10159285169[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

10159285169.zip
Size

56.2MB
MD5

0e570603f50e50c20de0bbf6b1a8a870
SHA1

7728de3b530a3c6e14f2c2fd2c8e46974993cc0e
SHA256

dd5f90db26e881c318a80fbf56d8579a41aa212a88adebaf0eb676ff0f9d63bb
SHA512

d33d0982bc69676e103ada6011088fee52011ffe496863e049382297ae61246b58cac3d0f4ebe5574cd183bd86450ec4c9bfbe7f7f56bdd1ee0f8ae41c1f55f0
SSDEEP

1572864:jcCNUyCKZ5M62nYCfFuFiqu+sz1ijpsq+nYqZa6X/kvC/D:wCFrPVAuF0+KRvZa6XpL

Score

1^/10

Malware Config

Signatures

Files

10159285169.zip
.zip

Password: infected
241c453f21f8afe56f9ea40452397e389d47efcdb166739f483ce67bee7fef88
.zip
AshampooPhotoConverter2/OSSL.md
AshampooPhotoConverter2/StuffItConnect
AshampooPhotoConverter2/ash_inet2.dll
.dll windows x86

105d10126d82ba2605d2d8b4987530a6

Code Sign

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

12/01/2016, 00:00

Not After

04/04/2017, 23:59

Subject

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

12/01/2016, 00:00

Not After

04/04/2017, 23:59

Subject

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ab:7c:48:bd:ac:86:a9:55:d2:53:84:bd:a0:6f:84:38:90:24:c1:3b:63:a1:ef:ab:6f:05:df:2c:49:0c:c3:dd
Signer

Actual PE Digest

ab:7c:48:bd:ac:86:a9:55:d2:53:84:bd:a0:6f:84:38:90:24:c1:3b:63:a1:ef:ab:6f:05:df:2c:49:0c:c3:dd

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

15/01/2016, 15:07
Valid: false

a1:6f:8b:84:a2:3e:ab:84:7b:6a:f7:ae:cc:29:ec:5e:2c:3b:e1:4c
Signer

Actual PE Digest

a1:6f:8b:84:a2:3e:ab:84:7b:6a:f7:ae:cc:29:ec:5e:2c:3b:e1:4c

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

15/01/2016, 15:07
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

user32

CharNextW
LoadStringW
ShowWindow
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
FindWindowW
CharUpperBuffW
CharUpperW
CharLowerBuffW

kernel32

Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQueryEx
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
SwitchToThread
SuspendThread
Sleep
SetThreadPriority
SetFilePointer
SetEvent
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
RaiseException
IsDebuggerPresent
LocalFree
LoadLibraryW
IsValidLocale
IsBadReadPtr
HeapSize
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetVersionExW
GetTickCount
GetThreadPriority
GetThreadLocale
GetStdHandle
GetProcessHeap
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetExitCodeThread
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
GetCPInfoExW
GetCPInfo
GetACP
FreeLibrary
FormatMessageW
EnumSystemLocalesW
EnumCalendarInfoW
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep

Exports

Exports

TMethodImplementationIntercept
ainet_AnalyticsManagerAddFeature
ainet_AnalyticsManagerAddInfo
ainet_AnalyticsManagerEndFeature
ainet_AnalyticsManagerIsEnabled
ainet_AnalyticsManagerSetEnabled
ainet_AnalyticsManagerStartFeature
ainet_CanContactSupport
ainet_ChannelsEnable
ainet_ChannelsGetCount
ainet_ChannelsGetDescription
ainet_ChannelsGetEnabled
ainet_ChannelsGetHint
ainet_ChannelsGetID
ainet_ChannelsGetName
ainet_ChannelsSettingsAllowed
ainet_CrashReportSend
ainet_Destroy
ainet_FreeString
ainet_FreeWideString
ainet_GetInAppMessageButtonText
ainet_GetInAppMessageCount
ainet_GetInAppMessageHtml
ainet_GetInAppMessageName
ainet_GetInAppMessageText
ainet_GetInAppMessageType
ainet_GetLogFolder
ainet_GetMenuItemsCount
ainet_GetMenuItemsID
ainet_GetMenuItemsImage
ainet_GetMenuItemsImageByID
ainet_GetMenuItemsImagePNG
ainet_GetMenuItemsImagePNGByID
ainet_GetMenuItemsText
ainet_GetMenuItemsTextByMenuID
ainet_GetProductDisplayVersion
ainet_GetProductRevision
ainet_IOControllerDataReceived
ainet_Idle
ainet_Init
ainet_InitAnalyticsManager
ainet_InitIOControllerMaster
ainet_InitIOControllerSlave
ainet_InitRegistrationManager
ainet_LCIDToLangID
ainet_LanguageAddFile
ainet_LanguageDownload
ainet_LanguageFreeList
ainet_LanguageGetComment
ainet_LanguageGetCount
ainet_LanguageGetISO
ainet_LanguageGetName
ainet_LanguageGetNativeName
ainet_LanguageReceiveList
ainet_LanguageSupportIsEnabled
ainet_MakeLinkTargetURL
ainet_MakeLinkTargetURLFromTarget
ainet_OpenLinkTargetInBrowser
ainet_OpenWebTargetInBrowser
ainet_OpenWebTargetInBrowser2
ainet_ProblemReportAddFile
ainet_ProblemReportAddFileWithAlias
ainet_ProblemReportAddTextInMemory
ainet_ProblemReportClearFiles
ainet_ProblemReportSend
ainet_ProcessInAppMessage
ainet_ProcessMenuItem
ainet_RegistrationManagerDoStartupCheck
ainet_RegistrationManagerGetActivationDate
ainet_RegistrationManagerGetEdition
ainet_RegistrationManagerGetEditionLogo
ainet_RegistrationManagerGetExpirationDate
ainet_RegistrationManagerGetFullDaysLeft
ainet_RegistrationManagerGetKey
ainet_RegistrationManagerGetLicenseState
ainet_RegistrationManagerGetSharewareType
ainet_RegistrationManagerGetTrialDaysLeft
ainet_RegistrationManagerGetUpdateType
ainet_RegistrationManagerGetUpgradeCommandText
ainet_RegistrationManagerGetUpgradeName
ainet_RegistrationManagerGetUpgradeType
ainet_RegistrationManagerHasExpired
ainet_RegistrationManagerIsFirstStart
ainet_RegistrationManagerIsFullVersion
ainet_RegistrationManagerIsKeyValid
ainet_RegistrationManagerIsTrialPeriodExtended
ainet_RegistrationManagerIsUpgradeAvailable
ainet_RegistrationManagerMigrateKey
ainet_RegistrationManagerProcessKey
ainet_RegistrationManagerSetLicenseCheck
ainet_RegistrationManagerSetUpgradeName
ainet_RegistrationManagerStartAllChecks
ainet_RegistrationManagerUpdate
ainet_ResolveWebTargetURI
ainet_SetBaseFolder
ainet_SetContext
ainet_SetFile
ainet_SetIO
ainet_SetOnCloseApplicationCallback
ainet_SetOption
ainet_SetParam
ainet_SetProductEdition
ainet_SetProductFile
ainet_SetProductID
ainet_SetProductLang
ainet_SetProductLangLCID
ainet_SetProductName
ainet_SetProductVersion
ainet_SetProductVersionState
ainet_SetRegisterFile
ainet_SetRegisterIO
ainet_SetRegisterRegistryKey
ainet_SetRegisterValueStore
ainet_SetRegistryKey
ainet_SetSystemFile
ainet_SetSystemIO
ainet_SetSystemRegistryKey
ainet_SetSystemValueStore
ainet_SetUserFile
ainet_SetUserIO
ainet_SetUserRegistryKey
ainet_SetUserValueStore
ainet_SetValueStore
ainet_ShowBuyAndActivate
ainet_Shutdown
ainet_StartAllChecks
ainet_StartAllChecksNeeded
ainet_StartAnalyticsConfig
ainet_StartInfoChannelsConfig
ainet_StartInternal
ainet_StartManualUpdateCheck
ainet_StartManualUpdateCheckFlags
ainet_StartManualUpdatePopupCheck
ainet_StartManualUpgradeCheck
ainet_StartManualUpgradeCheckFlags
ainet_UpdateMessages
ainet_addParam
ainet_ex_AddContentWindowEventListener
ainet_ex_AddEventListener
ainet_ex_CreateContentWindow
ainet_ex_DownloadFileA
ainet_ex_DownloadFileW
ainet_ex_DownloadManagerAddDownloadA
ainet_ex_DownloadManagerAddDownloadW
ainet_ex_DownloadManagerExecute
ainet_ex_DownloadManagerExecuteAbort
ainet_ex_DownloadManagerFree
ainet_ex_DownloadManagerGetCount
ainet_ex_DownloadManagerInit
ainet_ex_FreeContentWindow
ainet_ex_GetEventType
ainet_ex_InitializeContentWindow
ainet_ex_IsEventType
ainet_ex_IsKeyValidForServerW
ainet_ex_IsKeyValidW
ainet_ex_IsModuleAllowed
ainet_ex_ProgressWindowFree
ainet_ex_ProgressWindowInitA
ainet_ex_ProgressWindowInitW
ainet_ex_ProgressWindowSetColor
ainet_ex_ProgressWindowSetTextA
ainet_ex_ProgressWindowSetTextW
ainet_ex_ReceiveNewVersionAvailableA
ainet_ex_ReceiveNewVersionAvailableW
ainet_ex_UpdateContentWindow
ainet_ex_UpdateMessageFree
ainet_ex_UpdateMessageGetDownloadURLA
ainet_ex_UpdateMessageGetDownloadURLW
ainet_ex_UpdateMessageGetInstallArgsA
ainet_ex_UpdateMessageGetInstallArgsW
ainet_ex_UpdateMessageGetSignatureA
ainet_ex_UpdateMessageGetSignatureW

Sections

.text
Size: 857KB - Virtual size: 857KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AshampooPhotoConverter2/ashconv2.exe
.exe windows x86

9a935212bad14b3a6f42ecf48f1e3501

Code Sign

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

12/01/2016, 00:00

Not After

04/04/2017, 23:59

Subject

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

12/01/2016, 00:00

Not After

04/04/2017, 23:59

Subject

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:65:7b:a6:80:7b:55:39:8c:13:38:30:d8:b0:48:79:cc:c4:fb:23:01:f9:a9:c7:79:9e:51:bc:82:ea:a5:6e
Signer

Actual PE Digest

73:65:7b:a6:80:7b:55:39:8c:13:38:30:d8:b0:48:79:cc:c4:fb:23:01:f9:a9:c7:79:9e:51:bc:82:ea:a5:6e

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

17/01/2017, 09:42
Valid: false

96:0c:ba:fd:dc:c4:fd:1b:bf:99:00:dd:3e:82:25:6c:89:71:0d:b2
Signer

Actual PE Digest

96:0c:ba:fd:dc:c4:fd:1b:bf:99:00:dd:3e:82:25:6c:89:71:0d:b2

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

17/01/2017, 09:42
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
TlsFree
TlsAlloc
CreateDirectoryW
SetFileTime
FormatMessageW
Sleep
CreateThread
GetVersionExW
GetCommandLineW
DeleteCriticalSection
InitializeCriticalSection
GlobalSize
CreateFileMappingA
GetModuleHandleA
GetSystemDirectoryA
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetModuleFileNameA
LoadLibraryA
ExpandEnvironmentStringsA
GetTempPathA
GetTempFileNameA
SetEnvironmentVariableA
GetProcessHeap
CreateFileA
WriteConsoleW
SetStdHandle
GetTimeZoneInformation
GetCurrentProcessId
QueryPerformanceCounter
LocalAlloc
FreeEnvironmentStringsW
GetStringTypeW
GetFileType
GetStdHandle
SetHandleCount
HeapSize
GetConsoleMode
GetConsoleCP
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
InterlockedDecrement
SetLastError
InterlockedIncrement
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
GetFileAttributesW
DeleteFileA
ExitProcess
GetModuleHandleW
RaiseException
HeapReAlloc
DecodePointer
EncodePointer
RtlUnwind
LocalLock
LocalFree
LocalUnlock
Beep
TlsGetValue
GetSystemDefaultLCID
GetLocaleInfoW
LeaveCriticalSection
EnterCriticalSection
CompareStringW
GetVersion
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
HeapAlloc
HeapFree
HeapDestroy
HeapCreate
SystemTimeToFileTime
CompareFileTime
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
GetLastError
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
SetFilePointer
WriteFile
ReadFile
GetFullPathNameW
GetVolumeInformationW
GlobalHandle
GlobalAlloc
GetCurrentThreadId
OutputDebugStringW
GetCurrentDirectoryW
SetCurrentDirectoryW
FindNextFileW
FreeLibrary
LoadLibraryW
GetProcAddress
lstrcpynW
FindFirstFileW
FindClose
GlobalLock
GlobalFree
lstrlenW
GlobalUnlock
GetModuleFileNameW
GetSystemTime
CreateFileW
GetFileTime
CloseHandle
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
MoveFileExW
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
GetFileSize
MulDiv
GetTempPathW
GetTempFileNameW
lstrcatW
DeleteFileW
lstrcmpiW
lstrcpyW
GetEnvironmentStringsW
GetFileAttributesA

user32

EndPaint
GetClassNameW
GetAsyncKeyState
DestroyIcon
GetClassInfoExW
RegisterClassExW
LoadIconW
DrawMenuBar
InsertMenuItemW
DeleteMenu
SendDlgItemMessageW
BeginPaint
GetDlgItemInt
SetRectEmpty
ReleaseDC
wsprintfA
GetDC
GetDesktopWindow
MessageBoxW
AttachThreadInput
CopyRect
FillRect
GetSysColor
SendMessageW
TranslateAcceleratorW
DispatchMessageW
TranslateMessage
GetMessageW
LoadAcceleratorsW
CallWindowProcW
IsChild
DefWindowProcW
CreateWindowExW
RedrawWindow
SetParent
DrawIconEx
GetMenuStringW
GetSysColorBrush
MapWindowPoints
UnhookWindowsHookEx
SetWindowsHookExW
TrackPopupMenuEx
CheckMenuItem
GetMenuState
EnableMenuItem
IsMenu
FindWindowW
IsDlgButtonChecked
CheckDlgButton
LoadMenuW
GetCapture
DrawTextExW
PeekMessageW
SetWindowLongW
GetWindowLongW
EnableWindow
GetDlgItem
CharUpperW
SetWindowPos
MonitorFromWindow
GetMonitorInfoW
MonitorFromPoint
GetCursorPos
GetWindowRect
GetSystemMetrics
GetDlgItemTextW
SetDlgItemTextW
LoadImageW
IsWindow
SetTimer
SetCursor
LoadCursorW
InvalidateRect
KillTimer
PtInRect
IsWindowEnabled
UpdateWindow
IsWindowVisible
OffsetRect
DrawTextW
DestroyWindow
EndDialog
GetParent
SetDlgItemInt
GetClientRect
DialogBoxParamW
DialogBoxIndirectParamW
CreateDialogParamW
CreateDialogIndirectParamW
GetWindowTextW
SystemParametersInfoW
PostMessageW
SetFocus
GetMenuItemInfoW
GetMenuItemCount
SetMenuItemInfoW
GetSubMenu
CallNextHookEx
ReleaseCapture
GetFocus
SetCapture
MessageBeep
GetWindowTextLengthW
SetWindowTextW
ScreenToClient
ShowWindow
MoveWindow

