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetSystemDirectoryW
GlobalFlags
GetCurrentDirectoryA
FindResourceA
FreeResource
GlobalFindAtomA
GetVersionExA
LoadLibraryW
lstrcmpW
GlobalGetAtomNameA
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
CreateThread
LocalAlloc
GetCurrentProcess
DuplicateHandle
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiA
GetCurrentProcessId
GlobalAddAtomA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleA
WaitForSingleObject
ResumeThread
SetThreadPriority
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
GetModuleFileNameA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
CompareStringA
LoadLibraryA
GetModuleHandleW
GetProcAddress
lstrcmpA
FreeLibrary
InterlockedDecrement
GetModuleFileNameW
ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrlenW
MultiByteToWideChar
MulDiv
SetLastError
WriteFile
DeleteFileA
GetFileSize
GetLastError
SetEndOfFile
GetTempPathA
GetTempFileNameA
GetTickCount
lstrlenA
lstrcpyA
GetFileAttributesA
InterlockedIncrement
GetFullPathNameA
GetVolumeInformationA
lstrcpynA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileA
SetFilePointer
ReadFile
InterlockedExchange
CloseHandle
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
ExitThread
ExitProcess
LeaveCriticalSection
HeapReAlloc
UnhandledExceptionFilter
lstrcatA

user32

IsCharLowerA
GetKeyNameTextA
MapVirtualKeyExA
SubtractRect
MapDialogRect
DrawIcon
DestroyCursor
GetWindowRgn
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
GetNextDlgGroupItem
LoadImageA
CopyImage
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
GetMenuDefaultItem
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyA
ToAsciiEx
CopyAcceleratorTableA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateA
MessageBeep
ReleaseCapture
SetCapture
GetSystemMenu
LoadMenuW
SetClassLongA
GetAsyncKeyState
NotifyWinEvent
WindowFromPoint
CreatePopupMenu
DestroyAcceleratorTable
SetParent
RedrawWindow
SetWindowRgn
IsZoomed
OffsetRect
IsRectEmpty
IntersectRect
DestroyMenu
GetMenuItemInfoA
InflateRect
DestroyIcon
IsIconic
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoA
SetRectEmpty
KillTimer
SetTimer
InvalidateRect
GetDesktopWindow
RealChildWindowFromPoint
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
DeleteMenu
RegisterWindowMessageA
GetDoubleClickTime
LoadIconA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetClientRect
GetClassInfoExA
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetWindowPlacement
CallWindowProcA
GetMenu
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnregisterClassA
GetSystemMetrics
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxA
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
GetWindowTextLengthA
GetWindowTextA
GetFocus
SetFocus
SetWindowPos
GetParent
EnableWindow
IsWindowEnabled
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
CharUpperBuffA
CopyIcon
RegisterClipboardFormatA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetUpdateRect
FrameRect
IsClipboardFormatAvailable
SetMenuDefaultItem
WaitMessage
PostThreadMessageA
SendDlgItemMessageA
GetDlgItem
CheckDlgButton
GetWindow
UnhookWindowsHookEx
CreateMenu
IsMenu
UpdateLayeredWindow
UnionRect
LoadIconW
MonitorFromPoint
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetClassInfoA
RegisterClassA
CreateWindowExA
SendMessageA
DestroyWindow
GetWindowLongA
DefWindowProcA
SetWindowLongA
DispatchMessageA
TranslateMessage
wsprintfA
IsWindow
CharUpperA
PeekMessageA
PostQuitMessage
ClientToScreen

gdi32

DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
SetViewportExtEx
CreateHatchBrush
CreateDIBitmap
CreateFontIndirectA
CreateCompatibleBitmap
CreateRectRgnIndirect
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
GetTextExtentPoint32A
SetRectRgn
CombineRgn
PatBlt
DPtoLP
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetBkColor
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
ExtSelectClipRgn
GetNearestPaletteIndex
RealizePalette
OffsetRgn
GetRgnBox
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceA
SetPixelV
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetPaletteEntries
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
CreateBitmap
CreateDCA
CopyMetaFileA
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
GetSystemPaletteEntries
GetDeviceCaps
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
ScaleViewportExtEx

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegEnumValueA
RegQueryValueA

shell32

SHAppBarMessage
FindExecutableA
SHGetFileInfoA
SHGetDesktopFolder
SHBrowseForFolderA
ShellExecuteA
DragQueryFileA
DragFinish
SHGetSpecialFolderLocation
SHGetPathFromIDListA

