Installer[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

Installer.zip
Size

13.7MB
MD5

a23484e904e6d9887882109b598b27b7
SHA1

59d01c4bb61ac6c2412d81d52a14f63bb0a68cb0
SHA256

d7c0356a7b084972b981077c8a6af5e38dadfcc6b3d28fffd005672bb0cab11e
SHA512

7cf7ab211d180c0a7896e0043701d0b254b4f1a8a1aaf614c211c63bb4d0c509702b585fb4ad44aa46604bdf134fa8c529abb7e0d922526ac5d9e21bc7da96b8
SSDEEP

393216:LVlfIuTkmjDmpTHcKl465hgycSxnthjXzVDw/k8FnnMneBu+:LjffDmpT7Trg2HX5DoMneQ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 10 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Installer.exe
unpack001/Lib/distutils/command/wininst-10.0-amd64.exe
unpack001/Lib/distutils/command/wininst-10.0.exe
unpack001/Lib/distutils/command/wininst-14.0-amd64.exe
unpack001/Lib/distutils/command/wininst-14.0.exe
unpack001/Lib/distutils/command/wininst-6.0.exe
unpack001/Lib/distutils/command/wininst-7.1.exe
unpack001/Lib/distutils/command/wininst-8.0.exe
unpack001/Lib/distutils/command/wininst-9.0-amd64.exe
unpack001/Lib/distutils/command/wininst-9.0.exe

Files

Installer.zip
.zip
DLLs/_asyncio.pyd
.dll windows x86

61aac7dde220e2cbb47a274a4113d998

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

23:33:1a:79:7e:58:56:b2:36:87:90:f8:9c:fb:08:e1:86:22:c7:cf:6e:8d:3e:9e:32:e6:7a:39:e7:57:40:29
Signer

Actual PE Digest

23:33:1a:79:7e:58:56:b2:36:87:90:f8:9c:fb:08:e1:86:22:c7:cf:6e:8d:3e:9e:32:e6:7a:39:e7:57:40:29

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

python36

PyErr_ExceptionMatches
_PyUnicode_FromId
PyList_GetSlice
PyModule_AddObject
PyObject_GC_Del
PyErr_Fetch
PyObject_CallFunctionObjArgs
PyObject_ClearWeakRefs
PyUnicode_FromFormat
PySet_New
PyList_New
PyModule_Create2
_PyObject_GetAttrId
PyType_Ready
PyObject_GetAttrString
_PyGen_Send
_PyDict_Pop
PyErr_Clear
PyList_Append
PyObject_RichCompareBool
PyException_SetTraceback
PyDict_SetItem
PyUnicode_Join
PyObject_CallMethod
PyObject_CallFinalizerFromDealloc
PyObject_IsInstance
PyExc_StopIteration
_PyGen_SetStopIterationValue
PyDict_GetItem
PyObject_CallObject
_PyArg_ParseStack
PyObject_GC_Track
PyExc_TypeError
PyObject_IsTrue
PyGen_Type
PyObject_CallMethodObjArgs
_Py_TrueStruct
PyExc_AssertionError
_PyObject_GC_New
_PyObject_CallMethodId
PyTraceBack_Type
_PyObject_FastCallDict
PyUnicode_FromString
PyArg_ParseTuple
_PyArg_ParseTupleAndKeywordsFast
PyErr_Restore
PyType_IsSubtype
PyCoro_Type
_Py_FalseStruct
PyErr_Format
PyObject_GetIter
PyErr_WriteUnraisable
PyIter_Next
PyErr_SetString
_PyObject_CallMethodIdObjArgs
PyExc_AttributeError
PySet_Add
_Py_NoneStruct
PyUnicode_FromFormatV
_PyDict_SetItemId
PyObject_SetAttrString
PyObject_GC_UnTrack
PyExc_RuntimeError
_PyGen_FetchStopIterationValue
PyList_SetSlice
PyObject_GenericGetAttr
PyLong_FromSsize_t
PyObject_SelfIter
PyErr_NormalizeException
PyImport_ImportModule
_PyErr_BadInternalCall
PyType_GenericNew
PyErr_GivenExceptionMatches
PyErr_SetObject
PyException_GetTraceback
PyDict_New
PyExc_Exception

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
memset

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_crt_atexit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_crt_at_quick_exit
_cexit
_initialize_narrow_environment
terminate

kernel32

GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW

Exports

Exports

PyInit__asyncio

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/_bz2.pyd
.dll windows x86

814bc17468392d9d1df2b433a313ff8b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

a6:f2:6f:ae:83:0d:5f:d6:b6:88:7b:df:38:d1:e1:ec:76:df:1c:6c:a3:03:63:29:22:e0:0a:54:bc:a0:b7:bf
Signer

Actual PE Digest

a6:f2:6f:ae:83:0d:5f:d6:b6:88:7b:df:38:d1:e1:ec:76:df:1c:6c:a3:03:63:29:22:e0:0a:54:bc:a0:b7:bf

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:16
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

python36

PyEval_RestoreThread
PyBuffer_Release
PyMem_RawFree
PyExc_SystemError
PyMem_Malloc
PyMem_Realloc
PyExc_TypeError
PyBytes_FromStringAndSize
PyErr_NoMemory
PyMem_Free
PyThread_free_lock
PyExc_EOFError
PyType_Ready
PyModule_Create2
_PyBytes_Resize
_PyArg_ParseTuple_SizeT
PyModule_AddObject
_PyArg_ParseStack_SizeT
PyThread_release_lock
PyExc_OverflowError
PyErr_Format
PyExc_ValueError
PyErr_SetString
PyThread_acquire_lock
_PyArg_NoPositional
PyMem_RawMalloc
PyThread_allocate_lock
PyExc_MemoryError
PyErr_SetNone
PyExc_IOError
PyExc_RuntimeError
PyEval_SaveThread
_PyArg_NoKeywords
PyType_GenericNew
_PyArg_Parse_SizeT

vcruntime140

memcpy
__std_type_info_destroy_list
_except_handler4_common
memset
memmove

api-ms-win-crt-stdio-l1-1-0

_setmode
__acrt_iob_func
__stdio_common_vfprintf
_fileno
ferror
fopen
fflush
fclose
fgetc
fwrite
ungetc
fread

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
terminate
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
exit
_initialize_narrow_environment
_cexit
_crt_at_quick_exit

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-string-l1-1-0

isdigit

api-ms-win-crt-math-l1-1-0

_fdopen

kernel32

IsProcessorFeaturePresent
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

Exports

Exports

PyInit__bz2

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/_ctypes.pyd
.dll windows x86

e918332b2d9bb8b4a39a92f3450c582f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:64:d1:b7:8d:7e:2f:7c:0c:0b:3e:26:07:f3:8f:99:7f:e5:d0:00:2a:45:8c:d0:03:f9:03:89:dd:0e:5c:8e
Signer

Actual PE Digest

0e:64:d1:b7:8d:7e:2f:7c:0c:0b:3e:26:07:f3:8f:99:7f:e5:d0:00:2a:45:8c:d0:03:f9:03:89:dd:0e:5c:8e

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
SetLastError
GetLastError
DisableThreadLibraryCalls
FormatMessageW
LoadLibraryW
LocalFree
FreeLibrary
VirtualAlloc
GetSystemInfo
GetModuleHandleW
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

ole32

ProgIDFromCLSID

oleaut32

SysStringLen
SysAllocStringLen
GetErrorInfo
SysFreeString

python36

PyExc_ValueError
_Py_CheckRecursiveCall
PyDict_Next
PyErr_Format
PyDict_Type
PyModule_AddStringConstant
PyType_IsSubtype
_PyObject_CallMethodId_SizeT
PyUnicode_AsUnicodeAndSize
PyExc_OverflowError
PyLong_AsUnsignedLongMask
PyTuple_GetItem
PySequence_GetSlice
PyDescr_NewGetSet
PyModule_AddObject
PySequence_SetItem
_PyArg_ParseTuple_SizeT
PyObject_CallFunctionObjArgs
PyLong_AsLong
PyUnicode_AsUTF8
PyUnicode_FromFormat
PyObject_GetBuffer
PyList_New
PyModule_Create2
PyType_Ready
PyObject_GetAttrString
PyErr_NewException
PyErr_Clear
PyObject_GenericSetAttr
PyDict_SetItem
PyDict_New
PyObject_IsInstance
PyMem_Free
PyLong_FromVoidPtr
PyUnicode_AsWideChar
PyLong_AsLongAndOverflow
PyErr_NoMemory
PyDict_GetItemString
PyDict_GetItem
PyLong_AsVoidPtr
PyObject_CallObject
PyEval_InitThreads
PyBytes_FromStringAndSize
PyDict_DelItem
PyNumber_AsSsize_t
PyObject_IsSubclass
_PyWeakref_ProxyType
PyExc_TypeError
PyTuple_Pack
PyCallable_Check
PyMem_Malloc
PyExc_IndexError
PyLong_FromSsize_t
PyBuffer_Release
PyType_Type
PySequence_Tuple
PyUnicode_FromStringAndSize
PyImport_ImportModuleNoBlock
PyErr_WarnEx
PyExc_RuntimeWarning
PyObject_GC_UnTrack
PySys_GetObject
PyGILState_Release
PyObject_CallFunction
Py_Initialize
PyObject_GC_Del
Py_IsInitialized
_PyTraceback_Add
PyFile_WriteString
PyErr_WriteUnraisable
PyGILState_Ensure
_PyObject_GC_NewVar
PyErr_Print
PyErr_SetObject
PyLong_AsUnsignedLong
PyCapsule_IsValid
PyBytes_AsString
PyErr_NormalizeException
PyUnicode_AsUnicode
PyEval_SaveThread
PyUnicode_AppendAndDel
Py_BuildValue
PyErr_SetFromWindowsErr
PyUnicode_FromFormatV
PyTuple_Type
PyObject_Free
PyCapsule_GetPointer
PyErr_Fetch
PyUnicode_AsWideCharString
PyThreadState_GetDict
PyCapsule_New
PyUnicode_Type
PyExc_OSError
_PyObject_New
PyMem_Realloc
PyObject_Str
_PyObject_CallMethodId
PyUnicode_FromString
PyArg_ParseTuple
PyEval_RestoreThread
PyBool_FromLong
_PyFloat_Pack4
PyLong_FromUnsignedLongLong
_PyFloat_Unpack4
PyFloat_AsDouble
PyLong_FromLongLong
PyFloat_FromDouble
PyLong_FromUnsignedLong
PyLong_AsUnsignedLongLongMask
PyFloat_Type
_PyFloat_Unpack8
PyObject_IsTrue
_PyByteArray_empty_string
_PyFloat_Pack8
PyByteArray_Type
Py_FatalError
PyObject_GetAttr
PySequence_Fast
PyTuple_Size
PyObject_HasAttrString
_PyLong_AsInt
PyWeakref_NewProxy
PyErr_Occurred
PyDict_Update
PySequence_GetItem
PySlice_Type
_PyArg_NoKeywords
PyErr_SetString
PyUnicode_FromWideChar
PyUnicode_New
PyTuple_GetSlice
PyExc_AttributeError
PyMemoryView_FromObject
PyDict_Size
PyDict_SetItemString
PyTuple_New
_Py_NoneStruct
PyBuffer_IsContiguous
PyUnicode_Concat
PySlice_Unpack
PyLong_FromLong
PyObject_SetAttrString
PyExc_RuntimeError
PyUnicode_AsUTF8AndSize
_PyWeakref_CallableProxyType
PyType_GenericNew
_PyObject_CallFunction_SizeT
_Py_BuildValue_SizeT
PyExc_Exception
_Py_CheckRecursionLimit
PySlice_AdjustIndices
PyThreadState_Get
PyDescr_NewClassMethod
PyUnicode_InternFromString
PyObject_SetAttr
PySequence_Size
PyObject_GC_Track
_PyUnicode_EqualToASCIIString
PyArg_UnpackTuple

vcruntime140

_except_handler4_common
__std_type_info_destroy_list
strchr
memset
memmove
memcpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_errno
_initterm_e
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_seh_filter_dll
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm

api-ms-win-crt-string-l1-1-0

iswctype

Exports

Exports

DllCanUnloadNow
DllGetClassObject
PyInit__ctypes

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/_decimal.pyd
.dll windows x86

86dc6724f145ba73de00b7575b2cdb7f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

95:e1:f3:a6:e2:7d:e0:2f:51:2a:b3:58:c1:59:7b:76:bf:89:2c:0f:e3:80:e1:3f:8a:fb:7e:07:9b:6c:92:0c
Signer

Actual PE Digest

95:e1:f3:a6:e2:7d:e0:2f:51:2a:b3:58:c1:59:7b:76:bf:89:2c:0f:e3:80:e1:3f:8a:fb:7e:07:9b:6c:92:0c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

python36

PyDict_New
PyList_GetItem
_PyUnicode_IsWhitespace
PyObject_CallMethod
PyObject_IsInstance
PyMem_Free
PyErr_NoMemory
PyDict_GetItemString
PyObject_CallObject
PyComplex_Type
_Py_NotImplementedStruct
PyUnicode_Compare
PyArg_ParseTupleAndKeywords
_PyObject_New
PyExc_TypeError
PyLong_FromUnsignedLong
PyObject_IsTrue
PyUnicode_AsUTF8String
PyTuple_Pack
PyObject_HashNotImplemented
_PyUnicode_Ready
PyMem_Malloc
PyList_AsTuple
PyDict_SetItem
PyUnicode_FromString
_PyLong_GCD
PyUnicode_CompareWithASCIIString
PyType_Type
PyArg_ParseTuple
PyFloat_FromString
PyExc_ValueError
PyObject_CallFunction
PyExc_ZeroDivisionError
PyErr_SetString
PyUnicode_FromWideChar
PyList_Size
PyUnicode_New
PyExc_AttributeError
PyObject_GenericSetAttr
_PyUnicode_ToDecimalDigit
_PyLong_New
PyThreadState_GetDict
PyTuple_Size
PyList_Append
PyErr_Clear
PyErr_NewException
PyObject_GetAttrString
PyFloat_FromDouble
PyType_Ready
PyDict_Size
PyModule_Create2
PyList_New
PyDict_SetItemString
PyTuple_New
_Py_NoneStruct
PyFloat_AsDouble
PyUnicode_FromFormat
PyLong_AsLong
PyObject_CallFunctionObjArgs
PyModule_AddObject
PyComplex_AsCComplex
PyObject_Free
PyExc_OverflowError
PyType_IsSubtype
PyLong_Type
PyFloat_Type
_Py_FalseStruct
PyTuple_Type
PyModule_AddStringConstant
PyComplex_FromDoubles
PyDict_GetItemWithError
PyExc_ArithmeticError
_Py_TrueStruct
PyErr_Format
Py_BuildValue
PyLong_FromLong
PyExc_RuntimeError
PyUnicode_AsUTF8AndSize
PyObject_GenericGetAttr
PyUnicode_DecodeUTF8
PyLong_FromSsize_t
PyErr_Occurred
PyImport_ImportModule
PyExc_KeyError
PyLong_AsSsize_t
_Py_ascii_whitespace
PyType_GenericNew
PyModule_AddIntConstant
PyBool_FromLong
PyErr_SetObject
PyThreadState_Get
PyUnicode_InternFromString
PyMem_Realloc
PyBaseObject_Type

vcruntime140

memmove
memcpy
_except_handler4_common
memset
__std_type_info_destroy_list

api-ms-win-crt-math-l1-1-0

_finite
_copysign
ceil
_isnan
_CIlog10

api-ms-win-crt-convert-l1-1-0

mbstowcs
strtol

api-ms-win-crt-stdio-l1-1-0

fputs
fputc
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf_s

api-ms-win-crt-runtime-l1-1-0

abort
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
__control87_2
raise
_errno

api-ms-win-crt-string-l1-1-0

tolower
isupper
isdigit

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-heap-l1-1-0

free
calloc
malloc
realloc

kernel32

SetUnhandledExceptionFilter
GetCurrentProcess
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter

Exports

Exports

PyInit__decimal

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/_elementtree.pyd
.dll windows x86

a9a942fc94accec7b067bd9f21d83a51

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

82:bc:01:7c:ab:2f:0c:9d:17:14:5a:c5:92:6d:27:11:a4:df:75:c7:2b:f5:76:20:7e:f1:13:98:77:d6:9d:40
Signer

