ultradefrag-portable-7[.]1[.]4[.]bin[.]amd64[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

ultradefrag-portable-7.1.4.bin.amd64.zip
Size

3.0MB
MD5

641b96f8c16f7598a54ffacdb96d6419
SHA1

d9c6dbf13b38d6b62ec5071b4e6361d944b1fbbd
SHA256

2feef512b58a65ae777a281968741028fa071624ec337c85ef08e5a2ff16f3b4
SHA512

b5f6a893cdf58cc56822bbe6eb121df0caafed8265ffe1e48a63a54b77e029632382617548f9e5f80323149243b242435ca3e947a46f7f0cc6a98e4e94068ecf
SSDEEP

98304:QZrn94kfQI/nhtALFb+nrsjiQeBCDRyQGx:QYkfz/htALgIWFyRg

Score

1^/10

Malware Config

Signatures

Files

ultradefrag-portable-7.1.4.bin.amd64.zip
.zip
ultradefrag-portable-7.1.4.amd64/HISTORY.TXT
ultradefrag-portable-7.1.4.amd64/LICENSE.TXT
ultradefrag-portable-7.1.4.amd64/README.TXT
ultradefrag-portable-7.1.4.amd64/conf/options.lua
ultradefrag-portable-7.1.4.amd64/handbook/Blank.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/Boot.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/Compressed.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/Console.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/Credits.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/Credits.js
.js
ultradefrag-portable-7.1.4.amd64/handbook/Development.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/Directory.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/FAQ.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/FDL.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/Fragmented.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/FreeSpace.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/GPL.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/GUI.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/Installation.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/Introduction.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/LGPL_3_0.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/MFTzone.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/NotFragmented.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/Reports.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/Schedule.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/System.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/Tips.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/Translation.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/Troubleshooting.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/UnusedBlock.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/bc_s.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/bdwn.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/closed.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/custom_doxygen.css
ultradefrag-portable-7.1.4.amd64/handbook/defrag.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/doxygen.css
ultradefrag-portable-7.1.4.amd64/handbook/dynsections.js
.js
ultradefrag-portable-7.1.4.amd64/handbook/fixed.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2blank.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2cl.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2doc.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2folderclosed.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2folderopen.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2lastnode.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2link.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2mlastnode.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2mnode.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2mo.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2node.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2ns.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2plastnode.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2pnode.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2splitbar.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/ftv2vertline.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/full.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/gear.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/glass.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/help.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/index.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/jquery.js
.js
ultradefrag-portable-7.1.4.amd64/handbook/languages.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/light.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/mft.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/nav_f.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/nav_g.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/nav_h.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/navtree.css
ultradefrag-portable-7.1.4.amd64/handbook/navtree.js
.js
ultradefrag-portable-7.1.4.amd64/handbook/navtreeindex0.js
.js
ultradefrag-portable-7.1.4.amd64/handbook/open.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/pages.html
.js
ultradefrag-portable-7.1.4.amd64/handbook/pause.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/quick.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/removable.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/report.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/resize.js
.js
ultradefrag-portable-7.1.4.amd64/handbook/script.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/sflogo.gif
.gif
ultradefrag-portable-7.1.4.amd64/handbook/star.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/stop.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/sync_off.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/sync_on.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/tab_a.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/tab_b.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/tab_h.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/tab_s.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/tabs.css
ultradefrag-portable-7.1.4.amd64/handbook/terminal.png
.png
ultradefrag-portable-7.1.4.amd64/handbook/udefrag.ico
ultradefrag-portable-7.1.4.amd64/handbook/udefrag80x15-colored-light.gif
.gif
ultradefrag-portable-7.1.4.amd64/hibernate4win.exe
.exe windows x64

4bb41013e171a8f51094a2469036e7dd

Code Sign

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:55

Not After

19-01-2027 11:55

Subject

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1d
Certificate

Issuer

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11-09-2019 10:59

Not After

10-09-2020 10:59

Subject

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

08-03-2016 13:10

Not After

30-05-2027 13:10

Subject

CN=Certum EV TSA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

bc:f1:f0:c1:fb:59:c4:8f:16:69:bf:ca:16:ab:1e:8a:94:08:fe:90:aa:ff:4c:3e:1f:4a:8d:42:43:66:3e:22
Signer

Actual PE Digest

bc:f1:f0:c1:fb:59:c4:8f:16:69:bf:ca:16:ab:1e:8a:94:08:fe:90:aa:ff:4c:3e:1f:4a:8d:42:43:66:3e:22

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

01-03-2020 10:22
Valid: true

Chain 1

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

powrprof

SetSuspendState

zenwinx

winx_dbg_print
winx_enable_privilege
winx_init_library

kernel32

SetLastError
CreateFileW
SetStdHandle
WriteConsoleW
CloseHandle
HeapSize
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
RtlUnwindEx
DecodePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
TerminateProcess
GetCurrentProcess
Sleep
GetLastError
HeapFree
GetProcAddress
GetModuleHandleW
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsSetValue
FlsFree
GetCurrentThreadId
FlsAlloc
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
LoadLibraryW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ultradefrag-portable-7.1.4.amd64/locale/ar/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/be/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/bg/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/bn/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/bs/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/ca/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/cs/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/da/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/de/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/el/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/en_GB/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/en_US/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/es/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/es_AR/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/es_MX/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/et/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/fa/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/fi/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/fr/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/gl/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/he/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/hi/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/hr/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/hu/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/hy/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/id/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/ilo/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/is/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/it/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/ja/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/jv/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/ka/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/ko/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/la/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/lt/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/lv/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/mk/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/ms/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/my/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/nl/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/no/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/pam/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/pl/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/pt/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/pt_BR/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/ro/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/ru/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/sk/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/sl/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/sq/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/sr/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/sv/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/ta/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/th/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/tl/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/tr/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/uk/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/uz@Latn/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/vi/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/war/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/yi/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/zh_CN/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/locale/zh_TW/UltraDefrag.mo
ultradefrag-portable-7.1.4.amd64/lua5.1a.dll
.dll windows x64

f475e3a4be7920f1feb56c671ca9c103

Code Sign

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:55

Not After

19-01-2027 11:55

Subject

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1d
Certificate

Issuer

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11-09-2019 10:59

Not After

10-09-2020 10:59

Subject

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

08-03-2016 13:10

Not After

30-05-2027 13:10

Subject

CN=Certum EV TSA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ee:97:fd:4f:05:88:e3:84:d0:7d:91:74:8d:e1:06:3c:1b:ba:7a:c7:cf:1a:ef:5b:a6:df:d4:1f:43:7f:d5:26
Signer

