friction_win64[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

friction_win64.zip
Size

178.8MB
MD5

890b0921265cb02c0a09db90c6963d16
SHA1

96800c83ed8af6d9226e7a7e5bdb74b583ba80e2
SHA256

b4e64d0650fc5dbdfe14b937cec90a7ad0c533795bb2b6234ce98e5496b09209
SHA512

00731460e74fac3c2dd44b8157540a49ae0be0aa5f085162d446db410c93ae7cd6d2e03b1d60ac7a30005b153d7ee1fa42ab98523da0be1d09171f2340ce244d
SSDEEP

3145728:ft6YfNE9BxMDIWssUcbgTTlfSXm2IhMxKN6lbpZ6y:IYFE9lcEs29MDZpZ6y

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/data/DirectWaveCtEngine_x64.dll
unpack001/data/ILSvg_x64.dll
unpack001/data/appInfo/newplugin/7z.dll
unpack001/data/appInfo/newplugin/7z.exe
unpack001/data/appInfo/newplugin/setups.dll
unpack001/setup.dll

Files

friction_win64.zip
.zip
data/AXgOulmtu
data/AtCVD4My5fEH
data/AudioRestore.dll
.dll windows x86

ddda39d4b23f5bfa476cbcb2f0b7a115

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:b7:d2:ee:59:3a:9d:22:57:3f:2c:66:dd:d5:bb:87:cf:47:dd:49
Signer

Actual PE Digest

3d:b7:d2:ee:59:3a:9d:22:57:3f:2c:66:dd:d5:bb:87:cf:47:dd:49

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetModuleHandleA
Sleep
CloseHandle
GetCurrentThreadId
SetThreadPriority
GetCurrentThread
TerminateThread
WaitForSingleObject
CreateThread
GetLocaleInfoA
GetUserDefaultLCID
MultiByteToWideChar
WideCharToMultiByte
GetLongPathNameW
GetModuleFileNameW
GetTempPathW
GetSystemDirectoryA
GetWindowsDirectoryA
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetProcessAffinityMask
GetCurrentProcess
HeapUnlock
HeapWalk
GetUserDefaultUILanguage
IsBadCodePtr
IsBadReadPtr
GetModuleFileNameA
GetVersionExA
FindClose
FindNextFileW
FindFirstFileW
MoveFileExW
CreateFileA
CreateFileW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
SetEnvironmentVariableA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetDateFormatA
GetTimeFormatA
InterlockedExchange
GetLocaleInfoW
LoadLibraryA
SetLastError
GetLastError
LoadLibraryW
GetProcAddress
FindResourceA
SizeofResource
LoadResource
LockResource
HeapLock
FreeLibrary
SetConsoleCtrlHandler
SetStdHandle
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
RaiseException
RtlUnwind
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetDriveTypeA
GetFullPathNameA
HeapDestroy
HeapCreate
VirtualFree
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
GetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
ReadFile
GetFileAttributesA
GetFileInformationByHandle
PeekNamedPipe
GetFileType
DeleteFileW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
WriteFile
GetStdHandle
ExitProcess
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetCurrentDirectoryA
SetCurrentDirectoryA
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetFullPathNameW
SetEndOfFile

user32

DefWindowProcA
RegisterWindowMessageA
PostQuitMessage
DestroyAcceleratorTable
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
MessageBoxA
MessageBoxW
PostMessageA
DestroyWindow
UnregisterClassA
GetClassInfoExA
RegisterClassExA
CreateWindowExA
SetWindowLongA
GetWindowLongA
SetWindowPos

advapi32

RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegEnumValueW

shell32

SHFileOperationW
SHGetFolderPathW

ole32

CoInitialize
CoUninitialize

Exports

Exports

VSTPluginMain
main

Sections

.text
Size: 744KB - Virtual size: 743KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 4KB - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data/B6HNwCPWqC
data/B6WDpsmPX0u
data/BG7x2x7IFLwI
data/BHjzQfsKE
data/BIeCh4MVr
data/BJ94IlLHaFc
data/BUX469EtP
data/BZNEh0H0nIj
data/BaNz9oeMDyf
data/BaWpz1rnY6l1
data/Bf5wZzSX4MpK
data/C3NPAh8v0xru
data/C5J2eLzzXoO
data/DirectWaveCtEngine_x64.dll
.dll windows x64

b9f46dfe8cfdf9b0496c5c687fcf680c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

shlwapi

PathGetCharTypeW
PathFileExistsW
PathRemoveFileSpecW
PathStripToRootW
PathAppendW

shell32

SHGetSpecialFolderPathW

ole32

CoCreateInstance
CoCreateGuid
OleUninitialize
OleInitialize
CoInitialize
CoUninitialize

comdlg32

CommDlgExtendedError
GetOpenFileNameW

advapi32

RegisterEventSourceW
ReportEventW
DeregisterEventSource
OpenProcessToken
GetTokenInformation

user32

MessageBeep
wsprintfW
MessageBoxW
CreateWindowExW
RegisterClassW
RegisterDeviceNotificationW
GetDesktopWindow
UnregisterClassW
DestroyWindow
UnregisterDeviceNotification
GetUserObjectInformationW
GetProcessWindowStation
CharUpperW
DefWindowProcW
CharUpperBuffW

oleaut32

VariantClear

kernel32

OutputDebugStringW
GetTickCount
LoadLibraryW
GetProcAddress
OutputDebugStringA
SetErrorMode
GetVersionExW
GetModuleFileNameW
GetLastError
MultiByteToWideChar
GetLogicalDrives
GetCurrentDirectoryW
GetDriveTypeW
Sleep
lstrcpyW
CreateFileW
GetTempFileNameW
GetFileSize
FindFirstFileW
SetFilePointer
SetEndOfFile
GetSystemTimeAsFileTime
WriteFile
CopyFileW
ReadFile
GetTempPathW
FindClose
RemoveDirectoryW
GetFileTime
GetDiskFreeSpaceExW
DeviceIoControl
CreateDirectoryW
lstrcmpW
FindNextFileW
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
CompareStringW
GetUserDefaultLangID
LockFileEx
UnlockFileEx
GetModuleHandleW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InitializeCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObject
GetCurrentThread
TlsAlloc
TlsFree
LockResource
FreeLibrary
LoadResource
FindResourceA
ExitProcess
DeleteFileW
GetFileAttributesExW
LocalFree
RaiseException
DuplicateHandle
WriteConsoleW
WriteConsoleA
WideCharToMultiByte
GetACP
GetFileAttributesW
GetComputerNameW
GetSystemInfo
GetUserDefaultLCID
IsWow64Process
CreateEventA
GetLogicalDriveStringsW
FlushViewOfFile
CloseHandle
GetVersion
GetFileType
HeapFree
GetProcessHeap
GetLocaleInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapAlloc
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
FlsSetValue
GetCommandLineA
RtlUnwindEx
RtlPcToFileHeader
SetStdHandle
DebugBreak
HeapReAlloc
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
CompareStringA
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSize
GetModuleFileNameA
GetOEMCP
IsValidCodePage
SetHandleCount
GetStartupInfoA
HeapSetInformation
HeapCreate
HeapDestroy
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetLocaleInfoW
CreateFileA
GetConsoleOutputCP
SetEnvironmentVariableA
GlobalMemoryStatus
SizeofResource
FormatMessageA

Exports

Exports

CT_Process
CT_ProgramNames

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 810KB - Virtual size: 809KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 184.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data/Fruity Center_x64.dll
.dll windows x64

804242ff2ac71ea1a14eeec4858de19b

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cf:6f:f3:70:d6:01:bf:be:01:df:cc:18:6b:57:48:a2:bb:5b:9e:82:b8:02:61:ad:0f:4d:48:bd:c9:ba:0c:4c
Signer

Actual PE Digest

cf:6f:f3:70:d6:01:bf:be:01:df:cc:18:6b:57:48:a2:bb:5b:9e:82:b8:02:61:ad:0f:4d:48:bd:c9:ba:0c:4c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetMalloc
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage

user32

SetMenuItemInfoW
GetMenuItemInfoW
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetDCEx
PeekMessageW
MonitorFromWindow
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CountClipboardFormats
CallWindowProcW
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

advapi32

RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

msvcrt

memcpy
memset

kernel32

GetFileType
SetFileTime
RtlUnwindEx
DeleteAtom
GetACP
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
ExitProcess
HeapAlloc
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
RtlUnwind
GetCPInfo
GetStdHandle
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
SetThreadPriority
GlobalLock
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

StgCreateDocfileOnILockBytes
CoCreateInstance
CoUninitialize
ReleaseStgMedium
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

msacm32

acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
GetBitmapBits
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 65KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Fruity Chorus_x64.dll
.dll windows x64

804242ff2ac71ea1a14eeec4858de19b

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4d:19:6d:cb:12:66:3f:be:27:49:ed:4a:25:09:4d:28:f3:8d:1c:28:4d:c9:c4:67:3d:4a:d9:68:19:1a:cc:de
Signer

Actual PE Digest

4d:19:6d:cb:12:66:3f:be:27:49:ed:4a:25:09:4d:28:f3:8d:1c:28:4d:c9:c4:67:3d:4a:d9:68:19:1a:cc:de

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetMalloc
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage

user32

SetMenuItemInfoW
GetMenuItemInfoW
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetDCEx
PeekMessageW
MonitorFromWindow
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CountClipboardFormats
CallWindowProcW
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

advapi32

RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

msvcrt

memcpy
memset

kernel32

GetFileType
SetFileTime
RtlUnwindEx
DeleteAtom
GetACP
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
ExitProcess
HeapAlloc
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
RtlUnwind
GetCPInfo
GetStdHandle
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
SetThreadPriority
GlobalLock
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

StgCreateDocfileOnILockBytes
CoCreateInstance
CoUninitialize
ReleaseStgMedium
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

msacm32

acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
GetBitmapBits
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 65KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Fruity Compressor_x64.dll
.dll windows x64

804242ff2ac71ea1a14eeec4858de19b

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:89:69:0a:64:a9:c7:6e:c5:fc:87:e1:b6:51:aa:af:59:fb:0b:e3:94:17:92:81:1c:46:28:00:5b:17:a5:c0
Signer

Actual PE Digest

1d:89:69:0a:64:a9:c7:6e:c5:fc:87:e1:b6:51:aa:af:59:fb:0b:e3:94:17:92:81:1c:46:28:00:5b:17:a5:c0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetMalloc
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage

user32

SetMenuItemInfoW
GetMenuItemInfoW
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetDCEx
PeekMessageW
MonitorFromWindow
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CountClipboardFormats
CallWindowProcW
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

advapi32

RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

msvcrt

memcpy
memset

kernel32

GetFileType
SetFileTime
RtlUnwindEx
DeleteAtom
GetACP
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
ExitProcess
HeapAlloc
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
RtlUnwind
GetCPInfo
GetStdHandle
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
SetThreadPriority
GlobalLock
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

StgCreateDocfileOnILockBytes
CoCreateInstance
CoUninitialize
ReleaseStgMedium
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

msacm32

acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
GetBitmapBits
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 65KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Fruity Delay 2_x64.dll
.dll windows x64

804242ff2ac71ea1a14eeec4858de19b

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fa:29:c7:1d:49:24:ab:08:bf:8a:c0:a3:7b:21:59:1a:2c:54:17:aa:2f:55:3f:91:1e:5f:6b:63:ef:e6:ef:41
Signer

Actual PE Digest

fa:29:c7:1d:49:24:ab:08:bf:8a:c0:a3:7b:21:59:1a:2c:54:17:aa:2f:55:3f:91:1e:5f:6b:63:ef:e6:ef:41

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetMalloc
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage

user32

SetMenuItemInfoW
GetMenuItemInfoW
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetDCEx
PeekMessageW
MonitorFromWindow
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CountClipboardFormats
CallWindowProcW
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

advapi32

RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

msvcrt

memcpy
memset

kernel32

GetFileType
SetFileTime
RtlUnwindEx
DeleteAtom
GetACP
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
ExitProcess
HeapAlloc
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
RtlUnwind
GetCPInfo
GetStdHandle
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
SetThreadPriority
GlobalLock
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

StgCreateDocfileOnILockBytes
CoCreateInstance
CoUninitialize
ReleaseStgMedium
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

msacm32

acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
GetBitmapBits
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 270KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 65KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Fruity Delay_x64.dll
.dll windows x64

804242ff2ac71ea1a14eeec4858de19b

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

63:3f:98:5d:c6:0b:6a:f6:82:47:a0:da:70:63:4b:c0:32:e8:34:40:e3:2f:5f:1b:97:7f:d8:68:9c:37:1c:14
Signer

Actual PE Digest

63:3f:98:5d:c6:0b:6a:f6:82:47:a0:da:70:63:4b:c0:32:e8:34:40:e3:2f:5f:1b:97:7f:d8:68:9c:37:1c:14

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetMalloc
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage

user32

SetMenuItemInfoW
GetMenuItemInfoW
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetDCEx
PeekMessageW
MonitorFromWindow
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CountClipboardFormats
CallWindowProcW
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

advapi32

RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

msvcrt

memcpy
memset

kernel32

GetFileType
SetFileTime
RtlUnwindEx
DeleteAtom
GetACP
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
ExitProcess
HeapAlloc
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
RtlUnwind
GetCPInfo
GetStdHandle
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
SetThreadPriority
GlobalLock
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

StgCreateDocfileOnILockBytes
CoCreateInstance
CoUninitialize
ReleaseStgMedium
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

msacm32

acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
GetBitmapBits
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 270KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 65KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Fruity Flangus_x64.dll
.dll windows x64

2e407769dcc8bec417443e8926f78033

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b3:dd:23:0a:cf:75:93:cd:36:e0:07:3c:93:4b:9a:1a:a6:62:6d:f9:55:76:9d:aa:70:f7:4d:96:23:c3:0c:ca
Signer

Actual PE Digest

b3:dd:23:0a:cf:75:93:cd:36:e0:07:3c:93:4b:9a:1a:a6:62:6d:f9:55:76:9d:aa:70:f7:4d:96:23:c3:0c:ca

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetMalloc
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage

user32

SetMenuItemInfoW
GetMenuItemInfoW
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
GetSubMenu
EqualRect
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetDCEx
PeekMessageW
MonitorFromWindow
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CountClipboardFormats
CallWindowProcW
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

advapi32

RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

msvcrt

memcpy
memset

kernel32

GetFileType
SetFileTime
RtlUnwindEx
DeleteAtom
GetACP
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
ExitProcess
HeapAlloc
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
RtlUnwind
GetCPInfo
GetStdHandle
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
SetThreadPriority
GlobalLock
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

StgCreateDocfileOnILockBytes
CoCreateInstance
CoUninitialize
ReleaseStgMedium
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

msacm32

acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
GetBitmapBits
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 65KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 245KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Fruity dB meter_x64.dll
.dll windows x64

804242ff2ac71ea1a14eeec4858de19b

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:6b:4a:64:d3:b1:59:7f:07:16:ae:b2:09:f2:8c:02:68:e4:ee:b9:28:f2:31:16:ec:a2:ed:13:a1:10:0f:44
Signer

Actual PE Digest

1f:6b:4a:64:d3:b1:59:7f:07:16:ae:b2:09:f2:8c:02:68:e4:ee:b9:28:f2:31:16:ec:a2:ed:13:a1:10:0f:44

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetMalloc
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage

user32

SetMenuItemInfoW
GetMenuItemInfoW
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetDCEx
PeekMessageW
MonitorFromWindow
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CountClipboardFormats
CallWindowProcW
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

advapi32

RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

msvcrt

memcpy
memset

kernel32

GetFileType
SetFileTime
RtlUnwindEx
DeleteAtom
GetACP
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
ExitProcess
HeapAlloc
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
RtlUnwind
GetCPInfo
GetStdHandle
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
SetThreadPriority
GlobalLock
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

StgCreateDocfileOnILockBytes
CoCreateInstance
CoUninitialize
ReleaseStgMedium
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

msacm32

acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
GetBitmapBits
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 65KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 238KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/ILSvg_x64.dll
.dll windows x64

98e6d8ec9b5be37784dea62209734083

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

FindClose
FindNextFileA
GetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateFileW
CloseHandle
QueryPerformanceCounter
HeapSize
WideCharToMultiByte
MultiByteToWideChar
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
FreeLibrary
LoadLibraryExW
InterlockedFlushSList
SetStdHandle
GetFileType
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
GetStdHandle
ReadFile
GetConsoleMode
ReadConsoleW
SetFilePointerEx
WriteFile
GetConsoleCP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetProcessHeap
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW

Exports

Exports

svgCreate
svgDestroy
svgRender

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data/ILTools_x64.dll
.dll windows x64

79b7dad46acfbb3d27aa39f3f537d37b

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

63:97:e7:97:53:d0:8a:99:d2:e1:b2:65:20:9a:31:92:ca:31:99:dd:2d:c6:a8:44:b8:d3:fb:86:81:ab:25:9f
Signer

Actual PE Digest

63:97:e7:97:53:d0:8a:99:d2:e1:b2:65:20:9a:31:92:ca:31:99:dd:2d:c6:a8:44:b8:d3:fb:86:81:ab:25:9f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
DragQueryPoint
SHGetFolderPathW
SHGetMalloc
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage
ShellExecuteA

user32

SetMenuItemInfoW
GetMenuItemInfoW
SetCaretPos
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
DestroyCaret
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetDCEx
PeekMessageW
MonitorFromWindow
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
OffsetRect
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
CreateCaret
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CountClipboardFormats
CallWindowProcW
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

msvcrt

memcpy
memset

advapi32

RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

imagehlp

ImageNtHeader

kernel32

GetFileType
SetFileTime
RtlUnwindEx
DeleteAtom
GetACP
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
ExitProcess
HeapAlloc
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
RtlUnwind
GetCPInfo
GetStdHandle
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
ExpandEnvironmentStringsW
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

StgCreateDocfileOnILockBytes
CoCreateInstance
CoUninitialize
ReleaseStgMedium
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

msacm32

acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
GetBitmapBits
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreateCursorFromFont
CreatePathManagerInstance
DestroyPathManager
ShowEngineChoice
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 267KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 63KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 238KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Khand-Light.ttf
data/OpenSans-CondBold.ttf
data/OpenSans-CondLight.ttf
data/OpenSans-Light.ttf
data/PT_Sans-Narrow-Web-Regular.ttf
data/PT_Sans-Web-Regular.ttf
data/Patcher_x64.dll
.dll windows x64

25ea312a139b63f6e07f7d12f301c6c9

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:2d:f8:29:e2:ed:d0:90:2f:28:13:b2:c2:31:9f:43:73:2f:fb:9b:1b:9b:9c:89:1f:a8:2a:7b:c4:ad:79:0e
Signer

Actual PE Digest

5a:2d:f8:29:e2:ed:d0:90:2f:28:13:b2:c2:31:9f:43:73:2f:fb:9b:1b:9b:9c:89:1f:a8:2a:7b:c4:ad:79:0e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW
GetDefaultPrinterW
EnumPrintersW

comdlg32

GetSaveFileNameW
GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
SHGetSpecialFolderLocation
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
PathCleanupSpec
SHGetMalloc
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage
ShellExecuteA
ShellExecuteW

user32

SetMenuItemInfoW
GetMenuItemInfoW
SetCaretPos
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
DestroyCaret
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
SetForegroundWindow
GetWindowTextW
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
AttachThreadInput
GetSubMenu
DestroyIcon
IsWindowVisible
PtInRect
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetClassNameW
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetMessageW
GetDCEx
PeekMessageW
MonitorFromWindow
GetUpdateRect
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
InflateRect
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
CreateCaret
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
GetAncestor
GetDlgItem
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CallWindowProcW
CountClipboardFormats
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
ToUnicode
PostThreadMessageW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

msvcrt

memcpy
memset

advapi32

RegSetValueExW
RegDeleteValueW
RegEnumKeyExW
RegFlushKey
RegEnumValueW
RegQueryValueExW
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

imagehlp

ImageRvaToVa
ImageDirectoryEntryToData
ImageNtHeader

kernel32

SetFileAttributesW
GetFileType
SetFileTime
RtlUnwindEx
QueryDosDeviceW
DeleteAtom
GetACP
IsBadWritePtr
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
HeapAlloc
ExitProcess
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
RtlUnwind
GetCPInfo
GetStdHandle
GetTimeZoneInformation
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
CopyFileW
AddVectoredExceptionHandler
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
GetFileAttributesExW
ExpandEnvironmentStringsW
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetLogicalDriveStringsW
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
IsDBCSLeadByteEx
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

CoMarshalInterThreadInterfaceInStream
RevokeDragDrop
StgCreateDocfileOnILockBytes
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoUninitialize
OleGetClipboard
ReleaseStgMedium
OleSetClipboard
RegisterDragDrop
IsEqualGUID
CreateStreamOnHGlobal
OleFlushClipboard
OleInitialize
CreateILockBytesOnHGlobal
OleIsCurrentClipboard
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
DoDragDrop

msacm32

acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetAbortProc
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
CreateDCW
CreateICW
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
StartPage
GetBitmapBits
StartDocW
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
EndDoc
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
TextOutW
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EndPage
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
CreateDIBitmap
GetStretchBltMode
CreateDIBSection
SetStretchBltMode
GetDIBits
LineTo
GetRgnBox
EnumFontsW
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 390KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 769KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 238KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 239KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Pitch Shifter_x64.dll
.dll windows x64

e9fe05ee23840a2e7957b0cb90ccca49

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6d:e9:16:48:97:b1:82:14:9d:a0:1e:f1:7d:e0:3b:67:3f:fc:db:48:eb:46:9c:91:a7:53:4a:33:80:e5:16:a9
Signer

Actual PE Digest

6d:e9:16:48:97:b1:82:14:9d:a0:1e:f1:7d:e0:3b:67:3f:fc:db:48:eb:46:9c:91:a7:53:4a:33:80:e5:16:a9

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

comdlg32

GetSaveFileNameW
GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetMalloc
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage
ShellExecuteA

user32

SetMenuItemInfoW
GetMenuItemInfoW
SetCaretPos
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
DestroyCaret
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetMessageW
GetDCEx
PeekMessageW
MonitorFromWindow
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetCursorInfo
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
CreateCaret
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
GetDlgItem
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CallWindowProcW
CountClipboardFormats
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
PostThreadMessageW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

advapi32

RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

msvcrt

memcpy
memset

kernel32

GetFileType
SetFileTime
RtlUnwindEx
DeleteAtom
GetACP
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
ExitProcess
HeapAlloc
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
FindAtomW
RtlUnwind
GetCPInfo
GetStdHandle
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
AddAtomW
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
IsDBCSLeadByteEx
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

StgCreateDocfileOnILockBytes
CoCreateInstance
CoUninitialize
ReleaseStgMedium
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