Actual PE Digest

82:bc:01:7c:ab:2f:0c:9d:17:14:5a:c5:92:6d:27:11:a4:df:75:c7:2b:f5:76:20:7e:f1:13:98:77:d6:9d:40

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetCurrentProcessId
FreeLibrary
GetSystemTimeAsFileTime
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

python36

PyType_IsSubtype
_PyObject_CallMethodId_SizeT
PyUnicode_Join
PyExc_OverflowError
PyObject_Free
PyModule_AddObject
_PyArg_ParseTuple_SizeT
PyObject_GC_Del
PyObject_CallFunctionObjArgs
_PyBytes_Resize
PyObject_ClearWeakRefs
_PyTrash_thread_destroy_chain
PyUnicode_AsUTF8
PyUnicode_FromFormat
PyObject_GetBuffer
PySequence_Fast
PyList_New
PyModule_Create2
PyType_Ready
PyExc_SyntaxError
PyObject_GetAttrString
PyErr_NewException
PyErr_Clear
PyList_Append
PyBytes_Type
PyObject_RichCompareBool
PyDict_SetItem
PyDict_New
PyUnicode_Type
PyMem_Free
PyErr_Occurred
PyType_GenericAlloc
PyCapsule_Import
PyList_Type
PyErr_NoMemory
PyErr_SetString
PyDict_GetItem
_PyArg_ParseStack_SizeT
PyObject_GC_Track
PyBytes_FromStringAndSize
Py_ReprLeave
PyDict_DelItem
PyNumber_AsSsize_t
PyDict_Type
PyExc_TypeError
PyMem_Realloc
_PyTrash_thread_deposit_object
PyObject_IsTrue
PyDict_Copy
PyTuple_Pack
_PyUnicode_Ready
PyMem_Malloc
PyExc_IndexError
PyExc_ImportError
PyState_FindModule
PyArg_UnpackTuple
PyModule_GetState
_PyArg_ParseTupleAndKeywordsFast_SizeT
_PyObject_GC_New
PyList_SetItem
_PyObject_FastCallDict
PyDict_Keys
PyUnicode_FromString
PyBuffer_Release
PyUnicode_FromStringAndSize
PyDict_Update
PyObject_SelfIter
PyImport_ImportModule
PySlice_Type
PyExc_DeprecationWarning
PyErr_Format
_PyArg_ParseTupleAndKeywords_SizeT
PyList_Size
PyDict_Next
PyUnicode_New
PyExc_AttributeError
PyDict_Items
PyDict_Size
PyTuple_New
_Py_NoneStruct
PyErr_SetNone
PyObject_GC_UnTrack
PySlice_Unpack
PyLong_FromLong
PyObject_SetAttrString
PyExc_RuntimeError
PyUnicode_AsUTF8AndSize
PyObject_GenericGetAttr
_PyUnicode_EqualToASCIIString
Py_ReprEnter
PyExc_ValueError
PyUnicode_DecodeUTF8
PyObject_Realloc
PyLong_FromSsize_t
PyErr_WarnEx
PyObject_Malloc
_PyObject_SetAttrId
_PyObject_CallFunction_SizeT
_Py_BuildValue_SizeT
PyErr_SetObject
PySlice_AdjustIndices
PyThreadState_Get
PyCFunction_Type
_PyArg_Parse_SizeT
PyUnicode_AsEncodedString
PySequence_Size
PyExc_StopIteration

vcruntime140

_except_handler4_common
memset
__std_type_info_destroy_list
memmove
memcpy

api-ms-win-crt-string-l1-1-0

strncat

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_crt_atexit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_crt_at_quick_exit
_cexit
terminate
_initialize_narrow_environment

Exports

Exports

PyInit__elementtree

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/_hashlib.pyd
.dll windows x86

5f5e8d0443b5f11d59e7641732c6da70

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

f8:4b:cc:db:86:9f:f0:61:0b:9d:88:b5:4e:f9:1e:16:14:80:71:a9:b5:60:68:3b:73:c2:d1:f9:e7:7c:bf:e5
Signer

Actual PE Digest

f8:4b:cc:db:86:9f:f0:61:0b:9d:88:b5:4e:f9:1e:16:14:80:71:a9:b5:60:68:3b:73:c2:d1:f9:e7:7c:bf:e5

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:17
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
FreeLibrary
GlobalMemoryStatus
QueryPerformanceCounter
GetTickCount
FlushConsoleInputBuffer
CloseHandle
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
UnhandledExceptionFilter
LoadLibraryA
GetFileType
GetProcAddress
GetLastError
GetModuleHandleA
MultiByteToWideChar
GetCurrentThreadId
WriteFile
GetStdHandle
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls

user32

ReleaseDC
MessageBoxA
GetUserObjectInformationW
GetProcessWindowStation
GetDC

gdi32

GetDIBits
GetDeviceCaps
DeleteObject
GetObjectA
CreateCompatibleBitmap

advapi32

ReportEventA
RegisterEventSourceA
DeregisterEventSource

python36

PyExc_OverflowError
PyObject_Free
PyThread_release_lock
PyModule_AddObject
_PyArg_ParseTuple_SizeT
PyLong_AsLong
PyUnicode_FromFormat
PyErr_Format
PyModule_Create2
PyEval_RestoreThread
PyType_Type
PyBuffer_Release
_Py_strhex
PyUnicode_FromString
PyExc_TypeError
_PyArg_ParseTupleAndKeywords_SizeT
_PyObject_New
PyBytes_FromStringAndSize
PyErr_NoMemory
PyObject_GetBuffer
PyFrozenSet_New
PyThread_free_lock
PyExc_ValueError
PyErr_SetString
PySet_Add
PyThread_acquire_lock
_Py_NoneStruct
PyThread_allocate_lock
PyLong_FromLong
PyEval_SaveThread
PyErr_Occurred
PyExc_BufferError
_PyArg_Parse_SizeT
PyType_Ready

vcruntime140

memcpy
_except_handler4_common
memset
__std_type_info_destroy_list
strstr
strrchr
memchr
memmove
wcsstr
strchr

api-ms-win-crt-string-l1-1-0

isalnum
isdigit
strncpy
strncmp
_stricmp
strcmp
isspace
isxdigit
_strnicmp
isupper
tolower

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_crt_atexit
_seh_filter_dll
_initterm_e
_initterm
signal
_crt_at_quick_exit
_cexit
_errno
strerror
terminate
_configure_narrow_argv
_exit
raise

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__acrt_iob_func
__stdio_common_vsscanf
fread
feof
_wfopen
__stdio_common_vfprintf
fputs
_fileno
fgets
_setmode
ftell
ferror
fopen
fflush
fclose
fseek
fwrite

api-ms-win-crt-convert-l1-1-0

atoi
strtol
strtoul

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

_localtime64
_time64
_gmtime64

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc

api-ms-win-crt-conio-l1-1-0

_getch

Exports

Exports

PyInit__hashlib

Sections

.text
Size: 747KB - Virtual size: 746KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/_lzma.pyd
.dll windows x86

783bbc046fda0272285bb42b90af6a5d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

c7:f3:1f:df:18:be:fe:e9:c4:85:40:31:c2:55:ba:8f:4f:b8:5c:dd:06:4d:77:1d:96:7d:21:55:14:5f:4b:2b
Signer

Actual PE Digest

c7:f3:1f:df:18:be:fe:e9:c4:85:40:31:c2:55:ba:8f:4f:b8:5c:dd:06:4d:77:1d:96:7d:21:55:14:5f:4b:2b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

python36

PyMem_Free
PyErr_NoMemory
_PyArg_ParseStack_SizeT
PyBytes_FromStringAndSize
PyExc_TypeError
PyExc_ValueError
PyMem_Malloc
_PyArg_ParseTupleAndKeywordsFast_SizeT
PyMem_RawFree
PyBuffer_Release
PyEval_RestoreThread
PyErr_SetString
PyThread_acquire_lock
PyLong_FromLongLong
PyThread_free_lock
_Py_NoneStruct
PyMem_RawMalloc
PyLong_AsUnsignedLongLong
PyThread_allocate_lock
PyLong_FromUnsignedLongLong
PyExc_MemoryError
_PyDict_SetItemId
PyErr_SetNone
PyEval_SaveThread
PyErr_Occurred
PySequence_GetItem
PyExc_KeyError
PyType_GenericNew
PyModule_AddIntConstant
PyBool_FromLong
_PyArg_Parse_SizeT
PyErr_NewExceptionWithDoc
PyDict_New
PyMapping_Check
PyMapping_GetItemString
PyErr_Clear
PyExc_EOFError
PyType_Ready
PyModule_Create2
_PyBytes_Resize
_PyArg_ParseTuple_SizeT
PyModule_AddObject
PyThread_release_lock
PyErr_ExceptionMatches
PyExc_OverflowError
PyErr_Format
PyTuple_New
_PyArg_ParseTupleAndKeywords_SizeT
PyMem_Realloc
PySequence_Size

kernel32

InitializeSListHead
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
UnhandledExceptionFilter
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common
memcpy
memmove
memcmp

api-ms-win-crt-heap-l1-1-0

calloc
malloc
free

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_crt_at_quick_exit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
terminate
_initialize_narrow_environment

Exports

Exports

PyInit__lzma

Sections

.text
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/_msi.pyd
.dll windows x86

0ce645dc89b48a6650110e48e87b97c7

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

8e:27:ba:02:84:0e:28:69:2a:fd:7b:9b:1a:31:c5:ac:54:37:cd:59:fe:52:56:ef:d8:e4:de:f6:de:e2:74:a8
Signer

Actual PE Digest

8e:27:ba:02:84:0e:28:69:2a:fd:7b:9b:1a:31:c5:ac:54:37:cd:59:fe:52:56:ef:d8:e4:de:f6:de:e2:74:a8

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord10
ord14
ord11
ord13

msi

ord151
ord8
ord149
ord17
ord116
ord48
ord31
ord170
ord77
ord123
ord20
ord121
ord167
ord153
ord91
ord118
ord160
ord163
ord158
ord152
ord159
ord148
ord115
ord166
ord125

rpcrt4

UuidCreate
RpcStringFreeW
UuidToStringW

kernel32

GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateFileA
CloseHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetFileInformationByHandle

user32

CharNextA

python36

PyArg_ParseTuple
_PyObject_CallMethodId
PyExc_TypeError
PyExc_NotImplementedError
PyBytes_FromStringAndSize
PyErr_NoMemory
PyObject_GenericSetAttr
PyErr_NewException
PyModule_Create2
PyObject_Init
PyModule_AddObject
PyLong_Type
PyErr_Format
PyExc_ValueError
PyErr_SetString
PyUnicode_FromWideChar
_Py_NoneStruct
PyExc_MemoryError
PyLong_FromLong
PyObject_GenericGetAttr
PyErr_Occurred
PyUnicode_AsUnicode
PyBytes_AsString
PyModule_AddIntConstant
PyObject_Malloc
PyLong_AsLong

vcruntime140

memset
__std_type_info_destroy_list
memcpy
_except_handler4_common

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-stdio-l1-1-0

_lseek
_open
_write
_close
_read
_tempnam

api-ms-win-crt-string-l1-1-0

strncpy

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_errno
_configure_narrow_argv
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
_initialize_narrow_environment
_seh_filter_dll
terminate

api-ms-win-crt-heap-l1-1-0

free
malloc

Exports

Exports

PyInit__msi

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/_multiprocessing.pyd
.dll windows x86

0d00b70d9a3e3423c6dc452dcc540d19

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

a2:34:40:4e:c2:a3:e2:ea:d7:ea:cc:c7:be:d0:80:bd:d6:4d:b9:cf:9a:2b:77:85:35:37:2e:11:f4:76:c6:4d
Signer

Actual PE Digest

a2:34:40:4e:c2:a3:e2:ea:d7:ea:cc:c7:be:d0:80:bd:d6:4d:b9:cf:9a:2b:77:85:35:37:2e:11:f4:76:c6:4d

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

recv
send
closesocket
WSAGetLastError

kernel32

GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetLastError
ReleaseSemaphore
WaitForMultipleObjectsEx
GetCurrentThreadId
GetLastError
WaitForSingleObjectEx
CloseHandle
ResetEvent
CreateSemaphoreA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent

python36

_PyOS_SigintEvent
PyThread_get_thread_ident
_PyObject_New
PyMem_Malloc
_Py_TrueStruct
PyExc_AssertionError
PyMem_Free
PyBytes_FromStringAndSize
PyExc_OSError
PyErr_NoMemory
PyDict_New
PyBuffer_Release
PyObject_Free
PyExc_OverflowError
PyErr_SetExcFromWindowsErr
_Py_FalseStruct
_PyArg_ParseTupleAndKeywords_SizeT
PyExc_ValueError
PyErr_SetString
PyFloat_AsDouble
PyErr_SetFromWindowsErr
PyErr_Occurred
PyBool_FromLong
PyEval_RestoreThread
_PyOS_IsMainThread
PyType_Ready
PyModule_Create2
_PyBytes_Resize
_PyArg_ParseTuple_SizeT
PyModule_AddObject
PyErr_Format
PyDict_SetItemString
_Py_NoneStruct
PyLong_FromLong
PyExc_IOError
PyExc_RuntimeError
PyEval_SaveThread
PyErr_SetFromErrno

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_errno
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

Exports

Exports

PyInit__multiprocessing

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/_overlapped.pyd
.dll windows x86

3d4c10677a10e63365a483436d84662d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

ea:39:44:ad:9c:26:a7:fe:76:f2:81:13:fc:84:30:fc:9b:cc:6b:8a:93:dd:e5:b3:5d:cc:3c:21:1e:73:f4:8b
Signer

Actual PE Digest

ea:39:44:ad:9c:26:a7:fe:76:f2:81:13:fc:84:30:fc:9b:cc:6b:8a:93:dd:e5:b3:5d:cc:3c:21:1e:73:f4:8b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAStringToAddressW
closesocket
WSARecv
htons
WSAIoctl
bind
socket
WSASend
WSAGetLastError

kernel32

GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
ReadFile
CancelIo
SetLastError
WriteFile
RegisterWaitForSingleObject
UnregisterWait
GetQueuedCompletionStatus
CreateFileW
GetModuleHandleA
PostQueuedCompletionStatus
CreateEventW
FormatMessageW
GetLastError
SetEvent
CloseHandle
ResetEvent
GetOverlappedResult
GetProcAddress
UnregisterWaitEx
LocalFree
CreateEventA
CreateIoCompletionPort
ConnectNamedPipe
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls

python36

PyMem_RawFree
PyErr_SetExcFromWindowsErr
PyBuffer_Release
PyArg_ParseTuple
_Py_TrueStruct
PyArg_ParseTupleAndKeywords
PyArg_Parse
PyModule_GetDict
_Py_FalseStruct
PyErr_Format
PyEval_RestoreThread
PyBytes_FromStringAndSize
PyModule_AddObject
PyExc_ConnectionRefusedError
PyExc_OSError
PyLong_FromVoidPtr
PyMem_Free
PyErr_Clear
PyType_Ready
PyModule_Create2
PyUnicode_FromFormat
PyUnicode_AsWideCharString
PyObject_Free
_PyObject_New
PyLong_FromUnsignedLong
PyExc_ValueError
PyErr_WriteUnraisable
PyErr_SetString
PyDict_SetItemString
_Py_NoneStruct
PyMem_RawMalloc
Py_BuildValue
PyExc_RuntimeError
PyEval_SaveThread
PyImport_ImportModule
PyExc_ConnectionAbortedError
PyBool_FromLong
_PyBytes_Resize

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
memset

api-ms-win-crt-string-l1-1-0

iswctype

api-ms-win-crt-runtime-l1-1-0

_initterm_e
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm

Exports

Exports

PyInit__overlapped

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/_socket.pyd
.dll .js windows x86
DLLs/_ssl.pyd
.dll windows x86

a4f2b59e0e71d85ef80c3c710478d0f6

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

f9:d3:92:93:50:51:fb:92:a8:85:b3:fd:9c:4b:c4:af:99:11:a3:35:2e:17:8a:97:37:8c:ee:1c:79:98:e0:4c
Signer