Actual PE Digest

ee:97:fd:4f:05:88:e3:84:d0:7d:91:74:8d:e1:06:3c:1b:ba:7a:c7:cf:1a:ef:5b:a6:df:d4:1f:43:7f:d5:26

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

01-03-2020 10:22
Valid: true

Chain 1

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

LoadLibraryA
FormatMessageA
GetLastError
GetProcAddress
FreeLibrary
GetModuleFileNameA
SetEnvironmentVariableW
MultiByteToWideChar
GetEnvironmentVariableW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
HeapFree
GetModuleHandleW
ExitProcess
DecodePointer
RtlUnwindEx
CloseHandle
CreateProcessA
DuplicateHandle
GetCurrentProcess
HeapAlloc
DeleteFileA
MoveFileA
GetSystemTimeAsFileTime
GetDateFormatA
GetTimeFormatA
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
Sleep
ReadFile
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
GetLocaleInfoW
WriteFile
GetModuleFileNameW
GetFileAttributesA
CreatePipe
GetExitCodeProcess
WaitForSingleObject
GetCurrentProcessId
CreateFileA
GetConsoleCP
GetConsoleMode
SetFilePointer
FlushFileBuffers
RaiseException
GetTimeZoneInformation
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
LCMapStringW
CompareStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
SetStdHandle
HeapSize
SetEndOfFile
GetProcessHeap
WriteConsoleW
SetEnvironmentVariableA
CreateFileW

Exports

Exports

luaD_growstack
luaF_newproto
luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinit
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_error
luaL_findtable
luaL_getmetafield
luaL_gsub
luaL_loadbuffer
luaL_loadfile
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlib
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffer
luaL_pushresult
luaL_ref
luaL_register
luaL_typerror
luaL_unref
luaL_where
luaM_realloc_
luaM_toobig
luaS_newlstr
luaU_dump
lua_atpanic
lua_call
lua_checkstack
lua_close
lua_concat
lua_cpcall
lua_createtable
lua_dump
lua_equal
lua_error
lua_gc
lua_getallocf
lua_getfenv
lua_getfield
lua_gethook
lua_gethookcount
lua_gethookmask
lua_getinfo
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_insert
lua_iscfunction
lua_isnumber
lua_isstring
lua_isuserdata
lua_lessthan
lua_load
lua_newstate
lua_newthread
lua_newuserdata
lua_next
lua_objlen
lua_pcall
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawset
lua_rawseti
lua_remove
lua_replace
lua_resume
lua_setallocf
lua_setfenv
lua_setfield
lua_sethook
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_status
lua_toboolean
lua_tocfunction
lua_tointeger
lua_tolstring
lua_tonumber
lua_topointer
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_xmove
lua_yield
luaopen_base
luaopen_debug
luaopen_io
luaopen_math
luaopen_os
luaopen_package
luaopen_string
luaopen_table

Sections

.text
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ultradefrag-portable-7.1.4.amd64/lua5.1a.exe
.exe windows x64

1a648ded38bc138bcb6a4ddd566831d2

Code Sign

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:55

Not After

19-01-2027 11:55

Subject

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1d
Certificate

Issuer

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11-09-2019 10:59

Not After

10-09-2020 10:59

Subject

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

08-03-2016 13:10

Not After

30-05-2027 13:10

Subject

CN=Certum EV TSA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ca:38:c9:61:61:2e:ed:79:20:47:3d:9d:12:4d:cd:4a:2e:53:b3:55:b9:5d:29:61:63:e7:a1:d5:b4:5b:42:0f
Signer

Actual PE Digest

ca:38:c9:61:61:2e:ed:79:20:47:3d:9d:12:4d:cd:4a:2e:53:b3:55:b9:5d:29:61:63:e7:a1:d5:b4:5b:42:0f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

01-03-2020 10:22
Valid: true

Chain 1

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

lua5.1a

luaL_checkstack
lua_createtable
lua_rawseti
lua_setfield
lua_pushstring
lua_objlen
luaL_loadbuffer
lua_pushlstring
lua_concat
lua_pushfstring
lua_getfield
lua_pushvalue
lua_pushinteger
lua_call
luaL_error
lua_sethook
lua_gettop
lua_pushcclosure
lua_insert
lua_pcall
lua_remove
luaL_loadfile
lua_touserdata
lua_gc
luaL_openlibs
lua_type
lua_tolstring
lua_settop
luaL_newstate
lua_cpcall
lua_close

kernel32

RtlVirtualUnwind
HeapSize
LCMapStringW
GetStringTypeW
CloseHandle
CreateFileW
SetEnvironmentVariableA
CompareStringW
ReadFile
LoadLibraryW
HeapReAlloc
HeapAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetStdHandle
SetFilePointer
MultiByteToWideChar
WriteConsoleW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
EnterCriticalSection
LeaveCriticalSection
DecodePointer
EncodePointer
GetLastError
SetConsoleCtrlHandler
GetCommandLineA
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
Sleep
HeapFree
GetProcAddress
GetModuleHandleW
ExitProcess
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
GetVersion

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ultradefrag-portable-7.1.4.amd64/lua5.1a_gui.exe
.exe windows x64

6c750c4259367ee6d17807f594c07fae

Code Sign

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:55

Not After

19-01-2027 11:55

Subject

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1d
Certificate

Issuer

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11-09-2019 10:59

Not After

10-09-2020 10:59

Subject

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

08-03-2016 13:10

Not After

30-05-2027 13:10

Subject

CN=Certum EV TSA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e0:bd:9d:af:f8:cb:5f:fe:33:15:33:29:d4:9c:84:76:36:68:3e:97:77:5d:b7:aa:71:f2:59:51:df:5e:3a:84
Signer

Actual PE Digest

e0:bd:9d:af:f8:cb:5f:fe:33:15:33:29:d4:9c:84:76:36:68:3e:97:77:5d:b7:aa:71:f2:59:51:df:5e:3a:84