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoCreateGuid
CoCreateInstance
CoUninitialize
CoInitialize
CoInitializeEx
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor

oleaut32

VariantChangeType
VariantClear
SysStringLen
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
VariantInit
SysAllocString
SysFreeString

wsock32

closesocket
shutdown
recv
send
inet_ntoa
select
htonl
getsockname
ntohs
inet_addr
accept
sendto
ioctlsocket
htons
recvfrom
setsockopt
gethostbyname
WSAGetLastError
WSAStartup
WSACleanup
gethostname
socket
connect
bind
listen

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipCreateBitmapFromStream
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipCreateBitmapFromScan0

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Exports

Exports

irPlg_Action_RegisterActions
irPlg_GetAuthorInfo
irPlg_GetLuaVersion
irPlg_GetPluginActionXML
irPlg_GetPluginName
irPlg_GetPluginVersion
irPlg_GetSDKVersion
irPlg_ShowHelpForAction
irPlg_ShowHelpForPlugin
irPlg_ValidateLicense

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Privacy Policу/src/Includes/Plugins/FTP/FTPx64.lmd
.dll windows x64

5621907fc05dbb9ecc0f7560ece3d403

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

83:be:82:48:d6:37:ee:d3:5d:ad:4d:bf:af:36:63:15
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-01-2016 00:00

Not After

02-06-2019 23:59

Subject

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

83:be:82:48:d6:37:ee:d3:5d:ad:4d:bf:af:36:63:15
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-01-2016 00:00

Not After

02-06-2019 23:59

Subject

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

53:01:37:6f:01:19:6f:2c:78:96:26:6d:b5:06:96:42:d2:97:91:98:65:dd:9e:02:81:ff:a4:da:a7:7d:15:a9
Signer

Actual PE Digest

53:01:37:6f:01:19:6f:2c:78:96:26:6d:b5:06:96:42:d2:97:91:98:65:dd:9e:02:81:ff:a4:da:a7:7d:15:a9

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

31-07-2018 13:35
Valid: true

Chain 1

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

1c:4a:67:f5:65:a1:64:da:8b:82:a6:57:cf:1e:ae:11:f5:d7:b3:0e
Signer

Actual PE Digest

1c:4a:67:f5:65:a1:64:da:8b:82:a6:57:cf:1e:ae:11:f5:d7:b3:0e

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

31-07-2018 13:35
Valid: true

Chain 1

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

lua5.1

lua_gettop
lua_pushboolean
lua_error
lua_tonumber
luaL_openlib
lua_isnumber
lua_toboolean
lua_type
lua_tolstring
lua_isstring
lua_remove
lua_pcall
lua_pushvalue
lua_gettable
lua_pushlstring
lua_pushstring
lua_settable
lua_settop
lua_pushnumber
lua_pushnil
lua_createtable
lua_getfield

kernel32

CreateThread
HeapSize
HeapQueryInformation
SetStdHandle
GetFileType
IsValidCodePage
FlsGetValue
FlsFree
FlsAlloc
GetSystemInfo
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
GetTimeZoneInformation
LCMapStringW
GetStdHandle
SetHandleCount
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetStringTypeW
CompareStringW
GetConsoleCP
GetConsoleMode
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
SetThreadStackGuarantee
VirtualAlloc
RtlPcToFileHeader
RaiseException
HeapFree
HeapAlloc
GetCommandLineA
FlsSetValue
GetTimeFormatA
GetDateFormatA
DecodePointer
EncodePointer
RtlUnwindEx
RtlLookupFunctionEntry
GetSystemTimeAsFileTime
FindResourceExW
VirtualProtect
SearchPathA
Sleep
GetProfileIntA
InitializeCriticalSectionAndSpinCount
GetNumberFormatA
GetWindowsDirectoryA
GetACP
GetOEMCP
GetCPInfo
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetSystemDirectoryW
GlobalFlags
GetCurrentDirectoryA
FindResourceA
FreeResource
GlobalFindAtomA
GetVersionExA
LoadLibraryW
lstrcmpW
GlobalGetAtomNameA
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
ExitThread
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcess
DuplicateHandle
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiA
GetCurrentProcessId
GlobalAddAtomA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleA
WaitForSingleObject
ResumeThread
SetThreadPriority
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
GetModuleFileNameA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
CompareStringA
LoadLibraryA
GetModuleHandleW
GetProcAddress
lstrcmpA
FreeLibrary
GetModuleFileNameW
ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrlenW
MultiByteToWideChar
MulDiv
SetLastError
WriteFile
DeleteFileA
GetFileSize
GetLastError
SetEndOfFile
GetTempPathA
GetTempFileNameA
GetTickCount
lstrlenA
lstrcpyA
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
lstrcpynA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileA
SetFilePointer
ReadFile
CloseHandle
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
ExitProcess
HeapReAlloc
TlsSetValue
VirtualQuery
UnhandledExceptionFilter
lstrcatA

user32

CopyIcon
CharUpperBuffA
GetDoubleClickTime
IsCharLowerA
GetKeyNameTextA
MapVirtualKeyExA
SubtractRect
MapDialogRect
DrawIcon
DestroyCursor
GetWindowRgn
DefFrameProcA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
GetNextDlgGroupItem
LoadImageA
CopyImage
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
GetMenuDefaultItem
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyA
ToAsciiEx
CopyAcceleratorTableA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateA
MessageBeep
ReleaseCapture
SetCapture
GetSystemMenu
LoadMenuW
SetClassLongPtrA
GetAsyncKeyState
NotifyWinEvent
WindowFromPoint
CreatePopupMenu
DestroyAcceleratorTable
SetParent
RedrawWindow
SetWindowRgn
IsZoomed
OffsetRect
IsRectEmpty
IntersectRect
DestroyMenu
GetMenuItemInfoA
InflateRect
DestroyIcon
IsIconic
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoA
SetRectEmpty
KillTimer
SetTimer
InvalidateRect
GetDesktopWindow
RealChildWindowFromPoint
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DeleteMenu
RegisterWindowMessageA
LoadIconW
LoadIconA
RegisterClipboardFormatA
IsChild
GetCapture
GetClassLongA
GetClassNameA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetWindowLongPtrA
SetWindowLongPtrA
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetClientRect
GetClassInfoExA
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetWindowPlacement
CallWindowProcA
GetMenu
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnregisterClassA
GetSystemMetrics
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxA
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
GetWindowTextLengthA
GetWindowTextA
GetFocus
SetFocus
SetWindowPos
GetParent
EnableWindow
IsWindowEnabled
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetUpdateRect
FrameRect
IsClipboardFormatAvailable
SetMenuDefaultItem
WaitMessage
PostThreadMessageA
CreateMenu
IsMenu
SendDlgItemMessageA
GetDlgItem
CheckDlgButton
GetWindow
UnhookWindowsHookEx
UpdateLayeredWindow
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
WinHelpA
DefMDIChildProcA
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetClassInfoA
RegisterClassA
CreateWindowExA
SendMessageA
DestroyWindow
GetWindowLongA
DefWindowProcA
SetWindowLongA
TranslateMessage
DispatchMessageA
wsprintfA
IsWindow
CharUpperA
PeekMessageA
PostQuitMessage
FillRect

gdi32

DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateDIBitmap
SetViewportExtEx
CreateFontIndirectA
CreateCompatibleBitmap
CreateRectRgnIndirect
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
GetTextExtentPoint32A
SetRectRgn
CombineRgn
PatBlt
DPtoLP
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetBkColor
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
ExtSelectClipRgn
GetNearestPaletteIndex
RealizePalette
OffsetRgn
GetRgnBox
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceA
SetPixelV
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetPaletteEntries
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
CreateBitmap
CreateDCA
CopyMetaFileA
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
GetSystemPaletteEntries
GetDeviceCaps
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
ScaleViewportExtEx

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegEnumValueA
RegQueryValueA

shell32

SHAppBarMessage
FindExecutableA
SHGetFileInfoA
SHGetDesktopFolder
SHBrowseForFolderA
ShellExecuteA
DragQueryFileA
DragFinish
SHGetSpecialFolderLocation
SHGetPathFromIDListA

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

ole32

CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoCreateGuid
CoCreateInstance
CoUninitialize
CoInitialize
CoInitializeEx
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor

oleaut32

VariantChangeType
VariantClear
SysStringLen
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
VariantInit
SysAllocString
SysFreeString

wsock32

closesocket
shutdown
recv
send
inet_ntoa
select
htonl
getsockname
ntohs
inet_addr
accept
sendto
ioctlsocket
htons
recvfrom
setsockopt
gethostbyname
WSAGetLastError
WSAStartup
WSACleanup
gethostname
socket
connect
bind
listen

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipCreateBitmapFromStream
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipCreateBitmapFromScan0

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Exports

Exports

irPlg_Action_RegisterActions
irPlg_GetAuthorInfo
irPlg_GetLuaVersion
irPlg_GetPluginActionXML
irPlg_GetPluginName
irPlg_GetPluginVersion
irPlg_GetSDKVersion
irPlg_ShowHelpForAction
irPlg_ShowHelpForPlugin
irPlg_ValidateLicense

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 534KB - Virtual size: 533KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Privacy Policу/src/Includes/Plugins/FTP/_plugin_template.xml
.xml
Privacy Policу/src/Includes/Scripts/Detect_Acrobat.lua
Privacy Policу/src/Includes/Scripts/Detect_Excel.lua
Privacy Policу/src/Includes/Scripts/Detect_FireFox.lua
Privacy Policу/src/Includes/Scripts/Detect_Flash.lua
Privacy Policу/src/Includes/Scripts/Detect_IE.lua
Privacy Policу/src/Includes/Scripts/Detect_MSWord.lua
Privacy Policу/src/Includes/Scripts/Detect_PowerPoint.lua
Privacy Policу/src/Includes/Scripts/Detect_QuickTime.lua
Privacy Policу/src/Includes/Scripts/Detect_RealPlayer.lua
Privacy Policу/src/Includes/Scripts/Detect_WindowsMediaPlayer.lua
Privacy Policу/src/Includes/Scripts/GetBDEPath.lua
Privacy Policу/src/Includes/Scripts/GetDAOPath.lua
Privacy Policу/src/Includes/Scripts/TextFileEx.lua
.js
Privacy Policу/src/Includes/Scripts/_SUF70_Global_Functions.lua
Privacy Policу/src/Includes/ir_sc.dll
.dll regsvr32 windows x86

db7be6bde0b469793438a47888b6d85d

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

83:be:82:48:d6:37:ee:d3:5d:ad:4d:bf:af:36:63:15
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-01-2016 00:00

Not After

02-06-2019 23:59

Subject

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

83:be:82:48:d6:37:ee:d3:5d:ad:4d:bf:af:36:63:15
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-01-2016 00:00

Not After

02-06-2019 23:59

Subject

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-05-2013 00:00

Not After

08-05-2028 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31-12-2015 00:00

Not After

09-07-2019 18:40

Subject

CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

2a:7f:87:f5:2b:a9:3d:0e:c6:94:28:0f:76:7f:9b:ab:da:9e:6e:00:56:1f:af:ad:62:6e:b5:4b:8c:4c:f2:90
Signer

Actual PE Digest

2a:7f:87:f5:2b:a9:3d:0e:c6:94:28:0f:76:7f:9b:ab:da:9e:6e:00:56:1f:af:ad:62:6e:b5:4b:8c:4c:f2:90

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

26-02-2016 20:35
Valid: true

Chain 1

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

55:10:26:8c:97:35:bc:8c:e8:dc:fd:d7:83:18:b4:6c:cc:5c:4e:31
Signer

Actual PE Digest

55:10:26:8c:97:35:bc:8c:e8:dc:fd:d7:83:18:b4:6c:cc:5c:4e:31

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

26-02-2016 20:35
Valid: true

Chain 1

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave,L=Winnipeg,ST=MB,C=CA

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeExA
SetEndOfFile
WriteFile
ReadFile
GetFileSize
SetFilePointer
VirtualAlloc
VirtualFree
FindFirstFileA
FreeResource
GlobalFree
GlobalHandle
LockResource
lstrcmpA
CompareStringA
SetEnvironmentVariableA
GetLocaleInfoW
GetOEMCP
GetACP
SetStdHandle
IsBadCodePtr
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetEnvironmentStringsW
GetEnvironmentStrings
CreateFileA
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
HeapSize
TerminateProcess
IsBadWritePtr
HeapCreate
GetVersionExA
GetEnvironmentVariableA
SetUnhandledExceptionFilter
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
CompareStringW
GetCPInfo
LCMapStringW
LCMapStringA
ExitProcess
GetVersion
GetCommandLineA
IsBadReadPtr
HeapAlloc
HeapReAlloc
HeapFree
RaiseException
RtlUnwind
InterlockedExchange
Sleep
LocalFree
GetFileTime
CloseHandle
CompareFileTime
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
GlobalAlloc
GlobalLock
GlobalUnlock
LoadLibraryA
GetProcAddress
lstrcatA
lstrcpyA
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
DisableThreadLibraryCalls
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
FindResourceA
LoadResource
SizeofResource
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
WideCharToMultiByte
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
lstrlenA
MultiByteToWideChar
lstrlenW
FreeEnvironmentStringsW

user32

RedrawWindow
FillRect
GetSysColor
GetClassNameA
SetDlgItemTextA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
GetDlgItemTextA
GetDesktopWindow
DestroyWindow
DefWindowProcA
CharNextA
ReleaseDC
GetDC
LoadBitmapA
RegisterClassExA
wsprintfA
LoadCursorA
GetClassInfoExA
IsChild
GetFocus
EndPaint
GetClientRect
BeginPaint
IsWindow
SetFocus
ShowWindow
GetParent
InvalidateRect
GetKeyState
PtInRect
UnionRect
SetWindowPos
CreateAcceleratorTableA
ReleaseCapture
SetCapture
InvalidateRgn
DialogBoxParamA
SetWindowsHookExA
UnhookWindowsHookEx
MenuItemFromPoint
GetMenuState
GetMenuItemCount
GetCursorPos
CallNextHookEx
ShowCaret
HideCaret
GetWindow
RegisterWindowMessageA
DialogBoxIndirectParamA
GetActiveWindow
EndDialog
IsDlgButtonChecked
GetDlgItem
GetWindowRect
CheckDlgButton
EnableWindow
keybd_event
GetMenuItemID
ClientToScreen
ScreenToClient
InsertMenuA
CreatePopupMenu
LoadStringA
TrackPopupMenu
DestroyMenu
GetUpdateRect
UpdateWindow
SendMessageA
CharUpperA
CharLowerA
CreateWindowExA
CallWindowProcA
GetWindowLongA
SetWindowLongA
IntersectRect
EqualRect
OffsetRect
SetWindowRgn

gdi32

SelectObject
CreateCompatibleDC
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
SetWindowExtEx
CreateMetaFileA
GetObjectA
CreateCompatibleBitmap
BitBlt
MaskBlt
GetTextExtentPoint32A
GetTextMetricsA
CreateSolidBrush
GetStockObject
StretchBlt
DeleteObject
DeleteDC
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
GetDeviceCaps
SetPixel
CreateDCA
RestoreDC

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA

shell32

ShellExecuteA

ole32

ProgIDFromCLSID
OleLockRunning
StringFromCLSID
CLSIDFromString
CLSIDFromProgID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
OleSaveToStream
WriteClassStm
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
OleLoadFromStream

