jetStamp-graphic-970-jetStamp-graphic-970---Printer-driver--V7840-R16910[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

jetStamp-graphic-970-jetStamp-graphic-970---Printer-driver--V7840-R16910.zip
Size

21.0MB
MD5

3905cf30938ced2f37ae8be1e69f76d4
SHA1

b609d8d4af91f003d42785589f0166754cb3cc9e
SHA256

e551c59b2a22148103567d3d64c4cba483ae59399e5d5e0acb762bc01b135b73
SHA512

870c7c46ed0dc246d83ffbf16a363547209ad9375a6771a6ff1ca724b402118933cf6405e73ebb5c020a53fffcc72f55c62c11d8c0e43f2589f46330f017f4a0
SSDEEP

393216:jn8eGhIyQgKymnKBX4CQmWVI9URrMTY0uqxPU0AoN0UV1x+mHnMklyZyHlLto:AeGh7QgKymodQmS1Rr9PqxPmoNNVCELw

Score

3^/10

Malware Config

Signatures

Unsigned PE 10 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PrinterDriver/Win32/FreeImage32.dll
unpack001/PrinterDriver/Win32/ReBarcode32.dll
unpack001/PrinterDriver/Win32/RmApi32.dll
unpack001/PrinterDriver/Win32/RmBasicApi32.dll
unpack001/PrinterDriver/Win32/rusbio.sys
unpack001/PrinterDriver/Win64/FreeImage64.dll
unpack001/PrinterDriver/Win64/ReBarcode64.dll
unpack001/PrinterDriver/Win64/RmApi64.dll
unpack001/PrinterDriver/Win64/RmBasicApi64.dll
unpack001/PrinterDriver/Win64/rusbio_x64.sys

Files

jetStamp-graphic-970-jetStamp-graphic-970---Printer-driver--V7840-R16910.zip
.zip
PrinterDriver/Common/Driver.chm
.chm
PrinterDriver/Common/Reiner.font
PrinterDriver/Common/Reiner.trans
PrinterDriver/Common/ReinerErr.sme
PrinterDriver/Common/Reiner_jetStamp_graphic_1025.dat
PrinterDriver/Common/Reiner_jetStamp_graphic_970.dat
PrinterDriver/Common/Reiner_speed_i_Marker_940.dat
PrinterDriver/Font/Reiner F1 Bold.ttf
PrinterDriver/Font/Reiner F1.ttf
PrinterDriver/PrinterDriverUserGuide.pdf
.pdf
PrinterDriver/PrnInst.exe
.exe windows x86

9fd00cb08d8d2133cafd25a5f9077ff2

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

61:46:ef:2e:b8:d2:bd:9d:02:7f:67:e0:27:cf:bf:ae:c1:37:77:3b:47:77:d4:7a:32:12:b1:34:65:af:37:65
Signer

Actual PE Digest

61:46:ef:2e:b8:d2:bd:9d:02:7f:67:e0:27:cf:bf:ae:c1:37:77:3b:47:77:d4:7a:32:12:b1:34:65:af:37:65

Digest Algorithm

sha256

PE Digest Matches

true

ba:7a:1c:43:ca:04:e9:77:25:bc:07:24:2b:fc:ce:5f:4c:a3:0d:2f
Signer

Actual PE Digest

ba:7a:1c:43:ca:04:e9:77:25:bc:07:24:2b:fc:ce:5f:4c:a3:0d:2f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RevertToSelf
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegFlushKey
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueA
LogonUserW
IsValidSecurityDescriptor
InitializeSecurityDescriptor
InitializeAcl
ImpersonateLoggedOnUser
GetLengthSid
FreeSid
DuplicateToken
CreateProcessAsUserA
AllocateAndInitializeSid
AdjustTokenPrivileges
AddAccessAllowedAce
AccessCheck
StartServiceA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
EnumDependentServicesA
ControlService
CloseServiceHandle
CloseServiceHandle
OpenSCManagerA

user32

GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
CreateWindowExW
CreateWindowExA
WindowFromPoint
WaitMessage
ValidateRect
UpdateWindow
UnregisterClassW
UnregisterClassA
UnionRect
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoA
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowsHookExA
SetWindowTextW
SetWindowTextA
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetWindowLongA
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropA
SetParent
SetMenuItemInfoW
SetMenuItemInfoA
SetMenu
SetKeyboardState
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetClassLongA
SetCaretPos
SetCapture
SetActiveWindow
SendMessageW
SendMessageA
ScrollWindowEx
ScrollWindow
ScreenToClient
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterDeviceNotificationA
RegisterClipboardFormatA
RegisterClassW
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyW
MapVirtualKeyA
LoadStringA
LoadKeyboardLayoutA
LoadImageA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageW
IsDialogMessageA
IsChild
IsCharAlphaNumericA
IsCharAlphaA
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextLengthW
GetWindowTextW
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetWindow
GetMessageTime
GetMessagePos
GetMenuStringW
GetMenuStringA
GetMenuState
GetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameW
GetClassNameA
GetClassLongA
GetClassInfoW
GetClassInfoA
GetCaretPos
GetCapture
GetActiveWindow
FrameRect
FindWindowA
FillRect
ExitWindowsEx
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextA
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DeleteMenu
DefWindowProcW
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreatePopupMenu
CreateMenu
CreateIcon
CreateCaret
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperBuffW
CharNextW
CallWindowProcW
CallWindowProcA
CallNextHookEx
BeginPaint
CharNextA
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout
DdeCmpStringHandles
DdeFreeStringHandle
DdeQueryStringA
DdeCreateStringHandleA
DdeGetLastError
DdeFreeDataHandle
DdeUnaccessData
DdeAccessData
DdeCreateDataHandle
DdeClientTransaction
DdeNameService
DdePostAdvise
DdeSetUserHandle
DdeQueryConvInfo
DdeDisconnect
DdeConnect
DdeUninitialize
DdeInitializeA

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
SetCurrentDirectoryA
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCurrentDirectoryA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringA
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
lstrcpyA
lstrcmpA
WriteProfileStringA
WritePrivateProfileStringA
WriteFile
WinExec
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualAlloc
TerminateThread
TerminateProcess
SystemTimeToFileTime
SuspendThread
Sleep
SizeofResource
SetThreadPriority
SetThreadLocale
SetLastError
SetFilePointer
SetFileAttributesW
SetFileAttributesA
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
RemoveDirectoryA
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OpenProcess
MultiByteToWideChar
MulDiv
MoveFileExW
MoveFileExA
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalLock
GlobalFree
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetWindowsDirectoryA
GetVolumeInformationA
GetVersionExA
GetVersion
GetUserDefaultLangID
GetUserDefaultLCID
GetTickCount
GetThreadLocale
GetTempPathA
GetTempFileNameA
GetSystemDirectoryA
GetSystemDefaultLCID
GetStringTypeExA
GetStdHandle
GetShortPathNameA
GetProfileStringA
GetProcAddress
GetPrivateProfileStringA
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLogicalDrives
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileSize
GetFileAttributesA
GetExitCodeThread
GetExitCodeProcess
GetDriveTypeA
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCommandLineW
GetCPInfo
GetACP
FreeResource
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
FreeLibrary
FormatMessageW
FormatMessageA
FlushInstructionCache
FindResourceA
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitProcess
EnumSystemLocalesA
EnumSystemCodePagesA
EnumCalendarInfoA
EnterCriticalSection
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateThread
CreateProcessA
CreateFileW
CreateFileA
CreateEventA
CreateDirectoryA
CopyFileW
CopyFileA
CompareStringW
CompareStringA
CloseHandle
Sleep
MulDiv
VerifyVersionInfoW
VerSetConditionMask
AttachConsole
FindClose

gdi32

UnrealizeObject
StretchBlt
StartPage
StartDocA
SetWindowOrgEx
SetWindowExtEx
SetWinMetaFileBits
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SaveDC
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
PolyPolyline
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32W
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectA
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
ExtTextOutA
ExtCreatePen
ExcludeClipRect
EndPage
EndDoc
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreatePenIndirect
CreatePalette
CreateICA
CreateHalftonePalette
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
BitBlt
AddFontResourceA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

mpr

WNetGetConnectionA
WNetCancelConnectionA
WNetAddConnectionA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
StringFromCLSID
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromString
CoTaskMemFree
StringFromCLSID

comctl32

_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls

shell32

ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA

winspool.drv

SetPrinterA
SetJobA
OpenPrinterW
OpenPrinterA
GetPrinterDriverDirectoryA
GetPrinterA
EnumPrintersW
EnumPrintersA
EnumPrinterDriversA
EnumPortsA
EnumMonitorsA
EnumJobsA
DocumentPropertiesA
DeletePrinterDriverA
DeletePrinterConnectionA
DeletePrinter
DeletePortA
ClosePrinter
AddPrinterW
AddPrinterA
AddPortA
AddMonitorA
GetDefaultPrinterA

shlwapi

PathRemoveFileSpecW
StrCatW

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 76B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 801KB - Virtual size: 801KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PrinterDriver/Reiner.cat
PrinterDriver/Reiner.inf
PrinterDriver/Tools/ImportExportTool.exe
.exe windows x86

9e3d194687122bbe97526dd8845a007c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

c2:43:59:f0:7e:15:a1:91:cf:9c:54:20:bf:9a:b6:13:08:b2:6a:26:bd:ad:fb:28:92:03:c6:4a:f5:34:c4:23
Signer

Actual PE Digest

c2:43:59:f0:7e:15:a1:91:cf:9c:54:20:bf:9a:b6:13:08:b2:6a:26:bd:ad:fb:28:92:03:c6:4a:f5:34:c4:23

Digest Algorithm

sha256

PE Digest Matches

true

de:be:0b:87:b9:a6:5e:18:5e:74:a5:6e:3c:cd:f9:3b:df:b0:39:25
Signer

Actual PE Digest

de:be:0b:87:b9:a6:5e:18:5e:74:a5:6e:3c:cd:f9:3b:df:b0:39:25

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetFullPathNameW
RaiseException
HeapSize
DecodePointer
DeleteCriticalSection
SetEndOfFile
CreateFileW
LocalFree
FormatMessageW
GetLastError
WriteConsoleW
SetStdHandle
ReadConsoleW
LoadLibraryExW
GetOEMCP
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EncodePointer
GetCPInfo
GetCommandLineW
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetStdHandle
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
FlushFileBuffers
CloseHandle
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetACP
IsValidCodePage

gdi32

DeleteDC
CreateDCW
ExtEscape

winspool.drv

GetPrinterW
DocumentPropertiesW
OpenPrinterW
ClosePrinter

shlwapi

PathRemoveFileSpecW
PathFindFileNameW

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/DIFxAPI.dll
.dll windows x86

bced6390751f7df672767c6c60fd16dc

Code Sign

61:03:dc:f6:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:12

Not After

25-07-2011 19:22

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:15:23:0f:00:00:00:00:00:0a
Certificate

Issuer

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 21:57

Not After

07-03-2011 21:57

Subject

CN=Microsoft Windows,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:07:02:dc:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

15-09-2005 21:55

Not After

15-03-2016 22:05

Subject

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

b4:3a:2e:c6:32:74:1f:7f:5a:ac:1d:1e:5f:70:f7:d0:71:69:58:ba
Signer

Actual PE Digest

b4:3a:2e:c6:32:74:1f:7f:5a:ac:1d:1e:5f:70:f7:d0:71:69:58:ba

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlNtStatusToDosError
VerSetConditionMask
RtlUnwind

kernel32

VerifyVersionInfoW
GetVersionExW
lstrlenW
FreeLibrary
GetProcAddress
LoadLibraryW
DeleteFileW
SetFileAttributesW
GetEnvironmentVariableW
CompareStringW
GetFileAttributesW
MoveFileExW
GetTempFileNameW
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
CreateFileW
GetSystemWindowsDirectoryW
MultiByteToWideChar
WideCharToMultiByte
GetSystemDirectoryW
GetFullPathNameW
CopyFileW
LocalFree
RemoveDirectoryW
FindClose
FindNextFileW
lstrcmpW
FindFirstFileW
CreateDirectoryW
LocalReAlloc
LocalAlloc
GetProcessHeap
ReleaseMutex
DeviceIoControl
WaitForSingleObject
CreateMutexW
GetSystemTimeAsFileTime
Sleep
RaiseException
GetVersionExA
HeapSize
GetCommandLineA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetModuleHandleA
ExitProcess
TlsGetValue
SetLastError
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
LoadLibraryExA
SetFilePointer
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetThreadLocale
WaitForMultipleObjectsEx
InterlockedCompareExchange
WaitForSingleObjectEx
SetEvent
CreateEventW
SetEndOfFile
InterlockedExchange
lstrcmpiW
GetLastError
InterlockedIncrement
InterlockedDecrement
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
HeapFree
HeapReAlloc
EnterCriticalSection
HeapAlloc
LeaveCriticalSection
HeapDestroy
GetModuleHandleW
DeleteCriticalSection
GetModuleFileNameA
OutputDebugStringA
HeapCreate
InitializeCriticalSection
TlsAlloc
CreateFileA

user32

UnregisterClassA
CharLowerW

setupapi

SetupDiSetDeviceRegistryPropertyW
SetupQueueCopyIndirectW
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiSetSelectedDevice
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupDiGetDeviceInstanceIdW
SetupDiCreateDeviceInfoList
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupDiSetClassInstallParamsW
SetupDiClassNameFromGuidW
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
CM_Get_Device_IDW
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Locate_DevNodeW
CM_Get_DevNode_Status
CM_Query_And_Remove_SubTreeW
SetupDiOpenClassRegKey
SetupGetTargetPathW
SetupInstallFilesFromInfSectionW
SetupPromptReboot
SetupInstallFromInfSectionW
SetupInstallServicesFromInfSectionW
SetupDiGetActualSectionToInstallW
SetupFindNextLine
SetupFindNextMatchLineW
SetupOpenInfFileW
SetupOpenFileQueue
SetupCommitFileQueueW
SetupQueueCopyW
SetupCloseFileQueue
SetupFindFirstLineW
SetupCopyOEMInfW
SetupCloseInfFile
SetupGetLineCountW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupOpenAppendInfFileW
CM_Enumerate_Classes
CM_Setup_DevNode
SetupGetIntField
SetupGetFieldCount
pSetupGetGlobalFlags
pSetupSetGlobalFlags
SetupTermDefaultQueueCallback
SetupInitDefaultQueueCallbackEx
SetupDefaultQueueCallbackW
SetupGetStringFieldW

advapi32

RegCloseKey
CheckTokenMembership
AllocateAndInitializeSid
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
SetEntriesInAclW
QueryServiceStatus
DeleteService
ControlService
CloseServiceHandle
OpenServiceW
OpenSCManagerW
StartServiceW
FreeSid

ole32

StringFromCLSID
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance

wintrust

WinVerifyTrust
CryptCATAdminCalcHashFromFileHandle

crypt32

CertFreeCertificateContext
CertGetCTLContextProperty
CryptQueryObject
CertFreeCTLContext

Exports

Exports

DIFXAPISetLogCallbackA
DIFXAPISetLogCallbackW
DriverPackageGetPathA
DriverPackageGetPathW
DriverPackageInstallA
DriverPackageInstallW
DriverPackagePreinstallA
DriverPackagePreinstallW
DriverPackageUninstallA
DriverPackageUninstallW
SetDifxLogCallbackA
SetDifxLogCallbackW

Sections

.text
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/FontInstaller.exe
.exe windows x86

b607bb2754c80c5ab16405d9638db389

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

85:cc:7e:9a:2d:c1:de:e9:20:3f:d3:78:55:11:e3:c2:5e:ac:72:3f:e4:da:3b:8e:a8:9c:5a:d7:0a:8f:c2:15
Signer

Actual PE Digest

85:cc:7e:9a:2d:c1:de:e9:20:3f:d3:78:55:11:e3:c2:5e:ac:72:3f:e4:da:3b:8e:a8:9c:5a:d7:0a:8f:c2:15

Digest Algorithm

sha256

PE Digest Matches

true

1d:7f:cd:a5:d1:e1:06:46:92:95:27:14:de:bb:27:87:d5:35:68:a7
Signer

Actual PE Digest

1d:7f:cd:a5:d1:e1:06:46:92:95:27:14:de:bb:27:87:d5:35:68:a7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryW
GetLastError
CloseHandle
WriteConsoleW
FindNextFileW
FindClose
GetCurrentDirectoryW
CopyFileW
CreateProcessW
FindFirstFileW
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
RtlUnwind
OutputDebugStringW
HeapAlloc
HeapReAlloc
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
CreateFileW

user32

wsprintfW

gdi32

AddFontResourceExW

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/FreeImage32.dll
.dll windows x86

ae817a56afdeef2a937d91e0c8623f24

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
OutputDebugStringA
IsBadReadPtr
SetEnvironmentVariableA
CreateFileW
WriteConsoleW
SetStdHandle
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapFree
HeapAlloc
RaiseException
RtlUnwind
HeapReAlloc
ReadFile
FindClose
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
IsProcessorFeaturePresent
AreFileApisANSI
GetCommandLineA
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapSize
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetFileType
GetConsoleCP
CloseHandle
FindFirstFileExW
FindNextFileW
DeleteFileW
MoveFileExW
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
FlushFileBuffers
GetTimeZoneInformation
SetEndOfFile