msacm32

acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
GetBitmapBits
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
TextOutW
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 65KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Plugin/00YbNcGGYZlV
data/Plugin/01gIKdiUxQhd
data/Plugin/02lefJq8tVrd
data/Plugin/03K3k7tV08f4
data/Plugin/08QloQZ6KTWO
data/Plugin/0BnniKAon74i
data/Plugin/0DJ2U061dZxB
.ps1
data/Plugin/0Es2cGOBvoHh
data/Plugin/0FX6vqWSQt6m
data/Plugin/0IpK05TDlBEa
data/Plugin/0NbcoKGTNSci
data/Plugin/0R3bYOAnutTL
data/Plugin/0UjQEsgVxiJe
data/Plugin/0Yh53RHHkxI5
data/Plugin/0gnShuOXxffG
data/Plugin/0km0UhgY3ikx
data/Plugin/0o2Zt1T22UzZ
data/Plugin/0onxBlSsaroW
data/Plugin/0rfFwyZZKGhT
data/Plugin/0xBbPW3YDDoV
data/Plugin/0xZqA0BFk7AS
data/Plugin/1011c3ALeEG9
data/Plugin/11Biw9zm51Po
data/Plugin/15H2UnT2BXTg
data/Plugin/15gnkKBKn1a7
data/Plugin/1C4o1XNkcYL3
data/Plugin/1PHNF0MH6zQA
data/Plugin/1Qv6NcNmejeq
data/Plugin/1SpcVW7kqewC
data/Plugin/1Zkf2IO15Meu
data/Plugin/1bGKBrYSzEzD
data/Plugin/1dMeawWmphJx
data/Plugin/1exfHIwWjc7A
data/Plugin/1i3lU8iGc1Rw
data/Plugin/1k16tQxd2XKR
data/Plugin/20TvH06zRAwu
data/Plugin/222VWiWnFgdI
data/Plugin/23u7iy5QrSR6
data/Plugin/283NGcomJqrs
data/Plugin/2KxRpogBepAB
data/Plugin/2UCCLGQwDZhe
data/Plugin/2YYMa5NLjjf2
data/Plugin/2bvniA9jnKC6
data/Plugin/2dWImTeXYb6K
data/Plugin/2eAvy0FdmQKQ
data/Plugin/2fa9DsyYBdDf
data/Plugin/2q8odHBsTWZ8
data/Plugin/2tlJ6xppFCz6
data/Plugin/2xvLoM1slDzE
data/Plugin/30CXcJYWDYU2
data/Plugin/31XwbtfL6nxd
data/Plugin/31pVDqzOuOwi
data/Plugin/35KMiMKCuihI
data/Plugin/37QcPrBMvUqG
data/Plugin/3JK6NBwq1nVh
data/Plugin/3KQjfJTWHHFQ
data/Plugin/3RY82ZgzxNQa
data/Plugin/3Xu61SZYbKPN
data/Plugin/3eGTjxw18FDa
data/Plugin/3edLv6r2B14k
data/Plugin/3hGpKJc9pccL
data/Plugin/3hMsYNv7OH2f
data/Plugin/3hXbrbZItqnH
data/Plugin/3kv5Yp8UIYnO
data/Plugin/3m7fb1UEMaN3
data/Plugin/3o5X0lPsO24U
data/Plugin/3pKihbR51kEc
data/Plugin/3vGxTRNlMYaS
data/Plugin/3vZk0LMyCpVw
data/Plugin/3xGzK69Ca3a5
data/Plugin/3yXRo18NerCI
data/Plugin/450U2Fi3lOjs
data/Plugin/45DopOVC7QS4
data/Plugin/4FVo7Q17mmuH
data/Plugin/4FaL7rlM20Fj
data/Plugin/4HvCilxdxPkj
data/Plugin/4IAFsnGJGqXM
data/Plugin/4NXpHhsh59bA
data/Plugin/4OVPAUFuvejq
data/Plugin/4PTPzxdKM5g9
data/Plugin/4QcnekCb2iOm
data/Plugin/4S7SSCTMJ5D3
data/Plugin/4TmDOTSKl2By
data/Plugin/4VlLbgFPFQbA
data/Plugin/4XaORJdCvQAN
data/Plugin/4YkOqGxmLEoK
data/Plugin/4a7pUVPNzADz
data/Plugin/4khipLjNk3WN
data/Plugin/4moBlJCSLDA7
data/Plugin/553KdvwD1syr
data/Plugin/559EPfrLco19
data/Plugin/56Vl93ZsyifX
data/Plugin/5H9eskXucoLa
data/Plugin/5JnsXMDKkgmx
data/Plugin/5N2lACkB94zQ
data/Plugin/5O9nbwpdQjz6
data/Plugin/5QdpuHwOeKSQ
data/Plugin/5QiacmcAC4KN
data/Plugin/5U3SgTKjtsNO
data/Plugin/5WlMGylu90B7
data/Plugin/5X2iKrEUhf5a
data/Plugin/5gn3MEaRv0aF
data/Plugin/5ircNfMhMly8
data/Plugin/5kNIuFhShmkf
data/Plugin/5pCVieV4YfO7
data/Plugin/6FdMUze1Q4N0
data/Plugin/6IwbzJnlWdav
data/Plugin/6MEcpvD1GpjL
data/Plugin/6MqVbIlM8Ayq
data/Plugin/6ckcJDw3f7td
data/Plugin/6dytjJHzelzw
data/Plugin/6jJduMUGSu4M
data/Plugin/6o8Xtesydi5S
data/Plugin/6qobTcWDi0dO
data/Plugin/6uYNM684ZCIb
data/Plugin/6unZPICAGwyG
data/Plugin/6yuNR8zaPGuW
data/Plugin/6zTa1giH5vpZ
data/Plugin/74UhuYAgbef8
data/Plugin/7CizJ9m3JB3y
data/Plugin/7EllJCugOg0G
data/Plugin/7MgbGFCCEKgB
data/Plugin/7WnJvAufbHIR
data/Plugin/7apYeM1X1hBx
data/Plugin/7cRm3NwXvq1Y
data/Plugin/7dVLZ4TDQjfG
data/Plugin/7gHqDYD8qPaH
data/Plugin/7ie0sfWBeho6
data/Plugin/7jTZUlSWsTju
data/Plugin/7jYTBiBl7MD8
data/Plugin/7nfWQsvHXwMt
data/Plugin/7rXg6iZsjQ1Z
data/Plugin/7rqOrzceJhux
data/Plugin/84okjC11AneD
data/Plugin/88RNARbgzyAm
data/Plugin/88fsd9TXQIFf
data/Plugin/88uoOFDlZe3a
data/Plugin/8AnYE0JULnH5
data/Plugin/8K2eoEMC2tz2
data/Plugin/8KbVbs4nBvSn
data/Plugin/8M3ktLJIN2D1
data/Plugin/8Rcrzlj9nwnI
data/Plugin/8SWQiQJBGJ0n
data/Plugin/8YWzyR2PNcrA
data/Plugin/8gd1Z1Nkzyy2
data/Plugin/8mLkkHmSHEwU
data/Plugin/97ApjkrFJh4O
data/Plugin/9Cw5MkcvM24n
data/Plugin/9FFFv7kVpAr6
data/Plugin/9IJ5gIo0lw7O
data/Plugin/9JjH9NV0mN98
data/Plugin/9P2KwDjLkkba
data/Plugin/9PxtY6mRZzzT
data/Plugin/9Q86K78MzO5g
data/Plugin/9U7TmD8U4jnj
data/Plugin/9UBcui4gMDkm
data/Plugin/9VjyBzo6XQVb
data/Plugin/9XW67mX4Gw5L
data/Plugin/9YqkcHsDEz6c
data/Plugin/9cctw3rSfSEr
data/Plugin/9eCXYcpHiCNZ
data/Plugin/9hdy1KiSS04G
data/Plugin/9kGKTfQ7teWK
data/Plugin/9t8fyByeP6H7
data/Plugin/9tYXZwX3Ltaa
data/Plugin/9wmvPIQ0aa3L
data/Plugin/A0KOHwiuBSaH
data/Plugin/ABhwdRLBdqzq
data/Plugin/AClRT3CgTYnD
data/Plugin/ADFKkWqCckFA
data/Plugin/AHs1lIRgALI6
data/Plugin/ALZxBtfRte80
data/Plugin/ALr7pW9BuFX4
data/Plugin/AbStIGRrjgrp
data/Plugin/Ae2uOWRiX08c
data/Plugin/AgUViusnxLRd
data/Plugin/Aghwi17VSZZh
data/Plugin/AxzRcaQE0N3j
data/Plugin/AzFMOtgiU4mh
data/Plugin/B0eW8GDtrNLS
data/Plugin/B4q9ED1ndEo4
data/Plugin/B5g7RpF1EjT6
data/Plugin/BCpy0sjx5EQ5
data/Plugin/BCvHFxepebTT
data/Plugin/BHVFAealf4UA
data/Plugin/BJ2aVYjJb3Pp
data/Plugin/BK7M6J1LgfM0
data/Plugin/BKJ1tb0Y3CXo
data/Plugin/BPIavtZL1XdC
data/Plugin/BUYZ0aWiLJly
data/Plugin/BVuk6KhrmZtB
data/Plugin/BbF6nNRqSZFs
data/Plugin/BdO80xybSpjT
data/Plugin/BeKvp3LioAex
data/Plugin/BfatLi5XcvQx
data/Plugin/Bji6g6JEfhUO
data/Plugin/BsiNh1tGfAaM
data/Plugin/BuKMk9WjyXaa
data/Plugin/BukZRp3IMbKO
data/Plugin/BzEe4lZ8Axgh
data/Plugin/C2PXCIb8fm3U
data/Plugin/C4kP0uTMGJxt
data/Plugin/C7uQ37dxRFPs
data/Plugin/CGv6DXcc5nwe
data/Plugin/CLFSFo4jMWkC
data/Plugin/CQZ8OvBMoRaY
data/Plugin/CUMsXjXLAVCy
data/Plugin/CYRahx8GAZi3
data/Plugin/CdibS4KdpyIB
data/Plugin/CfEnASkPeUlq
data/Plugin/CpCuKwrNXxZM
data/Plugin/CuER9BpMqGjO
data/Plugin/CwEvNOxcFk3Y
data/Plugin/D21PBOQ1R209
data/Plugin/D6WBrqBpA8D8
data/Plugin/D8sVySTFWaoI
data/Plugin/DDokbP0QY58G
data/Plugin/DE357YWMPWZS
data/Plugin/DIXddGAwKtEl
data/Plugin/DKdiTtrb8veI
data/Plugin/DL1HeklX9wwx
data/Plugin/DcVUPWx3cVA3
data/Plugin/DfRvJz66mdCo
data/Plugin/DlPGcffoxw2I
data/Plugin/Drx2UKMZKwek
data/Plugin/DvqdrBx7UB4V
data/Plugin/Dyc9Nf8miyN5
data/Plugin/E3G0Es2aIWbX
data/Plugin/E7KRHXDYX36h
data/Plugin/E8fXtAtChN6q
data/Plugin/EABFuiLHOiY1
data/Plugin/EDy8lg9IR6bH
data/Plugin/EFOnmJlZESHQ
data/Plugin/EGQvZMNzlkTd
data/Plugin/EPwpq7f2KXtd
data/Plugin/ERC3x76w81cN
data/Plugin/ERWCsyRxIkgf
data/Plugin/EVF35MBTdVLA
data/Plugin/Eca8brMLu5PP
data/Plugin/EeyilTMwZSnB
data/Plugin/EfI447g8IsrP
data/Plugin/Er9osGQGMuOe
data/Plugin/Et0M7Oulevtc
data/Plugin/EtB70EWOG3Ky
data/Plugin/ExRmd1QjGf45
data/Plugin/F1e6NTtH2gcp
data/Plugin/F64QpvguLRAx
data/Plugin/F80uB8VuIio5
data/Plugin/F8Na2J1azIM9
data/Plugin/FA8JfgV32efR
data/Plugin/FAWsNAVGrnPm
data/Plugin/FG2Ye41GFWuc
data/Plugin/FHH8mgQ2EMIz
data/Plugin/FPHH8aAmNhg7
data/Plugin/FQNs3KUNHGVj
data/Plugin/FUDRMavuw8xH
data/Plugin/Fc2jaG8P5tIn
data/Plugin/FdPrcGWU46SQ
data/Plugin/Ff4Y13mI2SEu
data/Plugin/FmvImQ6gIO2g
data/Plugin/Fv9hqyCIoq3h
data/Plugin/Fw15IFa4havr
data/Plugin/G2O2UlmuzCaq
data/Plugin/GA7cV7l322cm
data/Plugin/GFNesjTqWoaT
data/Plugin/GGT9rsM4va90
data/Plugin/GKGIUdSTJ9Ky
data/Plugin/GMgAETDC8PRQ
data/Plugin/GRHWnUHeCuFu
data/Plugin/GTH6m4CC1WhL
data/Plugin/GWfTVo3sacFL
data/Plugin/GYUbOYZeTLlU
data/Plugin/GYiGJKiIS6Ri
data/Plugin/GiDH9QiuNTMs
data/Plugin/GtH36wrVhmeu
data/Plugin/GxqFCkyHVS7L
data/Plugin/H19QsJoM5QMd
data/Plugin/H9JwsslljcQf
data/Plugin/H9u2FdDFmRYt
data/Plugin/HB3d8ChtgZup
data/Plugin/HB6hdpWxEpfc
data/Plugin/HJ4KCKg0d1N7
data/Plugin/HUJiX2PRGq6x
data/Plugin/HecoL2K6EGYD
data/Plugin/HgnGfcZec2mk
data/Plugin/HjJaAmrdkEY7
data/Plugin/HkBWHnNEtg3B
data/Plugin/HlbHBCaKoL7d
data/Plugin/HmDOkmGXE4mu
data/Plugin/HomIKnuViMBT
data/Plugin/HpCN1jPQurf6
data/Plugin/HsxMXMXUf7bc
data/Plugin/Hve8BsJxgoc7
data/Plugin/I1LOpDUBzWJN
data/Plugin/I3zdrnCeX3fc
data/Plugin/I8MP5XItFWFH
data/Plugin/I8Y6kqTKxb1H
data/Plugin/IDTnnusTzeX4
data/Plugin/IDnUtvtqL0DD
data/Plugin/IPfKNa95jHiv
data/Plugin/IZfFZAes2AGe
data/Plugin/IaYgw19vQ5WN
data/Plugin/IeE8FOQhnWbG
data/Plugin/IiDbXUzrgt1Q
data/Plugin/Ise53jOsdf9O
data/Plugin/Ism11KraDIiG
data/Plugin/IuXUmDQemzbl
data/Plugin/J2R1h0N4IhaM
data/Plugin/J3v1S3eGdb1J
data/Plugin/J5toWu8bLyNh
data/Plugin/JAGONP3o9IKg
data/Plugin/JG8eppzNG9KJ
data/Plugin/JLbwkV9kcXYv
data/Plugin/JQGCC5t1C48B
data/Plugin/JbVobM6oasRW
data/Plugin/JhrTYF7gWSw6
data/Plugin/Ji1aEy86Jne5
data/Plugin/JoFcbflqSeab
data/Plugin/JoQUFUzvyl6k
data/Plugin/JsEOvIufQiGz
data/Plugin/JtzEwiNuBN05
data/Plugin/K0YM4J1opcWT
data/Plugin/K3blpDHB1rDS
data/Plugin/KCtIRdAwbMzB
data/Plugin/KGbWJbutxZO0
data/Plugin/KL80lenOZvpw
data/Plugin/KMR0xSuy39yV
data/Plugin/KbKUKfcnLuiw
data/Plugin/KcnRIeC9CjOU
data/Plugin/KeCy4MFfSMss
data/Plugin/KeUCQwA5QnVm
data/Plugin/KeooKtLRJCWS
data/Plugin/Kknip8oVdhfL
data/Plugin/Km22AyxuClIL
data/Plugin/KnDLC1wGVBZO
data/Plugin/Kq2RgaignGR3
data/Plugin/KsvPboaYUZ9d
data/Plugin/Ksvhd3GSnqQp
data/Plugin/L4IXhztxispS
data/Plugin/L9ZLTrqbMpaS
data/Plugin/LEDjPnc5BJl5
data/Plugin/LI2v2YFL61PZ
data/Plugin/LIMp2doBUKee
data/Plugin/LQ8GtMV1OlL5
data/Plugin/LSqbpIJ4sboA
data/Plugin/LTY3TYgFUUDc
data/Plugin/LY3F5zpkMKQJ
data/Plugin/Ld0rX0eel473
data/Plugin/Lh1nwKc3GrjE
data/Plugin/Li9A8SczO1Qy
.ps1
data/Plugin/Lm04ioyjnoim
data/Plugin/Lz6PjEtcph7H
data/Plugin/M7wwB1jT0gZx
data/Plugin/MDYZrTq1Plsd
data/Plugin/MF0zooyXLd8R
data/Plugin/MKJ9B8KLao9X
data/Plugin/MKlneKU1n2sg
data/Plugin/MQ1bCgzM8Xkx
data/Plugin/Mci0cJbqvPg8
data/Plugin/Meb6NnDFlG9m
data/Plugin/Mqryev1wDSYE
data/Plugin/MuVm8ttCAR9z
data/Plugin/MvmzlJgBSUQM
data/Plugin/My7hmMxjbxix
data/Plugin/MyVI2u2NtDya
data/Plugin/N6qcptrm4UjV
data/Plugin/NH0e5rgPsUXu
.ps1
data/Plugin/NI3X56T48HPl
data/Plugin/NM1Gymog6yYO
data/Plugin/NT61FbCcMyst
data/Plugin/NYer8Ys2PQMG
data/Plugin/Nf3PsMfI1KWD
data/Plugin/NhNGhxdL2TjN
data/Plugin/NhoPajbjvysI
data/Plugin/NsEnOvnWBwZ8
data/Plugin/Nzla917bFzSa
data/Plugin/OEu0M3wpUQ2w
data/Plugin/OGLbS2CzAXt9
data/Plugin/OJKGQIBFfaSW
data/Plugin/OJOlWGf0BqV6
data/Plugin/OQt0jGsZZlCb
data/Plugin/ORgkaDQYUUz5
data/Plugin/OSJujHX9SuHE
data/Plugin/OYagtec8TiAO
data/Plugin/OdZ1v2aod740
data/Plugin/OeP3fNegXKfr
data/Plugin/Ongy65yyB40X
data/Plugin/P4CACBIntAkd
data/Plugin/P7EaIIUlrDxm
data/Plugin/PDW7qHaP3XhS
data/Plugin/PDXEpwFmIFo5
data/Plugin/PElwJinGLJuS
data/Plugin/PHUqExqHuXss
data/Plugin/PI6TKKLq1bG3
data/Plugin/PP7RHZtDBI5w
data/Plugin/PUEzz1VOzlp2
data/Plugin/PaJSKuBSJpjF
data/Plugin/PhmXsWZrpkO0
data/Plugin/PlAP4BEOtf2B
data/Plugin/PrBHSWjlQhsf
data/Plugin/PrlIzMrmEPna
data/Plugin/PsFIZAZZs8iS
data/Plugin/PsOhUOtm2c1E
data/Plugin/PzBKDhyy3Z8H
data/Plugin/QeSORB96mJ6L
data/Plugin/QmtBAASktTXp
data/Plugin/QwtPRBMaTdnR
data/Plugin/R2ic3bMg7vx3
data/Plugin/R9Rq1ISaJtwL
data/Plugin/RAQMRxVKonmK
data/Plugin/RGE1r5pqQzxz
data/Plugin/RMMpqzIJ2bdG
data/Plugin/RMh5bGQnhCuW
data/Plugin/RPBVWpa2bYNR
data/Plugin/RQodayZbwfXW
data/Plugin/RSBgV0umZEhv
data/Plugin/RSPCd8SMEuVH
data/Plugin/RbHn8Rp7TuVS
data/Plugin/Rh2UEmxCCsge
data/Plugin/RmoZU1OY736V
data/Plugin/SBiVrkChBlDA
data/Plugin/SF1XAyIzrDeW
data/Plugin/SFwQ5KejDqlm
data/Plugin/SKd4olXTKqsZ
data/Plugin/SQB8j5CWHGsy
data/Plugin/ScjxF21ti0O9
data/Plugin/Sheqtqj9mrF2
data/Plugin/SnstPyUlh1HT
data/Plugin/StR5N8VN6l7E
data/Plugin/StWHUNBeM5YF
data/Plugin/SuAEPGyxNsFo
data/Plugin/SuoPyFFWnEOH
data/Plugin/SwV8LX4267K7
data/Plugin/SwxfWkXlpoou
data/Plugin/SxxEPmz9Vn7f
data/Plugin/T8JRuu6WCfbI
data/Plugin/T9JIX0ZypWH6
data/Plugin/TAa84KR5XQeZ
data/Plugin/TDaNS4dnS110
data/Plugin/TEt6497RWQzi
data/Plugin/TNUae7tcE7Gm
data/Plugin/TZp0jWQ3MWXk
data/Plugin/TbIsCuZJ9aWv
data/Plugin/TbL1ch7qTTpE
data/Plugin/TeURlN7r8brv
data/Plugin/TfOkRVnfaqH2
data/Plugin/Ti5mdvIsV7ir
data/Plugin/TjZyC9GvckMV
data/Plugin/TsGJ1V4dK7Fx
data/Plugin/U2YXqce3EWDT
data/Plugin/U3gSUXrX2qbm
data/Plugin/U8rM9veXkMFi
data/Plugin/UNOHOU0Y7PRq
data/Plugin/UPryQ3hiZ5Ln
data/Plugin/UPyDBjnEQ9tt
data/Plugin/UT2BseL3YCwH
data/Plugin/UXQdiDIgUKQe
data/Plugin/UdPlRoJYaEaN
data/Plugin/Udjzhf2qXa3f
data/Plugin/UefzCKaYXA3O
data/Plugin/UgwBIIxwjcCY
data/Plugin/UmHDZ92rCsif
data/Plugin/UroOuXA7z2hW
data/Plugin/Us5l0D2JkKwR
data/Plugin/Uv3CmxDV3ic3
data/Plugin/V1TWtZWHK7p4
data/Plugin/V4QTRX1JXOsV
data/Plugin/V7OynTNhqW2h
data/Plugin/V8yoyORE2YMr
data/Plugin/VF7vC1KMMout
data/Plugin/VL2N2eYAidyn
data/Plugin/VL82hNHljHJk
data/Plugin/VNtAJVJ0CtYm
data/Plugin/VO4aFbGo2KT4
data/Plugin/VOKDi6GNWS6W
data/Plugin/VSfBoS9MfvoO
data/Plugin/Ve38aHQhhM40
data/Plugin/Venw9ZgLe6y7
data/Plugin/VhZRh0Zj9yHI
data/Plugin/Vkk0G4KNGM64
data/Plugin/VoHC6KMYXUM7
data/Plugin/VolyO3QHmhkd
data/Plugin/VrpnQlrFUz1a
data/Plugin/W6V9BE6gW1sg
data/Plugin/W7ABmfzetUsC
data/Plugin/W7DMlHy82B8G
data/Plugin/W8MH8t0iszta
data/Plugin/W8axp5hXCGJb
data/Plugin/WDLxlEuieqM3
data/Plugin/WDojkuDXV4On
data/Plugin/WFnKz5yMuPmM
data/Plugin/WHzBcfd9tdxy
data/Plugin/WL2LnSzijcbY
data/Plugin/WeXLiQm4TcNi
data/Plugin/WlADGEDR1BwK
data/Plugin/WlDZ3ywtvyGi
data/Plugin/WnBjwviekZMv
data/Plugin/Wnb7JdGuR1sE
data/Plugin/WqoLopEIx1we
data/Plugin/X268esY7wBN8
data/Plugin/X4QK0tYYWLjB
data/Plugin/XFFphsffhzMH
data/Plugin/XJXOvYIeid2R
data/Plugin/XKC8S8Gubs88
data/Plugin/XKycEQeTrxRr
data/Plugin/XMBQhuQgtblk
data/Plugin/XPbr68CYmc51
data/Plugin/XPwSNndOXWOz
data/Plugin/XRDBrnBRXfO4
data/Plugin/XTrIuIDaDjQ9
data/Plugin/XXrEWMENUFC9
data/Plugin/XY24r7tvWlUG
data/Plugin/XYJgBz0U9l3m
data/Plugin/XZfw49tLbPkt
data/Plugin/XrYgZXuEsQdP
data/Plugin/XvPaEN2ZEKHb
data/Plugin/Y087SejTyE7I
data/Plugin/Y0RuNaEueLFp
data/Plugin/Y42bmsByoqua
data/Plugin/Y4v80WH8hjfi
data/Plugin/YBQ8TBCYNdej
data/Plugin/YLBCBMw1sNJ7
data/Plugin/YXMhjrD5vM2W
data/Plugin/YZZawz3OAKIt
data/Plugin/Yjm5uImH9k7X
data/Plugin/YlGZd5fJ6XS3
data/Plugin/YpdWnAAjJ1RZ
data/Plugin/YtYA86IN8B1a
data/Plugin/YySmOVuqma6r
data/Plugin/Z3ddWWaiSPrd
data/Plugin/Z582zd4ttAO5
data/Plugin/Z6DAgN54vN03
data/Plugin/Z6FEHKw20gV7
data/Plugin/Z7T8ex0cJ3fc
data/Plugin/ZDzYjHxXpN0X
data/Plugin/ZJCh3EH8ZLO5
data/Plugin/ZM7FGgd2poA8
data/Plugin/ZPxhJ3dRLcL5
data/Plugin/ZRi8qlpmmVMP
data/Plugin/ZSTlDBoXxhn1
data/Plugin/ZWBOVCZXtMou
data/Plugin/ZYdIq2sDG3sv
data/Plugin/ZYfZ1ebzKhqg
data/Plugin/ZYn4ko5lhY77
data/Plugin/ZcuwC6ID4AT9
data/Plugin/ZdqasJNeOhnz
data/Plugin/ZfM6XfiAVDjd
data/Plugin/ZhGbdSndaVzG
data/Plugin/ZiJTGpRNj5Sc
data/Plugin/ZnrC2Bk3P5bU
data/Plugin/Zq3OQJp1pzWK
data/Plugin/a05RsI9QVrjs
data/Plugin/a5CK7hfUaRwh
data/Plugin/a7SJXIEuwA7b
data/Plugin/aAe12k71FSUz
data/Plugin/aBtxPoX23n0o
data/Plugin/aCSBb7LnSBN8
data/Plugin/aDI1nCA05iGT
data/Plugin/aEsPGxS9SKcN
data/Plugin/aF6CytL77dHd
data/Plugin/aI3ebAtBSujh
data/Plugin/aP4xFPMlHNNE
data/Plugin/aSVLKeRuWPFb
data/Plugin/aT63QRdOuIIg
data/Plugin/aTM6RhActu1S
data/Plugin/aVKK8iYfm8zH
data/Plugin/aZuD0Nyn77Yx
data/Plugin/aa9lBGwRbKMy
data/Plugin/addrnjkTPjFi
data/Plugin/agpqkpjMoxNw
data/Plugin/ak8eXO9zYenf
data/Plugin/alOUQdrOURwF
data/Plugin/anmozMfTT7fC
data/Plugin/arRes2B8FccK
data/Plugin/b1wCFvBAcnTM
data/Plugin/b2O2raG5sVhw
data/Plugin/b5tufGaiB5m4
data/Plugin/bADkZ6ZI8lmk
data/Plugin/bApaQ7TvZR4E
data/Plugin/bEJmOQtkdsDZ
data/Plugin/bGwpzVYCRrBh
data/Plugin/bI89l2rQNetM
data/Plugin/bIXZvaGwJZSv
data/Plugin/bMmT5Qxbrci9
data/Plugin/bOGdoVCcWUJC
data/Plugin/bOgwjZsFHCZG
data/Plugin/bQoB350OkVb3
data/Plugin/bQvF8aAgfAKj
data/Plugin/bSJu3tJWww41
data/Plugin/bUlZLp8S6IRY
data/Plugin/bWUzGn2QLGFI
data/Plugin/bck4ppoB1pCD
data/Plugin/bg08fet3yIUZ
data/Plugin/bgX89ySgBLe4
data/Plugin/biSCKJ5uk6DJ
data/Plugin/bkrqw0b9JSHW
data/Plugin/bkzkCwP1LIhD
data/Plugin/blJpJBNajvJG
data/Plugin/blzZtxS4U2fa
data/Plugin/bmEpBij4ln1o
data/Plugin/bnaAdfRU6dtt
data/Plugin/bnrnfGSoszY9
data/Plugin/bo3Dfc9TABdg
data/Plugin/bpGZRyblfgIA
data/Plugin/brNuaaozQJPX
data/Plugin/bx2q18ql59Zl
data/Plugin/bxz0s2nkdXZK
data/Plugin/bycZWHMKUP4x
data/Plugin/c2SshCKBaNU9
data/Plugin/cBCr4bKhbb6z
data/Plugin/cDqR33ecFFwO
data/Plugin/cGRb7y1ZypnW
data/Plugin/cGmJYNstPKty
data/Plugin/cM7Fy056kGgf
data/Plugin/cUnUS96BIWsV
data/Plugin/cUsZNJEHLtNR
data/Plugin/ckNTMvsYRwSC
data/Plugin/cnVz51GuW1DQ
data/Plugin/d01poT3a6fyG
data/Plugin/d52KARHXBjjG
data/Plugin/d5D7RzibDKi6
data/Plugin/d80kIhyipBX6
data/Plugin/d8KLgmhtRQnQ
data/Plugin/d8iSBkpJbqi0
data/Plugin/d8x9ZrX5Qps6
data/Plugin/dAzdtfKx1JuI
data/Plugin/dEKS4bhDDDy6
data/Plugin/dM37p2s43N7z
data/Plugin/dUDll0kUDi8z
data/Plugin/dVwarb7vo2TG
data/Plugin/dXPnCvCYbV8d
data/Plugin/ddUsi4GqSGZl
data/Plugin/dkEw2116Uroh
data/Plugin/dqQAJABbEZ47
data/Plugin/duuRdLZDRZ7p
data/Plugin/dvOn4jxRaUQb
data/Plugin/dyb4lxB33w8r
data/Plugin/e0V2PJnqAmOb
data/Plugin/e0kj4783sNI6
data/Plugin/e6DO8aPnQeeV
data/Plugin/eNjmcdLzuibP
data/Plugin/eQpjkWVklgX6
data/Plugin/eQqj2Tsnej44
data/Plugin/ebGBIf4l7A8r
data/Plugin/ebqBOuYaH9GN
data/Plugin/eejHc2CaQr3Q
data/Plugin/ehnQfmAG3RMU
data/Plugin/ejTUups9arS5
data/Plugin/entylB8dk9R5
data/Plugin/es5bEGb9rT5J
data/Plugin/esyrAPOnQnHM
data/Plugin/et1Jb4WnaPX9
data/Plugin/ezDF4nlM5tx7
data/Plugin/fSxHUa8U9Fv0
data/Plugin/fTJe1bwZyCku
data/Plugin/fUElgl9a0NfI
data/Plugin/fYNyaj8pA3tF
data/Plugin/fbJS2d5NztNL
data/Plugin/fc4yuGWQmsLR
data/Plugin/fcmcRmBOW2TK
data/Plugin/fiBgOgNr8IWF
data/Plugin/fkSJcJarzYOb
data/Plugin/foUcuvLOvP6P
data/Plugin/fuDP0rOiN8LT
data/Plugin/fwfkqZRv4tLC
data/Plugin/g0hLpoe5NlIA
data/Plugin/g1MHlJroCmWS
data/Plugin/g1v7ee4jWSAZ
data/Plugin/g6rVHHCzBzsD
data/Plugin/gDdDOq97trgP
data/Plugin/gEzaIKkk7fkw
data/Plugin/gFDvpfiew2v5
data/Plugin/gPCcM7PMcmak
data/Plugin/gPYVjBSvrHnH
data/Plugin/gVZiSgp7jWMK
data/Plugin/gbaJnbHyhIiV
data/Plugin/gbnpf7N2v0As
data/Plugin/gbrjxWMMsERa
data/Plugin/gfiFQ7dGW7JM
data/Plugin/gla8jpKwmErx
data/Plugin/gmBKyBdPgIoZ
data/Plugin/gsNDxWSeT0qK
data/Plugin/gsOvMDhG2OIx
data/Plugin/gxxMZhQDn1oP
data/Plugin/hFjzqZnbpfaO
data/Plugin/hHvqSIYkmVyg
data/Plugin/hLZgvy9tqkBg
data/Plugin/hSEh4436CMfu
data/Plugin/hTadFRclyNfq
data/Plugin/hVHXW1YjrTCH
data/Plugin/hacefiMdN7wK
data/Plugin/hbqS4Ra8y0BJ
data/Plugin/heu1fosOmyRN
data/Plugin/hfkFduTh0It7
data/Plugin/hgDo6k05qsLG
data/Plugin/hjxSzKzVCBPt
data/Plugin/huRHXPShq9Aq
data/Plugin/hzWHctaxhjhP
data/Plugin/iHzmolF5V9gm
data/Plugin/iI9DJSDnuQAS
data/Plugin/iJ4UyEnHmXl6
data/Plugin/iWEmzvS8hp54
data/Plugin/iXznYARomAls
data/Plugin/iYstWDjZZ69r
data/Plugin/iiKZmpHJ0pgd
data/Plugin/inLrXTJa1WId
data/Plugin/inf9RHqPdqGk
data/Plugin/irqwnnEVDIG5
data/Plugin/iuv5zxaFxejN
data/Plugin/iviaHhEb8QhZ
data/Plugin/ixjQgkGBzb30
data/Plugin/j0h6taE7uv7N
data/Plugin/j3p3XqYPyZRf
data/Plugin/j7CpUM1irK44
data/Plugin/jARW4TiqhRdI
data/Plugin/jF80Pfmj1Xoz
data/Plugin/jGkrPNpf4pt3
data/Plugin/jGvJHD6dgjcg
data/Plugin/jJyiqRxWfLFJ
data/Plugin/jLONk0IZQC9u
data/Plugin/jMtfR1q7rn6r
data/Plugin/jODVqjvzEs6A
data/Plugin/jXq91P27zGCb
data/Plugin/jYe6UBkq13bW
data/Plugin/jZdSFYh6Q642
data/Plugin/jqpyrhtf2LyC
data/Plugin/juZ2DavW141i
data/Plugin/jw2rQztge8S0
data/Plugin/jy6lbjy8OCCT
data/Plugin/k645NlfMCSIW
data/Plugin/k7WJd6T8qxP5
data/Plugin/k8TYMoOjrCak
data/Plugin/kCQlf6J8YKMP
data/Plugin/kHUu728DMiuO
data/Plugin/kKtCmtii7z20
data/Plugin/kPwLGnkHNGGf
data/Plugin/kT3gskG4bimf
data/Plugin/kUpinN6INTJR
data/Plugin/kfVqoVoioU4y
data/Plugin/kglTe3dDv0zM
data/Plugin/kltFfTTHC1X9
data/Plugin/kmosTHyIjQ7i
data/Plugin/krhR6lZq6Bs6
data/Plugin/kvtBc4JBuTPk
data/Plugin/kwgx9lom249h
data/Plugin/kyhOn6TtR22I
data/Plugin/l3FthbZkNIIg
data/Plugin/l4OlK6z9BDBN
data/Plugin/lDKyrSif0Zj5
data/Plugin/lG7ZOeK05YvA
data/Plugin/lGqoLQru3949
data/Plugin/lKOmq0dGbvBt
data/Plugin/lNdZTQoumDqB
data/Plugin/lZHQ3NLDqnG2
data/Plugin/lbfs5pXsxsZy
data/Plugin/lfLowSjVem9q
data/Plugin/lfmbwwDepeQ2
data/Plugin/lfripbDeWHYL
data/Plugin/llsqgKQM261q
data/Plugin/lmHntQCJ9NNS
data/Plugin/lqTaYb02FtZ8
data/Plugin/lrMyGTu9LQWm
data/Plugin/lrhWsP1RKSSN
data/Plugin/lywFm3khlXRp
data/Plugin/m1Qe6UA7aUma
data/Plugin/m5cgWBxzGdms
data/Plugin/m6qcmBO0iDYi
data/Plugin/m8p2rFZhQgV2
data/Plugin/mFp3vqb4agye
data/Plugin/mK87k6MTMFbo
data/Plugin/mYSu3nfqFpHB
data/Plugin/mZWRQTQaEDeq
data/Plugin/mbOgvhR8W46y
data/Plugin/meeWmfWlZ0e0
data/Plugin/mgJ6qgIetaJ0
data/Plugin/ml6urRyRLFJR
data/Plugin/mmOHXTuIamYI
data/Plugin/mnO41hxBfS0b
data/Plugin/morYTfqvJoti
data/Plugin/mpNG4JZLs5cr
data/Plugin/mr2maEnRdPvx
data/Plugin/mroE95ZbM4cH
data/Plugin/mv7qVEgyL3a8
data/Plugin/mxIksLj9HdDx
data/Plugin/n44ihmaCt7yj
data/Plugin/n4magQTngqmG
data/Plugin/n6Pe8y9nZwCK
data/Plugin/n8dFoTwrFxnI
data/Plugin/nK9W4N4tDplj
data/Plugin/nKWBPHmXTHJA
data/Plugin/nLxorWT5lVED
data/Plugin/nRmS2hNWQMb6
data/Plugin/nUqptSic0bbL
data/Plugin/ncfKSxTvBtig
data/Plugin/ndYdZ1Uigt1j
data/Plugin/nduG80ovLNIN
data/Plugin/ndypkMmJjCvA
data/Plugin/neMwjLG3zOe9
data/Plugin/nfNewgV1VqrX
data/Plugin/njCp6PKJ0zxd
data/Plugin/nu7fHqAaI0s2
data/Plugin/nuPnkCHqt4nq
data/Plugin/nvYv4613cbiW
data/Plugin/nwB0pTb6lmkD
data/Plugin/nwePVLqKzcFa
data/Plugin/nxrmqQDXOU4H
data/Plugin/o0boXvoJE7pe
data/Plugin/o6UpGFgODkYq
data/Plugin/oA74QMMFsyc5
data/Plugin/oGYF5unHHqpt
data/Plugin/oJ3MnrU09l4Z
data/Plugin/oLbvEpJUecal
data/Plugin/oMrnTVSwcT4N
data/Plugin/oNG8ZTVznVMU
data/Plugin/oSV8H2nHkGCe
data/Plugin/oWDhZgbio8b7
data/Plugin/oWJ5fGbh28h6
data/Plugin/oZnxQD8M4k9S
data/Plugin/ocXd4Ivm6uQX
data/Plugin/ofBxq6HxvBkk
data/Plugin/oh1ZrQGCHMGq
data/Plugin/oriiMmCUdFTi
data/Plugin/ovOMpsbcvMI3
data/Plugin/oxB4r5Sdvmep
data/Plugin/p4P1DQrVWusR
data/Plugin/p4S3WagTtxqv
data/Plugin/p6nvnrtpVwOX
data/Plugin/pHV0RquktLQp
data/Plugin/pM7LIqDZ4NNp
data/Plugin/pPubHoO2xxR6
data/Plugin/pSifVcAqAf8o
data/Plugin/pSyt9aV0iVd6
data/Plugin/pURqcNkCyuq7
data/Plugin/pab2svukvLnw
data/Plugin/phOfaZVpuy9M
data/Plugin/px3Ybcq1vmMB
data/Plugin/pxkl6odLz73w
data/Plugin/q1I8cuJrrfN6
data/Plugin/q5yCjwIKqUVg
data/Plugin/qBFj8V32nzdp
data/Plugin/qFStmTXoxVZ9
data/Plugin/qFxtU3ySVCdI
data/Plugin/qHNj3Fqvmq61
data/Plugin/qLQnrqS3JeDg
data/Plugin/qMIovajgrKx5
data/Plugin/qR0i3skfNDN1
data/Plugin/qXzQEmzXdx2T
data/Plugin/qb12HDzN5uG4
data/Plugin/qb5PFjV351xc
data/Plugin/qeSeaeVFgHkf
data/Plugin/qfcCv2Lp7hHz
data/Plugin/qk8JCwrLyAUA
data/Plugin/qlmkiGSOrs1M
data/Plugin/qlxMrTLQucQX
data/Plugin/qoBUAXr9wHHr
data/Plugin/qtV8YXLYrxjB
data/Plugin/qvXJszWVB4w0
data/Plugin/rE7TYkwmilfT
data/Plugin/rL7e6HVOHTvW
data/Plugin/rQAJipANNKYE
data/Plugin/rUUov6ysjAur
data/Plugin/rZGo4W6M6T2O
data/Plugin/rcRYGwUwSua6
data/Plugin/rdARwQ4wduHr
data/Plugin/ria47jeQctIz
data/Plugin/rjH7K99BPNao
data/Plugin/ryTRdeqVvklR
data/Plugin/rz8uxlFpd6bQ
data/Plugin/rzCvxJjx1Pe3
data/Plugin/s5ui5SunH7Ng
data/Plugin/sF8UydW4qJeo
data/Plugin/sG8InSOn7giD
data/Plugin/sIonnfKcXayT
data/Plugin/sO5E1gNEu0rU
data/Plugin/sPDQlZcitXBz
data/Plugin/sQVgHYXYfNRu
data/Plugin/sQhwkg11WiNT
data/Plugin/sWAeUTMfU3QP
data/Plugin/sbSCwVB6aZHk
data/Plugin/sfa1aLqXj050
data/Plugin/skIt7dswqWLg
data/Plugin/sknMUScN5vv7
data/Plugin/snDXfcswFZae
data/Plugin/sp7fZtBFp2pd
data/Plugin/ssXuc0Ta1QYD
data/Plugin/stiKH2Mny7FL
data/Plugin/sulw4XK7mVxl
data/Plugin/t7RALnQWiS8X
data/Plugin/t9TmivCTPXM9
data/Plugin/tCjPihFJWPxW
data/Plugin/tHBkwf37uzOX
data/Plugin/tLYgD4hf8sjN
data/Plugin/tOF5gmaDh4Ia
data/Plugin/tRwkYJ1fRvxd
data/Plugin/tgmHUipM3kfL
data/Plugin/tnmS64TTzu1O
data/Plugin/u565ItgY8eVn
data/Plugin/u7bxvUXRa685
data/Plugin/uBmtmDIHkb1r
data/Plugin/uCZvtouu8r8V
data/Plugin/uDLg0S7wfwsf
data/Plugin/uGumE6jusADg
data/Plugin/uIFDyzKwGPTJ
data/Plugin/uKUSqInJS4bT
data/Plugin/uMR9vDhJlClL
data/Plugin/uMsjlmgRxiOU
data/Plugin/uSO6a5JNJioj
data/Plugin/uTHupjKnfzwS
data/Plugin/uUnw4Cue86uI
data/Plugin/uWaJecq1Z4HI
data/Plugin/uYMP3R0yUW8W
data/Plugin/ubAfQ2DydRTs
data/Plugin/udlKTlIcAyCF
data/Plugin/ujbjeiCbHqMf
data/Plugin/ukd9FZNCDtJ4
data/Plugin/ul1LqymKhE9D
data/Plugin/ul2K2ns7gx0P
data/Plugin/ulvFQFgHmvS1
data/Plugin/unTJedTJV6y3
data/Plugin/utA7uH1FTU2c
data/Plugin/utTj3zuk6NaD
data/Plugin/uu6FqvTvscOn
data/Plugin/uv8EWtiUEulP
data/Plugin/uwEGuovRQE1H
data/Plugin/v5dT3QaV9nO8
data/Plugin/v6krQbsitfHl
data/Plugin/v7Va8f0QIt8t
data/Plugin/vBEcRiTm7Frv
data/Plugin/vBmXO3kMwQmp
data/Plugin/vSPkagnMhMXP
data/Plugin/vXTcIy8P9YB3
data/Plugin/vZR9qQ6Gerl7
data/Plugin/vcCKKT3A5z8Y
data/Plugin/vf3ilSdmC0qX
data/Plugin/vi2YsXkZjD4I
data/Plugin/vjAMzGJ1eA8V
data/Plugin/vkwvOaQGF5II
data/Plugin/vn2dFccRJB6K
data/Plugin/vpi586vgwhAl
data/Plugin/vsEcSPEg6YQ8
data/Plugin/vst9TZ28ydF1
data/Plugin/vylEtr6d2deW
data/Plugin/w06XVThxt1JN
data/Plugin/w6d3FYad4w0I
data/Plugin/w8lCOoD9tF3f
data/Plugin/wDybzMykgJPg
data/Plugin/wEQHqECyrwoi
data/Plugin/wRjE9v9iukh0
data/Plugin/waGXYLsOeh2s
data/Plugin/waZSpksilbPm
data/Plugin/wcRxoqftA8q1
data/Plugin/wdS9FwK0u8Km
data/Plugin/wepuxBzvws83
data/Plugin/wfznb5fBo9P4
data/Plugin/wnWiOmBK5pAk
data/Plugin/wo3CGbWNeLMN
data/Plugin/wqb7qlk4bkb8
data/Plugin/wr3MYjZwhSPU
data/Plugin/wt0bicYA9ao0
data/Plugin/wtBWvCR4bjOh
data/Plugin/wvzoBaadtVoG
data/Plugin/wvzpiiBTWKiX
data/Plugin/wyefKjvrwFC8
data/Plugin/x07PGQM6zgj7
data/Plugin/x4hfyxb0m107
data/Plugin/x5bQ3q3OPumL
data/Plugin/x5nKF6jCxbm5
data/Plugin/xKqCP6FcldsM
data/Plugin/xMPpOBLGaSHa
data/Plugin/xUekdU1MceaG
data/Plugin/xYk7gOrVK2TG
data/Plugin/xhRsNCYFzhu6
data/Plugin/xjfoyfx7c1vP
data/Plugin/xpFA6nrnvqE3
data/Plugin/xseRPGA5UCJo
data/Plugin/y1UbabRis3Qa
data/Plugin/y5imP5eBcODf
data/Plugin/y71gPb34iNZp
data/Plugin/y97hIl7Gy1cu
data/Plugin/yD277yUJIrjl
data/Plugin/yG5Pmh74MroJ
data/Plugin/yOltLCM3tN4u
data/Plugin/ySKYnPk7i1mX
data/Plugin/yXUWv4n3xFuX
data/Plugin/yf4CGHZmgAuG
data/Plugin/ymmKiCEEqFyT
data/Plugin/ypQcPSsbiLiz
data/Plugin/ytmKpUHRvtLx
data/Plugin/yuzpydLX9Ywe
data/Plugin/ywlOgoDAeg8P
data/Plugin/zH7kouv5bReP
data/Plugin/zN2vkNzEtxni
data/Plugin/zNY5X0nx8jzG
data/Plugin/zWYOgXtAKfyY
data/Plugin/zXloP3QwfJy4
data/Plugin/zXsKSmCgWIuI
data/Plugin/zjGTZJKrWGxg
data/Plugin/zkxoOHfdj9oW
data/Plugin/zmhnAhtqC8Sg
data/Plugin/zs5JYm6wnois
data/PyBridge_x64.dll
.dll windows x64

31dfec50c1a7418fbabf995a72f5e037

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:b0:9e:82:2c:e7:29:75:80:b3:8a:62:e6:b0:aa:ea:28:bf:90:fb:5d:07:63:6c:d2:07:ee:98:d3:b9:b2:c5
Signer

Actual PE Digest

01:b0:9e:82:2c:e7:29:75:80:b3:8a:62:e6:b0:aa:ea:28:bf:90:fb:5d:07:63:6c:d2:07:ee:98:d3:b9:b2:c5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

WaitForSingleObjectEx
CloseHandle
DeleteCriticalSection
CreateSemaphoreA
GetModuleFileNameW
GetVersionExW
GetModuleHandleW
VirtualFree
VirtualAlloc
SetHandleInformation
SetLastError
GetHandleInformation
GetConsoleOutputCP
GetConsoleCP
GetFileInformationByHandle
GetFileType
SetEvent
CreateEventA
GetFileAttributesW
LoadLibraryExW
GetSystemTimeAdjustment
GetTickCount64
QueryPerformanceFrequency
GetSystemTimeAsFileTime
TlsSetValue
HeapFree
GetCurrentThreadId
TlsAlloc
HeapAlloc
GetProcessHeap
TlsGetValue
TlsFree
CreateDirectoryW
GetFileInformationByHandleEx
FindFirstFileW
Process32First
GetConsoleScreenBufferInfo
FindNextFileW
GetCurrentProcess
GetStdHandle
DeviceIoControl
TerminateProcess
RemoveDirectoryW
GetFinalPathNameByHandleW
SetFileTime
SetEnvironmentVariableW
CreatePipe
CreateHardLinkW
FindClose
GetVolumePathNameW
CreateFileW
OpenProcess
SetFileAttributesW
CreateToolhelp32Snapshot
GetFileAttributesExW
GetDiskFreeSpaceExW
DeleteFileW
Process32Next
LoadLibraryW
GetActiveProcessorCount
GetCurrentDirectoryW
SetCurrentDirectoryW
GetProcAddress
MoveFileExW
CreateSymbolicLinkW
GetProcessTimes
GenerateConsoleCtrlEvent
RemoveVectoredExceptionHandler
SetErrorMode
RaiseException
AddVectoredExceptionHandler
GetConsoleMode
ReadConsoleW
ResetEvent
WriteConsoleW
GetNumberOfConsoleInputEvents
GetStringTypeW
ReadFile
CancelIo
SetNamedPipeHandleState
WaitNamedPipeA
CreateNamedPipeA
WriteFile
LeaveCriticalSection
InitializeProcThreadAttributeList
PeekNamedPipe
WaitForSingleObject
OpenFileMappingW
DuplicateHandle
GetModuleHandleA
GetVersion
UpdateProcThreadAttribute
CreateFileA
DeleteProcThreadAttributeList
GetOverlappedResult
ExitProcess
CreateProcessW
CreateFileMappingW
MapViewOfFile
VirtualQuery
ConnectNamedPipe
GetExitCodeProcess
ExpandEnvironmentStringsW
SetFilePointer
SetEndOfFile
UnmapViewOfFile
FlushViewOfFile
GetSystemInfo
CreateFileMappingA
GetFileSize
Sleep
GetTimeZoneInformation
GetCurrentThread
GetThreadTimes
GetLocaleInfoA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetModuleHandleExW
SetConsoleCtrlHandler
SetStdHandle
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateThread
ExitThread
FreeLibraryAndExitThread
SetFilePointerEx
FlushFileBuffers
HeapCompact
LockFileEx
UnlockFileEx
GetFileSizeEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetConsoleMode
ReadConsoleInputW
PeekConsoleInputA
FindFirstFileExW
GetCommandLineA
GetCommandLineW
HeapSize
ReleaseSemaphore
EnterCriticalSection
OutputDebugStringW
WideCharToMultiByte
MultiByteToWideChar
GetACP
GetFullPathNameW
LocalFree
GetLastError
FormatMessageW
InitializeCriticalSection
WaitForMultipleObjects
QueryPerformanceCounter
RtlUnwind

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

api-ms-win-core-path-l1-1-0

PathCchCanonicalizeEx
PathCchCombineEx

ws2_32

getsockopt
send
WSAGetLastError

advapi32

RegCreateKeyW
RegDeleteValueW
RegCloseKey
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueW
RegFlushKey
RegCreateKeyExW
RegSaveKeyW
RegEnumKeyExW
RegSetValueExW
RegLoadKeyW
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
RegSetValueW
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
GetUserNameW
RegConnectRegistryW

Exports

Exports

PyAST_CompileEx
PyAST_CompileObject
PyAST_FromNode
PyAST_FromNodeObject
PyAST_Validate
PyArena_AddPyObject
PyArena_Free
PyArena_Malloc
PyArena_New
PyArg_Parse
PyArg_ParseTuple
PyArg_ParseTupleAndKeywords
PyArg_UnpackTuple
PyArg_VaParse
PyArg_VaParseTupleAndKeywords
PyArg_ValidateKeywordArguments
PyAsyncGen_New
PyAsyncGen_Type
PyBaseObject_Type
PyBool_FromLong
PyBool_Type
PyBuffer_FillContiguousStrides
PyBuffer_FillInfo
PyBuffer_FromContiguous
PyBuffer_GetPointer
PyBuffer_IsContiguous
PyBuffer_Release
PyBuffer_SizeFromFormat
PyBuffer_ToContiguous
PyByteArrayIter_Type
PyByteArray_AsString
PyByteArray_Concat
PyByteArray_FromObject
PyByteArray_FromStringAndSize
PyByteArray_Resize
PyByteArray_Size
PyByteArray_Type
PyBytesIter_Type
PyBytes_AsString
PyBytes_AsStringAndSize
PyBytes_Concat
PyBytes_ConcatAndDel
PyBytes_DecodeEscape
PyBytes_FromFormat
PyBytes_FromFormatV
PyBytes_FromObject
PyBytes_FromString
PyBytes_FromStringAndSize
PyBytes_Repr
PyBytes_Size
PyBytes_Type
PyCFunction_Call
PyCFunction_GetFlags
PyCFunction_GetFunction
PyCFunction_GetSelf
PyCFunction_NewEx
PyCFunction_Type
PyCMethod_New
PyCMethod_Type
PyCallIter_New
PyCallIter_Type
PyCallable_Check
PyCapsule_GetContext
PyCapsule_GetDestructor
PyCapsule_GetName
PyCapsule_GetPointer
PyCapsule_Import
PyCapsule_IsValid
PyCapsule_New
PyCapsule_SetContext
PyCapsule_SetDestructor
PyCapsule_SetName
PyCapsule_SetPointer
PyCapsule_Type
PyCell_Get
PyCell_New
PyCell_Set
PyCell_Type
PyClassMethodDescr_Type
PyClassMethod_New
PyClassMethod_Type
PyCode_Addr2Line
PyCode_New
PyCode_NewEmpty
PyCode_NewWithPosOnlyArgs
PyCode_Optimize
PyCode_Type
PyCodec_BackslashReplaceErrors
PyCodec_Decode
PyCodec_Decoder
PyCodec_Encode
PyCodec_Encoder
PyCodec_IgnoreErrors
PyCodec_IncrementalDecoder
PyCodec_IncrementalEncoder
PyCodec_KnownEncoding
PyCodec_LookupError
PyCodec_NameReplaceErrors
PyCodec_Register
PyCodec_RegisterError
PyCodec_ReplaceErrors
PyCodec_StreamReader
PyCodec_StreamWriter
PyCodec_StrictErrors
PyCodec_XMLCharRefReplaceErrors
PyCompile_OpcodeStackEffect
PyCompile_OpcodeStackEffectWithJump
PyComplex_AsCComplex
PyComplex_FromCComplex
PyComplex_FromDoubles
PyComplex_ImagAsDouble
PyComplex_RealAsDouble
PyComplex_Type
PyConfig_Clear
PyConfig_InitIsolatedConfig
PyConfig_InitPythonConfig
PyConfig_Read
PyConfig_SetArgv
PyConfig_SetBytesArgv
PyConfig_SetBytesString
PyConfig_SetString
PyConfig_SetWideStringList
PyContextToken_Type
PyContextVar_Get
PyContextVar_New
PyContextVar_Reset
PyContextVar_Set
PyContextVar_Type
PyContext_Copy
PyContext_CopyCurrent
PyContext_Enter
PyContext_Exit
PyContext_New
PyContext_Type
PyCoro_New
PyCoro_Type
PyDescr_NewClassMethod
PyDescr_NewGetSet
PyDescr_NewMember
PyDescr_NewMethod
PyDescr_NewWrapper
PyDictItems_Type
PyDictIterItem_Type
PyDictIterKey_Type
PyDictIterValue_Type
PyDictKeys_Type
PyDictProxy_New
PyDictProxy_Type
PyDictRevIterItem_Type
PyDictRevIterKey_Type
PyDictRevIterValue_Type
PyDictValues_Type
PyDict_Clear
PyDict_Contains
PyDict_Copy
PyDict_DelItem
PyDict_DelItemString
PyDict_GetItem
PyDict_GetItemString
PyDict_GetItemWithError
PyDict_Items
PyDict_Keys
PyDict_Merge
PyDict_MergeFromSeq2
PyDict_New
PyDict_Next
PyDict_SetDefault
PyDict_SetItem
PyDict_SetItemString
PyDict_Size
PyDict_Type
PyDict_Update
PyDict_Values
PyEllipsis_Type
PyEnum_Type
PyErr_BadArgument
PyErr_BadInternalCall
PyErr_CheckSignals
PyErr_Clear
PyErr_Display
PyErr_ExceptionMatches
PyErr_Fetch
PyErr_Format
PyErr_FormatV
PyErr_GetExcInfo
PyErr_GivenExceptionMatches
PyErr_NewException
PyErr_NewExceptionWithDoc
PyErr_NoMemory
PyErr_NormalizeException
PyErr_Occurred
PyErr_Print
PyErr_PrintEx
PyErr_ProgramText
PyErr_ProgramTextObject
PyErr_ResourceWarning
PyErr_Restore
PyErr_SetExcFromWindowsErr
PyErr_SetExcFromWindowsErrWithFilename
PyErr_SetExcFromWindowsErrWithFilenameObject
PyErr_SetExcFromWindowsErrWithFilenameObjects
PyErr_SetExcFromWindowsErrWithUnicodeFilename
PyErr_SetExcInfo
PyErr_SetFromErrno
PyErr_SetFromErrnoWithFilename
PyErr_SetFromErrnoWithFilenameObject
PyErr_SetFromErrnoWithFilenameObjects
PyErr_SetFromErrnoWithUnicodeFilename
PyErr_SetFromWindowsErr
PyErr_SetFromWindowsErrWithFilename
PyErr_SetFromWindowsErrWithUnicodeFilename
PyErr_SetImportError
PyErr_SetImportErrorSubclass
PyErr_SetInterrupt
PyErr_SetNone
PyErr_SetObject
PyErr_SetString
PyErr_SyntaxLocation
PyErr_SyntaxLocationEx
PyErr_SyntaxLocationObject
PyErr_WarnEx
PyErr_WarnExplicit
PyErr_WarnExplicitFormat
PyErr_WarnExplicitObject
PyErr_WarnFormat
PyErr_WriteUnraisable
PyEval_AcquireLock
PyEval_AcquireThread
PyEval_CallFunction
PyEval_CallMethod
PyEval_CallObjectWithKeywords
PyEval_EvalCode
PyEval_EvalCodeEx
PyEval_EvalFrame
PyEval_EvalFrameEx
PyEval_GetBuiltins
PyEval_GetFrame
PyEval_GetFuncDesc
PyEval_GetFuncName
PyEval_GetGlobals
PyEval_GetLocals
PyEval_InitThreads
PyEval_MergeCompilerFlags
PyEval_ReleaseLock
PyEval_ReleaseThread
PyEval_RestoreThread
PyEval_SaveThread
PyEval_SetProfile
PyEval_SetTrace
PyEval_ThreadsInitialized
PyExc_ArithmeticError
PyExc_AssertionError
PyExc_AttributeError
PyExc_BaseException
PyExc_BlockingIOError
PyExc_BrokenPipeError
PyExc_BufferError
PyExc_BytesWarning
PyExc_ChildProcessError
PyExc_ConnectionAbortedError
PyExc_ConnectionError
PyExc_ConnectionRefusedError
PyExc_ConnectionResetError
PyExc_DeprecationWarning
PyExc_EOFError
PyExc_EnvironmentError
PyExc_Exception
PyExc_FileExistsError
PyExc_FileNotFoundError
PyExc_FloatingPointError
PyExc_FutureWarning
PyExc_GeneratorExit
PyExc_IOError
PyExc_ImportError
PyExc_ImportWarning
PyExc_IndentationError
PyExc_IndexError
PyExc_InterruptedError
PyExc_IsADirectoryError
PyExc_KeyError
PyExc_KeyboardInterrupt
PyExc_LookupError
PyExc_MemoryError
PyExc_ModuleNotFoundError
PyExc_NameError
PyExc_NotADirectoryError
PyExc_NotImplementedError
PyExc_OSError
PyExc_OverflowError
PyExc_PendingDeprecationWarning
PyExc_PermissionError
PyExc_ProcessLookupError
PyExc_RecursionError
PyExc_ReferenceError
PyExc_ResourceWarning
PyExc_RuntimeError
PyExc_RuntimeWarning
PyExc_StopAsyncIteration
PyExc_StopIteration
PyExc_SyntaxError
PyExc_SyntaxWarning
PyExc_SystemError
PyExc_SystemExit
PyExc_TabError
PyExc_TimeoutError
PyExc_TypeError
PyExc_UnboundLocalError
PyExc_UnicodeDecodeError
PyExc_UnicodeEncodeError
PyExc_UnicodeError
PyExc_UnicodeTranslateError
PyExc_UnicodeWarning
PyExc_UserWarning
PyExc_ValueError
PyExc_Warning
PyExc_WindowsError
PyExc_ZeroDivisionError
PyExceptionClass_Name
PyException_GetCause
PyException_GetContext
PyException_GetTraceback
PyException_SetCause
PyException_SetContext
PyException_SetTraceback
PyFile_FromFd
PyFile_GetLine
PyFile_NewStdPrinter
PyFile_OpenCode
PyFile_OpenCodeObject
PyFile_SetOpenCodeHook
PyFile_WriteObject
PyFile_WriteString
PyFilter_Type
PyFloat_AsDouble
PyFloat_FromDouble
PyFloat_FromString
PyFloat_GetInfo
PyFloat_GetMax
PyFloat_GetMin
PyFloat_Type
PyFrame_BlockPop
PyFrame_BlockSetup
PyFrame_FastToLocals
PyFrame_FastToLocalsWithError
PyFrame_GetBack
PyFrame_GetCode
PyFrame_GetLineNumber
PyFrame_LocalsToFast
PyFrame_New
PyFrame_Type
PyFrozenSet_New
PyFrozenSet_Type
PyFunction_GetAnnotations
PyFunction_GetClosure
PyFunction_GetCode
PyFunction_GetDefaults
PyFunction_GetGlobals
PyFunction_GetKwDefaults
PyFunction_GetModule
PyFunction_New
PyFunction_NewWithQualName
PyFunction_SetAnnotations
PyFunction_SetClosure
PyFunction_SetDefaults
PyFunction_SetKwDefaults
PyFunction_Type
PyFuture_FromAST
PyFuture_FromASTObject
PyGC_Collect
PyGILState_Check
PyGILState_Ensure
PyGILState_GetThisThreadState
PyGILState_Release
PyGen_New
PyGen_NewWithQualName
PyGen_Type
PyGetSetDescr_Type
PyHash_GetFuncDef
PyImport_AddModule
PyImport_AddModuleObject
PyImport_AppendInittab
PyImport_ExecCodeModule
PyImport_ExecCodeModuleEx
PyImport_ExecCodeModuleObject
PyImport_ExecCodeModuleWithPathnames
PyImport_ExtendInittab
PyImport_FrozenModules
PyImport_GetImporter
PyImport_GetMagicNumber
PyImport_GetMagicTag
PyImport_GetModule
PyImport_GetModuleDict
PyImport_Import
PyImport_ImportFrozenModule
PyImport_ImportFrozenModuleObject
PyImport_ImportModule
PyImport_ImportModuleLevel
PyImport_ImportModuleLevelObject
PyImport_ImportModuleNoBlock
PyImport_Inittab
PyImport_ReloadModule
PyIndex_Check
PyInit__abc
PyInit__ast
PyInit__bisect
PyInit__blake2
PyInit__codecs
PyInit__codecs_cn
PyInit__codecs_hk
PyInit__codecs_iso2022
PyInit__codecs_jp
PyInit__codecs_kr
PyInit__codecs_tw
PyInit__collections
PyInit__contextvars
PyInit__csv
PyInit__datetime
PyInit__functools
PyInit__heapq
PyInit__imp
PyInit__io
PyInit__json
PyInit__locale
PyInit__lsprof
PyInit__md5
PyInit__multibytecodec
PyInit__opcode
PyInit__operator
PyInit__peg_parser
PyInit__pickle
PyInit__random
PyInit__sha1
PyInit__sha256
PyInit__sha3
PyInit__sha512
PyInit__signal
PyInit__sre
PyInit__stat
PyInit__statistics
PyInit__string
PyInit__struct
PyInit__symtable
PyInit__thread
PyInit__tracemalloc
PyInit__weakref
PyInit__winapi
PyInit__xxsubinterpreters
PyInit_array
PyInit_atexit
PyInit_audioop
PyInit_binascii
PyInit_cmath
PyInit_errno
PyInit_faulthandler
PyInit_gc
PyInit_itertools
PyInit_math
PyInit_mmap
PyInit_msvcrt
PyInit_nt
PyInit_parser
PyInit_time
PyInit_winreg
PyInit_xxsubtype
PyInstanceMethod_Function
PyInstanceMethod_New
PyInstanceMethod_Type
PyInterpreterState_Clear
PyInterpreterState_Delete
PyInterpreterState_Get
PyInterpreterState_GetDict
PyInterpreterState_GetID
PyInterpreterState_Head
PyInterpreterState_Main
PyInterpreterState_New
PyInterpreterState_Next
PyInterpreterState_ThreadHead
PyIter_Check
PyIter_Next
PyListIter_Type
PyListRevIter_Type
PyList_Append
PyList_AsTuple
PyList_GetItem
PyList_GetSlice
PyList_Insert
PyList_New
PyList_Reverse
PyList_SetItem
PyList_SetSlice
PyList_Size
PyList_Sort
PyList_Type
PyLongRangeIter_Type
PyLong_AsDouble
PyLong_AsLong
PyLong_AsLongAndOverflow
PyLong_AsLongLong
PyLong_AsLongLongAndOverflow
PyLong_AsSize_t

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 264KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data/QuickFontCache.dll
.dll windows x86

8b6e8d3605b351720eef284b76a26471

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:62:1c:12:e9:b8:dd:ba:e4:04:49:f1:5c:53:2c:5e:94:7c:95:f5:49:83:33:78:7a:8d:bf:92:d8:31:63:7a
Signer

Actual PE Digest

6a:62:1c:12:e9:b8:dd:ba:e4:04:49:f1:5c:53:2c:5e:94:7c:95:f5:49:83:33:78:7a:8d:bf:92:d8:31:63:7a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

winmm

timeEndPeriod
timeBeginPeriod
timeGetDevCaps

kernel32

GetACP
LocalFree
CloseHandle
VirtualProtect
TlsAlloc
CreateSemaphoreW
QueryPerformanceFrequency
IsDebuggerPresent
VirtualFree
GetFullPathNameW
ExitProcess
HeapAlloc
CreateTimerQueueTimer
GetCPInfoExW
RtlUnwind
GetCPInfo
InterlockedFlushSList
GetStdHandle
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
ReadFile
GetLastError
GetModuleFileNameW
SetLastError
CreateThread
CompareStringW
LoadLibraryA
ResetEvent
MulDiv
GetVersion
RaiseException
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
LoadLibraryExW
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
SetFilePointer
InitializeSListHead
SuspendThread
GetTickCount
GetStartupInfoW
GetFileAttributesW
InitializeCriticalSection
GetThreadPriority
SetThreadPriority
GetCurrentProcess
VirtualAlloc
GetSystemInfo
GetCommandLineW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
ReleaseSemaphore
DeleteTimerQueueTimer
GetLocaleInfoW
CreateFileW
GetLocalTime
WaitForSingleObject
InterlockedPopEntrySList
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
SetErrorMode
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
InterlockedPushEntrySList
CreateEventW
SetThreadLocale
GetThreadLocale

shell32

SHGetFolderPathW

ole32

CoInitialize
CoUninitialize

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

user32

CreateWindowExW
EnumDisplaySettingsW
DrawTextExW
CharLowerBuffW
PeekMessageW
GetSystemMetrics
PostMessageW
MessageBoxW
GetSysColor
CharUpperBuffW
PostQuitMessage
MsgWaitForMultipleObjects
FrameRect
FillRect
UnregisterClassW
GetClassInfoW
CharUpperW
SystemParametersInfoW
LoadIconW
DefWindowProcW
DrawFocusRect
DestroyWindow
RegisterClassW
CharNextW
GetDC
LoadStringW
ReleaseDC

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

netapi32

NetWkstaGetInfo
NetApiBufferFree

advapi32

RegFlushKey
RegQueryValueExW
RegCloseKey
RegOpenKeyExW

gdi32

Arc
Pie
SetBkMode
SelectPalette
CreateCompatibleBitmap
MaskBlt
AngleArc
Chord
SetTextColor
StretchBlt
RealizePalette
SetDIBColorTable
GetDIBColorTable
RoundRect
GetTextMetricsW
GetWindowOrgEx
CreatePalette
CreateBrushIndirect
PatBlt
PolyBezierTo
GetStockObject
Polygon
MoveToEx
Rectangle
DeleteDC
BitBlt
Ellipse
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
Polyline
GetSystemPaletteEntries
CreateBitmap
CreateDIBitmap
GetStretchBltMode
CreateDIBSection
SetStretchBltMode
GetDIBits
CreatePenIndirect
CreateFontIndirectW
LineTo
PolyBezier
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
SetBkColor
CreateCompatibleDC
GetObjectW
GetBrushOrgEx
GetCurrentPositionEx
SetROP2
ExtTextOutW
SetBrushOrgEx
GetPixel
ArcTo
SetPixel
GetPaletteEntries

Exports

Exports

AcquireSharedAnimTimer
AcquireSharedThreadBank
CreateVST3Instance
FontCache_AcquireFont
FontCache_CleanUp
FontCache_GetStats
LoadSharedElastiqueDll
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 31KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/QuickFontCache_x64.dll
.dll windows x64

973970ed8141db341ff1defa957e86bd

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ae:d2:44:99:e3:ed:4e:df:01:59:99:a9:93:dc:b2:ea:e1:6c:8e:a0:08:97:70:49:d5:1b:20:19:09:cb:0b:24
Signer

Actual PE Digest

ae:d2:44:99:e3:ed:4e:df:01:59:99:a9:93:dc:b2:ea:e1:6c:8e:a0:08:97:70:49:d5:1b:20:19:09:cb:0b:24

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

winmm

timeEndPeriod
timeBeginPeriod
timeGetDevCaps

kernel32

RtlUnwindEx
GetACP
CloseHandle
LocalFree
VirtualProtect
TlsAlloc
CreateSemaphoreW
QueryPerformanceFrequency
IsDebuggerPresent
VirtualFree
GetFullPathNameW
ExitProcess
HeapAlloc
CreateTimerQueueTimer
GetCPInfoExW
RtlUnwind
GetCPInfo
InterlockedFlushSList
GetStdHandle
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
ReadFile
GetLastError
GetModuleFileNameW
SetLastError
CreateThread
CompareStringW
LoadLibraryA
ResetEvent
MulDiv
GetVersion
RaiseException
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
LoadLibraryExW
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
SetFilePointer
InitializeSListHead
SuspendThread
GetTickCount
GetStartupInfoW
GetFileAttributesW
InitializeCriticalSection
GetThreadPriority
SetThreadPriority
GetCurrentProcess
VirtualAlloc
GetSystemInfo
GetCommandLineW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
ReleaseSemaphore
DeleteTimerQueueTimer
GetLocaleInfoW
CreateFileW
GetLocalTime
WaitForSingleObject
InterlockedPopEntrySList
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
SetErrorMode
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
InterlockedPushEntrySList
CreateEventW
SetThreadLocale
GetThreadLocale

shell32

SHGetFolderPathW

ole32

CoInitialize
CoUninitialize

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

user32

CreateWindowExW
EnumDisplaySettingsW
DrawTextExW
CharLowerBuffW
PeekMessageW
GetSystemMetrics
PostMessageW
MessageBoxW
GetSysColor
CharUpperBuffW
PostQuitMessage
MsgWaitForMultipleObjects
FrameRect
FillRect
UnregisterClassW
GetClassInfoW
CharUpperW
SystemParametersInfoW
LoadIconW
DefWindowProcW
DrawFocusRect
DestroyWindow
RegisterClassW
CharNextW
GetDC
LoadStringW
ReleaseDC

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

netapi32

NetWkstaGetInfo
NetApiBufferFree

advapi32

RegFlushKey
RegQueryValueExW
RegCloseKey
RegOpenKeyExW

gdi32

Arc
Pie
SetBkMode
SelectPalette
CreateCompatibleBitmap
MaskBlt
AngleArc
Chord
SetTextColor
StretchBlt
RealizePalette
SetDIBColorTable
GetDIBColorTable
RoundRect
GetTextMetricsW
GetWindowOrgEx
CreatePalette
CreateBrushIndirect
PatBlt
PolyBezierTo
GetStockObject
Polygon
MoveToEx
Rectangle
DeleteDC
BitBlt
Ellipse
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
Polyline
GetSystemPaletteEntries
CreateBitmap
CreateDIBitmap
GetStretchBltMode
CreateDIBSection
SetStretchBltMode
GetDIBits
CreatePenIndirect
CreateFontIndirectW
LineTo
PolyBezier
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
SetBkColor
CreateCompatibleDC
GetObjectW
GetBrushOrgEx
GetCurrentPositionEx
SetROP2
ExtTextOutW
SetBrushOrgEx
GetPixel
ArcTo
SetPixel
GetPaletteEntries

Exports

Exports

AcquireSharedAnimTimer
AcquireSharedThreadBank
CreateVST3Instance
FontCache_AcquireFont
FontCache_CleanUp
FontCache_GetStats
LoadSharedElastiqueDll
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 57KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Razer Chroma_x64.dll
.dll windows x64

cc85023d0cb3c523ea4df6a3f1d8fd50

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b9:43:c6:27:1c:ed:9b:67:cf:c3:d8:0e:ea:b7:86:5a:d3:94:94:52:ca:17:fa:fa:1b:52:c2:5c:81:5a:76:7c
Signer

Actual PE Digest

b9:43:c6:27:1c:ed:9b:67:cf:c3:d8:0e:ea:b7:86:5a:d3:94:94:52:ca:17:fa:fa:1b:52:c2:5c:81:5a:76:7c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

comdlg32

GetSaveFileNameW
GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
SHGetMalloc
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage
ShellExecuteA
ShellExecuteW

user32

SetMenuItemInfoW
GetMenuItemInfoW
SetCaretPos
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
DestroyCaret
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetDCEx
PeekMessageW
MonitorFromWindow
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
CreateCaret
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
GetDlgItem
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CountClipboardFormats
CallWindowProcW
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

advapi32

RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

msvcrt

memcpy
memset

kernel32

GetFileType
SetFileTime
RtlUnwindEx
DeleteAtom
GetACP
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
ExitProcess
HeapAlloc
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
RtlUnwind
GetCPInfo
GetStdHandle
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
IsDBCSLeadByteEx
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

StgCreateDocfileOnILockBytes
CoCreateInstance
CoUninitialize
ReleaseStgMedium
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

msacm32

acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
GetBitmapBits
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
TextOutW
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 65KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Tools/00urcFIXhhoa
data/Tools/0D8COqtdKYLa
data/Tools/0Dvm8XiuwP4N
data/Tools/0H3qEEbaEcwV
data/Tools/0KgJBteqM9W4
data/Tools/0MfvEKofLa2N
data/Tools/0Pu9ysieTVvr
data/Tools/0RtS3GiDCxcc
data/Tools/0S4cX50pKP7y
data/Tools/0V728Fo1dZuq
data/Tools/0anudazZd4eR
data/Tools/0iKTvA8rwCOo
data/Tools/0nNByLpscru8
data/Tools/0tK8eNTDvxSo
data/Tools/0yomUDBrMflf
data/Tools/157EdUdYqjb7
data/Tools/1CxTxFFIIqTs
data/Tools/1FIVnfxlAatb
data/Tools/1FfxQ86ah749
data/Tools/1I1owa2xOfzO
data/Tools/1KWIXq6dsj8v
data/Tools/1MimdDAhZFBJ
data/Tools/1NMfWSYRqvBy
data/Tools/1RDNlMQXHyzq
data/Tools/1ap92RJ7LmqT
data/Tools/1azK15thxOtn
data/Tools/1e3Jyc1DSCL5
data/Tools/1zknsyEZNq1x
data/Tools/24gIOmcJvZkY
data/Tools/27oLQW6zQQWh
data/Tools/2FIxESmhIVwv
data/Tools/2YPh2uFG7mrN
data/Tools/2ZUztoBd5iEf
data/Tools/2cuan9N4UTDv
data/Tools/2gn4IGAoMlgz
data/Tools/2h58EFuP8NdI
data/Tools/2qR7g2L1ixnJ
data/Tools/2xcTZJA3as9h
data/Tools/31C0FJ79sQOE
data/Tools/33iJbNF5Ge8v
data/Tools/353zol0JhIkO
data/Tools/38buiC3alUJz
data/Tools/3DX3mIpj1g43
data/Tools/3G6hCnqpzcFF
data/Tools/3MsSdFnMatqu
data/Tools/3RlGW7y4SWxV
data/Tools/3VJslcc3Vlkk
data/Tools/3VRbhver0V5U
data/Tools/3XMAJb1gavhM
data/Tools/3jV2v9bxpDVc
data/Tools/3oO72UK931C8
data/Tools/3t3PY8oXw3Ui
data/Tools/3tGcVCyMEtkl
data/Tools/3uBvoOBPJdKk
data/Tools/3vbc3lme0wSu
data/Tools/3xu71GAUM4om
data/Tools/3z71v8ZCdmfk
data/Tools/4AK90roRxDF3
data/Tools/4HErWqjBOrGY
data/Tools/4KGwKQT4m0fg
data/Tools/4Ng4OXc4a7dM
data/Tools/4TF2nKXrL8IW
data/Tools/4W7sXlH6dVGd
data/Tools/4Z33ac2LXbvh
data/Tools/4loIFjSwMz5n
data/Tools/4nWuD2Awsh1G
data/Tools/4ui01dIzFtUT
data/Tools/50WIdolMbOt0
data/Tools/55b5a0wNUtX8
data/Tools/56prRFdKPaUf
data/Tools/57OJBFS4jtaF
data/Tools/59ewuiAJAf8N
data/Tools/5H0tAFi0A9IH
data/Tools/5HOornzvuux7
data/Tools/5HwFZZ4EYPt8
data/Tools/5IhG6E1ECsex
data/Tools/5NYTOW5Ofnpy
data/Tools/5RlZvbglumok
data/Tools/5ZcLWXeFUxkK
data/Tools/5dIrFXLmDuft
data/Tools/5eN8kCCqz9LD
data/Tools/5nUPpbu3iBG8
data/Tools/5qNZlgpHnAHw
data/Tools/5rDwvnM40AZH
data/Tools/5x1PLFXTKFOV
data/Tools/65w8FKdCmpvt
data/Tools/68Vn3nwR3uR8
data/Tools/6GaR99x98uAd
data/Tools/6HzNW43EhluY
data/Tools/6JjkIIoIktRF
data/Tools/6PdlzzhOsotV
data/Tools/6PzHh9ZQVT2z
data/Tools/6RTak62Axsl8
data/Tools/6ZlyU9tSyZpH
data/Tools/6Zx4kZg6Yqo0
data/Tools/6bRl3b6wPTvK
data/Tools/6bf3Du2nGV9m
data/Tools/6dWNdRbDR03R
data/Tools/6dviaAKH06CD
data/Tools/6gwWpQMFVgDb
data/Tools/6hIGDfyxJ7kO
data/Tools/6r82aa7vWhE7
data/Tools/6vM98w0rN8Mh
data/Tools/6zxEk8jFRBLt
data/Tools/77hdpSKwMLwd
data/Tools/78JyNVbPwslp
data/Tools/7CEu5kHJyMVp
data/Tools/7FelqWShv9ZU
data/Tools/7JBhTy1TME1A
data/Tools/7Js7bcokAwUm
data/Tools/7M1rI6L1ke5Z
data/Tools/7WJygBknsR4u
data/Tools/7ZU8ySAu4LHu
data/Tools/7hqRFMBJv2Wl
data/Tools/7i902pVHrFTD
data/Tools/7jxfAzjwq5sA
data/Tools/7o57Y9JeaBbb
data/Tools/7wl3XmHt03b4
data/Tools/824cGupIMHTs
data/Tools/82HqRA0OnnuT
data/Tools/86cca4OudYQD
data/Tools/8AkwNi2ADhfc
data/Tools/8BET3c8XS0PG
data/Tools/8EyUTDiCLR5d
data/Tools/8Fgc0eXlJ4SW
data/Tools/8Q4gOCmsq1nJ
data/Tools/8SxGphsrVr5A
data/Tools/8VNSb8zWHrKA
data/Tools/8ZjGppAFkNyO
data/Tools/8fa6aJEmWeIs
data/Tools/8jitOvVeknx1
data/Tools/8wdps7n6wNPs
data/Tools/8zaxmApZjVNO
data/Tools/90jY9FSBYSuJ
data/Tools/94vBoi1nBAFb
data/Tools/97Sgjt7wbvxY
data/Tools/9CUEfIIcpydE
data/Tools/9D3bw0kYEaky
data/Tools/9DAHoq6Kgp8i
data/Tools/9EVKz9yLsIYY
data/Tools/9FM6oMCmHjHB
data/Tools/9JF301PH9aRN
data/Tools/9LcAMZFDRyJ4
data/Tools/9TzqjLG1dzXf
data/Tools/9Xa1g3r9iEKn
data/Tools/9bfUW2oMtGuY
data/Tools/9c8ST6ubvNTU
data/Tools/9guU3oiYFm20
data/Tools/9kMDB95UIwM1
data/Tools/9uXnaGWIdBwT
data/Tools/9xSEGm30ONQo
data/Tools/9xcDeasPm0xJ
data/Tools/9y4EztxzCHiO
data/Tools/A2tiBseNL5lP
data/Tools/A4qhHkVqdIh3
data/Tools/AFsjTPgrpehV
data/Tools/AJXFTEr92L4m
data/Tools/AMKYKxaOWw8p
data/Tools/ARd0rbbj820t
data/Tools/AVMSMIIrfL2N
data/Tools/AVo7WWd1ps1f
data/Tools/AekTYai1Sswj
data/Tools/Ag0tMVv9l4TL
data/Tools/Am7GPES2BzdY
data/Tools/ApIKLrSkJa3t
.ps1
data/Tools/AtAYMbXa9Eyp
data/Tools/Av3OQ9jAWLsh
data/Tools/Aw4D8S5OMwzk
data/Tools/B1dgjU69mM0X
data/Tools/B1ySu3jV5hAt
data/Tools/B7wOfcJRrgd6
data/Tools/BDtLoovsQD19
data/Tools/BF6ZSQh0bkas
data/Tools/BRJmu1k8Ecwz
data/Tools/BSmNuQsNJdr7
data/Tools/BX0CD2lrzWcS
data/Tools/BaodzRlj0LLY
data/Tools/Bi5f7lQ3ScFA
data/Tools/Blfm5zXCi4Hd
data/Tools/BpYt046WWrw9
data/Tools/BtdF1LWGHiuM
data/Tools/Bwy3bBh8gvzM
data/Tools/BxnNXNbKTqMx
data/Tools/C02QJmzSwoXD
data/Tools/CFVyc9FBeyQY
data/Tools/CG74pb368YJJ
data/Tools/CGxygcRl9hKs
data/Tools/CH3JrxnkEFoz
data/Tools/COKhrj50B9Y9
data/Tools/CV9FxpMc5SIX
data/Tools/CW6zgbV3ARhA
data/Tools/CYUhU8yWPpuK
data/Tools/CcHck7rO5A0d
data/Tools/CdsFiOkjt14x
data/Tools/ChslG3FwSHhf
data/Tools/Cn6Y2grIh0Lu
data/Tools/CnbDznzaBylU
data/Tools/CvZ8LxrVz8OX
data/Tools/CvjBvOvEzwha
data/Tools/Cwd6mJZlGHxK
data/Tools/CyuZZeqp0U1i
data/Tools/D4YmwRq5NEmD
data/Tools/DBmGFlOpeGeq
data/Tools/DLQq1OIy1xr7
data/Tools/DPzwQplxsWok
data/Tools/DU5lmvmcmX4a
data/Tools/DVsGQnkRuQVV
data/Tools/DgmBUIoRdN5L
data/Tools/DjMlXZgwX8Wt
data/Tools/DunczvPFt2aT
data/Tools/Dx8N6Ysl3IZ4
data/Tools/E2ZEGOhGDUyE
data/Tools/E575YvygDc54
data/Tools/E5n3uGeCxgMh
data/Tools/ECQmbaeAfjr0
data/Tools/EOn6iHtgMrU2
data/Tools/EQRRNh02O07s
data/Tools/ES0YXBMIpA5i
data/Tools/EVqyW7j6f2up
data/Tools/EYXdbKHdwFBF
data/Tools/Ee31yI8PGBtu
data/Tools/EhweLnC8lbqR
data/Tools/EjAQHcAxbCRI
data/Tools/Ek66mN9rvVkF
data/Tools/Epm9KZPlNIuC
data/Tools/ErOeNH2IS6yg
data/Tools/EsgdgZzJgUIJ
data/Tools/EsyLBOwfoYdx
data/Tools/EtoUyKfkFCha
data/Tools/EwZzpLkjNvRs
data/Tools/F1bBCBKuCKBW
data/Tools/F4sR5u97TC6s
data/Tools/F7JM7TOceZIq
data/Tools/F7bdgCSh1pWo
data/Tools/FByEQ8pcH4UI
data/Tools/FHtS7N9teVIX
data/Tools/FIPehKFM43DW
data/Tools/FLCoQv6s5fSX
data/Tools/FLMManaged.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:ea:cf:75:21:12:82:75:1f:de:b5:5b:da:22:99:9c:29:b7:bd:fc:8e:03:b3:d5:74:78:53:bc:71:97:32:7f
Signer

Actual PE Digest

49:ea:cf:75:21:12:82:75:1f:de:b5:5b:da:22:99:9c:29:b7:bd:fc:8e:03:b3:d5:74:78:53:bc:71:97:32:7f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data/Tools/FMr4kLSjOhMq
data/Tools/FPE3Xbtrn8ad
data/Tools/FTY6R5fXmbc8
data/Tools/FWXoS7CpOYvg
data/Tools/FXzZ4GlEsvgl
data/Tools/FgIcJXmsSqkY
data/Tools/FrY0KB1kTYxb
data/Tools/FrpeSxvmumvD
data/Tools/Fruity Convolver_x64.dll
.dll windows x64

7ea6317aa0b4435cabcf923878cdff9c

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:dc:92:e9:fd:c5:88:c9:19:d0:33:76:f9:b7:4a:d7:fc:13:27:48:66:89:21:27:eb:c7:f8:39:98:8f:88:59
Signer

Actual PE Digest

62:dc:92:e9:fd:c5:88:c9:19:d0:33:76:f9:b7:4a:d7:fc:13:27:48:66:89:21:27:eb:c7:f8:39:98:8f:88:59

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW
GetDefaultPrinterW
EnumPrintersW

comdlg32

GetSaveFileNameW
GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
SHGetSpecialFolderLocation
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
PathCleanupSpec
SHGetMalloc
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage
ShellExecuteA
ShellExecuteW

user32

SetMenuItemInfoW
GetMenuItemInfoW
SetCaretPos
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
DestroyCaret
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
SetForegroundWindow
GetWindowTextW
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
AttachThreadInput
GetSubMenu
DestroyIcon
IsWindowVisible
PtInRect
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetClassNameW
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetMessageW
GetDCEx
PeekMessageW
MonitorFromWindow
GetUpdateRect
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
InflateRect
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
UnionRect
GetCursorInfo
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
ClientToScreen
SetClipboardData
GetClipboardData
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
CreateCaret
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
GetAncestor
GetDlgItem
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CallWindowProcW
CountClipboardFormats
CloseClipboard
DestroyCursor
CharUpperBuffA
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
ToUnicode
PostThreadMessageW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SafeArrayPutElement
GetErrorInfo
VariantInit
VariantClear
SysFreeString
SafeArrayAccessData
SysReAllocStringLen
SafeArrayCreate
SafeArrayGetElement
GetActiveObject
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopyInd
VariantChangeType

msvcrt

memcpy
memset

advapi32

RegSetValueExW
RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

imagehlp

ImageDirectoryEntryToData
ImageNtHeader

kernel32

SetFileAttributesW
GetFileType
SetFileTime
RtlUnwindEx
QueryDosDeviceW
DeleteAtom
GetACP
GetExitCodeProcess
IsBadWritePtr
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
OpenFileMappingW
QueryPerformanceFrequency
FindNextFileW
FlushInstructionCache
GetFullPathNameW
VirtualFree
HeapAlloc
ExitProcess
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
FindAtomW
RtlUnwind
GetCPInfo
EnumSystemLocalesW
GetStdHandle
GetTimeZoneInformation
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
GetModuleHandleW
FreeLibrary
TryEnterCriticalSection
HeapDestroy
SetDllDirectoryW
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
CreateProcessW
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
AddVectoredExceptionHandler
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
MoveFileW
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
GetFileAttributesExW
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
AddAtomW
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
DuplicateHandle
LeaveCriticalSection
GetProcAddress
ResumeThread
GetLogicalDriveStringsW
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
CompareStringA
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
IsDBCSLeadByteEx
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
AssignProcessToJobObject
GetComputerNameW
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

CoMarshalInterThreadInterfaceInStream
RevokeDragDrop
StgCreateDocfileOnILockBytes
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoUninitialize
OleGetClipboard
ReleaseStgMedium
OleSetClipboard
RegisterDragDrop
IsEqualGUID
CreateStreamOnHGlobal
OleFlushClipboard
OleInitialize
CreateILockBytesOnHGlobal
OleIsCurrentClipboard
CLSIDFromProgID
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
DoDragDrop

msacm32

acmStreamSize
acmStreamClose
acmFormatChooseW
acmDriverClose
acmStreamUnprepareHeader
acmDriverOpen
acmStreamMessage
acmDriverDetailsA
acmStreamOpen
acmFormatSuggest
acmStreamConvert
acmDriverEnum
acmStreamPrepareHeader
acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetAbortProc
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
CreateDCW
CreateICW
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
StartPage
GetBitmapBits
StartDocW
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
EndDoc
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
TextOutW
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EndPage
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
CreateDIBitmap
GetStretchBltMode
CreateDIBSection
SetStretchBltMode
GetDIBits
LineTo
GetRgnBox
EnumFontsW
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 7.6MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 521KB - Virtual size: 521KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 91KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 319KB - Virtual size: 318KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 513KB - Virtual size: 513KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Tools/Fz5wqysz96Dc
data/Tools/G9DmwHxsMs4v
data/Tools/GBCDdfDO7ESj
data/Tools/GBQmF5RMcHsz
data/Tools/GRZlnqOtyvX0
data/Tools/GU3Mh71BuEmy
data/Tools/GeRDIYuy63dq
data/Tools/GiafmGOBcnMP
data/Tools/Gtw9fzuisRDM
data/Tools/GypjnJBBXDpU
data/Tools/H06gCiFrj21J
data/Tools/H379XXy21YiL
data/Tools/H4I4KRr4JRFF
data/Tools/H5Wa2aKhiVUy
data/Tools/H8TiodZ9GZ6g
data/Tools/HEhVFjivKajS
data/Tools/HG9Jl2srdkVw
data/Tools/HHFvbrGu9io9
data/Tools/HHRvX4pETA0h
data/Tools/HHiRbujyP9ez
data/Tools/HPVNzMr0S9xd
data/Tools/HUKWUpekkLRM
data/Tools/HZ6lQHJYMSDQ
data/Tools/HdgNTpikMDVa
data/Tools/HkNZT7bExGCW
data/Tools/HmLRDI9yE5IS
data/Tools/HokZdqs7yqFb
data/Tools/HyB3PIXyXPwE
data/Tools/I0HQEABhGbjj
data/Tools/I1yZ6yOAFphE
data/Tools/I2i42UGd1HbM
data/Tools/I70KkCk3zw71
data/Tools/IBaWZFHirMn1
data/Tools/IFsEPZJ7gBum
data/Tools/IHVBjWZH2IRA
data/Tools/II0Zbo1Lz35Z
data/Tools/IMAXCo07VTqH
data/Tools/IS6thteJRCLw
data/Tools/IWJny5YxdhMq
data/Tools/IWrOzQ54aUln
data/Tools/IZhyEMOQ7XkA
data/Tools/IhPcbmh9S4aG
data/Tools/Ii4n9gvpfgNz
data/Tools/IkEH4a2aOApo
data/Tools/IktwyQnkfZAv
data/Tools/ImMLVEgsFCHU
data/Tools/IooU5X4ajtk6
data/Tools/Ip2Klq8aJWYc
data/Tools/IuMpz0doLY7d
data/Tools/IvyERoxmKndd
data/Tools/Iw1vRpkd7kL5
data/Tools/J3v6ZUiUS9kb
data/Tools/JE7XY0SoyhkL
data/Tools/JQ93fF1BfINk
data/Tools/JRZGvBbAtrbe
data/Tools/JVSLKJHWtdSN
data/Tools/JY8lEqkvyG7P
data/Tools/JYS2HrCpcXvW
data/Tools/Jdr9FSJd2W0H
data/Tools/JhQnWSi9sU8T
data/Tools/JiTmz2ouiNHf
data/Tools/Jv75Ozc4aEwU
data/Tools/JxXfppCvJpJ7
data/Tools/JzSChY4LwSFy
data/Tools/K7zdQAiPjVaN
data/Tools/KADgxA6HSow6
data/Tools/KGp58OcTprBh
data/Tools/KHXxh9qN6ASg
data/Tools/KLsFnlizqOni
data/Tools/KNjunDamHwBm
data/Tools/KOaYZ9BLmI0a
data/Tools/KPOmGgvgWc12
data/Tools/KTP269RYnolv
data/Tools/Kahkwu5iYj85
data/Tools/KfQ6cd3bGtVv
data/Tools/Kg9Ztd0Vt5AZ
data/Tools/KgU4vDUUfbvR
data/Tools/KkC5F3WM2N8A
data/Tools/Kn8M2LbYvGlZ
data/Tools/KnZ7WmpaV089
data/Tools/Ko7FHElWk1XN
data/Tools/KoIY1428t4Ri
data/Tools/KowUVEdUT1hz
data/Tools/KrKqmM1bGBPy
data/Tools/Ksei1I3oI0f8
data/Tools/KzszJ559t9e7
data/Tools/L3jqz14pt03S
data/Tools/L4Nsjxwy15IC
data/Tools/L6av8TOHWCXR
data/Tools/L90xyelaKBkU
data/Tools/LHMVdBJTSjX1
data/Tools/LMQoPPfMfWIb
data/Tools/LNZs148IvFYf
data/Tools/LOoGsWel595Q
data/Tools/LcSoYUAw2UwR
data/Tools/LctWJ5t25QmI
data/Tools/LfR2h0w7bPl6
data/Tools/LjDAFHtwgPDR
data/Tools/Ljc8L7us07kH
data/Tools/LotWw5jRBqQ9
data/Tools/Lwrd6Zj9uYGn
data/Tools/M1q2yHA4hcwl
data/Tools/M3f3TdSRnC5u
data/Tools/M5C3IbGTFVXo
data/Tools/MAIXWbOYpdxc
data/Tools/MCBdEMYIWwNP
data/Tools/MEVqo6oXAM0W
data/Tools/MJuy4ioOkh1M
data/Tools/MLxGvc61Cqxk
data/Tools/MTCVvs4sVHHh
data/Tools/MXzY25I8Ug9O
data/Tools/Maximus_x64.dll
.dll windows x64

4c90f3f4aa9b81de6d49cd1e3b25bd21

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:70:ee:6c:c5:53:7b:09:52:84:7a:e0:75:c9:31:3b:24:db:49:33:54:26:ce:28:cc:22:ef:d7:c4:50:b0:38
Signer

Actual PE Digest

5f:70:ee:6c:c5:53:7b:09:52:84:7a:e0:75:c9:31:3b:24:db:49:33:54:26:ce:28:cc:22:ef:d7:c4:50:b0:38

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW
GetDefaultPrinterW
EnumPrintersW

comdlg32

GetSaveFileNameW
GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
SHGetSpecialFolderLocation
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
SHGetMalloc
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage
ShellExecuteA
ShellExecuteW

user32

SetMenuItemInfoW
GetMenuItemInfoW
SetCaretPos
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
DestroyCaret
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
SetForegroundWindow
GetWindowTextW
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
AttachThreadInput
GetSubMenu
DestroyIcon
IsWindowVisible
PtInRect
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetClassNameW
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetMessageW
GetDCEx
PeekMessageW
MonitorFromWindow
GetUpdateRect
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
InflateRect
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
UnionRect
GetCursorInfo
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
ClientToScreen
SetClipboardData
GetClipboardData
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
CreateCaret
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
GetAncestor
GetDlgItem
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CallWindowProcW
CountClipboardFormats
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
ToUnicode
PostThreadMessageW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

msvcrt

memcpy
memset

advapi32

RegSetValueExW
RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

imagehlp

ImageDirectoryEntryToData
ImageNtHeader

kernel32

SetFileAttributesW
GetFileType
SetFileTime
RtlUnwindEx
QueryDosDeviceW
DeleteAtom
GetACP
GetExitCodeProcess
IsBadWritePtr
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
OpenFileMappingW
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
HeapAlloc
ExitProcess
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
FindAtomW
RtlUnwind
GetCPInfo
GetStdHandle
GetTimeZoneInformation
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
GetModuleHandleW
FreeLibrary
HeapDestroy
SetDllDirectoryW
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
CreateProcessW
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
AddVectoredExceptionHandler
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
MoveFileW
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
GetFileAttributesExW
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
AddAtomW
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
DuplicateHandle
LeaveCriticalSection
GetProcAddress
ResumeThread
GetLogicalDriveStringsW
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
IsDBCSLeadByteEx
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
AssignProcessToJobObject
GetComputerNameW
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

CoMarshalInterThreadInterfaceInStream
RevokeDragDrop
StgCreateDocfileOnILockBytes
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoUninitialize
OleGetClipboard
ReleaseStgMedium
OleSetClipboard
RegisterDragDrop
IsEqualGUID
CreateStreamOnHGlobal
OleFlushClipboard
OleInitialize
CreateILockBytesOnHGlobal
OleIsCurrentClipboard
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
DoDragDrop

msacm32

acmStreamSize
acmStreamClose
acmFormatChooseW
acmDriverClose
acmStreamUnprepareHeader
acmDriverOpen
acmStreamMessage
acmDriverDetailsA
acmStreamOpen
acmFormatSuggest
acmStreamConvert
acmDriverEnum
acmStreamPrepareHeader
acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetAbortProc
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
CreateDCW
CreateICW
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
StartPage
GetBitmapBits
StartDocW
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
EndDoc
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
TextOutW
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EndPage
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
CreateDIBitmap
GetStretchBltMode
CreateDIBSection
SetStretchBltMode
GetDIBits
LineTo
GetRgnBox
EnumFontsW
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 67KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 223KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 507KB - Virtual size: 507KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Tools/Meh7VbG1fLmT
data/Tools/MhPl6zy3SliH
data/Tools/Mln7UQiVcrIx
data/Tools/MmMZ5eLmFlap
data/Tools/MmP75EhZp9et
data/Tools/MtxnM7HOhEL9
data/Tools/Mv85miFRPTTt
data/Tools/MwQrcidlTRER
data/Tools/MxlKfLNMKCt0
data/Tools/N0JKiyU2OhLN
data/Tools/N3a79jY5wlIz
data/Tools/N7NA2ttYDdPU
data/Tools/NBEnnqMgnJ2T
data/Tools/NGDc9j7uUv50
data/Tools/NRgaDCxIvwYY
data/Tools/NTkmtDGEMZWc
data/Tools/NWuKqf0njj4B
data/Tools/NdumoOiFUT8T
data/Tools/NjDzo1x4xXOw
data/Tools/Nk9IjoZfMjB3
data/Tools/Nqo7nxaTKQLY
data/Tools/NzPlT4MPDLTL
data/Tools/OAopVL3NHwjP
data/Tools/OBYAeMXKTuAQ
data/Tools/OCwClobO1bUU
data/Tools/ODfRb6GNoFNc
data/Tools/OFsVr9csn9d7
data/Tools/OIYl3Imqh58T
data/Tools/OO8LfdzFBGvE
data/Tools/OOI5MpF8Uidh
data/Tools/OPDJZfH6iF11
data/Tools/OPPVGFEoMHVh
data/Tools/OQQAC7TMfu3j
data/Tools/OUAe2BnLFBy9
data/Tools/OWv7QoXSv9wH
data/Tools/Oag7TheWYl5K
data/Tools/OdGysBn05yh1
data/Tools/OxMXHvaBbuNO
data/Tools/Oy7eXm4vk2mU
data/Tools/P3fUVSr2NJZA
data/Tools/P6PtThXWaD5M
data/Tools/P6qhfxhlex8A
data/Tools/P9boSCFMV145
data/Tools/P9lzCh5IkDzP
data/Tools/PCxulGFlK6YO
data/Tools/PIqNbiqvsuIl
data/Tools/PN8gybXUDU9H
data/Tools/PScYrMmg0jHz
data/Tools/PUXfEwXqjvAp
data/Tools/PUyEEz0Lb5XG
data/Tools/PZ14WwARgOfS
data/Tools/PclqHxSXy79r
data/Tools/Pik5EbSzvBUy
data/Tools/Pjz0nf9aEU8K
data/Tools/Q0SvKoZE9tmm
data/Tools/Q3zqC3s3JzlF
data/Tools/Q48IXkSL4NS8
data/Tools/QBZWztD9TjzH
data/Tools/QGXug2jTRf9K
data/Tools/QI1j6OkNelUg
data/Tools/QPnPWGU7e59d
data/Tools/QlRJcI3F5T5k
data/Tools/QrvU6VYlOFMz
data/Tools/QuILQkPQh3hr
data/Tools/R8K0pj6PGRyY
data/Tools/R9rGnhcphjPH
data/Tools/RETv3aR6Wu4Z
data/Tools/RFfkyFE252Ak
data/Tools/RL5xjYF8IM5t
data/Tools/RLbQfWnN8zOQ
data/Tools/RLojxmxtxz4A
data/Tools/ROCrmRAcfzfV
data/Tools/ROqgu0HCNHqR
data/Tools/RSbM4rxXweUR
data/Tools/RXrS5mFz7iDT
data/Tools/Rk5y53dmUplX
data/Tools/RnWxP66iop5y
data/Tools/RnZQowKiBaoe
data/Tools/RuBOHOX9zWGK
data/Tools/Rzno3MgiMuNo
data/Tools/RzuAFXJNAy3U
data/Tools/S0JBRM0wXbOJ
data/Tools/S1wj0AKnsqb7
data/Tools/S9FBrrYUdGsC
data/Tools/SANCbFwroUDG
data/Tools/SDRUvkLvMHgs
data/Tools/SG_x64.dll
.dll windows x64

4c90f3f4aa9b81de6d49cd1e3b25bd21

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

87:48:f8:ec:0c:95:f3:da:e8:07:43:36:b7:54:06:de:34:c1:e1:95:75:87:f1:3e:ba:5a:b4:96:83:21:95:58
Signer

Actual PE Digest

87:48:f8:ec:0c:95:f3:da:e8:07:43:36:b7:54:06:de:34:c1:e1:95:75:87:f1:3e:ba:5a:b4:96:83:21:95:58

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW
GetDefaultPrinterW
EnumPrintersW

comdlg32

GetSaveFileNameW
GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
SHGetSpecialFolderLocation
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
SHGetMalloc
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage
ShellExecuteA
ShellExecuteW

user32

SetMenuItemInfoW
GetMenuItemInfoW
SetCaretPos
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
DestroyCaret
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
SetForegroundWindow
GetWindowTextW
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
AttachThreadInput
GetSubMenu
DestroyIcon
IsWindowVisible
PtInRect
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetClassNameW
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetMessageW
GetDCEx
PeekMessageW
MonitorFromWindow
GetUpdateRect
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
InflateRect
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
UnionRect
GetCursorInfo
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
ClientToScreen
SetClipboardData
GetClipboardData
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
CreateCaret
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
GetAncestor
GetDlgItem
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CallWindowProcW
CountClipboardFormats
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
ToUnicode
PostThreadMessageW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

msvcrt

memcpy
memset

advapi32

RegSetValueExW
RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

imagehlp

ImageDirectoryEntryToData
ImageNtHeader

kernel32

SetFileAttributesW
GetFileType
SetFileTime
RtlUnwindEx
QueryDosDeviceW
DeleteAtom
GetACP
GetExitCodeProcess
IsBadWritePtr
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
OpenFileMappingW
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
HeapAlloc
ExitProcess
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
FindAtomW
RtlUnwind
GetCPInfo
GetStdHandle
GetTimeZoneInformation
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
GetModuleHandleW
FreeLibrary
HeapDestroy
SetDllDirectoryW
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
CreateProcessW
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
AddVectoredExceptionHandler
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
MoveFileW
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
GetFileAttributesExW
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
AddAtomW
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
DuplicateHandle
LeaveCriticalSection
GetProcAddress
ResumeThread
GetLogicalDriveStringsW
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
IsDBCSLeadByteEx
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
AssignProcessToJobObject
GetComputerNameW
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

CoMarshalInterThreadInterfaceInStream
RevokeDragDrop
StgCreateDocfileOnILockBytes
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoUninitialize
OleGetClipboard
ReleaseStgMedium
OleSetClipboard
RegisterDragDrop
IsEqualGUID
CreateStreamOnHGlobal
OleFlushClipboard
OleInitialize
CreateILockBytesOnHGlobal
OleIsCurrentClipboard
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
DoDragDrop

msacm32

acmStreamSize
acmStreamClose
acmFormatChooseW
acmDriverClose
acmStreamUnprepareHeader
acmDriverOpen
acmStreamMessage
acmDriverDetailsA
acmStreamOpen
acmFormatSuggest
acmStreamConvert
acmDriverEnum
acmStreamPrepareHeader
acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetAbortProc
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
CreateDCW
CreateICW
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
StartPage
GetBitmapBits
StartDocW
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
EndDoc
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
TextOutW
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EndPage
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
CreateDIBitmap
GetStretchBltMode
CreateDIBSection
SetStretchBltMode
GetDIBits
LineTo
GetRgnBox
EnumFontsW
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 381KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 67KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 222KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 507KB - Virtual size: 507KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Tools/SM9DvaxT5wOh
data/Tools/SMS89PF6LEzi
data/Tools/SOPHNX12piEO
data/Tools/SRmzIj2nq50Z
data/Tools/SS4vOHPeixZo
data/Tools/STVDRUXq96JP
data/Tools/SU14VOTTUen2
data/Tools/SWZmOt5WMm3D
data/Tools/SWdIQSsrH7nt
data/Tools/Sj5tknjFIieW
data/Tools/Slby4QhFAQM2
data/Tools/Soundgoodizer_x64.dll
.dll windows x64

c0e0557b6b83ca62ecee4085a39b594b

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

af:08:b8:44:13:5e:28:35:63:90:c6:e4:8c:ad:3d:b7:25:15:0f:99:a1:37:5c:d0:df:f8:5c:49:56:47:9f:46
Signer

Actual PE Digest

af:08:b8:44:13:5e:28:35:63:90:c6:e4:8c:ad:3d:b7:25:15:0f:99:a1:37:5c:d0:df:f8:5c:49:56:47:9f:46

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW
GetDefaultPrinterW
EnumPrintersW

comdlg32

GetSaveFileNameW
GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
SHGetSpecialFolderLocation
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
SHGetMalloc
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage
ShellExecuteA
ShellExecuteW

user32

SetMenuItemInfoW
GetMenuItemInfoW
SetCaretPos
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
DestroyCaret
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
SetForegroundWindow
GetWindowTextW
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
AttachThreadInput
GetSubMenu
DestroyIcon
IsWindowVisible
PtInRect
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetClassNameW
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetMessageW
GetDCEx
PeekMessageW
MonitorFromWindow
GetUpdateRect
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
InflateRect
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
UnionRect
GetCursorInfo
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
ClientToScreen
SetClipboardData
GetClipboardData
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
CreateCaret
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
GetAncestor
GetDlgItem
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CallWindowProcW
CountClipboardFormats
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
ToUnicode
PostThreadMessageW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

msvcrt

memcpy
memset

advapi32

RegSetValueExW
RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

imagehlp

ImageDirectoryEntryToData
ImageNtHeader

kernel32

SetFileAttributesW
GetFileType
SetFileTime
RtlUnwindEx
QueryDosDeviceW
DeleteAtom
GetACP
GetExitCodeProcess
IsBadWritePtr
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
OpenFileMappingW
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
HeapAlloc
ExitProcess
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
FindAtomW
RtlUnwind
GetCPInfo
GetStdHandle
GetTimeZoneInformation
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
GetModuleHandleW
FreeLibrary
HeapDestroy
SetDllDirectoryW
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
CreateProcessW
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
AddVectoredExceptionHandler
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
MoveFileW
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
GetFileAttributesExW
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
AddAtomW
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
DuplicateHandle
LeaveCriticalSection
GetProcAddress
ResumeThread
GetLogicalDriveStringsW
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
IsDBCSLeadByteEx
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
AssignProcessToJobObject
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

CoMarshalInterThreadInterfaceInStream
RevokeDragDrop
StgCreateDocfileOnILockBytes
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoUninitialize
OleGetClipboard
ReleaseStgMedium
OleSetClipboard
RegisterDragDrop
IsEqualGUID
CreateStreamOnHGlobal
OleFlushClipboard
OleInitialize
CreateILockBytesOnHGlobal
OleIsCurrentClipboard
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
DoDragDrop

msacm32

acmStreamSize
acmStreamClose
acmFormatChooseW
acmDriverClose
acmStreamUnprepareHeader
acmDriverOpen
acmStreamMessage
acmDriverDetailsA
acmStreamOpen
acmFormatSuggest
acmStreamConvert
acmDriverEnum
acmStreamPrepareHeader
acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetAbortProc
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
CreateDCW
CreateICW
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
StartPage
GetBitmapBits
StartDocW
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
EndDoc
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
TextOutW
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EndPage
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
CreateDIBitmap
GetStretchBltMode
CreateDIBSection
SetStretchBltMode
GetDIBits
LineTo
GetRgnBox
EnumFontsW
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 375KB - Virtual size: 375KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 67KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Tools/T3pv9p5jI3we
data/Tools/TEfhrsb4R5P0
data/Tools/TMsMSG2QOPma
data/Tools/TOg0kBVBO0vu
data/Tools/TWuAHoGvQvmN
data/Tools/TZ0HsVDlqwvh
data/Tools/Tfv9fqJSYsbQ
data/Tools/TjARcHJCYnLw
data/Tools/TjyO7tVo9JnB
data/Tools/TnbCaNi2rAWw
data/Tools/TrpOlfWUVp8i
data/Tools/TtoopTlb1lkE
data/Tools/TzFpNVmc8E7B
data/Tools/U3DEHIHoxfAg
data/Tools/U7Cz4z6vuQZh
data/Tools/U8geNFE9GyZL
data/Tools/UBBMZLs1kQe8
data/Tools/UESRKO2bw0XP
data/Tools/UEdiUP4ACnYA
data/Tools/ULlm9YzaQZAd
data/Tools/UNzMDo0KmjIe
data/Tools/UPxCEfEhTqHu
data/Tools/UUuComoPvss8
data/Tools/UVFVSSADdoql
data/Tools/UYKDEz7vDjFa
data/Tools/UahpCB3XnWwi
data/Tools/UmYSkj3uNEd8
data/Tools/UqVwaPxHBnfU
data/Tools/UqsY7cVyQdBc
data/Tools/UvjcZfEmf1fI
data/Tools/UvtGqmCpXP8K
data/Tools/UxrODj1yqkeC
data/Tools/UyOYoVJgstDc
data/Tools/V0nOaCtxOyHM
data/Tools/V56wpvb4jmvE
data/Tools/V8u5HI38aSOL
data/Tools/VCcJXS10lU6E
data/Tools/VExQUAU2MOnn
data/Tools/VFB0Wh0mjEMZ
data/Tools/VII4x0xCOIg1
data/Tools/VNXmmWUCnLZu
data/Tools/VNbGV9Ko72bn
data/Tools/VNgPQDuI57oJ
data/Tools/VOiK5cQHzuGv
data/Tools/VOyCLk99NSMV
data/Tools/VPT33qdLy6hY
data/Tools/VPf77qVxYTcU
data/Tools/VPuwhqadxqxR
data/Tools/VQhtHZZBzrJE
data/Tools/VSArB8m63Xgq
data/Tools/VXZawrJiedjR
data/Tools/VZ63F4q618Ia
data/Tools/VcFvXe4hUwpL
data/Tools/VgDTgVDbit8L
data/Tools/Vgugzcfrz4rz
data/Tools/ViyOUMI7kBEg
data/Tools/VjQnvUkZj2bt
data/Tools/Vlb8HtXugaPv
data/Tools/Vo3Ay9HKUPtN
data/Tools/Vw1rjqH8Qbsf
data/Tools/Vyi1RonJJnHr
data/Tools/W2z2HlXlZRKo
data/Tools/W3lJuHE91iVP
data/Tools/W41N8EF7gRUh
data/Tools/W4fvb0yjIBeY
data/Tools/WARIgsp63CrS
data/Tools/WG4gVSZAYBvp
data/Tools/WJ8D7EKb7FOd
data/Tools/WPb8uPPl8yXx
data/Tools/WRfSb7de5KTd
data/Tools/WTTJcgmHWMLZ
data/Tools/WWTtYPhJrRvm
data/Tools/WYB7nOxFu6bh
data/Tools/Wj3piwIwejzW
data/Tools/WzdMlTUZHWtx
data/Tools/X08bypCxbSGd
data/Tools/X0Y0qoF6tX40
data/Tools/X60m4uMuwsMP
data/Tools/X6yBN8q9Uf3m
data/Tools/XB3EUZXGaOGV
data/Tools/XECStFfC8wCq
data/Tools/XHrJYzFW1kzz
data/Tools/XL97lesmwsp2
data/Tools/XM2NRZIKF1IY
data/Tools/XQ1S55OkSbw1
data/Tools/XW0FKUX2njZ7
data/Tools/XaiyxS1LCy3B
data/Tools/Xil15eHRo2Wk
data/Tools/Xj300FRjiYwV
data/Tools/Xqotx52503Dg
data/Tools/Xuzthn0ZCmQW
data/Tools/XyWaiD7TTYp1
data/Tools/XymUjVi1HgDS
data/Tools/Y3cZbeRciDCE
data/Tools/Y8pnjJpOScQm
data/Tools/YCx9m1aS3ceT
data/Tools/YEREaeqQtPqY
data/Tools/YGEysmwM8ylm
data/Tools/YGhrrgtO57ID
data/Tools/YH368mqWweht
data/Tools/YTfdEYL7aD2J
data/Tools/YaEymte8CcRD
data/Tools/Ybv7dcz1DAo2
data/Tools/YcWdk7eLyrQv
data/Tools/YdawARqWeOpq
data/Tools/YfZeBFNJCBQZ
data/Tools/YftF7HtFkfOu
data/Tools/Yfwor9zMsS5H
data/Tools/YhjUtlXdy3do
data/Tools/YjAwzl3iMWD4
data/Tools/Yq9OAAknRNpw
data/Tools/Yr1kdvNVC3eG
data/Tools/Yrx2tWhVx7gg
data/Tools/Yt5s4ZldXcvW
data/Tools/YuBvUFLywlf2
data/Tools/YuTeFbk6oiQe
data/Tools/YwSnVVR7zb12
data/Tools/YwdXgK8TFzRC
data/Tools/YzMtDnIpwm0j
data/Tools/Z5RoPTmH0CDb
data/Tools/ZD8UzJHLW9uW
data/Tools/ZEX4kpLeraZ2
data/Tools/ZIeRnAJ70AkP
data/Tools/ZJktdqD8hYn6
data/Tools/ZLMPHBaz5qiK
data/Tools/ZLqYJ9doaUuh
data/Tools/ZN63Kg9WXsKq
data/Tools/ZTLc3KRbrn7h
data/Tools/ZayGhhBlh7Yi
data/Tools/Zdbu0H6smb1I
data/Tools/ZfF1ZrcwEir6
data/Tools/ZhGJWuxXpGDw
data/Tools/Zhga5VWCJwg9
data/Tools/ZkkVi2thGC8R
data/Tools/ZsaMDfqwdzQA
data/Tools/Zv3p67DZdHij
data/Tools/ZyKof7c9Bqfi
data/Tools/a886tubbteaU
data/Tools/aDaehAQyl50X
data/Tools/aJKIlO0skKG9
data/Tools/aKsx7oYlSOvf
data/Tools/aUrfzgbPjlVY
data/Tools/aaVHODqkINdR
data/Tools/afy2dkxMLsZJ
data/Tools/asSwRCTbG66h
data/Tools/audux0Vk6ifv
data/Tools/aygc7vJceYrt
data/Tools/b1BszDAuPvDQ
data/Tools/b47Qc3jg87sp
data/Tools/b4mhLgK0V80v
data/Tools/b73OfX8nd9ZF
data/Tools/b7woysRIO9Ib
data/Tools/b9ckyvaXWtkd
data/Tools/bAfPBpY1Y3BJ
data/Tools/bF6IQW2IQqQs
data/Tools/bGNslelVOl7X
data/Tools/bJYWTzgFdMUI
data/Tools/bK5k7ynjSrsW
data/Tools/bKaIdIggRYBO
data/Tools/bNERX8n8wrCg
data/Tools/bYIJN7Npz6M4
data/Tools/baMUWlwvZI52
data/Tools/bbCNEZpTI3OG
data/Tools/bcS3EW316Nwu
data/Tools/be48y9eD4hyE
data/Tools/bhIpX9U7JVPV
data/Tools/bkBI7TTQePCc
data/Tools/bkZJDEdaKq0K
data/Tools/bl9dlplQHvFn
data/Tools/bmgvTRCkBztg
data/Tools/bvMH2k0vbJWj
data/Tools/bxabXbTnPkcN
data/Tools/c4NiHCAUCUnu
data/Tools/c85PdnITewD6
data/Tools/c8fsbxBHepBY
data/Tools/cF1FG7ATi2tF
data/Tools/cGITKucU7ce4
data/Tools/cGZewiY87h2h
data/Tools/cHLJ6sVlVw1d
data/Tools/cLSXrLeQXI9Q
data/Tools/cP0wCWKmod99
data/Tools/cQ06P3F5gaPE
data/Tools/cQ0U2snIoLlX
data/Tools/cSEvAhvH21P7
data/Tools/cVuVw3o76ml3
data/Tools/cXkyBHtZlG0r
data/Tools/cb6UrQ4Aj4In
data/Tools/ceRXx6N7RJn0
data/Tools/cpoPDTjnBB4f
data/Tools/cxIMuWQ5Mlx5
data/Tools/d138H6dusHqg
data/Tools/d3mHq57aj3za
data/Tools/d3sgmq2aqzr3
data/Tools/dOUpeyau3AGO
data/Tools/dOcriah1RJbs
data/Tools/dR7TIXH28WwP
data/Tools/dYDbnJlwUiLT
data/Tools/dbx2HbenZDPi
data/Tools/ddXdyko0jGpe
data/Tools/djO5UHUKaST5
data/Tools/dozQLBaRjtWt
data/Tools/dsp_ippv2_x64.dll
.dll windows x64

f88b6aa6c69ede023f7bf22d7c71a55a

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

99:dd:9b:12:b3:24:7e:61:35:69:19:bd:75:7a:ad:f2:28:5f:f5:f4:2d:39:5d:d7:f6:e2:da:cc:db:59:59:fd
Signer

Actual PE Digest

99:dd:9b:12:b3:24:7e:61:35:69:19:bd:75:7a:ad:f2:28:5f:f5:f4:2d:39:5d:d7:f6:e2:da:cc:db:59:59:fd

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapReAlloc
HeapSize
FlushFileBuffers
CreateFileW
GetStringTypeW
SetStdHandle
GetProcessHeap
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteConsoleW
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
SetFilePointerEx
GetConsoleMode
GetStdHandle
GetFileType
HeapFree
CloseHandle
HeapAlloc
WriteFile
GetConsoleOutputCP
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte

Exports

Exports

AggCreateInstance
ippFree
ippGetLibVersion
ippGetNumThreads
ippMalloc
ippSetCpuFeatures
ippSetDenormAreZeros
ippSetFlushToZero
ippSetNumThreads
ippiAddC_8u_AC4RSfs
ippiAddC_8u_C3IRSfs
ippiAddC_8u_C3RSfs
ippiAddC_8u_C4IRSfs
ippiAlphaCompC_8u_AC4R
ippiAlphaCompC_8u_C3R
ippiAlphaCompC_8u_C4R
ippiAlphaComp_8u_AC4R
ippiAlphaPremul_8u_AC4IR
ippiAlphaPremul_8u_AC4R
ippiColorToGray_8u_AC4C1R
ippiColorToGray_8u_C3C1R
ippiCopyConstBorder_8u_C3R
ippiCopyConstBorder_8u_C4R
ippiCopyManaged_8u_C1R
ippiCopyReplicateBorder_8u_C3R
ippiCopyReplicateBorder_8u_C4R
ippiCopy_8u_AC4C3R
ippiCopy_8u_C1C4R
ippiCopy_8u_C3AC4R
ippiCopy_8u_C3R
ippiCopy_8u_C4R
ippiCopy_8u_P3C3R
ippiFilterBoxBorderGetBufferSize
ippiFilterBoxBorder_8u_C1R
ippiFilterBoxBorder_8u_C3R
ippiFilterBoxBorder_8u_C4R
ippiFilterBox_8u_C1IR
ippiFilterBox_8u_C3IR
ippiFilterBox_8u_C3R
ippiFilterBox_8u_C4IR
ippiFilterBox_8u_C4R
ippiFilterGauss_8u_C4R
ippiFilterRoundGetBufSize32f_8u_C1R
ippiFilter_8u_C4R
ippiFilter_Round32f_8u_C1R
ippiMirror_8u_C3IR
ippiMirror_8u_C4IR
ippiMirror_8u_C4R
ippiMulC_8u_AC4RSfs
ippiMulC_8u_C1RSfs
ippiMulC_8u_C3IRSfs
ippiMulC_8u_C3RSfs
ippiMulC_8u_C4IRSfs
ippiMulC_8u_C4RSfs
ippiMul_8u_C4IRSfs
ippiRGBToGray_8u_AC4C1R
ippiRemap_8u_C3R
ippiRemap_8u_C4R
ippiResizeCenter_8u_C3R
ippiResizeCenter_8u_C4R
ippiResizeGetBufSize
ippiResizeSqrPixelGetBufSize
ippiResizeSqrPixel_8u_C1R
ippiResizeSqrPixel_8u_C3R
ippiResizeSqrPixel_8u_C4R
ippiResize_8u_C3R
ippiResize_8u_C4R
ippiRotateCenter_8u_C4R
ippiSet_8u_C3R
ippiSet_8u_C4R
ippiSubC_8u_C3IRSfs
ippiSubC_8u_C4IRSfs
ippiWarpAffineQuad_8u_C3R
ippiWarpAffineQuad_8u_C4R
ippiWarpAffine_8u_C3R
ippiWarpAffine_8u_C4R
ippiWarpBilinearQuad_8u_C3R
ippiWarpBilinearQuad_8u_C4R
ippiWarpPerspectiveQuad_8u_C3R
ippiWarpPerspectiveQuad_8u_C4R
ippsAbs_32f
ippsAbs_32f_I
ippsAbs_64f
ippsAbs_64f_I
ippsAddC_32f
ippsAddC_32f_I
ippsAddC_32fc
ippsAddC_64f
ippsAddC_64f_I
ippsAddProductC_32f
ippsAddProduct_32f
ippsAddProduct_32fc
ippsAddProduct_64f
ippsAddProduct_64fc
ippsAdd_32f
ippsAdd_32f_I
ippsAdd_64f
ippsAdd_64f_I
ippsAdd_64fc
ippsAdd_64fc_I
ippsAndC_32u_I
ippsArctan_32f_I
ippsAtan2_32f_A11
ippsAtan2_32f_A21
ippsAtan2_32f_A24
ippsAtan2_64f_A53
ippsAtan_32f_A11
ippsAtan_32f_A21
ippsAtan_32f_A24
ippsAtan_64f_A53
ippsAutoCorr_NormA_32f
ippsCbrt_32f_A11
ippsCbrt_32f_A21
ippsCbrt_32f_A24
ippsCompare_8u
ippsConjCcs_32fc
ippsConjCcs_32fc_I
ippsConjCcs_64fc
ippsConjCcs_64fc_I
ippsConjFlip_32fc
ippsConjFlip_64fc
ippsConjPack_32fc
ippsConjPack_32fc_I
ippsConjPack_64fc
ippsConjPack_64fc_I
ippsConjPerm_32fc
ippsConjPerm_32fc_I
ippsConjPerm_64fc
ippsConjPerm_64fc_I
ippsConj_32fc
ippsConj_32fc_I
ippsConj_64fc
ippsConj_64fc_I
ippsConvBiased_32f
ippsConvCyclic4x4_32f32fc
ippsConvCyclic8x8_32f
ippsConv_32f
ippsConv_64f
ippsConvert_16s32f
ippsConvert_16s32f_Sfs
ippsConvert_16s32s
ippsConvert_16s64f_Sfs
ippsConvert_24s32f
ippsConvert_24s32s
ippsConvert_32f16s_Sfs
ippsConvert_32f24s_Sfs
ippsConvert_32f32s_Sfs
ippsConvert_32f64f
ippsConvert_32f8u_Sfs
ippsConvert_32s16s_Sfs
ippsConvert_32s24s_Sfs
ippsConvert_32s32f
ippsConvert_32s32f_Sfs
ippsConvert_32s64f
ippsConvert_32s64f_Sfs
ippsConvert_64f32f
ippsConvert_64f32s_Sfs
ippsCopy_16s
ippsCopy_32f
ippsCopy_32s
ippsCopy_64f
ippsCopy_64s
ippsCopy_8u
ippsCos_32f_A11
ippsCos_32f_A21
ippsCos_32f_A24
ippsCos_64f_A26
ippsCos_64f_A50
ippsCos_64f_A53
ippsCplxToReal_16sc
ippsCplxToReal_32fc
ippsCplxToReal_64fc
ippsCrossCorr_32f
ippsDeinterleave_16s
ippsDeinterleave_32f
ippsDivCRev_32f_I
ippsDiv_32f_A11
ippsDiv_32f_A21
ippsDiv_32f_A24
ippsDiv_64f_A53
ippsEqual_8u
ippsExp_32f64f
ippsExp_32f_A11
ippsExp_32f_A21
ippsExp_32f_A24
ippsExp_32f_I
ippsExp_64f_A50
ippsExp_64f_A53
ippsExpm1_32f_A11
ippsExpm1_32f_A21
ippsExpm1_32f_A24
ippsFFTFwd_RToCCS_32f
ippsFFTFwd_RToCCS_32f_I
ippsFFTFwd_RToCCS_64f
ippsFFTFwd_RToCCS_64f_I
ippsFFTFwd_RToPack_32f
ippsFFTFwd_RToPack_32f_I
ippsFFTFwd_RToPack_64f
ippsFFTFwd_RToPack_64f_I
ippsFFTFwd_RToPerm_32f
ippsFFTFwd_RToPerm_32f_I
ippsFFTFwd_RToPerm_64f
ippsFFTFwd_RToPerm_64f_I
ippsFFTGetSize_R_32f
ippsFFTGetSize_R_64f
ippsFFTInit_R_32f
ippsFFTInit_R_64f
ippsFFTInv_CCSToR_32f
ippsFFTInv_CCSToR_32f_I
ippsFFTInv_CCSToR_64f
ippsFFTInv_CCSToR_64f_I
ippsFFTInv_PackToR_32f
ippsFFTInv_PackToR_32f_I
ippsFFTInv_PackToR_64f
ippsFFTInv_PackToR_64f_I
ippsFFTInv_PermToR_32f
ippsFFTInv_PermToR_32f_I
ippsFFTInv_PermToR_64f
ippsFFTInv_PermToR_64f_I
ippsFIR64f_32f
ippsFIR64f_32f_I
ippsFIRFree64f_32f
ippsFIRFree_32f
ippsFIRGenBandpass_64f
ippsFIRGenBandstop_64f
ippsFIRGenHighpass_64f
ippsFIRGenLowpass_64f
ippsFIRInitAlloc64f_32f
ippsFIRInitAlloc_32f
ippsFIRMRInitAlloc64f_32f
ippsFIRMRInitAlloc_32f
ippsFIRSetDlyLine64f_32f
ippsFIRSetDlyLine_32f
ippsFIRSetTaps64f_32f
ippsFIRSetTaps_32f
ippsFIR_32f
ippsFIR_32f_I
ippsFilterMedian_32f_I
ippsFlip_16u_I
ippsFlip_32f
ippsFlip_32f_I
ippsFlip_32fc_I
ippsFlip_64f_I
ippsIIR64f_32f
ippsIIR64f_32f_I
ippsIIRGetDlyLine64f_32f
ippsIIRGetDlyLine_32f
ippsIIRGetDlyLine_32fc
ippsIIRGetStateSize64f_BiQuad_32f
ippsIIRInit64f_BiQuad_32f
ippsIIRSetDlyLine64f_32f
ippsIIRSetDlyLine_32f
ippsIIRSetDlyLine_32fc
ippsIIR_32f
ippsIIR_32f_I
ippsIIR_32fc
ippsIIR_32fc_I
ippsImag_32fc
ippsImag_64fc
ippsInterleave_16s
ippsInterleave_32f
ippsInv_32f_A21
ippsInv_32f_A24
ippsLn_32f_A11
ippsLn_32f_A21
ippsLn_32f_A24
ippsLn_32f_I
ippsLn_64f32f
ippsLn_64f_A50
ippsLn_64f_A53
ippsLog10_32f_A11
ippsLog10_32f_A21
ippsLog10_32f_A24
ippsLog10_64f_A50
ippsLog10_64f_A53
ippsMagnitude_32fc
ippsMagnitude_64fc
ippsMaxAbs_16s
ippsMaxAbs_32s
ippsMax_16s
ippsMax_32f
ippsMax_32s
ippsMax_64f
ippsMinAbs_16s
ippsMinAbs_32s
ippsMinMax_16s
ippsMinMax_16u
ippsMinMax_32f
ippsMinMax_32s
ippsMinMax_32u
ippsMinMax_64f
ippsMinMax_8u
ippsMin_16s
ippsMin_32f
ippsMin_32s
ippsMin_64f
ippsMove_16s
ippsMove_32f
ippsMove_32s
ippsMove_64f
ippsMove_64s
ippsMove_8u
ippsMulC_32f
ippsMulC_32f_I
ippsMulC_64f
ippsMulC_64f_I
ippsMulC_64fc
ippsMulC_64fc_I
ippsMulPack_32f
ippsMulPack_32f_I
ippsMulPack_64f
ippsMulPack_64f_I
ippsMul_32f
ippsMul_32f32fc
ippsMul_32f32fc_I
ippsMul_32f_I
ippsMul_32fc
ippsMul_32fc_I
ippsMul_64f
ippsMul_64f_I
ippsMul_64fc
ippsMul_64fc_I
ippsOrC_32u_I
ippsPhase_32f
ippsPhase_32fc
ippsPhase_64f
ippsPhase_64fc
ippsPow_32f_A11
ippsPow_32f_A21
ippsPow_32f_A24
ippsPowerSpectr_32fc
ippsPowerSpectr_64fc
ippsPowx_32f_A11
ippsPowx_32f_A21
ippsPowx_32f_A24
ippsPowx_64f_A53
ippsRandGauss_Direct_32f
ippsRandGauss_Direct_64f
ippsRandUniform_Direct_32f
ippsRandUniform_Direct_64f
ippsRealToCplx_16s
ippsRealToCplx_32f
ippsRealToCplx_64f
ippsReal_32fc
ippsReal_64fc
ippsRound_32f
ippsRound_64f
ippsSet_16s
ippsSet_16sc
ippsSet_32f
ippsSet_32fc
ippsSet_32s
ippsSet_32sc
ippsSet_64f
ippsSet_64fc
ippsSet_64s
ippsSet_64sc
ippsSet_8u
ippsSinCos_32f_A11
ippsSinCos_32f_A21
ippsSinCos_32f_A24
ippsSinCos_64f_A26
ippsSinCos_64f_A50
ippsSinCos_64f_A53
ippsSin_32f_A11
ippsSin_32f_A21
ippsSin_32f_A24
ippsSin_64f_A26
ippsSin_64f_A50
ippsSin_64f_A53
ippsSqr_32f
ippsSqr_32f_I
ippsSqr_64f
ippsSqr_64f_I
ippsSqrt_32f
ippsSqrt_32f_A11
ippsSqrt_32f_A21
ippsSqrt_32f_A24
ippsSqrt_32f_I
ippsSqrt_64f
ippsSqrt_64f_A50
ippsSqrt_64f_A53
ippsSqrt_64f_I
ippsSubCRev_32f
ippsSubCRev_32f_I
ippsSubCRev_64f_I
ippsSub_32f
ippsSub_32f_I
ippsSub_64f
ippsSub_64f_I
ippsSum_32f
ippsSum_64f
ippsSwapBytes_16u
ippsSwapBytes_16u_I
ippsSwapBytes_24u
ippsSwapBytes_24u_I
ippsSwapBytes_32u
ippsSwapBytes_32u_I
ippsTanh_32f_A11
ippsTanh_32f_A21
ippsTanh_32f_A24
ippsThreshold_GTAbs_32f
ippsThreshold_GTAbs_32f_I
ippsThreshold_GTVal_32f
ippsThreshold_GTVal_32f_I
ippsThreshold_GT_32f
ippsThreshold_GT_32f_I
ippsThreshold_GT_32s
ippsThreshold_GT_32s_I
ippsThreshold_GT_64f_I
ippsThreshold_LTAbs_32f
ippsThreshold_LTAbs_32f_I
ippsThreshold_LTValGTVal_32f
ippsThreshold_LTValGTVal_32f_I
ippsThreshold_LTValGTVal_32s
ippsThreshold_LTValGTVal_32s_I
ippsThreshold_LTVal_32f
ippsThreshold_LTVal_32f_I
ippsThreshold_LTVal_64f
ippsThreshold_LTVal_64f_I
ippsThreshold_LT_32f
ippsThreshold_LT_32f_I
ippsThreshold_LT_32s
ippsThreshold_LT_32s_I
ippsThreshold_LT_64f_I
ippsTone_Direct_32f
ippsTone_Direct_32fc
ippsTone_Direct_64f
ippsTriangle_Direct_32f
ippsTriangle_Direct_32fc
ippsTrunc_32f
ippsTrunc_64f
ippsVectorRamp_32f
ippsVectorRamp_64f
ippsVectorSlope_32f
ippsVectorSlope_32s
ippsVectorSlope_64f
ippsWinKaiser_32f_I
ippsWinKaiser_64f_I
ippsXorC_32u_I
ippsZero_16s
ippsZero_32f
ippsZero_32s
ippsZero_64f
ippsZero_64s
ippsZero_8u

Sections

.text
Size: 24.0MB - Virtual size: 24.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IPPCODE
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6.5MB - Virtual size: 6.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 601KB - Virtual size: 601KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

IPPDATA
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data/Tools/duvss157rurs
data/Tools/dvFL7mp05kgx
data/Tools/e59bY5tHikPF
data/Tools/e8wVOrzXrcfc
data/Tools/eFdhQncsZsOT
data/Tools/eHdYLTNWi6zT
data/Tools/eL32x1FifJSb
data/Tools/ePjAKEPHd4pk
data/Tools/eQ69jV7DUubA
data/Tools/eQw11mXmPnsI
data/Tools/eT5qxnw4Pc6o
data/Tools/eUL1TUFfhfcI
data/Tools/eVKRWj7IEGSl
data/Tools/edNNVORnH2ZY
data/Tools/emKDGanYmOPx
data/Tools/empp6D1VL7Qa
data/Tools/eoIvldg70DyU
data/Tools/epMNxFOAaa9Z
data/Tools/etvia4Mdv9y2
data/Tools/ewtbs2t7FOBn
data/Tools/exiipaPJj5yI
data/Tools/eyEOCTKWbTqa
data/Tools/eyHczPyo0iOb
data/Tools/f2MGcYOde2Zz
data/Tools/f48ZHXIRt0tF
data/Tools/f7GqdsGvyEbY
data/Tools/fEyBLOhbECiu
data/Tools/fH11SqWTjJPF
data/Tools/fRQGjzzNQf91
data/Tools/fVCRfHtWNNxL
data/Tools/fVRHA2biYei9
data/Tools/fVXk5KMP5I6i
data/Tools/fWMjcIeXxfKD
data/Tools/fZ6BGKk2PG1k
data/Tools/fgtVbhg3b6iq
data/Tools/fioOrbkOfErB
data/Tools/foAmal7KHYUY
data/Tools/ftqfnK6UbyKb
data/Tools/fzVLUmVjlw3f
data/Tools/g4ZTpH7lh4wY
data/Tools/g8ItPDhzSKrI
data/Tools/gAk17bFlEQOH
data/Tools/gC4JQrdXSve1
data/Tools/gDtxQN4Yyvp8
data/Tools/gETfjJ2IjDht
data/Tools/gHNO74CuExoO
data/Tools/gKBxyvJ5APQw
data/Tools/gQrmtLhpEFij
data/Tools/gSywIwb4JVEM
data/Tools/gTdk2MwLXI40
data/Tools/gTxJuBxHH1ie
data/Tools/gWLB9gMJ8hpe
data/Tools/gYQti96PuY0E
data/Tools/gkq7AXhtz2LP
data/Tools/gyUjFbf97t98
data/Tools/h1YPmI8j0Fax
data/Tools/hBNFyHGv7xKH
data/Tools/hDl5ZKuMqhmR
data/Tools/hDoGHkn5TJ74
data/Tools/hGB4qa1JCito
data/Tools/hN0uHDdlzvQB
data/Tools/hQR1qHIcOfVG
data/Tools/hUGbZ3vLwwqw
data/Tools/hUwlwawpU26h
data/Tools/hV78Wq1QYFNf
data/Tools/hZpYz1xb0l59
data/Tools/hfHY6uJy1g3w
data/Tools/hfNwygUGrD45
data/Tools/hoeSB6d1wwNm
data/Tools/hp3pYeXhkFn8
data/Tools/hv9EvOYJ4v4s
data/Tools/hwckOVhTq5qF
data/Tools/i46udl99kF6k
data/Tools/i6gUn1U66Ys5
data/Tools/iLl74gmDlFu4
data/Tools/iMEUd5pIXPYw
data/Tools/iMSQa2ftUS0I
data/Tools/iVZGn05PxQJ6
data/Tools/iafGtm3VNW6O
data/Tools/iajzAtCt8mJL
data/Tools/iax648H45sFF
data/Tools/ieCFJGr2W5ej
data/Tools/ij6lgWjLcAP8
data/Tools/ik2DbGpnJTzi
data/Tools/imws5lgHL3BC
data/Tools/inpMXDIHai3i
data/Tools/ipdEDtU5wSDI
data/Tools/ixOvLh02nWuI
data/Tools/j1gWLVIzb2Mb
data/Tools/jD69aYZ1eYTz
data/Tools/jHWJfIFpHBiT
data/Tools/jKU76VrAg8VI
data/Tools/jUhmHtAtdDB3
data/Tools/jVffdCxWlAfS
data/Tools/jVloBY9upt8B
data/Tools/jXw9ZtRsyrLr
data/Tools/jfnScgZhKab0
data/Tools/jiYJh5x3HzmJ
data/Tools/jm7HuE8rd1qx
data/Tools/jnYckpExbgoG
data/Tools/joAbI3Ol2Vea
data/Tools/jqLSAJe7PIQC
data/Tools/js9Ui5K3TfVe
data/Tools/jvc2sf9HFzNE
data/Tools/kBCEEQJpaa8P
data/Tools/kDZtL5HAxR8w
data/Tools/kDa3ZjKI2ghO
data/Tools/kLDjqf9QL1JF
data/Tools/kM0huJifP2QM
data/Tools/kNZqjZD0Bua6
data/Tools/kQkSipvs1WzW
data/Tools/kSOVHiTPy6tw
data/Tools/kWvqHMAoA89K
data/Tools/kXxU1dKnbPrG
data/Tools/ka8roZBojbSe
data/Tools/kdc0EDHqyuoz
data/Tools/kk2Idvy2ocGv
data/Tools/klpFHv2eKj5h
data/Tools/kmbR7SkZnCsG
data/Tools/knGLYwGd7Xyu
data/Tools/kwlcRdAVbK8q
data/Tools/l0AqSqbjqm5x
data/Tools/lE6lEE2mHI9a
data/Tools/lItJr8T2aqnC
data/Tools/lLKxgxnhbinA
data/Tools/lMB9B5mCxpw1
data/Tools/lMrPqypThu1z
data/Tools/lQkcDIQXv9oI
data/Tools/lRVryrqAsbU7
data/Tools/lSiOtG692BY9
data/Tools/lUdd70qFDTNi
data/Tools/lV7Yk78D76k8
data/Tools/lZsAeVTTzxAP
data/Tools/lajC3CzE4hes
data/Tools/lkJ0YE4OILzQ
data/Tools/lleu85LICGN8
data/Tools/lqclNiGme64b
data/Tools/m0BnHj1W61e2
data/Tools/m1h9j6D7EFsG
data/Tools/m4I5I9TIs4hz
data/Tools/m9pJqkVtrXGE
data/Tools/mEyNIttmj2Nq
data/Tools/mMewQVDP04UV
data/Tools/mOprymOuPohz
.ps1
data/Tools/mT0PVWbWSHXH
data/Tools/mW4FEkoDfDuX
data/Tools/mZRG6CX4sGRQ
data/Tools/maghpvG38d79
data/Tools/mgjGsKgJhcYB
data/Tools/mlsF7cKWO0uD
data/Tools/mxeyx1k6n0w9
data/Tools/mzxiSjs0dvgE
data/Tools/n0YgXc5VD0gf
data/Tools/n2ZZ1IVpPEyX
data/Tools/n2tYg8NJ4KOg
data/Tools/nGMzMGoXOFAM
data/Tools/nHy8XYpqtScx
data/Tools/nLiBY5RTe3Bf
data/Tools/nM3cOdXKKZm9
.ps1
data/Tools/nQl4KUAjQ2tl
data/Tools/nmJpWHowxFyL
data/Tools/nosWXTp3zFji
data/Tools/nrkhLAnvAq5h
data/Tools/nuhuguYdMozF
data/Tools/nxsjjcKvlPOm
data/Tools/o1JAcPqHClqo
data/Tools/o2ZDhraZ6Xl2
data/Tools/o3H1TRguvs2H
data/Tools/o447tdQUf9es
data/Tools/o4dsX1nGVQqU
data/Tools/oDGOOkxCsfZR
data/Tools/oF0RQqYNtzXa
data/Tools/oFd7BcWbxdJC
data/Tools/oFenDebanZxv
data/Tools/oFtLigO2MetJ
data/Tools/oNpssY6tULoJ
data/Tools/oROqDfgJiryI
data/Tools/oTpRWtWVLLJw
data/Tools/oUhbZkdB5jJD
data/Tools/oVM583Ndp16C
data/Tools/odWOpeIpYsMS
data/Tools/of4deKDHWhCD
data/Tools/onInmjKhsNSh
data/Tools/oqdoUuF4m5fk
data/Tools/orOtLR57JrEm
data/Tools/orlg4l3s3xj4
data/Tools/otu8pKHewyZ0
data/Tools/ox1PixSNPUsd
data/Tools/p5fBhFPEBL7b
data/Tools/p7OKb1gK4PD3
data/Tools/p8VYy07vLbsT
data/Tools/pB4XOTVOl8Y5
data/Tools/pC7LkZKuWSnR
data/Tools/pEHCTnm3x8Pt
data/Tools/pEsxS5xfdVXI
data/Tools/pMAV6coxIa9w
data/Tools/pPE5cf5UdqOB
data/Tools/pQoX5SL51dae
data/Tools/pZGZMIUogcCS
data/Tools/pamU8DcXX90A
data/Tools/pbGOIc4SSEbI
data/Tools/pcLJxYGn8sWj
data/Tools/pdBdy6EZzI2j
data/Tools/pfEsvlfiP0yr
data/Tools/ph9HhOWMcxNW
data/Tools/pqJAVbaQ8FpY
data/Tools/pv1nWfOsa90B
data/Tools/q1082Ax4KwUA
data/Tools/q7Kn8jOYOpyf
data/Tools/q9mWUlFb4Asv
data/Tools/qM5tUxcisz3Z
data/Tools/qkdxNhsNFyAa
data/Tools/qpKRjyjnqpMU
data/Tools/qs2GpEZ0jK7p
data/Tools/qtxdVi4XqdDL
data/Tools/r0jmVYQDtbUl
data/Tools/r463uR5560Fr
data/Tools/r4gB4y5wFBpl
data/Tools/rCh7bh5qfxuL
data/Tools/rRupWaIdJeAV
data/Tools/rSfXMArpzZkE
data/Tools/rhnMEfGKBeG2
data/Tools/rp2ltvqPmffv
data/Tools/rq0RUAXhih5j
data/Tools/rqsz8s3VaJ8p
data/Tools/s3xWVc9r3WuD
data/Tools/s73hLHHUegLN
data/Tools/s8AHBSYeWoVJ
data/Tools/sE9iesxwXUWj
data/Tools/sKqUFY43BPop
data/Tools/sL7bnGnWeZKg
data/Tools/sMCHVePG1o2F
data/Tools/sPVy8E3ZdfAp
data/Tools/sTQcnNPHUNTq
data/Tools/sW0s51typOaW
data/Tools/sYaPcOsDWXWw
data/Tools/sZHwE354Ww9K
data/Tools/sgm2yMm9fBw3
data/Tools/sjAog6EXJ9O1
data/Tools/sk9wbdQjRZTj
data/Tools/slMDowD8aCE3
data/Tools/spkMywQu26Tn
data/Tools/spqN9tH4pFiF
data/Tools/sttjXxxYsHuo
data/Tools/sucrN7TMp8Up
data/Tools/svYFqDryIpSI
data/Tools/sw8SURmPn7JZ
data/Tools/szl6tVPur1xT
data/Tools/t9d4lxtcftrH
data/Tools/tCdHHgAyVZCU
data/Tools/tDGaUdrqO91X
data/Tools/tFKCWLPXTGRG
data/Tools/tIWnCEHtMrss
data/Tools/tKIKx4F1lTFo
data/Tools/tNGuDHyVPHrH
data/Tools/tNPUccdHmGzx
data/Tools/tNyXW730ZZIr
data/Tools/tUKtij785Zsi
data/Tools/tXEJ5mfSJiX5
data/Tools/tY9ewspF2F3y
data/Tools/tfI2tN2yUBYX
data/Tools/tgF7xMAHeFNY
data/Tools/tiG6aIcw2vG7
data/Tools/tlco1m0arU6R
data/Tools/tmcnTqajyv43
data/Tools/ts17Izk74Tiw
data/Tools/tyCW4mjpfA0k
data/Tools/u9BFlFpZJRAF
data/Tools/uBlA7IArjAbG
data/Tools/uDRhhyf2aok0
data/Tools/uFj8RsfPRGLX
data/Tools/uFlNb3wZsfqM
data/Tools/uLjZZ4XnUxsf
data/Tools/uLmCS7zoQ4cR
data/Tools/uLv4vm9okLpG
data/Tools/uMmY6dbfX6JP
data/Tools/uMoefrDFhwoy
data/Tools/uOS1AIgapjrB
data/Tools/uRkpyC05gSzM
data/Tools/uV9AN91EbvQO
data/Tools/uatT6f1ixQC5
data/Tools/uc9vewahyOS2
data/Tools/ueaBL0tsc7iD
data/Tools/ugLdMVO8YbZk
data/Tools/ugswqOt3QLXv
data/Tools/ukuv3yqpqjAT
data/Tools/upbo58AFrv9D
data/Tools/uwGXfOUtY7Uw
data/Tools/v1Eo2vEcdHN1
data/Tools/vEP44tpJb0xg
data/Tools/vH06UyVET6Ii
data/Tools/vMdFiFtmDPRZ
data/Tools/vNnGskoDEYGQ
data/Tools/vRSodReaRDPV
data/Tools/vUfOSCT5BgjA
data/Tools/vgOdaklJsDJr
data/Tools/vjqVc2mP2gEJ
data/Tools/vmwsJkrA22EF
data/Tools/vodX3W5On0vS
data/Tools/vr0drfpHIyf5
data/Tools/vxB2xr5jHYEH
data/Tools/w07oV3KD62qq
data/Tools/w24w4RdpMupL
data/Tools/w7tRyp8Y7rgv
data/Tools/wE7q2lIkgiDp
data/Tools/wSam9InQb2WU
data/Tools/wUTHPR01sxxD
data/Tools/wXhnC4d83wdu
data/Tools/wc2mh0TOXrhr
data/Tools/wdN1pJVGn2Yo
data/Tools/wdm254vZjMBC
data/Tools/wgvdVNoHVrOG
data/Tools/wk14gg6mIuDQ
data/Tools/wo83ZiJ5OM37
data/Tools/wuQhZ27Q44L2
data/Tools/x0LFg3W6ef14
data/Tools/x25QhJ9sQc6c
data/Tools/x2DFr4B6VDTu
data/Tools/x3iIOIaFyMp7
data/Tools/x8GaqPQhRHvW
data/Tools/xAotKCEB5EV1
data/Tools/xFFIeEIpa4gD
data/Tools/xVNEt01a0u6J
data/Tools/xY4aTeHanKlb
data/Tools/xvn0bgMdAK8q
data/Tools/yBX3cpKZ5n6B
data/Tools/yC5grNjFV5pF
data/Tools/yJyHAVP3VfvI
data/Tools/yUCmoMqsuIeI
data/Tools/ybg4Bv6rAd8u
data/Tools/ydb5Qla3ZjaM
data/Tools/ygVMrqvclGxg
data/Tools/yivcm9MXVapC
data/Tools/yjTtkIIpwbIa
data/Tools/ylS2I0Fvy2nZ
data/Tools/yqlf9aieHFgE
data/Tools/ytiJwJxDDBxV
data/Tools/zHkVhIHm4aA4
data/Tools/zO5MzGe0bS0V
data/Tools/zOms5WAe5UZC
data/Tools/zRdKqlHTS2xe
data/Tools/zT4O8u57aDRz
data/Tools/zTgi4iH1Vp28
data/Tools/ziGDzdWINUoC
data/Tools/zyb2Aavr8OXP
data/Transient Processor_x64.dll
.dll windows x64

8164de42bba62457d8a536b18db49440

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7c:98:c5:c2:18:fd:30:00:46:d8:a3:1d:90:e5:34:7b:ed:35:07:07:7f:72:3b:04:34:97:ba:dd:66:5b:97:9a
Signer

Actual PE Digest

7c:98:c5:c2:18:fd:30:00:46:d8:a3:1d:90:e5:34:7b:ed:35:07:07:7f:72:3b:04:34:97:ba:dd:66:5b:97:9a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetMalloc
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage
ShellExecuteW

user32

SetMenuItemInfoW
GetMenuItemInfoW
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetDCEx
PeekMessageW
MonitorFromWindow
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CountClipboardFormats
CallWindowProcW
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

msvcrt

memcpy
memset

advapi32

RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

imagehlp

ImageRvaToVa
ImageDirectoryEntryToData
ImageNtHeader

kernel32

GetFileType
SetFileTime
RtlUnwindEx
DeleteAtom
GetACP
IsBadWritePtr
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
ExitProcess
HeapAlloc
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
RtlUnwind
GetCPInfo
GetStdHandle
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
AddVectoredExceptionHandler
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

StgCreateDocfileOnILockBytes
CoCreateInstance
CoUninitialize
ReleaseStgMedium
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

msacm32

acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
GetBitmapBits
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 65KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Tuner_x64.dll
.dll windows x64

df8c6f87295e85f27ba90f7310b85575

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

31:c2:35:e8:0c:1a:61:27:08:53:d4:a5:2c:d7:e3:b1:56:8e:73:ed:66:e8:b1:c2:f8:87:ea:08:87:be:60:ba
Signer

Actual PE Digest

31:c2:35:e8:0c:1a:61:27:08:53:d4:a5:2c:d7:e3:b1:56:8e:73:ed:66:e8:b1:c2:f8:87:ea:08:87:be:60:ba

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetMalloc
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage

user32

SetMenuItemInfoW
GetMenuItemInfoW
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetDCEx
PeekMessageW
MonitorFromWindow
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CountClipboardFormats
CallWindowProcW
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

msvcrt

memcpy
memset

advapi32

RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

imagehlp

ImageRvaToVa
ImageDirectoryEntryToData
ImageNtHeader

kernel32

GetFileType
SetFileTime
RtlUnwindEx
DeleteAtom
GetACP
IsBadWritePtr
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
ExitProcess
HeapAlloc
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
RtlUnwind
GetCPInfo
GetStdHandle
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
AddVectoredExceptionHandler
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

StgCreateDocfileOnILockBytes
CoCreateInstance
CoUninitialize
ReleaseStgMedium
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

msacm32

acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
GetBitmapBits
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 65KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/Ubuntu-R.ttf
data/UbuntuCondensed-Regular.ttf
data/VFX Color Mapper_x64.dll
.dll windows x64

2c069a3dd248886f586dacf4560566e7

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ee:df:1a:aa:2d:da:a8:1b:85:0a:72:02:39:3c:26:29:46:05:65:a2:a8:08:77:c3:8e:43:21:75:1f:71:18:d7
Signer

Actual PE Digest

ee:df:1a:aa:2d:da:a8:1b:85:0a:72:02:39:3c:26:29:46:05:65:a2:a8:08:77:c3:8e:43:21:75:1f:71:18:d7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps

comdlg32

GetSaveFileNameW
GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
SHGetPathFromIDListW
DragFinish
SHGetFileInfoW
DragQueryPoint
SHGetFolderPathW
SHGetMalloc
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage
ShellExecuteA

user32

SetMenuItemInfoW
GetMenuItemInfoW
SetCaretPos
DefFrameProcW
CharToOemBuffW
ScrollWindowEx
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
DestroyCaret
CharLowerBuffW
PostMessageW
IsZoomed
SetParent
DrawMenuBar
InvalidateRgn
GetClientRect
IsChild
ShowCursor
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
GetWindowTextW
SetForegroundWindow
IsDialogMessageW
DestroyWindow
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateIconFromResource
SetScrollRange
DrawTextW
MessageBeep
LockWindowUpdate
RemovePropW
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
ValidateRgn
GetWindowDC
DrawTextExW
CharNextExA
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
CreateWindowExW
GetDCEx
PeekMessageW
MonitorFromWindow
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
GetSystemMetrics
CharUpperBuffW
SetClassLongPtrW
GetClassLongPtrW
SetClipboardData
GetClipboardData
ClientToScreen
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
GetClipCursor
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
CreateCaret
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
GetDlgItem
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
SetCursor
CreateIcon
RemoveMenu
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CountClipboardFormats
CallWindowProcW
CloseClipboard
DestroyCursor
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
DeferWindowPos
HideCaret
EndDeferWindowPos
FindWindowExW
MonitorFromPoint
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowRect
InsertMenuW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

advapi32

RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

msvcrt

memcpy
memset

kernel32

GetFileType
SetFileTime
RtlUnwindEx
DeleteAtom
GetACP
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
ExitProcess
HeapAlloc
CreateTimerQueueTimer
GetCPInfoExW
GlobalSize
RtlUnwind
GetCPInfo
GetStdHandle
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
ChangeTimerQueueTimer
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
GetDiskFreeSpaceExW
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
GlobalLock
SetThreadPriority
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
DeleteTimerQueueTimer
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
IsDBCSLeadByteEx
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
GetComputerNameW
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

shfolder

SHGetFolderPathW

ole32

StgCreateDocfileOnILockBytes
CoCreateInstance
CoUninitialize
ReleaseStgMedium
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

msacm32

acmMetrics

gdi32

Pie
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetTextColor
StretchBlt
ExtSelectClipRgn
RoundRect
SelectClipRgn
RectInRegion
RestoreDC
SetRectRgn
GetTextMetricsW
GetWindowOrgEx
SetPixelV
CreatePalette
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
GetBitmapBits
GetSystemPaletteEntries
GetEnhMetaFileBits
GetRegionData
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
GetObjectW
GetWinMetaFileBits
SetROP2
GetEnhMetaFileDescriptionW
ArcTo
Arc
CreateRectRgnIndirect
TextOutW
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EqualRgn
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
SetDIBColorTable
GetDIBColorTable
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
GetClipRgn
IntersectClipRect
Polyline
CreateBitmap
CombineRgn
SetWinMetaFileBits
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
CreateDIBSection
LineTo
GetRgnBox
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
OffsetRgn
SetBkColor
CreateCompatibleDC
GetDCOrgEx
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 65KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/appInfo/09BHTFDSmD8y
data/appInfo/0EGdYl3ksjjL
data/appInfo/0KngHvFnMPk1
data/appInfo/0MoaVsFXxHX5
data/appInfo/0QgYoObIIvrN
data/appInfo/0REvdwvDEGbv
data/appInfo/0RdnRbn3JEzn
data/appInfo/0X80Kd5X59Wz
data/appInfo/0fWeLPsXt8ie
data/appInfo/0ijD943mrRDd
data/appInfo/0q7bJeeaNGsu
data/appInfo/0wr9EogtuEM3
data/appInfo/11FmwGJCpGyA
data/appInfo/15Xbq6OCTY2Z
data/appInfo/1BvauBCs5eOv
data/appInfo/1CYarBvnP7Ur
data/appInfo/1CkcZIOv5SKS
data/appInfo/1QpSq64vaBNi
data/appInfo/1TrBb22C2xJX
data/appInfo/1UN90WnLqRQm
data/appInfo/1fLPN0KaErse
data/appInfo/1npOKIKvDIlf
data/appInfo/1oVCwX70NDLb
data/appInfo/1opfP705glbI
data/appInfo/1sq2x2k2IKsl
data/appInfo/24zcneTRyDoa
data/appInfo/2AXXZJsgGIrz
data/appInfo/2B4CaWriKa84
data/appInfo/2BL26e1z0Psl
data/appInfo/2FgCVGHhT0gz
data/appInfo/2H9umYYoSPrG
data/appInfo/2HHR3sfp2dBo
data/appInfo/2JtqpYsz0gXr
data/appInfo/2NChfozusu81
data/appInfo/2OrOUP2HAhFW
data/appInfo/2P4Qn35yJslK
data/appInfo/2Sew2NIgE4sT
data/appInfo/2TUiuWOx2Cui
data/appInfo/2Y4hebP0UtCA
data/appInfo/2a1RSET0zEgd
data/appInfo/2esI00qKK42D
data/appInfo/2jvHfWq8K1JT
data/appInfo/2kTGyQ3HIlfW
data/appInfo/2qWvyWVG3m6G
data/appInfo/2xi9Dv2Pg4pb
data/appInfo/2z0x0CO0AGFM
data/appInfo/3ESvd6MTzeFW
data/appInfo/3G1FnAw0IokE
data/appInfo/3MVdC23P5Owj
data/appInfo/3SSvMqT2hFcG
data/appInfo/3WqiSpiHPcpm
data/appInfo/3cGdE1RJ5Iiq
data/appInfo/3i2sJpsVQZC6
data/appInfo/3t2wBdZgUlx0
data/appInfo/3vRab3jg8VEf
data/appInfo/41Lq7FaWANW7
data/appInfo/42jiSOEaLNdZ
data/appInfo/43Blf2J5uz2I
data/appInfo/43bCesYXvEhc
data/appInfo/45w4PRFgNyiw
data/appInfo/46mTPB8fbbh8
data/appInfo/4DHU5YRObaHj
data/appInfo/4HMAmaaKEhd5
data/appInfo/4JVaZ6SBtAFN
data/appInfo/4NfBwA9uVYOG
data/appInfo/4OIryfTY8R4w
data/appInfo/4USGheh2QKD1
data/appInfo/4W1ck2FpRwPW
data/appInfo/4Ya3eVJKROCb
data/appInfo/4ggHJU09qL5J
data/appInfo/4jyC6YLI2lAi
data/appInfo/4opIt5NWOxwU
data/appInfo/4qMcH3jpHlTU
data/appInfo/54lgDYJMIRYG
data/appInfo/59Gemk6ZQt08
data/appInfo/5JPsMHlAafDC
data/appInfo/5Mx1IgWjEKym
data/appInfo/5NIIuWEckXlh
data/appInfo/5Ors0guSPPOb
data/appInfo/5RTcFpZwIeER
data/appInfo/5WLt944zBTUJ
data/appInfo/5ZaBVKKKfDnM
data/appInfo/5acvVbbeIanZ
data/appInfo/5bj9n6gyLjwa
data/appInfo/5f642PPfFB95
data/appInfo/5iMB3wjoIqXN
data/appInfo/5kT6ZyxLQU4T
data/appInfo/5xZIDSzOz49D
data/appInfo/5zkxeSOKGtB3
data/appInfo/623DOGUwnlo6
data/appInfo/62yFQbOabA7r
data/appInfo/67KjdSJdxF3j
data/appInfo/69pVDT0i0Ph6
data/appInfo/69wKJtWfPbXw
data/appInfo/6Bd9oOyzEWTY
data/appInfo/6I0w5NQ4AEZK
data/appInfo/6OnGtYn3jw7j
data/appInfo/6TDmOmzmv6uz
data/appInfo/6TTmmjFc5cHa
data/appInfo/6URVrG0uk2K7
data/appInfo/6cyCuZwA0rmR
data/appInfo/6ePyEXfpyorp
.ps1
data/appInfo/6fBXYOPSUOY9
data/appInfo/6qIsJFiM9jvZ
data/appInfo/6y4QDnYAMn5x
data/appInfo/6yb2vScuA75I
data/appInfo/710kSE6H1D3i
data/appInfo/74xMUFcZhVGo
data/appInfo/77dCI3KI6vuN
data/appInfo/7PTHokm7DZ8e
data/appInfo/7Rfr8bP3ZrFu
data/appInfo/7TMNLBizQKaw
data/appInfo/7X31JqcJu18C
data/appInfo/7fgCMkA8DFNL
data/appInfo/7jxilcSU01XO
data/appInfo/7pzBGamHo2ng
data/appInfo/7tFq6gn23xKh
data/appInfo/7uUFeEwEZywM
data/appInfo/7zB0drtwrXD1
data/appInfo/82noqC3zffBJ
data/appInfo/83FJQfL7kQLv
data/appInfo/86wunSfAT0rw
data/appInfo/8B6VJzl2DGyc
data/appInfo/8FbaBDWssqh0
data/appInfo/8L3c1M6LSp1u
data/appInfo/8LHJJiEb9UVN
data/appInfo/8TIBd8bty7SW
data/appInfo/8ThkYengdfJz
data/appInfo/8ZWCmaGmUe3B
data/appInfo/8ZZEcOc0eLBQ
data/appInfo/8ace091zj7v5
data/appInfo/8gdHRKpZy3g2
data/appInfo/8kX34ONVdHlc
data/appInfo/8q1J1j501Nx4
data/appInfo/93USarAIlcdd
data/appInfo/94x1XIbxYovV
data/appInfo/96okqtKboIql
data/appInfo/99NkLcx8vgPi
data/appInfo/9BDJ4xCUSbji
data/appInfo/9CTrccWeeP4v
data/appInfo/9EDYcIECPE47
data/appInfo/9JjKimqSAdPa
data/appInfo/9N8eTjstCIaL
data/appInfo/9PiCeOjnJpHS
data/appInfo/9PlQdS807JDs
data/appInfo/9XfSnI1HpJr4
data/appInfo/9ZiPOW2h2Jh6
data/appInfo/9im0UjZLVsLM
data/appInfo/9mEz8gHZyUjw
data/appInfo/9msIHi6EWN6Z
data/appInfo/9uEKwGIbabt5
data/appInfo/A7k8hAlwe8SX
data/appInfo/AH2Kx11Q65Hx
data/appInfo/AIRESNfaqQ8p
data/appInfo/APX9FSOuN1aF
data/appInfo/AQsKnVEIEtD3
data/appInfo/ASh4rJclq8AQ
data/appInfo/AXFguS9Msw7h
data/appInfo/AnbGR4AwcWP0
data/appInfo/AnszPFjO3vxm
data/appInfo/AvBhHIj3BPbM
data/appInfo/AwyS8PKIhn8b
data/appInfo/AzvpArmz7wqa
data/appInfo/B6RCSEdAYj48
data/appInfo/BAbo1pm3tkVI
data/appInfo/BAjdS5YyKKyQ
data/appInfo/BBGYKaelb4n9
data/appInfo/BFTQIgqcET2I
data/appInfo/BOqy5aggF05i
data/appInfo/BRYMXR5S8C84
data/appInfo/BXbeGHQZzGYW
data/appInfo/Ba7jwZf3wqmK
data/appInfo/Bb7f8JqbFxjX
data/appInfo/BduP4L15uz0B
data/appInfo/BlJsTInDvCWX
data/appInfo/BpVzjJh8d7Rc
data/appInfo/ByNlLtTyHPJj
data/appInfo/ByygeqZ4RG1w
data/appInfo/C2ms5JzTlm9S
data/appInfo/C6mAFm4yY8kY
data/appInfo/C8Km1pJ6eMYw
data/appInfo/CFurlF5VJpTQ
data/appInfo/CKXJ6uQnhmNp
data/appInfo/CKdaWKA50A37
.ps1
data/appInfo/CMbmoOn99URi
data/appInfo/CONb6ZAKVxsn
data/appInfo/COsA1JLAli2l
data/appInfo/CVMOSDA5igIu
data/appInfo/CVeygWnaJSyb
data/appInfo/CWfqul88Kq5P
data/appInfo/CalNprJS6vNj
data/appInfo/CaxhzgN8nQhT
data/appInfo/Ce9ftjSwC5ui
data/appInfo/Chj4M4zOARaI
data/appInfo/CoOFJ4xl36vy
data/appInfo/CuKrcnSLrHVU
data/appInfo/Cv6yaWTWnGIX
data/appInfo/CvOuhn8kzOOd
data/appInfo/Cz8b8GLQ8g99
data/appInfo/D0BhQAaWv9dk
data/appInfo/D4Vs8Al2TW9T
data/appInfo/D4toOTGK57sD
data/appInfo/DDUaxZmbDFSb
data/appInfo/DFf9Po0EuVZb
data/appInfo/DIuxvGe7OO3M
data/appInfo/DKFBkYU1PfsZ
data/appInfo/DKqATdSwpi1h
data/appInfo/DN1qU3kdGehs
data/appInfo/DQU37wMPFc6F
data/appInfo/DSODb2IEo2Br
data/appInfo/DXHRAUhWh5KJ
data/appInfo/Df3wvTWyPgrh
data/appInfo/Di2WvDXtyt0v
data/appInfo/DnFqCalS5JeJ
data/appInfo/DrVE2wCUOyqC
data/appInfo/Drq18Sn3mcWA
data/appInfo/Dy8sjYW9XOYC
data/appInfo/E2QnV0YTDoFO
data/appInfo/E3zqdKzfKkxh
data/appInfo/E4PGrnbNbMes
data/appInfo/E5H82PFaTex1
data/appInfo/E60h5qNMLSgg
data/appInfo/E92tZ5zXSJ7s
data/appInfo/EGdOUTXmhI7B
data/appInfo/EGlTWEjyVBLe
data/appInfo/EK850koK1WSe
data/appInfo/EOaWwmZCAgju
data/appInfo/EPN3IQ9i1gRh
data/appInfo/ERYHC2OupciN
data/appInfo/ETnO6H0pNvAN
data/appInfo/EUKCE2qP0gcw
data/appInfo/EV6HRX2qrmGi
data/appInfo/EZ1JwVSfcG4i
data/appInfo/Ec7B8xmOBxnn
data/appInfo/EfaRYa37cJwA
data/appInfo/Es21azma9g8S
data/appInfo/EvIIJMUEFoFR
data/appInfo/F4BBbyODPg3X
data/appInfo/FCM39Ew8oV1F
data/appInfo/FCwB6UBzhRux
data/appInfo/FFFzLVle0sz8
data/appInfo/FFSIYk0vug5i
data/appInfo/FG9i1Y8zWWaL
data/appInfo/FPNAujSsHolV
data/appInfo/FRYTTC6mIQcr
data/appInfo/FXX8QqccHI0N
data/appInfo/FYd8R1BbV9aD
data/appInfo/FYk7ZX1G4wus
data/appInfo/Ffsh56UKcL4A
data/appInfo/FiCX5875628I
data/appInfo/FlO2ag7OQ6xM
data/appInfo/FqKfkY7CpEJ2
data/appInfo/FupnAnoh29Wn
data/appInfo/FvUDoc0O7BdP
data/appInfo/Fwso7PJ6X3JS
data/appInfo/G4azF7lTA9oc
data/appInfo/G53fAUc8c9qY
data/appInfo/G7WIQVDebfC7
data/appInfo/GBHsc9g9qwZX
data/appInfo/GFk6eCAbGyYa
data/appInfo/GLsLZ9DVASW5
data/appInfo/GLxtrpA1mq0x
data/appInfo/GQKqhtKK9Zh1
data/appInfo/GRyVjl82qtqS
data/appInfo/GTlS9QurZbYb
data/appInfo/GVDBcEPXoJjG
data/appInfo/GXUFmpQ63yxi
data/appInfo/GeKd3xWIRV50
data/appInfo/GnqLXyTzPg37
data/appInfo/H5TrLPQ8uqGf
data/appInfo/H8m00zvgYby7
data/appInfo/HDDFisdY70lA
data/appInfo/HDHigNrP12vY
data/appInfo/HIoI0ANb2bjq
data/appInfo/HUC6yiWzyHQT
data/appInfo/HYhVGVMnxzbY
data/appInfo/HgEw0OrQJhGX
data/appInfo/Hkyw1vthYCgx
data/appInfo/HoVQeIAqFrlx
data/appInfo/HpLwLNAYebQ7
data/appInfo/HpYGINpKopCX
data/appInfo/Hs9F4inqrRPy
data/appInfo/HxbBy6nPGyCZ
data/appInfo/I72uUL23zqxo
data/appInfo/IAOdu8UmMCOt
data/appInfo/IIRmKtqGiT0L
data/appInfo/IQwp4LnYKgyW
data/appInfo/IWYwou7Df6tE
data/appInfo/IZQ1NIkTDrr6
data/appInfo/IcRYH3upcb2J
data/appInfo/IcYVaW6KB8F4
data/appInfo/IiFHKgFF4tYg
data/appInfo/Ix791kxw7cSd
data/appInfo/Iz7biJ3YPxxu
data/appInfo/J4yv9XGH1B1R
data/appInfo/J7Dd35WEaJj2
data/appInfo/J9FtT1EH8WLd
data/appInfo/JAeOFq89DP0x
data/appInfo/JBJWGSAFrSRE
data/appInfo/JHrg0i8bta8s
data/appInfo/JJ6ComX6PVyM
data/appInfo/JN2oj0wA4DHs
data/appInfo/JOq2PiZsAbid
data/appInfo/JXSRDoHcnib8
data/appInfo/JbJj6zRXXDoz
data/appInfo/Jc5GeGYg44gT
data/appInfo/JcIwh8XpxoSa
data/appInfo/JjAwRi9YGEag
data/appInfo/JrA2OLR5weQi
data/appInfo/JrZTF3osQVKw
data/appInfo/K5ufF1dCMgMG
data/appInfo/KAnuX20upuhi
data/appInfo/KD8DNd6LGD7p
data/appInfo/KDZCcZYiv2Ev
data/appInfo/KDmsPSnLn7FR
data/appInfo/KFdCbyWQJnaQ
data/appInfo/KHoHarubn3Rm
data/appInfo/KJnsZmgSIkSO
data/appInfo/KLW2yZLd4fuo
data/appInfo/KQSBGJArBS7f
data/appInfo/KR3mcjzJYIHY
data/appInfo/KROgioDkJueo
data/appInfo/KSdX4TtjUOHN
data/appInfo/KU2whuDJ7gpi
data/appInfo/KYDanNd0Gs07
data/appInfo/KfEs0K2ZZewj
data/appInfo/KjENzQ5tiPiK
.ps1
data/appInfo/Kl8wfQZkzEDM
data/appInfo/KrpVnR9vekN2
data/appInfo/KtUKUglUDXsI
data/appInfo/L1YmfvH2jCF7
data/appInfo/L29RbL8MQxp5
data/appInfo/L40FtHz8K3lU
data/appInfo/L9Te772Bm5wA
data/appInfo/LGKJfUqOksyb
data/appInfo/LN7dHk04M5nG
data/appInfo/LV60yhjqRGbv
data/appInfo/LVM9G2oRgn7I
data/appInfo/LXJlBzl69hq0
data/appInfo/LavmGYBYKpbN
data/appInfo/Lb1Z4Fo2L81A
data/appInfo/LhXs6SSAe2VZ
data/appInfo/LiAU5pvbpAUj
data/appInfo/Lk6u8J13nl8n
data/appInfo/LkrHZMUkQJkf
data/appInfo/LmshwIDi2Xc2
data/appInfo/LqpPE6fAEZYj
data/appInfo/LxUTPpCmfraB
data/appInfo/LyQW5cwuJpv2
data/appInfo/M3ijMoHP8jsM
.ps1
data/appInfo/MCPDKtYSdUn9
data/appInfo/MLmRafnEb6mf
data/appInfo/MNI4scEWJ0HI
data/appInfo/MP0CtGSILR38
data/appInfo/MVrqCVKFBhLn
data/appInfo/MaTAxRjTRQgc
data/appInfo/MauwfxriSSfJ
data/appInfo/McJK2FwOiQ9d
data/appInfo/Mjif7o3rJMBB
data/appInfo/Ml5hZbXLWmAj
data/appInfo/MrtlA36A80yh
data/appInfo/Msg30FOLZfqm
data/appInfo/MuQx03kB7I3T
data/appInfo/Mv4SBNmFaJio
data/appInfo/N3iFrKa6aoEZ
data/appInfo/NAjRY1dHq7CM
data/appInfo/NBmi5xge3DIk
data/appInfo/NL1w7t0r13Ui
data/appInfo/NLpCN1B1UB5B
data/appInfo/NevWCH547aLg
data/appInfo/NgLj4bdbOO52
data/appInfo/NlASMrfqtQVT
data/appInfo/NmQXi0wu5420
data/appInfo/NuFVLQDuNFJM
data/appInfo/NxEfZvZx9D3v
data/appInfo/O4jMKPHAb59y
data/appInfo/O4xlsPaUuYpw
data/appInfo/O8GXO5LUsVm9
data/appInfo/OBoeuyKk3Vt3
data/appInfo/OEz2wsVs37Nv
data/appInfo/OFrChanZdcPD
data/appInfo/OLJa5FI92Mel
data/appInfo/OWOZn8kAvCDU
data/appInfo/OabvJtCBjGKe
data/appInfo/OhOb9oMEjtG9
data/appInfo/OkLa6Syv7205
data/appInfo/OkpxdnJaOVmT
data/appInfo/Omx9it0mgDbm
data/appInfo/OqX2ua4cpeVt
data/appInfo/Ou9LJw81ctDX
data/appInfo/OwuwZPkR6aFq
data/appInfo/P0Gp7WiLs96m
data/appInfo/P1V0DyukIO1M
data/appInfo/P2pErV2rD69Q
data/appInfo/P3yX7wQf9hA4
data/appInfo/P5I13boVvVjc
data/appInfo/PB8ZmICnZVPe
data/appInfo/PCVifJw99Mpz
data/appInfo/PES0gVNhe18O
data/appInfo/PF8nP0XnqRrd
data/appInfo/PFslNsk0JBav
data/appInfo/PGgkfMQwLPpV
data/appInfo/PfZFasCc9FqU
data/appInfo/Pj4KxQwOsEQG
data/appInfo/PjJo7V0h99QY
data/appInfo/Pl7EEIKb25gf
data/appInfo/Pm9eh7quYdNJ
data/appInfo/Pou3huKej8bR
data/appInfo/PvfQzOhngzEL
data/appInfo/Q0cbgroy3WtH
data/appInfo/Q6U0tG7nRN05
data/appInfo/Q8ObTLgC37rs
data/appInfo/Q9LWsPHeQ7sH
data/appInfo/QD5GxhwlOu98
data/appInfo/QPXIsqCBnJbC
data/appInfo/QQliUbfxjyuP
data/appInfo/QZ8NyOX0L5pf
data/appInfo/Qc4Vyia1aQZ9
data/appInfo/Qdop8UFalT7w
data/appInfo/QfJXn31tW4ub
data/appInfo/Qng6jlZaEW08
data/appInfo/QoKC4WEiON6n
data/appInfo/QsV2VNhluBqW
data/appInfo/RJmd4djeYebu
data/appInfo/RKzJxIJYusL5
data/appInfo/RLPLEOlZBaGb
data/appInfo/Rb0VUyRacMmX
data/appInfo/RbPLVqH57M5M
data/appInfo/Rih9HngBsCfA
data/appInfo/RjIpdKjBfur5
data/appInfo/RlH8lPVgTypm
data/appInfo/RzpEjrevMd6P
data/appInfo/S3GVOz89EfYc
data/appInfo/S3ywYNUJV8Nc
data/appInfo/SHUEXuvvJuOi
data/appInfo/SIYIiKLUTRj6
data/appInfo/SJ3jikye7aMo
data/appInfo/SO5kkjCMJJQE
data/appInfo/SRbl7Oul9Mmc
data/appInfo/SaMh2Zr6PfYk
data/appInfo/SdWUczNXfnXH
data/appInfo/SeHZom0WiGXv
data/appInfo/ShB1HqUjkOvx
data/appInfo/ShO0BVLMGRbH
data/appInfo/SiML37WBVvE5
data/appInfo/SikXwZUXYKRx
data/appInfo/Sjgin5M9PYxp
data/appInfo/SjpvK5z26cLL
data/appInfo/SnJHpwztKR1s
data/appInfo/Sr373dHVbo9u
data/appInfo/SreTjMCE5UiY
data/appInfo/StQdDZunGTaf
data/appInfo/Sz5Lq7eYzVHA
data/appInfo/T1CMrDiBB596
data/appInfo/T48s99mfzp0X
data/appInfo/T5CHW7U8wJp5
data/appInfo/T8dqUD4ndgVT
data/appInfo/TH8boYzcLxwj
data/appInfo/TKLC8nvraxLN
data/appInfo/TNFwuVChPlXL
data/appInfo/TfMFw6lvNifq
data/appInfo/Tzv0GLb2xjpt
data/appInfo/U25Dlp3trMIz
data/appInfo/U2aOmf5RB77O
data/appInfo/UAVLnqfyiLNy
data/appInfo/UF5vrj3YdQ0k
data/appInfo/UI3fAix8Gxtt
data/appInfo/UJi8AasDXsMq
data/appInfo/UPNsxhRc50pD
data/appInfo/UQSDfzkPqe7G
data/appInfo/URPdy2V5Ihuy
data/appInfo/URzuITYXF4X2
data/appInfo/USqmRO8cFOyp
data/appInfo/UaE0c5CUCYsQ
data/appInfo/UdFNGxy4CcZz
data/appInfo/UdZt8ulIm5qO
data/appInfo/UdtswFJAxgwI
data/appInfo/UgT2BTScVFCW
data/appInfo/Uidvz9qK8wqn
data/appInfo/UjYDhVvy0QzR
data/appInfo/Uoy7eiJjKZyY
data/appInfo/UqdK9vcFtiFO
data/appInfo/Ur7VmRL3oS8n
data/appInfo/Ut94SjLzDglU
data/appInfo/UtFbrMPE8fk2
data/appInfo/UvxvK9CRTbt2
data/appInfo/UycHnea5DM6y
data/appInfo/V03A7PdEG2BS
data/appInfo/V0iABgzBRjnY
data/appInfo/V4f3bK3cPky5
data/appInfo/V8SGtSiuHFKA
data/appInfo/VCFUzYxnKx8g
data/appInfo/VE2bH3bBBajX
data/appInfo/VI8ALwSnEJeA
data/appInfo/VIBYlpmhm9fu
data/appInfo/VUracGZmKYBG
data/appInfo/VYU7RxEwGpAj
data/appInfo/VabNY2iWa61k
data/appInfo/VlPis9P7y5pE
data/appInfo/VoCkUwgqNTWo
data/appInfo/VocxzvhSMfI9
data/appInfo/VtbKHXu6qwpO
data/appInfo/VwwB2BetiBkk
data/appInfo/W6OxPY7EPpKB
data/appInfo/WCtGvIJm0P9o
data/appInfo/WGQwJbjT2XIp
data/appInfo/WILrJ6p8vyVC
data/appInfo/WLNpucjxvx2e
data/appInfo/WUDjOz5TU6mZ
data/appInfo/WZAUgBLGLDrV
data/appInfo/Wbamrj7YZnRh
data/appInfo/WcJPEFkg984o
data/appInfo/WcP982RiYrp9
data/appInfo/WeHOITeqxImM
data/appInfo/WhWupIRAz1IB
data/appInfo/Wi2zLF31HDNs
data/appInfo/WlW4HrY5aWkd
data/appInfo/Wr8f8JzfoOxS
data/appInfo/WuvlmrTuL7sL
data/appInfo/X97PKrCFF5V6
data/appInfo/XBND8OkOLZPW
data/appInfo/XBuUokCwJi19
data/appInfo/XFcfSwTIp9iU
data/appInfo/XSa9aoHaFT4I
data/appInfo/Xc8LNHhdP0UK
data/appInfo/XcXXoo4B6Lbd
data/appInfo/Xe6wsWYsQTUF
data/appInfo/XfYQiSgIzzjy
data/appInfo/XgdjS6KNk4WT
data/appInfo/Xijgsa8GUx1H
data/appInfo/Xm2YEzqhoMXe
data/appInfo/XqYBi9aHH2um
data/appInfo/Xt7vPMWqjYMW
data/appInfo/Xx7RALH0UPUp
data/appInfo/Xxctb6W1U0zC
data/appInfo/Y8Yq8pW7epV2
data/appInfo/Y9iC8TBICXlv
data/appInfo/Y9mS6Goylfno
data/appInfo/YIEx2xalr1Qb
data/appInfo/YISxxeshAmeq
data/appInfo/YS2jLXqrtpDP
data/appInfo/YS5bBbPK92RB
data/appInfo/YfsZ9byuon8y
data/appInfo/Yjfg8aumEGph
data/appInfo/YkK8YQnYXuYU
data/appInfo/YmWDp7yaEeUa
data/appInfo/Yw6DQhBcCPzg
data/appInfo/YwAH82mjSrig
data/appInfo/Z2siInk7ecG2
data/appInfo/Z8B1dfx0XKYb
data/appInfo/Z8nglLx2wmE9
data/appInfo/ZADk4MHMTvkS
data/appInfo/ZJtA1YrGoEdL
data/appInfo/ZOXlaisGDErO
data/appInfo/ZPln03VoTtmd
data/appInfo/ZaDjRSiwSP8D
data/appInfo/Zc9DESFnSSI0
data/appInfo/ZfruLT7rs510
data/appInfo/ZgCcy6ulCGu3
data/appInfo/ZmYFP5Uu46e8
data/appInfo/ZqDxBx6HXx5z
data/appInfo/ZtQ67i9Zd3ls
data/appInfo/a0QHdeZNS1sT
data/appInfo/a2tfrFS3pMzT
data/appInfo/a51PHzUd9u8f
data/appInfo/a5Aq3K1PZi3A
data/appInfo/a8lprYKE5Ccb
data/appInfo/aDHzFEWssLJF
data/appInfo/aDUwwWFPCwMY
data/appInfo/aGLL8kQGg1EX
data/appInfo/aPqUL5Al7Ex5
data/appInfo/aSDxh5W0L1Iq
data/appInfo/aXVUEB5gJPuY
data/appInfo/aXf1hQINsZwl
data/appInfo/ab1e9jgpUVFO
data/appInfo/ajL8Aeh2hjBX
data/appInfo/amCS6nGXegeM
data/appInfo/anNQyrhGd4W1
data/appInfo/b5GM5lhbjeKg
data/appInfo/b6wrsf5x3yD1
data/appInfo/b7uChXThHAIs
data/appInfo/b874y0Bus35x
data/appInfo/bCiEFMQp3lzQ
data/appInfo/bLNGuRa4tg5M
data/appInfo/bVFqd3TqwC4N
data/appInfo/bYhMrD1p0W4S
data/appInfo/bZkNFnYwUX0h
data/appInfo/bh4oKqTqL6It
data/appInfo/bmX1fJyBwp5D
data/appInfo/buLi6hdm0slM
data/appInfo/bxJ2eH1NIkSA
data/appInfo/bz3QiAkGFgZV
data/appInfo/bzTwbjSgJ1NQ
data/appInfo/c28zIB1uaVzv
data/appInfo/c7ENYlCz51t6
data/appInfo/c7rVm0d4sMH7
data/appInfo/c96o16ms0WuZ
data/appInfo/cCSfoRcElyWp
data/appInfo/cGdkN5oE4BNf
data/appInfo/cL3tKx8CYWB3
data/appInfo/cOqL6g9sVvBz
data/appInfo/cdsBkwjHAVO8
data/appInfo/ciyxL1ZeaQSQ
data/appInfo/ckmyR0jDkFhc
data/appInfo/cmnnrmD62vfJ
data/appInfo/cqMZdxPpuzp0
data/appInfo/csIXL473AXo6
data/appInfo/cvgFEG1c2IJ2
data/appInfo/cxuNVP3tEUaO
data/appInfo/czEjR7auP8UR
data/appInfo/d1eDS83VlTVF
data/appInfo/dEghZR2zmO2P
data/appInfo/dF2apXLL6quI
data/appInfo/dF9tfsUHneDO
data/appInfo/dG2MUYD1ZPFY
data/appInfo/dJArDN377lGv
data/appInfo/dMnJgBXyofss
data/appInfo/dVm8P1Ry93Pk
data/appInfo/dXyboWf2Lxqt
data/appInfo/ddylHekTDels
data/appInfo/dlpkSchKTtKR
data/appInfo/drfpMcFyOYKZ
data/appInfo/dzXcVKvrZsBi
data/appInfo/dzeu1bMROaXu
data/appInfo/e1q76faTC7fB
data/appInfo/e2UfHFhEXcGJ
data/appInfo/eATLY29ptHXn
data/appInfo/eHszPAI3GnsG
data/appInfo/eJ3EuaWyuGsh
data/appInfo/eJKsbkmIpOMu
data/appInfo/eJoMxJYO2Cmg
data/appInfo/eMIRI359MPlG
data/appInfo/eNLj9xY6YtSB
data/appInfo/eUUf4JW145Nr
data/appInfo/eWAJpBJ7Q3l5
data/appInfo/eWEsH5vGMcgp
data/appInfo/ecIHmQvwP2TV
data/appInfo/ecj7skWmfNpH
data/appInfo/ecqqNGAuTBXN
data/appInfo/efAGo4gtdfWK
data/appInfo/egymtKCMNipC
data/appInfo/ehIQOZj0T0Ir
data/appInfo/ehuarBaiZysp
data/appInfo/epfJq3YTRogw
data/appInfo/esfYQiU4e4Mt
data/appInfo/evIC3QBS4trc
data/appInfo/f4tuBjfkPuC3
data/appInfo/f8huO87441nN
data/appInfo/f9SZuOi1f5WB
data/appInfo/fAOV8s8T0Xdb
data/appInfo/fXHjUkRMvU6a
data/appInfo/fYznPGTcS0qm
data/appInfo/fczlkGMd2YAX
data/appInfo/febBFDJ8S1JT
data/appInfo/ffzc0ok46fJn
data/appInfo/fg2T8Xl7ViM4
data/appInfo/fgtroMsGlRMH
data/appInfo/fj8mKSD1GvH3
data/appInfo/fnz9zCjslOST
data/appInfo/g352ETzXZ69y
data/appInfo/gFxNEaJ7pOnk
data/appInfo/gJkcddvyp1Jl
data/appInfo/gLmyWOdkY9zy
data/appInfo/gPfnlxANgFDX
data/appInfo/gPwRH9Lbi59V
data/appInfo/gTCnUmySfB22
data/appInfo/gYK5ukfBEhE8
data/appInfo/gaZdpxcwMWTN
data/appInfo/gm3txwMYVdrp
data/appInfo/gowi0dvVn5cu
data/appInfo/gqqS6OsEajbE
data/appInfo/gtllRRUGTutN
data/appInfo/h4XnSlAL0bTh
data/appInfo/h8rPh7AxZF88
data/appInfo/hEZ9AJX8ARw7
data/appInfo/hFVnMgIXS8eo
data/appInfo/hJ29wYtCeAqK
data/appInfo/hRkccVLsE12Q
data/appInfo/hSrBJPmgl0Hz
data/appInfo/hTXpNud0AM0e
data/appInfo/hWVrPpRBiYJH
data/appInfo/hd8tvqpRFxae
data/appInfo/hfPRu2lp55Yi
data/appInfo/hn7bj6ZzGRj3
data/appInfo/hnvsl21YPuhi
data/appInfo/hsz4sKodm9oP
data/appInfo/hxqw4gMQRcgK
data/appInfo/i5O3jiRMeHhn
data/appInfo/i5OKKShaILXA
data/appInfo/iBbk1UWwEqpY
data/appInfo/iDyVmNt4Nx8o
data/appInfo/iMG3i1PtcUsJ
data/appInfo/iNFs6ZJEKgOa
data/appInfo/iORc6rzkEEY8
data/appInfo/iRoD7f0GWYlN
data/appInfo/iRyUW3BKhogO
data/appInfo/iUZzkherKLT4
data/appInfo/iV10xz5fO2bq
data/appInfo/iYLAQTR1Rel8
data/appInfo/iiECU2BqFNmn
data/appInfo/ioJnfn08JOn9
data/appInfo/iw1xjNLRjngG
data/appInfo/j0WITuPTpkW8
data/appInfo/j8MJBIlkr53F
data/appInfo/jDaYpmqXXOer
data/appInfo/jIQEfK0pRfdf
data/appInfo/jIXHbkI72Jlo
data/appInfo/jMq9Epma3HuP
data/appInfo/jQ7SMniVp2do
data/appInfo/jQO43rO4p4JN
data/appInfo/jQuoAWprgkeI
data/appInfo/jW5eogpTJK7I
data/appInfo/jWzOVdLTX3ak
data/appInfo/jX6T86MvVbhF
data/appInfo/jXg46C7bcnbq
data/appInfo/jYf6XvTukNxn
data/appInfo/jc3mX5s6eQ8C
data/appInfo/jil2RhVkP6rR
data/appInfo/jmrG2OLltVtY
data/appInfo/jnI1tJQHTx1f
data/appInfo/jvwAs6outxDh
data/appInfo/jz3ah5eI8yec
data/appInfo/k4YNi3GygOBB
data/appInfo/k6RfzBexyfRa
data/appInfo/k6lXJTVna4Qm
data/appInfo/kFXVdHu86vVr
data/appInfo/kGYMInwnX5pa
data/appInfo/kOOpbpW2MrNX
data/appInfo/kR9Dzsj275ui
data/appInfo/kS5AFIHS1i9b
data/appInfo/kYtBvX4t9sTy
data/appInfo/kgmjoSb7PSY2
data/appInfo/kiqb5gR1Db7w
data/appInfo/ko3V831tbeHs
data/appInfo/krSZOXlQJ661
data/appInfo/kz89aLgVwR8O
data/appInfo/l0nm8QMWkd8i
data/appInfo/l1oaFF07alyb
data/appInfo/l2eaE6NaYRq0
.ps1
data/appInfo/l4EQYcfLZB3S
data/appInfo/l4KqL4BXzcMs
data/appInfo/lLC73L3IH6pl
data/appInfo/lLkGGQLgDzKH
data/appInfo/lNmFezj2tpMm
data/appInfo/lTxPpBmeDa2h
data/appInfo/lVAsR4tGnGel
data/appInfo/lWLN3xWxtrrE
data/appInfo/lX16MnQCXw1m
data/appInfo/lXf58Twu4tFh
data/appInfo/lZ2MauckbpP7
data/appInfo/liOvo3RMRGMQ
data/appInfo/lsAA6ejpzppz
data/appInfo/lt01dEndfl4C
data/appInfo/luhbkfFTfM8j
data/appInfo/lxiBwBPlOaTW
data/appInfo/lyjnUNOOsJU2
data/appInfo/m4vv8tF0wY2h
data/appInfo/m6r7EWT4VBkB
data/appInfo/mBs59keamwRi
data/appInfo/mCGU3eXiiOij
data/appInfo/mEJss2M8sHrX
data/appInfo/mESMwTsDr9hu
data/appInfo/mHZVC2wbaWH4
data/appInfo/mJIzj1xRsJuY
data/appInfo/mLHILOQlJ6Mu
data/appInfo/mQEBbANIUT1r
data/appInfo/mVFWAvmpofBw
data/appInfo/meuofrejCMpZ
data/appInfo/mjAeQ7vMoLwL
data/appInfo/mqjoF3bHYdYd
data/appInfo/mt8fsLiIsijz
data/appInfo/mtx71ORwGr8z
data/appInfo/myqOw4ir1izb
data/appInfo/n2gvxEJURa4v
data/appInfo/n4CiKdyGDRoI
data/appInfo/n4FOfPxJI7gc
data/appInfo/n7OU8gX6pLvV
data/appInfo/nBK9CzIIR7nY
data/appInfo/nBTsRjbJKRjn
data/appInfo/nBo5TYsbYWTf
data/appInfo/nDq3JOEr4DrF
data/appInfo/nIDfjdEnm4Tf
data/appInfo/nIkOn8Gnqp9p
data/appInfo/nNn1eu3EdJWL
data/appInfo/nQLWur8lAuct
data/appInfo/nSZy9cGJMEaV
data/appInfo/nVr06K6BvaY7
data/appInfo/nX41AjzYUD7K
data/appInfo/naJFj6d5kvmh
data/appInfo/naOgel43Fp7V
data/appInfo/nbuFJS3RUxPM
data/appInfo/ndkpHOXrzh9j
data/appInfo/newplugin/7z.dll
.dll windows x64

765f6db1819cc227dc53482a9ddde428

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

oleaut32

SysStringLen
VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
SysFreeString
SysAllocStringLen

user32

CharUpperW
CharPrevExA

advapi32

SystemFunction036

msvcrt

strcpy
memset
realloc
free
malloc
__CxxFrameHandler
strlen
strcat
strstr
_CxxThrowException
wcscmp
strcmp
memmove
memcpy
memcmp
_purecall
strchr
__C_specific_handler
_beginthreadex
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm

kernel32

IsProcessorFeaturePresent
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
Sleep
SetEvent
CreateEventW
SetThreadAffinityMask
ResumeThread
ResetEvent
GetModuleHandleW
WaitForSingleObject
VirtualFree
VirtualAlloc
QueryPerformanceCounter
FileTimeToLocalFileTime
DeleteCriticalSection
LocalFileTimeToFileTime
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime
FileTimeToDosDateTime
DosDateTimeToFileTime
GlobalMemoryStatusEx
GetSystemInfo
GetCurrentProcess
GetProcessAffinityMask
CompareFileTime
GetLastError
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
GetProcAddress
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
GetModuleHandleA

Exports

Exports

CreateDecoder
CreateEncoder
CreateObject
GetHandlerProperty
GetHandlerProperty2
GetHashers
GetIsArc
GetMethodProperty
GetNumberOfFormats
GetNumberOfMethods
SetCaseSensitive
SetCodecs
SetLargePageMode

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data/appInfo/newplugin/7z.exe
.exe windows x64

8681cffb9505e054b39c818a4e45878f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

oleaut32

SysStringLen
VariantClear
VariantCopy
SysAllocString
SysStringByteLen
SysFreeString
SysAllocStringLen

user32

CharUpperW

advapi32

OpenProcessToken
GetFileSecurityW
SetFileSecurityW
RegOpenKeyExW
RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey

msvcrt

_exit
_c_exit
_XcptFilter
_onexit
__dllonexit
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__C_specific_handler
_beginthreadex
_isatty
memcmp
_purecall
strlen
memset
wcsstr
_cexit
wcscmp
strcmp
memmove
fflush
fputc
fputs
_iob
fgetc
fclose
free
_CxxThrowException
malloc
__CxxFrameHandler
memcpy
__initenv
exit
__getmainargs
_initterm
__setusermatherr
_commode
_fmode
__set_app_type

kernel32

SetThreadAffinityMask
CreateEventW
SetEvent
InitializeCriticalSection
GetVersionExW
CloseHandle
ResumeThread
WaitForSingleObject
VirtualFree
VirtualAlloc
GetConsoleMode
SetConsoleMode
SetFileApisToOEM
GetCommandLineW
GetConsoleScreenBufferInfo
SetConsoleCtrlHandler
IsProcessorFeaturePresent
GetProcessTimes
QueryPerformanceFrequency
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetProcessAffinityMask
OpenEventW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
GetStdHandle
GetSystemTimeAsFileTime
FileTimeToDosDateTime
GlobalMemoryStatusEx
GetSystemInfo
GetProcessAffinityMask
FileTimeToLocalFileTime
FileTimeToSystemTime
CompareFileTime
GetCurrentProcess
GetDiskFreeSpaceW
GetFileInformationByHandle
SetEndOfFile
WriteFile
ReadFile
SetFilePointer
GetFileSize
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
LoadLibraryExW
LoadLibraryW
GetModuleFileNameW
LocalFree
FormatMessageW
SetFileTime
CreateFileW
SetFileAttributesW
RemoveDirectoryW
MoveFileW
GetProcAddress
GetModuleHandleW
CreateDirectoryW
DeleteFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetTempPathW
SetLastError
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
FindClose
FindFirstFileW
FindNextFileW
GetModuleHandleA
GetFileAttributesW
GetLogicalDriveStringsW
DeviceIoControl

Sections

.text
Size: 317KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data/appInfo/newplugin/WinRAR.exe
.exe windows x86

93d6ffbeb6eb5774e72f7a9d4e82b889

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:9e:3f:9f:cf:7d:58:d5:20:d6:07:ab:74:39:50:02
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/06/2017, 00:00

Not After

01/06/2020, 23:59

Subject

CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

9b:89:b1:5c:05:2f:38:7e:09:3a:9b:ba:f5:18:32:e8:d1:da:b9:ba:5f:c1:9b:a2:77:d0:7f:99:b8:79:42:d7
Signer

Actual PE Digest

9b:89:b1:5c:05:2f:38:7e:09:3a:9b:ba:f5:18:32:e8:d1:da:b9:ba:5f:c1:9b:a2:77:d0:7f:99:b8:79:42:d7

Digest Algorithm

sha256

PE Digest Matches

true

98:17:ce:4e:f2:84:39:06:72:2c:9f:e2:57:6b:95:0b:7c:60:2e:bb
Signer

Actual PE Digest

98:17:ce:4e:f2:84:39:06:72:2c:9f:e2:57:6b:95:0b:7c:60:2e:bb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
BackupRead
BackupSeek
GetShortPathNameW
GetLongPathNameW
GetFileType
GetStdHandle
FlushFileBuffers
GetFileTime
GetDiskFreeSpaceExW
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
LoadResource
SizeofResource
FindResourceW
LoadLibraryExW
CompareStringA
GetCurrentThread
SetThreadPriority
SetThreadExecutionState
CreateEventW
GetSystemDirectoryW
SetCurrentDirectoryW
GetFullPathNameA
SetPriorityClass
GetProcessAffinityMask
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
CreateSemaphoreW
GetSystemTime
TzSpecificLocalTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
WideCharToMultiByte
CompareStringW
GetModuleHandleExW
GetCompressedFileSizeW
EnumResourceNamesW
EnumResourceLanguagesW
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
GetLocaleInfoW
GetNumberFormatW
GetLogicalDrives
LockResource
SuspendThread
ResumeThread
GetStartupInfoW
GetCurrentThreadId
FormatMessageW
CopyFileW
GetThreadPriority
SetErrorMode
GetPriorityClass
WaitForMultipleObjects
MulDiv
CompareFileTime
FindNextChangeNotification
HeapSize
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetStringTypeW
WriteConsoleW
SetStdHandle
LCMapStringW
HeapReAlloc
GetModuleFileNameA
ExitProcess
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
FreeLibraryAndExitThread
ExitThread
QueryPerformanceFrequency
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
InitializeSListHead
QueryPerformanceCounter
IsDebuggerPresent
WaitForSingleObjectEx
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileInformationByHandle
GetLocalTime
FindCloseChangeNotification
FindFirstChangeNotificationW
ExpandEnvironmentStringsW
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
GetDiskFreeSpaceW
CreateHardLinkW
SetLastError
DosDateTimeToFileTime
LocalFileTimeToFileTime
HeapFree
HeapAlloc
HeapDestroy
HeapCreate
DeleteFileW
SetFileAttributesW
CreateFileW
RemoveDirectoryW
CreateDirectoryW
LoadLibraryW
GetSystemTimeAsFileTime
SetFileTime
SetFilePointer
SetEndOfFile
ReadFile
WriteFile
GetFileSize
FreeLibrary
MoveFileW
GetTickCount
GetCPInfoExW
GetOEMCP
GetACP
GetVolumeInformationW
GetDriveTypeW
Sleep
GetCurrentProcessId
GetCurrentProcess
CreateMutexW
ReleaseMutex
GetLastError
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
DecodePointer
MultiByteToWideChar
GetVersionExA
GetModuleHandleW
GetProcAddress
GetTempPathW
OpenFileMappingW
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
CloseHandle
WaitForSingleObject
GetCommandLineW
GetModuleFileNameW
GetDateFormatW
GetTimeFormatW
FindFirstFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
FindClose
Beep
GetFileAttributesW

user32

CopyImage
FindWindowExW
FillRect
MessageBoxW
CreateIcon
EnumWindows
SetForegroundWindow
IsCharAlphaW
FlashWindow
CopyRect
RegisterClassExW
GetSysColor
ValidateRect
DrawIconEx
LoadImageW
SystemParametersInfoW
GetSystemMenu
KillTimer
SetTimer
MessageBoxIndirectW
CharLowerW
ExitWindowsEx
CharLowerA
LoadStringW
GetWindow
SetProcessDefaultLayout
CharToOemBuffW
OemToCharBuffA
OemToCharA
GetComboBoxInfo
RedrawWindow
MessageBeep
CharToOemA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
PeekMessageW
GetScrollInfo
EnableMenuItem
CheckMenuItem
GetFocus
MoveWindow
GetClientRect
GetWindowTextLengthW
EndPaint
BeginPaint
UpdateWindow
AppendMenuW
DrawMenuBar
wsprintfW
ScreenToClient
ClientToScreen
CallWindowProcW
PtInRect
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
TrackPopupMenu
DeleteMenu
InsertMenuW
GetSubMenu
SetMenu
LoadMenuW
LoadAcceleratorsW
IsChild
RegisterClassW
PostQuitMessage
SetScrollRange
SetScrollPos
ScrollWindowEx
GetClipboardData
LoadIconW
RegisterWindowMessageW
CreateDialogParamW
PostThreadMessageW
IsDialogMessageW
GetIconInfo
CreateIconIndirect
FindWindowW
RemovePropW
GetPropW
SendMessageW
DefWindowProcW
CreateWindowExW
DestroyWindow
SetFocus
GetWindowTextW
GetWindowLongW
SetWindowLongW
SetWindowPos
GetWindowPlacement
SetWindowPlacement
IsWindowVisible
DialogBoxParamW
SetPropW
GetForegroundWindow
TranslateAcceleratorW
CreateDialogIndirectParamW
BringWindowToTop
GetMenuState
GetMenuItemID
GetLastActivePopup
DispatchMessageW
TranslateMessage
DestroyMenu
CreatePopupMenu
GetMenu
IsWindow
WaitForInputIdle
LoadCursorW
EndDialog
GetDlgItem
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
GetWindowRect
MapWindowPoints
GetParent
DestroyIcon
CheckDlgButton
PostMessageW
InvalidateRect
EnumChildWindows
GetClassNameW
ShowWindow
CharToOemBuffA
SetDlgItemInt
GetDlgItemInt
GetMessageW
GetMenuItemCount
GetWindowThreadProcessId
WindowFromPoint
SetCursor
GetKeyState
RegisterClipboardFormatW
SystemParametersInfoA
GetDesktopWindow
IntersectRect
GetCursorPos
SetWindowTextW
ReleaseDC
GetDC
GetSystemMetrics
EnableWindow
IsIconic
IsWindowEnabled
IsDlgButtonChecked
CharUpperW

gdi32

TextOutA
SetPixel
Rectangle
GetTextExtentPoint32W
CreateSolidBrush
CreateDIBSection
GetPixel
DPtoLP
StretchBlt
SetMapMode
GetMapMode
GetDeviceCaps
CreateCompatibleBitmap
CreateBitmap
ExtTextOutW
SetBkColor
DeleteDC
CreateCompatibleDC
BitBlt
GetObjectW
TextOutW
MoveToEx
SetTextColor
LineTo
CreatePen
GetTextFaceW
GetTextMetricsW
SelectObject
DeleteObject
CreateFontW

comdlg32

GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
ChooseFontW

advapi32

AllocateAndInitializeSid
AccessCheck
OpenProcessToken
MapGenericMask
GetFileSecurityW
RegCloseKey
IsTextUnicode
RegSetValueExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
CheckTokenMembership
FreeSid
DuplicateToken
SetFileSecurityW
GetSecurityDescriptorLength
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExW
RegOpenKeyExW

shell32

FindExecutableW
DragFinish
DragQueryFileW
Shell_NotifyIconW
DragAcceptFiles
ShellExecuteW
SHGetSpecialFolderLocation
SHAddToRecentDocs
SHFileOperationW
SHGetFolderPathW
ShellExecuteExW
SHBrowseForFolderW
SHGetMalloc
SHChangeNotify
SHGetDesktopFolder
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
ord100

ole32

RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
CLSIDFromString
CreateStreamOnHGlobal
CoTaskMemAlloc
CoInitializeEx
CoTaskMemFree
CoCreateInstance
OleSetClipboard
DoDragDrop

oleaut32

VariantClear
SysAllocString

shlwapi

StrCmpLogicalW
SHAutoComplete

powrprof

SetSuspendState

comctl32

CreateStatusWindowW
ImageList_Create
ImageList_ReplaceIcon
InitCommonControlsEx
PropertySheetW

uxtheme

IsThemeActive
IsAppThemed

gdiplus

GdiplusShutdown
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipBitmapGetPixel
GdipBitmapSetPixel

msimg32

GradientFill

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 888KB - Virtual size: 888KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data/appInfo/newplugin/setups.dll
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data/appInfo/newplugin/setups.exe
.exe windows x86

93d099f09873f4f31b1b7ec7cb84e6f0

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3a:10:10:87:8e:d6:f7:dd:d4:ec:8e:8f
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

18/09/2019, 12:58

Not After

11/12/2022, 11:53

Subject

CN=Adersoft,O=Adersoft,L=Paris,C=FR,1.2.840.113549.1.9.1=#0c14737570706f72744061646572736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

27/05/2021, 09:55

Not After

28/06/2032, 09:55

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

20/02/2019, 00:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c0:70:56:49:f9:d6:17:2f:2e:77:36:9d:05:59:8c:ea:94:ba:6b:f4:06:1c:d6:12:39:28:aa:24:63:4a:16:10
Signer

Actual PE Digest

c0:70:56:49:f9:d6:17:2f:2e:77:36:9d:05:59:8c:ea:94:ba:6b:f4:06:1c:d6:12:39:28:aa:24:63:4a:16:10

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
lstrcmpiW
MultiByteToWideChar
LoadLibraryExW
ExitProcess
LocalAlloc
LocalFree
FormatMessageW
WaitForSingleObject
GetExitCodeProcess
CreateThread
SetLastError
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
FindResourceExW
GetACP
WideCharToMultiByte
FreeResource
SetFilePointer
ReadFile
CreateFileW
CreateFileMappingW
MapViewOfFile
IsBadReadPtr
UnmapViewOfFile
GetCurrentProcessId
EnumResourceNamesW
GetFileAttributesW
GetFileSize
OpenEventW
SetEvent
ExpandEnvironmentStringsW
Sleep
FlushFileBuffers
GetFileType
WriteFile
WriteConsoleW
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
CloseHandle
FindNextFileW
FindFirstFileExW
FindClose
GetFileSizeEx
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
LCMapStringW
GetStdHandle
GetModuleHandleExW
GetCommandLineW
GetCommandLineA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetModuleFileNameW
SizeofResource
LockResource
LoadResource
FindResourceW
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
IsDebuggerPresent
FreeLibrary
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
IsValidCodePage

user32

UnregisterClassW
MessageBoxW
GetDlgItem
SetWindowPos
MapWindowPoints
GetClientRect
wsprintfA
GetWindowRect
GetMonitorInfoW
MonitorFromWindow
GetWindowLongW
GetWindow
SetTimer
SendMessageW
GetParent
SetWindowTextW
CharNextW
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjects
CreateWindowExW
DestroyWindow
LoadCursorW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
SetWindowLongW
DefWindowProcW
DialogBoxParamW
EndDialog
GetActiveWindow
KillTimer

advapi32

RegDeleteValueW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
CreateProcessWithLogonW
RegDeleteKeyW
RegCreateKeyExW

shell32

ShellExecuteW

ole32

CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoGetObject
CoGetInstanceFromFile
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CoTaskMemFree

oleaut32

VariantCopy
VariantClear
SafeArrayUnaccessData
VariantChangeType
SafeArrayAccessData
SysAllocString
SysFreeString
VariantInit
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysStringLen
LoadTypeLibEx
SysAllocStringLen

wintrust

WinVerifyTrust

crypt32

CertFreeCertificateContext
CertFindCertificateInStore
CryptMsgGetParam
CertCloseStore
CryptMsgClose
CryptQueryObject

version

GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeW

Sections

.text
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data/appInfo/newplugin/setups.exe.manifest
data/appInfo/newplugin/wget.exe
.exe windows x86

9d364237d29bd7c53899e2d70965daa7

Code Sign

70:3f:38:4b:e7:0a:dd:9e:6a:17:5d:f4:be:6e:02:fe
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

24/02/2021, 00:00

Not After

24/02/2024, 23:59

Subject

CN=Jernej Simončič,O=Jernej Simončič,STREET=Herbersteinova 29,L=Ljubljana,C=SI

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/03/2019, 00:00

Not After

31/12/2028, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d0:8d:da:4e:59:e5:fb:68:5d:37:c0:7c:ef:b5:5c:bf:64:26:7a:3d:04:ac:4d:09:38:b7:1d:6c:22:98:0c:00
Signer

Actual PE Digest

d0:8d:da:4e:59:e5:fb:68:5d:37:c0:7c:ef:b5:5c:bf:64:26:7a:3d:04:ac:4d:09:38:b7:1d:6c:22:98:0c:00

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptAcquireContextA
CryptAcquireContextW
CryptCreateHash
CryptDecrypt
CryptDestroyHash
CryptDestroyKey
CryptEnumProvidersW
CryptExportKey
CryptGenRandom
CryptGetProvParam
CryptGetUserKey
CryptReleaseContext
CryptSetHashParam
CryptSignHashW
DeregisterEventSource
GetUserNameW
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegisterEventSourceW
ReportEventW

bcrypt

BCryptGenRandom

crypt32

CertCloseStore
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore

kernel32

CloseHandle
ConvertFiberToThread
ConvertThreadToFiber
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateFiber
CreateFileA
CreateFileMappingA
CreateFileW
CreateHardLinkA
CreatePipe
CreateProcessA
CreateProcessW
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DeleteFiber
DeleteFileA
DeleteFileW
DuplicateHandle
EnterCriticalSection
ExpandEnvironmentStringsA
FindClose
FindFirstFileA
FindFirstFileW
FindFirstVolumeW
FindNextFileW
FindNextVolumeW
FindVolumeClose
FormatMessageA
FormatMessageW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetConsoleWindow
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceExW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileType
GetHandleInformation
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNamedPipeInfo
GetNumberOfConsoleInputEvents
GetPriorityClass
GetProcAddress
GetStartupInfoA
GetStdHandle
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetThreadLocale
GetTickCount64
GetTickCount
GetVersion
GetVersionExA
GetVolumeInformationW
GetWindowsDirectoryA
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsValidCodePage
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
LockFileEx
MapViewOfFile
MoveFileExA
MultiByteToWideChar
OpenFileMappingA
PeekConsoleInputA
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleA
ReadConsoleW
ReadFile
ReleaseSemaphore
ResetEvent
ResumeThread
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleTitleA
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFilePointer
SetFilePointerEx
SetFileTime
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SleepEx
SwitchToFiber
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnlockFile
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile

msvcrt

__getmainargs
__initenv
__lconv_init
__mb_cur_max
__p___argv
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_access
_amsg_exit
_assert
_cexit
_chdir
_dup
_dup2
_environ
_errno
_chmod
_close
_exit
_fdopen
_filelengthi64
_fileno
_findclose
_fullpath
_get_osfhandle
_getch
_getcwd
_getmaxstdio
_getmbcp
_getpid
_gmtime64
_initterm
_iob
_isatty
_isctype
_localtime64
_lock
_lseeki64
_onexit
_open
_open_osfhandle
_pipe
_putenv
_read
_rmdir
_setmaxstdio
_setmode
_vsnwprintf
_strdup
_stricmp
_strnicmp
_sys_errlist
_sys_nerr
_telli64
_time64
_unlink
_unlock
_vscprintf
_vsnprintf
_waccess
_wfopen
_wopen
_write
abort
atoi
bsearch
calloc
clearerr
clock
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
fsetpos
ftell
fwrite
getc
getenv
isalnum
isalpha
iscntrl
isgraph
islower
isprint
ispunct
isspace
isupper
iswctype
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
localtime
gmtime
_mkdir
perror
puts
qsort
raise
rand
realloc
rewind
setbuf
setlocale
setvbuf
signal
srand
strcat
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtok
strtol
strtoul
tmpfile
tolower
toupper
towlower
towupper
ungetc
vfprintf
time
wcscat
wcscmp
wcscpy
wcslen
wcsstr
wcstombs
_stat
_fstat
_findnext
_findfirst
_write
_strnicmp
_strdup
_setmode
_read
_putenv
_open
_lseek
_isatty
_getpid
_fileno
_dup
_close
_access

ole32

CoCreateInstance
CoInitializeEx
CoUninitialize

shell32

SHGetSpecialFolderPathW

user32

DispatchMessageA
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA
MessageBoxW
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage

ws2_32

WSAAddressToStringA
WSACleanup
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSASetLastError
WSASocketW
WSAStartup
WSAStringToAddressW
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyname
gethostname
getnameinfo
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_pton
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 466KB - Virtual size: 465KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data/appInfo/ngXiYkmtxxWz
data/appInfo/nmdv9WLw039V
data/appInfo/noCRYoYMXrtJ
data/appInfo/nriL81PYPTxR
data/appInfo/nsLtRcahUZAv
data/appInfo/o44W467STSAD
data/appInfo/o4e45cMTAXKw
data/appInfo/oFJVLsuTqeuE
data/appInfo/oGD6nsSwh6vh
data/appInfo/oQKse4TMqXxp
data/appInfo/oR7xaZjl1ael
data/appInfo/oUe1mquniNXm
data/appInfo/oXcS7d6zXDDs
data/appInfo/occf5dARcDpc
data/appInfo/ocxK2a3lCMDC
data/appInfo/ofpCLslKnR4t
data/appInfo/ohhnI4a4Lp9x
data/appInfo/ohnza7VK3ejz
data/appInfo/oiNLcGRYAW8n
data/appInfo/okphsgUat6A4
data/appInfo/oqAnWnmK1zAN
data/appInfo/oqiGjA0BHqCg
data/appInfo/p7ISkByihOuM
data/appInfo/pCUdsHvhayrb
data/appInfo/pDkiDxn9jNEC
data/appInfo/pE0uBrEm1B6r
data/appInfo/pEl4TIjkVs12
data/appInfo/pF3sy2pC1pwi
data/appInfo/pFF5L0w08XEb
data/appInfo/pbcW2gEEZ86T
data/appInfo/pcEDJRJkpkmv
data/appInfo/pmjKjcTMF96I
data/appInfo/poOr83jj2aSl
data/appInfo/q0Lx8cOujTSp
data/appInfo/q20UvmyKLjhl
data/appInfo/q31clpVRjs0W
data/appInfo/qAiuHxMXczJf
data/appInfo/qHHytSw1X87b
data/appInfo/qLb3EZlI6dwc
data/appInfo/qMDtJaFeAquZ
data/appInfo/qomx1DIAJ5kF
data/appInfo/qs7SRF975L3U
data/appInfo/qttF1rdmwupL
data/appInfo/qu8qbJy6JOTz
data/appInfo/qvvbZSJbVYnr
data/appInfo/qwFzFW0aYFLP
data/appInfo/r0y1GpkxGfJQ
data/appInfo/r1nGbnHUN9g5
data/appInfo/r6x1ClyRwjoF
data/appInfo/r8Ylt5MqFHFd
data/appInfo/rIn6sq6RfOge
data/appInfo/rKDKXLl9ulfh
data/appInfo/rTpAcsDCA1v8
data/appInfo/rds9JRGN3B4W
data/appInfo/rgc8gWvc4T5r
data/appInfo/rknRQBtt7ooL
data/appInfo/rlEQoHMA2Pnt
data/appInfo/rokSM71qXqKD
data/appInfo/rpUCnqSWLgck
data/appInfo/rs6cIhZlSJJ9
data/appInfo/rsrhuiMJfvDt
data/appInfo/rtCCNOhBsvaq
data/appInfo/rthIKRyH9ylb
data/appInfo/s3F5QsmnvBLj
data/appInfo/s5kBy2ffzJoh
data/appInfo/s6DUZcyZtATg
data/appInfo/s6Wm7tqoTZvs
data/appInfo/s7hhEeBcT5mS
data/appInfo/s8N9RLOAQrGh
data/appInfo/sDBYSRp0qkSI
data/appInfo/sDY3YN1wFxmt
data/appInfo/sEcbe6Mb4Agp
data/appInfo/sH8lUzy3S2sD
data/appInfo/sKL8wEJMMw75
data/appInfo/sO6qqej62zcR
data/appInfo/sUFtzLebjtpc
data/appInfo/sUj0SbuGIias
data/appInfo/sWKWHPJxoBMt
data/appInfo/sXSBT2JJxwPs
data/appInfo/salpQTObxZs7
data/appInfo/sbSzcjXph44d
data/appInfo/sdI0n5fe6If8
data/appInfo/spBRt8zl6aRd
data/appInfo/srQTiAZEVFAa
data/appInfo/sseOb1yZ7BSb
data/appInfo/stLswNsiHxZs
data/appInfo/sxiRnGVwJVWz
data/appInfo/syGNjqVjBdN1
data/appInfo/syqzxh2sXzSf
data/appInfo/t2sekXIwRgve
data/appInfo/t6wjPNwXmCFC
data/appInfo/t7PoPNH1705j
data/appInfo/tJtatA3XQMzE
data/appInfo/tPMu7NdmmGcd
data/appInfo/tYEo57TN1oY9
data/appInfo/tYpuHEVnyeC8
data/appInfo/tanrEwRwL5ha
data/appInfo/tbUTZ9BMm9Qd
data/appInfo/tbdQipD8fnZJ
data/appInfo/tbsM4lzEmG2W
data/appInfo/thW5SBJOKkf7
data/appInfo/tkmQsYNAYzYh
data/appInfo/tlURjiFlDBM4
data/appInfo/tnTXiFoCcb4G
data/appInfo/tnsDuE6JJG6H
data/appInfo/tnu9S1LXyGKs
data/appInfo/tojtOUkEkmBb
data/appInfo/tqB3oBiVZqIZ
data/appInfo/ttfE7Qex7EVC
data/appInfo/tucnlCGYXfCI
data/appInfo/twXnZnOiYVAP
data/appInfo/u0oflHBhVGCv
data/appInfo/u1TxxTNqZOED
data/appInfo/u4xSGJynVsjz
data/appInfo/uAssrEQyxA8I
data/appInfo/uDOuAWeSxkFN
data/appInfo/uGJLQAONnWyK
data/appInfo/uM8xOTokTBXQ
data/appInfo/uN7U06qHBVKN
data/appInfo/uOS8jYXmCnJy
data/appInfo/uUGf46ojTi8C
data/appInfo/uew2fuDJcCIP
data/appInfo/uh0RSELHD7Ck
data/appInfo/uiJ2rfFW3sn3
data/appInfo/uku4Txr3o6rJ
data/appInfo/uouBK7mFbtbD
data/appInfo/usXiYZ8PFBs9
data/appInfo/v620aOdyDtIz
data/appInfo/vMvNqkTLwLa2
data/appInfo/vRioOy51oRZk
data/appInfo/vRns5mt4VMpO
data/appInfo/vTobuNMWEaI8
data/appInfo/vV6qBja4Udia
data/appInfo/vXtclJ5t0x2i
data/appInfo/vY54yu9N4Xbp
data/appInfo/vYjLS7mYrtYf
data/appInfo/vYtKIJO0VxcI
data/appInfo/vo5LRBDWES2H
data/appInfo/voZefM6SjhoW
data/appInfo/vottDZfXYgF4
data/appInfo/vwT0NjZSDZqR
data/appInfo/w2jhushSH0y7
data/appInfo/w4KQhRcbu0DW
data/appInfo/w4mezos8JNDg
data/appInfo/w7SchGCO91nB
data/appInfo/w8ao8EN6zHtv
data/appInfo/wAf73MNycCxK
data/appInfo/wDsHk9t5hr07
data/appInfo/wH8eDAsTgeqY
data/appInfo/wKlP07Uxpm7v
data/appInfo/wKnVOZFt8Jhn
data/appInfo/wQXVQ53elNHC
data/appInfo/wf1WP1P1Y3eT
data/appInfo/wuoAn83ya367
data/appInfo/wvWyRrCAwmDU
data/appInfo/wvqhbmTIVEJ6
data/appInfo/x25FpVoulgpE
data/appInfo/x2HXfIsaUaRs
data/appInfo/xERIuZwOVUwq
data/appInfo/xFeAfy2vwmhm
data/appInfo/xG6ut1fmIxsp
data/appInfo/xYlesQEdHCTY
data/appInfo/xaWhBnWS5upq
data/appInfo/xgDWzvUU4gLt
data/appInfo/xjdbc82lSvIF
data/appInfo/xkCGRe5nAEoy
data/appInfo/xlMstmps6pM2
data/appInfo/xojmu9IDviaW
data/appInfo/xstnVetwqtAb
data/appInfo/xt20JdSLdkcW
data/appInfo/xw0ARpueNi82
data/appInfo/y1748oLpihLX
data/appInfo/y3mbACea4wui
data/appInfo/yBztw8pSp0El
data/appInfo/yEnU1uT6EYcE
data/appInfo/yLZ9bOqcYBJh
data/appInfo/yPRyruZm7PMx
data/appInfo/ySJ5gTkwKZnH
data/appInfo/yTyUzQBvMcja
data/appInfo/yU67yS83urD1
data/appInfo/yV0Mv1EVLytn
data/appInfo/yVMHsx9Vw19u
data/appInfo/yX3rGDZhZtD6
data/appInfo/yeE4ibToX3aD
data/appInfo/ygMRBdT6L9nr
data/appInfo/yhyxKkXgCcXU
data/appInfo/ykkbtrf5SfDW
data/appInfo/ypG5MIaBZ42e
data/appInfo/yxQoiY3GZiM0
data/appInfo/yyq0SjwyjAcV
data/appInfo/z25mqe6Yd7eI
data/appInfo/z8rwpiHN9q4G
data/appInfo/z994A0V2ZCaY
data/appInfo/zEywGRhuaCes
data/appInfo/zF9yEGakmtmV
data/appInfo/zKEzav97G4NK
data/appInfo/zLmc2bmVHkmI
data/appInfo/zNd6ngRqnPIc
data/appInfo/zTgW5hCmqYpK
data/appInfo/zV74zhv6wLsu
data/appInfo/zXlj5nPFifxS
data/appInfo/zaNn1CYXEnqE
data/appInfo/zfV1q8rgdjsR
data/appInfo/znTF09ECEP0A
data/appInfo/zprVqFcussKX
data/appInfo/zqOlB0SMOEpx
data/appInfo/zvfswVw4f8GR
data/appInfo/zzKw45NtZJp9
data/elastique_x64.dll
.dll windows x64

5915b17ca89d945ed36e333966d13e1d

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

58:6e:15:06:ca:4a:f6:d4:95:89:13:6f:e4:c8:c3:d5:80:43:67:c2:92:03:da:6c:4b:17:6d:f6:08:30:69:58
Signer

Actual PE Digest

58:6e:15:06:ca:4a:f6:d4:95:89:13:6f:e4:c8:c3:d5:80:43:67:c2:92:03:da:6c:4b:17:6d:f6:08:30:69:58

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

ntohl
htonl

kernel32

WriteConsoleW
CreateFileW
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
RaiseException
GetLastError
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
HeapReAlloc
HeapSize
HeapQueryInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
SetFilePointerEx
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode

Exports

Exports

Auftakt_CreateInstance
Auftakt_CreateInstance2
Declicker_CreateInstance
Denoiser_CreateInstance
ElAllocator_SetFunctions
ElProDirect_CreateInstance
ElProV3Direct_CreateInstance
ElProV3_CreateInstance
ElPro_CreateInstance
ElResampleSource_CreateInstance
ElResampleSource_GetBuildDate
ElResampleSource_GetVersion
Metering_CreateInstance
SolPitchAn_CreateInstance
SolPitchAn_CreatePitchMarks

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IPPCODE
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 880KB - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

IPPDATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data/iZAudioRestore.dll
.dll windows x86

758166a67af3f26c40fb965e9c353305

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

17/05/2013, 00:00

Not After

17/05/2015, 23:59

Subject

CN=Image Line,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Image Line,L=sint-martens-latem,ST=ovl,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

74:7b:fb:f6:37:d3:f0:40:f1:56:8e:79:33:90:d6:a3:48:69:fb:44
Signer

Actual PE Digest

74:7b:fb:f6:37:d3:f0:40:f1:56:8e:79:33:90:d6:a3:48:69:fb:44

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdiplusShutdown
GdipAlloc
GdipDeleteBrush
GdipSetSolidFillColor
GdipCreateStringFormat
GdipDeleteStringFormat
GdipFlush
GdipDeleteFont
GdipDeleteFontFamily
GdipDeleteGraphics
GdiplusStartup
GdipCloneImage
GdipCloneBrush
GdipGetFontHeightGivenDPI
GdipCreateFont
GdipGetCellAscent
GdipGetEmHeight
GdipCreateRegion
GdipMeasureCharacterRanges
GdipDrawString
GdipSetTextRenderingHint
GdipGetImageGraphicsContext
GdipSetStringFormatMeasurableCharacterRanges
GdipCreateSolidFill
GdipCreateBitmapFromScan0
GdipGetImageWidth
GdipDisposeImage
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipGetRegionBounds
GdipDeleteRegion
GdipFree

kernel32

GetUserDefaultLCID
MultiByteToWideChar
WideCharToMultiByte
LockResource
LoadResource
FindResourceA
GetCurrentProcess
Sleep
CloseHandle
GetCurrentThreadId
SetThreadPriority
GetCurrentThread
TerminateThread
WaitForSingleObject
CreateThread
GetTickCount
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
InterlockedCompareExchange
InterlockedIncrement
InterlockedDecrement
GetLastError
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetTempPathW
GetSystemDirectoryA
GetWindowsDirectoryA
GetProcessAffinityMask
GetModuleFileNameA
FindClose
FindFirstFileW
GetProcAddress
LoadLibraryA
SetLastError
GetModuleHandleW
GlobalAlloc
lstrlenA
GlobalUnlock
GlobalLock
GetLocaleInfoA
RaiseException
RtlUnwind
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetSystemTimeAsFileTime
GetDriveTypeA
GetFullPathNameA
ReadFile
GetFileAttributesW
GetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
GetFileType
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapSize
ExitProcess
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetCurrentDirectoryA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
GetFullPathNameW
SetStdHandle
LCMapStringA
LCMapStringW
GetLocaleInfoW
FreeLibrary
CreateEventA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetTimeZoneInformation
CreateFileW
SetEndOfFile
VirtualQuery
GetVolumeInformationA
GetLogicalDrives
SetFileTime
LoadLibraryW
SetEvent
ResetEvent
WaitForMultipleObjects
GlobalSize

user32

GetWindowPlacement
ShowWindow
SetWindowPos
DestroyWindow
SetWindowLongW
GetClientRect
MoveWindow
GetWindowLongA
SetWindowTextW
ScreenToClient
GetKeyState
DefWindowProcW
GetWindowTextW
EnableMenuItem
GetSystemMenu
CreateWindowExW
UnregisterClassW
RegisterClassExW
LoadIconW
GetClassInfoExW
SetFocus
GetFocus
ReleaseCapture
GetCursorPos
SetCapture
ReleaseDC
GetDC
SetWindowLongA
PostQuitMessage
GetMonitorInfoA
MonitorFromRect
LoadCursorA
SetCursor
CreateCursor
DestroyCursor
DestroyMenu
SetTimer
KillTimer
GetAsyncKeyState
GetParent
WindowFromPoint
MessageBoxA
BeginPaint
EndPaint
RegisterWindowMessageA
GetCapture
GetDlgCtrlID
IsWindowUnicode
SendMessageW
PostMessageA
UpdateWindow
InvalidateRect
GetWindowTextA
GetPropA
DefWindowProcA
SetPropA
RemovePropA
UnregisterClassA
RegisterClassExA
GetClassInfoExA
GetWindowInfo
GetWindowRect
PostMessageW
AdjustWindowRectEx
GetWindowLongW
MessageBoxW
DialogBoxParamW
DialogBoxParamA
EndDialog
GetSysColor
FillRect
DrawFocusRect
CheckRadioButton
GetDlgItem
SendMessageA
GetDlgItemTextW
SetDlgItemTextW
IsClipboardFormatAvailable
GetDlgItemTextA
SetWindowTextA
SetDlgItemTextA
CheckDlgButton
IsDlgButtonChecked
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
GetClipboardData
EnableWindow

gdi32

BitBlt
SetTextColor
CreateDIBSection
SetBkColor
GetTextExtentPoint32A
CreateCompatibleDC
DeleteDC
TextOutA
GetTextMetricsA
CreateSolidBrush
GetStockObject
CreateCompatibleBitmap
CreateFontW
CreateFontA
GetTextExtentExPointA
SetBkMode
SelectObject
SelectClipRgn
DeleteObject

comdlg32

GetSaveFileNameW
CommDlgExtendedError

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegEnumValueW
RegSetValueExW
RegCloseKey
RegQueryValueExW

shell32

ShellExecuteW

ole32

CoInitialize
OleUninitialize
RevokeDragDrop
RegisterDragDrop
CoUninitialize

comctl32

InitCommonControlsEx

wininet

InternetOpenA
InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile

Exports

Exports

PluginCoreCallback

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 228KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 700KB - Virtual size: 698KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data/ildsp_x64.dll
.dll windows x64

817aca5e643abb54b87f95e17ad1b666

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a0:07:cd:2d:ee:4e:9a:5d:4f:62:e5:b7:82:20:13:64:7e:4d:a9:5e:82:54:cf:2b:86:06:e7:0a:f8:69:c3:15
Signer

Actual PE Digest

a0:07:cd:2d:ee:4e:9a:5d:4f:62:e5:b7:82:20:13:64:7e:4d:a9:5e:82:54:cf:2b:86:06:e7:0a:f8:69:c3:15

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW

Exports

Exports

GeneralPitchShifter_CreateInstance
PSOLA_CreateInstance

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IPPCODE
Size: 705KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

IPPDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data/oggio_x64.dll
.dll windows x64

9247cd1bbdaba7e0b2b8c84edb5b22d2

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

83:65:d3:0d:31:59:67:e6:bc:47:97:80:8f:6b:60:17:7b:5f:6a:49:ac:54:60:be:2e:ab:9c:ec:fe:24:52:14
Signer

Actual PE Digest

83:65:d3:0d:31:59:67:e6:bc:47:97:80:8f:6b:60:17:7b:5f:6a:49:ac:54:60:be:2e:ab:9c:ec:fe:24:52:14

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
GetStringTypeW
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ReadFile
CreateFileW
GetFileInformationByHandle
GetFileType
CloseHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapReAlloc
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
WriteFile
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
SetStdHandle
GetCurrentDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
GetTimeZoneInformation
FlushFileBuffers
HeapSize
SetEndOfFile
WriteConsoleW

Exports

Exports

?LoadOggFromStream@@YAHAEAUTOggImportParams@@AEAUTOggioLoadFileInfo@@P6AXPEAX_K3@Z2@Z
OggioFreeInfo
OggioLoadFLACFromMemory
OggioLoadFile
OggioLoadFileW
OggioSaveEncode
OggioSaveFinish
OggioSaveInit
OggioSaveInitW

Sections

.text
Size: 448KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IPPCODE
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 670KB - Virtual size: 670KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

IPPDATA
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
data/speaker_x64.dll
.dll windows x64

86c65f403c376e43a99b600cddf1e46f

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9a:ab:d6:d0:86:d7:59:cf:1d:3d:9b:8d:d6:c2:d2:09:18:62:07:e1:a4:8a:cf:f6:8f:b4:1e:ec:dc:05:11:f4
Signer

Actual PE Digest

9a:ab:d6:d0:86:d7:59:cf:1d:3d:9b:8d:d6:c2:d2:09:18:62:07:e1:a4:8a:cf:f6:8f:b4:1e:ec:dc:05:11:f4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetCloseEnum
WNetOpenEnumW

winmm

timeEndPeriod
timeBeginPeriod
timeGetDevCaps

comctl32

FlatSB_SetScrollInfo
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove

shell32

SHGetMalloc
SHGetFolderPathW
SHGetDesktopFolder
Shell_NotifyIconW
SHAppBarMessage
SHFileOperationW
SHGetPathFromIDListW

user32

CreateWindowExW
GetMenuItemInfoW
SetMenuItemInfoW
DefFrameProcW
GetDCEx
CharToOemBuffW
PeekMessageW
MonitorFromWindow
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
FrameRect
MapVirtualKeyW
IsWindowUnicode
RegisterWindowMessageW
FillRect
GetMenuStringW
DispatchMessageW
SendMessageA
IsClipboardFormatAvailable
DefMDIChildProcW
EnumWindows
GetClassInfoW
ShowOwnedPopups
GetSystemMenu
GetScrollRange
SetScrollPos
GetScrollPos
GetActiveWindow
SetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
DrawFocusRect
EnumChildWindows
ReleaseCapture
UnhookWindowsHookEx
LoadCursorW
GetCapture
SetCapture
CreatePopupMenu
ScrollWindow
GetMenuItemID
GetLastActivePopup
CharLowerBuffW
GetSystemMetrics
PostMessageW
DrawMenuBar
SetParent
IsZoomed
CharUpperBuffW
GetClientRect
IsChild
ShowCursor
GetClassLongPtrW
SetClassLongPtrW
IntersectRect
ClientToScreen
GetClipboardData
SetClipboardData
SetWindowPlacement
IsIconic
CallNextHookEx
GetMonitorInfoW
ShowWindow
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
SetForegroundWindow
GetWindowTextW
EnableWindow
DestroyWindow
IsDialogMessageW
RegisterClassW
CharNextW
GetWindowThreadProcessId
RedrawWindow
GetDC
GetFocus
SetFocus
EndPaint
ReleaseDC
MsgWaitForMultipleObjectsEx
CreateIconFromResource
GetClipCursor
LoadKeyboardLayoutW
EnumDisplaySettingsW
ActivateKeyboardLayout
GetParent
DrawTextW
SetScrollRange
InsertMenuItemW
GetPropW
MessageBoxW
MessageBeep
SetPropW
RemovePropW
UpdateWindow
GetSubMenu
MsgWaitForMultipleObjects
DestroyMenu
DestroyIcon
SetWindowsHookExW
EmptyClipboard
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
AdjustWindowRectEx
DrawIcon
IsWindow
EnumThreadWindows
InvalidateRect
GetKeyboardState
DrawFrameControl
ScreenToClient
GetWindowLongPtrW
SetWindowLongPtrW
SetCursor
CreateIcon
CreateMenu
LoadStringW
CharLowerW
SetWindowPos
GetMenuItemCount
RemoveMenu
GetKeyboardLayoutNameW
GetWindowDC
TranslateMessage
OpenClipboard
DrawTextExW
MapWindowPoints
EnumDisplayMonitors
CharNextExA
CallWindowProcW
CountClipboardFormats
CloseClipboard
DestroyCursor
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
EnableScrollBar
GetSysColor
TrackPopupMenu
DrawIconEx
PostQuitMessage
ShowScrollBar
EnableMenuItem
GetIconInfo
GetMessagePos
LoadImageW
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
GetCursorPos
SetCursorPos
GetMenu
GetMenuState
SetMenu
SetRect
GetKeyState
FindWindowExW
MonitorFromPoint
SystemParametersInfoW
LoadIconW
GetCursor
GetWindow
GetWindowRect
InsertMenuW
KillTimer
WaitMessage
IsWindowEnabled
IsDialogMessageA
TranslateMDISysAccel
GetClipboardFormatNameW
GetWindowPlacement
CreateIconIndirect
FindWindowW
DeleteMenu
GetKeyboardLayout

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SysFreeString
VariantClear
VariantInit
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

advapi32

RegFlushKey
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExW

netapi32

NetWkstaGetInfo
NetApiBufferFree

msvcrt

memcpy
memset

kernel32

GetFileType
SetFileTime
RtlUnwindEx
DeleteAtom
GetACP
CloseHandle
LocalFree
GetCurrentProcessId
SizeofResource
VirtualProtect
TlsAlloc
QueryPerformanceFrequency
FindNextFileW
GetFullPathNameW
VirtualFree
ExitProcess
HeapAlloc
GetCPInfoExW
GlobalSize
RtlUnwind
GetCPInfo
GetStdHandle
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
HeapDestroy
FileTimeToDosDateTime
ReadFile
DosDateTimeToFileTime
GetUserDefaultLCID
GetLastError
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalUnlock
FindResourceW
CreateThread
CompareStringW
MapViewOfFile
LoadLibraryA
GetVolumeInformationW
ResetEvent
MulDiv
FreeResource
GetDriveTypeW
GetVersion
RaiseException
GlobalAddAtomW
FormatMessageW
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetCurrentThread
GetLogicalDrives
LocalFileTimeToFileTime
LoadLibraryExW
LockResource
FileTimeToSystemTime
GetCurrentThreadId
UnhandledExceptionFilter
GlobalFindAtomW
VirtualQuery
GlobalFree
VirtualQueryEx
Sleep
SetVolumeLabelW
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GlobalDeleteAtom
GetStartupInfoW
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
GetThreadPriority
GetCurrentProcess
SetThreadPriority
GlobalLock
VirtualAlloc
GetTempPathW
GetCommandLineW
GetSystemInfo
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
LCMapStringW
GetDiskFreeSpaceW
VerSetConditionMask
FindFirstFileW
GetUserDefaultUILanguage
TlsFree
GetConsoleOutputCP
UnmapViewOfFile
GetConsoleCP
lstrlenW
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
GetLocaleInfoW
CreateFileW
DeleteFileW
GetEnvironmentVariableW
GetLocalTime
WaitForSingleObject
GetFileInformationByHandle
WriteFile
CreateFileMappingW
ExitThread
DeleteCriticalSection
GetDateFormatW
TlsGetValue
SetErrorMode
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
RemoveDirectoryW
CreateEventW
WaitForMultipleObjectsEx
GetThreadLocale
SetThreadLocale

ole32

StgCreateDocfileOnILockBytes
CoCreateInstance
CoUninitialize
ReleaseStgMedium
IsEqualGUID
CreateStreamOnHGlobal
OleInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

msacm32

acmStreamMessage
acmStreamSize
acmFormatSuggest
acmStreamOpen
acmStreamClose
acmStreamConvert
acmStreamPrepareHeader
acmMetrics
acmStreamUnprepareHeader

gdi32

Arc
CreateRectRgnIndirect
Pie
SetBkMode
SelectPalette
CreateCompatibleBitmap
GetEnhMetaFileHeader
ExcludeClipRect
SetWindowOrgEx
RectVisible
MaskBlt
AngleArc
DeleteEnhMetaFile
ResizePalette
Chord
SetTextColor
SetDIBits
StretchBlt
SetViewportOrgEx
CreateRectRgn
SetDIBitsToDevice
RealizePalette
GetDIBColorTable
SetDIBColorTable
RoundRect
RestoreDC
GetTextMetricsW
GetWindowOrgEx
CreatePalette
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
Rectangle
MoveToEx
DeleteDC
SaveDC
PlayEnhMetaFile
BitBlt
Ellipse
FrameRgn
GetDeviceCaps
GetBitmapBits
GetTextExtentPoint32W
GetClipBox
Polyline
IntersectClipRect
GetEnhMetaFileBits
GetSystemPaletteEntries
CreateBitmap
SetWinMetaFileBits
CreateDIBitmap
GetStretchBltMode
CreateDIBSection
CreatePenIndirect
GetDIBits
GetEnhMetaFilePaletteEntries
SetStretchBltMode
SetMapMode
CreateFontIndirectW
PolyBezier
LineTo
GetRgnBox
LPtoDP
CreateHalftonePalette
DeleteObject
SelectObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
SetBkColor
CreateCompatibleDC
GetObjectW
GetBrushOrgEx
GetCurrentPositionEx
GetWinMetaFileBits
SetROP2
GetNearestPaletteIndex
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetEnhMetaFileDescriptionW
GetPixel
ArcTo
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPaletteEntries

Exports

Exports

TMethodImplementationIntercept
ZXFreeRam
ZXSpeakGetDefaults
ZXSpeakGetErrTxt
ZXSpeakInit
ZXSpeakUp
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 247KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 64KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 275B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
setup.dll
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
setup.exe
.exe windows x86

93d099f09873f4f31b1b7ec7cb84e6f0

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3a:10:10:87:8e:d6:f7:dd:d4:ec:8e:8f
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

18/09/2019, 12:58

Not After

11/12/2022, 11:53

Subject

CN=Adersoft,O=Adersoft,L=Paris,C=FR,1.2.840.113549.1.9.1=#0c14737570706f72744061646572736f66742e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

27/05/2021, 09:55

Not After

28/06/2032, 09:55

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

20/02/2019, 00:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

87:29:95:80:f9:cc:87:f9:55:33:71:f5:a8:09:e1:fc:4d:e1:39:bb:ee:e7:77:2f:fe:92:89:b5:27:ec:3f:59
Signer

Actual PE Digest

87:29:95:80:f9:cc:87:f9:55:33:71:f5:a8:09:e1:fc:4d:e1:39:bb:ee:e7:77:2f:fe:92:89:b5:27:ec:3f:59

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
lstrcmpiW
MultiByteToWideChar
LoadLibraryExW
ExitProcess
LocalAlloc
LocalFree
FormatMessageW
WaitForSingleObject
GetExitCodeProcess
CreateThread
SetLastError
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
FindResourceExW
GetACP
WideCharToMultiByte
FreeResource
SetFilePointer
ReadFile
CreateFileW
CreateFileMappingW
MapViewOfFile
IsBadReadPtr
UnmapViewOfFile
GetCurrentProcessId
EnumResourceNamesW
GetFileAttributesW
GetFileSize
OpenEventW
SetEvent
ExpandEnvironmentStringsW
Sleep
FlushFileBuffers
GetFileType
WriteFile
WriteConsoleW
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
CloseHandle
FindNextFileW
FindFirstFileExW
FindClose
GetFileSizeEx
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
LCMapStringW
GetStdHandle
GetModuleHandleExW
GetCommandLineW
GetCommandLineA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetModuleFileNameW
SizeofResource
LockResource
LoadResource
FindResourceW
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
GetCurrentProcess
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
OutputDebugStringW
IsDebuggerPresent
FreeLibrary
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
IsValidCodePage

user32

UnregisterClassW
MessageBoxW
GetDlgItem
SetWindowPos
MapWindowPoints
GetClientRect
wsprintfA
GetWindowRect
GetMonitorInfoW
MonitorFromWindow
GetWindowLongW
GetWindow
SetTimer
SendMessageW
GetParent
SetWindowTextW
CharNextW
DispatchMessageW
TranslateMessage
PeekMessageW
MsgWaitForMultipleObjects
CreateWindowExW
DestroyWindow
LoadCursorW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
SetWindowLongW
DefWindowProcW
DialogBoxParamW
EndDialog
GetActiveWindow
KillTimer

advapi32

RegDeleteValueW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
CreateProcessWithLogonW
RegDeleteKeyW
RegCreateKeyExW

shell32

ShellExecuteW

ole32

CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoGetObject
CoGetInstanceFromFile
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CoTaskMemFree

oleaut32

VariantCopy
VariantClear
SafeArrayUnaccessData
VariantChangeType
SafeArrayAccessData
SysAllocString
SysFreeString
VariantInit
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysStringLen
LoadTypeLibEx
SysAllocStringLen

wintrust

WinVerifyTrust

crypt32

CertFreeCertificateContext
CertFindCertificateInStore
CryptMsgGetParam
CertCloseStore
CryptMsgClose
CryptQueryObject

version

GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeW

Sections

.text
Size: 221KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
setup.exe.manifest

Sharing

General

Malware Config

Signatures

Files

ddda39d4b23f5bfa476cbcb2f0b7a115

Code Sign

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7aCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

3d:b7:d2:ee:59:3a:9d:22:57:3f:2c:66:dd:d5:bb:87:cf:47:dd:49Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

Exports

Exports

Sections

.text Size: 744KB - Virtual size: 743KB

.rdata Size: 92KB - Virtual size: 88KB

.data Size: 48KB - Virtual size: 64KB

.idata Size: 8KB - Virtual size: 5KB

_RDATA Size: 4KB - Virtual size: 260B

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 24KB - Virtual size: 21KB

b9f46dfe8cfdf9b0496c5c687fcf680c

Headers

File Characteristics

Imports

version

shlwapi

shell32

ole32

comdlg32

advapi32

user32

oleaut32

kernel32

Exports

Exports

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rdata Size: 810KB - Virtual size: 809KB

.data Size: 104KB - Virtual size: 184.4MB

.pdata Size: 231KB - Virtual size: 230KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 126KB - Virtual size: 125KB

804242ff2ac71ea1a14eeec4858de19b

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

cf:6f:f3:70:d6:01:bf:be:01:df:cc:18:6b:57:48:a2:bb:5b:9e:82:b8:02:61:ad:0f:4d:48:bd:c9:ba:0c:4cSigner

Headers

File Characteristics

Imports

mpr

winmm

comctl32

shell32

user32

version

oleaut32

advapi32

2b:32:50:47:a6:10:0e:8d:f6:fc:89:1f:0d:c6:75:7a
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

3d:b7:d2:ee:59:3a:9d:22:57:3f:2c:66:dd:d5:bb:87:cf:47:dd:49
Signer

.text
Size: 744KB - Virtual size: 743KB

.rdata
Size: 92KB - Virtual size: 88KB

.data
Size: 48KB - Virtual size: 64KB

.idata
Size: 8KB - Virtual size: 5KB

_RDATA
Size: 4KB - Virtual size: 260B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 24KB - Virtual size: 21KB

.text
Size: 3.3MB - Virtual size: 3.3MB

.rdata
Size: 810KB - Virtual size: 809KB

.data
Size: 104KB - Virtual size: 184.4MB

.pdata
Size: 231KB - Virtual size: 230KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 126KB - Virtual size: 125KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

cf:6f:f3:70:d6:01:bf:be:01:df:cc:18:6b:57:48:a2:bb:5b:9e:82:b8:02:61:ad:0f:4d:48:bd:c9:ba:0c:4c
Signer

.text
Size: 3.0MB - Virtual size: 3.0MB

.data
Size: 266KB - Virtual size: 266KB

.bss
Size: - Virtual size: 65KB

.idata
Size: 18KB - Virtual size: 18KB

.didata
Size: 3KB - Virtual size: 3KB

.edata
Size: 512B - Virtual size: 189B

.rdata
Size: 512B - Virtual size: 69B

.reloc
Size: 163KB - Virtual size: 163KB

.pdata
Size: 154KB - Virtual size: 154KB

.rsrc
Size: 237KB - Virtual size: 237KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

4d:19:6d:cb:12:66:3f:be:27:49:ed:4a:25:09:4d:28:f3:8d:1c:28:4d:c9:c4:67:3d:4a:d9:68:19:1a:cc:de
Signer

.text
Size: 3.1MB - Virtual size: 3.1MB

.data
Size: 268KB - Virtual size: 268KB

.bss
Size: - Virtual size: 65KB

.idata
Size: 18KB - Virtual size: 18KB

.didata
Size: 3KB - Virtual size: 3KB

.edata
Size: 512B - Virtual size: 189B

.rdata
Size: 512B - Virtual size: 69B

.reloc
Size: 164KB - Virtual size: 163KB

.pdata
Size: 155KB - Virtual size: 155KB

.rsrc
Size: 254KB - Virtual size: 254KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate