Uninstall Tool v3[.]5[.]1 Build 5510 (x86[.]x64) - Full[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Uninstall Tool v3.5.1 Build 5510 (x86.x64) - Full.zip
Size

7.6MB
MD5

c7b2646e98c14c4926871ba492a02fda
SHA1

7c33027026465b940f51fa2e7a39a053167ee56e
SHA256

cd8c98e04248ea081296ba56d85cc5403e7c156273ce2445cdbcbb35838c1812
SHA512

ccd8fd885ff2f92b1282a0f39f8066c12d6fa762424b88b981c52349ad2f63410cda2aaf57751f2ecbd7035ceadbb755ab55a7f38b102bf2ddc116083dc9f58e
SSDEEP

196608:fV0C7G5HtPbJASheH3Ad6coPHAZrMzoJJ/y1/lqe9e/KwlTko:90fhBJAQe3wkgXcQKcTv

Score

1^/10

Malware Config

Signatures

Files

Uninstall Tool v3.5.1 Build 5510 (x86.x64) - Full.zip
.zip
Crack/x64/UninstallTool.exe
.exe windows x64

c66351da6dd8ab9cf496ea617045907c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

RtlUnwindEx
IsDebuggerPresent
IsProcessorFeaturePresent
CreateThread
ExitThread
ExitProcess
SetStdHandle
GetFileType
HeapQueryInformation
VirtualQuery
GetStdHandle
GetStartupInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlVirtualUnwind
UnhandledExceptionFilter
IsValidCodePage
GetOEMCP
GetCPInfo
GetConsoleMode
ReadConsoleW
GetTimeZoneInformation
RtlLookupFunctionEntry
GetUserDefaultLCID
EnumSystemLocalesW
GetStringTypeW
GetDateFormatW
GetTimeFormatW
LCMapStringW
GetConsoleCP
GetDriveTypeW
WriteConsoleW
SetEnvironmentVariableA
RtlPcToFileHeader
FindResourceExW
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
SetErrorMode
GlobalGetAtomNameW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
SuspendThread
SetThreadPriority
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
FreeResource
GetSystemDirectoryW
EncodePointer
GetThreadLocale
LoadLibraryExW
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
GlobalFree
EnumResourceLanguagesW
EnumResourceNamesW
EnumResourceTypesW
LoadLibraryA
CreateDirectoryW
GetPrivateProfileSectionNamesW
GetModuleHandleA
lstrlenA
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetModuleHandleExW
GetACP
VirtualUnlock
VirtualLock
OutputDebugStringW
OutputDebugStringA
CancelWaitableTimer
SetWaitableTimer
CreateWaitableTimerW
WriteFileEx
SignalObjectAndWait
WaitForMultipleObjectsEx
GetSystemInfo
GetSystemTimeAsFileTime
SetFilePointerEx
GetFileSizeEx
SetFileAttributesW
RemoveDirectoryW
IsBadWritePtr
IsBadReadPtr
MoveFileExW
lstrcmpiW
ResumeThread
SetFilePointer
WriteFile
GetTickCount
WinExec
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
RaiseException
DecodePointer
lstrcmpW
GetComputerNameW
DeleteFileW
GetLocalTime
lstrcpynW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetExitCodeProcess
ReadFile
DeleteCriticalSection
InitializeCriticalSection
WaitForMultipleObjects
TerminateThread
ResetEvent
DeviceIoControl
SetLastError
LocalUnlock
LocalLock
GetVersionExW
GetFileAttributesW
FormatMessageW
LocalAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
OpenEventW
CreateEventW
OpenMutexW
CreateMutexW
SetEvent
VerifyVersionInfoW
VerSetConditionMask
VirtualFree
VirtualAlloc
GetWindowsDirectoryW
Sleep
GetProcessHeap
HeapFree
HeapAlloc
SearchPathW
ExpandEnvironmentStringsW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
LocalFree
OpenProcess
LeaveCriticalSection
EnterCriticalSection
GetCommandLineW
WideCharToMultiByte
GetExitCodeThread
MultiByteToWideChar
CreateProcessW
GetUserDefaultUILanguage
MulDiv
FileTimeToSystemTime
FindResourceW
lstrlenW
SizeofResource
LockResource
RtlCaptureContext
LoadResource
WaitForSingleObject
GetLastError
GetTempPathW
QueryDosDeviceW
GetTempFileNameW
GetLongPathNameW
GetLogicalDriveStringsW
GetFileTime
GetFileSize
GetFileAttributesExW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
LoadLibraryW
lstrcatW
lstrcpyW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
VirtualProtect
GetNativeSystemInfo
GetSystemTime
GetVersion
GetCurrentThreadId
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
SetUnhandledExceptionFilter
CloseHandle
CreateFileW
GetCurrentDirectoryW
IsValidLocale