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

01-03-2020 10:22
Valid: true

Chain 1

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

MessageBoxA

comctl32

ord17

lua5.1a

luaL_checkstack
lua_pushstring
lua_createtable
lua_rawseti
lua_getfield
lua_pushvalue
lua_pushinteger
lua_call
luaL_error
lua_sethook
lua_gettop
lua_pushcclosure
luaL_loadbuffer
lua_remove
lua_setfield
luaL_loadfile
lua_insert
lua_touserdata
lua_gc
luaL_openlibs
lua_type
lua_tolstring
lua_settop
luaL_newstate
lua_cpcall
lua_close
lua_pcall

kernel32

InitializeCriticalSectionAndSpinCount
GetStringTypeW
LCMapStringW
HeapSize
SetEnvironmentVariableA
MultiByteToWideChar
CompareStringW
HeapReAlloc
HeapAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapFree
LoadLibraryW
Sleep
GetCurrentProcess
TerminateProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
EnterCriticalSection
GetCommandLineA
DecodePointer
EncodePointer
GetLastError
SetConsoleCtrlHandler
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
RtlUnwindEx
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
GetVersion
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 930B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ultradefrag-portable-7.1.4.amd64/po/UltraDefrag.pot
ultradefrag-portable-7.1.4.amd64/po/ar.po
ultradefrag-portable-7.1.4.amd64/po/be.po
ultradefrag-portable-7.1.4.amd64/po/bg.po
ultradefrag-portable-7.1.4.amd64/po/bn.po
ultradefrag-portable-7.1.4.amd64/po/bs.po
ultradefrag-portable-7.1.4.amd64/po/ca.po
ultradefrag-portable-7.1.4.amd64/po/cs.po
ultradefrag-portable-7.1.4.amd64/po/da.po
ultradefrag-portable-7.1.4.amd64/po/de.po
ultradefrag-portable-7.1.4.amd64/po/el.po
ultradefrag-portable-7.1.4.amd64/po/en_GB.po
ultradefrag-portable-7.1.4.amd64/po/en_US.po
ultradefrag-portable-7.1.4.amd64/po/es.po
ultradefrag-portable-7.1.4.amd64/po/es_AR.po
ultradefrag-portable-7.1.4.amd64/po/es_MX.po
ultradefrag-portable-7.1.4.amd64/po/et.po
ultradefrag-portable-7.1.4.amd64/po/fa.po
ultradefrag-portable-7.1.4.amd64/po/fi.po
ultradefrag-portable-7.1.4.amd64/po/fr.po
ultradefrag-portable-7.1.4.amd64/po/gl.po
ultradefrag-portable-7.1.4.amd64/po/he.po
ultradefrag-portable-7.1.4.amd64/po/hi.po
ultradefrag-portable-7.1.4.amd64/po/hr.po
ultradefrag-portable-7.1.4.amd64/po/hu.po
ultradefrag-portable-7.1.4.amd64/po/hy.po
ultradefrag-portable-7.1.4.amd64/po/id.po
ultradefrag-portable-7.1.4.amd64/po/ilo.po
ultradefrag-portable-7.1.4.amd64/po/is.po
ultradefrag-portable-7.1.4.amd64/po/it.po
ultradefrag-portable-7.1.4.amd64/po/ja.po
ultradefrag-portable-7.1.4.amd64/po/jv.po
ultradefrag-portable-7.1.4.amd64/po/ka.po
ultradefrag-portable-7.1.4.amd64/po/ko.po
ultradefrag-portable-7.1.4.amd64/po/la.po
ultradefrag-portable-7.1.4.amd64/po/lt.po
ultradefrag-portable-7.1.4.amd64/po/lv.po
ultradefrag-portable-7.1.4.amd64/po/mk.po
ultradefrag-portable-7.1.4.amd64/po/ms.po
ultradefrag-portable-7.1.4.amd64/po/my.po
ultradefrag-portable-7.1.4.amd64/po/nl.po
ultradefrag-portable-7.1.4.amd64/po/no.po
ultradefrag-portable-7.1.4.amd64/po/pam.po
ultradefrag-portable-7.1.4.amd64/po/pl.po
ultradefrag-portable-7.1.4.amd64/po/pt.po
ultradefrag-portable-7.1.4.amd64/po/pt_BR.po
ultradefrag-portable-7.1.4.amd64/po/ro.po
ultradefrag-portable-7.1.4.amd64/po/ru.po
ultradefrag-portable-7.1.4.amd64/po/sk.po
ultradefrag-portable-7.1.4.amd64/po/sl.po
ultradefrag-portable-7.1.4.amd64/po/sq.po
ultradefrag-portable-7.1.4.amd64/po/sr.po
ultradefrag-portable-7.1.4.amd64/po/sv.po
ultradefrag-portable-7.1.4.amd64/po/ta.po
ultradefrag-portable-7.1.4.amd64/po/th.po
ultradefrag-portable-7.1.4.amd64/po/tl.po
ultradefrag-portable-7.1.4.amd64/po/tr.po
ultradefrag-portable-7.1.4.amd64/po/uk.po
ultradefrag-portable-7.1.4.amd64/po/[email protected]
ultradefrag-portable-7.1.4.amd64/po/vi.po
ultradefrag-portable-7.1.4.amd64/po/war.po
ultradefrag-portable-7.1.4.amd64/po/yi.po
ultradefrag-portable-7.1.4.amd64/po/zh_CN.po
ultradefrag-portable-7.1.4.amd64/po/zh_TW.po
ultradefrag-portable-7.1.4.amd64/scripts/udreport.css
ultradefrag-portable-7.1.4.amd64/scripts/udreportcnv.lua
.sh linux
ultradefrag-portable-7.1.4.amd64/scripts/udsorting.js
.js
ultradefrag-portable-7.1.4.amd64/scripts/upgrade-options.lua
.sh linux
ultradefrag-portable-7.1.4.amd64/udefrag.dll
.dll windows x64

28721dca874cc785ba5b2ea4f5b33b6d

Code Sign

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:55

Not After

19-01-2027 11:55

Subject

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1d
Certificate

Issuer

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11-09-2019 10:59

Not After

10-09-2020 10:59

Subject

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

08-03-2016 13:10

Not After

30-05-2027 13:10

Subject

CN=Certum EV TSA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

50:0b:88:dc:fd:fb:97:70:b7:48:86:29:b5:37:08:c9:cb:c2:b2:f4:ad:8f:e8:5b:14:2a:19:71:a8:b4:ce:d0
Signer

Actual PE Digest

50:0b:88:dc:fd:fb:97:70:b7:48:86:29:b5:37:08:c9:cb:c2:b2:f4:ad:8f:e8:5b:14:2a:19:71:a8:b4:ce:d0