oleaut32

VarUI4FromStr
CreateErrorInfo
SetErrorInfo
OleCreateFontIndirect
SysAllocStringByteLen
OleCreatePropertyFrame
SysStringByteLen
LoadTypeLi
RegisterTypeLi
SafeArrayCreateVectorEx
SafeArrayPutElement
SysStringLen
LoadRegTypeLi
VariantChangeType
VariantInit
SafeArrayDestroy
SysAllocStringLen
SysAllocString
VariantClear
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
PSAddAutoCorrectReplacement
PSAddFirstLetterException
PSAddOtherException
PSAddToChangeAll
PSAddToIgnoreAll
PSAddTwoInitCapsException
PSAddWord
PSAutoCorrectOptionsDlg
PSCalculateDifference
PSCharType
PSCheckText
PSCheckTextControl
PSClearChangeAll
PSClearIgnoreAll
PSCloseCustomDictionary
PSCloseDictionary
PSCombineStatistics
PSCorrectText
PSCreateCustomDictionary
PSCreateLexFromCodepage
PSCreateLexFromSpt
PSCreateSpellChecker
PSDestroySpellChecker
PSDestroyTextStatistics
PSDoesWordExist
PSEmptyCustomDictionary
PSExportSptToLex
PSExportWordsToLex
PSExtractSptFromLex
PSExtractWordsFromLex
PSGenerateStatisticsFromString
PSGenerateStatisticsFromTextControl
PSGetActiveCustomDictionaryPath
PSGetAllowErrorReporting
PSGetAlwaysSuggest
PSGetAutoAddWordsToExceptionList
PSGetAutoCorrectReplacement
PSGetAutoCorrectReplacementCount
PSGetAutoCorrectTextAsYouType
PSGetCapitalizeSentence
PSGetCaseSensitiveCustomDictionaries
PSGetChangePopup
PSGetCharacterWithSpacesCount
PSGetCharacterWithoutSpacesCount
PSGetCheckSpellingAsYouType
PSGetCorrectCapsLock
PSGetCorrectTwoInitCaps
PSGetCustomDictionaryCount
PSGetCustomDictionaryPath
PSGetDictionaryCount
PSGetDictionaryPath
PSGetEventCallbackFunc
PSGetFirstLetterException
PSGetFirstLetterExceptionCount
PSGetIgnoreInternetAndFileAddresses
PSGetIgnoreWordsInUppercase
PSGetIgnoreWordsWithNumbers
PSGetLanguageName
PSGetLineCount
PSGetLinkedTextControlHandle
PSGetOtherException
PSGetOtherExceptionCount
PSGetPhraseHistogram
PSGetPhraseHistogramLength
PSGetReplacement
PSGetSpecificPhraseCount
PSGetSuggestFromMainDictionariesOnly
PSGetSuggestion
PSGetSuggestionCount
PSGetTwoInitCapsException
PSGetTwoInitCapsExceptionCount
PSGetUnderlineCurrentlyTypedWord
PSGetWordCount
PSGetWordsCount
PSGetWrongWordCount
PSInitializeAutoCorrection
PSOpenCustomDictionary
PSOpenDictionary
PSOptionsDlg
PSRemoveAutoCorrectReplacement
PSRemoveFirstLetterException
PSRemoveOtherException
PSRemoveTwoInitCapsException
PSSaveInitializationFile
PSSetActiveCustomDictionaryPath
PSSetAllowErrorReporting
PSSetAlwaysSuggest
PSSetAutoAddWordsToExceptionList
PSSetAutoCorrectTextAsYouType
PSSetCapitalizeSentence
PSSetCaseSensitiveCustomDictionaries
PSSetChangePopup
PSSetCheckSpellingAsYouType
PSSetCorrectCapsLock
PSSetCorrectTwoInitCaps
PSSetEventCallbackFunc
PSSetIgnoreInternetAndFileAddresses
PSSetIgnoreWordsInUppercase
PSSetIgnoreWordsWithNumbers
PSSetLinkedTextControlHandle
PSSetSuggestFromMainDictionariesOnly
PSSetUnderlineCurrentlyTypedWord
PSShowTextControlPopup
PSShowTextControlPopupAtPos
PSWritePhraseHistogramToFile

Sections

.text
Size: 436KB - Virtual size: 434KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SublimeSetup.exe
.exe windows x86

f6826207802d4ea50d62df844f937088

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleHandleW
GetModuleFileNameW
GetProfileIntW
FreeLibrary
GetProcAddress
GetLongPathNameW
WideCharToMultiByte
LoadLibraryW
lstrlenW
GetVersionExW
SetEndOfFile
WriteConsoleW
FlushFileBuffers
OutputDebugStringA
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
SetConsoleCtrlHandler
GetConsoleCP
SetStdHandle
GetTimeZoneInformation
EnumSystemLocalesW
SetLastError
IsValidLocale
GetTimeFormatW
GetDateFormatW
ReadFile
GetConsoleMode
SetFilePointerEx
GetFileType
GetCurrentThread
GetACP
GetStdHandle
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileExW
FindClose
InterlockedFlushSList
RtlUnwind
QueryPerformanceCounter
GetStartupInfoW
WaitForSingleObjectEx
ResetEvent
SetEvent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
OutputDebugStringW
IsDebuggerPresent
GetLocaleInfoW
LCMapStringW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
DeleteFileW
CreateDirectoryW
CreateDirectoryA
lstrcpynW
GetTempPathW
GetTickCount
lstrcatW
GetPrivateProfileStringW
GetLocalTime
GetPrivateProfileIntW
GetCommandLineW
GetCurrentProcess
TerminateProcess
WriteFile
LocalFree
LocalAlloc
FreeResource
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
DecodePointer
CreateMutexW
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
GetLastError
EnterCriticalSection
RaiseException
LeaveCriticalSection
GetUserDefaultLCID
lstrcmpiW
GetFileSize
CreateFileW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetCPInfo
EncodePointer
GetStringTypeW
FormatMessageW
CopyFileW
GlobalSize
CreateThread
Sleep
TerminateThread
WaitForSingleObject
InitializeCriticalSection
GetFileTime
SetFileTime
GetVersion
ReadConsoleW
GetThreadLocale
SetThreadLocale
VerSetConditionMask
GetTempFileNameW
MulDiv
GetCurrentProcessId
OpenProcess
GetModuleHandleA
VerifyVersionInfoW
HeapDestroy