user32

InflateRect
WinHelpW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgCtrlID
GetCapture
GetMenu
SetMenu
IsDialogMessageW
LoadIconW
GetLastActivePopup
GetClassNameW
SetWindowLongPtrW
GetWindowLongPtrW
MessageBeep
GetWindowTextW
SetWindowTextW
EndPaint
BeginPaint
DrawIcon
EnableMenuItem
GetSystemMenu
KillTimer
SetTimer
GetAsyncKeyState
GetDialogBaseUnits
CheckDlgButton
GetDlgItem
CreateDialogIndirectParamW
SetWindowPos
DestroyWindow
PostQuitMessage
WaitMessage
PeekMessageW
DispatchMessageW
TranslateMessage
SystemParametersInfoW
GetWindow
SetWindowLongW
GetWindowLongW
IsRectEmpty
GetWindowRect
IsWindowVisible
GetDesktopWindow
EnumWindows
SendMessageTimeoutW
CreatePopupMenu
AppendMenuW
SetClassLongPtrW
SetMenuDefaultItem
EqualRect
GetClassInfoW
DrawTextExW
GrayStringW
TabbedTextOutW
InsertMenuW
RedrawWindow
GetForegroundWindow
EmptyClipboard
SetClipboardData
OpenClipboard
MoveWindow
ClientToScreen
UnregisterClassW
TrackPopupMenu
GetMenuDefaultItem
GetMenuItemCount
DeleteMenu
CharLowerW
GetUpdateRect
ShowScrollBar
WindowFromPoint
SendDlgItemMessageA
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
CharUpperW
LoadMenuW
UnhookWindowsHookEx
GetWindowDC
CheckMenuItem
SetMenuItemBitmaps
UpdateWindow
SetActiveWindow
GetActiveWindow
RegisterWindowMessageW
SendMessageW
PostMessageW
IsWindow
GetFocus
GetKeyState
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
GetMessageTime
CallWindowProcW
RegisterClassW
EnableWindow
DrawTextW
InvalidateRect
GetClientRect
SetCursor
GetCursorPos
ScreenToClient
GetSysColor
SetRect
OffsetRect
PtInRect
GetParent
LoadCursorW
DestroyIcon
LoadImageW
DrawIconEx
GetIconInfo
GetDC
ReleaseDC
GetSystemMetrics
DrawFocusRect
CopyRect
CopyIcon
SetRectEmpty
GetMessageW
ExitWindowsEx
DefWindowProcW
ValidateRect
SetScrollRange
GetScrollRange
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
AdjustWindowRectEx
GetClassLongPtrW
GetTopWindow
SetWindowsHookExW
CallNextHookEx
SetScrollInfo
GetScrollInfo
MonitorFromWindow
GetMonitorInfoW
SetDlgItemTextW
SetWindowContextHelpId
IsWindowEnabled
IntersectRect
GetKeyNameTextW
MapVirtualKeyW
ShowOwnedPopups
EndDialog
GetNextDlgTabItem
MapDialogRect
CharNextW
DestroyMenu
GetMenuItemInfoW
PostThreadMessageW
RegisterClipboardFormatW
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
ReleaseCapture
RegisterClassExW
CreateWindowExW
ShowWindow
SetLayeredWindowAttributes
WaitForInputIdle
SetFocus
GetClassInfoExW
IsChild
SetCapture
IsIconic
RealChildWindowFromPoint
SetForegroundWindow
MessageBoxW
FindWindowW
FindWindowExW
GetWindowThreadProcessId
EnumDisplaySettingsW
LoadStringW
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateMDISysAccel
DefFrameProcW
DrawMenuBar
GetTabbedTextExtentA
GetDoubleClickTime
DrawEdge
SetWindowLongPtrA
GetWindowLongPtrA
IsWindowUnicode
GetClassLongW
SetCursorPos
LookupIconIdFromDirectoryEx
GetCursor
IsClipboardFormatAvailable
IsZoomed
GetSysColorBrush
CloseClipboard
MapVirtualKeyExW
GetKeyboardState
AttachThreadInput
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
SetWindowPlacement
GetWindowPlacement
MapWindowPoints
GetMessagePos
DrawFrameControl
CharLowerBuffW
CharLowerBuffA
FillRect
DrawStateW
GetDCEx
LockWindowUpdate
InvertRect
wsprintfW
SetParent
UnionRect
CreateIconFromResourceEx
CreateIconIndirect
IsMenu
GetWindowRgn
HideCaret
ShowCaret
SetWindowRgn
ToUnicodeEx
GetKeyboardLayoutList
GetKeyboardLayout
IsCharLowerW

gdi32

SetBkMode
SetMapMode
SetStretchBltMode
SetTextAlign
MoveToEx
PolyBezierTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
ExtSelectClipRgn
EnumFontFamiliesExW
GetRgnBox
SelectClipRgn
SaveDC
RestoreDC
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetCurrentPositionEx
GetClipRgn
GetClipBox
ExcludeClipRect
CreateBitmap
GetPixel
CreateRoundRectRgn
CreateRectRgn
CombineRgn
GetBitmapBits
CreateDIBSection
GetTextColor
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetBkColor
Escape
BitBlt
RoundRect
Rectangle
GetStockObject
CreatePen
SetTextColor
SetBkColor
GetTextExtentPoint32W
DeleteDC
CreateDCW
SetPixel
Polygon
GetCurrentObject
StretchBlt
GetDIBits
PtInRegion
ExtCreateRegion
CreateFontW
Polyline
GetViewportOrgEx
StretchDIBits
Ellipse
GetCharWidthW
GetTextAlign
GetTextExtentPoint32A
BeginPath
CloseFigure
EndPath
FillPath
StrokeAndFillPath
StrokePath
CreatePolygonRgn
GetWindowOrgEx
SetPixelV
FillRgn
FrameRgn
RealizePalette
SetDIBitsToDevice
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectW
GetDeviceCaps
GetObjectW
SelectObject
DeleteObject
GetTextMetricsW
CreatePatternBrush
CreateSolidBrush

msimg32

GradientFill
AlphaBlend

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

EnumServicesStatusExW
RegOpenKeyExW
RegQueryValueExW
OpenProcessToken
AdjustTokenPrivileges
GetTokenInformation
IsValidSid
LookupPrivilegeValueW
ConvertSidToStringSidW
RegQueryValueW
RegEnumKeyW
StartServiceW
QueryServiceStatus
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
RegCloseKey
ControlService
CloseServiceHandle
RegCreateKeyW
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW

shell32

SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHAppBarMessage
Shell_NotifyIconW
DragFinish
SHFileOperationW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
CommandLineToArgvW
ShellExecuteExW
SHChangeNotify
DragQueryFileW
DragAcceptFiles
ExtractIconExW
SHGetFileInfoW
ShellExecuteW

comctl32

ImageList_AddMasked
InitCommonControlsEx
ImageList_Draw
_TrackMouseEvent
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageCount
ImageList_Add
ImageList_DrawEx
ImageList_GetImageInfo
ImageList_GetIconSize

shlwapi

StrFormatByteSizeW
PathRemoveFileSpecW
PathMatchSpecW
PathIsRelativeW
PathIsDirectoryW
PathFindExtensionW
PathFileExistsW
PathStripPathW
PathAddBackslashW
SHStrDupW
SHDeleteKeyW
PathRemoveArgsW
PathGetArgsW
PathParseIconLocationW
ord487
PathCompactPathW
PathIsUNCW
PathStripToRootW
UrlUnescapeW
PathFindFileNameW
PathUnquoteSpacesW

uxtheme

OpenThemeData
CloseThemeData
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeBackground
IsAppThemed

ole32

StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
CoInitialize
CoCreateGuid
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
CoTaskMemAlloc
CoInitializeEx
CoUninitialize
CoInitializeSecurity
PropVariantClear
CoCreateInstance
CoTaskMemFree
OleInitialize
OleUninitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter

oleaut32

VarBstrFromDate
VarDateFromStr
SafeArrayGetElemsize
SafeArrayGetDim
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLi
OleCreateFontIndirect
VariantChangeType
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayDestroy
VariantInit
VariantCopy
VariantClear
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString
VariantChangeTypeEx
VarUdateFromDate
OleLoadPicturePath

oledlg

OleUIBusyW
OleUIAddVerbMenuW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

psapi

GetModuleFileNameExW

oleacc

CreateStdAccessibleObject
LresultFromObject

wininet

InternetGetLastResponseInfoW
InternetSetOptionExW
InternetQueryOptionW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetOpenUrlW
InternetCloseHandle
InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetSetStatusCallbackW

winmm

PlaySoundW

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Crack/x64/license.dat
Crack/x86/UninstallTool.exe
.exe windows x86

a7f66a21f1c5566fb653f2f7c6b34113

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleExW
SetStdHandle
GetFileType
HeapQueryInformation
VirtualQuery
GetStdHandle
GetStartupInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
IsValidCodePage
GetOEMCP
GetCPInfo
GetConsoleMode
ReadConsoleW
GetTimeZoneInformation
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetDateFormatW
GetTimeFormatW
LCMapStringW
GetConsoleCP
GetDriveTypeW
WriteConsoleW
SetEnvironmentVariableA
ExitThread
CreateThread
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
FindResourceExW
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
SetErrorMode
GlobalGetAtomNameW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
SuspendThread
SetThreadPriority
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
FreeResource
GetSystemDirectoryW
EncodePointer
GetThreadLocale
LoadLibraryA
LoadLibraryExW
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
EnumResourceLanguagesW
EnumResourceNamesW
EnumResourceTypesW
InterlockedDecrement
CreateDirectoryW
GetPrivateProfileSectionNamesW
lstrlenA
GetFullPathNameW
FlushFileBuffers
GlobalFree
GetModuleHandleA
GetACP
VirtualUnlock
VirtualLock
OutputDebugStringW
OutputDebugStringA
CancelWaitableTimer
SetWaitableTimer
CreateWaitableTimerW
WriteFileEx
SignalObjectAndWait
WaitForMultipleObjectsEx
GetSystemInfo
SetFilePointerEx
GetFileSizeEx
InterlockedExchangeAdd
InterlockedExchange
InterlockedIncrement
SetFileAttributesW
RemoveDirectoryW
IsBadWritePtr
IsBadReadPtr
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
MoveFileExW
GetExitCodeProcess
lstrcmpiW
ResumeThread
SetFilePointer
WriteFile
GetTickCount
WinExec
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
RaiseException
DecodePointer
lstrcmpW
GetComputerNameW
DeleteFileW
GetLocalTime
lstrcpynW
FileTimeToDosDateTime
GetSystemTimeAsFileTime
ReadFile
DeleteCriticalSection
InitializeCriticalSection
WaitForMultipleObjects
TerminateThread
ResetEvent
DeviceIoControl
SetLastError
LocalUnlock
LocalLock
GetVersionExW
GetFileAttributesW
FormatMessageW
LocalAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
OpenEventW
CreateEventW
OpenMutexW
CreateMutexW
SetEvent
VerifyVersionInfoW
VerSetConditionMask
VirtualFree
VirtualAlloc
GetWindowsDirectoryW
Sleep
GetProcessHeap
HeapFree
HeapAlloc
SearchPathW
ExpandEnvironmentStringsW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
LocalFree
OpenProcess
LeaveCriticalSection
EnterCriticalSection
GetCommandLineW
WideCharToMultiByte
GetExitCodeThread
MultiByteToWideChar
CreateProcessW
GetUserDefaultUILanguage
MulDiv
FileTimeToSystemTime
GetCurrentDirectoryW
FindResourceW
lstrlenW
SizeofResource
LockResource
LoadResource
WaitForSingleObject
GetLastError
GetTempPathW
QueryDosDeviceW
GetTempFileNameW
GetLongPathNameW
GetLogicalDriveStringsW
GetFileTime
GetFileSize
GetFileAttributesExW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
LoadLibraryW
lstrcatW
lstrcpyW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
VirtualProtect
GetNativeSystemInfo
GetSystemTime
GetVersion
GetCurrentThreadId
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
SetUnhandledExceptionFilter
CloseHandle
CreateFileW
GetStringTypeW