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

01-03-2020 10:22
Valid: true

Chain 1

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntdll

wcslen
strcmp
_strupr
strncpy
memset
wcsrchr
_snwprintf
memcpy
NtWaitForSingleObject
NtFsControlFile
pow
wcschr
_wcsupr
_wtoi
wcsstr
wcscmp
_wcslwr
_wtol
_snprintf
strcpy
strlen
wcscpy
wcsncpy
strchr

zenwinx

winx_patcmp
winx_dbg_print
winx_defrag_fclose
winx_defrag_fopen
prb_probe
prb_delete
winx_xtime
winx_get_volume_information
winx_bytes_to_hr
winx_get_free_volume_regions
winx_sub_volume_region
winx_scan_disk
winx_ftw
winx_dbg_print_header
winx_wcsistr
prb_create
winx_wcsicmp
winx_get_local_time
winx_get_os_version
winx_time2str
winx_heap_free
winx_sprintf
winx_list_insert
winx_list_destroy
prb_t_next
prb_t_first
prb_t_init
winx_list_remove
winx_heap_alloc
winx_release_free_volume_regions
winx_wcsmatch
winx_add_volume_region
winx_ftw_dump_file
prb_destroy
prb_t_cur
prb_t_find
winx_str2time
winx_hr_to_bytes
winx_patcomp
winx_getenv
winx_patfree
winx_fclose
winx_fwrite
winx_to_utf8
winx_fopen
winx_fbopen
winx_tolower
winx_create_directory
winx_swprintf
winx_path_remove_filename
winx_get_module_filename
winx_path_remove_extension
winx_delete_file
winx_flush_dbg_log
prb_t_insert
winx_init_library
winx_unload_library
winx_ftw_release
winx_sleep
winx_create_thread
winx_enable_privilege
winx_toupper
winx_exit_thread
winx_vflush
winx_vopen
winx_path_extract_filename
winx_wcsdup
winx_set_dbg_log
winx_create_path
winx_set_system_error_mode
winx_get_drive_type

Exports

Exports

udefrag_get_error_description
udefrag_get_results
udefrag_get_vollist
udefrag_get_volume_information
udefrag_init_library
udefrag_release_results
udefrag_release_vollist
udefrag_set_log_file_path
udefrag_start_job
udefrag_unload_library
udefrag_validate_volume

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ultradefrag-portable-7.1.4.amd64/udefrag.exe
.exe windows x64

477f077bd0e652c5b935dbbaf56654d8

Code Sign

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:55

Not After

19-01-2027 11:55

Subject

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1d
Certificate

Issuer

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11-09-2019 10:59

Not After

10-09-2020 10:59

Subject

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

08-03-2016 13:10

Not After

30-05-2027 13:10

Subject

CN=Certum EV TSA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

93:14:84:1d:6d:f2:90:ce:a5:39:09:e9:af:6b:91:02:c8:de:81:b5:47:ed:33:9e:7f:c1:bf:96:c2:cd:ab:6f
Signer

Actual PE Digest

93:14:84:1d:6d:f2:90:ce:a5:39:09:e9:af:6b:91:02:c8:de:81:b5:47:ed:33:9e:7f:c1:bf:96:c2:cd:ab:6f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

01-03-2020 10:22
Valid: true

Chain 1

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

SetConsoleCtrlHandler
Sleep
GetLastError
SetConsoleWindowInfo
GetCommandLineW
CreateMutexW
SetConsoleOutputCP
GetConsoleMode
GetFileType
GetConsoleOutputCP
DeleteFileW
GetStdHandle
GetCurrentThread
SetThreadPriority
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
SetConsoleTextAttribute
TerminateProcess
RaiseException
CreateProcessW
CreateFileMappingW
MapViewOfFile
CloseHandle
CreateEventW
UnmapViewOfFile
GetCurrentProcess
DuplicateHandle
WriteConsoleW
AddVectoredExceptionHandler
CompareStringW
CreateProcessA
EnumSystemLocalesA
GetLocaleInfoA
GetCurrentDirectoryW
GetStringTypeW
LCMapStringW
GetOEMCP
HeapSize
GetProcessHeap
SetEndOfFile
SetEnvironmentVariableW
SetEnvironmentVariableA
GetTickCount
QueryPerformanceCounter
GetComputerNameW
GetEnvironmentVariableW
GetProfileStringW
GetDiskFreeSpaceExW
WaitForSingleObject
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GlobalMemoryStatusEx
GetCurrentProcessId
IsDebuggerPresent
SizeofResource
LockResource
LoadResource
FindResourceW
GetVersionExW
VerifyVersionInfoW
VerSetConditionMask
GetCPInfo
IsValidCodePage
GetModuleFileNameW
GetFileAttributesW
GetTempFileNameW
CreateFileW
GetTempPathW
MultiByteToWideChar
GetShortPathNameW
FindClose
FindFirstFileW
GetLongPathNameW
SetFileTime
GetFileTime
GetFileSize
GetModuleHandleW
LocalFree
FormatMessageW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
ReleaseMutex
CreateSemaphoreW
ReleaseSemaphore
TlsSetValue
TerminateThread
GetExitCodeThread
SuspendThread
ResumeThread
TlsGetValue
GetSystemInfo
GetCurrentThreadId
SetProcessAffinityMask
GetProcessAffinityMask
TlsFree
TlsAlloc
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryW
WaitForMultipleObjects
SetEvent
PeekNamedPipe
ReadFile
SetNamedPipeHandleState
WriteFile
CreateThread
SetHandleInformation
CreatePipe
GetExitCodeProcess
EnumResourceNamesW
CopyFileW
SetCurrentDirectoryW
GetWindowsDirectoryW
FindNextFileW
SetErrorMode
OutputDebugStringW
SetLastError
GetLocaleInfoW
SetThreadLocale
GetUserDefaultLCID
GetACP
IsValidLocale
GetThreadLocale
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
DecodePointer
EncodePointer
RtlLookupFunctionEntry
RtlUnwindEx
ReadConsoleInputA
SetConsoleMode
ExitProcess
HeapFree
GetCommandLineA
SetStdHandle
InitializeCriticalSectionAndSpinCount
SetFileAttributesW
HeapAlloc
HeapReAlloc
ExitThread
GetDriveTypeW
GetFullPathNameA
GetFullPathNameW
MoveFileW
RemoveDirectoryW
CreateDirectoryW
GetConsoleCP
FlushFileBuffers
SetFilePointer
GetDateFormatW
GetTimeFormatW
GetTimeZoneInformation
RtlPcToFileHeader
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
SetHandleCount
GetStartupInfoW
GetFileAttributesA
HeapSetInformation
GetVersion
HeapCreate
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW

advapi32

GetUserNameW
LookupPrivilegeValueW
OpenProcessToken
RegQueryInfoKeyW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegEnumValueW
RegEnumKeyW
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
AdjustTokenPrivileges

urlmon

URLDownloadToCacheFileW

zenwinx

winx_set_killer
winx_bytes_to_hr
winx_flush_dbg_log
winx_dbg_print

udefrag

udefrag_release_results
udefrag_get_results
udefrag_set_log_file_path
udefrag_init_library
udefrag_get_vollist
udefrag_start_job
udefrag_get_error_description
udefrag_release_vollist
udefrag_validate_volume

lua5.1a

lua_gc
luaL_openlibs
lua_close
lua_settop
lua_tolstring
lua_type
lua_pcall
luaL_loadfile
lua_setfield
lua_pushnumber
luaL_newstate

user32

DdeFreeDataHandle
DdePostAdvise
DdeCreateDataHandle
DdeGetData
DispatchMessageW
MsgWaitForMultipleObjects
KillTimer
SetTimer
DdeGetLastError
DdeFreeStringHandle
DdeQueryStringW
GetWindowThreadProcessId
PostMessageW
EnumWindows
BringWindowToTop
ExitWindowsEx
RegisterClassW
CreateWindowExW
MessageBoxW
PostThreadMessageW
UnregisterClassW
DefWindowProcW
DestroyWindow
PeekMessageW
WaitForInputIdle
SendMessageW
DdeInitializeW
DdeUninitialize
DdeNameService
DdeConnect
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleW

shell32

SHGetFolderPathW
SHFileOperationW

ole32

CoCreateInstance
OleUninitialize
OleInitialize
CoTaskMemFree

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 1017KB - Virtual size: 1016KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ultradefrag-portable-7.1.4.amd64/ultradefrag.exe
.exe windows x64

754f1ab51703dad927c92cd9664bdaeb

Code Sign

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:55

Not After

19-01-2027 11:55

Subject

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1d
Certificate

Issuer

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11-09-2019 10:59

Not After

10-09-2020 10:59

Subject

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

08-03-2016 13:10

Not After

30-05-2027 13:10

Subject

CN=Certum EV TSA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

22:75:a2:e2:87:cd:a0:37:b3:f4:e8:da:8e:1a:c8:80:51:01:82:a1:90:ee:4d:bb:11:c9:17:91:c3:d8:13:c7
Signer

Actual PE Digest

22:75:a2:e2:87:cd:a0:37:b3:f4:e8:da:8e:1a:c8:80:51:01:82:a1:90:ee:4d:bb:11:c9:17:91:c3:d8:13:c7

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

01-03-2020 10:22
Valid: true

Chain 1

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

FindClose
FindFirstFileW
GetLongPathNameW
SetFileTime
GetFileTime
GetFileSize
GetLocaleInfoW
SetThreadLocale
GetUserDefaultLCID
GetACP
IsValidLocale
GetThreadLocale
WaitForMultipleObjects
PeekNamedPipe
ReadFile
SetNamedPipeHandleState
WriteFile
ResumeThread
CreateThread
SetHandleInformation
CreatePipe
GetExitCodeProcess
LocalFree
FormatMessageW
SetErrorMode
InitializeCriticalSection
GetShortPathNameW
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
ReleaseMutex
CreateSemaphoreW
ReleaseSemaphore
TlsSetValue
SetThreadPriority
TerminateThread
GetExitCodeThread
SuspendThread
TlsGetValue
GetSystemInfo
GetCurrentThreadId
SetProcessAffinityMask
GetProcessAffinityMask
TlsFree
TlsAlloc
CopyFileW
SetCurrentDirectoryW
GetWindowsDirectoryW
GetFileType
FindNextFileW
FreeLibrary
GetProcAddress
LoadLibraryW
OutputDebugStringW
ExpandEnvironmentStringsW
GetSystemTimeAsFileTime
MulDiv
ReadConsoleOutputCharacterA
GetConsoleScreenBufferInfo
AttachConsole
GetStdHandle
WriteConsoleA
WriteConsoleW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
FreeConsole
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalSize
GlobalFree
HeapSize
GetProcessHeap
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
DecodePointer
EncodePointer
HeapFree
SetConsoleCtrlHandler
ExitProcess
GetCommandLineA
GetStartupInfoW
HeapReAlloc
HeapAlloc
SetStdHandle
InitializeCriticalSectionAndSpinCount
SetFileAttributesW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
ExitThread
GetDriveTypeW
GetFullPathNameA
GetFullPathNameW
MoveFileW
RemoveDirectoryW
CreateDirectoryW
GetDateFormatW
GetTimeFormatW
GetTimeZoneInformation
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
HeapSetInformation
GetVersion
HeapCreate
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetOEMCP
LCMapStringW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetStringTypeW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEndOfFile
GetCurrentDirectoryW
GetLocaleInfoA
EnumSystemLocalesA
CompareStringW
GetTempPathW
CreateFileW
GetTempFileNameW
GetFileAttributesW
GetModuleFileNameW
IsValidCodePage
GetCPInfo
VerSetConditionMask
VerifyVersionInfoW
GetVersionExW
IsDebuggerPresent
GlobalMemoryStatusEx
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetDiskFreeSpaceExW
GetProfileStringW
GetEnvironmentVariableW
GetComputerNameW
EnumResourceNamesW
GetLastError
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceFrequency
GetLogicalDriveStringsW
DeleteFileA
FindResourceW
GetCurrentProcessId
OpenProcess
SetPriorityClass
LoadResource
LockResource
SizeofResource
DeleteFileW
SetEvent
CreateMutexW
GetCommandLineW
GetModuleHandleW
Sleep
CreateFileA
TerminateProcess
RaiseException
CreateProcessW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetCurrentProcess
DuplicateHandle
AddVectoredExceptionHandler
FindFirstChangeNotificationW
FindNextChangeNotification
FindCloseChangeNotification
CreateEventW
SetLastError
WaitForSingleObject
DeleteCriticalSection
CloseHandle