ws2_32

ntohl
htonl
htons
ntohs

Exports

Exports

FreeImage_OutputMessageProc
_FreeImage_AcquireMemory@12
_FreeImage_AdjustBrightness@12
_FreeImage_AdjustColors@32
_FreeImage_AdjustContrast@12
_FreeImage_AdjustCurve@12
_FreeImage_AdjustGamma@12
_FreeImage_Allocate@24
_FreeImage_AllocateEx@36
_FreeImage_AllocateExT@40
_FreeImage_AllocateT@28
_FreeImage_AppendPage@8
_FreeImage_ApplyColorMapping@24
_FreeImage_ApplyPaletteIndexMapping@20
_FreeImage_Clone@4
_FreeImage_CloneMetadata@8
_FreeImage_CloneTag@4
_FreeImage_CloseMemory@4
_FreeImage_CloseMultiBitmap@8
_FreeImage_ColorQuantize@8
_FreeImage_ColorQuantizeEx@20
_FreeImage_Composite@16
_FreeImage_ConvertFromRawBits@36
_FreeImage_ConvertLine16To24_555@12
_FreeImage_ConvertLine16To24_565@12
_FreeImage_ConvertLine16To32_555@12
_FreeImage_ConvertLine16To32_565@12
_FreeImage_ConvertLine16To4_555@12
_FreeImage_ConvertLine16To4_565@12
_FreeImage_ConvertLine16To8_555@12
_FreeImage_ConvertLine16To8_565@12
_FreeImage_ConvertLine16_555_To16_565@12
_FreeImage_ConvertLine16_565_To16_555@12
_FreeImage_ConvertLine1To16_555@16
_FreeImage_ConvertLine1To16_565@16
_FreeImage_ConvertLine1To24@16
_FreeImage_ConvertLine1To32@16
_FreeImage_ConvertLine1To4@12
_FreeImage_ConvertLine1To8@12
_FreeImage_ConvertLine24To16_555@12
_FreeImage_ConvertLine24To16_565@12
_FreeImage_ConvertLine24To32@12
_FreeImage_ConvertLine24To4@12
_FreeImage_ConvertLine24To8@12
_FreeImage_ConvertLine32To16_555@12
_FreeImage_ConvertLine32To16_565@12
_FreeImage_ConvertLine32To24@12
_FreeImage_ConvertLine32To4@12
_FreeImage_ConvertLine32To8@12
_FreeImage_ConvertLine4To16_555@16
_FreeImage_ConvertLine4To16_565@16
_FreeImage_ConvertLine4To24@16
_FreeImage_ConvertLine4To32@16
_FreeImage_ConvertLine4To8@12
_FreeImage_ConvertLine8To16_555@16
_FreeImage_ConvertLine8To16_565@16
_FreeImage_ConvertLine8To24@16
_FreeImage_ConvertLine8To32@16
_FreeImage_ConvertLine8To4@16
_FreeImage_ConvertTo16Bits555@4
_FreeImage_ConvertTo16Bits565@4
_FreeImage_ConvertTo24Bits@4
_FreeImage_ConvertTo32Bits@4
_FreeImage_ConvertTo4Bits@4
_FreeImage_ConvertTo8Bits@4
_FreeImage_ConvertToGreyscale@4
_FreeImage_ConvertToRGBF@4
_FreeImage_ConvertToRawBits@32
_FreeImage_ConvertToStandardType@8
_FreeImage_ConvertToType@12
_FreeImage_Copy@20
_FreeImage_CreateICCProfile@12
_FreeImage_CreateTag@0
_FreeImage_DeInitialise@0
_FreeImage_DeletePage@8
_FreeImage_DeleteTag@4
_FreeImage_DestroyICCProfile@4
_FreeImage_Dither@8
_FreeImage_EnlargeCanvas@28
_FreeImage_FIFSupportsExportBPP@8
_FreeImage_FIFSupportsExportType@8
_FreeImage_FIFSupportsICCProfiles@4
_FreeImage_FIFSupportsReading@4
_FreeImage_FIFSupportsWriting@4
_FreeImage_FillBackground@12
_FreeImage_FindCloseMetadata@4
_FreeImage_FindFirstMetadata@12
_FreeImage_FindNextMetadata@8
_FreeImage_FlipHorizontal@4
_FreeImage_FlipVertical@4
_FreeImage_GetAdjustColorsLookupTable@32
_FreeImage_GetBPP@4
_FreeImage_GetBackgroundColor@8
_FreeImage_GetBits@4
_FreeImage_GetBlueMask@4
_FreeImage_GetChannel@8
_FreeImage_GetColorType@4
_FreeImage_GetColorsUsed@4
_FreeImage_GetComplexChannel@8
_FreeImage_GetCopyrightMessage@0
_FreeImage_GetDIBSize@4
_FreeImage_GetDotsPerMeterX@4
_FreeImage_GetDotsPerMeterY@4
_FreeImage_GetFIFCount@0
_FreeImage_GetFIFDescription@4
_FreeImage_GetFIFExtensionList@4
_FreeImage_GetFIFFromFilename@4
_FreeImage_GetFIFFromFilenameU@4
_FreeImage_GetFIFFromFormat@4
_FreeImage_GetFIFFromMime@4
_FreeImage_GetFIFMimeType@4
_FreeImage_GetFIFRegExpr@4
_FreeImage_GetFileType@8
_FreeImage_GetFileTypeFromHandle@12
_FreeImage_GetFileTypeFromMemory@8
_FreeImage_GetFileTypeU@8
_FreeImage_GetFormatFromFIF@4
_FreeImage_GetGreenMask@4
_FreeImage_GetHeight@4
_FreeImage_GetHistogram@12
_FreeImage_GetICCProfile@4
_FreeImage_GetImageType@4
_FreeImage_GetInfo@4
_FreeImage_GetInfoHeader@4
_FreeImage_GetLine@4
_FreeImage_GetLockedPageNumbers@12
_FreeImage_GetMetadata@16
_FreeImage_GetMetadataCount@8
_FreeImage_GetPageCount@4
_FreeImage_GetPalette@4
_FreeImage_GetPitch@4
_FreeImage_GetPixelColor@16
_FreeImage_GetPixelIndex@16
_FreeImage_GetRedMask@4
_FreeImage_GetScanLine@8
_FreeImage_GetTagCount@4
_FreeImage_GetTagDescription@4
_FreeImage_GetTagID@4
_FreeImage_GetTagKey@4
_FreeImage_GetTagLength@4
_FreeImage_GetTagType@4
_FreeImage_GetTagValue@4
_FreeImage_GetTransparencyCount@4
_FreeImage_GetTransparencyTable@4
_FreeImage_GetTransparentIndex@4
_FreeImage_GetVersion@0
_FreeImage_GetWidth@4
_FreeImage_HasBackgroundColor@4
_FreeImage_Initialise@4
_FreeImage_InsertPage@12
_FreeImage_Invert@4
_FreeImage_IsLittleEndian@0
_FreeImage_IsPluginEnabled@4
_FreeImage_IsTransparent@4
_FreeImage_JPEGCrop@24
_FreeImage_JPEGCropU@24
_FreeImage_JPEGTransform@16
_FreeImage_JPEGTransformU@16
_FreeImage_Load@12
_FreeImage_LoadFromHandle@16
_FreeImage_LoadFromMemory@12
_FreeImage_LoadMultiBitmapFromMemory@12
_FreeImage_LoadU@12
_FreeImage_LockPage@8
_FreeImage_LookupSVGColor@16
_FreeImage_LookupX11Color@16
_FreeImage_MakeThumbnail@12
_FreeImage_MovePage@12
_FreeImage_MultigridPoissonSolver@8
_FreeImage_OpenMemory@8
_FreeImage_OpenMultiBitmap@24
_FreeImage_OpenMultiBitmapFromHandle@16
_FreeImage_Paste@20
_FreeImage_PreMultiplyWithAlpha@4
_FreeImage_ReadMemory@16
_FreeImage_RegisterExternalPlugin@20
_FreeImage_RegisterLocalPlugin@20
_FreeImage_Rescale@16
_FreeImage_Rotate@16
_FreeImage_RotateClassic@12
_FreeImage_RotateEx@48
_FreeImage_Save@16
_FreeImage_SaveToHandle@20
_FreeImage_SaveToMemory@16
_FreeImage_SaveU@16
_FreeImage_SeekMemory@12
_FreeImage_SetBackgroundColor@8
_FreeImage_SetChannel@12
_FreeImage_SetComplexChannel@12
_FreeImage_SetDotsPerMeterX@8
_FreeImage_SetDotsPerMeterY@8
_FreeImage_SetMetadata@16
_FreeImage_SetOutputMessage@4
_FreeImage_SetOutputMessageStdCall@4
_FreeImage_SetPixelColor@16
_FreeImage_SetPixelIndex@16
_FreeImage_SetPluginEnabled@8
_FreeImage_SetTagCount@8
_FreeImage_SetTagDescription@8
_FreeImage_SetTagID@8
_FreeImage_SetTagKey@8
_FreeImage_SetTagLength@8
_FreeImage_SetTagType@8
_FreeImage_SetTagValue@8
_FreeImage_SetTransparencyTable@12
_FreeImage_SetTransparent@8
_FreeImage_SetTransparentIndex@8
_FreeImage_SwapColors@16
_FreeImage_SwapPaletteIndices@12
_FreeImage_TagToString@12
_FreeImage_TellMemory@4
_FreeImage_Threshold@8
_FreeImage_TmoDrago03@20
_FreeImage_TmoFattal02@20
_FreeImage_TmoReinhard05@20
_FreeImage_TmoReinhard05Ex@36
_FreeImage_ToneMapping@24
_FreeImage_Unload@4
_FreeImage_UnlockPage@12
_FreeImage_WriteMemory@16
_FreeImage_ZLibCRC32@12
_FreeImage_ZLibCompress@16
_FreeImage_ZLibGUnzip@16
_FreeImage_ZLibGZip@16
_FreeImage_ZLibUncompress@16

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 931KB - Virtual size: 931KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/Prn64.bin
.exe windows x64

9ba174ec9cd7880dcb50b17b3840e5c4

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

cc:6e:15:71:24:12:25:20:be:d2:31:76:60:cb:7c:ca:30:ed:fe:99:66:15:7c:5a:8a:fa:b8:c6:34:d0:05:e0
Signer

Actual PE Digest

cc:6e:15:71:24:12:25:20:be:d2:31:76:60:cb:7c:ca:30:ed:fe:99:66:15:7c:5a:8a:fa:b8:c6:34:d0:05:e0

Digest Algorithm

sha256

PE Digest Matches

true

bd:71:4e:c9:22:ce:ca:4c:81:ea:6b:3d:f6:84:65:18:18:b6:ff:cf
Signer

Actual PE Digest

bd:71:4e:c9:22:ce:ca:4c:81:ea:6b:3d:f6:84:65:18:18:b6:ff:cf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

OpenProcess
GetVersionExW
GetCurrentThread
GetCurrentProcess
CloseHandle
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CreateFileW
WriteFile
SetLastError
HeapAlloc
HeapFree
ReadProcessMemory
ExpandEnvironmentStringsW
GetCommandLineW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetLastError
FreeLibrary
GetProcAddress
GetProcessHeap
LoadLibraryW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapReAlloc
GetConsoleMode
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
RtlPcToFileHeader
RtlUnwindEx
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
SetFilePointer
GetConsoleCP

user32

MessageBoxA
MessageBoxW

winspool.drv

AddPortW

advapi32

LookupPrivilegeValueW
OpenProcessToken
OpenThreadToken
AdjustTokenPrivileges

shell32

CommandLineToArgvW

psapi

GetModuleFileNameExW
EnumProcessModules

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/REINERLM.dll
.dll windows x86

d93f919fa298b9cd9ef2fa0f076b7a26

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

dd:bc:2d:b1:34:f9:a3:c7:60:f1:f0:5e:ce:04:4c:5d:54:8e:8d:1a:ce:f8:73:42:ce:f7:6b:94:da:20:ae:c1
Signer

Actual PE Digest

dd:bc:2d:b1:34:f9:a3:c7:60:f1:f0:5e:ce:04:4c:5d:54:8e:8d:1a:ce:f8:73:42:ce:f7:6b:94:da:20:ae:c1

Digest Algorithm

sha256

PE Digest Matches

true

81:37:29:1f:59:ad:02:40:bd:72:b3:ca:28:29:6f:b1:02:e9:8e:f5
Signer

Actual PE Digest

81:37:29:1f:59:ad:02:40:bd:72:b3:ca:28:29:6f:b1:02:e9:8e:f5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
SetLastError
VerSetConditionMask
GlobalAlloc
FormatMessageW
MultiByteToWideChar
VerifyVersionInfoW
GlobalFree
GetLastError
GetComputerNameA
CreateFileA
WriteFile
GetFileAttributesA
GetTempFileNameA
CloseHandle
LoadLibraryW
CreateMutexW
FreeLibrary
WaitForSingleObject
GetProcAddress
ReleaseMutex
WideCharToMultiByte
SetFilePointer
GetTickCount
LeaveCriticalSection
ReadFile
CreateFileW
EnterCriticalSection
DeleteCriticalSection
GetFileSize
lstrlenA
MapViewOfFile
UnmapViewOfFile
OpenFileMappingW
FlushFileBuffers
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleFileNameA
HeapSize
LoadLibraryExW
OutputDebugStringW
GetLocalTime
InitializeCriticalSection
QueryPerformanceCounter
ExitProcess
GetProcessHeap
SetFilePointerEx
GetStringTypeW
EncodePointer
DecodePointer
HeapFree
HeapAlloc
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
HeapReAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleCP
GetConsoleMode
IsValidCodePage
GetACP
GetOEMCP

user32

wsprintfW
wvsprintfW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter
GetPrinterDriverW
SetJobW
GetJobW

shell32

ord165
SHGetPathFromIDListW
SHGetSpecialFolderLocation

ole32

CoTaskMemFree

Exports

Exports

DllEntryPoint
InitializePrintMonitor2

Sections

.text
Size: 441KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 195KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/REINERPMS.dll
.dll windows x86

cba4f989d6a79b5f181c9cadb58da94c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

fc:97:cc:7d:19:9b:92:17:82:03:60:c5:e3:00:13:0f:78:a2:a3:8c:a1:e0:d2:a3:9e:b4:cd:10:a9:4f:f3:df
Signer

Actual PE Digest

fc:97:cc:7d:19:9b:92:17:82:03:60:c5:e3:00:13:0f:78:a2:a3:8c:a1:e0:d2:a3:9e:b4:cd:10:a9:4f:f3:df

Digest Algorithm

sha256

PE Digest Matches

true

79:8e:72:7b:94:48:7e:23:7d:f3:cc:bd:a2:03:82:6b:81:5f:9e:9c
Signer

Actual PE Digest

79:8e:72:7b:94:48:7e:23:7d:f3:cc:bd:a2:03:82:6b:81:5f:9e:9c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

spoolss

GetJobW
OpenPrinterW
SetJobW
ClosePrinter

ws2_32

closesocket
connect
inet_addr
getaddrinfo
htons
setsockopt
socket

rmapi32

ord19
ord45
ord14
ord38
ord12
ord41
ord15
ord24
ord35
ord4
ord13
ord26
ord43
ord8
ord6
ord33
ord37
ord16
ord11
ord42
ord29
ord31
ord1
ord44
ord3
ord5

kernel32

GetTimeZoneInformation
GetStdHandle
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcessHeap
HeapSize
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
IsValidCodePage
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError
lstrcmpiW
WideCharToMultiByte
CreateDirectoryW
OutputDebugStringW
GetTickCount
WriteFile
InitializeCriticalSection
CreateFileW
GetLastError
DisableThreadLibraryCalls
DeleteCriticalSection
CloseHandle
GetSystemTime
GlobalLock
GlobalAlloc
Sleep
GlobalUnlock
GlobalFree
FreeLibrary
GetSystemDirectoryW
LoadLibraryW
GetProcAddress
SetDefaultCommConfigW
GetModuleFileNameW
GetCurrentProcessId
GetCPInfo
QueryPerformanceCounter
SetEnvironmentVariableA
GetModuleFileNameA
GetFileType
GetOEMCP
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetStringTypeW
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
GetACP

user32

LoadStringW
wsprintfW

advapi32

RegCloseKey

Exports

Exports

DllMain
InitializePrintMonitor2

Sections

.text
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/REINERPMU.dll
.dll windows x86

de6971969449ee72e72470482e7cdd7d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

2b:d5:45:e9:30:54:43:07:1b:b3:cd:dd:81:d1:6a:29:83:37:8a:bb:84:4b:f0:c4:de:88:d1:30:7e:8b:ed:3c
Signer

Actual PE Digest

2b:d5:45:e9:30:54:43:07:1b:b3:cd:dd:81:d1:6a:29:83:37:8a:bb:84:4b:f0:c4:de:88:d1:30:7e:8b:ed:3c

Digest Algorithm

sha256

PE Digest Matches

true

35:95:99:17:2f:c7:5d:71:18:6d:17:f1:99:3a:52:e0:81:ec:ae:9e
Signer

Actual PE Digest

35:95:99:17:2f:c7:5d:71:18:6d:17:f1:99:3a:52:e0:81:ec:ae:9e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rmapi32

ord40
ord2

kernel32

ExitProcess
CreateFileW
FlushFileBuffers
GetModuleHandleW
LoadLibraryW
GetModuleFileNameW
GetLastError
SetLastError
GetProcAddress
GetModuleHandleA
OutputDebugStringA
WaitForSingleObject
GetTickCount
TerminateThread
Sleep
MultiByteToWideChar
CreateThread
OutputDebugStringW
DisableThreadLibraryCalls
FormatMessageW
LocalFree
WriteConsoleW
SetStdHandle
GetStringTypeW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LCMapStringW
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
WriteFile
LeaveCriticalSection
EnterCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
CloseHandle
GetModuleHandleExW
WideCharToMultiByte
HeapSize
HeapFree
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId

user32

IsWindow
DialogBoxParamW
LoadStringW
DestroyWindow
SetCursor
GetWindowRect
LoadCursorW
GetClientRect
GetWindowLongW
GetDlgItem
SetWindowLongW
EndDialog
RedrawWindow
SendDlgItemMessageW
ShowWindow
CreateWindowExW
MessageBoxW
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
MapWindowPoints
UpdateWindow
EnableWindow

winspool.drv

XcvDataW
OpenPrinterW
EnumPortsW
ClosePrinter

Exports

Exports

DllMain
InitializePrintMonitorUI

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/REINERdrv.dll
.dll windows x86

f977c6ad5f52714b630019582d8bea6b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

2c:7e:34:f7:74:80:5d:be:9e:ac:68:14:c4:4c:09:a3:06:0e:a1:63:23:6c:df:db:56:ce:7d:3d:5d:20:59:1f
Signer

Actual PE Digest

2c:7e:34:f7:74:80:5d:be:9e:ac:68:14:c4:4c:09:a3:06:0e:a1:63:23:6c:df:db:56:ce:7d:3d:5d:20:59:1f

Digest Algorithm

sha256

PE Digest Matches

true

e6:4c:bb:f9:c1:af:11:f7:4a:5e:49:d5:ef:ce:3f:8b:a6:56:b0:69
Signer

Actual PE Digest

e6:4c:bb:f9:c1:af:11:f7:4a:5e:49:d5:ef:ce:3f:8b:a6:56:b0:69

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

GetModuleFileNameExW

dbghelp

MiniDumpWriteDump

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdi32

DeleteObject
XFORMOBJ_iGetXform
FONTOBJ_pxoGetXform
XFORMOBJ_bApplyXform
EngStretchBlt
EngLineTo
XLATEOBJ_cGetPalette
EngLockSurface
EngCreateBitmap
EngMarkBandingSurface
EngAssociateSurface
EngDeleteSurface
FONTOBJ_pfdg
BRUSHOBJ_ulGetBrushColor
STROBJ_vEnumStart
STROBJ_bEnum
FONTOBJ_cGetGlyphs
FONTOBJ_pifi
EngTextOut
PATHOBJ_vEnumStart
PATHOBJ_bEnum
EngComputeGlyphSet
EngCreatePalette
EngDeletePalette
EngBitBlt

mscms

IsColorProfileValid
CreateColorTransformW
CloseColorProfile
OpenColorProfileW
DeleteColorTransform
GetColorDirectoryW
TranslateBitmapBits

kernel32

FlushFileBuffers
LoadLibraryExW
GetTimeZoneInformation
ReadConsoleW
SetFilePointerEx
ExitProcess
GetOEMCP
QueryPerformanceCounter
GetLocalTime
GetLastError
GlobalAlloc
GlobalFree
SetUnhandledExceptionFilter
InitializeCriticalSection
DeleteCriticalSection
SetLastError
WideCharToMultiByte
CreateFileMappingW
MapViewOfFile
CloseHandle
GetSystemDirectoryW
WaitForSingleObject
GetExitCodeProcess
UnmapViewOfFile
MultiByteToWideChar
OpenFileMappingA
VirtualQuery
GetACP
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSectionAndSpinCount
RaiseException
GetEnvironmentStringsW
DecodePointer
WriteFile
CreateFileW
GetTempPathW
GetTempFileNameW
SetFilePointer
OutputDebugStringW
OutputDebugStringA
CreateDirectoryW
GetWindowsDirectoryW
GetFileSize
ReadFile
FormatMessageW
GetTempPathA
GetTempFileNameA
CreateFileA
GetFileTime
CompareFileTime
Sleep
GetTickCount
FileTimeToSystemTime
SystemTimeToFileTime
VerSetConditionMask
VerifyVersionInfoW
GetVersion
SetEnvironmentVariableA
FreeLibrary
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleExW
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
LoadLibraryW
GetLocaleInfoW
GetTimeFormatW
GetThreadLocale
GetDateFormatW
LocalFree
IsValidCodePage
GetConsoleMode
GetConsoleCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetModuleFileNameA
LCMapStringW
CompareStringW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
UnhandledExceptionFilter
GetCPInfo
FreeEnvironmentStringsW
SetStdHandle
SetEndOfFile
HeapSize
GetSystemInfo
RtlUnwind
GetCommandLineA
WriteConsoleW
GetModuleFileNameW
GetStringTypeW
EncodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetStdHandle
GetFileType

user32

wsprintfW
SetCursor
MessageBoxW
LoadCursorW

winspool.drv

GetPrinterDriverW
WritePrinter
GetPrinterDataW
ClosePrinter
EnumPortsW
EnumPrinterDriversW
EnumMonitorsW
DocumentPropertiesW
GetPrinterW
SetPrinterDataW
ord203
SetPrinterW
OpenPrinterW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumKeyExW

shell32

ShellExecuteExW

Exports

Exports

DllMain
DrvDisableDriver
DrvEnableDriver
DrvQueryDriverInfo

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/REINERui.dll
.dll windows x86

0606787fcf2cb761be77adf41706151e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

af:17:7c:e2:53:40:39:15:ee:02:8f:80:f3:1d:67:b0:e7:6b:4c:be:ff:1e:43:4d:d7:70:2f:44:1f:93:c7:ff
Signer

Actual PE Digest

af:17:7c:e2:53:40:39:15:ee:02:8f:80:f3:1d:67:b0:e7:6b:4c:be:ff:1e:43:4d:d7:70:2f:44:1f:93:c7:ff

Digest Algorithm

sha256

PE Digest Matches

true

14:82:a4:14:ef:02:92:bc:cd:4c:2a:73:1a:d4:7a:65:8a:6f:95:38
Signer

Actual PE Digest

14:82:a4:14:ef:02:92:bc:cd:4c:2a:73:1a:d4:7a:65:8a:6f:95:38

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

GetModuleFileNameExW

dbghelp

MiniDumpWriteDump

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

gdi32

EngComputeGlyphSet
ExtTextOutW
GetCurrentObject
GetTextExtentPoint32W
SelectClipRgn
GetClipRgn
GetObjectW
CreateCompatibleDC
CreateRectRgn
GetStockObject
SetBkColor
SetTextColor
CreateSolidBrush
DeleteDC
EndDoc
EndPage
TextOutW
GetTextFaceW
SetTextAlign
SelectObject
CreateFontIndirectW
StartPage
CreateDCW
DeleteObject
GetFontUnicodeRanges
GetCharABCWidthsW
CreateCompatibleBitmap
GdiTransparentBlt
GetBitmapBits
CreatePen
ExtEscape
Escape
Rectangle
GetStretchBltMode
SetStretchBltMode
StretchBlt
SelectPalette
RealizePalette
GetDIBits
StretchDIBits
BitBlt
GetTextColor
AbortDoc
GetTextExtentPointW
Ellipse
CreateRoundRectRgn
RoundRect
MoveToEx
LineTo
CombineRgn
FloodFill
CreatePolygonRgn
Polyline
EnumFontFamiliesExW
GetDeviceCaps
SetBkMode
GetPixel
GetTextMetricsW
GetCharABCWidthsA
TextOutA
StartDocW
GetCharWidth32A

uxtheme

SetWindowTheme

kernel32

GetTimeFormatW
GetThreadLocale
GetDateFormatW
GlobalLock
GlobalUnlock
GetWindowsDirectoryW
MulDiv
CreateThread
TerminateThread
LoadLibraryA
GetCurrentDirectoryW
SetCurrentDirectoryW
FindResourceW
DeleteFileW
SizeofResource
LockResource
LoadResource
VerSetConditionMask
VerifyVersionInfoW
GetVersion
GetSystemInfo
GetSystemDirectoryW
LoadLibraryExA
ExpandEnvironmentStringsA
GetTimeZoneInformation
GetFileType
GetStdHandle
ReadConsoleW
GetVersionExW
GetOEMCP
GetACP
IsValidCodePage
GetConsoleMode
GetConsoleCP
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
UnhandledExceptionFilter
GetCPInfo
RtlUnwind
GetCommandLineA
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
EncodePointer
GetStringTypeW
IsDebuggerPresent
GetLocaleInfoW
ReadFile
GetFileSize
GetCurrentProcessId
GetCurrentThreadId
CreateDirectoryW
GetCurrentProcess
GetModuleHandleExW
GetTempFileNameW
GetTempPathW
ReleaseMutex
WaitForSingleObject
CreateMutexW
LocalFree
OutputDebugStringW
SystemTimeToFileTime
FileTimeToSystemTime
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
Sleep
CompareFileTime
GetFileTime
CreateFileW
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
GetTempPathA
FormatMessageW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetModuleHandleA
DecodePointer
GlobalFree
HeapSize
GetProcAddress
SetEnvironmentVariableA
SetLastError
GetLastError
RaiseException
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
LoadLibraryW
GlobalAlloc
InitializeCriticalSection
GetProcessHeap
GetModuleHandleW
HeapFree
SetUnhandledExceptionFilter
HeapAlloc
FreeLibrary
HeapReAlloc
QueryPerformanceFrequency
GetLocalTime
QueryPerformanceCounter
OutputDebugStringA
FlushFileBuffers
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
SetStdHandle
WriteConsoleW
SetEndOfFile
SetFilePointerEx

user32

CloseWindow
IsWindowVisible
WaitMessage
FillRect
ShowScrollBar
MoveWindow
MapDialogRect
GetSystemMetrics
ClientToScreen
DialogBoxParamW
GetSysColor
CallWindowProcW
EndPaint
BeginPaint
GetWindowTextLengthW
SetDlgItemTextW
GetWindowTextW
LoadBitmapW
GetParent
InvalidateRect
ShowWindow
SetWindowTextW
CreateDialogParamW
wsprintfW
SetRect
SetCursor
LoadCursorW
GetWindowLongW
SetWindowLongW
EnumChildWindows
GetDlgItem
SetWindowPos
EndDialog
MessageBoxA
SetFocus
GetWindowInfo
CreatePopupMenu
InsertMenuW
TrackPopupMenuEx
DestroyMenu
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
GetMonitorInfoW
MonitorFromPoint
LoadIconW
CreateWindowExW
SystemParametersInfoW
GetDC
ReleaseDC
DestroyIcon
PtInRect
mouse_event
GetClientRect
EnableWindow
GetWindowRect
FrameRect
DrawFrameControl
MessageBoxW
GetFocus
GetScrollInfo
GetScrollPos
SetScrollPos
ScrollWindow
MapWindowPoints
GetCursorPos
GetClassNameW
IsWindowEnabled
SetScrollInfo
DefWindowProcW
KillTimer
SetTimer
DestroyWindow
SendMessageW

winspool.drv

GetPrinterDriverW
OpenPrinterW
ClosePrinter
ord203
GetPrinterDataW
EnumPortsW
DocumentPropertiesW
SetPrinterW
SetPrinterDataW
EnumPrintersW
StartDocPrinterW
StartPagePrinter
WritePrinter
EndPagePrinter
EndDocPrinter
EnumPrinterDriversW
EnumMonitorsW
GetPrinterW

advapi32

RegOpenKeyExA
RegEnumValueW
RegQueryInfoKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA

shell32

SHGetFolderPathW
ShellExecuteW
SHBrowseForFolderW
SHCreateDirectoryExW
SHGetPathFromIDListW

ole32

CreateStreamOnHGlobal
CoTaskMemFree

shlwapi

PathFindExtensionW
ord191

gdiplus

GdipGetImageWidth
GdipGetImageHeight
GdipCreateFromHDC
GdipGraphicsClear
GdipSetPixelOffsetMode
GdipSetInterpolationMode
GdipDrawImageRectI
GdipFree
GdipDisposeImage
GdipAlloc
GdipCloneImage
GdipLoadImageFromFile
GdipSetPageUnit
GdipCreateSolidFill
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromFile
GdipGetImageType
GdiplusShutdown
GdiplusStartup
GdipLoadImageFromStream
GdipCreateBitmapFromResource
GdipGetImageDimension
GdipFillRectangleI
GdipCloneBrush
GdipDeleteGraphics
GdipDeleteBrush

Exports

Exports

DevQueryPrintEx
DrvConvertDevMode
DrvDeviceCapabilities
DrvDevicePropertySheets
DrvDocumentEvent
DrvDocumentPropertySheets
DrvDriverEvent
DrvPrinterEvent
DrvQueryColorProfile
DrvQueryJobAttributes
DrvSplDeviceCaps
DrvUpgradePrinter

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 355KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/REINERui.res.dll
.dll windows x86

89a6d69512ddd5caf6edc165bcb08fbf

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

38:02:c2:4e:72:b3:1b:29:a4:84:8d:0c:2b:33:6b:38:1f:fd:8c:76:84:6c:57:59:13:b9:e8:e1:ea:5d:cb:15
Signer

Actual PE Digest

38:02:c2:4e:72:b3:1b:29:a4:84:8d:0c:2b:33:6b:38:1f:fd:8c:76:84:6c:57:59:13:b9:e8:e1:ea:5d:cb:15

Digest Algorithm

sha256

PE Digest Matches

true

1c:25:07:d4:2d:0e:12:78:44:ed:2f:11:33:22:12:d5:aa:60:43:d1
Signer

Actual PE Digest

1c:25:07:d4:2d:0e:12:78:44:ed:2f:11:33:22:12:d5:aa:60:43:d1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WriteFile
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
HeapAlloc
HeapReAlloc
GetStringTypeW
OutputDebugStringW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/ReBarcode32.dll
.dll windows x86

fcc758bdb1e9c8c97e223f0ced9d65db

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

GetOEMCP
GetCPInfo
GetTimeZoneInformation
GetStringTypeW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
OutputDebugStringW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSectionEx
RaiseException
GetLastError
HeapSize
DecodePointer
DeleteCriticalSection
FindResourceW
QueryPerformanceCounter
LoadResource
GlobalLock
SizeofResource
MultiByteToWideChar
GetACP
GlobalFree
LockResource
GlobalAlloc
GetModuleHandleW
GetModuleFileNameW
WideCharToMultiByte
SetLastError
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
GetModuleFileNameA
GetStdHandle
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
ExitThread
WriteFile
IsValidCodePage
FreeEnvironmentStringsW
GlobalUnlock
GetEnvironmentStringsW
OutputDebugStringA
CloseHandle
DuplicateHandle
CreateThread
GetModuleHandleExW
ExitProcess
RtlUnwind
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
FindResourceExW
VirtualProtect
SearchPathW
GetProfileIntW
GetTickCount
Sleep
GetTempPathW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
lstrcpyW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryW
GlobalFlags
GlobalFindAtomW
FreeResource
GetSystemDirectoryW
EncodePointer
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalGetAtomNameW
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
ResumeThread
SetThreadPriority
WaitForSingleObject
GlobalAddAtomW
GetCurrentProcessId
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpW
lstrcmpA
GlobalDeleteAtom
FreeLibrary
GetVersionExW
GetCurrentThreadId
GetCurrentThread
CopyFileW
GetCurrentProcess
FormatMessageW
MulDiv
LocalFree
GlobalSize
LoadLibraryW
LoadLibraryA
lstrcmpiW
LoadLibraryExW
GetProcAddress
GetModuleHandleA

user32

CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
DrawIcon
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
WaitMessage
PostThreadMessageW
GetSystemMenu
IsZoomed
GetComboBoxInfo
TrackMouseEvent
GetKeyNameTextW
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
MonitorFromPoint
UpdateLayeredWindow
IsMenu
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
LoadMenuW
MapVirtualKeyW
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
MessageBeep
GetIconInfo
DrawIconEx
LoadImageW
IsRectEmpty
OffsetRect
SetRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IntersectRect
SendDlgItemMessageA
GetMenuItemInfoW
DestroyMenu
DestroyIcon
IsIconic
FillRect
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
InvalidateRect
KillTimer
SetTimer
DeleteMenu
SystemParametersInfoW
RealChildWindowFromPoint
GetDesktopWindow
ClientToScreen
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
LoadCursorW
GetSysColorBrush
GetSysColor
GetDC
GetWindowTextLengthW
GetWindowTextW
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
FrameRect
CharUpperBuffW
RegisterClipboardFormatW
ModifyMenuW
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
SetClassLongW
LockWindowUpdate
SetParent
DestroyAcceleratorTable
SetCursorPos
CopyImage
CopyAcceleratorTableW
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetLastActivePopup
GetWindowThreadProcessId
GetWindowLongW
MessageBoxW
IsWindowEnabled
EnableWindow
SetCursor
ShowOwnedPopups
PostQuitMessage
PostMessageW
LoadBitmapW
GetParent
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
SendMessageW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetSystemMetrics
CharUpperW
TabbedTextOutW
DrawTextW
ReleaseDC
UnregisterClassW
InflateRect
SetRect

gdi32

CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteDC
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
BitBlt
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceW
GetObjectW
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCW
CopyMetaFileW
SetTextColor
CreateFontIndirectW
SetBkMode
DeleteObject
SelectObject
ScaleWindowExtEx
CreateDIBitmap
CreateCompatibleDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

SHBrowseForFolderW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
SHGetFileInfoW
DragFinish
DragQueryFileW

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
StrFormatKBSizeW

uxtheme

GetThemePartSize
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText

ole32

RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
CoInitializeEx
CoDisconnectObject
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringLen
VariantInit
LoadTypeLi
VarBstrFromDate
VariantChangeType
VariantCopy
VariantClear
SysAllocString
SysFreeString
SysAllocStringLen

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Exports

Exports

??0REgenBarcode@@QAE@XZ
??1REgenBarcode@@QAE@XZ
?REBerechneBitmapBreite@REgenBarcode@@QAEHHPADHHHHHH@Z
?REBerechneBitmapBreiteV2@REgenBarcode@@QAEHHPADHHHHHHHHHH@Z
?REBerechneBitmapHoehe@REgenBarcode@@QAEHHPADHHHHHH@Z
?REBerechneModulbreiteAusBitmapbreite@REgenBarcode@@QAEHHPADHHHHHH@Z
?REBerechneModulbreiteAusBitmapbreiteV2@REgenBarcode@@QAEHHPADHHHHHHHHHH@Z
?REBerechneModulhoeheAusBitmaphoehe@REgenBarcode@@QAEHHPADHHHHHHHHHH@Z
?REGenerateBarcode@REgenBarcode@@QAEPAXXZ
?REGetAllowedBarcodeCharacter@REgenBarcode@@QAEHHPADH@Z
?REGetCharacterImage@REgenBarcode@@QAEHHPAPAX@Z
?REGetLastError@REgenBarcode@@QAEHXZ
?REGetMinimalBarcodeHeight@REgenBarcode@@QAEHHPADHHHH@Z
?REGetMinimalBarcodeWidth@REgenBarcode@@QAEHHPADHH@Z
?REGetMinimalBarcodeWidthV2@REgenBarcode@@QAEHHPADHHHHHH@Z
?RESetBarcodeParameter@REgenBarcode@@QAEHHPADHHHHHHHHHHHHHH@Z
?RESetParam@REgenBarcode@@QAEHHPADHHHHHHHHH@Z
?REVersion@REgenBarcode@@QAEHXZ

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 518KB - Virtual size: 518KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/RmApi32.dll
.dll windows x86

1b4d85c987f3c5176712f337342cd017

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

rmbasicapi32

ord62
ord24
ord33
ord40
ord47
ord14
ord23
ord22
ord31
ord32
ord13
ord38
ord39
ord28
ord27
ord19
ord18
ord34
ord35
ord17
ord16
ord36
ord37
ord30
ord29
ord20
ord21
ord7
ord10
ord1
ord44
ord11
ord5
ord3
ord57
ord9
ord12
ord25
ord26
ord15
ord48

freeimage32

_FreeImage_ConvertTo24Bits@4
_FreeImage_GetHeight@4
_FreeImage_GetWidth@4
_FreeImage_GetDotsPerMeterX@4
_FreeImage_GetBits@4
_FreeImage_Unload@4
_FreeImage_SetDotsPerMeterY@8
_FreeImage_Allocate@24
_FreeImage_Rescale@16
_FreeImage_GetBPP@4
_FreeImage_GetInfo@4
_FreeImage_SetDotsPerMeterX@8
_FreeImage_Dither@8
_FreeImage_GetDotsPerMeterY@4
_FreeImage_LoadU@12
_FreeImage_GetPitch@4

rebarcode32

?REBerechneBitmapBreiteV2@REgenBarcode@@QAEHHPADHHHHHHHHHH@Z
?REBerechneBitmapHoehe@REgenBarcode@@QAEHHPADHHHHHH@Z
?REGetLastError@REgenBarcode@@QAEHXZ
?REVersion@REgenBarcode@@QAEHXZ
?REGenerateBarcode@REgenBarcode@@QAEPAXXZ
?RESetBarcodeParameter@REgenBarcode@@QAEHHPADHHHHHHHHHHHHHH@Z
??0REgenBarcode@@QAE@XZ
??1REgenBarcode@@QAE@XZ
?REGetAllowedBarcodeCharacter@REgenBarcode@@QAEHHPADH@Z

kernel32

GetCPInfo
GetOEMCP
SetLastError
GetTimeZoneInformation
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetStringTypeW
GetFileType
GetModuleFileNameA
GetACP
IsValidCodePage
GetConsoleMode
GetConsoleCP
WriteFile
RtlUnwind
QueryPerformanceCounter
GetProcAddress
GetModuleHandleExW
ExitProcess
HeapReAlloc
HeapAlloc
HeapFree
GlobalLock
GetProcessHeap
GlobalAlloc
InitializeCriticalSectionAndSpinCount
HeapDestroy
GlobalUnlock
RaiseException
GetLastError
HeapSize
GlobalFree
DecodePointer
DeleteCriticalSection
CreateMutexW
WaitForSingleObject
GetLocalTime
ReleaseMutex
FindResourceExW
FindResourceW
LoadResource
GetModuleHandleW
GetTickCount
SizeofResource
GetModuleFileNameW
MultiByteToWideChar
LockResource
SetEnvironmentVariableA
GetSystemTime
CreateThread
CreateFileW
LocalAlloc
LocalFree
WideCharToMultiByte
GetCurrentThreadId
GetCommandLineA
IsProcessorFeaturePresent
EncodePointer
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
SetFilePointerEx
SetStdHandle
WriteConsoleW
FlushFileBuffers
CompareStringW
LCMapStringW
SetEndOfFile
ReadFile
ReadConsoleW
CloseHandle
OutputDebugStringW
IsDebuggerPresent

user32

ReleaseDC
DrawTextW
wsprintfW
TabbedTextOutW

gdi32

CreateFontW
CreateDIBitmap
CreateCompatibleDC
SelectObject
DeleteObject
SetBkMode
GetDIBits
CreateFontIndirectW
SetTextColor
GetDeviceCaps

advapi32

ReportEventW
RegOpenKeyExW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegisterEventSourceW
RegCloseKey

Exports

Exports

RMAPI_Close
RMAPI_FixDeviceError
RMAPI_FreeAPIMemory
RMAPI_GetDateTime
RMAPI_GetDeviceDocumentFileName
RMAPI_GetDeviceDocumentFontParameters
RMAPI_GetDeviceFileSystemInfo
RMAPI_GetDeviceFunctionParameters
RMAPI_GetDeviceInfo
RMAPI_GetDeviceParameters
RMAPI_GetDevicePrintParameters
RMAPI_GetDeviceSignalParameters
RMAPI_GetDeviceStatistic
RMAPI_GetDeviceStatus
RMAPI_GetDeviceStatusEx
RMAPI_GetDeviceTimeOfDay
RMAPI_GetImage
RMAPI_GetListOfAvailableDevices
RMAPI_GetListOfAvailableDevicesEx
RMAPI_GetNumberCircle
RMAPI_GetNumberingMachine
RMAPI_GetRMAPIErrorText
RMAPI_GetText
RMAPI_GetVariableBarcode
RMAPI_GetVersion
RMAPI_IsOpen
RMAPI_LockDevice
RMAPI_Open
RMAPI_PrintTrigger
RMAPI_SetDateTime
RMAPI_SetDeviceDocumentFileName
RMAPI_SetDeviceDocumentFontParameters
RMAPI_SetDeviceDocumentMonthAbbreviation
RMAPI_SetDeviceFunctionParameters
RMAPI_SetDeviceParameters
RMAPI_SetDevicePassword
RMAPI_SetDevicePrintParameters
RMAPI_SetDeviceSignalParameters
RMAPI_SetDeviceTimeOfDay
RMAPI_SetFixedBarcode
RMAPI_SetImage
RMAPI_SetImageByPath
RMAPI_SetNumberCircle
RMAPI_SetNumberingMachine
RMAPI_SetText
RMAPI_SetVariableBarcode
RMAPI_TransferData
RMAPI_TransferDataEx
RMAPI_TransferDataState
RMAPI_UnlockDevice

Sections

.text
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 22.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/RmBasicApi32.dll
.dll windows x86

98f69de8d654bb82c9187a7d4a8f99af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_DevNode_Registry_PropertyA
SetupDiDestroyDeviceInfoList
CM_Get_Child
CM_Get_Sibling
CM_Get_Parent
CM_Locate_DevNodeA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ws2_32

send
setsockopt
closesocket
WSACleanup
WSALookupServiceBeginA
WSAGetLastError
WSAStartup
connect
WSALookupServiceEnd
socket
recv
WSASetServiceA
WSALookupServiceNextA

kernel32

GetStringTypeW
SetFilePointerEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
GetModuleFileNameW
GetStdHandle
HeapReAlloc
HeapAlloc
HeapFree
GlobalLock
GetProcessHeap
GlobalAlloc
InitializeCriticalSectionAndSpinCount
Sleep
HeapDestroy
GlobalUnlock
RaiseException
GetLastError
HeapSize
DecodePointer
DeleteCriticalSection
GlobalFree
WaitForSingleObject
GetLocalTime
ReleaseMutex
CreateFileA
lstrlenA
WideCharToMultiByte
lstrcatA
lstrcmpiA
DeviceIoControl
CloseHandle
GetCurrentProcess
GetProcAddress
GetSystemInfo
GetModuleFileNameA
GetModuleHandleA
GetVersionExA
LocalAlloc
LocalFree
WriteFile
CreateEventA
ReadFile
GetOverlappedResult
GetCommState
SetCommState
SetCommTimeouts
GetCommTimeouts
CreateThread
GetConsoleMode
GetConsoleCP
RtlUnwind
SetEndOfFile
LCMapStringW
LoadLibraryExW
SetStdHandle
WriteConsoleW
FlushFileBuffers
ReadConsoleW
CreateFileW
CreateMutexA
GetModuleHandleW
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
EncodePointer
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
MultiByteToWideChar
ExitProcess
GetModuleHandleExW
AreFileApisANSI
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW

user32

wvsprintfA
wsprintfA

advapi32

RegQueryValueExA
RegOpenKeyA
RegQueryInfoKeyA
RegEnumKeyExA
FreeSid
AllocateAndInitializeSid
ReportEventA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclA
RegisterEventSourceA
GetUserNameA
RegCloseKey
RegOpenKeyExA

Exports

Exports

ActivateSFModuleMode
ActivateSFUpdateMode
Close
DeInitialize
DeviceSecurity
FreeAllocatedAPIMemory
GetAPIVersion
GetBarcode
GetDateTime
GetDateTimeV2
GetDeviceClock
GetDeviceDescriptor
GetDeviceInfo
GetDeviceParameter
GetDeviceStatus
GetFileSystemInfo
GetFormatParameter
GetImage
GetListOfAvailableDevices
GetListOfAvailableDevicesV3
GetNumberCircle
GetNumeroteur
GetSFDeviceParameter
GetSFDeviceSensors
GetSFDeviceStatistic
GetSFDeviceStatisticV2
GetSFDeviceTestfunction
GetSFDeviceUpdateData
GetSFDeviceUpdateState
GetSFInitialisationReason
GetSFModuleStatus
GetSFPrintHeadData
GetSFTOVAlgorithmData
GetText
Initialize
IsOpen
Open
OpenV2
PrintTrigger
ResetDevice
SetBarcode
SetDateTime
SetDateTimeV2
SetDeviceClock
SetDeviceIntoTransferMode
SetDeviceIntoTransferModeV2
SetDeviceParameter
SetFileSystemInfo
SetFormatParameter
SetImage
SetNumberCircle
SetNumeroteur
SetSFDeviceActuators
SetSFDeviceAdjustment
SetSFDeviceInitialisation
SetSFDeviceParameter
SetSFDeviceTestfunction
SetSFDeviceUpdateData
SetSFPrintHeadData
SetSFSensorReferenceParameter
SetText
TestOpen

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/WdfCoInstaller01011.dll
.dll windows x86

3fb9d7c6d0c40e140b18909ec01744f6

Code Sign

61:02:92:4a:00:00:00:00:00:20
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

09-01-2012 22:25

Not After

09-04-2013 22:25

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:05:dd:42:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

26-03-2012 21:37

Not After

26-06-2013 21:37

Subject

CN=Microsoft Windows,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:07:02:dc:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

15-09-2005 21:55

Not After

15-03-2016 22:05

Subject

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:6d:9d:a5:3e:87:00:9d:33:49:00:00:00:00:00:6d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20-09-2018 19:45

Not After

20-09-2019 19:45

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

98:fc:e7:f4:52:57:cc:ef:12:fe:60:ed:42:28:a4:41:ea:e0:74:f5:21:37:f8:dd:f7:0d:65:b9:24:77:30:cc
Signer

Actual PE Digest

98:fc:e7:f4:52:57:cc:ef:12:fe:60:ed:42:28:a4:41:ea:e0:74:f5:21:37:f8:dd:f7:0d:65:b9:24:77:30:cc

Digest Algorithm

sha256

PE Digest Matches

true

aa:46:59:22:ea:c0:a0:2f:12:22:c1:25:77:aa:bc:bd:57:11:0a:aa
Signer

Actual PE Digest

aa:46:59:22:ea:c0:a0:2f:12:22:c1:25:77:aa:bc:bd:57:11:0a:aa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

free
_wtoi
_wcsnicmp
_amsg_exit
malloc
_ultow
_XcptFilter
_initterm
_wcsicmp
_except_handler4_common
_vsnwprintf
memcpy
memset

setupapi

SetupDiGetActualSectionToInstallW
SetupLogErrorW
SetupDiGetDeviceInstallParamsW
CM_Set_DevNode_Problem_Ex
SetupCloseInfFile
SetupOpenInfFileW
SetupCloseLog
SetupDiSetDeviceInstallParamsW
SetupOpenLog
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupGetStringFieldW
SetupPromptReboot
SetupFindFirstLineW
SetupGetLineCountW
SetupFindNextMatchLineW

kernel32

SetLastError
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
VerSetConditionMask
GetModuleHandleW
GetVersionExW
GetModuleFileNameW
VerifyVersionInfoW
GetLastError
GetProcAddress
GlobalFree
LocalAlloc
GetWindowsDirectoryW
LocalFree
FreeLibrary
LoadLibraryW
FindFirstFileW
FindResourceW
LoadResource
CreateProcessW
CreateDirectoryW
WaitForSingleObject
OutputDebugStringW
WriteFile
SizeofResource
FormatMessageW
GetExitCodeProcess
TerminateProcess
CreateFileW
InterlockedCompareExchange
FindClose
GetLocalTime
LockResource
RemoveDirectoryW
FindNextFileW
CloseHandle
DeleteFileW
ExpandEnvironmentStringsW
LoadLibraryExW
Sleep
InterlockedExchange

advapi32

EventUnregister
EventRegister
QueryServiceConfigW
ChangeServiceConfigW
RegFlushKey
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
EventWrite
QueryServiceStatusEx
RegQueryValueExW
OpenServiceW
OpenSCManagerW
DeleteService
CloseServiceHandle

shell32

CommandLineToArgvW

user32

IsCharAlphaNumericW
LoadStringW
IsCharAlphaW

shlwapi

PathFileExistsW

Exports

Exports

WdfCoInstaller
WdfPostDeviceInstall
WdfPostDeviceRemove
WdfPreDeviceInstall
WdfPreDeviceInstallEx
WdfPreDeviceRemove

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/dpinst_usbcom.exe
.exe windows x86

3ab7cc62e4963955ad408cd420cd8ef1

Code Sign

61:03:dc:f6:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:12

Not After

25-07-2011 19:22

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:15:23:0f:00:00:00:00:00:0a
Certificate

Issuer

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 21:57

Not After

07-03-2011 21:57

Subject

CN=Microsoft Windows,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:07:02:dc:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

15-09-2005 21:55

Not After

15-03-2016 22:05

Subject

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

71:85:11:e5:d1:4c:f1:de:16:92:e6:78:64:21:75:0c:36:76:a6:9e
Signer

Actual PE Digest

71:85:11:e5:d1:4c:f1:de:16:92:e6:78:64:21:75:0c:36:76:a6:9e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
IsTextUnicode
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
SetEntriesInAclW
DeleteService
StartServiceW
ControlService
OpenSCManagerW
CloseServiceHandle
OpenServiceW
QueryServiceStatus
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
CheckTokenMembership
ConvertStringSecurityDescriptorToSecurityDescriptorW

kernel32

GetFileAttributesW
DeleteFileW
ReleaseMutex
SetFilePointer
HeapFree
GetProcessHeap
HeapAlloc
CreateMutexW
FreeConsole
SetConsoleMode
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
FreeLibrary
FillConsoleOutputCharacterW
ReadConsoleOutputW
GetConsoleMode
GetStdHandle
GetProcAddress
LoadLibraryW
WriteConsoleW
IsValidLocale
lstrlenW
lstrcmpW
CompareStringW
GetTempFileNameW
FindFirstFileW
FindNextFileW
FindClose
CopyFileW
SetFileAttributesW
FormatMessageW
RaiseException
GetFileSize
CreateFileMappingW
MapViewOfFile
WriteConsoleOutputW
UnmapViewOfFile
InterlockedDecrement
InterlockedIncrement
CreateFileW
WriteFile
CreateThread
WaitForMultipleObjectsEx
InterlockedCompareExchange
WaitForSingleObjectEx
SetEvent
CreateEventW
GetExitCodeProcess
DeviceIoControl
VerSetConditionMask
VerifyVersionInfoW
CreateDirectoryW
RemoveDirectoryW
GetCurrentDirectoryW
GetShortPathNameW
GetFullPathNameW
GetSystemDirectoryW
GetSystemWindowsDirectoryW
MoveFileExW
SearchPathW
GetSystemDefaultUILanguage
LoadLibraryExW
CreateFileA
SetEndOfFile
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetConsoleCP
GetLocaleInfoA
Sleep
LoadLibraryExA
ReadFile
LCMapStringW
LCMapStringA
GetThreadLocale
SetThreadLocale
GetUserDefaultUILanguage
GetVersionExW
GetLocalTime
GetWindowsDirectoryW
GetModuleFileNameW
SetCurrentDirectoryW
WaitForSingleObject
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
OutputDebugStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
ExitProcess
GetModuleHandleA
SetUnhandledExceptionFilter
VirtualQuery
GetSystemInfo
GetModuleHandleW
VirtualAlloc
VirtualProtect
GetStartupInfoW
GetEnvironmentVariableW
lstrcmpiW
WideCharToMultiByte
InterlockedExchange
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
GetCommandLineW
LocalAlloc
GlobalFree
LocalFree
MultiByteToWideChar
GetCurrentProcess
GetLastError
CloseHandle
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
EnumResourceLanguagesW
LocalReAlloc
EnterCriticalSection

gdi32

SetLayout
DeleteDC
GetObjectW
CreateCompatibleBitmap
CreateBitmap
SelectObject
StartPage
EndPage
StartDocW
EndDoc
GetTextMetricsW
GetDeviceCaps
CreateFontIndirectW
DeleteObject
CreateCompatibleDC

user32

AllowSetForegroundWindow
DefWindowProcW
PostQuitMessage
GetUserObjectInformationW
GetProcessWindowStation
GetIconInfo
DrawIconEx
CreateIconIndirect
LoadIconW
LoadBitmapW
DrawTextExW
LoadImageW
GetSystemMetrics
GetSysColor
DestroyWindow
GetWindowLongW
SendDlgItemMessageW
InvalidateRect
SystemParametersInfoW
GetDC
ReleaseDC
SetWindowLongW
SetWindowTextW
GetParent
PostMessageW
IsDlgButtonChecked
CheckDlgButton
SetFocus
CallWindowProcW
DestroyIcon
DialogBoxParamW
SetDlgItemTextW
CharLowerW
GetDlgItem
SendMessageW
MessageBoxW
RegisterClassExW
CreateWindowExW
ShowWindow
UnregisterClassA
EndDialog

ntdll

RtlNtStatusToDosError
NtOpenThreadToken
NtQueryInformationToken
NtOpenProcessToken
RtlUnwind
NtClose

shell32

SHGetFolderPathW
ShellExecuteExW
ord59
CommandLineToArgvW

setupapi

SetupDiClassNameFromGuidW
SetupDiOpenClassRegKey
SetupInstallFilesFromInfSectionW
SetupPromptReboot
SetupInstallFromInfSectionW
SetupInstallServicesFromInfSectionW
SetupDiGetActualSectionToInstallW
SetupFindNextLine
SetupFindNextMatchLineW
SetupOpenInfFileW
SetupGetLineCountW
SetupCloseInfFile
SetupFindFirstLineW
SetupGetStringFieldW
pSetupSetGlobalFlags
pSetupGetGlobalFlags
SetupGetFieldCount
SetupGetIntField
SetupOpenAppendInfFileW
SetupDiSetClassInstallParamsW
SetupDiGetClassDevsW
SetupDiGetSelectedDriverW
SetupDiGetDriverInfoDetailW
CM_Enumerate_Classes
CM_Get_DevNode_Status
SetupDiCreateDeviceInfoList
SetupDiSetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoW
SetupDiSetSelectedDevice
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupDiGetDeviceRegistryPropertyW
SetupGetTargetPathW
SetupQueueCopyIndirectW
SetupQueueCopyW
SetupOpenFileQueue
SetupInitDefaultQueueCallbackEx
SetupDefaultQueueCallbackW
SetupCommitFileQueueW
SetupTermDefaultQueueCallback
SetupCloseFileQueue
SetupCopyOEMInfW
CM_Locate_DevNodeW
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
CM_Get_Device_IDW
CM_Setup_DevNode
SetupDiEnumDeviceInfo
CMP_WaitNoPendingInstallEvents
CM_Query_And_Remove_SubTreeW

wintrust

WinVerifyTrust
CryptCATAdminCalcHashFromFileHandle

ole32

CoTaskMemFree
StringFromCLSID
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

VariantInit
VariantClear
VariantChangeType
SysAllocString
SysFreeString

comctl32

CreatePropertySheetPageW
ImageList_ReplaceIcon
ImageList_SetBkColor
PropertySheetW
ImageList_Create

comdlg32

PrintDlgExW
GetSaveFileNameW

crypt32

CertFreeCertificateContext
CertFreeCTLContext
CertGetCTLContextProperty
CryptQueryObject

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 470KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/reiner-usbcom.cat
PrinterDriver/Win32/reiner-usbcom.inf
PrinterDriver/Win32/reiner-usbcom.sys
.exe windows x86

c4f0e9a4c5933a5696f4039786c27d83

Code Sign

33:00:00:00:6d:9d:a5:3e:87:00:9d:33:49:00:00:00:00:00:6d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20-09-2018 19:45

Not After

20-09-2019 19:45

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a6:d0:fb:8d:06:25:36:69:34:d8:2c:c3:60:3f:86:fd:ae:1e:0e:74:53:6b:b0:25:36:96:15:5d:48:0e:be:c3
Signer

Actual PE Digest

a6:d0:fb:8d:06:25:36:69:34:d8:2c:c3:60:3f:86:fd:ae:1e:0e:74:53:6b:b0:25:36:96:15:5d:48:0e:be:c3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlGetVersion
KeInitializeDpc
KeInsertQueueDpc
KeInitializeEvent
KeClearEvent
KeSetEvent
KeInitializeMutex
KeReleaseMutex
KeWaitForSingleObject
KeQueryTimeIncrement
_allmul
KeTickCount
VerSetConditionMask
RtlVerifyVersionInfo
KeDelayExecutionThread
KeBugCheckEx
KeQuerySystemTime
ExAllocatePoolWithTag
ExFreePoolWithTag
MmBuildMdlForNonPagedPool
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
MmAllocatePagesForMdlEx
MmFreePagesFromMdl
IoAllocateErrorLogEntry
IoAllocateMdl
RtlInitUnicodeString
IoFreeMdl
IoWriteErrorLogEntry
ZwClose
ZwCreateKey
ZwOpenKey
ZwQueryValueKey
_vsnprintf
_vsnwprintf
RtlTimeToTimeFields
KeRemoveQueueDpc
KeFlushQueuedDpcs
RtlGUIDFromString
RtlWriteRegistryValue
RtlDeleteRegistryValue
memset
memcpy
RtlCopyUnicodeString
_alldiv
IofCompleteRequest
_purecall

hal

KfReleaseSpinLock
KeGetCurrentIrql
KfAcquireSpinLock

wdfldr.sys

WdfVersionUnbind
WdfVersionBindClass
WdfVersionBind
WdfVersionUnbindClass

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win32/rusbio.cat
PrinterDriver/Win32/rusbio.inf
PrinterDriver/Win32/rusbio.sys
.exe windows x86

ae80bafd9b590db6632a20b7aec1b626

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

memmove
ExFreePool
IoGetCurrentProcess
MmMapLockedPagesSpecifyCache
IoFreeIrp
IoAllocateIrp
KeReleaseMutex
IofCompleteRequest
PoRegisterSystemState
PoUnregisterSystemState
IofCallDriver
IoBuildPartialMdl
IoAllocateMdl
KeInitializeSpinLock
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
RtlAnsiStringToUnicodeString
RtlInitAnsiString
memcpy
ZwClose
ZwReadFile
ZwQueryInformationFile
ZwCreateFile
RtlAppendUnicodeToString
ExAllocatePoolWithTag
ZwSetValueKey
ZwQueryValueKey
RtlInitUnicodeString
IoOpenDeviceRegistryKey
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
IoCancelIrp
IoDeleteSymbolicLink
IoDetachDevice
RtlFreeUnicodeString
KeInitializeEvent
KeInitializeMutex
IoAttachDeviceToDeviceStack
RtlGUIDFromString
IoRegisterDeviceInterface
IoCreateSymbolicLink
IoCreateDevice
KeSetEvent
KeWaitForSingleObject
_allmul
IoFreeMdl
InterlockedExchange
IoReleaseCancelSpinLock
KeSetTimer
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
IoSetDeviceInterfaceState
KeCancelTimer
KeInitializeDpc
KeInitializeTimer
PoSetPowerState
PoStartNextPowerIrp
PoCallDriver
PoRequestPowerIrp
IoFreeWorkItem
IoQueueWorkItem
IoAllocateWorkItem
KeClearEvent
KeBugCheckEx
InterlockedIncrement
InterlockedDecrement
memset
KeQueryTimeIncrement
_alldiv
IoDeleteDevice
KeTickCount

hal

KfReleaseSpinLock
KfAcquireSpinLock
KeStallExecutionProcessor

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/DIFxAPI.dll
.dll windows x64

fa7bbfc375651121b7223cafa40dc7b8

Code Sign

61:03:dc:f6:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:12

Not After

25-07-2011 19:22

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:15:23:0f:00:00:00:00:00:0a
Certificate

Issuer

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 21:57

Not After

07-03-2011 21:57

Subject

CN=Microsoft Windows,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:07:02:dc:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

15-09-2005 21:55

Not After

15-03-2016 22:05

Subject

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

6b:55:60:61:36:ea:2b:db:06:1f:e0:d9:92:1a:27:14:39:e5:af:db
Signer

Actual PE Digest

6b:55:60:61:36:ea:2b:db:06:1f:e0:d9:92:1a:27:14:39:e5:af:db

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

_unlock
__dllonexit
_lock
_onexit
??3@YAXPEAX@Z
mbtowc
__mb_cur_max
isleadbyte
_iob
_snprintf
_itoa
ferror
__badioinfo
__pioinfo
memcpy
??1type_info@@UEAA@XZ
_amsg_exit
_XcptFilter
__C_specific_handler
memset
_wcsupr
_wcslwr
_errno
__CxxFrameHandler
iswdigit
_vscwprintf
wcsrchr
wcspbrk
_wcsnicmp
iswalpha
?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_fileno
_lseeki64
wcsstr
wcschr
_write
_isatty
_CxxThrowException
??2@YAPEAX_K@Z
_wcsicmp
??_U@YAPEAX_K@Z
memmove
_initterm
_vsnwprintf
_resetstkoflw
malloc
free
??_V@YAXPEAX@Z
memcmp

ntdll

RtlNtStatusToDosError
VerSetConditionMask
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

kernel32

WaitForSingleObjectEx
SetEndOfFile
WaitForMultipleObjectsEx
GetThreadLocale
LCMapStringW
SetFilePointer
CreateEventW
SetEvent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetVersionExA
RaiseException
HeapSize
VirtualProtect
Sleep
GetProcessHeap
GetSystemTimeAsFileTime
DeviceIoControl
ReleaseMutex
WaitForSingleObject
CreateMutexW
LocalReAlloc
LocalAlloc
GetSystemDirectoryW
LocalFree
CompareStringW
WideCharToMultiByte
GetEnvironmentVariableW
GetSystemWindowsDirectoryW
CopyFileW
HeapReAlloc
HeapAlloc
HeapFree
InitializeCriticalSection
HeapDestroy
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
OutputDebugStringA
GetLastError
lstrcmpiW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
lstrlenW
SetLastError
LoadLibraryW
GetProcAddress
FreeLibrary
GetVersionExW
VerifyVersionInfoW
SetFileAttributesW
DeleteFileW
GetFullPathNameW
GetFileAttributesW
CreateDirectoryW
GetTempFileNameW
MoveFileExW
CreateFileW
CloseHandle
FindFirstFileW
lstrcmpW
FindNextFileW
FindClose
RemoveDirectoryW
GetFileSize
CreateFileMappingW
MapViewOfFile
MultiByteToWideChar
UnmapViewOfFile

user32

UnregisterClassA
CharLowerW

setupapi

pSetupGetGlobalFlags
pSetupSetGlobalFlags
SetupDiClassNameFromGuidW
SetupDiSetSelectedDevice
SetupDiOpenDeviceInfoW
SetupDiSetClassInstallParamsW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiCreateDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiOpenDevRegKey
CM_Get_Device_IDW
SetupDiSetDeviceRegistryPropertyW
CM_Setup_DevNode
CM_Query_And_Remove_SubTreeW
CM_Get_DevNode_Status
CM_Locate_DevNodeW
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
CM_Enumerate_Classes
SetupDiOpenClassRegKey
SetupGetTargetPathW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDefaultQueueCallbackW
SetupCommitFileQueueW
SetupQueueCopyW
SetupTermDefaultQueueCallback
SetupInitDefaultQueueCallbackEx
SetupCloseFileQueue
SetupOpenFileQueue
SetupCopyOEMInfW
SetupOpenInfFileW
SetupCloseInfFile
SetupDiGetActualSectionToInstallW
SetupGetLineCountW
SetupOpenAppendInfFileW
SetupFindFirstLineW
SetupInstallFilesFromInfSectionW
SetupPromptReboot
SetupInstallFromInfSectionW
SetupInstallServicesFromInfSectionW
SetupFindNextLine
SetupFindNextMatchLineW
SetupGetStringFieldW
SetupGetIntField
SetupGetFieldCount

advapi32

DeleteService
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegQueryValueExW
RegDeleteValueW
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetEntriesInAclW
QueryServiceStatus
OpenSCManagerW
OpenServiceW
ControlService
StartServiceW
RegCloseKey
CloseServiceHandle

ole32

CoInitialize
CoUninitialize
StringFromCLSID
CoTaskMemFree
CoCreateInstance

wintrust

CryptCATAdminCalcHashFromFileHandle
WinVerifyTrust

crypt32

CertGetCTLContextProperty
CertFreeCertificateContext
CertFreeCTLContext
CryptQueryObject

Exports

Exports

DIFXAPISetLogCallbackA
DIFXAPISetLogCallbackW
DriverPackageGetPathA
DriverPackageGetPathW
DriverPackageInstallA
DriverPackageInstallW
DriverPackagePreinstallA
DriverPackagePreinstallW
DriverPackageUninstallA
DriverPackageUninstallW
SetDifxLogCallbackA
SetDifxLogCallbackW

Sections

.text
Size: 452KB - Virtual size: 451KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/FontInstaller.exe
.exe windows x64

0f40562aa55d2016783198fca7d0762a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

b4:ce:ef:8e:2a:c5:ce:c4:06:f6:14:c6:77:91:63:32:c5:75:18:98:35:40:77:0d:70:71:c4:00:f4:74:52:d9
Signer

Actual PE Digest

b4:ce:ef:8e:2a:c5:ce:c4:06:f6:14:c6:77:91:63:32:c5:75:18:98:35:40:77:0d:70:71:c4:00:f4:74:52:d9

Digest Algorithm

sha256

PE Digest Matches

true

e4:d3:97:01:bd:67:62:41:72:9a:8d:b0:d1:69:74:f1:17:5e:de:2a
Signer

Actual PE Digest

e4:d3:97:01:bd:67:62:41:72:9a:8d:b0:d1:69:74:f1:17:5e:de:2a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetWindowsDirectoryW
GetLastError
CloseHandle
WriteConsoleW
FindNextFileW
FindClose
GetCurrentDirectoryW
CopyFileW
CreateProcessW
FindFirstFileW
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
HeapAlloc
HeapReAlloc
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
CreateFileW

user32

wsprintfW

gdi32

AddFontResourceExW

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/FreeImage64.dll
.dll windows x64

bc0cb991cd8a23b4564b5d0e7742103c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
OutputDebugStringA
IsBadReadPtr
SetEnvironmentVariableA
CreateFileW
WriteConsoleW
SetStdHandle
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapFree
HeapAlloc
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
HeapReAlloc
ReadFile
FindClose
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
AreFileApisANSI
GetCommandLineA
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
IsProcessorFeaturePresent
GetCPInfo
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapSize
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetFileType
GetConsoleCP
CloseHandle
FindFirstFileExW
FindNextFileW
DeleteFileW
MoveFileExW
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
FlushFileBuffers
GetTimeZoneInformation
SetEndOfFile

ws2_32

ntohl
htonl
htons
ntohs

Exports

Exports

FreeImage_AcquireMemory
FreeImage_AdjustBrightness
FreeImage_AdjustColors
FreeImage_AdjustContrast
FreeImage_AdjustCurve
FreeImage_AdjustGamma
FreeImage_Allocate
FreeImage_AllocateEx
FreeImage_AllocateExT
FreeImage_AllocateT
FreeImage_AppendPage
FreeImage_ApplyColorMapping
FreeImage_ApplyPaletteIndexMapping
FreeImage_Clone
FreeImage_CloneMetadata
FreeImage_CloneTag
FreeImage_CloseMemory
FreeImage_CloseMultiBitmap
FreeImage_ColorQuantize
FreeImage_ColorQuantizeEx
FreeImage_Composite
FreeImage_ConvertFromRawBits
FreeImage_ConvertLine16To24_555
FreeImage_ConvertLine16To24_565
FreeImage_ConvertLine16To32_555
FreeImage_ConvertLine16To32_565
FreeImage_ConvertLine16To4_555
FreeImage_ConvertLine16To4_565
FreeImage_ConvertLine16To8_555
FreeImage_ConvertLine16To8_565
FreeImage_ConvertLine16_555_To16_565
FreeImage_ConvertLine16_565_To16_555
FreeImage_ConvertLine1To16_555
FreeImage_ConvertLine1To16_565
FreeImage_ConvertLine1To24
FreeImage_ConvertLine1To32
FreeImage_ConvertLine1To4
FreeImage_ConvertLine1To8
FreeImage_ConvertLine24To16_555
FreeImage_ConvertLine24To16_565
FreeImage_ConvertLine24To32
FreeImage_ConvertLine24To4
FreeImage_ConvertLine24To8
FreeImage_ConvertLine32To16_555
FreeImage_ConvertLine32To16_565
FreeImage_ConvertLine32To24
FreeImage_ConvertLine32To4
FreeImage_ConvertLine32To8
FreeImage_ConvertLine4To16_555
FreeImage_ConvertLine4To16_565
FreeImage_ConvertLine4To24
FreeImage_ConvertLine4To32
FreeImage_ConvertLine4To8
FreeImage_ConvertLine8To16_555
FreeImage_ConvertLine8To16_565
FreeImage_ConvertLine8To24
FreeImage_ConvertLine8To32
FreeImage_ConvertLine8To4
FreeImage_ConvertTo16Bits555
FreeImage_ConvertTo16Bits565
FreeImage_ConvertTo24Bits
FreeImage_ConvertTo32Bits
FreeImage_ConvertTo4Bits
FreeImage_ConvertTo8Bits
FreeImage_ConvertToGreyscale
FreeImage_ConvertToRGBF
FreeImage_ConvertToRawBits
FreeImage_ConvertToStandardType
FreeImage_ConvertToType
FreeImage_Copy
FreeImage_CreateICCProfile
FreeImage_CreateTag
FreeImage_DeInitialise
FreeImage_DeletePage
FreeImage_DeleteTag
FreeImage_DestroyICCProfile
FreeImage_Dither
FreeImage_EnlargeCanvas
FreeImage_FIFSupportsExportBPP
FreeImage_FIFSupportsExportType
FreeImage_FIFSupportsICCProfiles
FreeImage_FIFSupportsReading
FreeImage_FIFSupportsWriting
FreeImage_FillBackground
FreeImage_FindCloseMetadata
FreeImage_FindFirstMetadata
FreeImage_FindNextMetadata
FreeImage_FlipHorizontal
FreeImage_FlipVertical
FreeImage_GetAdjustColorsLookupTable
FreeImage_GetBPP
FreeImage_GetBackgroundColor
FreeImage_GetBits
FreeImage_GetBlueMask
FreeImage_GetChannel
FreeImage_GetColorType
FreeImage_GetColorsUsed
FreeImage_GetComplexChannel
FreeImage_GetCopyrightMessage
FreeImage_GetDIBSize
FreeImage_GetDotsPerMeterX
FreeImage_GetDotsPerMeterY
FreeImage_GetFIFCount
FreeImage_GetFIFDescription
FreeImage_GetFIFExtensionList
FreeImage_GetFIFFromFilename
FreeImage_GetFIFFromFilenameU
FreeImage_GetFIFFromFormat
FreeImage_GetFIFFromMime
FreeImage_GetFIFMimeType
FreeImage_GetFIFRegExpr
FreeImage_GetFileType
FreeImage_GetFileTypeFromHandle
FreeImage_GetFileTypeFromMemory
FreeImage_GetFileTypeU
FreeImage_GetFormatFromFIF
FreeImage_GetGreenMask
FreeImage_GetHeight
FreeImage_GetHistogram
FreeImage_GetICCProfile
FreeImage_GetImageType
FreeImage_GetInfo
FreeImage_GetInfoHeader
FreeImage_GetLine
FreeImage_GetLockedPageNumbers
FreeImage_GetMetadata
FreeImage_GetMetadataCount
FreeImage_GetPageCount
FreeImage_GetPalette
FreeImage_GetPitch
FreeImage_GetPixelColor
FreeImage_GetPixelIndex
FreeImage_GetRedMask
FreeImage_GetScanLine
FreeImage_GetTagCount
FreeImage_GetTagDescription
FreeImage_GetTagID
FreeImage_GetTagKey
FreeImage_GetTagLength
FreeImage_GetTagType
FreeImage_GetTagValue
FreeImage_GetTransparencyCount
FreeImage_GetTransparencyTable
FreeImage_GetTransparentIndex
FreeImage_GetVersion
FreeImage_GetWidth
FreeImage_HasBackgroundColor
FreeImage_Initialise
FreeImage_InsertPage
FreeImage_Invert
FreeImage_IsLittleEndian
FreeImage_IsPluginEnabled
FreeImage_IsTransparent
FreeImage_JPEGCrop
FreeImage_JPEGCropU
FreeImage_JPEGTransform
FreeImage_JPEGTransformU
FreeImage_Load
FreeImage_LoadFromHandle
FreeImage_LoadFromMemory
FreeImage_LoadMultiBitmapFromMemory
FreeImage_LoadU
FreeImage_LockPage
FreeImage_LookupSVGColor
FreeImage_LookupX11Color
FreeImage_MakeThumbnail
FreeImage_MovePage
FreeImage_MultigridPoissonSolver
FreeImage_OpenMemory
FreeImage_OpenMultiBitmap
FreeImage_OpenMultiBitmapFromHandle
FreeImage_OutputMessageProc
FreeImage_Paste
FreeImage_PreMultiplyWithAlpha
FreeImage_ReadMemory
FreeImage_RegisterExternalPlugin
FreeImage_RegisterLocalPlugin
FreeImage_Rescale
FreeImage_Rotate
FreeImage_RotateClassic
FreeImage_RotateEx
FreeImage_Save
FreeImage_SaveToHandle
FreeImage_SaveToMemory
FreeImage_SaveU
FreeImage_SeekMemory
FreeImage_SetBackgroundColor
FreeImage_SetChannel
FreeImage_SetComplexChannel
FreeImage_SetDotsPerMeterX
FreeImage_SetDotsPerMeterY
FreeImage_SetMetadata
FreeImage_SetOutputMessage
FreeImage_SetOutputMessageStdCall
FreeImage_SetPixelColor
FreeImage_SetPixelIndex
FreeImage_SetPluginEnabled
FreeImage_SetTagCount
FreeImage_SetTagDescription
FreeImage_SetTagID
FreeImage_SetTagKey
FreeImage_SetTagLength
FreeImage_SetTagType
FreeImage_SetTagValue
FreeImage_SetTransparencyTable
FreeImage_SetTransparent
FreeImage_SetTransparentIndex
FreeImage_SwapColors
FreeImage_SwapPaletteIndices
FreeImage_TagToString
FreeImage_TellMemory
FreeImage_Threshold
FreeImage_TmoDrago03
FreeImage_TmoFattal02
FreeImage_TmoReinhard05
FreeImage_TmoReinhard05Ex
FreeImage_ToneMapping
FreeImage_Unload
FreeImage_UnlockPage
FreeImage_WriteMemory
FreeImage_ZLibCRC32
FreeImage_ZLibCompress
FreeImage_ZLibGUnzip
FreeImage_ZLibGZip
FreeImage_ZLibUncompress

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/Prn64.bin
.exe windows x64

9ba174ec9cd7880dcb50b17b3840e5c4

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

cc:6e:15:71:24:12:25:20:be:d2:31:76:60:cb:7c:ca:30:ed:fe:99:66:15:7c:5a:8a:fa:b8:c6:34:d0:05:e0
Signer

Actual PE Digest

cc:6e:15:71:24:12:25:20:be:d2:31:76:60:cb:7c:ca:30:ed:fe:99:66:15:7c:5a:8a:fa:b8:c6:34:d0:05:e0

Digest Algorithm

sha256

PE Digest Matches

true

bd:71:4e:c9:22:ce:ca:4c:81:ea:6b:3d:f6:84:65:18:18:b6:ff:cf
Signer

Actual PE Digest

bd:71:4e:c9:22:ce:ca:4c:81:ea:6b:3d:f6:84:65:18:18:b6:ff:cf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

OpenProcess
GetVersionExW
GetCurrentThread
GetCurrentProcess
CloseHandle
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CreateFileW
WriteFile
SetLastError
HeapAlloc
HeapFree
ReadProcessMemory
ExpandEnvironmentStringsW
GetCommandLineW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetLastError
FreeLibrary
GetProcAddress
GetProcessHeap
LoadLibraryW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapReAlloc
GetConsoleMode
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
RtlPcToFileHeader
RtlUnwindEx
GetModuleHandleW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
SetFilePointer
GetConsoleCP

user32

MessageBoxA
MessageBoxW

winspool.drv

AddPortW

advapi32

LookupPrivilegeValueW
OpenProcessToken
OpenThreadToken
AdjustTokenPrivileges

shell32

CommandLineToArgvW

psapi

GetModuleFileNameExW
EnumProcessModules

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/REINERLM.dll
.dll windows x64

2a9db6431f04963c00ad79fbf7b3ac3d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ec:1c:b2:9c:93:05:89:b8:87:0b:e7:71:36:f3:36:81:e0:ec:c6:25:9f:f9:a1:25:54:d8:0a:ac:eb:16:d3:96
Signer

Actual PE Digest

ec:1c:b2:9c:93:05:89:b8:87:0b:e7:71:36:f3:36:81:e0:ec:c6:25:9f:f9:a1:25:54:d8:0a:ac:eb:16:d3:96

Digest Algorithm

sha256

PE Digest Matches

true

c8:e7:dc:ac:82:40:df:d1:f9:9e:fa:31:31:0d:87:63:cc:96:44:b4
Signer

Actual PE Digest

c8:e7:dc:ac:82:40:df:d1:f9:9e:fa:31:31:0d:87:63:cc:96:44:b4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

Sleep
SetLastError
VerSetConditionMask
GlobalAlloc
FormatMessageW
MultiByteToWideChar
VerifyVersionInfoW
GlobalFree
GetLastError
GetComputerNameA
CreateFileA
WriteFile
GetFileAttributesA
GetTempFileNameA
CloseHandle
LoadLibraryW
CreateMutexW
FreeLibrary
WaitForSingleObject
GetProcAddress
ReleaseMutex
WideCharToMultiByte
SetFilePointer
GetTickCount
LeaveCriticalSection
ReadFile
CreateFileW
EnterCriticalSection
DeleteCriticalSection
GetFileSize
lstrlenA
MapViewOfFile
UnmapViewOfFile
OpenFileMappingW
FlushFileBuffers
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetModuleFileNameA
HeapSize
LoadLibraryExW
OutputDebugStringW
GetLocalTime
InitializeCriticalSection
QueryPerformanceCounter
ExitProcess
GetProcessHeap
SetFilePointerEx
GetStringTypeW
EncodePointer
DecodePointer
HeapFree
HeapAlloc
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
HeapReAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleCP
GetConsoleMode
IsValidCodePage
GetACP
GetOEMCP

user32

wsprintfW
wvsprintfW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter
GetPrinterDriverW
SetJobW
GetJobW

shell32

ord165
SHGetPathFromIDListW
SHGetSpecialFolderLocation

ole32

CoTaskMemFree

Exports

Exports

DllEntryPoint
InitializePrintMonitor2

Sections

.text
Size: 481KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/REINERPMS.dll
.dll windows x64

c74f0c48524dfd51bd92802ebd39132b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4e:0a:6a:13:16:34:e3:ac:46:66:4d:f1:cf:ce:3a:10:ab:3a:48:9b:09:b0:c6:65:02:cb:ba:86:f8:d7:3c:37
Signer

Actual PE Digest

4e:0a:6a:13:16:34:e3:ac:46:66:4d:f1:cf:ce:3a:10:ab:3a:48:9b:09:b0:c6:65:02:cb:ba:86:f8:d7:3c:37

Digest Algorithm

sha256

PE Digest Matches

true

db:88:79:6a:38:be:66:08:e6:86:eb:9f:10:41:ba:91:cb:bb:be:98
Signer

Actual PE Digest

db:88:79:6a:38:be:66:08:e6:86:eb:9f:10:41:ba:91:cb:bb:be:98

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

spoolss

GetJobW
OpenPrinterW
SetJobW
ClosePrinter

ws2_32

inet_addr
getaddrinfo
connect
setsockopt
socket
closesocket
htons

rmapi64

ord16
ord44
ord1
ord31
ord29
ord5
ord19
ord45
ord14
ord38
ord12
ord41
ord15
ord24
ord35
ord4
ord13
ord26
ord43
ord8
ord6
ord33
ord37
ord42
ord11
ord3

kernel32

WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
GetStdHandle
GetProcessHeap
HeapSize
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetModuleHandleW
GetStartupInfoW
FlushFileBuffers
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetLastError
lstrcmpiW
WideCharToMultiByte
CreateDirectoryW
OutputDebugStringW
GetTickCount
WriteFile
InitializeCriticalSection
CreateFileW
GetLastError
DisableThreadLibraryCalls
DeleteCriticalSection
CloseHandle
GetSystemTime
GlobalLock
GlobalAlloc
Sleep
GlobalUnlock
GlobalFree
FreeLibrary
GetSystemDirectoryW
LoadLibraryW
GetProcAddress
SetDefaultCommConfigW
GetModuleFileNameW
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA
TlsFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetStringTypeW
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
RtlCaptureContext

user32

LoadStringW
wsprintfW

advapi32

RegCloseKey

Exports

Exports

DllMain
InitializePrintMonitor2

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/REINERPMU.dll
.dll windows x64

7d870e62ca56466205199840a2d82c26

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

16:bd:e2:9d:55:4a:ca:b1:02:0f:86:47:8f:26:21:2c:ea:29:08:60:ed:72:5b:0e:ae:91:1e:ac:5b:50:b5:c8
Signer

Actual PE Digest

16:bd:e2:9d:55:4a:ca:b1:02:0f:86:47:8f:26:21:2c:ea:29:08:60:ed:72:5b:0e:ae:91:1e:ac:5b:50:b5:c8

Digest Algorithm

sha256

PE Digest Matches

true

d7:30:9d:61:16:17:b2:c8:45:fb:6a:32:4a:e8:8b:0c:e9:58:a5:d0
Signer

Actual PE Digest

d7:30:9d:61:16:17:b2:c8:45:fb:6a:32:4a:e8:8b:0c:e9:58:a5:d0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

rmapi64

ord40
ord2

kernel32

RtlLookupFunctionEntry
CreateFileW
FlushFileBuffers
GetModuleHandleExW
QueryActCtxW
CreateActCtxW
ActivateActCtx
LoadLibraryW
GetModuleFileNameW
DeactivateActCtx
GetLastError
SetLastError
OutputDebugStringA
FindActCtxSectionStringW
WaitForSingleObject
GetModuleHandleW
GetTickCount
TerminateThread
Sleep
MultiByteToWideChar
CreateThread
OutputDebugStringW
DisableThreadLibraryCalls
FormatMessageW
LocalFree
WriteConsoleW
SetStdHandle
GetStringTypeW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LCMapStringW
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
WriteFile
LeaveCriticalSection
EnterCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
RtlPcToFileHeader
RaiseException
CloseHandle
RtlUnwindEx
ExitProcess
GetProcAddress
WideCharToMultiByte
HeapSize
HeapFree
HeapAlloc
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId

user32

IsWindow
DialogBoxParamW
LoadStringW
DestroyWindow
SetCursor
GetWindowRect
LoadCursorW
GetWindowLongPtrW
GetClientRect
GetDlgItem
EndDialog
RedrawWindow
SendDlgItemMessageW
ShowWindow
CreateWindowExW
MessageBoxW
SetWindowLongPtrW
GetDlgItemTextW
SetDlgItemTextW
SendMessageW
MapWindowPoints
UpdateWindow
EnableWindow

winspool.drv

XcvDataW
OpenPrinterW
EnumPortsW
ClosePrinter

Exports

Exports

DllMain
InitializePrintMonitorUI

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/REINERdrv.dll
.dll windows x64

1dc52cd70acf2a63e73cc316889ae6f9

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

96:ba:a1:7d:37:7f:0a:17:96:5a:f5:b9:e4:60:0a:e6:09:e3:e6:61:dd:06:e6:60:d0:81:ec:48:98:ce:98:a4
Signer

Actual PE Digest

96:ba:a1:7d:37:7f:0a:17:96:5a:f5:b9:e4:60:0a:e6:09:e3:e6:61:dd:06:e6:60:d0:81:ec:48:98:ce:98:a4

Digest Algorithm

sha256

PE Digest Matches

true

5b:4d:80:c0:d9:17:2d:3f:0d:a3:e1:da:d1:e3:4d:d5:7e:5b:ab:4e
Signer

Actual PE Digest

5b:4d:80:c0:d9:17:2d:3f:0d:a3:e1:da:d1:e3:4d:d5:7e:5b:ab:4e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

psapi

GetModuleFileNameExW

dbghelp

MiniDumpWriteDump

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

gdi32

DeleteObject
XFORMOBJ_iGetXform
FONTOBJ_pxoGetXform
XFORMOBJ_bApplyXform
EngStretchBlt
EngLineTo
XLATEOBJ_cGetPalette
EngLockSurface
EngCreateBitmap
EngMarkBandingSurface
EngAssociateSurface
EngDeleteSurface
FONTOBJ_pfdg
BRUSHOBJ_ulGetBrushColor
STROBJ_vEnumStart
STROBJ_bEnum
FONTOBJ_cGetGlyphs
FONTOBJ_pifi
EngTextOut
PATHOBJ_vEnumStart
PATHOBJ_bEnum
EngComputeGlyphSet
EngCreatePalette
EngDeletePalette
EngBitBlt

mscms

IsColorProfileValid
CreateColorTransformW
CloseColorProfile
OpenColorProfileW
DeleteColorTransform
GetColorDirectoryW
TranslateBitmapBits

kernel32

FlushFileBuffers
LoadLibraryExW
GetTimeZoneInformation
ReadConsoleW
SetFilePointerEx
ExitProcess
GetOEMCP
QueryPerformanceCounter
GetLocalTime
GetLastError
GlobalAlloc
GlobalFree
SetUnhandledExceptionFilter
InitializeCriticalSection
DeleteCriticalSection
SetLastError
WideCharToMultiByte
CreateFileMappingW
MapViewOfFile
CloseHandle
GetSystemDirectoryW
WaitForSingleObject
GetExitCodeProcess
UnmapViewOfFile
MultiByteToWideChar
OpenFileMappingA
VirtualQuery
GetACP
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSectionAndSpinCount
RaiseException
GetEnvironmentStringsW
DecodePointer
WriteFile
CreateFileW
GetTempPathW
GetTempFileNameW
SetFilePointer
OutputDebugStringW
OutputDebugStringA
CreateDirectoryW
GetWindowsDirectoryW
GetFileSize
ReadFile
FormatMessageW
GetTempPathA
GetTempFileNameA
CreateFileA
GetFileTime
CompareFileTime
Sleep
GetTickCount
FileTimeToSystemTime
SystemTimeToFileTime
VerSetConditionMask
VerifyVersionInfoW
GetVersion
GetSystemInfo
FreeLibrary
SetEnvironmentVariableA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleExW
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
LoadLibraryW
GetLocaleInfoW
GetTimeFormatW
GetThreadLocale
GetDateFormatW
LocalFree
IsValidCodePage
GetConsoleMode
GetConsoleCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetModuleFileNameA
LCMapStringW
CompareStringW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
FreeEnvironmentStringsW
SetStdHandle
SetEndOfFile
HeapSize
GetCPInfo
RtlUnwindEx
RtlLookupFunctionEntry
GetStringTypeW
EncodePointer
RtlPcToFileHeader
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetStdHandle
GetFileType
GetModuleFileNameW
WriteConsoleW
GetCommandLineA

user32

wsprintfW
SetCursor
MessageBoxW
LoadCursorW

winspool.drv

GetPrinterDriverW
WritePrinter
GetPrinterDataW
ClosePrinter
EnumPortsW
EnumPrinterDriversW
EnumMonitorsW
DocumentPropertiesW
GetPrinterW
SetPrinterDataW
ord203
SetPrinterW
OpenPrinterW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumKeyExW

shell32

ShellExecuteExW

Exports

Exports

DllMain
DrvDisableDriver
DrvEnableDriver
DrvQueryDriverInfo

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 550KB - Virtual size: 549KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/REINERui.dll
.dll windows x64

349343576a15470cc3a8ac8b8884ef14

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

90:63:ba:fe:e5:e8:dc:7e:23:4f:51:69:89:da:47:b3:09:ee:5c:3b:61:a6:8a:c5:1c:0d:46:20:3f:9b:20:83
Signer

Actual PE Digest

90:63:ba:fe:e5:e8:dc:7e:23:4f:51:69:89:da:47:b3:09:ee:5c:3b:61:a6:8a:c5:1c:0d:46:20:3f:9b:20:83

Digest Algorithm

sha256

PE Digest Matches

true

c4:51:f1:95:09:7d:2b:0b:77:72:5d:da:00:71:18:e7:e6:ae:e1:1d
Signer

Actual PE Digest

c4:51:f1:95:09:7d:2b:0b:77:72:5d:da:00:71:18:e7:e6:ae:e1:1d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

psapi

GetModuleFileNameExW

dbghelp

MiniDumpWriteDump

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

gdi32

EngComputeGlyphSet
GetDeviceCaps
EnumFontFamiliesExW
GdiTransparentBlt
ExtTextOutW
GetCurrentObject
GetTextExtentPoint32W
SelectClipRgn
GetClipRgn
GetObjectW
CreateCompatibleDC
CreateRectRgn
GetStockObject
SetBkColor
SetTextColor
CreateSolidBrush
DeleteDC
EndDoc
EndPage
TextOutW
GetTextFaceW
SetTextAlign
SelectObject
CreateFontIndirectW
StartPage
StartDocW
DeleteObject
SetBkMode
GetBitmapBits
CreatePen
ExtEscape
Escape
Rectangle
GetStretchBltMode
SetStretchBltMode
StretchBlt
SelectPalette
RealizePalette
GetDIBits
StretchDIBits
BitBlt
GetTextColor
AbortDoc
GetTextExtentPointW
Ellipse
CreateRoundRectRgn
RoundRect
MoveToEx
LineTo
CombineRgn
FloodFill
CreatePolygonRgn
Polyline
GetPixel
GetTextMetricsW
GetCharABCWidthsA
GetCharWidth32A
GetFontUnicodeRanges
GetCharABCWidthsW
TextOutA
CreateDCW
CreateCompatibleBitmap

uxtheme

SetWindowTheme

kernel32

GetLocaleInfoW
GetVersionExW
GetTimeFormatW
GetThreadLocale
GetDateFormatW
GlobalLock
GlobalUnlock
GetWindowsDirectoryW
MulDiv
CreateThread
TerminateThread
GetCurrentDirectoryW
SetCurrentDirectoryW
FindResourceW
DeleteFileW
SizeofResource
LockResource
LoadResource
VerSetConditionMask
VerifyVersionInfoW
GetVersion
GetSystemInfo
GetSystemDirectoryW
LoadLibraryExA
ExpandEnvironmentStringsA
GetTimeZoneInformation
GetFileType
GetStdHandle
ReadConsoleW
SetFilePointerEx
GetACP
IsValidCodePage
GetConsoleMode
GetConsoleCP
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetCPInfo
RtlUnwindEx
RtlLookupFunctionEntry
GetCommandLineA
RtlPcToFileHeader
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
EncodePointer
GetStringTypeW
IsDebuggerPresent
ReadFile
GetFileSize
GetCurrentProcessId
GetCurrentThreadId
CreateDirectoryW
GetCurrentProcess
GetTempFileNameW
GetTempPathW
GetProcAddress
ReleaseMutex
WaitForSingleObject
CreateMutexW
LocalFree
OutputDebugStringW
SystemTimeToFileTime
FileTimeToSystemTime
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
Sleep
CompareFileTime
GetFileTime
CreateFileW
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
GetTempPathA
FormatMessageW
LeaveCriticalSection
EnterCriticalSection
FindActCtxSectionStringW
DeleteCriticalSection
DecodePointer
GlobalFree
HeapSize
SetLastError
GetLastError
SetEnvironmentVariableA
DeactivateActCtx
RaiseException
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
LoadLibraryW
GlobalAlloc
ActivateActCtx
InitializeCriticalSection
CreateActCtxW
QueryActCtxW
GetProcessHeap
GetModuleHandleExW
HeapFree
SetUnhandledExceptionFilter
HeapAlloc
FreeLibrary
HeapReAlloc
QueryPerformanceFrequency
GetLocalTime
QueryPerformanceCounter
OutputDebugStringA
FlushFileBuffers
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
SetStdHandle
WriteConsoleW
SetEndOfFile
GetOEMCP

user32

CloseWindow
IsWindowVisible
WaitMessage
FillRect
ShowScrollBar
MoveWindow
MapDialogRect
GetSystemMetrics
SetWindowLongW
ClientToScreen
DialogBoxParamW
GetSysColor
CallWindowProcW
EndPaint
BeginPaint
GetWindowTextLengthW
SetDlgItemTextW
GetWindowTextW
LoadBitmapW
CreateDialogParamW
wsprintfW
MessageBoxW
SetRect
LoadCursorW
GetWindowLongPtrW
SetWindowLongPtrW
EnumChildWindows
GetDlgItem
SetWindowPos
EndDialog
MessageBoxA
SetFocus
GetWindowInfo
CreatePopupMenu
InsertMenuW
TrackPopupMenuEx
DestroyMenu
GetParent
InvalidateRect
ShowWindow
SetWindowTextW
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
SystemParametersInfoW
GetDC
ReleaseDC
DestroyIcon
PtInRect
mouse_event
GetClientRect
EnableWindow
GetWindowRect
FrameRect
DrawFrameControl
SetCursor
GetFocus
GetScrollInfo
GetScrollPos
SetScrollPos
ScrollWindow
MapWindowPoints
GetCursorPos
GetClassNameW
IsWindowEnabled
GetWindowLongW
SetScrollInfo
DefWindowProcW
KillTimer
SetTimer
DestroyWindow
SendMessageW
CreateWindowExW
LoadIconW
MonitorFromPoint
GetMonitorInfoW

winspool.drv

GetPrinterDriverW
OpenPrinterW
ClosePrinter
ord203
GetPrinterDataW
EnumPortsW
DocumentPropertiesW
SetPrinterW
SetPrinterDataW
EnumPrintersW
StartDocPrinterW
StartPagePrinter
WritePrinter
EndPagePrinter
EndDocPrinter
EnumPrinterDriversW
EnumMonitorsW
GetPrinterW

advapi32

RegOpenKeyExA
RegEnumValueW
RegQueryInfoKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA

shell32

SHGetFolderPathW
ShellExecuteW
SHBrowseForFolderW
SHCreateDirectoryExW
SHGetPathFromIDListW

ole32

CreateStreamOnHGlobal
CoTaskMemFree

shlwapi

PathFindExtensionW
ord191

gdiplus

GdipGraphicsClear
GdipGetImageWidth
GdipCreateFromHDC
GdipSetInterpolationMode
GdipGetImageHeight
GdipSetPixelOffsetMode
GdipDrawImageRectI
GdipFree
GdipDisposeImage
GdipAlloc
GdipCloneImage
GdipLoadImageFromFile
GdipSetPageUnit
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipFillRectangleI
GdipGetImageDimension
GdipCreateBitmapFromResource
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromFile
GdipGetImageType
GdiplusShutdown
GdiplusStartup
GdipDeleteGraphics
GdipLoadImageFromStream

Exports

Exports

DevQueryPrintEx
DrvConvertDevMode
DrvDeviceCapabilities
DrvDevicePropertySheets
DrvDocumentEvent
DrvDocumentPropertySheets
DrvDriverEvent
DrvPrinterEvent
DrvQueryColorProfile
DrvQueryJobAttributes
DrvSplDeviceCaps
DrvUpgradePrinter

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 544KB - Virtual size: 543KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/REINERui.res.dll
.dll windows x64

8e0583bbdbbc33fcad54ab5b6d40d98c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

15-02-2018 00:00

Not After

13-05-2021 12:00

Subject

CN=Euro Plus d.o.o.,O=Euro Plus d.o.o.,L=Sencur,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

13:c4:af:5b:a1:d0:c2:81:3a:4d:0e:27:2c:bb:4b:60:97:ce:46:66:ac:68:29:1b:f4:cb:f5:80:b4:02:46:8a
Signer

Actual PE Digest

13:c4:af:5b:a1:d0:c2:81:3a:4d:0e:27:2c:bb:4b:60:97:ce:46:66:ac:68:29:1b:f4:cb:f5:80:b4:02:46:8a

Digest Algorithm

sha256

PE Digest Matches

true

d6:1d:e1:35:df:04:30:83:f8:8a:d6:25:39:a9:aa:b6:cd:7f:49:13
Signer

Actual PE Digest

d6:1d:e1:35:df:04:30:83:f8:8a:d6:25:39:a9:aa:b6:cd:7f:49:13

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WriteFile
GetModuleFileNameW
LoadLibraryExW
HeapAlloc
HeapReAlloc
GetStringTypeW
OutputDebugStringW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/ReBarcode64.dll
.dll windows x64

2bd3f7ed519a4c83e4971f95ec4f6367

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

GetStdHandle
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetTimeZoneInformation
GetStringTypeW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
OutputDebugStringW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSectionEx
RaiseException
GetLastError
UnhandledExceptionFilter
HeapSize
DecodePointer
DeleteCriticalSection
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
GlobalUnlock
GlobalFree
LockResource
GlobalAlloc
GetModuleHandleW
GetModuleFileNameW
WideCharToMultiByte
SetLastError
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
RtlVirtualUnwind
RtlCaptureContext
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
ExitThread
CreateThread
ExitProcess
RtlPcToFileHeader
RtlUnwindEx
WriteFile
GetStartupInfoW
TerminateProcess
GlobalLock
SetUnhandledExceptionFilter
OutputDebugStringA
CloseHandle
DuplicateHandle
RtlLookupFunctionEntry
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
FindResourceExW
VirtualProtect
SearchPathW
GetProfileIntW
GetTickCount
Sleep
GetTempPathW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
lstrcpyW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryW
GlobalFlags
GlobalFindAtomW
FreeResource
GetSystemDirectoryW
EncodePointer
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalGetAtomNameW
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
ResumeThread
SetThreadPriority
WaitForSingleObject
GlobalAddAtomW
GetCurrentProcessId
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpW
lstrcmpA
GlobalDeleteAtom
FreeLibrary
GetVersionExW
GetCurrentThreadId
GetCurrentThread
CopyFileW
FormatMessageW
GetCurrentProcess
MulDiv
LocalFree
GlobalSize
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
lstrcmpiW
LoadLibraryExW
GetProcAddress
GetModuleHandleExW

user32

SubtractRect
CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
DrawIcon
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
WaitMessage
PostThreadMessageW
GetSystemMenu
IsZoomed
GetComboBoxInfo
TrackMouseEvent
GetKeyNameTextW
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
MonitorFromPoint
UpdateLayeredWindow
IsMenu
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
LoadMenuW
MapVirtualKeyW
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
MessageBeep
GetIconInfo
DrawIconEx
LoadImageW
IsRectEmpty
OffsetRect
SetRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IntersectRect
SendDlgItemMessageA
InflateRect
GetMenuItemInfoW
DestroyMenu
DestroyIcon
IsIconic
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
InvalidateRect
KillTimer
SetTimer
DeleteMenu
SystemParametersInfoW
CopyImage
GetUpdateRect
GetDesktopWindow
ClientToScreen
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
GetWindow
GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
LoadCursorW
GetSysColorBrush
GetSysColor
GetDC
GetWindowTextLengthW
GetWindowTextW
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
FrameRect
CharUpperBuffW
RegisterClipboardFormatW
ModifyMenuW
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
SetClassLongPtrW
LockWindowUpdate
SetParent
SetRect
SetCursorPos
CopyAcceleratorTableW
DestroyAcceleratorTable
RealChildWindowFromPoint
GetKeyboardState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetLastActivePopup
GetWindowThreadProcessId
GetWindowLongW
MessageBoxW
IsWindowEnabled
EnableWindow
SetCursor
ShowOwnedPopups
PostQuitMessage
PostMessageW
LoadBitmapW
GetParent
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
SendMessageW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetSystemMetrics
CharUpperW
TabbedTextOutW
DrawTextW
ReleaseDC
UnregisterClassW
FillRect
CreateAcceleratorTableW

gdi32

CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteDC
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
BitBlt
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceW
GetObjectW
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCW
CopyMetaFileW
SetTextColor
CreateFontIndirectW
SetBkMode
DeleteObject
SelectObject
ScaleWindowExtEx
CreateDIBitmap
CreateCompatibleDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

SHBrowseForFolderW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
SHGetFileInfoW
DragFinish
DragQueryFileW

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
StrFormatKBSizeW

uxtheme

GetThemePartSize
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText

ole32

RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
CoInitializeEx
CoDisconnectObject
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringLen
VariantInit
LoadTypeLi
VarBstrFromDate
VariantChangeType
VariantCopy
VariantClear
SysAllocString
SysFreeString
SysAllocStringLen

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Exports

Exports

??0REgenBarcode@@QEAA@XZ
??1REgenBarcode@@QEAA@XZ
?REBerechneBitmapBreite@REgenBarcode@@QEAAHHPEADHHHHHH@Z
?REBerechneBitmapBreiteV2@REgenBarcode@@QEAAHHPEADHHHHHHHHHH@Z
?REBerechneBitmapHoehe@REgenBarcode@@QEAAHHPEADHHHHHH@Z
?REBerechneModulbreiteAusBitmapbreite@REgenBarcode@@QEAAHHPEADHHHHHH@Z
?REBerechneModulbreiteAusBitmapbreiteV2@REgenBarcode@@QEAAHHPEADHHHHHHHHHH@Z
?REBerechneModulhoeheAusBitmaphoehe@REgenBarcode@@QEAAHHPEADHHHHHHHHHH@Z
?REGenerateBarcode@REgenBarcode@@QEAAPEAXXZ
?REGetAllowedBarcodeCharacter@REgenBarcode@@QEAAHHPEADH@Z
?REGetCharacterImage@REgenBarcode@@QEAAHHPEAPEAX@Z
?REGetLastError@REgenBarcode@@QEAAHXZ
?REGetMinimalBarcodeHeight@REgenBarcode@@QEAAHHPEADHHHH@Z
?REGetMinimalBarcodeWidth@REgenBarcode@@QEAAHHPEADHH@Z
?REGetMinimalBarcodeWidthV2@REgenBarcode@@QEAAHHPEADHHHHHH@Z
?RESetBarcodeParameter@REgenBarcode@@QEAAHHPEADHHHHHHHHHHHHHH@Z
?RESetParam@REgenBarcode@@QEAAHHPEADHHHHHHHHH@Z
?REVersion@REgenBarcode@@QEAAHXZ

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 840KB - Virtual size: 840KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/RmApi64.dll
.dll windows x64

a978a6bc5308a1710175e556b61508f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

rmbasicapi64

ord62
ord24
ord33
ord40
ord47
ord14
ord23
ord22
ord31
ord32
ord13
ord38
ord39
ord28
ord27
ord19
ord18
ord34
ord35
ord17
ord16
ord36
ord37
ord30
ord29
ord20
ord21
ord7
ord10
ord1
ord44
ord11
ord5
ord3
ord57
ord9
ord12
ord25
ord26
ord15
ord48

freeimage64

FreeImage_ConvertTo24Bits
FreeImage_GetHeight
FreeImage_GetWidth
FreeImage_GetDotsPerMeterX
FreeImage_GetBits
FreeImage_Unload
FreeImage_SetDotsPerMeterY
FreeImage_Allocate
FreeImage_Rescale
FreeImage_GetBPP
FreeImage_GetInfo
FreeImage_SetDotsPerMeterX
FreeImage_Dither
FreeImage_GetDotsPerMeterY
FreeImage_LoadU
FreeImage_GetPitch

rebarcode64

?REBerechneBitmapBreiteV2@REgenBarcode@@QEAAHHPEADHHHHHHHHHH@Z
?REBerechneBitmapHoehe@REgenBarcode@@QEAAHHPEADHHHHHH@Z
?REGetLastError@REgenBarcode@@QEAAHXZ
?REVersion@REgenBarcode@@QEAAHXZ
?REGenerateBarcode@REgenBarcode@@QEAAPEAXXZ
?RESetBarcodeParameter@REgenBarcode@@QEAAHHPEADHHHHHHHHHHHHHH@Z
??0REgenBarcode@@QEAA@XZ
??1REgenBarcode@@QEAA@XZ
?REGetAllowedBarcodeCharacter@REgenBarcode@@QEAAHHPEADH@Z

kernel32

GetTimeZoneInformation
RtlPcToFileHeader
GetStdHandle
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetStringTypeW
GetFileType
GetModuleFileNameA
SetLastError
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
QueryPerformanceCounter
GetConsoleCP
WriteFile
HeapReAlloc
HeapAlloc
HeapFree
GlobalLock
GetProcessHeap
GlobalAlloc
InitializeCriticalSectionAndSpinCount
HeapDestroy
GlobalUnlock
RaiseException
GetLastError
HeapSize
GlobalFree
DecodePointer
DeleteCriticalSection
CreateMutexW
WaitForSingleObject
GetLocalTime
ReleaseMutex
FindResourceExW
FindResourceW
LoadResource
GetModuleHandleW
GetTickCount
SizeofResource
GetModuleFileNameW
MultiByteToWideChar
LockResource
CloseHandle
GetSystemTime
SetEnvironmentVariableA
CreateFileW
LocalAlloc
LocalFree
WideCharToMultiByte
GetProcAddress
GetModuleHandleExW
ExitProcess
RtlUnwindEx
GetCurrentThreadId
GetCommandLineA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryExW
SetFilePointerEx
SetStdHandle
WriteConsoleW
FlushFileBuffers
CompareStringW
LCMapStringW
SetEndOfFile
ReadFile
ReadConsoleW
GetConsoleMode
CreateThread
IsProcessorFeaturePresent
EncodePointer
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection

user32

ReleaseDC
DrawTextW
wsprintfW
TabbedTextOutW

gdi32

CreateFontW
CreateDIBitmap
CreateCompatibleDC
SelectObject
DeleteObject
SetBkMode
GetDIBits
CreateFontIndirectW
SetTextColor
GetDeviceCaps

advapi32

ReportEventW
RegOpenKeyExW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegisterEventSourceW
RegCloseKey

Exports

Exports

RMAPI_Close
RMAPI_FixDeviceError
RMAPI_FreeAPIMemory
RMAPI_GetDateTime
RMAPI_GetDeviceDocumentFileName
RMAPI_GetDeviceDocumentFontParameters
RMAPI_GetDeviceFileSystemInfo
RMAPI_GetDeviceFunctionParameters
RMAPI_GetDeviceInfo
RMAPI_GetDeviceParameters
RMAPI_GetDevicePrintParameters
RMAPI_GetDeviceSignalParameters
RMAPI_GetDeviceStatistic
RMAPI_GetDeviceStatus
RMAPI_GetDeviceStatusEx
RMAPI_GetDeviceTimeOfDay
RMAPI_GetImage
RMAPI_GetListOfAvailableDevices
RMAPI_GetListOfAvailableDevicesEx
RMAPI_GetNumberCircle
RMAPI_GetNumberingMachine
RMAPI_GetRMAPIErrorText
RMAPI_GetText
RMAPI_GetVariableBarcode
RMAPI_GetVersion
RMAPI_IsOpen
RMAPI_LockDevice
RMAPI_Open
RMAPI_PrintTrigger
RMAPI_SetDateTime
RMAPI_SetDeviceDocumentFileName
RMAPI_SetDeviceDocumentFontParameters
RMAPI_SetDeviceDocumentMonthAbbreviation
RMAPI_SetDeviceFunctionParameters
RMAPI_SetDeviceParameters
RMAPI_SetDevicePassword
RMAPI_SetDevicePrintParameters
RMAPI_SetDeviceSignalParameters
RMAPI_SetDeviceTimeOfDay
RMAPI_SetFixedBarcode
RMAPI_SetImage
RMAPI_SetImageByPath
RMAPI_SetNumberCircle
RMAPI_SetNumberingMachine
RMAPI_SetText
RMAPI_SetVariableBarcode
RMAPI_TransferData
RMAPI_TransferDataEx
RMAPI_TransferDataState
RMAPI_UnlockDevice

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 22.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/RmBasicApi64.dll
.dll windows x64

2c28f13c3e80a5092bc5132cb428a556

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

setupapi

CM_Get_DevNode_Registry_PropertyA
SetupDiDestroyDeviceInfoList
CM_Get_Child
CM_Get_Sibling
CM_Get_Parent
CM_Locate_DevNodeA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ws2_32

send
setsockopt
closesocket
WSACleanup
WSALookupServiceBeginA
WSAGetLastError
WSAStartup
connect
WSALookupServiceEnd
socket
recv
WSASetServiceA
WSALookupServiceNextA

kernel32

GetStringTypeW
SetFilePointerEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
RtlPcToFileHeader
GetFileType
GetModuleFileNameW
HeapReAlloc
HeapAlloc
HeapFree
GlobalLock
GetProcessHeap
GlobalAlloc
InitializeCriticalSectionAndSpinCount
Sleep
HeapDestroy
GlobalUnlock
RaiseException
GetLastError
HeapSize
DecodePointer
DeleteCriticalSection
GlobalFree
WaitForSingleObject
GetLocalTime
ReleaseMutex
CreateFileA
lstrlenA
WideCharToMultiByte
lstrcatA
lstrcmpiA
DeviceIoControl
CloseHandle
GetCurrentProcess
GetProcAddress
GetSystemInfo
GetModuleFileNameA
GetModuleHandleA
GetVersionExA
LocalAlloc
LocalFree
WriteFile
CreateEventA
ReadFile
GetOverlappedResult
GetCommState
SetCommState
SetCommTimeouts
GetCommTimeouts
CreateThread
GetStdHandle
GetConsoleMode
GetConsoleCP
SetEndOfFile
LCMapStringW
LoadLibraryExW
SetStdHandle
WriteConsoleW
FlushFileBuffers
ReadConsoleW
CreateFileW
CreateMutexA
GetModuleHandleW
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
EncodePointer
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
MultiByteToWideChar
RtlUnwindEx
ExitProcess
GetModuleHandleExW
AreFileApisANSI
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW

user32

wvsprintfA
wsprintfA

advapi32

RegCloseKey
RegOpenKeyA
RegQueryInfoKeyA
RegEnumKeyExA
FreeSid
AllocateAndInitializeSid
ReportEventA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclA
RegisterEventSourceA
GetUserNameA
RegOpenKeyExA
RegQueryValueExA

Exports

Exports

ActivateSFModuleMode
ActivateSFUpdateMode
Close
DeInitialize
DeviceSecurity
FreeAllocatedAPIMemory
GetAPIVersion
GetBarcode
GetDateTime
GetDateTimeV2
GetDeviceClock
GetDeviceDescriptor
GetDeviceInfo
GetDeviceParameter
GetDeviceStatus
GetFileSystemInfo
GetFormatParameter
GetImage
GetListOfAvailableDevices
GetListOfAvailableDevicesV3
GetNumberCircle
GetNumeroteur
GetSFDeviceParameter
GetSFDeviceSensors
GetSFDeviceStatistic
GetSFDeviceStatisticV2
GetSFDeviceTestfunction
GetSFDeviceUpdateData
GetSFDeviceUpdateState
GetSFInitialisationReason
GetSFModuleStatus
GetSFPrintHeadData
GetSFTOVAlgorithmData
GetText
Initialize
IsOpen
Open
OpenV2
PrintTrigger
ResetDevice
SetBarcode
SetDateTime
SetDateTimeV2
SetDeviceClock
SetDeviceIntoTransferMode
SetDeviceIntoTransferModeV2
SetDeviceParameter
SetFileSystemInfo
SetFormatParameter
SetImage
SetNumberCircle
SetNumeroteur
SetSFDeviceActuators
SetSFDeviceAdjustment
SetSFDeviceInitialisation
SetSFDeviceParameter
SetSFDeviceTestfunction
SetSFDeviceUpdateData
SetSFPrintHeadData
SetSFSensorReferenceParameter
SetText
TestOpen

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/WdfCoInstaller01011.dll
.dll windows x64

553dfc6cd5891a057991f0695d243342

Code Sign

61:02:92:4a:00:00:00:00:00:20
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

09-01-2012 22:25

Not After

09-04-2013 22:25

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

61:05:dd:42:00:00:00:00:00:14
Certificate

Issuer

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

26-03-2012 21:37

Not After

26-06-2013 21:37

Subject

CN=Microsoft Windows,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:07:02:dc:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

15-09-2005 21:55

Not After

15-03-2016 22:05

Subject

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:6d:9d:a5:3e:87:00:9d:33:49:00:00:00:00:00:6d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20-09-2018 19:45

Not After

20-09-2019 19:45

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

13:74:37:a3:05:3b:16:9c:08:97:37:aa:12:48:99:06:ef:23:b7:35:ba:d0:5c:1b:29:3d:ae:ca:3c:9a:4a:b2
Signer

Actual PE Digest

13:74:37:a3:05:3b:16:9c:08:97:37:aa:12:48:99:06:ef:23:b7:35:ba:d0:5c:1b:29:3d:ae:ca:3c:9a:4a:b2

Digest Algorithm

sha256

PE Digest Matches

true

3c:aa:50:ed:7a:7b:75:89:86:2f:97:5d:01:74:0e:5b:fe:6f:ba:ea
Signer

Actual PE Digest

3c:aa:50:ed:7a:7b:75:89:86:2f:97:5d:01:74:0e:5b:fe:6f:ba:ea

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

free
_wtoi
_wcsnicmp
_amsg_exit
malloc
_ultow
_XcptFilter
_initterm
_wcsicmp
__C_specific_handler
_vsnwprintf
memcpy
memset

setupapi

SetupDiGetActualSectionToInstallW
SetupLogErrorW
SetupDiGetDeviceInstallParamsW
CM_Set_DevNode_Problem_Ex
SetupCloseInfFile
SetupOpenInfFileW
SetupCloseLog
SetupDiSetDeviceInstallParamsW
SetupOpenLog
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupGetStringFieldW
SetupPromptReboot
SetupFindFirstLineW
SetupGetLineCountW
SetupFindNextMatchLineW

kernel32

FindClose
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount
GetSystemTimeAsFileTime
VerSetConditionMask
GetModuleHandleW
GetVersionExW
GetModuleFileNameW
VerifyVersionInfoW
GetLastError
GetProcAddress
GlobalFree
LocalAlloc
GetWindowsDirectoryW
LocalFree
FreeLibrary
LoadLibraryW
FindFirstFileW
FindResourceW
LoadResource
CreateProcessW
CreateDirectoryW
WaitForSingleObject
OutputDebugStringW
WriteFile
SizeofResource
FormatMessageW
GetExitCodeProcess
TerminateProcess
CreateFileW
SetLastError
GetCurrentThreadId
GetLocalTime
LockResource
RemoveDirectoryW
FindNextFileW
CloseHandle
DeleteFileW
ExpandEnvironmentStringsW
LoadLibraryExW
Sleep
QueryPerformanceCounter
GetCurrentProcessId

advapi32

EventUnregister
EventRegister
QueryServiceConfigW
ChangeServiceConfigW
RegFlushKey
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
EventWrite
QueryServiceStatusEx
RegQueryValueExW
OpenServiceW
OpenSCManagerW
DeleteService
CloseServiceHandle

shell32

CommandLineToArgvW

user32

IsCharAlphaNumericW
LoadStringW
IsCharAlphaW

shlwapi

PathFileExistsW

Exports

Exports

WdfCoInstaller
WdfPostDeviceInstall
WdfPostDeviceRemove
WdfPreDeviceInstall
WdfPreDeviceInstallEx
WdfPreDeviceRemove

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/dpinst_usbcom.exe
.exe windows x64

3eacb9638877275335da4b58e52824f8

Code Sign

61:15:23:0f:00:00:00:00:00:0a
Certificate

Issuer

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 21:57

Not After

07-03-2011 21:57

Subject

CN=Microsoft Windows,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:16:b5:29:00:00:00:00:00:10
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-01-2010 21:12

Not After

04-01-2013 21:22

Subject

CN=Microsoft Time-Stamp Service,OU=nCipher+OU=nCipher DSE ESN:ACD3-AE66-E0B5,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:16:b5:29:00:00:00:00:00:10
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-01-2010 21:12

Not After

04-01-2013 21:22

Subject

CN=Microsoft Time-Stamp Service,OU=nCipher+OU=nCipher DSE ESN:ACD3-AE66-E0B5,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

79:ad:16:a1:4a:a0:a5:ad:4c:73:58:f4:07:13:2e:65
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

09-05-2001 23:19

Not After

09-05-2021 23:28

Subject

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:07:02:dc:00:00:00:00:00:0b
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

15-09-2005 21:55

Not After

15-03-2016 22:05

Subject

CN=Microsoft Windows Verification PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

bf:2c:50:54:a4:3a:a3:54:81:e2:9a:d4:b6:4d:5c:bc:8e:cd:ae:c6
Signer

Actual PE Digest

bf:2c:50:54:a4:3a:a3:54:81:e2:9a:d4:b6:4d:5c:bc:8e:cd:ae:c6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
IsTextUnicode
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetEntriesInAclW
DeleteService
CloseServiceHandle
ControlService
StartServiceW
OpenServiceW
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenSCManagerW
QueryServiceStatus
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
CheckTokenMembership

kernel32

CreateMutexW
ReleaseMutex
SetFilePointer
HeapAlloc
GetProcessHeap
HeapFree
LoadLibraryW
GetProcAddress
GetStdHandle
GetConsoleMode
SetConsoleMode
ReadConsoleOutputW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
FreeConsole
FreeLibrary
WriteConsoleOutputW
WriteConsoleW
IsValidLocale
VirtualProtect
Sleep
GetFileAttributesW
DeleteFileW
FormatMessageW
RaiseException
CopyFileW
SetFileAttributesW
GetTempFileNameW
FindClose
FindNextFileW
CompareStringW
lstrcmpW
FindFirstFileW
lstrlenW
UnmapViewOfFile
GetConsoleScreenBufferInfo
CreateFileMappingW
LCMapStringW
WaitForMultipleObjectsEx
WaitForSingleObjectEx
SetEndOfFile
CreateEventW
SetEvent
LocalReAlloc
DeviceIoControl
VerifyVersionInfoW
VerSetConditionMask
GetSystemDirectoryW
GetCurrentDirectoryW
GetSystemWindowsDirectoryW
GetShortPathNameW
RemoveDirectoryW
MoveFileExW
CreateDirectoryW
GetFullPathNameW
SetLastError
GetLocaleInfoW
LoadLibraryExW
GetSystemDefaultUILanguage
SearchPathW
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
OutputDebugStringA
GetStartupInfoW
GetEnvironmentVariableW
lstrcmpiW
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapSize
HeapReAlloc
HeapDestroy
GetFileSize
CreateThread
SetThreadLocale
GetThreadLocale
WriteFile
CreateFileW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
GetCurrentProcess
GetVersionExW
GetLocalTime
GetWindowsDirectoryW
SetCurrentDirectoryW
GetUserDefaultUILanguage
EnumResourceLanguagesW
GetModuleFileNameW
GetExitCodeProcess
WaitForSingleObject
LocalFree
GlobalFree
LocalAlloc
GetLastError
GetCommandLineW
CloseHandle
MapViewOfFile

gdi32

CreateBitmap
CreateCompatibleBitmap
GetObjectW
DeleteDC
SetLayout
CreateCompatibleDC
EndPage
StartPage
EndDoc
StartDocW
GetTextMetricsW
CreateFontIndirectW
GetDeviceCaps
DeleteObject
SelectObject

user32

DestroyIcon
CreateIconIndirect
DrawIconEx
GetIconInfo
LoadIconW
LoadBitmapW
CharLowerW
UnregisterClassA
PostQuitMessage
DefWindowProcW
RegisterClassExW
CreateWindowExW
ShowWindow
AllowSetForegroundWindow
DialogBoxParamW
SetDlgItemTextW
EndDialog
MessageBoxW
GetDlgItem
SendMessageW
GetProcessWindowStation
GetUserObjectInformationW
LoadImageW
SetWindowTextW
PostMessageW
GetParent
IsDlgButtonChecked
CheckDlgButton
SetFocus
CallWindowProcW
GetWindowLongPtrW
SetWindowLongPtrW
SendDlgItemMessageW
InvalidateRect
GetSystemMetrics
GetSysColor
DestroyWindow
SetWindowLongW
SystemParametersInfoW
GetDC
ReleaseDC
DrawTextExW

msvcrt

_wcmdln
exit
_cexit
_exit
_XcptFilter
__wgetmainargs
_resetstkoflw
__C_specific_handler
memset
_wcsupr
_wcslwr
_errno
__CxxFrameHandler
fread
_initterm
fclose
fwprintf
_wfopen
realloc
??2@YAPEAX_K@Z
wcsstr
_wcsicmp
_wtol
_vscwprintf
free
malloc
??_V@YAXPEAX@Z
??3@YAXPEAX@Z
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
??1type_info@@UEAA@XZ
memcpy
memmove
_CxxThrowException
mbtowc
__mb_cur_max
isleadbyte
_iob
_snprintf
_itoa
ferror
__badioinfo
__pioinfo
_fileno
_lseeki64
_write
_isatty
_wcsnicmp
_vsnwprintf
wcsncmp
bsearch
?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
iswalpha
??_U@YAPEAX_K@Z
wcschr
wcspbrk
wcsrchr
iswdigit
feof
memcmp

ntdll

NtQueryInformationToken
RtlNtStatusToDosError
NtClose
NtOpenThreadToken
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
NtOpenProcessToken

shell32

ord59
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteExW

setupapi

SetupDiSetDeviceRegistryPropertyW
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
pSetupSetGlobalFlags
SetupDefaultQueueCallbackW
pSetupGetGlobalFlags
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupGetFieldCount
SetupGetIntField
SetupGetStringFieldW
SetupFindNextMatchLineW
SetupFindNextLine
SetupInstallServicesFromInfSectionW
SetupInstallFromInfSectionW
SetupPromptReboot
SetupDiGetDeviceInstanceIdW
SetupFindFirstLineW
SetupOpenAppendInfFileW
SetupGetLineCountW
SetupDiGetActualSectionToInstallW
SetupCloseInfFile
SetupOpenInfFileW
SetupDiGetSelectedDriverW
SetupCommitFileQueueW
SetupTermDefaultQueueCallback
SetupInitDefaultQueueCallbackEx
SetupQueueCopyW
CMP_WaitNoPendingInstallEvents
SetupCloseFileQueue
SetupOpenFileQueue
SetupDiGetDriverInfoDetailW
SetupDiSetClassInstallParamsW
SetupDiOpenDeviceInfoW
SetupDiSetSelectedDevice
SetupDiCreateDeviceInfoList
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiBuildDriverInfoList
SetupInstallFilesFromInfSectionW
SetupDiCallClassInstaller
SetupDiClassNameFromGuidW
SetupDiOpenClassRegKey
CM_Enumerate_Classes
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Locate_DevNodeW
CM_Query_And_Remove_SubTreeW
CM_Setup_DevNode
CM_Get_Device_IDW
SetupCopyOEMInfW
SetupGetTargetPathW

wintrust

CryptCATAdminCalcHashFromFileHandle
WinVerifyTrust

ole32

CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
StringFromCLSID

oleaut32

VariantInit
VariantClear
SysAllocString
SysFreeString
VariantChangeType

comctl32

PropertySheetW
CreatePropertySheetPageW
ImageList_Create
ImageList_ReplaceIcon
ImageList_SetBkColor

comdlg32

PrintDlgExW
GetSaveFileNameW

crypt32

CertFreeCTLContext
CertFreeCertificateContext
CertGetCTLContextProperty
CryptQueryObject

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.text
Size: 510KB - Virtual size: 510KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 470KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/reiner-usbcom.cat
PrinterDriver/Win64/reiner-usbcom.inf
PrinterDriver/Win64/reiner-usbcom.sys
.exe windows x64

6a9d424fe91b28c2600e319588ec27a1

Code Sign

33:00:00:00:6d:9d:a5:3e:87:00:9d:33:49:00:00:00:00:00:6d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

20-09-2018 19:45

Not After

20-09-2019 19:45

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

de:71:24:5d:78:e3:fe:1f:0c:1e:77:b0:e2:24:c6:93:43:a5:a3:cb:b3:f6:7d:24:af:10:52:93:61:a7:80:73
Signer

Actual PE Digest

de:71:24:5d:78:e3:fe:1f:0c:1e:77:b0:e2:24:c6:93:43:a5:a3:cb:b3:f6:7d:24:af:10:52:93:61:a7:80:73

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeSetEvent
KeInitializeMutex
KeReleaseMutex
KeWaitForSingleObject
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
KeQueryTimeIncrement
VerSetConditionMask
RtlVerifyVersionInfo
KeDelayExecutionThread
KeBugCheckEx
ExAllocatePoolWithTag
ExFreePoolWithTag
MmBuildMdlForNonPagedPool
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
MmAllocatePagesForMdlEx
MmFreePagesFromMdl
IoAllocateErrorLogEntry
IoAllocateMdl
IofCompleteRequest
IoFreeMdl
KeClearEvent
ZwClose
ZwCreateKey
ZwOpenKey
ZwQueryValueKey
_vsnprintf
_vsnwprintf
RtlTimeToTimeFields
KeRemoveQueueDpc
KeFlushQueuedDpcs
RtlGUIDFromString
RtlWriteRegistryValue
RtlDeleteRegistryValue
KeInitializeEvent
KeInsertQueueDpc
RtlCopyUnicodeString
KeInitializeDpc
RtlGetVersion
RtlInitUnicodeString
IoWriteErrorLogEntry
_purecall

wdfldr.sys

WdfVersionBind
WdfVersionUnbind
WdfVersionBindClass
WdfVersionUnbindClass

Sections

.text
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PrinterDriver/Win64/rusbio_x64.cat
PrinterDriver/Win64/rusbio_x64.inf
PrinterDriver/Win64/rusbio_x64.sys
.exe windows x64

4ca5f57bd601a161d6f7952302ec5c2b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoFreeIrp
IoAllocateIrp
IofCompleteRequest
IoAllocateMdl
IofCallDriver
IoBuildPartialMdl
PoUnregisterSystemState
PoRegisterSystemState
KeReleaseMutex
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
IoWriteErrorLogEntry
RtlAnsiStringToUnicodeString
RtlInitAnsiString
IoAllocateErrorLogEntry
ZwReadFile
RtlAppendUnicodeToString
ZwCreateFile
ZwClose
ZwQueryInformationFile
ExAllocatePoolWithTag
RtlInitUnicodeString
ZwSetValueKey
ZwQueryValueKey
IoAttachDeviceToDeviceStack
IoCreateSymbolicLink
IoOpenDeviceRegistryKey
IoCreateDevice
MmMapLockedPagesSpecifyCache
KeInitializeMutex
IoRegisterDeviceInterface
RtlIntegerToUnicodeString
IoDeleteDevice
KeInitializeEvent
IoDetachDevice
RtlFreeUnicodeString
RtlGUIDFromString
RtlAppendUnicodeStringToString
IoFreeMdl
KeReleaseSpinLockFromDpcLevel
KeWaitForSingleObject
KeSetTimer
KeAcquireSpinLockAtDpcLevel
IoReleaseCancelSpinLock
KeSetEvent
IoSetDeviceInterfaceState
KeCancelTimer
KeInitializeDpc
KeInitializeTimer
PoSetPowerState
PoRequestPowerIrp
IoAllocateWorkItem
PoStartNextPowerIrp
PoCallDriver
IoQueueWorkItem
KeClearEvent
IoFreeWorkItem
KeBugCheckEx
IoGetCurrentProcess
ExFreePool
IoCancelIrp
IoDeleteSymbolicLink
KeQueryTimeIncrement

hal

KeStallExecutionProcessor

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9fd00cb08d8d2133cafd25a5f9077ff2

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

61:46:ef:2e:b8:d2:bd:9d:02:7f:67:e0:27:cf:bf:ae:c1:37:77:3b:47:77:d4:7a:32:12:b1:34:65:af:37:65Signer

ba:7a:1c:43:ca:04:e9:77:25:bc:07:24:2b:fc:ce:5f:4c:a3:0d:2fSigner

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

mpr

ole32

comctl32

shell32

winspool.drv

shlwapi

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.itext Size: 4KB - Virtual size: 4KB

.data Size: 11KB - Virtual size: 11KB

.bss Size: - Virtual size: 21KB

.idata Size: 17KB - Virtual size: 16KB

.tls Size: - Virtual size: 76B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 83KB - Virtual size: 82KB

.rsrc Size: 801KB - Virtual size: 801KB

9e3d194687122bbe97526dd8845a007c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

61:46:ef:2e:b8:d2:bd:9d:02:7f:67:e0:27:cf:bf:ae:c1:37:77:3b:47:77:d4:7a:32:12:b1:34:65:af:37:65
Signer

ba:7a:1c:43:ca:04:e9:77:25:bc:07:24:2b:fc:ce:5f:4c:a3:0d:2f
Signer

.text
Size: 1.2MB - Virtual size: 1.2MB

.itext
Size: 4KB - Virtual size: 4KB

.data
Size: 11KB - Virtual size: 11KB

.bss
Size: - Virtual size: 21KB

.idata
Size: 17KB - Virtual size: 16KB

.tls
Size: - Virtual size: 76B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 83KB - Virtual size: 82KB

.rsrc
Size: 801KB - Virtual size: 801KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

c2:43:59:f0:7e:15:a1:91:cf:9c:54:20:bf:9a:b6:13:08:b2:6a:26:bd:ad:fb:28:92:03:c6:4a:f5:34:c4:23
Signer

de:be:0b:87:b9:a6:5e:18:5e:74:a5:6e:3c:cd:f9:3b:df:b0:39:25
Signer

.text
Size: 127KB - Virtual size: 126KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 7KB - Virtual size: 15KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 7KB

61:03:dc:f6:00:00:00:00:00:0c
Certificate

61:15:23:0f:00:00:00:00:00:0a
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

61:07:02:dc:00:00:00:00:00:0b
Certificate

b4:3a:2e:c6:32:74:1f:7f:5a:ac:1d:1e:5f:70:f7:d0:71:69:58:ba
Signer

.text
Size: 283KB - Virtual size: 282KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 17KB - Virtual size: 17KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0b:99:f4:0e:27:ee:4c:6f:f4:52:9a:4d:c8:b0:56:b0
Certificate