user32

EqualRect
ReleaseDC
ReleaseCapture
IsClipboardFormatAvailable
RegisterClipboardFormatW
GetSysColor
SetCaretPos
CreateCaret
GetCaretBlinkTime
KillTimer
SetTimer
wsprintfW
GetFocus
DrawIconEx
GetIconInfo
SetActiveWindow
BringWindowToTop
AttachThreadInput
GetWindowThreadProcessId
IntersectRect
DispatchMessageW
SetRectEmpty
UpdateLayeredWindow
GetSystemMetrics
SetLayeredWindowAttributes
OffsetRect
IsZoomed
GetForegroundWindow
EnableWindow
SetWindowRgn
ClientToScreen
IsIconic
DefWindowProcW
CharNextW
GetMessageW
GetDC
GetDCEx
UpdateWindow
SetCapture
GetCapture
InvalidateRect
SetRect
SetCursor
ScreenToClient
GetCursorPos
FillRect
ShowWindow
TranslateMessage
PeekMessageW
DestroyCursor
LoadStringW
LoadMenuW
LoadAcceleratorsW
RegisterClassExW
LoadCursorW
DrawTextW
InflateRect
PtInRect
CopyRect
GetDoubleClickTime
SystemParametersInfoW
MonitorFromRect
MonitorFromPoint
CreatePopupMenu
DestroyMenu
TrackPopupMenuEx
AppendMenuW
GetMenuItemCount
RemoveMenu
GetMenuItemInfoW
MessageBeep
TranslateAcceleratorW
CreateDialogParamW
PostQuitMessage
LoadStringA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SendMessageTimeoutW
SetWindowTextW
IsRectEmpty
SetForegroundWindow
FindWindowW
GetWindowTextW
GetWindowTextLengthW
CallWindowProcW
GetWindow
MonitorFromWindow
GetMonitorInfoW
MoveWindow
IsWindowVisible
IsWindow
PostMessageW
GetSysColorBrush
DestroyWindow
GetClientRect
SetFocus
GetDlgItem
SetClassLongW
GetParent
EndPaint
BeginPaint
GetWindowLongW
SetWindowPos
TrackMouseEvent
MapWindowPoints
SendMessageW
GetWindowRect
SetWindowLongW
CreateWindowExW
UnregisterClassW
GetClassInfoExW
LoadImageW

gdi32

SetBitmapBits
LineTo
MoveToEx
CreateDCW
StretchBlt
GetPixel
EnumFontFamiliesExW
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontW
GetDeviceCaps
GetDIBits
GetObjectW
RestoreDC
CreateSolidBrush
PatBlt
UnrealizeObject
SetROP2
SetWindowOrgEx
SetViewportOrgEx
SetMapMode
SaveDC
CreatePatternBrush
CreateBitmap
CreatePen
DeleteDC
GetStockObject
Rectangle
SelectObject
SetTextColor
SetBkMode
DeleteObject
GetBitmapBits
CreateRoundRectRgn
CombineRgn
CreateRectRgn
CreateRectRgnIndirect
ExtSelectClipRgn
CreateFontIndirectW
CreateDIBSection
SetPixel
SetStretchBltMode
SetBkColor
GetTextColor
GetCurrentObject
CopyMetaFileW
GetViewportOrgEx
SetTextCharacterExtra

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegSetValueExW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW

shell32

SHGetFolderPathA
SHCreateDirectoryExW
SHGetFolderPathW
SHGetSpecialFolderPathW
ShellExecuteW
CommandLineToArgvW

ole32

ReleaseStgMedium
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleCreateStaticFromData
OleSetContainedObject
RevokeDragDrop
RegisterDragDrop
OleDuplicateData
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree

oleaut32

VarUI4FromStr
SysFreeString
LoadRegTypeLi
LoadTypeLi
SysStringLen
SysAllocString
SysAllocStringLen
VarBstrCmp
SysAllocStringByteLen
SysStringByteLen

shlwapi

PathAppendW
SHGetValueW
PathAddBackslashW
PathAppendA
PathFileExistsW
PathIsDirectoryW
PathIsRootW
PathRemoveFileSpecW
StrCmpIW
SHSetValueW

comctl32

ord17
InitCommonControlsEx

msimg32

AlphaBlend

gdiplus

GdipLoadImageFromStreamICM
GdipCreateSolidFill
GdipDeleteBrush
GdipFree
GdipAlloc
GdipCloneBrush
GdipCreatePath
GdipDeletePath
GdipCreateFromHDC
GdipDeleteGraphics
GdipCreatePen1
GdipDeletePen
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDrawString
GdipSetTextRenderingHint
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipGetImagePixelFormat
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipSaveImageToFile
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSetInterpolationMode
GdipDrawImageRectRectI
GdipGetImageHeight
GdipGetImageWidth
GdipSetSmoothingMode
GdipLoadImageFromStream
GdipCloneImage
GdipDisposeImage
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdiplusStartup
GdipSetPenEndCap
GdipDrawPath
GdipAddPathEllipseI
GdipDrawLineI
GdipSetPenBrushFill
GdipSetPenStartCap
GdipSetPenCustomEndCap
GdipSetCustomLineCapStrokeCaps
GdipSetCustomLineCapWidthScale
GdipDeleteCustomLineCap
GdipCreateCustomLineCap
GdipAddPathLineI

crypt32

CryptBinaryToStringA
CryptStringToBinaryW
CryptStringToBinaryA
CryptBinaryToStringW

riched20

ord4

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f647ffdb833ca723713d0e93a2ce740a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 312KB - Virtual size: 311KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 2KB - Virtual size: 31KB

.gfids Size: 512B - Virtual size: 364B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 9KB - Virtual size: 9KB

e06a6ef836bc50d89f272370cd44f253

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 849B

.data Size: 4KB - Virtual size: 212B

.reloc Size: 4KB - Virtual size: 314B

5af41bc4294f5ad4ef62f704d2476d4b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

oleaut32

shlwapi

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 912B

.data Size: - Virtual size: 4B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 198B

c594b6ec332b2811deb48c62556ee059

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2Certificate

Extended Key Usages

Key Usages

76:bc:07:0e:95:e0:87:8d:ce:5b:30:40:ff:b2:b3:33Certificate

Extended Key Usages

Key Usages

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2Certificate

Extended Key Usages

Key Usages

76:bc:07:0e:95:e0:87:8d:ce:5b:30:40:ff:b2:b3:33Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

ca:3c:f3:79:2d:af:59:48:fe:73:32:28:67:46:43:6f:b4:22:80:d4:89:2e:d8:41:fa:7d:f9:f6:0c:88:00:31Signer

Signature Validations

Verification

12-09-2019 10:17 Valid: true

.text
Size: 312KB - Virtual size: 311KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 2KB - Virtual size: 31KB

.gfids
Size: 512B - Virtual size: 364B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 9KB - Virtual size: 9KB

.text
Size: 4KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 849B

.data
Size: 4KB - Virtual size: 212B

.reloc
Size: 4KB - Virtual size: 314B

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 912B

.data
Size: - Virtual size: 4B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 198B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

76:bc:07:0e:95:e0:87:8d:ce:5b:30:40:ff:b2:b3:33
Certificate

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

76:bc:07:0e:95:e0:87:8d:ce:5b:30:40:ff:b2:b3:33
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

ca:3c:f3:79:2d:af:59:48:fe:73:32:28:67:46:43:6f:b4:22:80:d4:89:2e:d8:41:fa:7d:f9:f6:0c:88:00:31
Signer

12-09-2019 10:17
Valid: true

2e:57:99:b6:3e:2f:c7:72:f0:ab:1b:6e:bb:15:4e:a7:2c:88:f0:61
Signer

12-09-2019 10:17
Valid: true

.text
Size: 989KB - Virtual size: 989KB

.rdata
Size: 361KB - Virtual size: 361KB

.data
Size: 26KB - Virtual size: 37KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 44KB - Virtual size: 44KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

76:bc:07:0e:95:e0:87:8d:ce:5b:30:40:ff:b2:b3:33
Certificate

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

76:bc:07:0e:95:e0:87:8d:ce:5b:30:40:ff:b2:b3:33
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

0f:ac:f1:d9:71:c4:18:22:1b:d8:c7:ac:ac:aa:27:41:29:c7:a1:44:08:e9:0b:9b:96:8b:6c:c4:75:80:ce:28
Signer

12-09-2019 10:18
Valid: true

59:47:7c:ae:9b:28:d9:1a:07:81:0b:41:dc:c0:bb:98:84:5c:0f:61
Signer

12-09-2019 10:17
Valid: true

.text
Size: 270KB - Virtual size: 269KB

.rdata
Size: 71KB - Virtual size: 70KB