user32

EndDeferWindowPos
GetDlgCtrlID
GetCapture
GetMenu
SetMenu
EnumWindows
GetDesktopWindow
IsWindowVisible
InflateRect
WinHelpW
IsDialogMessageW
LoadIconW
GetLastActivePopup
GetClassNameW
MessageBeep
GetWindowTextW
SetWindowTextW
EndPaint
BeginPaint
DrawIcon
EnableMenuItem
GetSystemMenu
KillTimer
SetTimer
GetAsyncKeyState
GetDialogBaseUnits
CheckDlgButton
GetDlgItem
CreateDialogIndirectParamW
SetWindowPos
DestroyWindow
PostQuitMessage
WaitMessage
PeekMessageW
DispatchMessageW
TranslateMessage
SystemParametersInfoW
GetWindow
SetWindowLongW
GetWindowLongW
IsRectEmpty
GetWindowRect
RedrawWindow
DeferWindowPos
BeginDeferWindowPos
SendMessageTimeoutW
MessageBoxA
CreatePopupMenu
AppendMenuW
SetClassLongW
SetMenuDefaultItem
EqualRect
GetClassInfoW
DrawTextExW
GrayStringW
TabbedTextOutW
InsertMenuW
GetForegroundWindow
EmptyClipboard
SetClipboardData
CloseClipboard
MoveWindow
AttachThreadInput
ClientToScreen
UnregisterClassW
TrackPopupMenu
GetMenuDefaultItem
GetMenuItemCount
DeleteMenu
CharLowerW
GetUpdateRect
ShowScrollBar
WindowFromPoint
SendDlgItemMessageA
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
CharUpperW
LoadMenuW
UnhookWindowsHookEx
GetWindowDC
CheckMenuItem
SetMenuItemBitmaps
UpdateWindow
SetActiveWindow
GetActiveWindow
RegisterWindowMessageW
SendMessageW
PostMessageW
IsWindow
GetFocus
GetKeyState
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
GetMessageTime
CallWindowProcW
RegisterClassW
EnableWindow
DrawTextW
InvalidateRect
GetClientRect
SetCursor
GetCursorPos
ScreenToClient
GetSysColor
SetRect
OffsetRect
PtInRect
GetParent
LoadCursorW
DestroyIcon
LoadImageW
DrawIconEx
GetIconInfo
GetDC
ReleaseDC
GetSystemMetrics
DrawFocusRect
CopyRect
CopyIcon
SetRectEmpty
GetMessageW
ExitWindowsEx
DefWindowProcW
ValidateRect
SetScrollRange
GetScrollRange
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
AdjustWindowRectEx
GetClassLongW
GetTopWindow
SetWindowsHookExW
CallNextHookEx
SetScrollInfo
GetScrollInfo
MonitorFromWindow
GetMonitorInfoW
SetDlgItemTextW
IsIconic
IsWindowEnabled
IntersectRect
GetKeyNameTextW
MapVirtualKeyW
ShowOwnedPopups
EndDialog
GetNextDlgTabItem
MapDialogRect
CharNextW
DestroyMenu
GetMenuItemInfoW
SetWindowContextHelpId
GetSysColorBrush
RealChildWindowFromPoint
PostThreadMessageW
RegisterClipboardFormatW
RegisterClassExW
CreateWindowExW
ShowWindow
SetLayeredWindowAttributes
WaitForInputIdle
SetFocus
GetClassInfoExW
IsChild
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
ReleaseCapture
SetForegroundWindow
MessageBoxW
FindWindowW
FindWindowExW
GetWindowThreadProcessId
EnumDisplaySettingsW
LoadStringW
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateMDISysAccel
DefFrameProcW
DrawMenuBar
GetTabbedTextExtentA
GetDoubleClickTime
DrawEdge
SetWindowLongA
GetWindowLongA
IsWindowUnicode
SetCursorPos
LookupIconIdFromDirectoryEx
GetCursor
IsClipboardFormatAvailable
IsZoomed
MapVirtualKeyExW
GetKeyboardState
SetCapture
OpenClipboard
IsCharLowerW
GetKeyboardLayout
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
SetWindowPlacement
GetWindowPlacement
MapWindowPoints
GetMessagePos
DrawFrameControl
CharLowerBuffW
CharLowerBuffA
FillRect
DrawStateW
GetDCEx
LockWindowUpdate
InvertRect
wsprintfW
SetParent
UnionRect
CreateIconFromResourceEx
CreateIconIndirect
IsMenu
GetWindowRgn
HideCaret
ShowCaret
SetWindowRgn
ToUnicodeEx
GetKeyboardLayoutList