user32

CreateIconIndirect
GetIconInfo
DrawFocusRect
DrawTextW
GetDlgItem
CreateDialogParamW
OffsetRect
DrawFrameControl
DrawIconEx
CreateDialogIndirectParamW
IsIconic
IsZoomed
GetWindowPlacement
GetDesktopWindow
DrawMenuBar
EnableMenuItem
GetSystemMenu
FlashWindowEx
SetLayeredWindowAttributes
SetWindowRgn
DestroyIcon
LoadImageW
LoadBitmapW
FindWindowExW
SetMenu
GetDoubleClickTime
LoadCursorW
GetProcessDefaultLayout
DestroyCursor
LoadCursorFromFileW
SetMenuItemInfoW
CreatePopupMenu
DestroyMenu
InsertMenuW
SetMenuInfo
InsertMenuItemW
RemoveMenu
ModifyMenuW
GetMenuState
AppendMenuW
CreateMenu
GetSubMenu
CheckMenuItem
CheckMenuRadioItem
SetRect
DrawStateW
DrawEdge
GetSysColorBrush
GetMenuItemID
CopyRect
SetRectEmpty
MessageBeep
GetWindowTextW
GetWindowTextLengthW
GetClassNameW
DestroyAcceleratorTable
CreateAcceleratorTableW
TranslateAcceleratorW
LoadAcceleratorsW
ValidateRect
GetMessageW
GetWindowDC
UnionRect
GetMonitorInfoW
EnumDisplaySettingsW
ChangeDisplaySettingsExW
EnumDisplayMonitors
MonitorFromPoint
MonitorFromWindow
keybd_event
HideCaret
ShowCaret
GetComboBoxInfo
ChildWindowFromPoint
IsRectEmpty
GetWindowLongPtrW
GetClipboardFormatNameW
RegisterClipboardFormatW
ShowCursor
AdjustWindowRectEx
UnregisterHotKey
CloseClipboard
EmptyClipboard
IsClipboardFormatAvailable
SetClipboardData
GetClipboardData
EnumClipboardFormats
GetDialogBaseUnits
ClientToScreen
ScreenToClient
MapWindowPoints
UpdateWindow
RedrawWindow
SetParent
WindowFromPoint
GetParent
GetWindowLongW
IsWindow
ScrollWindow
EnableScrollBar
SetScrollInfo
GetScrollInfo
SetCursorPos
PtInRect
SetCursor
ReleaseCapture
SetCapture
SetWindowPos
AnimateWindow
EnableWindow
SetFocus
GetFocus
SetWindowLongW
GetCursorPos
GetMessagePos
DispatchMessageW
MsgWaitForMultipleObjects
KillTimer
SetTimer
DdeGetLastError
DdeFreeStringHandle
DdeQueryStringW
DdeCreateStringHandleW
DdeCreateDataHandle
DdePostAdvise
DdeGetData
DdeFreeDataHandle
DdeClientTransaction
DdeDisconnect
DdeConnect
DdeNameService
DdeUninitialize
DdeInitializeW
PostThreadMessageW
WaitForInputIdle
PeekMessageW
DestroyWindow
DefWindowProcW
UnregisterClassW
CreateWindowExW
RegisterClassW
BringWindowToTop
EnumWindows
PostMessageW
GetWindowThreadProcessId
RegisterHotKey
ChildWindowFromPointEx
SetWindowsHookExW
EndDialog
SetClassLongPtrW
RegisterWindowMessageW
ValidateRgn
SetWindowLongPtrW
UnhookWindowsHookEx
CallNextHookEx
GetActiveWindow
GetAsyncKeyState
VkKeyScanW
MapVirtualKeyW
GetMenuItemCount
GetMenuItemInfoW
GetKeyState
SystemParametersInfoW
GetMessageTime
EndDeferWindowPos
GetWindow
BeginDeferWindowPos
GetUpdateRgn
GetSysColor
InvalidateRect
ReleaseDC
GetDC
DialogBoxParamW
MessageBoxW
LoadIconW
FillRect
EndPaint
BeginPaint
ExitWindowsEx
SendMessageW
SetForegroundWindow
ShowWindow
GetSystemMetrics
SetWindowTextW
InflateRect
IsWindowEnabled
IsWindowVisible
IsDialogMessageW
CallWindowProcW
PostQuitMessage
TranslateMessage
TrackPopupMenu
GetClientRect
GetWindowRect
DeferWindowPos
OpenClipboard
MoveWindow
GetCapture

gdi32

GetDeviceCaps
CreateSolidBrush
SetBkMode
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
DeleteDC
BitBlt
GetObjectType
GetStockObject
PolyBezier
Ellipse
RoundRect
Rectangle
Polyline
PolyPolygon
SetPolyFillMode
Polygon
SetPixel
Pie
Arc
GetPixel
ExtFloodFill
SetMapMode
GetBkColor
SelectClipRgn
ExtSelectClipRgn
GetClipBox
SetTextColor
CreateBitmapIndirect
SetBkColor
GetObjectW
CreateBitmap
GetOutlineTextMetricsW
CreateFontIndirectW
GetTextMetricsW
SetBrushOrgEx
CreateRectRgn
SelectPalette
RealizePalette
GdiFlush
GetSystemPaletteEntries
EnumFontFamiliesExW
CreateICW
CreateDIBitmap
GetDIBColorTable
GetDIBits
CreateDIBSection
ExtCreatePen
CreatePatternBrush
CreateHatchBrush
CreateRectRgnIndirect
RectInRegion
PtInRegion
EqualRgn
GetRgnBox
CombineRgn
CreatePolygonRgn
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
GetTextExtentExPointW
GetCharABCWidthsW
MaskBlt
SetStretchBltMode
ExtTextOutW
SetROP2
SetWindowOrgEx
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
SetWorldTransform
SetGraphicsMode
GetWorldTransform
ModifyWorldTransform
StretchDIBits
StretchBlt
GetLayout
SetLayout
OffsetRgn
ExtCreateRegion
GetRegionData
GetTextExtentPoint32W
CreatePen
LineTo
MoveToEx
ExcludeClipRect

shell32

ShellExecuteExW
Shell_NotifyIconW
SHGetFileInfoW
SHFileOperationW
SHGetFolderPathW
DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW
ExtractIconExW
ExtractIconW

advapi32

GetUserNameW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegEnumValueW
RegEnumKeyW
OpenProcessToken
LookupPrivilegeValueW
RegCloseKey
RegNotifyChangeKeyValue
RegOpenKeyExW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
AdjustTokenPrivileges
RegQueryInfoKeyW