gdi32

GetEnhMetaFileW
SetWinMetaFileBits
GetEnhMetaFileHeader
DeleteEnhMetaFile
PlayEnhMetaFile
Polyline
SetStretchBltMode
DeleteObject
CreateCompatibleBitmap
SetTextColor
SetBkMode
GetTextExtentPoint32W
SetDIBColorTable
CreateFontIndirectW
GetDeviceCaps
GetTextColor
GetPixel
SetViewportOrgEx
SetMapMode
CreateDIBSection
CreateSolidBrush
CreatePalette
CreateCompatibleDC
ExtTextOutW
SetBkColor
LineTo
MoveToEx
CreatePen
GetStockObject
Rectangle
ExtCreatePen
RoundRect
GetDIBits
GdiFlush
StretchDIBits
SelectObject
BitBlt
StretchBlt
RestoreDC
SetWorldTransform
SetGraphicsMode
SaveDC
GetTextMetricsW
DeleteDC
GetObjectW
SetDIBits

comdlg32

GetOpenFileNameW

advapi32

RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExA

shell32

SHGetFolderPathW
ShellExecuteExW
SHFileOperationW
SHBrowseForFolderW
SHGetMalloc
SHGetPathFromIDListW
SHGetFileInfoW

ole32

CoCreateGuid
CoInitialize
OleUninitialize
OleInitialize
CoUninitialize

oleaut32

SysFreeString

vcomp100

_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_fork

shlwapi

ord354
SHAutoComplete
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathAddBackslashW
PathRemoveFileSpecW
PathRenameExtensionW
PathFileExistsW
PathIsDirectoryW

comctl32

ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_Add
ImageList_Destroy
ImageList_GetIconSize
ImageList_Draw
ImageList_Create
ImageList_AddMasked
ord17
_TrackMouseEvent
ImageList_Replace

msimg32

TransparentBlt
AlphaBlend
GradientFill

rpcrt4

UuidToStringW
RpcStringFreeW

ash_inet2

ainet_FreeWideString
ainet_StartAllChecks
ainet_InitRegistrationManager
ainet_SetSystemRegistryKey
ainet_SetRegisterRegistryKey
ainet_SetUserRegistryKey
ainet_Destroy
ainet_Init
ainet_GetProductDisplayVersion
ainet_SetOption
ainet_GetMenuItemsCount
ainet_GetMenuItemsID
ainet_GetMenuItemsText
ainet_GetMenuItemsImage
ainet_Shutdown
ainet_ProcessMenuItem
ainet_SetProductLang
ainet_SetBaseFolder
ainet_SetProductID
ainet_SetProductVersion
ainet_SetProductName
ainet_SetRegistryKey

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

pdflib

PDF_load_image
PDF_set_info
PDF_delete
PDF_begin_page_ext
PDF_set_parameter
pdf_jbuf
PDF_new
PDF_fit_image
PDF_close_image
PDF_end_page_ext
PDF_end_document
PDF_begin_document
pdf_catch

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 355KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 336KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AshampooPhotoConverter2/info.xml
AshampooPhotoConverter2/license-DE.txt
AshampooPhotoConverter2/license-EN.txt
AshampooPhotoConverter2/pdflib.dll
.dll windows x86

6bb6b0c4fe6d6d8f3266f623aca11e41

Code Sign

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

12/01/2016, 00:00

Not After

04/04/2017, 23:59

Subject

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 3,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

12/01/2016, 00:00

Not After

04/04/2017, 23:59

Subject

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

11/06/2015, 00:00

Not After

29/12/2020, 23:59

Subject

CN=GeoTrust 2048-bit Timestamping Signer 4,O=GeoTrust Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

01/01/1997, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

06:6d:cb:22:a2:46:05:69:62:db:ce:9f:9f:48:1c:ea:47:64:9e:9e:e7:91:c2:fb:9c:5c:a7:2e:5c:71:bf:00
Signer

Actual PE Digest

06:6d:cb:22:a2:46:05:69:62:db:ce:9f:9f:48:1c:ea:47:64:9e:9e:e7:91:c2:fb:9c:5c:a7:2e:5c:71:bf:00

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

17/01/2017, 09:42
Valid: false

43:34:1c:b1:f7:de:23:2e:73:1b:cc:ec:4d:bb:b2:9f:63:15:f0:0d
Signer

Actual PE Digest

43:34:1c:b1:f7:de:23:2e:73:1b:cc:ec:4d:bb:b2:9f:63:15:f0:0d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Lower Saxony,C=DE

17/01/2017, 09:42
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

ReleaseDC
GetDC

gdi32

CreateFontIndirectW
SelectObject
GetTextFaceW
GetCharWidthA
GetKerningPairsA
SetMapMode
GetTextMetricsA
DeleteObject
EnumFontFamiliesExW
GetFontData

kernel32

SetEndOfFile
FreeLibrary
GetProcAddress
LoadLibraryA
lstrlenW
lstrcpyW
lstrcmpW
GetLastError
MultiByteToWideChar
GetACP
GetCPInfo
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
HeapReAlloc
DeleteFileA
GetModuleHandleA
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
SetFilePointer
GetCurrentProcessId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
Sleep
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
VirtualAlloc
WriteFile
HeapSize
SetStdHandle
CloseHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSection
RaiseException
GetTimeZoneInformation
ReadFile
GetOEMCP
IsValidCodePage
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
CreateFileW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Exports