gdi32

SetStretchBltMode
SetTextAlign
MoveToEx
PolyBezierTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextColor
GetTextMetricsW
EnumFontFamiliesExW
SetMapMode
SetBkMode
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetClipRgn
GetClipBox
ExcludeClipRect
CreatePatternBrush
CreateBitmap
GetPixel
CreateRoundRectRgn
CreateRectRgn
CombineRgn
GetBitmapBits
CreateDIBSection
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetBkColor
Escape
BitBlt
RoundRect
Rectangle
GetStockObject
CreatePen
SetTextColor
SetBkColor
GetTextExtentPoint32W
DeleteDC
CreateDCW
SetPixel
Polygon
GetCurrentObject
StretchBlt
GetDIBits
PtInRegion
ExtCreateRegion
CreateFontW
Polyline
GetViewportOrgEx
StretchDIBits
Ellipse
GetCharWidthW
GetTextAlign
GetTextExtentPoint32A
BeginPath
CloseFigure
EndPath
FillPath
StrokeAndFillPath
StrokePath
CreatePolygonRgn
GetWindowOrgEx
SetPixelV
FillRgn
FrameRgn
RealizePalette
SetDIBitsToDevice
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectW
GetDeviceCaps
GetObjectW
SelectObject
DeleteObject
GetRgnBox
GetCurrentPositionEx
CreateSolidBrush

msimg32

GradientFill
AlphaBlend

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

CloseServiceHandle
RegOpenKeyExW
RegQueryValueExW
OpenProcessToken
AdjustTokenPrivileges
GetTokenInformation
IsValidSid
LookupPrivilegeValueW
ConvertSidToStringSidW
RegQueryValueW
RegEnumKeyW
StartServiceW
QueryServiceStatus
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
EnumServicesStatusExW
ControlService
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyW
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW

shell32

SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHAppBarMessage
Shell_NotifyIconW
DragFinish
SHFileOperationW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
CommandLineToArgvW
ShellExecuteExW
SHChangeNotify
DragQueryFileW
DragAcceptFiles
ExtractIconExW
SHGetFileInfoW
ShellExecuteW

comctl32

ImageList_AddMasked
InitCommonControlsEx
ImageList_Draw
_TrackMouseEvent
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageCount
ImageList_Add
ImageList_DrawEx
ImageList_GetImageInfo
ImageList_GetIconSize

