VAMPSET v2[.]2[.]206 - Lite[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

VAMPSET v2.2.206 - Lite.zip
Size

32.8MB
MD5

d65b33e2d6f32edd1230a5f8699cde43
SHA1

51809e905333cd08e8ffec32c752d53b188ce74c
SHA256

961390888afda6269362287b0f909967d507bfe4d3a0926de52933cd75314a85
SHA512

b2425bbaf14991ef9c16e0042ce3ff6044551e4d28e56da9f25264cb20d88c824e5b6fc4ba5e22afd39a1d362a3e8543d6e9992e2dca213b835c19d0c009ba06
SSDEEP

786432:Dx4mWnNQ93QqKwK0Xw0l7+XxLlsN48eenC80wYrAjgPuj:Dygg3Cw0l7+GeenC8xXkGj

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/VAMPSET v2.2.206 - Lite/Vampset.exe
unpack001/VAMPSET v2.2.206 - Lite/iconv.dll
unpack001/VAMPSET v2.2.206 - Lite/libxml2.dll
unpack001/VAMPSET v2.2.206 - Lite/zlib1.dll

Files

VAMPSET v2.2.206 - Lite.zip
.zip
VAMPSET v2.2.206 - Lite/Examples/New place for example files.txt
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V10.124.gz
.gz
MICDEd2V10.124
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V10.128.gz
.gz
MICDEd2V10.128
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V10.134.gz
.gz
MICDEd2V10.134
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V10.135.gz
.gz
MICDEd2V10.135
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V10.141.gz
.gz
MICDEd2V10.141
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V10.142.gz
.gz
MICDEd2V10.142
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V10.145.gz
.gz
MICDEd2V10.145
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V10.146.gz
.gz
MICDEd2V10.146
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V10.156.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V10.159.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V10.165.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V10.175.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V10.176.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V10.185.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V19.103.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V19.104.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V19.108.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V19.111.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V19.112.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V19.113.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V19.122.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V20.103.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V20.104.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V30.104.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDEd2V30.108.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.101.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.102.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.103.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.104.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.105.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.106.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.107.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.108.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.109.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.110.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.111.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.112.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.113.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.114.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.115.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.116.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.117.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.118.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.119.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.121.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.122.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.124.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.127.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.128.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.131.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.134.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.135.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.141.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.142.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.145.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.146.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.156.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.159.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.165.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.175.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.176.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.185.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.93.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.94.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.95.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.96.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.97.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.98.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV10.99.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV19.103.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV19.104.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV19.108.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV19.111.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV19.112.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV19.113.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV19.122.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV20.103.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV20.104.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV30.104.gz
.gz
VAMPSET v2.2.206 - Lite/ICD/MICDV30.108.gz
.gz
VAMPSET v2.2.206 - Lite/Language/Chinese.lan
VAMPSET v2.2.206 - Lite/Language/English.lan
VAMPSET v2.2.206 - Lite/Language/French.lan
VAMPSET v2.2.206 - Lite/Language/German.lan
VAMPSET v2.2.206 - Lite/Language/Russian.lan
VAMPSET v2.2.206 - Lite/Language/Spanish.lan
VAMPSET v2.2.206 - Lite/Language/Suomi.lan
VAMPSET v2.2.206 - Lite/Records/P3F30_sn1078_26-03-2019_10-09-10.cfg
VAMPSET v2.2.206 - Lite/Records/P3F30_sn1078_26-03-2019_10-09-10.dat
VAMPSET v2.2.206 - Lite/Records/SKCP H30_sn12334_15-01-2014_13-32-54.cfg
VAMPSET v2.2.206 - Lite/Records/SKCP H30_sn12334_15-01-2014_13-32-54.dat
VAMPSET v2.2.206 - Lite/Records/Vamp 57F_sn2497_04-05-2016_09-03-22.cfg
VAMPSET v2.2.206 - Lite/Records/Vamp 57F_sn2497_04-05-2016_09-03-22.dat
VAMPSET v2.2.206 - Lite/Records/info.txt
VAMPSET v2.2.206 - Lite/USBdrivers/Static/amd64/ftd2xx.lib
VAMPSET v2.2.206 - Lite/USBdrivers/Static/i386/ftd2xx.lib
VAMPSET v2.2.206 - Lite/USBdrivers/amd64/ftbusui.dll
.dll windows x64

a00865c4b857a44a5c59da787f220a15

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18-09-2013 00:00

Not After

16-11-2016 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ad:1e:2f:1f:8f:b4:70:e1:a1:90:30:c9:93:02:b0:75:54:11:e0:ac:02:e4:3f:38:e2:d4:17:e5:0b:57:d2:65
Signer

Actual PE Digest

ad:1e:2f:1f:8f:b4:70:e1:a1:90:30:c9:93:02:b0:75:54:11:e0:ac:02:e4:3f:38:e2:d4:17:e5:0b:57:d2:65

Digest Algorithm

sha256

PE Digest Matches

true

36:9b:12:47:b9:ef:a8:fb:10:dd:20:d0:8f:e8:54:a2:63:c4:ce:5f
Signer

Actual PE Digest

36:9b:12:47:b9:ef:a8:fb:10:dd:20:d0:8f:e8:54:a2:63:c4:ce:5f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInstanceIdA

kernel32

GetFileType
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
OutputDebugStringA
GetLastError
SetLastError
GetSystemDirectoryA
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
LocalFree
LoadLibraryW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
CreateFileA
CloseHandle
DeviceIoControl
LocalAlloc
FreeLibrary
LoadLibraryA
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
OutputDebugStringW
GetStringTypeW
HeapReAlloc
HeapAlloc
LoadLibraryExW
SetConsoleCtrlHandler
RtlUnwindEx
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
EncodePointer
DecodePointer
IsProcessorFeaturePresent
GetCurrentThread
ExitProcess
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
CreateFileW
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
CreateSemaphoreW
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WriteFile

user32

CheckDlgButton
SetDlgItemTextW
IsDlgButtonChecked
CreateWindowExA
SendMessageA
wsprintfA
EnableWindow
SetCursor
GetWindowLongPtrA
SetWindowLongPtrA
LoadCursorA
GetDlgItem

shell32

ExtractIconA

Exports

Exports

DllMain
FTBUSUIPropPageProvider

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/USBdrivers/amd64/ftcserco.dll
.dll windows x64

012bca0efbe90a581f55de6318cb6327

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18-09-2013 00:00

Not After

16-11-2016 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:62:44:1f:37:15:80:fd:f8:39:05:2b:ae:9e:2d:4f:7c:5a:8e:b8:df:dc:7c:85:39:f4:79:dd:04:8d:22:ff
Signer

Actual PE Digest

08:62:44:1f:37:15:80:fd:f8:39:05:2b:ae:9e:2d:4f:7c:5a:8e:b8:df:dc:7c:85:39:f4:79:dd:04:8d:22:ff

Digest Algorithm

sha256

PE Digest Matches

true

d9:fc:70:8f:81:e6:64:e6:e6:5b:db:8a:ed:d2:e6:fb:c3:7d:3d:e8
Signer

Actual PE Digest

d9:fc:70:8f:81:e6:64:e6:e6:5b:db:8a:ed:d2:e6:fb:c3:7d:3d:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

setupapi

SetupDiOpenDeviceInfoW
SetupDiGetActualSectionToInstallW
SetupDiGetSelectedDriverW
CM_Get_Parent
CM_Get_Sibling
CM_Get_Child
SetupInstallServicesFromInfSectionW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupCloseInfFile
SetupDiCreateDeviceInfoList
SetupDiGetDriverInfoDetailW
SetupInstallFromInfSectionW
SetupOpenInfFileW
SetupDiCreateDevRegKeyW
CM_Get_Device_IDW

kernel32

LoadLibraryExW
VirtualProtect
RtlUnwindEx
VirtualQuery
GetSystemInfo
SetThreadStackGuarantee
OutputDebugStringW
lstrlenW
GetLastError
LocalAlloc
LocalFree
WideCharToMultiByte
MultiByteToWideChar
FlsSetValue
GetCommandLineA
GetVersionExW
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleW
ExitProcess
EncodePointer
DecodePointer
FlsFree
SetLastError
FlsGetValue
GetCurrentThreadId
FlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
OutputDebugStringA
WriteFile
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
Sleep
GetStringTypeW
VirtualAlloc

advapi32

RegOpenKeyW
RegCloseKey
RegSetValueExW
RegQueryValueExW

user32

wsprintfW

msports

ComDBClaimPort
ComDBGetCurrentPortUsage
ComDBOpen
ComDBClose

Exports

Exports

FTCSERCoInstaller

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/USBdrivers/amd64/ftd2xx.lib
VAMPSET v2.2.206 - Lite/USBdrivers/amd64/ftd2xx64.dll
.dll windows x64

22594aca073884db8250fab7a4ac13e7

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18-09-2013 00:00

Not After

16-11-2016 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

20:fd:db:2f:cd:51:46:29:5e:45:da:cc:5a:35:b8:81:b9:31:9e:fd:9a:96:a2:e9:61:db:0e:e8:78:f6:d8:76
Signer

Actual PE Digest

20:fd:db:2f:cd:51:46:29:5e:45:da:cc:5a:35:b8:81:b9:31:9e:fd:9a:96:a2:e9:61:db:0e:e8:78:f6:d8:76

Digest Algorithm

sha256

PE Digest Matches

true

a0:bc:7f:41:90:82:9c:7b:b8:f0:61:b9:80:d2:fa:54:8b:d7:1b:59
Signer

Actual PE Digest

a0:bc:7f:41:90:82:9c:7b:b8:f0:61:b9:80:d2:fa:54:8b:d7:1b:59

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

setupapi

CM_Get_Device_ID_ExA
SetupDiGetDeviceInfoListDetailA
SetupDiOpenDeviceInfoA
CM_Reenumerate_DevNode_Ex
CM_Locate_DevNode_ExA
SetupDiClassNameFromGuidExA
SetupDiGetClassDescriptionExA
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiCreateDeviceInfoListExA
SetupDiClassGuidsFromNameExA
SetupDiSetClassInstallParamsA
SetupDiGetDeviceInstallParamsA
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiGetClassDevsExA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo

kernel32

WriteConsoleW
SetFilePointerEx
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
LoadLibraryExW
FreeLibrary
SetConsoleCtrlHandler
CloseHandle
GetLastError
GetCurrentProcess
LocalFree
FormatMessageA
OutputDebugStringW
lstrlenA
DeviceIoControl
CreateFileA
ReadFile
WriteFile
GetOverlappedResult
CancelIo
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseMutex
WaitForSingleObject
CreateMutexA
lstrcmpiA
lstrcpynA
HeapReAlloc
FlushFileBuffers
CreateSemaphoreW
HeapSize
CreateFileW
SetEndOfFile
ReadConsoleW
lstrcpyA
GetProcAddress
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentThreadId
RtlPcToFileHeader
RaiseException
FatalAppExitA
ExitProcess
GetModuleHandleExW
SetEnvironmentVariableA
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
IsDebuggerPresent
IsProcessorFeaturePresent
RtlUnwindEx
GetStdHandle
GetFileType
GetStartupInfoW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThread
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetProcessHeap
GetModuleFileNameW
GetTimeZoneInformation
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW

user32

CharPrevA
CharNextA

advapi32

RegQueryValueExA
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
InitiateSystemShutdownExA

Exports

Exports

FT_Close
FT_ClrDtr
FT_ClrRts
FT_ComPortCancelIdle
FT_ComPortIdle
FT_CreateDeviceInfoList
FT_CyclePort
FT_EEPROM_Program
FT_EEPROM_Read
FT_EE_Program
FT_EE_ProgramEx
FT_EE_Read
FT_EE_ReadConfig
FT_EE_ReadECC
FT_EE_ReadEx
FT_EE_UARead
FT_EE_UASize
FT_EE_UAWrite
FT_EE_WriteConfig
FT_EraseEE
FT_Finalise
FT_GetBitMode
FT_GetComPortNumber
FT_GetDeviceInfo
FT_GetDeviceInfoDetail
FT_GetDeviceInfoList
FT_GetDriverVersion
FT_GetEventStatus
FT_GetLatencyTimer
FT_GetLibraryVersion
FT_GetModemStatus
FT_GetQueueStatus
FT_GetQueueStatusEx
FT_GetStatus
FT_Initialise
FT_IoCtl
FT_ListDevices
FT_Open
FT_OpenEx
FT_Purge
FT_Read
FT_ReadEE
FT_Reload
FT_Rescan
FT_ResetDevice
FT_ResetPort
FT_RestartInTask
FT_SetBaudRate
FT_SetBitMode
FT_SetBreakOff
FT_SetBreakOn
FT_SetChars
FT_SetDataCharacteristics
FT_SetDeadmanTimeout
FT_SetDivisor
FT_SetDtr
FT_SetEventNotification
FT_SetFlowControl
FT_SetLatencyTimer
FT_SetResetPipeRetryCount
FT_SetRts
FT_SetTimeouts
FT_SetUSBParameters
FT_SetWaitMask
FT_StopInTask
FT_VendorCmdGet
FT_VendorCmdGetEx
FT_VendorCmdSet
FT_VendorCmdSetEx
FT_W32_CancelIo
FT_W32_ClearCommBreak
FT_W32_ClearCommError
FT_W32_CloseHandle
FT_W32_CreateFile
FT_W32_EscapeCommFunction
FT_W32_GetCommMask
FT_W32_GetCommModemStatus
FT_W32_GetCommState
FT_W32_GetCommTimeouts
FT_W32_GetLastError
FT_W32_GetOverlappedResult
FT_W32_PurgeComm
FT_W32_ReadFile
FT_W32_SetCommBreak
FT_W32_SetCommMask
FT_W32_SetCommState
FT_W32_SetCommTimeouts
FT_W32_SetupComm
FT_W32_WaitCommEvent
FT_W32_WriteFile
FT_WaitOnMask
FT_Write
FT_WriteEE

Sections

.text
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/USBdrivers/amd64/ftdibus.sys
.exe windows x64

6051bc1a5ba7a170bf679c007446443f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18-09-2013 00:00

Not After

16-11-2016 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f2:0d:78:e9:1a:9b:cc:84:12:24:0a:31:57:92:91:15:4b:29:11:03:8c:36:ba:0d:68:f0:f2:85:14:2f:f2:50
Signer

Actual PE Digest

f2:0d:78:e9:1a:9b:cc:84:12:24:0a:31:57:92:91:15:4b:29:11:03:8c:36:ba:0d:68:f0:f2:85:14:2f:f2:50

Digest Algorithm

sha256

PE Digest Matches

true

9c:58:d3:f7:0e:59:47:e6:19:a9:6f:a1:b1:41:8d:f9:cc:39:e0:e0
Signer

Actual PE Digest

9c:58:d3:f7:0e:59:47:e6:19:a9:6f:a1:b1:41:8d:f9:cc:39:e0:e0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
IoBuildDeviceIoControlRequest
KeInitializeMutex
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
IoDeleteDevice
KeSetEvent
KeInitializeEvent
RtlQueryRegistryValues
KeInitializeDpc
KeReleaseSpinLock
KeInitializeTimer
PoSetPowerState
RtlFreeUnicodeString
ExFreePool
IofCompleteRequest
KeWaitForSingleObject
RtlWriteRegistryValue
IoAttachDeviceToDeviceStack
RtlCopyUnicodeString
IoCreateDevice
IofCallDriver
KeAcquireSpinLockRaiseToDpc
ExReleaseFastMutex
ExAcquireFastMutex
RtlInitUnicodeString
IoDetachDevice
KeReleaseMutex
ObfReferenceObject
ObfDereferenceObject
KeCancelTimer
IoGetDeviceProperty
KeClearEvent
IoFreeWorkItem
PoRequestPowerIrp
IoCancelIrp
IoAllocateWorkItem
PoStartNextPowerIrp
PoCallDriver
IoQueueWorkItem
IoReleaseCancelSpinLock
ExEventObjectType
ObReferenceObjectByHandle
IoFreeIrp
IoAllocateIrp
MmUnmapLockedPages
IoBuildPartialMdl
IoFreeMdl
MmMapLockedPagesSpecifyCache
KeSetTimer
IoAllocateMdl
KeSetPriorityThread
PsCreateSystemThread
PsTerminateSystemThread
ZwClose
KeWaitForMultipleObjects
KeReleaseSpinLockFromDpcLevel
KeAcquireSpinLockAtDpcLevel
RtlCompareUnicodeString
RtlUnicodeStringToInteger
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
IoGetDeviceObjectPointer
RtlAppendUnicodeStringToString
IoGetDeviceInterfaces
RtlCompareMemory
IoOpenDeviceRegistryKey
ObReferenceObjectByPointer
RtlUnicodeStringToAnsiString
ZwQueryValueKey
RtlFreeAnsiString
ZwEnumerateKey
ZwQueryKey
ZwOpenKey
ZwSetValueKey
RtlStringFromGUID
IoInvalidateDeviceRelations
ZwEnumerateValueKey
swprintf
IoWMIRegistrationControl
KeBugCheckEx
ZwSetSecurityObject
IoDeviceObjectType
_snwprintf
RtlLengthSecurityDescriptor
SeCaptureSecurityDescriptor
ExFreePoolWithTag
RtlCreateSecurityDescriptor
ObOpenObjectByPointer
RtlAbsoluteToSelfRelativeSD
IoIsWdmVersionAvailable
SeExports
wcschr
_wcsnicmp
RtlLengthSid
RtlAddAccessAllowedAce
RtlGetSaclSecurityDescriptor
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
ZwCreateKey
PsGetVersion
MmGetSystemRoutineAddress
RtlSetDaclSecurityDescriptor

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_GetUSBDIVersion
USBD_ParseConfigurationDescriptorEx

wmilib.sys

WmiCompleteRequest
WmiSystemControl

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/USBdrivers/amd64/ftlang.dll
.dll windows x64

da63af1f4a6146b05f2290d588edfeb8

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18-09-2013 00:00

Not After

16-11-2016 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a9:2d:bd:9f:a5:d5:fc:34:55:7f:c9:33:38:7e:93:96:ef:e8:a9:f2:69:17:50:60:fe:82:e7:c0:68:29:6b:98
Signer

Actual PE Digest

a9:2d:bd:9f:a5:d5:fc:34:55:7f:c9:33:38:7e:93:96:ef:e8:a9:f2:69:17:50:60:fe:82:e7:c0:68:29:6b:98

Digest Algorithm

sha256

PE Digest Matches

true

22:e9:af:55:c3:dc:7f:d3:ca:f2:68:82:0f:11:89:5d:50:43:81:8d
Signer

Actual PE Digest

22:e9:af:55:c3:dc:7f:d3:ca:f2:68:82:0f:11:89:5d:50:43:81:8d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FindResourceExW
LoadResource
GetUserDefaultUILanguage
GetCommandLineA
GetCurrentThreadId
HeapAlloc
EncodePointer
DecodePointer
RtlPcToFileHeader
RaiseException
GetLastError
HeapFree
SetLastError
GetCurrentThread
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
CreateSemaphoreW
RtlUnwindEx
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
IsDebuggerPresent
IsProcessorFeaturePresent
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
HeapReAlloc
OutputDebugStringW
GetStringTypeW
HeapSize
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW

Exports

Exports

??0CFTLang@@QEAA@XZ
??4CFTLang@@QEAAAEAV0@AEBV0@@Z
FTGetText
nFTLang

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/USBdrivers/amd64/ftser2k.sys
.exe windows x64

7fbb8f4b9ef075d7190f83c0a786f642

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18-09-2013 00:00

Not After

16-11-2016 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

93:6d:4d:ab:d3:ad:1f:d0:09:c7:89:ce:f7:3c:2f:37:70:e9:02:a1:a1:a0:47:e5:33:91:a1:70:d7:01:cf:d8
Signer

Actual PE Digest

93:6d:4d:ab:d3:ad:1f:d0:09:c7:89:ce:f7:3c:2f:37:70:e9:02:a1:a1:a0:47:e5:33:91:a1:70:d7:01:cf:d8

Digest Algorithm

sha256

PE Digest Matches

true

d1:f0:be:c2:72:e9:95:87:0f:f1:66:dc:5a:a1:b7:be:a3:b4:b0:5c
Signer

Actual PE Digest

d1:f0:be:c2:72:e9:95:87:0f:f1:66:dc:5a:a1:b7:be:a3:b4:b0:5c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoAcquireCancelSpinLock
IoReleaseCancelSpinLock
KeSetEvent
MmLockPagableDataSection
ExAllocatePoolWithTag
MmUnlockPagableImageSection
KeRemoveQueueDpc
KeWaitForSingleObject
PoSetPowerState
IoWMIRegistrationControl
KeDelayExecutionThread
IoDetachDevice
ExFreePoolWithTag
IoDeleteDevice
IoCancelIrp
KeInitializeTimer
KeInitializeDpc
ExAllocatePoolWithQuotaTag
IofCallDriver
ExAcquireFastMutex
ExReleaseFastMutex
MmQuerySystemSize
MmLockPagableSectionByHandle
KeWaitForMultipleObjects
IoOpenDeviceRegistryKey
ZwClose
KeInsertQueueDpc
KeSetTimer
KeCancelTimer
PoCallDriver
IoAllocateErrorLogEntry
KeReleaseSpinLock
KeAcquireSpinLockAtDpcLevel
KeReleaseSpinLockFromDpcLevel
RtlAppendUnicodeToString
RtlInitUnicodeString
RtlIntegerToUnicodeString
RtlAppendUnicodeStringToString
IoCreateDevice
KeInitializeEvent
IoAttachDeviceToDeviceStack
IoGetConfigurationInformation
IoCreateSymbolicLink
RtlWriteRegistryValue
IoRegisterDeviceInterface
IoSetDeviceInterfaceState
IoDeleteSymbolicLink
RtlDeleteRegistryValue
ObfDereferenceObject
RtlQueryRegistryValues
ZwQueryValueKey
PoStartNextPowerIrp
PoRequestPowerIrp
KeClearEvent
IoAllocateIrp
IoFreeIrp
PsCreateSystemThread
ObReferenceObjectByHandle
KeSetPriorityThread
PsTerminateSystemThread
KeBugCheckEx
KeAcquireSpinLockRaiseToDpc
IoWriteErrorLogEntry
IofCompleteRequest
__C_specific_handler

wmilib.sys

WmiSystemControl
WmiCompleteRequest

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGESRP0
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGESER
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/USBdrivers/amd64/ftserui2.dll
.dll windows x64

c8ae9f3f73c5d671f444c9628a9d4d04

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18-09-2013 00:00

Not After

16-11-2016 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3e:e5:7c:13:3f:85:07:12:f0:ac:9c:fd:80:18:eb:3b:66:06:14:a4:d2:b9:68:33:16:81:7e:ac:f4:2a:5d:f7
Signer

Actual PE Digest

3e:e5:7c:13:3f:85:07:12:f0:ac:9c:fd:80:18:eb:3b:66:06:14:a4:d2:b9:68:33:16:81:7e:ac:f4:2a:5d:f7

Digest Algorithm

sha256

PE Digest Matches

true

dd:a9:51:9b:a4:0d:85:f1:10:ca:38:ee:ec:79:d4:67:af:95:ae:31
Signer

Actual PE Digest

dd:a9:51:9b:a4:0d:85:f1:10:ca:38:ee:ec:79:d4:67:af:95:ae:31

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcrt

__C_specific_handler
memset
memcpy
wcscspn
wcsspn
_itoa
_wcsupr
wcsstr
wcschr

setupapi

CM_Get_Next_Res_Des
SetupDiGetDeviceInstanceIdW
SetupDiGetActualSectionToInstallW
SetupDiGetSelectedDriverW
CM_Get_First_Log_Conf
SetupDiCallClassInstaller
SetupDiOpenDevRegKey
SetupDiGetDeviceInfoListDetailW
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceRegistryPropertyW
SetupDiSetDeviceRegistryPropertyW
SetupDiSetClassInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiGetDriverInfoDetailW
SetupInstallFromInfSectionW
CM_Free_Res_Des_Handle
SetupOpenInfFileW
SetupDiCreateDevRegKeyW
CM_Get_DevNode_Status
SetupCloseInfFile
SetupDiInstallDevice
CM_Get_Res_Des_Data
SetupDiRemoveDevice
CM_Free_Log_Conf_Handle

user32

wvsprintfW
CharNextW
CheckRadioButton
CharPrevW
MoveWindow
WinHelpW
SetWindowTextW
EnableWindow
SendMessageW
SetDlgItemTextW
SetWindowLongPtrW
LoadStringW
SendDlgItemMessageW
EndDialog
GetDlgItem
GetDC
wsprintfW
GetWindowLongPtrW
GetParent
GetFocus
GetWindowRect
GetDlgCtrlID
IsDlgButtonChecked
ShowWindow
CheckDlgButton
GetWindowTextW
DialogBoxParamW
GetWindowTextLengthW
MessageBoxW
SendMessageTimeoutW

advapi32

RegQueryValueExW
RegCloseKey
RegEnumValueW
RegOpenKeyExW
RegSetValueExW

kernel32

GetModuleHandleExW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
MultiByteToWideChar
FreeLibrary
lstrcmpiW
DisableThreadLibraryCalls
CloseHandle
QueryDosDeviceW
DefineDosDeviceW
CreateFileW
lstrcpyW
LocalFree
FindActCtxSectionStringW
OutputDebugStringA
WriteProfileStringW
lstrcatW
LocalAlloc
GetProcAddress
SetLastError
GetLastError
DeactivateActCtx
lstrlenW
lstrcmpW
GetModuleFileNameW
GetProfileStringW
LoadLibraryW
ActivateActCtx
CreateActCtxW
QueryActCtxW
GetUserDefaultLCID
GetLocaleInfoW

gdi32

GetTextExtentPoint32W

msports

ComDBReleasePort
ComDBClaimPort
ComDBGetCurrentPortUsage
ComDBOpen
ComDBClaimNextFreePort
ComDBClose

Exports

Exports

LibMain
ParallelPortPropPageProvider
PortsClassInstaller
SerialPortPropPageProvider

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/USBdrivers/ftd2xx.h
VAMPSET v2.2.206 - Lite/USBdrivers/ftdibus.cat
VAMPSET v2.2.206 - Lite/USBdrivers/ftdibus.inf
VAMPSET v2.2.206 - Lite/USBdrivers/ftdiport.cat
VAMPSET v2.2.206 - Lite/USBdrivers/ftdiport.inf
VAMPSET v2.2.206 - Lite/USBdrivers/i386/ftbusui.dll
.dll windows x86

fbbcc265d39fff362ac99c7ad202ca4b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18-09-2013 00:00

Not After

16-11-2016 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

29:dd:69:f8:7d:2a:f2:0b:a5:25:f6:4f:2b:cc:33:01:0e:27:e8:3e:4a:1f:38:45:c8:86:9b:ec:a7:eb:4d:63
Signer

Actual PE Digest

29:dd:69:f8:7d:2a:f2:0b:a5:25:f6:4f:2b:cc:33:01:0e:27:e8:3e:4a:1f:38:45:c8:86:9b:ec:a7:eb:4d:63

Digest Algorithm

sha256

PE Digest Matches

true

1f:d3:2c:c0:92:6d:2d:d1:35:61:b5:22:6f:57:2c:fe:ce:df:a0:0b
Signer

Actual PE Digest

1f:d3:2c:c0:92:6d:2d:d1:35:61:b5:22:6f:57:2c:fe:ce:df:a0:0b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInstanceIdA

kernel32

GetStdHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
OutputDebugStringA
GetLastError
SetLastError
GetSystemDirectoryA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LocalFree
LoadLibraryA
LoadLibraryW
CreateFileA
CloseHandle
DeviceIoControl
LocalAlloc
FreeLibrary
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapSize
OutputDebugStringW
GetStringTypeW
HeapReAlloc
HeapAlloc
LoadLibraryExW
SetConsoleCtrlHandler
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
EncodePointer
DecodePointer
IsProcessorFeaturePresent
RtlUnwind
GetCurrentThread
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
CreateFileW
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
CreateSemaphoreW
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WriteFile

user32

CheckDlgButton
SetDlgItemTextW
IsDlgButtonChecked
CreateWindowExA
SendMessageA
wsprintfA
EnableWindow
SetCursor
GetWindowLongA
SetWindowLongA
LoadCursorA
GetDlgItem

shell32

ExtractIconA

Exports

Exports

DllMain
FTBUSUIPropPageProvider

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/USBdrivers/i386/ftcserco.dll
.dll windows x86

db81bbc65091a3b52914dd7b558d6236

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18-09-2013 00:00

Not After

16-11-2016 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9b:b5:cf:f5:dd:b2:1b:37:0e:24:61:3d:24:bc:80:ef:98:1d:2b:30:f3:0b:3f:66:0e:a0:be:4a:16:61:04:c0
Signer

Actual PE Digest

9b:b5:cf:f5:dd:b2:1b:37:0e:24:61:3d:24:bc:80:ef:98:1d:2b:30:f3:0b:3f:66:0e:a0:be:4a:16:61:04:c0

Digest Algorithm

sha256

PE Digest Matches

true

af:10:bc:80:14:9e:39:86:e9:37:85:4e:c2:e0:38:f1:3b:09:fd:4d
Signer

Actual PE Digest

af:10:bc:80:14:9e:39:86:e9:37:85:4e:c2:e0:38:f1:3b:09:fd:4d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

CM_Get_Device_IDW
CM_Get_Parent
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
CM_Get_Child
CM_Get_Sibling
SetupDiCreateDevRegKeyW
SetupInstallFromInfSectionW
SetupDiGetSelectedDriverW
SetupInstallServicesFromInfSectionW
SetupDiGetActualSectionToInstallW
SetupOpenInfFileW
SetupDiGetDriverInfoDetailW
SetupCloseInfFile

kernel32

GetCurrentProcessId
GetLocaleInfoA
VirtualQuery
GetSystemInfo
OutputDebugStringW
GetLastError
lstrlenW
LocalFree
LocalAlloc
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetCPInfo
GetACP
GetOEMCP
OutputDebugStringA
LCMapStringA
LCMapStringW
LoadLibraryExA
InitializeCriticalSection
Sleep
RtlUnwind
GetStringTypeA
GetStringTypeW
VirtualProtect

advapi32

RegQueryValueExW
RegSetValueExW
RegOpenKeyW
RegCloseKey

user32

wsprintfW

msports

ComDBClaimPort
ComDBGetCurrentPortUsage
ComDBOpen
ComDBClose

Exports

Exports

FTCSERCoInstaller

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/USBdrivers/i386/ftd2xx.dll
.dll windows x86

02f6a86f5a424a066828ffd5273aa9ee

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18-09-2013 00:00

Not After

16-11-2016 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

80:1a:c2:01:64:1a:13:11:4d:5a:ea:57:0d:9f:b9:17:ae:21:9a:22:78:39:70:b8:43:02:13:ab:b1:25:36:c3
Signer

Actual PE Digest

80:1a:c2:01:64:1a:13:11:4d:5a:ea:57:0d:9f:b9:17:ae:21:9a:22:78:39:70:b8:43:02:13:ab:b1:25:36:c3

Digest Algorithm

sha256

PE Digest Matches

true

d0:16:f8:7d:99:95:da:33:98:15:db:de:80:fc:49:08:19:c2:79:4e
Signer

Actual PE Digest

d0:16:f8:7d:99:95:da:33:98:15:db:de:80:fc:49:08:19:c2:79:4e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

CM_Get_Device_ID_ExA
SetupDiGetDeviceInfoListDetailA
SetupDiOpenDeviceInfoA
CM_Reenumerate_DevNode_Ex
CM_Locate_DevNode_ExA
SetupDiClassNameFromGuidExA
SetupDiGetClassDescriptionExA
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiCreateDeviceInfoListExA
SetupDiClassGuidsFromNameExA
SetupDiSetClassInstallParamsA
SetupDiGetDeviceInstallParamsA
SetupDiGetDeviceRegistryPropertyA
SetupDiCallClassInstaller
SetupDiGetClassDevsExA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo

kernel32

WriteConsoleW
SetFilePointerEx
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
LoadLibraryExW
FreeLibrary
SetConsoleCtrlHandler
CloseHandle
GetLastError
GetCurrentProcess
LocalFree
FormatMessageA
OutputDebugStringW
lstrlenA
DeviceIoControl
CreateFileA
ReadFile
WriteFile
GetOverlappedResult
CancelIo
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseMutex
WaitForSingleObject
CreateMutexA
lstrcmpiA
lstrcpynA
HeapReAlloc
FlushFileBuffers
CreateSemaphoreW
HeapSize
CreateFileW
SetEndOfFile
ReadConsoleW
lstrcpyA
GetModuleHandleExW
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentThreadId
RaiseException
FatalAppExitA
ExitProcess
SetEnvironmentVariableA
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
GetFileType
GetStartupInfoW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThread
GetStringTypeW
RtlUnwind
GetConsoleCP
GetConsoleMode
GetProcessHeap
GetModuleFileNameW
GetTimeZoneInformation
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW

user32

CharPrevA
CharNextA

advapi32

RegQueryValueExA
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
InitiateSystemShutdownExA

Exports

Exports

FT_Close
FT_ClrDtr
FT_ClrRts
FT_ComPortCancelIdle
FT_ComPortIdle
FT_CreateDeviceInfoList
FT_CyclePort
FT_EEPROM_Program
FT_EEPROM_Read
FT_EE_Program
FT_EE_ProgramEx
FT_EE_Read
FT_EE_ReadConfig
FT_EE_ReadECC
FT_EE_ReadEx
FT_EE_UARead
FT_EE_UASize
FT_EE_UAWrite
FT_EE_WriteConfig
FT_EraseEE
FT_GetBitMode
FT_GetComPortNumber
FT_GetDeviceInfo
FT_GetDeviceInfoDetail
FT_GetDeviceInfoList
FT_GetDriverVersion
FT_GetEventStatus
FT_GetLatencyTimer
FT_GetLibraryVersion
FT_GetModemStatus
FT_GetQueueStatus
FT_GetQueueStatusEx
FT_GetStatus
FT_IoCtl
FT_ListDevices
FT_Open
FT_OpenEx
FT_Purge
FT_Read
FT_ReadEE
FT_Reload
FT_Rescan
FT_ResetDevice
FT_ResetPort
FT_RestartInTask
FT_SetBaudRate
FT_SetBitMode
FT_SetBreakOff
FT_SetBreakOn
FT_SetChars
FT_SetDataCharacteristics
FT_SetDeadmanTimeout
FT_SetDivisor
FT_SetDtr
FT_SetEventNotification
FT_SetFlowControl
FT_SetLatencyTimer
FT_SetResetPipeRetryCount
FT_SetRts
FT_SetTimeouts
FT_SetUSBParameters
FT_SetWaitMask
FT_StopInTask
FT_VendorCmdGet
FT_VendorCmdGetEx
FT_VendorCmdSet
FT_VendorCmdSetEx
FT_W32_CancelIo
FT_W32_ClearCommBreak
FT_W32_ClearCommError
FT_W32_CloseHandle
FT_W32_CreateFile
FT_W32_EscapeCommFunction
FT_W32_GetCommMask
FT_W32_GetCommModemStatus
FT_W32_GetCommState
FT_W32_GetCommTimeouts
FT_W32_GetLastError
FT_W32_GetOverlappedResult
FT_W32_PurgeComm
FT_W32_ReadFile
FT_W32_SetCommBreak
FT_W32_SetCommMask
FT_W32_SetCommState
FT_W32_SetCommTimeouts
FT_W32_SetupComm
FT_W32_WaitCommEvent
FT_W32_WriteFile
FT_WaitOnMask
FT_Write
FT_WriteEE
_FT_Finalise@0
_FT_Initialise@0

Sections

.text
Size: 203KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/USBdrivers/i386/ftd2xx.lib
VAMPSET v2.2.206 - Lite/USBdrivers/i386/ftdibus.sys
.exe windows x86

25f57ec06f6fa8553c2e058ef170fd1f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18-09-2013 00:00

Not After

16-11-2016 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

84:a6:50:17:63:6b:b2:0d:09:d7:3f:6e:4f:b2:f0:8f:e3:c3:ab:b3:a5:91:6f:3e:9d:f3:2c:0a:be:00:d3:76
Signer

Actual PE Digest

84:a6:50:17:63:6b:b2:0d:09:d7:3f:6e:4f:b2:f0:8f:e3:c3:ab:b3:a5:91:6f:3e:9d:f3:2c:0a:be:00:d3:76

Digest Algorithm

sha256

PE Digest Matches

true

16:0e:94:40:0b:dd:91:a3:d4:70:0c:a2:18:ef:68:ed:da:37:d1:fd
Signer

Actual PE Digest

16:0e:94:40:0b:dd:91:a3:d4:70:0c:a2:18:ef:68:ed:da:37:d1:fd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

memcpy
KeInitializeSpinLock
KeSetEvent
InterlockedDecrement
RtlFreeUnicodeString
InterlockedIncrement
RtlWriteRegistryValue
RtlQueryRegistryValues
memset
KeInitializeDpc
KeInitializeTimer
KeInitializeMutex
IoAttachDeviceToDeviceStack
IoRegisterDeviceInterface
IoDeleteDevice
IoCreateDevice
IofCallDriver
IofCompleteRequest
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
ExAllocatePoolWithTag
RtlCopyUnicodeString
RtlInitUnicodeString
InterlockedExchange
IoGetDeviceProperty
KeCancelTimer
KeReleaseMutex
ObfReferenceObject
IoDetachDevice
IoSetDeviceInterfaceState
ExFreePool
PoSetPowerState
ObfDereferenceObject
PoStartNextPowerIrp
IoFreeWorkItem
PoCallDriver
IoReleaseCancelSpinLock
PoRequestPowerIrp
IoCancelIrp
IoQueueWorkItem
IoAllocateWorkItem
KeClearEvent
IoFreeIrp
IoAllocateIrp
ObReferenceObjectByHandle
ExEventObjectType
IoFreeMdl
IoBuildPartialMdl
MmUnmapLockedPages
KeSetTimer
IoAllocateMdl
MmMapLockedPagesSpecifyCache
PsTerminateSystemThread
KeWaitForMultipleObjects
KeSetPriorityThread
KeGetCurrentThread
ZwClose
PsCreateSystemThread
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
RtlCompareUnicodeString
RtlUnicodeStringToInteger
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
RtlIntegerToUnicodeString
IoOpenDeviceRegistryKey
ObReferenceObjectByPointer
IoGetDeviceObjectPointer
RtlCompareMemory
IoGetDeviceInterfaces
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
ZwQueryValueKey
ZwOpenKey
ZwEnumerateKey
ZwQueryKey
ZwSetValueKey
RtlStringFromGUID
IoInvalidateDeviceRelations
ZwEnumerateValueKey
swprintf
IoWMIRegistrationControl
KeTickCount
KeBugCheckEx
KeInitializeEvent
ObOpenObjectByPointer
IoDeviceObjectType
RtlGetDaclSecurityDescriptor
RtlGetSaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
_snwprintf
ZwSetSecurityObject
ExFreePoolWithTag
SeCaptureSecurityDescriptor
SeExports
IoIsWdmVersionAvailable
_wcsnicmp
RtlAddAccessAllowedAce
RtlLengthSid
wcschr
RtlAbsoluteToSelfRelativeSD
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
ZwCreateKey
MmGetSystemRoutineAddress
PsGetVersion
RtlLengthSecurityDescriptor

hal

ExReleaseFastMutex
KeGetCurrentIrql
ExAcquireFastMutex
KfAcquireSpinLock
KfReleaseSpinLock

usbd.sys

USBD_CreateConfigurationRequestEx
USBD_ParseConfigurationDescriptorEx
USBD_GetUSBDIVersion

wmilib.sys

WmiCompleteRequest
WmiSystemControl

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/USBdrivers/i386/ftlang.dll
.dll windows x86

895dc425d86066cbbee2327c4f6ac52d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18-09-2013 00:00

Not After

16-11-2016 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

89:32:d3:66:c8:cc:27:46:eb:21:6a:c6:e0:21:27:e4:5e:74:85:b4:81:16:bc:1e:cc:f2:a7:d6:ac:27:42:bd
Signer

Actual PE Digest

89:32:d3:66:c8:cc:27:46:eb:21:6a:c6:e0:21:27:e4:5e:74:85:b4:81:16:bc:1e:cc:f2:a7:d6:ac:27:42:bd

Digest Algorithm

sha256

PE Digest Matches

true

16:37:f8:55:ef:66:aa:de:41:1c:42:b9:79:11:a6:1e:a4:9e:cc:c9
Signer

Actual PE Digest

16:37:f8:55:ef:66:aa:de:41:1c:42:b9:79:11:a6:1e:a4:9e:cc:c9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindResourceExW
LoadResource
GetUserDefaultUILanguage
GetCommandLineA
GetCurrentThreadId
HeapAlloc
EncodePointer
DecodePointer
RaiseException
GetLastError
HeapFree
SetLastError
GetCurrentThread
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
CreateSemaphoreW
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
IsDebuggerPresent
IsProcessorFeaturePresent
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
RtlUnwind
HeapReAlloc
OutputDebugStringW
GetStringTypeW
HeapSize
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW

Exports

Exports

??0CFTLang@@QAE@XZ
??4CFTLang@@QAEAAV0@ABV0@@Z
FTGetText
nFTLang

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/USBdrivers/i386/ftser2k.sys
.exe windows x86

d10f8df4c1ffd0be5249acf2ce99ebc7

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18-09-2013 00:00

Not After

16-11-2016 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8a:d0:28:7d:ed:ef:36:6c:e3:eb:32:f2:82:70:36:5c:35:99:c5:26:23:3e:6b:3d:59:62:7b:f0:2f:30:93:02
Signer

Actual PE Digest

8a:d0:28:7d:ed:ef:36:6c:e3:eb:32:f2:82:70:36:5c:35:99:c5:26:23:3e:6b:3d:59:62:7b:f0:2f:30:93:02

Digest Algorithm

sha256

PE Digest Matches

true

46:f3:97:02:c8:04:af:3e:a5:6a:0c:25:3e:df:b9:b2:df:ed:e1:f3
Signer

Actual PE Digest

46:f3:97:02:c8:04:af:3e:a5:6a:0c:25:3e:df:b9:b2:df:ed:e1:f3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoWMIRegistrationControl
IoDeleteDevice
IoDetachDevice
KeDelayExecutionThread
KeInitializeDpc
KeInitializeTimer
memmove
ExAllocatePoolWithTag
memset
IofCallDriver
ExAllocatePoolWithQuotaTag
ZwClose
IoOpenDeviceRegistryKey
KeWaitForMultipleObjects
MmLockPagableSectionByHandle
MmQuerySystemSize
KeQuerySystemTime
KeInsertQueueDpc
KeSetTimer
PoCallDriver
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
memcpy
KeCancelTimer
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeInitializeEvent
KeWaitForSingleObject
IoDeleteSymbolicLink
IoSetDeviceInterfaceState
IoRegisterDeviceInterface
RtlWriteRegistryValue
IoCreateSymbolicLink
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
ObfDereferenceObject
IoCreateDevice
RtlIntegerToUnicodeString
RtlInitUnicodeString
IoAttachDeviceToDeviceStack
IoGetConfigurationInformation
RtlQueryRegistryValues
ZwQueryValueKey
PoRequestPowerIrp
PoStartNextPowerIrp
KeClearEvent
IoFreeIrp
IoAllocateIrp
PsTerminateSystemThread
KeSetPriorityThread
KeGetCurrentThread
ObReferenceObjectByHandle
PsCreateSystemThread
KeTickCount
KeBugCheckEx
PoSetPowerState
KeRemoveQueueDpc
MmLockPagableDataSection
ExFreePoolWithTag
MmUnlockPagableImageSection
IoCancelIrp
_allmul
KeSetEvent
IoAcquireCancelSpinLock
IoReleaseCancelSpinLock
RtlDeleteRegistryValue
IofCompleteRequest
RtlUnwind

hal

KeGetCurrentIrql
KfAcquireSpinLock
KeRaiseIrqlToDpcLevel
KfLowerIrql
KfReleaseSpinLock
ExAcquireFastMutex
ExReleaseFastMutex

wmilib.sys

WmiCompleteRequest
WmiSystemControl

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGESRP0
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGESER
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/USBdrivers/i386/ftserui2.dll
.dll windows x86

1ef34c58705906162da8ae963267da89

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

18-09-2013 00:00

Not After

16-11-2016 23:59

Subject

CN=Future Technology Devices International Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Future Technology Devices International Ltd,L=Glasgow,ST=Scotland,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-01-2016 19:41

Not After

06-04-2017 19:41

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

38:d9:7f:14:6e:08:7e:2f:e2:7b:94:d9:57:4f:20:86:a1:ee:ef:cd:bb:d8:39:51:5c:f2:67:26:5f:43:e9:93
Signer

Actual PE Digest

38:d9:7f:14:6e:08:7e:2f:e2:7b:94:d9:57:4f:20:86:a1:ee:ef:cd:bb:d8:39:51:5c:f2:67:26:5f:43:e9:93

Digest Algorithm

sha256

PE Digest Matches

true

74:7c:49:c2:2b:72:91:67:18:21:f2:d9:4a:b9:d1:44:1e:31:c7:a1
Signer

Actual PE Digest

74:7c:49:c2:2b:72:91:67:18:21:f2:d9:4a:b9:d1:44:1e:31:c7:a1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcscspn
wcsspn
_itoa
_wcsupr
memcpy
wcsstr
wcschr
memset

setupapi

SetupDiCallClassInstaller
SetupDiOpenDevRegKey
SetupDiGetDeviceInfoListDetailW
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupDiSetClassInstallParamsW
SetupInstallFromInfSectionW
SetupDiGetActualSectionToInstallW
SetupCloseInfFile
SetupDiCreateDevRegKeyW
SetupOpenInfFileW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
CM_Free_Log_Conf_Handle
CM_Free_Res_Des_Handle
CM_Get_Res_Des_Data
CM_Get_Next_Res_Des
CM_Get_First_Log_Conf
SetupDiInstallDevice
CM_Get_DevNode_Status
SetupDiRemoveDevice
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW

user32

SendMessageW
LoadStringW
GetWindowRect
WinHelpW
MoveWindow
GetDlgItem
SetDlgItemTextW
SendDlgItemMessageW
GetParent
EndDialog
GetWindowLongW
EnableWindow
SetWindowTextW
wsprintfW
SetWindowLongW
GetFocus
GetDlgCtrlID
CheckDlgButton
GetWindowTextW
GetWindowTextLengthW
IsDlgButtonChecked
DialogBoxParamW
ShowWindow
CharPrevW
MessageBoxW
wvsprintfW
SendMessageTimeoutW
CharNextW
CheckRadioButton
GetDC

advapi32

RegCloseKey
RegSetValueExW
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW

kernel32

GetProfileStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
FreeLibrary
MultiByteToWideChar
DisableThreadLibraryCalls
lstrcmpiW
QueryDosDeviceW
CreateFileW
CloseHandle
DefineDosDeviceW
OutputDebugStringA
LoadLibraryA
GetLastError
lstrcatW
GetModuleFileNameW
WriteProfileStringW
lstrcmpW
lstrlenW
GetUserDefaultLCID
GetLocaleInfoW
lstrcpyW
LocalFree
LocalAlloc
SetLastError
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetModuleHandleA

gdi32

GetTextExtentPoint32W

msports

ComDBReleasePort
ComDBClose
ComDBOpen
ComDBClaimNextFreePort
ComDBGetCurrentPortUsage
ComDBClaimPort

Exports

Exports

LibMain
ParallelPortPropPageProvider
PortsClassInstaller
SerialPortPropPageProvider

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/Vampset.exe
.exe windows x86

b6bd65753464ca2ca503955f20b9dcde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

libxml2

xmlXPathNewContext
xmlXPathCastNodeSetToString
xmlFree
xmlXPathFreeContext
xmlTextWriterWriteElement
xmlTextWriterWriteCDATA
xmlXPathEval
xmlXPathEvalExpression
xmlXPathFreeObject
xmlParseFile
xmlDocGetRootElement
xmlFreeDoc
xmlTextWriterWritePI
xmlTextWriterWriteComment
xmlTextWriterWriteString
xmlTextWriterEndDocument
xmlTextWriterStartDocument
xmlTextWriterEndElement
xmlTextWriterWriteRaw
xmlTextWriterWriteAttribute
xmlTextWriterStartElement
xmlNewTextWriterFilename
xmlTextWriterSetIndentString
xmlTextWriterSetIndent
xmlSAXUserParseFile
xmlFreeTextWriter

shlwapi

SHDeleteKeyW
PathFileExistsW

kernel32

TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
SetErrorMode
GetStartupInfoW
ExitProcess
RtlUnwind
GetTimeZoneInformation
HeapFree
HeapAlloc
RaiseException
CreateThread
ExitThread
GetSystemTime
GetLocalTime
TerminateProcess
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetDriveTypeA
GetLocaleInfoW
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
FindResourceA
GlobalAddAtomA
InterlockedExchange
GetProfileStringA
GetTickCount
CreateDirectoryW
GlobalAlloc
GlobalFree
SetCommTimeouts
GetCommTimeouts
SetCommMask
CloseHandle
SetCommState
GetCommState
SetupComm
CreateFileW
EscapeCommFunction
Sleep
WriteFile
PurgeComm
ClearCommError
ReadFile
FlushFileBuffers
ClearCommBreak
SetCommBreak
SetEvent
DeleteFileW
GetTempFileNameW
GetTempPathW
FindClose
FindFirstFileW
ResetEvent
GetFileAttributesW
lstrcpyW
WaitForMultipleObjects
GetEnvironmentVariableW
MulDiv
GlobalUnlock
GlobalLock
SetCurrentDirectoryW
GetCurrentDirectoryW
FindNextFileW
LoadResource
FindResourceW
LockResource
GetProcAddress
GetModuleHandleW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GetCurrentThreadId
lstrcatW
GetVersion
EnterCriticalSection
MultiByteToWideChar
lstrlenA
FreeLibrary
LoadLibraryA
GetModuleHandleA
InterlockedIncrement
InterlockedDecrement
lstrlenW
WideCharToMultiByte
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
WaitForSingleObject
ResumeThread
SetThreadPriority
SuspendThread
CreateEventW
LocalFree
CreateSemaphoreW
ReleaseSemaphore
SetLastError
FileTimeToSystemTime
FileTimeToLocalFileTime
GetLastError
DuplicateHandle
GetCurrentProcess
SetFilePointer
LockFile
UnlockFile
SetEndOfFile
MoveFileW
LoadLibraryW
GetVolumeInformationW
lstrcpynW
GetFullPathNameW
GetStringTypeExW
GetThreadLocale
lstrcmpiW
GetShortPathNameW
GetModuleFileNameW
lstrcmpA
GlobalGetAtomNameW
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
lstrcmpW
GetCurrentThread
lstrcmpiA
GetDiskFreeSpaceW
GlobalFlags
SizeofResource
LocalAlloc
GlobalReAlloc

user32

ShowWindow
EnableMenuItem
GetMenuCheckMarkDimensions
wvsprintfW
GetCursorPos
ValidateRect
GetMessageW
SetCapture
ClientToScreen
ReleaseCapture
PtInRect
SetCursorPos
DestroyCursor
SetCursor
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutW
GrayStringW
FindWindowW
CharUpperW
DestroyMenu
SetRectEmpty
LoadAcceleratorsW
TranslateAcceleratorW
GetDesktopWindow
LoadMenuW
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
IsZoomed
WindowFromPoint
PostQuitMessage
ShowOwnedPopups
GetSysColorBrush
GetDCEx
LockWindowUpdate
GetTabbedTextExtentA
DeleteMenu
DestroyIcon
SetParent
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
GetTopWindow
IsChild
GetCapture
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
SetWindowPlacement
MoveWindow
GetWindowTextW
GetDlgCtrlID
GetKeyState
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongW
SetWindowPos
RegisterWindowMessageW
IntersectRect
SystemParametersInfoW
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamW
GetParent
GetWindowLongW
GetDlgItem
IsWindowEnabled
MessageBeep
PostMessageW
LoadIconW
LoadBitmapW
LoadCursorW
SetScrollPos
GetScrollPos
SetScrollRange
GetMenuItemCount
CreatePopupMenu
InsertMenuW
AppendMenuW
ReleaseDC
SetRect
RedrawWindow
RemoveMenu
GetWindowRect
GetMenu
GetMenuState
CheckMenuItem
GetDC
CopyRect
GetSysColor
GetMenuStringW
GetMenuItemID
ModifyMenuW
GetSubMenu
InvertRect
DrawEdge
DrawTextW
DrawIcon
InflateRect
UpdateWindow
IsWindowVisible
SetTimer
KillTimer
MessageBoxW
PeekMessageW
TranslateMessage
SetWindowTextW
GetWindowTextLengthW
DispatchMessageW
GetClassNameW
IsDialogMessageW
InvalidateRect
LoadImageW
GetPropA
SetPropA
SetWindowLongA
GetClassNameA
IsWindowUnicode
SendMessageA
GetWindowLongA
SetWindowsHookExA
RemovePropA
CallWindowProcA
CharNextA
DefWindowProcA
DefDlgProcA
GetClassInfoA
DrawFocusRect
DrawTextA
GetWindowTextA
ExcludeUpdateRgn
ShowCaret
HideCaret
GetWindowTextLengthA
UnregisterClassW
GetClientRect
FillRect
OffsetRect
EnableWindow
LoadStringW
SendMessageW
SetMenuItemBitmaps
DestroyWindow

gdi32

GetTextExtentPointA
ExtTextOutA
GetTextExtentPoint32A
GetTextFaceW
GetROP2
GetBkMode
GetTextAlign
GetPolyFillMode
GetStretchBltMode
GetNearestColor
GetTextMetricsW
GetTextExtentPoint32W
GetCharWidthW
StretchDIBits
CreateDCW
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
CombineRgn
SetRectRgn
CreateRectRgnIndirect
DPtoLP
LPtoDP
Escape
ExtTextOutW
RectVisible
PtVisible
CreatePatternBrush
GetWindowExtEx
GetViewportExtEx
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
StartDocW
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
DeleteObject
GetStockObject
GetCurrentPositionEx
BeginPath
EndPath
FillPath
Arc
CreateCompatibleBitmap
GetViewportOrgEx
GetWindowOrgEx
PatBlt
RoundRect
Polygon
GetDeviceCaps
EnumFontFamiliesExW
SelectObject
StretchBlt
CreateFontIndirectW
TextOutW
Chord
CreateRectRgn
FillRgn
Ellipse
CreatePen
CreateHatchBrush
CreateFontW
GetCurrentObject
CreateSolidBrush
GetMapMode
CreateCompatibleDC
GetPixel
GetBkColor
SetPixel
BitBlt
GetObjectW
Rectangle
GetTextColor
CreateDIBitmap

comdlg32

CommDlgExtendedError
PrintDlgW
GetSaveFileNameW
GetFileTitleW
GetOpenFileNameW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegSetValueW
RegCreateKeyW
GetFileSecurityW
SetFileSecurityW
RegEnumKeyW
RegQueryValueW
RegOpenKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey

shell32

SHGetFileInfoW
DragFinish
DragQueryFileW
ExtractIconW
DragAcceptFiles
ShellExecuteW

comctl32

ord17
ImageList_Destroy
ImageList_LoadImageW

wsock32

connect
sendto
recvfrom
socket
setsockopt
getservbyname
gethostbyname
listen
getsockopt
WSACleanup
WSAStartup
WSASetLastError
WSAGetLastError
accept
ioctlsocket
bind
htons
htonl
closesocket
recv
send
WSAAsyncSelect
inet_ntoa

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/Vampset.pos
VAMPSET v2.2.206 - Lite/configs/P3F30_30.104.vfm
VAMPSET v2.2.206 - Lite/configs/P3F30_30.106.vfm
VAMPSET v2.2.206 - Lite/configs/P3F30_30.108.vfm
VAMPSET v2.2.206 - Lite/configs/P3F30_30.109.vfm
VAMPSET v2.2.206 - Lite/configs/P3G30_30.104.vfm
VAMPSET v2.2.206 - Lite/configs/P3G30_30.106.vfm
VAMPSET v2.2.206 - Lite/configs/P3G30_30.108.vfm
VAMPSET v2.2.206 - Lite/configs/P3G30_30.109.vfm
VAMPSET v2.2.206 - Lite/configs/P3G32_30.104.vfm
VAMPSET v2.2.206 - Lite/configs/P3G32_30.106.vfm
VAMPSET v2.2.206 - Lite/configs/P3G32_30.108.vfm
VAMPSET v2.2.206 - Lite/configs/P3G32_30.109.vfm
VAMPSET v2.2.206 - Lite/configs/P3L30_30.104.vfm
VAMPSET v2.2.206 - Lite/configs/P3L30_30.106.vfm
VAMPSET v2.2.206 - Lite/configs/P3L30_30.108.vfm
VAMPSET v2.2.206 - Lite/configs/P3L30_30.109.vfm
VAMPSET v2.2.206 - Lite/configs/P3M30_30.104.vfm
VAMPSET v2.2.206 - Lite/configs/P3M30_30.106.vfm
VAMPSET v2.2.206 - Lite/configs/P3M30_30.108.vfm
VAMPSET v2.2.206 - Lite/configs/P3M30_30.109.vfm
VAMPSET v2.2.206 - Lite/configs/P3M32_30.104.vfm
VAMPSET v2.2.206 - Lite/configs/P3M32_30.106.vfm
VAMPSET v2.2.206 - Lite/configs/P3M32_30.108.vfm
VAMPSET v2.2.206 - Lite/configs/P3M32_30.109.vfm
VAMPSET v2.2.206 - Lite/configs/P3T32_30.104.vfm
VAMPSET v2.2.206 - Lite/configs/P3T32_30.106.vfm
VAMPSET v2.2.206 - Lite/configs/P3T32_30.108.vfm
VAMPSET v2.2.206 - Lite/configs/P3T32_30.109.vfm
VAMPSET v2.2.206 - Lite/configs/P3U10_30.104.vfm
VAMPSET v2.2.206 - Lite/configs/P3U10_30.106.vfm
VAMPSET v2.2.206 - Lite/configs/P3U10_30.108.vfm
VAMPSET v2.2.206 - Lite/configs/P3U10_30.109.vfm
VAMPSET v2.2.206 - Lite/configs/P3U20_30.104.vfm
VAMPSET v2.2.206 - Lite/configs/P3U20_30.106.vfm
VAMPSET v2.2.206 - Lite/configs/P3U20_30.108.vfm
VAMPSET v2.2.206 - Lite/configs/P3U20_30.109.vfm
VAMPSET v2.2.206 - Lite/configs/P3U30_30.104.vfm
VAMPSET v2.2.206 - Lite/configs/P3U30_30.106.vfm
VAMPSET v2.2.206 - Lite/configs/P3U30_30.108.vfm
VAMPSET v2.2.206 - Lite/configs/P3U30_30.109.vfm
VAMPSET v2.2.206 - Lite/configs/Standard_version_P3U20_30.106.vfm
VAMPSET v2.2.206 - Lite/configs/V300F_19.118.vfm
VAMPSET v2.2.206 - Lite/configs/V300G_19.116.vfm
VAMPSET v2.2.206 - Lite/configs/V300M_19.103.vfm
VAMPSET v2.2.206 - Lite/configs/V300T_19.118.vfm
VAMPSET v2.2.206 - Lite/configs/V57F_20.109.vfm
VAMPSET v2.2.206 - Lite/configs/options.xml
.xml
VAMPSET v2.2.206 - Lite/iconv.dll
.dll windows x86

2fecad82d36d88ec85ac574c16ce0ddd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
memcmp
free
qsort
strlen
sprintf
memcpy
strcmp
_initterm
_adjust_fdiv
memset
_errno
strchr
abort
_strdup

kernel32

GetModuleFileNameA
GetACP
Sleep

Exports

Exports

_libiconv_version
libiconv
libiconv_close
libiconv_open
libiconv_set_relocation_prefix
libiconvctl
libiconvlist
locale_charset

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 800KB - Virtual size: 799KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/libxml2.dll
.dll windows x86

1491d389848a4ecd93d4f1ad9e4afeb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wsock32

WSACleanup
inet_ntoa
__WSAFDIsSet
getsockopt
WSAGetLastError
WSAStartup
getsockname
bind
listen
gethostbyname
htons
socket
connect
send
select
recv
closesocket

iconv

libiconv
libiconv_open
libiconv_close

zlib1

inflateEnd
inflateInit2_
inflate
gzopen
gzdopen
gzread
gzwrite
gzclose
deflateEnd
crc32
deflateInit2_
deflate
gzdirect

kernel32

TlsGetValue
WaitForSingleObject
CloseHandle
CreateMutexA
GetModuleHandleA
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedCompareExchange
GetCurrentThreadId
TlsFree
Sleep
TlsAlloc
InterlockedIncrement
TlsSetValue
MultiByteToWideChar
GetProcAddress
FreeLibrary
LoadLibraryA
GetVersionExA
ReleaseMutex

msvcrt

_read
_close
_open
_adjust_fdiv
_initterm
_CIfmod
_CIpow
_write
_dup
_vsnprintf
fprintf
getenv
strncpy
_snprintf
_iob
fputc
fclose
fopen
sscanf
free
toupper
memmove
_errno
vfprintf
_getcwd
realloc
malloc
strchr
strncmp
strtol
fwrite
_wfopen
_wopen
strstr
_stat
_wstat
fread
fflush
printf
floor
_isnan
_fpclass

Exports

Exports

UTF8ToHtml
UTF8Toisolat1
__docbDefaultSAXHandler
__htmlDefaultSAXHandler
__oldXMLWDcompatibility
__xmlBufferAllocScheme
__xmlDefaultBufferSize
__xmlDefaultSAXHandler
__xmlDefaultSAXLocator
__xmlDeregisterNodeDefaultValue
__xmlDoValidityCheckingDefaultValue
__xmlErrEncoding
__xmlGenericError
__xmlGenericErrorContext
__xmlGetWarningsDefaultValue
__xmlIndentTreeOutput
__xmlKeepBlanksDefaultValue
__xmlLastError
__xmlLineNumbersDefaultValue
__xmlLoadExtDtdDefaultValue
__xmlOutputBufferCreateFilenameValue
__xmlParserDebugEntities
__xmlParserInputBufferCreateFilenameValue
__xmlParserVersion
__xmlPedanticParserDefaultValue
__xmlRaiseError
__xmlRegisterNodeDefaultValue
__xmlSaveNoEmptyTags
__xmlSimpleError
__xmlStructuredError
__xmlStructuredErrorContext
__xmlSubstituteEntitiesDefaultValue
__xmlTreeIndentString
attribute
attributeDecl
cdataBlock
characters
checkNamespace
comment
docbCreateFileParserCtxt
docbCreatePushParserCtxt
docbDefaultSAXHandlerInit
docbEncodeEntities
docbFreeParserCtxt
docbParseChunk
docbParseDoc
docbParseDocument
docbParseFile
docbSAXParseDoc
docbSAXParseFile
elementDecl
emptyExp
endDocument
endElement
entityDecl
externalSubset
forbiddenExp
getColumnNumber
getEntity
getLineNumber
getNamespace
getParameterEntity
getPublicId
getSystemId
globalNamespace
hasExternalSubset
hasInternalSubset
htmlAttrAllowed
htmlAutoCloseTag
htmlCreateFileParserCtxt
htmlCreateMemoryParserCtxt
htmlCreatePushParserCtxt
htmlCtxtReadDoc
htmlCtxtReadFd
htmlCtxtReadFile
htmlCtxtReadIO
htmlCtxtReadMemory
htmlCtxtReset
htmlCtxtUseOptions
htmlDefaultSAXHandlerInit
htmlDocContentDumpFormatOutput
htmlDocContentDumpOutput
htmlDocDump
htmlDocDumpMemory
htmlDocDumpMemoryFormat
htmlElementAllowedHere
htmlElementStatusHere
htmlEncodeEntities
htmlEntityLookup
htmlEntityValueLookup
htmlFreeParserCtxt
htmlGetMetaEncoding
htmlHandleOmittedElem
htmlInitAutoClose
htmlIsAutoClosed
htmlIsBooleanAttr
htmlIsScriptAttribute
htmlNewDoc
htmlNewDocNoDtD
htmlNewParserCtxt
htmlNodeDump
htmlNodeDumpFile
htmlNodeDumpFileFormat
htmlNodeDumpFormatOutput
htmlNodeDumpOutput
htmlNodeStatus
htmlParseCharRef
htmlParseChunk
htmlParseDoc
htmlParseDocument
htmlParseElement
htmlParseEntityRef
htmlParseFile
htmlReadDoc
htmlReadFd
htmlReadFile
htmlReadIO
htmlReadMemory
htmlSAXParseDoc
htmlSAXParseFile
htmlSaveFile
htmlSaveFileEnc
htmlSaveFileFormat
htmlSetMetaEncoding
htmlTagLookup
ignorableWhitespace
initGenericErrorDefaultFunc
initdocbDefaultSAXHandler
inithtmlDefaultSAXHandler
initxmlDefaultSAXHandler
inputPop
inputPush
internalSubset
isStandalone
isolat1ToUTF8
namePop
namePush
namespaceDecl
nodePop
nodePush
notationDecl
processingInstruction
reference
resolveEntity
setDocumentLocator
setNamespace
startDocument
startElement
unparsedEntityDecl
valuePop
valuePush
xlinkGetDefaultDetect
xlinkGetDefaultHandler
xlinkIsLink
xlinkSetDefaultDetect
xlinkSetDefaultHandler
xmlACatalogAdd
xmlACatalogDump
xmlACatalogRemove
xmlACatalogResolve
xmlACatalogResolvePublic
xmlACatalogResolveSystem
xmlACatalogResolveURI
xmlAddAttributeDecl
xmlAddChild
xmlAddChildList
xmlAddDocEntity
xmlAddDtdEntity
xmlAddElementDecl
xmlAddEncodingAlias
xmlAddID
xmlAddNextSibling
xmlAddNotationDecl
xmlAddPrevSibling
xmlAddRef
xmlAddSibling
xmlAllocOutputBuffer
xmlAllocParserInputBuffer
xmlAttrSerializeTxtContent
xmlAutomataCompile
xmlAutomataGetInitState
xmlAutomataIsDeterminist
xmlAutomataNewAllTrans
xmlAutomataNewCountTrans
xmlAutomataNewCountTrans2
xmlAutomataNewCountedTrans
xmlAutomataNewCounter
xmlAutomataNewCounterTrans
xmlAutomataNewEpsilon
xmlAutomataNewNegTrans
xmlAutomataNewOnceTrans
xmlAutomataNewOnceTrans2
xmlAutomataNewState
xmlAutomataNewTransition
xmlAutomataNewTransition2
xmlAutomataSetFinalState
xmlBoolToText
xmlBufferAdd
xmlBufferAddHead
xmlBufferCCat
xmlBufferCat
xmlBufferContent
xmlBufferCreate
xmlBufferCreateSize
xmlBufferCreateStatic
xmlBufferDump
xmlBufferEmpty
xmlBufferFree
xmlBufferGrow
xmlBufferLength
xmlBufferResize
xmlBufferSetAllocationScheme
xmlBufferShrink
xmlBufferWriteCHAR
xmlBufferWriteChar
xmlBufferWriteQuotedString
xmlBuildQName
xmlBuildRelativeURI
xmlBuildURI
xmlByteConsumed
xmlC14NDocDumpMemory
xmlC14NDocSave
xmlC14NDocSaveTo
xmlC14NExecute
xmlCanonicPath
xmlCatalogAdd
xmlCatalogAddLocal
xmlCatalogCleanup
xmlCatalogConvert
xmlCatalogDump
xmlCatalogFreeLocal
xmlCatalogGetDefaults
xmlCatalogGetPublic
xmlCatalogGetSystem
xmlCatalogIsEmpty
xmlCatalogLocalResolve
xmlCatalogLocalResolveURI
xmlCatalogRemove
xmlCatalogResolve
xmlCatalogResolvePublic
xmlCatalogResolveSystem
xmlCatalogResolveURI
xmlCatalogSetDebug
xmlCatalogSetDefaultPrefer
xmlCatalogSetDefaults
xmlCharEncCloseFunc
xmlCharEncFirstLine
xmlCharEncInFunc
xmlCharEncOutFunc
xmlCharInRange
xmlCharStrdup
xmlCharStrndup
xmlCheckFilename
xmlCheckHTTPInput
xmlCheckLanguageID
xmlCheckUTF8
xmlCheckVersion
xmlChildElementCount
xmlCleanupCharEncodingHandlers
xmlCleanupEncodingAliases
xmlCleanupGlobals
xmlCleanupInputCallbacks
xmlCleanupMemory
xmlCleanupOutputCallbacks
xmlCleanupParser
xmlCleanupPredefinedEntities
xmlCleanupThreads
xmlClearNodeInfoSeq
xmlClearParserCtxt
xmlConvertSGMLCatalog
xmlCopyAttributeTable
xmlCopyChar
xmlCopyCharMultiByte
xmlCopyDoc
xmlCopyDocElementContent
xmlCopyDtd
xmlCopyElementContent
xmlCopyElementTable
xmlCopyEntitiesTable
xmlCopyEnumeration
xmlCopyError
xmlCopyNamespace
xmlCopyNamespaceList
xmlCopyNode
xmlCopyNodeList
xmlCopyNotationTable
xmlCopyProp
xmlCopyPropList
xmlCreateDocParserCtxt
xmlCreateEntitiesTable
xmlCreateEntityParserCtxt
xmlCreateEnumeration
xmlCreateFileParserCtxt
xmlCreateIOParserCtxt
xmlCreateIntSubset
xmlCreateMemoryParserCtxt
xmlCreatePushParserCtxt
xmlCreateURI
xmlCreateURLParserCtxt
xmlCtxtGetLastError
xmlCtxtReadDoc
xmlCtxtReadFd
xmlCtxtReadFile
xmlCtxtReadIO
xmlCtxtReadMemory
xmlCtxtReset
xmlCtxtResetLastError
xmlCtxtResetPush
xmlCtxtUseOptions
xmlCurrentChar
xmlDOMWrapAdoptNode
xmlDOMWrapCloneNode
xmlDOMWrapFreeCtxt
xmlDOMWrapNewCtxt
xmlDOMWrapReconcileNamespaces
xmlDOMWrapRemoveNode
xmlDebugCheckDocument
xmlDebugDumpAttr
xmlDebugDumpAttrList
xmlDebugDumpDTD
xmlDebugDumpDocument
xmlDebugDumpDocumentHead
xmlDebugDumpEntities
xmlDebugDumpNode
xmlDebugDumpNodeList
xmlDebugDumpOneNode
xmlDebugDumpString
xmlDecodeEntities
xmlDefaultSAXHandlerInit
xmlDelEncodingAlias
xmlDeregisterNodeDefault
xmlDetectCharEncoding
xmlDictCleanup
xmlDictCreate
xmlDictCreateSub
xmlDictExists
xmlDictFree
xmlDictLookup
xmlDictOwns
xmlDictQLookup
xmlDictReference
xmlDictSize
xmlDocCopyNode
xmlDocCopyNodeList
xmlDocDump
xmlDocDumpFormatMemory
xmlDocDumpFormatMemoryEnc
xmlDocDumpMemory
xmlDocDumpMemoryEnc
xmlDocFormatDump
xmlDocGetRootElement
xmlDocSetRootElement
xmlDumpAttributeDecl
xmlDumpAttributeTable
xmlDumpElementDecl
xmlDumpElementTable
xmlDumpEntitiesTable
xmlDumpEntityDecl
xmlDumpNotationDecl
xmlDumpNotationTable
xmlElemDump
xmlEncodeEntities
xmlEncodeEntitiesReentrant
xmlEncodeSpecialChars
xmlErrMemory
xmlExpCtxtNbCons
xmlExpCtxtNbNodes
xmlExpDump
xmlExpExpDerive
xmlExpFree
xmlExpFreeCtxt
xmlExpGetLanguage
xmlExpGetStart
xmlExpIsNillable
xmlExpMaxToken
xmlExpNewAtom
xmlExpNewCtxt
xmlExpNewOr
xmlExpNewRange
xmlExpNewSeq
xmlExpParse
xmlExpRef
xmlExpStringDerive
xmlExpSubsume
xmlFileClose
xmlFileMatch
xmlFileOpen
xmlFileRead
xmlFindCharEncodingHandler
xmlFirstElementChild
xmlFree
xmlFreeAttributeTable
xmlFreeAutomata
xmlFreeCatalog
xmlFreeDoc
xmlFreeDocElementContent
xmlFreeDtd
xmlFreeElementContent
xmlFreeElementTable
xmlFreeEntitiesTable
xmlFreeEnumeration
xmlFreeIDTable
xmlFreeInputStream
xmlFreeMutex
xmlFreeNode
xmlFreeNodeList
xmlFreeNotationTable
xmlFreeNs
xmlFreeNsList
xmlFreeParserCtxt
xmlFreeParserInputBuffer
xmlFreePattern
xmlFreePatternList
xmlFreeProp
xmlFreePropList
xmlFreeRMutex
xmlFreeRefTable
xmlFreeStreamCtxt
xmlFreeTextReader
xmlFreeTextWriter
xmlFreeURI
xmlFreeValidCtxt
xmlGcMemGet
xmlGcMemSetup
xmlGetBufferAllocationScheme
xmlGetCharEncodingHandler
xmlGetCharEncodingName
xmlGetCompressMode
xmlGetDocCompressMode
xmlGetDocEntity
xmlGetDtdAttrDesc
xmlGetDtdElementDesc
xmlGetDtdEntity
xmlGetDtdNotationDesc
xmlGetDtdQAttrDesc
xmlGetDtdQElementDesc
xmlGetEncodingAlias
xmlGetExternalEntityLoader
xmlGetFeature
xmlGetFeaturesList
xmlGetGlobalState
xmlGetID
xmlGetIntSubset
xmlGetLastChild
xmlGetLastError
xmlGetLineNo
xmlGetNoNsProp
xmlGetNodePath
xmlGetNsList
xmlGetNsProp
xmlGetParameterEntity
xmlGetPredefinedEntity
xmlGetProp
xmlGetRefs
xmlGetThreadId
xmlGetUTF8Char
xmlHandleEntity
xmlHasFeature
xmlHasNsProp
xmlHasProp
xmlHashAddEntry
xmlHashAddEntry2
xmlHashAddEntry3
xmlHashCopy
xmlHashCreate
xmlHashCreateDict
xmlHashFree
xmlHashLookup
xmlHashLookup2
xmlHashLookup3
xmlHashQLookup
xmlHashQLookup2
xmlHashQLookup3
xmlHashRemoveEntry
xmlHashRemoveEntry2
xmlHashRemoveEntry3
xmlHashScan
xmlHashScan3
xmlHashScanFull
xmlHashScanFull3
xmlHashSize
xmlHashUpdateEntry
xmlHashUpdateEntry2
xmlHashUpdateEntry3
xmlIOFTPClose
xmlIOFTPMatch
xmlIOFTPOpen
xmlIOFTPRead
xmlIOHTTPClose
xmlIOHTTPMatch
xmlIOHTTPOpen
xmlIOHTTPOpenW
xmlIOHTTPRead
xmlIOParseDTD
xmlInitCharEncodingHandlers
xmlInitGlobals
xmlInitMemory
xmlInitNodeInfoSeq
xmlInitParser
xmlInitParserCtxt

Sections

.text
Size: 737KB - Virtual size: 737KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VAMPSET v2.2.206 - Lite/logo1.bmp
VAMPSET v2.2.206 - Lite/logo3.bmp
VAMPSET v2.2.206 - Lite/zlib1.dll
.dll windows x86

9bf8c9ea52f2f2dcae9feb70c8257ba5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

strerror
_errno
memchr
_vsnprintf
_initterm
sprintf
free
_adjust_fdiv
malloc
_lseek
_open
_read
_close
_write

kernel32

Sleep
DisableThreadLibraryCalls

Exports

Exports

adler32
adler32_combine
compress
compress2
compressBound
crc32
crc32_combine
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
gzbuffer
gzclearerr
gzclose
gzclose_r
gzclose_w
gzdirect
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzoffset
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
uncompress
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 922B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a00865c4b857a44a5c59da787f220a15

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2dCertificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

ad:1e:2f:1f:8f:b4:70:e1:a1:90:30:c9:93:02:b0:75:54:11:e0:ac:02:e4:3f:38:e2:d4:17:e5:0b:57:d2:65Signer

36:9b:12:47:b9:ef:a8:fb:10:dd:20:d0:8f:e8:54:a2:63:c4:ce:5fSigner

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

kernel32

user32

shell32

Exports

Exports

Sections

.text Size: 94KB - Virtual size: 93KB

.rdata Size: 37KB - Virtual size: 36KB

.data Size: 6KB - Virtual size: 14KB

.pdata Size: 5KB - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 1KB

012bca0efbe90a581f55de6318cb6327

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2dCertificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

08:62:44:1f:37:15:80:fd:f8:39:05:2b:ae:9e:2d:4f:7c:5a:8e:b8:df:dc:7c:85:39:f4:79:dd:04:8d:22:ffSigner

d9:fc:70:8f:81:e6:64:e6:e6:5b:db:8a:ed:d2:e6:fb:c3:7d:3d:e8Signer

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

kernel32

advapi32

user32

msports

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 48KB

.data Size: 5KB - Virtual size: 9KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 856B

.reloc Size: 1024B - Virtual size: 724B

22594aca073884db8250fab7a4ac13e7

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

ad:1e:2f:1f:8f:b4:70:e1:a1:90:30:c9:93:02:b0:75:54:11:e0:ac:02:e4:3f:38:e2:d4:17:e5:0b:57:d2:65
Signer

36:9b:12:47:b9:ef:a8:fb:10:dd:20:d0:8f:e8:54:a2:63:c4:ce:5f
Signer

.text
Size: 94KB - Virtual size: 93KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 6KB - Virtual size: 14KB

.pdata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 1KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

08:62:44:1f:37:15:80:fd:f8:39:05:2b:ae:9e:2d:4f:7c:5a:8e:b8:df:dc:7c:85:39:f4:79:dd:04:8d:22:ff
Signer

d9:fc:70:8f:81:e6:64:e6:e6:5b:db:8a:ed:d2:e6:fb:c3:7d:3d:e8
Signer

.text
Size: 49KB - Virtual size: 48KB

.data
Size: 5KB - Virtual size: 9KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 856B

.reloc
Size: 1024B - Virtual size: 724B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

20:fd:db:2f:cd:51:46:29:5e:45:da:cc:5a:35:b8:81:b9:31:9e:fd:9a:96:a2:e9:61:db:0e:e8:78:f6:d8:76
Signer

a0:bc:7f:41:90:82:9c:7b:b8:f0:61:b9:80:d2:fa:54:8b:d7:1b:59
Signer

.text
Size: 213KB - Virtual size: 213KB

.rdata
Size: 55KB - Virtual size: 55KB

.data
Size: 8KB - Virtual size: 17KB

.pdata
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

03:c3:ce:92:8e:e0:41:5b:78:2a:96:d3:fb:5d:c2:83
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

33:00:00:00:2d:4e:7a:ec:99:b0:f0:5f:73:00:00:00:00:00:2d
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

f2:0d:78:e9:1a:9b:cc:84:12:24:0a:31:57:92:91:15:4b:29:11:03:8c:36:ba:0d:68:f0:f2:85:14:2f:f2:50
Signer

9c:58:d3:f7:0e:59:47:e6:19:a9:6f:a1:b1:41:8d:f9:cc:39:e0:e0
Signer

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 1KB

.pdata
Size: 2KB - Virtual size: 2KB

PAGE
Size: 7KB - Virtual size: 7KB

INIT
Size: 3KB - Virtual size: 3KB