Exports

PDF_activate_item
PDF_add_bookmark
PDF_add_bookmark2
PDF_add_launchlink
PDF_add_locallink
PDF_add_nameddest
PDF_add_note
PDF_add_note2
PDF_add_pdflink
PDF_add_table_cell
PDF_add_textflow
PDF_add_thumbnail
PDF_add_weblink
PDF_arc
PDF_arcn
PDF_attach_file
PDF_attach_file2
PDF_begin_document
PDF_begin_document_callback
PDF_begin_font
PDF_begin_glyph
PDF_begin_item
PDF_begin_layer
PDF_begin_mc
PDF_begin_page
PDF_begin_page_ext
PDF_begin_pattern
PDF_begin_template
PDF_begin_template_ext
PDF_boot
PDF_check_context
PDF_circle
PDF_clip
PDF_close
PDF_close_image
PDF_close_pdi
PDF_close_pdi_document
PDF_close_pdi_page
PDF_closepath
PDF_closepath_fill_stroke
PDF_closepath_stroke
PDF_concat
PDF_continue_text
PDF_continue_text2
PDF_create_3dview
PDF_create_action
PDF_create_annotation
PDF_create_bookmark
PDF_create_field
PDF_create_fieldgroup
PDF_create_gstate
PDF_create_pvf
PDF_create_textflow
PDF_curveto
PDF_define_layer
PDF_delete
PDF_delete_pvf
PDF_delete_table
PDF_delete_textflow
PDF_encoding_set_char
PDF_end_document
PDF_end_font
PDF_end_glyph
PDF_end_item
PDF_end_layer
PDF_end_mc
PDF_end_page
PDF_end_page_ext
PDF_end_pattern
PDF_end_template
PDF_endpath
PDF_fill
PDF_fill_imageblock
PDF_fill_pdfblock
PDF_fill_stroke
PDF_fill_textblock
PDF_findfont
PDF_fit_image
PDF_fit_pdi_page
PDF_fit_table
PDF_fit_textflow
PDF_fit_textline
PDF_get_api
PDF_get_apiname
PDF_get_buffer
PDF_get_errmsg
PDF_get_errnum
PDF_get_kern_amount
PDF_get_majorversion
PDF_get_minorversion
PDF_get_opaque
PDF_get_parameter
PDF_get_pdi_parameter
PDF_get_pdi_value
PDF_get_value
PDF_info_font
PDF_info_matchbox
PDF_info_table
PDF_info_textflow
PDF_info_textline
PDF_initgraphics
PDF_lineto
PDF_load_3ddata
PDF_load_font
PDF_load_iccprofile
PDF_load_image
PDF_makespotcolor
PDF_mc_point
PDF_moveto
PDF_new
PDF_new2
PDF_open_CCITT
PDF_open_file
PDF_open_image
PDF_open_image_file
PDF_open_mem
PDF_open_pdi
PDF_open_pdi_callback
PDF_open_pdi_document
PDF_open_pdi_page
PDF_pcos_get_number
PDF_pcos_get_stream
PDF_pcos_get_string
PDF_place_image
PDF_place_pdi_page
PDF_process_pdi
PDF_rcurveto
PDF_rect
PDF_restore
PDF_resume_page
PDF_rlineto
PDF_rmoveto
PDF_rotate
PDF_save
PDF_scale
PDF_set_border_color
PDF_set_border_dash
PDF_set_border_style
PDF_set_gstate
PDF_set_info
PDF_set_info2
PDF_set_layer_dependency
PDF_set_parameter
PDF_set_text_pos
PDF_set_value
PDF_setcolor
PDF_setdash
PDF_setdashpattern
PDF_setflat
PDF_setfont
PDF_setgray
PDF_setgray_fill
PDF_setgray_stroke
PDF_setlinecap
PDF_setlinejoin
PDF_setlinewidth
PDF_setmatrix
PDF_setmiterlimit
PDF_setpolydash
PDF_setrgbcolor
PDF_setrgbcolor_fill
PDF_setrgbcolor_stroke
PDF_shading
PDF_shading_pattern
PDF_shfill
PDF_show
PDF_show2
PDF_show_boxed
PDF_show_boxed2
PDF_show_xy
PDF_show_xy2
PDF_shutdown
PDF_skew
PDF_stringwidth
PDF_stringwidth2
PDF_stroke
PDF_suspend_page
PDF_translate
PDF_utf16_to_utf8
PDF_utf32_to_utf16
PDF_utf8_to_utf16
PDF_xshow
pdf_catch
pdf_exit_try
pdf_jbuf
pdf_rethrow
pdf_throw