shlwapi

StrFormatByteSizeW
PathRemoveFileSpecW
PathMatchSpecW
PathIsRelativeW
PathIsDirectoryW
PathFindExtensionW
PathFileExistsW
PathStripPathW
PathAddBackslashW
SHStrDupW
SHDeleteKeyW
PathRemoveArgsW
PathGetArgsW
PathParseIconLocationW
ord487
PathCompactPathW
PathIsUNCW
PathStripToRootW
UrlUnescapeW
PathFindFileNameW
PathUnquoteSpacesW

uxtheme

OpenThemeData
CloseThemeData
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeBackground
IsAppThemed

ole32

StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
CoInitialize
CoCreateGuid
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
CoTaskMemAlloc
CoInitializeEx
CoUninitialize
CoInitializeSecurity
PropVariantClear
CoCreateInstance
CoTaskMemFree
OleInitialize
OleUninitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter

oleaut32

VarBstrFromDate
VarDateFromStr
SafeArrayGetElemsize
SafeArrayGetDim
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLi
OleCreateFontIndirect
VariantChangeType
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayDestroy
VariantInit
VariantCopy
VariantClear
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString
VariantChangeTypeEx
VarUdateFromDate
OleLoadPicturePath

oledlg

OleUIBusyW
OleUIAddVerbMenuW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

psapi

GetModuleFileNameExW

oleacc

CreateStdAccessibleObject
LresultFromObject

wininet

InternetGetLastResponseInfoW
InternetSetOptionExW
InternetQueryOptionW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetOpenUrlW
InternetCloseHandle
InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetSetStatusCallbackW

winmm

PlaySoundW

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5ji51feh
Size: 612KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

23mdim24
Size: 292KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

s2o474ch
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Crack/x86/license.dat
Setup.exe
.exe windows x86

20dd26497880c05caed9305b3c8b9109

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

23:e8:29:0d:71:95:04:18:c0:08:59:7e:42:f7:48:1b
Certificate

Issuer

CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

Not Before

22/10/2008, 12:07

Not After

30/12/2025, 23:59

Subject

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

fa:33:b7:9d:d4:96:cf:d1:0c:84:65:39:a4:9d:63:b5
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

20/09/2011, 11:04

Not After

20/09/2026, 23:59

Subject

CN=Certum Code Signing CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:9b:09:80:3e:11:c7:be:68:58:61:f7:2f:12:88:19
Certificate

Issuer

CN=Certum Code Signing CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

14/01/2014, 07:14

Not After

13/01/2017, 07:14

Subject

CN=crystalidea.com,O=crystalidea.com,C=US,1.2.840.113549.1.9.1=#0c17737570706f7274406372797374616c696465612e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

93:92:85:40:01:65:71:5f:94:7f:28:8f:ef:c9:9b:28
Certificate

Issuer

CN=Certum CA,O=Unizeto Sp. z o.o.,C=PL

Not Before

22/10/2008, 12:07

Not After

10/06/2027, 10:46

Subject

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29/10/2015, 11:30

Not After

09/06/2027, 11:30

Subject

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

30:d9:b1:b2:b5:a2:16:80:59:5c:5d:b2:3b:56:23:01
Certificate

Issuer

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

18/01/2016, 23:13

Not After

13/01/2017, 07:14

Subject

CN=crystalidea.com,O=crystalidea.com,C=US,1.2.840.113549.1.9.1=#0c17737570706f7274406372797374616c696465612e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 1,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f1:c1:f9:da:67:45:82:c3:fa:a9:f0:f2:b4:a8:6e:22:e7:73:e4:64:19:73:48:51:75:f2:13:16:ee:33:64:75
Signer

Actual PE Digest

f1:c1:f9:da:67:45:82:c3:fa:a9:f0:f2:b4:a8:6e:22:e7:73:e4:64:19:73:48:51:75:f2:13:16:ee:33:64:75

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=crystalidea.com,O=crystalidea.com,C=US,1.2.840.113549.1.9.1=#0c17737570706f7274406372797374616c696465612e636f6d

16/09/2016, 07:31
Valid: true

Chain 1

CN=crystalidea.com,O=crystalidea.com,C=US,1.2.840.113549.1.9.1=#0c17737570706f7274406372797374616c696465612e636f6d

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

78:b0:da:6a:a6:d6:55:87:2d:92:f1:8d:49:89:02:46:37:f7:c3:5d
Signer

Actual PE Digest

78:b0:da:6a:a6:d6:55:87:2d:92:f1:8d:49:89:02:46:37:f7:c3:5d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=crystalidea.com,O=crystalidea.com,C=US,1.2.840.113549.1.9.1=#0c17737570706f7274406372797374616c696465612e636f6d

16/09/2016, 07:31
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
SizeofResource
SignalObjectAndWait
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryW
GetWindowsDirectoryW
GetVersionExW
GetVersion
GetUserDefaultLangID
GetThreadLocale
GetSystemInfo
GetSystemDirectoryW
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetCurrentProcess
GetCommandLineW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
DeleteFileW
CreateProcessW
CreateFileW
CreateEventW
CreateDirectoryW
CloseHandle
Sleep

comctl32

InitCommonControls

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c66351da6dd8ab9cf496ea617045907c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

version

psapi

oleacc

wininet

winmm

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 61KB - Virtual size: 97KB

.pdata Size: 142KB - Virtual size: 141KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

a7f66a21f1c5566fb653f2f7c6b34113

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

version

psapi

oleacc

wininet

winmm

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

5ji51feh Size: 612KB - Virtual size: 616KB

.data Size: 47KB - Virtual size: 72KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

23mdim24 Size: 292KB - Virtual size: 296KB

s2o474ch Size: 8KB - Virtual size: 8KB

20dd26497880c05caed9305b3c8b9109

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

23:e8:29:0d:71:95:04:18:c0:08:59:7e:42:f7:48:1bCertificate

Key Usages

fa:33:b7:9d:d4:96:cf:d1:0c:84:65:39:a4:9d:63:b5Certificate

Extended Key Usages

Key Usages

11:9b:09:80:3e:11:c7:be:68:58:61:f7:2f:12:88:19Certificate

Extended Key Usages

Key Usages

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 61KB - Virtual size: 97KB

.pdata
Size: 142KB - Virtual size: 141KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 2.0MB - Virtual size: 2.0MB

5ji51feh
Size: 612KB - Virtual size: 616KB

.data
Size: 47KB - Virtual size: 72KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

23mdim24
Size: 292KB - Virtual size: 296KB

s2o474ch
Size: 8KB - Virtual size: 8KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

23:e8:29:0d:71:95:04:18:c0:08:59:7e:42:f7:48:1b
Certificate

fa:33:b7:9d:d4:96:cf:d1:0c:84:65:39:a4:9d:63:b5
Certificate

11:9b:09:80:3e:11:c7:be:68:58:61:f7:2f:12:88:19
Certificate

93:92:85:40:01:65:71:5f:94:7f:28:8f:ef:c9:9b:28
Certificate

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

30:d9:b1:b2:b5:a2:16:80:59:5c:5d:b2:3b:56:23:01
Certificate

5f:d6:93:fa:b0:98:e3:f4:67:7b:b8:cb:67:2c:22:9e
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

f1:c1:f9:da:67:45:82:c3:fa:a9:f0:f2:b4:a8:6e:22:e7:73:e4:64:19:73:48:51:75:f2:13:16:ee:33:64:75
Signer

16/09/2016, 07:31
Valid: true

78:b0:da:6a:a6:d6:55:87:2d:92:f1:8d:49:89:02:46:37:f7:c3:5d
Signer

16/09/2016, 07:31
Valid: false

.text
Size: 61KB - Virtual size: 60KB

.itext
Size: 4KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 21KB

.idata
Size: 4KB - Virtual size: 3KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.rsrc
Size: 107KB - Virtual size: 107KB