Actual PE Digest

f9:d3:92:93:50:51:fb:92:a8:85:b3:fd:9c:4b:c4:af:99:11:a3:35:2e:17:8a:97:37:8c:ee:1c:79:98:e0:4c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:17
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

send
WSASetLastError
shutdown
closesocket
recv
WSAGetLastError
select

crypt32

CertFreeCertificateContext
CertGetEnhancedKeyUsage
CertCloseStore
CertOpenStore
CertEnumCRLsInStore
CertEnumCertificatesInStore
CertFreeCRLContext

kernel32

LoadLibraryA
CloseHandle
GetCurrentProcessId
FreeLibrary
GlobalMemoryStatus
GetFileType
GetTickCount
FlushConsoleInputBuffer
SetLastError
SystemTimeToFileTime
GetSystemTime
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
MultiByteToWideChar
InitializeSListHead
GetModuleHandleA
GetCurrentThreadId
WriteFile
GetStdHandle
GetLastError
SetUnhandledExceptionFilter
QueryPerformanceCounter
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
FindFirstFileA
FindNextFileA
FindClose
WideCharToMultiByte

user32

GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA
GetDC
ReleaseDC

gdi32

CreateCompatibleBitmap
GetDIBits
DeleteObject
GetObjectA
GetDeviceCaps

advapi32

DeregisterEventSource
ReportEventA
RegisterEventSourceA

python36

PyDict_SetItemString
_PyArg_NoPositional
PyTuple_New
_Py_NoneStruct
PyGILState_Release
PyBytes_FromString
PyThread_allocate_lock
PyErr_SetFromWindowsErr
PyExc_MemoryError
PyBuffer_IsContiguous
PyUnicode_FromStringAndSize
_Py_NotImplementedStruct
PyBytes_FromStringAndSize
PyByteArray_Type
PyBuffer_Release
_PyTime_GetMonotonicClock
PyObject_GC_Track
PyThread_acquire_lock
PyObject_CallObject
_PyArg_ParseStack_SizeT
PyDict_GetItem
PyExc_OSError
PyType_FromSpec
PyUnicode_FromString
PyErr_SetFromErrnoWithFilenameObject
_Py_fopen_obj
PyErr_NoMemory
PyCapsule_Import
PyMem_Free
_PyObject_GC_New
PyErr_NewExceptionWithDoc
_PyTime_AsTimeval_noraise
PyDict_New
PyDict_SetItem
PyUnicode_FSConverter
PyUnicode_Decode
PyList_Append
PyErr_Clear
PyType_Ready
PyModule_Create2
PyList_New
_Py_TrueStruct
PyList_AsTuple
PyMem_Malloc
PyCallable_Check
_PyByteArray_empty_string
PyObject_Str
PySet_New
PyExc_TypeError
_PyObject_New
PyErr_BadArgument
PyUnicode_FromEncodedObject
PyObject_GetBuffer
PyUnicode_FromFormat
_PyBytes_Resize
PyLong_AsLong
PyObject_CallFunctionObjArgs
PyObject_GC_Del
_PyArg_ParseTuple_SizeT
PyModule_AddObject
PyThread_release_lock
PyObject_Free
PyModule_GetDict
PyExc_OverflowError
PyType_IsSubtype
PyErr_SetFromErrno
_Py_FalseStruct
PyErr_Format
PyLong_FromUnsignedLong
PyExc_ValueError
PyErr_WarnFormat
PyThread_get_thread_ident
PyUnicode_AsASCIIString
PyErr_WriteUnraisable
PyEval_RestoreThread
PyErr_SetString
PyThread_free_lock
PyList_Size
PyObject_GC_UnTrack
PyLong_FromLong
PyExc_IOError
PyEval_SaveThread
PyUnicode_DecodeUTF8
PyErr_Occurred
PyBytes_AsString
_PyErr_BadInternalCall
_PyArg_NoKeywords
PyExc_RuntimeWarning
PyModule_AddIntConstant
_PyObject_SetAttrId
_Py_BuildValue_SizeT
PyUnicode_DecodeFSDefault
PyBool_FromLong
PySet_Add
PyWeakref_GetObject
PyGILState_Ensure
PyErr_SetObject
PyWeakref_NewRef
PyUnicode_InternFromString
PyMem_Calloc
_PyArg_Parse_SizeT
PyUnicode_AsEncodedString
PyErr_CheckSignals

vcruntime140

wcsstr
memmove
strrchr
strstr
__std_type_info_destroy_list
memchr
memset
memcpy
_except_handler4_common
strchr

api-ms-win-crt-stdio-l1-1-0

_setmode
fseek
fflush
fopen
ferror
ftell
fgets
_fileno
_wfopen
feof
fread
__stdio_common_vsscanf
__stdio_common_vfprintf
__stdio_common_vsprintf
fputs
__acrt_iob_func
fwrite
fclose

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_register_onexit_function
signal
_execute_onexit_table
terminate
raise
_exit
_crt_atexit
strerror
_crt_at_quick_exit
_errno
abort
_cexit

api-ms-win-crt-string-l1-1-0

isalnum
isdigit
strncpy
_stricmp
isupper
strncmp
_strnicmp
strcmp
isxdigit
tolower
isspace

api-ms-win-crt-convert-l1-1-0

strtoul
strtol
atoi

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

malloc
realloc
calloc
free

api-ms-win-crt-time-l1-1-0

_localtime64
_gmtime64
_time64

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-filesystem-l1-1-0

_stat64i32

Exports

Exports

PyInit__ssl

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/py.ico
DLLs/pyc.ico
DLLs/pyd.ico
DLLs/pyexpat.pyd
.dll windows x86

0b01d2945b69c6b74e91e997c3e036aa

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

66:20:bb:9e:90:b8:c2:9a:c1:35:06:c1:08:d6:44:3a:d6:37:e9:68:42:c9:86:c8:90:56:05:16:c0:d0:a1:ed
Signer

Actual PE Digest

66:20:bb:9e:90:b8:c2:9a:c1:35:06:c1:08:d6:44:3a:d6:37:e9:68:42:c9:86:c8:90:56:05:16:c0:d0:a1:ed

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetCurrentProcessId
FreeLibrary
GetSystemTimeAsFileTime
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

python36

PyList_Append
PyUnicode_Decode
PyCapsule_New
PyDict_SetItem
PyDict_New
_PyTraceback_Add
PyMem_Free
PyErr_NoMemory
PyObject_Realloc
PyDict_GetItem
_Py_HashSecret
PyObject_GC_Track
PyBytes_FromStringAndSize
PyExc_TypeError
PyObject_IsTrue
PyErr_Clear
_PyUnicode_Ready
PyMem_Malloc
_Py_TrueStruct
_PyObject_GC_New
PyUnicode_FromString
PyBuffer_Release
PyByteArray_Type
PyArg_ParseTuple
PyEval_CallObjectWithKeywords
PyDict_SetItemString
PyTuple_New
_Py_NoneStruct
PySys_GetObject
Py_BuildValue
PyModule_New
PyErr_NewException
PyModule_Create2
_PyObject_GetAttrId
PyList_New
PyObject_GetBuffer
PyUnicode_FromFormat
PyLong_AsLong
PyObject_GC_Del
PyModule_AddObject
PyObject_Free
PyArg_Parse
PyModule_GetDict
PyType_IsSubtype
_Py_FalseStruct
PyModule_AddStringConstant
PyErr_Format
PyExc_ValueError
PyObject_CallFunction
PyType_Ready
PyErr_SetString
_PyByteArray_empty_string
PyExc_AttributeError
PyObject_GC_UnTrack
PyLong_FromLong
PyObject_SetAttrString
PyExc_RuntimeError
PyUnicode_AsUTF8AndSize
PyObject_GenericGetAttr
_PyUnicode_EqualToASCIIString
PyUnicode_DecodeUTF8
PyErr_Occurred
PyModule_AddIntConstant
PyObject_Malloc
PyErr_SetObject
_PyArg_ParseStack

vcruntime140

_except_handler4_common
memset
__std_type_info_destroy_list
memmove
memcpy

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_crt_atexit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_crt_at_quick_exit
_cexit
terminate
_initialize_narrow_environment

Exports

Exports

PyInit_pyexpat

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/python_lib.cat
DLLs/python_tools.cat
DLLs/select.pyd
.dll windows x86

584af0a2a4e51335cb7c671f0e4c4a73

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

a7:73:d5:af:59:4e:e0:e7:2a:25:56:e1:1a:ee:54:0c:da:0d:34:26:cc:37:cd:64:bd:14:87:74:e3:35:ba:8b
Signer

Actual PE Digest

a7:73:d5:af:59:4e:e0:e7:2a:25:56:e1:1a:ee:54:0c:da:0d:34:26:cc:37:cd:64:bd:14:87:74:e3:35:ba:8b

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:16
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select
__WSAFDIsSet
WSAGetLastError

python36

PyModule_Create2
_PyTime_AsTimeval_noraise
PyObject_AsFileDescriptor
PyExc_OSError
PyEval_RestoreThread
_PyTime_AsTimeval
PyErr_SetExcFromWindowsErr
PyList_SetItem
PyList_New
PySequence_Fast
PyModule_AddObject
PyErr_ExceptionMatches
PyExc_ValueError
PyErr_SetString
_PyTime_GetMonotonicClock
_Py_NoneStruct
PyEval_SaveThread
PyErr_Occurred
_PyTime_FromSecondsObject
PyArg_UnpackTuple
PyTuple_Pack
PyExc_TypeError
PyErr_CheckSignals

vcruntime140

_except_handler4_common
memset
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_errno
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv

kernel32

GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

Exports

Exports

PyInit_select

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/unicodedata.pyd
.dll windows x86

49f99baad66fc7493daf65bbdc0110ac

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

64:7a:a8:30:2f:0d:c2:a9:70:6f:3b:95:c0:b1:1c:c0:36:3b:a4:8d:6b:ed:d1:98:97:b9:33:46:ad:74:95:30
Signer

Actual PE Digest

64:7a:a8:30:2f:0d:c2:a9:70:6f:3b:95:c0:b1:1c:c0:36:3b:a4:8d:6b:ed:d1:98:97:b9:33:46:ad:74:95:30

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

python36

PyModule_AddObject
PyUnicode_FromStringAndSize
PyType_Type
PyUnicode_FromString
PyMem_Malloc
_PyArg_ParseTuple_SizeT
_PyUnicode_ToDigit
PyUnicode_Type
PyMem_Realloc
_PyObject_New
PyUnicode_FromKindAndData
PyErr_NoMemory
PyMem_Free
PyModule_Create2
_PyUnicode_Ready
PyCapsule_New
PyObject_Free
PyModule_AddStringConstant
PyErr_Format
PyExc_ValueError
PyErr_SetString
_PyUnicode_ToDecimalDigit
_PyUnicode_ToNumeric
PyFloat_FromDouble
_Py_ctype_toupper
PyUnicode_FromOrdinal
PyLong_FromLong
PyObject_GenericGetAttr
PyErr_Occurred
PyExc_KeyError
PyOS_snprintf
_PyArg_Parse_SizeT

vcruntime140

_except_handler4_common
memcpy
memset
__std_type_info_destroy_list

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

kernel32

GetCurrentThreadId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter

Exports

Exports

PyInit_unicodedata

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 743KB - Virtual size: 743KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Installer.exe
.exe windows x86

56a78d55f3f7af51443e58e0ce2fb5f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW

shell32

SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW

ole32

OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

user32

GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu

gdi32

SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject

kernel32

GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
CreateFileW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lib/__future__.py
Lib/__phello__.foo.py
Lib/_bootlocale.py
Lib/_collections_abc.py
Lib/_compat_pickle.py
Lib/_compression.py
Lib/_dummy_thread.py
Lib/_markupbase.py
Lib/_osx_support.py
Lib/_pydecimal.py
Lib/_pyio.py
Lib/_sitebuiltins.py
Lib/_strptime.py
Lib/_threading_local.py
Lib/_weakrefset.py
Lib/abc.py
Lib/aifc.py
Lib/antigravity.py
Lib/argparse.py
.py .vbs
Lib/ast.py
Lib/asynchat.py
Lib/asyncio/__init__.py
Lib/asyncio/base_events.py
.py .vbs
Lib/asyncio/base_futures.py
Lib/asyncio/base_subprocess.py
Lib/asyncio/base_tasks.py
Lib/asyncio/compat.py
Lib/asyncio/constants.py
Lib/asyncio/coroutines.py
Lib/asyncio/events.py
Lib/asyncio/futures.py
Lib/asyncio/locks.py
Lib/asyncio/log.py
Lib/asyncio/proactor_events.py
Lib/asyncio/protocols.py
Lib/asyncio/queues.py
Lib/asyncio/selector_events.py
Lib/asyncio/sslproto.py
Lib/asyncio/streams.py
Lib/asyncio/subprocess.py
Lib/asyncio/tasks.py
Lib/asyncio/test_utils.py
.py .js
Lib/asyncio/transports.py
Lib/asyncio/unix_events.py
Lib/asyncio/windows_events.py
.py .js
Lib/asyncio/windows_utils.py
Lib/asyncore.py
Lib/base64.py
Lib/bdb.py
.py .js
Lib/binhex.py
Lib/bisect.py
Lib/bz2.py
Lib/cProfile.py
Lib/calendar.py
Lib/cgi.py
Lib/cgitb.py
Lib/chunk.py
Lib/cmd.py
Lib/code.py
Lib/codecs.py
Lib/codeop.py
Lib/collections/__init__.py
Lib/collections/abc.py
Lib/colorsys.py
Lib/compileall.py
Lib/concurrent/__init__.py
Lib/concurrent/futures/__init__.py
Lib/concurrent/futures/_base.py
Lib/concurrent/futures/process.py
Lib/concurrent/futures/thread.py
Lib/configparser.py
Lib/contextlib.py
Lib/copy.py
Lib/copyreg.py
Lib/crypt.py
Lib/csv.py
Lib/ctypes/__init__.py
Lib/ctypes/_endian.py
Lib/ctypes/macholib/README.ctypes
Lib/ctypes/macholib/__init__.py
Lib/ctypes/macholib/dyld.py
Lib/ctypes/macholib/dylib.py
Lib/ctypes/macholib/fetch_macholib
.sh linux
Lib/ctypes/macholib/fetch_macholib.bat
Lib/ctypes/macholib/framework.py
Lib/ctypes/test/__init__.py
Lib/ctypes/test/__main__.py
Lib/ctypes/test/test_anon.py
Lib/ctypes/test/test_array_in_pointer.py
Lib/ctypes/test/test_arrays.py
Lib/ctypes/test/test_as_parameter.py
Lib/ctypes/test/test_bitfields.py
Lib/ctypes/test/test_buffers.py
Lib/ctypes/test/test_bytes.py
Lib/ctypes/test/test_byteswap.py
Lib/ctypes/test/test_callbacks.py
Lib/ctypes/test/test_cast.py
Lib/ctypes/test/test_cfuncs.py
Lib/ctypes/test/test_checkretval.py
Lib/ctypes/test/test_delattr.py
Lib/ctypes/test/test_errno.py
Lib/ctypes/test/test_find.py
Lib/ctypes/test/test_frombuffer.py
Lib/ctypes/test/test_funcptr.py
Lib/ctypes/test/test_functions.py
Lib/ctypes/test/test_incomplete.py
Lib/ctypes/test/test_init.py
Lib/ctypes/test/test_internals.py
Lib/ctypes/test/test_keeprefs.py
Lib/ctypes/test/test_libc.py
Lib/ctypes/test/test_loading.py
Lib/ctypes/test/test_macholib.py
Lib/ctypes/test/test_memfunctions.py
Lib/ctypes/test/test_numbers.py
Lib/ctypes/test/test_objects.py
Lib/ctypes/test/test_parameters.py
Lib/ctypes/test/test_pep3118.py
Lib/ctypes/test/test_pickling.py
Lib/ctypes/test/test_pointers.py
Lib/ctypes/test/test_prototypes.py
Lib/ctypes/test/test_python_api.py
Lib/ctypes/test/test_random_things.py
Lib/ctypes/test/test_refcounts.py
Lib/ctypes/test/test_repr.py
Lib/ctypes/test/test_returnfuncptrs.py
Lib/ctypes/test/test_simplesubclasses.py
Lib/ctypes/test/test_sizes.py
Lib/ctypes/test/test_slicing.py
Lib/ctypes/test/test_stringptr.py
Lib/ctypes/test/test_strings.py
Lib/ctypes/test/test_struct_fields.py
Lib/ctypes/test/test_structures.py
Lib/ctypes/test/test_unaligned_structures.py
Lib/ctypes/test/test_unicode.py
Lib/ctypes/test/test_values.py
Lib/ctypes/test/test_varsize_struct.py
Lib/ctypes/test/test_win32.py
Lib/ctypes/test/test_wintypes.py
Lib/ctypes/util.py
Lib/ctypes/wintypes.py
Lib/curses/__init__.py
Lib/curses/ascii.py
Lib/curses/has_key.py
Lib/curses/panel.py
Lib/curses/textpad.py
Lib/datetime.py
Lib/dbm/__init__.py
Lib/dbm/dumb.py
Lib/dbm/gnu.py
Lib/dbm/ndbm.py
Lib/decimal.py
Lib/difflib.py
Lib/dis.py
Lib/distutils/README
Lib/distutils/__init__.py
Lib/distutils/_msvccompiler.py
Lib/distutils/archive_util.py
Lib/distutils/bcppcompiler.py
Lib/distutils/ccompiler.py
Lib/distutils/cmd.py
Lib/distutils/command/__init__.py
Lib/distutils/command/bdist.py
Lib/distutils/command/bdist_dumb.py
Lib/distutils/command/bdist_msi.py
Lib/distutils/command/bdist_rpm.py
Lib/distutils/command/bdist_wininst.py
Lib/distutils/command/build.py
Lib/distutils/command/build_clib.py
Lib/distutils/command/build_ext.py
Lib/distutils/command/build_py.py
Lib/distutils/command/build_scripts.py
Lib/distutils/command/check.py
Lib/distutils/command/clean.py
Lib/distutils/command/command_template
Lib/distutils/command/config.py
Lib/distutils/command/install.py
Lib/distutils/command/install_data.py
Lib/distutils/command/install_egg_info.py
Lib/distutils/command/install_headers.py
Lib/distutils/command/install_lib.py
Lib/distutils/command/install_scripts.py
Lib/distutils/command/register.py
Lib/distutils/command/sdist.py
Lib/distutils/command/upload.py
Lib/distutils/command/wininst-10.0-amd64.exe
.exe windows x64

aa466c044f0d2d2f6270070fe1bddf7b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comctl32

CreatePropertySheetPageA
PropertySheetA

kernel32

FreeLibrary
SetStdHandle
GetStdHandle
LocalFree
FormatMessageA
GetTempFileNameA
GetTempPathA
GetModuleHandleA
GetVersionExA
ResumeThread
SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
CreateProcessA
GetModuleFileNameA
RemoveDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleFileNameW
SetEndOfFile
CreateFileW
GetFileSize
HeapSize
WriteConsoleW
FlushFileBuffers
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
LCMapStringW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLocaleInfoW
LoadLibraryW
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleCP
SetHandleCount
FatalAppExitA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwindEx
SetFilePointer
ReadFile
DeleteFileA
LoadLibraryA
GetProcAddress
MultiByteToWideChar
lstrlenA
CompareStringW
UnmapViewOfFile
CreateFileA
GetLastError
DosDateTimeToFileTime
SetFileTime
CloseHandle
CreateFileMappingA
MapViewOfFile
GetFileAttributesA
CreateDirectoryA
SetLastError
Sleep
GetProcessHeap
SetEnvironmentVariableA
SetEnvironmentVariableW
WriteFile
HeapDestroy
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
EnterCriticalSection
LeaveCriticalSection
GetDateFormatA
GetTimeFormatA
HeapReAlloc
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
WideCharToMultiByte
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsSetValue
FlsFree
GetCurrentThreadId
FlsAlloc
HeapSetInformation
GetVersion
HeapCreate

user32

wsprintfA
GetFocus
MessageBoxA
SetCursor
GetDlgItem
SendDlgItemMessageA
GetParent
PostMessageA
GetWindowRect
MoveWindow
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
DefWindowProcA
BeginPaint
GetSystemMetrics
EndPaint
TranslateMessage
DispatchMessageA
PeekMessageA
GetDC
ReleaseDC
SendMessageA
SetDlgItemTextA

gdi32

CreateFontA
SelectObject
SetBkMode
TextOutA
SetTextColor
DeleteObject
CreateDIBitmap
CreateSolidBrush

advapi32

RegSetValueExA
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA

shell32

ShellExecuteA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Sections

.text
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lib/distutils/command/wininst-10.0.exe
.exe windows x86

8f2701ffdbdff91f3f18c5e5c24cf9f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreatePropertySheetPageA
PropertySheetA

kernel32

FreeLibrary
SetStdHandle
GetStdHandle
LocalFree
FormatMessageA
GetTempFileNameA
GetTempPathA
GetModuleHandleA
GetVersionExA
ResumeThread
SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
CreateProcessA
GetModuleFileNameA
RemoveDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleFileNameW
SetEndOfFile
CreateFileW
GetFileSize
HeapSize
WriteConsoleW
FlushFileBuffers
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
LCMapStringW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
SetConsoleCtrlHandler
RtlUnwind
GetConsoleMode
GetConsoleCP
SetHandleCount
FatalAppExitA
DeleteCriticalSection
SetFilePointer
ReadFile
DeleteFileA
LoadLibraryA
GetProcAddress
MultiByteToWideChar
lstrlenA
CompareStringW
UnmapViewOfFile
CreateFileA
GetLastError
DosDateTimeToFileTime
SetFileTime
CloseHandle
CreateFileMappingA
MapViewOfFile
GetFileAttributesA
CreateDirectoryA
SetLastError
InitializeCriticalSectionAndSpinCount
GetProcessHeap
Sleep
SetEnvironmentVariableA
SetEnvironmentVariableW
WriteFile
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
EnterCriticalSection
LeaveCriticalSection
GetTimeFormatA
GetDateFormatA
HeapReAlloc
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
WideCharToMultiByte
GetTimeZoneInformation
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
HeapCreate
HeapDestroy

user32

wsprintfA
GetFocus
MessageBoxA
SetCursor
GetDlgItem
SendDlgItemMessageA
GetParent
PostMessageA
GetWindowRect
MoveWindow
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
DefWindowProcA
BeginPaint
GetSystemMetrics
EndPaint
PeekMessageA
TranslateMessage
DispatchMessageA
GetDC
ReleaseDC
SendMessageA
SetDlgItemTextA

gdi32

CreateFontA
SelectObject
SetBkMode
TextOutA
SetTextColor
DeleteObject
CreateDIBitmap
CreateSolidBrush

advapi32

RegSetValueExA
RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueA

shell32

ShellExecuteA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Sections

.text
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lib/distutils/command/wininst-14.0-amd64.exe
.exe windows x64

4d7ee3dbe35baab5e33b9a84e9397818

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comctl32

CreatePropertySheetPageA
PropertySheetA

kernel32

SetThreadPriority
SetFilePointer
ResumeThread
GetModuleHandleA
MultiByteToWideChar
GetTempPathA
GetCurrentThread
LoadLibraryA
DeleteFileA
SetStdHandle
GetProcAddress
LocalFree
GetFileSize
RemoveDirectoryA
FreeLibrary
CreateProcessA
FormatMessageA
GetTempFileNameA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetTempPathW
CreateDirectoryA
GetModuleFileNameW
FlushFileBuffers
SetFilePointerEx
SetEndOfFile
GetFileAttributesExW
SetConsoleCtrlHandler
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExW
FindFirstFileExA
FindClose
CreateThread
WaitForSingleObjectEx
OutputDebugStringW
OutputDebugStringA
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryW
SetCurrentDirectoryW
LoadLibraryExA
GetStdHandle
GetCurrentProcess
SetPriorityClass
GetModuleFileNameA
ReadFile
MapViewOfFile
WriteConsoleW
DosDateTimeToFileTime
CreateFileMappingA
CloseHandle
CreateFileA
GetFileAttributesA
GetLastError
UnmapViewOfFile
lstrlenA
SetFileTime
SetLastError
HeapSize
GetTimeZoneInformation
RaiseException
GetStringTypeW
GetConsoleCP
HeapReAlloc
SetEnvironmentVariableW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
WideCharToMultiByte
GetCommandLineA
GetCommandLineW
CreateFileW
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
WriteFile
ExitProcess
GetModuleHandleExW
GetACP
GetConsoleMode
ReadConsoleW
HeapFree
HeapAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetEnvironmentVariableA

user32

ReleaseDC
BeginPaint
EndPaint
DispatchMessageA
GetWindowRect
GetFocus
LoadCursorA
GetDC
PostMessageA
GetSystemMetrics
wsprintfA
ShowWindow
MessageBoxA
MoveWindow
RegisterClassA
DefWindowProcA
CreateWindowExA
TranslateMessage
SendDlgItemMessageA
SetDlgItemTextA
SendMessageA
SetCursor
GetDlgItem
PeekMessageA
GetParent
UpdateWindow

gdi32

SelectObject
CreateDIBitmap
SetTextColor
TextOutA
SetBkMode
DeleteObject
CreateSolidBrush
CreateFontA

advapi32

RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegQueryValueA
RegSetValueExA
RegEnumKeyExA

shell32

ShellExecuteA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

Sections

.text
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lib/distutils/command/wininst-14.0.exe
.exe windows x86

4a2bd785bc3baf187c17a5e22d660299

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreatePropertySheetPageA
PropertySheetA

kernel32

SetThreadPriority
SetFilePointer
ResumeThread
GetModuleHandleA
MultiByteToWideChar
GetTempPathA
GetCurrentThread
LoadLibraryA
DeleteFileA
SetStdHandle
GetProcAddress
LocalFree
GetFileSize
RemoveDirectoryA
FreeLibrary
CreateProcessA
FormatMessageA
GetTempFileNameA
GetPrivateProfileIntA
GetPrivateProfileStringA
DecodePointer
CreateDirectoryA
GetModuleFileNameW
HeapSize
WriteConsoleW
FlushFileBuffers
SetFilePointerEx
SetEndOfFile
GetFileAttributesExW
SetConsoleCtrlHandler
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExW
FindFirstFileExA
FindClose
CreateThread
WaitForSingleObjectEx
OutputDebugStringW
OutputDebugStringA
GetFullPathNameA
GetFullPathNameW
LoadLibraryExA
GetStdHandle
GetCurrentProcess
SetPriorityClass
GetModuleFileNameA
ReadFile
MapViewOfFile
GetTempPathW
DosDateTimeToFileTime
CreateFileMappingA
CloseHandle
CreateFileA
GetFileAttributesA
GetLastError
UnmapViewOfFile
lstrlenA
SetFileTime
SetLastError
EncodePointer
GetCurrentDirectoryW
RaiseException
SetCurrentDirectoryW
GetTimeZoneInformation
GetStringTypeW
GetConsoleCP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
WideCharToMultiByte
GetCommandLineA
GetCommandLineW
CreateFileW
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
WriteFile
ExitProcess
GetModuleHandleExW
GetACP
GetConsoleMode
ReadConsoleW
HeapFree
HeapAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetEnvironmentVariableA
SetEnvironmentVariableW
HeapReAlloc

user32

ReleaseDC
BeginPaint
EndPaint
DispatchMessageA
GetWindowRect
GetFocus
LoadCursorA
GetDC
PostMessageA
GetSystemMetrics
wsprintfA
ShowWindow
MessageBoxA
MoveWindow
RegisterClassA
DefWindowProcA
CreateWindowExA
TranslateMessage
SendDlgItemMessageA
SetDlgItemTextA
SendMessageA
SetCursor
GetDlgItem
PeekMessageA
GetParent
UpdateWindow

gdi32

SelectObject
CreateDIBitmap
SetTextColor
TextOutA
SetBkMode
DeleteObject
CreateSolidBrush
CreateFontA

advapi32

RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegQueryValueA
RegSetValueExA
RegEnumKeyExA

shell32

ShellExecuteA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

Sections

.text
Size: 359KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lib/distutils/command/wininst-6.0.exe
.exe windows x86

89ad82854409b9dd81837c899d65f03e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoCreateInstance
CoUninitialize

comctl32

PropertySheetA
CreatePropertySheetPageA

kernel32

LocalFree
FormatMessageA
FreeLibrary
GetModuleHandleA
GetVersionExA
DeleteFileA
GetPrivateProfileIntA
GetPrivateProfileStringA
ResumeThread
SetPriorityClass
GetCurrentProcess
GetCurrentThread
MultiByteToWideChar
CreateProcessA
GetModuleFileNameA
RemoveDirectoryA
GetFileSize
GetTempFileNameA
GetTempPathA
LoadLibraryA
GetProcAddress
GetFileAttributesA
GetStartupInfoA
SetLastError
MapViewOfFile
CreateDirectoryA
lstrlenA
UnmapViewOfFile
CreateFileA
GetLastError
DosDateTimeToFileTime
SetFileTime
CloseHandle
CreateFileMappingA
SetThreadPriority

user32

RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
SetCursor
PeekMessageA
TranslateMessage
DispatchMessageA
GetDlgItem
GetWindowRect
MoveWindow
GetDC
ReleaseDC
SendDlgItemMessageA
GetParent
wsprintfA
SetDlgItemTextA
PostMessageA
DefWindowProcA
BeginPaint
GetSystemMetrics
EndPaint
SendMessageA
GetFocus
MessageBoxA

gdi32

SelectObject
TextOutA
CreateDIBitmap
CreateSolidBrush
SetTextColor
CreateFontA
SetBkMode
DeleteObject

advapi32

RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA

shell32

ShellExecuteA

msvcrt

_acmdln
exit
_XcptFilter
_exit
__p___argc
__p___argv
strncmp
fgets
realloc
qsort
__mb_cur_max
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_open
_controlfp
_strcmpi
_strdup
_tempnam
_close
_read
_strnicmp
_isctype
_pctype
strchr
memcpy
memset
strncat
strcat
strlen
strcpy
strcmp
strrchr
fprintf
_vsnprintf
malloc
_snprintf
strncpy
free
sscanf
_putenv
remove
fread
ftell
fseek
fopen
fclose
fflush
freopen
_iob
fwrite
strftime
localtime
time
sprintf
_fstat
strtol

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lib/distutils/command/wininst-7.1.exe
.exe windows x86

c13c1bdb7371583da62542f08c300c96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreatePropertySheetPageA
PropertySheetA

kernel32

GetVersionExA
DeleteFileA
GetPrivateProfileIntA
GetPrivateProfileStringA
ResumeThread
SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
CreateProcessA
GetModuleFileNameA
RemoveDirectoryA
GetFileSize
GetModuleHandleA
GetTempPathA
CreateDirectoryA
GetFileAttributesA
MapViewOfFile
CreateFileMappingA
CloseHandle
SetFileTime
GetStartupInfoA
DosDateTimeToFileTime
GetLastError
CreateFileA
SetLastError
FreeLibrary
FormatMessageA
LocalFree
MultiByteToWideChar
LoadLibraryA
GetProcAddress
lstrlenA
GetTempFileNameA
UnmapViewOfFile

user32

SendMessageA
GetFocus
GetWindowRect
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
SetCursor
PeekMessageA
TranslateMessage
DispatchMessageA
GetDlgItem
MessageBoxA
MoveWindow
GetDC
ReleaseDC
SendDlgItemMessageA
GetParent
wsprintfA
SetDlgItemTextA
PostMessageA
DefWindowProcA
BeginPaint
GetSystemMetrics
EndPaint

gdi32

DeleteObject
TextOutA
SetBkMode
SelectObject
CreateFontA
CreateDIBitmap
CreateSolidBrush
SetTextColor

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegQueryValueA
RegEnumKeyExA

shell32

ShellExecuteA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

msvcr71

_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
_strnicmp
_strcmpi
_strdup
_tempnam
_close
_read
__p___argc
__p___argv
_open
strncmp
fgets
realloc
strchr
memcpy
memset
strncat
strcat
strlen
strcpy
strcmp
strrchr
fprintf
_vsnprintf
malloc
_snprintf
strncpy
free
sscanf
_putenv
remove
fread
ftell
fseek
fopen
fclose
fflush
freopen
_iob
fwrite
strftime
localtime
time
sprintf
_fstat
strtol
_pctype
_isctype
__mb_cur_max
qsort

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lib/distutils/command/wininst-8.0.exe
.exe windows x86

a8070c6ad7600bbdd417216375913d93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreatePropertySheetPageA
PropertySheetA

kernel32

GetTempFileNameA
GetTempPathA
GetModuleHandleA
ResumeThread
SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
CreateProcessA
GetModuleFileNameA
DeleteFileA
RemoveDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
SetLastError
CreateDirectoryA
GetFileAttributesA
GetFileSize
CreateFileA
CreateFileMappingA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
CloseHandle
SetFileTime
DosDateTimeToFileTime
GetLastError
FormatMessageA
LocalFree
FreeLibrary
MultiByteToWideChar
LoadLibraryA
GetProcAddress
lstrlenA
MapViewOfFile
UnmapViewOfFile

user32

MessageBoxA
GetFocus
wsprintfA
SetCursor
GetDlgItem
SendDlgItemMessageA
GetParent
PostMessageA
GetWindowRect
MoveWindow
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
DefWindowProcA
BeginPaint
GetSystemMetrics
EndPaint
PeekMessageA
TranslateMessage
DispatchMessageA
GetDC
ReleaseDC
SendMessageA
SetDlgItemTextA

gdi32

SetBkMode
SetTextColor
DeleteObject
CreateDIBitmap
SelectObject
CreateFontA
CreateSolidBrush
TextOutA

advapi32

RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

msvcr80

_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_strnicmp
_stricmp
_close
_read
_open
_strdup
_crt_debugger_hook
__set_app_type
_encode_pointer
strchr
memcpy
memset
strncat
strcat
strlen
strcpy
_localtime64
_time64
strtol
free
malloc
_putenv
_fstat64i32
fprintf
__iob_func
remove
fread
ftell
fseek
fopen
fclose
fflush
freopen
_snprintf
strncpy
strcmp
strrchr
_vsnprintf
sscanf
fwrite
strftime
sprintf
isspace
qsort
realloc
fgets
strncmp
__argv
__argc
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_tempnam

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lib/distutils/command/wininst-9.0-amd64.exe
.exe windows x64

14cf8f87d7eefee36338756e049a016b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comctl32

CreatePropertySheetPageA
PropertySheetA

kernel32

FreeLibrary
SetStdHandle
GetStdHandle
LocalFree
FormatMessageA
GetTempFileNameA
GetTempPathA
GetModuleHandleA
GetVersionExA
ResumeThread
SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
CreateProcessA
GetModuleFileNameA
RemoveDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleFileNameW
SetEndOfFile
CompareStringA
GetFileSize
GetLocaleInfoW
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
GetConsoleMode
SetFilePointer
ReadFile
DeleteFileA
LoadLibraryA
GetProcAddress
MultiByteToWideChar
lstrlenA
CompareStringW
UnmapViewOfFile
CreateFileA
GetLastError
DosDateTimeToFileTime
SetFileTime
CloseHandle
CreateFileMappingA
MapViewOfFile
GetFileAttributesA
CreateDirectoryA
SetLastError
GetConsoleCP
SetHandleCount
FatalAppExitA
DeleteCriticalSection
GetProcessHeap
RtlUnwindEx
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
EnterCriticalSection
LeaveCriticalSection
GetDateFormatA
GetTimeFormatA
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WideCharToMultiByte
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
TlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
HeapDestroy
WriteFile
SetEnvironmentVariableA
SetEnvironmentVariableW

user32

wsprintfA
GetFocus
ShowWindow
SetCursor
GetDlgItem
SendDlgItemMessageA
GetParent
PostMessageA
GetWindowRect
MoveWindow
LoadCursorA
RegisterClassA
CreateWindowExA
MessageBoxA
UpdateWindow
DefWindowProcA
BeginPaint
GetSystemMetrics
EndPaint
TranslateMessage
DispatchMessageA
PeekMessageA
GetDC
ReleaseDC
SendMessageA
SetDlgItemTextA

gdi32

CreateFontA
SelectObject
SetBkMode
TextOutA
SetTextColor
DeleteObject
CreateDIBitmap
CreateSolidBrush

advapi32

RegDeleteKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueA

shell32

ShellExecuteA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

Sections

.text
Size: 150KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lib/distutils/command/wininst-9.0.exe
.exe windows x86

173236997feb8d32761139de2a616e51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

CreatePropertySheetPageA
PropertySheetA

kernel32

FreeLibrary
SetStdHandle
GetStdHandle
LocalFree
FormatMessageA
GetTempFileNameA
GetTempPathA
GetModuleHandleA
GetVersionExA
ResumeThread
SetPriorityClass
GetCurrentProcess
GetCurrentThread
SetThreadPriority
CreateProcessA
GetModuleFileNameA
RemoveDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleFileNameW
SetEndOfFile
CompareStringA
GetFileSize
GetLocaleInfoW
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
SetConsoleCtrlHandler
SetFilePointer
ReadFile
DeleteFileA
LoadLibraryA
GetProcAddress
MultiByteToWideChar
lstrlenA
CompareStringW
UnmapViewOfFile
CreateFileA
GetLastError
DosDateTimeToFileTime
SetFileTime
CloseHandle
CreateFileMappingA
MapViewOfFile
GetFileAttributesA
CreateDirectoryA
SetLastError
RtlUnwind
GetConsoleMode
GetConsoleCP
GetProcessHeap
SetHandleCount
SetEnvironmentVariableW
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
EnterCriticalSection
LeaveCriticalSection
GetTimeFormatA
GetDateFormatA
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetTimeZoneInformation
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
FatalAppExitA
VirtualAlloc
WriteFile
SetEnvironmentVariableA

user32

wsprintfA
GetFocus
ShowWindow
SetCursor
GetDlgItem
SendDlgItemMessageA
GetParent
PostMessageA
GetWindowRect
MoveWindow
LoadCursorA
RegisterClassA
CreateWindowExA
MessageBoxA
UpdateWindow
DefWindowProcA
BeginPaint
GetSystemMetrics
EndPaint
PeekMessageA
TranslateMessage
DispatchMessageA
GetDC
ReleaseDC
SendMessageA
SetDlgItemTextA

gdi32

CreateFontA
SelectObject
SetBkMode
TextOutA
SetTextColor
DeleteObject
CreateDIBitmap
CreateSolidBrush

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA

shell32

ShellExecuteA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Sections

.text
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lib/distutils/config.py
Lib/distutils/core.py
Lib/distutils/cygwinccompiler.py
Lib/distutils/debug.py
Lib/distutils/dep_util.py
Lib/distutils/dir_util.py
Lib/distutils/dist.py
Lib/distutils/errors.py
Lib/distutils/extension.py
Lib/distutils/fancy_getopt.py
Lib/distutils/file_util.py
Lib/distutils/filelist.py
Lib/distutils/log.py
Lib/distutils/msvc9compiler.py
Lib/distutils/msvccompiler.py
Lib/distutils/spawn.py
Lib/distutils/sysconfig.py
Lib/distutils/tests/Setup.sample
Lib/distutils/tests/__init__.py
Lib/distutils/tests/support.py
Lib/distutils/tests/test_archive_util.py
Lib/distutils/tests/test_bdist.py
Lib/distutils/tests/test_bdist_dumb.py
Lib/distutils/tests/test_bdist_msi.py
Lib/distutils/tests/test_bdist_rpm.py
Lib/distutils/tests/test_bdist_wininst.py
Lib/distutils/tests/test_build.py
Lib/distutils/tests/test_build_clib.py
Lib/distutils/tests/test_build_ext.py
Lib/distutils/tests/test_build_py.py
Lib/distutils/tests/test_build_scripts.py
Lib/distutils/tests/test_check.py
Lib/distutils/tests/test_clean.py
Lib/distutils/tests/test_cmd.py
Lib/distutils/tests/test_config.py
Lib/distutils/tests/test_config_cmd.py
Lib/distutils/tests/test_core.py
Lib/distutils/tests/test_cygwinccompiler.py
Lib/distutils/tests/test_dep_util.py
Lib/distutils/tests/test_dir_util.py
Lib/distutils/tests/test_dist.py
Lib/distutils/tests/test_extension.py
Lib/distutils/tests/test_file_util.py
Lib/distutils/tests/test_filelist.py
Lib/distutils/tests/test_install.py
Lib/distutils/tests/test_install_data.py
Lib/distutils/tests/test_install_headers.py
Lib/distutils/tests/test_install_lib.py
Lib/distutils/tests/test_install_scripts.py
Lib/distutils/tests/test_log.py
Lib/distutils/tests/test_msvc9compiler.py
Lib/distutils/tests/test_msvccompiler.py
Lib/distutils/tests/test_register.py
Lib/distutils/tests/test_sdist.py
Lib/distutils/tests/test_spawn.py
Lib/distutils/tests/test_sysconfig.py
Lib/distutils/tests/test_text_file.py
Lib/distutils/tests/test_unixccompiler.py
Lib/distutils/tests/test_upload.py
Lib/distutils/tests/test_util.py
Lib/distutils/tests/test_version.py
Lib/distutils/tests/test_versionpredicate.py
Lib/distutils/text_file.py
Lib/distutils/unixccompiler.py
Lib/distutils/util.py
Lib/distutils/version.py
Lib/distutils/versionpredicate.py
Lib/doctest.py
Lib/dummy_threading.py
Lib/email/__init__.py
Lib/email/_encoded_words.py
Lib/email/_header_value_parser.py
Lib/email/_parseaddr.py
Lib/email/_policybase.py
Lib/email/architecture.rst
Lib/email/base64mime.py
Lib/email/charset.py
.py .vbs
Lib/email/contentmanager.py
Lib/email/encoders.py
Lib/email/errors.py
Lib/email/feedparser.py
Lib/email/generator.py
Lib/email/header.py
Lib/email/headerregistry.py
Lib/email/iterators.py
Lib/email/message.py
Lib/email/mime/application.py
Lib/email/mime/audio.py
Lib/email/mime/base.py
Lib/email/mime/image.py
Lib/email/mime/message.py
Lib/email/mime/multipart.py
Lib/email/mime/nonmultipart.py
Lib/email/mime/text.py
Lib/email/parser.py
Lib/email/policy.py
Lib/email/quoprimime.py
Lib/email/utils.py
Lib/encodings/__init__.py
Lib/encodings/aliases.py
Lib/encodings/ascii.py
Lib/encodings/base64_codec.py
Lib/encodings/big5.py
Lib/encodings/big5hkscs.py
Lib/encodings/bz2_codec.py
Lib/encodings/charmap.py
Lib/encodings/cp037.py
Lib/encodings/cp1006.py
Lib/encodings/cp1026.py
Lib/encodings/cp1125.py
Lib/encodings/cp1140.py
Lib/encodings/cp1250.py
Lib/encodings/cp1251.py
Lib/encodings/cp1252.py
Lib/encodings/cp1253.py
Lib/encodings/cp1254.py
Lib/encodings/cp1255.py
Lib/encodings/cp1256.py
Lib/encodings/cp1257.py
Lib/encodings/cp1258.py
Lib/encodings/cp273.py
Lib/encodings/cp424.py
Lib/encodings/cp437.py
Lib/encodings/cp500.py
Lib/encodings/cp65001.py
Lib/encodings/cp720.py
Lib/encodings/cp737.py
Lib/encodings/cp775.py
Lib/encodings/cp850.py
Lib/encodings/cp852.py
Lib/encodings/cp855.py
Lib/encodings/cp856.py
Lib/encodings/cp857.py
Lib/encodings/cp858.py
Lib/encodings/cp860.py
Lib/encodings/cp861.py
Lib/encodings/cp862.py
Lib/encodings/cp863.py
Lib/encodings/cp864.py
Lib/encodings/cp865.py
Lib/encodings/cp866.py
Lib/encodings/cp869.py
Lib/encodings/cp874.py
Lib/encodings/cp875.py
Lib/encodings/cp932.py
Lib/encodings/cp949.py
Lib/encodings/cp950.py
Lib/encodings/euc_jis_2004.py
Lib/encodings/euc_jisx0213.py
Lib/encodings/euc_jp.py
Lib/encodings/euc_kr.py
Lib/encodings/gb18030.py
Lib/encodings/gb2312.py
Lib/encodings/gbk.py
Lib/encodings/hex_codec.py
Lib/encodings/hp_roman8.py
Lib/encodings/hz.py
Lib/encodings/idna.py
Lib/encodings/iso2022_jp.py
Lib/encodings/iso2022_jp_1.py
Lib/encodings/iso2022_jp_2.py
Lib/encodings/iso2022_jp_2004.py
Lib/encodings/iso2022_jp_3.py
Lib/encodings/iso2022_jp_ext.py
Lib/encodings/iso2022_kr.py
Lib/encodings/iso8859_1.py
Lib/encodings/iso8859_10.py
Lib/encodings/iso8859_11.py
Lib/encodings/iso8859_13.py
Lib/encodings/iso8859_14.py
Lib/encodings/iso8859_15.py
Lib/encodings/iso8859_16.py
Lib/encodings/iso8859_2.py
Lib/encodings/iso8859_3.py
Lib/encodings/iso8859_4.py
Lib/encodings/iso8859_5.py
Lib/encodings/iso8859_6.py
Lib/encodings/iso8859_7.py
Lib/encodings/iso8859_8.py
Lib/encodings/iso8859_9.py
Lib/encodings/johab.py
Lib/encodings/koi8_r.py
Lib/encodings/koi8_t.py
Lib/encodings/koi8_u.py
Lib/encodings/kz1048.py
Lib/encodings/latin_1.py
Lib/encodings/mac_arabic.py
Lib/encodings/mac_centeuro.py
Lib/encodings/mac_croatian.py
Lib/encodings/mac_cyrillic.py
Lib/encodings/mac_farsi.py
Lib/encodings/mac_greek.py
Lib/encodings/mac_iceland.py
Lib/encodings/mac_latin2.py
Lib/encodings/mac_roman.py
Lib/encodings/mac_romanian.py
Lib/encodings/mac_turkish.py
Lib/encodings/mbcs.py
Lib/encodings/oem.py
Lib/encodings/palmos.py
Lib/encodings/ptcp154.py
Lib/encodings/punycode.py
Lib/encodings/quopri_codec.py
Lib/encodings/raw_unicode_escape.py
Lib/encodings/rot_13.py
.py .sh linux
Lib/encodings/shift_jis.py
Lib/encodings/shift_jis_2004.py
Lib/encodings/shift_jisx0213.py
Lib/encodings/tis_620.py
Lib/encodings/undefined.py
Lib/encodings/unicode_escape.py
Lib/encodings/unicode_internal.py
Lib/encodings/utf_16.py
Lib/encodings/utf_16_be.py
Lib/encodings/utf_16_le.py
Lib/encodings/utf_32.py
Lib/encodings/utf_32_be.py
Lib/encodings/utf_32_le.py
Lib/encodings/utf_7.py
Lib/encodings/utf_8.py
Lib/encodings/utf_8_sig.py
Lib/encodings/uu_codec.py
Lib/encodings/zlib_codec.py
Lib/enum.py
Lib/filecmp.py
Lib/fileinput.py
Lib/fnmatch.py
Lib/formatter.py
Lib/fractions.py
Lib/ftplib.py
.py .js
Lib/functools.py
Lib/genericpath.py
Lib/getopt.py
Lib/getpass.py
Lib/gettext.py
Lib/glob.py
Lib/gzip.py
Lib/hashlib.py
Lib/heapq.py
Lib/hmac.py
Lib/html/__init__.py
Lib/html/entities.py
Lib/html/parser.py
Lib/http/__init__.py
Lib/http/client.py
Lib/http/cookiejar.py
.py .vbs
Lib/http/cookies.py
.py .js
Lib/http/server.py
Lib/imaplib.py
Lib/imghdr.py
Lib/imp.py
Lib/importlib/__init__.py
Lib/importlib/_bootstrap.py
Lib/importlib/_bootstrap_external.py
Lib/importlib/abc.py
Lib/importlib/machinery.py
Lib/importlib/util.py
Lib/inspect.py
Lib/io.py
Lib/ipaddress.py
Lib/json/__init__.py
Lib/json/decoder.py
Lib/json/encoder.py
Lib/json/scanner.py
Lib/json/tool.py
Lib/keyword.py
Lib/linecache.py
Lib/locale.py
Lib/logging/__init__.py
Lib/logging/config.py
Lib/logging/handlers.py
.py .js
Lib/lzma.py
Lib/macpath.py
Lib/macurl2path.py
Lib/mailbox.py
Lib/mailcap.py
Lib/mimetypes.py
Lib/modulefinder.py
Lib/msilib/__init__.py
Lib/msilib/schema.py
Lib/msilib/sequence.py
Lib/msilib/text.py
Lib/multiprocessing/__init__.py
Lib/multiprocessing/connection.py
Lib/multiprocessing/context.py
Lib/multiprocessing/dummy/__init__.py
Lib/multiprocessing/dummy/connection.py
Lib/multiprocessing/forkserver.py
Lib/multiprocessing/heap.py
Lib/multiprocessing/managers.py
.py .js
Lib/multiprocessing/pool.py
Lib/multiprocessing/popen_fork.py
Lib/multiprocessing/popen_forkserver.py
Lib/multiprocessing/popen_spawn_posix.py
Lib/multiprocessing/popen_spawn_win32.py
Lib/multiprocessing/process.py
Lib/multiprocessing/queues.py
Lib/multiprocessing/reduction.py
Lib/multiprocessing/resource_sharer.py
Lib/multiprocessing/semaphore_tracker.py
Lib/multiprocessing/sharedctypes.py
Lib/multiprocessing/spawn.py
Lib/multiprocessing/synchronize.py
Lib/multiprocessing/util.py
Lib/netrc.py
Lib/nntplib.py
Lib/ntpath.py
Lib/nturl2path.py
Lib/numbers.py
Lib/opcode.py
Lib/operator.py
Lib/optparse.py
Lib/os.py
Lib/pathlib.py
Lib/pdb.py
.py .js
Lib/pickle.py
Lib/pickletools.py
Lib/pipes.py
Lib/pkgutil.py
Lib/platform.py
.py .sh linux
Lib/plistlib.py
Lib/poplib.py
Lib/posixpath.py
Lib/pprint.py
Lib/profile.py
Lib/pstats.py
Lib/pty.py
Lib/py_compile.py
Lib/pyclbr.py
.py .js
Lib/pydoc.py
.py .sh linux
Lib/pydoc_data/_pydoc.css
Lib/pydoc_data/topics.py
Lib/queue.py
Lib/quopri.py
Lib/random.py
Lib/re.py
Lib/reprlib.py
Lib/rlcompleter.py
Lib/runpy.py
Lib/sched.py
Lib/secrets.py
Lib/selectors.py
Lib/shelve.py
Lib/shlex.py
Lib/shutil.py
Lib/signal.py
Lib/site-packages/README.txt
Lib/site.py
Lib/smtpd.py
Lib/smtplib.py
Lib/sndhdr.py
Lib/socket.py
.py .js
Lib/socketserver.py
.py .js
Lib/sre_compile.py
Lib/sre_constants.py
Lib/sre_parse.py
Lib/ssl.py
.py .js
Lib/stat.py
Lib/statistics.py
Lib/string.py
Lib/stringprep.py
Lib/struct.py
Lib/subprocess.py
Lib/sunau.py
Lib/symbol.py
Lib/symtable.py
Lib/sysconfig.py
Lib/tabnanny.py
Lib/tarfile.py
.py .sh linux
Lib/telnetlib.py
Lib/tempfile.py
Lib/textwrap.py
Lib/this.py
Lib/threading.py
Lib/timeit.py
Lib/token.py
Lib/tokenize.py
Lib/trace.py
.py .sh linux
Lib/traceback.py
Lib/tracemalloc.py
Lib/tty.py
Lib/turtle.py
Lib/types.py
Lib/typing.py
Lib/urllib/error.py
Lib/urllib/parse.py
Lib/urllib/request.py
.py .js
Lib/urllib/response.py
Lib/urllib/robotparser.py
Lib/uu.py
Lib/uuid.py
Lib/venv/__init__.py
Lib/venv/__main__.py
Lib/venv/scripts/common/activate
Lib/venv/scripts/nt/Activate.ps1
.ps1
Lib/venv/scripts/nt/activate.bat
.bat .vbs
Lib/venv/scripts/nt/deactivate.bat
Lib/venv/scripts/posix/activate.csh
.vbs
Lib/venv/scripts/posix/activate.fish
Lib/warnings.py
Lib/wave.py
Lib/weakref.py
Lib/webbrowser.py
Lib/wsgiref/__init__.py
Lib/wsgiref/handlers.py
Lib/wsgiref/headers.py
Lib/wsgiref/simple_server.py
Lib/wsgiref/util.py
Lib/wsgiref/validate.py
Lib/xdrlib.py
Lib/xml/__init__.py
Lib/xml/dom/NodeFilter.py
Lib/xml/dom/__init__.py
Lib/xml/dom/domreg.py
Lib/xml/dom/expatbuilder.py
Lib/xml/dom/minicompat.py
Lib/xml/dom/minidom.py
Lib/xml/dom/pulldom.py
Lib/xml/dom/xmlbuilder.py
Lib/xml/etree/ElementInclude.py
Lib/xml/etree/ElementPath.py
Lib/xml/etree/ElementTree.py
Lib/xml/etree/__init__.py
Lib/xml/etree/cElementTree.py
Lib/xml/parsers/__init__.py
Lib/xml/parsers/expat.py
Lib/xml/sax/__init__.py
Lib/xml/sax/_exceptions.py
Lib/xml/sax/expatreader.py
Lib/xml/sax/handler.py
Lib/xml/sax/saxutils.py
Lib/xml/sax/xmlreader.py
Lib/xmlrpc/__init__.py
Lib/xmlrpc/client.py
Lib/xmlrpc/server.py
Lib/zipapp.py
Lib/zipfile.py
ins.py
python3.dll
.dll windows x86

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

34:a2:b2:fa:f0:d7:21:3c:56:fb:06:3c:f2:64:b5:93:6c:c5:df:8b:18:85:b8:3d:44:ef:eb:e0:cd:72:6c:e6
Signer

Actual PE Digest

34:a2:b2:fa:f0:d7:21:3c:56:fb:06:3c:f2:64:b5:93:6c:c5:df:8b:18:85:b8:3d:44:ef:eb:e0:cd:72:6c:e6

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

PyArg_Parse
PyArg_ParseTuple
PyArg_ParseTupleAndKeywords
PyArg_UnpackTuple
PyArg_VaParse
PyArg_VaParseTupleAndKeywords
PyArg_ValidateKeywordArguments
PyBaseObject_Type
PyBool_FromLong
PyBool_Type
PyByteArrayIter_Type
PyByteArray_AsString
PyByteArray_Concat
PyByteArray_FromObject
PyByteArray_FromStringAndSize
PyByteArray_Resize
PyByteArray_Size
PyByteArray_Type
PyBytesIter_Type
PyBytes_AsString
PyBytes_AsStringAndSize
PyBytes_Concat
PyBytes_ConcatAndDel
PyBytes_DecodeEscape
PyBytes_FromFormat
PyBytes_FromFormatV
PyBytes_FromObject
PyBytes_FromString
PyBytes_FromStringAndSize
PyBytes_Repr
PyBytes_Size
PyBytes_Type
PyCFunction_Call
PyCFunction_ClearFreeList
PyCFunction_GetFlags
PyCFunction_GetFunction
PyCFunction_GetSelf
PyCFunction_New
PyCFunction_NewEx
PyCFunction_Type
PyCallIter_New
PyCallIter_Type
PyCallable_Check
PyCapsule_GetContext
PyCapsule_GetDestructor
PyCapsule_GetName
PyCapsule_GetPointer
PyCapsule_Import
PyCapsule_IsValid
PyCapsule_New
PyCapsule_SetContext
PyCapsule_SetDestructor
PyCapsule_SetName
PyCapsule_SetPointer
PyCapsule_Type
PyClassMethodDescr_Type
PyCodec_BackslashReplaceErrors
PyCodec_Decode
PyCodec_Decoder
PyCodec_Encode
PyCodec_Encoder
PyCodec_IgnoreErrors
PyCodec_IncrementalDecoder
PyCodec_IncrementalEncoder
PyCodec_KnownEncoding
PyCodec_LookupError
PyCodec_NameReplaceErrors
PyCodec_Register
PyCodec_RegisterError
PyCodec_ReplaceErrors
PyCodec_StreamReader
PyCodec_StreamWriter
PyCodec_StrictErrors
PyCodec_XMLCharRefReplaceErrors
PyComplex_FromDoubles
PyComplex_ImagAsDouble
PyComplex_RealAsDouble
PyComplex_Type
PyDescr_NewClassMethod
PyDescr_NewGetSet
PyDescr_NewMember
PyDescr_NewMethod
PyDictItems_Type
PyDictIterItem_Type
PyDictIterKey_Type
PyDictIterValue_Type
PyDictKeys_Type
PyDictProxy_New
PyDictProxy_Type
PyDictValues_Type
PyDict_Clear
PyDict_Contains
PyDict_Copy
PyDict_DelItem
PyDict_DelItemString
PyDict_GetItem
PyDict_GetItemString
PyDict_GetItemWithError
PyDict_Items
PyDict_Keys
PyDict_Merge
PyDict_MergeFromSeq2
PyDict_New
PyDict_Next
PyDict_SetItem
PyDict_SetItemString
PyDict_Size
PyDict_Type
PyDict_Update
PyDict_Values
PyEllipsis_Type
PyEnum_Type
PyErr_BadArgument
PyErr_BadInternalCall
PyErr_CheckSignals
PyErr_Clear
PyErr_Display
PyErr_ExceptionMatches
PyErr_Fetch
PyErr_Format
PyErr_FormatV
PyErr_GetExcInfo
PyErr_GivenExceptionMatches
PyErr_NewException
PyErr_NewExceptionWithDoc
PyErr_NoMemory
PyErr_NormalizeException
PyErr_Occurred
PyErr_Print
PyErr_PrintEx
PyErr_ProgramText
PyErr_ResourceWarning
PyErr_Restore
PyErr_SetExcFromWindowsErr
PyErr_SetExcFromWindowsErrWithFilename
PyErr_SetExcFromWindowsErrWithFilenameObject
PyErr_SetExcFromWindowsErrWithFilenameObjects
PyErr_SetExcInfo
PyErr_SetFromErrno
PyErr_SetFromErrnoWithFilename
PyErr_SetFromErrnoWithFilenameObject
PyErr_SetFromErrnoWithFilenameObjects
PyErr_SetFromWindowsErr
PyErr_SetFromWindowsErrWithFilename
PyErr_SetImportError
PyErr_SetImportErrorSubclass
PyErr_SetInterrupt
PyErr_SetNone
PyErr_SetObject
PyErr_SetString
PyErr_SyntaxLocation
PyErr_SyntaxLocationEx
PyErr_WarnEx
PyErr_WarnExplicit
PyErr_WarnFormat
PyErr_WriteUnraisable
PyEval_AcquireLock
PyEval_AcquireThread
PyEval_CallFunction
PyEval_CallMethod
PyEval_CallObjectWithKeywords
PyEval_EvalCode
PyEval_EvalCodeEx
PyEval_EvalFrame
PyEval_EvalFrameEx
PyEval_GetBuiltins
PyEval_GetCallStats
PyEval_GetFrame
PyEval_GetFuncDesc
PyEval_GetFuncName
PyEval_GetGlobals
PyEval_GetLocals
PyEval_InitThreads
PyEval_ReInitThreads
PyEval_ReleaseLock
PyEval_ReleaseThread
PyEval_RestoreThread
PyEval_SaveThread
PyEval_ThreadsInitialized
PyExc_ArithmeticError
PyExc_AssertionError
PyExc_AttributeError
PyExc_BaseException
PyExc_BlockingIOError
PyExc_BrokenPipeError
PyExc_BufferError
PyExc_BytesWarning
PyExc_ChildProcessError
PyExc_ConnectionAbortedError
PyExc_ConnectionError
PyExc_ConnectionRefusedError
PyExc_ConnectionResetError
PyExc_DeprecationWarning
PyExc_EOFError
PyExc_EnvironmentError
PyExc_Exception
PyExc_FileExistsError
PyExc_FileNotFoundError
PyExc_FloatingPointError
PyExc_FutureWarning
PyExc_GeneratorExit
PyExc_IOError
PyExc_ImportError
PyExc_ImportWarning
PyExc_IndentationError
PyExc_IndexError
PyExc_InterruptedError
PyExc_IsADirectoryError
PyExc_KeyError
PyExc_KeyboardInterrupt
PyExc_LookupError
PyExc_MemoryError
PyExc_ModuleNotFoundError
PyExc_NameError
PyExc_NotADirectoryError
PyExc_NotImplementedError
PyExc_OSError
PyExc_OverflowError
PyExc_PendingDeprecationWarning
PyExc_PermissionError
PyExc_ProcessLookupError
PyExc_RecursionError
PyExc_RecursionErrorInst
PyExc_ReferenceError
PyExc_ResourceWarning
PyExc_RuntimeError
PyExc_RuntimeWarning
PyExc_StopAsyncIteration
PyExc_StopIteration
PyExc_SyntaxError
PyExc_SyntaxWarning
PyExc_SystemError
PyExc_SystemExit
PyExc_TabError
PyExc_TimeoutError
PyExc_TypeError
PyExc_UnboundLocalError
PyExc_UnicodeDecodeError
PyExc_UnicodeEncodeError
PyExc_UnicodeError
PyExc_UnicodeTranslateError
PyExc_UnicodeWarning
PyExc_UserWarning
PyExc_ValueError
PyExc_Warning
PyExc_WindowsError
PyExc_ZeroDivisionError
PyException_GetCause
PyException_GetContext
PyException_GetTraceback
PyException_SetCause
PyException_SetContext
PyException_SetTraceback
PyFile_FromFd
PyFile_GetLine
PyFile_WriteObject
PyFile_WriteString
PyFilter_Type
PyFloat_AsDouble
PyFloat_FromDouble
PyFloat_FromString
PyFloat_GetInfo
PyFloat_GetMax
PyFloat_GetMin
PyFloat_Type
PyFrozenSet_New
PyFrozenSet_Type
PyGC_Collect
PyGILState_Ensure
PyGILState_GetThisThreadState
PyGILState_Release
PyGetSetDescr_Type
PyImport_AddModule
PyImport_AddModuleObject
PyImport_AppendInittab
PyImport_Cleanup
PyImport_ExecCodeModule
PyImport_ExecCodeModuleEx
PyImport_ExecCodeModuleObject
PyImport_ExecCodeModuleWithPathnames
PyImport_GetImporter
PyImport_GetMagicNumber
PyImport_GetMagicTag
PyImport_GetModuleDict
PyImport_Import
PyImport_ImportFrozenModule
PyImport_ImportFrozenModuleObject
PyImport_ImportModule
PyImport_ImportModuleLevel
PyImport_ImportModuleLevelObject
PyImport_ImportModuleNoBlock
PyImport_ReloadModule
PyInterpreterState_Clear
PyInterpreterState_Delete
PyInterpreterState_New
PyIter_Next
PyListIter_Type
PyListRevIter_Type
PyList_Append
PyList_AsTuple
PyList_GetItem
PyList_GetSlice
PyList_Insert
PyList_New
PyList_Reverse
PyList_SetItem
PyList_SetSlice
PyList_Size
PyList_Sort
PyList_Type
PyLongRangeIter_Type
PyLong_AsDouble
PyLong_AsLong
PyLong_AsLongAndOverflow
PyLong_AsLongLong
PyLong_AsLongLongAndOverflow
PyLong_AsSize_t
PyLong_AsSsize_t
PyLong_AsUnsignedLong
PyLong_AsUnsignedLongLong
PyLong_AsUnsignedLongLongMask
PyLong_AsUnsignedLongMask
PyLong_AsVoidPtr
PyLong_FromDouble
PyLong_FromLong
PyLong_FromLongLong
PyLong_FromSize_t
PyLong_FromSsize_t
PyLong_FromString
PyLong_FromUnsignedLong
PyLong_FromUnsignedLongLong
PyLong_FromVoidPtr
PyLong_GetInfo
PyLong_Type
PyMap_Type
PyMapping_Check
PyMapping_GetItemString
PyMapping_HasKey
PyMapping_HasKeyString
PyMapping_Items
PyMapping_Keys
PyMapping_Length
PyMapping_SetItemString
PyMapping_Size
PyMapping_Values
PyMem_Calloc
PyMem_Free
PyMem_Malloc
PyMem_Realloc
PyMemberDescr_Type
PyMemoryView_FromMemory
PyMemoryView_FromObject
PyMemoryView_GetContiguous
PyMemoryView_Type
PyMethodDescr_Type
PyModuleDef_Init
PyModuleDef_Type
PyModule_AddFunctions
PyModule_AddIntConstant
PyModule_AddObject
PyModule_AddStringConstant
PyModule_Create2
PyModule_ExecDef
PyModule_FromDefAndSpec2
PyModule_GetDef
PyModule_GetDict
PyModule_GetFilename
PyModule_GetFilenameObject
PyModule_GetName
PyModule_GetNameObject
PyModule_GetState
PyModule_New
PyModule_NewObject
PyModule_SetDocString
PyModule_Type
PyNullImporter_Type
PyNumber_Absolute
PyNumber_Add
PyNumber_And
PyNumber_AsSsize_t
PyNumber_Check
PyNumber_Divmod
PyNumber_Float
PyNumber_FloorDivide
PyNumber_InPlaceAdd
PyNumber_InPlaceAnd
PyNumber_InPlaceFloorDivide
PyNumber_InPlaceLshift
PyNumber_InPlaceMatrixMultiply
PyNumber_InPlaceMultiply
PyNumber_InPlaceOr
PyNumber_InPlacePower
PyNumber_InPlaceRemainder
PyNumber_InPlaceRshift
PyNumber_InPlaceSubtract
PyNumber_InPlaceTrueDivide
PyNumber_InPlaceXor
PyNumber_Index
PyNumber_Invert
PyNumber_Long
PyNumber_Lshift
PyNumber_MatrixMultiply
PyNumber_Multiply
PyNumber_Negative
PyNumber_Or
PyNumber_Positive
PyNumber_Power
PyNumber_Remainder
PyNumber_Rshift
PyNumber_Subtract
PyNumber_ToBase
PyNumber_TrueDivide
PyNumber_Xor
PyODictItems_Type
PyODictIter_Type
PyODictKeys_Type
PyODictValues_Type
PyODict_DelItem
PyODict_New
PyODict_SetItem
PyODict_Type
PyOS_AfterFork
PyOS_CheckStack
PyOS_FSPath
PyOS_InitInterrupts
PyOS_InputHook
PyOS_InterruptOccurred
PyOS_ReadlineFunctionPointer
PyOS_double_to_string
PyOS_getsig
PyOS_mystricmp
PyOS_mystrnicmp
PyOS_setsig
PyOS_snprintf
PyOS_string_to_double
PyOS_strtol
PyOS_strtoul
PyOS_vsnprintf
PyObject_ASCII
PyObject_AsCharBuffer
PyObject_AsFileDescriptor
PyObject_AsReadBuffer
PyObject_AsWriteBuffer
PyObject_Bytes
PyObject_Call
PyObject_CallFunction
PyObject_CallFunctionObjArgs
PyObject_CallMethod
PyObject_CallMethodObjArgs
PyObject_CallObject
PyObject_Calloc
PyObject_CheckReadBuffer
PyObject_ClearWeakRefs
PyObject_DelItem
PyObject_DelItemString
PyObject_Dir
PyObject_Format
PyObject_Free
PyObject_GC_Del
PyObject_GC_Track
PyObject_GC_UnTrack
PyObject_GenericGetAttr
PyObject_GenericSetAttr
PyObject_GenericSetDict
PyObject_GetAttr
PyObject_GetAttrString
PyObject_GetItem
PyObject_GetIter
PyObject_HasAttr
PyObject_HasAttrString
PyObject_Hash
PyObject_HashNotImplemented
PyObject_Init
PyObject_InitVar
PyObject_IsInstance
PyObject_IsSubclass
PyObject_IsTrue
PyObject_Length
PyObject_Malloc
PyObject_Not
PyObject_Realloc
PyObject_Repr
PyObject_RichCompare
PyObject_RichCompareBool
PyObject_SelfIter
PyObject_SetAttr
PyObject_SetAttrString
PyObject_SetItem
PyObject_Size
PyObject_Str
PyObject_Type
PyParser_SimpleParseFileFlags
PyParser_SimpleParseStringFlags
PyParser_SimpleParseStringFlagsFilename
PyProperty_Type
PyRangeIter_Type
PyRange_Type
PyReversed_Type
PySeqIter_New
PySeqIter_Type

Sections

.text
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
python36.dll
.dll windows x86

a90609ee973c8ba5f091fd392ba83911

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

f3:fe:7a:69:a2:a9:00:d3:5e:59:45:79:db:42:1f:f1:c3:e0:11:ce:3b:a0:b7:8e:02:3a:b9:2c:00:b9:6b:3f
Signer

Actual PE Digest

f3:fe:7a:69:a2:a9:00:d3:5e:59:45:79:db:42:1f:f1:c3:e0:11:ce:3b:a0:b7:8e:02:3a:b9:2c:00:b9:6b:3f

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:15
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

shlwapi

PathCombineW

ws2_32

send
getsockopt
WSAGetLastError

kernel32

GetSystemInfo
CreateFileMappingA
GetFileSize
MapViewOfFile
CreateDirectoryW
FindFirstFileW
Process32First
SetHandleInformation
GetConsoleScreenBufferInfo
SetLastError
GetHandleInformation
GetFullPathNameW
FindNextFileW
GetStdHandle
DeviceIoControl
TerminateProcess
RemoveDirectoryW
GetFinalPathNameByHandleW
SetFileTime
SetEnvironmentVariableW
CreatePipe
CreateHardLinkW
FindClose
GetVolumePathNameW
CreateFileW
GetFileAttributesW
OpenProcess
SetFileAttributesW
CreateToolhelp32Snapshot
GetFileInformationByHandle
GetFileAttributesExW
GetDiskFreeSpaceExW
DeleteFileW
Process32Next
LoadLibraryW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetProcAddress
MoveFileExW
GetModuleHandleW
GetSystemTimeAsFileTime
GetProcessTimes
GenerateConsoleCtrlEvent
SetEvent
CreateEventA
Sleep
WaitForSingleObjectEx
ResetEvent
MultiByteToWideChar
CloseHandle
ReadConsoleW
WriteConsoleW
GetNumberOfConsoleInputEvents
WideCharToMultiByte
GetStringTypeW
ReadFile
CancelIo
SetNamedPipeHandleState
WaitNamedPipeA
CreateNamedPipeA
WriteFile
GetModuleFileNameW
WaitForMultipleObjects
PeekNamedPipe
WaitForSingleObject
GetModuleHandleA
GetVersion
CreateFileA
GetOverlappedResult
ExitProcess
CreateProcessW
ConnectNamedPipe
GetExitCodeProcess
VirtualFree
VirtualAlloc
ExpandEnvironmentStringsW
LoadLibraryExW
EnterCriticalSection
ReleaseSemaphore
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateSemaphoreA
FormatMessageW
FreeLibrary
LocalFree
GetConsoleOutputCP
GetConsoleCP
GetFileType
OutputDebugStringW
GetSystemTimeAdjustment
GetTickCount64
GetVersionExA
TlsSetValue
HeapFree
FlushViewOfFile
TlsAlloc
HeapAlloc
GetProcessHeap
TlsGetValue
TlsFree
GetTickCount
GetLastError
DuplicateHandle
UnmapViewOfFile
SetEndOfFile
SetFilePointer
GetCurrentProcess
AddVectoredExceptionHandler
RaiseException
SetErrorMode
RemoveVectoredExceptionHandler
QueryPerformanceCounter
QueryPerformanceFrequency
GetACP
GetLocaleInfoA
GetCurrentProcessId
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetConsoleMode
GetCurrentThreadId

advapi32

CryptReleaseContext
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueW
CryptAcquireContextA
RegFlushKey
RegCreateKeyExW
RegSaveKeyW
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyA
RegLoadKeyW
RegOpenKeyExW
RegCreateKeyW
RegConnectRegistryW
RegDeleteValueW
RegEnumValueW
RegQueryValueExW
RegSetValueW
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
GetUserNameW
CryptGenRandom
RegCloseKey

vcruntime140

wcsrchr
memmove
memset
strchr
memchr
wcschr
memcpy
strrchr
__std_type_info_destroy_list
_except_handler4_common

api-ms-win-crt-math-l1-1-0

sinh
asin
acos
fabs
tan
exp
sin
tanh
sqrt
cosh
atan
_finite
cos
_fdopen
frexp
_CItan
ceil
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
round
_CIlog
_CIlog10
modf
hypot
ldexp
_CItanh
_CIpow
_CIsin
_CIsinh
_copysign
_isnan
floor
_CIsqrt

api-ms-win-crt-locale-l1-1-0

localeconv
setlocale

api-ms-win-crt-string-l1-1-0

_strdup
wcsxfrm
wcscoll
wcsncpy_s
toupper
_wcsicmp
wcsncmp
tolower
strncpy
isdigit
strncmp
wcscat_s
wcstok_s
wcsnlen
isxdigit
wcscpy_s
isalpha
wcsncpy
isalnum

api-ms-win-crt-runtime-l1-1-0

__control87_2
_getpid
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
raise
_exit
signal
_set_abort_behavior
exit
__fpe_flt_rounds
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_invalid_parameter_noinfo
_beginthreadex
_endthreadex
_resetstkoflw
abort
_set_thread_local_invalid_parameter_handler
strerror
__sys_nerr
__sys_errlist
_errno
_register_onexit_function
_wsystem
_initialize_onexit_table

api-ms-win-crt-convert-l1-1-0

strtol
strtoul
atoi
wcstombs
mbstowcs

api-ms-win-crt-time-l1-1-0

clock
__daylight
__tzname
_mktime64
strftime
__timezone
_gmtime64_s
_localtime64_s
_tzset
_time64

api-ms-win-crt-stdio-l1-1-0

_open_osfhandle
fopen
_commit
_wfopen
ungetc
setvbuf
_get_osfhandle
_kbhit
rewind
fputs
_setmode
__stdio_common_vfprintf
getc
fclose
feof
fgets
fseek
__acrt_iob_func
ftell
fflush
ferror
fputc
fwrite
clearerr
_isatty
_fileno
_lseek
_dup2
_wopen
_getcwd
_close
__stdio_common_vsprintf
fread
_locking
_open
_read
_dup
_write
_lseeki64
_chsize_s

api-ms-win-crt-environment-l1-1-0

_wputenv
_wgetcwd
getenv
_wgetenv
__p__wenviron

api-ms-win-crt-process-l1-1-0

_cwait
_wexecve
_wspawnv
_wspawnve
_wexecv

api-ms-win-crt-heap-l1-1-0

malloc
_heapmin
calloc
free
realloc

api-ms-win-crt-conio-l1-1-0

_getch
_getwche
_getwch
_ungetwch
_putch
_putwch
_getche
_ungetch

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32
_umask

Exports

Exports

PyAST_Compile
PyAST_CompileEx
PyAST_CompileObject
PyAST_FromNode
PyAST_FromNodeObject
PyAST_Validate
PyArena_AddPyObject
PyArena_Free
PyArena_Malloc
PyArena_New
PyArg_Parse
PyArg_ParseTuple
PyArg_ParseTupleAndKeywords
PyArg_UnpackTuple
PyArg_VaParse
PyArg_VaParseTupleAndKeywords
PyArg_ValidateKeywordArguments
PyAsyncGen_Fini
PyAsyncGen_New
PyAsyncGen_Type
PyBaseObject_Type
PyBool_FromLong
PyBool_Type
PyBuffer_FillContiguousStrides
PyBuffer_FillInfo
PyBuffer_FromContiguous
PyBuffer_GetPointer
PyBuffer_IsContiguous
PyBuffer_Release
PyBuffer_ToContiguous
PyByteArrayIter_Type
PyByteArray_AsString
PyByteArray_Concat
PyByteArray_Fini
PyByteArray_FromObject
PyByteArray_FromStringAndSize
PyByteArray_Init
PyByteArray_Resize
PyByteArray_Size
PyByteArray_Type
PyBytesIter_Type
PyBytes_AsString
PyBytes_AsStringAndSize
PyBytes_Concat
PyBytes_ConcatAndDel
PyBytes_DecodeEscape
PyBytes_Fini
PyBytes_FromFormat
PyBytes_FromFormatV
PyBytes_FromObject
PyBytes_FromString
PyBytes_FromStringAndSize
PyBytes_Repr
PyBytes_Size
PyBytes_Type
PyCFunction_Call
PyCFunction_ClearFreeList
PyCFunction_Fini
PyCFunction_GetFlags
PyCFunction_GetFunction
PyCFunction_GetSelf
PyCFunction_New
PyCFunction_NewEx
PyCFunction_Type
PyCallIter_New
PyCallIter_Type
PyCallable_Check
PyCapsule_GetContext
PyCapsule_GetDestructor
PyCapsule_GetName
PyCapsule_GetPointer
PyCapsule_Import
PyCapsule_IsValid
PyCapsule_New
PyCapsule_SetContext
PyCapsule_SetDestructor
PyCapsule_SetName
PyCapsule_SetPointer
PyCapsule_Type
PyCell_Get
PyCell_New
PyCell_Set
PyCell_Type
PyClassMethodDescr_Type
PyClassMethod_New
PyClassMethod_Type
PyCode_Addr2Line
PyCode_New
PyCode_NewEmpty
PyCode_Optimize
PyCode_Type
PyCodec_BackslashReplaceErrors
PyCodec_Decode
PyCodec_Decoder
PyCodec_Encode
PyCodec_Encoder
PyCodec_IgnoreErrors
PyCodec_IncrementalDecoder
PyCodec_IncrementalEncoder
PyCodec_KnownEncoding
PyCodec_LookupError
PyCodec_NameReplaceErrors
PyCodec_Register
PyCodec_RegisterError
PyCodec_ReplaceErrors
PyCodec_StreamReader
PyCodec_StreamWriter
PyCodec_StrictErrors
PyCodec_XMLCharRefReplaceErrors
PyCompile_OpcodeStackEffect
PyComplex_AsCComplex
PyComplex_FromCComplex
PyComplex_FromDoubles
PyComplex_ImagAsDouble
PyComplex_RealAsDouble
PyComplex_Type
PyCoro_New
PyCoro_Type
PyDescr_NewClassMethod
PyDescr_NewGetSet
PyDescr_NewMember
PyDescr_NewMethod
PyDescr_NewWrapper
PyDictItems_Type
PyDictIterItem_Type
PyDictIterKey_Type
PyDictIterValue_Type
PyDictKeys_Type
PyDictProxy_New
PyDictProxy_Type
PyDictValues_Type
PyDict_Clear
PyDict_ClearFreeList
PyDict_Contains
PyDict_Copy
PyDict_DelItem
PyDict_DelItemString
PyDict_Fini
PyDict_GetItem
PyDict_GetItemString
PyDict_GetItemWithError
PyDict_Items
PyDict_Keys
PyDict_Merge
PyDict_MergeFromSeq2
PyDict_New
PyDict_Next
PyDict_SetDefault
PyDict_SetItem
PyDict_SetItemString
PyDict_Size
PyDict_Type
PyDict_Update
PyDict_Values
PyEllipsis_Type
PyEnum_Type
PyErr_BadArgument
PyErr_BadInternalCall
PyErr_CheckSignals
PyErr_Clear
PyErr_Display
PyErr_ExceptionMatches
PyErr_Fetch
PyErr_Format
PyErr_FormatV
PyErr_GetExcInfo
PyErr_GivenExceptionMatches
PyErr_NewException
PyErr_NewExceptionWithDoc
PyErr_NoMemory
PyErr_NormalizeException
PyErr_Occurred
PyErr_Print
PyErr_PrintEx
PyErr_ProgramText
PyErr_ProgramTextObject
PyErr_ResourceWarning
PyErr_Restore
PyErr_SetExcFromWindowsErr
PyErr_SetExcFromWindowsErrWithFilename
PyErr_SetExcFromWindowsErrWithFilenameObject
PyErr_SetExcFromWindowsErrWithFilenameObjects
PyErr_SetExcFromWindowsErrWithUnicodeFilename
PyErr_SetExcInfo
PyErr_SetFromErrno
PyErr_SetFromErrnoWithFilename
PyErr_SetFromErrnoWithFilenameObject
PyErr_SetFromErrnoWithFilenameObjects
PyErr_SetFromErrnoWithUnicodeFilename
PyErr_SetFromWindowsErr
PyErr_SetFromWindowsErrWithFilename
PyErr_SetFromWindowsErrWithUnicodeFilename
PyErr_SetImportError
PyErr_SetImportErrorSubclass
PyErr_SetInterrupt
PyErr_SetNone
PyErr_SetObject
PyErr_SetString
PyErr_SyntaxLocation
PyErr_SyntaxLocationEx
PyErr_SyntaxLocationObject
PyErr_Warn
PyErr_WarnEx
PyErr_WarnExplicit
PyErr_WarnExplicitFormat
PyErr_WarnExplicitObject
PyErr_WarnFormat
PyErr_WriteUnraisable
PyEval_AcquireLock
PyEval_AcquireThread
PyEval_CallFunction
PyEval_CallMethod
PyEval_CallObjectWithKeywords
PyEval_EvalCode
PyEval_EvalCodeEx
PyEval_EvalFrame
PyEval_EvalFrameEx
PyEval_GetBuiltins
PyEval_GetCallStats
PyEval_GetFrame
PyEval_GetFuncDesc
PyEval_GetFuncName
PyEval_GetGlobals
PyEval_GetLocals
PyEval_InitThreads
PyEval_MergeCompilerFlags
PyEval_ReInitThreads
PyEval_ReleaseLock
PyEval_ReleaseThread
PyEval_RestoreThread
PyEval_SaveThread
PyEval_SetProfile
PyEval_SetTrace
PyEval_ThreadsInitialized
PyExc_ArithmeticError
PyExc_AssertionError
PyExc_AttributeError
PyExc_BaseException
PyExc_BlockingIOError
PyExc_BrokenPipeError
PyExc_BufferError
PyExc_BytesWarning
PyExc_ChildProcessError
PyExc_ConnectionAbortedError
PyExc_ConnectionError
PyExc_ConnectionRefusedError
PyExc_ConnectionResetError
PyExc_DeprecationWarning
PyExc_EOFError
PyExc_EnvironmentError
PyExc_Exception
PyExc_FileExistsError
PyExc_FileNotFoundError
PyExc_FloatingPointError
PyExc_FutureWarning
PyExc_GeneratorExit
PyExc_IOError
PyExc_ImportError
PyExc_ImportWarning
PyExc_IndentationError
PyExc_IndexError
PyExc_InterruptedError
PyExc_IsADirectoryError
PyExc_KeyError
PyExc_KeyboardInterrupt
PyExc_LookupError
PyExc_MemoryError
PyExc_ModuleNotFoundError
PyExc_NameError
PyExc_NotADirectoryError
PyExc_NotImplementedError
PyExc_OSError
PyExc_OverflowError
PyExc_PendingDeprecationWarning
PyExc_PermissionError
PyExc_ProcessLookupError
PyExc_RecursionError
PyExc_RecursionErrorInst
PyExc_ReferenceError
PyExc_ResourceWarning
PyExc_RuntimeError
PyExc_RuntimeWarning
PyExc_StopAsyncIteration
PyExc_StopIteration
PyExc_SyntaxError
PyExc_SyntaxWarning
PyExc_SystemError
PyExc_SystemExit
PyExc_TabError
PyExc_TimeoutError
PyExc_TypeError
PyExc_UnboundLocalError
PyExc_UnicodeDecodeError
PyExc_UnicodeEncodeError
PyExc_UnicodeError
PyExc_UnicodeTranslateError
PyExc_UnicodeWarning
PyExc_UserWarning
PyExc_ValueError
PyExc_Warning
PyExc_WindowsError
PyExc_ZeroDivisionError
PyException_GetCause
PyException_GetContext
PyException_GetTraceback
PyException_SetCause
PyException_SetContext
PyException_SetTraceback
PyFile_FromFd
PyFile_GetLine
PyFile_NewStdPrinter
PyFile_WriteObject
PyFile_WriteString
PyFilter_Type
PyFloat_AsDouble
PyFloat_ClearFreeList
PyFloat_Fini
PyFloat_FromDouble
PyFloat_FromString
PyFloat_GetInfo
PyFloat_GetMax
PyFloat_GetMin
PyFloat_Type
PyFrame_BlockPop
PyFrame_BlockSetup
PyFrame_ClearFreeList
PyFrame_FastToLocals
PyFrame_FastToLocalsWithError
PyFrame_Fini
PyFrame_GetLineNumber
PyFrame_LocalsToFast
PyFrame_New
PyFrame_Type
PyFrozenSet_New
PyFrozenSet_Type
PyFunction_GetAnnotations
PyFunction_GetClosure
PyFunction_GetCode
PyFunction_GetDefaults
PyFunction_GetGlobals
PyFunction_GetKwDefaults
PyFunction_GetModule
PyFunction_New
PyFunction_NewWithQualName
PyFunction_SetAnnotations
PyFunction_SetClosure
PyFunction_SetDefaults
PyFunction_SetKwDefaults
PyFunction_Type
PyFuture_FromAST
PyFuture_FromASTObject
PyGC_Collect
PyGILState_Check
PyGILState_Ensure
PyGILState_GetThisThreadState
PyGILState_Release
PyGen_NeedsFinalizing
PyGen_New
PyGen_NewWithQualName
PyGen_Type
PyGetSetDescr_Type
PyHash_GetFuncDef
PyImport_AddModule
PyImport_AddModuleObject
PyImport_AppendInittab
PyImport_Cleanup
PyImport_ExecCodeModule
PyImport_ExecCodeModuleEx
PyImport_ExecCodeModuleObject
PyImport_ExecCodeModuleWithPathnames
PyImport_ExtendInittab
PyImport_FrozenModules
PyImport_GetImporter
PyImport_GetMagicNumber
PyImport_GetMagicTag
PyImport_GetModuleDict
PyImport_Import
PyImport_ImportFrozenModule
PyImport_ImportFrozenModuleObject
PyImport_ImportModule
PyImport_ImportModuleLevel
PyImport_ImportModuleLevelObject
PyImport_ImportModuleNoBlock
PyImport_Inittab
PyImport_ReloadModule
PyInstanceMethod_Function
PyInstanceMethod_New
PyInstanceMethod_Type
PyInterpreterState_Clear
PyInterpreterState_Delete
PyInterpreterState_Head
PyInterpreterState_New
PyInterpreterState_Next
PyInterpreterState_ThreadHead
PyIter_Next
PyListIter_Type
PyListRevIter_Type
PyList_Append
PyList_AsTuple
PyList_ClearFreeList
PyList_Fini
PyList_GetItem
PyList_GetSlice
PyList_Insert
PyList_New
PyList_Reverse
PyList_SetItem
PyList_SetSlice
PyList_Size
PyList_Sort
PyList_Type
PyLongRangeIter_Type
PyLong_AsDouble
PyLong_AsLong
PyLong_AsLongAndOverflow
PyLong_AsLongLong
PyLong_AsLongLongAndOverflow
PyLong_AsSize_t
PyLong_AsSsize_t
PyLong_AsUnsignedLong
PyLong_AsUnsignedLongLong
PyLong_AsUnsignedLongLongMask
PyLong_AsUnsignedLongMask
PyLong_AsVoidPtr
PyLong_FromDouble
PyLong_FromLong
PyLong_FromLongLong
PyLong_FromSize_t
PyLong_FromSsize_t
PyLong_FromString
PyLong_FromUnicode
PyLong_FromUnicodeObject
PyLong_FromUnsignedLong
PyLong_FromUnsignedLongLong
PyLong_FromVoidPtr
PyLong_GetInfo
PyLong_Type
PyMap_Type
PyMapping_Check
PyMapping_GetItemString
PyMapping_HasKey
PyMapping_HasKeyString
PyMapping_Items
PyMapping_Keys
PyMapping_Length
PyMapping_SetItemString
PyMapping_Size
PyMapping_Values
PyMarshal_ReadLastObjectFromFile
PyMarshal_ReadLongFromFile
PyMarshal_ReadObjectFromFile
PyMarshal_ReadObjectFromString
PyMarshal_ReadShortFromFile
PyMarshal_WriteLongToFile
PyMarshal_WriteObjectToFile
PyMarshal_WriteObjectToString
PyMem_Calloc
PyMem_Free
PyMem_GetAllocator
PyMem_Malloc
PyMem_RawCalloc
PyMem_RawFree
PyMem_RawMalloc
PyMem_RawRealloc
PyMem_Realloc
PyMem_SetAllocator
PyMem_SetupDebugHooks
PyMemberDescr_Type
PyMember_GetOne
PyMember_SetOne
PyMemoryView_FromBuffer
PyMemoryView_FromMemory
PyMemoryView_FromObject
PyMemoryView_GetContiguous
PyMemoryView_Type
PyMethodDescr_Type
PyMethod_ClearFreeList
PyMethod_Fini
PyMethod_Function
PyMethod_New
PyMethod_Self
PyMethod_Type
PyModuleDef_Init
PyModuleDef_Type
PyModule_AddFunctions
PyModule_AddIntConstant
PyModule_AddObject
PyModule_AddStringConstant
PyModule_Create2
PyModule_ExecDef
PyModule_FromDefAndSpec2
PyModule_GetDef
PyModule_GetDict
PyModule_GetFilename
PyModule_GetFilenameObject
PyModule_GetName
PyModule_GetNameObject
PyModule_GetState
PyModule_New
PyModule_NewObject

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 354KB - Virtual size: 463KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pythonw.exe
.exe windows x86

1fa5dcbd5c20c7fb2f96b0d2f4f78f6b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

16-12-2015 01:00

Not After

16-12-2030 01:00

Subject

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

Issuer

CN=StartCom Class 3 Object CA,OU=StartCom Certification Authority,O=StartCom Ltd.,C=IL

Not Before

06-02-2016 00:15

Not After

06-02-2019 00:15

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

b9:85:62:17:28:99:d6:5d:86:8c:38:4a:30:c9:5b:7e:f7:ef:33:7c:f7:f1:db:22:a0:a9:d3:2c:92:f2:1a:af
Signer

Actual PE Digest

b9:85:62:17:28:99:d6:5d:86:8c:38:4a:30:c9:5b:7e:f7:ef:33:7c:f7:f1:db:22:a0:a9:d3:2c:92:f2:1a:af

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

08-07-2017 04:17
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

python36

Py_Main

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_configure_wide_argv
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_cexit
_c_exit
_exit
_crt_atexit
_crt_at_quick_exit
_controlfp_s
terminate
_register_onexit_function
_register_thread_local_exe_atexit_callback
_initialize_onexit_table
_initialize_wide_environment
_set_app_type
_seh_filter_exe
__p___argc
__p___wargv
exit
_initterm_e
_initterm
_execute_onexit_table
_get_wide_winmain_command_line

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

kernel32

GetModuleHandleW
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
server.dll
vcruntime140.dll
.dll windows x86

b1497ec17e3cfac16846155a7a629324

Code Sign

33:00:00:00:98:04:58:cb:7f:23:09:b0:9e:00:00:00:00:00:98
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

30-03-2016 19:21

Not After

30-06-2017 19:21

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7AFA-E41C-E142,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-06-2015 17:42

Not After

04-09-2016 17:42

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28-10-2015 20:31

Not After

28-01-2017 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9c:36:20:06:62:da:36:8e:86:bf:ee:34:54:e9:75:cf:a4:bc:79:db:d3:66:5f:9a:17:f3:3b:35:11:4e:a7:54
Signer

Actual PE Digest

9c:36:20:06:62:da:36:8e:86:bf:ee:34:54:e9:75:cf:a4:bc:79:db:d3:66:5f:9a:17:f3:3b:35:11:4e:a7:54

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

16-05-2023 12:24
Valid: false

49:da:11:da:30:75:f9:b8:f6:b1:71:30:9c:45:e3:50:dc:29:3a:89
Signer

Actual PE Digest

49:da:11:da:30:75:f9:b8:f6:b1:71:30:9c:45:e3:50:dc:29:3a:89

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

10-06-2016 05:36
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

api-ms-win-crt-runtime-l1-1-0

terminate
abort

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-heap-l1-1-0

malloc
_free_base
free
_malloc_base
_calloc_base

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-convert-l1-1-0

atol

kernel32

DeleteCriticalSection
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetModuleHandleW
GetModuleFileNameW
LoadLibraryExW
TlsFree
TlsGetValue
RtlUnwind
VirtualQuery
EncodePointer
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetLastError
TlsSetValue
InitializeCriticalSectionAndSpinCount
TlsAlloc
GetProcAddress
FreeLibrary

Exports

Exports

_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__intrinsic_setjmp
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_InitializeCriticalSectionEx
__vcrt_LoadLibraryExW
_chkesp
_except_handler2
_except_handler3
_except_handler4_common
_get_purecall_handler
_get_unexpected
_global_unwind2
_is_exception_typeof
_local_unwind2
_local_unwind4
_longjmpex
_purecall
_seh_longjmp_unwind
_seh_longjmp_unwind4
_set_purecall_handler
_set_se_translator
_setjmp3
longjmp
memchr
memcmp
memcpy
memmove
memset
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61aac7dde220e2cbb47a274a4113d998

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86Certificate

Extended Key Usages

Key Usages

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4Certificate

Extended Key Usages

Key Usages

23:33:1a:79:7e:58:56:b2:36:87:90:f8:9c:fb:08:e1:86:22:c7:cf:6e:8d:3e:9e:32:e6:7a:39:e7:57:40:29Signer

Signature Validations

Verification

08-07-2017 04:15 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

python36

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 7KB - Virtual size: 8KB

.gfids Size: 512B - Virtual size: 28B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

814bc17468392d9d1df2b433a313ff8b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86Certificate

Extended Key Usages

Key Usages

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4Certificate

Extended Key Usages

Key Usages

a6:f2:6f:ae:83:0d:5f:d6:b6:88:7b:df:38:d1:e1:ec:76:df:1c:6c:a3:03:63:29:22:e0:0a:54:bc:a0:b7:bfSigner

Signature Validations

Verification

08-07-2017 04:16 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

python36

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 50KB - Virtual size: 50KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 2KB - Virtual size: 3KB

.gfids Size: 512B - Virtual size: 28B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

e918332b2d9bb8b4a39a92f3450c582f

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

23:33:1a:79:7e:58:56:b2:36:87:90:f8:9c:fb:08:e1:86:22:c7:cf:6e:8d:3e:9e:32:e6:7a:39:e7:57:40:29
Signer

08-07-2017 04:15
Valid: false

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 7KB - Virtual size: 8KB

.gfids
Size: 512B - Virtual size: 28B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

a6:f2:6f:ae:83:0d:5f:d6:b6:88:7b:df:38:d1:e1:ec:76:df:1c:6c:a3:03:63:29:22:e0:0a:54:bc:a0:b7:bf
Signer

08-07-2017 04:16
Valid: false

.text
Size: 50KB - Virtual size: 50KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 2KB - Virtual size: 3KB

.gfids
Size: 512B - Virtual size: 28B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

0e:64:d1:b7:8d:7e:2f:7c:0c:0b:3e:26:07:f3:8f:99:7f:e5:d0:00:2a:45:8c:d0:03:f9:03:89:dd:0e:5c:8e
Signer

08-07-2017 04:15
Valid: false

.text
Size: 57KB - Virtual size: 57KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 6KB - Virtual size: 7KB

.gfids
Size: 512B - Virtual size: 28B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 6KB - Virtual size: 5KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

78:22:43:a1:53:df:28:0a:1f:fa:e1:5c:d0:28:4c:86
Certificate

69:a7:0a:41:88:0f:6b:bf:68:3e:37:66:d6:a7:e6:f4
Certificate

95:e1:f3:a6:e2:7d:e0:2f:51:2a:b3:58:c1:59:7b:76:bf:89:2c:0f:e3:80:e1:3f:8a:fb:7e:07:9b:6c:92:0c
Signer

08-07-2017 04:15
Valid: false