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AshampooPhotoConverter2/product.xml
AshampooPhotoConverter2/readme_da_dk.htm
AshampooPhotoConverter2/readme_de_de.htm
AshampooPhotoConverter2/readme_en_us.htm
AshampooPhotoConverter2/readme_es_es.htm
AshampooPhotoConverter2/readme_fr_fr.htm
AshampooPhotoConverter2/readme_hu_hu.htm
AshampooPhotoConverter2/readme_it_it.htm
AshampooPhotoConverter2/readme_nl_nl.htm
AshampooPhotoConverter2/readme_no_no.htm
AshampooPhotoConverter2/readme_pl_pl.htm
AshampooPhotoConverter2/readme_pt_br.htm
AshampooPhotoConverter2/readme_pt_pt.htm
AshampooPhotoConverter2/readme_ru_ru.htm
AshampooPhotoConverter2/readme_sv_se.htm
AshampooPhotoConverter2/readme_tr_tr.htm
AshampooPhotoConverter2/readme_zh_cn.htm
AshampooPhotoConverter2/readme_zh_tw.htm
AshampooPhotoConverter2/vcomp100.dll
.dll windows x86

c80e49e03838330a5df1ad4a389497a9

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

37:dd:f9:8d:ee:11:2d:c0:33:91:f1:15:8e:18:e1:f0:86:57:ef:9d
Signer

Actual PE Digest

37:dd:f9:8d:ee:11:2d:c0:33:91:f1:15:8e:18:e1:f0:86:57:ef:9d

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

20/02/2011, 07:00
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
FormatMessageW
OutputDebugStringW
LocalAlloc
LocalFree
GetConsoleWindow
GetConsoleScreenBufferInfo
WriteConsoleW
WideCharToMultiByte
WriteFile
GetLastError
GetStdHandle
ExitProcess
GetCurrentThreadId
HeapFree
GetProcessHeap
TlsSetValue
UnhandledExceptionFilter
CreateEventW
CloseHandle
GetTickCount
SwitchToThread
WaitForSingleObject
SetEvent
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
HeapAlloc
TryEnterCriticalSection
QueryPerformanceCounter
TlsAlloc
TlsFree
GetSystemInfo
QueryPerformanceFrequency
GetSystemTimeAdjustment
GetEnvironmentVariableW
lstrlenW
lstrcmpiW
GetStringTypeExW
ResetEvent
CreateThread
QueueUserWorkItem
GetFileAttributesW
GetUserDefaultUILanguage
FindFirstFileW
FindNextFileW
FindClose
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
LoadResource
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
RtlUnwind

user32

MessageBoxW

Exports

Exports

_vcomp_atomic_add_i1
_vcomp_atomic_add_i2
_vcomp_atomic_add_i4
_vcomp_atomic_add_i8
_vcomp_atomic_add_r4
_vcomp_atomic_add_r8
_vcomp_atomic_and_i1
_vcomp_atomic_and_i2
_vcomp_atomic_and_i4
_vcomp_atomic_and_i8
_vcomp_atomic_div_i1
_vcomp_atomic_div_i2
_vcomp_atomic_div_i4
_vcomp_atomic_div_i8
_vcomp_atomic_div_r4
_vcomp_atomic_div_r8
_vcomp_atomic_div_ui1
_vcomp_atomic_div_ui2
_vcomp_atomic_div_ui4
_vcomp_atomic_div_ui8
_vcomp_atomic_mul_i1
_vcomp_atomic_mul_i2
_vcomp_atomic_mul_i4
_vcomp_atomic_mul_i8
_vcomp_atomic_mul_r4
_vcomp_atomic_mul_r8
_vcomp_atomic_or_i1
_vcomp_atomic_or_i2
_vcomp_atomic_or_i4
_vcomp_atomic_or_i8
_vcomp_atomic_shl_i1
_vcomp_atomic_shl_i2
_vcomp_atomic_shl_i4
_vcomp_atomic_shl_i8
_vcomp_atomic_shr_i1
_vcomp_atomic_shr_i2
_vcomp_atomic_shr_i4
_vcomp_atomic_shr_i8
_vcomp_atomic_shr_ui1
_vcomp_atomic_shr_ui2
_vcomp_atomic_shr_ui4
_vcomp_atomic_shr_ui8
_vcomp_atomic_sub_i1
_vcomp_atomic_sub_i2
_vcomp_atomic_sub_i4
_vcomp_atomic_sub_i8
_vcomp_atomic_sub_r4
_vcomp_atomic_sub_r8
_vcomp_atomic_xor_i1
_vcomp_atomic_xor_i2
_vcomp_atomic_xor_i4
_vcomp_atomic_xor_i8
_vcomp_barrier
_vcomp_copyprivate_broadcast
_vcomp_copyprivate_receive
_vcomp_enter_critsect
_vcomp_flush
_vcomp_for_dynamic_init
_vcomp_for_dynamic_init_i8
_vcomp_for_dynamic_next
_vcomp_for_dynamic_next_i8
_vcomp_for_static_end
_vcomp_for_static_init
_vcomp_for_static_init_i8
_vcomp_for_static_simple_init
_vcomp_for_static_simple_init_i8
_vcomp_fork
_vcomp_get_thread_num
_vcomp_leave_critsect
_vcomp_master_barrier
_vcomp_master_begin
_vcomp_master_end
_vcomp_ordered_begin
_vcomp_ordered_end
_vcomp_ordered_loop_end
_vcomp_reduction_i1
_vcomp_reduction_i2
_vcomp_reduction_i4
_vcomp_reduction_i8
_vcomp_reduction_r4
_vcomp_reduction_r8
_vcomp_reduction_u1
_vcomp_reduction_u2
_vcomp_reduction_u4
_vcomp_reduction_u8
_vcomp_sections_init
_vcomp_sections_next
_vcomp_set_num_threads
_vcomp_single_begin
_vcomp_single_end
omp_destroy_lock
omp_destroy_nest_lock
omp_get_dynamic
omp_get_max_threads
omp_get_nested
omp_get_num_procs
omp_get_num_threads
omp_get_thread_num
omp_get_wtick
omp_get_wtime
omp_in_parallel
omp_init_lock
omp_init_nest_lock
omp_set_dynamic
omp_set_lock
omp_set_nest_lock
omp_set_nested
omp_set_num_threads
omp_test_lock
omp_test_nest_lock
omp_unset_lock
omp_unset_nest_lock