ole32

CoCreateInstance
CoUninitialize
OleGetClipboard
OleInitialize
OleUninitialize
CoTaskMemFree
CoTaskMemAlloc
PropVariantClear
ReleaseStgMedium
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoInitialize

powrprof

SetSuspendState

urlmon

URLDownloadToCacheFileW
URLDownloadToFileW

zenwinx

winx_bytes_to_hr
winx_enable_privilege
winx_tolower
winx_set_killer
winx_flush_dbg_log
winx_toupper
winx_bootex_unregister
winx_bootex_register
winx_bootex_check
winx_dbg_print
winx_vswprintf
winx_wcsdup
winx_get_os_version
winx_heap_free

udefrag

udefrag_get_vollist
udefrag_release_vollist
udefrag_init_library
udefrag_set_log_file_path
udefrag_start_job
udefrag_validate_volume
udefrag_get_volume_information
udefrag_get_error_description

lua5.1a

luaL_newstate
lua_gc
lua_settop
lua_tolstring
lua_type
luaL_openlibs
luaL_loadfile
lua_pcall
lua_close

msimg32

GradientFill
AlphaBlend

comctl32

ImageList_DragMove
ImageList_EndDrag
ImageList_DragLeave
ImageList_BeginDrag
ImageList_SetDragCursorImage
ImageList_Copy
ord16
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_SetBkColor
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_Add
ImageList_Destroy
ImageList_Create
ord17
ImageList_GetImageCount
ImageList_Draw
ImageList_DragEnter
ImageList_GetIconSize

comdlg32

CommDlgExtendedError
ChooseFontW
GetOpenFileNameW
GetSaveFileNameW

oleaut32

SafeArrayUnlock
SafeArrayLock
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayCreate
VariantTimeToSystemTime
VariantInit
SafeArrayGetVartype
SysAllocString
SysStringLen
SysReAllocString
SysFreeString
VarBstrFromCy
SystemTimeToVariantTime
SafeArrayDestroy

shlwapi

SHAutoComplete

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ultradefrag-portable-7.1.4.amd64/zenwinx.dll
.dll windows x64

ffd2098b7fe3c63e2359a84dedcb24ca

Code Sign

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:55

Not After

19-01-2027 11:55

Subject

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1d
Certificate

Issuer

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11-09-2019 10:59

Not After

10-09-2020 10:59

Subject

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

08-03-2016 13:10

Not After

30-05-2027 13:10

Subject

CN=Certum EV TSA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ee:b7:01:f0:e6:c9:f1:af:1d:eb:ff:ba:d4:d5:6b:72:aa:16:0d:9e:3d:2d:9b:ca:97:94:9c:fd:10:25:b6:2b
Signer

Actual PE Digest

ee:b7:01:f0:e6:c9:f1:af:1d:eb:ff:ba:d4:d5:6b:72:aa:16:0d:9e:3d:2d:9b:ca:97:94:9c:fd:10:25:b6:2b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

01-03-2020 10:22
Valid: true

Chain 1

SERIALNUMBER=2017-000781100,CN=Green Gate Systems\, LLC,O=Green Gate Systems\, LLC,POSTALCODE=95103,STREET=105 N 1ST ST #429,L=San Jose,ST=CA,C=US,1.3.6.1.4.1.311.60.2.1.3=#13025553,1.3.6.1.4.1.311.60.2.1.2=#130757796f6d696e67,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

CN=Certum Extended Validation Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntdll

strlen
wcscmp
wcsrchr
_snprintf
wcslen
RtlNtStatusToDosError
NtUnmapViewOfSection
NtClose
NtSetEvent
strcpy
strncpy
NtWaitForSingleObject
NtMapViewOfSection
NtOpenSection
NtOpenEvent
RtlInitUnicodeString
memset
RtlTimeToTimeFields
RtlSystemTimeToLocalTime
NtQuerySystemTime
RtlFindMessage
LdrGetDllHandle
memcpy
strstr
RtlQueryEnvironmentVariable_U
RtlSetEnvironmentVariable
NtCreateEvent
NtCreateFile
strcmp
NtReadFile
NtWriteFile
NtDeviceIoControlFile
NtFsControlFile
NtFlushBuffersFile
NtQueryInformationFile
NtDeleteFile
_snwprintf
NtQueryDirectoryFile
wcscpy
wcsncpy
memcmp
wcsstr
NtCancelIoFile
NtClearEvent
LdrGetProcedureAddress
RtlInitAnsiString
NtTerminateProcess
RtlAllocateHeap
RtlFreeHeap
RtlCreateHeap
RtlDestroyHeap
NtDelayExecution
RtlGetVersion
NtQuerySymbolicLinkObject
NtOpenSymbolicLinkObject
NtSetInformationProcess
NtQueryValueKey
NtOpenKey
_wcsupr
NtOpenMutant
NtCreateMutant
NtReleaseMutant
NtQueryInformationProcess
wcschr
RtlAdjustPrivilege
RtlQueryRegistryValues
RtlWriteRegistryValue
RtlFreeUnicodeString
NtDisplayString
RtlAnsiStringToUnicodeString
strchr
_vsnprintf
_vsnwprintf
pow
_atoi64
RtlCreateUserThread
ZwTerminateThread
NtQueryPerformanceCounter
NtQueryVolumeInformationFile
NtShutdownSystem

Exports

Exports

prb_copy
prb_create
prb_delete
prb_destroy
prb_find
prb_insert
prb_probe
prb_replace
prb_t_copy
prb_t_cur
prb_t_find
prb_t_first
prb_t_init
prb_t_insert
prb_t_last
prb_t_next
prb_t_prev
prb_t_replace
winx_acquire_lock
winx_add_volume_region
winx_bootex_check
winx_bootex_register
winx_bootex_unregister
winx_breakhit
winx_bytes_to_hr
winx_create_directory
winx_create_event
winx_create_lock
winx_create_mutex
winx_create_path
winx_create_thread
winx_dbg_print
winx_dbg_print_header
winx_defrag_fclose
winx_defrag_fopen
winx_delete_file
winx_destroy_event
winx_destroy_history
winx_destroy_lock
winx_destroy_mutex
winx_enable_privilege
winx_exit
winx_exit_thread
winx_fbopen
winx_fclose
winx_fflush
winx_flush_dbg_log
winx_fopen
winx_fread
winx_fsize
winx_ftw
winx_ftw_dump_file
winx_ftw_release
winx_fwrite
winx_get_drive_type
winx_get_file_contents
winx_get_free_volume_regions
winx_get_local_time
winx_get_module_filename
winx_get_os_version
winx_get_proc_address
winx_get_system_time
winx_get_volume_information
winx_get_windows_boot_options
winx_get_windows_directory
winx_getch
winx_getche
winx_getenv
winx_gets
winx_heap_alloc
winx_heap_free
winx_hr_to_bytes
winx_init_history
winx_init_library
winx_ioctl
winx_kb_init
winx_kb_read
winx_kbhit
winx_list_destroy
winx_list_insert
winx_list_remove
winx_open_event
winx_open_mutex
winx_patcmp
winx_patcomp
winx_patfind
winx_patfree
winx_path_extract_filename
winx_path_remove_extension
winx_path_remove_filename
winx_print
winx_print_strings
winx_printf
winx_prompt
winx_putch
winx_puts
winx_query_symbolic_link
winx_reboot
winx_release_file_contents
winx_release_free_volume_regions
winx_release_lock
winx_release_mutex
winx_scan_disk
winx_set_dbg_log
winx_set_killer
winx_set_system_error_mode
winx_setenv
winx_shutdown
winx_sleep
winx_sprintf
winx_str2time
winx_strdup
winx_stristr
winx_sub_volume_region
winx_swprintf
winx_time2str
winx_to_utf8
winx_tolower
winx_toupper
winx_towlower
winx_towupper
winx_unload_library
winx_vflush
winx_vopen
winx_vsprintf
winx_vswprintf
winx_wcsdup
winx_wcsicmp
winx_wcsistr
winx_wcslwr
winx_wcsmatch
winx_wcsupr
winx_windows_in_safe_mode
winx_xtime

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 278KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4bb41013e171a8f51094a2469036e7dd

Code Sign

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3Certificate

Extended Key Usages

Key Usages

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1dCertificate

Extended Key Usages

Key Usages

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70Certificate

Extended Key Usages

Key Usages

bc:f1:f0:c1:fb:59:c4:8f:16:69:bf:ca:16:ab:1e:8a:94:08:fe:90:aa:ff:4c:3e:1f:4a:8d:42:43:66:3e:22Signer

Signature Validations

Verification

01-03-2020 10:22 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

powrprof

zenwinx

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 6KB - Virtual size: 14KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 712B

f475e3a4be7920f1feb56c671ca9c103

Code Sign

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3Certificate

Extended Key Usages

Key Usages

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1dCertificate

Extended Key Usages

Key Usages

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70Certificate

Extended Key Usages

Key Usages

ee:97:fd:4f:05:88:e3:84:d0:7d:91:74:8d:e1:06:3c:1b:ba:7a:c7:cf:1a:ef:5b:a6:df:d4:1f:43:7f:d5:26Signer

Signature Validations

Verification

01-03-2020 10:22 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 284KB - Virtual size: 283KB

.rdata Size: 42KB - Virtual size: 41KB

.data Size: 18KB - Virtual size: 26KB

.pdata Size: 13KB - Virtual size: 12KB

text Size: 7KB - Virtual size: 7KB

data Size: 25KB - Virtual size: 24KB

.reloc Size: 2KB - Virtual size: 2KB

1a648ded38bc138bcb6a4ddd566831d2

Code Sign

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3Certificate

Extended Key Usages

Key Usages

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1dCertificate

Extended Key Usages

Key Usages

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70Certificate

Extended Key Usages

Key Usages

ca:38:c9:61:61:2e:ed:79:20:47:3d:9d:12:4d:cd:4a:2e:53:b3:55:b9:5d:29:61:63:e7:a1:d5:b4:5b:42:0fSigner

Signature Validations

Verification

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3
Certificate

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1d
Certificate

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70
Certificate

bc:f1:f0:c1:fb:59:c4:8f:16:69:bf:ca:16:ab:1e:8a:94:08:fe:90:aa:ff:4c:3e:1f:4a:8d:42:43:66:3e:22
Signer

01-03-2020 10:22
Valid: true

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 6KB - Virtual size: 14KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 712B

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3
Certificate

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1d
Certificate

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70
Certificate

ee:97:fd:4f:05:88:e3:84:d0:7d:91:74:8d:e1:06:3c:1b:ba:7a:c7:cf:1a:ef:5b:a6:df:d4:1f:43:7f:d5:26
Signer

01-03-2020 10:22
Valid: true

.text
Size: 284KB - Virtual size: 283KB

.rdata
Size: 42KB - Virtual size: 41KB

.data
Size: 18KB - Virtual size: 26KB

.pdata
Size: 13KB - Virtual size: 12KB

text
Size: 7KB - Virtual size: 7KB

data
Size: 25KB - Virtual size: 24KB

.reloc
Size: 2KB - Virtual size: 2KB

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3
Certificate

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1d
Certificate

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70
Certificate

ca:38:c9:61:61:2e:ed:79:20:47:3d:9d:12:4d:cd:4a:2e:53:b3:55:b9:5d:29:61:63:e7:a1:d5:b4:5b:42:0f
Signer

01-03-2020 10:22
Valid: true

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 6KB - Virtual size: 14KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 48KB - Virtual size: 48KB

.reloc
Size: 1024B - Virtual size: 884B

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3
Certificate

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1d
Certificate

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70
Certificate

e0:bd:9d:af:f8:cb:5f:fe:33:15:33:29:d4:9c:84:76:36:68:3e:97:77:5d:b7:aa:71:f2:59:51:df:5e:3a:84
Signer

01-03-2020 10:22
Valid: true

.text
Size: 29KB - Virtual size: 28KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 8KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 98KB - Virtual size: 98KB

.reloc
Size: 1024B - Virtual size: 930B

4e:96:c1:ba:06:25:8a:0c:2a:ba:27:62:5e:90:64:d3
Certificate

49:84:91:3f:5d:2d:2b:4d:a8:54:11:24:a0:1d:f1:1d
Certificate

fe:67:e4:f1:5a:24:e3:c6:0d:54:7c:a0:20:c2:76:70
Certificate

50:0b:88:dc:fd:fb:97:70:b7:48:86:29:b5:37:08:c9:cb:c2:b2:f4:ad:8f:e8:5b:14:2a:19:71:a8:b4:ce:d0
Signer

01-03-2020 10:22
Valid: true