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AshampooPhotoConverter2/vcomp110.dll
.dll windows x86

d15a7e566b2a434a86f8370e3286e09b

Code Sign

33:00:00:00:9d:1e:8d:27:ae:b8:f3:d8:38:00:01:00:00:00:9d
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/09/2012, 21:42

Not After

04/03/2013, 21:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:02:92:4a:00:00:00:00:00:20
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

09/01/2012, 22:25

Not After

09/04/2013, 22:25

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/07/2012, 00:14

Not After

07/10/2013, 00:14

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

84:2b:fa:f4:da:78:b5:f8:7e:fe:3f:ff:35:d9:0e:7d:01:79:3f:e9:f0:c6:48:6e:37:78:fd:08:0a:64:6e:28
Signer

Actual PE Digest

84:2b:fa:f4:da:78:b5:f8:7e:fe:3f:ff:35:d9:0e:7d:01:79:3f:e9:f0:c6:48:6e:37:78:fd:08:0a:64:6e:28

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

13/04/2023, 18:10
Valid: false

25:d1:df:76:0d:43:44:d8:47:04:ed:94:2c:cc:c3:54:c7:2a:90:95
Signer

Actual PE Digest

25:d1:df:76:0d:43:44:d8:47:04:ed:94:2c:cc:c3:54:c7:2a:90:95

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

06/11/2012, 08:50
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
FormatMessageW
OutputDebugStringW
LocalAlloc
LocalFree
GetConsoleWindow
GetConsoleScreenBufferInfo
WriteConsoleW
WideCharToMultiByte
WriteFile
GetLastError
GetStdHandle
ExitProcess
GetCurrentThreadId
HeapFree
GetProcessHeap
TlsSetValue
UnhandledExceptionFilter
CreateEventW
CloseHandle
GetTickCount
SwitchToThread
WaitForSingleObject
SetEvent
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
HeapAlloc
TryEnterCriticalSection
QueryPerformanceCounter
TlsAlloc
TlsFree
GetSystemInfo
QueryPerformanceFrequency
GetSystemTimeAdjustment
GetEnvironmentVariableW
lstrlenW
lstrcmpiW
GetStringTypeExW
ResetEvent
CreateThread
QueueUserWorkItem
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
GetUserDefaultUILanguage
FindFirstFileW
FindNextFileW
LoadLibraryExW
FindClose
GetModuleFileNameW
FindResourceExW
LoadResource
ReadConsoleW
ReadFile
GetCurrentProcessId
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
InterlockedIncrement
InterlockedDecrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
GetModuleHandleExW
SetStdHandle
RtlUnwind
HeapReAlloc
FlushFileBuffers
CreateFileW
LCMapStringW
HeapSize
LoadLibraryW

user32

MessageBoxW

Exports

Exports

C2VectParallel
_vcomp_atomic_add_i1
_vcomp_atomic_add_i2
_vcomp_atomic_add_i4
_vcomp_atomic_add_i8
_vcomp_atomic_add_r4
_vcomp_atomic_add_r8
_vcomp_atomic_and_i1
_vcomp_atomic_and_i2
_vcomp_atomic_and_i4
_vcomp_atomic_and_i8
_vcomp_atomic_div_i1
_vcomp_atomic_div_i2
_vcomp_atomic_div_i4
_vcomp_atomic_div_i8
_vcomp_atomic_div_r4
_vcomp_atomic_div_r8
_vcomp_atomic_div_ui1
_vcomp_atomic_div_ui2
_vcomp_atomic_div_ui4
_vcomp_atomic_div_ui8
_vcomp_atomic_mul_i1
_vcomp_atomic_mul_i2
_vcomp_atomic_mul_i4
_vcomp_atomic_mul_i8
_vcomp_atomic_mul_r4
_vcomp_atomic_mul_r8
_vcomp_atomic_or_i1
_vcomp_atomic_or_i2
_vcomp_atomic_or_i4
_vcomp_atomic_or_i8
_vcomp_atomic_shl_i1
_vcomp_atomic_shl_i2
_vcomp_atomic_shl_i4
_vcomp_atomic_shl_i8
_vcomp_atomic_shr_i1
_vcomp_atomic_shr_i2
_vcomp_atomic_shr_i4
_vcomp_atomic_shr_i8
_vcomp_atomic_shr_ui1
_vcomp_atomic_shr_ui2
_vcomp_atomic_shr_ui4
_vcomp_atomic_shr_ui8
_vcomp_atomic_sub_i1
_vcomp_atomic_sub_i2
_vcomp_atomic_sub_i4
_vcomp_atomic_sub_i8
_vcomp_atomic_sub_r4
_vcomp_atomic_sub_r8
_vcomp_atomic_xor_i1
_vcomp_atomic_xor_i2
_vcomp_atomic_xor_i4
_vcomp_atomic_xor_i8
_vcomp_barrier
_vcomp_copyprivate_broadcast
_vcomp_copyprivate_receive
_vcomp_enter_critsect
_vcomp_flush
_vcomp_for_dynamic_init
_vcomp_for_dynamic_init_i8
_vcomp_for_dynamic_next
_vcomp_for_dynamic_next_i8
_vcomp_for_static_end
_vcomp_for_static_init
_vcomp_for_static_init_i8
_vcomp_for_static_simple_init
_vcomp_for_static_simple_init_i8
_vcomp_fork
_vcomp_get_thread_num
_vcomp_leave_critsect
_vcomp_master_barrier
_vcomp_master_begin
_vcomp_master_end
_vcomp_ordered_begin
_vcomp_ordered_end
_vcomp_ordered_loop_end
_vcomp_reduction_i1
_vcomp_reduction_i2
_vcomp_reduction_i4
_vcomp_reduction_i8
_vcomp_reduction_r4
_vcomp_reduction_r8
_vcomp_reduction_u1
_vcomp_reduction_u2
_vcomp_reduction_u4
_vcomp_reduction_u8
_vcomp_sections_init
_vcomp_sections_next
_vcomp_set_num_threads
_vcomp_single_begin
_vcomp_single_end
omp_destroy_lock
omp_destroy_nest_lock
omp_get_dynamic
omp_get_max_threads
omp_get_nested
omp_get_num_procs
omp_get_num_threads
omp_get_thread_num
omp_get_wtick
omp_get_wtime
omp_in_parallel
omp_init_lock
omp_init_nest_lock
omp_set_dynamic
omp_set_lock
omp_set_nest_lock
omp_set_nested
omp_set_num_threads
omp_test_lock
omp_test_nest_lock
omp_unset_lock
omp_unset_nest_lock

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AshampooPhotoConverter2/version.info

Sharing

General

Malware Config

Signatures

Files

Password: infected

105d10126d82ba2605d2d8b4987530a6

Code Sign

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18Certificate

Extended Key Usages

Key Usages

Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18Certificate

Extended Key Usages

Key Usages

Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

ab:7c:48:bd:ac:86:a9:55:d2:53:84:bd:a0:6f:84:38:90:24:c1:3b:63:a1:ef:ab:6f:05:df:2c:49:0c:c3:ddSigner

Signature Validations

Verification

15/01/2016, 15:07 Valid: false

a1:6f:8b:84:a2:3e:ab:84:7b:6a:f7:ae:cc:29:ec:5e:2c:3b:e1:4cSigner

Signature Validations

Verification

15/01/2016, 15:07 Valid: false

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

Exports

Exports

Sections

.text Size: 857KB - Virtual size: 857KB

.itext Size: 3KB - Virtual size: 2KB

.data Size: 19KB - Virtual size: 18KB

.bss Size: - Virtual size: 21KB

.idata Size: 4KB - Virtual size: 3KB

.didata Size: 512B - Virtual size: 490B

.edata Size: 6KB - Virtual size: 6KB

.rdata Size: 512B - Virtual size: 69B

.reloc Size: 81KB - Virtual size: 80KB

.rsrc Size: 12KB - Virtual size: 12KB

9a935212bad14b3a6f42ecf48f1e3501

Code Sign

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18Certificate

Extended Key Usages

Key Usages

Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09Certificate

Extended Key Usages

Key Usages

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

ab:7c:48:bd:ac:86:a9:55:d2:53:84:bd:a0:6f:84:38:90:24:c1:3b:63:a1:ef:ab:6f:05:df:2c:49:0c:c3:dd
Signer

15/01/2016, 15:07
Valid: false

a1:6f:8b:84:a2:3e:ab:84:7b:6a:f7:ae:cc:29:ec:5e:2c:3b:e1:4c
Signer

15/01/2016, 15:07
Valid: false

.text
Size: 857KB - Virtual size: 857KB

.itext
Size: 3KB - Virtual size: 2KB

.data
Size: 19KB - Virtual size: 18KB

.bss
Size: - Virtual size: 21KB

.idata
Size: 4KB - Virtual size: 3KB

.didata
Size: 512B - Virtual size: 490B

.edata
Size: 6KB - Virtual size: 6KB

.rdata
Size: 512B - Virtual size: 69B

.reloc
Size: 81KB - Virtual size: 80KB

.rsrc
Size: 12KB - Virtual size: 12KB

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

73:65:7b:a6:80:7b:55:39:8c:13:38:30:d8:b0:48:79:cc:c4:fb:23:01:f9:a9:c7:79:9e:51:bc:82:ea:a5:6e
Signer

17/01/2017, 09:42
Valid: false

96:0c:ba:fd:dc:c4:fd:1b:bf:99:00:dd:3e:82:25:6c:89:71:0d:b2
Signer

17/01/2017, 09:42
Valid: false

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 355KB - Virtual size: 354KB

.data
Size: 130KB - Virtual size: 177KB

.rsrc
Size: 336KB - Virtual size: 336KB

.reloc
Size: 77KB - Virtual size: 77KB

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

55:45:ca:02:24:61:90:d9:79:ee:b4:0d:b9:ff:bc:18
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0a:74:61:39:8b:59:b5:5c:fa:d7:bf:20:0c:2b:e4:09
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

70:a0:1c:f4:ea:ef:99:fd:46:6c:ed:16:30:c1:b0:1f
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate